forked to background, child pid 3184 no interfaces have a carrier [ 25.819696][ T3185] 8021q: adding VLAN 0 to HW filter on device bond0 [ 25.829430][ T3185] eql: remember to turn off Van-Jacobson compression on your slave devices Starting sshd: OK syzkaller Warning: Permanently added '10.128.1.33' (ECDSA) to the list of known hosts. 2022/08/23 23:52:01 fuzzer started 2022/08/23 23:52:01 dialing manager at 10.128.0.169:39931 syzkaller login: [ 56.152787][ T3611] cgroup: Unknown subsys name 'net' [ 56.254487][ T3611] cgroup: Unknown subsys name 'rlimit' 2022/08/23 23:52:09 syscalls: 3710 2022/08/23 23:52:09 code coverage: enabled 2022/08/23 23:52:09 comparison tracing: enabled 2022/08/23 23:52:09 extra coverage: enabled 2022/08/23 23:52:09 delay kcov mmap: enabled 2022/08/23 23:52:09 setuid sandbox: enabled 2022/08/23 23:52:09 namespace sandbox: enabled 2022/08/23 23:52:09 Android sandbox: /sys/fs/selinux/policy does not exist 2022/08/23 23:52:09 fault injection: enabled 2022/08/23 23:52:09 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2022/08/23 23:52:09 net packet injection: enabled 2022/08/23 23:52:09 net device setup: enabled 2022/08/23 23:52:09 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2022/08/23 23:52:09 devlink PCI setup: PCI device 0000:00:10.0 is not available 2022/08/23 23:52:09 USB emulation: enabled 2022/08/23 23:52:09 hci packet injection: enabled 2022/08/23 23:52:09 wifi device emulation: failed to parse kernel version (6.0.0-rc2-syzkaller-00044-gdf0219d11b6f) 2022/08/23 23:52:09 802.15.4 emulation: enabled 2022/08/23 23:52:09 fetching corpus: 0, signal 0/0 (executing program) 2022/08/23 23:52:09 fetching corpus: 0, signal 0/0 (executing program) 2022/08/23 23:52:11 starting 6 fuzzer processes 23:52:11 executing program 0: r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xffffffffffffff30, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e03001c000b03d25a80648c6394f90124fc60100003400c000000403582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) 23:52:11 executing program 1: io_cancel(0x0, 0x0, 0x0) 23:52:11 executing program 2: r0 = syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000040)=ANY=[], 0x6db6e559) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) 23:52:11 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000003c0)=[@in6={0xa, 0x0, 0x0, @private1}]}, &(0x7f0000000180)=0x10) r1 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) 23:52:11 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWTABLE={0xac, 0x0, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x5}, @NFTA_TABLE_USERDATA={0x14, 0x6, "4b42518d34e22a8d036fdecb92cc96ef"}, @NFTA_TABLE_USERDATA={0x51, 0x6, "74a28baee01aaf57ae361f7ed080b35c1e8c7e91c8253bbf784af939bb8a724dfc76ff9c499a8ae08334da26953f93f41a4051ee9a28a765d1ff5bd39941516d0da4af51da9e9a879f3fc1d71e"}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x80, 0x3, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_PRIORITY={0x8}]}, @NFTA_CHAIN_COUNTERS={0x40, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x1}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x7fff}, @NFTA_COUNTER_PACKETS={0xc}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x5}, @NFTA_COUNTER_BYTES={0xc}]}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x9}], {0x14}}, 0x168}}, 0x4010000) 23:52:11 executing program 4: r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)) io_setup(0x27f, &(0x7f0000000400)=0x0) io_submit(r1, 0x1, &(0x7f0000000a80)=[&(0x7f0000000540)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}]) [ 59.591301][ T3632] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 59.601487][ T3634] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 59.609849][ T3634] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 59.615652][ T3639] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 59.617560][ T3634] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 59.625659][ T3639] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 59.632590][ T3634] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 59.638739][ T3639] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 59.646052][ T3634] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 59.652152][ T3639] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 59.659757][ T3634] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 59.673739][ T3634] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 59.675533][ T3638] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 59.689469][ T3634] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 59.697220][ T3634] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 59.702088][ T3641] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 59.711938][ T3638] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 59.728150][ T3641] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 59.738260][ T3641] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 59.747549][ T3638] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 59.747554][ T3641] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 59.762692][ T3638] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 59.778877][ T3638] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 59.786389][ T3638] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 60.016345][ T3625] chnl_net:caif_netlink_parms(): no params data found [ 60.024908][ T3626] chnl_net:caif_netlink_parms(): no params data found [ 60.118108][ T3624] chnl_net:caif_netlink_parms(): no params data found [ 60.134200][ T3629] chnl_net:caif_netlink_parms(): no params data found [ 60.159057][ T3626] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.166168][ T3626] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.175568][ T3626] device bridge_slave_0 entered promiscuous mode [ 60.204830][ T3625] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.212038][ T3625] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.220535][ T3625] device bridge_slave_0 entered promiscuous mode [ 60.227718][ T3626] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.234837][ T3626] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.243054][ T3626] device bridge_slave_1 entered promiscuous mode [ 60.265567][ T3625] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.274908][ T3625] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.282895][ T3625] device bridge_slave_1 entered promiscuous mode [ 60.325564][ T3626] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 60.336840][ T3625] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 60.351391][ T3625] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 60.366301][ T3626] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 60.418861][ T3624] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.425952][ T3624] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.434930][ T3624] device bridge_slave_0 entered promiscuous mode [ 60.444744][ T3625] team0: Port device team_slave_0 added [ 60.453545][ T3625] team0: Port device team_slave_1 added [ 60.461771][ T3626] team0: Port device team_slave_0 added [ 60.467690][ T3629] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.475145][ T3629] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.483153][ T3629] device bridge_slave_0 entered promiscuous mode [ 60.493617][ T3624] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.500998][ T3624] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.512148][ T3624] device bridge_slave_1 entered promiscuous mode [ 60.524179][ T3626] team0: Port device team_slave_1 added [ 60.537508][ T3629] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.544850][ T3629] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.553022][ T3629] device bridge_slave_1 entered promiscuous mode [ 60.594235][ T3629] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 60.603930][ T3625] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 60.611862][ T3625] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 60.638116][ T3625] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 60.657508][ T3626] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 60.664532][ T3626] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 60.690536][ T3626] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 60.703274][ T3629] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 60.713151][ T3625] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 60.720417][ T3625] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 60.746521][ T3625] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 60.759330][ T3624] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 60.771282][ T3624] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 60.780981][ T3626] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 60.787934][ T3626] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 60.814058][ T3626] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 60.871368][ T3629] team0: Port device team_slave_0 added [ 60.886286][ T3625] device hsr_slave_0 entered promiscuous mode [ 60.893908][ T3625] device hsr_slave_1 entered promiscuous mode [ 60.902323][ T3624] team0: Port device team_slave_0 added [ 60.910345][ T3629] team0: Port device team_slave_1 added [ 60.918012][ T3626] device hsr_slave_0 entered promiscuous mode [ 60.925072][ T3626] device hsr_slave_1 entered promiscuous mode [ 60.931826][ T3626] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 60.942611][ T3626] Cannot create hsr debugfs directory [ 60.957138][ T3624] team0: Port device team_slave_1 added [ 60.996553][ T3629] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 61.004748][ T3629] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.030787][ T3629] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 61.052975][ T3624] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 61.060317][ T3624] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.086326][ T3624] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 61.112931][ T3629] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 61.119974][ T3629] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.146090][ T3629] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 61.176905][ T3624] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 61.184441][ T3624] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.211295][ T3624] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 61.234881][ T3629] device hsr_slave_0 entered promiscuous mode [ 61.241507][ T3629] device hsr_slave_1 entered promiscuous mode [ 61.247919][ T3629] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 61.255602][ T3629] Cannot create hsr debugfs directory [ 61.342191][ T3624] device hsr_slave_0 entered promiscuous mode [ 61.348945][ T3624] device hsr_slave_1 entered promiscuous mode [ 61.355469][ T3624] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 61.363126][ T3624] Cannot create hsr debugfs directory [ 61.491635][ T3625] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 61.515266][ T3625] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 61.538483][ T3625] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 61.546703][ T3625] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 61.593094][ T3629] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 61.619230][ T3629] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 61.633593][ T3629] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 61.643937][ T3629] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 61.672757][ T3626] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 61.699243][ T3626] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 61.716467][ T3626] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 61.739309][ T3664] Bluetooth: hci2: command 0x0409 tx timeout [ 61.745454][ T3664] Bluetooth: hci0: command 0x0409 tx timeout [ 61.755178][ T3626] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 61.774530][ T3624] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 61.794104][ T3625] 8021q: adding VLAN 0 to HW filter on device bond0 [ 61.815904][ T3624] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 61.818657][ T3664] Bluetooth: hci3: command 0x0409 tx timeout [ 61.822756][ T142] Bluetooth: hci1: command 0x0409 tx timeout [ 61.830216][ T3639] Bluetooth: hci4: Opcode 0x c03 failed: -110 [ 61.860368][ T3624] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 61.884877][ T3625] 8021q: adding VLAN 0 to HW filter on device team0 [ 61.899273][ T3638] Bluetooth: hci5: Opcode 0x c03 failed: -110 [ 61.927367][ T3624] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 61.948101][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 61.967085][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 62.045664][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 62.057181][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 62.067566][ T26] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.074921][ T26] bridge0: port 1(bridge_slave_0) entered forwarding state [ 62.084250][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 62.093880][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 62.102795][ T26] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.110047][ T26] bridge0: port 2(bridge_slave_1) entered forwarding state [ 62.118111][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 62.127041][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 62.153664][ T3629] 8021q: adding VLAN 0 to HW filter on device bond0 [ 62.178962][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 62.187040][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 62.197305][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 62.208102][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 62.217737][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 62.227415][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 62.236170][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 62.271058][ T3625] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 62.292846][ T3625] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 62.325207][ T3626] 8021q: adding VLAN 0 to HW filter on device bond0 [ 62.335037][ T3629] 8021q: adding VLAN 0 to HW filter on device team0 [ 62.363502][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 62.372391][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 62.387084][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 62.396084][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 62.405259][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 62.444937][ T3626] 8021q: adding VLAN 0 to HW filter on device team0 [ 62.467109][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 62.476415][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 62.484848][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 62.494983][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 62.505237][ T22] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.512404][ T22] bridge0: port 1(bridge_slave_0) entered forwarding state [ 62.525779][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 62.534425][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 62.545832][ T22] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.552907][ T22] bridge0: port 2(bridge_slave_1) entered forwarding state [ 62.563060][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 62.571711][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 62.604266][ T3624] 8021q: adding VLAN 0 to HW filter on device bond0 [ 62.612746][ T3668] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 62.621657][ T3668] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 62.630197][ T3668] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 62.637573][ T3668] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 62.646845][ T3668] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 62.655365][ T3668] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 62.663948][ T3668] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 62.672562][ T3668] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 62.681108][ T3668] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 62.695132][ T3629] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 62.709688][ T3629] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 62.720938][ T3625] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 62.747714][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 62.756216][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 62.771773][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 62.781145][ T22] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.788524][ T22] bridge0: port 1(bridge_slave_0) entered forwarding state [ 62.796205][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 62.804667][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 62.812905][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 62.821927][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 62.830570][ T22] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.837627][ T22] bridge0: port 2(bridge_slave_1) entered forwarding state [ 62.845312][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 62.854275][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 62.863043][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 62.871847][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 62.880426][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 62.889107][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 62.897834][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 62.905954][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 62.926159][ T3626] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 62.939561][ T3626] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 62.956729][ T3664] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 62.968090][ T3664] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 62.976845][ T3664] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 62.985835][ T3664] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 62.995233][ T3664] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 63.004807][ T3664] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 63.013840][ T3664] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 63.024578][ T3624] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.040879][ T3668] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 63.048626][ T3668] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 63.061131][ T3629] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 63.084638][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 63.099954][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 63.118828][ T22] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.125960][ T22] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.134285][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 63.143386][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 63.157003][ T22] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.164160][ T22] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.172118][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 63.181066][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 63.189952][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 63.198858][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 63.208067][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 63.218601][ T3626] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 63.231475][ T3664] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 63.241136][ T3664] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 63.261433][ T3664] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 63.297481][ T3664] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 63.309501][ T3664] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 63.337731][ T3664] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 63.347262][ T3664] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 63.357462][ T3664] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 63.371986][ T3664] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 63.382458][ T3624] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 63.421889][ T3667] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 63.430313][ T3667] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 63.448095][ T3624] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 63.729459][ T3667] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 63.738193][ T3667] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 63.800292][ T3664] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 63.819786][ T3664] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 63.829122][ T22] Bluetooth: hci0: command 0x041b tx timeout [ 63.837115][ T22] Bluetooth: hci2: command 0x041b tx timeout [ 63.857004][ T3626] device veth0_vlan entered promiscuous mode [ 63.904795][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 63.913985][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 63.939236][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 63.947578][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 63.980533][ T22] Bluetooth: hci1: command 0x041b tx timeout [ 63.986605][ T22] Bluetooth: hci3: command 0x041b tx timeout [ 63.993589][ T3625] device veth0_vlan entered promiscuous mode [ 64.010797][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 64.018557][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 64.026126][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 64.034125][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 64.046400][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 64.055382][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 64.070581][ T3626] device veth1_vlan entered promiscuous mode [ 64.079387][ T3625] device veth1_vlan entered promiscuous mode [ 64.100324][ T921] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 64.108224][ T921] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 64.120228][ T921] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 64.129231][ T921] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 64.156327][ T3629] device veth0_vlan entered promiscuous mode [ 64.166554][ T3624] device veth0_vlan entered promiscuous mode [ 64.174637][ T921] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 64.183953][ T921] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 64.192658][ T921] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 64.201038][ T921] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 64.209698][ T921] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 64.217843][ T921] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 64.226924][ T921] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 64.234844][ T921] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 64.243249][ T921] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 64.251083][ T921] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 64.263976][ T3629] device veth1_vlan entered promiscuous mode [ 64.284763][ T3625] device veth0_macvtap entered promiscuous mode [ 64.297075][ T3624] device veth1_vlan entered promiscuous mode [ 64.311127][ T3668] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 64.319852][ T3668] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 64.331172][ T3625] device veth1_macvtap entered promiscuous mode [ 64.354552][ T3626] device veth0_macvtap entered promiscuous mode [ 64.363234][ T3668] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 64.371684][ T3668] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 64.382466][ T3668] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 64.396294][ T3668] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 64.405193][ T3668] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 64.414028][ T3668] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 64.423416][ T3668] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 64.434103][ T3629] device veth0_macvtap entered promiscuous mode [ 64.442836][ T3626] device veth1_macvtap entered promiscuous mode [ 64.454888][ T3625] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 64.472134][ T3664] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 64.480639][ T3664] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 64.492043][ T3664] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 64.501058][ T3664] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 64.522076][ T3629] device veth1_macvtap entered promiscuous mode [ 64.532186][ T3625] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 64.551847][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 64.559989][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 64.568521][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 64.579121][ T3625] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.587981][ T3625] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.597520][ T3625] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.606628][ T3625] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.620650][ T3626] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 64.631784][ T3626] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.645554][ T3626] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 64.673638][ T921] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 64.682476][ T921] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 64.692444][ T921] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 64.701553][ T921] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 64.712283][ T3626] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 64.723124][ T3626] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.734251][ T3626] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 64.745088][ T3624] device veth0_macvtap entered promiscuous mode [ 64.762517][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 64.770828][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 64.780331][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 64.792320][ T3626] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.803276][ T3626] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.812257][ T3626] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.821377][ T3626] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.848157][ T3624] device veth1_macvtap entered promiscuous mode [ 64.894300][ T3629] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 64.905885][ T3629] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.916445][ T3629] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 64.933071][ T3629] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.960240][ T3629] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 64.975989][ T3624] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 64.986898][ T3624] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.997195][ T3624] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 65.007903][ T3624] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.025499][ T3624] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 65.025707][ T3641] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 65.044925][ T3641] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 65.054081][ T3641] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 65.061604][ T3624] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.072478][ T3641] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 65.074448][ T3624] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.085902][ T3641] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 65.094658][ T3641] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 65.102950][ T3667] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 65.127028][ T3667] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 65.136649][ T3667] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 65.151534][ T3667] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 65.174742][ T3667] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 65.187632][ T3629] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 65.207532][ T3629] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! 23:52:18 executing program 4: r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)) io_setup(0x27f, &(0x7f0000000400)=0x0) io_submit(r1, 0x1, &(0x7f0000000a80)=[&(0x7f0000000540)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}]) [ 65.217648][ T3629] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 65.229007][ T3629] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.240342][ T3629] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 65.298874][ T3624] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 65.312268][ T3624] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.323340][ T3624] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 65.334112][ T3624] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.351894][ T3624] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 65.362604][ T3624] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.376129][ T3624] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 65.388655][ T921] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready 23:52:19 executing program 4: r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)) io_setup(0x27f, &(0x7f0000000400)=0x0) io_submit(r1, 0x1, &(0x7f0000000a80)=[&(0x7f0000000540)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}]) [ 65.397256][ T921] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 65.406335][ T921] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 65.417035][ T921] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 65.449927][ T3629] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.464520][ T3629] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.473792][ T3629] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.482650][ T3629] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 23:52:19 executing program 4: r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)) io_setup(0x27f, &(0x7f0000000400)=0x0) io_submit(r1, 0x1, &(0x7f0000000a80)=[&(0x7f0000000540)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}]) [ 65.521623][ T3723] netlink: 'syz-executor.0': attribute type 3 has an invalid length. [ 65.530854][ T3723] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 65.540841][ T3624] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.558722][ T3723] netlink: 181912 bytes leftover after parsing attributes in process `syz-executor.0'. 23:52:19 executing program 0: r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xffffffffffffff30, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e03001c000b03d25a80648c6394f90124fc60100003400c000000403582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) [ 65.565929][ T3624] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.582007][ T3624] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.590971][ T3624] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 23:52:19 executing program 4: r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xffffffffffffff30, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e03001c000b03d25a80648c6394f90124fc60100003400c000000403582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) [ 65.672335][ T3727] netlink: 'syz-executor.0': attribute type 3 has an invalid length. [ 65.687138][ T3727] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 65.710002][ T3727] netlink: 181912 bytes leftover after parsing attributes in process `syz-executor.0'. 23:52:19 executing program 0: r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xffffffffffffff30, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e03001c000b03d25a80648c6394f90124fc60100003400c000000403582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) 23:52:19 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWTABLE={0xac, 0x0, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x5}, @NFTA_TABLE_USERDATA={0x14, 0x6, "4b42518d34e22a8d036fdecb92cc96ef"}, @NFTA_TABLE_USERDATA={0x51, 0x6, "74a28baee01aaf57ae361f7ed080b35c1e8c7e91c8253bbf784af939bb8a724dfc76ff9c499a8ae08334da26953f93f41a4051ee9a28a765d1ff5bd39941516d0da4af51da9e9a879f3fc1d71e"}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x80, 0x3, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_PRIORITY={0x8}]}, @NFTA_CHAIN_COUNTERS={0x40, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x1}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x7fff}, @NFTA_COUNTER_PACKETS={0xc}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x5}, @NFTA_COUNTER_BYTES={0xc}]}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x9}], {0x14}}, 0x168}}, 0x4010000) [ 65.790223][ T3731] netlink: 'syz-executor.4': attribute type 3 has an invalid length. [ 65.818999][ T3731] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 65.827127][ T3731] netlink: 181912 bytes leftover after parsing attributes in process `syz-executor.4'. [ 65.899249][ T921] Bluetooth: hci2: command 0x040f tx timeout [ 65.905762][ T921] Bluetooth: hci0: command 0x040f tx timeout [ 65.912261][ T3711] chnl_net:caif_netlink_parms(): no params data found [ 65.926521][ T3735] netlink: 'syz-executor.0': attribute type 3 has an invalid length. [ 65.963921][ T3735] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 66.018553][ T3735] netlink: 181912 bytes leftover after parsing attributes in process `syz-executor.0'. [ 66.064618][ T921] Bluetooth: hci3: command 0x040f tx timeout [ 66.079738][ T921] Bluetooth: hci1: command 0x040f tx timeout [ 66.101492][ T3711] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.120905][ T3711] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.139872][ T3711] device bridge_slave_0 entered promiscuous mode [ 66.174897][ T3711] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.191308][ T3711] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.201147][ T3711] device bridge_slave_1 entered promiscuous mode [ 66.244881][ T3711] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 66.257061][ T3711] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 66.304699][ T3711] team0: Port device team_slave_0 added [ 66.322883][ T3711] team0: Port device team_slave_1 added [ 66.346814][ T3711] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 66.353896][ T3711] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.388470][ T3711] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 66.404180][ T3711] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 66.411452][ T3711] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.446937][ T3711] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 66.512377][ T3711] device hsr_slave_0 entered promiscuous mode [ 66.529152][ T3711] device hsr_slave_1 entered promiscuous mode [ 66.543687][ T3711] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 66.553868][ T3711] Cannot create hsr debugfs directory [ 66.710531][ T3711] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 66.726904][ T3711] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 66.736663][ T3711] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 66.753225][ T3711] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 66.850976][ T3711] 8021q: adding VLAN 0 to HW filter on device bond0 [ 66.870168][ T3667] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 66.877824][ T3667] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 66.912192][ T3711] 8021q: adding VLAN 0 to HW filter on device team0 [ 66.927553][ T3667] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 66.937007][ T3667] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 66.945754][ T3667] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.952902][ T3667] bridge0: port 1(bridge_slave_0) entered forwarding state [ 66.972359][ T3665] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 66.986372][ T3665] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 66.995291][ T3665] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 67.005504][ T3665] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.012597][ T3665] bridge0: port 2(bridge_slave_1) entered forwarding state [ 67.020783][ T3638] Bluetooth: hci4: Opcode 0x c03 failed: -110 [ 67.029612][ T3665] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 67.039688][ T3665] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 67.075882][ T3664] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 67.085577][ T3664] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 67.094764][ T3664] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 67.104029][ T3664] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 67.112771][ T3664] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 67.125645][ T3711] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 67.141810][ T3711] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 67.150606][ T3667] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 67.159489][ T3667] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 67.184764][ T3665] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 67.194356][ T3665] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 67.197482][ T22] Bluetooth: hci5: command 0x0409 tx timeout [ 67.212639][ T3711] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 67.360685][ T3667] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 67.375403][ T3711] device veth0_vlan entered promiscuous mode [ 67.383221][ T3667] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 67.395784][ T3711] device veth1_vlan entered promiscuous mode [ 67.405330][ T3667] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 67.413548][ T3667] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 67.421602][ T3667] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 67.450700][ T3711] device veth0_macvtap entered promiscuous mode [ 67.459726][ T3667] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 67.467732][ T3667] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 67.476388][ T3667] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 67.486039][ T3711] device veth1_macvtap entered promiscuous mode [ 67.505157][ T3711] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 67.515929][ T3711] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.527433][ T3711] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 67.538626][ T3711] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.548509][ T3711] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 67.559027][ T3711] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.569032][ T3711] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 67.579934][ T3711] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.590900][ T3711] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 67.598783][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 67.607324][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 67.619612][ T3711] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 67.630186][ T3711] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.640961][ T3711] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 67.651529][ T3711] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.661605][ T3711] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 67.672681][ T3711] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.683134][ T3711] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 67.693769][ T3711] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.705449][ T3711] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 67.714545][ T3665] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 67.723482][ T3665] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 67.735173][ T3711] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.744715][ T3711] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.753497][ T3711] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.762223][ T3711] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 23:52:21 executing program 1: io_cancel(0x0, 0x0, 0x0) 23:52:21 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWTABLE={0xac, 0x0, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x5}, @NFTA_TABLE_USERDATA={0x14, 0x6, "4b42518d34e22a8d036fdecb92cc96ef"}, @NFTA_TABLE_USERDATA={0x51, 0x6, "74a28baee01aaf57ae361f7ed080b35c1e8c7e91c8253bbf784af939bb8a724dfc76ff9c499a8ae08334da26953f93f41a4051ee9a28a765d1ff5bd39941516d0da4af51da9e9a879f3fc1d71e"}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x80, 0x3, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_PRIORITY={0x8}]}, @NFTA_CHAIN_COUNTERS={0x40, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x1}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x7fff}, @NFTA_COUNTER_PACKETS={0xc}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x5}, @NFTA_COUNTER_BYTES={0xc}]}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x9}], {0x14}}, 0x168}}, 0x4010000) [ 67.979361][ T3667] Bluetooth: hci0: command 0x0419 tx timeout [ 67.985454][ T3667] Bluetooth: hci2: command 0x0419 tx timeout [ 68.139187][ T3667] Bluetooth: hci1: command 0x0419 tx timeout [ 68.145277][ T3667] Bluetooth: hci3: command 0x0419 tx timeout [ 69.258979][ T3667] Bluetooth: hci5: command 0x041b tx timeout [ 71.106208][ T1228] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.112773][ T1228] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.338424][ T3667] Bluetooth: hci5: command 0x040f tx timeout [ 71.498713][ T3638] Bluetooth: hci4: Opcode 0x c03 failed: -110 [ 73.418654][ T3669] Bluetooth: hci5: command 0x0419 tx timeout [ 75.819272][ T3638] Bluetooth: hci4: Opcode 0x c03 failed: -110 [ 76.222575][ T6] cfg80211: failed to load regulatory.db [ 78.069682][ T3632] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 78.077538][ T3632] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 78.085553][ T3632] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 78.093478][ T3632] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 78.101477][ T3632] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 78.108954][ T3632] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 78.197366][ T3760] chnl_net:caif_netlink_parms(): no params data found [ 78.236940][ T3760] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.245457][ T3760] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.253985][ T3760] device bridge_slave_0 entered promiscuous mode [ 78.262853][ T3760] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.270437][ T3760] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.278129][ T3760] device bridge_slave_1 entered promiscuous mode [ 78.301806][ T3760] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.316156][ T3760] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.340693][ T3760] team0: Port device team_slave_0 added [ 78.347663][ T3760] team0: Port device team_slave_1 added [ 78.366638][ T3760] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.373723][ T3760] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.400297][ T3760] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.412651][ T3760] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.419956][ T3760] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.446207][ T3760] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.475753][ T3760] device hsr_slave_0 entered promiscuous mode [ 78.482534][ T3760] device hsr_slave_1 entered promiscuous mode [ 78.489484][ T3760] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 78.497052][ T3760] Cannot create hsr debugfs directory [ 78.582769][ T3760] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 78.591473][ T3760] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 78.600908][ T3760] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 78.610171][ T3760] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 78.632153][ T3760] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.639325][ T3760] bridge0: port 2(bridge_slave_1) entered forwarding state [ 78.647080][ T3760] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.654245][ T3760] bridge0: port 1(bridge_slave_0) entered forwarding state [ 78.701208][ T3760] 8021q: adding VLAN 0 to HW filter on device bond0 [ 78.716065][ T3667] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 78.724468][ T3667] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.732584][ T3667] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.741292][ T3667] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 78.753661][ T3760] 8021q: adding VLAN 0 to HW filter on device team0 [ 78.767040][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 78.775581][ T22] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.782696][ T22] bridge0: port 1(bridge_slave_0) entered forwarding state [ 78.802827][ T3667] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 78.811564][ T3667] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.818687][ T3667] bridge0: port 2(bridge_slave_1) entered forwarding state [ 78.842662][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 78.851837][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 78.860666][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 78.873982][ T3760] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 78.885591][ T3760] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 78.897764][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 78.905938][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 78.929364][ T3760] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 78.936692][ T3667] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 78.944567][ T3667] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 79.071013][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 79.086916][ T3760] device veth0_vlan entered promiscuous mode [ 79.094934][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 79.107597][ T3760] device veth1_vlan entered promiscuous mode [ 79.115241][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 79.123792][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 79.132567][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 79.153381][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 79.162294][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 79.172561][ T3760] device veth0_macvtap entered promiscuous mode [ 79.185259][ T3760] device veth1_macvtap entered promiscuous mode [ 79.193832][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 79.211553][ T3760] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 79.223483][ T3760] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.233685][ T3760] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 79.245439][ T3760] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.255432][ T3760] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 79.266211][ T3760] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.276212][ T3760] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 79.286762][ T3760] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.296704][ T3760] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 79.307226][ T3760] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.318601][ T3760] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 79.327656][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 79.336495][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 79.346835][ T3760] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 79.360168][ T3760] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.371003][ T3760] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 79.381712][ T3760] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.391916][ T3760] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 79.402554][ T3760] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.412912][ T3760] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 79.426747][ T3760] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.436978][ T3760] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 79.449368][ T3760] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.461559][ T3760] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 79.475298][ T3669] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 79.484149][ T3669] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 79.495274][ T3760] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.504723][ T3760] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.513973][ T3760] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.522875][ T3760] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 23:52:33 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000003c0)=[@in6={0xa, 0x0, 0x0, @private1}]}, &(0x7f0000000180)=0x10) r1 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) 23:52:33 executing program 0: r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xffffffffffffff30, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e03001c000b03d25a80648c6394f90124fc60100003400c000000403582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) 23:52:33 executing program 4: r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xffffffffffffff30, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e03001c000b03d25a80648c6394f90124fc60100003400c000000403582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) 23:52:33 executing program 2: r0 = syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000040)=ANY=[], 0x6db6e559) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) 23:52:33 executing program 1: io_cancel(0x0, 0x0, 0x0) 23:52:33 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWTABLE={0xac, 0x0, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x5}, @NFTA_TABLE_USERDATA={0x14, 0x6, "4b42518d34e22a8d036fdecb92cc96ef"}, @NFTA_TABLE_USERDATA={0x51, 0x6, "74a28baee01aaf57ae361f7ed080b35c1e8c7e91c8253bbf784af939bb8a724dfc76ff9c499a8ae08334da26953f93f41a4051ee9a28a765d1ff5bd39941516d0da4af51da9e9a879f3fc1d71e"}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x80, 0x3, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_PRIORITY={0x8}]}, @NFTA_CHAIN_COUNTERS={0x40, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x1}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x7fff}, @NFTA_COUNTER_PACKETS={0xc}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x5}, @NFTA_COUNTER_BYTES={0xc}]}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x9}], {0x14}}, 0x168}}, 0x4010000) 23:52:33 executing program 1: io_cancel(0x0, 0x0, 0x0) 23:52:33 executing program 5: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000003c0)=[@in6={0xa, 0x0, 0x0, @private1}]}, &(0x7f0000000180)=0x10) r1 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) [ 79.654971][ T3780] netlink: 'syz-executor.0': attribute type 3 has an invalid length. [ 79.664838][ T3781] netlink: 'syz-executor.4': attribute type 3 has an invalid length. 23:52:33 executing program 1: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000003c0)=[@in6={0xa, 0x0, 0x0, @private1}]}, &(0x7f0000000180)=0x10) r1 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) [ 79.713120][ T3780] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 79.739424][ T3781] netlink: 'syz-executor.4': attribute type 1 has an invalid length. 23:52:33 executing program 5: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000003c0)=[@in6={0xa, 0x0, 0x0, @private1}]}, &(0x7f0000000180)=0x10) r1 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) 23:52:33 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000003c0)=[@in6={0xa, 0x0, 0x0, @private1}]}, &(0x7f0000000180)=0x10) r1 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) [ 79.767584][ T3780] netlink: 181912 bytes leftover after parsing attributes in process `syz-executor.0'. 23:52:33 executing program 0: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000003c0)=[@in6={0xa, 0x0, 0x0, @private1}]}, &(0x7f0000000180)=0x10) r1 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) [ 79.841953][ T3781] netlink: 181912 bytes leftover after parsing attributes in process `syz-executor.4'. 23:52:33 executing program 1: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000003c0)=[@in6={0xa, 0x0, 0x0, @private1}]}, &(0x7f0000000180)=0x10) r1 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) 23:52:33 executing program 5: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000003c0)=[@in6={0xa, 0x0, 0x0, @private1}]}, &(0x7f0000000180)=0x10) r1 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) 23:52:33 executing program 4: r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xffffffffffffff30, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e03001c000b03d25a80648c6394f90124fc60100003400c000000403582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) [ 80.091503][ T3804] netlink: 'syz-executor.4': attribute type 3 has an invalid length. [ 80.115695][ T3804] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 80.135048][ T3804] netlink: 181912 bytes leftover after parsing attributes in process `syz-executor.4'. [ 80.145665][ T3669] Bluetooth: hci4: command 0x0409 tx timeout 23:52:34 executing program 0: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000003c0)=[@in6={0xa, 0x0, 0x0, @private1}]}, &(0x7f0000000180)=0x10) r1 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) 23:52:34 executing program 2: r0 = syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000040)=ANY=[], 0x6db6e559) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) 23:52:34 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000003c0)=[@in6={0xa, 0x0, 0x0, @private1}]}, &(0x7f0000000180)=0x10) r1 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) 23:52:34 executing program 1: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000003c0)=[@in6={0xa, 0x0, 0x0, @private1}]}, &(0x7f0000000180)=0x10) r1 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) 23:52:34 executing program 5: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000003c0)=[@in6={0xa, 0x0, 0x0, @private1}]}, &(0x7f0000000180)=0x10) r1 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) 23:52:34 executing program 4: r0 = syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000040)=ANY=[], 0x6db6e559) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) 23:52:34 executing program 3: r0 = syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000040)=ANY=[], 0x6db6e559) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) 23:52:34 executing program 0: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000003c0)=[@in6={0xa, 0x0, 0x0, @private1}]}, &(0x7f0000000180)=0x10) r1 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) 23:52:34 executing program 1: r0 = syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000040)=ANY=[], 0x6db6e559) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) 23:52:34 executing program 5: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000003c0)=[@in6={0xa, 0x0, 0x0, @private1}]}, &(0x7f0000000180)=0x10) r1 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) 23:52:34 executing program 0: r0 = syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000040)=ANY=[], 0x6db6e559) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) 23:52:34 executing program 5: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000003c0)=[@in6={0xa, 0x0, 0x0, @private1}]}, &(0x7f0000000180)=0x10) r1 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) 23:52:34 executing program 5: r0 = syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000040)=ANY=[], 0x6db6e559) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) 23:52:35 executing program 2: r0 = syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000040)=ANY=[], 0x6db6e559) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) 23:52:35 executing program 4: r0 = syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000040)=ANY=[], 0x6db6e559) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) 23:52:35 executing program 3: r0 = syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000040)=ANY=[], 0x6db6e559) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) 23:52:35 executing program 1: r0 = syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000040)=ANY=[], 0x6db6e559) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) 23:52:35 executing program 0: r0 = syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000040)=ANY=[], 0x6db6e559) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) 23:52:35 executing program 5: r0 = syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000040)=ANY=[], 0x6db6e559) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) [ 82.228449][ T3669] Bluetooth: hci4: command 0x041b tx timeout 23:52:36 executing program 4: r0 = syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000040)=ANY=[], 0x6db6e559) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) 23:52:36 executing program 3: r0 = syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000040)=ANY=[], 0x6db6e559) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) 23:52:36 executing program 1: r0 = syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000040)=ANY=[], 0x6db6e559) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) 23:52:36 executing program 0: r0 = syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000040)=ANY=[], 0x6db6e559) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) 23:52:36 executing program 5: r0 = syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000040)=ANY=[], 0x6db6e559) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) 23:52:36 executing program 2: r0 = syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000040)=ANY=[], 0x6db6e559) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) 23:52:37 executing program 4: r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)) io_setup(0x27f, &(0x7f0000000400)=0x0) io_submit(r1, 0x1, &(0x7f0000000a80)=[&(0x7f0000000540)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}]) [ 84.308687][ T26] Bluetooth: hci4: command 0x040f tx timeout 23:52:37 executing program 0: r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)) io_setup(0x27f, &(0x7f0000000400)=0x0) io_submit(r1, 0x1, &(0x7f0000000a80)=[&(0x7f0000000540)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}]) 23:52:38 executing program 1: r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)) io_setup(0x27f, &(0x7f0000000400)=0x0) io_submit(r1, 0x1, &(0x7f0000000a80)=[&(0x7f0000000540)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}]) 23:52:38 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @fixed}, 0xe) getpeername(r0, 0x0, &(0x7f0000000000)) 23:52:38 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newtaction={0x94, 0x30, 0x1, 0x0, 0x0, {}, [{0x80, 0x1, [@m_nat={0x7c, 0x1, 0x0, 0x0, {{0x8}, {0x54, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0xffffffff, 0x8, 0x1, 0x8000, 0x7}, @rand_addr=0x64010101, @local, 0xff000000}}, @TCA_NAT_PARMS={0x28, 0x1, {{0xfc0, 0x0, 0x20000000, 0x6, 0x9}, @empty, @local, 0xffffffff}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x94}}, 0x0) 23:52:38 executing program 0: r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)) io_setup(0x27f, &(0x7f0000000400)=0x0) io_submit(r1, 0x1, &(0x7f0000000a80)=[&(0x7f0000000540)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}]) 23:52:38 executing program 4: r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)) io_setup(0x27f, &(0x7f0000000400)=0x0) io_submit(r1, 0x1, &(0x7f0000000a80)=[&(0x7f0000000540)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}]) 23:52:38 executing program 1: r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)) io_setup(0x27f, &(0x7f0000000400)=0x0) io_submit(r1, 0x1, &(0x7f0000000a80)=[&(0x7f0000000540)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}]) 23:52:38 executing program 2: r0 = syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000040)=ANY=[], 0x6db6e559) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) 23:52:38 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newtaction={0x94, 0x30, 0x1, 0x0, 0x0, {}, [{0x80, 0x1, [@m_nat={0x7c, 0x1, 0x0, 0x0, {{0x8}, {0x54, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0xffffffff, 0x8, 0x1, 0x8000, 0x7}, @rand_addr=0x64010101, @local, 0xff000000}}, @TCA_NAT_PARMS={0x28, 0x1, {{0xfc0, 0x0, 0x20000000, 0x6, 0x9}, @empty, @local, 0xffffffff}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x94}}, 0x0) 23:52:38 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newtaction={0x94, 0x30, 0x1, 0x0, 0x0, {}, [{0x80, 0x1, [@m_nat={0x7c, 0x1, 0x0, 0x0, {{0x8}, {0x54, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0xffffffff, 0x8, 0x1, 0x8000, 0x7}, @rand_addr=0x64010101, @local, 0xff000000}}, @TCA_NAT_PARMS={0x28, 0x1, {{0xfc0, 0x0, 0x20000000, 0x6, 0x9}, @empty, @local, 0xffffffff}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x94}}, 0x0) 23:52:38 executing program 4: r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)) io_setup(0x27f, &(0x7f0000000400)=0x0) io_submit(r1, 0x1, &(0x7f0000000a80)=[&(0x7f0000000540)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}]) 23:52:38 executing program 1: r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)) io_setup(0x27f, &(0x7f0000000400)=0x0) io_submit(r1, 0x1, &(0x7f0000000a80)=[&(0x7f0000000540)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}]) 23:52:38 executing program 0: r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)) io_setup(0x27f, &(0x7f0000000400)=0x0) io_submit(r1, 0x1, &(0x7f0000000a80)=[&(0x7f0000000540)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}]) 23:52:38 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newtaction={0x94, 0x30, 0x1, 0x0, 0x0, {}, [{0x80, 0x1, [@m_nat={0x7c, 0x1, 0x0, 0x0, {{0x8}, {0x54, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0xffffffff, 0x8, 0x1, 0x8000, 0x7}, @rand_addr=0x64010101, @local, 0xff000000}}, @TCA_NAT_PARMS={0x28, 0x1, {{0xfc0, 0x0, 0x20000000, 0x6, 0x9}, @empty, @local, 0xffffffff}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x94}}, 0x0) 23:52:39 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @fixed}, 0xe) getpeername(r0, 0x0, &(0x7f0000000000)) 23:52:39 executing program 4: r0 = openat$smackfs_revoke_subject(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$smackfs_label(r0, &(0x7f0000000100)={'-sys/fs/smackfs/revoke-subject\x00'}, 0x20) 23:52:39 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@ipv4_newroute={0x24, 0x1a, 0x5, 0x0, 0x0, {}, [@RTA_IP_PROTO={0x5, 0x1b, 0x1}]}, 0x24}}, 0x0) 23:52:39 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x60}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB="f40700002c00270d00"/20, @ANYRES32=r2, @ANYBLOB="00000000000000000c00f4000800010075333200c807020008000100f3ff0300440705002cb10f"], 0x7f4}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 23:52:39 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00') getdents64(r0, &(0x7f00000002c0)=""/161, 0xa1) getdents64(r0, &(0x7f0000000140)=""/180, 0xb4) 23:52:39 executing program 2: r0 = syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000040)=ANY=[], 0x6db6e559) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) 23:52:39 executing program 4: r0 = openat$smackfs_revoke_subject(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$smackfs_label(r0, &(0x7f0000000100)={'-sys/fs/smackfs/revoke-subject\x00'}, 0x20) 23:52:39 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@ipv4_newroute={0x24, 0x1a, 0x5, 0x0, 0x0, {}, [@RTA_IP_PROTO={0x5, 0x1b, 0x1}]}, 0x24}}, 0x0) 23:52:39 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00') getdents64(r0, &(0x7f00000002c0)=""/161, 0xa1) getdents64(r0, &(0x7f0000000140)=""/180, 0xb4) [ 85.681746][ T3914] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 23:52:39 executing program 4: r0 = openat$smackfs_revoke_subject(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$smackfs_label(r0, &(0x7f0000000100)={'-sys/fs/smackfs/revoke-subject\x00'}, 0x20) [ 85.788566][ T3914] netlink: 120 bytes leftover after parsing attributes in process `syz-executor.5'. 23:52:39 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00') getdents64(r0, &(0x7f00000002c0)=""/161, 0xa1) getdents64(r0, &(0x7f0000000140)=""/180, 0xb4) 23:52:39 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@ipv4_newroute={0x24, 0x1a, 0x5, 0x0, 0x0, {}, [@RTA_IP_PROTO={0x5, 0x1b, 0x1}]}, 0x24}}, 0x0) [ 85.833808][ T3914] netlink: 120 bytes leftover after parsing attributes in process `syz-executor.5'. [ 86.388538][ T3669] Bluetooth: hci4: command 0x0419 tx timeout 23:52:40 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @fixed}, 0xe) getpeername(r0, 0x0, &(0x7f0000000000)) 23:52:40 executing program 4: r0 = openat$smackfs_revoke_subject(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$smackfs_label(r0, &(0x7f0000000100)={'-sys/fs/smackfs/revoke-subject\x00'}, 0x20) 23:52:40 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00') getdents64(r0, &(0x7f00000002c0)=""/161, 0xa1) getdents64(r0, &(0x7f0000000140)=""/180, 0xb4) 23:52:40 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x60}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB="f40700002c00270d00"/20, @ANYRES32=r2, @ANYBLOB="00000000000000000c00f4000800010075333200c807020008000100f3ff0300440705002cb10f"], 0x7f4}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 23:52:40 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@ipv4_newroute={0x24, 0x1a, 0x5, 0x0, 0x0, {}, [@RTA_IP_PROTO={0x5, 0x1b, 0x1}]}, 0x24}}, 0x0) 23:52:40 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x60}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB="f40700002c00270d00"/20, @ANYRES32=r2, @ANYBLOB="00000000000000000c00f4000800010075333200c807020008000100f3ff0300440705002cb10f"], 0x7f4}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 23:52:40 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x60}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB="f40700002c00270d00"/20, @ANYRES32=r2, @ANYBLOB="00000000000000000c00f4000800010075333200c807020008000100f3ff0300440705002cb10f"], 0x7f4}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 23:52:40 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x60}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB="f40700002c00270d00"/20, @ANYRES32=r2, @ANYBLOB="00000000000000000c00f4000800010075333200c807020008000100f3ff0300440705002cb10f"], 0x7f4}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 23:52:40 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x60}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB="f40700002c00270d00"/20, @ANYRES32=r2, @ANYBLOB="00000000000000000c00f4000800010075333200c807020008000100f3ff0300440705002cb10f"], 0x7f4}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) [ 86.671421][ T3943] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 86.746784][ T3941] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 86.764471][ T3947] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 86.775450][ T3943] netlink: 120 bytes leftover after parsing attributes in process `syz-executor.5'. 23:52:40 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x60}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB="f40700002c00270d00"/20, @ANYRES32=r2, @ANYBLOB="00000000000000000c00f4000800010075333200c807020008000100f3ff0300440705002cb10f"], 0x7f4}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 23:52:40 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x60}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB="f40700002c00270d00"/20, @ANYRES32=r2, @ANYBLOB="00000000000000000c00f4000800010075333200c807020008000100f3ff0300440705002cb10f"], 0x7f4}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 23:52:40 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x60}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB="f40700002c00270d00"/20, @ANYRES32=r2, @ANYBLOB="00000000000000000c00f4000800010075333200c807020008000100f3ff0300440705002cb10f"], 0x7f4}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) [ 86.792569][ T3953] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 86.805645][ T3950] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 86.816167][ T3951] netlink: 120 bytes leftover after parsing attributes in process `syz-executor.2'. 23:52:41 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @fixed}, 0xe) getpeername(r0, 0x0, &(0x7f0000000000)) 23:52:41 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x60}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB="f40700002c00270d00"/20, @ANYRES32=r2, @ANYBLOB="00000000000000000c00f4000800010075333200c807020008000100f3ff0300440705002cb10f"], 0x7f4}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 23:52:41 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x60}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB="f40700002c00270d00"/20, @ANYRES32=r2, @ANYBLOB="00000000000000000c00f4000800010075333200c807020008000100f3ff0300440705002cb10f"], 0x7f4}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 23:52:41 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x60}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB="f40700002c00270d00"/20, @ANYRES32=r2, @ANYBLOB="00000000000000000c00f4000800010075333200c807020008000100f3ff0300440705002cb10f"], 0x7f4}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 23:52:41 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x60}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB="f40700002c00270d00"/20, @ANYRES32=r2, @ANYBLOB="00000000000000000c00f4000800010075333200c807020008000100f3ff0300440705002cb10f"], 0x7f4}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 23:52:41 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x60}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB="f40700002c00270d00"/20, @ANYRES32=r2, @ANYBLOB="00000000000000000c00f4000800010075333200c807020008000100f3ff0300440705002cb10f"], 0x7f4}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 23:52:41 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x60}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB="f40700002c00270d00"/20, @ANYRES32=r2, @ANYBLOB="00000000000000000c00f4000800010075333200c807020008000100f3ff0300440705002cb10f"], 0x7f4}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 23:52:41 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00') getdents64(r0, &(0x7f00000002c0)=""/161, 0xa1) getdents64(r0, &(0x7f0000000140)=""/180, 0xb4) 23:52:41 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00') getdents64(r0, &(0x7f00000002c0)=""/161, 0xa1) getdents64(r0, &(0x7f0000000140)=""/180, 0xb4) 23:52:41 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x60}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB="f40700002c00270d00"/20, @ANYRES32=r2, @ANYBLOB="00000000000000000c00f4000800010075333200c807020008000100f3ff0300440705002cb10f"], 0x7f4}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 23:52:41 executing program 5: r0 = openat$smackfs_revoke_subject(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$smackfs_label(r0, &(0x7f0000000100)={'-sys/fs/smackfs/revoke-subject\x00'}, 0x20) 23:52:41 executing program 5: r0 = openat$smackfs_revoke_subject(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$smackfs_label(r0, &(0x7f0000000100)={'-sys/fs/smackfs/revoke-subject\x00'}, 0x20) 23:52:42 executing program 5: r0 = openat$smackfs_revoke_subject(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$smackfs_label(r0, &(0x7f0000000100)={'-sys/fs/smackfs/revoke-subject\x00'}, 0x20) 23:52:42 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00') getdents64(r0, &(0x7f00000002c0)=""/161, 0xa1) getdents64(r0, &(0x7f0000000140)=""/180, 0xb4) 23:52:42 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00') getdents64(r0, &(0x7f00000002c0)=""/161, 0xa1) getdents64(r0, &(0x7f0000000140)=""/180, 0xb4) 23:52:42 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @fixed}, 0xe) getpeername(r0, 0x0, &(0x7f0000000000)) 23:52:42 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @fixed}, 0xe) getpeername(r0, 0x0, &(0x7f0000000000)) 23:52:42 executing program 3: syz_open_procfs$namespace(0x0, &(0x7f00000004c0)='ns/cgroup\x00') 23:52:42 executing program 5: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) socket$inet6(0xa, 0x3, 0x0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x1145042, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000001700)=0x4) r2 = dup(r0) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) syz_genetlink_get_family_id$nl80211(0x0, r1) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) bind$inet6(r3, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r3, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) [ 88.461757][ T3669] Bluetooth: hci4: command 0x0405 tx timeout 23:52:42 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00') getdents64(r0, &(0x7f00000002c0)=""/161, 0xa1) getdents64(r0, &(0x7f0000000140)=""/180, 0xb4) 23:52:42 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00') getdents64(r0, &(0x7f00000002c0)=""/161, 0xa1) getdents64(r0, &(0x7f0000000140)=""/180, 0xb4) 23:52:42 executing program 3: syz_open_procfs$namespace(0x0, &(0x7f00000004c0)='ns/cgroup\x00') 23:52:42 executing program 4: r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) listen(r0, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) connect(r1, &(0x7f0000931ff4)=@un=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) sendmsg$unix(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000100000001000000", @ANYRES64=r0], 0x18}, 0x0) accept$unix(r0, 0x0, 0x0) close(r0) r2 = socket$unix(0x1, 0x5, 0x0) close(r2) 23:52:42 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = dup(r0) setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @loopback}, 0xc) r2 = socket$netlink(0x10, 0x3, 0x0) writev(r2, &(0x7f0000000380)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r2, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000006040000000000f93132", 0x39}], 0x1) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f00000000c0)={@multicast1, @loopback=0x7f00000d, 0x1, 0x1, [@initdev={0xac, 0x1e, 0x0, 0x0}]}, 0x14) 23:52:42 executing program 3: syz_open_procfs$namespace(0x0, &(0x7f00000004c0)='ns/cgroup\x00') 23:52:42 executing program 4: r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) listen(r0, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) connect(r1, &(0x7f0000931ff4)=@un=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) sendmsg$unix(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000100000001000000", @ANYRES64=r0], 0x18}, 0x0) accept$unix(r0, 0x0, 0x0) close(r0) r2 = socket$unix(0x1, 0x5, 0x0) close(r2) [ 88.670647][ T27] audit: type=1800 audit(1661298762.264:2): pid=4017 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.5" name="bus" dev="sda1" ino=1166 res=0 errno=0 [ 88.721214][ T4019] netlink: 'syz-executor.0': attribute type 4 has an invalid length. 23:52:42 executing program 3: syz_open_procfs$namespace(0x0, &(0x7f00000004c0)='ns/cgroup\x00') [ 88.812581][ T4019] netlink: 'syz-executor.0': attribute type 4 has an invalid length. [ 88.929667][ T4019] syz-executor.0 (4019) used greatest stack depth: 19928 bytes left 23:52:42 executing program 4: r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) listen(r0, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) connect(r1, &(0x7f0000931ff4)=@un=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) sendmsg$unix(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000100000001000000", @ANYRES64=r0], 0x18}, 0x0) accept$unix(r0, 0x0, 0x0) close(r0) r2 = socket$unix(0x1, 0x5, 0x0) close(r2) 23:52:42 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @fixed}, 0xe) getpeername(r0, 0x0, &(0x7f0000000000)) 23:52:42 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @fixed}, 0xe) getpeername(r0, 0x0, &(0x7f0000000000)) 23:52:43 executing program 5: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) socket$inet6(0xa, 0x3, 0x0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x1145042, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000001700)=0x4) r2 = dup(r0) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) syz_genetlink_get_family_id$nl80211(0x0, r1) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) bind$inet6(r3, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r3, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 23:52:43 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = dup(r0) setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @loopback}, 0xc) r2 = socket$netlink(0x10, 0x3, 0x0) writev(r2, &(0x7f0000000380)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r2, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000006040000000000f93132", 0x39}], 0x1) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f00000000c0)={@multicast1, @loopback=0x7f00000d, 0x1, 0x1, [@initdev={0xac, 0x1e, 0x0, 0x0}]}, 0x14) 23:52:43 executing program 3: r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) listen(r0, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) connect(r1, &(0x7f0000931ff4)=@un=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) sendmsg$unix(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000100000001000000", @ANYRES64=r0], 0x18}, 0x0) accept$unix(r0, 0x0, 0x0) close(r0) r2 = socket$unix(0x1, 0x5, 0x0) close(r2) 23:52:43 executing program 4: r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) listen(r0, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) connect(r1, &(0x7f0000931ff4)=@un=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) sendmsg$unix(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000100000001000000", @ANYRES64=r0], 0x18}, 0x0) accept$unix(r0, 0x0, 0x0) close(r0) r2 = socket$unix(0x1, 0x5, 0x0) close(r2) 23:52:43 executing program 4: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) socket$inet6(0xa, 0x3, 0x0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x1145042, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000001700)=0x4) r2 = dup(r0) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) syz_genetlink_get_family_id$nl80211(0x0, r1) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) bind$inet6(r3, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r3, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) [ 89.517309][ T4043] netlink: 'syz-executor.0': attribute type 4 has an invalid length. 23:52:43 executing program 3: r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) listen(r0, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) connect(r1, &(0x7f0000931ff4)=@un=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) sendmsg$unix(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000100000001000000", @ANYRES64=r0], 0x18}, 0x0) accept$unix(r0, 0x0, 0x0) close(r0) r2 = socket$unix(0x1, 0x5, 0x0) close(r2) [ 89.605508][ T27] audit: type=1800 audit(1661298763.194:3): pid=4052 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.5" name="bus" dev="sda1" ino=1161 res=0 errno=0 [ 89.698844][ T4050] netlink: 'syz-executor.0': attribute type 4 has an invalid length. 23:52:43 executing program 3: r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) listen(r0, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) connect(r1, &(0x7f0000931ff4)=@un=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) sendmsg$unix(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000100000001000000", @ANYRES64=r0], 0x18}, 0x0) accept$unix(r0, 0x0, 0x0) close(r0) r2 = socket$unix(0x1, 0x5, 0x0) close(r2) [ 89.746244][ T27] audit: type=1800 audit(1661298763.244:4): pid=4054 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="sda1" ino=1162 res=0 errno=0 23:52:43 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = dup(r0) setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @loopback}, 0xc) r2 = socket$netlink(0x10, 0x3, 0x0) writev(r2, &(0x7f0000000380)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r2, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000006040000000000f93132", 0x39}], 0x1) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f00000000c0)={@multicast1, @loopback=0x7f00000d, 0x1, 0x1, [@initdev={0xac, 0x1e, 0x0, 0x0}]}, 0x14) 23:52:43 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) socket$inet6(0xa, 0x3, 0x0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x1145042, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000001700)=0x4) r2 = dup(r0) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) syz_genetlink_get_family_id$nl80211(0x0, r1) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) bind$inet6(r3, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r3, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) [ 89.964268][ T4064] netlink: 'syz-executor.0': attribute type 4 has an invalid length. [ 90.068933][ T4064] netlink: 'syz-executor.0': attribute type 4 has an invalid length. [ 90.102299][ T27] audit: type=1800 audit(1661298763.694:5): pid=4068 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.3" name="bus" dev="sda1" ino=1177 res=0 errno=0 23:52:43 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @fixed}, 0xe) getpeername(r0, 0x0, &(0x7f0000000000)) 23:52:43 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @fixed}, 0xe) getpeername(r0, 0x0, &(0x7f0000000000)) 23:52:43 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = dup(r0) setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @loopback}, 0xc) r2 = socket$netlink(0x10, 0x3, 0x0) writev(r2, &(0x7f0000000380)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r2, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000006040000000000f93132", 0x39}], 0x1) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f00000000c0)={@multicast1, @loopback=0x7f00000d, 0x1, 0x1, [@initdev={0xac, 0x1e, 0x0, 0x0}]}, 0x14) [ 90.424808][ T4079] netlink: 'syz-executor.0': attribute type 4 has an invalid length. [ 90.545786][ T4080] netlink: 'syz-executor.0': attribute type 4 has an invalid length. 23:52:44 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) socket$inet6(0xa, 0x3, 0x0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x1145042, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000001700)=0x4) r2 = dup(r0) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) syz_genetlink_get_family_id$nl80211(0x0, r1) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) bind$inet6(r3, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r3, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 23:52:44 executing program 4: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) socket$inet6(0xa, 0x3, 0x0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x1145042, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000001700)=0x4) r2 = dup(r0) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) syz_genetlink_get_family_id$nl80211(0x0, r1) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) bind$inet6(r3, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r3, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 23:52:44 executing program 5: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) socket$inet6(0xa, 0x3, 0x0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x1145042, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000001700)=0x4) r2 = dup(r0) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) syz_genetlink_get_family_id$nl80211(0x0, r1) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) bind$inet6(r3, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r3, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) [ 90.852235][ T27] audit: type=1800 audit(1661298764.444:6): pid=4084 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=1161 res=0 errno=0 [ 91.038090][ T27] audit: type=1800 audit(1661298764.544:7): pid=4089 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="sda1" ino=1179 res=0 errno=0 23:52:44 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) socket$inet6(0xa, 0x3, 0x0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x1145042, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000001700)=0x4) r2 = dup(r0) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) syz_genetlink_get_family_id$nl80211(0x0, r1) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) bind$inet6(r3, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r3, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 23:52:44 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) socket$inet6(0xa, 0x3, 0x0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x1145042, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000001700)=0x4) r2 = dup(r0) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) syz_genetlink_get_family_id$nl80211(0x0, r1) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) bind$inet6(r3, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r3, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) [ 91.157432][ T27] audit: type=1800 audit(1661298764.674:8): pid=4096 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.5" name="bus" dev="sda1" ino=1184 res=0 errno=0 [ 91.360284][ T27] audit: type=1800 audit(1661298764.944:9): pid=4105 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=1185 res=0 errno=0 23:52:45 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) socket$inet6(0xa, 0x3, 0x0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x1145042, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000001700)=0x4) r2 = dup(r0) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) syz_genetlink_get_family_id$nl80211(0x0, r1) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) bind$inet6(r3, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r3, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) [ 91.615781][ T27] audit: type=1800 audit(1661298765.054:10): pid=4108 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=1186 res=0 errno=0 [ 91.798290][ T27] audit: type=1800 audit(1661298765.384:11): pid=4115 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.3" name="bus" dev="sda1" ino=1177 res=0 errno=0 23:52:45 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) socket$inet6(0xa, 0x3, 0x0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x1145042, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000001700)=0x4) r2 = dup(r0) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) syz_genetlink_get_family_id$nl80211(0x0, r1) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) bind$inet6(r3, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r3, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 23:52:45 executing program 4: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) socket$inet6(0xa, 0x3, 0x0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x1145042, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000001700)=0x4) r2 = dup(r0) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) syz_genetlink_get_family_id$nl80211(0x0, r1) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) bind$inet6(r3, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r3, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 23:52:46 executing program 5: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) socket$inet6(0xa, 0x3, 0x0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x1145042, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000001700)=0x4) r2 = dup(r0) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) syz_genetlink_get_family_id$nl80211(0x0, r1) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) bind$inet6(r3, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r3, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 23:52:46 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) socket$inet6(0xa, 0x3, 0x0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x1145042, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000001700)=0x4) r2 = dup(r0) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) syz_genetlink_get_family_id$nl80211(0x0, r1) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) bind$inet6(r3, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r3, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 23:52:46 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) socket$inet6(0xa, 0x3, 0x0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x1145042, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000001700)=0x4) r2 = dup(r0) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) syz_genetlink_get_family_id$nl80211(0x0, r1) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) bind$inet6(r3, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r3, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 23:52:46 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) socket$inet6(0xa, 0x3, 0x0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x1145042, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000001700)=0x4) r2 = dup(r0) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) syz_genetlink_get_family_id$nl80211(0x0, r1) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) bind$inet6(r3, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r3, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 23:52:47 executing program 4: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) socket$inet6(0xa, 0x3, 0x0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x1145042, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000001700)=0x4) r2 = dup(r0) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) syz_genetlink_get_family_id$nl80211(0x0, r1) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) bind$inet6(r3, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r3, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 23:52:47 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) socket$inet6(0xa, 0x3, 0x0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x1145042, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000001700)=0x4) r2 = dup(r0) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) syz_genetlink_get_family_id$nl80211(0x0, r1) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) bind$inet6(r3, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r3, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) [ 93.795450][ T27] kauditd_printk_skb: 6 callbacks suppressed [ 93.795465][ T27] audit: type=1800 audit(1661298767.384:18): pid=4160 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="sda1" ino=1178 res=0 errno=0 [ 94.028388][ T27] audit: type=1800 audit(1661298767.414:19): pid=4161 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=1179 res=0 errno=0 23:52:47 executing program 5: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) socket$inet6(0xa, 0x3, 0x0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x1145042, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000001700)=0x4) r2 = dup(r0) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) syz_genetlink_get_family_id$nl80211(0x0, r1) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) bind$inet6(r3, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r3, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 23:52:47 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) socket$inet6(0xa, 0x3, 0x0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x1145042, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000001700)=0x4) r2 = dup(r0) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) syz_genetlink_get_family_id$nl80211(0x0, r1) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) bind$inet6(r3, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r3, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) [ 94.279937][ T27] audit: type=1800 audit(1661298767.804:20): pid=4170 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.5" name="bus" dev="sda1" ino=1163 res=0 errno=0 23:52:48 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) socket$inet6(0xa, 0x3, 0x0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x1145042, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000001700)=0x4) r2 = dup(r0) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) syz_genetlink_get_family_id$nl80211(0x0, r1) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) bind$inet6(r3, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r3, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) [ 94.520458][ T27] audit: type=1800 audit(1661298767.954:21): pid=4175 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=1185 res=0 errno=0 23:52:48 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) socket$inet6(0xa, 0x3, 0x0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x1145042, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000001700)=0x4) r2 = dup(r0) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) syz_genetlink_get_family_id$nl80211(0x0, r1) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) bind$inet6(r3, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r3, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) [ 94.741703][ T27] audit: type=1800 audit(1661298768.264:22): pid=4181 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=1186 res=0 errno=0 [ 94.915800][ T27] audit: type=1800 audit(1661298768.474:23): pid=4187 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.3" name="bus" dev="sda1" ino=1177 res=0 errno=0 23:52:48 executing program 4: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) socket$inet6(0xa, 0x3, 0x0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x1145042, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000001700)=0x4) r2 = dup(r0) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) syz_genetlink_get_family_id$nl80211(0x0, r1) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) bind$inet6(r3, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r3, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 23:52:48 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) socket$inet6(0xa, 0x3, 0x0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x1145042, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000001700)=0x4) r2 = dup(r0) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) syz_genetlink_get_family_id$nl80211(0x0, r1) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) bind$inet6(r3, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r3, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) [ 95.207071][ T27] audit: type=1800 audit(1661298768.794:24): pid=4193 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="sda1" ino=1178 res=0 errno=0 [ 95.402354][ T27] audit: type=1800 audit(1661298768.994:25): pid=4199 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=1179 res=0 errno=0 23:52:49 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) socket$inet6(0xa, 0x3, 0x0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x1145042, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000001700)=0x4) r2 = dup(r0) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) syz_genetlink_get_family_id$nl80211(0x0, r1) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) bind$inet6(r3, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r3, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 23:52:49 executing program 5: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) socket$inet6(0xa, 0x3, 0x0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x1145042, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000001700)=0x4) r2 = dup(r0) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) syz_genetlink_get_family_id$nl80211(0x0, r1) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) bind$inet6(r3, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r3, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 23:52:49 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = dup(r0) setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @loopback}, 0xc) r2 = socket$netlink(0x10, 0x3, 0x0) writev(r2, &(0x7f0000000380)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r2, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000006040000000000f93132", 0x39}], 0x1) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f00000000c0)={@multicast1, @loopback=0x7f00000d, 0x1, 0x1, [@initdev={0xac, 0x1e, 0x0, 0x0}]}, 0x14) [ 95.863023][ T27] audit: type=1800 audit(1661298769.454:26): pid=4205 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=1163 res=0 errno=0 [ 95.996901][ T27] audit: type=1800 audit(1661298769.584:27): pid=4211 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.5" name="bus" dev="sda1" ino=1185 res=0 errno=0 [ 96.057798][ T4213] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 96.147660][ T4215] netlink: 'syz-executor.2': attribute type 4 has an invalid length. 23:52:49 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) socket$inet6(0xa, 0x3, 0x0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x1145042, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000001700)=0x4) r2 = dup(r0) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) syz_genetlink_get_family_id$nl80211(0x0, r1) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) bind$inet6(r3, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r3, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 23:52:49 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = dup(r0) setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @loopback}, 0xc) r2 = socket$netlink(0x10, 0x3, 0x0) writev(r2, &(0x7f0000000380)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r2, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000006040000000000f93132", 0x39}], 0x1) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f00000000c0)={@multicast1, @loopback=0x7f00000d, 0x1, 0x1, [@initdev={0xac, 0x1e, 0x0, 0x0}]}, 0x14) 23:52:50 executing program 4: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) socket$inet6(0xa, 0x3, 0x0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x1145042, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000001700)=0x4) r2 = dup(r0) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) syz_genetlink_get_family_id$nl80211(0x0, r1) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) bind$inet6(r3, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r3, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) [ 96.487233][ T4224] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 96.726904][ T4229] netlink: 'syz-executor.2': attribute type 4 has an invalid length. 23:52:50 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = dup(r0) setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @loopback}, 0xc) r2 = socket$netlink(0x10, 0x3, 0x0) writev(r2, &(0x7f0000000380)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r2, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000006040000000000f93132", 0x39}], 0x1) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f00000000c0)={@multicast1, @loopback=0x7f00000d, 0x1, 0x1, [@initdev={0xac, 0x1e, 0x0, 0x0}]}, 0x14) 23:52:50 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) socket$inet6(0xa, 0x3, 0x0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x1145042, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000001700)=0x4) r2 = dup(r0) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) syz_genetlink_get_family_id$nl80211(0x0, r1) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) bind$inet6(r3, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r3, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) [ 97.007188][ T4235] netlink: 'syz-executor.2': attribute type 4 has an invalid length. 23:52:50 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) socket$inet6(0xa, 0x3, 0x0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x1145042, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000001700)=0x4) r2 = dup(r0) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) syz_genetlink_get_family_id$nl80211(0x0, r1) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) bind$inet6(r3, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r3, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) [ 97.091471][ T4235] netlink: 'syz-executor.2': attribute type 4 has an invalid length. 23:52:50 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = dup(r0) setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @loopback}, 0xc) r2 = socket$netlink(0x10, 0x3, 0x0) writev(r2, &(0x7f0000000380)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r2, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000006040000000000f93132", 0x39}], 0x1) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f00000000c0)={@multicast1, @loopback=0x7f00000d, 0x1, 0x1, [@initdev={0xac, 0x1e, 0x0, 0x0}]}, 0x14) 23:52:50 executing program 5: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) socket$inet6(0xa, 0x3, 0x0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x1145042, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000001700)=0x4) r2 = dup(r0) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) syz_genetlink_get_family_id$nl80211(0x0, r1) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) bind$inet6(r3, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r3, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) [ 97.330630][ T4246] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 97.427656][ T4249] netlink: 'syz-executor.2': attribute type 4 has an invalid length. 23:52:51 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = dup(r0) setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @loopback}, 0xc) r2 = socket$netlink(0x10, 0x3, 0x0) writev(r2, &(0x7f0000000380)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r2, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000006040000000000f93132", 0x39}], 0x1) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f00000000c0)={@multicast1, @loopback=0x7f00000d, 0x1, 0x1, [@initdev={0xac, 0x1e, 0x0, 0x0}]}, 0x14) 23:52:51 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) socket$inet6(0xa, 0x3, 0x0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x1145042, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000001700)=0x4) r2 = dup(r0) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) syz_genetlink_get_family_id$nl80211(0x0, r1) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) bind$inet6(r3, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r3, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) [ 97.817965][ T4259] netlink: 'syz-executor.2': attribute type 4 has an invalid length. 23:52:51 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = dup(r0) setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @loopback}, 0xc) r2 = socket$netlink(0x10, 0x3, 0x0) writev(r2, &(0x7f0000000380)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r2, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000006040000000000f93132", 0x39}], 0x1) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f00000000c0)={@multicast1, @loopback=0x7f00000d, 0x1, 0x1, [@initdev={0xac, 0x1e, 0x0, 0x0}]}, 0x14) [ 98.006311][ T4262] netlink: 'syz-executor.2': attribute type 4 has an invalid length. 23:52:51 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = dup(r0) setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @loopback}, 0xc) r2 = socket$netlink(0x10, 0x3, 0x0) writev(r2, &(0x7f0000000380)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r2, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000006040000000000f93132", 0x39}], 0x1) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f00000000c0)={@multicast1, @loopback=0x7f00000d, 0x1, 0x1, [@initdev={0xac, 0x1e, 0x0, 0x0}]}, 0x14) 23:52:51 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = dup(r0) setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @loopback}, 0xc) r2 = socket$netlink(0x10, 0x3, 0x0) writev(r2, &(0x7f0000000380)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r2, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000006040000000000f93132", 0x39}], 0x1) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f00000000c0)={@multicast1, @loopback=0x7f00000d, 0x1, 0x1, [@initdev={0xac, 0x1e, 0x0, 0x0}]}, 0x14) 23:52:52 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = dup(r0) setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @loopback}, 0xc) r2 = socket$netlink(0x10, 0x3, 0x0) writev(r2, &(0x7f0000000380)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r2, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000006040000000000f93132", 0x39}], 0x1) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f00000000c0)={@multicast1, @loopback=0x7f00000d, 0x1, 0x1, [@initdev={0xac, 0x1e, 0x0, 0x0}]}, 0x14) 23:52:52 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) socket$inet6(0xa, 0x3, 0x0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x1145042, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000001700)=0x4) r2 = dup(r0) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) syz_genetlink_get_family_id$nl80211(0x0, r1) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) bind$inet6(r3, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r3, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 23:52:52 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = dup(r0) setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @loopback}, 0xc) r2 = socket$netlink(0x10, 0x3, 0x0) writev(r2, &(0x7f0000000380)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r2, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000006040000000000f93132", 0x39}], 0x1) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f00000000c0)={@multicast1, @loopback=0x7f00000d, 0x1, 0x1, [@initdev={0xac, 0x1e, 0x0, 0x0}]}, 0x14) 23:52:52 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) socket$inet6(0xa, 0x3, 0x0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x1145042, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000001700)=0x4) r2 = dup(r0) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) syz_genetlink_get_family_id$nl80211(0x0, r1) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) bind$inet6(r3, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r3, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 23:52:52 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = dup(r0) setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @loopback}, 0xc) r2 = socket$netlink(0x10, 0x3, 0x0) writev(r2, &(0x7f0000000380)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r2, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000006040000000000f93132", 0x39}], 0x1) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f00000000c0)={@multicast1, @loopback=0x7f00000d, 0x1, 0x1, [@initdev={0xac, 0x1e, 0x0, 0x0}]}, 0x14) 23:52:52 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = dup(r0) setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @loopback}, 0xc) r2 = socket$netlink(0x10, 0x3, 0x0) writev(r2, &(0x7f0000000380)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r2, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000006040000000000f93132", 0x39}], 0x1) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f00000000c0)={@multicast1, @loopback=0x7f00000d, 0x1, 0x1, [@initdev={0xac, 0x1e, 0x0, 0x0}]}, 0x14) [ 98.940193][ T27] kauditd_printk_skb: 7 callbacks suppressed [ 98.940208][ T27] audit: type=1800 audit(1661298772.534:35): pid=4291 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=1165 res=0 errno=0 23:52:52 executing program 5: r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) listen(r0, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) connect(r1, &(0x7f0000931ff4)=@un=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) sendmsg$unix(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000100000001000000", @ANYRES64=r0], 0x18}, 0x0) accept$unix(r0, 0x0, 0x0) close(r0) r2 = socket$unix(0x1, 0x5, 0x0) close(r2) 23:52:52 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = dup(r0) setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @loopback}, 0xc) r2 = socket$netlink(0x10, 0x3, 0x0) writev(r2, &(0x7f0000000380)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r2, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000006040000000000f93132", 0x39}], 0x1) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f00000000c0)={@multicast1, @loopback=0x7f00000d, 0x1, 0x1, [@initdev={0xac, 0x1e, 0x0, 0x0}]}, 0x14) 23:52:52 executing program 5: r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) listen(r0, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) connect(r1, &(0x7f0000931ff4)=@un=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) sendmsg$unix(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000100000001000000", @ANYRES64=r0], 0x18}, 0x0) accept$unix(r0, 0x0, 0x0) close(r0) r2 = socket$unix(0x1, 0x5, 0x0) close(r2) 23:52:52 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = dup(r0) setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @loopback}, 0xc) r2 = socket$netlink(0x10, 0x3, 0x0) writev(r2, &(0x7f0000000380)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r2, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000006040000000000f93132", 0x39}], 0x1) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f00000000c0)={@multicast1, @loopback=0x7f00000d, 0x1, 0x1, [@initdev={0xac, 0x1e, 0x0, 0x0}]}, 0x14) 23:52:52 executing program 3: r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) listen(r0, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) connect(r1, &(0x7f0000931ff4)=@un=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) sendmsg$unix(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000100000001000000", @ANYRES64=r0], 0x18}, 0x0) accept$unix(r0, 0x0, 0x0) close(r0) r2 = socket$unix(0x1, 0x5, 0x0) close(r2) 23:52:53 executing program 2: r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) listen(r0, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) connect(r1, &(0x7f0000931ff4)=@un=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) sendmsg$unix(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000100000001000000", @ANYRES64=r0], 0x18}, 0x0) accept$unix(r0, 0x0, 0x0) close(r0) r2 = socket$unix(0x1, 0x5, 0x0) close(r2) 23:52:53 executing program 5: r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) listen(r0, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) connect(r1, &(0x7f0000931ff4)=@un=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) sendmsg$unix(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000100000001000000", @ANYRES64=r0], 0x18}, 0x0) accept$unix(r0, 0x0, 0x0) close(r0) r2 = socket$unix(0x1, 0x5, 0x0) close(r2) 23:52:53 executing program 2: r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) listen(r0, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) connect(r1, &(0x7f0000931ff4)=@un=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) sendmsg$unix(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000100000001000000", @ANYRES64=r0], 0x18}, 0x0) accept$unix(r0, 0x0, 0x0) close(r0) r2 = socket$unix(0x1, 0x5, 0x0) close(r2) 23:52:53 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = dup(r0) setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @loopback}, 0xc) r2 = socket$netlink(0x10, 0x3, 0x0) writev(r2, &(0x7f0000000380)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r2, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000006040000000000f93132", 0x39}], 0x1) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f00000000c0)={@multicast1, @loopback=0x7f00000d, 0x1, 0x1, [@initdev={0xac, 0x1e, 0x0, 0x0}]}, 0x14) 23:52:53 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4040, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) fadvise64(r0, 0x1000, 0x593, 0x4) 23:52:53 executing program 3: r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) listen(r0, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) connect(r1, &(0x7f0000931ff4)=@un=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) sendmsg$unix(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000100000001000000", @ANYRES64=r0], 0x18}, 0x0) accept$unix(r0, 0x0, 0x0) close(r0) r2 = socket$unix(0x1, 0x5, 0x0) close(r2) 23:52:53 executing program 0: r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) listen(r0, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) connect(r1, &(0x7f0000931ff4)=@un=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) sendmsg$unix(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000100000001000000", @ANYRES64=r0], 0x18}, 0x0) accept$unix(r0, 0x0, 0x0) close(r0) r2 = socket$unix(0x1, 0x5, 0x0) close(r2) 23:52:53 executing program 2: r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) listen(r0, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) connect(r1, &(0x7f0000931ff4)=@un=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) sendmsg$unix(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000100000001000000", @ANYRES64=r0], 0x18}, 0x0) accept$unix(r0, 0x0, 0x0) close(r0) r2 = socket$unix(0x1, 0x5, 0x0) close(r2) 23:52:53 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWSET={0x48, 0x9, 0xa, 0x6234f84c1300dfc9, 0x0, 0x0, {}, [@NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x28}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_DESC={0xc, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x8, 0x2, 0x0, 0x1, [{0x4, 0x2}]}]}]}], {0x14}}, 0x70}}, 0x0) 23:52:53 executing program 5: r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) listen(r0, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) connect(r1, &(0x7f0000931ff4)=@un=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) sendmsg$unix(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000100000001000000", @ANYRES64=r0], 0x18}, 0x0) accept$unix(r0, 0x0, 0x0) close(r0) r2 = socket$unix(0x1, 0x5, 0x0) close(r2) 23:52:53 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4040, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) fadvise64(r0, 0x1000, 0x593, 0x4) 23:52:53 executing program 0: r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) listen(r0, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) connect(r1, &(0x7f0000931ff4)=@un=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) sendmsg$unix(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000100000001000000", @ANYRES64=r0], 0x18}, 0x0) accept$unix(r0, 0x0, 0x0) close(r0) r2 = socket$unix(0x1, 0x5, 0x0) close(r2) 23:52:53 executing program 3: r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) listen(r0, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) connect(r1, &(0x7f0000931ff4)=@un=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) sendmsg$unix(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000100000001000000", @ANYRES64=r0], 0x18}, 0x0) accept$unix(r0, 0x0, 0x0) close(r0) r2 = socket$unix(0x1, 0x5, 0x0) close(r2) 23:52:53 executing program 2: openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4040, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) fadvise64(r0, 0x1000, 0x593, 0x4) [ 99.995956][ T27] audit: type=1800 audit(1661298773.584:36): pid=4329 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.4" name="file0" dev="sda1" ino=1180 res=0 errno=0 23:52:53 executing program 5: r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) listen(r0, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) connect(r1, &(0x7f0000931ff4)=@un=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) sendmsg$unix(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000100000001000000", @ANYRES64=r0], 0x18}, 0x0) accept$unix(r0, 0x0, 0x0) close(r0) r2 = socket$unix(0x1, 0x5, 0x0) close(r2) 23:52:53 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWSET={0x48, 0x9, 0xa, 0x6234f84c1300dfc9, 0x0, 0x0, {}, [@NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x28}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_DESC={0xc, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x8, 0x2, 0x0, 0x1, [{0x4, 0x2}]}]}]}], {0x14}}, 0x70}}, 0x0) 23:52:53 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4040, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) fadvise64(r0, 0x1000, 0x593, 0x4) 23:52:53 executing program 2: openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4040, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) fadvise64(r0, 0x1000, 0x593, 0x4) [ 100.108082][ T27] audit: type=1800 audit(1661298773.694:37): pid=4341 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.4" name="file0" dev="sda1" ino=1181 res=0 errno=0 23:52:53 executing program 0: r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) listen(r0, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) connect(r1, &(0x7f0000931ff4)=@un=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) sendmsg$unix(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000100000001000000", @ANYRES64=r0], 0x18}, 0x0) accept$unix(r0, 0x0, 0x0) close(r0) r2 = socket$unix(0x1, 0x5, 0x0) close(r2) 23:52:53 executing program 5: r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) listen(r0, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) connect(r1, &(0x7f0000931ff4)=@un=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) sendmsg$unix(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000100000001000000", @ANYRES64=r0], 0x18}, 0x0) accept$unix(r0, 0x0, 0x0) close(r0) r2 = socket$unix(0x1, 0x5, 0x0) close(r2) 23:52:53 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4040, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) fadvise64(r0, 0x1000, 0x593, 0x4) 23:52:53 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWSET={0x48, 0x9, 0xa, 0x6234f84c1300dfc9, 0x0, 0x0, {}, [@NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x28}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_DESC={0xc, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x8, 0x2, 0x0, 0x1, [{0x4, 0x2}]}]}]}], {0x14}}, 0x70}}, 0x0) [ 100.198380][ T27] audit: type=1800 audit(1661298773.724:38): pid=4337 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.2" name="file0" dev="sda1" ino=1175 res=0 errno=0 23:52:53 executing program 2: openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4040, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) fadvise64(r0, 0x1000, 0x593, 0x4) 23:52:53 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4040, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) fadvise64(r0, 0x1000, 0x593, 0x4) 23:52:53 executing program 5: unshare(0x20000400) r0 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r0, &(0x7f0000000040)) 23:52:53 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4040, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) fadvise64(r0, 0x1000, 0x593, 0x4) 23:52:53 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) sched_setscheduler(0x0, 0x3, &(0x7f00000000c0)=0x8ca) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f00000001c0)={0x0, 0xb, &(0x7f0000000180)=[{&(0x7f0000002f00)={0x14, 0x28, 0x1, 0x0, 0x0, "", [@nested={0x4}]}, 0x14}], 0x1}, 0x0) [ 100.302390][ T27] audit: type=1800 audit(1661298773.824:39): pid=4350 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.2" name="file0" dev="sda1" ino=1165 res=0 errno=0 23:52:53 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWSET={0x48, 0x9, 0xa, 0x6234f84c1300dfc9, 0x0, 0x0, {}, [@NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x28}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_DESC={0xc, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x8, 0x2, 0x0, 0x1, [{0x4, 0x2}]}]}]}], {0x14}}, 0x70}}, 0x0) 23:52:53 executing program 5: unshare(0x20000400) r0 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r0, &(0x7f0000000040)) 23:52:54 executing program 2: unshare(0x20000400) r0 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r0, &(0x7f0000000040)) 23:52:54 executing program 4: unshare(0x20000400) r0 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r0, &(0x7f0000000040)) 23:52:54 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4040, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) fadvise64(r0, 0x1000, 0x593, 0x4) [ 100.398235][ T27] audit: type=1800 audit(1661298773.844:40): pid=4349 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.4" name="file0" dev="sda1" ino=1174 res=0 errno=0 23:52:54 executing program 2: unshare(0x20000400) r0 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r0, &(0x7f0000000040)) 23:52:54 executing program 5: unshare(0x20000400) r0 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r0, &(0x7f0000000040)) 23:52:54 executing program 1: r0 = semget$private(0x0, 0x2, 0x0) semtimedop(r0, &(0x7f00000002c0)=[{0x0, 0xffff}], 0x1, &(0x7f0000000300)) [ 100.528599][ T27] audit: type=1800 audit(1661298773.844:41): pid=4355 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.3" name="file0" dev="sda1" ino=1180 res=0 errno=0 23:52:54 executing program 4: unshare(0x20000400) r0 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r0, &(0x7f0000000040)) 23:52:54 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x9, 0x4, 0x1, 0xb, 0x0, 0x1}, 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000240)={0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x1, r0}, 0x38) 23:52:54 executing program 1: r0 = semget$private(0x0, 0x2, 0x0) semtimedop(r0, &(0x7f00000002c0)=[{0x0, 0xffff}], 0x1, &(0x7f0000000300)) [ 100.661360][ T27] audit: type=1800 audit(1661298773.964:42): pid=4362 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.2" name="file0" dev="sda1" ino=1173 res=0 errno=0 [ 100.742438][ T27] audit: type=1800 audit(1661298773.984:43): pid=4363 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.4" name="file0" dev="sda1" ino=1159 res=0 errno=0 [ 100.793818][ T27] audit: type=1800 audit(1661298774.004:44): pid=4367 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.3" name="file0" dev="sda1" ino=1175 res=0 errno=0 23:52:54 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) sched_setscheduler(0x0, 0x3, &(0x7f00000000c0)=0x8ca) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f00000001c0)={0x0, 0xb, &(0x7f0000000180)=[{&(0x7f0000002f00)={0x14, 0x28, 0x1, 0x0, 0x0, "", [@nested={0x4}]}, 0x14}], 0x1}, 0x0) 23:52:54 executing program 2: unshare(0x20000400) r0 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r0, &(0x7f0000000040)) 23:52:54 executing program 4: unshare(0x20000400) r0 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r0, &(0x7f0000000040)) 23:52:54 executing program 5: unshare(0x20000400) r0 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r0, &(0x7f0000000040)) 23:52:54 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x9, 0x4, 0x1, 0xb, 0x0, 0x1}, 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000240)={0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x1, r0}, 0x38) 23:52:54 executing program 1: r0 = semget$private(0x0, 0x2, 0x0) semtimedop(r0, &(0x7f00000002c0)=[{0x0, 0xffff}], 0x1, &(0x7f0000000300)) 23:52:54 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x9, 0x4, 0x1, 0xb, 0x0, 0x1}, 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000240)={0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x1, r0}, 0x38) 23:52:54 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) sched_setscheduler(0x0, 0x3, &(0x7f00000000c0)=0x8ca) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f00000001c0)={0x0, 0xb, &(0x7f0000000180)=[{&(0x7f0000002f00)={0x14, 0x28, 0x1, 0x0, 0x0, "", [@nested={0x4}]}, 0x14}], 0x1}, 0x0) 23:52:54 executing program 4: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) sched_setscheduler(0x0, 0x3, &(0x7f00000000c0)=0x8ca) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f00000001c0)={0x0, 0xb, &(0x7f0000000180)=[{&(0x7f0000002f00)={0x14, 0x28, 0x1, 0x0, 0x0, "", [@nested={0x4}]}, 0x14}], 0x1}, 0x0) 23:52:54 executing program 1: r0 = semget$private(0x0, 0x2, 0x0) semtimedop(r0, &(0x7f00000002c0)=[{0x0, 0xffff}], 0x1, &(0x7f0000000300)) 23:52:54 executing program 5: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) sched_setscheduler(0x0, 0x3, &(0x7f00000000c0)=0x8ca) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f00000001c0)={0x0, 0xb, &(0x7f0000000180)=[{&(0x7f0000002f00)={0x14, 0x28, 0x1, 0x0, 0x0, "", [@nested={0x4}]}, 0x14}], 0x1}, 0x0) 23:52:55 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x9, 0x4, 0x1, 0xb, 0x0, 0x1}, 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000240)={0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x1, r0}, 0x38) 23:52:55 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) sched_setscheduler(0x0, 0x3, &(0x7f00000000c0)=0x8ca) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f00000001c0)={0x0, 0xb, &(0x7f0000000180)=[{&(0x7f0000002f00)={0x14, 0x28, 0x1, 0x0, 0x0, "", [@nested={0x4}]}, 0x14}], 0x1}, 0x0) 23:52:55 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x9, 0x4, 0x1, 0xb, 0x0, 0x1}, 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000240)={0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x1, r0}, 0x38) 23:52:55 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) sched_setscheduler(0x0, 0x3, &(0x7f00000000c0)=0x8ca) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f00000001c0)={0x0, 0xb, &(0x7f0000000180)=[{&(0x7f0000002f00)={0x14, 0x28, 0x1, 0x0, 0x0, "", [@nested={0x4}]}, 0x14}], 0x1}, 0x0) 23:52:56 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x9, 0x4, 0x1, 0xb, 0x0, 0x1}, 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000240)={0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x1, r0}, 0x38) 23:52:56 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x9, 0x4, 0x1, 0xb, 0x0, 0x1}, 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000240)={0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x1, r0}, 0x38) 23:52:56 executing program 3: r0 = semget$private(0x0, 0x2, 0x0) semtimedop(r0, &(0x7f00000002c0)=[{0x0, 0xffff}], 0x1, &(0x7f0000000300)) 23:52:56 executing program 5: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) sched_setscheduler(0x0, 0x3, &(0x7f00000000c0)=0x8ca) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f00000001c0)={0x0, 0xb, &(0x7f0000000180)=[{&(0x7f0000002f00)={0x14, 0x28, 0x1, 0x0, 0x0, "", [@nested={0x4}]}, 0x14}], 0x1}, 0x0) 23:52:56 executing program 4: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) sched_setscheduler(0x0, 0x3, &(0x7f00000000c0)=0x8ca) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f00000001c0)={0x0, 0xb, &(0x7f0000000180)=[{&(0x7f0000002f00)={0x14, 0x28, 0x1, 0x0, 0x0, "", [@nested={0x4}]}, 0x14}], 0x1}, 0x0) 23:52:56 executing program 3: r0 = semget$private(0x0, 0x2, 0x0) semtimedop(r0, &(0x7f00000002c0)=[{0x0, 0xffff}], 0x1, &(0x7f0000000300)) 23:52:56 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) sched_setscheduler(0x0, 0x3, &(0x7f00000000c0)=0x8ca) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f00000001c0)={0x0, 0xb, &(0x7f0000000180)=[{&(0x7f0000002f00)={0x14, 0x28, 0x1, 0x0, 0x0, "", [@nested={0x4}]}, 0x14}], 0x1}, 0x0) 23:52:56 executing program 3: r0 = semget$private(0x0, 0x2, 0x0) semtimedop(r0, &(0x7f00000002c0)=[{0x0, 0xffff}], 0x1, &(0x7f0000000300)) 23:52:56 executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x3, &(0x7f00000002c0)=@framed, &(0x7f0000000040)='syzkaller\x00', 0x1, 0x9f, &(0x7f00000000c0)=""/159, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x16, 0x0, 0xf9, 0x8}, 0x48) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000000)={r0, r1}, 0xc) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x16, 0x0, 0xf9, 0x8}, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x16, 0x0, 0xf9, 0x8}, 0x48) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000200)={r0, r3}, 0xc) r4 = dup2(r2, r1) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000180)={r0, r4}, 0xc) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000780)={r0, r2}, 0xc) 23:52:57 executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x3, &(0x7f00000002c0)=@framed, &(0x7f0000000040)='syzkaller\x00', 0x1, 0x9f, &(0x7f00000000c0)=""/159, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x16, 0x0, 0xf9, 0x8}, 0x48) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000000)={r0, r1}, 0xc) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x16, 0x0, 0xf9, 0x8}, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x16, 0x0, 0xf9, 0x8}, 0x48) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000200)={r0, r3}, 0xc) r4 = dup2(r2, r1) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000180)={r0, r4}, 0xc) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000780)={r0, r2}, 0xc) 23:52:57 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) sched_setscheduler(0x0, 0x3, &(0x7f00000000c0)=0x8ca) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f00000001c0)={0x0, 0xb, &(0x7f0000000180)=[{&(0x7f0000002f00)={0x14, 0x28, 0x1, 0x0, 0x0, "", [@nested={0x4}]}, 0x14}], 0x1}, 0x0) 23:52:57 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) sched_setscheduler(0x0, 0x3, &(0x7f00000000c0)=0x8ca) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f00000001c0)={0x0, 0xb, &(0x7f0000000180)=[{&(0x7f0000002f00)={0x14, 0x28, 0x1, 0x0, 0x0, "", [@nested={0x4}]}, 0x14}], 0x1}, 0x0) 23:52:57 executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x3, &(0x7f00000002c0)=@framed, &(0x7f0000000040)='syzkaller\x00', 0x1, 0x9f, &(0x7f00000000c0)=""/159, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x16, 0x0, 0xf9, 0x8}, 0x48) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000000)={r0, r1}, 0xc) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x16, 0x0, 0xf9, 0x8}, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x16, 0x0, 0xf9, 0x8}, 0x48) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000200)={r0, r3}, 0xc) r4 = dup2(r2, r1) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000180)={r0, r4}, 0xc) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000780)={r0, r2}, 0xc) 23:52:57 executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x3, &(0x7f00000002c0)=@framed, &(0x7f0000000040)='syzkaller\x00', 0x1, 0x9f, &(0x7f00000000c0)=""/159, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x16, 0x0, 0xf9, 0x8}, 0x48) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000000)={r0, r1}, 0xc) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x16, 0x0, 0xf9, 0x8}, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x16, 0x0, 0xf9, 0x8}, 0x48) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000200)={r0, r3}, 0xc) r4 = dup2(r2, r1) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000180)={r0, r4}, 0xc) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000780)={r0, r2}, 0xc) 23:52:57 executing program 4: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) sched_setscheduler(0x0, 0x3, &(0x7f00000000c0)=0x8ca) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f00000001c0)={0x0, 0xb, &(0x7f0000000180)=[{&(0x7f0000002f00)={0x14, 0x28, 0x1, 0x0, 0x0, "", [@nested={0x4}]}, 0x14}], 0x1}, 0x0) 23:52:58 executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x3, &(0x7f00000002c0)=@framed, &(0x7f0000000040)='syzkaller\x00', 0x1, 0x9f, &(0x7f00000000c0)=""/159, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x16, 0x0, 0xf9, 0x8}, 0x48) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000000)={r0, r1}, 0xc) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x16, 0x0, 0xf9, 0x8}, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x16, 0x0, 0xf9, 0x8}, 0x48) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000200)={r0, r3}, 0xc) r4 = dup2(r2, r1) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000180)={r0, r4}, 0xc) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000780)={r0, r2}, 0xc) 23:52:58 executing program 5: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) sched_setscheduler(0x0, 0x3, &(0x7f00000000c0)=0x8ca) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f00000001c0)={0x0, 0xb, &(0x7f0000000180)=[{&(0x7f0000002f00)={0x14, 0x28, 0x1, 0x0, 0x0, "", [@nested={0x4}]}, 0x14}], 0x1}, 0x0) 23:52:58 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) sched_setscheduler(0x0, 0x3, &(0x7f00000000c0)=0x8ca) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f00000001c0)={0x0, 0xb, &(0x7f0000000180)=[{&(0x7f0000002f00)={0x14, 0x28, 0x1, 0x0, 0x0, "", [@nested={0x4}]}, 0x14}], 0x1}, 0x0) 23:52:58 executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x3, &(0x7f00000002c0)=@framed, &(0x7f0000000040)='syzkaller\x00', 0x1, 0x9f, &(0x7f00000000c0)=""/159, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x16, 0x0, 0xf9, 0x8}, 0x48) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000000)={r0, r1}, 0xc) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x16, 0x0, 0xf9, 0x8}, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x16, 0x0, 0xf9, 0x8}, 0x48) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000200)={r0, r3}, 0xc) r4 = dup2(r2, r1) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000180)={r0, r4}, 0xc) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000780)={r0, r2}, 0xc) 23:52:58 executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x3, &(0x7f00000002c0)=@framed, &(0x7f0000000040)='syzkaller\x00', 0x1, 0x9f, &(0x7f00000000c0)=""/159, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x16, 0x0, 0xf9, 0x8}, 0x48) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000000)={r0, r1}, 0xc) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x16, 0x0, 0xf9, 0x8}, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x16, 0x0, 0xf9, 0x8}, 0x48) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000200)={r0, r3}, 0xc) r4 = dup2(r2, r1) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000180)={r0, r4}, 0xc) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000780)={r0, r2}, 0xc) 23:52:58 executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x3, &(0x7f00000002c0)=@framed, &(0x7f0000000040)='syzkaller\x00', 0x1, 0x9f, &(0x7f00000000c0)=""/159, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x16, 0x0, 0xf9, 0x8}, 0x48) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000000)={r0, r1}, 0xc) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x16, 0x0, 0xf9, 0x8}, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x16, 0x0, 0xf9, 0x8}, 0x48) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000200)={r0, r3}, 0xc) r4 = dup2(r2, r1) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000180)={r0, r4}, 0xc) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000780)={r0, r2}, 0xc) 23:52:58 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) sched_setscheduler(0x0, 0x3, &(0x7f00000000c0)=0x8ca) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f00000001c0)={0x0, 0xb, &(0x7f0000000180)=[{&(0x7f0000002f00)={0x14, 0x28, 0x1, 0x0, 0x0, "", [@nested={0x4}]}, 0x14}], 0x1}, 0x0) 23:52:58 executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x3, &(0x7f00000002c0)=@framed, &(0x7f0000000040)='syzkaller\x00', 0x1, 0x9f, &(0x7f00000000c0)=""/159, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x16, 0x0, 0xf9, 0x8}, 0x48) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000000)={r0, r1}, 0xc) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x16, 0x0, 0xf9, 0x8}, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x16, 0x0, 0xf9, 0x8}, 0x48) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000200)={r0, r3}, 0xc) r4 = dup2(r2, r1) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000180)={r0, r4}, 0xc) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000780)={r0, r2}, 0xc) 23:52:59 executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x3, &(0x7f00000002c0)=@framed, &(0x7f0000000040)='syzkaller\x00', 0x1, 0x9f, &(0x7f00000000c0)=""/159, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x16, 0x0, 0xf9, 0x8}, 0x48) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000000)={r0, r1}, 0xc) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x16, 0x0, 0xf9, 0x8}, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x16, 0x0, 0xf9, 0x8}, 0x48) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000200)={r0, r3}, 0xc) r4 = dup2(r2, r1) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000180)={r0, r4}, 0xc) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000780)={r0, r2}, 0xc) 23:52:59 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x3, &(0x7f00000002c0)=@framed, &(0x7f0000000040)='syzkaller\x00', 0x1, 0x9f, &(0x7f00000000c0)=""/159, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x16, 0x0, 0xf9, 0x8}, 0x48) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000000)={r0, r1}, 0xc) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x16, 0x0, 0xf9, 0x8}, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x16, 0x0, 0xf9, 0x8}, 0x48) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000200)={r0, r3}, 0xc) r4 = dup2(r2, r1) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000180)={r0, r4}, 0xc) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000780)={r0, r2}, 0xc) 23:52:59 executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x3, &(0x7f00000002c0)=@framed, &(0x7f0000000040)='syzkaller\x00', 0x1, 0x9f, &(0x7f00000000c0)=""/159, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x16, 0x0, 0xf9, 0x8}, 0x48) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000000)={r0, r1}, 0xc) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x16, 0x0, 0xf9, 0x8}, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x16, 0x0, 0xf9, 0x8}, 0x48) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000200)={r0, r3}, 0xc) r4 = dup2(r2, r1) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000180)={r0, r4}, 0xc) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000780)={r0, r2}, 0xc) 23:52:59 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x3, &(0x7f00000002c0)=@framed, &(0x7f0000000040)='syzkaller\x00', 0x1, 0x9f, &(0x7f00000000c0)=""/159, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x16, 0x0, 0xf9, 0x8}, 0x48) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000000)={r0, r1}, 0xc) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x16, 0x0, 0xf9, 0x8}, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x16, 0x0, 0xf9, 0x8}, 0x48) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000200)={r0, r3}, 0xc) r4 = dup2(r2, r1) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000180)={r0, r4}, 0xc) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000780)={r0, r2}, 0xc) 23:52:59 executing program 4: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x3, &(0x7f00000002c0)=@framed, &(0x7f0000000040)='syzkaller\x00', 0x1, 0x9f, &(0x7f00000000c0)=""/159, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x16, 0x0, 0xf9, 0x8}, 0x48) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000000)={r0, r1}, 0xc) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x16, 0x0, 0xf9, 0x8}, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x16, 0x0, 0xf9, 0x8}, 0x48) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000200)={r0, r3}, 0xc) r4 = dup2(r2, r1) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000180)={r0, r4}, 0xc) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000780)={r0, r2}, 0xc) 23:52:59 executing program 2: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x3, &(0x7f00000002c0)=@framed, &(0x7f0000000040)='syzkaller\x00', 0x1, 0x9f, &(0x7f00000000c0)=""/159, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x16, 0x0, 0xf9, 0x8}, 0x48) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000000)={r0, r1}, 0xc) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x16, 0x0, 0xf9, 0x8}, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x16, 0x0, 0xf9, 0x8}, 0x48) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000200)={r0, r3}, 0xc) r4 = dup2(r2, r1) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000180)={r0, r4}, 0xc) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000780)={r0, r2}, 0xc) 23:52:59 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x3, &(0x7f00000002c0)=@framed, &(0x7f0000000040)='syzkaller\x00', 0x1, 0x9f, &(0x7f00000000c0)=""/159, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x16, 0x0, 0xf9, 0x8}, 0x48) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000000)={r0, r1}, 0xc) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x16, 0x0, 0xf9, 0x8}, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x16, 0x0, 0xf9, 0x8}, 0x48) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000200)={r0, r3}, 0xc) r4 = dup2(r2, r1) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000180)={r0, r4}, 0xc) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000780)={r0, r2}, 0xc) 23:52:59 executing program 4: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x3, &(0x7f00000002c0)=@framed, &(0x7f0000000040)='syzkaller\x00', 0x1, 0x9f, &(0x7f00000000c0)=""/159, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x16, 0x0, 0xf9, 0x8}, 0x48) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000000)={r0, r1}, 0xc) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x16, 0x0, 0xf9, 0x8}, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x16, 0x0, 0xf9, 0x8}, 0x48) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000200)={r0, r3}, 0xc) r4 = dup2(r2, r1) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000180)={r0, r4}, 0xc) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000780)={r0, r2}, 0xc) 23:52:59 executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x3, &(0x7f00000002c0)=@framed, &(0x7f0000000040)='syzkaller\x00', 0x1, 0x9f, &(0x7f00000000c0)=""/159, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x16, 0x0, 0xf9, 0x8}, 0x48) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000000)={r0, r1}, 0xc) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x16, 0x0, 0xf9, 0x8}, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x16, 0x0, 0xf9, 0x8}, 0x48) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000200)={r0, r3}, 0xc) r4 = dup2(r2, r1) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000180)={r0, r4}, 0xc) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000780)={r0, r2}, 0xc) 23:52:59 executing program 5: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x3, &(0x7f00000002c0)=@framed, &(0x7f0000000040)='syzkaller\x00', 0x1, 0x9f, &(0x7f00000000c0)=""/159, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x16, 0x0, 0xf9, 0x8}, 0x48) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000000)={r0, r1}, 0xc) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x16, 0x0, 0xf9, 0x8}, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x16, 0x0, 0xf9, 0x8}, 0x48) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000200)={r0, r3}, 0xc) r4 = dup2(r2, r1) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000180)={r0, r4}, 0xc) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000780)={r0, r2}, 0xc) 23:52:59 executing program 4: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x3, &(0x7f00000002c0)=@framed, &(0x7f0000000040)='syzkaller\x00', 0x1, 0x9f, &(0x7f00000000c0)=""/159, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x16, 0x0, 0xf9, 0x8}, 0x48) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000000)={r0, r1}, 0xc) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x16, 0x0, 0xf9, 0x8}, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x16, 0x0, 0xf9, 0x8}, 0x48) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000200)={r0, r3}, 0xc) r4 = dup2(r2, r1) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000180)={r0, r4}, 0xc) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000780)={r0, r2}, 0xc) 23:52:59 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000050000000900010073797a3000000000b8000000030a01030000000000000000050000000900010073797a30000000002800048008000240000000001400030067725c7461703000000000002000000008000140000000006d000300023ff20b7b1f53a70dd417a1289ab1f7018e065394cb430b167da7455e066824660cdf10816bce44b239fb101824175293e965486c2c1b19"], 0x100}}, 0x0) 23:52:59 executing program 2: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x3, &(0x7f00000002c0)=@framed, &(0x7f0000000040)='syzkaller\x00', 0x1, 0x9f, &(0x7f00000000c0)=""/159, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x16, 0x0, 0xf9, 0x8}, 0x48) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000000)={r0, r1}, 0xc) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x16, 0x0, 0xf9, 0x8}, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x16, 0x0, 0xf9, 0x8}, 0x48) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000200)={r0, r3}, 0xc) r4 = dup2(r2, r1) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000180)={r0, r4}, 0xc) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000780)={r0, r2}, 0xc) 23:52:59 executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x3, &(0x7f00000002c0)=@framed, &(0x7f0000000040)='syzkaller\x00', 0x1, 0x9f, &(0x7f00000000c0)=""/159, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x16, 0x0, 0xf9, 0x8}, 0x48) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000000)={r0, r1}, 0xc) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x16, 0x0, 0xf9, 0x8}, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x16, 0x0, 0xf9, 0x8}, 0x48) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000200)={r0, r3}, 0xc) r4 = dup2(r2, r1) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000180)={r0, r4}, 0xc) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000780)={r0, r2}, 0xc) 23:52:59 executing program 5: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x3, &(0x7f00000002c0)=@framed, &(0x7f0000000040)='syzkaller\x00', 0x1, 0x9f, &(0x7f00000000c0)=""/159, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x16, 0x0, 0xf9, 0x8}, 0x48) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000000)={r0, r1}, 0xc) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x16, 0x0, 0xf9, 0x8}, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x16, 0x0, 0xf9, 0x8}, 0x48) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000200)={r0, r3}, 0xc) r4 = dup2(r2, r1) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000180)={r0, r4}, 0xc) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000780)={r0, r2}, 0xc) 23:52:59 executing program 1: sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(0xffffffffffffffff, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000000)=ANY=[@ANYBLOB="01"], 0x18}}, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_int(r0, 0x107, 0xb, &(0x7f0000000000), &(0x7f0000000040)=0x4) 23:53:00 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000050000000900010073797a3000000000b8000000030a01030000000000000000050000000900010073797a30000000002800048008000240000000001400030067725c7461703000000000002000000008000140000000006d000300023ff20b7b1f53a70dd417a1289ab1f7018e065394cb430b167da7455e066824660cdf10816bce44b239fb101824175293e965486c2c1b19"], 0x100}}, 0x0) 23:53:00 executing program 2: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x3, &(0x7f00000002c0)=@framed, &(0x7f0000000040)='syzkaller\x00', 0x1, 0x9f, &(0x7f00000000c0)=""/159, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x16, 0x0, 0xf9, 0x8}, 0x48) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000000)={r0, r1}, 0xc) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x16, 0x0, 0xf9, 0x8}, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x16, 0x0, 0xf9, 0x8}, 0x48) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000200)={r0, r3}, 0xc) r4 = dup2(r2, r1) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000180)={r0, r4}, 0xc) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000780)={r0, r2}, 0xc) 23:53:00 executing program 5: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x3, &(0x7f00000002c0)=@framed, &(0x7f0000000040)='syzkaller\x00', 0x1, 0x9f, &(0x7f00000000c0)=""/159, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x16, 0x0, 0xf9, 0x8}, 0x48) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000000)={r0, r1}, 0xc) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x16, 0x0, 0xf9, 0x8}, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x16, 0x0, 0xf9, 0x8}, 0x48) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000200)={r0, r3}, 0xc) r4 = dup2(r2, r1) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000180)={r0, r4}, 0xc) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000780)={r0, r2}, 0xc) 23:53:00 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000050000000900010073797a3000000000b8000000030a01030000000000000000050000000900010073797a30000000002800048008000240000000001400030067725c7461703000000000002000000008000140000000006d000300023ff20b7b1f53a70dd417a1289ab1f7018e065394cb430b167da7455e066824660cdf10816bce44b239fb101824175293e965486c2c1b19"], 0x100}}, 0x0) 23:53:00 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket(0x10, 0x803, 0x0) recvmmsg(r3, &(0x7f00000037c0), 0x0, 0x0, &(0x7f0000003700)={0x77359400}) r4 = syz_mount_image$vfat(&(0x7f0000000180), &(0x7f0000000940)='./file1\x00', 0x0, 0x2, &(0x7f0000000700)=[{&(0x7f0000000040)="eb3c906d8d6673fdd2617400028001000240000004f801", 0x17}, {0x0, 0x0, 0x601}], 0x0, &(0x7f0000000080)={[{@iocharset={'iocharset', 0x3d, 'koi8-ru'}}]}) mknodat$loop(r4, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) sendmsg$nl_route(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000300)=@bridge_delvlan={0x48, 0x71, 0x20, 0x0, 0x25dfdbfc, {}, [@BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_MCAST_ROUTER={0x5}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_STATE={0x5, 0x3, 0x2}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_STATE={0x5}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_STATE={0x5, 0x3, 0x1}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4871}, 0x8000) r5 = getpid() socket$tipc(0x1e, 0x0, 0x0) r6 = getpid() migrate_pages(r6, 0x20, &(0x7f00000000c0)=0x4, 0x0) sched_setaffinity(r5, 0x8, &(0x7f00000001c0)=0x80000000) 23:53:00 executing program 1: sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(0xffffffffffffffff, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000000)=ANY=[@ANYBLOB="01"], 0x18}}, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_int(r0, 0x107, 0xb, &(0x7f0000000000), &(0x7f0000000040)=0x4) 23:53:00 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000050000000900010073797a3000000000b8000000030a01030000000000000000050000000900010073797a30000000002800048008000240000000001400030067725c7461703000000000002000000008000140000000006d000300023ff20b7b1f53a70dd417a1289ab1f7018e065394cb430b167da7455e066824660cdf10816bce44b239fb101824175293e965486c2c1b19"], 0x100}}, 0x0) 23:53:00 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000050000000900010073797a3000000000b8000000030a01030000000000000000050000000900010073797a30000000002800048008000240000000001400030067725c7461703000000000002000000008000140000000006d000300023ff20b7b1f53a70dd417a1289ab1f7018e065394cb430b167da7455e066824660cdf10816bce44b239fb101824175293e965486c2c1b19"], 0x100}}, 0x0) 23:53:00 executing program 2: sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(0xffffffffffffffff, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000000)=ANY=[@ANYBLOB="01"], 0x18}}, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_int(r0, 0x107, 0xb, &(0x7f0000000000), &(0x7f0000000040)=0x4) 23:53:00 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000050000000900010073797a3000000000b8000000030a01030000000000000000050000000900010073797a30000000002800048008000240000000001400030067725c7461703000000000002000000008000140000000006d000300023ff20b7b1f53a70dd417a1289ab1f7018e065394cb430b167da7455e066824660cdf10816bce44b239fb101824175293e965486c2c1b19"], 0x100}}, 0x0) [ 106.649146][ T4529] loop3: detected capacity change from 0 to 6 [ 106.705713][ T4529] Dev loop3: unable to read RDB block 6 [ 106.711871][ T4529] loop3: unable to read partition table [ 106.718473][ T4529] loop3: partition table beyond EOD, truncated [ 106.762353][ T4529] FAT-fs (loop3): Directory bread(block 6) failed 23:53:00 executing program 5: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r0, &(0x7f0000000000)={{0x6, @rose}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @bcast, @bcast, @bcast, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x48) listen(r0, 0x0) unshare(0x40000000) r1 = accept(r0, 0x0, 0x0) write$binfmt_elf64(r1, &(0x7f0000001980)=ANY=[@ANYBLOB="7f45"], 0x598) 23:53:00 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket(0x10, 0x803, 0x0) recvmmsg(r3, &(0x7f00000037c0), 0x0, 0x0, &(0x7f0000003700)={0x77359400}) r4 = syz_mount_image$vfat(&(0x7f0000000180), &(0x7f0000000940)='./file1\x00', 0x0, 0x2, &(0x7f0000000700)=[{&(0x7f0000000040)="eb3c906d8d6673fdd2617400028001000240000004f801", 0x17}, {0x0, 0x0, 0x601}], 0x0, &(0x7f0000000080)={[{@iocharset={'iocharset', 0x3d, 'koi8-ru'}}]}) mknodat$loop(r4, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) sendmsg$nl_route(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000300)=@bridge_delvlan={0x48, 0x71, 0x20, 0x0, 0x25dfdbfc, {}, [@BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_MCAST_ROUTER={0x5}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_STATE={0x5, 0x3, 0x2}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_STATE={0x5}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_STATE={0x5, 0x3, 0x1}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4871}, 0x8000) r5 = getpid() socket$tipc(0x1e, 0x0, 0x0) r6 = getpid() migrate_pages(r6, 0x20, &(0x7f00000000c0)=0x4, 0x0) sched_setaffinity(r5, 0x8, &(0x7f00000001c0)=0x80000000) 23:53:01 executing program 2: sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(0xffffffffffffffff, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000000)=ANY=[@ANYBLOB="01"], 0x18}}, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_int(r0, 0x107, 0xb, &(0x7f0000000000), &(0x7f0000000040)=0x4) 23:53:01 executing program 2: sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(0xffffffffffffffff, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000000)=ANY=[@ANYBLOB="01"], 0x18}}, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_int(r0, 0x107, 0xb, &(0x7f0000000000), &(0x7f0000000040)=0x4) 23:53:01 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000050000000900010073797a3000000000b8000000030a01030000000000000000050000000900010073797a30000000002800048008000240000000001400030067725c7461703000000000002000000008000140000000006d000300023ff20b7b1f53a70dd417a1289ab1f7018e065394cb430b167da7455e066824660cdf10816bce44b239fb101824175293e965486c2c1b19"], 0x100}}, 0x0) 23:53:01 executing program 1: sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(0xffffffffffffffff, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000000)=ANY=[@ANYBLOB="01"], 0x18}}, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_int(r0, 0x107, 0xb, &(0x7f0000000000), &(0x7f0000000040)=0x4) 23:53:01 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket(0x10, 0x803, 0x0) recvmmsg(r3, &(0x7f00000037c0), 0x0, 0x0, &(0x7f0000003700)={0x77359400}) r4 = syz_mount_image$vfat(&(0x7f0000000180), &(0x7f0000000940)='./file1\x00', 0x0, 0x2, &(0x7f0000000700)=[{&(0x7f0000000040)="eb3c906d8d6673fdd2617400028001000240000004f801", 0x17}, {0x0, 0x0, 0x601}], 0x0, &(0x7f0000000080)={[{@iocharset={'iocharset', 0x3d, 'koi8-ru'}}]}) mknodat$loop(r4, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) sendmsg$nl_route(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000300)=@bridge_delvlan={0x48, 0x71, 0x20, 0x0, 0x25dfdbfc, {}, [@BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_MCAST_ROUTER={0x5}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_STATE={0x5, 0x3, 0x2}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_STATE={0x5}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_STATE={0x5, 0x3, 0x1}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4871}, 0x8000) r5 = getpid() socket$tipc(0x1e, 0x0, 0x0) r6 = getpid() migrate_pages(r6, 0x20, &(0x7f00000000c0)=0x4, 0x0) sched_setaffinity(r5, 0x8, &(0x7f00000001c0)=0x80000000) 23:53:01 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket(0x10, 0x803, 0x0) recvmmsg(r3, &(0x7f00000037c0), 0x0, 0x0, &(0x7f0000003700)={0x77359400}) r4 = syz_mount_image$vfat(&(0x7f0000000180), &(0x7f0000000940)='./file1\x00', 0x0, 0x2, &(0x7f0000000700)=[{&(0x7f0000000040)="eb3c906d8d6673fdd2617400028001000240000004f801", 0x17}, {0x0, 0x0, 0x601}], 0x0, &(0x7f0000000080)={[{@iocharset={'iocharset', 0x3d, 'koi8-ru'}}]}) mknodat$loop(r4, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) sendmsg$nl_route(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000300)=@bridge_delvlan={0x48, 0x71, 0x20, 0x0, 0x25dfdbfc, {}, [@BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_MCAST_ROUTER={0x5}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_STATE={0x5, 0x3, 0x2}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_STATE={0x5}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_STATE={0x5, 0x3, 0x1}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4871}, 0x8000) r5 = getpid() socket$tipc(0x1e, 0x0, 0x0) r6 = getpid() migrate_pages(r6, 0x20, &(0x7f00000000c0)=0x4, 0x0) sched_setaffinity(r5, 0x8, &(0x7f00000001c0)=0x80000000) 23:53:01 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket(0x10, 0x803, 0x0) recvmmsg(r3, &(0x7f00000037c0), 0x0, 0x0, &(0x7f0000003700)={0x77359400}) r4 = syz_mount_image$vfat(&(0x7f0000000180), &(0x7f0000000940)='./file1\x00', 0x0, 0x2, &(0x7f0000000700)=[{&(0x7f0000000040)="eb3c906d8d6673fdd2617400028001000240000004f801", 0x17}, {0x0, 0x0, 0x601}], 0x0, &(0x7f0000000080)={[{@iocharset={'iocharset', 0x3d, 'koi8-ru'}}]}) mknodat$loop(r4, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) sendmsg$nl_route(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000300)=@bridge_delvlan={0x48, 0x71, 0x20, 0x0, 0x25dfdbfc, {}, [@BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_MCAST_ROUTER={0x5}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_STATE={0x5, 0x3, 0x2}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_STATE={0x5}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_STATE={0x5, 0x3, 0x1}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4871}, 0x8000) r5 = getpid() socket$tipc(0x1e, 0x0, 0x0) r6 = getpid() migrate_pages(r6, 0x20, &(0x7f00000000c0)=0x4, 0x0) sched_setaffinity(r5, 0x8, &(0x7f00000001c0)=0x80000000) 23:53:01 executing program 1: sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(0xffffffffffffffff, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000000)=ANY=[@ANYBLOB="01"], 0x18}}, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_int(r0, 0x107, 0xb, &(0x7f0000000000), &(0x7f0000000040)=0x4) [ 111.233762][ T4560] loop4: detected capacity change from 0 to 6 [ 111.244298][ T4562] loop3: detected capacity change from 0 to 6 [ 111.253378][ T4563] loop2: detected capacity change from 0 to 6 [ 111.264225][ T4564] loop0: detected capacity change from 0 to 6 [ 112.394725][ T4562] Dev loop3: unable to read RDB block 6 [ 112.395019][ T4564] Dev loop0: unable to read RDB block 6 [ 112.400402][ T4562] loop3: unable to read partition table [ 112.405939][ T4564] loop0: unable to read partition table [ 112.411754][ T4562] loop3: partition table beyond EOD, truncated [ 112.417329][ T4564] loop0: partition table beyond EOD, truncated [ 112.430723][ T4560] Dev loop4: unable to read RDB block 6 [ 112.430780][ T4563] Dev loop2: unable to read RDB block 6 [ 112.436303][ T4560] loop4: unable to read partition table [ 112.436462][ T4560] loop4: partition table beyond EOD, [ 112.441920][ T4563] loop2: unable to read partition table [ 112.447522][ T4560] truncated [ 112.462026][ T4563] loop2: partition table beyond EOD, truncated [ 112.463928][ T4562] FAT-fs (loop3): Directory bread(block 6) failed [ 112.475969][ T4560] FAT-fs (loop4): Directory bread(block 6) failed 23:53:06 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket(0x10, 0x803, 0x0) recvmmsg(r3, &(0x7f00000037c0), 0x0, 0x0, &(0x7f0000003700)={0x77359400}) r4 = syz_mount_image$vfat(&(0x7f0000000180), &(0x7f0000000940)='./file1\x00', 0x0, 0x2, &(0x7f0000000700)=[{&(0x7f0000000040)="eb3c906d8d6673fdd2617400028001000240000004f801", 0x17}, {0x0, 0x0, 0x601}], 0x0, &(0x7f0000000080)={[{@iocharset={'iocharset', 0x3d, 'koi8-ru'}}]}) mknodat$loop(r4, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) sendmsg$nl_route(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000300)=@bridge_delvlan={0x48, 0x71, 0x20, 0x0, 0x25dfdbfc, {}, [@BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_MCAST_ROUTER={0x5}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_STATE={0x5, 0x3, 0x2}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_STATE={0x5}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_STATE={0x5, 0x3, 0x1}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4871}, 0x8000) r5 = getpid() socket$tipc(0x1e, 0x0, 0x0) r6 = getpid() migrate_pages(r6, 0x20, &(0x7f00000000c0)=0x4, 0x0) sched_setaffinity(r5, 0x8, &(0x7f00000001c0)=0x80000000) 23:53:06 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket(0x10, 0x803, 0x0) recvmmsg(r3, &(0x7f00000037c0), 0x0, 0x0, &(0x7f0000003700)={0x77359400}) r4 = syz_mount_image$vfat(&(0x7f0000000180), &(0x7f0000000940)='./file1\x00', 0x0, 0x2, &(0x7f0000000700)=[{&(0x7f0000000040)="eb3c906d8d6673fdd2617400028001000240000004f801", 0x17}, {0x0, 0x0, 0x601}], 0x0, &(0x7f0000000080)={[{@iocharset={'iocharset', 0x3d, 'koi8-ru'}}]}) mknodat$loop(r4, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) sendmsg$nl_route(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000300)=@bridge_delvlan={0x48, 0x71, 0x20, 0x0, 0x25dfdbfc, {}, [@BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_MCAST_ROUTER={0x5}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_STATE={0x5, 0x3, 0x2}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_STATE={0x5}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_STATE={0x5, 0x3, 0x1}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4871}, 0x8000) r5 = getpid() socket$tipc(0x1e, 0x0, 0x0) r6 = getpid() migrate_pages(r6, 0x20, &(0x7f00000000c0)=0x4, 0x0) sched_setaffinity(r5, 0x8, &(0x7f00000001c0)=0x80000000) [ 112.521552][ T4564] FAT-fs (loop0): Directory bread(block 6) failed [ 112.528710][ T4563] FAT-fs (loop2): Directory bread(block 6) failed [ 112.628622][ T3906] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 23:53:07 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket(0x10, 0x803, 0x0) recvmmsg(r3, &(0x7f00000037c0), 0x0, 0x0, &(0x7f0000003700)={0x77359400}) r4 = syz_mount_image$vfat(&(0x7f0000000180), &(0x7f0000000940)='./file1\x00', 0x0, 0x2, &(0x7f0000000700)=[{&(0x7f0000000040)="eb3c906d8d6673fdd2617400028001000240000004f801", 0x17}, {0x0, 0x0, 0x601}], 0x0, &(0x7f0000000080)={[{@iocharset={'iocharset', 0x3d, 'koi8-ru'}}]}) mknodat$loop(r4, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) sendmsg$nl_route(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000300)=@bridge_delvlan={0x48, 0x71, 0x20, 0x0, 0x25dfdbfc, {}, [@BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_MCAST_ROUTER={0x5}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_STATE={0x5, 0x3, 0x2}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_STATE={0x5}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_STATE={0x5, 0x3, 0x1}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4871}, 0x8000) r5 = getpid() socket$tipc(0x1e, 0x0, 0x0) r6 = getpid() migrate_pages(r6, 0x20, &(0x7f00000000c0)=0x4, 0x0) sched_setaffinity(r5, 0x8, &(0x7f00000001c0)=0x80000000) [ 113.903815][ T4572] loop3: detected capacity change from 0 to 6 [ 113.914636][ T4574] loop4: detected capacity change from 0 to 6 [ 113.949712][ T4572] Dev loop3: unable to read RDB block 6 [ 113.955746][ T4572] loop3: unable to read partition table [ 113.962488][ T4572] loop3: partition table beyond EOD, truncated [ 113.976080][ T4574] Dev loop4: unable to read RDB block 6 [ 113.981908][ T4574] loop4: unable to read partition table [ 113.988350][ T4574] loop4: partition table beyond EOD, truncated 23:53:07 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket(0x10, 0x803, 0x0) recvmmsg(r3, &(0x7f00000037c0), 0x0, 0x0, &(0x7f0000003700)={0x77359400}) r4 = syz_mount_image$vfat(&(0x7f0000000180), &(0x7f0000000940)='./file1\x00', 0x0, 0x2, &(0x7f0000000700)=[{&(0x7f0000000040)="eb3c906d8d6673fdd2617400028001000240000004f801", 0x17}, {0x0, 0x0, 0x601}], 0x0, &(0x7f0000000080)={[{@iocharset={'iocharset', 0x3d, 'koi8-ru'}}]}) mknodat$loop(r4, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) sendmsg$nl_route(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000300)=@bridge_delvlan={0x48, 0x71, 0x20, 0x0, 0x25dfdbfc, {}, [@BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_MCAST_ROUTER={0x5}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_STATE={0x5, 0x3, 0x2}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_STATE={0x5}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_STATE={0x5, 0x3, 0x1}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4871}, 0x8000) r5 = getpid() socket$tipc(0x1e, 0x0, 0x0) r6 = getpid() migrate_pages(r6, 0x20, &(0x7f00000000c0)=0x4, 0x0) sched_setaffinity(r5, 0x8, &(0x7f00000001c0)=0x80000000) [ 114.166942][ T4572] FAT-fs (loop3): Directory bread(block 6) failed [ 114.175142][ T4574] FAT-fs (loop4): Directory bread(block 6) failed 23:53:07 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket(0x10, 0x803, 0x0) recvmmsg(r3, &(0x7f00000037c0), 0x0, 0x0, &(0x7f0000003700)={0x77359400}) r4 = syz_mount_image$vfat(&(0x7f0000000180), &(0x7f0000000940)='./file1\x00', 0x0, 0x2, &(0x7f0000000700)=[{&(0x7f0000000040)="eb3c906d8d6673fdd2617400028001000240000004f801", 0x17}, {0x0, 0x0, 0x601}], 0x0, &(0x7f0000000080)={[{@iocharset={'iocharset', 0x3d, 'koi8-ru'}}]}) mknodat$loop(r4, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) sendmsg$nl_route(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000300)=@bridge_delvlan={0x48, 0x71, 0x20, 0x0, 0x25dfdbfc, {}, [@BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_MCAST_ROUTER={0x5}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_STATE={0x5, 0x3, 0x2}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_STATE={0x5}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_STATE={0x5, 0x3, 0x1}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4871}, 0x8000) r5 = getpid() socket$tipc(0x1e, 0x0, 0x0) r6 = getpid() migrate_pages(r6, 0x20, &(0x7f00000000c0)=0x4, 0x0) sched_setaffinity(r5, 0x8, &(0x7f00000001c0)=0x80000000) 23:53:08 executing program 5: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r0, &(0x7f0000000000)={{0x6, @rose}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @bcast, @bcast, @bcast, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x48) listen(r0, 0x0) unshare(0x40000000) r1 = accept(r0, 0x0, 0x0) write$binfmt_elf64(r1, &(0x7f0000001980)=ANY=[@ANYBLOB="7f45"], 0x598) 23:53:08 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket(0x10, 0x803, 0x0) recvmmsg(r3, &(0x7f00000037c0), 0x0, 0x0, &(0x7f0000003700)={0x77359400}) r4 = syz_mount_image$vfat(&(0x7f0000000180), &(0x7f0000000940)='./file1\x00', 0x0, 0x2, &(0x7f0000000700)=[{&(0x7f0000000040)="eb3c906d8d6673fdd2617400028001000240000004f801", 0x17}, {0x0, 0x0, 0x601}], 0x0, &(0x7f0000000080)={[{@iocharset={'iocharset', 0x3d, 'koi8-ru'}}]}) mknodat$loop(r4, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) sendmsg$nl_route(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000300)=@bridge_delvlan={0x48, 0x71, 0x20, 0x0, 0x25dfdbfc, {}, [@BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_MCAST_ROUTER={0x5}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_STATE={0x5, 0x3, 0x2}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_STATE={0x5}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_STATE={0x5, 0x3, 0x1}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4871}, 0x8000) r5 = getpid() socket$tipc(0x1e, 0x0, 0x0) r6 = getpid() migrate_pages(r6, 0x20, &(0x7f00000000c0)=0x4, 0x0) sched_setaffinity(r5, 0x8, &(0x7f00000001c0)=0x80000000) [ 115.750186][ T4585] loop2: detected capacity change from 0 to 6 [ 116.939210][ T4586] loop0: detected capacity change from 0 to 6 [ 116.950609][ T4588] loop1: detected capacity change from 0 to 6 [ 116.985750][ T4585] Dev loop2: unable to read RDB block 6 [ 116.992609][ T4585] loop2: unable to read partition table [ 117.029649][ T4585] loop2: partition table beyond EOD, truncated [ 117.329919][ T4586] Dev loop0: unable to read RDB block 6 [ 117.335904][ T4586] loop0: unable to read partition table [ 117.343030][ T4586] loop0: partition table beyond EOD, truncated [ 117.354794][ T4588] Dev loop1: unable to read RDB block 6 [ 117.361025][ T4588] loop1: unable to read partition table [ 117.368124][ T4588] loop1: partition table beyond EOD, truncated 23:53:11 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket(0x10, 0x803, 0x0) recvmmsg(r3, &(0x7f00000037c0), 0x0, 0x0, &(0x7f0000003700)={0x77359400}) r4 = syz_mount_image$vfat(&(0x7f0000000180), &(0x7f0000000940)='./file1\x00', 0x0, 0x2, &(0x7f0000000700)=[{&(0x7f0000000040)="eb3c906d8d6673fdd2617400028001000240000004f801", 0x17}, {0x0, 0x0, 0x601}], 0x0, &(0x7f0000000080)={[{@iocharset={'iocharset', 0x3d, 'koi8-ru'}}]}) mknodat$loop(r4, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) sendmsg$nl_route(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000300)=@bridge_delvlan={0x48, 0x71, 0x20, 0x0, 0x25dfdbfc, {}, [@BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_MCAST_ROUTER={0x5}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_STATE={0x5, 0x3, 0x2}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_STATE={0x5}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_STATE={0x5, 0x3, 0x1}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4871}, 0x8000) r5 = getpid() socket$tipc(0x1e, 0x0, 0x0) r6 = getpid() migrate_pages(r6, 0x20, &(0x7f00000000c0)=0x4, 0x0) sched_setaffinity(r5, 0x8, &(0x7f00000001c0)=0x80000000) [ 117.460376][ T4586] FAT-fs (loop0): Directory bread(block 6) failed [ 117.468784][ T4585] FAT-fs (loop2): Directory bread(block 6) failed [ 117.486159][ T4588] FAT-fs (loop1): Directory bread(block 6) failed 23:53:11 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket(0x10, 0x803, 0x0) recvmmsg(r3, &(0x7f00000037c0), 0x0, 0x0, &(0x7f0000003700)={0x77359400}) r4 = syz_mount_image$vfat(&(0x7f0000000180), &(0x7f0000000940)='./file1\x00', 0x0, 0x2, &(0x7f0000000700)=[{&(0x7f0000000040)="eb3c906d8d6673fdd2617400028001000240000004f801", 0x17}, {0x0, 0x0, 0x601}], 0x0, &(0x7f0000000080)={[{@iocharset={'iocharset', 0x3d, 'koi8-ru'}}]}) mknodat$loop(r4, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) sendmsg$nl_route(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000300)=@bridge_delvlan={0x48, 0x71, 0x20, 0x0, 0x25dfdbfc, {}, [@BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_MCAST_ROUTER={0x5}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_STATE={0x5, 0x3, 0x2}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_STATE={0x5}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_STATE={0x5, 0x3, 0x1}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4871}, 0x8000) r5 = getpid() socket$tipc(0x1e, 0x0, 0x0) r6 = getpid() migrate_pages(r6, 0x20, &(0x7f00000000c0)=0x4, 0x0) sched_setaffinity(r5, 0x8, &(0x7f00000001c0)=0x80000000) 23:53:11 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket(0x10, 0x803, 0x0) recvmmsg(r3, &(0x7f00000037c0), 0x0, 0x0, &(0x7f0000003700)={0x77359400}) r4 = syz_mount_image$vfat(&(0x7f0000000180), &(0x7f0000000940)='./file1\x00', 0x0, 0x2, &(0x7f0000000700)=[{&(0x7f0000000040)="eb3c906d8d6673fdd2617400028001000240000004f801", 0x17}, {0x0, 0x0, 0x601}], 0x0, &(0x7f0000000080)={[{@iocharset={'iocharset', 0x3d, 'koi8-ru'}}]}) mknodat$loop(r4, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) sendmsg$nl_route(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000300)=@bridge_delvlan={0x48, 0x71, 0x20, 0x0, 0x25dfdbfc, {}, [@BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_MCAST_ROUTER={0x5}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_STATE={0x5, 0x3, 0x2}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_STATE={0x5}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_STATE={0x5, 0x3, 0x1}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4871}, 0x8000) r5 = getpid() socket$tipc(0x1e, 0x0, 0x0) r6 = getpid() migrate_pages(r6, 0x20, &(0x7f00000000c0)=0x4, 0x0) sched_setaffinity(r5, 0x8, &(0x7f00000001c0)=0x80000000) 23:53:11 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket(0x10, 0x803, 0x0) recvmmsg(r3, &(0x7f00000037c0), 0x0, 0x0, &(0x7f0000003700)={0x77359400}) r4 = syz_mount_image$vfat(&(0x7f0000000180), &(0x7f0000000940)='./file1\x00', 0x0, 0x2, &(0x7f0000000700)=[{&(0x7f0000000040)="eb3c906d8d6673fdd2617400028001000240000004f801", 0x17}, {0x0, 0x0, 0x601}], 0x0, &(0x7f0000000080)={[{@iocharset={'iocharset', 0x3d, 'koi8-ru'}}]}) mknodat$loop(r4, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) sendmsg$nl_route(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000300)=@bridge_delvlan={0x48, 0x71, 0x20, 0x0, 0x25dfdbfc, {}, [@BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_MCAST_ROUTER={0x5}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_STATE={0x5, 0x3, 0x2}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_STATE={0x5}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_STATE={0x5, 0x3, 0x1}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4871}, 0x8000) r5 = getpid() socket$tipc(0x1e, 0x0, 0x0) r6 = getpid() migrate_pages(r6, 0x20, &(0x7f00000000c0)=0x4, 0x0) sched_setaffinity(r5, 0x8, &(0x7f00000001c0)=0x80000000) 23:53:11 executing program 5: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r0, &(0x7f0000000000)={{0x6, @rose}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @bcast, @bcast, @bcast, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x48) listen(r0, 0x0) unshare(0x40000000) r1 = accept(r0, 0x0, 0x0) write$binfmt_elf64(r1, &(0x7f0000001980)=ANY=[@ANYBLOB="7f45"], 0x598) [ 119.124920][ T4599] loop3: detected capacity change from 0 to 6 [ 119.134569][ T4601] loop0: detected capacity change from 0 to 6 [ 119.195260][ T4599] Dev loop3: unable to read RDB block 6 [ 119.201086][ T4599] loop3: unable to read partition table [ 119.207968][ T4599] loop3: partition table beyond EOD, truncated [ 119.218739][ T4601] Dev loop0: unable to read RDB block 6 [ 119.224853][ T4601] loop0: unable to read partition table [ 119.232018][ T4601] loop0: partition table beyond EOD, truncated 23:53:13 executing program 3: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r0, &(0x7f0000000000)={{0x6, @rose}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @bcast, @bcast, @bcast, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x48) listen(r0, 0x0) unshare(0x40000000) r1 = accept(r0, 0x0, 0x0) write$binfmt_elf64(r1, &(0x7f0000001980)=ANY=[@ANYBLOB="7f45"], 0x598) [ 119.707392][ T4601] FAT-fs (loop0): Directory bread(block 6) failed [ 119.714414][ T4599] FAT-fs (loop3): Directory bread(block 6) failed 23:53:13 executing program 0: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r0, &(0x7f0000000000)={{0x6, @rose}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @bcast, @bcast, @bcast, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x48) listen(r0, 0x0) unshare(0x40000000) r1 = accept(r0, 0x0, 0x0) write$binfmt_elf64(r1, &(0x7f0000001980)=ANY=[@ANYBLOB="7f45"], 0x598) [ 122.193678][ T4615] loop1: detected capacity change from 0 to 6 [ 122.217538][ T4613] loop4: detected capacity change from 0 to 6 [ 122.227743][ T4616] loop2: detected capacity change from 0 to 6 [ 123.353720][ T4613] Dev loop4: unable to read RDB block 6 [ 123.359408][ T4613] loop4: unable to read partition table [ 123.365179][ T4616] Dev loop2: unable to read RDB block 6 [ 123.365265][ T4613] loop4: partition table beyond EOD, truncated [ 123.370880][ T4616] loop2: unable to read partition table [ 123.382800][ T4616] loop2: partition table beyond EOD, truncated [ 123.383073][ T4615] Dev loop1: unable to read RDB block 6 [ 123.394614][ T4615] loop1: unable to read partition table [ 123.400488][ T4615] loop1: partition table beyond EOD, truncated [ 123.418731][ T4602] ================================================================== [ 123.426823][ T4602] BUG: KASAN: use-after-free in __lock_acquire+0x79/0x1f60 [ 123.428582][ T4616] FAT-fs (loop2): Directory bread(block 6) failed [ 123.434033][ T4602] Read of size 8 at addr ffff88807b64e130 by task syz-executor.5/4602 [ 123.434052][ T4602] 23:53:17 executing program 2: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r0, &(0x7f0000000000)={{0x6, @rose}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @bcast, @bcast, @bcast, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x48) listen(r0, 0x0) unshare(0x40000000) r1 = accept(r0, 0x0, 0x0) write$binfmt_elf64(r1, &(0x7f0000001980)=ANY=[@ANYBLOB="7f45"], 0x598) 23:53:17 executing program 4: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r0, &(0x7f0000000000)={{0x6, @rose}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @bcast, @bcast, @bcast, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x48) listen(r0, 0x0) unshare(0x40000000) r1 = accept(r0, 0x0, 0x0) write$binfmt_elf64(r1, &(0x7f0000001980)=ANY=[@ANYBLOB="7f45"], 0x598) [ 123.434057][ T4602] CPU: 1 PID: 4602 Comm: syz-executor.5 Not tainted 6.0.0-rc2-syzkaller-00044-gdf0219d11b6f #0 [ 123.434079][ T4602] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 123.434089][ T4602] Call Trace: [ 123.434096][ T4602] [ 123.434105][ T4602] dump_stack_lvl+0x1e3/0x2cb [ 123.440760][ T4613] FAT-fs (loop4): Directory bread(block 6) failed [ 123.448631][ T4602] ? io_notif_register+0x5e7/0x5e7 [ 123.448654][ T4602] ? _printk+0xcf/0x10f [ 123.448672][ T4602] ? __wake_up_klogd+0xd6/0x100 [ 123.502907][ T4602] ? __wake_up_klogd+0xcd/0x100 [ 123.507784][ T4602] ? panic+0x76b/0x76b [ 123.511866][ T4602] ? _printk+0xcf/0x10f [ 123.516022][ T4602] print_address_description+0x65/0x4b0 [ 123.521564][ T4602] print_report+0x108/0x220 [ 123.526080][ T4602] ? __lock_acquire+0x79/0x1f60 [ 123.530931][ T4602] kasan_report+0xfb/0x130 [ 123.535345][ T4602] ? __lock_acquire+0x79/0x1f60 [ 123.540188][ T4602] __lock_acquire+0x79/0x1f60 [ 123.544887][ T4602] ? __bpf_trace_rcu_stall_warning+0x10/0x10 [ 123.550868][ T4602] ? do_raw_spin_unlock+0x134/0x8a0 [ 123.556077][ T4602] ? finish_lock_switch+0x8e/0x100 [ 123.561183][ T4602] ? lockdep_hardirqs_on+0x95/0x140 [ 123.566388][ T4602] lock_acquire+0x1a7/0x400 [ 123.570894][ T4602] ? nr_accept+0x510/0x660 [ 123.575314][ T4602] ? __switch_to_asm+0x5a/0x80 [ 123.580117][ T4602] ? read_lock_is_recursive+0x10/0x10 [ 123.585487][ T4602] ? release_firmware_map_entry+0x184/0x184 [ 123.591388][ T4602] ? __local_bh_enable_ip+0x163/0x1f0 [ 123.596752][ T4602] ? nr_accept+0x501/0x660 [ 123.601160][ T4602] ? _local_bh_enable+0xa0/0xa0 [ 123.606014][ T4602] lock_sock_nested+0x44/0xf0 [ 123.610689][ T4602] ? nr_accept+0x510/0x660 [ 123.615116][ T4602] nr_accept+0x510/0x660 [ 123.619367][ T4602] ? nr_connect+0xdc0/0xdc0 [ 123.623865][ T4602] ? wake_bit_function+0x240/0x240 [ 123.628972][ T4602] ? stream_open+0x9/0x50 [ 123.633307][ T4602] ? bpf_lsm_socket_accept+0x5/0x10 [ 123.638519][ T4602] ? nr_connect+0xdc0/0xdc0 [ 123.643021][ T4602] do_accept+0x4d0/0x6d0 [ 123.647267][ T4602] ? __ia32_sys_listen+0x60/0x60 [ 123.652223][ T4602] __sys_accept4+0x97/0x100 [ 123.656731][ T4602] __x64_sys_accept+0x79/0x90 [ 123.661406][ T4602] do_syscall_64+0x2b/0x70 [ 123.665819][ T4602] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 123.671730][ T4602] RIP: 0033:0x7f8201089279 [ 123.676157][ T4602] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 123.695772][ T4602] RSP: 002b:00007f8202159168 EFLAGS: 00000246 ORIG_RAX: 000000000000002b [ 123.704183][ T4602] RAX: ffffffffffffffda RBX: 00007f820119c050 RCX: 00007f8201089279 [ 123.712152][ T4602] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 123.720129][ T4602] RBP: 00007f82010e3189 R08: 0000000000000000 R09: 0000000000000000 [ 123.728107][ T4602] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 123.736069][ T4602] R13: 00007fffc989b36f R14: 00007f8202159300 R15: 0000000000022000 [ 123.744052][ T4602] [ 123.747063][ T4602] [ 123.749377][ T4602] Allocated by task 4595: [ 123.753688][ T4602] ____kasan_kmalloc+0xdc/0x110 [ 123.758529][ T4602] __kmalloc+0x226/0x370 [ 123.762757][ T4602] sk_prot_alloc+0xde/0x200 [ 123.767250][ T4602] sk_alloc+0x36/0x340 [ 123.771308][ T4602] nr_create+0x9d/0x500 [ 123.775454][ T4602] __sock_create+0x3fd/0x850 [ 123.780029][ T4602] __sys_socket+0x137/0x3a0 [ 123.784554][ T4602] __x64_sys_socket+0x76/0x80 [ 123.789217][ T4602] do_syscall_64+0x2b/0x70 [ 123.793635][ T4602] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 123.799521][ T4602] [ 123.801829][ T4602] Freed by task 4614: [ 123.805807][ T4602] kasan_set_track+0x4c/0x70 [ 123.810384][ T4602] kasan_set_free_info+0x1f/0x40 [ 123.815311][ T4602] ____kasan_slab_free+0xd8/0x120 [ 123.820324][ T4602] slab_free_freelist_hook+0x12e/0x1a0 [ 123.825772][ T4602] kfree+0xda/0x210 [ 123.829566][ T4602] __sk_destruct+0x487/0x5d0 [ 123.834145][ T4602] call_timer_fn+0xf5/0x210 [ 123.838634][ T4602] __run_timers+0x76a/0x980 [ 123.843125][ T4602] run_timer_softirq+0x63/0xf0 [ 123.847876][ T4602] __do_softirq+0x382/0x793 [ 123.852366][ T4602] [ 123.854677][ T4602] Last potentially related work creation: [ 123.860372][ T4602] kasan_save_stack+0x3b/0x60 [ 123.865038][ T4602] __kasan_record_aux_stack+0xaf/0xc0 [ 123.870398][ T4602] call_rcu+0x163/0x9c0 [ 123.874543][ T4602] netlink_release+0x12fc/0x1720 [ 123.879468][ T4602] sock_close+0xd7/0x260 [ 123.883699][ T4602] __fput+0x3b9/0x820 [ 123.887670][ T4602] task_work_run+0x146/0x1c0 [ 123.892250][ T4602] exit_to_user_mode_loop+0x134/0x160 [ 123.897610][ T4602] exit_to_user_mode_prepare+0xad/0x110 [ 123.903142][ T4602] syscall_exit_to_user_mode+0x2e/0x60 [ 123.908591][ T4602] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 123.914474][ T4602] [ 123.916783][ T4602] Second to last potentially related work creation: [ 123.923348][ T4602] kasan_save_stack+0x3b/0x60 [ 123.928016][ T4602] __kasan_record_aux_stack+0xaf/0xc0 [ 123.933377][ T4602] insert_work+0x54/0x3e0 [ 123.937709][ T4602] __queue_work+0xa31/0xce0 [ 123.942197][ T4602] queue_work_on+0x137/0x240 [ 123.946777][ T4602] rfkill_register+0x723/0x880 [ 123.951542][ T4602] hci_register_dev+0x3d0/0xa30 [ 123.956382][ T4602] vhci_create_device+0x3b7/0x6e0 [ 123.961396][ T4602] process_one_work+0x81c/0xd10 [ 123.966237][ T4602] worker_thread+0xb14/0x1330 [ 123.970907][ T4602] kthread+0x266/0x300 [ 123.974962][ T4602] ret_from_fork+0x1f/0x30 [ 123.979365][ T4602] [ 123.981676][ T4602] The buggy address belongs to the object at ffff88807b64e000 [ 123.981676][ T4602] which belongs to the cache kmalloc-2k of size 2048 [ 123.995713][ T4602] The buggy address is located 304 bytes inside of [ 123.995713][ T4602] 2048-byte region [ffff88807b64e000, ffff88807b64e800) [ 124.009057][ T4602] [ 124.011371][ T4602] The buggy address belongs to the physical page: [ 124.017767][ T4602] page:ffffea0001ed9200 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x7b648 [ 124.027919][ T4602] head:ffffea0001ed9200 order:3 compound_mapcount:0 compound_pincount:0 [ 124.036238][ T4602] flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 124.044222][ T4602] raw: 00fff00000010200 dead000000000100 dead000000000122 ffff888012042000 [ 124.052790][ T4602] raw: 0000000000000000 0000000000080008 00000001ffffffff 0000000000000000 [ 124.061353][ T4602] page dumped because: kasan: bad access detected [ 124.067760][ T4602] page_owner tracks the page as allocated [ 124.073457][ T4602] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x1d20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 22, tgid 22 (kworker/1:0), ts 69058537180, free_ts 67886448364 [ 124.095928][ T4602] get_page_from_freelist+0x72b/0x7a0 [ 124.101292][ T4602] __alloc_pages+0x259/0x560 [ 124.105905][ T4602] alloc_slab_page+0x70/0xf0 [ 124.110518][ T4602] allocate_slab+0x5e/0x520 [ 124.115015][ T4602] ___slab_alloc+0x42e/0xce0 [ 124.119596][ T4602] __kmalloc_node_track_caller+0x2bd/0x3f0 [ 124.125398][ T4602] __alloc_skb+0x11d/0x620 [ 124.129806][ T4602] alloc_skb_with_frags+0xaf/0x810 [ 124.134909][ T4602] sock_alloc_send_pskb+0x930/0xa70 [ 124.140113][ T4602] mld_newpack+0x1e0/0xa90 [ 124.144528][ T4602] add_grhead+0x5e/0x290 [ 124.148763][ T4602] add_grec+0x14c9/0x17c0 [ 124.153106][ T4602] mld_send_initial_cr+0x1f6/0x370 [ 124.158212][ T4602] mld_dad_work+0x3c/0x3f0 [ 124.162623][ T4602] process_one_work+0x81c/0xd10 [ 124.167473][ T4602] worker_thread+0xb14/0x1330 [ 124.172159][ T4602] page last free stack trace: [ 124.176853][ T4602] free_pcp_prepare+0x812/0x900 [ 124.181709][ T4602] free_unref_page+0x7d/0x630 [ 124.186381][ T4602] __unfreeze_partials+0x1ab/0x200 [ 124.191485][ T4602] put_cpu_partial+0x116/0x180 [ 124.196239][ T4602] qlist_free_all+0x2b/0x70 [ 124.200730][ T4602] kasan_quarantine_reduce+0x169/0x180 [ 124.206179][ T4602] __kasan_slab_alloc+0x2f/0xe0 [ 124.211017][ T4602] __kmalloc+0x1bd/0x370 [ 124.215261][ T4602] tomoyo_realpath_from_path+0xd8/0x5f0 [ 124.220796][ T4602] tomoyo_path_perm+0x270/0x6b0 [ 124.225636][ T4602] security_inode_getattr+0xc0/0x140 [ 124.230922][ T4602] vfs_getattr+0x26/0x360 [ 124.235413][ T4602] __se_sys_newfstat+0xda/0x800 [ 124.240254][ T4602] do_syscall_64+0x2b/0x70 [ 124.244681][ T4602] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 124.250567][ T4602] [ 124.252892][ T4602] Memory state around the buggy address: [ 124.258518][ T4602] ffff88807b64e000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 124.266577][ T4602] ffff88807b64e080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 124.274655][ T4602] >ffff88807b64e100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 124.282708][ T4602] ^ [ 124.288337][ T4602] ffff88807b64e180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 124.296410][ T4602] ffff88807b64e200: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 124.304463][ T4602] ================================================================== [ 124.312521][ T4602] Kernel panic - not syncing: panic_on_warn set ... [ 124.319100][ T4602] CPU: 1 PID: 4602 Comm: syz-executor.5 Not tainted 6.0.0-rc2-syzkaller-00044-gdf0219d11b6f #0 [ 124.329422][ T4602] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/22/2022 [ 124.339470][ T4602] Call Trace: [ 124.342757][ T4602] [ 124.345690][ T4602] dump_stack_lvl+0x1e3/0x2cb [ 124.350369][ T4602] ? io_notif_register+0x5e7/0x5e7 [ 124.355475][ T4602] ? panic+0x76b/0x76b [ 124.359618][ T4602] ? vscnprintf+0x59/0x80 [ 124.363972][ T4602] panic+0x316/0x76b [ 124.367877][ T4602] ? fb_is_primary_device+0xcc/0xcc [ 124.373076][ T4602] ? _raw_spin_unlock_irqrestore+0xd9/0x130 [ 124.378968][ T4602] ? __lock_acquire+0x79/0x1f60 [ 124.383814][ T4602] end_report+0x91/0xa0 [ 124.387958][ T4602] kasan_report+0x108/0x130 [ 124.392463][ T4602] ? __lock_acquire+0x79/0x1f60 [ 124.397306][ T4602] __lock_acquire+0x79/0x1f60 [ 124.401977][ T4602] ? __bpf_trace_rcu_stall_warning+0x10/0x10 [ 124.407965][ T4602] ? do_raw_spin_unlock+0x134/0x8a0 [ 124.413168][ T4602] ? finish_lock_switch+0x8e/0x100 [ 124.418279][ T4602] ? lockdep_hardirqs_on+0x95/0x140 [ 124.423475][ T4602] lock_acquire+0x1a7/0x400 [ 124.427986][ T4602] ? nr_accept+0x510/0x660 [ 124.432403][ T4602] ? __switch_to_asm+0x5a/0x80 [ 124.437513][ T4602] ? read_lock_is_recursive+0x10/0x10 [ 124.442883][ T4602] ? release_firmware_map_entry+0x184/0x184 [ 124.448778][ T4602] ? __local_bh_enable_ip+0x163/0x1f0 [ 124.454156][ T4602] ? nr_accept+0x501/0x660 [ 124.458582][ T4602] ? _local_bh_enable+0xa0/0xa0 [ 124.463458][ T4602] lock_sock_nested+0x44/0xf0 [ 124.468158][ T4602] ? nr_accept+0x510/0x660 [ 124.472577][ T4602] nr_accept+0x510/0x660 [ 124.476820][ T4602] ? nr_connect+0xdc0/0xdc0 [ 124.481321][ T4602] ? wake_bit_function+0x240/0x240 [ 124.486437][ T4602] ? stream_open+0x9/0x50 [ 124.490778][ T4602] ? bpf_lsm_socket_accept+0x5/0x10 [ 124.495970][ T4602] ? nr_connect+0xdc0/0xdc0 [ 124.500485][ T4602] do_accept+0x4d0/0x6d0 [ 124.504721][ T4602] ? __ia32_sys_listen+0x60/0x60 [ 124.509659][ T4602] __sys_accept4+0x97/0x100 [ 124.514159][ T4602] __x64_sys_accept+0x79/0x90 [ 124.518824][ T4602] do_syscall_64+0x2b/0x70 [ 124.523229][ T4602] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 124.529203][ T4602] RIP: 0033:0x7f8201089279 [ 124.533609][ T4602] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 124.553209][ T4602] RSP: 002b:00007f8202159168 EFLAGS: 00000246 ORIG_RAX: 000000000000002b [ 124.561635][ T4602] RAX: ffffffffffffffda RBX: 00007f820119c050 RCX: 00007f8201089279 [ 124.569624][ T4602] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 124.577634][ T4602] RBP: 00007f82010e3189 R08: 0000000000000000 R09: 0000000000000000 [ 124.585607][ T4602] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 124.593585][ T4602] R13: 00007fffc989b36f R14: 00007f8202159300 R15: 0000000000022000 [ 124.601553][ T4602] [ 124.604715][ T4602] Kernel Offset: disabled [ 124.609030][ T4602] Rebooting in 86400 seconds..