last executing test programs: 10m53.318311766s ago: executing program 1 (id=2): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f00000003c0)={0x4, 0x80100008b}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)) syz_mount_image$fuse(0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={@cgroup, 0x15, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000280)={{0x7}, 0x0, [0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x4, 0xfffffffffffffffc, 0x0, 0x0, 0x40, 0x0, 0xfffffffffffffffd, 0x100000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x3, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x7785, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x80000000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x7, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0xdf, 0x0, 0x0, 0x0, 0x100000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80]}) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002700)=""/102392, 0x18ff8) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x105800) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000480), 0x1a1040, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x4000800) gettid() ioctl$AUTOFS_IOC_FAIL(r2, 0x4c80, 0x7000000) 10m37.741195568s ago: executing program 32 (id=2): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f00000003c0)={0x4, 0x80100008b}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)) syz_mount_image$fuse(0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={@cgroup, 0x15, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000280)={{0x7}, 0x0, [0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x4, 0xfffffffffffffffc, 0x0, 0x0, 0x40, 0x0, 0xfffffffffffffffd, 0x100000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x3, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x7785, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x80000000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x7, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0xdf, 0x0, 0x0, 0x0, 0x100000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80]}) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002700)=""/102392, 0x18ff8) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x105800) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000480), 0x1a1040, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x4000800) gettid() ioctl$AUTOFS_IOC_FAIL(r2, 0x4c80, 0x7000000) 1m6.700460147s ago: executing program 2 (id=3705): connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) getsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000500), &(0x7f0000000540)=0x6) 1m6.187959573s ago: executing program 2 (id=3709): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf83, 0x3}, 0x1c) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="180000000200000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x43}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x42}, 0xe0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0xf5ffffff, &(0x7f0000000000)='%', 0x0, 0xd01, 0xbe02, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="14000000100001000000000000dfff000000000a20000000000a01020000000000000000010000000900010073797a30000000006c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a30000000004000038008000140000000002c0003801400010067656e65766530000000000000000000140001006c6f0000000000000000000000000000080002"], 0xb4}}, 0x0) 1m5.651913102s ago: executing program 2 (id=3714): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000380)=ANY=[], &(0x7f00000000c0)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000002b80)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r1, 0x0, 0x5}, 0x18) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080), 0x4) 1m5.180939818s ago: executing program 2 (id=3719): connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) getsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000500), &(0x7f0000000540)=0x6) 1m4.861690296s ago: executing program 2 (id=3723): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x42280, 0x0) r2 = socket$inet6(0xa, 0x80002, 0x0) sendmmsg$inet6(r2, &(0x7f0000002b80)=[{{&(0x7f0000000000)={0xa, 0x4e22, 0x9, @private0, 0x7}, 0x1c, 0x0, 0x0, &(0x7f0000000340)=[@pktinfo={{0x24, 0x29, 0x32, {@mcast2}}}], 0x28}}, {{0x0, 0x0, 0x0}}], 0x2, 0x40051) close(r1) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r3) sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x305200, 0x0) close(r5) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xa, 0x7f61, 0xfffffffd, 0xc5, 0xe23, 0x1, 0x1, 0x7fff, 0x1}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008001}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x80000, {0x0, 0x0, 0x0, r7, {0x0, 0x4}, {0xd, 0xb}, {0xfff2, 0x3}}, [@qdisc_kind_options=@q_blackhole={0xe}, @qdisc_kind_options=@q_hhf={{0x8}, {0x24, 0x2, [@TCA_HHF_EVICT_TIMEOUT={0x8, 0x6, 0x6ad}, @TCA_HHF_QUANTUM={0x8, 0x2, 0x4}, @TCA_HHF_RESET_TIMEOUT={0x8, 0x4, 0xc}, @TCA_HHF_HH_FLOWS_LIMIT={0x8, 0x3, 0x6}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x2000c961}, 0x4008080) ioctl$SIOCSIFHWADDR(r5, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 1m3.919357585s ago: executing program 2 (id=3728): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={0x0, &(0x7f0000000240)=""/54, 0x0, 0x36, 0x1, 0x5}, 0x28) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) epoll_create1(0x0) poll(0x0, 0x0, 0x41) socket$nl_route(0x10, 0x3, 0x0) gettid() timer_create(0x2, 0x0, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000500)={0x26, 'hash\x00', 0x0, 0x0, 'md5-generic\x00'}, 0x73) r4 = accept4(r3, 0x0, 0x0, 0x80000) write(r4, &(0x7f0000000040)="cb", 0xfffffdef) setsockopt$sock_int(r4, 0x1, 0x27, 0x0, 0x0) clock_nanosleep(0x2, 0x0, &(0x7f0000000040)={0x0, 0x989680}, 0x0) r5 = openat$udambuf(0xffffffffffffff9c, 0x0, 0x2) r6 = memfd_create(&(0x7f0000000340)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\xdenJ\xeb\x87\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38\x14\xcb\xfa\xb3j\x92\f\xe0\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf0\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x2) ftruncate(r6, 0xffff) fcntl$addseals(r6, 0x409, 0x7) ioctl$UDMABUF_CREATE(r5, 0x40187542, 0x0) memfd_create(0x0, 0x1) 48.124673349s ago: executing program 33 (id=3728): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={0x0, &(0x7f0000000240)=""/54, 0x0, 0x36, 0x1, 0x5}, 0x28) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) epoll_create1(0x0) poll(0x0, 0x0, 0x41) socket$nl_route(0x10, 0x3, 0x0) gettid() timer_create(0x2, 0x0, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000500)={0x26, 'hash\x00', 0x0, 0x0, 'md5-generic\x00'}, 0x73) r4 = accept4(r3, 0x0, 0x0, 0x80000) write(r4, &(0x7f0000000040)="cb", 0xfffffdef) setsockopt$sock_int(r4, 0x1, 0x27, 0x0, 0x0) clock_nanosleep(0x2, 0x0, &(0x7f0000000040)={0x0, 0x989680}, 0x0) r5 = openat$udambuf(0xffffffffffffff9c, 0x0, 0x2) r6 = memfd_create(&(0x7f0000000340)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\xdenJ\xeb\x87\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38\x14\xcb\xfa\xb3j\x92\f\xe0\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf0\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x2) ftruncate(r6, 0xffff) fcntl$addseals(r6, 0x409, 0x7) ioctl$UDMABUF_CREATE(r5, 0x40187542, 0x0) memfd_create(0x0, 0x1) 21.959428431s ago: executing program 5 (id=3872): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x38}, 0x1, 0x0, 0x0, 0x4000844}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sync() syz_emit_ethernet(0x4a, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaa"], 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000007880)=[{{0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000040)="af0ac95a", 0x4}], 0x1}}], 0x1, 0x4000000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="1800008080b63428e900"/20, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055"], 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) r0 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900", [0x0, 0x2000000000001]}}) 21.165187066s ago: executing program 5 (id=3875): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) syz_open_dev$loop(&(0x7f0000000440), 0x81, 0x2a82) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000000180)=0x4, 0x4) connect$inet(r0, &(0x7f0000000100)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) syz_open_dev$loop(&(0x7f0000000700), 0xeb, 0x1cd400) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) ftruncate(r4, 0x2000009) sendfile(r0, r4, 0x0, 0x7ffff004) 12.096404785s ago: executing program 0 (id=3909): mkdirat(0xffffffffffffff9c, 0x0, 0x0) mount$bind(0x0, 0x0, 0x0, 0x124000, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='cgroup.kill\x00', 0x275a, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() io_setup(0xcb, &(0x7f0000000340)=0x0) io_submit(r1, 0x0, &(0x7f0000000180)) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9) r4 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC_PROXY(r4, 0x0, 0xd2, &(0x7f0000000040)={@multicast2, @multicast1, 0x2, "4f6fb4d1af0f724e6118ecd4ac1100843af297baebb0efcdf5a284da144a011a", 0x4}, 0x3c) setsockopt$MRT_DEL_MFC_PROXY(r4, 0x0, 0xd3, &(0x7f0000000100)={@remote, @multicast1, 0x1, "c6c0e6ec8755b5dc4e305886d95f086707764f8d0e5a0358ea21274f844a69e9", 0x0, 0x8, 0xffffffff}, 0x3c) 11.979704691s ago: executing program 5 (id=3911): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_TIMESTAMP(r4, 0x1, 0x40, &(0x7f0000000380)=0x10001, 0x4) 11.654534216s ago: executing program 6 (id=3912): syz_mount_image$hfsplus(&(0x7f0000000500), &(0x7f0000000100)='./file1\x00', 0x208010, &(0x7f0000000040)=ANY=[], 0x4, 0x67b, &(0x7f00000010c0)="$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") open(&(0x7f0000000240)='./file1\x00', 0x80080, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@updpolicy={0xc0, 0x19, 0xfd3649826d894c67, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x0, 0x0, 0x2}}, [@XFRMA_IF_ID={0x8, 0x1f, 0x2}]}, 0xc0}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=@newspdinfo={0x1c, 0x24, 0x21, 0x0, 0x0, 0x0, [@XFRMA_SPD_IPV6_HTHRESH={0x6}]}, 0x1c}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="b80000001900674c00000000000000000000000000020000000000009a6b0000e0000002000000000000"], 0xb8}}, 0xc040) syz_emit_ethernet(0x4e, &(0x7f0000002e40)={@local, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "7428dd", 0x18, 0x3a, 0xff, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], @ndisc_na={0x89, 0x0, 0x0, 0x0, '\x00', @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}}}}, 0x0) 10.794443606s ago: executing program 6 (id=3915): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c045942824251d7d17b5191584bcd4fbe40a23424d", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3}, 0x94) recvmmsg(r0, 0x0, 0x0, 0x3, 0x0) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 9.43213792s ago: executing program 6 (id=3918): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$cont(0x20, r0, 0x6, 0x100) 8.8039614s ago: executing program 6 (id=3921): syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="043e0c0410c6007acceee303"], 0xf) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) 8.486109931s ago: executing program 6 (id=3923): listen(0xffffffffffffffff, 0x5) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1f, 0x2, &(0x7f0000001c40)=ANY=[@ANYBLOB="85000000a800000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x13}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x6}, 0x66) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0c000000040000000400000009"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000024c0), &(0x7f0000001280), 0xffffffff, r1}, 0x38) 7.915940997s ago: executing program 6 (id=3925): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$key(0xf, 0x3, 0x2) r4 = syz_open_dev$usbfs(&(0x7f0000000200), 0x76, 0x103901) ioctl$USBDEVFS_SUBMITURB(r4, 0x8038550a, &(0x7f0000000480)=@urb_type_control={0x2, {0x0, 0x1}, 0x2, 0x41, &(0x7f00000003c0)={0x0, 0xe, 0xe, 0xe}, 0x8, 0x6, 0x7ff, 0x0, 0x1, 0x5, 0x0}) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$UI_GET_VERSION(r5, 0x8004552d, &(0x7f00000000c0)) sendmsg$key(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x3, 0x2, &(0x7f0000000100)=@raw=[@ldst={0x1, 0x2, 0x4, 0x0, 0x1, 0x8a}, @jmp={0x5, 0x0, 0x9}], &(0x7f0000000280)='GPL\x00'}, 0x94) syz_genetlink_get_family_id$wireguard(&(0x7f0000000000), 0xffffffffffffffff) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x12, 0x4, &(0x7f0000000080)=@framed={{}, [@ldst={0x2, 0x0, 0x3, 0x1, 0x0, 0x28}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xe}, 0x90) 7.714020113s ago: executing program 4 (id=3927): r0 = fsopen(&(0x7f0000000240)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000140)='./file0\x00', 0x2000004c, &(0x7f0000000380)=ANY=[], 0xfe, 0x152b, &(0x7f0000003e00)="$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") munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r2 = open(&(0x7f0000000140)='.\x00', 0x8000, 0x112) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.swap.current\x00', 0x275a, 0x0) getdents(r2, &(0x7f0000001fc0)=""/184, 0xb8) syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000040)='./bus\x00', 0x2aad892, 0x0, 0x1, 0x0, &(0x7f00000000c0)) getdents(r2, &(0x7f0000001fc0)=""/184, 0xb8) 7.191410258s ago: executing program 4 (id=3928): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c045942824251d7d17b5191584bcd4fbe40a23424d", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3}, 0x94) recvmmsg(r0, 0x0, 0x0, 0x3, 0x0) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 5.884091765s ago: executing program 4 (id=3931): socket$nl_netfilter(0x10, 0x3, 0xc) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@ipv4_newrule={0x24, 0x20, 0x301, 0x70bd27, 0x25dfdbff, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1e}, [@FRA_GENERIC_POLICY=@FRA_SPORT_RANGE={0x8, 0x17, {0x4e20, 0x4e20}}]}, 0x24}, 0x1, 0x0, 0x0, 0x240480d4}, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_80211_inject_frame(0x0, 0x0, 0xb5) socket$nl_generic(0x10, 0x3, 0x10) socket$unix(0x1, 0x2, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000000008000400", @ANYRES32=r3, @ANYBLOB="06001500070000000c00168008000100", @ANYRES64=r2], 0x38}}, 0x10) 4.940507051s ago: executing program 4 (id=3934): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r2, 0x0, 0x0) sendmmsg$alg(r2, 0x0, 0x0, 0x0) setsockopt$kcm_KCM_RECV_DISABLE(0xffffffffffffffff, 0x119, 0x1, &(0x7f0000000200)=0xda, 0x4) setsockopt$kcm_KCM_RECV_DISABLE(0xffffffffffffffff, 0x119, 0x1, 0x0, 0x0) syz_80211_join_ibss(&(0x7f00000002c0)='wlan0\x00', 0x0, 0x0, 0x2) r3 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x2a, &(0x7f0000000500)=""/129, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000400)={'wlan0\x00', 0x0}) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r5, 0x0, 0x5}, 0x18) r6 = socket(0x1, 0x2, 0x0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r3, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r7, @ANYBLOB="01002bbd7000fbdbdf252100000008000300", @ANYRES32=r4, @ANYBLOB="a29e73ad41643e104c916fc966749fbe53227e574a2747cd768dd00ea0f4bf493714345f419df629886bf0a13a97f5e34c109ae7c649a050ea4d3ea43961a6007c1674e79a267dc5be7897c84a89a72097bc2cf2"], 0x1c}, 0x1, 0x0, 0x0, 0x24004084}, 0x40000) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000300)={'veth1_macvtap\x00'}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) 4.232474202s ago: executing program 4 (id=3936): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000d00), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0) 3.83374062s ago: executing program 3 (id=3937): syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='mnt\x00', 0x4, &(0x7f0000000000), 0x0, 0x236, &(0x7f0000000300)="$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") ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(0xffffffffffffffff, 0xc08c5336, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000540)='mnt\x00', 0x0, 0x0) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r0, 0xc0506617, &(0x7f0000000580)={@id={0x2, 0x0, @a}, 0x40, 0x0, '\x00', @a}) mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='mnt/encrypted_dir\x00', 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000680)='mnt/encrypted_dir\x00', 0x800, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r1, 0x800c6613, &(0x7f00000006c0)=@v2={0x2, @aes256, 0x3, '\x00', @a}) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY_ALL_USERS(r1, 0xc0406619, &(0x7f0000000080)={@id={0x2, 0x0, @a}}) 3.739776307s ago: executing program 4 (id=3938): futex(0x0, 0xc, 0x1, 0x0, 0x0, 0x1) r0 = socket$inet(0x2, 0x801, 0x0) listen(r0, 0x0) syz_open_dev$sndctrl(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) splice(r0, 0x0, r4, 0x0, 0x7ffff000, 0x0) 3.360176293s ago: executing program 0 (id=3939): unshare(0x20000400) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000038c0)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f1e7f2aa3d9b18ed81c0c869b51ec6c0af4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f13905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b072e90080008002d75593a625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289e01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf6023cdcedb5e0125ebbc08dee510cb2364149215108333719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad2300000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb0767192302000000b0eea24492a660583eecb42cbcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2edcaea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142ba11de6c5d50b83bae613402216b5054d1e7c13b1355d6f4a8245ffa4997da97e22f4c0eb97fca585ec6bf58351d564beb6d952aab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a326eea31ae4e0f7505ebf6c9d13330ca005ace1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000000000000010008bc0d9559711e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed85b980680b00002b435ac15fc0288d9b2a169cdcacc413038dafb7a2c8cb482bac0ac502d9ba96ffffff7f0000100000000000007d5ad897ef3b7cda42013d53046da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff729433282830689da6b53b263339863297771429d120000003341bf4abacac95900fca0493cf29b33dcc9ffffffffffffffd39fec2271ff01589646efd1cf870cd7bb2366fde41f94290c2a5ff870ce41fd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78100788f11f76161d46ea3ab60fa4d30dc94ef241875f3b4ce0232fcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1093b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2ae582786105c7df8be5877050c91301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c4d75cf2458e3546c1c776da64fb5abee0acfd235f2f4632c9062ece84c99a061887a20639b41c8c12ee86c50804042b3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457acf37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ad0694dc55bff9f5f45f90400000000000000d6b2c5ea1393fdf24285bff3b89c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d163118e4cbe024fd4500f8ff0700000000cc9d8046c216c1f895778cb25122a2a9f9b444aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99b355b72d538ba4958ea8e4aa37094191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250ddc8674152f94e3a409e2a3bce109b60000000000000000d6d5210d7503000000a87a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137abf9a404abde7750898b1bd627e873f8703be8672d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e6c257a45319f18101288d139bd3da20fed05a8fe64680b0a3fc22dd70400000000946912d6c98cd1a9fbe1e7d58c08acaf30235b918a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69993e9960ff5f76015e6009556237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854352cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66418d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a53f1c96e0d4b3bc19faa5449209b083dbd334b47f067bbab40743b2a42010082008df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c3431ee97471c2ed01faa7eaa69eb7f7f80572fdd11bb1d0d1280fbc22bf73468788df51710d7d31c632fc5ed1762eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331945ecefa26b8471d42645288d7226bbd9ccd628ab84875f2c50ba891cea592b0430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71f96756ea5cce7daac4be290159f6bcd75f0dda9de5532e71ae9e48b0ed0254a83100000000f6fbb869604d51a36a54c832e45b2569dc0d90b075225fde44c4e0973171ad47d6b0fdf9743af932cd6db49a47613808bad959710300000000000000832d0a45fa4242e24c7e800003c9e8095e02985f28e678f66422436f949e2ab8f162d7e3f855e378f4a1f40b0c6fb2d4b205a800b6d713acebc5b014e61a543a5a194f9ac18d76b5440e3b1a569e7397f6cafa86966d7ba19e720413267a6ccea9c439671d2c680f2753ca184eeeb843450368acb4383a01d25eb3d1e23e0f2645d1cdfa9fa410632f95a5f622f851c66ee7e30393cd7a4d67ff2a49c4f93c0984b5c2d4523497dad64f95f08493564a1df87111c9bf3194fef97dcecc467ace45feeb685c5870d05f88a0f463db88d377442e1349acaf766218b54a9d624778e1c4e064c98e494198276eb2df7766411bef0ebb5000000000006065d635b0b7a00ee767221d8af9753387e0cd8d718f54a29df6fba3bd4c440e6e2172e3fcc01b8babb757b5c59217b80d0db3ba582814a604e4ef7a803e9ca7c85b35c9b93a9e0885e238b44ae1c2e64cce3b27083b8246829e64056000302bffff15405bd5f2eba20000000000000000000000000000000000009a9823fd8fbc5aa165099c5ed032b48ea12d8e0588dc52702e4084913a06d468d0928bad76d697e1f85ab030e788d38788ee5b5428d4a971cc97db9fd2310801570735ce129e7e77fc2777692664a1488fd8d6dff4dad618fd54f529d4555c6507009ee69dd1bc55258789b24052137e9637f3efbab71720f88cf573fe0e5239c000be2733c49546f6e8a9175ec6f14dbf72cac91643b2fd99c29eca28a3c2e60d5e5b8795fae16a7c3ea57e728eca35eaf0155a39f97580e079175426c088a0208040982a0000000000000000000000000051ceaaf0159fe61f2eade7603d0a7a56fb09cd119ac06adb6597155ae47846892bb414c024d8cbe9240b71ec6dc2124d3a19e2d714b273d95d1d3aa737cb04a33615ff2a730e51067d5d675d7122361c37c61a43b5afd865b60d4cae891b73220f17d25985a7f76834995e53a93a1c7b9eef267df691ca983a0b15bda7f6c5c1ca7aa50261a3089a1ebf0734c9b07e8951ff023263ad5aed8cfb49b49e128c697724c057d22c5df5aef27ce3db11d5ad5527d149d076e1a87e2df27c0cb8a67ad026bf953e88f10447e125c2c0f1aebee1f3390a9e3ddad4e2a6e0f6e4569fdefa19e870e04acf9493b963f98e23cfc665e4f465fa3f801e1957c399e45f61d3459b1c606204368bb931345af2823c487d2fd99db6ea6e008e7ffa06ca861551189d155bd077a79fe2c7e961352e56824f727d21d41eae78bfec4a2d7a7edbc8ef958c5ea599f7c25bf71c2340558aa12fdd24a88aaad5921aee7dae6a2f3009d9cb43ab4898d0f0aa565431b6abe585d75db04d1c9ba0b9de4ae8b0d3132bc6810cc9a693979f55174a72e1df9fdef35bc470f9e6e591982757f45c52c645d891bf63bb21fb66926ebe1a8525611fc3e8bb8795c36dc2a86b5ab46ff33cc74f61751b2dae92676db85c8d0c721b7ea4544bf51c95c86fcac1f434d09d1ee4928aafe23de66fed972e0dddfb33f64e48701b049239e7f552d816441d11c4c2647c014462344359198d97c4b6e9ed31ca18987b64de079b2bed641e8a92f13ca70844c65cb423d01950b0ebf44bd28e09c05d9ae5dd689fb880fb18d042219f5ac60c3a03b085abf3e8e3efc842a8d328733461f04c99607061c65ed14c61322a5ac2d371a95b8ad867857ed13a4fa4ae033a09673866cd77f4bcdaaa05207166b19a8758d8855400d8c6a7242dc207251e8797eca24ea4f487663e60f2f5e1f1424958fd148f846830e88a42d93e1fe9c0b4a4a268921738938aa9f3cb3811ac87c54c8ebc8bcfb4613cc3a997ff1579edbd4ade8020e3ad001b072b1a751b588ac4639f35a58e00a50c0270608c7a7f10132b1c25b9ea81232fbef665f6212f875b2a000000000000000000000000000000000000000000000000000000a0cc2b89ce1525748ce167cbabb881f060599a6a59f645edca1d5c24b2f6b8c997a8f3e1b7679984a566d98d4d31198ee4c5ea7be0d99cf89bba4a6fd0bec12e7792bec3c5038e13b1982f80cdecd07f8908a983a7c9fb81c2ba7f7e87c991f30e50d1b3bbe4cf2a2f5d4571b6568ada51bc121c9139d2a8e0638c84066b1759081802"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x5, 0x5, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000004830000000000000fa40000007010000080020007500feff0000820095"], &(0x7f0000000100)='GPL\x00', 0x3, 0xfa, &(0x7f00000007c0)=""/250, 0x0, 0x8}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3) close(0x4) 3.001962585s ago: executing program 3 (id=3940): r0 = socket$kcm(0x23, 0x2, 0x0) sendmsg$sock(r0, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000380)=ANY=[@ANYBLOB], 0x78) 2.839625102s ago: executing program 5 (id=3941): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa802, 0x0) close(r2) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast}) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, 0x0, 0x40004) recvmmsg(r4, &(0x7f0000001480)=[{{0x0, 0x0, &(0x7f0000000bc0)=[{&(0x7f0000001ac0)=""/4096, 0x1000}], 0x1}, 0x5d}], 0x1, 0x10022, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x4c02}) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000280)=""/160, 0xa0}, {&(0x7f0000002140)=""/4096, 0x1000}], 0x2) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f0000000100)=0x730) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', @link_local}) 2.190008219s ago: executing program 3 (id=3942): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004cc311ec8500000075000000a70000000800000095"], &(0x7f0000000140)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000000)='kfree\x00', r1}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a2c000000060a010400000000000000000a0000060900010073797a31000000000900020073797a32000000002c000000080a050000000000000000000a00000a0900010073797a30000000000900020073797a320000000014000000110201"], 0x80}, 0x1, 0x0, 0x0, 0x4000850}, 0x24044010) 1.986438519s ago: executing program 0 (id=3943): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="07000000040000000001"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x8, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000ec0)={&(0x7f0000000bc0)='kfree\x00', r1, 0x0, 0xfffffffffffffff4}, 0x18) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x4, 0x4, 0x0, &(0x7f00000001c0)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xe46a}, 0x94) sendmsg$nl_route_sched(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000340)=@newtaction={0x64, 0x30, 0xffffffffffffffff, 0x0, 0x0, {}, [{0x50, 0x1, [@m_bpf={0x4c, 0x1, 0x0, 0x0, {{0x8}, {0x24, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x1, 0x0, 0x4, 0x0, 0x4}}, @TCA_ACT_BPF_FD={0x8, 0x5, r3}]}, {0xfffffffffffffe45}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0xa25bb844b084a7a1}, 0x0) 1.730602035s ago: executing program 3 (id=3944): socket$nl_netfilter(0x10, 0x3, 0xc) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@ipv4_newrule={0x24, 0x20, 0x301, 0x70bd27, 0x25dfdbff, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1e}, [@FRA_GENERIC_POLICY=@FRA_SPORT_RANGE={0x8, 0x17, {0x4e20, 0x4e20}}]}, 0x24}, 0x1, 0x0, 0x0, 0x240480d4}, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_80211_inject_frame(0x0, 0x0, 0xb5) socket$nl_generic(0x10, 0x3, 0x10) socket$unix(0x1, 0x2, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000000008000400", @ANYRES32=r3, @ANYBLOB="06001500070000000c00168008000100", @ANYRES64=r2], 0x38}}, 0x10) 1.336507527s ago: executing program 0 (id=3945): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc0241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="034886dd49032800030020000000600000004004730081e949b93897bc3b0000070000007d01ff0200"], 0xfdef) 1.317968452s ago: executing program 5 (id=3946): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r2, 0x0, 0x0) sendmmsg$alg(r2, 0x0, 0x0, 0x0) setsockopt$kcm_KCM_RECV_DISABLE(0xffffffffffffffff, 0x119, 0x1, &(0x7f0000000200)=0xda, 0x4) setsockopt$kcm_KCM_RECV_DISABLE(0xffffffffffffffff, 0x119, 0x1, 0x0, 0x0) syz_80211_join_ibss(&(0x7f00000002c0)='wlan0\x00', 0x0, 0x0, 0x2) r3 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x2a, &(0x7f0000000500)=""/129, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000400)={'wlan0\x00', 0x0}) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r5, 0x0, 0x5}, 0x18) r6 = socket(0x1, 0x2, 0x0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r3, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r7, @ANYBLOB="01002bbd7000fbdbdf252100000008000300", @ANYRES32=r4, @ANYBLOB="a29e73ad41643e104c916fc966749fbe53227e574a2747cd768dd00ea0f4bf493714345f419df629886bf0a13a97f5e34c109ae7c649a050ea4d3ea43961a6007c1674e79a267dc5be7897c84a89a72097bc2cf2"], 0x1c}, 0x1, 0x0, 0x0, 0x24004084}, 0x40000) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000300)={'veth1_macvtap\x00'}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) 720.784769ms ago: executing program 3 (id=3947): socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet(0x2, 0x2, 0x1) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_init_net_socket$ax25(0x3, 0x2, 0xc9) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000400)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c0000001000030400000006000000005dcc0300", @ANYRES32=r2, @ANYBLOB="71e79fd800000000140012800c0001006d616376746170001400028008000500", @ANYRES32=r3], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newtfilter={0x2c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x74, r2, {0x5}, {}, {0xa, 0x1}}, [@TCA_RATE={0x6, 0x5, {0x39, 0x1}}]}, 0x2c}, 0x1, 0xf0ffffffffffff, 0x0, 0x4004140}, 0x0) 624.375868ms ago: executing program 0 (id=3948): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000380)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a500000023000000"], &(0x7f00000000c0)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000002b80)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r1, 0x0, 0x5}, 0x18) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080), 0x4) 547.808367ms ago: executing program 5 (id=3949): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x20081e, &(0x7f0000000100), 0x1, 0x502, &(0x7f0000000a00)="$eJzs3c9vI1cdAPCvnV9OmjZp6QEQokspLGi1TuJto6oHKCeEUCVEjyBtQ+KNothxFDulCXvY/g9IVOIER/4Azj3xJyC4cYEDEj8iULMSSFPNeLzrzdob7yaxs/HnI41m3ryxv+/t7rzn+W7iF8DYuhYR9yJiOiI+iIiF/Hwh3+Ld9pZe99nR3fXjo7vrhUiS9/9VyOrTc9H1mtQL+XuWIuLH34/4WeHxuM2Dw+21Wq261y7OLrXqu0vNg8ObW/W1zepmdadSWV1ZXX771luVc+vra/Xp9sFE2sBv/yJt1nxe192Pc/T/JDP1IE5qMiJ+eAHBRmEi78/0qBvCMylGxCsR8Xp2/y/ERPa3CQBcZUmyEMlCdxkAuOqKWQ6sUCznuYD5KBbL5XYO79WYK9YazdaNO439nY12rmwxpop3tmrV5TxXuBhThbS8kh0/LFdOlG9FxMsR8cuZ2axcXm/UNkb5wQcAxtgLJ+b//860538A4IorjboBAMDQmf8BYPyY/wFg/Jj/AWD8mP8BYPyY/wFg/Jj/AWCs/Oi999ItOc6//3rjw4P97caHNzeqze1yfX+9vN7Y2y1vNhqb2Xf21E97v1qjsbvyZux/tPid3WZrqXlweLve2N9p3c6+1/t2dWoovQIAnuTl1z79cyEi7r0zm23RtZaDuRqutuJZXjx7fu0Ahm9i1A0ARsZqXzC+zvCMLz0AV0SPJXofUXrkcT+/OkmS5GKbBVyg61+S/4dx1ZX/91PAMGbk/2F8DZr/Py0/ADx/kqQw6Jr/MeiFAMDlJscP9Hm+fyXf/y7/z4Gfbpy84pOLbBUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABcbp31f8v5WuDzUSyWyxEvRsRiTBXubNWqyxHxUkT8aWZqJi2vjLjNAMBZFf9eyNf/ur7wxvzJ2unC/ZlsHxE///X7v/pordXa+2N6/t8Pzrc+yc9XRtF+AOA0nXk623c9yH92dHe9sw2zPf/4XkSU2vGPj6bj+EH8yZjM9qWYioi5/xTycluhK3dxFvc+jogv9up/IeazHEh75dOT8dPYLw41fvGR+MWsrr1P/yy+8NSRk4VzaD481z5Nx593e91/xbiW7Xvf/6VshDq7fPxL32r9OBsDH8bvjH8Tfca/a4PGePMPP2gfzT5e93HElycjOrGPu8afTvxCn/hvDBj/L1/56uv96pLfRFyP3vG7Yy216rtLzYPDm1v1tc3qZnWnUlldWV1++9ZblaUsR73Ufzb45zs3XupXl/Z/rk/80in9/8aA/f/t/z74ydeeEP9bX+8VvxivPiF+Oid+c8D4a3O/L/WrS+Nv9Ox/R//+3xgw/l//dvjYsuEAwOg0Dw6312q16t4wDzofJIYa1MEVOEj/1VyCZvQ8+O6wYk3HU70qSZ4pVr8R4zyybsBl0L7Xk+peRNwfdWMAAAAAAAAAAAAAAICehvEbS6PuIwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFfX5wEAAP//90HVog==") r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x107042, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) fsopen(0x0, 0x0) r1 = landlock_create_ruleset(0x0, 0x0, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r1, 0x1, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x187842, 0x3) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x8008000000010, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x18) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000080)={0x3920e, r0, 0x2, 0x0, 0x2}) 83.129216ms ago: executing program 0 (id=3950): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000500)=ANY=[@ANYBLOB], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000900000000000000213f0000c50000000e800000850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='mmap_lock_acquire_returned\x00', r1}, 0x18) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xa, 0x31, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00304, 0x17) modify_ldt$write2(0x11, &(0x7f0000000100)={0x1d30, 0x0, 0x2003, 0x1}, 0x10) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) 0s ago: executing program 3 (id=3951): syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f0000000200)=ANY=[], 0x11, 0x6ed, &(0x7f00000003c0)="$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") openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xc4042, 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x8042, 0x0) fcntl$setlease(r0, 0x400, 0x1) link(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') kernel console output (not intermixed with test programs): gth. [ 590.091000][T12428] netlink: 'syz.3.2486': attribute type 29 has an invalid length. [ 590.092644][T12427] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2487'. [ 590.135491][T12427] team0: entered promiscuous mode [ 590.141092][T12427] team_slave_0: entered promiscuous mode [ 590.148146][T12427] team_slave_1: entered promiscuous mode [ 590.154912][T12427] dummy0: entered promiscuous mode [ 590.167392][T12427] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 590.179622][T12427] team0: left promiscuous mode [ 590.184604][T12427] team_slave_0: left promiscuous mode [ 590.185014][T12428] netlink: 128124 bytes leftover after parsing attributes in process `syz.3.2486'. [ 590.192343][T12427] team_slave_1: left promiscuous mode [ 590.208659][T12427] dummy0: left promiscuous mode [ 591.041353][T12443] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2493'. [ 591.218638][T12443] lo speed is unknown, defaulting to 1000 [ 591.421680][T12451] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2493'. [ 592.318077][T12464] sctp: [Deprecated]: syz.4.2499 (pid 12464) Use of struct sctp_assoc_value in delayed_ack socket option. [ 592.318077][T12464] Use struct sctp_sack_info instead [ 592.798536][T12468] netlink: 'syz.5.2501': attribute type 29 has an invalid length. [ 592.810378][T12473] netlink: 'syz.5.2501': attribute type 29 has an invalid length. [ 592.823208][T12467] tipc: Enabled bearer , priority 0 [ 592.847817][T12465] tipc: Resetting bearer [ 592.861020][T12468] netlink: 128124 bytes leftover after parsing attributes in process `syz.5.2501'. [ 592.937674][T12472] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2502'. [ 592.958711][T12465] tipc: Disabling bearer [ 593.157687][T12472] team0: entered promiscuous mode [ 593.162953][T12472] team_slave_0: entered promiscuous mode [ 593.171242][T12472] team_slave_1: entered promiscuous mode [ 593.183757][T12472] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 593.195977][T12472] team0: left promiscuous mode [ 593.201165][T12472] team_slave_0: left promiscuous mode [ 593.209998][T12472] team_slave_1: left promiscuous mode [ 593.339707][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 593.346922][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 593.872641][T12477] lo speed is unknown, defaulting to 1000 [ 593.894698][T12480] vlan0: entered promiscuous mode [ 593.969725][T12481] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2506'. [ 593.980153][T12481] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2506'. [ 594.036865][T12482] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2506'. [ 594.046470][T12482] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2506'. [ 594.805442][T12501] tipc: Enabled bearer , priority 0 [ 594.824739][T12501] tipc: Resetting bearer [ 594.918360][T12502] syzkaller0: entered promiscuous mode [ 594.924039][T12502] syzkaller0: entered allmulticast mode [ 594.954481][T12494] tipc: Disabling bearer [ 595.672576][T12511] netlink: 'syz.5.2516': attribute type 29 has an invalid length. [ 595.737442][T12512] netlink: 'syz.5.2516': attribute type 29 has an invalid length. [ 595.789135][T12511] netlink: 128124 bytes leftover after parsing attributes in process `syz.5.2516'. [ 596.351925][T12521] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2519'. [ 596.378860][T12521] team0: entered promiscuous mode [ 596.384106][T12521] team_slave_0: entered promiscuous mode [ 596.391495][T12521] team_slave_1: entered promiscuous mode [ 596.398570][T12521] netdevsim netdevsim5 netdevsim1: entered promiscuous mode [ 596.412952][T12521] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 596.425236][T12521] team0: left promiscuous mode [ 596.430474][T12521] team_slave_0: left promiscuous mode [ 596.437455][T12521] team_slave_1: left promiscuous mode [ 596.444068][T12521] netdevsim netdevsim5 netdevsim1: left promiscuous mode [ 597.298847][T12538] tipc: Enabled bearer , priority 0 [ 597.385927][T12541] syzkaller0: entered promiscuous mode [ 597.391743][T12541] syzkaller0: entered allmulticast mode [ 597.403479][T12543] netlink: 'syz.4.2529': attribute type 29 has an invalid length. [ 597.441587][T12543] netlink: 'syz.4.2529': attribute type 29 has an invalid length. [ 597.460160][T12535] tipc: Disabling bearer [ 597.479471][T12543] netlink: 128124 bytes leftover after parsing attributes in process `syz.4.2529'. [ 598.308412][T12560] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2535'. [ 598.404470][T12560] team0: entered promiscuous mode [ 598.409943][T12560] team_slave_0: entered promiscuous mode [ 598.417063][T12560] team_slave_1: entered promiscuous mode [ 598.437876][T12560] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 598.450579][T12560] team0: left promiscuous mode [ 598.455548][T12560] team_slave_0: left promiscuous mode [ 598.462393][T12560] team_slave_1: left promiscuous mode [ 599.149073][T12574] netlink: 'syz.3.2541': attribute type 29 has an invalid length. [ 599.211783][T12574] netlink: 'syz.3.2541': attribute type 29 has an invalid length. [ 599.265222][T12574] netlink: 128124 bytes leftover after parsing attributes in process `syz.3.2541'. [ 599.381104][T12577] syzkaller0: entered promiscuous mode [ 599.387147][T12577] syzkaller0: entered allmulticast mode [ 599.887643][T12585] syzkaller0: entered promiscuous mode [ 599.893322][T12585] syzkaller0: entered allmulticast mode [ 600.612775][T12602] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2551'. [ 600.637838][T12602] team0: entered promiscuous mode [ 600.643096][T12602] team_slave_0: entered promiscuous mode [ 600.649976][T12602] team_slave_1: entered promiscuous mode [ 600.657069][T12602] netdevsim netdevsim0 netdevsim1: entered promiscuous mode [ 600.671298][T12602] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 600.683922][T12602] team0: left promiscuous mode [ 600.689134][T12602] team_slave_0: left promiscuous mode [ 600.695650][T12602] team_slave_1: left promiscuous mode [ 600.702383][T12602] netdevsim netdevsim0 netdevsim1: left promiscuous mode [ 601.179419][T12611] netlink: 'syz.4.2555': attribute type 29 has an invalid length. [ 601.218167][T12611] netlink: 'syz.4.2555': attribute type 29 has an invalid length. [ 601.286839][T12611] netlink: 128124 bytes leftover after parsing attributes in process `syz.4.2555'. [ 601.637829][T12620] syzkaller0: entered promiscuous mode [ 601.643520][T12620] syzkaller0: entered allmulticast mode [ 602.178803][T12632] syzkaller0: entered promiscuous mode [ 602.184485][T12632] syzkaller0: entered allmulticast mode [ 602.542561][T12639] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2567'. [ 602.592246][T12639] bond0: entered promiscuous mode [ 602.597804][T12639] bond_slave_0: entered promiscuous mode [ 602.604645][T12639] bond_slave_1: entered promiscuous mode [ 602.617352][T12639] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 602.629252][T12639] bond0: left promiscuous mode [ 602.634227][T12639] bond_slave_0: left promiscuous mode [ 602.640994][T12639] bond_slave_1: left promiscuous mode [ 603.506335][T12659] lo speed is unknown, defaulting to 1000 [ 604.226413][T12666] syzkaller0: entered promiscuous mode [ 604.232238][T12666] syzkaller0: entered allmulticast mode [ 605.228737][T12678] syzkaller0: entered promiscuous mode [ 605.234416][T12678] syzkaller0: entered allmulticast mode [ 605.543199][T12684] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2583'. [ 605.615874][T12684] bond0: entered promiscuous mode [ 605.621406][T12684] bond_slave_0: entered promiscuous mode [ 605.628500][T12684] bond_slave_1: entered promiscuous mode [ 605.641178][T12684] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 605.653289][T12684] bond0: left promiscuous mode [ 605.658618][T12684] bond_slave_0: left promiscuous mode [ 605.665302][T12684] bond_slave_1: left promiscuous mode [ 607.036732][T12713] syzkaller0: entered promiscuous mode [ 607.042505][T12713] syzkaller0: entered allmulticast mode [ 607.218416][T12717] lo speed is unknown, defaulting to 1000 [ 607.768038][T12721] syzkaller0: entered promiscuous mode [ 607.773799][T12721] syzkaller0: entered allmulticast mode [ 608.666467][T12732] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2599'. [ 608.692492][T12732] bond0: entered promiscuous mode [ 608.698000][T12732] bond_slave_0: entered promiscuous mode [ 608.704814][T12732] bond_slave_1: entered promiscuous mode [ 608.718437][T12732] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 608.731144][T12732] bond0: left promiscuous mode [ 608.736376][T12732] bond_slave_0: left promiscuous mode [ 608.745200][T12732] bond_slave_1: left promiscuous mode [ 609.140375][T12738] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2601'. [ 609.150450][T12738] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2601'. [ 609.162212][T12740] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2601'. [ 609.171858][T12740] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2601'. [ 609.546767][T12743] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2603'. [ 610.268989][T12762] syzkaller0: entered promiscuous mode [ 610.274676][T12762] syzkaller0: entered allmulticast mode [ 611.086767][T12777] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2618'. [ 611.113330][T12774] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2616'. [ 611.138936][T12774] team0: entered promiscuous mode [ 611.144162][T12774] team_slave_0: entered promiscuous mode [ 611.151362][T12774] team_slave_1: entered promiscuous mode [ 611.160373][T12774] netdevsim netdevsim5 netdevsim1: entered promiscuous mode [ 611.174454][T12774] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 611.187481][T12774] team0: left promiscuous mode [ 611.192460][T12774] team_slave_0: left promiscuous mode [ 611.199318][T12774] team_slave_1: left promiscuous mode [ 611.205881][T12774] netdevsim netdevsim5 netdevsim1: left promiscuous mode [ 612.508010][T12809] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2631'. [ 613.028364][T12814] netlink: 64 bytes leftover after parsing attributes in process `syz.4.2632'. [ 613.524154][T12819] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2634'. [ 613.552311][T12819] team0: entered promiscuous mode [ 613.557806][T12819] team_slave_0: entered promiscuous mode [ 613.564574][T12819] team_slave_1: entered promiscuous mode [ 613.577608][T12819] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 613.589926][T12819] team0: left promiscuous mode [ 613.594899][T12819] team_slave_0: left promiscuous mode [ 613.601737][T12819] team_slave_1: left promiscuous mode [ 615.692716][T12857] syzkaller0: entered promiscuous mode [ 615.698689][T12857] syzkaller0: entered allmulticast mode [ 615.907036][T12865] lo speed is unknown, defaulting to 1000 [ 616.960024][T12874] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2653'. [ 616.985274][T12874] team0: entered promiscuous mode [ 616.990993][T12874] team_slave_0: entered promiscuous mode [ 616.997982][T12874] team_slave_1: entered promiscuous mode [ 617.004750][T12874] netdevsim netdevsim2 netdevsim1: entered promiscuous mode [ 617.019519][T12874] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 617.031819][T12874] team0: left promiscuous mode [ 617.037149][T12874] team_slave_0: left promiscuous mode [ 617.043813][T12874] team_slave_1: left promiscuous mode [ 617.051467][T12874] netdevsim netdevsim2 netdevsim1: left promiscuous mode [ 619.021476][T12905] netlink: 'syz.4.2665': attribute type 25 has an invalid length. [ 619.029934][T12905] netlink: 'syz.4.2665': attribute type 7 has an invalid length. [ 619.278150][T12914] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2670'. [ 619.303301][T12914] team0: entered promiscuous mode [ 619.308957][T12914] team_slave_0: entered promiscuous mode [ 619.315748][T12914] team_slave_1: entered promiscuous mode [ 619.322868][T12914] dummy0: entered promiscuous mode [ 619.335048][T12914] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 619.347755][T12914] team0: left promiscuous mode [ 619.352716][T12914] team_slave_0: left promiscuous mode [ 619.359487][T12914] team_slave_1: left promiscuous mode [ 619.366333][T12914] dummy0: left promiscuous mode [ 619.899637][T12926] lo speed is unknown, defaulting to 1000 [ 622.133408][T12957] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2685'. [ 622.158551][T12957] team0: entered promiscuous mode [ 622.163801][T12957] team_slave_0: entered promiscuous mode [ 622.171679][T12957] team_slave_1: entered promiscuous mode [ 622.179066][T12957] netdevsim netdevsim0 netdevsim1: entered promiscuous mode [ 622.193006][T12957] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 622.205190][T12957] team0: left promiscuous mode [ 622.210500][T12957] team_slave_0: left promiscuous mode [ 622.217498][T12957] team_slave_1: left promiscuous mode [ 622.224104][T12957] netdevsim netdevsim0 netdevsim1: left promiscuous mode [ 623.043413][T12977] lo speed is unknown, defaulting to 1000 [ 623.528178][T12982] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2695'. [ 623.537853][T12982] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2695'. [ 623.567646][T12982] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2695'. [ 623.577078][T12982] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2695'. [ 624.431345][T12998] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2701'. [ 624.456691][T12998] team0: entered promiscuous mode [ 624.461928][T12998] team_slave_0: entered promiscuous mode [ 624.469296][T12998] team_slave_1: entered promiscuous mode [ 624.482139][T12998] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 624.494462][T12998] team0: left promiscuous mode [ 624.499696][T12998] team_slave_0: left promiscuous mode [ 624.506469][T12998] team_slave_1: left promiscuous mode [ 625.539693][T13022] lo speed is unknown, defaulting to 1000 [ 626.880998][T13047] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2720'. [ 626.909246][T13047] team0: entered promiscuous mode [ 626.914478][T13047] team_slave_0: entered promiscuous mode [ 626.921513][T13047] team_slave_1: entered promiscuous mode [ 626.928568][T13047] netdevsim netdevsim5 netdevsim1: entered promiscuous mode [ 626.942513][T13047] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 626.954792][T13047] team0: left promiscuous mode [ 626.960496][T13047] team_slave_0: left promiscuous mode [ 626.967374][T13047] team_slave_1: left promiscuous mode [ 626.973914][T13047] netdevsim netdevsim5 netdevsim1: left promiscuous mode [ 627.982673][T13062] netlink: 'syz.2.2726': attribute type 1 has an invalid length. [ 628.356280][T13072] lo speed is unknown, defaulting to 1000 [ 629.074803][T13088] netlink: 'syz.0.2734': attribute type 29 has an invalid length. [ 629.164593][T13091] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2736'. [ 629.265728][T13093] netlink: 104088 bytes leftover after parsing attributes in process `syz.0.2734'. [ 629.343567][T13088] netlink: 'syz.0.2734': attribute type 29 has an invalid length. [ 629.443107][T13091] 8021q: adding VLAN 0 to HW filter on device bond1 [ 629.605018][T13094] 8021q: adding VLAN 0 to HW filter on device bond1 [ 629.620648][T13094] bond1: (slave sit1): The slave device specified does not support setting the MAC address [ 629.635466][T13094] bond1: (slave sit1): Error -95 calling set_mac_address [ 631.548280][T13131] lo speed is unknown, defaulting to 1000 [ 631.609427][T13135] netlink: 'syz.5.2750': attribute type 29 has an invalid length. [ 631.730490][T13135] netlink: 'syz.5.2750': attribute type 1 has an invalid length. [ 631.738640][T13135] netlink: 21832 bytes leftover after parsing attributes in process `syz.5.2750'. [ 631.748877][T13135] netlink: 104088 bytes leftover after parsing attributes in process `syz.5.2750'. [ 631.758466][T13135] netlink: 'syz.5.2750': attribute type 1 has an invalid length. [ 631.766664][T13135] netlink: 21832 bytes leftover after parsing attributes in process `syz.5.2750'. [ 631.895459][T13138] netlink: 'syz.5.2750': attribute type 29 has an invalid length. [ 632.610703][T13153] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2754'. [ 632.620645][T13153] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2754'. [ 632.798630][T13153] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2754'. [ 632.808159][T13153] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2754'. [ 633.587275][T13167] syzkaller0: entered promiscuous mode [ 633.592977][T13167] syzkaller0: entered allmulticast mode [ 634.004809][T13180] netlink: 'syz.4.2765': attribute type 29 has an invalid length. [ 634.030329][T13180] netlink: 'syz.4.2765': attribute type 29 has an invalid length. [ 634.070629][T13180] netlink: 104088 bytes leftover after parsing attributes in process `syz.4.2765'. [ 634.270493][T13185] lo speed is unknown, defaulting to 1000 [ 634.916177][T13194] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2769'. [ 634.940907][T13194] bond0: entered promiscuous mode [ 634.946491][T13194] bond_slave_0: entered promiscuous mode [ 634.953313][T13194] bond_slave_1: entered promiscuous mode [ 634.966004][T13194] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 634.978356][T13194] bond0: left promiscuous mode [ 634.983330][T13194] bond_slave_0: left promiscuous mode [ 634.990111][T13194] bond_slave_1: left promiscuous mode [ 635.526869][T13205] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2771'. [ 635.537112][T13205] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2771'. [ 635.591503][T13206] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2771'. [ 635.601125][T13206] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2771'. [ 636.976003][T13224] netlink: 'syz.4.2778': attribute type 29 has an invalid length. [ 637.017850][T13224] netlink: 'syz.4.2778': attribute type 29 has an invalid length. [ 637.519227][T13238] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2783'. [ 637.528775][T13238] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2783'. [ 637.580223][T13239] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2782'. [ 637.587075][T13241] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2783'. [ 637.598789][T13241] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2783'. [ 638.641332][T13265] lo speed is unknown, defaulting to 1000 [ 638.969797][T13263] nbd: socks must be embedded in a SOCK_ITEM attr [ 638.977386][T13263] block nbd7: shutting down sockets [ 639.086976][T13271] netlink: 'syz.3.2793': attribute type 29 has an invalid length. [ 639.186885][T13270] netlink: 'syz.3.2793': attribute type 29 has an invalid length. [ 639.235959][T13273] nbd: must specify at least one socket [ 639.707971][T13280] bond0: entered promiscuous mode [ 639.713288][T13280] bond_slave_0: entered promiscuous mode [ 639.721838][T13280] bond_slave_1: entered promiscuous mode [ 639.738152][T13280] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 639.750138][T13280] bond0: left promiscuous mode [ 639.755120][T13280] bond_slave_0: left promiscuous mode [ 639.761792][T13280] bond_slave_1: left promiscuous mode [ 641.016603][T13308] netlink: 'syz.3.2807': attribute type 29 has an invalid length. [ 641.048469][T13308] netlink: 'syz.3.2807': attribute type 29 has an invalid length. [ 641.167164][T13307] nbd: socks must be embedded in a SOCK_ITEM attr [ 641.174371][T13307] block nbd7: shutting down sockets [ 641.227622][T13312] nbd: must specify at least one socket [ 641.448711][T13313] lo speed is unknown, defaulting to 1000 [ 641.762059][T13325] __nla_validate_parse: 6 callbacks suppressed [ 641.762141][T13325] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2812'. [ 641.779471][T13325] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2812'. [ 642.026841][T13326] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2812'. [ 642.037375][T13326] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2812'. [ 642.048650][T13330] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2813'. [ 643.391321][T13349] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2822'. [ 643.400666][T13349] netlink: 1 bytes leftover after parsing attributes in process `syz.2.2822'. [ 643.410039][T13349] block nbd7: server does not support multiple connections per device. [ 643.419304][T13349] block nbd7: shutting down sockets [ 643.428066][T13357] netlink: 'syz.0.2821': attribute type 29 has an invalid length. [ 643.441029][T13357] netlink: 'syz.0.2821': attribute type 29 has an invalid length. [ 643.944138][T13366] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2828'. [ 643.972028][T13366] bond0: entered promiscuous mode [ 643.977605][T13366] bond_slave_0: entered promiscuous mode [ 643.984523][T13366] bond_slave_1: entered promiscuous mode [ 643.997045][T13366] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 644.009575][T13366] bond0: left promiscuous mode [ 644.014553][T13366] bond_slave_0: left promiscuous mode [ 644.022073][T13366] bond_slave_1: left promiscuous mode [ 644.870505][T13380] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 644.900629][T13380] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 644.913388][T13380] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 644.944109][T13380] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 644.957424][T13380] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 645.061152][T13379] lo speed is unknown, defaulting to 1000 [ 645.419742][T13387] netlink: 'syz.5.2836': attribute type 29 has an invalid length. [ 645.492243][T13390] netlink: 'syz.5.2836': attribute type 29 has an invalid length. [ 645.667592][T13392] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2838'. [ 645.678095][T13392] netlink: 1 bytes leftover after parsing attributes in process `syz.0.2838'. [ 645.688272][T13392] block nbd7: server does not support multiple connections per device. [ 645.697529][T13392] block nbd7: shutting down sockets [ 646.588165][T13379] chnl_net:caif_netlink_parms(): no params data found [ 647.049180][ T5825] Bluetooth: hci3: command tx timeout [ 647.900841][T13435] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2850'. [ 648.001668][T13379] bridge0: port 1(bridge_slave_0) entered blocking state [ 648.009949][T13379] bridge0: port 1(bridge_slave_0) entered disabled state [ 648.017952][T13379] bridge_slave_0: entered allmulticast mode [ 648.028117][T13379] bridge_slave_0: entered promiscuous mode [ 648.067447][T13379] bridge0: port 2(bridge_slave_1) entered blocking state [ 648.075098][T13379] bridge0: port 2(bridge_slave_1) entered disabled state [ 648.083199][T13379] bridge_slave_1: entered allmulticast mode [ 648.093782][T13379] bridge_slave_1: entered promiscuous mode [ 648.263048][T13379] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 648.351873][T13379] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 648.448235][T13446] netlink: 'syz.5.2854': attribute type 25 has an invalid length. [ 648.457238][T13446] netlink: 'syz.5.2854': attribute type 7 has an invalid length. [ 648.581804][T13379] team0: Port device team_slave_0 added [ 648.603260][T13379] team0: Port device team_slave_1 added [ 648.765633][T13379] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 648.773017][T13379] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 648.800612][T13379] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 648.913287][T13379] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 648.921073][T13379] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 648.947703][T13379] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 649.137410][ T5825] Bluetooth: hci3: command tx timeout [ 649.370934][T13379] hsr_slave_0: entered promiscuous mode [ 649.381023][T13379] hsr_slave_1: entered promiscuous mode [ 649.390142][T13379] debugfs: 'hsr0' already exists in 'hsr' [ 649.396143][T13379] Cannot create hsr debugfs directory [ 650.232440][T13379] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 650.274301][T13480] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2865'. [ 650.367305][T13379] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 650.536882][T13379] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 650.728603][T13379] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 650.766867][T13483] netlink: 'syz.0.2867': attribute type 29 has an invalid length. [ 650.818814][T13483] netlink: 'syz.0.2867': attribute type 29 has an invalid length. [ 650.833628][T13490] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2870'. [ 650.858588][T13490] bond0: entered promiscuous mode [ 650.863823][T13490] bond_slave_0: entered promiscuous mode [ 650.871159][T13490] bond_slave_1: entered promiscuous mode [ 650.883782][T13490] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 650.895979][T13490] bond0: left promiscuous mode [ 650.901065][T13490] bond_slave_0: left promiscuous mode [ 650.907825][T13490] bond_slave_1: left promiscuous mode [ 651.210301][ T5825] Bluetooth: hci3: command tx timeout [ 651.301301][T13379] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 651.362380][T13379] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 651.429962][T13379] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 651.525225][T13379] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 651.955394][T13511] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2876'. [ 652.341412][T13516] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2878'. [ 652.375002][T13379] 8021q: adding VLAN 0 to HW filter on device bond0 [ 652.529363][T13379] 8021q: adding VLAN 0 to HW filter on device team0 [ 652.611726][ T5100] bridge0: port 1(bridge_slave_0) entered blocking state [ 652.619298][ T5100] bridge0: port 1(bridge_slave_0) entered forwarding state [ 652.711211][ T5100] bridge0: port 2(bridge_slave_1) entered blocking state [ 652.718874][ T5100] bridge0: port 2(bridge_slave_1) entered forwarding state [ 653.064084][T13528] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2883'. [ 653.289880][ T5825] Bluetooth: hci3: command tx timeout [ 653.970525][T13546] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2889'. [ 654.645153][T13379] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 654.681616][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 654.688911][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 654.855627][T13564] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2896'. [ 654.881720][T13564] bond0: entered promiscuous mode [ 654.887219][T13564] bond_slave_0: entered promiscuous mode [ 654.893975][T13564] bond_slave_1: entered promiscuous mode [ 654.907124][T13564] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 654.919808][T13564] bond0: left promiscuous mode [ 654.924778][T13564] bond_slave_0: left promiscuous mode [ 654.931589][T13564] bond_slave_1: left promiscuous mode [ 655.980347][T13590] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2904'. [ 656.399183][T13597] netdevsim netdevsim5 netdevsim0: entered allmulticast mode [ 656.633813][T13379] veth0_vlan: entered promiscuous mode [ 656.737434][T13379] veth1_vlan: entered promiscuous mode [ 657.022753][T13379] veth0_macvtap: entered promiscuous mode [ 657.059449][T13379] veth1_macvtap: entered promiscuous mode [ 657.182769][T13379] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 657.281509][T13379] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 657.402896][ T3697] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 657.444339][ T3697] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 657.487820][ T3697] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 657.523644][ T3697] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 659.938149][T13669] tipc: Enabling of bearer rejected, failed to enable media [ 662.427317][ T3697] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 662.435603][ T3697] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 662.603504][ T4131] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 662.611810][ T4131] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 663.272740][T13735] lo speed is unknown, defaulting to 1000 [ 664.454763][T13751] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2955'. [ 664.720227][T13380] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 664.737179][T13380] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 664.748714][T13380] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 664.895314][T13380] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 664.908076][T13380] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 665.123335][T13756] lo speed is unknown, defaulting to 1000 [ 665.675160][T13759] netlink: 'syz.5.2959': attribute type 29 has an invalid length. [ 665.750056][T13763] netlink: 'syz.5.2959': attribute type 29 has an invalid length. [ 665.814317][T13766] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2962'. [ 665.858091][T13761] block nbd7: shutting down sockets [ 666.304349][T13773] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2965'. [ 666.686977][T13756] chnl_net:caif_netlink_parms(): no params data found [ 666.995211][T13380] Bluetooth: hci2: command tx timeout [ 667.038231][T13786] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2968'. [ 667.197495][T13789] syzkaller0: entered promiscuous mode [ 667.203198][T13789] syzkaller0: entered allmulticast mode [ 668.086972][T13806] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2972'. [ 668.329932][T13810] netlink: 'syz.0.2973': attribute type 29 has an invalid length. [ 668.357576][T13810] netlink: 'syz.0.2973': attribute type 29 has an invalid length. [ 668.507945][T13811] block nbd7: shutting down sockets [ 668.613689][T13756] bridge0: port 1(bridge_slave_0) entered blocking state [ 668.621567][T13756] bridge0: port 1(bridge_slave_0) entered disabled state [ 668.630267][T13756] bridge_slave_0: entered allmulticast mode [ 668.639917][T13756] bridge_slave_0: entered promiscuous mode [ 668.714108][T13756] bridge0: port 2(bridge_slave_1) entered blocking state [ 668.722068][T13756] bridge0: port 2(bridge_slave_1) entered disabled state [ 668.734126][T13756] bridge_slave_1: entered allmulticast mode [ 668.743743][T13756] bridge_slave_1: entered promiscuous mode [ 668.967331][T13756] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 669.018019][T13756] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 669.056581][T13380] Bluetooth: hci2: command tx timeout [ 669.175319][T13756] team0: Port device team_slave_0 added [ 669.205997][T13756] team0: Port device team_slave_1 added [ 669.230587][T13826] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2980'. [ 669.373149][T13756] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 669.381554][T13756] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 669.409237][T13756] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 669.449369][T13756] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 669.456734][T13756] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 669.483726][T13756] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 669.900162][T13838] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2984'. [ 670.021398][T13756] hsr_slave_0: entered promiscuous mode [ 670.034789][T13756] hsr_slave_1: entered promiscuous mode [ 670.043744][T13756] debugfs: 'hsr0' already exists in 'hsr' [ 670.049741][T13756] Cannot create hsr debugfs directory [ 670.634456][T13847] nbd: socks must be embedded in a SOCK_ITEM attr [ 670.641838][T13847] block nbd7: shutting down sockets [ 671.124776][T13855] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2992'. [ 671.136483][T13380] Bluetooth: hci2: command tx timeout [ 671.283117][T13756] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 671.429760][T13756] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 671.578309][T13864] lo speed is unknown, defaulting to 1000 [ 671.685767][T13869] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2997'. [ 671.717841][T13756] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 672.042054][T13756] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 672.399359][T13756] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 672.447817][T13756] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 672.499934][T13756] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 672.733096][T13756] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 673.243772][T13380] Bluetooth: hci2: command tx timeout [ 673.628831][T13887] nbd: socks must be embedded in a SOCK_ITEM attr [ 673.635964][T13887] block nbd7: shutting down sockets [ 673.937950][T13756] 8021q: adding VLAN 0 to HW filter on device bond0 [ 674.087359][T13756] 8021q: adding VLAN 0 to HW filter on device team0 [ 674.152780][ T6992] bridge0: port 1(bridge_slave_0) entered blocking state [ 674.160388][ T6992] bridge0: port 1(bridge_slave_0) entered forwarding state [ 674.242939][ T6992] bridge0: port 2(bridge_slave_1) entered blocking state [ 674.250578][ T6992] bridge0: port 2(bridge_slave_1) entered forwarding state [ 674.305170][T13898] netlink: 'syz.5.3007': attribute type 29 has an invalid length. [ 674.357237][T13901] netlink: 'syz.5.3007': attribute type 29 has an invalid length. [ 675.038087][T13913] netdevsim netdevsim0: Direct firmware load for ./bus failed with error -2 [ 675.047740][T13913] netdevsim netdevsim0: Falling back to sysfs fallback for: ./bus [ 675.608560][T13923] nbd: socks must be embedded in a SOCK_ITEM attr [ 675.615811][T13923] block nbd7: shutting down sockets [ 676.018712][T13756] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 676.474991][T13756] veth0_vlan: entered promiscuous mode [ 676.599836][T13756] veth1_vlan: entered promiscuous mode [ 676.741272][T13934] netlink: 'syz.2.3019': attribute type 29 has an invalid length. [ 676.814063][T13937] netlink: 'syz.2.3019': attribute type 29 has an invalid length. [ 676.874416][T13756] veth0_macvtap: entered promiscuous mode [ 676.945802][T13756] veth1_macvtap: entered promiscuous mode [ 676.987749][T13939] netlink: 72 bytes leftover after parsing attributes in process `syz.5.3021'. [ 677.161205][T13756] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 677.249397][T13756] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 677.299604][ T5100] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 677.350692][ T5100] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 677.375501][ T5100] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 677.410012][ T5100] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 677.419333][T13944] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3023'. [ 678.810935][T13971] netlink: 'syz.0.3032': attribute type 29 has an invalid length. [ 678.868899][T13974] netlink: 'syz.0.3032': attribute type 29 has an invalid length. [ 679.118606][T13976] netlink: 64 bytes leftover after parsing attributes in process `syz.2.3033'. [ 679.162700][T13980] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3035'. [ 679.209632][T13981] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3034'. [ 679.234779][T13981] bond0: entered promiscuous mode [ 679.240398][T13981] bond_slave_0: entered promiscuous mode [ 679.247366][T13981] bond_slave_1: entered promiscuous mode [ 679.260377][T13981] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 679.272758][T13981] bond0: left promiscuous mode [ 679.277933][T13981] bond_slave_0: left promiscuous mode [ 679.284523][T13981] bond_slave_1: left promiscuous mode [ 680.300369][T14000] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3042'. [ 680.310199][T14000] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3042'. [ 680.333917][T14000] dummy0: entered promiscuous mode [ 680.345123][T14000] team0: entered promiscuous mode [ 680.350520][T14000] team_slave_0: entered promiscuous mode [ 680.357443][T14000] team_slave_1: entered promiscuous mode [ 680.380836][T14000] debugfs: 'hsr1' already exists in 'hsr' [ 680.386934][T14000] Cannot create hsr debugfs directory [ 680.659178][T14006] netlink: 'syz.5.3044': attribute type 29 has an invalid length. [ 680.710201][T14008] netlink: 'syz.5.3044': attribute type 29 has an invalid length. [ 680.837366][T14012] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3046'. [ 681.252728][T14018] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3048'. [ 682.237519][T14042] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3056'. [ 682.247314][T14042] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3056'. [ 682.319726][T14047] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3056'. [ 682.329254][T14047] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3056'. [ 682.509002][T14048] tipc: Enabled bearer , priority 0 [ 682.574293][T14046] tipc: Resetting bearer [ 682.616775][ T6992] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 682.625062][ T6992] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 682.737219][T14043] tipc: Disabling bearer [ 682.892455][ T3534] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 682.900683][ T3534] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 683.381535][T14060] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3061'. [ 684.516589][T14076] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3070'. [ 684.525879][T14076] netlink: 'syz.2.3070': attribute type 1 has an invalid length. [ 684.533994][T14076] nbd: error processing sock list [ 684.540062][T14076] block nbd7: shutting down sockets [ 684.696854][T13380] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 684.731297][T13380] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 684.741653][T13380] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 684.758469][T13380] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 684.779857][T13380] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 684.933283][T14079] lo speed is unknown, defaulting to 1000 [ 686.014765][T14095] TCP: tcp_parse_options: Illegal window scaling value 128 > 14 received [ 686.252477][ T3534] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 686.475031][ T3534] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 686.611729][ T3534] team0: Port device netdevsim1 removed [ 686.630460][ T3534] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 686.738200][T14079] chnl_net:caif_netlink_parms(): no params data found [ 686.831276][ T3534] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 686.899990][T13380] Bluetooth: hci0: command tx timeout [ 687.187403][ T3534] bridge_slave_1: left allmulticast mode [ 687.193360][ T3534] bridge_slave_1: left promiscuous mode [ 687.200073][ T3534] bridge0: port 2(bridge_slave_1) entered disabled state [ 687.227227][T14110] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3082'. [ 687.236912][T14110] netlink: 'syz.5.3082': attribute type 1 has an invalid length. [ 687.244825][T14110] nbd: error processing sock list [ 687.250756][T14110] block nbd7: shutting down sockets [ 687.308157][ T3534] bridge_slave_0: left allmulticast mode [ 687.314201][ T3534] bridge_slave_0: left promiscuous mode [ 687.320997][ T3534] bridge0: port 1(bridge_slave_0) entered disabled state [ 687.738832][T14126] TCP: tcp_parse_options: Illegal window scaling value 128 > 14 received [ 688.256742][ T3534] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 688.314488][ T3534] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 688.353610][ T3534] bond0 (unregistering): Released all slaves [ 688.738609][ T3534] tipc: Left network mode [ 688.968389][T13380] Bluetooth: hci0: command tx timeout [ 689.616326][T14153] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3094'. [ 689.718760][T14153] bond0: entered promiscuous mode [ 689.724642][T14153] bond_slave_0: entered promiscuous mode [ 689.731639][T14153] bond_slave_1: entered promiscuous mode [ 689.744130][T14153] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 689.756864][T14153] bond0: left promiscuous mode [ 689.761814][T14153] bond_slave_0: left promiscuous mode [ 689.768592][T14153] bond_slave_1: left promiscuous mode [ 689.866563][T14156] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3096'. [ 689.889938][T14079] bridge0: port 1(bridge_slave_0) entered blocking state [ 689.898551][T14079] bridge0: port 1(bridge_slave_0) entered disabled state [ 689.906560][T14079] bridge_slave_0: entered allmulticast mode [ 689.915857][T14079] bridge_slave_0: entered promiscuous mode [ 689.963725][ T3534] hsr_slave_0: left promiscuous mode [ 689.972556][ T3534] hsr_slave_1: left promiscuous mode [ 689.980749][ T3534] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 689.990734][ T3534] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 690.028751][ T3534] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 690.039409][ T3534] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 690.114860][ T3534] veth1_vlan: left promiscuous mode [ 690.831583][ T3534] team0 (unregistering): Port device team_slave_1 removed [ 690.868752][ T3534] team0 (unregistering): Port device team_slave_0 removed [ 691.034003][T14079] bridge0: port 2(bridge_slave_1) entered blocking state [ 691.041852][T14079] bridge0: port 2(bridge_slave_1) entered disabled state [ 691.050027][T14079] bridge_slave_1: entered allmulticast mode [ 691.061899][T14079] bridge_slave_1: entered promiscuous mode [ 691.087126][T13380] Bluetooth: hci0: command tx timeout [ 691.135070][T14164] geneve2: entered promiscuous mode [ 691.510473][T14079] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 691.549967][ T3534] IPVS: stop unused estimator thread 0... [ 691.590510][T14079] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 691.830736][T14175] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3103'. [ 691.872813][T14079] team0: Port device team_slave_0 added [ 691.952712][T14079] team0: Port device team_slave_1 added [ 692.210268][T14079] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 692.217498][T14079] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 692.244509][T14079] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 692.354095][T14079] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 692.361941][T14079] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 692.389114][T14079] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 692.404105][T14185] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3106'. [ 692.577815][T14079] hsr_slave_0: entered promiscuous mode [ 692.588306][T14079] hsr_slave_1: entered promiscuous mode [ 692.598100][T14079] debugfs: 'hsr0' already exists in 'hsr' [ 692.604002][T14079] Cannot create hsr debugfs directory [ 692.905288][T14193] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3110'. [ 692.931119][T14193] bond0: entered promiscuous mode [ 692.936859][T14193] bond_slave_0: entered promiscuous mode [ 692.943664][T14193] bond_slave_1: entered promiscuous mode [ 692.956540][T14193] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 692.969199][T14193] bond0: left promiscuous mode [ 692.974693][T14193] bond_slave_0: left promiscuous mode [ 692.981497][T14193] bond_slave_1: left promiscuous mode [ 693.076626][T14195] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3112'. [ 693.140368][T13380] Bluetooth: hci0: command tx timeout [ 693.934306][T14079] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 694.028265][T14079] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 694.093520][T14079] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 694.177670][T14079] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 694.291600][T14213] batadv_slave_1: entered promiscuous mode [ 694.348712][T14215] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3120'. [ 694.437105][T14216] batadv_slave_1: left promiscuous mode [ 695.068804][T14079] 8021q: adding VLAN 0 to HW filter on device bond0 [ 695.200506][T14079] 8021q: adding VLAN 0 to HW filter on device team0 [ 695.236697][T14231] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3126'. [ 695.257760][T13686] bridge0: port 1(bridge_slave_0) entered blocking state [ 695.265264][T13686] bridge0: port 1(bridge_slave_0) entered forwarding state [ 695.298299][T14232] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3127'. [ 695.308048][T14232] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3127'. [ 695.345115][T13686] bridge0: port 2(bridge_slave_1) entered blocking state [ 695.352706][T13686] bridge0: port 2(bridge_slave_1) entered forwarding state [ 695.403056][T14233] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3127'. [ 695.412539][T14233] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3127'. [ 697.010605][T14079] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 697.440043][T14263] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3139'. [ 697.450536][T14263] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3139'. [ 697.522881][T14079] veth0_vlan: entered promiscuous mode [ 697.555638][T14267] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3139'. [ 697.566386][T14267] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3139'. [ 697.651487][T14269] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3142'. [ 697.736454][T14079] veth1_vlan: entered promiscuous mode [ 698.043611][T14079] veth0_macvtap: entered promiscuous mode [ 698.087063][T14079] veth1_macvtap: entered promiscuous mode [ 698.227480][T14079] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 698.299894][T14079] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 698.390607][ T3774] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 698.437847][ T3774] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 698.462236][ T3774] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 698.518195][ T3774] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 700.390121][T14322] __nla_validate_parse: 7 callbacks suppressed [ 700.390199][T14322] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3162'. [ 700.494040][T14322] bridge0: entered promiscuous mode [ 700.499890][T14322] macvtap1: entered promiscuous mode [ 700.506303][T14322] macvtap1: entered allmulticast mode [ 700.511863][T14322] bridge0: entered allmulticast mode [ 700.574399][T14327] macvtap1: left promiscuous mode [ 700.581452][T14327] macvtap1: left allmulticast mode [ 700.587154][T14327] bridge0: left allmulticast mode [ 700.747722][T14331] batadv_slave_1: entered promiscuous mode [ 700.777072][T14331] batadv_slave_1: left promiscuous mode [ 701.025523][T14336] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3166'. [ 701.060883][T14335] netlink: 40 bytes leftover after parsing attributes in process `syz.5.3167'. [ 701.118272][T14339] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3168'. [ 701.128324][T14339] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3168'. [ 701.195104][T14341] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3168'. [ 701.204802][T14341] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3168'. [ 701.960319][T14357] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3174'. [ 702.210886][T14364] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3177'. [ 702.274029][T14364] erspan0: entered promiscuous mode [ 702.280121][T14364] macvtap2: entered promiscuous mode [ 702.286515][T14364] macvtap2: entered allmulticast mode [ 702.292160][T14364] erspan0: entered allmulticast mode [ 702.407858][T14367] batadv_slave_1: entered promiscuous mode [ 702.454978][T14368] macvtap2: left promiscuous mode [ 702.461191][T14368] macvtap2: left allmulticast mode [ 702.466953][T14368] erspan0: left allmulticast mode [ 702.486458][T14367] batadv_slave_1: left promiscuous mode [ 702.688502][T14372] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3179'. [ 703.374333][ T4131] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 703.382505][ T4131] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 703.477399][ T6992] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 703.485433][ T6992] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 703.538789][T14385] xfrm0: entered promiscuous mode [ 703.544037][T14385] xfrm0: entered allmulticast mode [ 703.662939][T14390] lo speed is unknown, defaulting to 1000 [ 704.243773][T14396] lo speed is unknown, defaulting to 1000 [ 704.957977][T14406] netlink: 'syz.0.3189': attribute type 4 has an invalid length. [ 705.399587][T14411] erspan0: entered promiscuous mode [ 705.405399][T14411] macvtap1: entered promiscuous mode [ 705.411853][T14411] macvtap1: entered allmulticast mode [ 705.417554][T14411] erspan0: entered allmulticast mode [ 705.637401][T14412] macvtap1: left promiscuous mode [ 705.643428][T14412] macvtap1: left allmulticast mode [ 705.649015][T14412] erspan0: left allmulticast mode [ 705.769242][ T5825] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 705.809201][ T5825] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 705.818879][ T5825] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 705.842708][ T5825] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 705.887037][ T5825] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 706.251539][T14416] lo speed is unknown, defaulting to 1000 [ 708.006943][T13380] Bluetooth: hci1: command tx timeout [ 708.297333][T14442] __nla_validate_parse: 5 callbacks suppressed [ 708.297414][T14442] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3202'. [ 708.415917][ T3534] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 708.538902][T14449] netlink: 56 bytes leftover after parsing attributes in process `syz.5.3204'. [ 708.570819][ T3534] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 708.622822][T14416] chnl_net:caif_netlink_parms(): no params data found [ 708.741856][ T3534] team0: Port device netdevsim1 removed [ 708.758661][ T3534] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 709.002004][ T3534] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 709.318424][ T3534] bridge_slave_1: left allmulticast mode [ 709.324305][ T3534] bridge_slave_1: left promiscuous mode [ 709.331094][ T3534] bridge0: port 2(bridge_slave_1) entered disabled state [ 709.407992][ T3534] bridge_slave_0: left allmulticast mode [ 709.413849][ T3534] bridge_slave_0: left promiscuous mode [ 709.421150][ T3534] bridge0: port 1(bridge_slave_0) entered disabled state [ 710.133399][T13380] Bluetooth: hci1: command tx timeout [ 710.197568][ T3534] bond0 (unregistering): left promiscuous mode [ 710.205737][ T3534] bond_slave_0: left promiscuous mode [ 710.212803][ T3534] bond_slave_1: left promiscuous mode [ 710.358003][ T3534] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 710.439855][ T3534] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 710.497630][ T3534] bond0 (unregistering): Released all slaves [ 710.521960][ T3534] bond1 (unregistering): Released all slaves [ 710.748255][T14472] tipc: Started in network mode [ 710.753521][T14472] tipc: Node identity e2e418273dcb, cluster identity 4711 [ 710.762063][T14472] tipc: Enabled bearer , priority 0 [ 710.855055][ T3534] tipc: Left network mode [ 710.864668][T14474] syzkaller0: entered promiscuous mode [ 710.871613][T14474] syzkaller0: entered allmulticast mode [ 711.468370][T14474] tipc: Resetting bearer [ 711.519485][T14474] tipc: Disabling bearer [ 711.629545][T14416] bridge0: port 1(bridge_slave_0) entered blocking state [ 711.639246][T14416] bridge0: port 1(bridge_slave_0) entered disabled state [ 711.647628][T14416] bridge_slave_0: entered allmulticast mode [ 711.658379][T14416] bridge_slave_0: entered promiscuous mode [ 711.679950][T14416] bridge0: port 2(bridge_slave_1) entered blocking state [ 711.693410][T14416] bridge0: port 2(bridge_slave_1) entered disabled state [ 711.705107][T14416] bridge_slave_1: entered allmulticast mode [ 711.723761][T14416] bridge_slave_1: entered promiscuous mode [ 712.169799][T13380] Bluetooth: hci1: command tx timeout [ 712.717710][T14509] syzkaller0: entered promiscuous mode [ 712.723578][T14509] syzkaller0: entered allmulticast mode [ 712.774573][ T3534] !: left promiscuous mode [ 712.840165][ T3534] hsr_slave_0: left promiscuous mode [ 712.855567][ T3534] hsr_slave_1: left promiscuous mode [ 712.863795][ T3534] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 712.873114][ T3534] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 712.915876][ T3534] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 712.924078][ T3534] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 712.946350][ T3534] veth1_vlan: left promiscuous mode [ 712.951968][ T3534] veth0_vlan: left promiscuous mode [ 713.435175][ T3534] team0 (unregistering): Port device team_slave_1 removed [ 713.544637][ T3534] team0 (unregistering): Port device team_slave_0 removed [ 713.870147][T14416] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 714.008258][T14515] syzkaller0: entered promiscuous mode [ 714.013930][T14515] syzkaller0: entered allmulticast mode [ 714.137970][T14416] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 714.193575][ T3534] IPVS: stop unused estimator thread 0... [ 714.251638][T13380] Bluetooth: hci1: command tx timeout [ 714.410701][T14416] team0: Port device team_slave_0 added [ 714.457207][T14416] team0: Port device team_slave_1 added [ 714.725523][T14416] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 714.734177][T14416] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 714.761012][T14416] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 714.879183][T14416] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 714.887087][T14416] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 714.915472][T14416] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 715.366245][T14416] hsr_slave_0: entered promiscuous mode [ 715.377276][T14416] hsr_slave_1: entered promiscuous mode [ 715.385886][T14416] debugfs: 'hsr0' already exists in 'hsr' [ 715.392146][T14416] Cannot create hsr debugfs directory [ 716.106542][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 716.113165][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 717.072073][T14416] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 717.169654][T14416] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 717.208775][T14416] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 717.248430][T14416] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 718.235889][T14416] 8021q: adding VLAN 0 to HW filter on device bond0 [ 718.383434][T14416] 8021q: adding VLAN 0 to HW filter on device team0 [ 718.457335][ T4131] bridge0: port 1(bridge_slave_0) entered blocking state [ 718.464820][ T4131] bridge0: port 1(bridge_slave_0) entered forwarding state [ 718.567249][ T4131] bridge0: port 2(bridge_slave_1) entered blocking state [ 718.574731][ T4131] bridge0: port 2(bridge_slave_1) entered forwarding state [ 720.342748][T14416] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 720.769162][T14416] veth0_vlan: entered promiscuous mode [ 720.871271][T14416] veth1_vlan: entered promiscuous mode [ 721.100297][T14416] veth0_macvtap: entered promiscuous mode [ 721.162020][T14416] veth1_macvtap: entered promiscuous mode [ 721.331716][T14416] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 721.442625][T14416] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 721.566804][T13686] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 721.630594][T13686] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 721.653709][T13686] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 721.712488][T13686] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 723.464048][T14692] syzkaller0: entered promiscuous mode [ 723.470123][T14692] syzkaller0: entered allmulticast mode [ 724.650955][T14716] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3297'. [ 724.684390][T14718] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3296'. [ 725.255630][T14728] syzkaller0: entered promiscuous mode [ 725.261541][T14728] syzkaller0: entered allmulticast mode [ 726.276408][ T3774] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 726.284681][ T3774] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 726.560315][T14754] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3310'. [ 726.574573][ T3774] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 726.585573][ T3774] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 728.297782][ T5825] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 728.314073][ T5825] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 728.325249][ T5825] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 728.356365][ T5825] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 728.372005][ T5825] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 728.561979][T14786] lo speed is unknown, defaulting to 1000 [ 728.907920][T14791] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3323'. [ 728.983302][T14794] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3324'. [ 729.431801][T14786] chnl_net:caif_netlink_parms(): no params data found [ 730.413756][T13380] Bluetooth: hci4: command tx timeout [ 730.851283][T14786] bridge0: port 1(bridge_slave_0) entered blocking state [ 730.860686][T14786] bridge0: port 1(bridge_slave_0) entered disabled state [ 730.869484][T14786] bridge_slave_0: entered allmulticast mode [ 730.879130][T14786] bridge_slave_0: entered promiscuous mode [ 730.930345][T14786] bridge0: port 2(bridge_slave_1) entered blocking state [ 730.938139][T14786] bridge0: port 2(bridge_slave_1) entered disabled state [ 730.946736][T14786] bridge_slave_1: entered allmulticast mode [ 730.956549][T14786] bridge_slave_1: entered promiscuous mode [ 731.158221][T14832] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3338'. [ 731.556537][T14786] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 731.679840][T14786] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 731.899905][T14786] team0: Port device team_slave_0 added [ 731.977323][T14786] team0: Port device team_slave_1 added [ 732.201603][T14838] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 732.291701][T14786] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 732.300193][T14786] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 732.328658][T14786] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 732.472788][T14786] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 732.481575][T14786] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 732.508236][T14786] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 732.516697][T13380] Bluetooth: hci4: command tx timeout [ 732.790788][T14786] hsr_slave_0: entered promiscuous mode [ 732.801029][T14786] hsr_slave_1: entered promiscuous mode [ 732.809787][T14786] debugfs: 'hsr0' already exists in 'hsr' [ 732.815691][T14786] Cannot create hsr debugfs directory [ 733.003094][T14857] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3349'. [ 733.013406][T14857] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3349'. [ 733.076457][T14858] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3349'. [ 733.085635][T14858] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3349'. [ 733.344298][T14862] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3351'. [ 733.355560][T14862] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3351'. [ 733.814521][T14786] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 734.026864][T14786] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 734.179818][T14786] team0: Port device netdevsim1 removed [ 734.199307][T14786] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 734.301443][T14786] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 734.566502][T13380] Bluetooth: hci4: command tx timeout [ 734.785951][T14786] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 734.868638][T14889] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3363'. [ 734.878074][T14889] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3363'. [ 734.889727][T14786] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 734.934289][T14786] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 734.989223][T14894] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3363'. [ 735.022515][T14786] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 735.785993][T14786] 8021q: adding VLAN 0 to HW filter on device bond0 [ 735.929868][T14786] 8021q: adding VLAN 0 to HW filter on device team0 [ 736.012430][ T3774] bridge0: port 1(bridge_slave_0) entered blocking state [ 736.020033][ T3774] bridge0: port 1(bridge_slave_0) entered forwarding state [ 736.127765][ T3774] bridge0: port 2(bridge_slave_1) entered blocking state [ 736.135350][ T3774] bridge0: port 2(bridge_slave_1) entered forwarding state [ 736.649434][T13380] Bluetooth: hci4: command tx timeout [ 736.749460][T14919] __nla_validate_parse: 1 callbacks suppressed [ 736.749544][T14919] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3376'. [ 736.932640][T14922] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3377'. [ 736.943167][T14922] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3377'. [ 737.001058][T14922] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3377'. [ 737.012109][T14922] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3377'. [ 737.783719][T14935] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3381'. [ 737.811405][T14935] team0: entered promiscuous mode [ 737.816900][T14935] team_slave_0: entered promiscuous mode [ 737.823674][T14935] team_slave_1: entered promiscuous mode [ 737.837211][T14935] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 737.851230][T14935] team0: left promiscuous mode [ 737.859245][T14935] team_slave_0: left promiscuous mode [ 737.865751][T14935] team_slave_1: left promiscuous mode [ 738.063712][T14786] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 739.139124][T14959] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3388'. [ 739.326807][T14963] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3389'. [ 739.336331][T14963] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3389'. [ 739.420987][T14966] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3389'. [ 740.312575][T14786] veth0_vlan: entered promiscuous mode [ 740.387192][T14786] veth1_vlan: entered promiscuous mode [ 740.683201][T14786] veth0_macvtap: entered promiscuous mode [ 740.734433][T14786] veth1_macvtap: entered promiscuous mode [ 740.935714][T14786] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 741.020376][T14786] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 741.136636][ T3511] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 741.176806][ T5100] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 741.218014][ T6992] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 741.265028][ T6992] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 742.528952][T15021] tipc: Started in network mode [ 742.534086][T15021] tipc: Node identity 06b52128e484, cluster identity 4711 [ 742.544499][T15021] tipc: Enabled bearer , priority 0 [ 742.560233][T15022] __nla_validate_parse: 3 callbacks suppressed [ 742.560312][T15022] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3408'. [ 742.633287][T15027] syzkaller0: entered promiscuous mode [ 742.639360][T15027] syzkaller0: entered allmulticast mode [ 742.785334][T15021] tipc: Resetting bearer [ 742.888862][T15019] tipc: Resetting bearer [ 742.973549][T15019] tipc: Disabling bearer [ 743.822081][T15044] tipc: Enabled bearer , priority 0 [ 744.072898][T15050] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input7 [ 744.131792][T15044] syzkaller0: entered promiscuous mode [ 744.137676][T15044] syzkaller0: entered allmulticast mode [ 744.150177][T15044] tipc: Resetting bearer [ 744.185875][ T5100] tipc: Resetting bearer [ 744.374543][T15042] tipc: Resetting bearer [ 744.569457][T15042] tipc: Disabling bearer [ 745.342067][T15076] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3422'. [ 745.351925][T15076] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3422'. [ 745.431212][T15078] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3422'. [ 745.440680][T15078] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3422'. [ 746.209139][T15094] Bluetooth: MGMT ver 1.23 [ 746.786385][ T5100] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 746.794399][ T5100] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 747.035867][ T5100] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 747.045760][ T5100] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 747.298237][T15112] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3435'. [ 747.307755][T15112] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3435'. [ 747.377423][T15114] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3435'. [ 747.387155][T15114] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3435'. [ 747.559252][T15115] syzkaller0: entered promiscuous mode [ 747.565029][T15115] syzkaller0: entered allmulticast mode [ 748.527013][T15136] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3446'. [ 748.608907][T15136] ip6gretap0: entered promiscuous mode [ 748.614940][T15136] macvtap3: entered promiscuous mode [ 748.621280][T15136] macvtap3: entered allmulticast mode [ 748.627028][T15136] ip6gretap0: entered allmulticast mode [ 748.953576][T15146] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3450'. [ 748.963130][T15146] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3450'. [ 749.021215][T15147] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3450'. [ 749.030914][T15147] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3450'. [ 749.593336][T15158] netlink: 84 bytes leftover after parsing attributes in process `syz.5.3455'. [ 749.650757][T15155] syzkaller0: entered promiscuous mode [ 749.657120][T15155] syzkaller0: entered allmulticast mode [ 750.541962][T15177] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3464'. [ 750.551810][T15177] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3464'. [ 750.607707][T15177] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3464'. [ 750.617396][T15177] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3464'. [ 751.902340][T15204] syzkaller0: entered promiscuous mode [ 751.908431][T15204] syzkaller0: entered allmulticast mode [ 753.042983][T15220] tipc: Enabled bearer , priority 0 [ 753.089727][T15220] syzkaller0: entered promiscuous mode [ 753.095398][T15220] syzkaller0: entered allmulticast mode [ 753.205821][T15220] tipc: Resetting bearer [ 753.267691][T15219] tipc: Resetting bearer [ 753.305288][T15219] tipc: Disabling bearer [ 754.400710][T15240] syzkaller0: entered promiscuous mode [ 754.406760][T15240] syzkaller0: entered allmulticast mode [ 755.223232][T15256] __nla_validate_parse: 5 callbacks suppressed [ 755.223310][T15256] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3492'. [ 755.239361][T15256] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3492'. [ 755.348554][T15256] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3492'. [ 755.362124][T15256] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3492'. [ 755.849939][T15265] tipc: Started in network mode [ 755.855092][T15265] tipc: Node identity aa298291a36a, cluster identity 4711 [ 755.865033][T15265] tipc: Enabled bearer , priority 0 [ 755.950371][T15269] syzkaller0: entered promiscuous mode [ 755.958328][T15269] syzkaller0: entered allmulticast mode [ 756.064430][T15265] tipc: Resetting bearer [ 756.097265][T15264] tipc: Resetting bearer [ 756.144965][T15264] tipc: Disabling bearer [ 756.424257][T15273] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 756.899557][T15283] syzkaller0: entered promiscuous mode [ 756.907427][T15283] syzkaller0: entered allmulticast mode [ 757.647957][T15297] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3506'. [ 757.657516][T15297] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3506'. [ 757.719007][T15297] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3506'. [ 757.729134][T15297] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3506'. [ 758.266829][T15306] tipc: Started in network mode [ 758.272056][T15306] tipc: Node identity fac715eec0ce, cluster identity 4711 [ 758.280387][T15306] tipc: Enabled bearer , priority 0 [ 758.387931][T15313] syzkaller0: entered promiscuous mode [ 758.393864][T15313] syzkaller0: entered allmulticast mode [ 758.473075][T15306] tipc: Resetting bearer [ 758.581871][T15303] tipc: Resetting bearer [ 758.649567][T15303] tipc: Disabling bearer [ 758.851557][T15321] lo speed is unknown, defaulting to 1000 [ 759.206848][T15320] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 759.225248][T15328] syzkaller0: entered promiscuous mode [ 759.231804][T15328] syzkaller0: entered allmulticast mode [ 761.536716][T15363] syzkaller0: entered promiscuous mode [ 761.542520][T15363] syzkaller0: entered allmulticast mode [ 762.384160][T15383] lo speed is unknown, defaulting to 1000 [ 762.550332][T15387] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3539'. [ 762.597202][T15387] netlink: 100 bytes leftover after parsing attributes in process `syz.0.3539'. [ 762.607588][T15387] netlink: 100 bytes leftover after parsing attributes in process `syz.0.3539'. [ 764.738117][T15427] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3553'. [ 764.748351][T15427] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3553'. [ 765.588135][T15446] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3562'. [ 765.758282][T15452] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3564'. [ 765.840894][T15452] netlink: 'syz.2.3564': attribute type 1 has an invalid length. [ 765.849996][T15452] nbd: error processing sock list [ 765.857879][T15452] block nbd7: shutting down sockets [ 766.018147][T15455] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 766.042650][T15454] syzkaller0: entered promiscuous mode [ 766.048599][T15454] syzkaller0: entered allmulticast mode [ 766.552759][T15464] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3570'. [ 766.562218][T15464] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3570'. [ 766.641791][T15464] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3570'. [ 767.622732][T15486] __nla_validate_parse: 2 callbacks suppressed [ 767.622813][T15486] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3578'. [ 767.727019][T15486] netlink: 'syz.2.3578': attribute type 1 has an invalid length. [ 767.735133][T15486] nbd: error processing sock list [ 767.740823][T15486] block nbd7: shutting down sockets [ 767.831614][T15489] syzkaller0: entered promiscuous mode [ 767.837962][T15489] syzkaller0: entered allmulticast mode [ 768.163271][T15494] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 768.375867][T15503] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3585'. [ 768.388159][T15503] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3585'. [ 768.459563][T15506] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3585'. [ 768.469170][T15506] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3585'. [ 768.871598][T15515] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3590'. [ 769.366786][ T5825] Bluetooth: hci3: command 0x0406 tx timeout [ 769.669087][T15528] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3595'. [ 769.748997][T15528] ip6gretap0: entered promiscuous mode [ 769.754979][T15528] macvtap1: entered promiscuous mode [ 769.761589][T15528] macvtap1: entered allmulticast mode [ 769.767360][T15528] ip6gretap0: entered allmulticast mode [ 769.850696][T15532] macvtap1: left promiscuous mode [ 769.858435][T15532] macvtap1: left allmulticast mode [ 769.863732][T15532] ip6gretap0: left allmulticast mode [ 770.018449][T15534] syzkaller0: entered promiscuous mode [ 770.024255][T15534] syzkaller0: entered allmulticast mode [ 770.767944][T15552] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3604'. [ 770.897958][T15556] loop4: detected capacity change from 0 to 512 [ 771.099887][T15556] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 771.113197][T15556] ext4 filesystem being mounted at /153/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 771.285526][T15556] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #2: comm syz.4.3606: corrupted inode contents [ 771.346503][T15556] EXT4-fs error (device loop4): ext4_dirty_inode:6538: inode #2: comm syz.4.3606: mark_inode_dirty error [ 771.438261][T15556] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #2: comm syz.4.3606: corrupted inode contents [ 771.475993][T15560] loop3: detected capacity change from 0 to 4096 [ 771.551334][T15556] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #2: comm syz.4.3606: mark_inode_dirty error [ 771.575192][T15560] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 771.957723][T13756] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 772.345985][T15583] syzkaller0: entered promiscuous mode [ 772.352105][T15583] syzkaller0: entered allmulticast mode [ 772.390008][T13379] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 772.777184][T15592] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3618'. [ 772.926296][ T5875] usb 5-1: new full-speed USB device number 4 using dummy_hcd [ 773.138436][ T5875] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 773.148843][ T5875] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 773.162899][ T5875] usb 5-1: New USB device found, idVendor=045e, idProduct=009d, bcdDevice= 0.00 [ 773.172339][ T5875] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 773.270018][ T5875] usb 5-1: config 0 descriptor?? [ 773.649090][T15609] loop2: detected capacity change from 0 to 256 [ 773.737502][ T5875] microsoft 0003:045E:009D.0001: item fetching failed at offset 2/3 [ 773.751595][ T5875] microsoft 0003:045E:009D.0001: parse failed [ 773.759120][ T5875] microsoft 0003:045E:009D.0001: probe with driver microsoft failed with error -22 [ 773.785112][T15609] exFAT-fs (loop2): error, The cluster chain has a loop [ 773.792626][T15609] exFAT-fs (loop2): Filesystem has been set read-only [ 773.799782][T15609] exFAT-fs (loop2): failed to count the number of clusters in root [ 773.808214][T15609] exFAT-fs (loop2): failed to recognize exfat type [ 773.943329][ T5875] usb 5-1: USB disconnect, device number 4 [ 774.220639][T15620] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3631'. [ 774.235911][T15619] tipc: Enabling of bearer rejected, failed to enable media [ 774.262896][T15619] syzkaller0: entered promiscuous mode [ 774.268967][T15619] syzkaller0: entered allmulticast mode [ 775.016800][T15631] tipc: Enabled bearer , priority 0 [ 775.040393][T15631] syzkaller0: entered promiscuous mode [ 775.046342][T15631] syzkaller0: entered allmulticast mode [ 775.114949][T15637] tipc: Resetting bearer [ 775.155170][T15630] tipc: Resetting bearer [ 775.208543][T15630] tipc: Disabling bearer [ 775.280890][T15636] loop0: detected capacity change from 0 to 1024 [ 775.357151][T15639] loop4: detected capacity change from 0 to 1024 [ 775.415923][T15639] hfsplus: inconsistency in B*Tree (9,1,255,1,0) [ 775.423212][T15639] hfsplus: xattr searching failed [ 775.720071][T15647] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3642'. [ 775.732484][ T6997] hfsplus: b-tree write err: -5, ino 4 [ 775.978293][ T5100] hfsplus: b-tree write err: -5, ino 3 [ 776.172266][T15655] tipc: Enabling of bearer rejected, failed to enable media [ 776.242124][T15655] syzkaller0: entered promiscuous mode [ 776.249904][T15655] syzkaller0: entered allmulticast mode [ 776.512841][T15660] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 777.262545][T15674] loop0: detected capacity change from 0 to 1024 [ 777.270749][ T5875] usb 5-1: new full-speed USB device number 5 using dummy_hcd [ 777.424420][T15674] hfsplus: inconsistency in B*Tree (9,1,255,1,0) [ 777.431297][T15674] hfsplus: xattr searching failed [ 777.455428][T15676] tipc: Enabled bearer , priority 0 [ 777.472905][T15674] hfsplus: inconsistency in B*Tree (9,1,255,1,0) [ 777.479816][T15674] hfsplus: xattr searching failed [ 777.486308][ T5875] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 777.497717][ T5875] usb 5-1: New USB device found, idVendor=05ac, idProduct=0269, bcdDevice= 0.00 [ 777.507329][ T5875] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 777.511655][T15679] syzkaller0: entered promiscuous mode [ 777.522296][T15679] syzkaller0: entered allmulticast mode [ 777.554604][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 777.554854][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 777.606891][T15676] tipc: Resetting bearer [ 777.628486][T15674] hfsplus: inconsistency in B*Tree (9,1,255,1,0) [ 777.635493][T15674] hfsplus: xattr search failed [ 777.653920][ T5875] usb 5-1: config 0 descriptor?? [ 777.661540][T15670] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 777.673566][T15675] tipc: Resetting bearer [ 777.745597][T15675] tipc: Disabling bearer [ 777.996808][ T5100] hfsplus: b-tree write err: -5, ino 4 [ 778.009976][ T5875] usbhid 5-1:0.0: can't add hid device: -71 [ 778.018569][ T5875] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 778.053634][ T5875] usb 5-1: USB disconnect, device number 5 [ 778.188173][T15686] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3656'. [ 778.575883][T15692] tipc: Enabling of bearer rejected, failed to enable media [ 778.613396][T15692] syzkaller0: entered promiscuous mode [ 778.619326][T15692] syzkaller0: entered allmulticast mode [ 779.017005][ T30] audit: type=1326 audit(1758835056.419:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15649 comm="syz.2.3644" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f58539 code=0x0 [ 779.417978][T13380] Bluetooth: hci4: Malformed Event: 0x02 [ 779.582117][T15706] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 780.024235][T15719] tipc: Enabled bearer , priority 0 [ 780.036769][T15719] syzkaller0: entered promiscuous mode [ 780.042432][T15719] syzkaller0: entered allmulticast mode [ 780.083230][T15719] tipc: Resetting bearer [ 780.127466][T15717] tipc: Resetting bearer [ 780.142472][T15717] tipc: Disabling bearer [ 780.617991][T15726] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3669'. [ 781.240326][T15740] tipc: Enabling of bearer rejected, failed to enable media [ 781.312651][T15750] syzkaller0: entered promiscuous mode [ 781.318584][T15750] syzkaller0: entered allmulticast mode [ 781.512274][ T5892] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 781.697332][ T5892] usb 6-1: Using ep0 maxpacket: 16 [ 781.711572][ T5892] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 781.762869][ T5892] usb 6-1: New USB device found, idVendor=050d, idProduct=2102, bcdDevice=70.d0 [ 781.772962][ T5892] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 781.782153][ T5892] usb 6-1: Product: syz [ 781.786682][ T5892] usb 6-1: Manufacturer: syz [ 781.791447][ T5892] usb 6-1: SerialNumber: syz [ 781.806796][T15751] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 781.866705][ T5892] usb 6-1: config 0 descriptor?? [ 782.003854][T15757] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 782.005831][T15751] usb 1-1: Using ep0 maxpacket: 16 [ 782.048207][T15751] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 782.059768][T15751] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 782.069870][T15751] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 782.081708][T15751] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 782.103119][T15751] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 782.112673][T15751] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 782.121081][T15751] usb 1-1: Product: syz [ 782.125424][T15751] usb 1-1: Manufacturer: syz [ 782.130406][T15751] usb 1-1: SerialNumber: syz [ 782.506823][T15751] usb 1-1: USB disconnect, device number 8 [ 783.189231][T15772] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3684'. [ 784.093415][T15782] tipc: Enabling of bearer rejected, failed to enable media [ 784.140363][T15785] syzkaller0: entered promiscuous mode [ 784.148132][T15785] syzkaller0: entered allmulticast mode [ 784.457605][T15751] usb 6-1: USB disconnect, device number 2 [ 785.087441][T15751] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 785.106878][T15802] loop2: detected capacity change from 0 to 1024 [ 785.190293][T15802] EXT4-fs: Ignoring removed orlov option [ 785.219565][T15802] EXT4-fs (loop2): Test dummy encryption mode enabled [ 785.246224][T15802] EXT4-fs (loop2): stripe (7) is not aligned with cluster size (16), stripe is disabled [ 785.289526][T15751] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 785.301005][T15751] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 785.311149][T15751] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 785.324443][T15751] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 785.333952][T15751] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 785.404503][T15809] loop4: detected capacity change from 0 to 8 [ 785.421475][T15751] usb 1-1: config 0 descriptor?? [ 785.476577][T15802] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 785.891618][T15751] plantronics 0003:047F:FFFF.0002: unbalanced delimiter at end of report description [ 785.921408][T15751] plantronics 0003:047F:FFFF.0002: parse failed [ 785.928558][T15751] plantronics 0003:047F:FFFF.0002: probe with driver plantronics failed with error -22 [ 786.110504][T12164] usb 1-1: USB disconnect, device number 9 [ 786.183546][T15802] fscrypt: AES-256-CBC-CTS using implementation "cts(cbc(ecb(aes-fixed-time)))" [ 786.246728][T15820] netlink: 96 bytes leftover after parsing attributes in process `syz.4.3702'. [ 786.450522][T14416] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 786.656608][T15827] tipc: Enabling of bearer rejected, failed to enable media [ 786.737498][T15832] syzkaller0: entered promiscuous mode [ 786.743181][T15832] syzkaller0: entered allmulticast mode [ 787.572683][T15849] loop0: detected capacity change from 0 to 1024 [ 787.855608][ T3534] hfsplus: b-tree write err: -5, ino 4 [ 787.916794][T15858] loop3: detected capacity change from 0 to 16 [ 787.967897][T15858] erofs (device loop3): mounted with root inode @ nid 36. [ 788.314412][T15866] loop4: detected capacity change from 0 to 1024 [ 788.349258][T15866] EXT4-fs: Ignoring removed oldalloc option [ 788.376434][T15751] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 788.413767][T15866] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 788.426867][T15866] ext4 filesystem being mounted at /169/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 788.558983][T15751] usb 1-1: Using ep0 maxpacket: 32 [ 788.592604][T15751] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 788.603261][T15751] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 8 [ 788.604677][T15866] EXT4-fs error (device loop4): ext4_free_blocks:6696: comm syz.4.3721: Freeing blocks not in datazone - block = 0, count = 16 [ 788.645031][T15869] tipc: Started in network mode [ 788.650632][T15869] tipc: Node identity 2a664301841c, cluster identity 4711 [ 788.659096][T15869] tipc: Enabled bearer , priority 0 [ 788.709309][T15869] syzkaller0: entered promiscuous mode [ 788.714987][T15869] syzkaller0: entered allmulticast mode [ 788.725099][T15751] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 788.735264][T15751] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 788.743683][T15751] usb 1-1: Product: syz [ 788.748226][T15751] usb 1-1: Manufacturer: syz [ 788.752999][T15751] usb 1-1: SerialNumber: syz [ 788.775279][T15863] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 788.813794][T15869] tipc: Resetting bearer [ 788.840101][T13379] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 788.858034][T15863] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 788.889825][T15867] tipc: Resetting bearer [ 788.928983][T15867] tipc: Disabling bearer [ 789.160084][T15751] cdc_ether 1-1:1.0: probe with driver cdc_ether failed with error -71 [ 789.210009][T15751] usb 1-1: USB disconnect, device number 10 [ 789.686684][T15889] loop4: detected capacity change from 0 to 16 [ 789.718245][T15751] usb 1-1: new full-speed USB device number 11 using dummy_hcd [ 789.778466][T15889] erofs (device loop4): mounted with root inode @ nid 36. [ 789.816643][T15889] erofs (device loop4): corrupted dir block 0 @ nid 36 [ 789.847329][ T5825] Bluetooth: hci2: command 0x0406 tx timeout [ 789.888015][T15889] erofs (device loop4): corrupted dir block 0 @ nid 36 [ 789.942529][T15751] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 789.952212][T15751] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 789.960713][T15751] usb 1-1: Product: syz [ 789.965045][T15751] usb 1-1: Manufacturer: syz [ 789.969923][T15751] usb 1-1: SerialNumber: syz [ 791.081730][T15751] cdc_ether 1-1:1.0: probe with driver cdc_ether failed with error -71 [ 791.156802][T15751] usb 1-1: USB disconnect, device number 11 [ 791.863195][T15910] tipc: Enabled bearer , priority 0 [ 791.941539][T15912] syzkaller0: entered promiscuous mode [ 791.947545][T15912] syzkaller0: entered allmulticast mode [ 792.439462][T15909] tipc: Resetting bearer [ 792.607979][T15909] tipc: Disabling bearer [ 794.184161][T15926] syzkaller0: entered promiscuous mode [ 794.189899][T15926] syzkaller0: entered allmulticast mode [ 794.421447][T15931] loop0: detected capacity change from 0 to 1024 [ 794.942365][ T6997] hfsplus: b-tree write err: -5, ino 4 [ 795.930939][T15951] tipc: Enabled bearer , priority 0 [ 795.985946][T15953] syzkaller0: entered promiscuous mode [ 795.992472][T15953] syzkaller0: entered allmulticast mode [ 796.139982][T15948] tipc: Resetting bearer [ 796.204888][T15948] tipc: Disabling bearer [ 796.815823][T15964] loop3: detected capacity change from 0 to 1024 [ 796.880804][T15964] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 796.994992][T15964] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 797.662114][T13756] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 798.377009][T15751] usb 4-1: new full-speed USB device number 6 using dummy_hcd [ 798.578032][T15751] usb 4-1: New USB device found, idVendor=05ac, idProduct=029f, bcdDevice= 0.00 [ 798.588181][T15751] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 798.624164][T15751] usb 4-1: config 0 descriptor?? [ 799.135064][T15751] apple 0003:05AC:029F.0003: ignoring exceeding usage max [ 799.149497][T15751] apple 0003:05AC:029F.0003: unbalanced delimiter at end of report description [ 799.203986][T16001] tipc: Enabled bearer , priority 0 [ 799.245578][T15751] apple 0003:05AC:029F.0003: parse failed [ 799.253900][T15751] apple 0003:05AC:029F.0003: probe with driver apple failed with error -22 [ 799.284165][T16001] syzkaller0: entered promiscuous mode [ 799.291041][T16001] syzkaller0: entered allmulticast mode [ 799.339195][T15751] usb 4-1: USB disconnect, device number 6 [ 799.444289][T16000] tipc: Resetting bearer [ 799.478805][T16000] tipc: Disabling bearer [ 799.637138][T16007] loop5: detected capacity change from 0 to 256 [ 800.304922][T16016] loop5: detected capacity change from 0 to 128 [ 800.505182][T16016] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 800.631511][T16016] ext4 filesystem being mounted at /75/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 801.090307][T16016] fscrypt (loop5): Missing crypto API support for AES-256-XTS (API name: "xts(aes)") [ 801.129123][T16030] fscrypt: loop5: 1 inode(s) still busy after removing key with identifier 69b2f6edeee720cce0577937eb8a6751, including ino 12 [ 801.479087][T14786] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 801.896823][ T30] audit: type=1326 audit(1758835079.299:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16041 comm="syz.0.3780" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f63539 code=0x0 [ 801.985829][T16046] input: syz0 as /devices/virtual/input/input8 [ 803.164995][ T3774] bridge_slave_1: left allmulticast mode [ 803.172111][ T3774] bridge_slave_1: left promiscuous mode [ 803.178411][ T3774] bridge0: port 2(bridge_slave_1) entered disabled state [ 803.280599][ T3774] bridge_slave_0: left allmulticast mode [ 803.287396][ T3774] bridge_slave_0: left promiscuous mode [ 803.293698][ T3774] bridge0: port 1(bridge_slave_0) entered disabled state [ 804.324142][ T3774] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 804.370929][ T3774] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 804.422306][ T3774] bond0 (unregistering): Released all slaves [ 804.619928][ T3774] tipc: Left network mode [ 805.414622][ T3774] hsr_slave_0: left promiscuous mode [ 805.516428][ T3774] hsr_slave_1: left promiscuous mode [ 805.523406][ T3774] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 805.531378][ T3774] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 805.686705][T16069] loop0: detected capacity change from 0 to 512 [ 805.822130][T16069] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 805.835333][T16069] ext4 filesystem being mounted at /143/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 805.921800][ T3774] veth1_vlan: left promiscuous mode [ 805.927567][ T3774] veth0_vlan: left promiscuous mode [ 806.448092][T14079] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 806.458815][T15751] usb 4-1: new full-speed USB device number 7 using dummy_hcd [ 806.639851][T15751] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 806.649652][T15751] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 806.698128][T15751] usb 4-1: config 0 descriptor?? [ 806.731628][T15751] cp210x 4-1:0.0: cp210x converter detected [ 806.983539][ T5825] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 806.994465][ T5825] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 807.007128][ T5825] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 807.023976][ T5825] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 807.041211][ T5825] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 807.180027][T15751] usb 4-1: cp210x converter now attached to ttyUSB0 [ 807.305647][ T3774] team0 (unregistering): Port device team_slave_1 removed [ 807.422945][T15751] usb 4-1: USB disconnect, device number 7 [ 807.464657][T15751] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 807.468241][ T3774] team0 (unregistering): Port device team_slave_0 removed [ 807.498101][T15751] cp210x 4-1:0.0: device disconnected [ 807.870490][T16088] loop4: detected capacity change from 0 to 256 [ 807.944608][T16082] lo speed is unknown, defaulting to 1000 [ 808.311603][T16088] exFAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 808.322654][T16088] exFAT-fs (loop4): Medium has reported failures. Some data may be lost. [ 808.542460][ T3774] IPVS: stop unused estimator thread 0... [ 808.617522][T16088] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 809.126340][T13380] Bluetooth: hci5: command tx timeout [ 809.465196][T16106] loop5: detected capacity change from 0 to 164 [ 809.967728][T16082] chnl_net:caif_netlink_parms(): no params data found [ 810.407188][T13380] Bluetooth: hci0: command 0x0406 tx timeout [ 811.206406][ T5825] Bluetooth: hci5: command tx timeout [ 811.541647][T16082] bridge0: port 1(bridge_slave_0) entered blocking state [ 811.551741][T16082] bridge0: port 1(bridge_slave_0) entered disabled state [ 811.559898][T16082] bridge_slave_0: entered allmulticast mode [ 811.564839][T16122] loop5: detected capacity change from 0 to 4096 [ 811.569447][T16082] bridge_slave_0: entered promiscuous mode [ 811.597513][T16082] bridge0: port 2(bridge_slave_1) entered blocking state [ 811.605061][T16082] bridge0: port 2(bridge_slave_1) entered disabled state [ 811.613583][T16082] bridge_slave_1: entered allmulticast mode [ 811.622095][T16082] bridge_slave_1: entered promiscuous mode [ 811.710026][T16122] EXT4-fs (loop5): Test dummy encryption mode enabled [ 811.847082][T16122] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003] [ 811.883122][T16122] System zones: 0-5 [ 811.963867][T16082] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 812.023565][T16122] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 812.118614][T16132] capability: warning: `syz.3.3807' uses 32-bit capabilities (legacy support in use) [ 812.132950][T16082] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 812.514145][T16082] team0: Port device team_slave_0 added [ 812.594770][T16082] team0: Port device team_slave_1 added [ 812.669282][T14786] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 812.991739][T16082] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 812.999096][T16082] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 813.025394][T16082] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 813.222921][T16082] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 813.230757][T16082] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 813.257223][T16082] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 813.294501][ T5825] Bluetooth: hci5: command tx timeout [ 814.029327][T16082] hsr_slave_0: entered promiscuous mode [ 814.039332][T16082] hsr_slave_1: entered promiscuous mode [ 814.048539][T16082] debugfs: 'hsr0' already exists in 'hsr' [ 814.054381][T16082] Cannot create hsr debugfs directory [ 814.305692][T16163] loop0: detected capacity change from 0 to 1024 [ 814.487777][T16163] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 814.950852][T14079] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 815.249446][ T30] audit: type=1326 audit(1758835092.639:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16174 comm="syz.3.3823" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70fe539 code=0x7ffc0000 [ 815.271945][ T30] audit: type=1326 audit(1758835092.659:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16174 comm="syz.3.3823" exe="/root/syz-executor" sig=0 arch=40000003 syscall=356 compat=1 ip=0xf70fe539 code=0x7ffc0000 [ 815.294498][ T30] audit: type=1326 audit(1758835092.659:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16174 comm="syz.3.3823" exe="/root/syz-executor" sig=0 arch=40000003 syscall=192 compat=1 ip=0xf70fe539 code=0x7ffc0000 [ 815.316987][ T30] audit: type=1326 audit(1758835092.669:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16174 comm="syz.3.3823" exe="/root/syz-executor" sig=0 arch=40000003 syscall=4 compat=1 ip=0xf70fe539 code=0x7ffc0000 [ 815.362629][T16082] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 815.376500][ T5825] Bluetooth: hci5: command tx timeout [ 815.397668][T16082] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 815.426957][T16082] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 815.450878][T16082] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 815.510153][T16177] loop4: detected capacity change from 0 to 256 [ 815.540508][T16175] loop3: detected capacity change from 0 to 2048 [ 815.540605][T16177] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 815.671242][T16175] UDF-fs: error (device loop3): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 815.698019][T16180] loop0: detected capacity change from 0 to 512 [ 815.747615][T16177] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 815.761199][T16180] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 815.775372][T16180] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 815.797868][T16175] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 815.843135][ T30] audit: type=1326 audit(1758835092.939:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16174 comm="syz.3.3823" exe="/root/syz-executor" sig=0 arch=40000003 syscall=91 compat=1 ip=0xf70fe539 code=0x7ffc0000 [ 815.865609][ T30] audit: type=1326 audit(1758835092.949:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16174 comm="syz.3.3823" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf70fe539 code=0x7ffc0000 [ 815.888147][ T30] audit: type=1326 audit(1758835092.949:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16174 comm="syz.3.3823" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf70fe539 code=0x7ffc0000 [ 815.910434][ T30] audit: type=1326 audit(1758835093.029:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16174 comm="syz.3.3823" exe="/root/syz-executor" sig=0 arch=40000003 syscall=6 compat=1 ip=0xf70fe539 code=0x7ffc0000 [ 815.932641][ T30] audit: type=1326 audit(1758835093.029:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16174 comm="syz.3.3823" exe="/root/syz-executor" sig=0 arch=40000003 syscall=6 compat=1 ip=0xf70fe539 code=0x7ffc0000 [ 815.956000][ T30] audit: type=1326 audit(1758835093.029:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16174 comm="syz.3.3823" exe="/root/syz-executor" sig=0 arch=40000003 syscall=296 compat=1 ip=0xf70fe539 code=0x7ffc0000 [ 816.083596][T16180] EXT4-fs (loop0): 1 orphan inode deleted [ 816.090277][T16180] EXT4-fs (loop0): 1 truncate cleaned up [ 816.097926][T16180] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 816.112081][T15751] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 816.416547][T15751] usb 6-1: Using ep0 maxpacket: 32 [ 816.438041][T15751] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 816.449643][T15751] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 816.459827][T15751] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 816.469124][T15751] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 816.514666][T15751] usb 6-1: config 0 descriptor?? [ 816.528946][T15751] hub 6-1:0.0: USB hub found [ 816.636659][T14079] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 816.777373][T15751] hub 6-1:0.0: 1 port detected [ 816.861584][ T3697] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 816.967560][T15751] hub 6-1:0.0: hub_hub_status failed (err = -71) [ 816.974063][T15751] hub 6-1:0.0: config failed, can't get hub status (err -71) [ 817.113515][ T3697] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 817.131359][T15751] usbhid 6-1:0.0: can't add hid device: -71 [ 817.138015][T15751] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 817.208050][T15751] usb 6-1: USB disconnect, device number 3 [ 817.263495][T16082] 8021q: adding VLAN 0 to HW filter on device bond0 [ 817.308561][ T3697] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 817.389112][ T3697] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 817.450732][T16082] 8021q: adding VLAN 0 to HW filter on device team0 [ 817.594939][ T6997] bridge0: port 1(bridge_slave_0) entered blocking state [ 817.602500][ T6997] bridge0: port 1(bridge_slave_0) entered forwarding state [ 817.640507][ T3697] bridge_slave_1: left allmulticast mode [ 817.646540][ T3697] bridge_slave_1: left promiscuous mode [ 817.652824][ T3697] bridge0: port 2(bridge_slave_1) entered disabled state [ 817.734712][ T3697] bridge_slave_0: left allmulticast mode [ 817.743233][ T3697] bridge_slave_0: left promiscuous mode [ 817.749745][ T3697] bridge0: port 1(bridge_slave_0) entered disabled state [ 818.801824][T16190] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 818.853996][ T3697] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 818.955619][ T3697] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 819.038565][ T3697] bond0 (unregistering): Released all slaves [ 819.157398][ T6997] bridge0: port 2(bridge_slave_1) entered blocking state [ 819.164888][ T6997] bridge0: port 2(bridge_slave_1) entered forwarding state [ 819.258260][T16218] loop3: detected capacity change from 0 to 1024 [ 819.274785][T16218] EXT4-fs: Ignoring removed orlov option [ 819.349887][T16218] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 819.363120][ T3697] tipc: Left network mode [ 819.996421][ T3697] hsr_slave_0: left promiscuous mode [ 820.036284][ T3697] hsr_slave_1: left promiscuous mode [ 820.044164][ T3697] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 820.052025][ T3697] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 820.135349][ T3697] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 820.143330][ T3697] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 820.160510][T13756] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 820.194077][T16222] loop4: detected capacity change from 0 to 4096 [ 820.207346][ T3697] veth1_macvtap: left promiscuous mode [ 820.213154][ T3697] veth0_macvtap: left promiscuous mode [ 820.219539][ T3697] veth1_vlan: left promiscuous mode [ 820.225058][ T3697] veth0_vlan: left promiscuous mode [ 820.271799][T16222] EXT4-fs (loop4): Test dummy encryption mode enabled [ 820.332991][T16222] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003] [ 820.360947][T16222] System zones: 0-5 [ 820.378328][ T5892] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 820.396396][T16222] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 820.563641][ T5892] usb 6-1: config 0 has an invalid interface number: 64 but max is 0 [ 820.572793][ T5892] usb 6-1: config 0 has an invalid descriptor of length 48, skipping remainder of the config [ 820.584237][ T5892] usb 6-1: config 0 has no interface number 0 [ 820.732437][ T5892] usb 6-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48 [ 820.742314][ T5892] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 820.750884][ T5892] usb 6-1: Product: syz [ 820.755225][ T5892] usb 6-1: Manufacturer: syz [ 820.760142][ T5892] usb 6-1: SerialNumber: syz [ 820.891034][ T5892] usb 6-1: config 0 descriptor?? [ 821.476777][ T5892] usb 6-1: Found UVC 0.00 device syz (046d:0823) [ 821.483517][ T5892] usb 6-1: No valid video chain found. [ 821.548831][ T3697] team0 (unregistering): Port device team_slave_1 removed [ 821.577061][ T3697] team0 (unregistering): Port device team_slave_0 removed [ 821.862421][T12164] usb 6-1: USB disconnect, device number 4 [ 822.096365][T16229] tipc: Enabling of bearer rejected, failed to enable media [ 822.792727][T13379] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 823.128879][T16258] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 823.537717][T16082] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 824.205768][T16271] syzkaller1: entered promiscuous mode [ 824.212147][T16271] syzkaller1: entered allmulticast mode [ 824.248933][T16275] capability: warning: `syz.0.3848' uses deprecated v2 capabilities in a way that may be insecure [ 824.858721][T16281] syzkaller0: entered promiscuous mode [ 824.864497][T16281] syzkaller0: entered allmulticast mode [ 825.745099][T16296] loop0: detected capacity change from 0 to 256 [ 825.877512][T16296] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 825.962567][T16296] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 826.113709][ T30] kauditd_printk_skb: 28 callbacks suppressed [ 826.113781][ T30] audit: type=1800 audit(1758835103.519:43): pid=16296 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.3854" name="file0" dev="loop0" ino=1048638 res=0 errno=0 [ 826.147735][T16082] veth0_vlan: entered promiscuous mode [ 826.422939][T16082] veth1_vlan: entered promiscuous mode [ 827.012404][T16082] veth0_macvtap: entered promiscuous mode [ 827.090285][T16082] veth1_macvtap: entered promiscuous mode [ 827.197798][T16082] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 827.266549][T16082] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 827.367788][ T3697] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 827.485895][ T3697] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 827.502484][ T3697] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 827.540973][ T3697] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 828.010130][T16309] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 828.801440][T16319] syzkaller1: entered promiscuous mode [ 828.808819][T16319] syzkaller1: entered allmulticast mode [ 829.089334][T16325] syzkaller0: entered promiscuous mode [ 829.095202][T16325] syzkaller0: entered allmulticast mode [ 829.774291][T16336] loop5: detected capacity change from 0 to 8 [ 830.349523][T16343] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3867'. [ 830.359810][T16343] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3867'. [ 830.440074][T16344] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3867'. [ 830.449612][T16344] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3867'. [ 830.583206][T16346] loop0: detected capacity change from 0 to 512 [ 830.616766][T16346] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 830.815050][T16346] FAT-fs (loop0): error, invalid access to FAT (entry 0x0fffff00) [ 830.966672][T13380] Bluetooth: hci5: command 0x0405 tx timeout [ 831.482170][T16363] loop2: detected capacity change from 0 to 7 [ 831.522516][T16363] Dev loop2: unable to read RDB block 7 [ 831.529214][T16363] loop2: unable to read partition table [ 831.551970][T16363] loop2: partition table beyond EOD, truncated [ 831.559229][T16363] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 831.588645][T16361] syzkaller1: entered promiscuous mode [ 831.594587][T16361] syzkaller1: entered allmulticast mode [ 831.890970][ T3534] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 831.899140][ T3534] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 832.150993][ T6997] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 832.159451][ T6997] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 832.373738][T16370] loop3: detected capacity change from 0 to 1024 [ 832.558496][T16370] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 832.572684][T16370] ext4 filesystem being mounted at /199/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 832.633733][T16376] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3878'. [ 832.659446][T16370] EXT4-fs error (device loop3): ext4_map_blocks:814: inode #15: block 3: comm syz.3.3876: lblock 3 mapped to illegal pblock 3 (length 1) [ 832.736595][T16370] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 1 with error 117 [ 832.749571][T16370] EXT4-fs (loop3): This should not happen!! Data will be lost [ 832.749571][T16370] [ 832.773364][T16378] loop6: detected capacity change from 0 to 1024 [ 832.804485][T16370] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #15: block 3: comm syz.3.3876: lblock 3 mapped to illegal pblock 3 (length 1) [ 832.867685][T16380] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #15: block 3: comm syz.3.3876: lblock 3 mapped to illegal pblock 3 (length 1) [ 832.934754][T16370] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 833.017926][T16378] hfsplus: filesystem was not cleanly unmounted, running fsck.hfsplus is recommended. leaving read-only. [ 833.036969][T16370] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 63 with max blocks 1 with error 28 [ 833.050313][T16370] EXT4-fs (loop3): This should not happen!! Data will be lost [ 833.050313][T16370] [ 833.060538][T16370] EXT4-fs (loop3): Total free blocks count 0 [ 833.066821][T16370] EXT4-fs (loop3): Free/Dirty block details [ 833.072886][T16370] EXT4-fs (loop3): free_blocks=4293918720 [ 833.079127][T16370] EXT4-fs (loop3): dirty_blocks=16 [ 833.084420][T16370] EXT4-fs (loop3): Block reservation details [ 833.150009][T16383] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3879'. [ 833.159629][T16383] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3879'. [ 833.265782][T16382] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3879'. [ 833.275978][T16382] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3879'. [ 833.585918][T16388] loop6: detected capacity change from 0 to 256 [ 833.636544][T16388] exFAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 833.647619][T16388] exFAT-fs (loop6): Medium has reported failures. Some data may be lost. [ 833.690870][T16389] loop3: detected capacity change from 0 to 512 [ 833.799203][T16389] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 833.814195][T16389] ext4 filesystem being mounted at /200/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 833.836795][T16388] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 834.423807][T16398] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 834.443363][T16401] loop0: detected capacity change from 0 to 256 [ 834.485890][T16401] vfat: Bad value for 'check' [ 835.140651][T16409] Invalid ELF header magic: != ELF [ 835.284437][T16411] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3889'. [ 835.646591][ T5875] usb 7-1: new low-speed USB device number 2 using dummy_hcd [ 835.836641][ T5875] usb 7-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 835.846328][ T5875] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 835.916933][ T5875] usb 7-1: config 0 descriptor?? [ 836.042078][T16421] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3894'. [ 836.051678][T16421] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3894'. [ 836.089182][T16421] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3894'. [ 836.098920][T16421] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3894'. [ 836.383010][T16425] EXT4-fs error (device loop3): ext4_xattr_block_get:593: inode #12: comm syz.3.3881: corrupted xattr block 6: invalid header [ 837.786626][T16433] netlink: 'syz.0.3898': attribute type 9 has an invalid length. [ 838.026556][ T5875] asix 7-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 838.037422][ T5875] asix 7-1:0.0: probe with driver asix failed with error -71 [ 838.117598][ T5875] usb 7-1: USB disconnect, device number 2 [ 838.310487][T16436] loop0: detected capacity change from 0 to 256 [ 838.440963][T16436] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x76936814, utbl_chksum : 0xe619d30d) [ 838.602074][T16436] exFAT-fs (loop0): start_clu is invalid cluster(0xffffffff) [ 839.006911][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 839.013569][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 839.146693][T16438] syzkaller1: entered promiscuous mode [ 839.152369][T16438] syzkaller1: entered allmulticast mode [ 839.211334][T16439] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 839.631661][T16442] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3902'. [ 840.670440][T16450] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3907'. [ 840.679898][T16450] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3907'. [ 840.757007][T16450] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3907'. [ 840.766490][T16450] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3907'. [ 841.350089][T16463] loop4: detected capacity change from 0 to 128 [ 841.399866][T16463] vfat: Bad value for 'gid' [ 841.404589][T16463] vfat: Bad value for 'gid' [ 841.773943][T16466] loop6: detected capacity change from 0 to 1024 [ 841.937460][T16466] hfsplus: keylen 65060 too large [ 841.942684][T16466] hfsplus: xattr searching failed [ 841.979812][T16467] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3912'. [ 842.036442][T16466] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3912'. [ 842.472124][T16471] loop4: detected capacity change from 0 to 128 [ 842.566199][T16471] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 842.586579][T16471] ext4 filesystem being mounted at /212/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 842.997174][T13379] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 843.334442][T13756] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 844.072878][T16490] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3919'. [ 844.082421][T16490] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3919'. [ 844.111681][T16490] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3919'. [ 844.121211][T16490] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3919'. [ 845.171675][T16503] loop4: detected capacity change from 0 to 16 [ 845.225916][T16503] erofs (device loop4): mounted with root inode @ nid 36. [ 847.458553][T16518] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 847.657648][T16521] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3932'. [ 847.667078][T16521] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3932'. [ 847.725606][T16521] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3932'. [ 847.735560][T16521] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3932'. [ 848.912344][T16533] syzkaller1: entered promiscuous mode [ 848.918682][T16533] syzkaller1: entered allmulticast mode [ 849.510245][T16539] loop3: detected capacity change from 0 to 128 [ 849.563165][T16539] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 849.637143][T16539] ext4 filesystem being mounted at /209/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 850.170109][T13756] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 850.581411][T16547] syzkaller0: entered promiscuous mode [ 850.587215][T16547] syzkaller0: entered allmulticast mode [ 851.436989][T16556] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3943'. [ 851.446598][T16556] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3943'. [ 851.484950][T16557] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3943'. [ 851.495547][T16557] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3943'. [ 851.658193][T16558] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 852.618969][T16569] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3947'. [ 852.661259][T16569] ip6gretap0: entered promiscuous mode [ 852.667406][T16569] macvtap2: entered promiscuous mode [ 852.673746][T16569] macvtap2: entered allmulticast mode [ 852.679585][T16569] ip6gretap0: entered allmulticast mode [ 852.728222][T16572] macvtap2: left promiscuous mode [ 852.734143][T16572] macvtap2: left allmulticast mode [ 852.739804][T16572] ip6gretap0: left allmulticast mode [ 852.884518][T16574] loop5: detected capacity change from 0 to 512 [ 852.994580][T16574] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 853.011069][T16574] ext4 filesystem being mounted at /104/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 853.167485][ T30] audit: type=1800 audit(1758835130.569:44): pid=16574 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.3949" name="file1" dev="loop5" ino=15 res=0 errno=0 [ 853.252137][ T30] audit: type=1800 audit(1758835130.659:45): pid=16574 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.3949" name="file2" dev="loop5" ino=16 res=0 errno=0 [ 853.301946][T16579] loop3: detected capacity change from 0 to 1024 [ 853.454246][T16579] ===================================================== [ 853.463194][T16579] BUG: KMSAN: uninit-value in hfsplus_attr_bin_cmp_key+0xd9/0x190 [ 853.471500][T16579] hfsplus_attr_bin_cmp_key+0xd9/0x190 [ 853.477342][T16579] hfs_find_rec_by_key+0xae/0x240 [ 853.482520][T16579] __hfsplus_brec_find+0x271/0x840 [ 853.488041][T16579] hfsplus_brec_find+0x4df/0x9f0 [ 853.493120][T16579] hfsplus_find_attr+0x1eb/0x260 [ 853.498442][T16579] __hfsplus_getxattr+0x401/0x1020 [ 853.503720][T16579] hfsplus_getxattr+0x240/0x3f0 [ 853.508958][T16579] hfsplus_security_getxattr+0x53/0x70 [ 853.514591][T16579] vfs_getxattr_alloc+0x72e/0xc00 [ 853.520486][T16579] ima_read_xattr+0x51/0xe0 [ 853.525246][T16579] process_measurement+0x26fd/0x40e0 [ 853.530999][T16579] ima_file_check+0x8e/0xd0 [ 853.535674][T16579] security_file_post_open+0xbf/0x530 [ 853.541442][T16579] path_openat+0x5ac3/0x6760 [ 853.546281][T16579] do_filp_open+0x280/0x660 [ 853.550929][T16579] do_sys_openat2+0x1bb/0x2f0 [ 853.555746][T16579] __ia32_compat_sys_openat+0x238/0x300 [ 853.561712][T16579] ia32_sys_call+0x3210/0x4310 [ 853.567816][T16579] __do_fast_syscall_32+0xb0/0x150 [ 853.573082][T16579] do_fast_syscall_32+0x38/0x80 [ 853.578453][T16579] do_SYSENTER_32+0x1f/0x30 [ 853.583102][T16579] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 853.589807][T16579] [ 853.592201][T16579] Uninit was created at: [ 853.596836][T16579] __alloc_frozen_pages_noprof+0x689/0xf00 [ 853.602809][T16579] alloc_pages_mpol+0x328/0x860 [ 853.608028][T16579] alloc_frozen_pages_noprof+0xf7/0x200 [ 853.613761][T16579] allocate_slab+0x24d/0x1220 [ 853.618796][T16579] ___slab_alloc+0xff3/0x3470 [ 853.623604][T16579] __kmalloc_node_noprof+0xaaf/0x1300 [ 853.629265][T16579] qdisc_alloc+0xba/0xc80 [ 853.633748][T16579] qdisc_create_dflt+0x8f/0x640 [ 853.638883][T16579] mq_init+0x39e/0x940 [ 853.643118][T16579] qdisc_create_dflt+0x21c/0x640 [ 853.648913][T16579] dev_activate+0x1d7/0x1c10 [ 853.653686][T16579] __dev_open+0xbc1/0xc60 [ 853.658367][T16579] __dev_change_flags+0x3a8/0x9f0 [ 853.663562][T16579] netif_change_flags+0x8d/0x1e0 [ 853.669496][T16579] dev_change_flags+0x18c/0x320 [ 853.674507][T16579] dev_ifsioc+0x602/0x1930 [ 853.679482][T16579] dev_ioctl+0xa12/0x1100 [ 853.684168][T16579] sock_do_ioctl+0x36a/0x480 [ 853.689868][T16579] compat_sock_ioctl+0xcb8/0xff0 [ 853.694955][T16579] __ia32_compat_sys_ioctl+0x7f9/0x1270 [ 853.701498][T16579] ia32_sys_call+0x2d5f/0x4310 [ 853.706588][T16579] __do_fast_syscall_32+0xb0/0x150 [ 853.711849][T16579] do_fast_syscall_32+0x38/0x80 [ 853.717030][T16579] do_SYSENTER_32+0x1f/0x30 [ 853.721677][T16579] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 853.728275][T16579] [ 853.730702][T16579] CPU: 0 UID: 0 PID: 16579 Comm: syz.3.3951 Not tainted syzkaller #0 PREEMPT(none) [ 853.740494][T16579] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 853.750916][T16579] ===================================================== [ 853.758060][T16579] Disabling lock debugging due to kernel taint [ 853.764314][T16579] Kernel panic - not syncing: kmsan.panic set ... [ 853.770862][T16579] CPU: 0 UID: 0 PID: 16579 Comm: syz.3.3951 Tainted: G B syzkaller #0 PREEMPT(none) [ 853.781988][T16579] Tainted: [B]=BAD_PAGE [ 853.786226][T16579] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 853.796398][T16579] Call Trace: [ 853.799784][T16579] [ 853.802806][T16579] __dump_stack+0x26/0x30 [ 853.807505][T16579] dump_stack_lvl+0x53/0x270 [ 853.812281][T16579] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 853.818305][T16579] dump_stack+0x1e/0x25 [ 853.822656][T16579] vpanic+0x361/0xc50 [ 853.826838][T16579] panic+0x15d/0x160 [ 853.830956][T16579] kmsan_report+0x31c/0x320 [ 853.835631][T16579] ? kmsan_get_metadata+0xfb/0x160 [ 853.840913][T16579] ? __msan_warning+0x1b/0x30 [ 853.845742][T16579] ? hfsplus_attr_bin_cmp_key+0xd9/0x190 [ 853.851523][T16579] ? hfs_find_rec_by_key+0xae/0x240 [ 853.856868][T16579] ? __hfsplus_brec_find+0x271/0x840 [ 853.862386][T16579] ? hfsplus_brec_find+0x4df/0x9f0 [ 853.867629][T16579] ? hfsplus_find_attr+0x1eb/0x260 [ 853.872901][T16579] ? __hfsplus_getxattr+0x401/0x1020 [ 853.878346][T16579] ? hfsplus_getxattr+0x240/0x3f0 [ 853.883532][T16579] ? hfsplus_security_getxattr+0x53/0x70 [ 853.889337][T16579] ? vfs_getxattr_alloc+0x72e/0xc00 [ 853.894712][T16579] ? ima_read_xattr+0x51/0xe0 [ 853.899565][T16579] ? process_measurement+0x26fd/0x40e0 [ 853.905316][T16579] ? ima_file_check+0x8e/0xd0 [ 853.910181][T16579] ? security_file_post_open+0xbf/0x530 [ 853.915970][T16579] ? path_openat+0x5ac3/0x6760 [ 853.920898][T16579] ? do_filp_open+0x280/0x660 [ 853.925733][T16579] ? do_sys_openat2+0x1bb/0x2f0 [ 853.930734][T16579] ? __ia32_compat_sys_openat+0x238/0x300 [ 853.936618][T16579] ? ia32_sys_call+0x3210/0x4310 [ 853.941732][T16579] ? __do_fast_syscall_32+0xb0/0x150 [ 853.947171][T16579] ? do_fast_syscall_32+0x38/0x80 [ 853.952432][T16579] ? do_SYSENTER_32+0x1f/0x30 [ 853.957258][T16579] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 853.963945][T16579] ? kmsan_get_metadata+0xfb/0x160 [ 853.969241][T16579] ? kmsan_get_metadata+0xfb/0x160 [ 853.974544][T16579] ? kmsan_internal_memmove_metadata+0x91/0x230 [ 853.981085][T16579] ? kmsan_get_metadata+0xfb/0x160 [ 853.986384][T16579] ? kmsan_internal_memmove_metadata+0x91/0x230 [ 853.992818][T16579] ? kmsan_get_metadata+0xfb/0x160 [ 853.998127][T16579] __msan_warning+0x1b/0x30 [ 854.002797][T16579] hfsplus_attr_bin_cmp_key+0xd9/0x190 [ 854.008430][T16579] hfs_find_rec_by_key+0xae/0x240 [ 854.013577][T16579] ? __pfx_hfsplus_attr_bin_cmp_key+0x10/0x10 [ 854.019793][T16579] __hfsplus_brec_find+0x271/0x840 [ 854.025038][T16579] ? __pfx_hfs_find_rec_by_key+0x10/0x10 [ 854.030868][T16579] hfsplus_brec_find+0x4df/0x9f0 [ 854.035931][T16579] ? __pfx_hfs_find_rec_by_key+0x10/0x10 [ 854.041786][T16579] hfsplus_find_attr+0x1eb/0x260 [ 854.046887][T16579] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 854.052887][T16579] __hfsplus_getxattr+0x401/0x1020 [ 854.058243][T16579] ? kmsan_internal_memmove_metadata+0x91/0x230 [ 854.064636][T16579] ? __msan_memcpy+0x108/0x1c0 [ 854.069535][T16579] hfsplus_getxattr+0x240/0x3f0 [ 854.074553][T16579] hfsplus_security_getxattr+0x53/0x70 [ 854.080159][T16579] ? __pfx_hfsplus_security_getxattr+0x10/0x10 [ 854.086461][T16579] vfs_getxattr_alloc+0x72e/0xc00 [ 854.091696][T16579] ima_read_xattr+0x51/0xe0 [ 854.096350][T16579] process_measurement+0x26fd/0x40e0 [ 854.102277][T16579] ? kmsan_get_metadata+0xfb/0x160 [ 854.107543][T16579] ? security_file_post_open+0xbf/0x530 [ 854.113225][T16579] ? __msan_warning+0x1b/0x30 [ 854.118021][T16579] ? filter_irq_stacks+0x13f/0x190 [ 854.123266][T16579] ? stack_depot_save_flags+0x35/0x7b0 [ 854.128855][T16579] ? kmsan_get_metadata+0xfb/0x160 [ 854.134110][T16579] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 854.140071][T16579] ? kmsan_get_metadata+0xfb/0x160 [ 854.145325][T16579] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 854.151374][T16579] ima_file_check+0x8e/0xd0 [ 854.156045][T16579] security_file_post_open+0xbf/0x530 [ 854.161580][T16579] path_openat+0x5ac3/0x6760 [ 854.166319][T16579] ? kmsan_get_metadata+0xfb/0x160 [ 854.171601][T16579] ? do_sys_openat2+0x1bb/0x2f0 [ 854.176594][T16579] ? filter_irq_stacks+0x13f/0x190 [ 854.181857][T16579] ? kmsan_get_metadata+0xfb/0x160 [ 854.187145][T16579] do_filp_open+0x280/0x660 [ 854.191849][T16579] do_sys_openat2+0x1bb/0x2f0 [ 854.196675][T16579] __ia32_compat_sys_openat+0x238/0x300 [ 854.202478][T16579] ia32_sys_call+0x3210/0x4310 [ 854.207377][T16579] __do_fast_syscall_32+0xb0/0x150 [ 854.212645][T16579] ? irqentry_exit_to_user_mode+0x82/0xa0 [ 854.218541][T16579] do_fast_syscall_32+0x38/0x80 [ 854.223519][T16579] do_SYSENTER_32+0x1f/0x30 [ 854.228149][T16579] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 854.234655][T16579] RIP: 0023:0xf70fe539 [ 854.238818][T16579] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 854.258564][T16579] RSP: 002b:00000000f54ee55c EFLAGS: 00000206 ORIG_RAX: 0000000000000127 [ 854.267118][T16579] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 00000000800000c0 [ 854.275212][T16579] RDX: 0000000000008042 RSI: 0000000000000000 RDI: 0000000000000000 [ 854.283379][T16579] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 854.291446][T16579] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 854.299513][T16579] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 854.307608][T16579] [ 854.310869][T16579] Kernel Offset: disabled [ 854.315236][T16579] Rebooting in 86400 seconds..