last executing test programs: 3m8.937488501s ago: executing program 1 (id=15): r0 = socket$inet(0x2, 0x6, 0x0) bind$inet(r0, 0x0, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000400000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000044000500000000000000000000000000000000000000000033"], 0xfc}}, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x20000845, &(0x7f0000b63fe4), 0x1c) getsockopt$inet6_buf(r2, 0x29, 0x18, 0x0, &(0x7f00000000c0)) sendto$inet(r0, 0x0, 0x1, 0x2004cfe9, &(0x7f0000000180)={0x2, 0x4e23, @loopback}, 0x10) sendto$inet(r0, &(0x7f0000000040)="ee", 0x1, 0x20004010, 0x0, 0xfffffffffffffd2d) pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) splice(r0, 0x0, r3, 0x0, 0x9, 0x8) 3m8.668358148s ago: executing program 1 (id=18): syz_mount_image$fuse(0x0, &(0x7f0000000040)='./file0\x00', 0x480a8, 0x0, 0x21, 0x0, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x40000, 0x0) fcntl$notify(r0, 0x402, 0x80000001) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r1, &(0x7f00000005c0)='\"', 0x1, 0x4fed0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x143042, 0xf2) prlimit64(0x0, 0x1, &(0x7f0000000000)={0x5, 0x100}, 0x0) sendfile(r2, r2, 0x0, 0x7a680000) syz_mount_image$vfat(&(0x7f0000000300), &(0x7f0000000280)='./bus\x00', 0x3c9c9b, 0x0, 0x0, 0x0, &(0x7f0000000140)) mount$overlay(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f0000000b80), 0x4008, &(0x7f0000000440)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) lsetxattr$security_ima(&(0x7f0000000080)='./file0/file1\x00', &(0x7f0000000200), &(0x7f0000000340)=ANY=[], 0x8, 0x2) 3m8.485970944s ago: executing program 1 (id=19): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x2300, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r0, &(0x7f0000000740)='^', 0x1, 0x40000, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[], 0x14}}, 0xc04c055) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000340)=[@timestamp, @window={0x3, 0x6, 0x7}, @mss={0x2, 0x7}, @window={0x3, 0x0, 0x4}, @window={0x3, 0x8, 0x6}, @timestamp, @window={0x3, 0xfffe}, @sack_perm], 0x2000000000000061) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r0, &(0x7f00000004c0)='<', 0x381, 0x805, 0x0, 0x0) 3m8.304216389s ago: executing program 1 (id=22): mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000006300)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x10408, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b7db000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e83a02650000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20, 0x0, 0x0, {0x0, 0x8}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x80101, 0x0) dup2(r2, r0) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000180)='./file2\x00', 0x6000, 0x0) r3 = open(&(0x7f00000003c0)='./file2\x00', 0x81, 0x0) ioctl$BTRFS_IOC_DEFRAG(r3, 0x4c00, 0x3) 3m8.071487865s ago: executing program 1 (id=23): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xe, 0x4, 0x8, 0x7}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xc, 0xd, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xaa9a}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7ffffffd}, {0x3, 0x3, 0x3, 0xa, 0x5}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x15}}, @call={0x85, 0x0, 0x0, 0xa0}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000d80)={r2, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000040)="76ea090000000000009ba56a88ca", 0x0, 0x6400, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180200002343ffff0000000000000000850000004100000095"], &(0x7f00000000c0)='GPL\x00'}, 0x4e) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r4, r5, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0xd81, &(0x7f00000004c0)=ANY=[], 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000880)=ANY=[@ANYBLOB="380000005400010026bd7001ffdbdf2507000000", @ANYRES32=r6, @ANYBLOB="20000100", @ANYRES32=r6, @ANYBLOB="01020400e00801000000000000000000010000000800"], 0x38}, 0x1, 0x0, 0x0, 0xf3a05db3b5711123}, 0x4040) 3m0.496110324s ago: executing program 1 (id=40): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newqdisc={0x90, 0x24, 0x4ee4e6a52ff56541, 0x40000, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0xfff3, 0xfff3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x60, 0x2, {{0x6, 0x9, 0x80, 0x0, 0xffffffff, 0x91b1}, [@TCA_NETEM_RATE64={0xc, 0x8, 0x9abdc991bbd45c89}, @TCA_NETEM_RATE={0x14, 0x6, {0xffff, 0x200, 0x8}}, @TCA_NETEM_ECN={0x8, 0x7, 0x1}, @TCA_NETEM_DELAY_DIST={0x9, 0x2, "90302174fe"}, @TCA_NETEM_CORR={0x10, 0x1, {0xa, 0x100, 0x5}}]}}}]}, 0x90}, 0x1, 0x0, 0x0, 0x4000400}, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB]) read$FUSE(r3, 0x0, 0x0) write$FUSE_WRITE(0xffffffffffffffff, 0x0, 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r2, &(0x7f0000000000), 0xffffffffffffff94, 0x400000000002000, 0x0, 0x0) 3m0.29640413s ago: executing program 32 (id=40): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newqdisc={0x90, 0x24, 0x4ee4e6a52ff56541, 0x40000, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0xfff3, 0xfff3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x60, 0x2, {{0x6, 0x9, 0x80, 0x0, 0xffffffff, 0x91b1}, [@TCA_NETEM_RATE64={0xc, 0x8, 0x9abdc991bbd45c89}, @TCA_NETEM_RATE={0x14, 0x6, {0xffff, 0x200, 0x8}}, @TCA_NETEM_ECN={0x8, 0x7, 0x1}, @TCA_NETEM_DELAY_DIST={0x9, 0x2, "90302174fe"}, @TCA_NETEM_CORR={0x10, 0x1, {0xa, 0x100, 0x5}}]}}}]}, 0x90}, 0x1, 0x0, 0x0, 0x4000400}, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB]) read$FUSE(r3, 0x0, 0x0) write$FUSE_WRITE(0xffffffffffffffff, 0x0, 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r2, &(0x7f0000000000), 0xffffffffffffff94, 0x400000000002000, 0x0, 0x0) 2m28.948771516s ago: executing program 5 (id=135): setsockopt$IP_VS_SO_SET_EDITDEST(0xffffffffffffffff, 0x0, 0x489, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x101400, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0xffffffc8, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xa}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001f80)=@newqdisc={0x45c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdf8, {0x0, 0x0, 0x0, r3, {0x10}, {}, {0xa, 0x3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x430, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x1, 0xfffffffe, 0x9, 0x8000, 0x3, 0x5, 0x5, 0xb762, 0x6, 0x7, 0x8, 0xf, 0x2, 0x80000001, 0x400, 0x7fc, 0xffff8000, 0x6, 0x401, 0x9, 0xb89, 0xffffe4f5, 0xd6, 0x4, 0xffff, 0x7, 0x0, 0x2, 0x101, 0x1, 0xfffffffc, 0x4, 0x1, 0x1, 0x9, 0xc, 0x20001000, 0x4, 0x2, 0x7, 0x4, 0x99, 0x9, 0x2, 0xf28, 0x7, 0xfffffff7, 0x1, 0x2, 0x9, 0x9, 0x44, 0xb, 0x8, 0x1, 0x4, 0x7ff, 0x8, 0x7, 0x80000001, 0x400, 0x8, 0xfffffa72, 0xcd, 0xffffff80, 0x80000000, 0xc, 0x4, 0x65, 0x91, 0x659, 0x9, 0xf, 0x9, 0xc28, 0x9, 0x7, 0x3, 0x401, 0x3, 0x2, 0xfffffffa, 0x1, 0x10001, 0x3, 0x1, 0x4, 0x8, 0x8, 0x7, 0x1, 0x1, 0x1, 0x7, 0xfffffffd, 0x7, 0x12, 0x15929f67, 0x1, 0x4dc, 0x80, 0x3, 0x7fffffff, 0xff, 0x9, 0xa7, 0xf, 0x2, 0x0, 0x3, 0x1000, 0x800004, 0x401, 0x7, 0x80000000, 0xffff, 0x6, 0x5, 0x4, 0xffffffff, 0x80000000, 0x1966f9ab, 0x200, 0x20200, 0xed5, 0xfffffc00, 0x6, 0x4, 0x8, 0x485e, 0xa83, 0x80000040, 0x2, 0x7, 0x7, 0x102, 0x2d5421e8, 0x7, 0x10000, 0xffffffff, 0x6, 0x3ff, 0xf04, 0x0, 0x2, 0x5, 0xfffffc00, 0x5, 0x8d, 0x4, 0x401, 0x4, 0x9, 0x3, 0xfffffffb, 0x1, 0x0, 0x0, 0x2, 0x8, 0x8, 0x3, 0x0, 0x800, 0x2, 0x8, 0x2, 0x1, 0x80000009, 0x6, 0x5, 0x5, 0x4d15, 0x1ff, 0xfffff060, 0x3, 0x469, 0x3, 0x0, 0x1ff, 0x10000005, 0x7, 0x1, 0x8, 0x42ba, 0x7, 0x9, 0x3, 0x8, 0x8, 0x53, 0x6, 0x4, 0x400, 0x8000, 0x0, 0x2c310b18, 0xfff, 0x0, 0x3, 0xcd34, 0xa, 0x81, 0xdf3, 0x2, 0x7, 0x8, 0xb, 0x1ff, 0x8000, 0x3, 0x8, 0x3, 0x9, 0x9a6, 0xe4cb, 0x402, 0x1, 0x1ff, 0x3e, 0x9b4, 0x1, 0x8, 0x0, 0x8, 0xfffffffc, 0x9, 0x0, 0x4, 0x10, 0x901, 0x5, 0x2, 0x7b, 0xfffffeff, 0x6, 0x6, 0xc, 0x1000, 0x9, 0x9, 0xe6, 0xab, 0x400, 0x7fffffff, 0xed, 0x7ff, 0xd83, 0x68, 0x80000001, 0x4, 0x1, 0x6, 0x1fd, 0x2]}, @TCA_TBF_PARMS={0x28, 0x1, {{0x3f, 0x0, 0x0, 0x0, 0x97ab, 0x40}, {0x2, 0x0, 0x3, 0x78f2, 0x8, 0x3}, 0x1, 0x2, 0xa2d}}]}}]}, 0x45c}, 0x1, 0x0, 0x0, 0x40098}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) 2m28.532036737s ago: executing program 5 (id=136): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) syz_mount_image$exfat(&(0x7f0000000280), &(0x7f00000000c0)='./file2\x00', 0x21808a, &(0x7f00000018c0)=ANY=[], 0xfd, 0x1501, &(0x7f00000002c0)="$eJzs3Am4T1X3OPC19t6H62b4JpnP2uvwTYZNkoSSZEiSJCRzQpIkSZK4ZEpCEjLeJHPInG665nnInHTzSpIkJCTZ/+c2/P16h5/3fX/9/vq/d32e5zz2cs7aZ+27nu89w/Pc79ddh1VvVKNKfWaGf4f+bYC//JMEAAkAMBAAcgBAAABlc5bNmb4/i8akf+sk4n9JgxlXugJxJUn/Mzbpf8Ym/c/YpP8Zm/Q/Y5P+Z2zS/4xN+i9EhjYr39WyZdxN3v//f079T5Ll+p8h4D/aIf3/T6P/paOl/xmb9D9jk/5nbNL/jCy40gWIK0w+/xmb9F+IDO0Pf6e84dyVfqct27+wCSGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQ/w+c85cYAPhtfKXrEkIIIYQQQgghxB/Hv3ulKxBCCCGEEEIIIcT/PgQFGgwEkAkyQwJkgUS4CrJCNsgOOSAGV0NOuAZywbWQG/JAXsgH+aEAFIQQCCwwRFAICkMcroMicD0UhWJQHEqAg5JQCm6A0nAjlIGboCzcDOXgFigPFX4+Z7rboTLcAVXgTqgK1aA61IC7oCbcDbXgHqgN90IduA/qwv1QDx6A+tAAGsKD0AgegsbQBJpCM2gOLaDlZfKTc/y9/OehB7wAPaEXJEFv6AMvQl/oB/1hAAyEl2AQvAyD4RUYAkNhGLwKw+E1GAGvw0gYBaPhDRgDY2EcjIcJMBGS4U2YBG/BZHj7oWwwFabBdJgBM2EWvAOzYQ7MhXdhHsyHBZCcZREshiXwHiyF9yEFPoBl8CGkwnJYASthFayGNbAW1sF62AAbYRNshi2wFbbBR7AddsBO2AW7YQ/shY9hH3wC++FTSMPP/sX8s7/Ph24ICKhQoUGDmTATJmACJmIiZsWsmB2zYwxjmBNzYi7MhbkxN+bFvJiE+bEgFkRCQkbGQlgI4xjHIlgEi2JRLI7F0aHDUlgKS+ONWAbLYFksi+WwHJbHClgBb8VbsRJWwspYGatgFayKVbE6Vse78C68G2thLayNtbEO1sG6WBfrYT2sj/WxITbERtgIG2NjbIpNsTk2x5bYElthK2yNrbEttsV22A7bY3vsgB2wI3bETtgJO2Nn7IJdsCt2xW74HD6Hz+Pz+AK+gL2wquqNfbAP9sW+2B8H4AB8CQfhy/gyvoJDcCgOw1fxVXwNR+AZHImjcDSOxkpqLI7D8chqIiZjMmaGSTgZJ+MUnIpTcTrOwJk4C2fhbJyDc/BdnIfzcT4uxIW4GJfgElyK72MKpuAyPIupuBxX4EpchatxFa7FdbgWN+BG3ICbcTNuxa34EX6EO3AH7sJduAf34Mf4MX6Cn+AQTMM0PIAH8CAexEN4CA/jYTyCR/AoHsVjeAyP43E8gSfxFJ7E03gaz+BZPAcA5/E8XsALeBEvpn/4VTqjjMqkMqkElaASVaLKqrKq7Cq7iqmYyqlyqlwql8qtcqu8Kq/Kr/KrgqqgIkWKVaQKqUIqruKqiCqiiqqiqrgqrpxyqpQqpUqr0qqMKqPKqptVOXWLKq8qqDbuVnWrqqTausrqDlVFVVFVVTVVXdVQNVRNVVPVUrVUbVVb1VF1VF11v6qnemN/bKDSO9NIDcXGahg2Vc1Uc9VCvYYPq1ZqBLZWbVRb9agahSOxvWrlOqgnVEc1Djupp9R4fFp1UROxq3pWdVPPqe7qedVDtXY9VS81BXurPmo69lX9VH81QM3Gaiq9Y9XVK+r5zEPVMPWqWoyvqRHqdTVSjVKj1RtqjBqrxqnxaoKaqJLVm2qSektNVm+rKWqqmqamqxlqppql3lGz1Rw1V72r5qn5aoFaqBapxWqJek8tVe+rFPWBWqY+VKlquVqhVqpVarVao9aqdWq92qA2qk1qs9qitqpt6iO1Xe1QO9UutVvtUXvVx2qf+kTtV5+qNPWZOqD+og6qz9Uh9YU6rL5UR9RX6qj6Wh1T36jj6lt1Qp1Up9R36rT6Xp1RZ9U59YM6r35UF9RP6qLyCjRqpbU2OtCZdGadoLPoRH2Vzqqz6ew6h47pq3VOfY3Opa/VuXUendfk0/l1AV1Qh5q01awjXUgX1nF9nS6ir9dFdTFdXJfQTpfUpfQNurS+UZfRN+my+mZdTt+iy+sKuqIHfZuupG/XlfUduoq+U1fV1XR1XUPfpWvqu3UtfY+ure/VdfR9uq6+X9fTD+j6uoFuqB/UjfRDurFuopvqZrq5bqFb6od1K/2Ibq3b6Lb6Ud1OP6bb68d1B/2E7qif1J30U7qzflp30c/orvpZ3U0/p7vrn/RF7XVP3Usn6d66j35R99X9dH89QA/UL+lB+mU9WL+ih+iheph+VQ/Xr+kR+nU9Uo/So/Ubeoweq8fp8XqCnqiT9Zt6kn5LT9Zv6yl6qp6mp+sZeqbu/+tMc/+J/Lf+Tv7gn8++VW/TH+nteofeqXfp3XqP3qv36n16n96v9+s0naYP6AP6oD6oD+lD+rA+rI/oI/qoPqqP6WP6uD6uT+iT+gf9nT6tv9dn9Fl9Vv+gz+vz+sKvPwMwaJTRxpjAZDKZTYLJYhLNVSaryWaymxwmZq42Oc01Jpe51uQ2eUxek8/kNwVMQRMaMtawiUwhU9jEzXWmiLneFDXFTHFTwjhT0pQyN/yP8y9XX0vT0rQyrUxr09q0NW1NO9POtDftTQfTwXQ0HU0n08l0Np1NF9PFdDVdTTfTzXQ33U0P08P0ND1NkkkyfcyLpq/pZ/qbAWageckMMoPMYDPYDDFDzDAzzAw3w80IM8KMNCPNaDPajDFjzDgzzkwwE0yyz2EmmUlmsplsppgpZtrAHGaGmWFmmVlmtplt5pq5Zp6ZZxaYBWaRWWSWmCVmqVlqUkyKWWaWmVSz3Cw3K81Ks9qsNmvNWrPerDcbzUaz2Ww2qWab2Wa2m+1mp9lpdpvdZq/Za/aZfWa/2W/STJo5YA6Yg+agOWQOmcPmsDlijpij5qg5Zo6Z4+a4OWFOmFPmlDltTpsz5ow5Z86Z8+a8uWAumIvmYvptX6ACFZjABJmCTEFCkBAkBolB1iBrkD3IHsSCWJAzyBnkCq4Ncgd5grxBviB/UCAoGIQBBTbgIAoKBYWDeHBdUCS4PigaFAuKByUCF5QMSgU3BKWDG4MywU1B2eDmoFxwS1A+qBBUDG4NbgsqBbcHlYM7girBnUHVoFpQPagR3BXUDO4OagX3BLWDe4M6wX1B3eD+oF7wQFA/aBA0DB4MGgUPBY2DJkHToFnQPGgRtPxD5/f+TJ5HXM+wV5gU9g77hC+GfcN+Yf9wQDgwfCkcFL4cDg5fCYeEQ8Nh4avh8PC1cET4ejgyHBWODt8Ix4Rjw3Hh+HBCODFMDt8MJ4VvhZPDt8Mp4dRwWjA9nBHODGeF74Szwznh3PDdcF44P1wQLgwXhYtD/OWWGFLCD8Jl4Ydharg8XBGuDFeFq8M14dpwXbg+3BBuDDeFm8sO+uXQcHu4I9wZ7gp3h3vCveHH4b7wk3B/+GmYFn4WHgj/Eh4MPw8PhV+Eh8MvwyPhV+HR8OvwWPhNeDz8NjwRngxPhd+Fp8PvwzPh2fBc+EN4PvwxvBD+FF4MffrNffrlnQwZykSZKIESKJESKStlpeyUnWIUo5yUk3JRLspNuSkv5aX8lJ8KUkFKx8RUiApRnOJUhIpQUSpKxak4OXJUikpRaSpNZagMlaWyVI7KUXkqTxWpIt1Gt9HtdDvdQXfQnXQnVaNqVINqUE2qSbWoFtWm2lSH6lBdqkv1qB7Vp/rUkBpSI2pEjakxNaWm1JyaU0tqSa2oFbWm1tSW2lI7akftqT11oA7UkTpSJ+pEnakzdaEu1JW6UjfqRt2pO/WgHtSTelISJVEf6kN9qS/1p/40kAbSIBpEg2kwDaEhNIyG0XAaTiNoBI2kUTSa3qAxNJbG0XiaQBMpmZJpEk2iyTSZptAUmkbTaAbNoFk0i2bTbJpLc2kezaMFtIAW0SJaQktoKS2lFEqhZbSMUimVVtAKWkWraA2toXW0jjbQBtpEm2gLbaFttI2203baSTtpN+2mvbSX9tE+2k/7KY3S6AAdoIN0kA7RITpMh+kIHaGjdJSO0TE6TsfpBJ2gU3SKTtNpOkNn6Bydo/P0I12gn+gieUqwWWyivcpmtdlsdpvD/nWc1+az+W0BW9CGNrfN87uYrLVFbTFb3Jawzpa0pewNfxOXtxVsRXurvc1Wsrfbyra8zQL/Na5p77a17D22tr3X1rB3/S6uY++zde1Dtp5tYuvbZrahbWEb2YdsY9vENrXNbHPbwrazj9n29nHbwT5hO9on/yZeat+36+x6u8FutPvsJ/ac/cEetV/b8/ZH29P2sgPtS3aQfdkOtq/YIXbo72MAO9q+YcfYsXacHW8n2Il/E0+z0+0MO9POsu/Y2XbO38RL7Ht2nk2xC+xCu8gu/jlOrynFfmCX2Q9tql1uV9iVdpVdbdfYtf+31pV2s91it9q99mO73e6wO+0uu9vu+TlOX8d++6lNs5/ZI/Yre9B+bg/ZY/aw/fLnOH19x+w39rj91p6wJ+0p+509bb+3Z+zZn9efvvbv7E/2ovUWGFmxZsMBZ+LMnMBZOJGv4qycjbNzDo7x1ZyTr+FcfC3n5jycl/Nxfi7ABTlkYsvMERfiwhzn67gIX89FuRgX5xLsuCSX4hu4NN/IZfgmLss3czm+hctzBa7It/JtXIlv58p8B1fhO7kqV+PqXIPv4pp8N9fie7g238t1+D6uy/dzPX6A63MDbsgPciN+iBtzE27Kzbg5t+CW/DC34ke4Nbfhtvwot+PHuD0/zh34Ce7IT3Infoo789PchZ/hrvwsd+PnuDs/zz34Be7JvTiJe3MffpH7cj/uzwN4IL/Eg/hlHsyv8BAeysP4VR7Or/EIfp1H8igezW/wGB7L43g8T+CJnMxv8iR+iyfz2zyFp/I0ns4zeCbP4nd4Ns/hufwuz+P5vIAX8iJezEv4PV7K73MKf8DL+ENO5eW8glfyKl7Na3gtr+P1vIE38ibezFt4K2/jj3g77+CdvIt38x7eyx/zPv6E9/OnnMaf8QH+Cx/kz/kQf8GH+Us+wl/xUf6aj/E3fJy/5RN8kk/xd3yav+czfJbP8Q98nn/kC/wTX2TPEGGkIh2ZKIgyRZmjhChLlBhdFWWNskXZoxxRLLo6yhldE+WKro1yR3mivFG+KH9UICoYhRFFNuIoigpFhaN4dF1UJLo+KhoVi4pHJSIXlYxKRTdEpaMbozLRTVHZ6OaoXHRLVD6qEFWMbo1uiypFt0eVozuiKtGdUdWoWlQ9qhHdFdWM7o5qRfdEtaN7ozLRfVHd6P6oXvRAVD9qEDWMHowaRQ9FjaMmUdOoWdQ8ahG1jB6OWkWPRK2jNlHb6NGoXfRY1D56POoQPRF1jJ68tL9Y8MvV9K/2J0W9I/3rG7J79KL44viS+HvxpfH34ynxD+LL4h/GU+PL4yviK+Or4qvja+Jr4+vi6+Mb4hvjm+Kb41viW+Pe18gMDtMfhMG4wGVymV2Cy+IS3VUuq8vmsrscLuaudjndNS6Xu9bldnlcXpfP5XcFXEEXOnLWsYtcIVfYxd11roi73hV1xVxxV8I5V9KVci1cS9fStXKPuNaujWvrHnWPusfcY+7xhF8Ld53cU66ze9p1cc+4Z9yzrpt7znV3z7se7gXX0/VySS7J9XF9XF/X1/V3/d1AN9ANcoPcYDfYDXFD3DA3zA13w90IN8KNdCPdaDfajXFj3Dg3zk1wE1yyS3aT3CQ32U12U9wUN81NczPcDDfLzXKz3Ww3181189w8t8AtcIvcIrfELXFL3VKX4lLcMrfMpbpUt8KtcKvcKrfGrXHr3Dq3wW1wm9wmt8VtcdvcNrfdbXc73U632+12e91et8/tc/vdfpfm0twBd8AddAfdIfeFO+y+dEfcV+6o+9odc9+44+5bd8KddKec16fd9+6MO+vOuR/cefeju+B+chedd8mxN2OTYm/FJsfejk2JTY1Ni02PzYjNjM2KvRObHZsTmxt7NzYvNj+2ILYwtii2OLYk9l5saez9WErsg9iy2Iex1Njy2IrYytiq2OqY9wW2R76QL+zj/jpfxF/vi/pivrgv4Z0v6Uv5G3xpf6Mv42/yZf3Nvpy/xZf3FXxF38Q39c18c9/Ct/QP+1b+Ed/at/Ft/aO+nX/Mt/eP+w7+Cd/RP+k7+ad8Z/+07+Kf8V39s/N/7bLv4V/wPX0vn+R7+z7+Rd/X9/P9/QA/0L/kB/mX/WD/ih/ih/ph/lU/3L/mR/jX/Ug/yo/2b/gxfqwf58f7CX6iT/Zv+kn+LT/Zv+2n+Kl+mp/uZ/iZfpZ/x8/2c/xc/66f5+f7BX6hX+QX+yX+Pb/Uv+9T/Ad+mf/Qp/rlfoVf6Vf51X6NX+vX+fV+g9/oN/nNfovf6rf5j/x2v8Pv9Lv8br/H7/Uf+33+E7/ff+rT/Gf+gP+LP+g/94f8F/6w/9If8V/5o/5rf8x/44/7b/0Jf9Kf8t/50/57f8af9ef8D/68/9Ff8D/5i/I3a0IIIYQQ/xR9mf29/87/qV+3dH0AINuOfIf/es5NuX8Z91P7OsYA4IleXRv8tjVokJSU9OuxqRqCwgsBIHYp/+fvH/g1Xg5t4THoAG2g9N+tr5+q+PN93383f/xmgESALL/lpD8eJcJfz3/jP5i/yXt8ufkXAhQtfCkn/US/xZfmL/MP5t/T7jLzZ/k8GaD1f8nJCpfiS/OXgkfgSejwuyOFEEIIIYQQQohf9FPnu13u+Tb9+Ty/uZSTGS7Fl3s+v4zKf8QahBBCCCGEEEII8d97+rnujz/coUObzv/Jg8x/jjL+BAMEgD9BGTL48w+u9G8mIYQQQgghxB/t0k3/la5ECCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYTIuP79bwhT//TBV3qNQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghxJX2fwIAAP//5g1V0w==") chdir(&(0x7f0000000240)='./file0\x00') syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./file0\x00', 0x800008, 0x0, 0x1, 0x0, 0x0) 2m28.089639899s ago: executing program 5 (id=140): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$kcm(0x11, 0x3, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000880)=@newqdisc={0x70, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x44, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x5a, 0x2, 0x84d, 0x9, 0x1, 0x800}, {0x8c, 0x1, 0xfffc, 0x7fff, 0x2, 0xb}, 0x5, 0x34, 0x91f}}, @TCA_TBF_PRATE64={0xc, 0x5, 0xc2240edb8ac75ac7}, @TCA_TBF_RATE64={0xc, 0x4, 0xdd31e353c9fd1eb}]}}]}, 0x70}, 0x1, 0x0, 0x0, 0x40088c1}, 0x50) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xb}, {0xe}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0x1, 0x3, 0x1}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x2400c061}, 0x4890) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) sendmsg$kcm(r1, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0xdd86, r4, 0x3e}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000900)='l', 0x1}], 0x1}, 0x4) 2m27.491921476s ago: executing program 5 (id=144): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f0000000080)={[{@quota}, {@quota}, {@inlinecrypt}, {@orlov}, {@user_xattr}, {@jqfmt_vfsv1}]}, 0x3, 0x448, &(0x7f0000000440)="$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") symlinkat(0x0, 0xffffffffffffff9c, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) r2 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_pidfd_open(r2, 0x0) setns(r3, 0x24020000) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) mount_setattr(r4, &(0x7f0000000100)='.\x00', 0x9000, &(0x7f0000001dc0)={0x0, 0xf5, 0x20000}, 0x20) 2m26.820082764s ago: executing program 5 (id=148): r0 = memfd_create(&(0x7f00000005c0)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10`\xee\xa9\x8b\x06%\xb8G\xd1c\xe1$\xff\x97k\xde\xc5\xa96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xd9Jx\xaa\x8f~\xb94a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x05\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xd6m\xf7@]iNP\xf1\x1d\xab\x13\xce\x152s\xb8\x85\x98\x84\xbf\x8c\x80{\x16\t\xd6\x17P3\xe9\xebGKL\xd3\x88\xd2\rLG\x8e\xd6\xa72\xf4\x92\xeb&\xa5\xcc\x14FZN\x98%[p\x989\xf6\xf5\xb6\xedk\xe6\xb0\xa1\x8f\x90\xdb\xd6h)\x0f6\x88\x03P\x8ak\xf9\xc9\x82`\xa7Ku\x99\xab\xd4\xb2\xaa1\x99O\x8b\x99-\xe3', 0x1) dup(r0) bind$unix(0xffffffffffffffff, 0x0, 0x0) timer_create(0x8, 0x0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f0000000440)=[{0x20, 0x2, 0x81, 0xfffff034}, {0x20, 0x0, 0x0, 0xfffff00c}, {0x6}]}, 0x10) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0) sendmsg$inet(r1, &(0x7f00000008c0)={0x0, 0x0, 0x0}, 0x4044004) r2 = socket$inet6(0xa, 0x2, 0x3a) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4e24, 0xb, @mcast2, 0x9}, 0x1c) sendto$inet6(r2, &(0x7f0000000040)="800037bbfa9ba1ce", 0xffe9, 0x0, 0x0, 0x0) 2m24.189637047s ago: executing program 5 (id=154): close(0x3) r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) close(0x3) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000580)={0xffffffffffffffff}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x10, 0x3, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffe}, [], {0x95, 0x0, 0x700}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x94) setsockopt$sock_attach_bpf(r2, 0x1, 0x14, &(0x7f0000000040), 0x3b) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r3}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20) recvmsg$unix(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000006c0)=""/179, 0x33fe0}], 0x1}, 0x0) 2m23.895833896s ago: executing program 33 (id=154): close(0x3) r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) close(0x3) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000580)={0xffffffffffffffff}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x10, 0x3, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffe}, [], {0x95, 0x0, 0x700}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x94) setsockopt$sock_attach_bpf(r2, 0x1, 0x14, &(0x7f0000000040), 0x3b) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r3}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20) recvmsg$unix(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000006c0)=""/179, 0x33fe0}], 0x1}, 0x0) 2m23.882042036s ago: executing program 2 (id=157): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) write$UHID_CREATE2(r1, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x8031, r1, 0x1000) r2 = syz_open_dev$hidraw(&(0x7f00000004c0), 0x0, 0x14a042) dup3(r2, r1, 0x80000) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1f, 0x11, &(0x7f0000000800)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, [@call={0x85, 0x0, 0x0, 0x7}, @snprintf={{}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}, {}, {0x85, 0x0, 0x0, 0xa7}}]}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r4}, 0xc) writev(r1, &(0x7f0000001cc0)=[{&(0x7f0000000680)='s', 0x1}], 0x1) fsync(r0) 2m22.885699043s ago: executing program 2 (id=160): r0 = socket(0xa, 0x3, 0xff) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e24, 0x6, @ipv4={'\x00', '\xff\xff', @loopback}, 0x9}, 0x1c) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, 0x0, 0x0) setsockopt$inet6_int(r0, 0x29, 0x21, &(0x7f0000000080)=0x8, 0x4) getpeername$packet(r0, 0x0, &(0x7f0000000400)) r2 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000a40), 0x20000, 0x0) ioctl$ASHMEM_GET_SIZE(r2, 0x7704, 0x0) openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x9a042, 0x4d) 2m22.776720296s ago: executing program 2 (id=161): openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x143042, 0x80) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) r1 = socket(0x10, 0x3, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r3, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x0, 0xfffd, 0x0, 0x9, 0x5}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0xa5, 0x5, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000002c0)=@newqdisc={0x34, 0x24, 0xd0f, 0x70bd29, 0x0, {0x60, 0x0, 0x0, r3, {}, {0xffe0, 0xa}, {0x1, 0x10}}, [@qdisc_kind_options=@q_pfifo_fast={0xf}]}, 0x34}, 0x1, 0x0, 0x0, 0x55}, 0x4000) sendmmsg$inet(r0, &(0x7f0000006ac0)=[{{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f00000001c0)="1c", 0x1}], 0x1}}], 0x1, 0x4040801) 2m22.586433522s ago: executing program 2 (id=162): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f0000000080)={[{@quota}, {@quota}, {@inlinecrypt}, {@orlov}, {@user_xattr}, {@jqfmt_vfsv1}]}, 0x3, 0x448, &(0x7f0000000440)="$eJzs3M1vG0UbAPBnN3H6tmnfhFI++gEECiLiI2nSAr2CQOIAEhIcyjEkaVXqNqgJEq0qKAiVI6rEHXFE4i/gBBcEnJC4wh1VqlAvLZwWrb3bOK6d1q5dF/z7SZvM7I4183h37JmdbAIYWlP5jyRie0T8FhET9ezGAlP1X9eunFv868q5xSSy7M0/k1q5q1fOLZZFy9eNF5npNCL9NIm9LepdPXP2xEK1uny6yM+unXxvdvXM2WePn1w4tnxs+dT84cOHDs698Pz8cz2JM2/T1T0fruzb/erbF19fPHLxnZ++Scr4m+LokanNDj6RZT2ubrB2NKST0QE2hI6MRER+uiq1/j8RI7F+8ibilU8G2jigr7Isy8bbHz6fAf9hSQy6BcBglF/0+fy33O7Q0OOucPnF+gQoj/tasdWPjEZalKk0zW97aSoijpz/+8t8i/7chwAA2OC7fPzzTKvxXxr3N5T7f7E2NBkR90TEzoi4NyJ2RcR9EbWyD0TEgx3W37xIcuP4J73UVWC3KB//jaf1ta2N479y9BeTI0VuRy3+SnL0eHX5QPGeTEdlS56f26SO71/+9fN2xxrHf/mW11+OBYt2XBrdsvE1SwtrC7cTc6PLH0fsGW0Vf3J9JSCJiN0RsafLOo4/9fW+dsduHv8merDOlH0V8WR9bfN8NMVfSjZfn5z9X1SXD8yWV8WNfv7lwhvt6r+t+HsgP//bovX5L0wmjeu1q53XceH3z9rOabq9/seSt2rpsWLfBwtra6fnIsaS1+qNbtw/v/7aMl+Wz+Of3t+6/++M9Xdib0TkF/FDEfFwRDxStP3RiHgsIvZvEv+PLz3+bvfx91ce/1JH5389MRbNe1onRk788O2GSic7iT8//4dqqeliz618/t1Ku7q7mgEAAODfJ42I7ZGkM9fTaTozU/97+V2xLa2urK49fXTl/VNL9WcEJqOSlne6Jhruh84V0/oyP9+UP1jcN/5iZGstP7O4Ul0adPAw5Mbb9P/cHyODbh3Qd57XguGl/8Pw0v9heOn/MLxa9P+tg2gHcOe1+v7/aADtAO68pv5v2Q+GiPk/DC/9H4aX/g9DaXVr3Pwh+YEnyg+ou6U9XSSyLKLfdVU6+McHt52I9C54VyX6lhjwBxMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAECP/BMAAP//qlXhwA==") symlinkat(0x0, 0xffffffffffffff9c, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) r2 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_pidfd_open(r2, 0x0) setns(r3, 0x24020000) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) mount_setattr(r4, &(0x7f0000000100)='.\x00', 0x9000, &(0x7f0000001dc0)={0x0, 0xf5, 0x20000}, 0x20) 2m22.099444945s ago: executing program 2 (id=164): syz_open_dev$sndmidi(0x0, 0x1af0f930, 0x2) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='rdma.current\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r0, 0x0) mbind(&(0x7f0000283000/0x4000)=nil, 0x4000, 0x1, 0x0, 0x7, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000000) mremap(&(0x7f000008f000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000486000/0x1000)=nil) mlock2(&(0x7f00008cd000/0x4000)=nil, 0x4000, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) mbind(&(0x7f00000bd000/0x800000)=nil, 0x800000, 0x1, 0x0, 0x0, 0x0) pwritev2(0xffffffffffffffff, 0x0, 0x0, 0xc401, 0x4c19, 0x1) setreuid(0x0, 0x0) 2m20.240194086s ago: executing program 2 (id=171): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ustat(0x8a, &(0x7f0000000340)) 2m19.862416667s ago: executing program 34 (id=171): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ustat(0x8a, &(0x7f0000000340)) 10.958361507s ago: executing program 6 (id=625): openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1000000004000000080000000800"], 0x48) socket$inet6_udp(0xa, 0x2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet_udp(0x2, 0x2, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x723080, 0x0) syz_usb_connect$uac1(0x5, 0xdc, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c240208000103000000ff000924060506020100000924030003030005490c240206", @ANYRES8=r0, @ANYBLOB="0701cf66441dd2"], 0x0) 8.476107716s ago: executing program 6 (id=634): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r1, 0xc018643a, &(0x7f0000000340)={0x10000000, 0x40071, 0x20000000d}) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r1, 0xc02064b6, &(0x7f0000000300)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_SETCRTC(r1, 0xc06864a2, &(0x7f0000000380)={0x0, 0x0, r3, 0x0, 0x0, 0x1f5, 0x0, 0x0, {0x4, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdd, 0x8, 0x0, 0x0, 0x0, 0x8001, 0xfffffffa, "b4bc323ef77d1f000071849800000000dfff00"}}) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2000000, 0x0, 0x0, 0x0, &(0x7f0000000000)) socket(0x400000000010, 0x3, 0x0) 7.402745015s ago: executing program 6 (id=636): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) close(0xffffffffffffffff) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000018000000000000000000500000a480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c0001c006000100d9030000080003400000000114000000110001"], 0x70}, 0x1, 0x0, 0x0, 0x40008d0}, 0x40) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xf, &(0x7f0000000480)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x6}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000000)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0xa, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r3, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000000e"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) close(0x3) 6.362228234s ago: executing program 4 (id=638): r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) r2 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r2, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x3, 0x4}}, 0x10) bind$tipc(r2, &(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42, 0x2}}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x1}, 0x10) r3 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r3, &(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{0x42, 0x3}}}, 0x10) r4 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r4, &(0x7f0000000380)={&(0x7f0000000140)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x3, 0x4}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4000884}, 0x4) 6.339514405s ago: executing program 6 (id=639): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000480)=[{0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000000300)}], 0x5, 0x4, 0x6) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)=[{{0x0, 0x0, &(0x7f0000000440)=[{0x0}, {0x0}, {&(0x7f00000002c0)}], 0x3}}], 0x1, 0x4000000) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0, 0x4b}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x43, 0x0, 0x0) syz_kvm_setup_cpu$x86(r0, r2, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, &(0x7f0000000280)="c44241a8de440f01c90f01b2c2b47afab805000000b9005000000f01d966440f3881766dc4e2f9db5d00450f0766400f73dcf2f30f596600b805000000b9040000000f01d9", 0x45}], 0x1, 0x2, &(0x7f0000000340), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@x86={0x40, 0x1, 0xc, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x80, 0x9, 0x0, 0x0, 0x0, 0xfffffff8, 0x0, 0xff, 0xff}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 6.108005921s ago: executing program 3 (id=640): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) set_mempolicy(0x5, &(0x7f0000000000)=0x67, 0xb) mincore(&(0x7f0000f0c000/0x3000)=nil, 0x0, &(0x7f0000afaf0a)=""/246) write$FUSE_INIT(r0, &(0x7f0000000080)={0x50, 0x0, r1, {0x7, 0x29, 0x9, 0xffffffff9080edc4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x2, 0x800}}, 0x50) ioctl$INCFS_IOC_CREATE_FILE(r0, 0xc058671e, &(0x7f00000004c0)={{}, {0x3}, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x2, 0xe, {0x1, 0xc, 0x1, '3'}}, 0x1a}) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x2c) link(0x0, &(0x7f0000000600)='./file0\x00') syz_fuse_handle_req(r0, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0x1c}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getdents64(r2, 0x0, 0x0) 5.41918302s ago: executing program 4 (id=641): r0 = socket(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f0000008880)={0x2020, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r1, &(0x7f00000042c0)="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", 0x2000, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r1, &(0x7f0000004200)={0x50, 0x0, r2, {0x7, 0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa}}, 0x50) close(0x3) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90, 0x0, 0x0, {0x80000, 0x0, 0x0, 0x0, 0xffffffff, 0x0, {0x0, 0x0, 0x0, 0xffffffffffffffff}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90, 0x0, 0x0, {0x5, 0x0, 0xa53, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0xfffffdfd, 0x0, 0x0, 0x10b}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) openat(0xffffffffffffff9c, &(0x7f00000013c0)='./file0/file0\x00', 0x42, 0x0) writev(r0, &(0x7f0000000480)=[{&(0x7f0000005bc0)="3c9a", 0x2}], 0x1) 4.978895413s ago: executing program 4 (id=643): r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = open(&(0x7f0000000180)='.\x00', 0x0, 0x0) flock(r1, 0x2) r2 = open(&(0x7f0000000180)='.\x00', 0x10000, 0x2) r3 = open(&(0x7f0000000300)='.\x00', 0x100000, 0x0) flock(r2, 0x2) flock(r3, 0x1) flock(r1, 0x5) close_range(r0, 0xffffffffffffffff, 0x0) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) lsetxattr$trusted_overlay_nlink(0x0, 0x0, 0x0, 0x0, 0x3) poll(0x0, 0x0, 0x100) 4.976536562s ago: executing program 6 (id=644): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) recvmmsg(0xffffffffffffffff, &(0x7f0000000040), 0x4e, 0x14322, 0x0) syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f0000000280)='./file0\x00', 0x180c8, &(0x7f00000006c0)=ANY=[@ANYRES8=0x0], 0x1, 0x242, &(0x7f0000000300)="$eJzs3bFqFFEUBuBjskmWNKYWiwEbq0WtbBeJIA4IK1No5UC0SUSYNKPVPIbP4CP5GKnSjZhZsklcbczm7s58Hyz3wM/Cuc3eLc6d+fDw8/HRl9NP7c/vMR5nMYpo2jbiILZiOzr35uvWRb0bVzUBAGya2aycpu6B1aqqabkTEXt/JMWPJA0BAAAAAAAAAADw35bN/8e5+X8A6DPz//1XVdNyf/7/7Trz/wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEA65217v/3HJ3V/AMDtc/4DwPA4/wFgeJz/ADA8b9+9fz3N88NZlo0jzpq6qItu7fKXr/LDJ9mFg8W3zuq62L7Mn3Z5dj3fif15/mxpvhuPH3X57+zFm/xGvhdHq98+AAAAAAAAAAAAAAAAAAAArIVJdmnp/f7J5G95V115PsCN+/ujeDC6s20AAAAAAAAAAAAAAAAAAADARjv9+u24PDn5WCl6U8TztWjjrouItWijL0XqXyYAAAAAAAAAAAAAAAAAABiexaXf1J0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQDqL9/+vroiIpu2k3i4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADQY78CAAD//139ms4=") socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(0x0, 0x1, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) clock_gettime(0x0, 0x0) recvmmsg(r0, 0x0, 0x0, 0x40010002, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000380)={0xffffffffffffffff, 0x0}, 0x20) 4.764101268s ago: executing program 3 (id=645): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0xa4242, 0x0) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd86) 4.677098561s ago: executing program 6 (id=646): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0x14, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'macsec0\x00'}) read$FUSE(0xffffffffffffffff, &(0x7f0000000940)={0x2020}, 0x2020) accept4(r0, &(0x7f0000000300)=@pptp={0x18, 0x2, {0x0, @broadcast}}, &(0x7f0000000380)=0x80, 0x80000) socket$inet_tcp(0x2, 0x1, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x40980, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r2, 0x400455c8, 0x4) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000140)={0x1f, 0xffff, 0x2}, 0x6) 4.436820847s ago: executing program 4 (id=647): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x18, 0x5, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000069100000000000006300e0ff0000000095000000000000008c44d7fba4f9ffd101fc87f7772d38ee6aefdcb55707cc931237f83b12759ed0912a68d784413287fd21d4ea"], &(0x7f0000000100)='GPL\x00', 0x2, 0xc4, &(0x7f00000002c0)=""/196}, 0x80) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$team(&(0x7f0000000100), 0xffffffffffffffff) socket(0x10, 0x803, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000140)='cpuset.mems\x00', 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r2}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x12, 0xc, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000000000008500000056000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000005500000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @cgroup_sock_addr=0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$cgroup_subtree(r1, &(0x7f0000000300)=ANY=[@ANYRESOCT], 0x28) syz_usb_connect(0x0, 0x34, &(0x7f0000000180)=ANY=[@ANYBLOB="12011001e65f3020990455c4ab81010203010902220001810050040904780701ff54390806000000e9a57b0905090208"], 0x0) 4.065735937s ago: executing program 0 (id=648): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000340)=0x6) r3 = socket$netlink(0x10, 0x3, 0x4) writev(r3, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80043f679a10ff3d425f9cc3f4ff7f4e32f61bcdf1e422000000000100804824cabecc4b381eaadc28f23457e792945f64009400050028925aaa000000c600000000000000feff2c707f8f00ff", 0x58}], 0x1) 3.96014694s ago: executing program 7 (id=649): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000340)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x1}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket(0x10, 0x3, 0x9) sendmsg$NFT_BATCH(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000013c0)={{0x14, 0x453, 0x1, 0x0, 0x0, {0x5}}, [], {0x14, 0x3f4}}, 0x28}, 0x1, 0x0, 0x0, 0x64841}, 0x0) 3.065578955s ago: executing program 0 (id=650): openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet_tcp(0x2, 0x1, 0x0) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x7d, 0x0, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x4, 0xf, 0x80000006}, 0x0, 0x0) 3.064297225s ago: executing program 7 (id=651): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000280)=@getqdisc={0x24, 0x26, 0x200, 0x70bd27, 0x25dfdc01, {0x0, 0x0, 0x0, 0x0, {0xd, 0x2}, {0x10, 0xf}, {0xb, 0xfff3}}}, 0x24}, 0x1, 0x0, 0x0, 0x40090}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)={0x14, r2, 0x1, 0x70bd2c, 0x25dfdbff}, 0x14}}, 0x800) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000100)={0x1, 0x58, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'batadv_slave_1\x00', 0x0}) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r0, &(0x7f0000000380)={&(0x7f00000000c0), 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x5c, r2, 0x200, 0x70bd27, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_ADDR={0x2c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x7}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x3}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r3}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r4}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}, @MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x80}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8044}, 0x8c0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="6400000010000305160000001dc76dcd00000000", @ANYRES32=0x0, @ANYBLOB="00000000000000004400128009000100626f6e6400000000340002800500010004000000050016000000000008001c000000000005000c00000000000a001a"], 0xc3}, 0x1, 0x100000000000000}, 0x0) r5 = socket(0x10, 0x3, 0x0) sendmmsg(r5, &(0x7f0000000000), 0x4000000000001f2, 0x0) 2.924176989s ago: executing program 0 (id=652): prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000001000}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_clone3(&(0x7f000000dd80)={0x100000, 0x0, 0x0, 0x0, {0x13}, 0x0, 0x0, 0x0, 0x0}, 0x58) r1 = msgget$private(0x0, 0x40a) msgrcv(r1, 0x0, 0x0, 0x3, 0x2000) syz_clone3(&(0x7f000000dd80)={0xa04400, 0x0, 0x0, 0x0, {0x12}, 0x0, 0x0, 0x0, 0x0}, 0x58) msgctl$IPC_SET(0x0, 0x1, &(0x7f00000004c0)={{0x0, 0xee00, 0x0, 0x0, 0x0, 0x0, 0xfffe}, 0x0, 0x0, 0xb, 0x6f76, 0x7, 0x200000000000, 0x1, 0x8, 0x7f, 0x3}) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0369e269b6, 0x8031, 0xffffffffffffffff, 0xfffff000) 2.763195204s ago: executing program 7 (id=653): ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x0, 0x100000001, 0x242b6e39, 0x83, 0x100004, 0x0, 0x2004c8, 0x8000000, 0x80000000000000, 0xf, 0x7, 0x0, 0x5, 0x0, 0x2, 0xfffffffffffffffb], 0x0, 0x200}) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000000)={0x0, &(0x7f0000000100)=[@code={0x1, 0x81, {"0f22e5c744240060420000c744240233d8cecbc7442406000000000f011c24668f38896810c4027958b20000000064449966baf80cb83284af80ef66bafc0c66ed66baf80cb8cc07ff8aef66bafc0cb8d4000000ef48b8f8000000000000000f23c00f2135030009000f23f8450f2244"}}], 0x81}) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed}]}) ioctl$KVM_SET_GSI_ROUTING(0xffffffffffffffff, 0x4008ae6a, &(0x7f0000000000)={0x0, 0xf00}) r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0xe45, 0x9, 0xfffffffffffffffd, 0x10000000, 0x10000, 0x3, 0x4002004c2, 0x7ff, 0x1, 0x0, 0x400, 0x80, 0x88, 0x0, 0x8, 0x8d], 0xeeee8000, 0x240046}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2.743989944s ago: executing program 3 (id=654): memfd_create(0x0, 0x0) r0 = fanotify_init(0x200, 0x0) fanotify_mark(r0, 0x1, 0x40000000, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) openat$sequencer(0xffffffffffffff9c, 0x0, 0x82200, 0x0) r1 = syz_open_dev$sndmidi(0x0, 0x2, 0x141102) writev(r1, &(0x7f0000000840), 0x0) mlockall(0x2) r2 = shmget$private(0x0, 0x400000, 0x8, &(0x7f000000e000/0x400000)=nil) shmctl$SHM_LOCK(r2, 0xb) shmat(r2, &(0x7f0000ffd000/0x1000)=nil, 0x7000) shmctl$SHM_UNLOCK(r2, 0xc) 2.624124507s ago: executing program 7 (id=655): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000700), 0x101180, 0x0) ioctl$SOUND_MIXER_WRITE_VOLUME(r3, 0xc0040d07, &(0x7f0000000040)=0x122) 1.948660116s ago: executing program 0 (id=656): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001040)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_codel={{0xa}, {0xc, 0x2, [@TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0x4}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) r4 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r4, &(0x7f0000000640)="bad330fbc9b55400040000ea0756a85d86ddc268b66fa4181a9a8d1907682bc8e9526d6d5c533499633eb5239b9b15a2a7e05433a7963adaf03b", 0x3a, 0x4000801, &(0x7f00000001c0)={0x11, 0x8100, r3, 0x1, 0xd8, 0x6, @multicast}, 0x14) 1.652662514s ago: executing program 7 (id=657): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$unix(0x1, 0x2, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000600)={0x0, 0xc, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010028bd7000fddbdf250700000008000300", @ANYRES32=r4, @ANYBLOB="0c009900ff070000700000001400040073797a6b616c6c65723000000000000008000500070000000a0018"], 0x50}, 0x1, 0x0, 0x0, 0x91}, 0x24044884) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r5) socket$inet_sctp(0x2, 0x5, 0x84) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000180)=@mgmt_frame=@action={{{0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x1}, {0x7cf9}, @device_b, @device_a, @random="59a06bffb0a7", {0x7, 0x7}}, @delba={0x3, 0x2, {{0x0, 0x0, 0x9}, 0x27, {0xbd, 0x6, @device_b}}}}, 0x26) 1.411960721s ago: executing program 3 (id=658): prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0xf32}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeea, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) 1.348009173s ago: executing program 0 (id=659): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = socket$inet(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e23, @multicast1}, 0x10) sendmmsg$inet(r1, &(0x7f0000000bc0)=[{{&(0x7f0000000180)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10, 0x0}}], 0x1, 0x20004840) sendmmsg$inet(r1, 0x0, 0x0, 0x4004040) pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) splice(r1, 0x0, r2, 0x0, 0x7ffff000, 0x0) 283.966762ms ago: executing program 3 (id=660): socket$inet_udplite(0x2, 0x2, 0x88) socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x42041, 0x19a) creat(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x164) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RLERRORu(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="1c00000007ffff", @ANYRES16=r0], 0x52) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@version_u}]}}) 204.117544ms ago: executing program 4 (id=661): r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x8}}}}]}, 0x44}}, 0x24040084) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r7, {0xf000, 0xffff}, {}, {0x7, 0xfff3}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_CLASSID={0x8, 0x1, {0x0, 0x2}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) 190.023805ms ago: executing program 7 (id=662): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2a, 0xa9}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbefb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000700)=@abs={0x0, 0x0, 0x10000}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_clone(0x0, 0x0, 0x43, 0x0, 0x0, 0x0) process_vm_writev(r3, &(0x7f0000001c80)=[{&(0x7f0000001bc0)=""/156, 0x9c}], 0x1, &(0x7f0000001d80)=[{&(0x7f0000001cc0)=""/116, 0x20001c34}], 0x1, 0x0) 187.955325ms ago: executing program 0 (id=663): r0 = syz_open_dev$sndmidi(0x0, 0x2, 0x143102) writev(r0, 0x0, 0x0) r1 = socket$pppoe(0x18, 0x1, 0x0) sendmmsg(r1, 0x0, 0x0, 0x0) r2 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r2, 0x0, 0x0) listen(r2, 0x1) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f00000051c0)={0x1, 0x1000}, 0x4) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0x73220c8b}], 0x1}, 0x0) recvmmsg(r3, &(0x7f0000000580), 0x2, 0x0, 0x0) 73.551657ms ago: executing program 3 (id=664): socketpair(0x20, 0x0, 0x0, &(0x7f0000000240)) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x400, &(0x7f0000000180), 0x2, 0x786, &(0x7f0000000f80)="$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") r0 = open(&(0x7f0000000580)='./file1\x00', 0x80242, 0x1df2a23c5997fa5f) write$FUSE_CREATE_OPEN(r0, &(0x7f0000000180)={0xa0, 0xffffffffffffffda, 0x0, {{0x1000000000003, 0x3, 0x8000000000005, 0x2000000000000aa, 0x3, 0x5, {0x0, 0x180, 0x20fe, 0x2586, 0x87, 0xd615, 0x7, 0x80000003, 0xfffffffe, 0x4000, 0x0, 0xee00, 0x0, 0x3ff, 0x1}}}}, 0xa0) r1 = creat(&(0x7f0000000200)='./file1\x00', 0x2) close(r1) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f0000000980)={[{@noblock_validity}, {@journal_dev={'journal_dev', 0x3d, 0x7}}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x6}}, {@noinit_itable}, {@nogrpid}, {@nodiscard}, {@jqfmt_vfsv0}, {@noinit_itable}, {@mb_optimize_scan}, {@usrquota}, {@dioread_nolock}]}, 0x1, 0x5a3, &(0x7f00000002c0)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x141442, 0x40) r3 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$sock_int(r3, 0x1, 0x12, 0xfffffffffffffffe, &(0x7f0000000040)=0x3a) fallocate(r2, 0x0, 0xfff, 0x9) write$UHID_INPUT(r2, &(0x7f0000001440)={0x8, {"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", 0x1000}}, 0x1006) 0s ago: executing program 4 (id=665): unshare(0x2040400) r0 = socket$inet6(0xa, 0x80002, 0x0) getsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000440), &(0x7f0000000480)=0x10) setsockopt$inet6_mreq(r0, 0x29, 0x1d, 0x0, 0x0) r1 = syz_io_uring_setup(0x5574, &(0x7f0000000180)={0x0, 0xfffffffd, 0x40, 0x3, 0x17}, &(0x7f0000000000), &(0x7f0000000000), &(0x7f0000000000)) r2 = socket$inet_tcp(0x2, 0x1, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000003040)={0x2020}, 0x2020) r3 = io_uring_setup(0x221c, &(0x7f0000000300)={0x0, 0xddaa, 0x1, 0x503fa, 0x8100014e}) close_range(r3, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f00000009c0)=[r2], 0x1) r4 = dup2(r1, r2) io_uring_register$IORING_UNREGISTER_FILES(r4, 0x3, 0x0, 0x0) kernel console output (not intermixed with test programs): . Setting the MTU to 1560 would solve the problem. [ 64.148647][ T4191] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 64.241282][ T23] Bluetooth: hci2: command 0x0409 tx timeout [ 64.314633][ T4191] device hsr_slave_0 entered promiscuous mode [ 64.321160][ T23] Bluetooth: hci4: command 0x0409 tx timeout [ 64.328051][ T4191] device hsr_slave_1 entered promiscuous mode [ 64.331156][ T4194] Bluetooth: hci0: command 0x0409 tx timeout [ 64.340273][ T4194] Bluetooth: hci3: command 0x0409 tx timeout [ 64.340479][ T4191] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 64.347847][ T4194] Bluetooth: hci1: command 0x0409 tx timeout [ 64.360128][ T4191] Cannot create hsr debugfs directory [ 64.479318][ T4202] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 64.493405][ T4202] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 64.507343][ T4202] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 64.523349][ T4202] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 64.572038][ T4197] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 64.589211][ T4197] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 64.602300][ T4197] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 64.619955][ T4197] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 64.666907][ T4189] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 64.680471][ T4189] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 64.703514][ T4189] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 64.717156][ T4189] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 64.769687][ T4190] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 64.788402][ T4190] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 64.805346][ T4190] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 64.814917][ T4190] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 64.839770][ T4197] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.880150][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 64.889965][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 64.916853][ T4197] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.927017][ T4202] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.962780][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 64.971726][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 64.979475][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 64.988681][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 64.998188][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.005432][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.017091][ T4202] 8021q: adding VLAN 0 to HW filter on device team0 [ 65.026261][ T4191] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 65.036114][ T4191] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 65.046107][ T4191] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 65.055887][ T4191] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 65.065569][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 65.076409][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 65.086111][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 65.094905][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.102051][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.113549][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 65.121938][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 65.131935][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 65.140292][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.147405][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.173313][ T4189] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.201230][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 65.209903][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 65.219655][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.226777][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.236201][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 65.247320][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 65.255458][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 65.263438][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 65.276362][ T4190] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.283892][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 65.305580][ T4189] 8021q: adding VLAN 0 to HW filter on device team0 [ 65.313727][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 65.329439][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 65.339344][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 65.348316][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 65.360742][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 65.377515][ T4190] 8021q: adding VLAN 0 to HW filter on device team0 [ 65.409638][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 65.417907][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 65.428996][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 65.438009][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 65.446762][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 65.456215][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 65.465896][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 65.473909][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 65.482408][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 65.490777][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 65.499320][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 65.507864][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.515042][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.523792][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 65.532998][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 65.541791][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.548866][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.556845][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 65.565731][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 65.574493][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 65.583835][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 65.592533][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 65.601441][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 65.610234][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 65.618527][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 65.632779][ T4202] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 65.658403][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 65.667268][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 65.679321][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.686449][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.698494][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 65.707550][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 65.716223][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 65.725268][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 65.733910][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 65.743155][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 65.751759][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 65.760101][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 65.768482][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 65.776478][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 65.789906][ T305] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 65.798637][ T305] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 65.807612][ T305] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.814732][ T305] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.828409][ T305] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 65.837384][ T305] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 65.851487][ T4189] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 65.868919][ T305] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 65.881425][ T4197] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 65.910827][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 65.919769][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 65.945964][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 65.958391][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 65.985763][ T4191] 8021q: adding VLAN 0 to HW filter on device bond0 [ 66.006658][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 66.021737][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 66.060858][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 66.080353][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 66.093426][ T3095] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 66.104496][ T3095] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 66.126204][ T4190] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 66.140078][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 66.171437][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 66.197689][ T4191] 8021q: adding VLAN 0 to HW filter on device team0 [ 66.218073][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 66.246495][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 66.274326][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 66.291307][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 66.299968][ T4245] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.307099][ T4245] bridge0: port 1(bridge_slave_0) entered forwarding state [ 66.320981][ T4235] Bluetooth: hci2: command 0x041b tx timeout [ 66.343060][ T4202] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 66.362501][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 66.372835][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 66.380248][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 66.389724][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 66.398707][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 66.407300][ T23] Bluetooth: hci0: command 0x041b tx timeout [ 66.409583][ T4245] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.414698][ T23] Bluetooth: hci4: command 0x041b tx timeout [ 66.420550][ T4245] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.422404][ T4235] Bluetooth: hci1: command 0x041b tx timeout [ 66.429683][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 66.448782][ T4235] Bluetooth: hci3: command 0x041b tx timeout [ 66.453599][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 66.463145][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 66.470780][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 66.482428][ T4197] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 66.502923][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 66.512541][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 66.523577][ T4189] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 66.556315][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 66.571568][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 66.580354][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 66.597901][ T4191] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 66.631393][ T4191] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 66.661975][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 66.677933][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 66.687244][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 66.703899][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 66.719494][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 66.737358][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 66.746060][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 66.754702][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 66.778935][ T4202] device veth0_vlan entered promiscuous mode [ 66.787797][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 66.796529][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 66.807393][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 66.819747][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 66.834841][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 66.874924][ T4202] device veth1_vlan entered promiscuous mode [ 66.897093][ T4190] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 66.909962][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 66.918206][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 66.931672][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 66.940154][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 66.964489][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 66.975866][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 66.999711][ T4197] device veth0_vlan entered promiscuous mode [ 67.018197][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 67.026387][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 67.045275][ T4202] device veth0_macvtap entered promiscuous mode [ 67.063393][ T4191] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 67.070474][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 67.088156][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 67.098795][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 67.119112][ T4197] device veth1_vlan entered promiscuous mode [ 67.140520][ T4202] device veth1_macvtap entered promiscuous mode [ 67.161556][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 67.172551][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 67.180968][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 67.189530][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 67.219570][ T4190] device veth0_vlan entered promiscuous mode [ 67.226374][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 67.235881][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 67.245352][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 67.255153][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 67.263888][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 67.272953][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 67.280866][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 67.303825][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 67.313384][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 67.322519][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 67.333225][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 67.354773][ T4190] device veth1_vlan entered promiscuous mode [ 67.375790][ T4202] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 67.384241][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 67.392576][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 67.401044][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 67.408814][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 67.416879][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 67.425679][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 67.440935][ T4191] device veth0_vlan entered promiscuous mode [ 67.458391][ T4189] device veth0_vlan entered promiscuous mode [ 67.468173][ T4202] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 67.477429][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 67.486931][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 67.496252][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 67.505528][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 67.514430][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 67.524682][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 67.535022][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 67.543800][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 67.553953][ T4197] device veth0_macvtap entered promiscuous mode [ 67.567620][ T4197] device veth1_macvtap entered promiscuous mode [ 67.577709][ T4202] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.587015][ T4202] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.596227][ T4202] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.607025][ T4202] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.618754][ T4191] device veth1_vlan entered promiscuous mode [ 67.646533][ T4190] device veth0_macvtap entered promiscuous mode [ 67.655359][ T305] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 67.665049][ T305] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 67.673841][ T305] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 67.683267][ T305] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 67.692457][ T305] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 67.701861][ T305] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 67.711692][ T305] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 67.723510][ T4197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.735556][ T4197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.747406][ T4197] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 67.777553][ T4189] device veth1_vlan entered promiscuous mode [ 67.786149][ T305] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 67.795353][ T305] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 67.807792][ T4197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.819183][ T4197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.832050][ T4197] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 67.841622][ T4190] device veth1_macvtap entered promiscuous mode [ 67.868239][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 67.877132][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 67.896256][ T4197] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.907346][ T4197] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.916314][ T4197] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.926323][ T4197] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.957763][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.968755][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.979472][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.990231][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.003552][ T4190] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 68.028697][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 68.039197][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 68.047944][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 68.056798][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 68.067727][ T4191] device veth0_macvtap entered promiscuous mode [ 68.080247][ T4191] device veth1_macvtap entered promiscuous mode [ 68.106006][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.117591][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.127774][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.138739][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.150085][ T4190] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 68.169997][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.183933][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.194162][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.204847][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.216612][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.227162][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.242188][ T4191] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 68.255137][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 68.263745][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 68.272583][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 68.282064][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 68.291012][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 68.299468][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 68.308236][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 68.317201][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 68.329947][ T4190] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.339057][ T4190] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.349243][ T4190] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.358972][ T4190] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.374538][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.386466][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.398979][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.410457][ T4233] Bluetooth: hci2: command 0x040f tx timeout [ 68.418438][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.428599][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.439325][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.453775][ T4191] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 68.463590][ T4245] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.474614][ T4189] device veth0_macvtap entered promiscuous mode [ 68.481974][ T4245] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.482567][ T2301] Bluetooth: hci1: command 0x040f tx timeout [ 68.493696][ T4233] Bluetooth: hci3: command 0x040f tx timeout [ 68.506314][ T2301] Bluetooth: hci4: command 0x040f tx timeout [ 68.516481][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 68.526169][ T2301] Bluetooth: hci0: command 0x040f tx timeout [ 68.533332][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 68.542385][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 68.551486][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 68.561207][ T4191] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.569956][ T4191] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.583057][ T4191] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.592195][ T4191] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.605333][ T4189] device veth1_macvtap entered promiscuous mode [ 68.713468][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.713986][ T305] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.723550][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.744857][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.755413][ T305] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.763847][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.773886][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.784438][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.795613][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.807787][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.817711][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.828227][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.840098][ T4189] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 68.855848][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 68.869698][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 68.877733][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 68.886479][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 68.895287][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 68.909875][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.921953][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.931941][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.944506][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.955107][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.966818][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.977195][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.987843][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.997713][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.008365][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.020089][ T4189] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 69.041640][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 69.049409][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 69.063663][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 69.075455][ T305] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.078872][ T4189] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.094111][ T305] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.102091][ T4189] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.111368][ T4189] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.120083][ T4189] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.161930][ T305] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 69.208757][ T305] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.222822][ T4240] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.246846][ T305] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.257726][ T4240] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.300771][ T305] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 69.308698][ T305] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 69.387776][ T305] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.407008][ T305] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.427495][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.437345][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.507030][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 69.517720][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 69.591789][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.599877][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.640608][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 69.848176][ T4280] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 69.912236][ T4288] loop1: detected capacity change from 0 to 512 [ 69.961633][ T4288] ======================================================= [ 69.961633][ T4288] WARNING: The mand mount option has been deprecated and [ 69.961633][ T4288] and is ignored by this kernel. Remove the mand [ 69.961633][ T4288] option from the mount to silence this warning. [ 69.961633][ T4288] ======================================================= [ 70.054483][ T4285] device bridge0 entered promiscuous mode [ 70.104414][ T4285] device vlan2 entered promiscuous mode [ 70.130957][ T4288] EXT4-fs (loop1): Ignoring removed oldalloc option [ 70.137660][ T4288] EXT4-fs (loop1): Ignoring removed nobh option [ 70.208511][ T4288] EXT4-fs error (device loop1): ext4_xattr_inode_iget:401: inode #11: comm syz.1.7: iget: bad extra_isize 90 (inode size 256) [ 70.253948][ T4287] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.265464][ T4288] EXT4-fs (loop1): Remounting filesystem read-only [ 70.274731][ T4288] EXT4-fs error (device loop1): ext4_xattr_inode_iget:406: comm syz.1.7: error while reading EA inode 11 err=-117 [ 70.289227][ T4287] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.298090][ T4288] EXT4-fs (loop1): Remounting filesystem read-only [ 70.307715][ T4288] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2807: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 70.322948][ T154] Bluetooth: hci5: Frame reassembly failed (-84) [ 70.335771][ T4288] EXT4-fs error (device loop1): ext4_xattr_inode_iget:401: inode #11: comm syz.1.7: iget: bad extra_isize 90 (inode size 256) [ 70.371895][ T4288] EXT4-fs (loop1): Remounting filesystem read-only [ 70.378834][ T4288] EXT4-fs error (device loop1): ext4_xattr_inode_iget:406: comm syz.1.7: error while reading EA inode 11 err=-117 [ 70.393119][ T4290] netlink: 'syz.2.9': attribute type 16 has an invalid length. [ 70.393894][ T4288] EXT4-fs (loop1): Remounting filesystem read-only [ 70.412416][ T4288] EXT4-fs error (device loop1): ext4_xattr_inode_iget:401: inode #18: comm syz.1.7: iget: bad extra_isize 90 (inode size 256) [ 70.424535][ T4290] netlink: 'syz.2.9': attribute type 17 has an invalid length. [ 70.441561][ T4288] EXT4-fs (loop1): Remounting filesystem read-only [ 70.448394][ T4288] EXT4-fs error (device loop1): ext4_xattr_inode_iget:406: comm syz.1.7: error while reading EA inode 18 err=-117 [ 70.469322][ T4288] EXT4-fs (loop1): Remounting filesystem read-only [ 70.476580][ T4288] EXT4-fs error (device loop1): ext4_xattr_inode_iget:401: inode #18: comm syz.1.7: iget: bad extra_isize 90 (inode size 256) [ 70.491681][ T4235] Bluetooth: hci2: command 0x0419 tx timeout [ 70.501266][ T4288] EXT4-fs (loop1): Remounting filesystem read-only [ 70.508161][ T4288] EXT4-fs error (device loop1): ext4_xattr_inode_iget:406: comm syz.1.7: error while reading EA inode 18 err=-117 [ 70.529191][ T4288] EXT4-fs (loop1): Remounting filesystem read-only [ 70.534847][ T4290] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 70.548640][ T4288] EXT4-fs (loop1): 1 orphan inode deleted [ 70.552584][ T4290] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 70.557555][ T4288] EXT4-fs (loop1): mounted filesystem without journal. Opts: data_err=ignore,oldalloc,debug_want_extra_isize=0x000000000000005a,nobh,errors=remount-ro,nodiscard,grpid,. Quota mode: none. [ 70.562914][ T4235] Bluetooth: hci3: command 0x0419 tx timeout [ 70.587846][ T4297] Bluetooth: hci0: command 0x0419 tx timeout [ 70.599930][ T4297] Bluetooth: hci4: command 0x0419 tx timeout [ 70.606217][ T4297] Bluetooth: hci1: command 0x0419 tx timeout [ 70.642050][ T4290] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 70.888949][ T4307] loop4: detected capacity change from 0 to 128 [ 70.927267][ T4307] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 70.962245][ T4307] ext4 filesystem being mounted at /1/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 71.015065][ T4307] syz.4.13 (pid 4307) is setting deprecated v1 encryption policy; recommend upgrading to v2. [ 71.177819][ T4307] fscrypt: Adiantum using implementation "adiantum(xchacha12-simd,aes-aesni,nhpoly1305-avx2)" [ 71.204590][ T1430] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.212684][ T1430] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.262850][ T4319] loop2: detected capacity change from 0 to 256 [ 71.269018][ T26] audit: type=1800 audit(1777572156.844:2): pid=4307 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.13" name="file1" dev="loop4" ino=14 res=0 errno=0 [ 71.531450][ T7] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 71.910592][ T7] usb 1-1: Using ep0 maxpacket: 8 [ 72.090746][ T4338] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[4339] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[4338] [ 72.239359][ T7] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 72.347291][ T7] usb 1-1: config 0 has no interfaces? [ 72.483559][ T7] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 72.727675][ T4201] Bluetooth: hci5: Entering manufacturer mode failed (-110) [ 72.844501][ T7] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 72.858927][ T7] usb 1-1: config 0 descriptor?? [ 74.006326][ T4352] process 'syz.3.25' launched './file2' with NULL argv: empty string added [ 74.248916][ T4358] loop3: detected capacity change from 0 to 128 [ 74.285530][ T4330] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.293112][ T4330] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.877151][ T4330] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 75.980337][ T4330] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 77.308351][ T4388] loop3: detected capacity change from 0 to 64 [ 77.575327][ T4330] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.584662][ T4330] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.595631][ T4330] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.605708][ T4330] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.871625][ T4316] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 77.910635][ T4364] usb 1-1: USB disconnect, device number 2 [ 78.963409][ T4371] netlink: 'syz.2.30': attribute type 1 has an invalid length. [ 79.321756][ T4397] netlink: 4 bytes leftover after parsing attributes in process `syz.0.36'. [ 79.451593][ T4408] loop4: detected capacity change from 0 to 2048 [ 79.502979][ T4408] UDF-fs: error (device loop4): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 79.545533][ T4408] UDF-fs: error (device loop4): udf_read_tagged: tag checksum failed, block 160: 0xd2 != 0xd4 [ 79.609585][ T4408] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 80.560408][ T26] audit: type=1326 audit(1777572166.134:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4412 comm="syz.2.43" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d5b21add9 code=0x7fc00000 [ 80.611610][ T4431] netlink: 4 bytes leftover after parsing attributes in process `syz.0.48'. [ 80.760175][ T4428] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 81.084000][ T4421] chnl_net:caif_netlink_parms(): no params data found [ 81.283053][ T4421] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.290459][ T4421] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.299408][ T4421] device bridge_slave_0 entered promiscuous mode [ 81.309488][ T4421] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.317163][ T4421] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.325696][ T4421] device bridge_slave_1 entered promiscuous mode [ 81.394278][ T4421] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 81.423703][ T4445] binder_alloc: 4444: binder_alloc_buf size 8 failed, no address space [ 81.428351][ T4421] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 81.477140][ T4445] binder_alloc: allocated: 4096 (num: 1 largest: 4096), free: 0 (num: 0 largest: 0) [ 81.555251][ T4447] device syzkaller0 entered promiscuous mode [ 81.643129][ T4421] team0: Port device team_slave_0 added [ 81.675427][ T4459] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 81.753355][ T4421] team0: Port device team_slave_1 added [ 81.815966][ T4421] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 81.838891][ T4421] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.929803][ T4421] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 81.952595][ T4465] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 81.978579][ T4465] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 82.087522][ T4465] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 82.321102][ T4363] Bluetooth: hci1: command 0x0409 tx timeout [ 82.495027][ T4465] device bridge_slave_0 left promiscuous mode [ 82.613795][ T4465] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.684225][ T4465] device bridge_slave_1 left promiscuous mode [ 83.901911][ T4465] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.400785][ T7] Bluetooth: hci1: command 0x041b tx timeout [ 84.458420][ T4465] bond0: (slave bond_slave_0): Releasing backup interface [ 84.789959][ T4465] bond0: (slave bond_slave_1): Releasing backup interface [ 85.631946][ T4465] team0: Port device team_slave_0 removed [ 85.815349][ T4465] team0: Port device team_slave_1 removed [ 85.864293][ T4465] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 85.872440][ T4465] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 85.923578][ T4465] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 85.968420][ T4465] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 86.020375][ T4421] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 86.036694][ T4421] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.074693][ T4421] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.126463][ T4468] team0: Mode changed to "loadbalance" [ 86.150546][ T4485] netlink: 32 bytes leftover after parsing attributes in process `syz.0.63'. [ 86.306956][ T4485] Zero length message leads to an empty skb [ 86.329940][ T4421] device hsr_slave_0 entered promiscuous mode [ 86.418431][ T4421] device hsr_slave_1 entered promiscuous mode [ 86.465505][ T4421] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 86.480720][ T4232] Bluetooth: hci1: command 0x040f tx timeout [ 86.490083][ T4421] Cannot create hsr debugfs directory [ 86.563462][ T1324] cfg80211: failed to load regulatory.db [ 88.930505][ C0] sched: RT throttling activated [ 88.948431][ T13] Bluetooth: hci1: command 0x0419 tx timeout [ 89.362054][ T4511] loop0: detected capacity change from 0 to 1024 [ 89.472120][ T4511] EXT4-fs (loop0): Ignoring removed oldalloc option [ 89.496231][ T4421] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 89.501951][ T4511] EXT4-fs (loop0): inline encryption not supported [ 89.533274][ T4421] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 89.560695][ T4511] EXT4-fs (loop0): Ignoring removed bh option [ 89.603047][ T4421] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 89.652363][ T4421] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 89.680940][ T4511] EXT4-fs (loop0): mounted filesystem without journal. Opts: nobarrier,barrier,commit=0x0000000000000005,journal_ioprio=0x0000000000000000,data_err=ignore,init_itable,oldalloc,inlinecrypt,bh,inode_readahead_blks=0x0000000001000000,,errors=continue. Quota mode: none. [ 90.608940][ T305] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.749200][ T4527] capability: warning: `syz.0.75' uses deprecated v2 capabilities in a way that may be insecure [ 91.672486][ T4533] DRBG: could not allocate CTR cipher TFM handle: ctr(aes) [ 91.774076][ T305] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.958911][ T305] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.061999][ T4421] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.088045][ T305] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.148592][ T4421] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.158268][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 92.167365][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 92.199102][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 92.209490][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 92.218484][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.225654][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.237973][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 92.247279][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 92.255937][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.263100][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.273318][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 92.302498][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 92.317862][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 92.332247][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 92.344301][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 92.392844][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 92.401724][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 92.411862][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 92.421339][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 92.430035][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 92.442702][ T4421] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 92.456502][ T4421] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 92.486642][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 92.502344][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 92.785111][ T26] audit: type=1800 audit(1777572178.364:4): pid=4548 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.78" name="/" dev="fuse" ino=4 res=0 errno=0 [ 93.453130][ T4568] loop4: detected capacity change from 0 to 256 [ 93.927125][ T4578] loop0: detected capacity change from 0 to 512 [ 96.270505][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!! [ 96.580503][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!! [ 96.670502][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!! [ 96.780503][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!! [ 96.940519][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #192!!! [ 96.960520][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #192!!! [ 96.970530][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #192!!! [ 96.980534][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #192!!! [ 96.990529][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #192!!! [ 97.000530][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #192!!! [ 97.142822][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 97.174244][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 97.328438][ T4421] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 97.703418][ T4598] loop2: detected capacity change from 0 to 512 [ 98.070313][ T4609] dmxdev: DVB (dvb_dmxdev_filter_start): could not set feed [ 98.078131][ T4609] dvb_demux: dvb_demux_feed_del: feed not in list (type=1 state=0 pid=ffff) [ 98.282550][ T4598] EXT4-fs (loop2): 1 truncate cleaned up [ 98.492295][ T4598] EXT4-fs (loop2): mounted filesystem without journal. Opts: noload,stripe=0x000000000000030c,jqfmt=vfsv1,nojournal_checksum,jqfmt=vfsv1,usrjquota=,,errors=continue. Quota mode: none. [ 99.221222][ T3095] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 99.246691][ T3095] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 99.383061][ T3095] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 99.405915][ T3095] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 99.441833][ T4421] device veth0_vlan entered promiscuous mode [ 99.502223][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 99.519193][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 99.588548][ T4421] device veth1_vlan entered promiscuous mode [ 99.686622][ T305] device hsr_slave_0 left promiscuous mode [ 99.711476][ T305] device hsr_slave_1 left promiscuous mode [ 99.744565][ T305] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 99.789005][ T305] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 99.839984][ T305] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 99.879193][ T305] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 99.902139][ T305] device bridge_slave_1 left promiscuous mode [ 99.930674][ T305] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.004535][ T305] device bridge_slave_0 left promiscuous mode [ 100.073337][ T305] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.257480][ T305] device veth1_macvtap left promiscuous mode [ 100.277307][ T305] device veth0_macvtap left promiscuous mode [ 100.285706][ T4643] loop0: detected capacity change from 0 to 8192 [ 100.305824][ T305] device veth1_vlan left promiscuous mode [ 100.352388][ T4643] REISERFS warning (device loop0): super-6506 reiserfs_getopt: bad value "jou" for option "data" [ 100.352388][ T4643] [ 100.352405][ T305] device veth0_vlan left promiscuous mode [ 100.442457][ T4643] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 103.436323][ T305] team0 (unregistering): Port device team_slave_1 removed [ 103.624563][ T305] team0 (unregistering): Port device team_slave_0 removed [ 104.285305][ T305] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 104.357964][ T305] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 104.486588][ T4709] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=3897524436 (7795048872 ns) > initial count (2759807172 ns). Using initial count to start timer. [ 104.570233][ T4709] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=3996681224 (15986724896 ns) > initial count (3709615788 ns). Using initial count to start timer. [ 104.595412][ T305] bond0 (unregistering): Released all slaves [ 104.722426][ T4715] loop0: detected capacity change from 0 to 256 [ 104.750959][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 104.759372][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 104.790852][ T4715] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 105.086459][ T4421] device veth0_macvtap entered promiscuous mode [ 105.145148][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 105.164364][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 105.395898][ T4421] device veth1_macvtap entered promiscuous mode [ 105.426380][ T4421] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 105.447486][ T4421] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 105.487841][ T4421] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 105.570549][ T4421] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 105.628557][ T4421] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 105.707619][ T4421] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 105.771321][ T4421] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 105.830187][ T4421] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 105.882154][ T4421] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 105.950380][ T4421] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 106.013300][ T4421] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.065478][ T4421] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.138935][ T4421] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.187214][ T4421] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.495644][ T3095] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 106.510248][ T3095] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 106.584055][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 106.603055][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 106.617450][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 106.629209][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 106.647832][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 106.659742][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 106.676608][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 107.095733][ T4719] loop4: detected capacity change from 0 to 262144 [ 107.115878][ T4750] netlink: 24 bytes leftover after parsing attributes in process `syz.2.119'. [ 107.178006][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 107.209979][ T4757] netlink: 24 bytes leftover after parsing attributes in process `syz.0.120'. [ 107.219676][ T4719] F2FS-fs (loop4): invalid crc value [ 107.248412][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 107.277223][ T4719] F2FS-fs (loop4): Found nat_bits in checkpoint [ 107.344158][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 107.378682][ T4719] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4 [ 107.567632][ T4776] loop0: detected capacity change from 0 to 512 [ 107.795626][ T4776] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a802c198, mo2=0002] [ 107.815729][ T4784] device syzkaller0 entered promiscuous mode [ 107.849093][ T4776] System zones: 1-12 [ 107.917667][ T4794] loop2: detected capacity change from 0 to 512 [ 107.952269][ T4776] EXT4-fs error (device loop0): ext4_iget_extra_inode:4573: inode #15: comm syz.0.124: corrupted in-inode xattr [ 107.999026][ T4776] EXT4-fs error (device loop0): ext4_orphan_get:1411: comm syz.0.124: couldn't read orphan inode 15 (err -117) [ 108.012851][ T4794] FAT-fs (loop2): Unrecognized mount option "shortname=lowergt" or missing value [ 108.060815][ T4776] EXT4-fs (loop0): mounted filesystem without journal. Opts: block_validity,minixdf,noblock_validity,lazytime,noauto_da_alloc,block_validity,init_itable=0x0000000000000009,debug,usrjquota=,auto_da_alloc,norecovery,,errors=continue. Quota mode: none. [ 108.592276][ T4191] EXT4-fs error (device loop0): ext4_readdir:263: inode #11: block 18: comm syz-executor: path (unknown): bad entry in directory: inode out of bounds - offset=0, inode=256, rec_len=1024, size=1024 fake=0 [ 108.761331][ T4191] EXT4-fs error (device loop0): ext4_empty_dir:3177: inode #11: block 18: comm syz-executor: bad entry in directory: inode out of bounds - offset=4096, inode=256, rec_len=1024, size=1024 fake=0 [ 109.796121][ T4191] EXT4-fs error (device loop0): ext4_readdir:263: inode #11: block 18: comm syz-executor: path (unknown): bad entry in directory: inode out of bounds - offset=0, inode=256, rec_len=1024, size=1024 fake=0 [ 109.862802][ T4191] EXT4-fs error (device loop0): ext4_empty_dir:3177: inode #11: block 18: comm syz-executor: bad entry in directory: inode out of bounds - offset=4096, inode=256, rec_len=1024, size=1024 fake=0 [ 109.938485][ T4191] EXT4-fs error (device loop0): ext4_readdir:263: inode #11: block 18: comm syz-executor: path (unknown): bad entry in directory: inode out of bounds - offset=0, inode=256, rec_len=1024, size=1024 fake=0 [ 110.029689][ T4191] EXT4-fs error (device loop0): ext4_empty_dir:3177: inode #11: block 18: comm syz-executor: bad entry in directory: inode out of bounds - offset=4096, inode=256, rec_len=1024, size=1024 fake=0 [ 110.099324][ T4191] EXT4-fs error (device loop0): ext4_readdir:263: inode #11: block 18: comm syz-executor: path (unknown): bad entry in directory: inode out of bounds - offset=0, inode=256, rec_len=1024, size=1024 fake=0 [ 110.171072][ T4191] EXT4-fs error (device loop0): ext4_empty_dir:3177: inode #11: block 18: comm syz-executor: bad entry in directory: inode out of bounds - offset=4096, inode=256, rec_len=1024, size=1024 fake=0 [ 110.256335][ T4191] EXT4-fs error (device loop0): ext4_readdir:263: inode #11: block 18: comm syz-executor: path (unknown): bad entry in directory: inode out of bounds - offset=0, inode=256, rec_len=1024, size=1024 fake=0 [ 110.338957][ T4191] EXT4-fs error (device loop0): ext4_empty_dir:3177: inode #11: block 18: comm syz-executor: bad entry in directory: inode out of bounds - offset=4096, inode=256, rec_len=1024, size=1024 fake=0 [ 110.802465][ T4824] netlink: 24 bytes leftover after parsing attributes in process `syz.5.134'. [ 111.678805][ T4838] loop5: detected capacity change from 0 to 256 [ 111.783350][ T4838] exFAT-fs (loop5): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 111.915518][ T4851] device syzkaller0 entered promiscuous mode [ 112.232780][ T4863] device syzkaller0 entered promiscuous mode [ 112.564219][ T4879] loop5: detected capacity change from 0 to 512 [ 112.650698][ T4879] EXT4-fs (loop5): inline encryption not supported [ 112.668116][ T4879] EXT4-fs (loop5): Ignoring removed orlov option [ 112.674946][ T4847] chnl_net:caif_netlink_parms(): no params data found [ 112.718663][ T4879] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 112.771972][ T4879] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 112.852508][ T4879] EXT4-fs (loop5): 1 truncate cleaned up [ 112.870931][ T4879] EXT4-fs (loop5): mounted filesystem without journal. Opts: quota,quota,inlinecrypt,orlov,user_xattr,jqfmt=vfsv1,,errors=continue. Quota mode: writeback. [ 113.144990][ T4847] bridge0: port 1(bridge_slave_0) entered blocking state [ 113.162053][ T4847] bridge0: port 1(bridge_slave_0) entered disabled state [ 113.192731][ T4847] device bridge_slave_0 entered promiscuous mode [ 113.257280][ T4421] EXT4-fs error (device loop5): mb_free_blocks:1889: group 0, inode 16: block 35:freeing already freed block (bit 34); block bitmap corrupt. [ 113.388840][ T4847] bridge0: port 2(bridge_slave_1) entered blocking state [ 113.406426][ T4847] bridge0: port 2(bridge_slave_1) entered disabled state [ 113.421807][ T4847] device bridge_slave_1 entered promiscuous mode [ 113.552084][ T4847] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 113.587316][ T4847] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 114.394082][ T4375] Bluetooth: hci2: command 0x0409 tx timeout [ 114.529603][ T305] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.619586][ T4903] tipc: Started in network mode [ 114.632547][ T4903] tipc: Node identity f2d0e1a28486, cluster identity 4711 [ 114.640264][ T4903] tipc: Enabled bearer , priority 0 [ 114.682935][ T4847] team0: Port device team_slave_0 added [ 114.705285][ T4847] team0: Port device team_slave_1 added [ 114.724854][ T4847] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 114.732156][ T4847] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 114.758700][ T4847] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 114.792593][ T305] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.805800][ T4847] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 114.813433][ T4847] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 114.841941][ T4847] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 115.107704][ T4903] tipc: Disabling bearer [ 115.666155][ T305] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.767099][ T4910] loop2: detected capacity change from 0 to 256 [ 115.809233][ T305] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.874125][ T4847] device hsr_slave_0 entered promiscuous mode [ 115.886362][ T4847] device hsr_slave_1 entered promiscuous mode [ 115.899077][ T4847] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 115.918979][ T4847] Cannot create hsr debugfs directory [ 116.296627][ T21] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 116.366285][ T21] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 116.414103][ T4344] Bluetooth: hci2: command 0x041b tx timeout [ 116.810657][ T21] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 117.190872][ T21] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 117.290607][ T4934] chnl_net:caif_netlink_parms(): no params data found [ 117.316894][ T4954] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 117.380985][ T21] usb 4-1: New USB device found, idVendor=1de1, idProduct=c102, bcdDevice=7d.08 [ 117.420988][ T21] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 117.429257][ T21] usb 4-1: Product: syz [ 117.450083][ T21] usb 4-1: Manufacturer: syz [ 117.455122][ T21] usb 4-1: SerialNumber: syz [ 117.465566][ T4960] loop2: detected capacity change from 0 to 512 [ 117.486065][ T21] usb 4-1: config 0 descriptor?? [ 117.510864][ T4960] EXT4-fs (loop2): inline encryption not supported [ 117.517445][ T4960] EXT4-fs (loop2): Ignoring removed orlov option [ 117.526618][ T4847] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 117.538285][ T21] gm12u320 4-1:0.0: [drm:gm12u320_set_ecomode] *ERROR* Misc. req. error -8 [ 117.547615][ T21] gm12u320: probe of 4-1:0.0 failed with error -5 [ 117.557532][ T21] usb-storage 4-1:0.0: USB Mass Storage device detected [ 117.568382][ T4960] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 117.584544][ T21] usb-storage 4-1:0.0: device ignored [ 117.615012][ T4960] EXT4-fs (loop2): 1 truncate cleaned up [ 117.637940][ T4847] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 117.652104][ T4960] EXT4-fs (loop2): mounted filesystem without journal. Opts: quota,quota,inlinecrypt,orlov,user_xattr,jqfmt=vfsv1,,errors=continue. Quota mode: writeback. [ 117.679945][ T4847] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 117.808998][ T4847] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 117.833044][ T4934] bridge0: port 1(bridge_slave_0) entered blocking state [ 117.834962][ T4931] udc-core: couldn't find an available UDC or it's busy [ 117.849928][ T4931] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 117.851236][ T4934] bridge0: port 1(bridge_slave_0) entered disabled state [ 117.896798][ T4934] device bridge_slave_0 entered promiscuous mode [ 117.909821][ T4970] netlink: 4 bytes leftover after parsing attributes in process `syz.4.163'. [ 117.919841][ T4975] misc userio: The device must be registered before sending interrupts [ 117.935694][ T4197] EXT4-fs error (device loop2): mb_free_blocks:1889: group 0, inode 16: block 35:freeing already freed block (bit 34); block bitmap corrupt. [ 117.975695][ T4934] bridge0: port 2(bridge_slave_1) entered blocking state [ 117.987469][ T21] usb 4-1: USB disconnect, device number 2 [ 117.991931][ T4934] bridge0: port 2(bridge_slave_1) entered disabled state [ 118.006527][ T4934] device bridge_slave_1 entered promiscuous mode [ 118.088398][ T4934] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 118.171393][ T4934] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 118.263769][ T305] device hsr_slave_0 left promiscuous mode [ 118.272678][ T305] device hsr_slave_1 left promiscuous mode [ 118.289830][ T305] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 118.298954][ T305] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 118.320801][ T305] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 118.328405][ T305] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 118.336772][ T305] device bridge_slave_1 left promiscuous mode [ 118.344875][ T305] bridge0: port 2(bridge_slave_1) entered disabled state [ 118.354375][ T305] device bridge_slave_0 left promiscuous mode [ 118.361002][ T305] bridge0: port 1(bridge_slave_0) entered disabled state [ 118.380779][ T305] device veth1_macvtap left promiscuous mode [ 118.386887][ T305] device veth0_macvtap left promiscuous mode [ 118.396990][ T305] device veth1_vlan left promiscuous mode [ 118.404231][ T305] device veth0_vlan left promiscuous mode [ 118.480632][ T23] Bluetooth: hci2: command 0x040f tx timeout [ 118.547846][ T4991] loop3: detected capacity change from 0 to 16 [ 118.602728][ T4991] erofs: (device loop3): erofs_read_superblock: blkszbits 9 isn't supported on this platform [ 118.720955][ T4375] Bluetooth: hci1: command 0x0409 tx timeout [ 118.789579][ T305] team0 (unregistering): Port device team_slave_1 removed [ 118.806979][ T305] team0 (unregistering): Port device team_slave_0 removed [ 118.831354][ T305] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 118.849781][ T305] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 119.037838][ T4375] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 119.071466][ T305] bond0 (unregistering): Released all slaves [ 119.261678][ T4934] team0: Port device team_slave_0 added [ 119.302653][ T4934] team0: Port device team_slave_1 added [ 119.340890][ T4375] usb 4-1: Using ep0 maxpacket: 8 [ 119.358634][ T4847] 8021q: adding VLAN 0 to HW filter on device bond0 [ 119.418010][ T4934] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 119.429205][ T4934] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 119.484150][ T4934] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 119.500902][ T4375] usb 4-1: config 0 has no interfaces? [ 119.506485][ T4375] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2db4, bcdDevice= 0.00 [ 119.541277][ T4847] 8021q: adding VLAN 0 to HW filter on device team0 [ 119.545982][ T4375] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 119.556775][ T4934] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 119.574384][ T4934] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 119.618200][ T4375] usb 4-1: config 0 descriptor?? [ 119.624038][ T4934] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 119.640134][ T3095] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 119.651318][ T3095] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 119.741004][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 119.757594][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 119.801073][ T4350] bridge0: port 1(bridge_slave_0) entered blocking state [ 119.808229][ T4350] bridge0: port 1(bridge_slave_0) entered forwarding state [ 119.865632][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 119.894286][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 119.922089][ T4350] bridge0: port 2(bridge_slave_1) entered blocking state [ 119.929254][ T4350] bridge0: port 2(bridge_slave_1) entered forwarding state [ 119.961161][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 119.981557][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 120.065306][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 120.075101][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 120.110426][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 120.141071][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 120.172874][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 120.201410][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 120.231256][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 120.264680][ T4934] device hsr_slave_0 entered promiscuous mode [ 120.283883][ T4934] device hsr_slave_1 entered promiscuous mode [ 120.306604][ T4934] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 120.335440][ T4934] Cannot create hsr debugfs directory [ 120.358190][ T4847] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 120.410091][ T4847] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 120.440308][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 120.459215][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 120.489240][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 120.560658][ T23] Bluetooth: hci2: command 0x0419 tx timeout [ 120.810998][ T4362] Bluetooth: hci1: command 0x041b tx timeout [ 120.920689][ T4991] ODEBUG: Out of memory. ODEBUG disabled [ 120.937745][ T4934] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 121.051473][ T4934] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 121.072331][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 121.079845][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 121.118052][ T5001] chnl_net:caif_netlink_parms(): no params data found [ 121.160814][ T4934] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 121.193130][ T4934] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 121.220305][ T4847] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 121.234289][ T4232] usb 4-1: USB disconnect, device number 3 [ 121.399589][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 121.422649][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 121.472018][ T5001] bridge0: port 1(bridge_slave_0) entered blocking state [ 121.489814][ T5001] bridge0: port 1(bridge_slave_0) entered disabled state [ 121.516452][ T5001] device bridge_slave_0 entered promiscuous mode [ 121.557695][ T4847] device veth0_vlan entered promiscuous mode [ 121.589503][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 121.598510][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 121.617421][ T5001] bridge0: port 2(bridge_slave_1) entered blocking state [ 121.627579][ T5001] bridge0: port 2(bridge_slave_1) entered disabled state [ 121.638373][ T5001] device bridge_slave_1 entered promiscuous mode [ 121.655109][ T4847] device veth1_vlan entered promiscuous mode [ 121.673686][ T5018] netlink: 4 bytes leftover after parsing attributes in process `syz.4.173'. [ 121.704975][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 121.718189][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 121.730190][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 121.820563][ T4934] 8021q: adding VLAN 0 to HW filter on device bond0 [ 121.906624][ T5001] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 121.943229][ T5001] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 121.999336][ T5020] xt_hashlimit: size too large, truncated to 1048576 [ 122.018941][ T5020] xt_hashlimit: invalid rate [ 122.043615][ T4847] device veth0_macvtap entered promiscuous mode [ 122.065872][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 122.133398][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 122.146591][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 122.178612][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 122.191522][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 122.226740][ T5001] team0: Port device team_slave_0 added [ 122.248869][ T4934] 8021q: adding VLAN 0 to HW filter on device team0 [ 122.296991][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 122.320299][ T5001] team0: Port device team_slave_1 added [ 122.343786][ T4847] device veth1_macvtap entered promiscuous mode [ 122.372221][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 122.410108][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 122.434660][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 122.458004][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 122.465187][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 122.504866][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 122.538487][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 122.560762][ T1324] Bluetooth: hci3: command 0x0409 tx timeout [ 122.604189][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 122.611362][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 122.649579][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 122.694136][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 122.731613][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 122.749790][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 122.776703][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 122.807508][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 122.853278][ T4847] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 122.884954][ T4232] Bluetooth: hci1: command 0x040f tx timeout [ 122.915320][ T4847] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 122.935560][ T4847] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 122.956385][ T4847] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 122.988108][ T4847] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 123.013693][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 123.032861][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 123.096656][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 123.114995][ T5035] loop4: detected capacity change from 0 to 256 [ 123.123034][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 123.128560][ T5036] loop3: detected capacity change from 0 to 1024 [ 123.158348][ T5001] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 123.172487][ T5001] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 123.208649][ T5001] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 123.221919][ T5001] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 123.228891][ T5001] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 123.297424][ T5001] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 123.362024][ T4847] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 123.405987][ T4847] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 123.420690][ T4847] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 123.440788][ T4847] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 123.469900][ T4847] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 123.482494][ T3095] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 123.511004][ T3095] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 123.531250][ T3095] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 123.591507][ T3095] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 123.639823][ T4847] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.664599][ T4847] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.674659][ T4847] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.684946][ T4847] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.800423][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 123.889086][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 123.974892][ T4934] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 124.003361][ T5001] device hsr_slave_0 entered promiscuous mode [ 124.020779][ T5001] device hsr_slave_1 entered promiscuous mode [ 124.031105][ T5001] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 124.038706][ T5001] Cannot create hsr debugfs directory [ 124.362240][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 124.370234][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 124.437507][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 124.478324][ T4349] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 124.537046][ T4349] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 124.566375][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 124.577043][ T5064] netlink: 'syz.3.182': attribute type 1 has an invalid length. [ 124.766370][ T5064] device bond1 entered promiscuous mode [ 124.851690][ T5064] 8021q: adding VLAN 0 to HW filter on device bond1 [ 125.116509][ T5066] netlink: 36 bytes leftover after parsing attributes in process `syz.3.182'. [ 125.407930][ T4232] Bluetooth: hci3: command 0x041b tx timeout [ 125.414238][ T13] Bluetooth: hci1: command 0x0419 tx timeout [ 125.502707][ T5066] device bond1 left promiscuous mode [ 125.590626][ T5068] bond1: (slave bridge1): making interface the new active one [ 125.598689][ T5068] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 125.638126][ T3095] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 125.648480][ T3095] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 125.673775][ T4934] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 125.754172][ T5080] loop3: detected capacity change from 0 to 256 [ 125.835131][ T5001] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 125.862172][ T5080] exfat: Deprecated parameter 'utf8' [ 125.871846][ T5080] exfat: Deprecated parameter 'namecase' [ 125.880369][ T5001] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 125.900253][ T5080] exfat: Deprecated parameter 'namecase' [ 125.914933][ T5001] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 125.930627][ T5080] exfat: Deprecated parameter 'utf8' [ 125.939032][ T5001] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 125.975052][ T5080] exFAT-fs (loop3): failed to load upcase table (idx : 0x00012153, chksum : 0xc9bffc20, utbl_chksum : 0xe619d30d) [ 127.515455][ T4363] Bluetooth: hci3: command 0x040f tx timeout [ 127.623065][ T305] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.747694][ T305] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.821785][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 127.843807][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 127.899940][ T305] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.009431][ T5001] 8021q: adding VLAN 0 to HW filter on device bond0 [ 128.064689][ T4934] device veth0_vlan entered promiscuous mode [ 128.085315][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 128.111394][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 128.829432][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 128.857912][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 128.925971][ T305] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.960070][ T4934] device veth1_vlan entered promiscuous mode [ 128.977413][ T5001] 8021q: adding VLAN 0 to HW filter on device team0 [ 128.996068][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 129.005254][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 129.013724][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 129.035687][ T5119] netlink: 4 bytes leftover after parsing attributes in process `syz.3.194'. [ 129.321276][ T5117] netlink: 10 bytes leftover after parsing attributes in process `syz.4.193'. [ 129.354385][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 129.377629][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 129.498110][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 129.505325][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 129.601508][ T1324] Bluetooth: hci3: command 0x0419 tx timeout [ 129.859610][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 130.181292][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 130.221128][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 130.228256][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 130.260033][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 130.318865][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 130.389553][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 130.441802][ T4934] device veth0_macvtap entered promiscuous mode [ 130.453206][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 130.461925][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 130.478412][ T4934] device veth1_macvtap entered promiscuous mode [ 130.533192][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 130.557549][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 130.589094][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 130.608378][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 130.626292][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 130.639803][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 130.729436][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 131.066574][ T4934] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 131.078900][ T4934] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 131.091083][ T4934] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 131.103009][ T4934] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 131.123487][ T4934] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 131.160403][ T4934] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 131.199135][ T4934] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 131.258959][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 131.279782][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 131.306371][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 131.356889][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 132.441867][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 132.521977][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 132.621922][ T4934] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 132.661401][ T1430] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.668666][ T1430] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.671784][ T4934] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 132.685476][ T4934] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 132.701715][ T4934] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 132.746503][ T4934] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 132.800643][ T4934] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 132.839223][ T4934] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 132.877708][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 132.895670][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 132.947979][ T4934] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.980536][ T4934] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.989595][ T4934] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 133.043451][ T4934] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 133.354857][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 133.520119][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 135.158374][ T5001] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 135.247427][ T5198] No such timeout policy "syz1" [ 135.901431][ T4349] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 135.935069][ T4349] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 135.965674][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 136.045975][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 136.067401][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 136.091121][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 136.247917][ T305] device hsr_slave_0 left promiscuous mode [ 136.259986][ T305] device hsr_slave_1 left promiscuous mode [ 136.283312][ T305] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 136.310806][ T305] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 136.331491][ T305] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 136.381355][ T305] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 136.401346][ T305] device bridge_slave_1 left promiscuous mode [ 136.407781][ T305] bridge0: port 2(bridge_slave_1) entered disabled state [ 136.440352][ T305] device bridge_slave_0 left promiscuous mode [ 136.458903][ T305] bridge0: port 1(bridge_slave_0) entered disabled state [ 136.483015][ T305] device veth1_macvtap left promiscuous mode [ 136.489110][ T305] device veth0_macvtap left promiscuous mode [ 136.550639][ T305] device veth1_vlan left promiscuous mode [ 136.558280][ T305] device veth0_vlan left promiscuous mode [ 137.834830][ T305] team0 (unregistering): Port device team_slave_1 removed [ 137.869587][ T305] team0 (unregistering): Port device team_slave_0 removed [ 137.925797][ T305] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 137.970386][ T305] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 138.321088][ T305] bond0 (unregistering): Released all slaves [ 139.037014][ T5267] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[4847] was attempted by ""[5267] [ 139.175270][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 139.187339][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 139.293237][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 139.307039][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 139.326266][ T5001] device veth0_vlan entered promiscuous mode [ 139.346252][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 139.367617][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 139.406612][ T5001] device veth1_vlan entered promiscuous mode [ 139.851902][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 140.023047][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 140.372982][ T5001] device veth0_macvtap entered promiscuous mode [ 140.460601][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 140.486202][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 140.521682][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 140.654828][ T5001] device veth1_macvtap entered promiscuous mode [ 140.771618][ T5001] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 141.860724][ T5001] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 141.861612][ T5311] loop3: detected capacity change from 0 to 128 [ 141.880247][ T5001] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 142.549897][ T5314] netlink: 104 bytes leftover after parsing attributes in process `syz.4.236'. [ 143.084797][ T5001] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 143.125687][ T5001] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 143.179867][ T5001] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 143.319852][ T5001] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 143.373101][ T5001] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 143.430177][ T26] audit: type=1804 audit(1777572228.994:5): pid=5324 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.240" name="file0" dev="hugetlbfs" ino=39070 res=1 errno=0 [ 143.479412][ T5001] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 143.550148][ T5001] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 143.577026][ T26] audit: type=1804 audit(1777572229.084:6): pid=5325 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.240" name="file0" dev="hugetlbfs" ino=39070 res=1 errno=0 [ 143.636467][ T5001] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 143.661360][ T5001] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 143.671954][ T5001] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 143.683708][ T5001] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 143.691762][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 143.699843][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 143.709301][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 143.718156][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 143.727172][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 143.768356][ T5001] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 143.806294][ T5001] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 143.818385][ T5311] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 143.849643][ T5001] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 143.891312][ T5001] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 143.904491][ T5311] hpfs: filesystem error: improperly stopped [ 143.924577][ T5311] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 143.990801][ T5311] hpfs: You really don't want any checks? You are crazy... [ 144.037255][ T5311] hpfs: hpfs_map_sector(): read error [ 144.067486][ T5311] hpfs: code page support is disabled [ 144.129958][ T4245] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 144.135528][ T5311] hpfs: hpfs_map_4sectors(): unaligned read [ 144.148196][ T4245] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 144.190878][ T5311] hpfs: hpfs_map_4sectors(): unaligned read [ 144.203781][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 144.232295][ T5311] hpfs: filesystem error: unable to find root dir [ 144.253196][ T4350] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 144.277674][ T4350] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 144.347458][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 144.375668][ T5311] hpfs: hpfs_map_4sectors(): unaligned read [ 144.431142][ T5311] hpfs: filesystem error: invalid bitmap block pointer 00000000 -> 7b3184b5 at aib [ 144.503075][ T5344] hpfs: hpfs_map_4sectors(): unaligned read [ 144.509052][ T5344] hpfs: filesystem error: invalid bitmap block pointer 00000000 -> 7b3184b5 at aib [ 144.590231][ T5346] loop4: detected capacity change from 0 to 512 [ 144.601774][ T5311] hpfs: filesystem error: invalid bitmap block pointer 00000000 -> 7b3184b5 at trim [ 144.964457][ T5346] EXT4-fs error (device loop4): ext4_read_inode_bitmap:140: comm syz.4.246: Invalid inode bitmap blk 4 in block_group 0 [ 145.239176][ T5346] EXT4-fs (loop4): mounted filesystem without journal. Opts: noblock_validity,resuid=0x0000000000000000,grpquota,noload,nobarrier,usrquota,,errors=continue. Quota mode: writeback. [ 145.570601][ T2239] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 145.725489][ T5373] netlink: 12 bytes leftover after parsing attributes in process `syz.0.251'. [ 145.980889][ T2239] usb 7-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 146.058439][ T2239] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 146.115501][ T5389] netlink: 'syz.7.255': attribute type 4 has an invalid length. [ 146.141357][ T2239] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 146.160746][ T2239] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 146.183217][ T2239] usb 7-1: config 0 descriptor?? [ 146.190152][ T5387] netlink: 'syz.0.254': attribute type 1 has an invalid length. [ 146.235736][ T2239] usbhid 7-1:0.0: couldn't find an input interrupt endpoint [ 147.418460][ T5415] netlink: 24 bytes leftover after parsing attributes in process `syz.3.261'. [ 147.473446][ T5418] netlink: 8 bytes leftover after parsing attributes in process `syz.0.259'. [ 147.553050][ T7] usb 7-1: USB disconnect, device number 2 [ 147.840685][ T5361] EXT4-fs error (device loop4): ext4_validate_block_bitmap:429: comm ext4lazyinit: bg 0: block 13: invalid block bitmap [ 149.404031][ T7] hid (null): unknown global tag 0xd [ 149.418481][ T7] hid (null): unknown global tag 0xda [ 149.512885][ T7] hid-generic 0005:0001:0002.0002: collection stack underflow [ 149.536029][ T7] hid-generic 0005:0001:0002.0002: item 0 1 0 12 parsing failed [ 149.721289][ T7] hid-generic: probe of 0005:0001:0002.0002 failed with error -22 [ 151.846478][ T5484] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 151.921219][ T5471] loop7: detected capacity change from 0 to 2048 [ 152.065096][ T4183] loop7: p4 < > [ 152.212105][ T5471] loop7: p4 < > [ 152.961250][ T5499] loop6: detected capacity change from 0 to 512 [ 153.315938][ T5499] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 153.339043][ T5499] ext4 filesystem being mounted at /13/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 153.592348][ T5511] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[4189] was attempted by "$x`vOxH`CBn܀y>bwx\x1bL5? Cݭ8`dJg39T&tWCm<\x1bRby Vq/\x5cDw,XT,W[es\x0d1\x07^|;dg8 ꥛~u}Gg6W]MþlxM=Mh\x095$ZEO1Jc&OP5y9\x0dNiI<5Ўd\x22T*˘sx)ʯ\x22v:|M\x0a)\x0bꋻwRI ;HP?LtM[w̲S7&Q瑃Y=Nݝ\x22߆FSBҘRx9ʼnR_4~}e}xbH\x0d%DŽޑR]cÂx8m5'yZx^My=::UVvҼb8s\x0d0cAL=;k[iqKg@8Z\x22&iy?m9d<5]p2wA1Ȧ4qLctG9N_f2sop)^FISn08aS*ĒrX\x1b/\x22`Wrwr\x22!7X~ӰDEp7ehNk2Is,>r_<-!}jnW8-leÚQŒ6DgfrZ!V\x0b*>ħk?p>nU`IW \x1bD6\x5cjv(=}txp:Ԑގ_ս<‹('(tc(#2oڏ0xY4W.voDS\x0cX濩V,5a#zkPd0a. [ 154.584075][ T5534] loop6: detected capacity change from 0 to 512 [ 155.793062][ T5534] EXT4-fs error (device loop6): ext4_orphan_get:1406: inode #15: comm syz.6.286: inode has both inline data and extents flags [ 155.851095][ T5534] EXT4-fs error (device loop6): ext4_orphan_get:1411: comm syz.6.286: couldn't read orphan inode 15 (err -117) [ 155.863654][ T5534] EXT4-fs (loop6): mounted filesystem without journal. Opts: abort,,errors=continue. Quota mode: writeback. [ 157.839977][ T5615] device dummy0 entered promiscuous mode [ 157.846224][ T5615] device macvlan2 entered promiscuous mode [ 157.881025][ T4201] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci0/hci0:201' [ 157.891117][ T4201] CPU: 1 PID: 4201 Comm: kworker/u5:4 Not tainted syzkaller #0 [ 157.898697][ T4201] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 157.908791][ T4201] Workqueue: hci0 hci_rx_work [ 157.913522][ T4201] Call Trace: [ 157.916857][ T4201] [ 157.919821][ T4201] dump_stack_lvl+0x188/0x250 [ 157.924534][ T4201] ? show_regs_print_info+0x20/0x20 [ 157.929758][ T4201] ? load_image+0x400/0x400 [ 157.934301][ T4201] sysfs_create_dir_ns+0x26a/0x290 [ 157.939457][ T4201] ? sysfs_warn_dup+0xa0/0xa0 [ 157.944164][ T4201] ? process_one_work+0x85f/0x1010 [ 157.949309][ T4201] ? do_raw_spin_unlock+0x11d/0x230 [ 157.954570][ T4201] kobject_add_internal+0x6e0/0xd90 [ 157.959804][ T4201] kobject_add+0x160/0x230 [ 157.964255][ T4201] ? kobject_init+0x1d0/0x1d0 [ 157.968975][ T4201] ? klist_children_get+0x50/0x50 [ 157.974033][ T4201] ? get_device_parent+0x121/0x3f0 [ 157.979179][ T4201] device_add+0x483/0xfb0 [ 157.983544][ T4201] hci_conn_add_sysfs+0xd1/0x1e0 [ 157.988519][ T4201] le_conn_complete_evt+0xc48/0x15c0 [ 157.993851][ T4201] ? cs_le_create_conn+0x5e0/0x5e0 [ 157.998996][ T4201] ? __mutex_trylock_common+0x155/0x260 [ 158.004576][ T4201] hci_le_meta_evt+0x285/0x3c90 [ 158.009472][ T4201] ? hci_event_packet+0x37b/0x1370 [ 158.014631][ T4201] ? __lock_acquire+0x7d10/0x7d10 [ 158.019712][ T4201] ? hci_remote_host_features_evt+0x280/0x280 [ 158.025826][ T4201] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 158.031494][ T4201] ? mark_lock+0x94/0x320 [ 158.035857][ T4201] ? mutex_unlock+0x10/0x10 [ 158.040392][ T4201] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 158.046411][ T4201] ? lock_chain_count+0x20/0x20 [ 158.051288][ T4201] ? __rwlock_init+0x140/0x140 [ 158.056091][ T4201] hci_event_packet+0xe48/0x1370 [ 158.061061][ T4201] ? lockdep_hardirqs_on+0x94/0x140 [ 158.066311][ T4201] ? rcu_lock_release+0x20/0x20 [ 158.071197][ T4201] ? hci_send_to_monitor+0x9c/0x4a0 [ 158.076438][ T4201] hci_rx_work+0x255/0xa10 [ 158.080909][ T4201] process_one_work+0x85f/0x1010 [ 158.085901][ T4201] ? worker_detach_from_pool+0x240/0x240 [ 158.091746][ T4201] ? lockdep_hardirqs_off+0x70/0x100 [ 158.097175][ T4201] ? _raw_spin_lock_irq+0xb7/0xf0 [ 158.102238][ T4201] ? _raw_spin_lock_irqsave+0x100/0x100 [ 158.107822][ T4201] ? wq_worker_running+0x97/0x170 [ 158.112891][ T4201] worker_thread+0xaa6/0x1290 [ 158.117647][ T4201] kthread+0x436/0x520 [ 158.121759][ T4201] ? rcu_lock_release+0x20/0x20 [ 158.126638][ T4201] ? kthread_blkcg+0xd0/0xd0 [ 158.131270][ T4201] ret_from_fork+0x1f/0x30 [ 158.135759][ T4201] [ 158.155814][ T4201] kobject_add_internal failed for hci0:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 158.171518][ T4201] Bluetooth: hci0: failed to register connection device [ 159.235080][ T5623] loop3: detected capacity change from 0 to 512 [ 160.033484][ T5623] EXT4-fs error (device loop3): ext4_orphan_get:1406: inode #15: comm syz.3.308: inode has both inline data and extents flags [ 160.048240][ T5639] netlink: 140 bytes leftover after parsing attributes in process `syz.0.312'. [ 160.148497][ T5639] netlink: 28 bytes leftover after parsing attributes in process `syz.0.312'. [ 160.159443][ T5623] EXT4-fs error (device loop3): ext4_orphan_get:1411: comm syz.3.308: couldn't read orphan inode 15 (err -117) [ 160.234500][ T5648] loop7: detected capacity change from 0 to 512 [ 160.241074][ T5623] EXT4-fs (loop3): mounted filesystem without journal. Opts: abort,,errors=continue. Quota mode: writeback. [ 162.579581][ T5648] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 162.598846][ T5666] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 162.609145][ T5648] ext4 filesystem being mounted at /16/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 163.848831][ T5690] netlink: 4 bytes leftover after parsing attributes in process `syz.7.325'. [ 164.827833][ T5701] netlink: 8 bytes leftover after parsing attributes in process `syz.3.327'. [ 164.944364][ T5705] kvm: emulating exchange as write [ 166.191322][ T5722] netlink: 'syz.7.332': attribute type 1 has an invalid length. [ 169.463150][ T5757] netlink: 232 bytes leftover after parsing attributes in process `syz.0.342'. [ 170.251820][ T5778] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 170.336132][ T5778] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 170.370639][ T1324] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 170.760801][ T1324] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 171.050827][ T1324] usb 7-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice=83.9c [ 171.096869][ T1324] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 171.153868][ T1324] usb 7-1: Product: syz [ 171.178049][ T1324] usb 7-1: Manufacturer: syz [ 171.184428][ T1324] usb 7-1: SerialNumber: syz [ 171.218859][ T1324] usb 7-1: config 0 descriptor?? [ 171.282524][ T1324] ims_pcu 7-1:0.0: Missing CDC union descriptor [ 171.288937][ T1324] ims_pcu: probe of 7-1:0.0 failed with error -22 [ 171.510573][ T4233] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 171.532946][ T5772] udc-core: couldn't find an available UDC or it's busy [ 171.568308][ T5772] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 171.649514][ T2239] usb 7-1: USB disconnect, device number 3 [ 173.150695][ T4233] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 173.164029][ T4233] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 173.173033][ T4233] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 173.255710][ T5842] netlink: 4 bytes leftover after parsing attributes in process `syz.0.362'. [ 173.369847][ T5849] netlink: 'syz.6.363': attribute type 1 has an invalid length. [ 173.385643][ T5849] netlink: 146340 bytes leftover after parsing attributes in process `syz.6.363'. [ 173.490904][ T4233] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 173.500142][ T4233] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 173.540428][ T4233] usb 4-1: Product: syz [ 173.581477][ T4233] usb 4-1: Manufacturer: syz [ 173.641772][ T4233] usb 4-1: SerialNumber: syz [ 173.877482][ T4233] cdc_mbim 4-1:1.0: skipping garbage [ 173.932032][ T4233] usb 4-1: selecting invalid altsetting 1 [ 174.218511][ T5852] device bridge1 entered promiscuous mode [ 174.311147][ T4233] cdc_mbim 4-1:1.0: bind() failure [ 174.326638][ T4233] usb 4-1: USB disconnect, device number 4 [ 175.374287][ T5872] netlink: 'syz.6.368': attribute type 10 has an invalid length. [ 176.258794][ T5872] team0: Port device netdevsim0 added [ 176.294133][ T5872] syz.6.368 (5872) used greatest stack depth: 19600 bytes left [ 176.422339][ T5889] syz.0.372 sent an empty control message without MSG_MORE. [ 177.642765][ T5898] netlink: 'syz.4.374': attribute type 21 has an invalid length. [ 177.670651][ T2301] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 177.701050][ T5898] netlink: 'syz.4.374': attribute type 6 has an invalid length. [ 177.708753][ T5898] netlink: 132 bytes leftover after parsing attributes in process `syz.4.374'. [ 177.906222][ T5915] netlink: 8 bytes leftover after parsing attributes in process `syz.6.378'. [ 177.915273][ T5915] bond0: option arp_all_targets: invalid value (18446744072210219584) [ 177.950613][ T2301] usb 8-1: Using ep0 maxpacket: 32 [ 178.067143][ T4375] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 178.231231][ T2301] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 178.390018][ T2301] usb 8-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 178.410566][ T4375] usb 4-1: Using ep0 maxpacket: 8 [ 178.630953][ T4375] usb 4-1: config 0 has no interfaces? [ 178.637466][ T4375] usb 4-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 178.717744][ T2301] usb 8-1: New USB device found, idVendor=046d, idProduct=c537, bcdDevice= 0.00 [ 178.840611][ T4375] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 179.027757][ T2301] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 179.048060][ T5889] infiniband syz2: set active [ 179.054657][ T4375] usb 4-1: config 0 descriptor?? [ 179.060909][ T2301] usb 8-1: config 0 descriptor?? [ 179.066786][ T5889] infiniband syz2: added bond_slave_1 [ 179.110606][ T2301] usb 8-1: can't set config #0, error -71 [ 179.364928][ T5930] No such timeout policy "syz1" [ 179.543074][ T2301] usb 8-1: USB disconnect, device number 2 [ 180.064663][ T5889] infiniband syz2: Couldn't open port 1 [ 180.105231][ T9] nci: nci_rx_work: unknown MT 0x7 [ 180.107412][ T5902] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 180.206033][ T4375] usb 4-1: USB disconnect, device number 5 [ 180.243453][ T5889] RDS/IB: syz2: added [ 180.321855][ T5889] smc: adding ib device syz2 with port count 1 [ 180.328377][ T5889] smc: ib device syz2 port 1 has pnetid [ 181.061187][ T5940] loop7: detected capacity change from 0 to 2048 [ 181.212285][ T5949] device syzkaller0 entered promiscuous mode [ 181.329472][ T5954] binder: BINDER_SET_CONTEXT_MGR already set [ 181.378343][ T5954] binder: 5953:5954 ioctl 4018620d 2000000002c0 returned -16 [ 181.402467][ T5959] binder: 5953:5959 ioctl c0306201 200000000680 returned -14 [ 181.440337][ T5960] NILFS (loop7): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 183.855481][ T5987] device batadv_slave_0 entered promiscuous mode [ 183.879588][ T5987] loop6: detected capacity change from 0 to 512 [ 184.112881][ T5987] EXT4-fs (loop6): mounting ext2 file system using the ext4 subsystem [ 184.144590][ T5994] No such timeout policy "syz1" [ 184.531058][ T5987] EXT4-fs (loop6): revision level too high, forcing read-only mode [ 184.772887][ T5987] EXT4-fs (loop6): orphan cleanup on readonly fs [ 184.869219][ T5987] EXT4-fs warning (device loop6): ext4_enable_quotas:6488: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 184.889990][ T5987] EXT4-fs (loop6): Cannot turn on quotas: error -22 [ 184.899441][ T5987] EXT4-fs error (device loop6): __ext4_iget:4919: inode #16: block 127754: comm syz.6.404: invalid block [ 184.918306][ T5987] EXT4-fs error (device loop6): ext4_orphan_get:1411: comm syz.6.404: couldn't read orphan inode 16 (err -117) [ 185.001575][ T5999] netlink: 'syz.3.396': attribute type 2 has an invalid length. [ 185.010788][ T5987] EXT4-fs (loop6): mounted filesystem without journal. Opts: min_batch_time=0x0000000000000010,,errors=continue. Quota mode: writeback. [ 185.113286][ T5987] netlink: 4 bytes leftover after parsing attributes in process `syz.6.404'. [ 185.310189][ T5987] bond0: (slave bond_slave_0): Releasing backup interface [ 185.896388][ T5985] device batadv_slave_0 left promiscuous mode [ 186.160890][ T2239] Bluetooth: hci0: command 0x0406 tx timeout [ 186.167005][ T2239] Bluetooth: hci4: command 0x0406 tx timeout [ 186.492540][ T6019] device syzkaller0 entered promiscuous mode [ 189.083137][ T6065] loop6: detected capacity change from 0 to 16 [ 189.235374][ T6065] MTD: Attempt to mount non-MTD device "/dev/loop6" [ 194.093824][ T1430] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.100173][ T1430] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.176781][ T6100] netlink: 'syz.4.423': attribute type 1 has an invalid length. [ 194.262411][ T6100] 8021q: adding VLAN 0 to HW filter on device bond1 [ 194.395186][ T6107] bond1: (slave syz_tun): Enslaving as a backup interface with an up link [ 194.508049][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 196.656272][ T6129] loop6: detected capacity change from 0 to 4096 [ 196.672626][ T6129] ntfs3: Unknown parameter 'windows_names' [ 197.322257][ T6129] loop6: detected capacity change from 0 to 4096 [ 197.543055][ T6129] ntfs3: loop6: Different NTFS' sector size (4096) and media sector size (512) [ 197.667359][ T6165] ufs: You didn't specify the type of your ufs filesystem [ 197.667359][ T6165] [ 197.667359][ T6165] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 197.667359][ T6165] [ 197.667359][ T6165] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 197.698948][ T6165] ufs: ufstype=old is supported read-only [ 197.710265][ T6165] blk_update_request: I/O error, dev loop9, sector 16 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 198.504343][ T6129] ntfs3: loop6: Mark volume as dirty due to NTFS errors [ 198.547462][ T6170] device syzkaller0 entered promiscuous mode [ 198.628597][ T6129] ntfs3: loop6: Failed to load $BadClus. [ 202.574404][ T6226] netlink: 44 bytes leftover after parsing attributes in process `syz.7.455'. [ 204.639536][ T6260] ufs: You didn't specify the type of your ufs filesystem [ 204.639536][ T6260] [ 204.639536][ T6260] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 204.639536][ T6260] [ 204.639536][ T6260] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 204.670829][ T6260] ufs: ufstype=old is supported read-only [ 204.676920][ T6260] blk_update_request: I/O error, dev loop15, sector 16 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 206.059942][ T6269] netlink: 4 bytes leftover after parsing attributes in process `syz.6.464'. [ 207.279247][ T6283] loop3: detected capacity change from 0 to 32768 [ 208.408815][ T6300] netlink: 12 bytes leftover after parsing attributes in process `syz.0.472'. [ 208.476626][ T6283] XFS (loop3): Mounting V5 Filesystem [ 208.696533][ T6283] XFS (loop3): Ending clean mount [ 208.717804][ T6283] XFS (loop3): Quotacheck needed: Please wait. [ 208.798086][ T6283] XFS (loop3): Quotacheck: Done. [ 209.572987][ T6331] ufs: You didn't specify the type of your ufs filesystem [ 209.572987][ T6331] [ 209.572987][ T6331] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 209.572987][ T6331] [ 209.572987][ T6331] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 209.604263][ T6331] ufs: ufstype=old is supported read-only [ 209.610363][ T6331] blk_update_request: I/O error, dev loop13, sector 16 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 210.171596][ T4202] XFS (loop3): Unmounting Filesystem [ 210.874574][ T6341] loop6: detected capacity change from 0 to 32768 [ 211.174491][ T6341] XFS (loop6): Mounting V5 Filesystem [ 211.891067][ T6341] XFS (loop6): Ending clean mount [ 212.869758][ T6375] IPVS: sync thread started: state = MASTER, mcast_ifn = dummy0, syncid = 65, id = 0 [ 212.917233][ T6374] netlink: 40 bytes leftover after parsing attributes in process `syz.7.486'. [ 213.320600][ T26] audit: type=1107 audit(1777572298.894:7): pid=6378 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 213.631720][ T6384] netlink: 'syz.4.490': attribute type 1 has an invalid length. [ 213.875764][ T6384] netlink: 'syz.4.490': attribute type 4 has an invalid length. [ 213.930827][ T6384] netlink: 9462 bytes leftover after parsing attributes in process `syz.4.490'. [ 214.404255][ T4934] XFS (loop6): Unmounting Filesystem [ 215.452510][ T6426] loop3: detected capacity change from 0 to 64 [ 216.321970][ T6428] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 216.381574][ T6434] fuse: Bad value for 'fd' [ 216.434749][ T6426] hfs: request for non-existent node 131072 in B*Tree [ 216.472484][ T6426] hfs: request for non-existent node 131072 in B*Tree [ 216.522128][ T6437] hfs: request for non-existent node 131072 in B*Tree [ 216.563462][ T6437] hfs: request for non-existent node 131072 in B*Tree [ 218.012666][ T6443] can: request_module (can-proto-4) failed. [ 218.942491][ T6465] netlink: 8 bytes leftover after parsing attributes in process `syz.6.506'. [ 218.962836][ T6465] netlink: 8 bytes leftover after parsing attributes in process `syz.6.506'. [ 218.975199][ T6465] netlink: 8 bytes leftover after parsing attributes in process `syz.6.506'. [ 218.988316][ T6465] netlink: 8 bytes leftover after parsing attributes in process `syz.6.506'. [ 218.998848][ T6465] netlink: 8 bytes leftover after parsing attributes in process `syz.6.506'. [ 219.827354][ T6467] loop3: detected capacity change from 0 to 512 [ 223.441698][ T6507] netlink: 4 bytes leftover after parsing attributes in process `syz.6.516'. [ 225.760345][ T6552] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 225.782336][ T6558] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 225.806399][ T1324] libceph: connect (1)[c::]:6789 error -101 [ 225.821083][ T1324] libceph: mon0 (1)[c::]:6789 connect error [ 225.836376][ T6556] loop6: detected capacity change from 0 to 512 [ 225.851306][ T6536] ceph: No mds server is up or the cluster is laggy [ 226.253713][ T1324] libceph: connect (1)[c::]:6789 error -101 [ 226.330320][ T1324] libceph: mon0 (1)[c::]:6789 connect error [ 226.963579][ T6583] xt_policy: output policy not valid in PREROUTING and INPUT [ 228.173147][ T6606] device syzkaller0 entered promiscuous mode [ 230.310532][ T6618] loop6: detected capacity change from 0 to 256 [ 237.014192][ T6730] device bond2 entered promiscuous mode [ 237.120577][ T4362] Bluetooth: hci2: command 0x0406 tx timeout [ 238.627225][ T6745] team0 (unregistering): Port device team_slave_0 removed [ 238.948822][ T6745] team0 (unregistering): Failed to send options change via netlink (err -105) [ 239.132683][ T6745] team0 (unregistering): Port device team_slave_1 removed [ 239.215089][ T6745] team0 (unregistering): Port device netdevsim0 removed [ 239.620768][ T1108] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 240.258740][ T6776] loop3: detected capacity change from 0 to 512 [ 240.413128][ T6776] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 240.583793][ T6776] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 240.810310][ T6776] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a84ee02c, mo2=0002] [ 241.251951][ T6776] System zones: 1-12 [ 241.257382][ T6776] EXT4-fs (loop3): orphan cleanup on readonly fs [ 241.281150][ T6776] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.581: invalid indirect mapped block 2 (level 2) [ 241.421389][ T6776] EXT4-fs (loop3): Remounting filesystem read-only [ 241.448573][ T6791] syz.6.586 uses obsolete (PF_INET,SOCK_PACKET) [ 241.461063][ T6776] EXT4-fs (loop3): 1 truncate cleaned up [ 241.474934][ T6776] EXT4-fs (loop3): mounted filesystem without journal. Opts: dioread_nolock,max_batch_time=0x0000000000000006,usrquota,errors=remount-ro,i_version. Quota mode: writeback. [ 241.581939][ T6798] capability: warning: `syz.6.587' uses 32-bit capabilities (legacy support in use) [ 241.907184][ T6812] : renamed from virt_wifi0 [ 242.070774][ T1108] usb 5-1: unable to get BOS descriptor or descriptor too short [ 242.241350][ T4344] Bluetooth: hci1: command 0x0406 tx timeout [ 243.794869][ T1108] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 243.803589][ T1108] usb 5-1: can't read configurations, error -71 [ 245.034942][ T6859] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[6860] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[6859] [ 247.312922][ T6892] kvm: pic: non byte read [ 247.317663][ T6892] kvm: pic: non byte read [ 247.333814][ T6892] kvm: pic: non byte read [ 247.524709][ T6899] netlink: 'syz.3.617': attribute type 4 has an invalid length. [ 248.492270][ T6910] netlink: 4 bytes leftover after parsing attributes in process `syz.0.618'. [ 249.114886][ T26] audit: type=1804 audit(1777572334.694:8): pid=6931 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.7.624" name="bus" dev="ramfs" ino=44171 res=1 errno=0 [ 249.483223][ T4344] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 249.780728][ T4344] usb 7-1: Using ep0 maxpacket: 16 [ 249.901120][ T4344] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 249.944019][ T4344] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 250.473471][ T4344] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 250.491091][ T4344] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 250.506161][ T4344] usb 7-1: Product: syz [ 250.510381][ T4344] usb 7-1: Manufacturer: syz [ 250.533900][ T4344] usb 7-1: SerialNumber: syz [ 250.591111][ T6951] device syzkaller1 entered promiscuous mode [ 250.641297][ T6948] loop3: detected capacity change from 0 to 4096 [ 250.791428][ T6954] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 250.862168][ T4344] usb 7-1: 0:2 : does not exist [ 251.007645][ T4344] usb 7-1: USB disconnect, device number 4 [ 251.334180][ T4179] udevd[4179]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 252.934095][ T26] audit: type=1107 audit(1777572338.514:9): pid=6976 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 255.100785][ T26] audit: type=1326 audit(1777572340.684:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7005 comm="syz.6.644" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f506e8b6dd9 code=0x7ffc0000 [ 255.220570][ T26] audit: type=1326 audit(1777572340.734:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7005 comm="syz.6.644" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f506e8b6dd9 code=0x7ffc0000 [ 255.368461][ T26] audit: type=1326 audit(1777572340.734:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7005 comm="syz.6.644" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f506e8b6dd9 code=0x7ffc0000 [ 255.464468][ T4340] Bluetooth: hci5: Frame reassembly failed (-84) [ 255.476639][ T26] audit: type=1326 audit(1777572340.734:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7005 comm="syz.6.644" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=299 compat=0 ip=0x7f506e8b6dd9 code=0x7ffc0000 [ 255.524610][ T1430] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.531049][ T1430] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.643051][ T26] audit: type=1326 audit(1777572340.734:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7005 comm="syz.6.644" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f506e8b6dd9 code=0x7ffc0000 [ 255.690760][ T26] audit: type=1326 audit(1777572340.734:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7005 comm="syz.6.644" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f506e8b6dd9 code=0x7ffc0000 [ 255.787890][ T26] audit: type=1326 audit(1777572340.734:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7005 comm="syz.6.644" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f506e8b6dd9 code=0x7ffc0000 [ 255.889482][ T26] audit: type=1326 audit(1777572340.734:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7005 comm="syz.6.644" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f506e8b6dd9 code=0x7ffc0000 [ 255.980571][ T26] audit: type=1326 audit(1777572340.734:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7005 comm="syz.6.644" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f506e8b6dd9 code=0x7ffc0000 [ 256.001041][ T2239] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 256.050558][ T26] audit: type=1326 audit(1777572340.734:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7005 comm="syz.6.644" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f506e8b6b42 code=0x7ffc0000 [ 256.908318][ T2239] usb 5-1: Using ep0 maxpacket: 32 [ 256.973473][ T7028] netlink: 4 bytes leftover after parsing attributes in process `syz.7.651'. [ 257.016352][ T7028] (unnamed net_device) (uninitialized): Invalid ad_actor_system MAC address. [ 257.043612][ T2239] usb 5-1: config 129 has an invalid interface number: 120 but max is 0 [ 257.062444][ T2239] usb 5-1: config 129 has an invalid descriptor of length 123, skipping remainder of the config [ 257.066877][ T7028] (unnamed net_device) (uninitialized): option ad_actor_system: invalid value (68719607821) [ 257.110667][ T2239] usb 5-1: config 129 has no interface number 0 [ 257.127341][ T2239] usb 5-1: config 129 interface 120 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 257.161312][ T2239] usb 5-1: config 129 interface 120 has no altsetting 0 [ 257.330710][ T2239] usb 5-1: New USB device found, idVendor=0499, idProduct=c455, bcdDevice=81.ab [ 257.359955][ T2239] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 257.383533][ T2239] usb 5-1: Product: syz [ 257.523805][ T2239] usb 5-1: Manufacturer: syz [ 257.541337][ T2239] usb 5-1: SerialNumber: syz [ 257.557666][ T4344] Bluetooth: hci5: command 0x1003 tx timeout [ 257.567173][ T4206] Bluetooth: hci5: sending frame failed (-49) [ 258.382833][ T7049] netlink: 'syz.7.657': attribute type 10 has an invalid length. [ 258.467993][ T7049] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 258.763266][ T7049] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 259.034901][ T2239] usb 5-1: USB disconnect, device number 4 [ 259.601610][ T4183] udevd[4183]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:129.120/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 259.688849][ T1108] Bluetooth: hci5: command 0x1001 tx timeout [ 259.700573][ T4206] Bluetooth: hci5: sending frame failed (-49) [ 259.813007][ T7069] 9pnet: p9_errstr2errno: server reported unknown error aaaaaaaaa [ 260.850731][ T7079] loop3: detected capacity change from 0 to 2048 [ 261.071637][ T7079] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 261.414059][ T7076] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 261.555578][ T7079] [ 261.557973][ T7079] ====================================================== [ 261.565017][ T7079] WARNING: possible circular locking dependency detected [ 261.572077][ T7079] syzkaller #0 Not tainted [ 261.576545][ T7079] ------------------------------------------------------ [ 261.583592][ T7079] syz.3.664/7079 is trying to acquire lock: [ 261.589509][ T7079] ffff888063366478 (&ei->xattr_sem){++++}-{3:3}, at: ext4_destroy_inline_data+0x24/0xe0 [ 261.599766][ T7079] [ 261.599766][ T7079] but task is already holding lock: [ 261.607257][ T7079] ffff8880762cac58 (&sbi->s_writepages_rwsem){.+.+}-{0:0}, at: ext4_writepages+0x20f/0x2df0 [ 261.617405][ T7079] [ 261.617405][ T7079] which lock already depends on the new lock. [ 261.617405][ T7079] [ 261.628043][ T7079] [ 261.628043][ T7079] the existing dependency chain (in reverse order) is: [ 261.637100][ T7079] [ 261.637100][ T7079] -> #1 (&sbi->s_writepages_rwsem){.+.+}-{0:0}: [ 261.646205][ T7079] percpu_down_read+0x46/0x1b0 [ 261.651553][ T7079] ext4_writepages+0x20f/0x2df0 [ 261.657065][ T7079] do_writepages+0x476/0x6e0 [ 261.662226][ T7079] __writeback_single_inode+0x153/0xda0 [ 261.668440][ T7079] writeback_single_inode+0x3cb/0x8e0 [ 261.674370][ T7079] write_inode_now+0x23b/0x2c0 [ 261.679812][ T7079] iput+0x5ab/0x8a0 [ 261.684305][ T7079] ext4_xattr_set_entry+0x34f4/0x3ea0 [ 261.690220][ T7079] ext4_xattr_block_set+0x4fd/0x2d20 [ 261.696046][ T7079] ext4_expand_extra_isize_ea+0xf3f/0x19b0 [ 261.702392][ T7079] __ext4_expand_extra_isize+0x301/0x3e0 [ 261.708581][ T7079] __ext4_mark_inode_dirty+0x469/0x700 [ 261.714594][ T7079] ext4_evict_inode+0xa8d/0x1090 [ 261.720705][ T7079] evict+0x4c9/0x8d0 [ 261.725331][ T7079] ext4_orphan_cleanup+0xad2/0x1320 [ 261.731446][ T7079] ext4_fill_super+0x8d6e/0x94f0 [ 261.736921][ T7079] mount_bdev+0x287/0x3c0 [ 261.741788][ T7079] legacy_get_tree+0xe6/0x180 [ 261.747283][ T7079] vfs_get_tree+0x88/0x270 [ 261.752281][ T7079] do_new_mount+0x24a/0xa40 [ 261.757357][ T7079] __se_sys_mount+0x2e3/0x3d0 [ 261.762586][ T7079] do_syscall_64+0x4c/0xa0 [ 261.767678][ T7079] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 261.774117][ T7079] [ 261.774117][ T7079] -> #0 (&ei->xattr_sem){++++}-{3:3}: [ 261.782049][ T7079] __lock_acquire+0x2c42/0x7d10 [ 261.787440][ T7079] lock_acquire+0x19e/0x400 [ 261.792605][ T7079] down_write+0x38/0x60 [ 261.797798][ T7079] ext4_destroy_inline_data+0x24/0xe0 [ 261.803733][ T7079] ext4_writepages+0x670/0x2df0 [ 261.809178][ T7079] do_writepages+0x476/0x6e0 [ 261.815009][ T7079] filemap_fdatawrite_wbc+0x1eb/0x240 [ 261.821453][ T7079] file_write_and_wait_range+0x14d/0x220 [ 261.827652][ T7079] ext4_sync_file+0x1ff/0xae0 [ 261.833427][ T7079] ext4_buffered_write_iter+0x338/0x3b0 [ 261.839670][ T7079] ext4_file_write_iter+0x74d/0x1700 [ 261.845630][ T7079] vfs_write+0x745/0xd60 [ 261.850839][ T7079] ksys_write+0x152/0x260 [ 261.856005][ T7079] do_syscall_64+0x4c/0xa0 [ 261.861068][ T7079] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 261.867589][ T7079] [ 261.867589][ T7079] other info that might help us debug this: [ 261.867589][ T7079] [ 261.878280][ T7079] Possible unsafe locking scenario: [ 261.878280][ T7079] [ 261.885738][ T7079] CPU0 CPU1 [ 261.891106][ T7079] ---- ---- [ 261.896477][ T7079] lock(&sbi->s_writepages_rwsem); [ 261.901744][ T7079] lock(&ei->xattr_sem); [ 261.908773][ T7079] lock(&sbi->s_writepages_rwsem); [ 261.916631][ T7079] lock(&ei->xattr_sem); [ 261.920983][ T7079] [ 261.920983][ T7079] *** DEADLOCK *** [ 261.920983][ T7079] [ 261.929872][ T7079] 3 locks held by syz.3.664/7079: [ 261.935122][ T7079] #0: ffff888078f5eaf0 (&f->f_pos_lock){+.+.}-{3:3}, at: __fdget_pos+0x2bf/0x370 [ 261.944736][ T7079] #1: ffff8880762cc460 (sb_writers#5){.+.+}-{0:0}, at: vfs_write+0x295/0xd60 [ 261.953639][ T7079] #2: ffff8880762cac58 (&sbi->s_writepages_rwsem){.+.+}-{0:0}, at: ext4_writepages+0x20f/0x2df0 [ 261.964285][ T7079] [ 261.964285][ T7079] stack backtrace: [ 261.970330][ T7079] CPU: 1 PID: 7079 Comm: syz.3.664 Not tainted syzkaller #0 [ 261.977766][ T7079] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 261.987832][ T7079] Call Trace: [ 261.991123][ T7079] [ 261.994063][ T7079] dump_stack_lvl+0x188/0x250 [ 261.998748][ T7079] ? load_image+0x400/0x400 [ 262.003262][ T7079] ? show_regs_print_info+0x20/0x20 [ 262.008473][ T7079] ? print_circular_bug+0x12b/0x1a0 [ 262.013703][ T7079] check_noncircular+0x296/0x330 [ 262.018658][ T7079] ? add_chain_block+0x940/0x940 [ 262.023609][ T7079] ? lockdep_lock+0xf1/0x1f0 [ 262.028223][ T7079] ? lockdep_lock+0xf1/0x1f0 [ 262.032828][ T7079] ? mark_lock+0x94/0x320 [ 262.037271][ T7079] __lock_acquire+0x2c42/0x7d10 [ 262.042246][ T7079] ? verify_lock_unused+0x140/0x140 [ 262.047562][ T7079] ? mark_lock+0x94/0x320 [ 262.051915][ T7079] ? verify_lock_unused+0x140/0x140 [ 262.057129][ T7079] ? __lock_acquire+0x12e8/0x7d10 [ 262.062177][ T7079] ? hlock_conflict+0x59/0x1f0 [ 262.066962][ T7079] lock_acquire+0x19e/0x400 [ 262.071490][ T7079] ? ext4_destroy_inline_data+0x24/0xe0 [ 262.077063][ T7079] ? read_lock_is_recursive+0x10/0x10 [ 262.082456][ T7079] ? rcu_read_lock_any_held+0xb0/0x130 [ 262.088082][ T7079] ? ext4_journal_check_start+0x180/0x250 [ 262.095039][ T7079] down_write+0x38/0x60 [ 262.099314][ T7079] ? ext4_destroy_inline_data+0x24/0xe0 [ 262.104877][ T7079] ext4_destroy_inline_data+0x24/0xe0 [ 262.110642][ T7079] ext4_writepages+0x670/0x2df0 [ 262.115512][ T7079] ? lockdep_lock+0xf1/0x1f0 [ 262.120146][ T7079] ? verify_lock_unused+0x140/0x140 [ 262.125362][ T7079] ? ext4_readpage+0x2e0/0x2e0 [ 262.130171][ T7079] ? __lock_acquire+0x7d10/0x7d10 [ 262.135297][ T7079] ? do_raw_spin_lock+0x128/0x2f0 [ 262.140357][ T7079] ? do_raw_spin_unlock+0x11d/0x230 [ 262.145575][ T7079] ? ext4_readpage+0x2e0/0x2e0 [ 262.150362][ T7079] do_writepages+0x476/0x6e0 [ 262.154992][ T7079] ? filemap_fdatawrite_wbc+0x1e0/0x240 [ 262.160848][ T7079] ? __writepage+0x130/0x130 [ 262.165592][ T7079] ? __lock_acquire+0x7d10/0x7d10 [ 262.170806][ T7079] ? __rwlock_init+0x140/0x140 [ 262.175609][ T7079] ? generic_write_end+0x24d/0x3d0 [ 262.180773][ T7079] ? do_raw_spin_unlock+0x11d/0x230 [ 262.186184][ T7079] filemap_fdatawrite_wbc+0x1eb/0x240 [ 262.192023][ T7079] file_write_and_wait_range+0x14d/0x220 [ 262.197698][ T7079] ? __filemap_set_wb_err+0x1b0/0x1b0 [ 262.203240][ T7079] ext4_sync_file+0x1ff/0xae0 [ 262.207982][ T7079] ext4_buffered_write_iter+0x338/0x3b0 [ 262.213988][ T7079] ext4_file_write_iter+0x74d/0x1700 [ 262.219300][ T7079] ? rcu_read_lock_any_held+0xb0/0x130 [ 262.224803][ T7079] ? ext4_file_read_iter+0x700/0x700 [ 262.230113][ T7079] ? end_current_label_crit_section+0x14b/0x170 [ 262.236503][ T7079] ? memset+0x1e/0x40 [ 262.240520][ T7079] ? iov_iter_init+0xb4/0x170 [ 262.245285][ T7079] vfs_write+0x745/0xd60 [ 262.249850][ T7079] ? file_end_write+0x250/0x250 [ 262.254718][ T7079] ? __fget_files+0x40f/0x480 [ 262.259413][ T7079] ? mutex_lock_nested+0x17/0x20 [ 262.264377][ T7079] ? __fdget_pos+0x2bf/0x370 [ 262.269171][ T7079] ? ksys_write+0x71/0x260 [ 262.273637][ T7079] ksys_write+0x152/0x260 [ 262.278008][ T7079] ? __ia32_sys_read+0x80/0x80 [ 262.282794][ T7079] ? lockdep_hardirqs_on+0x94/0x140 [ 262.288017][ T7079] do_syscall_64+0x4c/0xa0 [ 262.292460][ T7079] ? clear_bhb_loop+0x30/0x80 [ 262.297150][ T7079] ? clear_bhb_loop+0x30/0x80 [ 262.301859][ T7079] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 262.307777][ T7079] RIP: 0033:0x7f9a5ab0cdd9 [ 262.312199][ T7079] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 262.332638][ T7079] RSP: 002b:00007f9a58d45028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 262.341085][ T7079] RAX: ffffffffffffffda RBX: 00007f9a5ad86090 RCX: 00007f9a5ab0cdd9 [ 262.349190][ T7079] RDX: 0000000000001006 RSI: 0000200000001440 RDI: 0000000000000005 [ 262.357502][ T7079] RBP: 00007f9a5aba2d69 R08: 0000000000000000 R09: 0000000000000000 [ 262.365499][ T7079] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 262.373514][ T7079] R13: 00007f9a5ad86128 R14: 00007f9a5ad86090 R15: 00007fffe4b68c58 [ 262.382219][ T7079] [ 262.449064][ T7079] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 3 with error 28 [ 262.470813][ T7079] EXT4-fs (loop3): This should not happen!! Data will be lost [ 262.470813][ T7079] [ 262.490060][ T7111] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 262.529238][ T7111] device batadv_slave_0 entered promiscuous mode [ 262.537362][ T7079] EXT4-fs (loop3): Total free blocks count 0 [ 262.577247][ T7079] EXT4-fs (loop3): Free/Dirty block details [ 262.597630][ T7079] EXT4-fs (loop3): free_blocks=4096 [ 262.623865][ T7079] EXT4-fs (loop3): dirty_blocks=16 [ 262.633237][ T7079] EXT4-fs (loop3): Block reservation details [ 262.639413][ T7079] EXT4-fs (loop3): i_reserved_data_blocks=1 [ 262.800558][ T1108] Bluetooth: hci5: command 0x1009 tx timeout