last executing test programs: 34m57.638022085s ago: executing program 32 (id=37): r0 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000080)={&(0x7f0000000040)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000180)={0x1, 0x1, &(0x7f00000000c0)=[r1], &(0x7f0000000180), &(0x7f0000000200), &(0x7f0000000040)}) 33m43.185997922s ago: executing program 33 (id=164): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/custom0\x00', 0x803, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000280)={'syzkaller0\x00', 0x7101}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1000, 0x1) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000000340)=0x0) timer_settime(r2, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=ANY=[], &(0x7f0000000180), 0x0) open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x200000000000000) 32m50.314337773s ago: executing program 34 (id=249): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = syz_clone(0x600, 0x0, 0x69, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x0, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102400, 0x19000) gettid() r2 = syz_open_dev$evdev(0x0, 0x800002, 0x800) ioctl$EVIOCGRAB(r2, 0x40044590, &(0x7f0000000200)=0x7ffffffc) ioctl$EVIOCGRAB(r2, 0x40044590, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) 32m31.92717455s ago: executing program 35 (id=260): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) msgctl$MSG_STAT(0x0, 0xb, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$dri(0x0, 0xd21, 0x4000) r2 = openat$kvm(0xffffff9c, &(0x7f0000000100), 0x41, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000005c0)=ANY=[@ANYBLOB="840000001000010029bd7000ffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="4db20200201a0100140003006e657464657673696d30000000000000480016804400018040000c8014000104ff0300ff88a8000014000100390e00003f0000000d000000810000001400010006000000af0600000700000088a8000005001100060000000000000000000000337289ae8504346600e663960b2466b8aeb6d543ca7b0ab342095dd8aa80a9436ac2f322cd6bb964e3248157af44c58b53fb284ad18ee521b78b0b06ef2dad6158b7e9a5a099c23ff2e5a4f76b865a82818641f06dd6e5a447eed69dd0eb0c356e744afe52ad9e3f7a4ee55afa2316f56ff79b8928a92f1afe8c6d0077f0960092ad769d4294fff153"], 0x84}, 0x1, 0x0, 0x0, 0xc1}, 0x0) ioctl$KVM_CREATE_PIT2(r3, 0x4040ae77, &(0x7f0000000040)) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_open_dev$swradio(&(0x7f0000000240), 0x0, 0x2) ioctl$KVM_SET_PIT(r3, 0x8048ae66, &(0x7f0000000080)={[{0x5, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x7}, {0x0, 0x4, 0x9, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}]}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0xfffffdad, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x34, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x9801}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @lowpan={{0xa}, {0x4}}}]}, 0x34}}, 0x20000080) r7 = msgget$private(0x0, 0x4a0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="6c0000001000050400"/20, @ANYRES32=0x0, @ANYBLOB="5d580000000000001c001a8018000a801400070000000000000000000000000000000001140003006970766c616e310000000000000000001c0012800b0001006970766c616e00000c0002800600010000000000"], 0x6c}, 0x1, 0x0, 0x0, 0x840}, 0x0) msgctl$IPC_STAT(r7, 0x2, 0x0) msgsnd(r7, &(0x7f0000000440)=ANY=[@ANYBLOB], 0xe3, 0x0) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000380)={[0xf, 0x3, 0x4, 0x1000000000000002, 0x102000000000002, 0x8000000d, 0x2004c8, 0xffff, 0x3, 0xffffffff, 0xffffffffffffffff, 0x7fffffffffffffff, 0xd0b, 0xfffffffffffffff9, 0x2000000000000003, 0x5], 0x80a0000, 0x4284}) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) r9 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000180), 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r9, 0x40505331, &(0x7f0000000540)={{}, {0x18}, 0x0, 0x7}) syz_io_uring_setup(0x83f, &(0x7f00000000c0)={0x0, 0xa9ee, 0x20, 0x3, 0x3e6}, &(0x7f0000000040), &(0x7f0000000280)) 32m16.161322518s ago: executing program 36 (id=275): sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) chdir(&(0x7f0000000300)='./file0\x00') ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r3 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r3, &(0x7f0000000440), 0x10) listen(r3, 0x0) accept4$unix(r3, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x4004014) r4 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r4, &(0x7f0000000140), 0x4924b68, 0x0) 32m15.585817999s ago: executing program 37 (id=276): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000100)='syzkaller\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x40f00, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4f22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0xd) r4 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r4, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x8) 31m21.474126867s ago: executing program 38 (id=302): r0 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000100)={0x20000014}) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r0, &(0x7f0000000000)={0xa0000001}) epoll_pwait(r3, &(0x7f0000000040)=[{}], 0x1, 0xff, 0x0, 0x0) 31m3.07410535s ago: executing program 39 (id=331): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfa11, 0xffffffff}, 0x0) setrlimit(0x7, &(0x7f0000000400)) socket$rxrpc(0x21, 0x2, 0x2) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) set_mempolicy(0x3, &(0x7f00000000c0)=0x3, 0x5) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) setsockopt$sock_int(r1, 0x1, 0x0, 0x0, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000700)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x9, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) r4 = socket(0x848000000015, 0x805, 0x0) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x1a}, 0x10}, 0x1c) sendto$inet6(r4, 0x0, 0x0, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x4002, @local, 0x6}, 0x1c) r5 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$inet6_int(r5, 0x29, 0xce, &(0x7f0000000700)=0xc, 0x4) 30m49.546651988s ago: executing program 40 (id=353): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{}, 0x1}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x149a82, 0x0) write$cgroup_int(r4, &(0x7f0000000040)=0x1c8, 0x12) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) statx(r4, &(0x7f0000000300)='./file0\x00', 0x6000, 0x20, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0}) socket$inet(0x2, 0x3, 0x8d) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x10, 0x4, &(0x7f00000006c0)=ANY=[@ANYRESOCT=r0, @ANYRESOCT=r6, @ANYRES8=r6, @ANYRESHEX=r5, @ANYRES16=r6, @ANYRESDEC, @ANYBLOB="98d6c8837ccbd4ecf2bc4874d8360a53f035187c0add6b7e55d81ccb053c4256c978f97cf2ef42cf4d42b1dbfeb1f5975a7807399afbfe1b98c0512a38c3510ca2f21effc0ac6dddb5f670d8c3b35f48c4bf8cff6e3a7da4029a1d85df57517a19e3a4bec7e8e16ec30c988447aa10138958cc9f488033fd2b4c0573877cd23826c0833374571f9ebb3f9e39ea04e0b31e33915f2e6a4579c9817dc99a4a"], &(0x7f0000000280)='GPL\x00', 0x7, 0x0, 0x0, 0x41000, 0x6, '\x00', 0x0, 0x0, r4, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) sendto$inet6(r5, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone3(&(0x7f00000003c0)={0x385200280, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x0, {r7}}, 0x58) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_MSG_GETSETELEM(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000002f40)=ANY=[@ANYBLOB="40000000210a010900000000000000000a0000010900020073797a310000"], 0x40}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) 29m41.682700553s ago: executing program 41 (id=441): socket$inet6_mptcp(0xa, 0x1, 0x106) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x100, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x2b, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x2}}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0xc0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socket(0x10, 0x3, 0x0) rseq(&(0x7f0000000400)={0x0, 0x0, 0x0, 0x4}, 0x20, 0x0, 0x0) quotactl$Q_SYNC(0xffffffff80000102, 0x0, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) r2 = creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39dcdb) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) close(r2) r4 = open(&(0x7f0000000000)='./file0\x00', 0x400, 0x1a1) fcntl$setlease(r4, 0x400, 0x1) r5 = memfd_create(&(0x7f0000000180)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xecz\xabq\x95t*T9\xa9\b X \x04\"\x17\xbf\xcb\xccF\xda\xcf\xdd^\xa0\x15\xc0\xcb^h>\x1b\xb5d\xc7\x7f0\x9a&\xb0\x12#\x9c`\xa6\xed\x05\x95g\a\xccYb\xaf\xe9\xb6G?\x9f\xf5\xfe\xc1\xc0JJ\xc8\xd9d\x80\x13\x8fX\xb4\x19\xc4\\\xcb\x89-)\x90\x01\v\xac^\xdbBQ|\xaej;\x92\\\xf8u\x19Y\xee\x99EI\xf1t\xadn<\x9b\xc9\x87\xd0\xa7\x1a\x81\xb9\xc87sq\xd7\x15\xd6\x91O\x9c\x99!9>\xff\xa8\xfa\xe6=d\xcf\xca\xa9\xc61!\xc6P\x13\xd0\x88gZ\xbe\xdfl\xfa\xff\xb0m;d07tx\xbb\xabd\xe5\x16\xc4\xae\xf0', 0x0) write$binfmt_script(r5, &(0x7f0000000340)={'#! ', './file0'}, 0xb) execveat(r5, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000080)=0xc) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000300)={0x1, &(0x7f0000000200)=[{0x6, 0xff, 0x17, 0x7fffffff}]}) openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0xc0000, 0x4) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {0x0, 0x0, 0x10}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) 26m46.986575359s ago: executing program 42 (id=893): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = socket(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000177ff4)={0x10, 0x0, 0x1}, 0xc) write(r0, &(0x7f0000000140)="2600000022004701050000070000000000000020002b1f000a4a51f1ee839cd53400b017ca5b", 0x26) connect$netlink(r0, &(0x7f00000005c0)=@proc={0x10, 0x0, 0x1}, 0xc) setsockopt$sock_int(r0, 0x1, 0x21, &(0x7f0000b4bffc)=0x8, 0x4) write(r0, &(0x7f0000000000)='\"', 0x1) recvmmsg(r0, &(0x7f0000000780), 0x3ffffffffffff81, 0x2, 0x0) 25m35.335836035s ago: executing program 43 (id=1014): socketpair$unix(0x1, 0x5, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000002300)=ANY=[@ANYBLOB="bf16000000000000b7070000000100004870000000800000500000000000000095000000000000002ba728041598fbd30cb599e83d24a3aa81d36bb3019c13bd23212fb56fa54f2641d8b02c3815e79c1414eb07eae6f0711e6bd917487960717142fa9ea4318123f602000000000080de89e661168c1886d0d4dd4f204e345c65c26e278ef5b915395b19284a1a4bc72fbc1626e3a2a2ad358061d0ae0209e62f51ee988e6ea604ce974a22a550d6f97080980400003e05df3ceb9f1feae5737ecaa80a666963c474c2a100c788b277beee1cbf9b0a4d3881dcc7b1b85f3c3d44aeaccd3641110bec4e90a6291965c39e4b3431abe802f5ab3e89cf6c662ed4048d3b3e22278d00ce00000000d3a02762c2951257b85802189d74005d2a1bcf9436e192e23fd275985bf31b714f000bcab6fcd610f25f5888000000003f11afc9bd08c6ebfbb89432fb465bc52f49129b9b6150e320c9901de2ebb9000000018e3095c4c5c7a156cec33a667dccaff950ca1e5efdd4c968dacf81baa3a509b1041d06f6b0097c430481824a3f4fddd3c643f630ba175d876defd3541772f26e27c44cfdb2d85d6d29983e830a9cdd79837b3468e8c67a571d0a017c100344c52a6f387a1340bdc8889464f90cc4cd1f570dd39877dfb2ff1ae66e1ce917474b2e650ae630afd014a337ac5d58bcb5e51723257c872c5255f20100000000000000f041b665ab21372c8d8b7bac5b5c784d20a4a24d8dbd75062e1daef9dead619cc6e7baa72707157791c3d2a286ffb8d35452bb5d36c2a8682bf7ecbd53f950ef4709ec01e230d2f53594ef4839c6130c4c13a0cca84b9935f771fd49e480cd9d48aeb12b1d6acabd38a817bcd222614d1f62734d679039a97d2b74f9e8e997ccd314000f7477137f4e8e7025123e783df8b8a17e3aa9fe1f662aef87a065b03cfb65b4dfe4f1b56e1f23128d743753a1de172d683d5892ce9414a1d98ea93e3d35dbb6c23b90cf36e83b8a434a97d09343d7f83079ccb02e69c584146056d125cfa788237874dd42dae334bda042819a2aa24dba1c25be2794448b4f63483026b5e34d44705b861cceea3d0ecb22f9e176ef29241adab0dd7d68bf975e02069f6f2425e1bc97a3d588085f16bef63a06578d4f5de7bfb6aaa75f16996d536256c02284cb1d3a6fb8cae87691fae365a70c3fc69e1565bba8dd8a8ca049f798abe646f738bebd69413afc9d8a5edd7aaa000000000000001e6c2f2a287c5278a218dbfaffffff00a14db5cfa6819eb1d39c48cfdc80d215c9e16e0c4736c819363154cca4e2f89800d18c89d7f46f679df6c9e2952ae1ebfd0ca88368ee6ce139e8b5822c22cf2e9dde943d34c432e1001171792c65986146666a5490928441f47e0fe5eac41824ca1fd0eb71aa243c88d5480efd8329d9a733d8f9ffffff5f912ac4e34bf6ea8a86da707b03bddb491ba0cc98f6be92c50008a2b50025419d1476c73132ca7ca26ce8a7e3ffb700f09e157f9b844051f1a642aca9ff98c9036471ccff0522903e7bcf62e18f7696bbc280b95e8e0d6fd5644b0ebde3a95b06548862de809d3dae3cccf109f7c78e8479a345e800000000000000000000009455bf417627ce723a5d9103706aba69239500bb82f6b5a3ddc0bd9856712945b70c75ce5b722578820820d010d7a3cffc99fc647d0b82ef26ab708c0b19ed144be51c3b398f0e6bb7a30006000000cba12953d58cff0f0378740fe6662f377b97d8e7cdb047acd083d3cd3856476a60a49ad127ba6570bafc06000000721fd9cb467ff071e5604fbf0491245c0000007d932d7a64de4c4aa433fc0840aff7c47da3a4c6966d0000000000000000f6bfbae29e8a6e2a889f6ef6869d82d6bd73eb76b65c7a35a54a4a6b8ad4600e3a972a0bb5971a5f16590b0a03dafa3fd1118765cc8ab9fccf3b51c41a339f200f2fa33006910a679a9ae0187b4d750c4bd244cb0cbfd23b265f4d4da448a7a0d19c5e43eae50a31609dfa2dde267551467eb6475293dd7012cc449009981f22820e57a0eff234ccfe21d7a2302e000669753d3c3432cc14ee1abe724adb6b5431befedd3e22971118f0e21aed1823cb7dde8212a8531bd9691dd4cc6a370e9eb56b3d790b98f2bd0db1e5de6a146597b2cbb7103040d2a39d7965d34df524b760ab92efcce7dd1574052c735935bf6a752c015c7f5ffee9ff66e5dd2866b15b6e0d17618cb1f5c1ee4b05ebf1445ea110f499f840a5c965443d725556351ee25fe09f69494b053678dcadcf02e063dff2fa4bef1ac3bbbebe6c74d71ec3b23e29895eff1d1017024fe3e8cc759b05785adc346b7ffd05963f92c1d0d7d90ba878ad89e490f3e29ac51d30632869a534418f916bf6fe8167827a8e6c8f8b391c822805cb0adf1b8bd6947ff208753eb0d208ce14f7b206b2e02c21e963abc5ceb735c1b3c46b0a843de52a903375dfb663a8d8ee9c2b2705c1a81d9d3b9656b219c8cd99c9cafcd0d0540884d97aecb19983fc6af29ab44a82aff9cba921192c665b877af6539bdb1b567f481ba07982e7ad758f4e1eac69e7e88a63960975f490e161e371ec8534791e3b61c685d900a9c0839208356b53750e76fcc3c2d1bddcbd83897921414d0c02e8188f3df79ea2a5c5444004830e6cb227ca1bdafb977c00000000003a417193b8c5d793687335a930867094fd6a78218218e04b705ec62f1608cb569b81914e68f175b392af6bc4fd2121d7fd276af2c97a441b56e7a0687d98b8e76d8d0d231e4fe00be1de76bd19cc12e2bd938eb681ed6bc951c1b4f7c51af59eea4d40c6000000000200778a677b72786311153271a3313da02645e11761699e4d04ac86dd14ff7b9a10d3fa74696fe3953a5b7706bf5d1faba4b18808d9cb0e9db696dec4e0820ee4028d7225a2c9c427cf64cbde6fba056b2006b7a37c1181070000005e235cd302f3b4071ee5237ada986b9e5e3144bf479f277f10656ad3744037ccc9c63685a6f1109d2ea73773d3635f61497f1fa1ea4a16f601800bf3e59141fbf05a96113320c445f9ba8596970d5254727e804fbd99ccefb7c09269dd2c5c25e56e169ac15980f3f85f7ca36dd5950ef5b64fd46f123311669534a82940994199b3cf7a8fabea9930952f5da9b909c1946e55289f668c423fcbb31ae91864c882313151741a67538c9689dc8ecc9903c7041e5c0704e2fa55a756487117a7445cbd9e3f5175e41c00000000000000000000000000bf98efd587fffe326f474b0b089c017b16c0062cbce96f5adebec52a79f9363909842f79c50a1520be46d87003137e4c5031f00123e812a5e37cd52c9eb7336281cb8c6ce9934b157d7875a70eaf103cb3d99e3568c51cd1eab8a26b232ac46bf0ab829c26dab637538b2eb1420d812d2b80c777710ba0f18e4661681aa218d9ba54023ab4305d77eb15611ae2545835e9d30e9f6d4fb43a291c69545a1eea0f8720431132d89f99bf6c5cb060da70cbb59d0a000000000034d083fc37d2449f72de0cbea4bc1dc89c136cdbc504f849d5502d77a95c7bfff4cd9c03058d0d4d07ea64824f1acf2b39389f675f39d01719cdbab3f1ce10609c8d7b3e37cb99b41da5e485a441b6a103549f55ab09dc98767763d1f2fafd45bb7d2b40050d1f8292f4d9ec6d0000000000003932062290f4996fdd55b06023437e9e2072daf7f5d82f6f1b5b89a41134f4dc2e65bb11272fdf8c8141f41d6160b3d8b6ec1b6d14267f61b4881adee7f07f3d6af5ae79e16fe2c3f55ac7a6392d2e1d9b4286b6c3e1f5a76b85ed6e1f0000c67e6c5fcdc8c39381be4799b8cb2d08b8262c807dd755e22b801162381aa9d1af2bbc9cfd497585337eac408b8475b47a392a10cae349160f128e5f873a58064eb400c36a90624f6aed398a215e9ce64522ab249f67c38a656d32ecff5cdb2b039c4abf349d2c0f88a42e9189bbfa7f5cf35b6e7ef8f9d33163b7ea87550fb1ba334c83e3aec4714c9c4ca3ecb04f2720237615a28bf310b58ffa2a103216fdcc8c2d8f5d55e5e7ebf147105272aaae56e86d856b3cf79a3f7306436762dd1a08ce873e07cebc7892ec6f9f696da38feed3dc0001500e34adae1ba89a32bad2af9030f840f1ba4664f35547cdadd5cbacc59352c290f55d971b65953533668c25f21d8d62d849e9058eaa97c63491568887548f668cdbca2abf01a361a0b64d8b523e669da350e3ec7445dfbf366b0b3bc5e76824a1e43eaaeca70db90f2fa39596443447671933079a24fe3681ad9ac361f71ac279a688f10a1cc4df1112105edebc5e3bbc394c8305ab129ca2dfb9b7c5e9d097bd01b495cccefddce569117f7f5d6a6270ff0f0f4c371029ca8489571b55841bf3dd003bc81460fcfcbb616c2070237881afdb314cecd1623f3e55ab8b7627fa1be349145a8d6313cbc790eefe2020138e82fb9d351be4ddcbcc9bc048dd3db5828d16baec6e07a007f0030f34ea3cfd524d6fa1d45da5641d6c94e1d3ae7fba1c85035d2a60ef0a96e0d96aa1c60019f73ae0aa6113cd66ef26b5777337c26e1461405d86fdf091edd526f25cada439bb3609ed5c35ab60a539ade786bd6004d0ea3edbd6c4da0d8e8be8c771c8c8a0b07d9859e04adb18964dcce9bce546074c26dffbc2df372a016e8c845d4257000000000000000000000000000000000000f29657697d9c2b132b2dc2f5ea5122836582a7e85fe2bc166f17aefd9d861de0191f5277d4a3b5afb6f23d9eea2459f7844606e1202768d83c24cc791bde44a448022bbfa571fe029a7b2d5152639ee283894ab6168992ff0acc01b39a078f285ce615351f262019586eb9447bb3eaffd7b53d8f37ca6c5f1027dd5b7592996c8a7789ba108979cc9ad07ed86682843e2eaa855dd01443ee6ffde1811f10039d5d14458177096e15cc4d8f2582a1bea5cc98d992f3de7d1cdfb24384b9f10f615c87c441dc970ec896a5af6bf69b50a244bc138a1cae9868c3079bafe69769000000000000000000e99b63029d219cd3545a8426b56554a9f265d3557eefb3602894507c256cb8ee9ebadfecb6afeb84ba757bfa8d00a5af0dd6aa1e8144ef8ef04410d52204c335408941b8eccc5c734cc6a05247142ed647f89bcb5c043acfb382b9cc918bc3cdc368983157851cdf678800aa7eb2a6cbc12c7ae23bc88b8f10223ab2a093429f3f6965bc5af0114cf6f246bae0b04bec8e30b6772b8950f32e87beda060f9af2a0ccd4a8eab8e395ee3628eb976b7fff835e6c1bdc4a6e00acd0fe63ba84a5b21845db903b38c80148e6aa497dbf0e2baf938d3ecbd433527602d89f10aca419ff54e47354194f75e343d4c75227448530b0d8d59b9f94a3fa0ca9210177926c58ef46dcd09e79c343d35aa954d12f89410c47ac29c881f8a6bda8dd40df0d1e5881338d3f0000000000000069fef18df13c759e767d3442ae6598106496f42b73074bb80455df206e28473ec0dae8763915c3e04400ad44e9f3130e904062d204d385c026722a094251db1572d66e7a4917bba24c8c44e1cb19d94110669d3fbc17767ad564610b7d2c09631d3b32cf90000c521665e74c21633016fc30b9b4f6f70a3cf48aacdd4898e22aec823fe787c00b320e8dfa40875b61acb85c169d97b87213605ea89942564e47e0a8e9aa9bcf33cbcaca6b49d683c53f8638c38db976cf25df8c77dc8d7945c8501aa538558da44b1f876fa2c5df410d99090fe08085980955c043688f3db248502be863ed2a33181b7bd33f0db0e91ae05e91d318245bd15963b75ada40cb83cd1ee16ba0c90c06d69732701df53f6ddefed4755bfe69b811a0e03013ee99a9778acf6d93d23189c4dc4a76bbd401b38893b40dd0490ae0d5783d9e5da868f94eaa5b0c13bd8370265480e363c8ba57588a19fc742cc42779890d9c17b98998873fe0709cf142ab28937522a1cd0c65c8a8debca0afcb7438990cf130a43280f724f958894b70978abd6da3605b41cb45b3731d082771a65ca603ccd7dd3d49de3909e7f3b9a78f9448ab292bc50357f5477f7767"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe89}, 0x48) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000040)=r2, 0x4) sendmsg$inet(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) 24m43.895920191s ago: executing program 0 (id=1163): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x1}, 0x28) 24m43.284993681s ago: executing program 0 (id=1166): sendmsg$RDMA_NLDEV_CMD_GET(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000005c0)={0x18, 0x1401, 0x1, 0x70bd27, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x40}, 0x80) 24m42.644992423s ago: executing program 0 (id=1169): openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000540)) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x1, 0x6, 0x8, 0x8, 0x40}, 0x50) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xe, 0x4, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @sk_skb=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r0, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70) 24m41.830750565s ago: executing program 0 (id=1172): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000040)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x2, 0xb3, &(0x7f0000000140)=""/179, 0x41100, 0x7b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x38}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xc}, 0x4c) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0) 24m26.067968105s ago: executing program 44 (id=1172): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000040)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x2, 0xb3, &(0x7f0000000140)=""/179, 0x41100, 0x7b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x38}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xc}, 0x4c) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0) 21m34.688143697s ago: executing program 45 (id=1689): r0 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x40) bpf$TOKEN_CREATE(0x24, &(0x7f00000001c0)={0x0, r0}, 0x8) syz_open_dev$vcsu(&(0x7f0000000040), 0x0, 0x705442) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000000300)=""/102392, 0x18ff8) bind$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r4, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x4) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x7, 0x0, 0x0, 0x0, 0x2}, {}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@rand_addr=' \x01\x00', 0x2, 0x32}, 0xa, @in6=@private1, 0x0, 0x4}]}]}, 0xfc}}, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000004d00), 0x0, 0xf1c) syz_usb_connect$uac1(0x0, 0xaa, 0x0, 0x0) r6 = getpid() sched_setaffinity(r6, 0x8, &(0x7f0000000240)=0x2) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x101242, 0x0) ioctl$BLKZEROOUT(r7, 0x127f, &(0x7f0000000240)={0x2000, 0x1000000}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{0x1}, &(0x7f00000000c0), &(0x7f0000000100)}, 0x1c) 21m21.536911042s ago: executing program 46 (id=1721): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000ffffffff0000000000000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000071000000850000002300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_xfrm(0x10, 0x3, 0x6) socket$vsock_stream(0x28, 0x1, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r4, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x14, 0x2, 0x3, 0x301, 0x0, 0x0, {0x1, 0x0, 0xa}}, 0x14}, 0x1, 0x0, 0x0, 0x5}, 0x24004080) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000740)={r0, 0x0, 0x7, 0x0, &(0x7f0000000640)="0cffffdf71c8af", 0x0, 0x3, 0x3800, 0x0, 0x0, 0x0, 0x0}, 0x50) 19m19.083606738s ago: executing program 47 (id=1901): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) ioctl$PPPIOCGIDLE(0xffffffffffffffff, 0x8010743f, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) ptrace$pokeuser(0x6, r2, 0x388, 0x41d9fda7) 18m8.291471412s ago: executing program 48 (id=2020): bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0x12, 0x8, 0x4, 0x7cb4, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x50) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) ptrace$setopts(0x4206, r0, 0x3, 0x42) shmctl$IPC_RMID(0x0, 0x0) bpf$MAP_CREATE(0x300000000000011, &(0x7f0000000100)=@base={0x18, 0x4, 0x41, 0x0, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4002, 0x5}, 0x48) ptrace$ARCH_GET_GS(0x1e, r2, &(0x7f0000000080), 0x1004) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e23, @remote}, 0x10) r4 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x70, 0x103301) ioctl$USBDEVFS_IOCTL(r4, 0xc0105512, &(0x7f0000000200)) syz_emit_ethernet(0x76, &(0x7f0000000280)={@local, @random='?\x00', @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x2, 0x23, 0x68, 0x64, 0x0, 0x7, 0x6, 0x0, @remote, @remote}, {{0x4e22, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x15, 0x10, 0x7, 0x0, 0x67, {[@mptcp=@remove_addr={0x1e, 0x3e, 0x2, 0x0, "88391a84ed441d2486917d411bdd85e00f2f8a9bf72fb7e5d517db70538b3945905ec288f0eb7b104049c25387cdf6564600b902e2e7d74b3c7698"}]}}}}}}}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x40, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x40, 0x1}) ioctl$USBDEVFS_IOCTL(r4, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) 16m49.084601303s ago: executing program 9 (id=2208): syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, &(0x7f0000000540)={0x34, &(0x7f0000000340)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) 16m47.948914593s ago: executing program 9 (id=2216): r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x601c2, 0x0) ftruncate(r0, 0x8800000) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x4c27e, 0x53) close(r1) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) setsockopt$inet_tcp_int(r2, 0x6, 0x2, &(0x7f00000001c0)=0xa3, 0x4) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x40) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f00000000c0)='lp', 0x2) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000100)=[{0x6, 0x7, 0x0, 0x8001}]}, 0x10) recvfrom$inet(r2, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) sendfile(r1, r0, 0x0, 0x578410ed) 16m46.724812443s ago: executing program 9 (id=2221): socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x804}, 0x2002c810) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) msgctl$IPC_INFO(0x0, 0x3, &(0x7f0000000040)=""/22) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_io_uring_setup(0x18d3, &(0x7f0000000040)={0x0, 0x0, 0x2, 0xfffffffd, 0x263}, &(0x7f0000ffe000), &(0x7f0000ffe000)) 16m44.813748562s ago: executing program 9 (id=2224): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, 0x0, 0x4) 16m44.348716907s ago: executing program 9 (id=2227): socket$nl_generic(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'team_slave_0\x00'}) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000000)={0x8, 0x2}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7ffffffe) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r1, &(0x7f0000000000), 0xd) 16m43.359644317s ago: executing program 9 (id=2229): dup(0xffffffffffffffff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setattr(0x0, 0x0, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'hash\x00', 0x0, 0x0, 'blake2b-256\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0) r3 = accept4(r2, 0x0, 0x0, 0x80800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) 16m26.169559092s ago: executing program 49 (id=2229): dup(0xffffffffffffffff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setattr(0x0, 0x0, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'hash\x00', 0x0, 0x0, 'blake2b-256\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0) r3 = accept4(r2, 0x0, 0x0, 0x80800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) 14m32.322152371s ago: executing program 3 (id=2436): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$overlay(0x0, 0x0, &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) r1 = syz_io_uring_setup(0x8d6, &(0x7f00000000c0)={0x0, 0x0, 0x400, 0x0, 0x379}, &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x2) ioctl$TIOCSPTLCK(0xffffffffffffffff, 0x40045431, &(0x7f0000000000)) r4 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x6) write(r4, 0x0, 0x0) write(r4, 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000240)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r1, 0x47ba, 0x3e82, 0x60, 0x0, 0x0) 14m30.058226471s ago: executing program 0 (id=2254): ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, &(0x7f0000000080)={[{0x9, 0x7, 0x3, 0x1c, 0x5, 0x2, 0x4e, 0x3, 0xf9, 0x1, 0x80, 0x9, 0x8002200000000000}, {0x8, 0x6, 0x8, 0xc4, 0x2, 0x17, 0x7, 0xf1, 0x7, 0xff, 0x9, 0x7d, 0x7}, {0xe2a5, 0x4, 0x1, 0x9, 0x2, 0x9, 0x6, 0xb, 0xff, 0x3, 0x3, 0x3, 0x134}]}) syz_usb_connect(0x3, 0xf5, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000772aed408680070bb96c010203010902e30003dc2000000904003f000e01000505a40600010524007f000d240f010400000008000000000624"], 0x0) 14m29.827361455s ago: executing program 3 (id=2442): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000440)=ANY=[@ANYBLOB="12011f00abbe6740e9174e8b089c000000010902120001000000000904000000ff"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f00000001c0)={0x14, &(0x7f00000000c0)={0x0, 0x24, 0x2, {0x2, 0x7}}, 0x0}, 0x0) 14m28.136336482s ago: executing program 0 (id=2446): r0 = socket$tipc(0x1e, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffefffff6, 0x20031, 0xffffffffffffffff, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket(0x40000000015, 0x5, 0x0) getsockopt(r3, 0x200000000114, 0x271d, &(0x7f0000032380)=""/102400, &(0x7f0000000000)=0x19000) syz_open_dev$swradio(0x0, 0x1, 0x2) bind$tipc(r0, 0x0, 0x0) 14m27.606863227s ago: executing program 3 (id=2448): openat$kvm(0xffffffffffffff9c, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000032680)=""/102392, 0x18ff8) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000200), 0x140, 0x0) ioctl$RTC_SET_TIME(r3, 0x4024700a, &(0x7f0000000040)={0x2b, 0x13, 0x0, 0x2, 0xb, 0xa9, 0x5, 0x2, 0x1}) 14m25.816253656s ago: executing program 3 (id=2451): madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xc) r0 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0) write$sysctl(r0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) write$sysctl(r0, &(0x7f00000000c0)='2\x00', 0x2) 14m16.297476067s ago: executing program 3 (id=2457): r0 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000080)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f0000000100)={0x0, 0x0, r1, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r0, 0xc06864ce, &(0x7f0000000440)={r2, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x6], [0x0, 0x0, 0x0, 0xffffffff], [0x0, 0x10]}) r3 = syz_open_dev$dri(&(0x7f0000000240), 0x1, 0x101040) ioctl$DRM_IOCTL_MODE_GETFB(r3, 0xc01c64ad, &(0x7f0000000180)={r2}) 14m15.655297231s ago: executing program 3 (id=2460): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x12, 0x4, 0x8, 0x8002}, 0x50) 14m8.455687922s ago: executing program 50 (id=2446): r0 = socket$tipc(0x1e, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffefffff6, 0x20031, 0xffffffffffffffff, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket(0x40000000015, 0x5, 0x0) getsockopt(r3, 0x200000000114, 0x271d, &(0x7f0000032380)=""/102400, &(0x7f0000000000)=0x19000) syz_open_dev$swradio(0x0, 0x1, 0x2) bind$tipc(r0, 0x0, 0x0) 14m8.306285298s ago: executing program 1 (id=2464): ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, 0x0) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r0, &(0x7f0000000580), 0x8) listen(r0, 0x0) syz_emit_vhci(&(0x7f0000000c80)=ANY=[@ANYBLOB="0404"], 0xd) 14m7.457595094s ago: executing program 1 (id=2466): prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) open(0x0, 0x80, 0x28) r1 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) close_range(r1, r2, 0x0) 14m6.805935161s ago: executing program 1 (id=2467): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x802, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) 14m5.865638229s ago: executing program 1 (id=2470): r0 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000080)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f0000000100)={0x0, 0x0, r1, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r0, 0xc06864ce, &(0x7f0000000440)={r2, 0x0, 0x0, 0x0, 0x0, [], [0x0, 0x6], [0x0, 0x0, 0x0, 0xffffffff], [0x0, 0x10]}) r3 = syz_open_dev$dri(&(0x7f0000000240), 0x1, 0x101040) ioctl$DRM_IOCTL_MODE_GETFB(r3, 0xc01c64ad, &(0x7f0000000180)={r2}) 14m5.163916225s ago: executing program 1 (id=2472): openat$kvm(0xffffffffffffff9c, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102392, 0x18ff8) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000200), 0x140, 0x0) ioctl$RTC_SET_TIME(r3, 0x4024700a, &(0x7f0000000040)={0x2b, 0x13, 0x0, 0x2, 0xb, 0xa9, 0x5, 0x2, 0x1}) 14m1.300512114s ago: executing program 1 (id=2474): socket$inet6_sctp(0xa, 0x1, 0x84) socket$inet_tcp(0x2, 0x1, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) close(0xffffffffffffffff) openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) syz_usb_connect$uac1(0x3, 0xdc, 0x0, 0x0) 13m58.291390949s ago: executing program 51 (id=2460): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x12, 0x4, 0x8, 0x8002}, 0x50) 13m43.570818454s ago: executing program 52 (id=2474): socket$inet6_sctp(0xa, 0x1, 0x84) socket$inet_tcp(0x2, 0x1, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) close(0xffffffffffffffff) openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) syz_usb_connect$uac1(0x3, 0xdc, 0x0, 0x0) 10m14.594336831s ago: executing program 7 (id=2642): r0 = socket$kcm(0x2, 0x200000000000001, 0x106) shutdown(r0, 0x1) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f00003f7000/0x2000)=nil, 0x2000, 0x800001, 0x4000010, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x6) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) writev(0xffffffffffffffff, &(0x7f0000000840)=[{0x0}, {0x0}], 0x2) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000140)={'wg1\x00', &(0x7f00000000c0)=@ethtool_link_settings={0x4c, 0xd, 0x62, 0x7, 0x8, 0xe, 0xe3, 0x9, 0xa, 0x0, [0x4e, 0x9, 0xd2, 0x7, 0x401, 0x4, 0x9, 0xfffffffb], [0x7f]}}) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) dup(0xffffffffffffffff) r1 = openat$ocfs2_control(0xffffff9c, &(0x7f0000000180), 0x40, 0x0) ioctl$EXT4_IOC_GETFSUUID(r1, 0x8008662c, &(0x7f0000000240)) r2 = fsopen(&(0x7f0000000280)='pvfs2\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f00000000c0)={0x2, 0x4001, @loopback}, 0x10, 0x0, 0x0, 0x0, 0x0, 0xa7}, 0x30004084) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x121602, 0x0) ioctl$TIOCVHANGUP(r3, 0x5437, 0x2) 10m8.632346684s ago: executing program 7 (id=2646): fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0xf, &(0x7f0000000200)=ANY=[@ANYRESDEC, @ANYRES32], 0x0, 0x7, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) r0 = syz_open_dev$loop(0x0, 0x5, 0x183200) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) userfaultfd(0x80801) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad44afac11d875397bdb22d0000b420a1a93c5240f45f819ef6167d3d458dd4992861ac00", "f4bd000000801900", [0x0, 0x2000000000001]}}) 10m5.953103254s ago: executing program 7 (id=2649): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000780)=@delqdisc={0x24, 0x25, 0x400, 0x70bd2c, 0x8, {0x0, 0x0, 0x0, 0x0, {0xa, 0xe}, {0xd, 0x7}, {0x7, 0x2}}}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x0) r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000000)={@my=0x0}) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r0, 0x7a5, &(0x7f0000000180)={{@my=0x0}, 0x0, 0x1}) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r0, 0x7a5, &(0x7f00000000c0)={{@my=0x0}, 0x1}) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) ioctl$IOCTL_VMCI_NOTIFICATIONS_RECEIVE(r0, 0x7a6, &(0x7f0000000040)={0x4, 0x100000, 0x0, 0x2}) 10m2.045598866s ago: executing program 7 (id=2651): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={0x0, &(0x7f0000001500)=""/4096, 0x0, 0x1000, 0xa}, 0x28) 10m0.178537967s ago: executing program 7 (id=2653): r0 = socket$kcm(0x2, 0x200000000000001, 0x106) shutdown(r0, 0x1) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f00003f7000/0x2000)=nil, 0x2000, 0x800001, 0x4000010, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x6) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) writev(0xffffffffffffffff, &(0x7f0000000840)=[{0x0}, {0x0}], 0x2) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000140)={'wg1\x00', &(0x7f00000000c0)=@ethtool_link_settings={0x4c, 0xd, 0x62, 0x7, 0x8, 0xe, 0xe3, 0x9, 0xa, 0x0, [0x4e, 0x9, 0xd2, 0x7, 0x401, 0x4, 0x9, 0xfffffffb], [0x7f]}}) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) dup(0xffffffffffffffff) r1 = openat$ocfs2_control(0xffffff9c, &(0x7f0000000180), 0x40, 0x0) ioctl$EXT4_IOC_GETFSUUID(r1, 0x8008662c, &(0x7f0000000240)) r2 = fsopen(&(0x7f0000000280)='pvfs2\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f00000000c0)={0x2, 0x4001, @loopback}, 0x10, 0x0, 0x0, 0x0, 0x0, 0xa7}, 0x30004084) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x121602, 0x0) ioctl$TIOCVHANGUP(r3, 0x5437, 0x2) 9m56.542500246s ago: executing program 7 (id=2657): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socket$inet6(0xa, 0x3, 0x7) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, 0x10, 0x701, 0x0, 0xffffffff, {0xa}, [@typed={0x6, 0x1, 0x0, 0x0, @str='\x14\x00'}]}, 0x1c}}, 0x20008080) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) socket(0x10, 0x3, 0x0) r3 = openat$sysfs(0xffffff9c, &(0x7f0000000000)='/sys/kernel/profiling', 0x42242, 0x73) socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x2, 0x300) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000700)={0xffffffffffffffff, 0xc0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) r5 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000140)={r4}, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r5, 0x108, 0xe, 0x2f, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0xf000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r6 = openat$cgroup_devices(r3, &(0x7f0000000280)='devices.deny\x00', 0x2, 0x0) write(r6, &(0x7f00000002c0)="0e0100120f0a00110001926c000000002e0c7000f5fe0012ff0000", 0x1b) pwritev(r3, &(0x7f0000000400)=[{&(0x7f0000000040)='9G', 0x2}, {0x0}], 0x2, 0xffffff01, 0xa) 9m40.723665751s ago: executing program 53 (id=2657): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socket$inet6(0xa, 0x3, 0x7) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, 0x10, 0x701, 0x0, 0xffffffff, {0xa}, [@typed={0x6, 0x1, 0x0, 0x0, @str='\x14\x00'}]}, 0x1c}}, 0x20008080) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) socket(0x10, 0x3, 0x0) r3 = openat$sysfs(0xffffff9c, &(0x7f0000000000)='/sys/kernel/profiling', 0x42242, 0x73) socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x2, 0x300) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000700)={0xffffffffffffffff, 0xc0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) r5 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000140)={r4}, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r5, 0x108, 0xe, 0x2f, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0xf000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r6 = openat$cgroup_devices(r3, &(0x7f0000000280)='devices.deny\x00', 0x2, 0x0) write(r6, &(0x7f00000002c0)="0e0100120f0a00110001926c000000002e0c7000f5fe0012ff0000", 0x1b) pwritev(r3, &(0x7f0000000400)=[{&(0x7f0000000040)='9G', 0x2}, {0x0}], 0x2, 0xffffff01, 0xa) 8m1.843118432s ago: executing program 4 (id=2739): openat$kvm(0xffffffffffffff9c, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x5) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102392, 0x18ff8) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000200), 0x140, 0x0) ioctl$RTC_SET_TIME(r3, 0x4024700a, &(0x7f0000000040)={0x2b, 0x13, 0x0, 0x2, 0xb, 0xa9, 0x5, 0x2, 0x1}) 7m58.723458521s ago: executing program 4 (id=2740): r0 = syz_clone(0xa1302400, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace(0x8, r0) r1 = syz_pidfd_open(r0, 0x0) process_mrelease(r1, 0x700000000000000) 7m54.698575355s ago: executing program 4 (id=2743): syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = syz_io_uring_setup(0x49a, &(0x7f0000000400)={0x0, 0x79af, 0x3380, 0x1, 0x40024e}, &(0x7f0000000340)=0x0, &(0x7f0000000040)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_setup(0x10a, &(0x7f0000000680)={0x0, 0x80334c, 0x10, 0x3, 0x3d3}, &(0x7f0000000200), &(0x7f0000000300)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.memory_pressure_enabled\x00', 0x275a, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x1, 0x7}) write$UHID_CREATE2(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="06"], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r2, 0x0) io_uring_enter(r0, 0x627, 0xc1040000, 0x43, 0x0, 0x0) 7m53.678741066s ago: executing program 4 (id=2744): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000000)={0x24, 0x1, 0x1, 0x201, 0x0, 0x0, {0x2, 0x0, 0x9}, [@CTA_TUPLE_ORIG={0x4}, @CTA_FILTER={0xc, 0x19, 0x0, 0x1, [@CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x6}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x406c450}, 0x0) 7m53.00364029s ago: executing program 4 (id=2746): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) writev(r0, &(0x7f0000019880)=[{&(0x7f0000000400)="fb", 0xffffff5c}, {&(0x7f00000197c0)="1902eb02d5e5f29e59e1a7caec33eb76d2430da474d87e367f6598d026438b65eda8341073b6752abdcee080c8e1e876b25227c37d7dd79886ce33f13e857c8eda1cecf6ac36c03dbf54e3cb5136da5a33fee76fb3113f8b6700e9e5fc006b8eed665fed48738d59395ad07438c3610ae3976aac75caf2facafa21c25be3c2", 0x7f}], 0x2) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) 7m44.665033835s ago: executing program 4 (id=2750): r0 = socket$packet(0x11, 0x2, 0x300) socket$unix(0x1, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x2, 0x2, 0x1) r1 = creat(&(0x7f0000000180)='./file0\x00', 0xf0) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000001200)=ANY=[@ANYBLOB, @ANYRES8=r0, @ANYRES64=r1], 0x0) 6m30.487385287s ago: executing program 5 (id=2849): r0 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0xffe0}, {0xb, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x300080d0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newtfilter={0x58, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0x9}, {}, {0x1, 0xfff1}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x28, 0x2, [@TCA_CGROUP_EMATCHES={0x24, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x18, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x14, 0x1, 0x0, 0x0, {{0x3, 0x9, 0x80}, [@TCA_EM_IPT_HOOK={0x8, 0x1, 0x4}]}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x6}}]}]}}]}, 0x58}}, 0x1) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_XEN_HVM_CONFIG(r3, 0x4038ae7a, &(0x7f0000000000)={0x80, 0x40000105, 0x0, 0x0}) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) keyctl$read(0xb, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() r4 = fsopen(&(0x7f0000000500)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x0) fchdir(r5) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdir(&(0x7f00000001c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000140), 0x200800, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@volatile}]}) 6m29.000455328s ago: executing program 5 (id=2852): openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00"/49], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b80)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x4, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xc}, 0x94) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000240)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x1300, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 6m28.464961984s ago: executing program 2 (id=2853): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000380)={'wlan1\x00'}) sendmsg$NL80211_CMD_SET_QOS_MAP(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000480)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010028bd7000fbdbdf256800000008000300", @ANYBLOB="1600c7"], 0x34}, 0x1, 0x0, 0x0, 0x20000800}, 0x8080) 6m27.623039009s ago: executing program 2 (id=2857): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_dev$loop(&(0x7f0000000240), 0x6, 0x85862) ioctl$LOOP_SET_CAPACITY(r3, 0x4c07) 6m27.418006315s ago: executing program 5 (id=2858): syz_usb_connect(0x9, 0x36, &(0x7f0000000e80)=ANY=[], 0x0) socket$alg(0x26, 0x5, 0x0) r0 = landlock_create_ruleset(&(0x7f0000000080)={0xd60b, 0x2}, 0x18, 0x0) landlock_restrict_self(r0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = syz_io_uring_setup(0x1238, &(0x7f0000000380)={0x0, 0x80fd, 0x80, 0x2, 0xab9}, &(0x7f0000000040)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffff4, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000001c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r1, 0x80, &(0x7f0000000080)=@l2tp={0x2, 0x0, @local, 0x3}}) io_uring_enter(r2, 0x47bc, 0x0, 0x0, 0x0, 0x0) dup2(0xffffffffffffffff, r1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) 6m25.435117288s ago: executing program 2 (id=2860): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x3e, &(0x7f0000009b00)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40ffffff07000000400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x20004015}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a400000000c0a01010000000000f9ff000a0000090900020073797a31000000200900010073797a310000000014000380100000800c00018006000100582e000014000000110001"], 0x68}, 0x1, 0x0, 0x0, 0x4004850}, 0x40) sendmsg$NFT_MSG_GETSETELEM(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)={0x2c, 0xd, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x1001}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) socket$nl_route(0x10, 0x3, 0x0) close(0x3) 6m24.643816958s ago: executing program 2 (id=2862): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002b40)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002006e6c3830323131"], 0x20}}, 0x0) 6m24.18229745s ago: executing program 5 (id=2865): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x900, 0x0) ioctl$TUNSETIFINDEX(r0, 0x400454da, &(0x7f0000000040)) 6m15.210389427s ago: executing program 2 (id=2867): openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00"/49], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b80)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x4, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xc}, 0x94) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000240)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x1300, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 6m13.399728075s ago: executing program 2 (id=2870): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf0667000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = syz_open_dev$loop(&(0x7f0000000240), 0x6, 0x85862) ioctl$LOOP_SET_CAPACITY(r2, 0x4c07) 6m10.512527603s ago: executing program 5 (id=2875): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000040000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000001400038008000140000000000800024000000000ec000000160a0101000b000000000000010000000900020073797a30000000000900010073797a30000000001c000380180003801400010062617461647600000000000000000000a4000380540003801400010073797a6b616c6c6572310000000000001400010076657468315f746f5f68737200"], 0x174}, 0x1, 0x0, 0x0, 0x20040841}, 0x0) 6m3.517006047s ago: executing program 5 (id=2876): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002b40)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002006e6c3830323131"], 0x20}}, 0x0) 5m57.574443834s ago: executing program 54 (id=2870): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf0667000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = syz_open_dev$loop(&(0x7f0000000240), 0x6, 0x85862) ioctl$LOOP_SET_CAPACITY(r2, 0x4c07) 5m48.071942184s ago: executing program 55 (id=2876): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002b40)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002006e6c3830323131"], 0x20}}, 0x0) 4m21.128836119s ago: executing program 6 (id=2976): bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) syz_usb_connect(0x5, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000009a65d0860040800dee20102030109021b05000000000009040000f678eaf50009057e"], &(0x7f0000000a40)={0x0, 0x0, 0x0, 0x0}) 4m17.755243027s ago: executing program 6 (id=2979): r0 = socket(0x8000000010, 0x2, 0x0) write(r0, &(0x7f00000002c0)="fc0000001c000704ab5b2509b868030002ab087a0100000001481093210001c0f0030584050060100000000000039815fa2c53c28648000000b9d95662537a00bc000c00f0ff7f0000b400600033d44000040560916a0033f436313012dafd5a32e273fc83ab82d710f74cec184406f90d435ef8b29d3ef3d92c94170e5bba2e177312e081bea05d3a021e8ca062914a46ccfc510bb73c9455cdc8363ae4f5df77bc4cfd6239ec2a0f0d1bcae5fa0f5f9dcdd51af51af8502943283f4bb102b2b8f5566791cf190201ded815b2ccd243f395ed94e0ad91bd6433802e0784f2013cd1890058a10000c880ac801fe4af000049f0d4796f000009", 0xf9) r1 = socket(0x840000000002, 0x3, 0x100) connect$inet(r1, &(0x7f0000000400)={0x2, 0x4e20, @remote}, 0x10) sendmmsg$inet(r1, &(0x7f0000005240)=[{{0x0, 0x0, 0x0}, 0xfffffdef}], 0x4000095, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r2, 0x8955, &(0x7f0000000180)={{0x2, 0x4e23, @empty}, {0x20000010304, @local}, 0x4, {0x2, 0x4e20, @rand_addr=0x64010102}}) 4m15.820293667s ago: executing program 6 (id=2981): socket$kcm(0xa, 0x5, 0x0) socket$inet6_sctp(0xa, 0x801, 0x84) r0 = syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_RMFB(r0, 0xc00464d0, &(0x7f0000000140)) socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) ioctl$USBDEVFS_BULK(0xffffffffffffffff, 0xc0185502, &(0x7f0000000180)={{{0x1, 0x1}}, 0xfffffffffffffffb, 0x7, 0x0}) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) setxattr$security_capability(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$USBDEVFS_CLEAR_HALT(0xffffffffffffffff, 0x80045515, 0x0) syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) socket(0x11, 0x800000003, 0x0) r3 = getpgrp(0x0) r4 = syz_pidfd_open(r3, 0x0) ioctl$FS_IOC_GETVERSION(r4, 0xff06, 0x0) 4m7.023016108s ago: executing program 6 (id=2988): r0 = socket(0x8000000010, 0x2, 0x0) write(r0, &(0x7f00000002c0)="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", 0xfb) r1 = socket(0x840000000002, 0x3, 0x100) connect$inet(r1, &(0x7f0000000400)={0x2, 0x4e20, @remote}, 0x10) sendmmsg$inet(r1, &(0x7f0000005240)=[{{0x0, 0x0, 0x0}, 0xfffffdef}], 0x4000095, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r2, 0x8955, &(0x7f0000000180)={{0x2, 0x4e23, @empty}, {0x20000010304, @local}, 0x4, {0x2, 0x4e20, @rand_addr=0x64010102}}) 4m5.711195562s ago: executing program 6 (id=2991): openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa2c"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b80)={0x6, 0x3, &(0x7f0000000680)=ANY=[], 0x0, 0x4, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xc}, 0x94) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000240)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x1300, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 4m5.283336543s ago: executing program 6 (id=2992): socket$nl_netfilter(0x10, 0x3, 0xc) mount$overlay(0x0, 0x0, 0x0, 0x40000, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000240)={'\x00', 0x4000, 0x6, 0x1, 0x2, 0xff}) sched_setaffinity(0x0, 0xfffffffffffffd7a, &(0x7f0000000580)=0x8000000002) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) utimes(&(0x7f0000000480)='./cgroup\x00', 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f000001aa40)=""/102392, 0x18ff8) r1 = socket(0x2, 0x80805, 0x0) ioctl$sock_inet_SIOCGIFBRDADDR(r1, 0x8919, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$overlay(0x0, 0x0, &(0x7f0000003c80), 0x0, &(0x7f0000003cc0)={[], [], 0x2f}) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x0, 0x6, @private1={0xfc, 0x1, '\x00', 0x1}, 0xfffffffc}}, 0x0, 0x0, 0x6, 0x0, "3f114438efdaca16d374b49a365be44d5e860ea3ba676c0b5047b80e2c3535d5bd9db3c8572560f4d1be5cd41f7716082ee3589f099942e6f1c395ddb8160381baadf27900"}, 0xd8) fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f00000005c0)='fd', 0x0, 0xffffffffffffffff) fsopen(0x0, 0x1) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) unshare(0x4000400) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x8}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={r2, &(0x7f0000000100), 0x0}, 0x20) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='maps\x00') exit(0xffff) preadv(r3, &(0x7f0000000140), 0x0, 0x9, 0x5e97) sendmsg$DEVLINK_CMD_RATE_GET(0xffffffffffffffff, 0x0, 0x4000810) 3m49.866482133s ago: executing program 56 (id=2992): socket$nl_netfilter(0x10, 0x3, 0xc) mount$overlay(0x0, 0x0, 0x0, 0x40000, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000240)={'\x00', 0x4000, 0x6, 0x1, 0x2, 0xff}) sched_setaffinity(0x0, 0xfffffffffffffd7a, &(0x7f0000000580)=0x8000000002) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) utimes(&(0x7f0000000480)='./cgroup\x00', 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f000001aa40)=""/102392, 0x18ff8) r1 = socket(0x2, 0x80805, 0x0) ioctl$sock_inet_SIOCGIFBRDADDR(r1, 0x8919, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$overlay(0x0, 0x0, &(0x7f0000003c80), 0x0, &(0x7f0000003cc0)={[], [], 0x2f}) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x0, 0x6, @private1={0xfc, 0x1, '\x00', 0x1}, 0xfffffffc}}, 0x0, 0x0, 0x6, 0x0, "3f114438efdaca16d374b49a365be44d5e860ea3ba676c0b5047b80e2c3535d5bd9db3c8572560f4d1be5cd41f7716082ee3589f099942e6f1c395ddb8160381baadf27900"}, 0xd8) fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f00000005c0)='fd', 0x0, 0xffffffffffffffff) fsopen(0x0, 0x1) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) unshare(0x4000400) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x8}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={r2, &(0x7f0000000100), 0x0}, 0x20) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='maps\x00') exit(0xffff) preadv(r3, &(0x7f0000000140), 0x0, 0x9, 0x5e97) sendmsg$DEVLINK_CMD_RATE_GET(0xffffffffffffffff, 0x0, 0x4000810) 4.386108291s ago: executing program 8 (id=3117): syz_mount_image$udf(&(0x7f0000000000), &(0x7f0000000100)='./file1\x00', 0x400, &(0x7f0000000f80)=ANY=[@ANYBLOB='nostrict,umask=00000000000000000000010,unhide,longad,utf8,lastblock=00000000000000002304,anchor=18446744073709551615,gid=', @ANYRESDEC=0x0, @ANYBLOB=',gid=forget,uid=forget,noadinicb,shortad,iocharset=ascii,lastblock=00000000000000000009,iocharset=cp950,fileset=00000000000000000001,undelete,anchor=00000000000000000006,partition=00000000000000000008,anchor=00000000000008421375,session=00000000000000000001,anchor=00000000000000000005,gid=', @ANYRESDEC, @ANYBLOB="2c66fefb470f725c", @ANYRES8, @ANYRESOCT, @ANYRES8=0x0, @ANYBLOB="2c733527445357a21d79a4b56d61636b66736465663d233f9d1abf59c53229ddd780b162f44a0e44f3436d598025e596d23078030033e07b480ad2f41c3ccd7956530c7be5c0d1833a801d65d4954140d856bb924e0f613fe32a0c1461263f77581d8ed8b341959c53a341493644534a4b27223d1faac6bf7df530d100a57452b6a3abc826b50f0b82809ca1e13376959935f589115abe267b25f42757304b4d6c7ffaec13f3079a4658933152fe693cc762ce82776b4003c4ac3d9d3478da3da1f79ad788d3b25f59422ba668"], 0x9, 0xc1e, &(0x7f0000001240)="$eJzs3U9sHNd9B/DfG5HiUmkrJnYUu42LTVukMmO5+hdTsQp3VdNsA8gyEYq5BeCKpNSFKZIgqUY20oLppYceAhRFDzkRaI0CKRoYTRH0yLQukFx8KHLqiWhhIyh6YIsAOQUsZvatuKRIixFFibI+H5v67s6+N/PevPWMLOjNCwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAg4vdfu3T6THrUrQAAHqYrY185fdb9HwCeKFf9/z8AAAAAAAAAAAAAABx2KYp4KlLMX1lPE9X7ttrlVu+t2+PDIztX609VzSNV+fKndubsufNffGnoQicvt2Y/ov6D9my8MXb1Uv3VuZvzC9OLi9NT9fHZ1uTc1PSe97Df+tsNViegfvPNW1PXry/Wz754bsvHtwc+7PvEiYGLQ8+feq5Tdnx4ZGRss0jtvo+9g91meByNIk5Fihe++5PUjIgi9n8uag937LfrrzoxWHVifHik6shMqzm7VH442jkRRUS9q1Kjc452Hovo6X2ofdhdI2K5bH7Z4MGye2PzzYXmtZnp+mhzYam11JqbHU3t1pb9qUcRF1LESkSs9d29u94ooidSfPv4eroWEUc65+EL1cTg3dtRHGAf96BsZ703YqV4DMbsEOuLIl6PFD9972RMlucs/8TnI14v8/sR75T5SkQqvxjnIz7Y4XvE46kniviLcvwvrqep6nrQua5c/mr9y7PX57rKdq4rv+D94a4rxSO6P/Rvy4fjkF+balFEs7rir6f7/80OAAAAAAAAAAAAAAAAAA9afxTxbKR47d//uJpXHNW89OMXh/5g4Je754w/c4/9lGVfjIjlYm9zco/miYGjaTSlRzyX+ElWiyL+JM//++ajbgwAAAAAAAAAAAAAAAAAAMATrYgfR4qX3z+ZVqJ7TfHW7I361ea1mfaqsJ21fztrpm9sbGzUUzsbOSdyLudcybmacy1nFLl+zkbOiZzLOVdyruZcyxlHcv2cjZwTOZdzruRczbmWM3py/ZyNnBM5l3Ou5FzNuZYzDsnavQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHydFFPHzSPGtr6+nSBHRiJiIdq72PerWAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAClvlTE9yJF/Q8bd7b1RESq/m07Wf5yPhpHy/xUNIbKfCUal3I2q+xpfPMRtJ/96U1F/ChS9NXevTPgefx72+/ufA3inW9svvvVnnYe6Xw48GHfJ04cvzg08uvP7PY67dSAwcut2Vu36+PDIyNjXZt78tE/1bVtIB+3eDBdJyIW33r7zebMzPTC/b8ovwL7qO6FF4f1RfQcimY8mr7zBCjv/x9Eit95/z86N/zO/f+X2u/u3OHjZ3+6ef9/efuO9nj/79le7x73/6e6tr2cfzfS2xNRW7o533siorb41tunWjebN6ZvTM+eP336S0NDXzp3uvdoRO16a2a669UDOV0AAAAAAAAAAAAAAAAAD08q4vciRfNH66keEber+VoDF4eeP/XckThSzbfaMm/7jbGrl+qvzt2cX5heXJyeqo/Ptibnpqb3erhaNd1rfHjkQDpzT/0H3P7+2qtz828ttG780dKOnx+rXbq2uLTQnNz54+iPIqLRvWWwavD48EjV6JlWc7aqOrrjZPpfXG8q4j8jxeT5evpc3pbn/22f4b9l/v/y9h0d0Pz/T3ZtK4+ZUhE/ixS//ZfPxOeqdh6Lu85ZLve3kWLwwmdzuThaluu0of1cgfbMwLLs/0aKf/z51rKd+ZBPbZY9s+cT+5gox/94pPjen38nfiNv2/r8h53H/9j2HR3Q+D/dte3YlucV7Lvr5PE/FSleeerd+M287aOe/9F59sbJXPjO8zkOaPw/3bVtIB/3tx5M1wEAAAAAAAAAAB5rvamIv4sUPxjpSS/lbXv5+39T23d0QH//6zNd26YezHpF93yx75MKAAAAAIdEbyrix5HixtK7d+ZQb53/3TX/83c3538Op22fVn/O9yvVcwMe5J//dRvIx53Yf7cBAAAAAAAAAAAAAAAAAADgUEmpiJfyeuoT1Xz+qV3XU1+NFK/99wu5XDpRluusAz9Q/Vq7Mjd76tLMzNxkc6l5bWa6PjbfnJwu6z4dKdb/5rO5blGtr95Zb769xvvmWuwLkWLk7ztl22uxd9Ymf3qz7Jmy7CcjxX/9w9aynXWsP71Z9mxZ9q8jxdf+eeeyJzbLnivLfidS/PBr9U7ZY2XZzvNRP7NZ9sXJueIARgUAAAAAAAAAAAAAAAAAAIAnTW8q4s8ixf/cXLkzlz+v/9/b9bbyzje61vvf5na1zv9Atf7/bq/vZ/3/6rkCy7sdFQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPp5SFPF2pJi/sp5W+8r3bbXLrdlbt8eHR3au1p+qmkeq8uVP7czZc+e/+NLQhU5+dP0H7dl4Y+zqpfqrczfnF6YXF6en6uOzrcm5qek972G/9bcbrE5A/eabt6auX1+sn33x3JaPbw982PeJEwMXh54/9Vyn7PjwyMhYV5me3vs++l3SLtuPRhF/FSle+O5P0g/6IorY/7m4x3fnoPVXnRisOjE+PFJ1ZKbVnF0qPxztnIgiot5VqdE5Rw9hLPalEbFcNr9s8GDZvbH55kLz2sx0fbS5sNRaas3NjqZ2a8v+1KOICyliJSLW+u7eXW8U8Wak+Pbx9fQvfRFHOufhC1fGvnL67O7tKA6wj3tQtrPeG7FSPAZjdoj1RRH/FCl++t7J+Ne+iJ5o/8TnI14v8/sR70R7vFP5xTgf8cEO3yMeTz1RxP+V439xPb3XV14POteVy1+tf3n2+lxX2c515bG/PzxMh/zaVIsiflhd8dfTv/nvGgAAAAAAAAAAAAAAAOAQKeLXIsXL759M1fzgO3OKW7M36leb12ba0/o6c/86c6Y3NjY26qmdjZwTOZdzruRczbmWM4pcP2ejzNrGxkR+v5xzJedqzrWccSTXz9nIOZFzOedKztWcazmjJ9fP2cg5kXM550rO1ZxrOeOQzN0DAAAAAAAAAAAAAAAAAAA+XorqnxTf+vp62uhrry89Ee1ctR7ox97/BwAA///bhfta") r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000140)='.log\x00', 0x1a10c1, 0x9c37611dc13d0d83) fchown(r0, 0x0, 0x0) 3.590947672s ago: executing program 8 (id=3118): syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000240)='./file2\x00', 0x2000410, &(0x7f0000001900)={[{@bsdgroups}, {@nolazytime}, {@grpid}, {@dioread_lock}, {@debug}]}, 0xc1, 0x7da, &(0x7f0000000fc0)="$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") fanotify_mark(0xffffffffffffffff, 0x105, 0x40009975, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) quotactl$Q_QUOTAON(0xffffffff80000201, &(0x7f0000000180)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r0, 0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext3\x00', &(0x7f0000000040)='./file0\x00', 0x2008803, &(0x7f0000000080), 0x1, 0x648, &(0x7f0000000100)="$eJzs3c9vFNcdAPDvrNe/aW1Q1ZYeiqWqAqnFxgYqVFUq3BGiP27txcUGUQxG2FVjhISRyCVSbjkg5ZRDyH+RIHHlH8ghUpRTFAlFhEOIUNhoZnfs8XrXv3fXrD8fabLvzXjnvXH4+r15+95sAAfWWESMR8TRiLidRIwUjpWz/5ayH0p/7uWLe1fSLYlK5R/fJnHvfrJcPFdSex2uvfnHkequIz3ry11Yuntjem5u9k4tP7F48/bEwtLdk9dvTl+bvTZ7a+pPU+fOnjl7bvLUrq7vcCF98eF//z/y3qV/ffzh62Tyky8uJXE+vbpMel317+3fVcnp72wsKlWvivvT3+u5XZ57v/h+JP93siqp38G+lsZAb0T8Kkaip/B/cyTe/VtHKwa0VCWJvI0CDpxkR/E/sPcVAdos7wfk9/aN7oMbaHBHD7xtnl+oDkhVY783IvL4L2djfhED2djA0MtkzThPEhG7G5mrSst49vTSw3SLJuNwQGssP8hHuevb/ySLzdEYyHJDL0tr4r9U2NL9f99OoX2rybG6Q+If2mf5QUT8utb+98V24r8chfj/zw7Lz+L/0IuVmxHxDwAAAAAAADv35EJE/LHR/L9SjGXLggayj+ur838+7c3fNxwR5/eg/M0//y/lS/SSPSgOKHh+IeIvDef/5mEXoz213M+y+QC9ydXrc7OnIuLnEXEievvT/GTdeUuF9Mn3jzxqVn5x/l+6peU/e1qcXlz6ply3EHdmenHaXwPYvecPIn6Tzf89Vtuzdv5P2v4nDeb/pvF9e4tlHPn948vFfKVSuZ+nG8d/dS4w0FqVjyKON2z/VxvYZOPnc0xk/YGJvFew3m9fFxYa1RH/0Dlp+z/UPP5Xet4rz+tZ2N75+yLi9FK5WfhvIf4b9//7kn/2RGEpwTvTi4t3JiP6kovr909tr87QrfJ4yOMljf8Tv2s6/re2/1+Iw8GIWN5imb98M/xVs2Paf+icNP5nNu7/jya19j+y9n+lI7DlxNTj0c+yMzV4LtzlLbX/Z7I2/URtTzb+B9SU1u3ZaoB2pLoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8JYrRcShSErjK+lSaXw8YjgifhFDpbn5hcU/XJ3/362Z9Fj2/f+l/Jt+R6r5JP/+/9FCfqoufzoiDkfEBz2DWX78yvzcTKcvHgAAAAAAAAAAAAAAAAAAAPaJ4WzNf6W/fv1/6uueTtcOaLly7XWTeB9oR12A9irv+J2V/j2tCNB2O49/4G239fjvbWk9gPZrHv+vXlcyeT5Jike/a3G9gNbT/4eDa/P4H2y008eD0AUaxP9YJ+oBtNuGY3qPVlI+/Yeu5P4fAAAAAAC6yuFjTz5PImL5z4PZluqrHTPZH7pbqe4VODjM4YWDqzzf6RoAneIeH1hd1/9DpdHx5rP/k9ZUCAAAAAAAAAAAAABY5/hR6//hoNp43b+5/dDNNlj/3yj4PS4Aukjzr/7Q9kO3c48PbNbaW/8PAAAAAAAAAAAAAPvAwN0b03Nzs3cWlnaZiIgvK0nEbs/TJPHvBof+2qKyWppYnt4X1djTxJvWnLk3IvbHBbY7kT+Co4PV6PDfJQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYMVPAQAA//+2/DDv") r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x105042, 0x189) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x27ffff7, 0x4012011, r1, 0x0) 2.715060175s ago: executing program 8 (id=3119): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)={0x3c, r0, 0x1, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x7}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x5b}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x40) 2.166085198s ago: executing program 8 (id=3120): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7030000000000008500000087000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000340)="c1dfb080cd21d308098ee688b5c6", 0x0, 0xadf0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 869.848124ms ago: executing program 8 (id=3121): r0 = syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f00000000c0)='mnt\x00', 0x4, &(0x7f0000000000), 0x0, 0x236, &(0x7f00000007c0)="$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") open_by_handle_at(r0, &(0x7f0000000140)=@FILEID_INO32_GEN={0x8, 0x1, {0xb, 0x7ffd}}, 0x301a00) 0s ago: executing program 8 (id=3122): sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x2010c10, &(0x7f0000000ec0)={[{@barrier_val={'barrier', 0x3d, 0x3}}, {@abort}], [{@fowner_gt}, {@appraise_type}, {@dont_appraise}, {@func={'func', 0x3d, 'PATH_CHECK'}}]}, 0xff, 0x258, &(0x7f0000000780)="$eJzs3T9oHmUcB/Df3fu+xiQvEnURxD8gIhoIcRNc4qIQkBBEBBUiIi5KIsQEt8TJxUFnLZm6hNKtaceSJXRpKXRK2wzpUmhDh4YO7XDlfS+BJG/6J33f3pXc5wPH3SV393uO3Pe5G3L3BFBZQxExFhG1iBiOiEZEJHs3eDefhnZWl/rXpiKy7Ks7SXu7fD23u99gRCxGxCcRsZom8Us9Yn7lu81761988Pdc4/2TK9/2F3qSO7Y2N77cPjHx15nxj+cvXbk1kcRYNPedV+8lh/ysnkS89jyKvSCSetkt4GlM/nH6aiv3r0fEe+38NyKN/I/3z+xLq4346P9H7fvv7ctvFtlWoPeyrNG6By5mQOWkEdGMJB2JiHw5TUdG8mf4a7WB9NeZ2d+Hf56Zm/6p7J4K6JVmxMbn5/rODh7I/81ann/g+Grl/+vJ5eut5e1a2a0BCvFWPmvlf/iHhQ9D/qFy5B+qS/6huo6Yf//RAceI+z9U12Py/3JZbQKK0Zn/RtlNAgri+R8qKcuyTP6hwuQfqmtv/gGAasn6yn4DGShL2f0PAAAAAAAAAAAAAAAAAADQaal/bWp3Kqrmhf8itj7LRxfprF9rj0e8+znygbvJvkFIkh4MSvL9O10eoEunSn77+pUb5da/+Ha59RemIxb/jIjRer3z+kt2rr9n9+oTft/4scsCR5QcWP/0m2LrH/Rgudz64+sR51v9z+hh/U8ab7Tnh/c/zR58Mf23+10eAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgMI8DAAA//84UXFU") r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000100), 0x237}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x1f00, 0x18, 0x19, &(0x7f00000007c0)="9f44948721919580684010a40566", 0x0, 0x7ff, 0x0, 0xb1, 0x0, &(0x7f0000000700)="389ceff69d08b0af1cc71b6262d50660bbaf31a7f8cd6a6f911beb65d5fe6b54bf21a66489121f24fefd198059288c9b735e1898e77a7469489a249292c02a72bc193a3008ebdbf4e9dd4ee8fcceef55402c913c8dd0ebece1330aaa93ece835c5044a246a5967e3acd7c950b3b19f351830e545eb9bc3a9c6dd22ce97f1f857cfe8b68a2370b69ea336006b589368f92deb68f3dfc6f2bfee09f8342da437fce5dcdf658e453e3132bb42067575318c39", &(0x7f0000000380)="8c5911c525f5cf4c4ecf207ad2ec", 0x0, 0x0, 0xffffffff}, 0x23) kernel console output (not intermixed with test programs): .813567][T18285] bridge_slave_1: entered allmulticast mode [ 1994.846299][T18285] bridge_slave_1: entered promiscuous mode [ 1994.929403][T18298] chnl_net:caif_netlink_parms(): no params data found [ 1995.494963][T17845] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1995.616992][T18285] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1996.006395][T18285] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1996.073503][T17845] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1996.206726][T18108] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1996.413805][T16666] Bluetooth: hci2: command tx timeout [ 1996.580907][T17845] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1996.746842][T18285] team0: Port device team_slave_0 added [ 1996.816648][T16666] Bluetooth: hci6: command tx timeout [ 1996.899854][T17845] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1997.036336][T18285] team0: Port device team_slave_1 added [ 1997.272839][T18332] netlink: 16 bytes leftover after parsing attributes in process `syz.8.2892'. [ 1997.551016][T18285] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1997.562024][T18285] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1997.589719][T18285] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1997.910123][T18285] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1997.917259][T18285] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1997.947494][T18285] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1999.566775][T16666] Bluetooth: hci6: command tx timeout [ 2000.331111][T18298] bridge0: port 1(bridge_slave_0) entered blocking state [ 2000.338859][T18298] bridge0: port 1(bridge_slave_0) entered disabled state [ 2000.368968][T18298] bridge_slave_0: entered allmulticast mode [ 2000.435249][T18298] bridge_slave_0: entered promiscuous mode [ 2000.797770][T18298] bridge0: port 2(bridge_slave_1) entered blocking state [ 2000.805683][T18298] bridge0: port 2(bridge_slave_1) entered disabled state [ 2000.879534][T18298] bridge_slave_1: entered allmulticast mode [ 2000.930666][T18298] bridge_slave_1: entered promiscuous mode [ 2000.993244][T17845] bridge_slave_1: left allmulticast mode [ 2000.999486][T17845] bridge_slave_1: left promiscuous mode [ 2001.005970][T17845] bridge0: port 2(bridge_slave_1) entered disabled state [ 2001.138161][T17845] bridge_slave_0: left allmulticast mode [ 2001.150720][T17845] bridge_slave_0: left promiscuous mode [ 2001.157229][T17845] bridge0: port 1(bridge_slave_0) entered disabled state [ 2001.301877][T18352] netlink: 20 bytes leftover after parsing attributes in process `syz.8.2897'. [ 2001.752678][T12284] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 2001.770887][T12284] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 2001.780949][T12284] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 2001.794632][T12284] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 2001.805727][T12284] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 2002.182649][T17845] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2002.260433][T17845] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2002.321966][T17845] bond0 (unregistering): Released all slaves [ 2002.667062][T18352] 8021q: VLANs not supported on gre0 [ 2002.774086][T18285] hsr_slave_0: entered promiscuous mode [ 2002.842041][T18285] hsr_slave_1: entered promiscuous mode [ 2002.870844][T18285] debugfs: 'hsr0' already exists in 'hsr' [ 2002.876770][T18285] Cannot create hsr debugfs directory [ 2003.417175][T18298] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2003.878282][T18298] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2003.931295][T16666] Bluetooth: hci3: command tx timeout [ 2004.124008][T17845] hsr_slave_0: left promiscuous mode [ 2004.166961][T18360] netlink: 16 bytes leftover after parsing attributes in process `syz.8.2900'. [ 2004.168612][T17845] hsr_slave_1: left promiscuous mode [ 2004.220728][T17845] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2004.228311][T17845] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2004.271217][T17845] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2004.278949][T17845] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2004.424083][T17845] veth1_macvtap: left promiscuous mode [ 2004.438726][T17845] veth0_macvtap: left promiscuous mode [ 2004.455288][T17845] veth1_vlan: left promiscuous mode [ 2004.465452][T17845] veth0_vlan: left promiscuous mode [ 2006.010279][T16666] Bluetooth: hci3: command tx timeout [ 2006.301567][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 2006.308281][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 2007.564129][T17845] team0 (unregistering): Port device team_slave_1 removed [ 2007.845873][T17845] team0 (unregistering): Port device team_slave_0 removed [ 2008.092916][T16666] Bluetooth: hci3: command tx timeout [ 2009.653765][T18298] team0: Port device team_slave_0 added [ 2009.943171][T18298] team0: Port device team_slave_1 added [ 2010.269109][T16666] Bluetooth: hci3: command tx timeout [ 2011.286134][T18298] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2011.294009][T18298] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2011.320493][T18298] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2011.483213][T18388] Illegal XDP return value 4291444736 on prog (id 208) dev N/A, expect packet loss! [ 2011.636101][T18298] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2011.643578][T18298] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2011.669993][T18298] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2012.217219][T18390] netlink: 16 bytes leftover after parsing attributes in process `syz.8.2909'. [ 2012.548930][T18298] hsr_slave_0: entered promiscuous mode [ 2012.595420][T18298] hsr_slave_1: entered promiscuous mode [ 2012.616392][T18298] debugfs: 'hsr0' already exists in 'hsr' [ 2012.622698][T18298] Cannot create hsr debugfs directory [ 2014.112235][T18353] chnl_net:caif_netlink_parms(): no params data found [ 2014.942881][T17845] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2016.268145][T17845] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2017.234592][T18285] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 2017.364950][T18285] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 2017.477512][T17845] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2017.552860][T18285] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 2017.705109][T17845] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2017.760903][T18285] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 2017.828656][T16754] usb 9-1: new high-speed USB device number 14 using dummy_hcd [ 2018.058860][T16754] usb 9-1: Using ep0 maxpacket: 32 [ 2018.102486][T16754] usb 9-1: config 0 has an invalid interface number: 188 but max is 0 [ 2018.111317][T16754] usb 9-1: config 0 has no interface number 0 [ 2018.148027][T16754] usb 9-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 2018.230568][T16754] usb 9-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 2018.244793][T16754] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2018.254883][T16754] usb 9-1: Product: syz [ 2018.259366][T16754] usb 9-1: Manufacturer: syz [ 2018.264152][T16754] usb 9-1: SerialNumber: syz [ 2018.381465][T16754] usb 9-1: config 0 descriptor?? [ 2018.402264][T18403] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 2018.524879][T18298] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 2018.740876][T18403] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 2018.777475][T18298] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 2019.169098][T18298] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 2019.214468][T16754] asix 9-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 2019.252187][T18298] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 2019.260455][T16754] asix 9-1:0.188: probe with driver asix failed with error -32 [ 2020.966915][T17845] bridge_slave_1: left allmulticast mode [ 2020.974863][T16754] usb 9-1: USB disconnect, device number 14 [ 2020.982801][T17845] bridge_slave_1: left promiscuous mode [ 2020.989375][T17845] bridge0: port 2(bridge_slave_1) entered disabled state [ 2021.490018][T18417] loop6: detected capacity change from 0 to 7 [ 2021.539073][T18417] Dev loop6: unable to read RDB block 7 [ 2021.545197][T18417] loop6: unable to read partition table [ 2021.598706][T18417] loop6: partition table beyond EOD, truncated [ 2021.605268][T18417] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5) [ 2021.955489][T17845] bridge_slave_0: left allmulticast mode [ 2021.961523][T17845] bridge_slave_0: left promiscuous mode [ 2021.968069][T17845] bridge0: port 1(bridge_slave_0) entered disabled state [ 2022.151915][T17845] bridge_slave_1: left allmulticast mode [ 2022.157778][T17845] bridge_slave_1: left promiscuous mode [ 2022.164436][T17845] bridge0: port 2(bridge_slave_1) entered disabled state [ 2022.255325][T17845] bridge_slave_0: left allmulticast mode [ 2022.261342][T17845] bridge_slave_0: left promiscuous mode [ 2022.267746][T17845] bridge0: port 1(bridge_slave_0) entered disabled state [ 2022.353074][T18421] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2917'. [ 2024.267226][T18429] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input28 [ 2025.397698][T17845] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2025.460732][T17845] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2025.543722][T17845] bond0 (unregistering): Released all slaves [ 2026.268787][ T24] usb 9-1: new high-speed USB device number 15 using dummy_hcd [ 2026.372689][T17845] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2026.430306][T17845] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2026.462504][ T24] usb 9-1: Using ep0 maxpacket: 32 [ 2026.487503][T17845] bond0 (unregistering): Released all slaves [ 2026.499284][ T24] usb 9-1: config 0 has an invalid interface number: 188 but max is 0 [ 2026.507694][ T24] usb 9-1: config 0 has no interface number 0 [ 2026.541090][ T24] usb 9-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 2026.559046][T18353] bridge0: port 1(bridge_slave_0) entered blocking state [ 2026.566787][T18353] bridge0: port 1(bridge_slave_0) entered disabled state [ 2026.589614][T18353] bridge_slave_0: entered allmulticast mode [ 2026.626524][ T24] usb 9-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 2026.636051][ T24] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2026.648985][ T24] usb 9-1: Product: syz [ 2026.653343][ T24] usb 9-1: Manufacturer: syz [ 2026.658131][ T24] usb 9-1: SerialNumber: syz [ 2026.670550][T18353] bridge_slave_0: entered promiscuous mode [ 2026.688297][T18353] bridge0: port 2(bridge_slave_1) entered blocking state [ 2026.696130][T18353] bridge0: port 2(bridge_slave_1) entered disabled state [ 2026.707905][T18353] bridge_slave_1: entered allmulticast mode [ 2026.738758][ T24] usb 9-1: config 0 descriptor?? [ 2026.762871][T18353] bridge_slave_1: entered promiscuous mode [ 2026.784534][T18435] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 2027.054374][T18435] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 2027.489798][T18353] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2027.503719][ T24] asix 9-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 2027.549518][ T24] asix 9-1:0.188: probe with driver asix failed with error -32 [ 2027.563541][T18353] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2028.029072][ T915] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 2028.065836][T18353] team0: Port device team_slave_0 added [ 2028.146548][T17845] hsr_slave_0: left promiscuous mode [ 2028.156648][T17845] hsr_slave_1: left promiscuous mode [ 2028.165249][T17845] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2028.185193][T17845] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2028.220907][ T915] usb 7-1: Using ep0 maxpacket: 32 [ 2028.244938][T17845] hsr_slave_0: left promiscuous mode [ 2028.247845][ T915] usb 7-1: config 0 has an invalid interface number: 67 but max is 0 [ 2028.258921][ T915] usb 7-1: config 0 has no interface number 0 [ 2028.280752][ T915] usb 7-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 2028.290262][ T915] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2028.298799][ T915] usb 7-1: Product: syz [ 2028.303128][ T915] usb 7-1: Manufacturer: syz [ 2028.307908][ T915] usb 7-1: SerialNumber: syz [ 2028.313196][T17845] hsr_slave_1: left promiscuous mode [ 2028.323182][T17845] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2028.331525][T17845] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2028.366791][T17845] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2028.372363][ T915] usb 7-1: config 0 descriptor?? [ 2028.375359][T17845] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2028.417272][ T915] smsc95xx v2.0.0 [ 2028.421430][ T915] smsc95xx 7-1:0.67 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 2028.453841][ T915] smsc95xx 7-1:0.67: probe with driver smsc95xx failed with error -22 [ 2028.506500][T17845] veth1_macvtap: left promiscuous mode [ 2028.524488][T17845] veth0_macvtap: left promiscuous mode [ 2028.538940][T17845] veth1_vlan: left promiscuous mode [ 2028.650039][T16754] usb 9-1: USB disconnect, device number 15 [ 2028.668792][T17845] veth0_vlan: left promiscuous mode [ 2028.832055][T18446] netlink: 16 bytes leftover after parsing attributes in process `syz.8.2926'. [ 2030.479105][T17845] team0 (unregistering): Port device team_slave_1 removed [ 2030.569695][T17845] team0 (unregistering): Port device team_slave_0 removed [ 2031.071993][T18454] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input29 [ 2031.745083][T17845] team0 (unregistering): Port device team_slave_1 removed [ 2031.841933][T17845] team0 (unregistering): Port device team_slave_0 removed [ 2032.430423][T18353] team0: Port device team_slave_1 added [ 2032.539224][ T915] usb 9-1: new high-speed USB device number 16 using dummy_hcd [ 2032.627181][ T5843] usb 7-1: USB disconnect, device number 14 [ 2032.730256][ T915] usb 9-1: Using ep0 maxpacket: 32 [ 2032.776300][ T915] usb 9-1: config 0 has an invalid interface number: 188 but max is 0 [ 2032.785699][ T915] usb 9-1: config 0 has no interface number 0 [ 2032.803148][T18353] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2032.810653][T18353] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2032.837818][T18353] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2032.845161][ T915] usb 9-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 2032.919526][ T915] usb 9-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 2032.928986][ T915] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2032.937192][ T915] usb 9-1: Product: syz [ 2032.941793][ T915] usb 9-1: Manufacturer: syz [ 2032.946564][ T915] usb 9-1: SerialNumber: syz [ 2033.060956][ T915] usb 9-1: config 0 descriptor?? [ 2033.061753][T18463] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2934'. [ 2033.071472][T18461] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 2033.142868][T18463] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2934'. [ 2033.160845][T18353] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2033.168079][T18353] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2033.199012][T18353] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2033.381013][T18461] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 2033.412820][T18285] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2033.851059][ T915] asix 9-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 2033.868802][T18298] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2033.889534][ T915] asix 9-1:0.188: probe with driver asix failed with error -61 [ 2034.036819][T18353] hsr_slave_0: entered promiscuous mode [ 2034.072362][T18353] hsr_slave_1: entered promiscuous mode [ 2034.145997][T18285] 8021q: adding VLAN 0 to HW filter on device team0 [ 2034.376943][T10603] bridge0: port 1(bridge_slave_0) entered blocking state [ 2034.384538][T10603] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2034.474079][T18298] 8021q: adding VLAN 0 to HW filter on device team0 [ 2034.681005][T17858] bridge0: port 1(bridge_slave_0) entered blocking state [ 2034.689031][T17858] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2034.855013][T17858] bridge0: port 2(bridge_slave_1) entered blocking state [ 2034.862656][T17858] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2035.037420][T17858] bridge0: port 2(bridge_slave_1) entered blocking state [ 2035.045127][T17858] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2036.062305][ T915] usb 9-1: USB disconnect, device number 16 [ 2039.006857][T18353] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 2039.133614][T18353] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 2039.202297][T18493] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2941'. [ 2039.224385][T18353] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 2039.359332][T18353] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 2040.120242][T18499] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2942'. [ 2040.243999][T18499] netlink: 16 bytes leftover after parsing attributes in process `syz.8.2942'. [ 2040.284552][T18298] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2041.731030][T18298] veth0_vlan: entered promiscuous mode [ 2042.087924][T18298] veth1_vlan: entered promiscuous mode [ 2042.491843][T18353] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2042.679989][T12284] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 2042.709966][T12284] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 2042.724082][T12284] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 2042.738612][T12284] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 2042.759678][T12284] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 2042.846854][T18353] 8021q: adding VLAN 0 to HW filter on device team0 [ 2042.897762][T17964] bridge0: port 1(bridge_slave_0) entered blocking state [ 2042.905334][T17964] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2043.040659][T17964] bridge0: port 2(bridge_slave_1) entered blocking state [ 2043.048132][T17964] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2043.208941][T16754] usb 9-1: new high-speed USB device number 17 using dummy_hcd [ 2043.359519][T18298] veth0_macvtap: entered promiscuous mode [ 2043.437806][T16754] usb 9-1: Using ep0 maxpacket: 32 [ 2043.461031][T18512] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input30 [ 2043.505736][T16754] usb 9-1: config 0 has an invalid interface number: 188 but max is 0 [ 2043.514523][T16754] usb 9-1: config 0 has no interface number 0 [ 2043.552855][T16754] usb 9-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 2043.677530][T16754] usb 9-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 2043.687250][T16754] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2043.695676][T16754] usb 9-1: Product: syz [ 2043.700114][T16754] usb 9-1: Manufacturer: syz [ 2043.704902][T16754] usb 9-1: SerialNumber: syz [ 2043.780517][T18298] veth1_macvtap: entered promiscuous mode [ 2043.871819][T16754] usb 9-1: config 0 descriptor?? [ 2043.879368][T18510] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 2044.171043][T18510] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 2044.683460][T16754] asix 9-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 2044.714706][T16754] asix 9-1:0.188: probe with driver asix failed with error -61 [ 2044.721154][T18298] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2044.808922][T12284] Bluetooth: hci1: command tx timeout [ 2044.984513][T18298] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2045.028833][T17103] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 2045.104886][T17826] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2045.278703][T17103] usb 7-1: config 220 has too many interfaces: 184, using maximum allowed: 32 [ 2045.287812][T17103] usb 7-1: config 220 has 1 interface, different from the descriptor's value: 184 [ 2045.304367][T17826] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2045.347081][T17103] usb 7-1: New USB device found, idVendor=0c45, idProduct=8008, bcdDevice=e1.85 [ 2045.356901][T17103] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2045.520128][T17103] gspca_main: sn9c2028-2.14.0 probing 0c45:8008 [ 2045.551819][T17826] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2045.663627][T17103] gspca_sn9c2028: read1 error -32 [ 2045.831719][T17826] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2045.896795][T17103] gspca_sn9c2028: read1 error -71 [ 2045.907406][T17103] sn9c2028 7-1:220.0: probe with driver sn9c2028 failed with error -71 [ 2046.039304][T17103] usb 7-1: USB disconnect, device number 15 [ 2046.224027][ T5843] usb 9-1: USB disconnect, device number 17 [ 2046.302818][T17858] bridge_slave_1: left allmulticast mode [ 2046.308926][T17858] bridge_slave_1: left promiscuous mode [ 2046.315483][T17858] bridge0: port 2(bridge_slave_1) entered disabled state [ 2046.440907][T17858] bridge_slave_0: left allmulticast mode [ 2046.446896][T17858] bridge_slave_0: left promiscuous mode [ 2046.453667][T17858] bridge0: port 1(bridge_slave_0) entered disabled state [ 2046.888637][T12284] Bluetooth: hci1: command tx timeout [ 2048.143525][T18540] hugetlbfs: syz.8.2951 (18540): Using mlock ulimits for SHM_HUGETLB is obsolete [ 2051.284882][T12284] Bluetooth: hci1: command tx timeout [ 2054.129778][T12284] Bluetooth: hci1: command tx timeout [ 2056.177720][T17858] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2056.280041][T17858] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2056.348836][T17858] bond0 (unregistering): Released all slaves [ 2056.541615][T18505] chnl_net:caif_netlink_parms(): no params data found [ 2057.287006][T17858] hsr_slave_0: left promiscuous mode [ 2057.347026][T17858] hsr_slave_1: left promiscuous mode [ 2057.372729][T17858] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2057.431890][T17858] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2057.680388][T16666] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 2057.700350][T16666] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 2057.709775][T16666] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 2057.722720][T16666] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 2057.733941][T16666] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 2058.675989][T18559] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input31 [ 2059.848591][T16666] Bluetooth: hci2: command tx timeout [ 2060.861611][T17858] team0 (unregistering): Port device team_slave_1 removed [ 2061.028644][T17858] team0 (unregistering): Port device team_slave_0 removed [ 2061.930121][T16666] Bluetooth: hci2: command tx timeout [ 2062.691279][T12284] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 2062.709538][T12284] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 2062.718802][T12284] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 2062.733350][T12284] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 2062.744577][T12284] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 2063.655641][T17858] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2063.920757][T17858] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2064.015791][T16666] Bluetooth: hci2: command tx timeout [ 2064.347755][T17858] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2064.616348][T17858] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2064.840886][T18505] bridge0: port 1(bridge_slave_0) entered blocking state [ 2064.848608][T18505] bridge0: port 1(bridge_slave_0) entered disabled state [ 2064.889069][T16666] Bluetooth: hci5: command tx timeout [ 2064.895451][T18505] bridge_slave_0: entered allmulticast mode [ 2064.931748][T18505] bridge_slave_0: entered promiscuous mode [ 2065.145029][T18505] bridge0: port 2(bridge_slave_1) entered blocking state [ 2065.152617][T18505] bridge0: port 2(bridge_slave_1) entered disabled state [ 2065.194224][T18505] bridge_slave_1: entered allmulticast mode [ 2065.216898][T18505] bridge_slave_1: entered promiscuous mode [ 2065.590100][T18505] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2065.773289][T18505] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2065.928725][T17103] usb 9-1: new low-speed USB device number 18 using dummy_hcd [ 2066.089670][T16666] Bluetooth: hci2: command tx timeout [ 2066.968729][T16666] Bluetooth: hci5: command tx timeout [ 2067.143681][T18505] team0: Port device team_slave_0 added [ 2067.256434][T17858] bridge_slave_1: left allmulticast mode [ 2067.262622][T17858] bridge_slave_1: left promiscuous mode [ 2067.269297][T17858] bridge0: port 2(bridge_slave_1) entered disabled state [ 2067.340110][T17858] bridge_slave_0: left allmulticast mode [ 2067.345960][T17858] bridge_slave_0: left promiscuous mode [ 2067.352905][T17858] bridge0: port 1(bridge_slave_0) entered disabled state [ 2067.730878][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 2067.737507][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 2067.960654][T17103] usb 9-1: config 168 descriptor has 1 excess byte, ignoring [ 2067.968546][T17103] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 2067.979869][T17103] usb 9-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 2067.991984][T17103] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 2068.003486][T17103] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 2068.198608][T17103] usb 9-1: unable to read config index 1 descriptor/start: -71 [ 2068.206474][T17103] usb 9-1: can't read configurations, error -71 [ 2068.645393][T17858] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2068.706795][T17858] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2068.735470][T17858] bond0 (unregistering): Released all slaves [ 2068.819621][T18505] team0: Port device team_slave_1 added [ 2068.841185][T18552] chnl_net:caif_netlink_parms(): no params data found [ 2069.049277][T16666] Bluetooth: hci5: command tx timeout [ 2069.578049][T17858] hsr_slave_0: left promiscuous mode [ 2069.601854][T17858] hsr_slave_1: left promiscuous mode [ 2069.614892][T17858] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2069.622864][T17858] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2069.672443][T17858] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2069.680709][T17858] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2069.787984][T17858] veth1_macvtap: left promiscuous mode [ 2069.815538][T17858] veth0_macvtap: left promiscuous mode [ 2069.846602][T17858] veth1_vlan: left promiscuous mode [ 2069.879076][T17858] veth0_vlan: left promiscuous mode [ 2071.129283][T16666] Bluetooth: hci5: command tx timeout [ 2071.558543][T17858] team0 (unregistering): Port device team_slave_1 removed [ 2071.611375][T17858] team0 (unregistering): Port device team_slave_0 removed [ 2072.346376][T18618] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 2072.401957][T18505] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2072.409826][T18505] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2072.441030][T18505] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2072.603831][T18505] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2072.611751][T18505] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2072.642410][T18505] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2073.180628][T18628] QAT: failed to copy from user cfg_data. [ 2073.327440][T18572] chnl_net:caif_netlink_parms(): no params data found [ 2075.775381][T18505] hsr_slave_0: entered promiscuous mode [ 2075.832279][T18505] hsr_slave_1: entered promiscuous mode [ 2075.880841][T18505] debugfs: 'hsr0' already exists in 'hsr' [ 2075.886761][T18505] Cannot create hsr debugfs directory [ 2076.338724][T17103] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 2076.892227][T18552] bridge0: port 1(bridge_slave_0) entered blocking state [ 2076.899946][T18552] bridge0: port 1(bridge_slave_0) entered disabled state [ 2076.953203][T18552] bridge_slave_0: entered allmulticast mode [ 2076.991542][T18552] bridge_slave_0: entered promiscuous mode [ 2077.038558][T18552] bridge0: port 2(bridge_slave_1) entered blocking state [ 2077.046262][T18552] bridge0: port 2(bridge_slave_1) entered disabled state [ 2077.146416][T18552] bridge_slave_1: entered allmulticast mode [ 2077.257873][T18552] bridge_slave_1: entered promiscuous mode [ 2077.863588][T18552] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2077.927411][T18572] bridge0: port 1(bridge_slave_0) entered blocking state [ 2077.949630][T18572] bridge0: port 1(bridge_slave_0) entered disabled state [ 2077.995029][T18572] bridge_slave_0: entered allmulticast mode [ 2078.002728][T17103] usb 7-1: Using ep0 maxpacket: 8 [ 2078.014655][T18572] bridge_slave_0: entered promiscuous mode [ 2078.023932][T17103] usb 7-1: config index 0 descriptor too short (expected 1307, got 27) [ 2078.032542][T17103] usb 7-1: config 0 has an invalid interface number: 0 but max is -1 [ 2078.040910][T17103] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 2078.051307][T17103] usb 7-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30 [ 2078.091393][T18572] bridge0: port 2(bridge_slave_1) entered blocking state [ 2078.099186][T18572] bridge0: port 2(bridge_slave_1) entered disabled state [ 2078.171247][T18572] bridge_slave_1: entered allmulticast mode [ 2078.208823][T18572] bridge_slave_1: entered promiscuous mode [ 2078.308913][T18552] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2079.009287][T17103] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x7E, changing to 0xE [ 2079.021088][T17103] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0xE has invalid wMaxPacketSize 0 [ 2079.031200][T17103] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246 [ 2079.067087][T17103] usb 7-1: string descriptor 0 read error: -71 [ 2079.110167][T17103] usb 7-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 2079.119753][T17103] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2079.200940][T17103] usb 7-1: config 0 descriptor?? [ 2079.225952][T17103] usb 7-1: can't set config #0, error -71 [ 2079.247599][T18572] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2079.269909][T17103] usb 7-1: USB disconnect, device number 16 [ 2079.317713][T18552] team0: Port device team_slave_0 added [ 2079.393654][T18572] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2079.602862][T18552] team0: Port device team_slave_1 added [ 2080.308018][T18572] team0: Port device team_slave_0 added [ 2080.522717][T18552] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2080.530340][T18552] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2080.556941][T18552] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2080.706399][T18552] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2080.713698][T18552] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2080.740429][T18552] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2080.880264][T18572] team0: Port device team_slave_1 added [ 2081.275376][T17856] bridge_slave_1: left allmulticast mode [ 2081.281594][T17856] bridge_slave_1: left promiscuous mode [ 2081.288196][T17856] bridge0: port 2(bridge_slave_1) entered disabled state [ 2081.369564][T17856] bridge_slave_0: left allmulticast mode [ 2081.375528][T17856] bridge_slave_0: left promiscuous mode [ 2081.382448][T17856] bridge0: port 1(bridge_slave_0) entered disabled state [ 2082.157213][T17856] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2082.188805][T17856] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2082.226836][T17856] bond0 (unregistering): Released all slaves [ 2082.549682][T18572] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2082.556823][T18572] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2082.583386][T18572] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2082.714331][T17856] hsr_slave_0: left promiscuous mode [ 2082.771022][T17856] hsr_slave_1: left promiscuous mode [ 2082.796289][T17856] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2082.838913][T17856] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2085.931958][T17856] team0 (unregistering): Port device team_slave_1 removed [ 2086.039584][T17856] team0 (unregistering): Port device team_slave_0 removed [ 2087.085119][T18552] hsr_slave_0: entered promiscuous mode [ 2087.102025][T18552] hsr_slave_1: entered promiscuous mode [ 2087.144055][T18572] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2087.151490][T18572] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2087.178887][T18572] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2088.271919][T18572] hsr_slave_0: entered promiscuous mode [ 2088.303862][T18572] hsr_slave_1: entered promiscuous mode [ 2088.339213][T18572] debugfs: 'hsr0' already exists in 'hsr' [ 2088.345131][T18572] Cannot create hsr debugfs directory [ 2089.404848][T18505] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 2089.728692][T18505] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 2089.931093][T18505] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 2089.986453][T18505] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 2090.070918][T18689] overlayfs: overlapping lowerdir path [ 2093.374109][T18552] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 2093.962806][T18552] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 2094.167947][T18552] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 2094.397302][T18552] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 2094.643647][T18505] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2094.776810][T18505] 8021q: adding VLAN 0 to HW filter on device team0 [ 2094.931283][T10624] bridge0: port 1(bridge_slave_0) entered blocking state [ 2094.938892][T10624] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2095.109462][T10624] bridge0: port 2(bridge_slave_1) entered blocking state [ 2095.116941][T10624] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2095.886604][T18572] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 2095.944751][T18552] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2095.969712][T18572] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 2096.072326][T18572] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 2096.159101][T18572] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 2096.331315][T18552] 8021q: adding VLAN 0 to HW filter on device team0 [ 2096.447709][T17856] bridge0: port 1(bridge_slave_0) entered blocking state [ 2096.455618][T17856] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2096.647548][T17856] bridge0: port 2(bridge_slave_1) entered blocking state [ 2096.655311][T17856] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2098.075511][T18572] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2098.267743][T18572] 8021q: adding VLAN 0 to HW filter on device team0 [ 2098.503271][T10624] bridge0: port 1(bridge_slave_0) entered blocking state [ 2098.510728][T10624] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2098.705999][T17859] bridge0: port 2(bridge_slave_1) entered blocking state [ 2098.713485][T17859] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2099.122020][T18505] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2099.347921][T18572] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 2099.875562][T18552] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2100.909339][T18552] veth0_vlan: entered promiscuous mode [ 2101.112300][T18552] veth1_vlan: entered promiscuous mode [ 2101.758289][T18552] veth0_macvtap: entered promiscuous mode [ 2101.881810][T18552] veth1_macvtap: entered promiscuous mode [ 2102.171168][T12284] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 2102.190014][T12284] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 2102.214297][T12284] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 2102.229558][T12284] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 2102.256120][T12284] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 2102.397004][T18552] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2102.510788][T18552] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2102.836669][T18572] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2102.866582][T17841] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2102.952864][T10624] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2103.004755][T10624] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2103.162214][T10624] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2104.419553][T16666] Bluetooth: hci3: command tx timeout [ 2105.181952][T18744] chnl_net:caif_netlink_parms(): no params data found [ 2106.171782][T18764] overlayfs: workdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 2106.490052][T16666] Bluetooth: hci3: command tx timeout [ 2106.948811][T17856] bridge_slave_1: left allmulticast mode [ 2106.954584][T17856] bridge_slave_1: left promiscuous mode [ 2106.960927][T17856] bridge0: port 2(bridge_slave_1) entered disabled state [ 2107.011902][T17856] bridge_slave_0: left allmulticast mode [ 2107.017760][T17856] bridge_slave_0: left promiscuous mode [ 2107.025129][T17856] bridge0: port 1(bridge_slave_0) entered disabled state [ 2108.108894][T12284] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 2108.119070][T12284] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 2108.138133][T12284] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 2108.163004][T12284] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 2108.180501][T12284] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 2108.239619][T17856] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2108.294636][T17856] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2108.331828][T17856] bond0 (unregistering): Released all slaves [ 2108.570498][T12284] Bluetooth: hci3: command tx timeout [ 2108.633812][T17856] hsr_slave_0: left promiscuous mode [ 2108.692225][T17856] hsr_slave_1: left promiscuous mode [ 2108.744283][T17856] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2108.779965][T17856] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2110.015723][T17856] team0 (unregistering): Port device team_slave_1 removed [ 2110.143334][T17856] team0 (unregistering): Port device team_slave_0 removed [ 2110.326362][T12284] Bluetooth: hci1: command tx timeout [ 2110.648695][T12284] Bluetooth: hci3: command tx timeout [ 2110.689006][T18787] 9pnet_fd: p9_fd_create_unix (18787): address too long: ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 2111.624091][T18744] bridge0: port 1(bridge_slave_0) entered blocking state [ 2111.724498][T18744] bridge0: port 1(bridge_slave_0) entered disabled state [ 2111.983124][T18744] bridge_slave_0: entered allmulticast mode [ 2112.033460][T18744] bridge_slave_0: entered promiscuous mode [ 2112.104997][T18572] veth0_vlan: entered promiscuous mode [ 2112.193440][T18744] bridge0: port 2(bridge_slave_1) entered blocking state [ 2112.201868][T18744] bridge0: port 2(bridge_slave_1) entered disabled state [ 2112.275719][T18744] bridge_slave_1: entered allmulticast mode [ 2112.309711][T18744] bridge_slave_1: entered promiscuous mode [ 2112.409153][T12284] Bluetooth: hci1: command tx timeout [ 2112.756222][T18744] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2112.783457][T18572] veth1_vlan: entered promiscuous mode [ 2112.936571][T18744] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2113.456496][T18744] team0: Port device team_slave_0 added [ 2113.673475][T18744] team0: Port device team_slave_1 added [ 2113.864035][T18572] veth0_macvtap: entered promiscuous mode [ 2114.156567][T18572] veth1_macvtap: entered promiscuous mode [ 2114.296946][T18744] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2114.304306][T18744] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2114.330814][T18744] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2114.482906][T18744] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2114.490470][T18744] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2114.518194][T18744] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2114.539840][T12284] Bluetooth: hci1: command tx timeout [ 2115.332446][T18572] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2115.355695][T18572] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2115.459601][T17958] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2115.482647][T17958] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2115.494502][T17958] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2115.509946][T17958] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2115.776511][T17858] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2115.786355][T17858] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2115.858709][T18744] hsr_slave_0: entered promiscuous mode [ 2115.894619][T18744] hsr_slave_1: entered promiscuous mode [ 2115.920406][T18744] debugfs: 'hsr0' already exists in 'hsr' [ 2115.926267][T18744] Cannot create hsr debugfs directory [ 2116.569631][T12284] Bluetooth: hci1: command tx timeout [ 2116.735501][T17822] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2116.746638][T17822] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2117.039082][T18776] chnl_net:caif_netlink_parms(): no params data found [ 2117.379835][T18814] overlayfs: workdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 2118.316832][T16666] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 2118.331782][T16666] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 2118.341556][T16666] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 2118.372951][T16666] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 2118.386775][T16666] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 2120.488807][T16666] Bluetooth: hci6: command tx timeout [ 2120.495330][T18776] bridge0: port 1(bridge_slave_0) entered blocking state [ 2120.503339][T18776] bridge0: port 1(bridge_slave_0) entered disabled state [ 2120.553967][T18776] bridge_slave_0: entered allmulticast mode [ 2120.651319][T18776] bridge_slave_0: entered promiscuous mode [ 2120.873377][T18776] bridge0: port 2(bridge_slave_1) entered blocking state [ 2120.881327][T18776] bridge0: port 2(bridge_slave_1) entered disabled state [ 2120.916738][T18776] bridge_slave_1: entered allmulticast mode [ 2120.962240][T18776] bridge_slave_1: entered promiscuous mode [ 2121.546036][T17965] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2121.679743][T18776] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2121.923720][T17965] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2122.033180][T18776] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2122.084707][T17965] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2122.568909][T16666] Bluetooth: hci6: command tx timeout [ 2122.714296][T17965] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2122.833736][T18776] team0: Port device team_slave_0 added [ 2122.939709][T18776] team0: Port device team_slave_1 added [ 2123.820634][T18776] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2123.827812][T18776] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2123.854481][T18776] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2124.148068][T18744] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 2124.290670][T18744] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 2124.407380][T18851] netlink: 'syz.8.3013': attribute type 12 has an invalid length. [ 2124.433551][T18744] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 2124.464190][T12284] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 2124.472909][T12284] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 2124.482607][T12284] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 2124.500021][T12284] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 2124.521284][T12284] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 2124.607345][T18776] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2124.614565][T18776] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2124.642643][T18776] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2124.654547][T16666] Bluetooth: hci6: command tx timeout [ 2125.001478][T18744] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 2125.201703][T18821] chnl_net:caif_netlink_parms(): no params data found [ 2125.602993][T18858] overlayfs: workdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 2126.141410][T18776] hsr_slave_0: entered promiscuous mode [ 2126.161689][T18776] hsr_slave_1: entered promiscuous mode [ 2126.210747][T18776] debugfs: 'hsr0' already exists in 'hsr' [ 2126.216666][T18776] Cannot create hsr debugfs directory [ 2126.226475][T17965] bridge_slave_1: left allmulticast mode [ 2126.232695][T17965] bridge_slave_1: left promiscuous mode [ 2126.239561][T17965] bridge0: port 2(bridge_slave_1) entered disabled state [ 2130.217544][T16666] Bluetooth: hci2: command tx timeout [ 2130.223365][T12284] Bluetooth: hci6: command tx timeout [ 2131.203647][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 2131.210503][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 2132.248654][T15237] Bluetooth: hci2: command tx timeout [ 2132.639629][T17965] bridge_slave_0: left allmulticast mode [ 2132.645492][T17965] bridge_slave_0: left promiscuous mode [ 2132.652074][T17965] bridge0: port 1(bridge_slave_0) entered disabled state [ 2134.504895][T15237] Bluetooth: hci2: command tx timeout [ 2135.543317][T17965] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2135.586806][T17965] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2135.624226][T17965] bond0 (unregistering): Released all slaves [ 2136.589082][T15237] Bluetooth: hci2: command tx timeout [ 2137.812751][T17965] hsr_slave_0: left promiscuous mode [ 2137.849574][T17965] hsr_slave_1: left promiscuous mode [ 2137.857430][T17965] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2137.865333][T17965] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2137.928779][T17965] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2137.936457][T17965] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2138.033627][T17965] veth1_macvtap: left promiscuous mode [ 2138.043200][T17965] veth0_macvtap: left promiscuous mode [ 2138.068702][T17965] veth1_vlan: left promiscuous mode [ 2138.088696][T17965] veth0_vlan: left promiscuous mode [ 2139.673874][T17965] team0 (unregistering): Port device team_slave_1 removed [ 2139.725804][T17965] team0 (unregistering): Port device team_slave_0 removed [ 2140.604381][T18821] bridge0: port 1(bridge_slave_0) entered blocking state [ 2140.617993][T18821] bridge0: port 1(bridge_slave_0) entered disabled state [ 2140.645060][T18821] bridge_slave_0: entered allmulticast mode [ 2140.657460][T18821] bridge_slave_0: entered promiscuous mode [ 2140.753160][T18821] bridge0: port 2(bridge_slave_1) entered blocking state [ 2140.761252][T18821] bridge0: port 2(bridge_slave_1) entered disabled state [ 2140.829122][T18821] bridge_slave_1: entered allmulticast mode [ 2140.856247][T18821] bridge_slave_1: entered promiscuous mode [ 2141.055540][T18884] netlink: 'syz.8.3020': attribute type 12 has an invalid length. [ 2141.322388][T18821] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2141.546977][T18821] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2141.686115][T18889] overlayfs: workdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 2142.134404][T17965] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2142.203797][T18821] team0: Port device team_slave_0 added [ 2142.333827][T17965] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2142.399848][T18821] team0: Port device team_slave_1 added [ 2142.536507][T17965] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2142.897897][T17965] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2142.941423][T18821] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2142.949672][T18821] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2142.978758][T18821] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2143.078949][T18854] chnl_net:caif_netlink_parms(): no params data found [ 2143.172525][T18821] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2143.181238][T18821] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2143.207650][T18821] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2143.463305][T18744] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2143.973010][T18776] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 2144.119518][T18776] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 2144.947770][T18821] hsr_slave_0: entered promiscuous mode [ 2144.982811][T18821] hsr_slave_1: entered promiscuous mode [ 2145.508622][T18776] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 2145.700985][T18776] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 2146.453758][T18744] 8021q: adding VLAN 0 to HW filter on device team0 [ 2147.005351][T10603] bridge0: port 1(bridge_slave_0) entered blocking state [ 2147.012967][T10603] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2147.141112][T17965] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2147.402811][T17965] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2147.555502][T10603] bridge0: port 2(bridge_slave_1) entered blocking state [ 2147.563357][T10603] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2147.650835][T17965] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2147.905796][T17965] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2148.740316][T18854] bridge0: port 1(bridge_slave_0) entered blocking state [ 2148.747790][T18854] bridge0: port 1(bridge_slave_0) entered disabled state [ 2148.769257][T18854] bridge_slave_0: entered allmulticast mode [ 2148.789101][T18854] bridge_slave_0: entered promiscuous mode [ 2148.945816][T18854] bridge0: port 2(bridge_slave_1) entered blocking state [ 2148.953584][T18854] bridge0: port 2(bridge_slave_1) entered disabled state [ 2149.021310][T18917] overlayfs: workdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 2149.059028][T18854] bridge_slave_1: entered allmulticast mode [ 2149.079483][T18854] bridge_slave_1: entered promiscuous mode [ 2149.541493][T18854] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2149.743767][T18854] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2149.895642][T17965] bridge_slave_1: left allmulticast mode [ 2149.901673][T17965] bridge_slave_1: left promiscuous mode [ 2149.908215][T17965] bridge0: port 2(bridge_slave_1) entered disabled state [ 2149.939861][T17965] bridge_slave_0: left allmulticast mode [ 2149.945718][T17965] bridge_slave_0: left promiscuous mode [ 2149.952589][T17965] bridge0: port 1(bridge_slave_0) entered disabled state [ 2150.041339][T17965] bridge_slave_1: left allmulticast mode [ 2150.047202][T17965] bridge_slave_1: left promiscuous mode [ 2150.060755][T17965] bridge0: port 2(bridge_slave_1) entered disabled state [ 2150.116224][T17965] bridge_slave_0: left allmulticast mode [ 2150.122768][T17965] bridge_slave_0: left promiscuous mode [ 2150.129404][T17965] bridge0: port 1(bridge_slave_0) entered disabled state [ 2150.216808][ T30] audit: type=1326 audit(1769573958.729:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18920 comm="syz.8.3030" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f7d49d9aeb9 code=0x0 [ 2151.151763][T17965] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2151.194046][T17965] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2151.224227][T17965] bond0 (unregistering): Released all slaves [ 2151.256706][T17965] bond1 (unregistering): Released all slaves [ 2151.602118][T17965] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2151.638729][T17965] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2151.665761][T17965] bond0 (unregistering): Released all slaves [ 2152.003010][T18854] team0: Port device team_slave_0 added [ 2152.261177][T18776] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2152.387111][T18854] team0: Port device team_slave_1 added [ 2152.459607][T18821] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 2152.550668][T18821] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 2152.906918][T18821] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 2152.976898][T18854] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2152.984373][T18854] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2153.011857][T18854] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2153.102552][T18821] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 2153.196363][T18854] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2153.208491][T18854] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2153.236159][T18854] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2154.292616][T18776] 8021q: adding VLAN 0 to HW filter on device team0 [ 2155.270883][T17965] hsr_slave_0: left promiscuous mode [ 2155.289782][T17965] hsr_slave_1: left promiscuous mode [ 2155.297441][T17965] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2155.305275][T17965] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2155.323919][T17965] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2155.332133][T17965] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2155.650370][T17965] hsr_slave_0: left promiscuous mode [ 2155.671744][T17965] hsr_slave_1: left promiscuous mode [ 2155.705655][T17965] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2155.713588][T17965] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2155.737429][T17965] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2155.745427][T17965] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2156.050198][T17965] veth1_macvtap: left promiscuous mode [ 2156.068748][T17965] veth0_macvtap: left promiscuous mode [ 2156.108805][T17965] veth1_vlan: left promiscuous mode [ 2156.133078][T17965] veth0_vlan: left promiscuous mode [ 2156.225569][T17965] veth1_macvtap: left promiscuous mode [ 2156.283554][T17965] veth0_macvtap: left promiscuous mode [ 2156.325761][T17965] veth1_vlan: left promiscuous mode [ 2156.359413][T17965] veth0_vlan: left promiscuous mode [ 2158.318986][T17965] team0 (unregistering): Port device team_slave_1 removed [ 2158.375589][T17965] team0 (unregistering): Port device team_slave_0 removed [ 2159.205383][T17965] team0 (unregistering): Port device team_slave_1 removed [ 2159.265167][T17965] team0 (unregistering): Port device team_slave_0 removed [ 2159.709392][T10624] bridge0: port 1(bridge_slave_0) entered blocking state [ 2159.716876][T10624] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2160.061581][T17858] bridge0: port 2(bridge_slave_1) entered blocking state [ 2160.069178][T17858] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2160.216384][T18854] hsr_slave_0: entered promiscuous mode [ 2160.247132][T18854] hsr_slave_1: entered promiscuous mode [ 2160.264938][T18854] debugfs: 'hsr0' already exists in 'hsr' [ 2160.273984][T18854] Cannot create hsr debugfs directory [ 2161.234411][T18948] overlayfs: workdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 2161.723028][T16666] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 2161.732100][T16666] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 2161.741903][T16666] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 2161.767852][T16666] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 2161.791330][T16666] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 2163.331712][T18821] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2163.783196][T18821] 8021q: adding VLAN 0 to HW filter on device team0 [ 2163.938611][T16666] Bluetooth: hci0: command tx timeout [ 2164.065127][T17858] bridge0: port 1(bridge_slave_0) entered blocking state [ 2164.072728][T17858] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2164.265482][T17858] bridge0: port 2(bridge_slave_1) entered blocking state [ 2164.273075][T17858] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2164.496338][T18854] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 2166.011525][T16666] Bluetooth: hci0: command tx timeout [ 2166.389082][T10603] bridge_slave_1: left allmulticast mode [ 2166.394944][T10603] bridge_slave_1: left promiscuous mode [ 2166.401903][T10603] bridge0: port 2(bridge_slave_1) entered disabled state [ 2166.553080][T10603] bridge_slave_0: left allmulticast mode [ 2166.559145][T10603] bridge_slave_0: left promiscuous mode [ 2166.565794][T10603] bridge0: port 1(bridge_slave_0) entered disabled state [ 2166.876348][T18972] loop2: detected capacity change from 0 to 7 [ 2166.899867][T18972] Dev loop2: unable to read RDB block 7 [ 2166.905858][T18972] loop2: unable to read partition table [ 2166.927422][T18972] loop2: partition table beyond EOD, truncated [ 2166.934175][T18972] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 2167.461509][T10603] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2167.512225][T10603] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2167.547047][T10603] bond0 (unregistering): Released all slaves [ 2167.612020][T18854] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 2167.860370][T18854] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 2167.983904][T18978] overlayfs: workdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 2168.088825][T16666] Bluetooth: hci0: command tx timeout [ 2168.116219][T10603] hsr_slave_0: left promiscuous mode [ 2168.145828][T10603] hsr_slave_1: left promiscuous mode [ 2168.170189][T10603] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2168.200649][T10603] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2168.387704][T15237] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 2168.400560][T15237] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 2168.421943][T15237] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 2168.470643][T15237] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 2168.499388][T15237] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 2169.490119][T10603] team0 (unregistering): Port device team_slave_1 removed [ 2169.563638][T10603] team0 (unregistering): Port device team_slave_0 removed [ 2170.168901][T15237] Bluetooth: hci0: command tx timeout [ 2170.207760][T18854] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 2170.464333][T18950] chnl_net:caif_netlink_parms(): no params data found [ 2170.568688][T15237] Bluetooth: hci3: command tx timeout [ 2172.649604][T15237] Bluetooth: hci3: command tx timeout [ 2173.636603][T18950] bridge0: port 1(bridge_slave_0) entered blocking state [ 2173.644288][T18950] bridge0: port 1(bridge_slave_0) entered disabled state [ 2173.708680][T18950] bridge_slave_0: entered allmulticast mode [ 2173.749229][T18950] bridge_slave_0: entered promiscuous mode [ 2173.970633][T18950] bridge0: port 2(bridge_slave_1) entered blocking state [ 2173.978155][T18950] bridge0: port 2(bridge_slave_1) entered disabled state [ 2174.043470][T18950] bridge_slave_1: entered allmulticast mode [ 2174.099854][T18950] bridge_slave_1: entered promiscuous mode [ 2175.562485][T15237] Bluetooth: hci3: command tx timeout [ 2177.640435][T15237] Bluetooth: hci3: command tx timeout [ 2179.086248][T18950] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2179.190666][T18950] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2179.689924][T16666] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 2179.700318][T16666] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 2179.712767][T16666] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 2179.735740][T16666] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 2179.748134][T16666] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 2179.914082][T18950] team0: Port device team_slave_0 added [ 2179.960974][T10603] bridge_slave_1: left allmulticast mode [ 2179.966803][T10603] bridge_slave_1: left promiscuous mode [ 2179.973581][T10603] bridge0: port 2(bridge_slave_1) entered disabled state [ 2180.033275][T10603] bridge_slave_0: left allmulticast mode [ 2180.039314][T10603] bridge_slave_0: left promiscuous mode [ 2180.045845][T10603] bridge0: port 1(bridge_slave_0) entered disabled state [ 2180.884981][T10603] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2180.938750][T10603] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2180.980366][T10603] bond0 (unregistering): Released all slaves [ 2181.048827][T18950] team0: Port device team_slave_1 added [ 2181.297145][T10603] hsr_slave_0: left promiscuous mode [ 2181.306062][T10603] hsr_slave_1: left promiscuous mode [ 2181.318226][T10603] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2181.328100][T10603] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2181.768750][T15237] Bluetooth: hci1: command tx timeout [ 2182.033532][T10603] team0 (unregistering): Port device team_slave_1 removed [ 2182.130382][T10603] team0 (unregistering): Port device team_slave_0 removed [ 2183.078640][T18950] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2183.085963][T18950] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2183.114987][T18950] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2183.171302][T18979] chnl_net:caif_netlink_parms(): no params data found [ 2183.336137][T18950] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2183.343557][T18950] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2183.370105][T18950] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2183.850572][T15237] Bluetooth: hci1: command tx timeout [ 2184.584023][T16666] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 2184.596230][T16666] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 2184.607846][T16666] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 2184.628006][T16666] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 2184.660213][T16666] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 2184.917894][T18950] hsr_slave_0: entered promiscuous mode [ 2184.954864][T18950] hsr_slave_1: entered promiscuous mode [ 2184.991120][T18950] debugfs: 'hsr0' already exists in 'hsr' [ 2184.997038][T18950] Cannot create hsr debugfs directory [ 2185.901927][T19021] overlayfs: workdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 2185.929516][T15237] Bluetooth: hci1: command tx timeout [ 2186.165651][T18979] bridge0: port 1(bridge_slave_0) entered blocking state [ 2186.173476][T18979] bridge0: port 1(bridge_slave_0) entered disabled state [ 2186.222366][T18979] bridge_slave_0: entered allmulticast mode [ 2186.242204][T18979] bridge_slave_0: entered promiscuous mode [ 2186.417214][T18979] bridge0: port 2(bridge_slave_1) entered blocking state [ 2186.424785][T18979] bridge0: port 2(bridge_slave_1) entered disabled state [ 2186.458989][T18979] bridge_slave_1: entered allmulticast mode [ 2186.478677][T18979] bridge_slave_1: entered promiscuous mode [ 2186.747907][T19006] chnl_net:caif_netlink_parms(): no params data found [ 2186.808609][T15237] Bluetooth: hci5: command tx timeout [ 2187.137850][T18979] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2187.343524][T18979] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2188.011815][T15237] Bluetooth: hci1: command tx timeout [ 2188.054475][T18979] team0: Port device team_slave_0 added [ 2188.119364][T10603] bridge_slave_1: left allmulticast mode [ 2188.126325][T10603] bridge_slave_1: left promiscuous mode [ 2188.136963][T10603] bridge0: port 2(bridge_slave_1) entered disabled state [ 2188.199021][T10603] bridge_slave_0: left allmulticast mode [ 2188.204977][T10603] bridge_slave_0: left promiscuous mode [ 2188.212104][T10603] bridge0: port 1(bridge_slave_0) entered disabled state [ 2188.442056][T19033] loop8: detected capacity change from 0 to 2048 [ 2188.485264][T19033] UDF-fs: error (device loop8): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 2188.568772][T19033] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 2188.888718][T15237] Bluetooth: hci5: command tx timeout [ 2188.909867][T10603] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2188.950037][T10603] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2188.985939][T10603] bond0 (unregistering): Released all slaves [ 2189.059341][T18979] team0: Port device team_slave_1 added [ 2189.614494][T10603] hsr_slave_0: left promiscuous mode [ 2190.273219][T10603] hsr_slave_1: left promiscuous mode [ 2190.300017][T10603] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2190.331168][T10603] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2190.610099][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 2190.616724][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 2190.978677][T15237] Bluetooth: hci5: command tx timeout [ 2193.908601][T15237] Bluetooth: hci5: command tx timeout [ 2196.913528][T10603] team0 (unregistering): Port device team_slave_1 removed [ 2197.001198][T10603] team0 (unregistering): Port device team_slave_0 removed [ 2197.615231][T18979] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2197.623631][T18979] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2197.651875][T18979] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2197.980421][T18979] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2197.987562][T18979] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2198.013971][T18979] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2198.198288][T19006] bridge0: port 1(bridge_slave_0) entered blocking state [ 2198.205873][T19006] bridge0: port 1(bridge_slave_0) entered disabled state [ 2198.239306][T19006] bridge_slave_0: entered allmulticast mode [ 2198.274675][T19006] bridge_slave_0: entered promiscuous mode [ 2198.297315][T19006] bridge0: port 2(bridge_slave_1) entered blocking state [ 2198.304878][T19006] bridge0: port 2(bridge_slave_1) entered disabled state [ 2198.338897][T19006] bridge_slave_1: entered allmulticast mode [ 2198.348845][T19006] bridge_slave_1: entered promiscuous mode [ 2199.037614][T19014] chnl_net:caif_netlink_parms(): no params data found [ 2199.165221][T19006] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2199.226212][T18979] hsr_slave_0: entered promiscuous mode [ 2199.254105][T18979] hsr_slave_1: entered promiscuous mode [ 2199.471295][T19006] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2200.172130][T19006] team0: Port device team_slave_0 added [ 2200.256301][T18950] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 2200.342949][T19006] team0: Port device team_slave_1 added [ 2200.423363][T18950] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 2200.762257][T18950] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 2201.097111][T18950] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 2201.186530][T19006] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2201.193875][T19006] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2201.222280][T19006] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2201.517030][T19006] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2201.524680][T19006] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2201.552288][T19006] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2202.443920][T19014] bridge0: port 1(bridge_slave_0) entered blocking state [ 2202.451589][T19014] bridge0: port 1(bridge_slave_0) entered disabled state [ 2202.499978][T19014] bridge_slave_0: entered allmulticast mode [ 2202.534795][T19014] bridge_slave_0: entered promiscuous mode [ 2202.781545][T19014] bridge0: port 2(bridge_slave_1) entered blocking state [ 2202.789224][T19014] bridge0: port 2(bridge_slave_1) entered disabled state [ 2202.800916][T19014] bridge_slave_1: entered allmulticast mode [ 2202.812836][T19014] bridge_slave_1: entered promiscuous mode [ 2203.303952][T19006] hsr_slave_0: entered promiscuous mode [ 2203.322266][T19006] hsr_slave_1: entered promiscuous mode [ 2203.340947][T19006] debugfs: 'hsr0' already exists in 'hsr' [ 2203.346860][T19006] Cannot create hsr debugfs directory [ 2203.433214][T19014] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2203.459949][T17859] bridge_slave_1: left allmulticast mode [ 2203.465786][T17859] bridge_slave_1: left promiscuous mode [ 2203.472722][T17859] bridge0: port 2(bridge_slave_1) entered disabled state [ 2203.569799][T17859] bridge_slave_0: left allmulticast mode [ 2203.575657][T17859] bridge_slave_0: left promiscuous mode [ 2203.582356][T17859] bridge0: port 1(bridge_slave_0) entered disabled state [ 2204.254095][T17859] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2204.300014][T17859] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2204.325548][T17859] bond0 (unregistering): Released all slaves [ 2204.366486][T19014] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2204.819734][T17859] hsr_slave_0: left promiscuous mode [ 2204.859229][T17859] hsr_slave_1: left promiscuous mode [ 2204.866948][T17859] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2204.901636][T17859] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2206.330536][T17859] team0 (unregistering): Port device team_slave_1 removed [ 2206.458815][T17859] team0 (unregistering): Port device team_slave_0 removed [ 2207.426822][T19014] team0: Port device team_slave_0 added [ 2207.918691][T19014] team0: Port device team_slave_1 added [ 2212.626305][T19014] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2212.633769][T19014] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2212.660376][T19014] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2212.774326][T19014] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2212.781697][T19014] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2212.810837][T19014] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2213.435882][T18979] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 2213.492411][T18979] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 2213.745593][T18979] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 2213.796362][T18979] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 2213.949431][T19014] hsr_slave_0: entered promiscuous mode [ 2213.974595][T19014] hsr_slave_1: entered promiscuous mode [ 2214.000744][T19014] debugfs: 'hsr0' already exists in 'hsr' [ 2214.006664][T19014] Cannot create hsr debugfs directory [ 2214.599654][T18950] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2215.177855][T18950] 8021q: adding VLAN 0 to HW filter on device team0 [ 2215.485666][T17841] bridge0: port 1(bridge_slave_0) entered blocking state [ 2215.493235][T17841] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2215.613846][T17841] bridge0: port 2(bridge_slave_1) entered blocking state [ 2215.621465][T17841] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2215.972576][T19006] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 2216.103142][T19006] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 2216.172472][T19006] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 2216.311462][T19006] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 2216.717280][T18979] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2217.097529][T18979] 8021q: adding VLAN 0 to HW filter on device team0 [ 2217.392880][T17822] bridge0: port 1(bridge_slave_0) entered blocking state [ 2217.400472][T17822] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2218.391246][T17856] bridge0: port 2(bridge_slave_1) entered blocking state [ 2218.399134][T17856] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2218.443618][T19014] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 2218.519093][T19014] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 2218.667734][T19014] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 2218.738124][T19014] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 2219.388745][ C0] vxcan0: j1939_tp_rxtimer: 0xffff88801329bc00: rx timeout, send abort [ 2219.418014][T18950] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2219.563111][T19006] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2219.846679][T19006] 8021q: adding VLAN 0 to HW filter on device team0 [ 2219.889534][ C0] vxcan0: j1939_tp_rxtimer: 0xffff888051b79400: rx timeout, send abort [ 2219.898073][ C0] vxcan0: j1939_tp_rxtimer: 0xffff88801329bc00: abort rx timeout. Force session deactivation [ 2220.031124][T17856] bridge0: port 1(bridge_slave_0) entered blocking state [ 2220.038708][T17856] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2220.215395][T17965] bridge0: port 2(bridge_slave_1) entered blocking state [ 2220.222949][T17965] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2220.398063][ C0] vxcan0: j1939_tp_rxtimer: 0xffff888051b79400: abort rx timeout. Force session deactivation [ 2220.456444][T19092] tmpfs: Bad value for 'nr_blocks' [ 2221.023351][T19097] loop8: detected capacity change from 0 to 256 [ 2221.145392][T19014] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2221.398222][T19014] 8021q: adding VLAN 0 to HW filter on device team0 [ 2222.154522][T19014] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 2222.166782][T19014] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 2223.301628][T17841] bridge0: port 1(bridge_slave_0) entered blocking state [ 2223.309284][T17841] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2223.427260][T17841] bridge0: port 2(bridge_slave_1) entered blocking state [ 2223.434944][T17841] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2223.911938][T16666] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 2223.921915][T16666] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 2223.937105][T16666] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 2223.953484][T16666] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 2223.975673][T16666] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 2224.154663][T18979] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2225.565137][T18979] veth0_vlan: entered promiscuous mode [ 2226.129146][T15237] Bluetooth: hci2: command tx timeout [ 2226.344746][T19006] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2226.666053][T18979] veth1_vlan: entered promiscuous mode [ 2227.429894][T19014] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2227.703911][T19104] chnl_net:caif_netlink_parms(): no params data found [ 2228.180957][T15237] Bluetooth: hci2: command tx timeout [ 2228.316460][T19006] veth0_vlan: entered promiscuous mode [ 2228.983387][T19006] veth1_vlan: entered promiscuous mode [ 2232.331336][T15237] Bluetooth: hci2: command tx timeout [ 2234.826930][T15237] Bluetooth: hci2: command tx timeout [ 2236.620023][T16666] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 2236.637020][T16666] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 2236.652847][T16666] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 2236.667629][T16666] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 2236.679680][T16666] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 2236.989551][T19006] veth0_macvtap: entered promiscuous mode [ 2237.900418][T19006] veth1_macvtap: entered promiscuous mode [ 2238.809709][T16666] Bluetooth: hci6: command tx timeout [ 2238.903674][T19006] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2239.044572][T19104] bridge0: port 1(bridge_slave_0) entered blocking state [ 2239.052567][T19104] bridge0: port 1(bridge_slave_0) entered disabled state [ 2239.106134][T19104] bridge_slave_0: entered allmulticast mode [ 2239.117896][T19104] bridge_slave_0: entered promiscuous mode [ 2239.409403][T19104] bridge0: port 2(bridge_slave_1) entered blocking state [ 2239.417050][T19104] bridge0: port 2(bridge_slave_1) entered disabled state [ 2239.449513][T19104] bridge_slave_1: entered allmulticast mode [ 2239.479795][T19104] bridge_slave_1: entered promiscuous mode [ 2240.083165][T19104] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2240.216341][T19151] bridge1: entered promiscuous mode [ 2240.332374][T19152] loop8: detected capacity change from 0 to 2048 [ 2240.387149][T19104] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2240.491955][T19152] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 2240.592530][T15237] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 2240.601862][T15237] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 2240.611397][T15237] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 2240.624343][T15237] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 2240.635486][T15237] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 2240.652015][T19152] ext4 filesystem being mounted at /176/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 2240.831231][T17354] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2240.889334][T16666] Bluetooth: hci6: command tx timeout [ 2241.260741][T19160] loop8: detected capacity change from 0 to 128 [ 2241.313474][T19104] team0: Port device team_slave_0 added [ 2241.331143][T17826] bridge_slave_1: left allmulticast mode [ 2241.336980][T17826] bridge_slave_1: left promiscuous mode [ 2241.343620][T17826] bridge0: port 2(bridge_slave_1) entered disabled state [ 2241.386548][T19160] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 2241.400210][T17826] bridge_slave_0: left allmulticast mode [ 2241.406055][T17826] bridge_slave_0: left promiscuous mode [ 2241.413093][T17826] bridge0: port 1(bridge_slave_0) entered disabled state [ 2241.473992][T19160] ext4 filesystem being mounted at /177/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 2241.639985][T19160] EXT4-fs (loop8): Online defrag not supported for non-extent files [ 2241.658827][ T30] audit: type=1800 audit(1769574050.149:87): pid=19160 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.3072" name="file2" dev="loop8" ino=13 res=0 errno=0 [ 2241.833380][T17354] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 2242.474127][T17826] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2242.516844][T17826] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2242.554798][T17826] bond0 (unregistering): Released all slaves [ 2242.743933][T19104] team0: Port device team_slave_1 added [ 2242.791258][T17826] hsr_slave_0: left promiscuous mode [ 2242.816349][T16666] Bluetooth: hci0: command tx timeout [ 2242.827747][T17826] hsr_slave_1: left promiscuous mode [ 2242.838070][T17826] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2242.868893][T17826] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2242.970157][T16666] Bluetooth: hci6: command tx timeout [ 2243.603677][T17826] team0 (unregistering): Port device team_slave_1 removed [ 2243.647794][T17826] team0 (unregistering): Port device team_slave_0 removed [ 2244.509178][T19131] chnl_net:caif_netlink_parms(): no params data found [ 2244.560043][T19104] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2244.567177][T19104] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2244.593803][T19104] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2244.670981][T19104] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2244.678138][T19104] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2244.704851][T19104] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2244.892616][T16666] Bluetooth: hci0: command tx timeout [ 2245.051845][T16666] Bluetooth: hci6: command tx timeout [ 2246.298779][T19104] hsr_slave_0: entered promiscuous mode [ 2246.366186][T19104] hsr_slave_1: entered promiscuous mode [ 2246.392552][T15237] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 2246.407074][T15237] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 2246.427929][T15237] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 2246.442336][T15237] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 2246.453623][T15237] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 2246.524874][T19104] debugfs: 'hsr0' already exists in 'hsr' [ 2246.530893][T19104] Cannot create hsr debugfs directory [ 2246.969492][T15237] Bluetooth: hci0: command tx timeout [ 2248.588765][T15237] Bluetooth: hci1: command tx timeout [ 2249.049157][T15237] Bluetooth: hci0: command tx timeout [ 2251.248935][T16666] Bluetooth: hci1: command tx timeout [ 2252.066651][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 2252.073547][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 2254.053716][T19180] Bluetooth: hci1: command tx timeout [ 2256.116859][T19180] Bluetooth: hci1: command tx timeout [ 2256.434112][T19131] bridge0: port 1(bridge_slave_0) entered blocking state [ 2256.442820][T19131] bridge0: port 1(bridge_slave_0) entered disabled state [ 2256.481146][T19131] bridge_slave_0: entered allmulticast mode [ 2256.519208][T19131] bridge_slave_0: entered promiscuous mode [ 2256.852614][T19131] bridge0: port 2(bridge_slave_1) entered blocking state [ 2256.860262][T19131] bridge0: port 2(bridge_slave_1) entered disabled state [ 2256.892088][T19131] bridge_slave_1: entered allmulticast mode [ 2256.922351][T19131] bridge_slave_1: entered promiscuous mode [ 2257.471249][T19131] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2257.741928][T19131] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2257.824419][T19188] loop8: detected capacity change from 0 to 2048 [ 2257.899066][T19188] loop8: detected capacity change from 0 to 256 [ 2258.619705][T19195] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3079'. [ 2258.833997][T19131] team0: Port device team_slave_0 added [ 2258.840770][T19156] chnl_net:caif_netlink_parms(): no params data found [ 2259.145259][T19131] team0: Port device team_slave_1 added [ 2259.978051][T19131] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2259.985610][T19131] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2260.014784][T19131] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2260.345526][T19131] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2260.352863][T19131] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2260.379377][T19131] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2260.677833][T19131] hsr_slave_0: entered promiscuous mode [ 2260.689925][T19131] hsr_slave_1: entered promiscuous mode [ 2260.700845][T19131] debugfs: 'hsr0' already exists in 'hsr' [ 2260.706755][T19131] Cannot create hsr debugfs directory [ 2262.034596][T19173] chnl_net:caif_netlink_parms(): no params data found [ 2262.263561][T19156] bridge0: port 1(bridge_slave_0) entered blocking state [ 2262.277279][T19156] bridge0: port 1(bridge_slave_0) entered disabled state [ 2262.353649][T19156] bridge_slave_0: entered allmulticast mode [ 2262.389316][T19156] bridge_slave_0: entered promiscuous mode [ 2265.281312][T19156] bridge0: port 2(bridge_slave_1) entered blocking state [ 2265.289071][T19156] bridge0: port 2(bridge_slave_1) entered disabled state [ 2266.409121][T19156] bridge_slave_1: entered allmulticast mode [ 2267.872403][T19156] bridge_slave_1: entered promiscuous mode [ 2270.168701][T19104] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 2270.784551][T19104] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 2270.943152][T19156] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2271.057166][T19104] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 2271.170168][T19104] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 2271.310786][T19156] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2271.327550][T17826] bridge_slave_1: left allmulticast mode [ 2271.336688][T17826] bridge_slave_1: left promiscuous mode [ 2271.343325][T17826] bridge0: port 2(bridge_slave_1) entered disabled state [ 2271.390311][T19219] loop2: detected capacity change from 0 to 7 [ 2271.426345][T17826] bridge_slave_0: left allmulticast mode [ 2271.432440][T17826] bridge_slave_0: left promiscuous mode [ 2271.439159][T17826] bridge0: port 1(bridge_slave_0) entered disabled state [ 2271.439220][T19219] Dev loop2: unable to read RDB block 7 [ 2271.439421][T19219] loop2: unable to read partition table [ 2271.524520][T17826] bridge_slave_1: left allmulticast mode [ 2271.530848][T17826] bridge_slave_1: left promiscuous mode [ 2271.537295][T17826] bridge0: port 2(bridge_slave_1) entered disabled state [ 2271.549360][T19219] loop2: partition table beyond EOD, truncated [ 2271.555822][T19219] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 2271.662706][T17826] bridge_slave_0: left allmulticast mode [ 2271.669516][T17826] bridge_slave_0: left promiscuous mode [ 2271.675972][T17826] bridge0: port 1(bridge_slave_0) entered disabled state [ 2272.739941][T17826] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2272.791394][T17826] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2272.830083][T17826] bond0 (unregistering): Released all slaves [ 2273.238083][T17826] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2273.242960][T19084] usb 9-1: new high-speed USB device number 20 using dummy_hcd [ 2273.280375][T17826] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2273.304398][T17826] bond0 (unregistering): Released all slaves [ 2273.475503][T19084] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 2273.487355][T19084] usb 9-1: New USB device found, idVendor=046d, idProduct=c626, bcdDevice= 0.00 [ 2273.497409][T19084] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2273.563847][T19084] usb 9-1: config 0 descriptor?? [ 2273.761691][T17826] hsr_slave_0: left promiscuous mode [ 2273.781716][T17826] hsr_slave_1: left promiscuous mode [ 2273.820413][T17826] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2273.828020][T17826] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2273.857166][T17826] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2273.917924][T17826] hsr_slave_0: left promiscuous mode [ 2273.941470][T17826] hsr_slave_1: left promiscuous mode [ 2273.952257][T17826] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2273.981926][T17826] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2274.081601][T19084] logitech 0003:046D:C626.0019: hidraw0: USB HID v0.00 Device [HID 046d:c626] on usb-dummy_hcd.8-1/input0 [ 2274.099437][T17826] veth1_macvtap: left promiscuous mode [ 2274.105140][T17826] veth0_macvtap: left promiscuous mode [ 2274.128729][T17826] veth1_vlan: left promiscuous mode [ 2274.134274][T17826] veth0_vlan: left promiscuous mode [ 2274.160436][T17826] veth1_vlan: left promiscuous mode [ 2274.165975][T17826] veth0_vlan: left promiscuous mode [ 2274.255133][T19084] usb 9-1: USB disconnect, device number 20 [ 2274.477757][T19230] fido_id[19230]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.8/usb9/report_descriptor': No such file or directory [ 2275.926952][T17826] team0 (unregistering): Port device team_slave_1 removed [ 2275.990585][T17826] team0 (unregistering): Port device team_slave_0 removed [ 2277.042780][T17826] team0 (unregistering): Port device team_slave_1 removed [ 2277.170305][T17826] team0 (unregistering): Port device team_slave_0 removed [ 2277.675282][T19156] team0: Port device team_slave_0 added [ 2277.976505][T19156] team0: Port device team_slave_1 added [ 2280.239906][T19173] bridge0: port 1(bridge_slave_0) entered blocking state [ 2280.247380][T19173] bridge0: port 1(bridge_slave_0) entered disabled state [ 2281.439270][T19173] bridge_slave_0: entered allmulticast mode [ 2281.451125][T19173] bridge_slave_0: entered promiscuous mode [ 2281.597457][T19173] bridge0: port 2(bridge_slave_1) entered blocking state [ 2281.605039][T19173] bridge0: port 2(bridge_slave_1) entered disabled state [ 2281.627131][T19173] bridge_slave_1: entered allmulticast mode [ 2281.719147][T19173] bridge_slave_1: entered promiscuous mode [ 2281.770876][T19156] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2281.777999][T19156] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2281.804941][T19156] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2282.053844][T19156] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2282.061113][T19156] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2282.087535][T19156] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2282.403120][T19173] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2282.639571][T19173] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2283.065747][T19173] team0: Port device team_slave_0 added [ 2283.317770][T19156] hsr_slave_0: entered promiscuous mode [ 2283.346777][T19156] hsr_slave_1: entered promiscuous mode [ 2283.394707][T19131] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 2283.513262][T19173] team0: Port device team_slave_1 added [ 2283.520847][T19131] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 2283.603646][T19131] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 2283.891615][T19131] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 2284.298857][T19173] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2284.306007][T19173] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2284.334242][T19173] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2284.412472][T12284] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 2284.430916][T12284] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 2284.440299][T12284] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 2284.455889][T12284] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 2284.475990][T12284] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 2284.743267][T19173] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2284.751731][T19173] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2284.778812][T19173] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2285.906639][T19173] hsr_slave_0: entered promiscuous mode [ 2285.972422][T19173] hsr_slave_1: entered promiscuous mode [ 2286.000861][T19173] debugfs: 'hsr0' already exists in 'hsr' [ 2286.006791][T19173] Cannot create hsr debugfs directory [ 2286.579830][T19180] Bluetooth: hci3: command tx timeout [ 2286.587209][T17826] bridge_slave_1: left allmulticast mode [ 2286.593383][T17826] bridge_slave_1: left promiscuous mode [ 2286.600666][T17826] bridge0: port 2(bridge_slave_1) entered disabled state [ 2286.663661][T17826] bridge_slave_0: left allmulticast mode [ 2286.669653][T17826] bridge_slave_0: left promiscuous mode [ 2286.675834][T17826] bridge0: port 1(bridge_slave_0) entered disabled state [ 2287.113612][T19248] loop2: detected capacity change from 0 to 7 [ 2287.147570][T19243] Dev loop2: unable to read RDB block 7 [ 2287.153751][T19243] loop2: unable to read partition table [ 2287.179221][T19243] loop2: partition table beyond EOD, truncated [ 2287.195248][T19248] Dev loop2: unable to read RDB block 7 [ 2287.202664][T19248] loop2: unable to read partition table [ 2287.259513][T19248] loop2: partition table beyond EOD, truncated [ 2287.266115][T19248] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 2287.498983][T17826] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2287.570259][T17826] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2287.611233][T17826] bond0 (unregistering): Released all slaves [ 2288.179422][T17826] hsr_slave_0: left promiscuous mode [ 2288.208533][T17826] hsr_slave_1: left promiscuous mode [ 2288.216252][T17826] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2288.236413][T17826] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2288.650523][T19180] Bluetooth: hci3: command tx timeout [ 2288.703426][T19255] loop8: detected capacity change from 0 to 2048 [ 2289.300897][T12284] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 2289.311342][T12284] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 2289.320622][T12284] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 2289.339362][T12284] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 2289.354964][T12284] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 2289.654353][T17826] team0 (unregistering): Port device team_slave_1 removed [ 2289.694738][T17826] team0 (unregistering): Port device team_slave_0 removed [ 2290.732718][T12284] Bluetooth: hci3: command tx timeout [ 2291.448936][T12284] Bluetooth: hci2: command tx timeout [ 2292.808693][T12284] Bluetooth: hci3: command tx timeout [ 2293.943075][T12284] Bluetooth: hci2: command tx timeout [ 2296.008696][T12284] Bluetooth: hci2: command tx timeout [ 2296.790292][T19156] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 2296.870194][T19156] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 2296.955398][T19241] chnl_net:caif_netlink_parms(): no params data found [ 2297.245271][T19156] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 2297.329640][T19156] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 2297.473707][T19256] chnl_net:caif_netlink_parms(): no params data found [ 2298.089620][T12284] Bluetooth: hci2: command tx timeout [ 2298.436592][T17826] bridge_slave_1: left allmulticast mode [ 2298.442620][T17826] bridge_slave_1: left promiscuous mode [ 2298.449351][T17826] bridge0: port 2(bridge_slave_1) entered disabled state [ 2298.524533][T17826] bridge_slave_0: left allmulticast mode [ 2298.530716][T17826] bridge_slave_0: left promiscuous mode [ 2298.537209][T17826] bridge0: port 1(bridge_slave_0) entered disabled state [ 2299.020076][T17826] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2299.056903][T17826] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2299.085809][T17826] bond0 (unregistering): Released all slaves [ 2299.349709][T17826] hsr_slave_0: left promiscuous mode [ 2299.408587][T17826] hsr_slave_1: left promiscuous mode [ 2299.439938][T17826] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2299.460414][T17826] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2299.999886][T17826] team0 (unregistering): Port device team_slave_1 removed [ 2300.052480][T17826] team0 (unregistering): Port device team_slave_0 removed [ 2300.586937][T19173] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 2300.846980][T19173] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 2300.952401][T19173] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 2301.223095][T19173] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 2301.342437][T19241] bridge0: port 1(bridge_slave_0) entered blocking state [ 2301.350209][T19241] bridge0: port 1(bridge_slave_0) entered disabled state [ 2301.419747][T19241] bridge_slave_0: entered allmulticast mode [ 2301.459018][T19241] bridge_slave_0: entered promiscuous mode [ 2301.619079][T19241] bridge0: port 2(bridge_slave_1) entered blocking state [ 2301.626572][T19241] bridge0: port 2(bridge_slave_1) entered disabled state [ 2301.678988][T19241] bridge_slave_1: entered allmulticast mode [ 2301.728891][T19241] bridge_slave_1: entered promiscuous mode [ 2301.779425][T19256] bridge0: port 1(bridge_slave_0) entered blocking state [ 2301.790756][T19256] bridge0: port 1(bridge_slave_0) entered disabled state [ 2301.820099][T19256] bridge_slave_0: entered allmulticast mode [ 2301.849032][T19256] bridge_slave_0: entered promiscuous mode [ 2301.896888][T19256] bridge0: port 2(bridge_slave_1) entered blocking state [ 2301.905038][T19256] bridge0: port 2(bridge_slave_1) entered disabled state [ 2301.928977][T19256] bridge_slave_1: entered allmulticast mode [ 2301.938282][T19256] bridge_slave_1: entered promiscuous mode [ 2302.078913][T19180] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 2302.093176][T19180] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 2302.109393][T19180] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 2302.149744][T19180] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 2302.172629][T19180] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 2302.615018][T19241] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2302.811173][T19256] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2302.857020][T19241] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2302.896429][T19285] loop8: detected capacity change from 0 to 1024 [ 2302.936226][T19256] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2302.970268][T19285] EXT4-fs: Ignoring removed bh option [ 2302.976181][T19285] EXT4-fs: Ignoring removed nobh option [ 2303.153859][T19285] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 2303.422049][T19285] EXT4-fs error (device loop8): mb_free_blocks:2037: group 0, inode 15: block 177:freeing already freed block (bit 11); block bitmap corrupt. [ 2303.529906][ T30] audit: type=1804 audit(1769574112.039:88): pid=19285 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.8.3098" name="/newroot/203/file1/file1" dev="loop8" ino=15 res=1 errno=0 [ 2303.751417][T17354] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2303.760694][T19256] team0: Port device team_slave_0 added [ 2303.933228][T19241] team0: Port device team_slave_0 added [ 2304.100661][T19256] team0: Port device team_slave_1 added [ 2304.123563][T19241] team0: Port device team_slave_1 added [ 2304.248856][T12284] Bluetooth: hci5: command tx timeout [ 2304.661390][T19241] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2304.668867][T19241] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2304.695403][T19241] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2304.884320][T19241] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2304.891714][T19241] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2304.918423][T19241] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2305.109539][T19256] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2305.116786][T19256] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2305.143566][T19256] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2305.242107][T19296] syz_tun: entered allmulticast mode [ 2305.326258][T19297] lo: entered allmulticast mode [ 2305.361447][T19256] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2305.368940][T19256] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2305.397908][T19256] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2305.980456][T19241] hsr_slave_0: entered promiscuous mode [ 2306.002150][T19241] hsr_slave_1: entered promiscuous mode [ 2306.030761][T19241] debugfs: 'hsr0' already exists in 'hsr' [ 2306.036678][T19241] Cannot create hsr debugfs directory [ 2306.238491][T17826] bridge_slave_1: left allmulticast mode [ 2306.244383][T17826] bridge_slave_1: left promiscuous mode [ 2306.251103][T17826] bridge0: port 2(bridge_slave_1) entered disabled state [ 2306.282036][T17826] bridge_slave_0: left allmulticast mode [ 2306.287890][T17826] bridge_slave_0: left promiscuous mode [ 2306.294622][T17826] bridge0: port 1(bridge_slave_0) entered disabled state [ 2306.328867][T12284] Bluetooth: hci5: command tx timeout [ 2307.698761][T19180] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 2307.712627][T19180] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 2307.729268][T19180] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 2307.744205][T19180] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 2307.760469][T19180] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 2307.971007][T17826] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2308.046551][T17826] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2308.078825][T17826] bond0 (unregistering): Released all slaves [ 2308.362849][T19256] hsr_slave_0: entered promiscuous mode [ 2308.409140][T19180] Bluetooth: hci5: command tx timeout [ 2308.417588][T19256] hsr_slave_1: entered promiscuous mode [ 2308.445978][T19256] debugfs: 'hsr0' already exists in 'hsr' [ 2308.452204][T19256] Cannot create hsr debugfs directory [ 2308.688801][T17826] hsr_slave_0: left promiscuous mode [ 2308.707522][T17826] hsr_slave_1: left promiscuous mode [ 2308.728991][T17826] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2308.769059][T17826] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2309.626303][T17826] team0 (unregistering): Port device team_slave_1 removed [ 2309.700288][T17826] team0 (unregistering): Port device team_slave_0 removed [ 2309.848722][T19180] Bluetooth: hci0: command tx timeout [ 2310.488889][T19180] Bluetooth: hci5: command tx timeout [ 2312.169305][T19180] Bluetooth: hci0: command tx timeout [ 2314.211380][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 2314.218140][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 2315.181615][T12284] Bluetooth: hci0: command tx timeout [ 2316.219127][T19280] chnl_net:caif_netlink_parms(): no params data found [ 2317.208830][T12284] Bluetooth: hci0: command tx timeout [ 2320.253836][T19324] loop6: detected capacity change from 0 to 7 [ 2320.304124][T19324] Dev loop6: unable to read RDB block 7 [ 2320.310161][T19324] loop6: unable to read partition table [ 2320.323694][T19324] loop6: partition table beyond EOD, truncated [ 2320.331589][T19324] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5) [ 2320.830072][T19327] loop2: detected capacity change from 0 to 7 [ 2320.850504][T19327] Dev loop2: unable to read RDB block 7 [ 2320.856359][T19327] loop2: unable to read partition table [ 2320.888001][T19327] loop2: partition table beyond EOD, truncated [ 2320.894824][T19327] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 2321.080213][T19280] bridge0: port 1(bridge_slave_0) entered blocking state [ 2321.087708][T19280] bridge0: port 1(bridge_slave_0) entered disabled state [ 2321.133105][T19280] bridge_slave_0: entered allmulticast mode [ 2321.171861][T19280] bridge_slave_0: entered promiscuous mode [ 2321.216303][T19280] bridge0: port 2(bridge_slave_1) entered blocking state [ 2321.223923][T19280] bridge0: port 2(bridge_slave_1) entered disabled state [ 2321.279397][T19280] bridge_slave_1: entered allmulticast mode [ 2321.299137][T19280] bridge_slave_1: entered promiscuous mode [ 2321.373886][T19256] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 2321.436978][T19256] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 2321.644952][T19256] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 2321.661302][ T5843] usb 9-1: new high-speed USB device number 21 using dummy_hcd [ 2321.850933][ T5843] usb 9-1: Using ep0 maxpacket: 16 [ 2321.876222][ T5843] usb 9-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 2321.886173][ T5843] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2321.897082][ T5843] usb 9-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 2321.906988][ T5843] usb 9-1: config 1 has no interface number 1 [ 2321.914816][T19256] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 2321.968842][ T5843] usb 9-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 2321.991960][ T5843] usb 9-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 2321.993538][T19304] chnl_net:caif_netlink_parms(): no params data found [ 2322.003351][ T5843] usb 9-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 2322.086307][ T5843] usb 9-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2322.095890][ T5843] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2322.097582][T19280] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2322.104303][ T5843] usb 9-1: Product: syz [ 2322.117737][ T5843] usb 9-1: Manufacturer: syz [ 2322.122668][ T5843] usb 9-1: SerialNumber: syz [ 2322.253861][T19280] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2322.525900][ T5843] usb 9-1: USB disconnect, device number 21 [ 2322.662181][T19331] udevd[19331]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2322.896119][T19280] team0: Port device team_slave_0 added [ 2323.049173][T19280] team0: Port device team_slave_1 added [ 2323.093187][T17826] bridge_slave_1: left allmulticast mode [ 2323.099356][T17826] bridge_slave_1: left promiscuous mode [ 2323.105907][T17826] bridge0: port 2(bridge_slave_1) entered disabled state [ 2323.155006][T17826] bridge_slave_0: left allmulticast mode [ 2323.164621][T17826] bridge_slave_0: left promiscuous mode [ 2323.171378][T17826] bridge0: port 1(bridge_slave_0) entered disabled state [ 2323.242150][T17826] bridge_slave_1: left allmulticast mode [ 2323.247997][T17826] bridge_slave_1: left promiscuous mode [ 2323.254655][T17826] bridge0: port 2(bridge_slave_1) entered disabled state [ 2323.316902][T17826] bridge_slave_0: left allmulticast mode [ 2323.323143][T17826] bridge_slave_0: left promiscuous mode [ 2323.329769][T17826] bridge0: port 1(bridge_slave_0) entered disabled state [ 2324.618931][T17826] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2324.671920][T17826] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2324.704208][T17826] bond0 (unregistering): Released all slaves [ 2325.110004][T17826] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2325.154439][T17826] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2325.181599][T17826] bond0 (unregistering): Released all slaves [ 2325.487937][T19280] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2325.495244][T19280] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2325.522607][T19280] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2325.691851][T19280] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2325.704885][T19280] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2325.731229][T19280] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2326.264776][T19304] bridge0: port 1(bridge_slave_0) entered blocking state [ 2326.272833][T19304] bridge0: port 1(bridge_slave_0) entered disabled state [ 2326.308650][T19304] bridge_slave_0: entered allmulticast mode [ 2326.322072][T19304] bridge_slave_0: entered promiscuous mode [ 2326.430952][T19241] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 2326.555136][T17826] hsr_slave_0: left promiscuous mode [ 2326.575074][T17826] hsr_slave_1: left promiscuous mode [ 2326.600955][T17826] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2326.621161][T17826] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2326.688201][T17826] hsr_slave_0: left promiscuous mode [ 2326.707618][T17826] hsr_slave_1: left promiscuous mode [ 2326.729988][T17826] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2326.752880][T17826] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2327.341287][T17826] team0 (unregistering): Port device team_slave_1 removed [ 2327.409895][T17826] team0 (unregistering): Port device team_slave_0 removed [ 2327.807628][T19350] loop6: detected capacity change from 0 to 7 [ 2327.823684][T19331] Dev loop6: unable to read RDB block 7 [ 2327.831133][T19331] loop6: unable to read partition table [ 2327.859520][T19331] loop6: partition table beyond EOD, truncated [ 2327.875148][T19350] Dev loop6: unable to read RDB block 7 [ 2327.881294][T19350] loop6: unable to read partition table [ 2327.949249][T19350] loop6: partition table beyond EOD, truncated [ 2327.955725][T19350] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5) [ 2328.465035][T17826] team0 (unregistering): Port device team_slave_1 removed [ 2328.502799][T19352] loop8: detected capacity change from 0 to 256 [ 2328.523729][T17826] team0 (unregistering): Port device team_slave_0 removed [ 2329.223245][T19304] bridge0: port 2(bridge_slave_1) entered blocking state [ 2329.232526][T19304] bridge0: port 2(bridge_slave_1) entered disabled state [ 2329.293521][T19304] bridge_slave_1: entered allmulticast mode [ 2329.336315][T19304] bridge_slave_1: entered promiscuous mode [ 2329.542417][T19241] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 2329.897991][T19304] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2329.909159][T19241] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 2330.202238][T19304] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2330.212318][T19241] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 2330.436921][T19280] hsr_slave_0: entered promiscuous mode [ 2330.467670][T19280] hsr_slave_1: entered promiscuous mode [ 2331.095481][T19304] team0: Port device team_slave_0 added [ 2331.266950][T19304] team0: Port device team_slave_1 added [ 2331.443121][T19256] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2331.713846][T19304] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2331.721349][T19304] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2331.747764][T19304] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2331.843927][T19304] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2331.851173][T19304] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2331.877623][T19304] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2332.571821][T19256] 8021q: adding VLAN 0 to HW filter on device team0 [ 2332.824659][T19304] hsr_slave_0: entered promiscuous mode [ 2332.832238][T19362] loop8: detected capacity change from 0 to 2048 [ 2332.851750][T19362] udf: Bad value for 'anchor' [ 2332.861043][T19304] hsr_slave_1: entered promiscuous mode [ 2332.881343][T19304] debugfs: 'hsr0' already exists in 'hsr' [ 2332.887286][T19304] Cannot create hsr debugfs directory [ 2332.995073][T17841] bridge0: port 1(bridge_slave_0) entered blocking state [ 2333.002680][T17841] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2333.499527][T17822] bridge0: port 2(bridge_slave_1) entered blocking state [ 2333.507016][T17822] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2333.547513][T19364] loop8: detected capacity change from 0 to 2048 [ 2333.619979][T19364] [EXT4 FS bs=2048, gc=1, bpg=262144, ipg=32, mo=a802c01c, mo2=0002] [ 2333.676315][T19364] System zones: 0-7 [ 2333.712403][T19364] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 2334.105451][T17354] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000900. [ 2334.776408][T19280] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 2334.831872][T19241] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2334.943156][T19280] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 2335.056700][T19280] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 2335.176594][T19280] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 2335.343163][T19241] 8021q: adding VLAN 0 to HW filter on device team0 [ 2335.770420][T17845] bridge0: port 1(bridge_slave_0) entered blocking state [ 2335.778006][T17845] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2335.859193][T17845] bridge0: port 2(bridge_slave_1) entered blocking state [ 2335.866668][T17845] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2336.184456][T19378] loop8: detected capacity change from 0 to 128 [ 2336.356003][T19378] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 2336.459547][T19378] ext4 filesystem being mounted at /226/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 2336.845723][T17354] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 2337.081629][T19256] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2337.233087][T19382] loop8: detected capacity change from 0 to 128 [ 2337.251946][T19382] ext4: Unknown parameter 'fowner>00000000000000000000' [ 2337.400909][T19382] ===================================================== [ 2337.408471][T19382] BUG: KMSAN: uninit-value in eth_type_trans+0x6a2/0x9b0 [ 2337.415655][T19382] eth_type_trans+0x6a2/0x9b0 [ 2337.420630][T19382] __dev_forward_skb2+0x4b1/0x940 [ 2337.425894][T19382] dev_forward_skb_nomtu+0x3b/0xe0 [ 2337.431282][T19382] __bpf_redirect+0x14d7/0x1760 [ 2337.436404][T19382] bpf_clone_redirect+0x4a6/0x6c0 [ 2337.441746][T19382] ___bpf_prog_run+0x12af/0xeb60 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 2337.447121][T19382] __bpf_prog_run512+0xc5/0x100 [ 2337.452243][T19382] bpf_test_run+0x493/0xdf0 [ 2337.456994][T19382] bpf_prog_test_run_skb+0x2376/0x3200 [ 2337.462760][T19382] bpf_prog_test_run+0x5bb/0x9f0 [ 2337.468503][T19382] __sys_bpf+0x873/0xeb0 [ 2337.472919][T19382] __x64_sys_bpf+0xa4/0xf0 [ 2337.477494][T19382] x64_sys_call+0x31c3/0x3e70 [ 2337.482460][T19382] do_syscall_64+0xc9/0xf80 [ 2337.487205][T19382] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2337.493376][T19382] [ 2337.495771][T19382] Uninit was created at: [ 2337.500322][T19382] kmem_cache_alloc_node_noprof+0x9de/0x1780 [ 2337.506449][T19382] kmalloc_reserve+0x13c/0x4b0 [ 2337.511577][T19382] pskb_expand_head+0x205/0x1900 [ 2337.516670][T19382] skb_ensure_writable+0x44e/0x510 [ 2337.522141][T19382] bpf_clone_redirect+0x301/0x6c0 [ 2337.527362][T19382] ___bpf_prog_run+0x12af/0xeb60 [ 2337.532635][T19382] __bpf_prog_run512+0xc5/0x100 [ 2337.537676][T19382] bpf_test_run+0x493/0xdf0 [ 2337.542477][T19382] bpf_prog_test_run_skb+0x2376/0x3200 [ 2337.548133][T19382] bpf_prog_test_run+0x5bb/0x9f0 [ 2337.553361][T19382] __sys_bpf+0x873/0xeb0 [ 2337.557772][T19382] __x64_sys_bpf+0xa4/0xf0 [ 2337.562448][T19382] x64_sys_call+0x31c3/0x3e70 [ 2337.567314][T19382] do_syscall_64+0xc9/0xf80 [ 2337.572087][T19382] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2337.578140][T19382] [ 2337.580720][T19382] CPU: 1 UID: 0 PID: 19382 Comm: syz.8.3122 Tainted: G L syzkaller #0 PREEMPT(voluntary) [ 2337.592395][T19382] Tainted: [L]=SOFTLOCKUP [ 2337.596816][T19382] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 2337.607097][T19382] ===================================================== [ 2337.614231][T19382] Disabling lock debugging due to kernel taint [ 2337.620608][T19382] Kernel panic - not syncing: kmsan.panic set ... [ 2337.627172][T19382] CPU: 1 UID: 0 PID: 19382 Comm: syz.8.3122 Tainted: G B L syzkaller #0 PREEMPT(voluntary) [ 2337.638830][T19382] Tainted: [B]=BAD_PAGE, [L]=SOFTLOCKUP [ 2337.644473][T19382] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 2337.654654][T19382] Call Trace: [ 2337.658028][T19382] [ 2337.661041][T19382] __dump_stack+0x26/0x30 [ 2337.665540][T19382] dump_stack_lvl+0x50/0x1c0 [ 2337.670301][T19382] ? dump_stack+0x12/0x25 [ 2337.674799][T19382] dump_stack+0x1e/0x25 [ 2337.679115][T19382] vpanic+0x435/0xd40 [ 2337.683369][T19382] panic+0x15d/0x160 [ 2337.687477][T19382] kmsan_report+0x31a/0x320 [ 2337.692196][T19382] ? __msan_warning+0x1b/0x30 [ 2337.697075][T19382] ? eth_type_trans+0x6a2/0x9b0 [ 2337.702071][T19382] ? __dev_forward_skb2+0x4b1/0x940 [ 2337.707449][T19382] ? dev_forward_skb_nomtu+0x3b/0xe0 [ 2337.712910][T19382] ? __bpf_redirect+0x14d7/0x1760 [ 2337.718135][T19382] ? bpf_clone_redirect+0x4a6/0x6c0 [ 2337.723525][T19382] ? ___bpf_prog_run+0x12af/0xeb60 [ 2337.728825][T19382] ? __bpf_prog_run512+0xc5/0x100 [ 2337.734035][T19382] ? bpf_test_run+0x493/0xdf0 [ 2337.738904][T19382] ? bpf_prog_test_run_skb+0x2376/0x3200 [ 2337.744763][T19382] ? bpf_prog_test_run+0x5bb/0x9f0 [ 2337.750070][T19382] ? __sys_bpf+0x873/0xeb0 [ 2337.754686][T19382] ? __x64_sys_bpf+0xa4/0xf0 [ 2337.759436][T19382] ? x64_sys_call+0x31c3/0x3e70 [ 2337.764478][T19382] ? do_syscall_64+0xc9/0xf80 [ 2337.769335][T19382] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2337.775551][T19382] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 2337.781565][T19382] ? should_fail_ex+0x45/0x8c0 [ 2337.786471][T19382] ? stack_depot_save_flags+0x35/0x790 [ 2337.792122][T19382] ? kmsan_get_metadata+0xf1/0x160 [ 2337.797419][T19382] ? kmsan_get_metadata+0xf1/0x160 [ 2337.802846][T19382] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 2337.809347][T19382] ? kmsan_get_metadata+0xf1/0x160 [ 2337.814642][T19382] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 2337.820728][T19382] ? kmsan_get_metadata+0xf1/0x160 [ 2337.826105][T19382] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 2337.832609][T19382] ? kmsan_get_metadata+0xf1/0x160 [ 2337.837904][T19382] ? kmsan_get_metadata+0xf1/0x160 [ 2337.843203][T19382] __msan_warning+0x1b/0x30 [ 2337.847869][T19382] eth_type_trans+0x6a2/0x9b0 [ 2337.852711][T19382] __dev_forward_skb2+0x4b1/0x940 [ 2337.857908][T19382] dev_forward_skb_nomtu+0x3b/0xe0 [ 2337.863191][T19382] __bpf_redirect+0x14d7/0x1760 [ 2337.868230][T19382] ? kmsan_get_metadata+0xf1/0x160 [ 2337.873537][T19382] bpf_clone_redirect+0x4a6/0x6c0 [ 2337.878770][T19382] ___bpf_prog_run+0x12af/0xeb60 [ 2337.883905][T19382] __bpf_prog_run512+0xc5/0x100 [ 2337.888944][T19382] ? kmsan_internal_poison_memory+0x78/0x90 [ 2337.895001][T19382] ? kmsan_internal_poison_memory+0x4a/0x90 [ 2337.901057][T19382] ? kmsan_slab_alloc+0xdc/0x160 [ 2337.906156][T19382] ? kmem_cache_alloc_noprof+0x967/0x1730 [ 2337.912006][T19382] ? slab_build_skb+0x5c/0x5a0 [ 2337.916929][T19382] ? bpf_prog_test_run_skb+0x750/0x3200 [ 2337.922657][T19382] ? bpf_prog_test_run+0x5bb/0x9f0 [ 2337.927934][T19382] ? __sys_bpf+0x873/0xeb0 [ 2337.932495][T19382] ? __x64_sys_bpf+0xa4/0xf0 [ 2337.937235][T19382] ? x64_sys_call+0x31c3/0x3e70 [ 2337.942251][T19382] ? kmsan_get_metadata+0xf1/0x160 [ 2337.947547][T19382] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 2337.953547][T19382] ? bpf_test_run+0x31/0xdf0 [ 2337.958317][T19382] ? filter_irq_stacks+0x49/0x190 [ 2337.963497][T19382] ? kmsan_get_metadata+0xf1/0x160 [ 2337.968793][T19382] ? kmsan_get_metadata+0xf1/0x160 [ 2337.974080][T19382] ? kmsan_get_metadata+0xf1/0x160 [ 2337.979374][T19382] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 2337.985891][T19382] ? kmsan_get_metadata+0x146/0x160 [ 2337.991311][T19382] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 2337.997337][T19382] ? __pfx___bpf_prog_run512+0x10/0x10 [ 2338.002989][T19382] ? __pfx___bpf_prog_run512+0x10/0x10 [ 2338.008627][T19382] bpf_test_run+0x493/0xdf0 [ 2338.013307][T19382] ? kmsan_get_metadata+0xf1/0x160 [ 2338.018597][T19382] ? kmsan_get_metadata+0xf1/0x160 [ 2338.023894][T19382] ? kmsan_get_metadata+0xf1/0x160 [ 2338.029219][T19382] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 2338.035253][T19382] ? bpf_test_run+0x2f4/0xdf0 [ 2338.040139][T19382] ? kmsan_get_metadata+0xf1/0x160 [ 2338.045432][T19382] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 2338.051452][T19382] bpf_prog_test_run_skb+0x2376/0x3200 [ 2338.057094][T19382] ? kmsan_get_metadata+0xf1/0x160 [ 2338.062401][T19382] ? __rcu_read_unlock+0x6c/0xd0 [ 2338.067530][T19382] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 2338.073513][T19382] bpf_prog_test_run+0x5bb/0x9f0 [ 2338.078641][T19382] __sys_bpf+0x873/0xeb0 [ 2338.083120][T19382] __x64_sys_bpf+0xa4/0xf0 [ 2338.087727][T19382] x64_sys_call+0x31c3/0x3e70 [ 2338.092597][T19382] do_syscall_64+0xc9/0xf80 [ 2338.097262][T19382] ? clear_bhb_loop+0x40/0x90 [ 2338.102088][T19382] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2338.108136][T19382] RIP: 0033:0x7f7d49d9aeb9 [ 2338.112654][T19382] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2338.132407][T19382] RSP: 002b:00007f7d47ff6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 2338.140965][T19382] RAX: ffffffffffffffda RBX: 00007f7d4a015fa0 RCX: 00007f7d49d9aeb9 [ 2338.149055][T19382] RDX: 0000000000000023 RSI: 0000200000000240 RDI: 000000000000000a [ 2338.157132][T19382] RBP: 00007f7d49e08c1f R08: 0000000000000000 R09: 0000000000000000 [ 2338.165202][T19382] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2338.173272][T19382] R13: 00007f7d4a016038 R14: 00007f7d4a015fa0 R15: 00007ffd1461c428 [ 2338.181392][T19382] [ 2338.184976][T19382] Kernel Offset: disabled [ 2338.189352][T19382] Rebooting in 86400 seconds..