last executing test programs: 9m0.610460065s ago: executing program 2 (id=38): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x101000, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'dvmrp1\x00', 0x1}) ioctl$TUNSETIFF(r0, 0x400454da, 0x0) 9m0.028984998s ago: executing program 2 (id=40): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x2000000000000004, 0x6, &(0x7f0000000040)) capset(0x0, 0x0) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000200)={0x1, 0x0, 0x0, &(0x7f0000000140)=""/41, 0x0}) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000005c0)) r2 = dup(r1) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000000)={0x1, r2}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000071000000950000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_init_net_socket$llc(0x1a, 0x1, 0x0) getegid() r6 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) bind$802154_raw(r6, &(0x7f0000000080)={0x24, @short={0x2, 0x1, 0xaaa2}}, 0x4c) 8m52.015548863s ago: executing program 2 (id=65): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x4000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="1400000042000501"], 0x14}}, 0x0) recvmmsg(r1, &(0x7f00000006c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000005980), r1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) msync(&(0x7f000002e000/0x1000)=nil, 0x1000, 0x2) r4 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r4, @ANYBLOB="0000000000000000b7080000d8d60b007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r5 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000040), 0x2000, 0x0) r6 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000300)={0x0, r3}, 0x8) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@bloom_filter={0x1e, 0x5, 0x6, 0x726, 0x14000, r4, 0x3, '\x00', 0x0, r5, 0x0, 0x0, 0x3, 0x0, @void, @value, @value=r6}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r7}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5, 0x1000, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000013007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='sched_switch\x00', r9}, 0x10) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="4c00000010004b0400f4ed00000000007a000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800b00010062726964676500001c0002800800040000000000060006"], 0x4c}}, 0x0) 8m50.955964048s ago: executing program 2 (id=68): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) getpriority(0x2, 0x0) 8m49.873559093s ago: executing program 2 (id=70): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'\x00', 0x52d35ce30131f272}) ioctl$TUNSETOFFLOAD(r0, 0x400454c9, 0x13) ioctl$SIOCAX25DELUID(r0, 0x89e2, &(0x7f0000000700)={0x3, @bcast}) 8m49.550899494s ago: executing program 2 (id=76): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) migrate_pages(0xffffffffffffffff, 0x8, 0x0, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_open_procfs(0x0, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000004240)='/proc/meminfo\x00', 0x0, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000080), 0x3fffffffd, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r3, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r3, 0xc01064b5, &(0x7f0000000140)={&(0x7f00000003c0)=[0x0], 0x1}) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000240)={0xffffff7f, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={0x2, 0x1, 0x0, 0x9, 0xa, 0x0, 0x0, 0x0, [@sadb_spirange={0x2}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @dev}}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @dev}}]}, 0x50}}, 0x0) r5 = syz_create_resource$binfmt(&(0x7f0000000180)='./file0\x00') openat$binfmt(0xffffffffffffff9c, r5, 0x42, 0x1ff) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) execve(&(0x7f0000000040)='./file0\x00', 0x0, &(0x7f00000007c0)={[&(0x7f0000000780)='\x00']}) 8m34.429294681s ago: executing program 32 (id=76): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) migrate_pages(0xffffffffffffffff, 0x8, 0x0, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_open_procfs(0x0, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000004240)='/proc/meminfo\x00', 0x0, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000080), 0x3fffffffd, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r3, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r3, 0xc01064b5, &(0x7f0000000140)={&(0x7f00000003c0)=[0x0], 0x1}) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000240)={0xffffff7f, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={0x2, 0x1, 0x0, 0x9, 0xa, 0x0, 0x0, 0x0, [@sadb_spirange={0x2}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @dev}}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @dev}}]}, 0x50}}, 0x0) r5 = syz_create_resource$binfmt(&(0x7f0000000180)='./file0\x00') openat$binfmt(0xffffffffffffff9c, r5, 0x42, 0x1ff) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) execve(&(0x7f0000000040)='./file0\x00', 0x0, &(0x7f00000007c0)={[&(0x7f0000000780)='\x00']}) 6m49.309656962s ago: executing program 5 (id=523): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000980)={[{@grpquota}, {}, {@nombcache}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@discard}, {@nodelalloc}, {@noblock_validity}, {@commit={'commit', 0x3d, 0x4}}], [{@mask={'mask', 0x3d, '^MAY_READ'}}, {@dont_measure}, {@fsuuid={'fsuuid', 0x3d, {[0x35, 0x32, 0x62, 0x65, 0x61, 0x66, 0x33, 0x27], 0x2d, [0x30, 0x61, 0x65, 0x33], 0x2d, [0x36, 0x30, 0x31, 0x62], 0x2d, [0x0, 0x31, 0x0, 0x39], 0x2d, [0x32, 0x65, 0x38, 0x36, 0x32, 0x32, 0x66, 0x38]}}}, {@dont_measure}]}, 0xfe, 0x54c, &(0x7f0000000400)="$eJzs3d9rW1UcAPDvTdv91nUwhvoghT04mUvX1h8TfJiPosOBvs/Q3pXRZBlNOtY6cHtwL77IEEQciH+A7z4O/wH/ioEOhoyiD75EbnrTZWvSZm22Zubzgduec+9Nzz0593t6Tk5CAhhaE9mPQsSrEfFtEnG47dho5Acn1s5bfXh9NtuSaDQ++yuJJN/XOj/Jfx/MM69ExG9fR5wsbCy3tryyUCqX08U8P1mvXJmsLa+culQpzafz6eXpmZkz78xMv//eu32r65vn//nh07sfnfnm+Or3v9w/cjuJs3EoP9Zejx240Z6ZiIn8ORmLs0+cONWHwgZJstsXwLaM5HE+FlkfcDhG8qgH/v++iogGMKQS8Q9DqjUOaM3t+zQPfmE8+HBtArSx/qNrr43Evubc6MBq8tjMKJvvjveh/KyMX/+8czvbon+vQwBs6cbNiDg9Orqx/0vy/m/7TvdwzpNl6P/g+bmbjX/e6jT+KayPf6LD+Odgh9jdjq3jv3C/D8V0lY3/Pug4/l1ftBofyXMvNcd8Y8nFS+U069tejogTMbY3y2+2nnNm9V6j27H28V+2ZeW3xoL5ddwf3fv4Y+ZK9dJO6tzuwc2I1zqOf5P19k86tH/2fJzvsYxj6Z3Xux3buv7PVuPniDc6tv+jFa1k8/XJyeb9MNm6Kzb6+9ax37uVv9v1z9r/wOb1H0/a12trT1/GT/v+Tbsd2+79vyf5vJnek++7VqrXF6ci9iSfbNw//eixrXzr/Kz+J45v3v91uv/3R8QXPdb/1tFbXU8dhPafe6r2f/rEvY+//LFb+b21/9vN1Il8Ty/9X68XuJPnDgAAAAAAAAZNISIORVIorqcLhWJx7f0dR+NAoVyt1U9erC5dnovmZ2XHY6zQWuk+3PZ+iKn8/bCt/PQT+ZmIOBIR343sb+aLs9Xy3G5XHgAAAAAAAAAAAAAAAAAAAAbEwS6f/8/8MbLbVwc8c77yG4bXlvHfj296AgaS//8wvMQ/DC/xD8NL/MPwEv8wvMQ/DC/xD8NL/AMAAAAAAAAAAAAAAAAAAAAAAAAAAEBfnT93Ltsaqw+vz2b5uavLSwvVq6fm0tpCsbI0W5ytLl4pzler8+W0OFutbPX3ytXqlanpWLo2WU9r9cna8sqFSnXpcv3CpUppPr2Qjj2XWgEAAAAAAAAAAAAAAAAAAMCLpba8slAql9NFCYltJUYH4zIk+pzY7Z4JAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB75LwAA///MUDi3") openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x0, 0x0) syz_init_net_socket$rose(0xb, 0x5, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket(0x848000000015, 0x805, 0x0) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x1a}, 0x10}, 0x1c) sendto$inet6(r2, 0x0, 0x0, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private2}, 0x1c) 6m48.758808864s ago: executing program 1 (id=524): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="d8000000580081044e81f782db44b904021d080009000300e8fe55a1180015000600142603600e120900210000000401a8001600", 0x34}], 0x1}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x0, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="6a0aa8ff0000000071106500fffffff295000743000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="33fe00004a00530c8e5eb88edc5a9c0e0a9b80"], 0xfe33) 6m48.528119165s ago: executing program 1 (id=525): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x4, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='timer_start\x00', r1}, 0x10) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000940)) 6m48.447422555s ago: executing program 1 (id=526): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000280)={@val={0x0, 0x800}, @val={0x1, 0x0, 0x0, 0x1, 0x3d}, @mpls={[], @ipv4=@tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x1, 0x0, 0x0, 0x84, 0x0, @remote, @broadcast}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x2, 0x5}}}}}, 0x36) 6m47.52740384s ago: executing program 5 (id=529): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e00000004000000080000000620000000000000", @ANYRES32, @ANYRES32=0x0, @ANYRES32], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000001000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008180000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r4}, 0x6) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000000000)) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.current\x00', 0x275a, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r7, 0x0, 0x4}, 0x18) socketpair$unix(0x1, 0x2, 0x0, 0x0) r8 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r8, 0xc004743e, 0x20001400) ioctl$TUNSETOFFLOAD(r8, 0x4010744d, 0x20000000) r9 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000005c0)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r9, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x13, 0x4, &(0x7f0000000040)=ANY=[@ANYRES64], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000100)='./bus\x00', 0x1010000, &(0x7f0000000280)={[{@utf8}, {@uni_xlate}, {@uni_xlateno}, {@utf8}, {@utf8no}, {@uni_xlateno}, {@uni_xlate}, {@fat=@check_strict}, {@uni_xlate}, {@shortname_mixed}, {@fat=@errors_continue}, {@uni_xlateno}, {@shortname_win95}, {@shortname_winnt}, {@numtail}, {@uni_xlate}, {@fat=@dmask={'dmask', 0x3d, 0x7fff}}]}, 0x3, 0x369, &(0x7f0000000700)="$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") 6m35.613792293s ago: executing program 5 (id=555): r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324", 0x12}], 0x1}, 0x0) close(0x3) 6m35.554806143s ago: executing program 1 (id=558): openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) setsockopt(0xffffffffffffffff, 0x1, 0x20, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, '.\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$nl_route(0x10, 0x3, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) socketpair(0x1, 0x2, 0x0, &(0x7f0000000300)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000480)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0xff, 0x7fff0010}]}) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(r3, 0x40082102, &(0x7f0000000080)) r4 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000001700), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r4, 0xc0285700, &(0x7f0000000000)={0x0, "f3c492eb0165203d36bec7080089b42c000004002231a110000000005900"}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r4, 0xc0285700, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000001c0)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2, r5}, 0x38) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x4b52, &(0x7f0000000000)={0x2, {0x2, 0x8000, 0x0, 0x4}}) 6m35.496289364s ago: executing program 5 (id=560): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000240)=@framed, &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = socket$kcm(0x29, 0x2, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, 0x0, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$sock_kcm_SIOCKCMATTACH(r5, 0x89e0, &(0x7f0000000040)={r5, r6}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r4}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f00000003c0)=[@increfs], 0x0, 0x0, 0x0}) dup3(r7, r0, 0x0) r8 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$netlink(r8, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)}, 0x0) openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) 6m34.02077802s ago: executing program 1 (id=563): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) close(r0) 6m33.961047511s ago: executing program 5 (id=564): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000780)={{0x14}, [@NFT_MSG_DELRULE={0x38, 0x6, 0xa, 0xe01, 0x0, 0x0, {0x2}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x4}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x60}, 0x1, 0x0, 0x0, 0x40090}, 0x0) 6m33.856343251s ago: executing program 1 (id=565): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e00000004000000080000000620000000000000", @ANYRES32, @ANYRES32=0x0, @ANYRES32], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000001000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008180000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r4}, 0x6) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000000000)) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.current\x00', 0x275a, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r7, 0x0, 0x4}, 0x18) socketpair$unix(0x1, 0x2, 0x0, 0x0) r8 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r8, 0xc004743e, 0x20001400) ioctl$TUNSETOFFLOAD(r8, 0x4010744d, 0x20000000) r9 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000005c0)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r9, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x13, 0x4, &(0x7f0000000040)=ANY=[@ANYRES64], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000100)='./bus\x00', 0x1010000, &(0x7f0000000280)={[{@utf8}, {@uni_xlate}, {@uni_xlateno}, {@utf8}, {@utf8no}, {@uni_xlateno}, {@uni_xlate}, {@fat=@check_strict}, {@uni_xlate}, {@shortname_mixed}, {@fat=@errors_continue}, {@uni_xlateno}, {@shortname_win95}, {@shortname_winnt}, {@numtail}, {@uni_xlate}, {@fat=@dmask={'dmask', 0x3d, 0x7fff}}]}, 0x3, 0x369, &(0x7f0000000700)="$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") 6m33.583305762s ago: executing program 5 (id=567): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) close(r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000400)='kmem_cache_free\x00', r2}, 0x10) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETQUEUE(r3, 0x400454d9, &(0x7f0000000200)={'caif0\x00', 0x400}) close(r1) write$cgroup_devices(r3, &(0x7f0000000140)=ANY=[@ANYBLOB="1e0306003c5c980128836360864666702c1ffe80000000000000ff1422f4c2f96901a1"], 0xffdd) 6m18.35395868s ago: executing program 33 (id=565): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e00000004000000080000000620000000000000", @ANYRES32, @ANYRES32=0x0, @ANYRES32], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000001000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008180000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r4}, 0x6) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000000000)) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.current\x00', 0x275a, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r7, 0x0, 0x4}, 0x18) socketpair$unix(0x1, 0x2, 0x0, 0x0) r8 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r8, 0xc004743e, 0x20001400) ioctl$TUNSETOFFLOAD(r8, 0x4010744d, 0x20000000) r9 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000005c0)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r9, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x13, 0x4, &(0x7f0000000040)=ANY=[@ANYRES64], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000100)='./bus\x00', 0x1010000, &(0x7f0000000280)={[{@utf8}, {@uni_xlate}, {@uni_xlateno}, {@utf8}, {@utf8no}, {@uni_xlateno}, {@uni_xlate}, {@fat=@check_strict}, {@uni_xlate}, {@shortname_mixed}, {@fat=@errors_continue}, {@uni_xlateno}, {@shortname_win95}, {@shortname_winnt}, {@numtail}, {@uni_xlate}, {@fat=@dmask={'dmask', 0x3d, 0x7fff}}]}, 0x3, 0x369, &(0x7f0000000700)="$eJzs3U1oY1UbAOA3vWnSGfi+dicKQnQnaJnOTje2SAcGu1EJ/izE4HRUkiq0WGwX09aF4lJwqSt3CrpwIS5FUMSdC7eOIKPiQmc34OCR5OYmt0naaQerFJ9nkZy+57znnPtDcntJTp5bjPal6bh8/fq1mJmpRHXxkcW4UYm5yKKwG+NqE2IAwOlwI6X4PeWOmFI54SkBACes9/7/QkQ0Yi6PvP7lYe2Td38AOPX6//+fOazNzEEVr5zIlACAEzZ2///efdW1akQtqsWf1dKnAgCA0+qJp595dGkl4vFGYyZi7c3N5mYzHhrWL12Ol6ITq3EuZuNmRH6h0H2o9B4vXFxZPtdoNHbip7loRsRUP7GZXyksZb38eizEbMz187uXGqlXzi58srK80OiJiN2d3vixVtlsTsfZ/vjfn43V4YVH0UnvKeLiyvL5Rr+D5lqRvxOxN7xv0Z3/fMzGt88Pukmp+ATjyvKVhWLSw/zNZj0uDfbCgXdAAAAAAAAAAAAAAAAAAAAAAADgtsw3BuYG6+ek7nO+Us78/IT63vo4eX5/faC9fH2gVE+R0m+vPdB8K4t96wONrs+zaSFBAAAAAAAAAAAAAAAAAAAAGNjYqkWr01ld39jabpcLO+sbW1MR0Y28/PVHX5yJ8Ta3KFTzIeoRgyEa/WG3262UFY1TFjGennUHLyIffDqYcblNfbAVE6dRP7iq0/nfPT++O4zcnRU9/zlsk8XkDcxK03h4pOe1/+dTOs6OGhTOlyP18dGvppRKkTfK6VeeHe8wKhHV4x+47fZUHNwmdQtfXXvxzmLvtz5Pufvun33y6jvv/9JudbojR+8I1tY3bqZ2q1I0Pt5u6e7qIlKJvFApnwnVw9L39kda2Xe/PnXX298cbfRUjrzaPZ9H2mT55nw8ml7LC91pjlSdGaZP9zeiszo94eS/VeE2jukd7332YUo//HzkIYamxl42Kn/Pqw8AAAAAAAAAAAAAAAAAAFBW+q54X//LvtOHZT342MnPDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD+OcPf/y8V9nZjJDIo7I5FBoU/diZk1VfXNyJq//ZmAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwH/dXAAAA//+g5Vir") 6m18.33061222s ago: executing program 34 (id=567): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) close(r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000400)='kmem_cache_free\x00', r2}, 0x10) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETQUEUE(r3, 0x400454d9, &(0x7f0000000200)={'caif0\x00', 0x400}) close(r1) write$cgroup_devices(r3, &(0x7f0000000140)=ANY=[@ANYBLOB="1e0306003c5c980128836360864666702c1ffe80000000000000ff1422f4c2f96901a1"], 0xffdd) 25.626845818s ago: executing program 4 (id=2116): ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000004c0)={'tunl0\x00', &(0x7f0000000180)={'sit0\x00', 0x0, 0x8, 0x700, 0x5, 0x5, {{0x5, 0x4, 0x3, 0x0, 0x14, 0x64, 0x0, 0x4, 0x4, 0x0, @empty, @multicast1}}}}) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="04221f20aaaaaaaaaa123044666e62fa100005aaaaaaaaaa11080208e0bd"], 0x22) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x48040}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() getpid() prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000040)={0x84, @multicast2, 0x4e20, 0x3, 'wrr\x00', 0x3, 0x4, 0x200072}, 0x2c) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r4, 0x0, 0x487, &(0x7f0000000000)={{0x84, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e21, 0x3, 'lblcr\x00', 0x4, 0x81, 0x5}, {@rand_addr=0x64010102, 0x4e23, 0x0, 0xcb, 0x12d5f, 0x12d5c}}, 0x44) setsockopt$IP_VS_SO_SET_FLUSH(0xffffffffffffffff, 0x0, 0x485, 0x0, 0x0) 24.252935442s ago: executing program 3 (id=2124): r0 = syz_open_dev$I2C(0x0, 0x0, 0x0) ioctl$I2C_PEC(r0, 0x708, 0x40) ioctl$I2C_SMBUS(r0, 0x720, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) keyctl$set_timeout(0xf, 0x0, 0xe000) 23.246217465s ago: executing program 3 (id=2128): sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="500000000308010300000000000000000000000006000240000000002c00048008000b40000000000800014000000000080003"], 0x50}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_STATION(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010003000000000000001200000008000300", @ANYRES32=r2, @ANYBLOB="0a00060008021100000100001000118004"], 0x38}}, 0x0) 23.148220725s ago: executing program 7 (id=2129): bpf$MAP_CREATE(0x0, 0x0, 0x48) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x200c8004, 0x0, 0x0) ioctl$sock_SIOCGPGRP(r2, 0x8904, 0x0) syz_open_dev$video4linux(&(0x7f0000000080), 0xff, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='projid_map\x00') syz_genetlink_get_family_id$devlink(&(0x7f0000000400), 0xffffffffffffffff) r3 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r3, 0x40045532, &(0x7f0000000100)) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r3, 0x80045530, &(0x7f0000000580)=""/221) 21.938412968s ago: executing program 7 (id=2130): io_setup(0x401, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000480)) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @dev}, 0x10) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x1c) 21.795543048s ago: executing program 3 (id=2131): socket$inet6_udp(0xa, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x1, 0x0, 0x0) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080), 0x4) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="0207a20802"], 0x10}}, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000080)={{{@in=@broadcast, @in=@rand_addr=0x64010100, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee00}, {0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x1}, {0x40000000000000, 0x0, 0x0, 0x10000}, 0x0, 0x0, 0x1}, {{@in=@loopback, 0x10000, 0x32}, 0x0, @in=@multicast1, 0x0, 0x0, 0x0, 0xb7, 0x1fb, 0xffffffff}}, 0xe8) sendmmsg(r1, &(0x7f0000000180), 0x400000000000077, 0x7600) 20.988336511s ago: executing program 7 (id=2140): bpf$MAP_CREATE(0x0, 0x0, 0x48) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x200c8004, 0x0, 0x0) ioctl$sock_SIOCGPGRP(r2, 0x8904, 0x0) syz_open_dev$video4linux(&(0x7f0000000080), 0xff, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000400), 0xffffffffffffffff) r3 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r3, 0x40045532, &(0x7f0000000100)) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r3, 0x80045530, &(0x7f0000000580)=""/221) 20.978955451s ago: executing program 4 (id=2141): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0xf0b, 0x3, 0x25dfdc00, {0x60, 0x0, 0x0, 0x0, {0xfff3, 0xfff2}, {0x2, 0xffff}, {0xfff3, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_WASH={0x8}, @TCA_CAKE_AUTORATE={0x8, 0x9, 0x1}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x44045}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e"], 0x50}}, 0x4000000) 20.127038603s ago: executing program 3 (id=2143): socket(0x5, 0x0, 0x4) r0 = socket$inet(0x2, 0x2, 0x1) r1 = socket$inet(0xa, 0x801, 0x84) connect$inet(0xffffffffffffffff, 0x0, 0x17) listen(r1, 0x8) r2 = accept4(r1, 0x0, 0x0, 0x80000) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f0000000040), &(0x7f0000000100)=0xc) bind$inet(r0, &(0x7f00000004c0)={0x2, 0x6e24, @empty}, 0x10) socket$inet(0x2, 0x2, 0x1) r3 = socket$inet(0x2, 0x2, 0x1) bind$inet(r3, &(0x7f0000000000)={0x2, 0x6ea4, @empty}, 0x10) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r5 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r5, 0x0, 0x80, &(0x7f0000000000)=@broute={'broute\x00', 0x9a02, 0x0, 0x90, [0x0, 0x20001130], 0x10d, 0x0, &(0x7f0000001100)=[{}, {}, {}]}, 0x108) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r6, 0x84, 0xb, &(0x7f0000000280)={0x0, 0x4}, 0xe) socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000400)=ANY=[@ANYBLOB="0000000003140003000000f9dbdf2520"], 0x10}, 0x1, 0x0, 0x0, 0x50}, 0x8011) shutdown(r6, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000240)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r2, 0x84, 0x70, &(0x7f0000000300)={r7, @in6={{0xa, 0x4e23, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x200}}, [0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001]}, &(0x7f0000000140)=0x100) bind$bt_hci(r4, 0x0, 0x0) ioctl$sock_bt_hci(r2, 0x400448c9, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00'}, 0x10) r8 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r8, 0xc004743e, &(0x7f0000000000)) ioctl$PPPIOCSMAXCID(r8, 0x4004743c, 0x0) r9 = socket$kcm(0x2, 0xa, 0x2) ioctl$sock_SIOCETHTOOL(r9, 0x8946, &(0x7f0000000540)={'bond0\x00', &(0x7f0000000040)=@ethtool_sfeatures={0x3b, 0x2, [{0x300}, {0xfffffffd, 0x9}]}}) 20.057367673s ago: executing program 7 (id=2144): r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=@newtaction={0x6c, 0x30, 0x1, 0x3, 0x0, {}, [{0x58, 0x1, [@m_skbmod={0x54, 0x1, 0x0, 0x0, {{0xb}, {0x28, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{0x0, 0x2, 0x20000000, 0xfffffff3, 0x5}, 0xb}}]}, {0x4, 0x14}, {0xc}, {0xc, 0x6}}}]}]}, 0x6c}}, 0x0) 19.981341604s ago: executing program 4 (id=2146): mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1, 0x42072, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0xc3072, 0xffffffffffffffff, 0x2000) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x4ca31, 0xffffffffffffffff, 0x0) 18.866709937s ago: executing program 7 (id=2149): r0 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r0, &(0x7f0000000600)={&(0x7f0000000040)={0x2, 0x0, @empty}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000400)='\b\x00', 0x2}, {&(0x7f0000000100)="96bc1480bb58", 0x6}], 0x2}, 0x20000810) 18.792396927s ago: executing program 4 (id=2150): io_setup(0x401, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000480)) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @dev}, 0x10) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x1c) 18.607359188s ago: executing program 7 (id=2153): r0 = socket$kcm(0x2, 0x3, 0x84) sendmsg$inet(r0, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB], 0x1c}}, 0x0) ioctl$SIOCX25CALLACCPTAPPRV(r1, 0x89e8) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) close(r3) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) write$cgroup_subtree(r2, &(0x7f0000000180)=ANY=[], 0x14) 18.477016638s ago: executing program 3 (id=2154): bpf$MAP_CREATE(0x0, 0x0, 0x48) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x200c8004, 0x0, 0x0) ioctl$sock_SIOCGPGRP(r2, 0x8904, 0x0) syz_open_dev$video4linux(&(0x7f0000000080), 0xff, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000400), 0xffffffffffffffff) r3 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r3, 0x40045532, &(0x7f0000000100)) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r3, 0x80045530, &(0x7f0000000580)=""/221) 17.009666822s ago: executing program 4 (id=2156): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000080850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x18) faccessat2(0xffffffffffffff9c, 0x0, 0x1, 0x100) move_mount(0xffffffffffffffff, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chroot(&(0x7f0000000000)='./file0\x00') chroot(&(0x7f00000001c0)='./file0/../file0/../file0\x00') umount2(&(0x7f0000000240)='./file0/../file0/../file0\x00', 0x9) 17.008440382s ago: executing program 3 (id=2159): r0 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r0, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x10) r1 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r1, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x10) connect$llc(r1, &(0x7f0000000040)={0x1a, 0x1b, 0x0, 0x0, 0x0, 0x2, @broadcast}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000002140)={@map, 0xffffffffffffffff, 0x32, 0x10, 0xffffffffffffffff, @void, @value}, 0x20) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="600000000206010200000000000000000000000014000780050014000700000008001240000500000900020073797a3200000000050001000700000011000300686173683a6e65742c6e6574000000000500050002000000050004"], 0x60}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000340)={'veth1_macvtap\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@dellink={0x20, 0x11, 0x101, 0x0, 0x0, {0x0, 0x0, 0x0, r5}}, 0x20}}, 0x0) r6 = syz_init_net_socket$llc(0x1a, 0x802, 0x0) bind$llc(r6, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x10) 16.963104242s ago: executing program 4 (id=2160): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e"], 0x50}}, 0x4000000) 14.0504264s ago: executing program 6 (id=2174): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000940)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)={{0x14}, [@NFT_MSG_NEWRULE={0x60, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @quota={{0xa}, @val={0x18, 0x2, 0x0, 0x1, [@NFTA_QUOTA_BYTES={0xc, 0x1, 0x1, 0x0, 0x4}, @NFTA_QUOTA_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_USERDATA={0x5, 0x7, 0x1, 0x0, "c5"}]}], {0x14}}, 0x88}}, 0x0) 13.88730444s ago: executing program 6 (id=2175): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000480), 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) sendmsg$can_bcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=ANY=[@ANYBLOB="0500"/15, @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="2ce8"], 0x48}}, 0x0) sendmsg$can_bcm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB="05"], 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x4040) sendmsg$can_bcm(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x1d, r1}, 0x10, &(0x7f0000000280)={&(0x7f0000000100)={0x7, 0x8, 0x0, {}, {0x77359400}, {0xe8}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "1d0b6382972f4b8f"}}, 0x48}}, 0x0) 13.844284951s ago: executing program 6 (id=2176): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) dup3(r0, r1, 0x0) sendmmsg$inet(r1, &(0x7f0000004f00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x20008804) 13.801164261s ago: executing program 6 (id=2177): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x9) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x922ce000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) socket(0x2b, 0x1, 0x1) bind$inet6(r3, 0x0, 0x0) listen(r3, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r4, 0xffffffffffffffff, 0x0) 12.831348714s ago: executing program 6 (id=2179): r0 = socket(0x1000000000000010, 0x80802, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f00000003c0)={'batadv_slave_1\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f00000011c0)={0xc, 0xe, &(0x7f0000001280)=ANY=[@ANYBLOB="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"/3349], &(0x7f0000000340)='syzkaller\x00', 0x345, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000100)=@delchain={0x24, 0x5f, 0xf31, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r3, {}, {0x5, 0x2}, {0x1}}}, 0x24}}, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f00000004c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x320, 0x160, 0x2b8, 0xb0000010, 0x160, 0x5c8f0200, 0x250, 0x3a8, 0x3a8, 0x250, 0x3a8, 0x3, 0x0, {[{{@ipv6={@private1, @local, [0xff], [], '\x00', 'veth0_to_team\x00'}, 0x0, 0x118, 0x160, 0x700, {}, [@common=@inet=@socket3={{0x28}, 0x7}, @common=@unspec=@limit={{0x48}, {0x0, 0x3, 0x0, 0x0, 0x20000}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x206, 'syz1\x00'}}}, {{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @loopback, [0xff, 0xff000000, 0xffffff00, 0xffffff00], [0xffffffff, 0xffffff00, 0xff000000, 0xd73e1135d3f8cc97], 'team_slave_0\x00', 'pim6reg1\x00', {0xff}, {0xff}, 0x2e, 0xb, 0x1, 0x12}, 0x0, 0xd0, 0xf0, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x380) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2000000011000101000000000080000000000000", @ANYRES32=r1], 0x20}}, 0x10) 7.996214447s ago: executing program 0 (id=2190): r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x39, &(0x7f0000e86000)="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", 0x118) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000006c0)=0x1, 0x4) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0xfec0ffff00000000}}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000040), 0x4) 7.963969237s ago: executing program 0 (id=2191): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000002"], 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000400)={{r0}, &(0x7f0000000340), &(0x7f00000003c0)='%pS \x00'}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x13, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 7.843089848s ago: executing program 0 (id=2192): io_setup(0x401, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000480)) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @dev}, 0x10) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x1c) 7.00835168s ago: executing program 0 (id=2193): bpf$MAP_CREATE(0x0, 0x0, 0x48) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x200c8004, 0x0, 0x0) ioctl$sock_SIOCGPGRP(r2, 0x8904, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='projid_map\x00') readv(r3, 0x0, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000400), 0xffffffffffffffff) r4 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r4, 0x40045532, &(0x7f0000000100)) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r4, 0x80045530, &(0x7f0000000580)=""/221) 6.059061273s ago: executing program 0 (id=2194): r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000012c0)=[@rdma_args={0x48, 0x114, 0x1, {{0x3, 0x2}, {&(0x7f0000001080)=""/148, 0x94}, &(0x7f00000011c0)=[{&(0x7f0000000780)=""/107, 0x6b}], 0x1, 0x60, 0xffffffff00000001}}], 0x48, 0x8004}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_open_procfs$namespace(0x0, &(0x7f0000000280)='ns/net\x00') bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000480)={@cgroup=r4, 0x11, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0}, 0x40) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$tipc(0x1e, 0x2, 0x0) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@updsa={0x13c, 0x10, 0x1, 0x0, 0x0, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0xa, 0x20, 0x0, 0x5c}, {@in6=@loopback, 0x0, 0x33}, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, {0x0, 0xffffffffffffffff}, {0x0, 0xfffffffffffffffd}, {}, 0x0, 0x0, 0xa, 0x4, 0x80}, [@algo_auth_trunc={0x4c, 0x14, {{'sm3\x00'}}}]}, 0x13c}, 0x1, 0x0, 0x0, 0x20004001}, 0x0) connect$tipc(r6, &(0x7f0000003100)=@id, 0x10) socket$l2tp(0x2, 0x2, 0x73) sendmmsg$inet(r6, &(0x7f0000002f40)=[{{0x0, 0x0, &(0x7f00000016c0)=[{&(0x7f00000002c0)="91199893b794f675ec88239fef317c764ee3a8ecbdc2a8c32d46f77944d1de9f924d05d3566b8eb8f5750393c669559d05543efa2927ef0d2b10e3d4f8541f34e1c7c8ca2d1e811f67f3dc50fdd469af72a49e684e28a364f5da124dff2b55a5536aa670b82da70bf0f19cd420371848ddc41d65649fde307c1971599f2fec84845e32bb2b6ebda099de12e8b64842024389524a1c5a97608000d1030d99e2a6e23a0bc8", 0xa4}, {&(0x7f0000000380)="11a68683394e1541cc444dff7adf30f079408cb066a6f8f4d33c4f11850de78c586d1a2ccff92e8e83fb82e447d9b88de42182e9e8c97415f41ef8a504215a2b2fdb1404c9659fdb988d0f527c3675cf2b", 0x51}, {&(0x7f0000000400)="875ad17d55c11f1ea6ec6cd17661afc73209e32142961e4660591bf3ca40d05a507ac0b0e71f7ed4c63f52a003cc8102f20dc6e33b5dc6de64ac815cf87867507cc072f0cb762aa5deb8731a699d3c7c69f85266ba51eb244f20129de491adaeb0c2d2eb13c1f215ddff92b05148f0ad513018b14798e45e55ecb916d4dd89f2df7e33c470998f325bf453f929d86196", 0x90}, {&(0x7f00000004c0)="1273dd9951adeaefffe3c4957c86dbff8693adf2202b620b3aec000cf330bb7249", 0x21}, {&(0x7f0000000500)="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", 0xba7}], 0x5}}], 0x300, 0x0) recvfrom$phonet(0xffffffffffffffff, &(0x7f0000000040)=""/244, 0xf4, 0x1, 0x0, 0x0) bind$tipc(r6, 0x0, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000200)=ANY=[@ANYBLOB="300000001e000100000000000000000002000000", @ANYRES32, @ANYBLOB="00000000140001"], 0x30}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[], 0x38}, 0x1, 0x0, 0x0, 0x200840d0}, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'lo\x00', 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r10, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000040)=[{0x20}, {0x6}]}, 0x10) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newqdisc={0x40, 0x24, 0xd0f, 0x70bd29, 0x0, {0x60, 0x0, 0x0, r9, {0x0, 0x3}, {0xffff, 0xffff}, {0xfff1}}, [@qdisc_kind_options=@q_pfifo_head_drop={{0x14}, {0x8, 0x2, 0x5192}}]}, 0x40}, 0x1, 0x0, 0x0, 0x80d1}, 0x3000c81c) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000000)={'syztnl0\x00', &(0x7f0000000080)={'sit0\x00', r9, 0x7800, 0x11, 0x2, 0x4, {{0x15, 0x4, 0x2, 0x14, 0x54, 0x68, 0x0, 0x7, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0x43}, @multicast1, {[@cipso={0x86, 0x24, 0x3, [{0x0, 0xc, "24ea08ada48d82dbbe3a"}, {0x6, 0x3, '>'}, {0x4009fa57eaf4d45b, 0xf, "49fc789f2d5835e9bfc7df5ee8"}]}, @ra={0x94, 0x4}, @timestamp_addr={0x44, 0x14, 0x2b, 0x1, 0x5, [{@multicast2, 0x4}, {@rand_addr=0x64010102, 0x8}]}, @noop]}}}}}) 2.812139521s ago: executing program 35 (id=2153): r0 = socket$kcm(0x2, 0x3, 0x84) sendmsg$inet(r0, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB], 0x1c}}, 0x0) ioctl$SIOCX25CALLACCPTAPPRV(r1, 0x89e8) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) close(r3) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) write$cgroup_subtree(r2, &(0x7f0000000180)=ANY=[], 0x14) 1.785406174s ago: executing program 36 (id=2159): r0 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r0, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x10) r1 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r1, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x10) connect$llc(r1, &(0x7f0000000040)={0x1a, 0x1b, 0x0, 0x0, 0x0, 0x2, @broadcast}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000002140)={@map, 0xffffffffffffffff, 0x32, 0x10, 0xffffffffffffffff, @void, @value}, 0x20) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="600000000206010200000000000000000000000014000780050014000700000008001240000500000900020073797a3200000000050001000700000011000300686173683a6e65742c6e6574000000000500050002000000050004"], 0x60}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000340)={'veth1_macvtap\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@dellink={0x20, 0x11, 0x101, 0x0, 0x0, {0x0, 0x0, 0x0, r5}}, 0x20}}, 0x0) r6 = syz_init_net_socket$llc(0x1a, 0x802, 0x0) bind$llc(r6, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x10) 1.752806074s ago: executing program 37 (id=2160): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e"], 0x50}}, 0x4000000) 57.539359ms ago: executing program 6 (id=2198): openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, '.\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000480)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0xff, 0x7fff0010}]}) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(r3, 0x40082102, &(0x7f0000000080)) ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f0000000000)={0x0, "f3c492eb0165203d36bec7080089b42c000004002231a110000000005900"}) ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, 0x0) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x4b52, &(0x7f0000000000)={0x2, {0x2, 0x8000, 0x0, 0x4}}) 0s ago: executing program 0 (id=2199): ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000004c0)={'tunl0\x00', &(0x7f0000000180)={'sit0\x00', 0x0, 0x8, 0x700, 0x5, 0x5, {{0x5, 0x4, 0x3, 0x0, 0x14, 0x64, 0x0, 0x4, 0x4, 0x0, @empty, @multicast1}}}}) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="04221f20aaaaaaaaaa123044666e62fa100005aaaaaaaaaa11080208e0bd"], 0x22) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x48040}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() getpid() prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000040)={0x84, @multicast2, 0x4e20, 0x3, 'wrr\x00', 0x3, 0x4, 0x200072}, 0x2c) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r4, 0x0, 0x487, &(0x7f0000000000)={{0x84, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e21, 0x3, 'lblcr\x00', 0x4, 0x81, 0x5}, {@rand_addr=0x64010102, 0x4e23, 0x0, 0xcb, 0x12d5f, 0x12d5c}}, 0x44) setsockopt$IP_VS_SO_SET_FLUSH(r3, 0x0, 0x485, 0x0, 0x0) kernel console output (not intermixed with test programs): ype=1326 audit(239.200:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6954 comm="syz.3.640" exe="/root/syz-executor" sig=9 arch=c00000b7 syscall=98 compat=0 ip=0xffff9e94b368 code=0x0 [ 239.265803][ T6959] loop0: detected capacity change from 0 to 1024 [ 239.272108][ T6959] ext4: Unknown parameter 'mask' [ 239.316843][ T5547] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 239.318032][ T6946] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 240.300349][ T6970] netlink: 'syz.0.643': attribute type 29 has an invalid length. [ 240.302306][ T6970] netlink: 'syz.0.643': attribute type 29 has an invalid length. [ 240.308292][ T6859] chnl_net:caif_netlink_parms(): no params data found [ 240.311441][ T6970] netlink: 'syz.0.643': attribute type 29 has an invalid length. [ 240.336267][ T6970] netlink: 'syz.0.643': attribute type 29 has an invalid length. [ 241.175720][ T6978] device syzkaller0 entered promiscuous mode [ 241.714288][ T6860] chnl_net:caif_netlink_parms(): no params data found [ 241.780653][ T6859] bridge0: port 1(bridge_slave_0) entered blocking state [ 241.783419][ T6859] bridge0: port 1(bridge_slave_0) entered disabled state [ 241.808976][ T6859] device bridge_slave_0 entered promiscuous mode [ 241.849564][ T6859] bridge0: port 2(bridge_slave_1) entered blocking state [ 241.851757][ T6859] bridge0: port 2(bridge_slave_1) entered disabled state [ 241.854172][ T6859] device bridge_slave_1 entered promiscuous mode [ 241.914268][ T6860] bridge0: port 1(bridge_slave_0) entered blocking state [ 241.921497][ T6860] bridge0: port 1(bridge_slave_0) entered disabled state [ 241.928021][ T6860] device bridge_slave_0 entered promiscuous mode [ 241.954485][ T6859] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 242.126696][ T7008] netlink: 64859 bytes leftover after parsing attributes in process `syz.0.648'. [ 242.143267][ T7007] loop3: detected capacity change from 0 to 1024 [ 242.162544][ T7007] ext4: Unknown parameter 'mask' [ 242.190612][ T6860] bridge0: port 2(bridge_slave_1) entered blocking state [ 242.192733][ T6860] bridge0: port 2(bridge_slave_1) entered disabled state [ 242.203957][ T6860] device bridge_slave_1 entered promiscuous mode [ 242.214742][ T6983] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 242.215814][ T6859] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 242.262514][ T27] audit: type=1326 audit(242.240:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7012 comm="syz.0.650" exe="/root/syz-executor" sig=9 arch=c00000b7 syscall=98 compat=0 ip=0xffff9674b368 code=0x0 [ 242.650771][ T6859] team0: Port device team_slave_0 added [ 242.653763][ T6859] team0: Port device team_slave_1 added [ 242.670616][ T6860] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 243.041687][ T6860] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 244.135757][ T6859] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 244.137779][ T6859] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 244.142855][ T6859] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 244.311608][ T6859] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 244.313097][ T6859] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 244.355828][ T6859] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 244.363859][ T6860] team0: Port device team_slave_0 added [ 244.442582][ T6860] team0: Port device team_slave_1 added [ 244.606460][ T6859] device hsr_slave_0 entered promiscuous mode [ 244.645008][ T6859] device hsr_slave_1 entered promiscuous mode [ 244.652841][ T7039] netlink: 'syz.4.654': attribute type 29 has an invalid length. [ 244.737886][ T6860] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 244.739372][ T6860] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 244.754770][ T6860] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 244.797855][ T7039] netlink: 'syz.4.654': attribute type 29 has an invalid length. [ 244.802618][ T7040] netlink: 'syz.4.654': attribute type 29 has an invalid length. [ 244.807275][ T6860] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 244.808748][ T6860] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 244.823030][ T6860] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 244.849611][ T7041] netlink: 'syz.4.654': attribute type 29 has an invalid length. [ 244.951208][ T7047] device syzkaller0 entered promiscuous mode [ 245.182335][ T7060] loop3: detected capacity change from 0 to 1024 [ 245.205275][ T7060] ext4: Unknown parameter 'mask' [ 245.268379][ T6946] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 248.236638][ T6860] device hsr_slave_0 entered promiscuous mode [ 248.283023][ T6860] device hsr_slave_1 entered promiscuous mode [ 248.386636][ T6860] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 248.388357][ T6860] Cannot create hsr debugfs directory [ 248.421076][ T7085] netlink: 'syz.0.664': attribute type 29 has an invalid length. [ 248.514413][ T7085] netlink: 'syz.0.664': attribute type 29 has an invalid length. [ 248.525350][ T27] audit: type=1326 audit(248.510:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7093 comm="syz.4.666" exe="/root/syz-executor" sig=9 arch=c00000b7 syscall=98 compat=0 ip=0xffff9ed4b368 code=0x0 [ 248.558392][ T7089] netlink: 'syz.0.664': attribute type 29 has an invalid length. [ 248.806254][ T2058] ieee802154 phy0 wpan0: encryption failed: -22 [ 248.807651][ T2058] ieee802154 phy1 wpan1: encryption failed: -22 [ 248.903425][ T7094] netlink: 'syz.0.664': attribute type 29 has an invalid length. [ 249.026873][ T5547] device hsr_slave_0 left promiscuous mode [ 249.124845][ T5547] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 249.126530][ T5547] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 249.128672][ T5547] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 249.130278][ T5547] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 249.149641][ T5547] device bridge_slave_1 left promiscuous mode [ 249.151032][ T5547] bridge0: port 2(bridge_slave_1) entered disabled state [ 249.206078][ T5547] device bridge_slave_0 left promiscuous mode [ 249.207478][ T5547] bridge0: port 1(bridge_slave_0) entered disabled state [ 249.395202][ T5547] device veth1_macvtap left promiscuous mode [ 249.396589][ T5547] device veth0_macvtap left promiscuous mode [ 249.397842][ T5547] device veth1_vlan left promiscuous mode [ 249.399067][ T5547] device veth0_vlan left promiscuous mode [ 250.132108][ T7120] Injecting memory failure for pfn 0x1ae354 at process virtual address 0x20ffb000 [ 250.138102][ T7120] Memory failure: 0x1ae354: recovery action for reserved kernel page: Ignored [ 253.311971][ T7138] netlink: 'syz.3.675': attribute type 29 has an invalid length. [ 253.995780][ T7143] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 253.997880][ T7143] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 254.068166][ T5547] team0 (unregistering): Port device team_slave_1 removed [ 254.245828][ T5547] team0 (unregistering): Port device team_slave_0 removed [ 254.426067][ T5547] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 254.645925][ T5547] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 257.159891][ T5547] bond0 (unregistering): Released all slaves [ 257.397339][ T7138] netlink: 'syz.3.675': attribute type 29 has an invalid length. [ 257.937230][ T7162] Injecting memory failure for pfn 0x1ae354 at process virtual address 0x20ffb000 [ 257.940820][ T7162] Memory failure: 0x1ae354: already hardware poisoned [ 259.025744][ T6859] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 259.060670][ T6859] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 259.771861][ T6859] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 259.829288][ T6859] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 259.980533][ T7191] netlink: 'syz.4.689': attribute type 29 has an invalid length. [ 260.000247][ T7191] netlink: 'syz.4.689': attribute type 29 has an invalid length. [ 260.034203][ T7191] netlink: 'syz.4.689': attribute type 29 has an invalid length. [ 260.036526][ T7191] netlink: 'syz.4.689': attribute type 29 has an invalid length. [ 260.301962][ T6860] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 260.485067][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 261.086303][ T6860] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 261.189174][ T6859] 8021q: adding VLAN 0 to HW filter on device bond0 [ 261.200267][ T4439] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 261.202298][ T4439] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 261.238685][ T6859] 8021q: adding VLAN 0 to HW filter on device team0 [ 261.240540][ T6860] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 261.276995][ T6860] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 261.322605][ T6302] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 261.325369][ T6302] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 261.327547][ T6302] bridge0: port 1(bridge_slave_0) entered blocking state [ 261.328959][ T6302] bridge0: port 1(bridge_slave_0) entered forwarding state [ 261.346447][ T6302] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 261.383630][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 261.389177][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 261.394977][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 261.396573][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 261.403605][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 261.422442][ T6302] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 261.433259][ T4439] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 261.437295][ T4439] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 261.462189][ T4439] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 261.464372][ T4439] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 261.467749][ T4439] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 261.831450][ T7237] netlink: 'syz.3.701': attribute type 29 has an invalid length. [ 261.853669][ T5547] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 261.868376][ T4477] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 261.874899][ T4477] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 261.876953][ T4477] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 261.878976][ T4477] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 261.908657][ T7237] netlink: 'syz.3.701': attribute type 29 has an invalid length. [ 261.913935][ T6859] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 261.928959][ T7238] netlink: 'syz.3.701': attribute type 29 has an invalid length. [ 262.007348][ T5547] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 262.023333][ T6860] 8021q: adding VLAN 0 to HW filter on device bond0 [ 262.077705][ T6860] 8021q: adding VLAN 0 to HW filter on device team0 [ 262.079521][ T6302] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 262.081655][ T6302] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 262.157114][ T5547] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 262.186899][ T6302] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 262.189175][ T6302] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 262.191309][ T6302] bridge0: port 1(bridge_slave_0) entered blocking state [ 262.192778][ T6302] bridge0: port 1(bridge_slave_0) entered forwarding state [ 262.249644][ T5547] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 262.259101][ T6302] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 262.261711][ T6302] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 262.263914][ T6302] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 262.270861][ T6302] bridge0: port 2(bridge_slave_1) entered blocking state [ 262.272431][ T6302] bridge0: port 2(bridge_slave_1) entered forwarding state [ 262.275121][ T6302] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 262.311884][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 262.314371][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 262.325703][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 262.335966][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 262.346546][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 262.362627][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 262.379601][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 262.382135][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 262.395944][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 262.401585][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 262.409783][ T6860] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 262.426465][ T7249] tipc: Started in network mode [ 262.427670][ T7249] tipc: Node identity 0ae1632b452c, cluster identity 4711 [ 262.434367][ T7249] tipc: Enabled bearer , priority 7 [ 262.446909][ T7249] ªªªªªª: renamed from syzkaller0 [ 262.475642][ T7249] tipc: Disabling bearer [ 262.486466][ T4477] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 262.488111][ T4477] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 262.530392][ T6859] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 262.782501][ T5709] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 262.784253][ T5709] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 262.820509][ T6860] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 263.003630][ T7282] netlink: 'syz.0.710': attribute type 29 has an invalid length. [ 263.033273][ T7282] netlink: 'syz.0.710': attribute type 29 has an invalid length. [ 263.221039][ T6723] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 263.223592][ T6723] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 263.408775][ T6859] device veth0_vlan entered promiscuous mode [ 263.414079][ T6859] device veth1_vlan entered promiscuous mode [ 263.430110][ T4477] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 263.432280][ T4477] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 263.434454][ T4477] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 264.455004][ T4477] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 264.457181][ T4477] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 264.459143][ T4477] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 264.461205][ T4477] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 265.313142][ T7326] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 265.323368][ T7326] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 265.341177][ T6859] device veth0_macvtap entered promiscuous mode [ 265.501322][ T6859] device veth1_macvtap entered promiscuous mode [ 265.504790][ T245] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 265.506963][ T245] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 265.509154][ T245] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 265.511045][ T245] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 267.163312][ T6859] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 267.187288][ T6859] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 267.189370][ T6859] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 267.191570][ T6859] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 267.193479][ T6859] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 267.210593][ T6859] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 267.212588][ T6859] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 267.222799][ T6859] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 267.233939][ T6859] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 267.240508][ T6302] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 267.242833][ T6302] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 267.252106][ T6302] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 267.256787][ T6302] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 267.260268][ T6860] device veth0_vlan entered promiscuous mode [ 267.332381][ T6302] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 267.335083][ T6302] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 267.958771][ T6859] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 267.961113][ T6859] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 267.963123][ T6859] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 267.994811][ T6859] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 268.012496][ T6859] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 268.342834][ T6859] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 268.468304][ T6859] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 268.542366][ T6859] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 268.811213][ T6859] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 268.824986][ T1587] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 268.827388][ T1587] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 268.837889][ T6860] device veth1_vlan entered promiscuous mode [ 268.856229][ T6859] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 268.858112][ T6859] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 268.859913][ T6859] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 268.861682][ T6859] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 270.200767][ T4354] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 270.212004][ T4354] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 270.297308][ T7398] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 270.299375][ T7398] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 271.331930][ T6860] device veth0_macvtap entered promiscuous mode [ 271.339254][ T4354] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 271.418113][ T4354] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 271.420010][ T4354] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 271.440044][ T6860] device veth1_macvtap entered promiscuous mode [ 271.456955][ T5547] device hsr_slave_0 left promiscuous mode [ 271.505276][ T5547] device hsr_slave_1 left promiscuous mode [ 271.509582][ T7414] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 271.512751][ T7414] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 271.554711][ T5547] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 271.556326][ T5547] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 271.558401][ T5547] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 271.559894][ T5547] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 271.561979][ T5547] device bridge_slave_1 left promiscuous mode [ 271.563306][ T5547] bridge0: port 2(bridge_slave_1) entered disabled state [ 271.615767][ T5547] device bridge_slave_0 left promiscuous mode [ 271.617166][ T5547] bridge0: port 1(bridge_slave_0) entered disabled state [ 271.794851][ T5547] device veth1_macvtap left promiscuous mode [ 271.796226][ T5547] device veth0_macvtap left promiscuous mode [ 271.797566][ T5547] device veth1_vlan left promiscuous mode [ 271.798814][ T5547] device veth0_vlan left promiscuous mode [ 273.795680][ T7435] Trying to write to read-only block-device nullb0 [ 273.798164][ T7435] Trying to write to read-only block-device nullb0 [ 273.799587][ T7435] Trying to write to read-only block-device nullb0 [ 273.801008][ T7435] Trying to write to read-only block-device nullb0 [ 273.802436][ T7435] Trying to write to read-only block-device nullb0 [ 273.803797][ T7435] Trying to write to read-only block-device nullb0 [ 273.805301][ T7435] Trying to write to read-only block-device nullb0 [ 273.806731][ T7435] Trying to write to read-only block-device nullb0 [ 273.808281][ T7435] Trying to write to read-only block-device nullb0 [ 273.809677][ T7435] Trying to write to read-only block-device nullb0 [ 278.569390][ T5547] team0 (unregistering): Port device team_slave_1 removed [ 278.758461][ T5547] team0 (unregistering): Port device team_slave_0 removed [ 278.946353][ T5547] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 279.146013][ T5547] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 281.473381][ T47] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 281.487017][ T47] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 281.489453][ T47] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 281.492343][ T47] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 281.494200][ T47] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 281.496384][ T47] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 281.526496][ T4303] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 281.530275][ T4303] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 281.533379][ T4303] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 281.552815][ T4303] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 281.560699][ T4303] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 281.562517][ T4303] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 281.586694][ T5547] bond0 (unregistering): Released all slaves [ 281.818947][ T1587] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 283.170012][ T7507] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 283.194941][ T7507] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 283.534705][ T4303] Bluetooth: hci0: command 0x0409 tx timeout [ 284.456307][ T7471] chnl_net:caif_netlink_parms(): no params data found [ 284.498663][ T4303] Bluetooth: hci5: command 0x0409 tx timeout [ 284.687681][ T7468] chnl_net:caif_netlink_parms(): no params data found [ 284.902465][ T7471] bridge0: port 1(bridge_slave_0) entered blocking state [ 284.906314][ T7471] bridge0: port 1(bridge_slave_0) entered disabled state [ 284.922345][ T7471] device bridge_slave_0 entered promiscuous mode [ 284.942501][ T7471] bridge0: port 2(bridge_slave_1) entered blocking state [ 284.952919][ T7471] bridge0: port 2(bridge_slave_1) entered disabled state [ 284.968151][ T7471] device bridge_slave_1 entered promiscuous mode [ 284.980904][ T7468] bridge0: port 1(bridge_slave_0) entered blocking state [ 284.989366][ T7468] bridge0: port 1(bridge_slave_0) entered disabled state [ 284.998585][ T7468] device bridge_slave_0 entered promiscuous mode [ 285.023682][ T7468] bridge0: port 2(bridge_slave_1) entered blocking state [ 285.025568][ T7468] bridge0: port 2(bridge_slave_1) entered disabled state [ 285.038607][ T7468] device bridge_slave_1 entered promiscuous mode [ 285.080734][ T7471] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 285.095816][ T7471] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 285.125788][ T7468] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 285.397046][ T7468] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 285.471397][ T1587] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 285.495311][ T7471] team0: Port device team_slave_0 added [ 285.515574][ T7471] team0: Port device team_slave_1 added [ 285.587479][ T7468] team0: Port device team_slave_0 added [ 285.604762][ T4303] Bluetooth: hci0: command 0x041b tx timeout [ 285.746445][ T1587] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 285.787308][ T7468] team0: Port device team_slave_1 added [ 285.789068][ T7471] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 285.790510][ T7471] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 285.814571][ T7471] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 286.600430][ T47] Bluetooth: hci5: command 0x041b tx timeout [ 286.616474][ T1587] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 286.681520][ T7471] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 286.695673][ T7471] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 286.701132][ T7471] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 286.871958][ T1587] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 286.898976][ T7468] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 286.900514][ T7468] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 286.915153][ T7468] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 287.511098][ T7468] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 287.620238][ T7468] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 287.644618][ T7468] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 287.684866][ T4303] Bluetooth: hci0: command 0x040f tx timeout [ 287.816851][ T7471] device hsr_slave_0 entered promiscuous mode [ 287.845310][ T7471] device hsr_slave_1 entered promiscuous mode [ 287.874833][ T7471] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 287.876481][ T7471] Cannot create hsr debugfs directory [ 288.662181][ T4303] Bluetooth: hci5: command 0x040f tx timeout [ 288.786499][ T7468] device hsr_slave_0 entered promiscuous mode [ 288.834082][ T7468] device hsr_slave_1 entered promiscuous mode [ 289.166535][ T7468] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 289.187555][ T7468] Cannot create hsr debugfs directory [ 289.769078][ T47] Bluetooth: hci0: command 0x0419 tx timeout [ 290.724777][ T4303] Bluetooth: hci5: command 0x0419 tx timeout [ 291.009179][ T7636] bridge0: port 3(gretap0) entered blocking state [ 291.010894][ T7636] bridge0: port 3(gretap0) entered disabled state [ 291.029433][ T7636] device gretap0 entered promiscuous mode [ 291.031241][ T7636] bridge0: port 3(gretap0) entered blocking state [ 291.032786][ T7636] bridge0: port 3(gretap0) entered forwarding state [ 291.076015][ T7641] device gretap0 left promiscuous mode [ 291.078431][ T7641] bridge0: port 3(gretap0) entered disabled state [ 291.173248][ T7646] xt_CT: You must specify a L4 protocol and not use inversions on it [ 297.886291][ T7471] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 299.829399][ T7471] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 299.939145][ T7471] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 300.083814][ T7471] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 301.210412][ T7812] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 301.346920][ T7812] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 302.257038][ T7468] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 303.069395][ T1587] device hsr_slave_0 left promiscuous mode [ 303.126926][ T1587] device hsr_slave_1 left promiscuous mode [ 303.434742][ T1587] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 303.437650][ T1587] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 303.445802][ T1587] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 303.449836][ T1587] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 303.454431][ T1587] device bridge_slave_1 left promiscuous mode [ 303.458342][ T1587] bridge0: port 2(bridge_slave_1) entered disabled state [ 304.392313][ T1587] device bridge_slave_0 left promiscuous mode [ 304.419458][ T1587] bridge0: port 1(bridge_slave_0) entered disabled state [ 304.588729][ T1587] device hsr_slave_0 left promiscuous mode [ 304.674893][ T1587] device hsr_slave_1 left promiscuous mode [ 304.789985][ T1587] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 304.793929][ T1587] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 304.796512][ T1587] device bridge_slave_1 left promiscuous mode [ 304.797965][ T1587] bridge0: port 2(bridge_slave_1) entered disabled state [ 304.835746][ T1587] device bridge_slave_0 left promiscuous mode [ 304.837200][ T1587] bridge0: port 1(bridge_slave_0) entered disabled state [ 305.022363][ T1587] device veth1_macvtap left promiscuous mode [ 305.023747][ T1587] device veth0_macvtap left promiscuous mode [ 305.026228][ T1587] device veth1_vlan left promiscuous mode [ 305.027557][ T1587] device veth0_vlan left promiscuous mode [ 305.030247][ T1587] device veth1_macvtap left promiscuous mode [ 305.031546][ T1587] device veth0_macvtap left promiscuous mode [ 305.032868][ T1587] device veth1_vlan left promiscuous mode [ 305.034111][ T1587] device veth0_vlan left promiscuous mode [ 305.203927][ T7868] netlink: 12 bytes leftover after parsing attributes in process `syz.4.830'. [ 306.938976][ T1587] team0 (unregistering): Port device team_slave_1 removed [ 307.127169][ T1587] team0 (unregistering): Port device team_slave_0 removed [ 307.318962][ T1587] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 307.515765][ T1587] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 309.941357][ T1587] bond0 (unregistering): Released all slaves [ 310.247504][ T2058] ieee802154 phy0 wpan0: encryption failed: -22 [ 310.248851][ T2058] ieee802154 phy1 wpan1: encryption failed: -22 [ 311.459540][ T1587] team0 (unregistering): Port device team_slave_1 removed [ 311.656905][ T1587] team0 (unregistering): Port device team_slave_0 removed [ 311.855517][ T1587] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 312.086216][ T1587] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 314.430489][ T1587] bond0 (unregistering): Released all slaves [ 314.668815][ T7468] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 314.706769][ T7468] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 314.746197][ T7468] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 315.191188][ T7875] 9pnet_fd: Insufficient options for proto=fd [ 316.218734][ T7867] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 316.262348][ T7867] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 316.317204][ T7867] bond0 (unregistering): Released all slaves [ 316.383907][ T7471] 8021q: adding VLAN 0 to HW filter on device bond0 [ 316.482521][ T7880] xt_CT: You must specify a L4 protocol and not use inversions on it [ 316.518984][ T4478] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 316.521054][ T4478] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 316.542762][ T7471] 8021q: adding VLAN 0 to HW filter on device team0 [ 316.725468][ T5709] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 316.727672][ T5709] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 316.729771][ T5709] bridge0: port 1(bridge_slave_0) entered blocking state [ 316.731278][ T5709] bridge0: port 1(bridge_slave_0) entered forwarding state [ 316.752253][ T5709] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 316.754319][ T5709] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 316.782689][ T5709] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 316.801466][ T5709] bridge0: port 2(bridge_slave_1) entered blocking state [ 316.803049][ T5709] bridge0: port 2(bridge_slave_1) entered forwarding state [ 316.930646][ T5709] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 316.933177][ T5709] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 317.719280][ T4508] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 317.722103][ T4508] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 317.733831][ T7471] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 317.780049][ T7471] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 317.788572][ T4439] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 317.790667][ T4439] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 317.792916][ T4439] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 317.827987][ T4439] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 317.830153][ T4439] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 317.831424][ T7909] input: syz1 as /devices/virtual/input/input3 [ 317.859577][ T4439] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 317.864250][ T4439] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 317.890443][ T4439] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 318.028654][ T7468] 8021q: adding VLAN 0 to HW filter on device bond0 [ 318.060334][ T4354] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 318.062416][ T4354] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 318.111651][ T7468] 8021q: adding VLAN 0 to HW filter on device team0 [ 318.339407][ T7468] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 318.369281][ T7468] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 318.501469][ T7130] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 318.504017][ T7130] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 318.506683][ T7130] bridge0: port 1(bridge_slave_0) entered blocking state [ 318.508103][ T7130] bridge0: port 1(bridge_slave_0) entered forwarding state [ 318.514214][ T7130] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 318.519963][ T7130] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 318.523647][ T7130] bridge0: port 2(bridge_slave_1) entered blocking state [ 318.525142][ T7130] bridge0: port 2(bridge_slave_1) entered forwarding state [ 318.532732][ T7130] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 318.542744][ T7130] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 318.549350][ T7130] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 318.552200][ T7130] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 318.554488][ T7130] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 318.562256][ T7130] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 318.569480][ T7130] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 318.571744][ T7130] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 318.574229][ T7130] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 318.582495][ T7130] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 318.620772][ T7130] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 318.626242][ T7130] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 318.643059][ T7130] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 318.652696][ T7130] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 318.656563][ T7130] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 318.665466][ T7471] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 318.740931][ T7943] xt_CT: You must specify a L4 protocol and not use inversions on it [ 318.871739][ T7468] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 318.886409][ T4508] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 318.888125][ T4508] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 319.881619][ T7970] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 319.885693][ T7970] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 320.120023][ T4508] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 320.122285][ T4508] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 320.132708][ T4508] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 320.136054][ T4508] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 320.238439][ T7468] device veth0_vlan entered promiscuous mode [ 320.243816][ T7468] device veth1_vlan entered promiscuous mode [ 320.258630][ T5040] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 320.260752][ T5040] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 320.262891][ T5040] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 320.290566][ T5040] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 320.295583][ T5040] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 320.310759][ T7471] device veth0_vlan entered promiscuous mode [ 320.319212][ T5040] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 320.321690][ T5040] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 320.345097][ T7471] device veth1_vlan entered promiscuous mode [ 320.347212][ T5040] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 320.349534][ T5040] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 320.352316][ T5040] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 320.356747][ T5040] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 320.396404][ T7130] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 320.398523][ T7130] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 320.400742][ T7130] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 320.409449][ T7468] device veth0_macvtap entered promiscuous mode [ 320.421309][ T4439] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 320.423708][ T4439] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 320.427034][ T4439] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 320.438904][ T7471] device veth0_macvtap entered promiscuous mode [ 320.442568][ T7471] device veth1_macvtap entered promiscuous mode [ 320.459651][ T7468] device veth1_macvtap entered promiscuous mode [ 320.511960][ T7468] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 320.514218][ T7468] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 320.523421][ T7468] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 320.527509][ T7468] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 320.536277][ T7468] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 320.542383][ T7468] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 320.551784][ T7468] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 320.561585][ T4439] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 320.563839][ T4439] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 320.566948][ T4439] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 320.570356][ T4439] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 320.572571][ T4439] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 320.690253][ T7471] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 321.254886][ T7471] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 321.317100][ T7471] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 321.319411][ T7471] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 321.321435][ T7471] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 321.323452][ T7471] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 321.325757][ T7471] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 321.327951][ T7471] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 321.331400][ T7471] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 321.365975][ T7130] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 321.368242][ T7130] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 321.385394][ T7468] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 321.387484][ T7468] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 321.389517][ T7468] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 321.389779][ T8009] xt_CT: You must specify a L4 protocol and not use inversions on it [ 321.391502][ T7468] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 321.458235][ T7468] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 321.464403][ T7468] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 321.490413][ T7468] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 321.499600][ T8007] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 321.501597][ T8007] IPv6: NLM_F_CREATE should be set when creating new route [ 321.503673][ T5040] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 321.510503][ T5040] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 321.545387][ T7468] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 321.547257][ T7468] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 321.549067][ T7468] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 321.598944][ T7468] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 321.603739][ T7471] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 321.624618][ T7471] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 321.626662][ T7471] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 321.628780][ T7471] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 321.630603][ T7471] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 321.665135][ T7471] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 321.667203][ T7471] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 321.669167][ T7471] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 321.687064][ T7471] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 321.997763][ T1587] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 322.031573][ T1587] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 322.457031][ T7471] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 322.465841][ T7471] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 322.467663][ T7471] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 322.474762][ T7471] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 322.638083][ T4439] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 322.641255][ T4439] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 322.663618][ T1587] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 322.699871][ T4508] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 322.701699][ T4508] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 322.706926][ T4439] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 322.731296][ T4439] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 322.733183][ T4439] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 322.751015][ T4439] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 322.768175][ T7130] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 322.771291][ T7130] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 322.810587][ T4508] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 322.971891][ T8051] loop7: detected capacity change from 0 to 1024 [ 322.973873][ T8051] ext4: Unknown parameter 'mask' [ 323.302431][ T8047] loop6: detected capacity change from 0 to 32768 [ 323.319879][ T8047] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop6 scanned by syz.6.616 (8047) [ 323.328471][ T8047] BTRFS info (device loop6): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 323.339482][ T8047] BTRFS info (device loop6): using sha256 (sha256-ce) checksum algorithm [ 323.342614][ T8047] BTRFS info (device loop6): using free space tree [ 323.507945][ T8047] BTRFS info (device loop6): enabling ssd optimizations [ 323.775891][ T7468] BTRFS info (device loop6): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 325.185055][ T8114] netlink: 88 bytes leftover after parsing attributes in process `syz.3.873'. [ 328.365463][ T8130] xt_CT: No such helper "netbios-ns" [ 329.445297][ T4339] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 330.350272][ T4339] usb 1-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 330.352177][ T4339] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 330.353796][ T4339] usb 1-1: Product: syz [ 330.362594][ T4339] usb 1-1: Manufacturer: syz [ 330.363652][ T4339] usb 1-1: SerialNumber: syz [ 330.380591][ T4339] usb 1-1: config 0 descriptor?? [ 330.892373][ C1] raw-gadget.0 gadget.0: ignoring, device is not running [ 330.894034][ T4339] usb 1-1: Firmware version (0.0) predates our first public release. [ 330.895812][ T4339] usb 1-1: Please update to version 0.2 or newer [ 331.078853][ T4339] usb 1-1: USB disconnect, device number 6 [ 331.690319][ T8192] xt_CT: No such helper "netbios-ns" [ 333.350564][ T8219] loop6: detected capacity change from 0 to 1024 [ 333.352342][ T8219] ext4: Unknown parameter 'mask' [ 335.385479][ T8249] xt_CT: No such helper "netbios-ns" [ 336.481206][ T4303] Bluetooth: hci5: link tx timeout [ 336.482544][ T4303] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 336.810105][ T8272] xt_CT: You must specify a L4 protocol and not use inversions on it [ 337.470367][ T8288] x_tables: duplicate underflow at hook 2 [ 338.604630][ T4303] Bluetooth: hci5: command 0x0406 tx timeout [ 339.105513][ T8304] xt_CT: No such helper "netbios-ns" [ 340.632199][ T8336] syz.3.928 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 340.733868][ T8337] xt_CT: You must specify a L4 protocol and not use inversions on it [ 342.295428][ T8349] xt_CT: No such helper "netbios-ns" [ 343.658981][ T8389] xt_CT: You must specify a L4 protocol and not use inversions on it [ 343.752879][ T8396] loop4: detected capacity change from 0 to 1024 [ 343.785508][ T8396] ext4: Unknown parameter 'mask' [ 345.215276][ T8424] xt_CT: No such helper "netbios-ns" [ 346.652126][ T8453] xt_CT: You must specify a L4 protocol and not use inversions on it [ 347.748549][ T8489] xt_CT: You must specify a L4 protocol and not use inversions on it [ 348.475747][ T8493] xt_CT: No such helper "netbios-ns" [ 350.653076][ T8536] netlink: 12 bytes leftover after parsing attributes in process `syz.7.976'. [ 351.549928][ T8547] xt_CT: No such helper "netbios-ns" [ 351.961686][ T8574] loop6: detected capacity change from 0 to 1024 [ 351.977921][ T8574] ext4: Unknown parameter 'mask' [ 355.643304][ T8604] xt_CT: No such helper "netbios-ns" [ 356.912803][ T8630] netlink: 'syz.7.999': attribute type 29 has an invalid length. [ 356.933642][ T8630] netlink: 'syz.7.999': attribute type 29 has an invalid length. [ 356.937559][ T8630] netlink: 'syz.7.999': attribute type 29 has an invalid length. [ 356.972389][ T8632] loop3: detected capacity change from 0 to 1024 [ 356.974272][ T8632] ext4: Unknown parameter 'mask' [ 358.270779][ T8658] netdevsim netdevsim6: Direct firmware load for ./file0 failed with error -2 [ 358.272913][ T8658] netdevsim netdevsim6: Falling back to sysfs fallback for: ./file0 [ 359.419370][ T8649] xt_CT: No such helper "netbios-ns" [ 359.424824][ T8653] loop3: detected capacity change from 0 to 16 [ 359.441779][ T8653] erofs: (device loop3): mounted with root inode @ nid 36. [ 359.552592][ T8686] netlink: 'syz.7.1011': attribute type 29 has an invalid length. [ 359.557023][ T8686] netlink: 'syz.7.1011': attribute type 29 has an invalid length. [ 359.562779][ T8686] netlink: 'syz.7.1011': attribute type 29 has an invalid length. [ 359.908171][ T8697] loop3: detected capacity change from 0 to 1024 [ 359.910007][ T8697] ext4: Unknown parameter 'mask' [ 361.946191][ T8740] netlink: 'syz.7.1022': attribute type 29 has an invalid length. [ 361.948373][ T8740] netlink: 'syz.7.1022': attribute type 29 has an invalid length. [ 362.024971][ T8740] netlink: 'syz.7.1022': attribute type 29 has an invalid length. [ 362.398194][ T47] Bluetooth: hci5: link tx timeout [ 362.399302][ T47] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 362.592532][ T8756] loop4: detected capacity change from 0 to 1024 [ 362.598857][ T8756] ext4: Unknown parameter 'mask' [ 362.787485][ T8766] loop3: detected capacity change from 0 to 16 [ 362.795922][ T8766] erofs: (device loop3): mounted with root inode @ nid 36. [ 363.180053][ T47] Bluetooth: hci5: link tx timeout [ 363.181809][ T47] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 363.374168][ T47] Bluetooth: hci5: link tx timeout [ 363.375701][ T47] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 363.645696][ T8774] netlink: 'syz.7.1034': attribute type 29 has an invalid length. [ 363.647619][ T8774] netlink: 'syz.7.1034': attribute type 29 has an invalid length. [ 363.650612][ T8774] netlink: 'syz.7.1034': attribute type 29 has an invalid length. [ 364.524935][ T47] Bluetooth: hci5: link tx timeout [ 364.526216][ T47] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 364.544515][ T47] Bluetooth: hci5: link tx timeout [ 364.545886][ T47] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 364.685712][ T8808] xt_CT: No such helper "netbios-ns" [ 364.788441][ T47] Bluetooth: hci5: link tx timeout [ 364.790718][ T47] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 364.922349][ T47] Bluetooth: hci5: link tx timeout [ 364.923808][ T47] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 365.588827][ T8820] loop6: detected capacity change from 0 to 1024 [ 365.590920][ T8820] ext4: Unknown parameter 'mask' [ 366.915675][ T8833] loop0: detected capacity change from 0 to 16 [ 366.918342][ T8833] erofs: (device loop0): mounted with root inode @ nid 36. [ 369.272186][ T8896] loop4: detected capacity change from 0 to 1024 [ 369.273947][ T8896] ext4: Unknown parameter 'mask' [ 370.279000][ T47] Bluetooth: hci5: link tx timeout [ 370.280148][ T47] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 370.283661][ T47] Bluetooth: hci5: link tx timeout [ 370.285374][ T47] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 371.595326][ T8904] loop3: detected capacity change from 0 to 16 [ 371.609205][ T8904] erofs: (device loop3): mounted with root inode @ nid 36. [ 371.685511][ T2058] ieee802154 phy0 wpan0: encryption failed: -22 [ 371.686868][ T2058] ieee802154 phy1 wpan1: encryption failed: -22 [ 371.934237][ T8941] xt_CT: No such helper "netbios-ns" [ 371.969450][ T47] Bluetooth: hci5: link tx timeout [ 371.970705][ T47] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 372.292962][ T8956] loop7: detected capacity change from 0 to 1024 [ 372.318907][ T8956] ext4: Unknown parameter 'mask' [ 373.507374][ T8983] device syzkaller0 entered promiscuous mode [ 373.631583][ T8987] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 373.633523][ T8987] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 373.682459][ T47] Bluetooth: hci5: link tx timeout [ 373.683629][ T47] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 374.012693][ T9002] loop0: detected capacity change from 0 to 1024 [ 374.046083][ T9002] ext4: Unknown parameter 'mask' [ 374.219602][ T9005] xt_CT: You must specify a L4 protocol and not use inversions on it [ 376.253253][ T9037] device syzkaller0 entered promiscuous mode [ 376.777849][ T9056] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1106'. [ 376.821298][ T9052] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 376.900977][ T9064] netlink: 'syz.0.1109': attribute type 29 has an invalid length. [ 376.902539][ T9067] loop3: detected capacity change from 0 to 1024 [ 376.902877][ T9064] netlink: 'syz.0.1109': attribute type 29 has an invalid length. [ 376.937176][ T9064] netlink: 'syz.0.1109': attribute type 29 has an invalid length. [ 376.939185][ T9064] netlink: 'syz.0.1109': attribute type 29 has an invalid length. [ 376.942483][ T9067] ext4: Unknown parameter 'mask' [ 377.138656][ T9073] device syzkaller0 entered promiscuous mode [ 377.171225][ T47] Bluetooth: hci5: link tx timeout [ 377.172357][ T47] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 377.186507][ T47] Bluetooth: hci5: link tx timeout [ 377.187634][ T47] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 378.366491][ T9096] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1117'. [ 378.706017][ T9100] xt_CT: No such helper "netbios-ns" [ 380.283189][ T9122] netlink: 'syz.6.1122': attribute type 29 has an invalid length. [ 380.294871][ T9122] netlink: 'syz.6.1122': attribute type 29 has an invalid length. [ 380.298258][ T9122] netlink: 'syz.6.1122': attribute type 29 has an invalid length. [ 380.300099][ T9122] netlink: 'syz.6.1122': attribute type 29 has an invalid length. [ 380.503816][ T9111] loop0: detected capacity change from 0 to 16 [ 380.546048][ T9111] erofs: (device loop0): mounted with root inode @ nid 36. [ 381.545397][ T9142] device syzkaller0 entered promiscuous mode [ 381.582236][ T4712] libceph: connect (1)[c::]:6789 error -101 [ 381.583988][ T4712] libceph: mon0 (1)[c::]:6789 connect error [ 381.736897][ T9144] ceph: No mds server is up or the cluster is laggy [ 381.748324][ T9146] xt_CT: You must specify a L4 protocol and not use inversions on it [ 383.340264][ T9172] xt_CT: No such helper "netbios-ns" [ 383.541851][ T47] Bluetooth: hci5: link tx timeout [ 383.543040][ T47] Bluetooth: hci5: killing stalled connection 10:aa:aa:aa:aa:aa [ 383.544875][ T47] Bluetooth: hci5: link tx timeout [ 383.545940][ T47] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 383.593481][ T47] Bluetooth: hci5: link tx timeout [ 383.595052][ T47] Bluetooth: hci5: killing stalled connection 10:aa:aa:aa:aa:aa [ 383.596977][ T47] Bluetooth: hci5: link tx timeout [ 383.598017][ T47] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 383.647797][ T9182] netlink: 'syz.3.1134': attribute type 29 has an invalid length. [ 383.649721][ T9182] netlink: 'syz.3.1134': attribute type 29 has an invalid length. [ 383.688534][ T9182] netlink: 'syz.3.1134': attribute type 29 has an invalid length. [ 383.693690][ T9182] netlink: 'syz.3.1134': attribute type 29 has an invalid length. [ 385.530458][ T9203] device syzkaller0 entered promiscuous mode [ 385.614776][ T47] Bluetooth: hci5: command 0x0406 tx timeout [ 385.697900][ T9171] loop6: detected capacity change from 0 to 32768 [ 385.785506][ T7878] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop6 scanned by udevd (7878) [ 386.315826][ T9171] BTRFS info (device loop6): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 386.725434][ T9171] BTRFS info (device loop6): using sha256 (sha256-ce) checksum algorithm [ 386.727348][ T9171] BTRFS info (device loop6): using free space tree [ 386.770198][ T9211] xt_CT: You must specify a L4 protocol and not use inversions on it [ 386.897777][ T9171] BTRFS error (device loop6): open_ctree failed [ 386.898743][ T9201] loop0: detected capacity change from 0 to 16 [ 386.915419][ T9201] erofs: (device loop0): mounted with root inode @ nid 36. [ 387.297856][ T4303] Bluetooth: hci5: link tx timeout [ 387.298977][ T4303] Bluetooth: hci5: killing stalled connection 10:aa:aa:aa:aa:aa [ 387.300695][ T4303] Bluetooth: hci5: link tx timeout [ 387.301739][ T4303] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 387.336057][ T4303] Bluetooth: hci5: link tx timeout [ 387.337141][ T4303] Bluetooth: hci5: killing stalled connection 10:aa:aa:aa:aa:aa [ 387.338760][ T4303] Bluetooth: hci5: link tx timeout [ 387.339875][ T4303] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 388.185483][ T9255] fuse: Bad value for 'fd' [ 389.547499][ T9266] device syzkaller0 entered promiscuous mode [ 389.915903][ T9269] xt_CT: No such helper "netbios-ns" [ 390.611722][ T9277] xt_CT: You must specify a L4 protocol and not use inversions on it [ 391.890046][ T9300] loop4: detected capacity change from 0 to 1024 [ 391.891836][ T9300] ext4: Unknown parameter 'mask' [ 391.902709][ T9302] netlink: 'syz.6.1163': attribute type 29 has an invalid length. [ 392.055515][ T9302] netlink: 'syz.6.1163': attribute type 29 has an invalid length. [ 392.085314][ T9305] netlink: 'syz.6.1163': attribute type 29 has an invalid length. [ 392.093711][ T9302] netlink: 'syz.6.1163': attribute type 29 has an invalid length. [ 393.657572][ T9322] xt_CT: No such helper "netbios-ns" [ 394.608644][ T9347] netlink: 'syz.3.1180': attribute type 29 has an invalid length. [ 394.625003][ T9347] netlink: 'syz.3.1180': attribute type 29 has an invalid length. [ 394.638229][ T9347] netlink: 'syz.3.1180': attribute type 29 has an invalid length. [ 394.655137][ T9347] netlink: 'syz.3.1180': attribute type 29 has an invalid length. [ 394.858008][ T9337] xt_CT: You must specify a L4 protocol and not use inversions on it [ 394.968356][ T9353] loop7: detected capacity change from 0 to 1024 [ 394.995403][ T9353] ext4: Unknown parameter 'mask' [ 395.950297][ T9357] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1183'. [ 396.561998][ T9379] netlink: 'syz.3.1191': attribute type 29 has an invalid length. [ 396.564146][ T9379] netlink: 'syz.3.1191': attribute type 29 has an invalid length. [ 397.219080][ T9390] loop6: detected capacity change from 0 to 1024 [ 397.231426][ T9390] ext4: Unknown parameter 'mask' [ 397.311606][ T9376] loop0: detected capacity change from 0 to 32768 [ 397.352098][ T9376] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz.0.1190 (9376) [ 397.392545][ T9376] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 397.402687][ T9376] BTRFS info (device loop0): using sha256 (sha256-ce) checksum algorithm [ 397.404489][ T9376] BTRFS info (device loop0): using free space tree [ 398.394332][ T9376] BTRFS info (device loop0): enabling ssd optimizations [ 398.633261][ T9386] xt_CT: You must specify a L4 protocol and not use inversions on it [ 398.682574][ T9426] validate_nla: 2 callbacks suppressed [ 398.682623][ T9426] netlink: 'syz.6.1202': attribute type 29 has an invalid length. [ 398.702809][ T9426] netlink: 'syz.6.1202': attribute type 29 has an invalid length. [ 398.709384][ T9426] netlink: 'syz.6.1202': attribute type 29 has an invalid length. [ 398.711306][ T9426] netlink: 'syz.6.1202': attribute type 29 has an invalid length. [ 398.834800][ T9428] xt_CT: No such helper "netbios-ns" [ 400.200726][ T4303] Bluetooth: hci5: link tx timeout [ 400.202032][ T4303] Bluetooth: hci5: killing stalled connection 10:aa:aa:aa:aa:aa [ 400.203644][ T4303] Bluetooth: hci5: link tx timeout [ 400.204863][ T4303] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 401.035915][ T9454] loop6: detected capacity change from 0 to 1024 [ 401.037869][ T9454] ext4: Unknown parameter 'mask' [ 402.049907][ T9463] netlink: 'syz.3.1213': attribute type 29 has an invalid length. [ 402.051973][ T9463] netlink: 'syz.3.1213': attribute type 29 has an invalid length. [ 402.062173][ T9463] netlink: 'syz.3.1213': attribute type 29 has an invalid length. [ 402.064325][ T9463] netlink: 'syz.3.1213': attribute type 29 has an invalid length. [ 402.688925][ T4300] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 403.130866][ T4303] Bluetooth: hci1: Malformed HCI Event: 0x22 [ 404.062939][ T9468] xt_CT: You must specify a L4 protocol and not use inversions on it [ 404.182469][ T9489] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1220'. [ 404.608900][ T9498] loop6: detected capacity change from 0 to 1024 [ 404.614133][ T9498] ext4: Unknown parameter 'mask' [ 404.654869][ T4303] Bluetooth: hci0: command 0x0406 tx timeout [ 404.903067][ T7878] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 404.929361][ T9502] xt_CT: No such helper "netbios-ns" [ 406.010602][ T9511] loop7: detected capacity change from 0 to 32768 [ 406.039535][ T9511] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop7 scanned by syz.7.1226 (9511) [ 406.061530][ T9511] BTRFS info (device loop7): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 406.069894][ T9511] BTRFS info (device loop7): using sha256 (sha256-ce) checksum algorithm [ 406.071874][ T9511] BTRFS info (device loop7): using free space tree [ 406.492762][ T9511] BTRFS info (device loop7): enabling ssd optimizations [ 409.910945][ T9572] loop3: detected capacity change from 0 to 1024 [ 409.912784][ T9572] ext4: Unknown parameter 'mask' [ 409.926528][ T9571] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1238'. [ 409.928473][ T9571] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1238'. [ 409.930310][ T9571] netlink: 2 bytes leftover after parsing attributes in process `syz.4.1238'. [ 409.980113][ T7878] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 410.896909][ T9559] xt_CT: You must specify a L4 protocol and not use inversions on it [ 411.587377][ T9588] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1241'. [ 411.619563][ T7471] BTRFS info (device loop7): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 411.974730][ T9592] xt_CT: No such helper "netbios-ns" [ 412.101786][ T9600] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1245'. [ 413.830497][ T9618] loop6: detected capacity change from 0 to 1024 [ 413.871560][ T9618] ext4: Unknown parameter 'mask' [ 414.480445][ T9620] xt_CT: You must specify a L4 protocol and not use inversions on it [ 414.589892][ T9622] loop7: detected capacity change from 0 to 32768 [ 414.602524][ T9622] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop7 scanned by syz.7.1252 (9622) [ 414.654797][ T9622] BTRFS info (device loop7): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 414.657211][ T9622] BTRFS info (device loop7): using sha256 (sha256-ce) checksum algorithm [ 414.658881][ T9622] BTRFS info (device loop7): using free space tree [ 414.966585][ T9622] BTRFS info (device loop7): enabling ssd optimizations [ 415.176858][ T9650] xt_CT: No such helper "netbios-ns" [ 415.886585][ T4343] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 416.064663][ T4343] usb 1-1: Using ep0 maxpacket: 8 [ 416.068712][ T4343] usb 1-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 416.070645][ T4343] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 416.080711][ T4343] usb 1-1: config 0 descriptor?? [ 417.091663][ T9685] xt_CT: No such helper "netbios-ns" [ 417.099252][ T7471] BTRFS info (device loop7): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 417.552023][ T47] Bluetooth: hci5: Malformed HCI Event: 0x22 [ 419.130432][ T4343] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 419.132609][ T4343] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 419.135946][ T4343] asix: probe of 1-1:0.0 failed with error -71 [ 419.156879][ T4343] usb 1-1: USB disconnect, device number 7 [ 419.377440][ T9709] loop0: detected capacity change from 0 to 1024 [ 419.379335][ T9709] ext4: Unknown parameter 'mask' [ 421.495950][ T9724] loop6: detected capacity change from 0 to 32768 [ 421.513356][ T9724] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop6 scanned by syz.6.1277 (9724) [ 421.537012][ T9724] BTRFS info (device loop6): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 421.543357][ T9724] BTRFS info (device loop6): using sha256 (sha256-ce) checksum algorithm [ 421.555005][ T9724] BTRFS info (device loop6): using free space tree [ 421.621639][ T9728] xt_CT: No such helper "netbios-ns" [ 421.738486][ T9724] BTRFS info (device loop6): enabling ssd optimizations [ 422.577429][ T7468] BTRFS info (device loop6): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 426.492225][ T9792] xt_CT: No such helper "netbios-ns" [ 426.962506][ T9798] loop3: detected capacity change from 0 to 32768 [ 426.975077][ T9798] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.1292 (9798) [ 426.982458][ T9798] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 427.001808][ T9798] BTRFS info (device loop3): using sha256 (sha256-ce) checksum algorithm [ 427.003555][ T9798] BTRFS info (device loop3): using free space tree [ 427.153734][ T9798] BTRFS info (device loop3): enabling ssd optimizations [ 427.913487][ T4304] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 428.049393][ T9843] loop4: detected capacity change from 0 to 1024 [ 428.053569][ T9843] ext4: Unknown parameter 'mask' [ 428.195996][ T9842] xt_CT: You must specify a L4 protocol and not use inversions on it [ 428.211115][ T7878] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 428.416783][ T9848] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1304'. [ 428.920129][ T9858] xt_CT: No such helper "netbios-ns" [ 430.491503][ T9877] loop6: detected capacity change from 0 to 32768 [ 430.598447][ T9877] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop6 scanned by syz.6.1313 (9877) [ 430.605754][ T9880] xt_CT: You must specify a L4 protocol and not use inversions on it [ 430.621207][ T9877] BTRFS info (device loop6): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 430.623226][ T9877] BTRFS info (device loop6): using sha256 (sha256-ce) checksum algorithm [ 430.635688][ T9877] BTRFS info (device loop6): using free space tree [ 431.002239][ T9877] BTRFS info (device loop6): enabling ssd optimizations [ 431.686127][ T9916] xt_CT: No such helper "netbios-ns" [ 431.863672][ T7468] BTRFS info (device loop6): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 432.482588][ T9935] xt_CT: You must specify a L4 protocol and not use inversions on it [ 432.508816][ T9939] loop0: detected capacity change from 0 to 1024 [ 432.526492][ T9939] ext4: Unknown parameter 'mask' [ 432.559418][ T47] Bluetooth: hci5: link tx timeout [ 432.560661][ T47] Bluetooth: hci5: killing stalled connection 10:aa:aa:aa:aa:aa [ 432.562198][ T47] Bluetooth: hci5: link tx timeout [ 432.563194][ T47] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 432.596346][ T7912] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 432.952729][ T9946] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 432.960334][ T9946] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 433.129277][ T2058] ieee802154 phy0 wpan0: encryption failed: -22 [ 433.130623][ T2058] ieee802154 phy1 wpan1: encryption failed: -22 [ 433.690281][ T9951] loop0: detected capacity change from 0 to 1024 [ 433.732803][ T9951] ext4: Unknown parameter 'mask' [ 434.434940][ T9966] xt_CT: No such helper "netbios-ns" [ 434.484691][ T9953] loop6: detected capacity change from 0 to 32768 [ 434.511311][ T9953] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop6 scanned by syz.6.1333 (9953) [ 434.530369][ T9953] BTRFS info (device loop6): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 434.532694][ T9953] BTRFS info (device loop6): using sha256 (sha256-ce) checksum algorithm [ 434.534391][ T9953] BTRFS info (device loop6): using free space tree [ 434.735456][ T9974] xt_CT: You must specify a L4 protocol and not use inversions on it [ 434.802231][ T9953] BTRFS info (device loop6): enabling ssd optimizations [ 435.618459][ T9998] fuse: Bad value for 'fd' [ 435.662579][ T7468] BTRFS info (device loop6): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 436.080528][T10001] loop3: detected capacity change from 0 to 1024 [ 436.105077][T10001] ext4: Unknown parameter 'mask' [ 436.344725][ T7912] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 438.068372][T10025] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 438.070312][T10025] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 438.306667][T10029] xt_CT: You must specify a L4 protocol and not use inversions on it [ 438.640484][T10035] xt_CT: No such helper "netbios-ns" [ 438.762743][T10042] fuse: Bad value for 'fd' [ 439.507563][T10049] loop4: detected capacity change from 0 to 1024 [ 439.509358][T10049] ext4: Unknown parameter 'mask' [ 439.745525][T10032] loop6: detected capacity change from 0 to 32768 [ 439.752688][T10032] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop6 scanned by syz.6.1350 (10032) [ 439.773241][T10032] BTRFS info (device loop6): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 439.783071][T10032] BTRFS info (device loop6): using sha256 (sha256-ce) checksum algorithm [ 439.793198][T10032] BTRFS info (device loop6): using free space tree [ 440.139515][T10076] loop3: detected capacity change from 0 to 1024 [ 440.141443][T10076] ext4: Unknown parameter 'mask' [ 440.142918][T10032] BTRFS info (device loop6): enabling ssd optimizations [ 440.884759][ T7468] BTRFS info (device loop6): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 441.715363][T10091] xt_CT: You must specify a L4 protocol and not use inversions on it [ 442.530379][T10097] xt_CT: No such helper "netbios-ns" [ 442.865703][T10100] netlink: 'syz.7.1367': attribute type 29 has an invalid length. [ 442.867833][T10100] netlink: 'syz.7.1367': attribute type 29 has an invalid length. [ 442.886812][T10100] netlink: 'syz.7.1367': attribute type 29 has an invalid length. [ 442.888740][T10100] netlink: 'syz.7.1367': attribute type 29 has an invalid length. [ 443.185355][T10108] fuse: Bad value for 'fd' [ 444.002028][T10116] loop4: detected capacity change from 0 to 1024 [ 444.003806][T10116] ext4: Unknown parameter 'mask' [ 444.193567][ T7878] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 444.212083][T10118] xt_CT: You must specify a L4 protocol and not use inversions on it [ 444.465721][T10129] netlink: 'syz.7.1379': attribute type 29 has an invalid length. [ 444.474936][T10129] netlink: 'syz.7.1379': attribute type 29 has an invalid length. [ 444.478961][T10129] netlink: 'syz.7.1379': attribute type 29 has an invalid length. [ 444.483503][T10114] loop0: detected capacity change from 0 to 32768 [ 444.485939][T10129] netlink: 'syz.7.1379': attribute type 29 has an invalid length. [ 444.505038][T10114] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz.0.1373 (10114) [ 444.524811][T10114] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 444.526889][T10114] BTRFS info (device loop0): using sha256 (sha256-ce) checksum algorithm [ 444.528578][T10114] BTRFS info (device loop0): using free space tree [ 444.703000][T10138] loop7: detected capacity change from 0 to 1024 [ 444.729106][T10138] ext4: Unknown parameter 'mask' [ 444.947834][T10114] BTRFS info (device loop0): enabling ssd optimizations [ 445.561523][T10157] device veth1_macvtap left promiscuous mode [ 445.562839][T10157] device macsec0 entered promiscuous mode [ 445.705221][ T4300] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 447.396021][T10166] xt_CT: No such helper "netbios-ns" [ 447.801957][T10178] xt_CT: You must specify a L4 protocol and not use inversions on it [ 447.971328][T10184] netlink: 'syz.4.1390': attribute type 29 has an invalid length. [ 447.984958][T10184] netlink: 'syz.4.1390': attribute type 29 has an invalid length. [ 447.989774][T10184] netlink: 'syz.4.1390': attribute type 29 has an invalid length. [ 447.991850][T10184] netlink: 'syz.4.1390': attribute type 29 has an invalid length. [ 449.257809][T10198] loop0: detected capacity change from 0 to 1024 [ 449.259678][T10198] ext4: Unknown parameter 'mask' [ 449.525248][T10205] xt_CT: No such helper "netbios-ns" [ 449.548616][T10210] loop7: detected capacity change from 0 to 1024 [ 449.557291][T10210] ext4: Unknown parameter 'mask' [ 449.608925][ T7878] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 450.469480][T10219] xt_CT: You must specify a L4 protocol and not use inversions on it [ 454.675742][T10257] xt_CT: No such helper "netbios-ns" [ 454.850959][T10267] netlink: 'syz.0.1417': attribute type 29 has an invalid length. [ 454.875061][T10267] netlink: 'syz.0.1417': attribute type 29 has an invalid length. [ 454.882223][T10267] netlink: 'syz.0.1417': attribute type 29 has an invalid length. [ 454.889841][T10267] netlink: 'syz.0.1417': attribute type 29 has an invalid length. [ 455.064726][T10265] xt_CT: You must specify a L4 protocol and not use inversions on it [ 455.130724][T10273] loop0: detected capacity change from 0 to 1024 [ 455.132573][T10273] ext4: Unknown parameter 'mask' [ 455.299953][ T7878] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 456.053063][T10279] loop3: detected capacity change from 0 to 1024 [ 456.091451][T10279] ext4: Unknown parameter 'mask' [ 457.975329][T10297] xt_CT: No such helper "netbios-ns" [ 458.388552][T10307] netlink: 'syz.7.1430': attribute type 29 has an invalid length. [ 458.390461][T10307] netlink: 'syz.7.1430': attribute type 29 has an invalid length. [ 458.392441][T10308] netlink: 'syz.7.1430': attribute type 29 has an invalid length. [ 458.403001][T10310] netlink: 'syz.7.1430': attribute type 29 has an invalid length. [ 458.571249][T10312] xt_CT: You must specify a L4 protocol and not use inversions on it [ 460.764176][T10333] loop0: detected capacity change from 0 to 1024 [ 460.835482][T10333] ext4: Unknown parameter 'mask' [ 461.625338][T10337] xt_CT: No such helper "netbios-ns" [ 461.869920][T10347] netlink: 'syz.4.1443': attribute type 29 has an invalid length. [ 461.871870][T10347] netlink: 'syz.4.1443': attribute type 29 has an invalid length. [ 461.908266][T10347] netlink: 'syz.4.1443': attribute type 29 has an invalid length. [ 461.910396][T10347] netlink: 'syz.4.1443': attribute type 29 has an invalid length. [ 462.162755][T10350] xt_CT: You must specify a L4 protocol and not use inversions on it [ 463.112384][T10358] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1446'. [ 463.338973][T10361] device hsr_slave_0 left promiscuous mode [ 463.375509][T10361] device hsr_slave_1 left promiscuous mode [ 463.482181][T10365] loop6: detected capacity change from 0 to 1024 [ 463.493726][T10365] ext4: Unknown parameter 'mask' [ 464.715536][T10372] xt_CT: No such helper "netbios-ns" [ 465.253631][T10383] netlink: 'syz.4.1455': attribute type 29 has an invalid length. [ 465.271667][T10383] netlink: 'syz.4.1455': attribute type 29 has an invalid length. [ 465.279866][T10383] netlink: 'syz.4.1455': attribute type 29 has an invalid length. [ 465.290104][T10383] netlink: 'syz.4.1455': attribute type 29 has an invalid length. [ 465.598231][T10389] x_tables: duplicate underflow at hook 2 [ 466.162532][T10388] xt_CT: You must specify a L4 protocol and not use inversions on it [ 466.413657][T10378] loop3: detected capacity change from 0 to 32768 [ 466.428827][T10378] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.1453 (10378) [ 466.433243][T10378] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 466.436414][T10378] BTRFS info (device loop3): using sha256 (sha256-ce) checksum algorithm [ 466.438229][T10378] BTRFS info (device loop3): using free space tree [ 466.452947][T10398] loop7: detected capacity change from 0 to 1024 [ 466.455154][T10398] ext4: Unknown parameter 'mask' [ 467.415268][T10409] xt_CT: No such helper "netbios-ns" [ 467.522938][T10415] loop4: detected capacity change from 0 to 1024 [ 467.665030][T10415] ext4: Unknown parameter 'mask' [ 467.742459][ T7878] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 467.749475][T10378] BTRFS info (device loop3): enabling ssd optimizations [ 468.493962][T10438] netlink: 'syz.7.1467': attribute type 29 has an invalid length. [ 468.522732][T10438] netlink: 'syz.7.1467': attribute type 29 has an invalid length. [ 468.534139][T10438] netlink: 'syz.7.1467': attribute type 29 has an invalid length. [ 468.555080][T10438] netlink: 'syz.7.1467': attribute type 29 has an invalid length. [ 468.613800][ T4304] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 468.786591][T10442] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1470'. [ 469.027030][T10448] netlink: 'syz.7.1481': attribute type 11 has an invalid length. [ 469.085391][T10446] xt_CT: You must specify a L4 protocol and not use inversions on it [ 469.243981][T10451] loop7: detected capacity change from 0 to 1024 [ 469.261646][T10451] ext4: Unknown parameter 'mask' [ 469.452699][ T7878] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 471.576578][T10462] xt_CT: No such helper "netbios-ns" [ 472.650986][T10475] netlink: 'syz.3.1480': attribute type 29 has an invalid length. [ 472.652859][T10475] netlink: 'syz.3.1480': attribute type 29 has an invalid length. [ 472.707132][T10475] netlink: 'syz.3.1480': attribute type 29 has an invalid length. [ 472.712106][T10475] netlink: 'syz.3.1480': attribute type 29 has an invalid length. [ 473.289315][T10481] usb usb7: usbfs: process 10481 (syz.3.1482) did not claim interface 0 before use [ 473.441957][T10478] loop0: detected capacity change from 0 to 32768 [ 473.465276][T10478] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz.0.1479 (10478) [ 473.608629][T10489] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 473.610666][T10489] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 473.633571][T10478] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 473.636232][T10478] BTRFS info (device loop0): using sha256 (sha256-ce) checksum algorithm [ 473.638046][T10478] BTRFS info (device loop0): using free space tree [ 473.651308][T10486] xt_CT: You must specify a L4 protocol and not use inversions on it [ 473.804994][T10478] BTRFS info (device loop0): enabling ssd optimizations [ 474.004287][T10511] loop6: detected capacity change from 0 to 1024 [ 474.006359][T10511] ext4: Unknown parameter 'mask' [ 474.571606][ T7878] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 474.591640][ T4300] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 475.375757][T10518] xt_CT: No such helper "netbios-ns" [ 478.832474][T10542] xt_CT: You must specify a L4 protocol and not use inversions on it [ 479.827324][T10565] xt_CT: No such helper "netbios-ns" [ 480.071951][T10577] loop0: detected capacity change from 0 to 1024 [ 480.083767][T10577] ext4: Unknown parameter 'mask' [ 483.019280][T10618] loop7: detected capacity change from 0 to 1024 [ 483.037162][T10618] ext4: Unknown parameter 'mask' [ 483.107843][T10607] xt_CT: You must specify a L4 protocol and not use inversions on it [ 483.190817][T10623] loop6: detected capacity change from 0 to 1024 [ 483.193251][T10623] ext4: Unknown parameter 'mask' [ 483.238155][ T7878] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 485.014179][T10640] device geneve2 entered promiscuous mode [ 485.702872][T10655] loop3: detected capacity change from 0 to 1024 [ 485.717416][T10655] ext4: Unknown parameter 'mask' [ 485.991699][T10661] loop3: detected capacity change from 0 to 1024 [ 485.993576][T10661] ext4: Unknown parameter 'mask' [ 486.060988][ T7878] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 488.181503][T10688] loop4: detected capacity change from 0 to 1024 [ 488.186677][T10688] ext4: Unknown parameter 'mask' [ 488.230017][ T7878] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 489.214075][T10707] loop0: detected capacity change from 0 to 1024 [ 489.240593][T10707] ext4: Unknown parameter 'mask' [ 489.301391][ T7878] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 490.371619][T10723] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 490.375475][ T27] audit: type=1326 audit(490.340:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10722 comm="syz.7.1555" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8c94b368 code=0x7ffc0000 [ 490.379989][ T27] audit: type=1326 audit(490.340:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10722 comm="syz.7.1555" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8c94b368 code=0x7ffc0000 [ 490.382197][T10723] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 490.395972][ T27] audit: type=1326 audit(490.340:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10722 comm="syz.7.1555" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=31 compat=0 ip=0xffff8c94b368 code=0x7ffc0000 [ 490.413749][ T27] audit: type=1326 audit(490.340:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10722 comm="syz.7.1555" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8c94b368 code=0x7ffc0000 [ 490.423010][ T27] audit: type=1326 audit(490.340:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10722 comm="syz.7.1555" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8c94b368 code=0x7ffc0000 [ 490.460371][ T27] audit: type=1326 audit(490.340:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10722 comm="syz.7.1555" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff8c94b368 code=0x7ffc0000 [ 490.470877][ T27] audit: type=1326 audit(490.340:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10722 comm="syz.7.1555" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8c94b368 code=0x7ffc0000 [ 490.483184][ T27] audit: type=1326 audit(490.340:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10722 comm="syz.7.1555" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8c94b368 code=0x7ffc0000 [ 490.493589][ T27] audit: type=1326 audit(490.340:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10722 comm="syz.7.1555" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=119 compat=0 ip=0xffff8c94b368 code=0x7ffc0000 [ 490.503175][ T27] audit: type=1326 audit(490.340:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10722 comm="syz.7.1555" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8c94b368 code=0x7ffc0000 [ 490.804985][T10735] loop3: detected capacity change from 0 to 1024 [ 490.818462][T10735] ext4: Unknown parameter 'mask' [ 490.904628][ T7878] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 491.547225][T10748] loop4: detected capacity change from 0 to 1024 [ 491.548933][T10748] ext4: Unknown parameter 'mask' [ 491.600345][ T7912] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 492.448084][T10778] loop6: detected capacity change from 0 to 1024 [ 492.449994][T10778] ext4: Unknown parameter 'mask' [ 493.880768][T10815] loop7: detected capacity change from 0 to 1024 [ 493.889673][T10815] ext4: Unknown parameter 'mask' [ 494.061215][ T7878] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 494.434821][ T14] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 494.567188][ T2058] ieee802154 phy0 wpan0: encryption failed: -22 [ 494.568725][ T2058] ieee802154 phy1 wpan1: encryption failed: -22 [ 494.614871][ T14] usb 1-1: Using ep0 maxpacket: 8 [ 494.617742][ T14] usb 1-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 494.619782][ T14] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 494.625583][ T14] usb 1-1: config 0 descriptor?? [ 494.836238][T10830] loop7: detected capacity change from 0 to 1024 [ 494.843295][T10830] ext4: Unknown parameter 'mask' [ 495.757798][T10855] loop3: detected capacity change from 0 to 1024 [ 495.762986][T10855] ext4: Unknown parameter 'mask' [ 495.926791][ T7912] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 496.412855][T10868] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1607'. [ 496.481827][ T27] kauditd_printk_skb: 14 callbacks suppressed [ 496.481874][ T27] audit: type=1326 audit(496.460:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10869 comm="syz.6.1608" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8c14b368 code=0x7ffc0000 [ 496.492503][ T27] audit: type=1326 audit(496.470:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10869 comm="syz.6.1608" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=426 compat=0 ip=0xffff8c14b368 code=0x7ffc0000 [ 496.501758][ T27] audit: type=1326 audit(496.470:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10869 comm="syz.6.1608" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8c14b368 code=0x7ffc0000 [ 496.513122][ T27] audit: type=1326 audit(496.470:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10869 comm="syz.6.1608" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8c14b368 code=0x7ffc0000 [ 496.823761][T10885] loop7: detected capacity change from 0 to 1024 [ 496.838757][T10885] ext4: Unknown parameter 'mask' [ 496.873076][ T47] Bluetooth: hci5: link tx timeout [ 496.874192][ T47] Bluetooth: hci5: killing stalled connection 10:aa:aa:aa:aa:aa [ 496.875866][ T47] Bluetooth: hci5: link tx timeout [ 496.876937][ T47] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 497.052966][ T14] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0012: -71 [ 497.055214][ T14] asix: probe of 1-1:0.0 failed with error -71 [ 497.058935][ T14] usb 1-1: USB disconnect, device number 8 [ 497.642421][T10895] binder: 10894:10895 tried to acquire reference to desc 0, got 1 instead [ 497.648030][T10895] binder: 10894:10895 got transaction to invalid handle, 2 [ 497.650033][T10895] binder: 10895:10894 cannot find target node [ 497.651345][T10895] binder: 10894:10895 transaction async to 0:0 failed 21/29201/-22, size 0--466 line 3054 [ 497.662147][ T14] binder: undelivered TRANSACTION_ERROR: 29201 [ 497.820924][T10902] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 497.822845][T10902] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 498.730651][T10928] loop4: detected capacity change from 0 to 1024 [ 498.741414][T10928] ext4: Unknown parameter 'mask' [ 499.132334][T10942] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 499.143963][T10942] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 499.945525][T10955] netlink: 36 bytes leftover after parsing attributes in process `syz.7.1640'. [ 500.839026][T10975] loop4: detected capacity change from 0 to 1024 [ 500.867366][T10975] ext4: Unknown parameter 'mask' [ 501.404659][T10983] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 501.406763][T10983] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 502.267869][T11010] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1662'. [ 502.453893][T11016] loop9: detected capacity change from 0 to 7 [ 502.474068][T11016] Dev loop9: unable to read RDB block 7 [ 502.476321][T11016] loop9: unable to read partition table [ 502.482947][T11016] loop9: partition table beyond EOD, truncated [ 502.510003][T11016] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5) [ 502.658481][T11019] loop0: detected capacity change from 0 to 1024 [ 502.674190][T11019] ext4: Unknown parameter 'mask' [ 503.044453][T11034] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 503.052194][T11034] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 505.412133][T11076] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 505.414936][T11069] loop6: detected capacity change from 0 to 1024 [ 505.416790][T11069] ext4: Unknown parameter 'mask' [ 505.426463][T11076] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 505.576868][T11081] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1690'. [ 505.588880][ T7912] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 506.094746][ T4716] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 506.100783][T11094] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 506.102916][T11094] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 506.110753][ T47] Bluetooth: hci1: Unknown advertising packet type: 0x49f4 [ 506.334872][ T4716] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 506.338174][ T4716] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 506.358625][ T4716] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 506.360405][ T4716] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 506.398002][ T4716] usb 1-1: config 0 descriptor?? [ 506.610292][ T4716] usbhid 1-1:0.0: can't add hid device: -71 [ 506.611611][ T4716] usbhid: probe of 1-1:0.0 failed with error -71 [ 506.617997][ T4716] usb 1-1: USB disconnect, device number 9 [ 507.872430][T11120] loop0: detected capacity change from 0 to 1024 [ 507.874295][T11120] ext4: Unknown parameter 'mask' [ 508.099567][T11126] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 508.101599][T11126] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 509.170254][T11140] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 509.174177][T11140] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 509.180748][ T47] Bluetooth: hci0: Unknown advertising packet type: 0x49f4 [ 509.234692][ T4716] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 509.388880][ T4716] usb 1-1: device descriptor read/64, error -71 [ 509.675027][ T4716] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 510.038158][ T4716] usb 1-1: device descriptor read/64, error -71 [ 510.156046][ T4716] usb usb1-port1: attempt power cycle [ 510.222335][T11156] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 510.231407][T11156] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 510.263730][T11160] loop4: detected capacity change from 0 to 1024 [ 510.269804][T11160] ext4: Unknown parameter 'mask' [ 510.301864][ T7878] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 511.225694][ T4716] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 511.255161][ T4716] usb 1-1: device descriptor read/8, error -71 [ 511.463292][T11176] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1725'. [ 511.677055][ T4716] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 511.691222][T11181] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 511.694927][T11181] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 511.705110][ T4716] usb 1-1: device descriptor read/8, error -71 [ 511.830093][ T4716] usb usb1-port1: unable to enumerate USB device [ 512.763218][T11194] loop4: detected capacity change from 0 to 1024 [ 512.777315][T11194] ext4: Unknown parameter 'mask' [ 512.826982][ T7878] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 513.741638][T11212] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 513.759742][T11212] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 514.201287][T11235] device geneve2 entered promiscuous mode [ 514.263286][T11237] loop3: detected capacity change from 0 to 1024 [ 514.279928][T11237] ext4: Unknown parameter 'mask' [ 515.661149][T11269] device geneve2 entered promiscuous mode [ 516.229027][T11294] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 516.233500][T11294] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 516.588845][T11303] device geneve2 entered promiscuous mode [ 520.053626][T11373] device geneve3 entered promiscuous mode [ 524.936633][ T47] Bluetooth: hci3: Malformed HCI Event: 0x22 [ 528.199489][T11479] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 528.203682][T11479] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 528.849949][ T47] Bluetooth: hci0: Malformed HCI Event: 0x22 [ 530.812116][T11511] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1857'. [ 530.911883][T11520] fuse: Bad value for 'fd' [ 531.153432][T11529] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 531.159447][T11529] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 531.959473][ T47] Bluetooth: hci5: Malformed HCI Event: 0x22 [ 533.728118][T11549] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 533.730141][T11549] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 533.951515][T11553] fuse: Bad value for 'fd' [ 536.091778][T11582] fuse: Bad value for 'fd' [ 537.459734][T11598] netlink: 148 bytes leftover after parsing attributes in process `syz.0.1887'. [ 537.461741][T11598] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 539.550145][T11636] could not allocate digest TFM handle sha224-ssse3 [ 540.572277][T11662] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1911'. [ 540.766564][T11670] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 540.768549][T11670] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 541.533859][T11702] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1926'. [ 541.603028][T11705] device hsr_slave_0 left promiscuous mode [ 541.654811][T11705] device hsr_slave_1 left promiscuous mode [ 542.972976][ T47] Bluetooth: hci3: Malformed HCI Event: 0x22 [ 543.096013][T11726] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1937'. [ 547.623645][T11801] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1962'. [ 547.805903][ T4373] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 548.011716][ T4373] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 548.017206][ T4373] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 548.025454][ T4373] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 548.030840][ T4373] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 548.037160][ T4373] usb 1-1: Product: syz [ 548.040321][ T4373] usb 1-1: Manufacturer: syz [ 548.042516][ T4373] usb 1-1: SerialNumber: syz [ 548.074212][ T4373] usb 1-1: selecting invalid altsetting 1 [ 548.684024][ T4373] cdc_ncm 1-1:1.0: SET_CRC_MODE failed [ 548.704677][ T4373] usb 1-1: selecting invalid altsetting 1 [ 548.706132][ T4373] cdc_ncm 1-1:1.0: bind() failure [ 548.728346][ T4373] usb 1-1: USB disconnect, device number 14 [ 549.716361][T11831] fuse: Bad value for 'fd' [ 549.769518][T11835] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1973'. [ 549.851051][T11842] usb usb8: usbfs: process 11842 (syz.0.1976) did not claim interface 0 before use [ 550.573237][T11869] fuse: Bad value for 'fd' [ 552.354246][T11881] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1989'. [ 552.389059][ T27] audit: type=1326 audit(552.370:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11884 comm="syz.3.1990" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9e94b368 code=0x7ffc0000 [ 552.404906][ T27] audit: type=1326 audit(552.390:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11884 comm="syz.3.1990" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9e94b368 code=0x7ffc0000 [ 552.409982][ T27] audit: type=1326 audit(552.390:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11884 comm="syz.3.1990" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff9e94b368 code=0x7ffc0000 [ 552.421789][ T27] audit: type=1326 audit(552.400:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11884 comm="syz.3.1990" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9e94b368 code=0x7ffc0000 [ 552.454609][ T27] audit: type=1326 audit(552.400:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11884 comm="syz.3.1990" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9e94b368 code=0x7ffc0000 [ 552.458975][ T27] audit: type=1326 audit(552.400:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11884 comm="syz.3.1990" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff9e94b368 code=0x7ffc0000 [ 552.463702][ T27] audit: type=1326 audit(552.400:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11884 comm="syz.3.1990" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9e94b368 code=0x7ffc0000 [ 552.492641][ T27] audit: type=1326 audit(552.400:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11884 comm="syz.3.1990" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9e94b368 code=0x7ffc0000 [ 552.493048][T11888] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 552.504764][ T27] audit: type=1326 audit(552.400:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11884 comm="syz.3.1990" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=439 compat=0 ip=0xffff9e94b368 code=0x7ffc0000 [ 552.509068][ T27] audit: type=1326 audit(552.400:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11884 comm="syz.3.1990" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9e94b368 code=0x7ffc0000 [ 552.516201][T11888] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 553.554378][ T4303] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 553.563216][ T4303] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 553.565794][ T4303] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 553.568385][ T4303] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 553.570174][ T4303] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 553.571781][ T4303] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 554.051821][T11898] chnl_net:caif_netlink_parms(): no params data found [ 554.956051][T11898] bridge0: port 1(bridge_slave_0) entered blocking state [ 554.964109][T11898] bridge0: port 1(bridge_slave_0) entered disabled state [ 554.978696][T11898] device bridge_slave_0 entered promiscuous mode [ 555.018021][T11898] bridge0: port 2(bridge_slave_1) entered blocking state [ 555.019781][T11898] bridge0: port 2(bridge_slave_1) entered disabled state [ 555.021858][T11898] device bridge_slave_1 entered promiscuous mode [ 555.098085][T11898] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 555.114200][T11898] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 555.170807][T11898] team0: Port device team_slave_0 added [ 555.180851][ T4373] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 555.193413][T11898] team0: Port device team_slave_1 added [ 555.211973][T11898] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 555.214836][T11898] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 555.222951][T11898] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 555.229830][T11898] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 555.231443][T11898] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 555.239954][T11898] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 555.357206][ T4373] usb 1-1: Using ep0 maxpacket: 16 [ 555.361558][T11898] device hsr_slave_0 entered promiscuous mode [ 555.373786][ T4373] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 555.376052][ T4373] usb 1-1: config 1 interface 0 altsetting 93 has 0 endpoint descriptors, different from the interface descriptor's value: 18 [ 555.380182][ T4373] usb 1-1: config 1 interface 0 has no altsetting 0 [ 555.383270][ T4373] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 555.397769][ T4373] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 555.399646][ T4373] usb 1-1: SerialNumber: syz [ 555.415396][T11898] device hsr_slave_1 entered promiscuous mode [ 555.604699][ T4303] Bluetooth: hci3: command 0x0409 tx timeout [ 555.627104][ T4373] usb 1-1: USB disconnect, device number 15 [ 555.816947][T11898] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 555.996354][T11898] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 556.005943][ T2058] ieee802154 phy0 wpan0: encryption failed: -22 [ 556.007483][ T2058] ieee802154 phy1 wpan1: encryption failed: -22 [ 556.116280][T11898] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 556.266779][T11898] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 556.804293][T11898] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 556.846883][T11898] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 556.886948][T11898] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 556.927318][T11898] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 557.130227][T11898] 8021q: adding VLAN 0 to HW filter on device bond0 [ 557.132903][T11954] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 557.150379][ T4354] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 557.152379][ T4354] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 557.157253][T11954] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 557.159905][T11898] 8021q: adding VLAN 0 to HW filter on device team0 [ 557.164064][ T4354] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 557.166238][ T4354] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 557.168315][ T4354] bridge0: port 1(bridge_slave_0) entered blocking state [ 557.169894][ T4354] bridge0: port 1(bridge_slave_0) entered forwarding state [ 557.171694][ T4354] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 557.180649][ T5547] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 557.182876][ T5547] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 557.185347][ T5547] bridge0: port 2(bridge_slave_1) entered blocking state [ 557.186835][ T5547] bridge0: port 2(bridge_slave_1) entered forwarding state [ 557.203115][ T4354] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 557.225072][ T4354] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 557.232594][ T5547] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 557.238626][ T5547] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 557.252031][ T5547] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 557.255906][ T5547] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 557.263618][ T5547] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 557.282852][ T5547] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 557.289455][ T5547] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 557.296691][ T5547] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 557.302911][ T5547] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 557.323791][T11898] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 557.704776][ T4303] Bluetooth: hci3: command 0x041b tx timeout [ 558.424802][ T4716] usb 1-1: new full-speed USB device number 16 using dummy_hcd [ 558.583681][ T8116] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 558.585596][ T8116] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 558.600353][T11898] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 558.623646][ T5624] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 558.626268][ T5624] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 558.641172][ T5624] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 558.643463][ T5624] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 558.655711][ T5624] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 558.658031][ T5624] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 558.661802][T11898] device veth0_vlan entered promiscuous mode [ 558.768978][T11898] device veth1_vlan entered promiscuous mode [ 558.830828][ T47] Bluetooth: hci1: Malformed HCI Event: 0x22 [ 559.012111][ T5624] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 559.014353][ T5624] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 559.018954][ T5624] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 559.025688][ T5624] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 559.026821][T11990] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 559.030310][T11990] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 559.037543][T11898] device veth0_macvtap entered promiscuous mode [ 559.167607][ T4716] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 559.172163][ T4716] usb 1-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xFC, skipping [ 559.174345][ T4716] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 559.221194][ T4716] usb 1-1: New USB device found, idVendor=045e, idProduct=0284, bcdDevice=a4.8f [ 559.236661][ T5624] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 559.764758][ T47] Bluetooth: hci3: command 0x040f tx timeout [ 559.772737][T11898] device veth1_macvtap entered promiscuous mode [ 559.829260][T11898] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 559.838718][T11898] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 559.842721][T11898] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 559.849061][T11898] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 559.849461][ T4716] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 559.869786][ T4716] usb 1-1: Product: syz [ 559.870752][ T4716] usb 1-1: Manufacturer: syz [ 559.871663][ T4716] usb 1-1: SerialNumber: syz [ 559.874204][ T4716] usb 1-1: config 0 descriptor?? [ 559.884391][T11898] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 559.886701][T11898] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 559.888822][T11898] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 559.890985][T11898] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 559.893086][T11898] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 559.899933][T11970] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 559.918108][T11898] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 559.921492][T11898] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 559.923478][ T4919] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 559.933989][ T4919] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 559.942547][T11898] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 559.950653][T11898] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 559.952668][T11898] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 559.959788][T11898] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 559.961856][T11898] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 559.964005][T11898] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 559.971479][T11898] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 559.973794][T11898] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 559.981131][T11898] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 559.983318][T11898] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 559.987985][T11898] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 559.991815][ T5624] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 560.003661][ T5624] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 560.012664][T11898] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 560.014972][T11898] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 560.016685][T11898] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 560.018326][T11898] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 560.741876][T11965] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 560.743573][T11965] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 560.753038][T11965] vhci_hcd vhci_hcd.0: Device attached [ 560.759136][T11999] vhci_hcd: connection closed [ 560.775594][ T8116] vhci_hcd: stop threads [ 560.778489][ T8116] vhci_hcd: release socket [ 560.779858][ T8116] vhci_hcd: disconnect device [ 560.810251][ T4414] usb 1-1: USB disconnect, device number 16 [ 560.873295][ T4479] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 560.875810][ T4479] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 560.880480][ T5624] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 560.908368][ T5624] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 560.910052][ T5624] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 560.915193][ T4479] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 560.948714][ T4303] Bluetooth: hci5: link tx timeout [ 560.949928][ T4303] Bluetooth: hci5: killing stalled connection 10:aa:aa:aa:aa:aa [ 560.951467][ T4303] Bluetooth: hci5: link tx timeout [ 560.952423][ T4303] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 561.206536][ T4303] Bluetooth: hci1: Malformed HCI Event: 0x22 [ 561.379408][T12025] loop9: detected capacity change from 0 to 7 [ 561.382184][T12025] Dev loop9: unable to read RDB block 7 [ 561.383314][T12025] loop9: unable to read partition table [ 561.384461][T12025] loop9: partition table beyond EOD, truncated [ 561.492554][T12025] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5) [ 561.844792][ T4303] Bluetooth: hci3: command 0x0419 tx timeout [ 563.742911][T12058] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 563.750901][T12058] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 563.936336][ T47] Bluetooth: hci0: Malformed HCI Event: 0x22 [ 566.096835][T12084] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 566.098808][T12084] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 566.954638][T12098] loop9: detected capacity change from 0 to 7 [ 566.960000][T12098] Dev loop9: unable to read RDB block 7 [ 566.961268][T12098] loop9: unable to read partition table [ 566.962456][T12098] loop9: partition table beyond EOD, truncated [ 566.963722][T12098] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5) [ 567.034109][ T47] Bluetooth: hci3: Malformed HCI Event: 0x22 [ 567.085760][T12104] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2064'. [ 568.109036][T12116] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2069'. [ 568.153330][T12115] device wlan0 entered promiscuous mode [ 568.233616][T12115] device wlan0 left promiscuous mode [ 569.132138][T12139] ieee802154 phy0 wpan0: encryption failed: -22 [ 569.321130][T12144] loop9: detected capacity change from 0 to 7 [ 569.334660][T12144] Dev loop9: unable to read RDB block 7 [ 569.335818][T12144] loop9: unable to read partition table [ 569.337045][T12144] loop9: partition table beyond EOD, truncated [ 569.338278][T12144] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5) [ 569.451696][ T47] Bluetooth: hci0: Malformed HCI Event: 0x22 [ 569.454322][ T27] kauditd_printk_skb: 12 callbacks suppressed [ 569.454334][ T27] audit: type=1326 audit(569.430:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12145 comm="syz.3.2083" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff82f4b368 code=0x7ffc0000 [ 569.475695][ T27] audit: type=1326 audit(569.460:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12145 comm="syz.3.2083" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff82f4b368 code=0x7ffc0000 [ 569.492628][ T27] audit: type=1326 audit(569.460:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12145 comm="syz.3.2083" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff82f4b368 code=0x7ffc0000 [ 569.512949][ T27] audit: type=1326 audit(569.460:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12145 comm="syz.3.2083" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff82f4b368 code=0x7ffc0000 [ 569.562362][ T27] audit: type=1326 audit(569.460:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12145 comm="syz.3.2083" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff82f4b368 code=0x7ffc0000 [ 569.586217][ T27] audit: type=1326 audit(569.460:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12145 comm="syz.3.2083" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff82f4b368 code=0x7ffc0000 [ 569.591417][ T27] audit: type=1326 audit(569.460:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12145 comm="syz.3.2083" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff82f4b368 code=0x7ffc0000 [ 569.596617][ T27] audit: type=1326 audit(569.460:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12145 comm="syz.3.2083" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff82f4b368 code=0x7ffc0000 [ 569.601023][ T27] audit: type=1326 audit(569.470:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12145 comm="syz.3.2083" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=439 compat=0 ip=0xffff82f4b368 code=0x7ffc0000 [ 569.605629][ T27] audit: type=1326 audit(569.470:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12145 comm="syz.3.2083" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff82f4b368 code=0x7ffc0000 [ 570.428332][T12158] device veth0_to_team entered promiscuous mode [ 570.496210][T12158] tap0: tun_chr_ioctl cmd 1074025677 [ 570.497475][T12158] tap0: linktype set to 776 [ 571.348815][T12183] loop9: detected capacity change from 0 to 7 [ 571.371557][T12183] Dev loop9: unable to read RDB block 7 [ 571.373076][T12183] loop9: unable to read partition table [ 571.381151][T12183] loop9: partition table beyond EOD, truncated [ 571.382753][T12183] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5) [ 571.653077][ T47] Bluetooth: hci5: Malformed HCI Event: 0x22 [ 572.733770][T12189] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 572.791800][T12193] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 572.824829][T12201] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2102'. [ 574.147786][ T47] Bluetooth: hci1: Malformed HCI Event: 0x22 [ 575.056567][T12244] x_tables: duplicate underflow at hook 3 [ 575.380543][T12261] netlink: 80 bytes leftover after parsing attributes in process `syz.6.2122'. [ 576.712680][T12282] fuse: Bad value for 'user_id' [ 578.788560][T12324] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2141'. [ 578.790447][T12324] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2141'. [ 578.792293][T12324] netlink: 'syz.4.2141': attribute type 13 has an invalid length. [ 580.010450][T12397] fuse: Bad value for 'fd' [ 580.868970][T12393] syz.3.2143 (12393) used obsolete PPPIOCDETACH ioctl [ 580.926812][ T47] Bluetooth: hci2: Malformed HCI Event: 0x22 [ 581.091946][T12414] device syzkaller0 entered promiscuous mode [ 582.539778][ T27] kauditd_printk_skb: 10 callbacks suppressed [ 582.539792][ T27] audit: type=1326 audit(582.520:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12423 comm="syz.4.2156" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9ed4b368 code=0x7ffc0000 [ 582.575356][ T27] audit: type=1326 audit(582.560:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12423 comm="syz.4.2156" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff9ed4b368 code=0x7ffc0000 [ 582.586743][ T27] audit: type=1326 audit(582.570:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12423 comm="syz.4.2156" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9ed4b368 code=0x7ffc0000 [ 582.614715][ T27] audit: type=1326 audit(582.570:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12423 comm="syz.4.2156" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff9ed4b368 code=0x7ffc0000 [ 582.619285][ T27] audit: type=1326 audit(582.570:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12423 comm="syz.4.2156" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9ed4b368 code=0x7ffc0000 [ 582.671461][ T27] audit: type=1326 audit(582.570:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12423 comm="syz.4.2156" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=439 compat=0 ip=0xffff9ed4b368 code=0x7ffc0000 [ 582.676139][ T27] audit: type=1326 audit(582.570:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12423 comm="syz.4.2156" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9ed4b368 code=0x7ffc0000 [ 582.680831][ T27] audit: type=1326 audit(582.570:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12423 comm="syz.4.2156" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=429 compat=0 ip=0xffff9ed4b368 code=0x7ffc0000 [ 582.685690][ T27] audit: type=1326 audit(582.570:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12423 comm="syz.4.2156" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9ed4b368 code=0x7ffc0000 [ 582.690375][ T27] audit: type=1326 audit(582.570:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12423 comm="syz.4.2156" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=51 compat=0 ip=0xffff9ed4b368 code=0x7ffc0000 [ 585.432982][ T47] Bluetooth: hci2: Malformed HCI Event: 0x22 [ 589.811356][ T47] Bluetooth: hci2: Malformed HCI Event: 0x22 [ 593.632742][T12532] rdma_op 000000008cd3fbd1 conn xmit_rdma 0000000000000000 [ 596.931834][ T4303] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 596.944309][ T4303] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 596.946935][ T4303] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 596.949352][ T4303] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 596.952011][ T4303] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 596.954362][ T4303] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 597.996928][ T4303] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 598.012175][T12555] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 598.014911][T12554] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 598.015303][T12555] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 598.020681][T12554] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 598.021751][ T4295] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 598.023679][T12555] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 598.024051][ T4295] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 598.026798][T12555] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 598.028866][T12555] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 598.030556][T12555] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 598.032506][T12554] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 598.964755][T12555] Bluetooth: hci4: command 0x0409 tx timeout [ 599.292375][T12433] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2160'. [ 599.294284][T12433] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2160'. [ 599.297660][T12491] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 599.438330][T12491] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 599.729410][T12555] Bluetooth: hci2: Malformed HCI Event: 0x22 [ 599.776553][ T8128] ------------[ cut here ]------------ [ 599.778227][ T8128] sysfs group 'byte_queue_limits' not found for kobject 'tx-0' [ 599.779976][ T8128] WARNING: CPU: 1 PID: 8128 at fs/sysfs/group.c:280 sysfs_remove_group+0x174/0x288 [ 599.781940][ T8128] Modules linked in: [ 599.782767][ T8128] CPU: 1 PID: 8128 Comm: kbnepd bnep0 Not tainted 6.1.119-syzkaller #0 [ 599.784478][ T8128] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 599.786583][ T8128] pstate: 60400005 (nZCv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 599.788253][ T8128] pc : sysfs_remove_group+0x174/0x288 [ 599.789503][ T8128] lr : sysfs_remove_group+0x174/0x288 [ 599.790718][ T8128] sp : ffff800021727840 [ 599.791620][ T8128] x29: ffff800021727840 x28: 1fffe0001e0038ca x27: 1fffe0001e003888 [ 599.793354][ T8128] x26: 0000000000000000 x25: 00000000ffffffff x24: 1ffff00002860c90 [ 599.795147][ T8128] x23: dfff800000000000 x22: dfff800000000000 x21: ffff0000d2bca420 [ 599.796801][ T8128] x20: ffff0000f0475000 x19: ffff800014306b60 x18: ffff800021726c40 [ 599.798681][ T8128] x17: 0000000000000000 x16: ffff8000122975f4 x15: 0000000000000000 [ 599.800443][ T8128] x14: 00000000ffffffff x13: 0000000000000001 x12: 0000000000000001 [ 599.802150][ T8128] x11: 0000000000ff0100 x10: 0000000000000000 x9 : 436aad55a71d9000 [ 599.803998][ T8128] x8 : 436aad55a71d9000 x7 : 0000000000000001 x6 : 0000000000000001 [ 599.805656][ T8128] x5 : ffff800021727138 x4 : ffff800015ab30e0 x3 : ffff800008585a08 [ 599.807506][ T8128] x2 : 0000000000000001 x1 : 0000000100000000 x0 : 0000000000000000 [ 599.809326][ T8128] Call trace: [ 599.810048][ T8128] sysfs_remove_group+0x174/0x288 [ 599.811298][ T8128] netdev_queue_update_kobjects+0x3d4/0x470 [ 599.812593][ T8128] netdev_unregister_kobject+0x100/0x204 [ 599.813887][ T8128] unregister_netdevice_many+0x11b8/0x175c [ 599.815218][ T8128] unregister_netdev+0x178/0x1f0 [ 599.816275][ T8128] bnep_session+0x23c4/0x2584 [ 599.817352][ T8128] kthread+0x250/0x2d8 [ 599.818230][ T8128] ret_from_fork+0x10/0x20 [ 599.819241][ T8128] irq event stamp: 9212 [ 599.820130][ T8128] hardirqs last enabled at (9211): [] __up_console_sem+0xb4/0x100 [ 599.822206][ T8128] hardirqs last disabled at (9212): [] el1_dbg+0x24/0x80 [ 599.823993][ T8128] softirqs last enabled at (9132): [] dev_mc_flush+0x1b4/0x1f8 [ 599.826028][ T8128] softirqs last disabled at (9130): [] local_bh_disable+0x10/0x34 [ 599.827949][ T8128] ---[ end trace 0000000000000000 ]--- SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 600.069826][ T8128] ================================================================== [ 600.071675][ T8128] BUG: KASAN: use-after-free in device_for_each_child+0xa8/0x174 [ 600.073294][ T8128] Read of size 8 at addr ffff0000d74514b8 by task kbnepd bnep0/8128 [ 600.074972][ T8128] [ 600.075439][ T8128] CPU: 0 PID: 8128 Comm: kbnepd bnep0 Tainted: G W 6.1.119-syzkaller #0 [ 600.077511][ T8128] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 600.079555][ T8128] Call trace: [ 600.080315][ T8128] dump_backtrace+0x1c8/0x1f4 [ 600.081263][ T8128] show_stack+0x2c/0x3c [ 600.082162][ T8128] dump_stack_lvl+0x108/0x170 [ 600.083067][ T8128] print_report+0x174/0x4c0 [ 600.084071][ T8128] kasan_report+0xd4/0x130 [ 600.084942][ T8128] __asan_report_load8_noabort+0x2c/0x38 [ 600.086137][ T8128] device_for_each_child+0xa8/0x174 [ 600.087385][ T8128] pm_runtime_set_memalloc_noio+0xf0/0x210 [ 600.088639][ T8128] netdev_unregister_kobject+0x144/0x204 [ 600.089918][ T8128] unregister_netdevice_many+0x11b8/0x175c [ 600.091262][ T8128] unregister_netdev+0x178/0x1f0 [ 600.092255][ T8128] bnep_session+0x23c4/0x2584 [ 600.093271][ T8128] kthread+0x250/0x2d8 [ 600.094121][ T8128] ret_from_fork+0x10/0x20 [ 600.095128][ T8128] [ 600.095620][ T8128] Allocated by task 7471: [ 600.096609][ T8128] kasan_set_track+0x4c/0x80 [ 600.097518][ T8128] kasan_save_alloc_info+0x24/0x30 [ 600.098591][ T8128] __kasan_kmalloc+0xac/0xc4 [ 600.099600][ T8128] __kmalloc+0xd8/0x1c4 [ 600.100539][ T8128] hci_alloc_dev_priv+0x30/0x18a8 [ 600.101627][ T8128] vhci_create_device+0xf8/0x6d0 [ 600.102750][ T8128] vhci_write+0x318/0x3b8 [ 600.103615][ T8128] vfs_write+0x610/0x91c [ 600.104502][ T8128] ksys_write+0x15c/0x26c [ 600.105360][ T8128] __arm64_sys_write+0x7c/0x90 [ 600.106393][ T8128] invoke_syscall+0x98/0x2bc [ 600.107327][ T8128] el0_svc_common+0x138/0x258 [ 600.108325][ T8128] do_el0_svc+0x58/0x13c [ 600.109246][ T8128] el0_svc+0x58/0x168 [ 600.110092][ T8128] el0t_64_sync_handler+0x84/0xf0 [ 600.111143][ T8128] el0t_64_sync+0x18c/0x190 [ 600.112060][ T8128] [ 600.112597][ T8128] Freed by task 12412: [ 600.113470][ T8128] kasan_set_track+0x4c/0x80 [ 600.114437][ T8128] kasan_save_free_info+0x38/0x5c [ 600.115480][ T8128] ____kasan_slab_free+0x144/0x1c0 [ 600.116628][ T8128] __kasan_slab_free+0x18/0x28 [ 600.117637][ T8128] __kmem_cache_free+0x2c0/0x4b4 [ 600.118701][ T8128] kfree+0xcc/0x1b8 [ 600.119578][ T8128] hci_release_dev+0x1040/0x11a8 [ 600.120624][ T8128] bt_host_release+0x70/0x88 [ 600.121658][ T8128] device_release+0x8c/0x1ac [ 600.122637][ T8128] kobject_put+0x2a8/0x41c [ 600.123616][ T8128] put_device+0x28/0x40 [ 600.124420][ T8128] hci_free_dev+0x24/0x34 [ 600.125241][ T8128] vhci_release+0x84/0xcc [ 600.126138][ T8128] __fput+0x1c8/0x7c8 [ 600.127018][ T8128] ____fput+0x20/0x30 [ 600.127865][ T8128] task_work_run+0x240/0x2f0 [ 600.128875][ T8128] do_exit+0x554/0x1a88 [ 600.129707][ T8128] do_group_exit+0x194/0x22c [ 600.130699][ T8128] get_signal+0x14a0/0x158c [ 600.131711][ T8128] do_notify_resume+0x388/0x2cb8 [ 600.132742][ T8128] el0_svc+0x9c/0x168 [ 600.133643][ T8128] el0t_64_sync_handler+0x84/0xf0 [ 600.134726][ T8128] el0t_64_sync+0x18c/0x190 [ 600.135644][ T8128] [ 600.136133][ T8128] Last potentially related work creation: [ 600.137285][ T8128] kasan_save_stack+0x40/0x70 [ 600.138230][ T8128] __kasan_record_aux_stack+0xcc/0xe8 [ 600.139308][ T8128] kasan_record_aux_stack_noalloc+0x14/0x20 [ 600.140520][ T8128] insert_work+0x64/0x384 [ 600.141435][ T8128] __queue_work+0xd48/0x136c [ 600.142466][ T8128] queue_work_on+0xc0/0x16c [ 600.143407][ T8128] hci_recv_frame+0x43c/0x548 [ 600.144287][ T8128] vhci_write+0x2a4/0x3b8 [ 600.145129][ T8128] vfs_write+0x610/0x91c [ 600.145988][ T8128] ksys_write+0x15c/0x26c [ 600.146942][ T8128] __arm64_sys_write+0x7c/0x90 [ 600.147970][ T8128] invoke_syscall+0x98/0x2bc [ 600.148897][ T8128] el0_svc_common+0x138/0x258 [ 600.149849][ T8128] do_el0_svc+0x58/0x13c [ 600.150733][ T8128] el0_svc+0x58/0x168 [ 600.151593][ T8128] el0t_64_sync_handler+0x84/0xf0 [ 600.152663][ T8128] el0t_64_sync+0x18c/0x190 [ 600.153591][ T8128] [ 600.154121][ T8128] Second to last potentially related work creation: [ 600.155539][ T8128] kasan_save_stack+0x40/0x70 [ 600.156491][ T8128] __kasan_record_aux_stack+0xcc/0xe8 [ 600.157606][ T8128] kasan_record_aux_stack_noalloc+0x14/0x20 [ 600.158852][ T8128] insert_work+0x64/0x384 [ 600.159720][ T8128] __queue_work+0xd48/0x136c [ 600.160742][ T8128] queue_work_on+0xc0/0x16c [ 600.161725][ T8128] hci_send_acl+0x904/0xc48 [ 600.162701][ T8128] l2cap_do_send+0x238/0x350 [ 600.163709][ T8128] l2cap_chan_send+0x190c/0x1e5c [ 600.164698][ T8128] l2cap_sock_sendmsg+0x184/0x2a8 [ 600.165688][ T8128] kernel_sendmsg+0x1c8/0x2a0 [ 600.166683][ T8128] bnep_session+0x1f28/0x2584 [ 600.167792][ T8128] kthread+0x250/0x2d8 [ 600.168704][ T8128] ret_from_fork+0x10/0x20 [ 600.169679][ T8128] [ 600.170198][ T8128] The buggy address belongs to the object at ffff0000d7450000 [ 600.170198][ T8128] which belongs to the cache kmalloc-8k of size 8192 [ 600.173163][ T8128] The buggy address is located 5304 bytes inside of [ 600.173163][ T8128] 8192-byte region [ffff0000d7450000, ffff0000d7452000) [ 600.176214][ T8128] [ 600.176725][ T8128] The buggy address belongs to the physical page: [ 600.178072][ T8128] page:00000000661a9bc7 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x117450 [ 600.180268][ T8128] head:00000000661a9bc7 order:3 compound_mapcount:0 compound_pincount:0 [ 600.182276][ T8128] flags: 0x5ffc00000010200(slab|head|node=0|zone=2|lastcpupid=0x7ff) [ 600.184044][ T8128] raw: 05ffc00000010200 fffffc00030ee200 dead000000000003 ffff0000c0002c00 [ 600.185966][ T8128] raw: 0000000000000000 0000000000020002 00000001ffffffff 0000000000000000 [ 600.187884][ T8128] page dumped because: kasan: bad access detected [ 600.189223][ T8128] [ 600.189739][ T8128] Memory state around the buggy address: [ 600.190941][ T8128] ffff0000d7451380: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 600.192710][ T8128] ffff0000d7451400: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 600.194499][ T8128] >ffff0000d7451480: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 600.196131][ T8128] ^ [ 600.197418][ T8128] ffff0000d7451500: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 600.199069][ T8128] ffff0000d7451580: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 600.200901][ T8128] ================================================================== [ 600.264343][ T8128] Disabling lock debugging due to kernel taint [ 600.267089][ T8128] ================================================================================ [ 600.268984][ T8128] UBSAN: array-index-out-of-bounds in kernel/locking/qspinlock.c:131:9 [ 600.270693][ T8128] index 13789 is out of range for type 'unsigned long[8]' [ 600.272132][ T8128] CPU: 0 PID: 8128 Comm: kbnepd bnep0 Tainted: G B W 6.1.119-syzkaller #0 [ 600.274253][ T8128] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 600.276364][ T8128] Call trace: [ 600.277119][ T8128] dump_backtrace+0x1c8/0x1f4 [ 600.278084][ T8128] show_stack+0x2c/0x3c [ 600.278989][ T8128] dump_stack_lvl+0x108/0x170 [ 600.279957][ T8128] dump_stack+0x1c/0x58 [ 600.280824][ T8128] __ubsan_handle_out_of_bounds+0xfc/0x148 [ 600.282144][ T8128] queued_spin_lock_slowpath+0x9fc/0xe48 [ 600.283385][ T8128] do_raw_spin_lock+0x330/0x358 [ 600.284438][ T8128] _raw_spin_lock_irqsave+0x74/0xb4 [ 600.285581][ T8128] klist_next+0x8c/0x2e4 [ 600.286406][ T8128] device_for_each_child+0xc0/0x174 [ 600.287605][ T8128] pm_runtime_set_memalloc_noio+0xf0/0x210 [ 600.288920][ T8128] netdev_unregister_kobject+0x144/0x204 [ 600.290211][ T8128] unregister_netdevice_many+0x11b8/0x175c [ 600.291365][ T8128] unregister_netdev+0x178/0x1f0 [ 600.292449][ T8128] bnep_session+0x23c4/0x2584 [ 600.293442][ T8128] kthread+0x250/0x2d8 [ 600.294369][ T8128] ret_from_fork+0x10/0x20 [ 600.295318][ T8128] ================================================================================ [ 600.297332][ T8128] Unable to handle kernel paging request at virtual address ffff800015937f70 [ 600.299227][ T8128] KASAN: probably user-memory-access in range [0x00000000ac9bfb80-0x00000000ac9bfb87] [ 600.301228][ T8128] Mem abort info: [ 600.302015][ T8128] ESR = 0x0000000096000047 [ 600.303147][ T8128] EC = 0x25: DABT (current EL), IL = 32 bits [ 600.304537][ T8128] SET = 0, FnV = 0 [ 600.305351][ T8128] EA = 0, S1PTW = 0 [ 600.306144][ T8128] FSC = 0x07: level 3 translation fault [ 600.307360][ T8128] Data abort info: [ 600.308155][ T8128] ISV = 0, ISS = 0x00000047 [ 600.309187][ T8128] CM = 0, WnR = 1 [ 600.309934][ T8128] swapper pgtable: 4k pages, 48-bit VAs, pgdp=00000001ab36f000 [ 600.311476][ T8128] [ffff800015937f70] pgd=100000023ffff003, p4d=100000023ffff003, pud=100000023fffe003, pmd=100000023fffa003, pte=0000000000000000 [ 600.314355][ T8128] Internal error: Oops: 0000000096000047 [#1] PREEMPT SMP [ 600.315845][ T8128] Modules linked in: [ 600.316695][ T8128] CPU: 0 PID: 8128 Comm: kbnepd bnep0 Tainted: G B W 6.1.119-syzkaller #0 [ 600.318736][ T8128] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 600.320831][ T8128] pstate: 804000c5 (Nzcv daIF +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 600.322582][ T8128] pc : queued_spin_lock_slowpath+0x3f4/0xe48 [ 600.323930][ T8128] lr : queued_spin_lock_slowpath+0x9fc/0xe48 [ 600.325234][ T8128] sp : ffff8000217275a0 [ 600.326082][ T8128] x29: ffff800021727640 x28: 000000000000d77b x27: 1ffff000042e4ec0 [ 600.327699][ T8128] x26: dfff800000000000 x25: 1fffe0001e723b00 x24: 0000000000040000 [ 600.329366][ T8128] x23: ffff0001b3d0cf48 x22: ffff800015937f70 x21: ffff0001b3d0cf40 [ 600.331009][ T8128] x20: 1fffe000367a19e8 x19: ffff0000f391d800 x18: 1fffe0003679f176 [ 600.332763][ T8128] x17: 3d3d3d3d3d3d3d3d x16: ffff8000121e5100 x15: 0000000000000000 [ 600.334391][ T8128] x14: 00000000ffffffff x13: 0000000000000001 x12: ffff7000030abcb0 [ 600.336028][ T8128] x11: 0000000000ff0100 x10: ffff800015937f40 x9 : 0000000000000003 [ 600.337700][ T8128] x8 : 0000000000000000 x7 : 0000000000000001 x6 : 0000000000000001 [ 600.339396][ T8128] x5 : ffff800021726e58 x4 : ffff800015ab30e0 x3 : ffff8000081a7abc [ 600.341031][ T8128] x2 : 0000000000000001 x1 : 0000000000000004 x0 : ffff0001b3d0cf48 [ 600.342793][ T8128] Call trace: [ 600.343512][ T8128] queued_spin_lock_slowpath+0x3f4/0xe48 [ 600.344746][ T8128] do_raw_spin_lock+0x330/0x358 [ 600.345763][ T8128] _raw_spin_lock_irqsave+0x74/0xb4 [ 600.345978][T12555] Bluetooth: hci6: command 0x0409 tx timeout [ 600.346842][ T8128] klist_next+0x8c/0x2e4 [ 600.348053][T12555] Bluetooth: hci7: command 0x0409 tx timeout [ 600.349028][ T8128] device_for_each_child+0xc0/0x174 [ 600.351556][ T8128] pm_runtime_set_memalloc_noio+0xf0/0x210 [ 600.352810][ T8128] netdev_unregister_kobject+0x144/0x204 [ 600.354070][ T8128] unregister_netdevice_many+0x11b8/0x175c [ 600.355306][ T8128] unregister_netdev+0x178/0x1f0 [ 600.356323][ T8128] bnep_session+0x23c4/0x2584 [ 600.357346][ T8128] kthread+0x250/0x2d8 [ 600.358288][ T8128] ret_from_fork+0x10/0x20 [ 600.359205][ T8128] Code: aa1603e0 976e0ad9 aa1703e0 52800081 (f90002d5) [ 600.360796][ T8128] ---[ end trace 0000000000000000 ]--- [ 600.965476][ T8128] Kernel panic - not syncing: Oops: Fatal exception [ 600.966912][ T8128] SMP: stopping secondary CPUs [ 600.967966][ T8128] Kernel Offset: disabled [ 600.968918][ T8128] CPU features: 0x080000,02070084,26017203 [ 600.970216][ T8128] Memory Limit: none [ 601.565019][ T8128] Rebooting in 86400 seconds..