last executing test programs: 22m5.779506411s ago: executing program 1 (id=44): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x80000000005, 0x100000001000087}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x43, &(0x7f0000000040)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x10, &(0x7f0000000180)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}}) write$FUSE_INIT(r1, 0x0, 0x0) syz_fuse_handle_req(r1, 0x0, 0x0, 0x0) getpgrp(0xffffffffffffffff) getegid() r2 = getpid() sched_setscheduler(r2, 0x2, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f00000000c0)={0x0, 0x328000, 0x800}, 0x20) r3 = socket$inet6(0xa, 0x80002, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r4, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x4) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc000000190001002bbd700004000000000000000000000000000000000000016401010200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000c00000000000000000000000000000000002000000000000000002000000000ffffffffffffffff000000000000000000000000000000000000000000000000000a000000000000feffffffff7f40000200000000002008000000000000000001000000000000004400050000110000000000000000000000000000000000003c00000002000000e00000010000000000000000000000000600000004030000000000"], 0xfc}, 0x1, 0x0, 0x0, 0x1}, 0x0) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e27, 0x6, @mcast2, 0x7}, 0x1c) sendmmsg$inet6(r3, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 21m56.57040491s ago: executing program 1 (id=59): socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) socket$unix(0x1, 0x1, 0x0) pipe2$watch_queue(0x0, 0x80) add_key(&(0x7f0000000040)='cifs.spnego\x00', &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) ioctl$TCSETSW2(0xffffffffffffffff, 0x402c542c, &(0x7f0000000040)={0x6, 0x10, 0x80000000, 0x2, 0x1, "cbb728b259dd5313a9a6c933d5506422b614d3", 0xe1, 0x2}) syz_open_dev$video4linux(&(0x7f00000025c0), 0x5, 0x789080) syz_usb_connect(0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x72) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x185) r3 = inotify_init() inotify_add_watch(r3, &(0x7f00000000c0)='.\x00', 0x5000009) fallocate(r2, 0x0, 0x1000000, 0x3) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r2, 0x2000000) 21m51.982776204s ago: executing program 1 (id=68): syz_emit_ethernet(0xc8, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0xd6, 0x7fffffff}]}) r0 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r0, 0xc0184800, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x8, 0xfffa}, 0x3a, [0x8000, 0x3ff, 0xf, 0x8, 0x80000001, 0x2, 0x7, 0x7f, 0xa9, 0x4d, 0x6, 0x5f, 0x9, 0x15, 0xffff2d37, 0xff7fff01, 0x7, 0x5, 0x1fd, 0x0, 0x6, 0x0, 0x7, 0x3c5b, 0x1, 0x22, 0xd, 0x4001, 0x0, 0xffffffff, 0xe661, 0x0, 0x7, 0x5, 0x8, 0x4c74, 0x10000, 0x242, 0x3, 0xe, 0x0, 0x80008071, 0x7, 0x0, 0x1, 0x7, 0x5, 0x3e, 0x20018e, 0xa, 0xfffffeff, 0x0, 0x6, 0x4, 0x8, 0x3ff, 0xfffffff9, 0x0, 0x2004, 0x6, 0x4, 0x4, 0xfffffffd, 0x40], [0x10000007, 0x9, 0x8000012f, 0x8008, 0x5, 0xfffffff3, 0x129432f6, 0xc8, 0x5, 0x1510edcf, 0x2c1, 0x6c7, 0x9, 0x0, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x66abcbd2, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x2, 0xff, 0x5, 0x1000005, 0x5f2d, 0xd, 0x4e0, 0x381, 0x4, 0xb, 0x4, 0x9, 0x8, 0x44, 0x6, 0x47, 0x8000, 0x1, 0x0, 0xffff, 0x2, 0x4, 0x9, 0x4, 0x3, 0x4000009, 0x6, 0x0, 0x3, 0x1, 0x48c93793, 0x42, 0x3], [0x7, 0x408, 0x3ff, 0x5, 0xffffffff, 0x100, 0x4, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0x10b, 0x4, 0x5, 0x5, 0x80, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x303c, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x6d01, 0x6, 0x38, 0x200, 0x200, 0xffffffff, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x4, 0x4000a9, 0x5, 0x6, 0xac4, 0xbf, 0xfffffffe, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0xa, 0xffffffff, 0x5, 0x1c, 0x120000, 0x7ff, 0x2009, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0xb9, 0xce4, 0x1ff, 0x2, 0x57, 0x4000005, 0x3, 0x6b6, 0x10000, 0x4, 0x7fff, 0xffff, 0xa620, 0x1, 0x2, 0x0, 0x2000006, 0x150, 0x1, 0x6, 0x16, 0xffffffff, 0x80000004, 0x5, 0x5, 0x1, 0x1, 0xfffff002, 0x10000, 0x3, 0x7e, 0x100, 0x9622, 0x8, 0xae, 0x20000008, 0x5, 0x226, 0x1, 0x5, 0x0, 0x30b1d693, 0xa1f, 0xf3f, 0x7, 0x530e, 0x6c1f, 0x0, 0x4, 0x5, 0x7ff, 0xd7, 0x200, 0xb, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x275a, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) ioctl(0xffffffffffffffff, 0x824e, &(0x7f000001b000)="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") sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000002000)=""/102400, 0x19000) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000300)='net/ip_tables_matches\x00') syz_genetlink_get_family_id$ieee802154(&(0x7f0000000640), r1) sendmsg$IEEE802154_LLSEC_DEL_KEY(r1, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4008000}, 0x48004) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, 0x0, &(0x7f0000000100)='GPL\x00'}, 0x94) 21m49.687204946s ago: executing program 1 (id=75): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1ff, 0x0) close(0xffffffffffffffff) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xe, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000010000000000000000000000a5000000a000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xb9) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x12, 0x7, 0x8, 0x2022, 0x0, 0xffffffffffffffff, 0x10001}, 0x50) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000240)=ANY=[@ANYRES32=r2, @ANYRES32=r1, @ANYBLOB="05"], 0x10) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000002080)=ANY=[@ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="04"], 0x10) close_range(r0, 0xffffffffffffffff, 0x0) 21m47.397688576s ago: executing program 1 (id=78): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = getpgid(0x0) fcntl$setownex(r0, 0xf, &(0x7f0000000140)={0x2, r1}) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f00000003c0)={0x4, 0x80100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000580)=@filter={'filter\x00', 0x2, 0x4, 0x370, 0xffffffff, 0xd0, 0x0, 0xd0, 0xfeffffff, 0xffffffff, 0x2d0, 0x2d0, 0x2d0, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@dev, @mcast1, [], [], 'macsec0\x00', 'bond_slave_0\x00', {}, {}, 0x6, 0x0, 0x7, 0x45}, 0x2f2, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x6}}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @empty, [], [], 'sit0\x00', 'dvmrp0\x00'}, 0x0, 0xa8, 0xd0}, @REJECT={0x28}}, {{@uncond, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@srh={{0x30}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffb}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3d0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000002700)=""/102392, 0x18ff8) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)={0x0}, 0x1, 0x0, 0x0, 0x11}, 0x40) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000cc0)={'batadv_slave_1\x00'}) sendmsg$BATADV_CMD_GET_NEIGHBORS(r4, &(0x7f0000004340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x1c, r5, 0x331, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r6}]}, 0x1c}}, 0x0) openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x1a1040, 0x0) mkdir(0x0, 0x0) rmdir(&(0x7f00000001c0)='./cgroup/../file0\x00') 21m45.153423055s ago: executing program 1 (id=84): r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000000680)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) setrlimit(0x3, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r2, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xb}, 0xe) 21m36.822545224s ago: executing program 2 (id=97): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='sched_switch\x00', 0xffffffffffffffff, 0x0, 0xfff7fffffffffff5}, 0x18) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = socket$netlink(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) listen(r5, 0x0) accept4$inet(r5, 0x0, 0x0, 0x80000) shutdown(r5, 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000006800)={&(0x7f00000003c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="15060000000022000000010000003000018014000400fc010000000000000000ab6b8b2d0001060005004e220000060001000a000000080006000100000037"], 0x44}, 0x5}, 0x0) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)={0x34, 0x0, 0x1, 0x703d25, 0x25dfdbfb, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @private=0xa010101}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0xa}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @remote}]}, 0x34}, 0x1, 0x0, 0x0, 0x4044040}, 0x8842) syz_genetlink_get_family_id$ieee802154(0x0, 0xffffffffffffffff) r6 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) lseek(r6, 0x0, 0x2) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, 0x0) bind$tipc(r6, &(0x7f00000000c0)=@name={0x1e, 0x2, 0x1, {{0x40, 0x3}, 0x2}}, 0x10) 21m34.659012897s ago: executing program 2 (id=101): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x9, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x3, &(0x7f0000000540)=ANY=[@ANYRESDEC, @ANYRES64, @ANYBLOB="44a837b4012b18a47d01872e42ba27df6fcd8ed404f2a8f480f04048ea693cd7ce5da6ec8d384c7d1aad3083b1a43ee2bec297b5047b0819438a106eab643e82c6503b6c27d0b82482568a35253741de9cf3223f17508862d111b3e3fa9c27c90671fffed0199ba8aa1d7608cf23409f2af5b3", @ANYRES16, @ANYRESDEC, @ANYRESOCT], &(0x7f0000000280)='GPL\x00', 0xa, 0xb9, &(0x7f0000000140)=""/185, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000040)={0x2, &(0x7f0000000100)=[{0x81, 0x6, 0x1, 0xe7}, {0x2, 0xcc, 0x5, 0xd}]}) write$proc_mixer(0xffffffffffffffff, &(0x7f0000000180)=ANY=[], 0xb8) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, 0x0, 0x20000041) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r4, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) r5 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/sync_ports\x00', 0x2, 0x0) sendfile(r5, r5, 0x0, 0x8) writev(r4, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1) 21m32.919228837s ago: executing program 2 (id=104): r0 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x800) sendmmsg$alg(r0, 0x0, 0x0, 0x40800) recvmsg(r0, 0x0, 0x20) openat$binderfs(0xffffffffffffff9c, 0x0, 0x800, 0x0) sigaltstack(&(0x7f0000000480)={&(0x7f0000004000)=""/4126, 0x80000001, 0x101e}, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) 21m30.33975806s ago: executing program 2 (id=109): socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0xfdd, &(0x7f00000010c0)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @void, {@ipv6={0x86dd, @icmpv6={0xa, 0x6, "4f3f8a", 0xfa7, 0x3a, 0x0, @local, @private2, {[@srh={0x3c, 0xe, 0x4, 0x7, 0xae, 0x30, 0xb, [@private2, @private2={0xfc, 0x2, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private0={0xfc, 0x0, '\x00', 0x1}, @mcast1, @private0={0xfc, 0x0, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}]}], @ndisc_ns={0x87, 0x0, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, [{0x1f, 0x1a, "8335e7073e944cd6560b0e441c2147e92926694ecb3581a72202071849121cc7ce47424f4af5a8cb0601d35bbc9acd5e764f4b4a910fca336a69cb204ed3f617f9b38d63bd2f6a5333ed50bc314284702658f2f02d84c7ae846ddbc82e30ebb93e12566d204717f16ab96105cf7183419e2217730197edd3643bf4b5475296b1281bfecf061b8a7618c212771457df2a4aad61ae0db8abe773cf2674c78f4084167a9ca463e10d7500822eb54485ac976c053a7d16e3463c90bc6f5c4b6392f42b7cc0660036903cd649baf103ce"}, {0x1f, 0x7, "87d186101495d17fbf78583836c2f4f711831637a5c67fdb148b82cd1391968d787c376363838171ab0c3d768f99aeb02aba1d796f311e952e531640c8"}, {0xe, 0x15, "f0749118229213f62d83ef54243e48e5b6fd3cae1ea3b5bac98682958392bbf8dd2458c0a58318e7880e4b4e62fc1871ca55c946056fb7c41ef634cc22cddec16e41bc37c3aea2f429fa687a70f6978dc6bf9ccaa6a0f9a09178921fe8aa89a037e506fc9dd6c17b676b8aaef9d91d6d89ce5d02c9b7a8a434ad9d01fd2e7547d4737a9a3b0622c1628075d49d9b439bf97b5c37a6d5c39fd32a115af2119f2175f0534663703aa9"}, {0x2, 0x13, "f69b7b7dbfa77a9e901d09308d3aeb9c5a47d82ad35c5856b91fd7a87990123461c1b1990fd6b44a53e7415d0369efc8b9d3dfa9eef19547cd6c20ad82a900f58b03026a086cd15dff52f2f0c5a8bdfe72599b8b8e39989ea9ba97fa7666e0a45d3385858ef1885dd33bb249e4407f3f2fa50d385e821775bb1dbbd33f2e1fa097b773c80576727bfb80a067a7e6f5ff3cd18499bc8d1b29"}, {0x18, 0x18, "ea95ab0a03f93049172c0281c483125e5b0d01ec159c49c5a6924beddc8278e8168630508eada0f4e6d137abfdcdd034673c5bc0c0f922fcd822fe593240b2e66e2c656ac7bfced046cf5c3e03cd87fcd90bd1ca58eeecb40a8d8c16296394e1c09807c648fb5d0e0efdaeef82905fb1370796c5a1960836bf3cb007326010b88498fd095590d5bacf287d2ee767e9fda78cd1052492a684d63678082bc6099bd5f40237e9c2ef2a8151b729b8844077d57db6f20438fb44431a18f155c0c00c6cc5efb7"}, {0x14, 0x180, "5410d5bc1e896fc2e59af62dc9c810b5bdb94f48e22ee57fe5a39a91aff47de7af78c97c5b5bbe9b6f683afcc4ffec043c7cadcd9c17ef5dcd068126bf0c69c95b98bb208fcb56124b2928cf80977b550d6f46d6d4a6942902311f9aa7153e9a893183603077bd41f20cee2027100120282a6429196ab4f8cbae49cd359a5a4dbc76d6786a518f7d2d9cac75c0b303ccc7c795a59c0977c57a98aca8c99ffee97f9409607d4a3b3ce45d3dae35a8a8e42cff3239107852383b45fc1ac92a03e27904c477dae73279afe7906a1acbe87f8b283b66a8246cb1e4bb8cf4f2b7932c0fcb18316fc3e075e3d3382222e3faaba9c60dc8e1b5c96af5084d47d2f3a165e3fe644aed54de4f10ea361e0c53a7bb7a0ee3b4650c7b0409b30716db4b7211aa49bd51b2ea9bb7dce5f58d81749c3be621d26407e995563a1923d2f73a66cda999af33522b0878bba0413370a44de8098b3ec959ee4d6d870746e3a2c0c59af6a427ba9eda1c06a5feb2c0014efc339ac60207f9ec05d86af785d8643cd8ebb6d335682249b4cb24ce2f0d5148f9b65bbe62ec14b3163610788989f7389c1a52f71823523dfe5d96b143a97599d46526da55ca5aa046135fe2b770efe78e16119169faf9df4998079883ffe85026ddee4bce1c66c79c3c063cfdbaceafada81892ef836106327aaf93aa0e855269cb34a691bac877faa0b294da6b83329c7f43a6d06359b76f9993723634afbbf149f2b40389dd93d9b58688f362e515ee7cb07d46cd775536fc56c1ddbf9b1bc3478e613bc18aae2fdfd1f5d64b4d42810801d6d9b3d21988e484a9429de24be9037042eef33ceef19fc7994f91713d56a1f8de485c52c8b033087d3410acb275835445ed09e9845902a93f9061b47f36acac63425d63b7877441a5f44ad75140156764a1d27f12a681d1a5f5ef1abb12544f17def2b76ac5625f39470a20738ea98a99cdeccae666018eb64cebbfb4345d96a93b854118e138204d03de81f008b74175bb8265add714475166b99a439ee253c5c3396ef545c9d9b3b1be6dd17b7470ad388b8dd9cbac135c3c74ae833ce85f3e070e0403b4defef0430f132b17c87e76e0e0dbabefabde8f8d005eb29e6a4eb62cde700f0d889c16f30e2dcd9579a5ebe3eef1e3071bb7e2b5d0762f48d212a692aa856b2312b20a17f92e48ed2acf0e9ebb689b847decd1f1149084b1cc02d48cdc471b3e018afdb85be418f9d1afdc93ae68cdcdbae60f94105c1ec420cc11979ff4853b35e79fcc12d650bb1cce7fc84a46f90ec18d6577ec843e1eeaaf1797f4fd888b612213d9669367a41be08de038e005d84d69a51ce9cae60e844eb2536cc6e7ed0b0040764e39bbe8ce2499b1357147f14b30a526671a5adcbf8b76dedecb1979fce3765eb70193faf9a1b5b1d7ed852c5542623da9f609ecce6b88d08ac88b36625e5706b20d82e862c3b50861ae4a1713c1b56032f7a242285ae871d9bf2444f744628f7650848f8cb51dd292a60d4c14c599d1c1bdda76ae0c956f45f5235eb6af62f13b22e0fa7c78a3605b227f0cd5a68d759a2ccac831d19f71f872d83517f02205a0d082cea380065d6a6f20d0c4897e609d71d295a94ff5a90b049fca237bc3ce302c1f65528107d2224d23640d2bbeea1a545759bcf2a7339a64cfdd926bd0025a376d418e2c9d0ad3e2ee2752fb72a54aa3ea089df928e933009138e0ca9eb6c99c406962ca3bbc3df11fe9974b90a22bcd7068953266f615edf9bc32f125effdb85b6f44232c495df1729a4ba2d866797313e8491080a86842b3e78b8e8a6d5d1c85b3766739749a712f8cc518aa42c56641e07f0bfe3a4a798f833761c494e2230059849e156ad68697398b48aa1c29b9ef67e25278564188ebd725c876573e93394fe65b4421fc1ec0d07213ebd6a0be5fc95aba7fb2655fd65e0ac6e99d88c6439246a8b17f4ca4628414a77d2363536eec1c5aace4ce797da96cdb7c8c8d6b074c3b9533e49bef0bbb82053193455f74f178f914b2578d7135161742b81963418228ca91629c36e84dca645de593dee83a4363b97952ee20efb250b3ce89639cbbb8798dd65101cd4c1fef5faf12e86060367361dbb0c22c55d13617a2787b898c3614fab03d0efbbb4a976811743cd7451e5bba2146e57cd4bc5f7b3ff9e0172ec8d6f1b8886e1a005131ab7337442a0a0129bba63b825f3a8c068ff87c814f100418bd34ac916adbb4dc872cae3cffbfe5fb7cf436f000931c02a7621dbcb4e80898035043c6b4411988051f4e487f08bb6e2ccfea8855232ec9199de423a7c18c10c3e160b076e91fbf271c952b096ced2f198a3f71e859c87636f373e8e2fba2392d3f8adcc6926e06ac3e4a68e1b558d00478d9bf4ec26ae5f76cb6255af16a1b5a6fd4d79a47dca48ddde4e32b7354c73c89d5756b003ded6afdb515ad8cba49c124e973bfe57831b0503f5cf8460aad2399daf1cbf1c7e2be8fdb314db3e23e468328d3263980902132f7d0d5457fdd4795150cec8e261a9ac249e27d6672bc668e03340dcfcf2e04c6e2e4e9b428f0c024b81aa6facbf0e7751077ae8cd43ce5f8975a6bf6851da8bac6ece9e4426b0fd221a64e9dccd9cc85e50aab44e21144dae5a88a4b35f56920d531a4fdf989406c92f6ad40cfa3f5633bd3fbf670f4e3c74019141a3cd80bde04260327cd8b4b0d5af034ae4be454093f95858d0b0399f011d6aa74a1729360ad6250c54d1a906ec876b3eb5ae45debd184b7c7119cf100979a8fc0d555bc972b15eeb5abe9cdbfcfab35a40dc54115a42876721b0647892d37f980a7ba10cd512302c9e6672e8f9e671c2bc0f5be3ebb47a834db3e92be88e6ac4ef6f97603ef5023c5acf6f09d119a083d51c3483a953953fd0f1040e4ccfd59b7f283ff2da1311cc1c92c35b97d2423c02082fc8d297f9fa12eb6c712268667c5ea2aa0fa5d71d8e500351795bbc4b03d2d9dbf20364f791ff93d1c4de11c61983435eb40c1bc50caa09d328ac0627c47aab1346200ec606dd4eb41c9dbadf7ff717b172da866ddfc1f2b9b1e49a053a120cbd0885f543608408abff79fc5cce98bd31102453f556a8887f7cfe0126ac77748d5b11c614b595e516bd3347db7cd746004ac33518d73363d6cdb88edbdbd89eef3a0bad2d77bc56ecb2e704695556434e1d641ad9464a1359187fa1591c2f7deae84b6331ea40313a6b96b64f98b316c3409a79dfd0104dfb66b7ed6a81633ed652c2949418de10666c575abe1e4e1dea02d1ec0aca8c54c9a155938fe97a45c81b4434ebed60b8a511f2c3c099cf1d1d33cea22c5aa4f524fa203f2782ea8a8b97b2cab24bb2346b94068e2fd30cd4ecfb7f10b94f9fc41d23159cdab88b2cff834223f23c386072c36bece314b76ae771746eaa1895e9410fae482a8c2f059f128a556f2b23904243279b596d9bfc9869675483878744f5de09ded6299c25758f60df183387bcd62dc786b5e9fbde069aae2c15f45e29fbefecae2bd867069c340802e47fd681a05adf59d07fa9695cdf7c7bef9a406107c251ea4f4e03ab83e216cc63b9f673b25a35da58a33348a3e5ce707f96cbf93816e2f1f4f53708f57058e5f650e9ef6e04e060d967e6cf085904217ffed77afc63670aa50efaa23f445559533c7ae0dd5c74d52b8a652b52ad2d84518a43d3a1aef864967ca92b00f8e849256a0e8e211d888af406e281eaca8cc4f71d1b114e4cbda71204ff4168965f04409a40a3c259f2fb3849d0cb2fc99663e01ecf0bcc0a95be28e51cd733ca097e68ccf4025a636814b4792ed90534e997e3bf2e8509adff62af2c4767feabce6ee6732b5909c3efdff8597ceae981ab35dbb23d6ae57223ff4b30851f1436a97432f3331236999abc2e12f0288976ba65e2b672803384e4d483f28c6661d2d4bfdc63a2fc5081beaeb8d7fb34bbb8460c230c4275e0a06b5c86c017c0a3b5bbd336058be2a67b6ece6ecc3b3743b8b571bd29b4c0ad2693bc4cb206d5f913f631992c45c42dd367c0500b4248cf935f3eaf9d4fd4094cfddde14af840039e106f6e91bb8e4f386537fd49937c6b9b72c81935b809f4d8fae31c6745c8e4ad5f20ddd53d818da5976bc56012e9543a8259ceccef0a4527ed72e4a29fa8e663fe824150c7741dbece6657f8022a0b026c25c91db2290c8aa28f97af03ba60c7ffabe395f39a19103c2f45abf134636dbc87ae7647388c2f60ca8873866c6e2bb5ad620422b02e516f1704029b7c809895438cc8dc8411e4d1b5385d188f3b03cc29810646c4d36b203e422fef24cfd927584763a8a"}]}}}}}}, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@local, @broadcast, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "fca33f", 0x8, 0x73, 0x0, @local, @local, {[@fragment={0x2f, 0x0, 0x7, 0x1, 0x0, 0x9, 0x66}]}}}}}, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e20, @multicast1}, 0x10) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x1c, 0x0, &(0x7f0000000040)=0x1c00) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102392, 0x18ff8) listen(0xffffffffffffffff, 0x0) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010001fff0000056800080000faff0000", @ANYRES32=0x0, @ANYBLOB="c30c424700000000280012800a00010076786c616e00000018000280140010"], 0x48}}, 0x0) sendmmsg$alg(r2, &(0x7f00000000c0), 0x492492492492627, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000007a80)=[{{&(0x7f0000000b40)=@file={0x0, './file0\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x8004}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000800}}], 0x2, 0x48000) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000300)=@raw={'raw\x00', 0x4001, 0x3, 0x250, 0x0, 0xb, 0x148, 0x0, 0x148, 0x1b8, 0x230, 0x242, 0x1b8, 0x215, 0x3, 0x0, {[{{@ip={@remote, @remote, 0x0, 0x0, 'batadv_slave_0\x00', 'geneve0\x00', {}, {}, 0x11}, 0x0, 0xd0, 0xf0, 0x0, {0xff0f000000000000}, [@inet=@rpfilter={{0x28}, {0x4}}, @common=@unspec=@devgroup={{0x38}, {0x0, 0x0, 0x0, 0x6}}]}, @unspec=@TRACE={0x20}}, {{@ip={@local, @rand_addr=0x64010101, 0xffffff00, 0xffffffff, 'veth0_to_batadv\x00', 'pimreg\x00', {0xff}, {0xff}, 0x33, 0x2, 0x22}, 0xec010000, 0xa0, 0xc8, 0x0, {}, [@common=@ah={{0x30}}]}, @common=@unspec=@AUDIT={0x28, 'AUDIT\x00', 0x0, {0x7}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2b0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000400)=@pppol2tpv3in6={0x18, 0x1, {0x0, r3, 0x0, 0x30, 0x0, 0x4, {0xa, 0x8, 0x0, @remote, 0x80000}}}, 0x80, 0x0, 0x0, 0x0, 0x40}, 0x0) r4 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r4, 0x84, 0x9, &(0x7f0000000380), 0x98) sendto$inet(r0, &(0x7f00000001c0)="696d9fe62306edf82ff96b94000c8ca8702447ef2fe7f51ac97716", 0x1b, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000080)='./cgroup\x00', &(0x7f0000000380)='f2fs\x00', 0x0, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000800)=@newsa={0x148, 0x10, 0x713, 0x0, 0x0, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}, {@in6=@local, 0x0, 0x33}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', {}, {}, {}, 0x0, 0x1003502, 0xa}, [@offload={0xc}, @algo_auth_trunc={0x4c, 0x14, {{'sha1\x00'}}}]}, 0x148}}, 0x0) 21m29.111591363s ago: executing program 32 (id=84): r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000000680)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) setrlimit(0x3, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r2, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xb}, 0xe) 21m28.427141787s ago: executing program 2 (id=115): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0) r1 = dup(r0) r2 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VHOST_SET_MEM_TABLE(r2, 0x8008af26, 0x0) r3 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r3, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r6, &(0x7f0000000200)={0x10, 0x0, 0x0, 0x80065c9}, 0xc) fstatfs(r1, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000700)={0x0, 0xfffffffffffffffc, 0x15, 0x50, @scatter={0x0, 0x0, &(0x7f00000002c0)}, &(0x7f00000005c0)="9453f626f14a74450eca6b51c279810c35c75d7739", &(0x7f0000000600)=""/114, 0xd89, 0x8020, 0x0, &(0x7f00000006c0)}) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x0}, 0x20) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWSET={0x30, 0x12, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0xa}]}], {0x14}}, 0x58}}, 0x10) syz_emit_ethernet(0x0, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) setsockopt$MRT6_FLUSH(0xffffffffffffffff, 0x29, 0xd1, 0x0, 0x0) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}}, 0x1c) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000000)=r7, 0x4) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x318, 0x1, 0x24}, 0x9c) 21m19.538862846s ago: executing program 2 (id=130): bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = socket$vsock_stream(0x28, 0x1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x10d400, 0x80) close_range(r0, 0xffffffffffffffff, 0x0) 21m5.213186127s ago: executing program 0 (id=155): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x9, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x3, &(0x7f0000000540)=ANY=[@ANYRESDEC, @ANYRES64, @ANYBLOB="44a837b4012b18a47d01872e42ba27df6fcd8ed404f2a8f480f04048ea693cd7ce5da6ec8d384c7d1aad3083b1a43ee2bec297b5047b0819438a106eab643e82c6503b6c27d0b82482568a35253741de9cf3223f17508862d111b3e3fa9c27c90671fffed0199ba8aa1d7608cf23409f2af5b3", @ANYRES16, @ANYRESDEC, @ANYRESOCT], &(0x7f0000000280)='GPL\x00', 0xa, 0xb9, &(0x7f0000000140)=""/185, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000040)={0x2, &(0x7f0000000100)=[{0x81, 0x6, 0x1, 0xe7}, {0x2, 0xcc, 0x5, 0xd}]}) write$proc_mixer(0xffffffffffffffff, &(0x7f0000000180)=ANY=[], 0xb8) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, 0x0, 0x20000041) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r4, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) r5 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/sync_ports\x00', 0x2, 0x0) sendfile(r5, r5, 0x0, 0x8) writev(r4, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1) 21m3.533727813s ago: executing program 33 (id=130): bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = socket$vsock_stream(0x28, 0x1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x10d400, 0x80) close_range(r0, 0xffffffffffffffff, 0x0) 21m3.492567609s ago: executing program 0 (id=159): socket$inet6_sctp(0xa, 0x1, 0x84) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r1, &(0x7f0000000000)="0c000000010001", 0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) ioctl$TIOCSSOFTCAR(0xffffffffffffffff, 0x541a, &(0x7f0000000000)=0x9) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = dup(r2) write$UHID_INPUT(r3, &(0x7f0000001040)={0xf, {"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", 0x1000}}, 0x1006) mkdirat(r3, 0x0, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) listen(r0, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/asound/seq/clients\x00', 0x0, 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, 0x0, &(0x7f0000000240)) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'netdevsim0\x00', 0x0}) sendmsg$ETHTOOL_MSG_PAUSE_SET(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000100)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000000000001e0000000c00018008000100", @ANYRES32=r8, @ANYBLOB="050003"], 0x28}}, 0x80) 21m2.110879652s ago: executing program 0 (id=162): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x1000, 0x2}) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r1 = dup3(r0, 0xffffffffffffffff, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000780)={0x44, 0x0, &(0x7f0000000900)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000001440)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000001340)="0e9849f1332c3a4f7cd80c990e6bb6b5979749a4fbaef24bc5bcc03ac73ad01da6441277f5ac3b4d0ab075522859b01dff8f24e16cd420439da93470adbb7411843f018e01848aec434d0395f241ae92"}) 21m0.86730998s ago: executing program 0 (id=164): socket(0x40000000015, 0x5, 0x0) r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000000680)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f0000001000), 0x581, 0x40000000, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f00000002c0)={0x3, 0x10, 0x2, 0xff, 0x5a, 0x0, 0x1, 0x0, 0x5, 0x8, 0x0, 0x0, 0x22, 0x20}, 0xe) 20m59.45317259s ago: executing program 0 (id=166): creat(0x0, 0xecf86c37d53049cc) lsetxattr$security_ima(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x2, 0x1) socket$pppl2tp(0x18, 0x1, 0x1) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r0, 0x0, 0x4040) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002000)=""/102400, 0x19000) shutdown(0xffffffffffffffff, 0x0) r2 = syz_io_uring_setup(0x7b, &(0x7f0000000540)={0x0, 0x43bce, 0x10100, 0x0, 0x313}, &(0x7f0000000240)=0x0, &(0x7f0000000100)=0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg(r5, &(0x7f0000001300)=[{{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000640)="d8", 0x1}], 0x1}}], 0x1, 0x20000010) syz_io_uring_submit(r3, r4, &(0x7f0000000600)=@IORING_OP_RECVMSG={0xa, 0x40, 0x0, r6, 0x0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000019c0)=[{&(0x7f00000002c0)=""/183, 0xb7}], 0x1}, 0x0, 0x40000103}) io_uring_enter(r2, 0x800046f3, 0x4, 0x40, 0x0, 0x0) 20m58.205512781s ago: executing program 0 (id=167): socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0xfdc, &(0x7f00000010c0)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @void, {@ipv6={0x86dd, @icmpv6={0xa, 0x6, "4f3f8a", 0xfa6, 0x3a, 0x0, @local, @private2, {[@srh={0x3c, 0xe, 0x4, 0x7, 0xae, 0x30, 0xb, [@private2, @private2={0xfc, 0x2, '\x00', 0x1}, @private0={0xfc, 0x0, '\x00', 0x1}, @mcast1, @dev={0xfe, 0x80, '\x00', 0xf}, @private0={0xfc, 0x0, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}]}], @ndisc_ns={0x87, 0x0, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, [{0x1f, 0x1a, "8335e7073e944cd6560b0e441c2147e92926694ecb3581a72202071849121cc7ce47424f4af5a8cb0601d35bbc9acd5e764f4b4a910fca336a69cb204ed3f617f9b38d63bd2f6a5333ed50bc314284702658f2f02d84c7ae846ddbc82e30ebb93e12566d204717f16ab96105cf7183419e2217730197edd3643bf4b5475296b1281bfecf061b8a7618c212771457df2a4aad61ae0db8abe773cf2674c78f4084167a9ca463e10d7500822eb54485ac976c053a7d16e3463c90bc6f5c4b6392f42b7cc0660036903cd649baf103ce"}, {0x1f, 0x7, "87d186101495d17fbf78583836c2f4f711831637a5c67fdb148b82cd1391968d787c376363838171ab0c3d768f99aeb02aba1d796f311e952e531640c8"}, {0xe, 0x15, "f0749118229213f62d83ef54243e48e5b6fd3cae1ea3b5bac98682958392bbf8dd2458c0a58318e7880e4b4e62fc1871ca55c946056fb7c41ef634cc22cddec16e41bc37c3aea2f429fa687a70f6978dc6bf9ccaa6a0f9a09178921fe8aa89a037e506fc9dd6c17b676b8aaef9d91d6d89ce5d02c9b7a8a434ad9d01fd2e7547d4737a9a3b0622c1628075d49d9b439bf97b5c37a6d5c39fd32a115af2119f2175f0534663703a"}, {0x2, 0x13, "f69b7b7dbfa77a9e901d09308d3aeb9c5a47d82ad35c5856b91fd7a87990123461c1b1990fd6b44a53e7415d0369efc8b9d3dfa9eef19547cd6c20ad82a900f58b03026a086cd15dff52f2f0c5a8bdfe72599b8b8e39989ea9ba97fa7666e0a45d3385858ef1885dd33bb249e4407f3f2fa50d385e821775bb1dbbd33f2e1fa097b773c80576727bfb80a067a7e6f5ff3cd18499bc8d1b29"}, {0x18, 0x18, "ea95ab0a03f93049172c0281c483125e5b0d01ec159c49c5a6924beddc8278e8168630508eada0f4e6d137abfdcdd034673c5bc0c0f922fcd822fe593240b2e66e2c656ac7bfced046cf5c3e03cd87fcd90bd1ca58eeecb40a8d8c16296394e1c09807c648fb5d0e0efdaeef82905fb1370796c5a1960836bf3cb007326010b88498fd095590d5bacf287d2ee767e9fda78cd1052492a684d63678082bc6099bd5f40237e9c2ef2a8151b729b8844077d57db6f20438fb44431a18f155c0c00c6cc5efb7"}, {0x14, 0x180, "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"}]}}}}}}, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@local, @broadcast, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "fca33f", 0x8, 0x73, 0x0, @local, @local, {[@fragment={0x2f, 0x0, 0x7, 0x1, 0x0, 0x9, 0x66}]}}}}}, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e20, @multicast1}, 0x10) socket$kcm(0x29, 0x2, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x1c, 0x0, &(0x7f0000000040)=0x1c00) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102392, 0x18ff8) listen(0xffffffffffffffff, 0x0) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010001fff0000056800080000faff0000", @ANYRES32=0x0, @ANYBLOB="c30c424700000000280012800a00010076786c616e00000018000280140010"], 0x48}}, 0x0) sendmmsg$alg(r2, &(0x7f00000000c0), 0x492492492492627, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000007a80)=[{{&(0x7f0000000b40)=@file={0x0, './file0\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x8004}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000800}}], 0x2, 0x48000) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000300)=@raw={'raw\x00', 0x4001, 0x3, 0x250, 0x0, 0xb, 0x148, 0x0, 0x148, 0x1b8, 0x230, 0x242, 0x1b8, 0x215, 0x3, 0x0, {[{{@ip={@remote, @remote, 0x0, 0x0, 'batadv_slave_0\x00', 'geneve0\x00', {}, {}, 0x11}, 0x0, 0xd0, 0xf0, 0x0, {0xff0f000000000000}, [@inet=@rpfilter={{0x28}, {0x4}}, @common=@unspec=@devgroup={{0x38}, {0x0, 0x0, 0x0, 0x6}}]}, @unspec=@TRACE={0x20}}, {{@ip={@local, @rand_addr=0x64010101, 0xffffff00, 0xffffffff, 'veth0_to_batadv\x00', 'pimreg\x00', {0xff}, {0xff}, 0x33, 0x2, 0x22}, 0xec010000, 0xa0, 0xc8, 0x0, {}, [@common=@ah={{0x30}}]}, @common=@unspec=@AUDIT={0x28, 'AUDIT\x00', 0x0, {0x7}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2b0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000400)=@pppol2tpv3in6={0x18, 0x1, {0x0, r3, 0x0, 0x30, 0x0, 0x4, {0xa, 0x8, 0x0, @remote, 0x80000}}}, 0x80, 0x0, 0x0, 0x0, 0x40}, 0x0) r4 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r4, 0x84, 0x9, &(0x7f0000000380), 0x98) sendto$inet(r0, &(0x7f00000001c0)="696d9fe62306edf82ff96b94000c8ca8702447ef2fe7f51ac97716", 0x1b, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000080)='./cgroup\x00', &(0x7f0000000380)='f2fs\x00', 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) 20m43.042968603s ago: executing program 34 (id=167): socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0xfdc, &(0x7f00000010c0)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @void, {@ipv6={0x86dd, @icmpv6={0xa, 0x6, "4f3f8a", 0xfa6, 0x3a, 0x0, @local, @private2, {[@srh={0x3c, 0xe, 0x4, 0x7, 0xae, 0x30, 0xb, [@private2, @private2={0xfc, 0x2, '\x00', 0x1}, @private0={0xfc, 0x0, '\x00', 0x1}, @mcast1, @dev={0xfe, 0x80, '\x00', 0xf}, @private0={0xfc, 0x0, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}]}], @ndisc_ns={0x87, 0x0, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, [{0x1f, 0x1a, "8335e7073e944cd6560b0e441c2147e92926694ecb3581a72202071849121cc7ce47424f4af5a8cb0601d35bbc9acd5e764f4b4a910fca336a69cb204ed3f617f9b38d63bd2f6a5333ed50bc314284702658f2f02d84c7ae846ddbc82e30ebb93e12566d204717f16ab96105cf7183419e2217730197edd3643bf4b5475296b1281bfecf061b8a7618c212771457df2a4aad61ae0db8abe773cf2674c78f4084167a9ca463e10d7500822eb54485ac976c053a7d16e3463c90bc6f5c4b6392f42b7cc0660036903cd649baf103ce"}, {0x1f, 0x7, "87d186101495d17fbf78583836c2f4f711831637a5c67fdb148b82cd1391968d787c376363838171ab0c3d768f99aeb02aba1d796f311e952e531640c8"}, {0xe, 0x15, "f0749118229213f62d83ef54243e48e5b6fd3cae1ea3b5bac98682958392bbf8dd2458c0a58318e7880e4b4e62fc1871ca55c946056fb7c41ef634cc22cddec16e41bc37c3aea2f429fa687a70f6978dc6bf9ccaa6a0f9a09178921fe8aa89a037e506fc9dd6c17b676b8aaef9d91d6d89ce5d02c9b7a8a434ad9d01fd2e7547d4737a9a3b0622c1628075d49d9b439bf97b5c37a6d5c39fd32a115af2119f2175f0534663703a"}, {0x2, 0x13, "f69b7b7dbfa77a9e901d09308d3aeb9c5a47d82ad35c5856b91fd7a87990123461c1b1990fd6b44a53e7415d0369efc8b9d3dfa9eef19547cd6c20ad82a900f58b03026a086cd15dff52f2f0c5a8bdfe72599b8b8e39989ea9ba97fa7666e0a45d3385858ef1885dd33bb249e4407f3f2fa50d385e821775bb1dbbd33f2e1fa097b773c80576727bfb80a067a7e6f5ff3cd18499bc8d1b29"}, {0x18, 0x18, "ea95ab0a03f93049172c0281c483125e5b0d01ec159c49c5a6924beddc8278e8168630508eada0f4e6d137abfdcdd034673c5bc0c0f922fcd822fe593240b2e66e2c656ac7bfced046cf5c3e03cd87fcd90bd1ca58eeecb40a8d8c16296394e1c09807c648fb5d0e0efdaeef82905fb1370796c5a1960836bf3cb007326010b88498fd095590d5bacf287d2ee767e9fda78cd1052492a684d63678082bc6099bd5f40237e9c2ef2a8151b729b8844077d57db6f20438fb44431a18f155c0c00c6cc5efb7"}, {0x14, 0x180, "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"}]}}}}}}, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@local, @broadcast, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "fca33f", 0x8, 0x73, 0x0, @local, @local, {[@fragment={0x2f, 0x0, 0x7, 0x1, 0x0, 0x9, 0x66}]}}}}}, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e20, @multicast1}, 0x10) socket$kcm(0x29, 0x2, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x1c, 0x0, &(0x7f0000000040)=0x1c00) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102392, 0x18ff8) listen(0xffffffffffffffff, 0x0) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010001fff0000056800080000faff0000", @ANYRES32=0x0, @ANYBLOB="c30c424700000000280012800a00010076786c616e00000018000280140010"], 0x48}}, 0x0) sendmmsg$alg(r2, &(0x7f00000000c0), 0x492492492492627, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000007a80)=[{{&(0x7f0000000b40)=@file={0x0, './file0\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x8004}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000800}}], 0x2, 0x48000) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000300)=@raw={'raw\x00', 0x4001, 0x3, 0x250, 0x0, 0xb, 0x148, 0x0, 0x148, 0x1b8, 0x230, 0x242, 0x1b8, 0x215, 0x3, 0x0, {[{{@ip={@remote, @remote, 0x0, 0x0, 'batadv_slave_0\x00', 'geneve0\x00', {}, {}, 0x11}, 0x0, 0xd0, 0xf0, 0x0, {0xff0f000000000000}, [@inet=@rpfilter={{0x28}, {0x4}}, @common=@unspec=@devgroup={{0x38}, {0x0, 0x0, 0x0, 0x6}}]}, @unspec=@TRACE={0x20}}, {{@ip={@local, @rand_addr=0x64010101, 0xffffff00, 0xffffffff, 'veth0_to_batadv\x00', 'pimreg\x00', {0xff}, {0xff}, 0x33, 0x2, 0x22}, 0xec010000, 0xa0, 0xc8, 0x0, {}, [@common=@ah={{0x30}}]}, @common=@unspec=@AUDIT={0x28, 'AUDIT\x00', 0x0, {0x7}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2b0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000400)=@pppol2tpv3in6={0x18, 0x1, {0x0, r3, 0x0, 0x30, 0x0, 0x4, {0xa, 0x8, 0x0, @remote, 0x80000}}}, 0x80, 0x0, 0x0, 0x0, 0x40}, 0x0) r4 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r4, 0x84, 0x9, &(0x7f0000000380), 0x98) sendto$inet(r0, &(0x7f00000001c0)="696d9fe62306edf82ff96b94000c8ca8702447ef2fe7f51ac97716", 0x1b, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000080)='./cgroup\x00', &(0x7f0000000380)='f2fs\x00', 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) 12.50693752s ago: executing program 5 (id=2059): syz_genetlink_get_family_id$wireguard(&(0x7f0000000100), 0xffffffffffffffff) socket$qrtr(0x2a, 0x2, 0x0) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000000680)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x6, 0x4, &(0x7f0000000640)=ANY=[], &(0x7f0000000d40)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(0xffffffffffffffff, 0xc02c564a, &(0x7f0000000140)={0x0, 0x34324142, 0x2, @discrete={0x1, 0x401}}) add_key$user(&(0x7f00000003c0), &(0x7f0000000440), 0x0, 0x0, 0xfffffffffffffffd) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3, &(0x7f0000000000)=0x3, 0x6, 0x2) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000d84000)={0xa, 0x2, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0x9}, 0x1c) setsockopt$inet6_tcp_int(r1, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r1, &(0x7f0000000080)="04", 0x1, 0x20000845, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) syz_usb_connect$cdc_ncm(0x3, 0x76, &(0x7f0000000240)=ANY=[], 0x0) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'bridge0\x00'}) socket$netlink(0x10, 0x3, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socketpair$unix(0x1, 0x3, 0x0, 0x0) setresgid(0xee00, 0xee01, 0x0) 8.690572505s ago: executing program 4 (id=2062): mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x2) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x8, 0xfffa}, 0x3a, [0x8000, 0x3ff, 0xf, 0x8, 0x80000001, 0x2, 0x7, 0x7f, 0xa9, 0x4d, 0x6, 0x5f, 0x9, 0x15, 0xffff2d37, 0xff7fff01, 0x7, 0x5, 0x1fd, 0x0, 0x6, 0x0, 0x7, 0x3c5b, 0x1, 0x22, 0xd, 0x1, 0x0, 0xffffffff, 0xe661, 0x0, 0x7, 0x5, 0x8, 0x4c74, 0x10000, 0x242, 0x3, 0xe, 0x0, 0x80008071, 0x7, 0x0, 0x1, 0x7, 0x5, 0x3e, 0x20018e, 0xa, 0xfffffeff, 0x0, 0x6, 0x4, 0x8, 0x3ff, 0xfffffff9, 0x0, 0x4, 0x6, 0x4, 0x4, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x8008, 0x5, 0xfffffff3, 0x129432f6, 0xc8, 0x5, 0x1510edcf, 0x2c3, 0x6c7, 0x9, 0x0, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x66abcbd2, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x2, 0xff, 0x5, 0x1000005, 0x5f2d, 0xd, 0x4e0, 0x381, 0x4, 0xb, 0x4, 0x9, 0x8, 0x44, 0x6, 0x47, 0x8000, 0x1, 0x0, 0xffff, 0x2, 0x4, 0x9, 0x4, 0x3, 0x4000009, 0x6, 0x0, 0x3, 0x1, 0x48c93793, 0x42, 0x3], [0x7, 0x408, 0x3ff, 0x5, 0xffffffff, 0x100, 0x8, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x80, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x303c, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x6d01, 0x6, 0x38, 0x200, 0x201, 0xffffffff, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x4, 0xa9, 0x5, 0x6, 0xac4, 0xbf, 0xfffffffe, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0xa, 0xffffffff, 0x105, 0x1c, 0x120000, 0x7ff, 0x2009, 0x80a2ed, 0x4, 0x3], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x938, 0x6, 0x6, 0x100, 0xb9, 0xce4, 0x1ff, 0x2, 0x57, 0x4000005, 0x3, 0x2, 0x10000, 0x4, 0x7fff, 0xffff, 0xa620, 0x1, 0x5, 0x1, 0x2000006, 0x150, 0x1, 0x6, 0x16, 0xffffffff, 0x80000004, 0x5, 0x5, 0xc8, 0x1, 0xfffff002, 0x10000, 0x3, 0x7e, 0x100, 0x9622, 0x8, 0xae, 0x20000008, 0x5, 0x226, 0x2, 0x5, 0x0, 0x30b1d693, 0xa1f, 0xf3f, 0x7, 0x530e, 0x6c1b, 0x0, 0x4, 0x5, 0x7ff, 0xd7, 0x200, 0xb, 0xfff]}, 0x45c) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x275a, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000040)={&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f000001b000)="6206a8291fa498e30ac05a024a7b15d1b673f2cb884339b5a6d6bf0a75533d84c80540f34b65f8cc891342aa9a614acb3fd4c05e4cb149ba22ca9954c782b02e517cb5149c1a62aac40012e49c0c950c64825ef721dbe1e5d0a24bc348e39056170d7b80c6d45b2b0fd5a862a2dadf1e45b11cd4a56d9078596467be58eaff5c770ca8b8fb63d4e66ef82fd063b88b310c1afbb54950b95b06be1c9733f64925b51c0687cadb16e51d4698ef4f6d30fc0a1049c6f16f62c3abc53b60fe1b5e1a4c18be91", 0xc4, r1}, 0x68) read$msr(r1, &(0x7f0000002000)=""/102400, 0x19000) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x64, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000400)={r2, 0x3, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = socket$rxrpc(0x21, 0x2, 0xa) setsockopt$RXRPC_SECURITY_KEYRING(r3, 0x110, 0x2, &(0x7f0000000000)='\xe3]%@]%-:@-\x00', 0xb) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000640), r0) ioperm(0x284, 0x7f, 0xe3) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r4, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r4, 0x84, 0xb, &(0x7f0000000180)={0x3, 0x5, 0x9, 0xda, 0x0, 0x16, 0x20, 0x7e, 0x3f, 0x3, 0x7f, 0x7, 0xa0, 0x4}, 0xe) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000020000000900010073797a300000000040000000030a09020000000000000000020000000900010073797a30000000000900030073797a3200000000140004800800014000000000080002400000000014000000110001"], 0x88}}, 0x0) 8.563358715s ago: executing program 5 (id=2063): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e24, @multicast1}, 0x10) setsockopt$sock_int(r0, 0x1, 0x35, &(0x7f0000000040)=0x1, 0x4) 8.363336898s ago: executing program 4 (id=2065): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x7}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000070000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000020000000850000008200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='./bus\x00', 0xa01, 0x111) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x10812, &(0x7f0000000280)) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./bus\x00', 0x200010, &(0x7f0000000300)={[{@user_xattr}, {@grpquota}, {@nolazytime}, {@norecovery}, {@barrier_val={'barrier', 0x3d, 0x4c}}, {@lazytime}, {@init_itable_val={'init_itable', 0x3d, 0x5}}, {@usrquota}, {@errors_continue}]}, 0xfe, 0x574, &(0x7f00000007c0)="$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") bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x40000) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$inet6(0xa, 0x2, 0x0) close(r5) 8.243821594s ago: executing program 5 (id=2066): syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x2, 0x5505, &(0x7f0000002480)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.current\x00', 0x275a, 0x0) lseek(r0, 0x7fffffffffffffff, 0x0) 7.746352555s ago: executing program 3 (id=2068): r0 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000f00)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x99, &(0x7f0000000180)=""/148, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0xffffffffffffff79}, 0x16) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r0, 0x0, 0xe, 0x0, &(0x7f0000000e40)="04d31fcd275bfc58188e699fa7c9", 0x0, 0x947, 0x0, 0x39, 0x0, &(0x7f0000000a00)="e658b8556af17ff109eca6112c1e10b9d7f11eb829050000002467d2760b0d17473a03ec3650bb7f44f72fbec2c66177a1d0f2bcc14b3274c2", 0x0}, 0x50) 7.103815033s ago: executing program 3 (id=2069): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = syz_mount_image$fuse(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000002240)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) read$FUSE(r0, &(0x7f0000007100)={0x2020, 0x0, 0x0}, 0x2020) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b7030000f8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='mm_page_alloc\x00', r3}, 0x10) write$FUSE_INIT(r0, &(0x7f0000002140)={0x50, 0x0, r2}, 0x50) read$FUSE(r0, &(0x7f0000002900)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r0, &(0x7f0000000000)={0x10, 0xffffffffffffffda, r4}, 0x10) syz_fuse_handle_req(r0, &(0x7f0000004940)="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", 0x2000, &(0x7f0000007040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000007000)={0x20}, 0x0}) ioctl$FS_IOC_RESVSP(r1, 0x40086602, &(0x7f0000002740)) 7.063878711s ago: executing program 4 (id=2070): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs={0x0, 0x0, 0xb}, 0x6e) sendmmsg$unix(r1, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000100)={0x80000000, 0x0, 0xfffffffc, 0x10}, 0x10) write(r3, &(0x7f0000000000)="240000001a005f0214f9f407000904000a000000fe0000000000000008000f00fd000000", 0x24) 6.181165012s ago: executing program 3 (id=2071): openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000000030020f003176c400000000001090224725100000000090400001207010300090501020000000000090582020002"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000080)=ANY=[], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0x0, 0x0) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) readv(r2, &(0x7f0000000340)=[{&(0x7f0000001180)=""/4096, 0x1000}], 0x1) 5.796520588s ago: executing program 5 (id=2072): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x208, 0x21}, 0x50) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) waitid(0x0, r1, 0x0, 0x8, 0x0) waitid(0x1000000000000000, 0x0, 0x0, 0x4, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x18) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000280), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r3, 0x40345410, &(0x7f00000083c0)={{0x1}}) read(r3, &(0x7f00000002c0)=""/200, 0x39) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r3, 0x54a2) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) 5.796202469s ago: executing program 4 (id=2073): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) r3 = add_key$fscrypt_v1(&(0x7f0000000340), 0x0, &(0x7f0000000400)={0x0, "bf9a458cee054555b421396e50000c5cea97e9930d92b8cc37b729082188c7188ca0b401e5d8ebf6a4842a433e75be4dc1824222793496a016df557a4a862fcc", 0x37}, 0x48, 0xfffffffffffffff9) keyctl$update(0x2, r3, &(0x7f0000000480), 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}, {0xfff3, 0x2}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=@delchain={0x2c, 0x64, 0xf31, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xfff3, 0xffff}, {0x1, 0x1b}}, [@TCA_CHAIN={0x8, 0xb, 0x80}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@delchain={0x24, 0x11, 0x1, 0x1f, 0x0, {0x0, 0x0, 0x0, r4, {}, {0x0, 0xe}}}, 0x24}}, 0x0) 5.184669087s ago: executing program 4 (id=2074): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000009c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x94) fstat(0xffffffffffffffff, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) timer_create(0x4, &(0x7f00000001c0)={0x0, 0x0, 0x2, @tid=r0}, &(0x7f0000000200)) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x2}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000006c0)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd24, 0x25dfdbff, {0x0, 0x0, 0x0, r9, {0x4, 0xfff2}, {}, {0xfff2, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x18, 0x2, [@TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x2}, @TCA_BPF_OPS={{0x6}, {0x4}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) 2.926922285s ago: executing program 3 (id=2075): keyctl$KEYCTL_PKEY_DECRYPT(0x1a, &(0x7f0000000000), &(0x7f00000004c0)=ANY=[@ANYBLOB='ensh'], 0x0, 0x0) 2.712142345s ago: executing program 5 (id=2076): getgid() r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="580000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000300012800e00010069703665727370616e0000001c00028014000700fe8000000000001800000000000000420400120008000a00", @ANYRES32], 0x58}}, 0x8000) 2.692744422s ago: executing program 3 (id=2077): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000009c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x94) lsetxattr$trusted_overlay_opaque(0x0, 0x0, 0x0, 0x0, 0x1) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000"], 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000240)='./file0\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="696f636861727365743d61736369692c646973636172642c74696d655f6f66667365743d3078303030303030303030303030383030312c666d61736b3d30303030303030303030303031313331323030303030302c646d6173168a1e55b8a625396b3d30303030303030303030303030303030303030303135322c696f636861727365743d69736f383835", @ANYRESHEX=0x0, @ANYBLOB=',dmask=00000000000000000003775,allow_utime=00000000000000000007141,\x00'], 0x0, 0x14f5, &(0x7f0000001580)="$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") mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f00000003c0)='kfree\x00', r5}, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0xe, &(0x7f00000004c0)={[{@resuid}, {@init_itable}, {@minixdf}, {@noblock_validity}]}, 0x3, 0x451, &(0x7f0000000f80)="$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") syz_mount_image$fuse(0x0, &(0x7f0000000200)='./file2\x00', 0x42, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) chdir(&(0x7f00000001c0)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x141042, 0x100) 253.90579ms ago: executing program 4 (id=2078): syz_read_part_table(0x623, &(0x7f0000000640)="$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") 126.366506ms ago: executing program 3 (id=2079): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xf, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x2d) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'rose0\x00', 0x112}) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$TUNSETQUEUE(r2, 0x400454d9, &(0x7f0000000000)={'netpci0\x00', 0x400}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'rose0\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="2000000011000100"/20, @ANYRES32=r4], 0x20}}, 0x0) 0s ago: executing program 5 (id=2080): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff00000000bfa100000000000007010000b8ffffffb702000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r0}, 0x10) syz_emit_ethernet(0x4a, &(0x7f0000001180)={@local, @multicast, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "0010a6", 0x14, 0x4, 0x0, @empty, @mcast2, {[], "223427d5c9a46b9fa14172170a013589317d2af3"}}}}}, 0x0) kernel console output (not intermixed with test programs): adv_slave_0 [ 1064.903835][ T8955] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1065.334765][ T8955] team0 (unregistering): Port device team_slave_1 removed [ 1065.396877][ T8955] team0 (unregistering): Port device team_slave_0 removed [ 1066.866883][T13132] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 1067.043208][T13138] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1067.130022][T13138] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 1067.142212][ T5929] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 1067.169046][T13138] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1067.206010][T13138] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 1067.333582][ T5929] usb 6-1: device descriptor read/64, error -71 [ 1067.410534][T13143] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 1067.982149][ T5929] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 1068.123639][T10899] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1068.133121][T10899] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1068.141265][T10899] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1068.149809][T10899] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1068.159184][T10899] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1068.173625][ T5929] usb 6-1: device descriptor read/64, error -71 [ 1068.656571][ T5929] usb usb6-port1: attempt power cycle [ 1069.004844][T13158] snd_dummy snd_dummy.0: control 0:0:4194304:syz0:5 is already present [ 1070.100230][T13034] chnl_net:caif_netlink_parms(): no params data found [ 1070.212191][ T9563] Bluetooth: hci0: command tx timeout [ 1070.594580][T13160] 9pnet_fd: Insufficient options for proto=fd [ 1070.601436][T13160] siw: device registration error -23 [ 1070.881608][T13146] virt_wifi0 speed is unknown, defaulting to 1000 [ 1070.993258][T13146] lo speed is unknown, defaulting to 1000 [ 1072.137957][T13034] bridge0: port 1(bridge_slave_0) entered blocking state [ 1072.172864][T13034] bridge0: port 1(bridge_slave_0) entered disabled state [ 1072.180683][T13034] bridge_slave_0: entered allmulticast mode [ 1072.224431][T13034] bridge_slave_0: entered promiscuous mode [ 1072.292310][ T9563] Bluetooth: hci0: command tx timeout [ 1072.862328][ T8955] bridge_slave_1: left allmulticast mode [ 1072.868030][ T8955] bridge_slave_1: left promiscuous mode [ 1073.001848][ T8955] bridge0: port 2(bridge_slave_1) entered disabled state [ 1073.344954][ T8955] bridge_slave_0: left allmulticast mode [ 1073.350645][ T8955] bridge_slave_0: left promiscuous mode [ 1073.402344][ T8955] bridge0: port 1(bridge_slave_0) entered disabled state [ 1074.464590][T10899] Bluetooth: hci0: command tx timeout [ 1075.888460][ T8955] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1076.236021][ T8955] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1076.445671][T13202] 9pnet_fd: Insufficient options for proto=fd [ 1076.446363][T13202] siw: device registration error -23 [ 1076.538889][T10899] Bluetooth: hci0: command tx timeout [ 1076.573676][ T8955] bond0 (unregistering): Released all slaves [ 1077.109564][T13034] bridge0: port 2(bridge_slave_1) entered blocking state [ 1077.109690][T13034] bridge0: port 2(bridge_slave_1) entered disabled state [ 1077.109885][T13034] bridge_slave_1: entered allmulticast mode [ 1077.111908][T13034] bridge_slave_1: entered promiscuous mode [ 1077.238133][T13212] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(11) [ 1077.238177][T13212] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1077.238253][T13212] vhci_hcd vhci_hcd.0: Device attached [ 1077.239316][T13212] 9pnet_fd: Insufficient options for proto=fd [ 1077.251224][T13213] vhci_hcd: connection closed [ 1077.251511][ T6018] vhci_hcd: stop threads [ 1077.251534][ T6018] vhci_hcd: release socket [ 1077.259240][ T6018] vhci_hcd: disconnect device [ 1077.348750][ T8955] hsr_slave_0: left promiscuous mode [ 1077.372111][ T8955] hsr_slave_1: left promiscuous mode [ 1077.372865][ T8955] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1077.376926][ T8955] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1079.316810][ T8955] team0 (unregistering): Port device team_slave_1 removed [ 1079.577964][ T8955] team0 (unregistering): Port device team_slave_0 removed [ 1079.870043][T13233] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1080.958599][T13034] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1081.051734][T13034] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1081.331181][T13034] team0: Port device team_slave_0 added [ 1081.498527][T13034] team0: Port device team_slave_1 added [ 1081.726780][T13034] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1081.756211][T13034] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1081.850494][T13034] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1081.919937][T13034] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1081.962252][T13034] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1082.485301][T13034] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1083.759874][T13146] chnl_net:caif_netlink_parms(): no params data found [ 1083.805025][T13254] netlink: 'syz.3.1535': attribute type 1 has an invalid length. [ 1084.073183][T13034] hsr_slave_0: entered promiscuous mode [ 1084.739705][T13034] hsr_slave_1: entered promiscuous mode [ 1084.752861][T13034] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1084.760430][T13034] Cannot create hsr debugfs directory [ 1086.508039][T13273] blktrace: Concurrent blktraces are not allowed on loop8 [ 1087.198426][ T8955] bridge_slave_1: left allmulticast mode [ 1087.204503][ T8955] bridge_slave_1: left promiscuous mode [ 1087.242590][ T8955] bridge0: port 2(bridge_slave_1) entered disabled state [ 1087.504827][ T9563] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1087.513594][ T9563] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1087.523349][ T9563] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1087.531222][ T9563] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1087.539040][ T9563] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1088.216218][ T8955] bridge_slave_0: left allmulticast mode [ 1088.221918][ T8955] bridge_slave_0: left promiscuous mode [ 1088.284487][ T8955] bridge0: port 1(bridge_slave_0) entered disabled state [ 1088.623315][T13289] overlayfs: overlapping lowerdir path [ 1089.480475][ T8955] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1089.532326][ T8955] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1089.557721][ T8955] bond0 (unregistering): Released all slaves [ 1089.782246][T13293] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1541'. [ 1090.292292][T10899] Bluetooth: hci0: command 0x0405 tx timeout [ 1090.300127][T13285] Bluetooth: hci1: command tx timeout [ 1091.219073][T13146] bridge0: port 1(bridge_slave_0) entered blocking state [ 1091.236988][T13146] bridge0: port 1(bridge_slave_0) entered disabled state [ 1091.252564][ T1204] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 1091.260577][T13146] bridge_slave_0: entered allmulticast mode [ 1091.281681][T13146] bridge_slave_0: entered promiscuous mode [ 1092.345888][ T1204] usb 5-1: device descriptor read/64, error -71 [ 1092.376886][T13285] Bluetooth: hci1: command tx timeout [ 1092.411067][ T8955] hsr_slave_0: left promiscuous mode [ 1092.454610][ T8955] hsr_slave_1: left promiscuous mode [ 1092.488633][ T8955] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1092.624144][ T1204] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 1092.663926][ T8955] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1092.884053][ T1204] usb 5-1: device descriptor read/64, error -71 [ 1093.012486][ T1204] usb usb5-port1: attempt power cycle [ 1094.462474][T13285] Bluetooth: hci1: command tx timeout [ 1097.028116][T13285] Bluetooth: hci1: command tx timeout [ 1097.387307][ T8955] team0 (unregistering): Port device team_slave_1 removed [ 1097.741500][ T8955] team0 (unregistering): Port device team_slave_0 removed [ 1098.582052][T13344] netlink: 44 bytes leftover after parsing attributes in process `syz.5.1555'. [ 1100.052893][T13279] virt_wifi0 speed is unknown, defaulting to 1000 [ 1100.063278][T13279] lo speed is unknown, defaulting to 1000 [ 1100.962269][T13146] bridge0: port 2(bridge_slave_1) entered blocking state [ 1101.220713][T13146] bridge0: port 2(bridge_slave_1) entered disabled state [ 1101.402368][T13146] bridge_slave_1: entered allmulticast mode [ 1101.482218][T13146] bridge_slave_1: entered promiscuous mode [ 1102.027955][T13365] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 1102.215479][T13146] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1102.398399][T13368] F2FS-fs (loop5): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1102.406587][T13368] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 1102.416409][T13368] F2FS-fs (loop5): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1102.424948][T13368] F2FS-fs (loop5): Can't find valid F2FS filesystem in 2th superblock [ 1102.690089][T13146] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1103.229362][T13146] team0: Port device team_slave_0 added [ 1103.543771][T13146] team0: Port device team_slave_1 added [ 1105.177546][T13389] blktrace: Concurrent blktraces are not allowed on loop8 [ 1106.298406][T13146] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1106.330235][T13146] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1106.356122][ C1] vkms_vblank_simulate: vblank timer overrun [ 1106.372730][T13388] syz.5.1564 (13388): drop_caches: 2 [ 1106.404915][T13146] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1106.427224][T13146] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1106.434247][T13146] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1106.776011][T13146] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1107.071514][T13399] overlayfs: overlapping lowerdir path [ 1108.608775][T13146] hsr_slave_0: entered promiscuous mode [ 1109.295366][T13146] hsr_slave_1: entered promiscuous mode [ 1109.332883][T13146] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1109.340462][T13146] Cannot create hsr debugfs directory [ 1109.445345][T13279] chnl_net:caif_netlink_parms(): no params data found [ 1110.343895][T13279] bridge0: port 1(bridge_slave_0) entered blocking state [ 1110.351157][T13279] bridge0: port 1(bridge_slave_0) entered disabled state [ 1110.372770][T13279] bridge_slave_0: entered allmulticast mode [ 1110.380649][T13279] bridge_slave_0: entered promiscuous mode [ 1110.453015][T13279] bridge0: port 2(bridge_slave_1) entered blocking state [ 1110.460175][T13279] bridge0: port 2(bridge_slave_1) entered disabled state [ 1110.482265][T13279] bridge_slave_1: entered allmulticast mode [ 1110.490165][T13279] bridge_slave_1: entered promiscuous mode [ 1110.610671][T13279] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1110.668558][T13279] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1110.793190][T13279] team0: Port device team_slave_0 added [ 1110.808648][T13279] team0: Port device team_slave_1 added [ 1110.954487][T13279] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1110.961481][T13279] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1111.169048][T13279] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1111.439844][ T9563] Bluetooth: hci1: command 0x0405 tx timeout [ 1111.521770][T13279] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1111.529225][T13279] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1111.556193][T13279] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1111.644906][T13424] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1572'. [ 1112.880494][ T12] bridge_slave_1: left allmulticast mode [ 1112.886238][ T12] bridge_slave_1: left promiscuous mode [ 1112.923743][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 1113.018546][ T12] bridge_slave_0: left allmulticast mode [ 1113.058466][ T12] bridge_slave_0: left promiscuous mode [ 1113.103000][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 1113.847311][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1114.040174][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1114.107682][ T12] bond0 (unregistering): Released all slaves [ 1114.390424][T13285] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1114.455380][T13285] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1114.473240][T13285] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1114.484103][T13285] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1114.503997][T13285] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1114.661192][T13431] workqueue: Failed to create a rescuer kthread for wq "bond9": -EINTR [ 1114.761041][T13442] netlink: 'syz.4.1576': attribute type 10 has an invalid length. [ 1115.176864][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 1115.185662][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 1115.581029][ T12] hsr_slave_0: left promiscuous mode [ 1115.600708][ T12] hsr_slave_1: left promiscuous mode [ 1115.607249][T13447] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1577'. [ 1115.637120][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1115.672109][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1116.537450][T13285] Bluetooth: hci5: command tx timeout [ 1118.068774][ T12] team0 (unregistering): Port device team_slave_1 removed [ 1118.140613][ T12] team0 (unregistering): Port device team_slave_0 removed [ 1118.612107][T13285] Bluetooth: hci5: command tx timeout [ 1119.811090][T13279] hsr_slave_0: entered promiscuous mode [ 1119.999950][T13279] hsr_slave_1: entered promiscuous mode [ 1120.022836][T13279] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1120.030813][T13279] Cannot create hsr debugfs directory [ 1120.191421][T13146] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1120.289478][T13146] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1120.762551][T13285] Bluetooth: hci5: command tx timeout [ 1121.181501][T13481] 9pnet_fd: Insufficient options for proto=fd [ 1121.783647][T13437] virt_wifi0 speed is unknown, defaulting to 1000 [ 1121.807129][T13146] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1121.864456][T13437] lo speed is unknown, defaulting to 1000 [ 1121.878776][T13481] siw: device registration error -23 [ 1122.636742][T13146] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1122.804280][T13285] Bluetooth: hci5: command tx timeout [ 1122.878204][T13493] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1587'. [ 1124.671530][T13510] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1124.784699][T13512] netlink: 'syz.3.1591': attribute type 1 has an invalid length. [ 1125.196702][T13512] 8021q: adding VLAN 0 to HW filter on device bond9 [ 1126.172173][ T30] kauditd_printk_skb: 52 callbacks suppressed [ 1126.172195][ T30] audit: type=1326 audit(1752388961.341:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13516 comm="syz.4.1592" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e8078e929 code=0x7fc00000 [ 1126.252156][ T30] audit: type=1326 audit(1752388961.341:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13516 comm="syz.4.1592" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f8e8078e929 code=0x7fc00000 [ 1126.316987][ T30] audit: type=1326 audit(1752388961.341:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13516 comm="syz.4.1592" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e8078e929 code=0x7fc00000 [ 1126.426884][ T30] audit: type=1326 audit(1752388961.341:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13516 comm="syz.4.1592" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e8078e929 code=0x7fc00000 [ 1126.503740][ T30] audit: type=1326 audit(1752388961.341:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13516 comm="syz.4.1592" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e8078e929 code=0x7fc00000 [ 1126.537999][T13279] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1126.545340][ T30] audit: type=1326 audit(1752388961.341:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13516 comm="syz.4.1592" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e8078e929 code=0x7fc00000 [ 1126.577426][T13279] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1126.599496][T13279] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1126.609098][ T30] audit: type=1326 audit(1752388961.341:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13516 comm="syz.4.1592" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e8078e929 code=0x7fc00000 [ 1126.666211][T13279] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1126.682998][ T30] audit: type=1326 audit(1752388961.341:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13516 comm="syz.4.1592" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e8078e929 code=0x7fc00000 [ 1126.788221][T13437] chnl_net:caif_netlink_parms(): no params data found [ 1126.791325][ T30] audit: type=1326 audit(1752388961.341:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13516 comm="syz.4.1592" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e8078e929 code=0x7fc00000 [ 1126.829243][ T30] audit: type=1326 audit(1752388961.341:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13516 comm="syz.4.1592" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e8078e929 code=0x7fc00000 [ 1127.151103][T13437] bridge0: port 1(bridge_slave_0) entered blocking state [ 1127.162560][T13437] bridge0: port 1(bridge_slave_0) entered disabled state [ 1127.169744][T13437] bridge_slave_0: entered allmulticast mode [ 1127.178302][T13437] bridge_slave_0: entered promiscuous mode [ 1127.255343][T13437] bridge0: port 2(bridge_slave_1) entered blocking state [ 1127.262762][T13437] bridge0: port 2(bridge_slave_1) entered disabled state [ 1127.269979][T13437] bridge_slave_1: entered allmulticast mode [ 1127.287958][T13437] bridge_slave_1: entered promiscuous mode [ 1127.369579][T13437] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1127.428526][T13437] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1127.784477][T13543] netlink: 'syz.3.1594': attribute type 1 has an invalid length. [ 1129.505684][T13543] 8021q: adding VLAN 0 to HW filter on device bond10 [ 1130.745734][T13546] bond10: (slave veth13): Enslaving as an active interface with a down link [ 1130.796342][T13547] bond10: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 1130.875816][T13437] team0: Port device team_slave_0 added [ 1131.045829][T13279] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1131.203876][T13437] team0: Port device team_slave_1 added [ 1131.445023][T13566] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1600'. [ 1131.748092][T13567] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1132.044271][T13279] 8021q: adding VLAN 0 to HW filter on device team0 [ 1132.143683][T13569] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1132.241126][ T9563] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1132.259950][ T9563] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1132.270377][ T9563] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1132.281123][ T9563] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1132.297502][ T9563] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1132.426709][T13574] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1602'. [ 1133.672206][T13437] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1133.682082][T13437] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1134.461370][T13437] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1134.472346][T13285] Bluetooth: hci0: command tx timeout [ 1134.523131][T11744] bridge0: port 1(bridge_slave_0) entered blocking state [ 1134.530298][T11744] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1134.583255][T13437] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1134.590223][T13437] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1134.713109][T13437] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1135.612524][T11744] bridge0: port 2(bridge_slave_1) entered blocking state [ 1135.619695][T11744] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1136.590485][ T9563] Bluetooth: hci0: command tx timeout [ 1137.346409][T13437] hsr_slave_0: entered promiscuous mode [ 1137.386055][T13437] hsr_slave_1: entered promiscuous mode [ 1137.420827][T13437] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1137.496513][T13437] Cannot create hsr debugfs directory [ 1138.942161][ T9563] Bluetooth: hci0: command 0x040f tx timeout [ 1139.052471][T13570] virt_wifi0 speed is unknown, defaulting to 1000 [ 1139.060289][T13570] lo speed is unknown, defaulting to 1000 [ 1139.268468][T13614] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 1139.300429][T13614] netlink: 'syz.3.1611': attribute type 1 has an invalid length. [ 1139.313809][ T6385] bridge_slave_1: left allmulticast mode [ 1139.320241][ T6385] bridge_slave_1: left promiscuous mode [ 1139.500740][T13617] netlink: 'syz.3.1611': attribute type 1 has an invalid length. [ 1139.512401][ T6385] bridge0: port 2(bridge_slave_1) entered disabled state [ 1139.572409][T13618] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1612'. [ 1139.683181][ T6385] bridge_slave_0: left allmulticast mode [ 1139.688961][ T6385] bridge_slave_0: left promiscuous mode [ 1139.698627][ T6385] bridge0: port 1(bridge_slave_0) entered disabled state [ 1140.296227][ T6385] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1140.330702][ T6385] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1140.385472][ T6385] bond0 (unregistering): Released all slaves [ 1140.946410][T13624] F2FS-fs (loop9): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1140.955061][T13624] F2FS-fs (loop9): Can't find valid F2FS filesystem in 1th superblock [ 1140.965153][T13624] F2FS-fs (loop9): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1140.973075][T13624] F2FS-fs (loop9): Can't find valid F2FS filesystem in 2th superblock [ 1141.012705][T10899] Bluetooth: hci0: command 0x040f tx timeout [ 1141.346347][ T6385] hsr_slave_0: left promiscuous mode [ 1141.352548][ T6385] hsr_slave_1: left promiscuous mode [ 1141.392913][ T6385] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1141.487551][ T6385] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1142.899937][ T6385] team0 (unregistering): Port device team_slave_1 removed [ 1142.978459][ T6385] team0 (unregistering): Port device team_slave_0 removed [ 1143.092967][T10899] Bluetooth: hci0: command 0x040f tx timeout [ 1144.908077][T13642] blktrace: Concurrent blktraces are not allowed on loop8 [ 1146.530995][T13656] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1621'. [ 1146.595766][T13570] chnl_net:caif_netlink_parms(): no params data found [ 1147.342252][T13661] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 1147.472330][T13661] F2FS-fs (loop3): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1147.480430][T13661] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 1147.489934][T13661] F2FS-fs (loop3): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1147.498096][T13661] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 1147.661794][T13285] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1147.672285][T13285] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1147.680802][T13285] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1147.709052][T13285] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1147.726978][T13285] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1148.848850][T13437] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1150.118807][T13285] Bluetooth: hci1: command tx timeout [ 1150.142301][T13437] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1150.194583][T13437] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1150.543561][T13570] bridge0: port 1(bridge_slave_0) entered blocking state [ 1150.614161][T13570] bridge0: port 1(bridge_slave_0) entered disabled state [ 1150.639904][T13570] bridge_slave_0: entered allmulticast mode [ 1150.668822][T13570] bridge_slave_0: entered promiscuous mode [ 1150.875366][T13690] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 1150.902262][T13690] netlink: 'syz.5.1630': attribute type 1 has an invalid length. [ 1150.956252][T13693] netlink: 'syz.5.1630': attribute type 1 has an invalid length. [ 1151.011890][T13437] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1151.112814][T13662] virt_wifi0 speed is unknown, defaulting to 1000 [ 1151.119525][T13570] bridge0: port 2(bridge_slave_1) entered blocking state [ 1151.343567][T13699] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 1151.451516][T13570] bridge0: port 2(bridge_slave_1) entered disabled state [ 1151.454154][T13701] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1151.467798][T13701] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 1151.478630][T13701] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1151.486703][T13701] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 1151.684677][T13570] bridge_slave_1: entered allmulticast mode [ 1151.723687][T13570] bridge_slave_1: entered promiscuous mode [ 1151.847579][T13662] lo speed is unknown, defaulting to 1000 [ 1152.132196][T13285] Bluetooth: hci1: command 0x041b tx timeout [ 1152.157808][T13570] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1152.305800][T13570] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1152.562924][T13710] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 1153.131887][T13570] team0: Port device team_slave_0 added [ 1153.166280][T13570] team0: Port device team_slave_1 added [ 1153.419560][T13570] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1153.442168][T13570] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1153.517438][T13570] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1153.712387][T13570] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1153.719914][T13570] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1153.780148][T13570] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1154.735705][T13285] Bluetooth: hci1: command 0x041b tx timeout [ 1154.933569][ T12] bridge_slave_1: left allmulticast mode [ 1154.939257][ T12] bridge_slave_1: left promiscuous mode [ 1154.992333][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 1155.049122][ T12] bridge_slave_0: left allmulticast mode [ 1155.089924][ T12] bridge_slave_0: left promiscuous mode [ 1155.139831][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 1156.612648][T13737] syz.5.1642 (13737): /proc/13733/oom_adj is deprecated, please use /proc/13733/oom_score_adj instead. [ 1156.822152][T13285] Bluetooth: hci1: command 0x041b tx timeout [ 1157.034675][T13722] syz.4.1637 (13722): drop_caches: 2 [ 1157.522503][T13743] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1644'. [ 1158.902961][T13285] Bluetooth: hci1: command 0x041b tx timeout [ 1159.932144][T13105] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 1160.239845][T13105] usb 4-1: device descriptor read/64, error -71 [ 1160.592173][T13105] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 1160.615157][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1160.633443][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1160.830506][ T12] bond0 (unregistering): Released all slaves [ 1161.521807][T13105] usb 4-1: device descriptor read/64, error -71 [ 1161.678364][T13105] usb usb4-port1: attempt power cycle [ 1162.892571][T13105] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 1162.933007][ T12] hsr_slave_0: left promiscuous mode [ 1163.064271][ T12] hsr_slave_1: left promiscuous mode [ 1163.124320][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1163.136223][T13105] usb 4-1: device descriptor read/8, error -71 [ 1163.364475][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1163.854167][T13782] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1655'. [ 1166.873123][ T12] team0 (unregistering): Port device team_slave_1 removed [ 1167.070036][ T12] team0 (unregistering): Port device team_slave_0 removed [ 1167.496677][T13808] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 1168.405497][T13813] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 1168.694856][T13814] F2FS-fs (loop5): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1168.722271][T13814] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 1168.730617][T13814] F2FS-fs (loop5): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1168.756000][T13814] F2FS-fs (loop5): Can't find valid F2FS filesystem in 2th superblock [ 1169.150257][T13570] hsr_slave_0: entered promiscuous mode [ 1169.177199][T13570] hsr_slave_1: entered promiscuous mode [ 1169.193140][T13570] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1169.211245][T13570] Cannot create hsr debugfs directory [ 1170.338219][T13437] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1170.410992][T13662] chnl_net:caif_netlink_parms(): no params data found [ 1170.634766][T13437] 8021q: adding VLAN 0 to HW filter on device team0 [ 1171.909518][T13662] bridge0: port 1(bridge_slave_0) entered blocking state [ 1171.937895][T13662] bridge0: port 1(bridge_slave_0) entered disabled state [ 1171.952916][T13662] bridge_slave_0: entered allmulticast mode [ 1171.960914][T13662] bridge_slave_0: entered promiscuous mode [ 1172.119453][T13662] bridge0: port 2(bridge_slave_1) entered blocking state [ 1172.142246][T13662] bridge0: port 2(bridge_slave_1) entered disabled state [ 1172.149542][T13662] bridge_slave_1: entered allmulticast mode [ 1172.204277][T13662] bridge_slave_1: entered promiscuous mode [ 1172.347831][T13662] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1172.463022][T13662] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1172.684255][T13662] team0: Port device team_slave_0 added [ 1172.731711][T13662] team0: Port device team_slave_1 added [ 1172.871318][T13662] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1172.879999][T13662] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1172.913295][T13662] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1172.937976][T13662] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1172.950136][T13662] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1173.032596][T13662] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1173.670173][T13662] hsr_slave_0: entered promiscuous mode [ 1173.698724][T13662] hsr_slave_1: entered promiscuous mode [ 1173.728719][T13662] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1173.756623][T13662] Cannot create hsr debugfs directory [ 1174.122387][T13849] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1673'. [ 1174.851092][T13853] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1178.626160][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 1178.638042][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 1178.833637][T10899] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1178.848760][T10899] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1178.923555][T10899] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1179.033660][T10899] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1179.142942][T10899] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1179.391811][T13570] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1179.518233][T13570] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1179.633429][T13570] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1179.878035][T13570] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1179.967576][ T12] bridge_slave_1: left allmulticast mode [ 1180.002512][ T12] bridge_slave_1: left promiscuous mode [ 1180.012686][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 1180.193361][ T12] bridge_slave_0: left allmulticast mode [ 1180.235069][ T12] bridge_slave_0: left promiscuous mode [ 1180.249489][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 1181.519068][T13285] Bluetooth: hci5: command tx timeout [ 1182.267546][T13896] netlink: 'syz.4.1685': attribute type 10 has an invalid length. [ 1182.290233][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1182.311419][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1182.339048][ T12] bond0 (unregistering): Released all slaves [ 1182.383653][T13866] virt_wifi0 speed is unknown, defaulting to 1000 [ 1182.513422][T13866] lo speed is unknown, defaulting to 1000 [ 1182.748747][ T12] hsr_slave_0: left promiscuous mode [ 1182.796634][ T12] hsr_slave_1: left promiscuous mode [ 1182.834296][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1182.897878][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1183.888399][T13285] Bluetooth: hci5: command tx timeout [ 1184.422383][T13912] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1687'. [ 1185.972151][T13285] Bluetooth: hci5: command tx timeout [ 1186.076157][ T30] kauditd_printk_skb: 57 callbacks suppressed [ 1186.076183][ T30] audit: type=1107 audit(1752389020.541:140): pid=13918 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='†' [ 1187.204182][ T12] team0 (unregistering): Port device team_slave_1 removed [ 1187.604373][T13930] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1693'. [ 1187.694148][ T12] team0 (unregistering): Port device team_slave_0 removed [ 1188.062427][T13285] Bluetooth: hci5: command tx timeout [ 1188.958258][T13895] IPVS: Error connecting to the multicast addr [ 1190.763779][T13866] chnl_net:caif_netlink_parms(): no params data found [ 1192.346477][T13662] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1192.956613][T10899] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1192.970427][T10899] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1192.978416][T10899] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1192.989409][T10899] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1192.999424][T10899] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1193.392110][T13962] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1700'. [ 1193.549033][T13662] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1193.761153][T13662] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1194.072769][T13662] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1194.209634][T13959] virt_wifi0 speed is unknown, defaulting to 1000 [ 1195.072845][T13959] lo speed is unknown, defaulting to 1000 [ 1195.093677][T13285] Bluetooth: hci0: command tx timeout [ 1195.110392][T13866] bridge0: port 1(bridge_slave_0) entered blocking state [ 1195.142694][T13866] bridge0: port 1(bridge_slave_0) entered disabled state [ 1195.207940][T13866] bridge_slave_0: entered allmulticast mode [ 1195.254594][T13866] bridge_slave_0: entered promiscuous mode [ 1195.341627][T13866] bridge0: port 2(bridge_slave_1) entered blocking state [ 1195.369793][T13866] bridge0: port 2(bridge_slave_1) entered disabled state [ 1195.398575][T13866] bridge_slave_1: entered allmulticast mode [ 1195.489755][T13866] bridge_slave_1: entered promiscuous mode [ 1195.972872][T13989] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1705'. [ 1196.615734][T13866] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1196.688743][T13866] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1197.013160][T13866] team0: Port device team_slave_0 added [ 1197.172869][T13285] Bluetooth: hci0: command tx timeout [ 1197.927917][ T12] bridge_slave_1: left allmulticast mode [ 1197.962209][ T12] bridge_slave_1: left promiscuous mode [ 1197.995477][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 1198.070563][ T12] bridge_slave_0: left allmulticast mode [ 1198.090051][ T12] bridge_slave_0: left promiscuous mode [ 1198.115825][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 1198.566490][T14003] overlayfs: overlapping lowerdir path [ 1199.302532][T13285] Bluetooth: hci0: command tx timeout [ 1200.345063][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1200.644025][T14017] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1714'. [ 1201.245034][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1201.399025][T13285] Bluetooth: hci0: command tx timeout [ 1201.452800][ T12] bond0 (unregistering): Released all slaves [ 1201.565473][T13866] team0: Port device team_slave_1 added [ 1201.760099][T13866] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1201.828536][T13866] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1202.102668][T14024] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1202.259304][T13866] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1202.507267][ T12] hsr_slave_0: left promiscuous mode [ 1202.524896][ T12] hsr_slave_1: left promiscuous mode [ 1202.538781][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1202.579795][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1204.246023][ T12] team0 (unregistering): Port device team_slave_1 removed [ 1204.305648][ T12] team0 (unregistering): Port device team_slave_0 removed [ 1204.773109][T13866] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1204.780126][T13866] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1204.829932][T13866] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1205.091341][T13866] hsr_slave_0: entered promiscuous mode [ 1205.123321][T13866] hsr_slave_1: entered promiscuous mode [ 1205.142989][T13866] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1205.150582][T13866] Cannot create hsr debugfs directory [ 1205.638687][T13959] chnl_net:caif_netlink_parms(): no params data found [ 1206.527907][T14056] 9pnet_fd: Insufficient options for proto=fd [ 1206.540134][T14056] siw: device registration error -23 [ 1208.182482][T10899] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1208.191493][T10899] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1208.203364][T10899] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1208.217851][T10899] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1208.233102][T10899] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1209.928463][T14071] virt_wifi0 speed is unknown, defaulting to 1000 [ 1210.030722][T13959] bridge0: port 1(bridge_slave_0) entered blocking state [ 1210.071037][T13959] bridge0: port 1(bridge_slave_0) entered disabled state [ 1210.113978][T13959] bridge_slave_0: entered allmulticast mode [ 1210.154512][T13959] bridge_slave_0: entered promiscuous mode [ 1210.294214][T13285] Bluetooth: hci1: command tx timeout [ 1210.407501][T14071] lo speed is unknown, defaulting to 1000 [ 1211.102307][T13959] bridge0: port 2(bridge_slave_1) entered blocking state [ 1211.162289][T13959] bridge0: port 2(bridge_slave_1) entered disabled state [ 1211.268829][T13959] bridge_slave_1: entered allmulticast mode [ 1211.312264][T13959] bridge_slave_1: entered promiscuous mode [ 1212.304184][T14091] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 1212.372669][T13285] Bluetooth: hci1: command tx timeout [ 1212.730084][T13959] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1212.965374][T13959] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1213.097628][T14095] 9pnet_fd: Insufficient options for proto=fd [ 1213.110159][T14095] siw: device registration error -23 [ 1213.959268][T13959] team0: Port device team_slave_0 added [ 1214.519287][T13285] Bluetooth: hci1: command tx timeout [ 1214.957572][T13959] team0: Port device team_slave_1 added [ 1215.007737][T14103] netlink: 44 bytes leftover after parsing attributes in process `syz.5.1736'. [ 1215.926100][T13959] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1215.953679][T13959] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1216.026814][T13959] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1216.072761][T13866] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1216.105531][T13866] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1216.203068][T13959] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1216.239562][T13959] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1216.532820][T13285] Bluetooth: hci1: command tx timeout [ 1216.788390][T13959] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1216.988333][ T12] bridge_slave_1: left allmulticast mode [ 1217.012598][ T12] bridge_slave_1: left promiscuous mode [ 1217.164119][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 1217.341005][ T12] bridge_slave_0: left allmulticast mode [ 1217.412750][ T12] bridge_slave_0: left promiscuous mode [ 1217.418589][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 1217.753382][T14159] netlink: 'syz.5.1744': attribute type 10 has an invalid length. [ 1218.778427][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1218.811621][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1218.851978][ T12] bond0 (unregistering): Released all slaves [ 1219.465970][T13866] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1219.705873][T13866] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1220.916956][ T12] hsr_slave_0: left promiscuous mode [ 1220.963277][ T12] hsr_slave_1: left promiscuous mode [ 1220.979909][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1221.063955][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1224.175107][T14202] loop6: detected capacity change from 0 to 524287999 [ 1224.185119][T14202] buffer_io_error: 7 callbacks suppressed [ 1224.185137][T14202] Buffer I/O error on dev loop6, logical block 0, async page read [ 1224.211427][T14202] Buffer I/O error on dev loop6, logical block 0, async page read [ 1224.240068][T14202] Buffer I/O error on dev loop6, logical block 0, async page read [ 1224.276407][ T12] team0 (unregistering): Port device team_slave_1 removed [ 1224.307678][T14203] Invalid logical block size (4) [ 1224.335722][T14202] Buffer I/O error on dev loop6, logical block 0, async page read [ 1224.357582][T14202] Buffer I/O error on dev loop6, logical block 0, async page read [ 1224.380743][T14202] Buffer I/O error on dev loop6, logical block 0, async page read [ 1224.396111][ T12] team0 (unregistering): Port device team_slave_0 removed [ 1224.396409][T14202] Buffer I/O error on dev loop6, logical block 0, async page read [ 1224.419605][T14202] Buffer I/O error on dev loop6, logical block 0, async page read [ 1224.437648][T14202] ldm_validate_partition_table(): Disk read failed. [ 1224.494528][T14202] Buffer I/O error on dev loop6, logical block 0, async page read [ 1224.532204][T14202] Buffer I/O error on dev loop6, logical block 0, async page read [ 1224.552728][T14202] Dev loop6: unable to read RDB block 0 [ 1224.572727][T14202] loop6: unable to read partition table [ 1224.578617][T14202] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾x³˜CÖ) failed (rc=-5) [ 1224.992947][T14209] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1755'. [ 1225.412160][T10899] Bluetooth: hci1: command 0x0405 tx timeout [ 1225.643475][T14214] 9pnet_fd: Insufficient options for proto=fd [ 1227.644705][T13959] hsr_slave_0: entered promiscuous mode [ 1227.694746][T13959] hsr_slave_1: entered promiscuous mode [ 1227.738081][T13959] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1227.775686][T13959] Cannot create hsr debugfs directory [ 1228.919876][T14233] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1758'. [ 1229.379324][T14236] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1760'. [ 1230.751047][T14071] chnl_net:caif_netlink_parms(): no params data found [ 1232.575396][T14258] 9pnet_fd: Insufficient options for proto=fd [ 1234.892825][T14071] bridge0: port 1(bridge_slave_0) entered blocking state [ 1234.900043][T14071] bridge0: port 1(bridge_slave_0) entered disabled state [ 1234.942760][T14071] bridge_slave_0: entered allmulticast mode [ 1234.950819][T14071] bridge_slave_0: entered promiscuous mode [ 1235.022654][T14071] bridge0: port 2(bridge_slave_1) entered blocking state [ 1235.030287][T14071] bridge0: port 2(bridge_slave_1) entered disabled state [ 1235.062868][T14071] bridge_slave_1: entered allmulticast mode [ 1235.071066][T14071] bridge_slave_1: entered promiscuous mode [ 1235.277727][T14071] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1235.353730][T14071] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1235.491784][T14071] team0: Port device team_slave_0 added [ 1235.508027][T14071] team0: Port device team_slave_1 added [ 1235.623595][T14071] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1235.630602][T14071] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1235.656530][ C0] vkms_vblank_simulate: vblank timer overrun [ 1235.674034][T14071] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1235.718460][T14071] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1235.738091][T14071] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1235.847347][T14274] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1769'. [ 1236.824694][T14071] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1238.069879][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 1238.076419][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 1238.796019][T13959] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1238.904012][T13959] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1239.317867][T14297] 9pnet_fd: Insufficient options for proto=fd [ 1239.447816][T10899] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1239.488075][T10899] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1239.501895][T10899] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1239.557602][T10899] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1239.606929][T10899] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1241.511783][T13959] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1241.547232][T13959] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1242.155000][T10899] Bluetooth: hci5: command tx timeout [ 1242.231383][T14312] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1782'. [ 1242.788910][T14071] hsr_slave_0: entered promiscuous mode [ 1242.799819][T14071] hsr_slave_1: entered promiscuous mode [ 1242.944208][T14317] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1242.947351][T14071] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1243.066774][T14071] Cannot create hsr debugfs directory [ 1243.820974][T14295] virt_wifi0 speed is unknown, defaulting to 1000 [ 1244.037774][T14331] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1786'. [ 1244.158360][T14295] lo speed is unknown, defaulting to 1000 [ 1244.214375][T10899] Bluetooth: hci5: command 0x041b tx timeout [ 1244.622457][T14336] netlink: 'syz.4.1788': attribute type 1 has an invalid length. [ 1244.823211][T14336] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1245.828014][T14338] bond5: (slave veth0_to_bond): Releasing active interface [ 1245.883706][T14338] bond7: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 1246.211477][T14350] 9pnet_fd: Insufficient options for proto=fd [ 1246.293302][T13285] Bluetooth: hci5: command 0x041b tx timeout [ 1248.004109][T14359] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1792'. [ 1248.382144][T13285] Bluetooth: hci5: command 0x041b tx timeout [ 1249.299609][ T12] bridge_slave_1: left allmulticast mode [ 1249.312228][ T12] bridge_slave_1: left promiscuous mode [ 1249.355701][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 1249.479784][ T12] bridge_slave_0: left allmulticast mode [ 1249.492309][ T12] bridge_slave_0: left promiscuous mode [ 1249.512787][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 1250.452306][T13285] Bluetooth: hci5: command 0x041b tx timeout [ 1250.623709][T14368] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1797'. [ 1250.968577][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1251.000634][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1251.048916][ T12] bond0 (unregistering): Released all slaves [ 1251.452075][ T12] hsr_slave_0: left promiscuous mode [ 1251.472884][ T12] hsr_slave_1: left promiscuous mode [ 1251.503455][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1251.532894][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1251.929484][ T12] team0 (unregistering): Port device team_slave_1 removed [ 1251.975320][ T12] team0 (unregistering): Port device team_slave_0 removed [ 1252.755794][T14295] chnl_net:caif_netlink_parms(): no params data found [ 1255.082392][T14295] bridge0: port 1(bridge_slave_0) entered blocking state [ 1255.084451][T10899] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1255.089564][T14295] bridge0: port 1(bridge_slave_0) entered disabled state [ 1255.109783][T10899] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1255.124892][T10899] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1255.177854][T10899] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1255.186799][T14295] bridge_slave_0: entered allmulticast mode [ 1255.198395][T10899] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1255.207709][T14295] bridge_slave_0: entered promiscuous mode [ 1255.314815][T14295] bridge0: port 2(bridge_slave_1) entered blocking state [ 1255.352220][T14295] bridge0: port 2(bridge_slave_1) entered disabled state [ 1255.359545][T14295] bridge_slave_1: entered allmulticast mode [ 1255.374244][T14295] bridge_slave_1: entered promiscuous mode [ 1255.914840][T14295] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1255.918624][T14295] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1256.084994][T14071] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1256.085778][T14402] virt_wifi0 speed is unknown, defaulting to 1000 [ 1256.116666][T14071] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1256.570458][T14295] team0: Port device team_slave_0 added [ 1256.600711][T14402] lo speed is unknown, defaulting to 1000 [ 1256.601035][T14071] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1256.670843][T14071] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1257.342147][T10899] Bluetooth: hci0: command tx timeout [ 1258.277424][T14295] team0: Port device team_slave_1 added [ 1258.676336][T14432] overlayfs: failed to resolve './file1': -2 [ 1259.432810][T10899] Bluetooth: hci0: command tx timeout [ 1260.709036][T14295] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1260.739109][T14295] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1260.822355][T14295] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1261.060576][T14295] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1261.119553][T14295] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1261.221335][T14295] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1261.492247][T10899] Bluetooth: hci0: command tx timeout [ 1261.804598][T14295] hsr_slave_0: entered promiscuous mode [ 1261.828329][T14295] hsr_slave_1: entered promiscuous mode [ 1261.865060][T14295] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1261.905500][T14295] Cannot create hsr debugfs directory [ 1262.544918][ T12] bridge_slave_1: left allmulticast mode [ 1262.550643][ T12] bridge_slave_1: left promiscuous mode [ 1262.603668][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 1263.573210][T13285] Bluetooth: hci0: command tx timeout [ 1263.632930][ T12] bridge_slave_0: left allmulticast mode [ 1263.638645][ T12] bridge_slave_0: left promiscuous mode [ 1263.697474][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 1264.746918][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1264.788978][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1264.830406][ T12] bond0 (unregistering): Released all slaves [ 1264.917328][T14474] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 1266.493016][ T12] hsr_slave_0: left promiscuous mode [ 1266.541509][ T12] hsr_slave_1: left promiscuous mode [ 1266.563183][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1266.651397][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1267.239922][ T12] team0 (unregistering): Port device team_slave_1 removed [ 1267.311389][ T12] team0 (unregistering): Port device team_slave_0 removed [ 1267.810650][T14402] chnl_net:caif_netlink_parms(): no params data found [ 1268.654684][T14499] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1826'. [ 1269.453544][T14402] bridge0: port 1(bridge_slave_0) entered blocking state [ 1269.460743][T14402] bridge0: port 1(bridge_slave_0) entered disabled state [ 1269.801416][T14402] bridge_slave_0: entered allmulticast mode [ 1270.117368][T14402] bridge_slave_0: entered promiscuous mode [ 1270.344590][T14402] bridge0: port 2(bridge_slave_1) entered blocking state [ 1270.351725][T14402] bridge0: port 2(bridge_slave_1) entered disabled state [ 1270.382374][T14402] bridge_slave_1: entered allmulticast mode [ 1270.399833][T14402] bridge_slave_1: entered promiscuous mode [ 1271.422440][T14509] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1829'. [ 1271.939929][T14512] 9pnet_fd: Insufficient options for proto=fd [ 1272.620021][T14402] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1272.715970][T14402] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1273.955683][T14402] team0: Port device team_slave_0 added [ 1274.227307][T13285] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1274.240477][T13285] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1274.252205][T13285] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1274.261210][T13285] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1274.273407][T13285] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1274.301558][T14402] team0: Port device team_slave_1 added [ 1276.292263][T10899] Bluetooth: hci1: command tx timeout [ 1279.146711][T14402] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1279.154010][T14402] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1279.188172][T10899] Bluetooth: hci1: command tx timeout [ 1279.306111][T14402] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1279.334316][T14402] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1279.376972][T14402] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1279.472308][T14402] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1279.531955][T14545] workqueue: Failed to create a rescuer kthread for wq "bond11": -EINTR [ 1279.773557][T14528] virt_wifi0 speed is unknown, defaulting to 1000 [ 1280.152136][T14556] 9pnet_fd: Insufficient options for proto=fd [ 1280.863148][T14295] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1280.934014][T14295] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1281.004779][T14528] lo speed is unknown, defaulting to 1000 [ 1281.203867][T14562] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 1281.246314][T14562] netlink: 'syz.3.1843': attribute type 1 has an invalid length. [ 1281.252417][T10899] Bluetooth: hci1: command tx timeout [ 1281.340532][T14402] hsr_slave_0: entered promiscuous mode [ 1281.341675][T14402] hsr_slave_1: entered promiscuous mode [ 1281.359111][T14402] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1281.382067][T14563] netlink: 'syz.3.1843': attribute type 1 has an invalid length. [ 1281.522652][T14402] Cannot create hsr debugfs directory [ 1281.523155][T14295] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1281.846861][T14295] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1283.333279][T10899] Bluetooth: hci1: command tx timeout [ 1283.427876][T14582] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 1283.466371][T14582] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1283.921405][T14587] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 1284.135689][T14589] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1284.143833][T14589] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 1284.153325][T14589] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1284.161234][T14589] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 1284.495679][ T12] bridge_slave_1: left allmulticast mode [ 1284.501387][ T12] bridge_slave_1: left promiscuous mode [ 1284.598058][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 1284.643852][ T12] bridge_slave_0: left allmulticast mode [ 1284.666976][ T12] bridge_slave_0: left promiscuous mode [ 1284.702860][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 1284.836805][T14592] snd_dummy snd_dummy.0: control 0:0:0:syz0:524289 is already present [ 1286.828284][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1286.923895][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1286.998383][ T12] bond0 (unregistering): Released all slaves [ 1287.266524][T14528] chnl_net:caif_netlink_parms(): no params data found [ 1287.668826][T14608] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 1288.015250][T14610] F2FS-fs (loop5): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1288.058705][T14610] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 1288.093942][ T12] hsr_slave_0: left promiscuous mode [ 1288.131085][ T12] hsr_slave_1: left promiscuous mode [ 1288.144221][T14610] F2FS-fs (loop5): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1288.180752][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1288.193699][T14610] F2FS-fs (loop5): Can't find valid F2FS filesystem in 2th superblock [ 1288.265390][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1289.109409][ T12] team0 (unregistering): Port device team_slave_1 removed [ 1289.224969][ T12] team0 (unregistering): Port device team_slave_0 removed [ 1291.528591][T14627] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 1291.544096][T14627] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1291.569117][T14626] overlayfs: overlapping lowerdir path [ 1293.233650][T14528] bridge0: port 1(bridge_slave_0) entered blocking state [ 1293.240810][T14528] bridge0: port 1(bridge_slave_0) entered disabled state [ 1293.522854][T14528] bridge_slave_0: entered allmulticast mode [ 1293.530854][T14528] bridge_slave_0: entered promiscuous mode [ 1293.749882][T14528] bridge0: port 2(bridge_slave_1) entered blocking state [ 1293.986192][T14528] bridge0: port 2(bridge_slave_1) entered disabled state [ 1294.030742][T14528] bridge_slave_1: entered allmulticast mode [ 1294.108028][T14649] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1863'. [ 1294.114185][T14528] bridge_slave_1: entered promiscuous mode [ 1294.785606][T14528] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1294.856096][T14528] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1295.779668][T14528] team0: Port device team_slave_0 added [ 1295.800518][T14528] team0: Port device team_slave_1 added [ 1295.996278][T14660] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1866'. [ 1296.506994][T14528] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1296.528502][T14528] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1296.566091][T14528] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1296.709865][T14528] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1296.723326][T14528] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1296.763111][T14528] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1296.789255][T14402] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1296.831548][T14402] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1296.945016][T14402] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1297.091089][T14528] hsr_slave_0: entered promiscuous mode [ 1297.129561][T14528] hsr_slave_1: entered promiscuous mode [ 1297.154886][T14528] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1297.175375][T14528] Cannot create hsr debugfs directory [ 1297.200302][T14402] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1298.019565][T14677] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1867'. [ 1298.080809][T14679] syz.4.1869 (14679): drop_caches: 2 [ 1298.950379][T14682] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 1298.984198][T14682] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1299.497167][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 1299.503610][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 1299.519963][T14686] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1871'. [ 1300.272781][T13285] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1300.283426][T13285] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1300.291821][T13285] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1300.300624][T13285] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1300.309050][T13285] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1301.682830][T14402] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1302.123099][ T12] bridge_slave_1: left allmulticast mode [ 1302.272188][ T12] bridge_slave_1: left promiscuous mode [ 1302.277970][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 1302.372163][T10899] Bluetooth: hci5: command tx timeout [ 1302.405759][ T12] bridge_slave_0: left allmulticast mode [ 1302.426342][ T12] bridge_slave_0: left promiscuous mode [ 1302.443520][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 1304.272411][T14711] netlink: 256 bytes leftover after parsing attributes in process `syz.3.1877'. [ 1304.281991][T14711] netlink: 80 bytes leftover after parsing attributes in process `syz.3.1877'. [ 1304.452742][T10899] Bluetooth: hci5: command tx timeout [ 1306.545559][T14724] siw: device registration error -23 [ 1306.558552][T10899] Bluetooth: hci5: command tx timeout [ 1307.262702][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1307.362935][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1307.845260][ T12] bond0 (unregistering): Released all slaves [ 1307.996843][T14402] 8021q: adding VLAN 0 to HW filter on device team0 [ 1308.003626][T14688] virt_wifi0 speed is unknown, defaulting to 1000 [ 1308.035117][T11746] bridge0: port 1(bridge_slave_0) entered blocking state [ 1308.042376][T11746] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1308.134996][T14688] lo speed is unknown, defaulting to 1000 [ 1308.211668][T11746] bridge0: port 2(bridge_slave_1) entered blocking state [ 1308.218958][T11746] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1308.618234][T10899] Bluetooth: hci5: command tx timeout [ 1309.382259][ T12] hsr_slave_0: left promiscuous mode [ 1309.448732][ T12] hsr_slave_1: left promiscuous mode [ 1309.481453][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1309.533047][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1312.072739][ T12] team0 (unregistering): Port device team_slave_1 removed [ 1312.888588][ T12] team0 (unregistering): Port device team_slave_0 removed [ 1313.002129][T13105] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 1313.152368][T13105] usb 4-1: device descriptor read/64, error -71 [ 1313.422218][T13105] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 1313.603941][T13105] usb 4-1: device descriptor read/64, error -71 [ 1313.728680][T13105] usb usb4-port1: attempt power cycle [ 1314.058850][T14528] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1314.092675][T13105] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 1314.132809][T14528] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1314.172317][T13105] usb 4-1: device descriptor read/8, error -71 [ 1314.223301][T14528] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1314.293840][T14528] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1314.452166][T13105] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 1314.485243][T13105] usb 4-1: device descriptor read/8, error -71 [ 1314.624144][T13105] usb usb4-port1: unable to enumerate USB device [ 1314.802879][T14688] chnl_net:caif_netlink_parms(): no params data found [ 1317.436802][T13285] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1317.461790][T13285] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1317.483111][T13285] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1317.514391][T13285] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1317.522426][T13285] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1317.548953][T14786] xt_connbytes: Forcing CT accounting to be enabled [ 1317.555837][T14786] Cannot find set identified by id 0 to match [ 1317.618698][T14774] workqueue: Failed to create a rescuer kthread for wq "bond11": -EINTR [ 1319.025301][T14800] x_tables: arp_tables: CLASSIFY target: used from hooks INPUT, but only usable from FORWARD/OUTPUT [ 1319.416481][T14688] bridge0: port 1(bridge_slave_0) entered blocking state [ 1319.444370][T14688] bridge0: port 1(bridge_slave_0) entered disabled state [ 1319.770052][T13285] Bluetooth: hci0: command tx timeout [ 1319.820890][T14688] bridge_slave_0: entered allmulticast mode [ 1319.856887][T14688] bridge_slave_0: entered promiscuous mode [ 1319.890944][T14688] bridge0: port 2(bridge_slave_1) entered blocking state [ 1319.900578][T14688] bridge0: port 2(bridge_slave_1) entered disabled state [ 1319.910169][T14688] bridge_slave_1: entered allmulticast mode [ 1319.919806][T14688] bridge_slave_1: entered promiscuous mode [ 1320.215164][T14787] virt_wifi0 speed is unknown, defaulting to 1000 [ 1320.237088][T14688] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1321.082806][T14787] lo speed is unknown, defaulting to 1000 [ 1321.525173][T14688] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1321.992179][T13285] Bluetooth: hci0: command tx timeout [ 1322.685788][T14688] team0: Port device team_slave_0 added [ 1322.689194][T14688] team0: Port device team_slave_1 added [ 1322.860566][T14528] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1323.073041][T14688] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1323.073065][T14688] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1323.073127][T14688] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1323.075413][T14688] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1323.075432][T14688] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1323.075491][T14688] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1323.376533][T14528] 8021q: adding VLAN 0 to HW filter on device team0 [ 1323.572346][T14688] hsr_slave_0: entered promiscuous mode [ 1323.613757][T14688] hsr_slave_1: entered promiscuous mode [ 1323.624665][T14688] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1323.751793][T14823] siw: device registration error -23 [ 1324.056328][T10899] Bluetooth: hci0: command tx timeout [ 1324.414712][T14688] Cannot create hsr debugfs directory [ 1324.867002][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 1324.874283][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1324.949095][ T6018] bridge_slave_1: left allmulticast mode [ 1324.972795][ T6018] bridge_slave_1: left promiscuous mode [ 1324.999022][ T6018] bridge0: port 2(bridge_slave_1) entered disabled state [ 1325.058080][ T6018] bridge_slave_0: left allmulticast mode [ 1325.091150][ T6018] bridge_slave_0: left promiscuous mode [ 1325.116714][ T6018] bridge0: port 1(bridge_slave_0) entered disabled state [ 1325.213905][T14834] syz.5.1905 (14834): drop_caches: 2 [ 1326.132786][T10899] Bluetooth: hci0: command tx timeout [ 1329.057665][ T6018] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1329.100922][ T6018] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1329.145115][ T6018] bond0 (unregistering): Released all slaves [ 1329.679197][ T6018] hsr_slave_0: left promiscuous mode [ 1329.744579][ T6018] hsr_slave_1: left promiscuous mode [ 1329.750832][ T6018] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1329.797142][ T6018] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1330.415368][ T6018] team0 (unregistering): Port device team_slave_1 removed [ 1330.449948][ T6018] team0 (unregistering): Port device team_slave_0 removed [ 1330.975965][T14859] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1912'. [ 1332.652188][T14867] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 1332.852887][T14866] F2FS-fs (loop3): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1332.860695][T14866] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 1332.869049][T14866] F2FS-fs (loop3): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1332.876991][T14866] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 1333.261203][T13285] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1333.275136][T13285] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1333.285015][T13285] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1333.299008][T13285] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1333.307042][T13285] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1334.317820][T14873] virt_wifi0 speed is unknown, defaulting to 1000 [ 1334.363952][T14873] lo speed is unknown, defaulting to 1000 [ 1334.419665][T14787] chnl_net:caif_netlink_parms(): no params data found [ 1335.417313][T10899] Bluetooth: hci1: command tx timeout [ 1337.019160][T14787] bridge0: port 1(bridge_slave_0) entered blocking state [ 1337.074575][T14787] bridge0: port 1(bridge_slave_0) entered disabled state [ 1337.110382][T14787] bridge_slave_0: entered allmulticast mode [ 1337.192012][T14787] bridge_slave_0: entered promiscuous mode [ 1337.308631][T14787] bridge0: port 2(bridge_slave_1) entered blocking state [ 1337.320214][T14787] bridge0: port 2(bridge_slave_1) entered disabled state [ 1337.324424][T14901] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 1337.494160][T10899] Bluetooth: hci1: command tx timeout [ 1337.642622][T14787] bridge_slave_1: entered allmulticast mode [ 1337.650846][T14787] bridge_slave_1: entered promiscuous mode [ 1337.917010][T14899] F2FS-fs (loop5): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1337.925257][T14899] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 1337.933617][T14899] F2FS-fs (loop5): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1337.941632][T14899] F2FS-fs (loop5): Can't find valid F2FS filesystem in 2th superblock [ 1338.615414][T14787] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1338.970832][T14787] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1339.506177][T14787] team0: Port device team_slave_0 added [ 1339.572285][T10899] Bluetooth: hci1: command tx timeout [ 1339.686460][T14787] team0: Port device team_slave_1 added [ 1340.021693][T14873] chnl_net:caif_netlink_parms(): no params data found [ 1340.130419][T14787] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1340.155756][T14787] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1340.282146][T14787] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1340.310255][T14787] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1340.321446][T14787] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1340.356263][T14787] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1340.520196][T14688] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1340.642968][ T6018] bridge_slave_1: left allmulticast mode [ 1340.660325][ T6018] bridge_slave_1: left promiscuous mode [ 1340.686161][ T6018] bridge0: port 2(bridge_slave_1) entered disabled state [ 1340.741637][ T6018] bridge_slave_0: left allmulticast mode [ 1340.772466][ T6018] bridge_slave_0: left promiscuous mode [ 1340.814994][ T6018] bridge0: port 1(bridge_slave_0) entered disabled state [ 1341.672410][T10899] Bluetooth: hci1: command tx timeout [ 1341.940763][T14920] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1925'. [ 1344.265472][ T6018] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1344.392703][ T6018] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1344.404774][ T6018] bond0 (unregistering): Released all slaves [ 1344.482082][T14688] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1344.621881][T14688] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1344.910287][ T6018] hsr_slave_0: left promiscuous mode [ 1345.214349][ T6018] hsr_slave_1: left promiscuous mode [ 1345.285761][ T6018] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1345.738243][T14937] Cannot find set identified by id 0 to match [ 1345.772983][ T6018] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1346.342057][T14944] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1931'. [ 1346.919008][T14949] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1932'. [ 1347.720267][T14954] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 1348.361695][T14958] F2FS-fs (loop5): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1348.390613][T14958] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 1348.406029][T14958] F2FS-fs (loop5): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1348.441192][T14958] F2FS-fs (loop5): Can't find valid F2FS filesystem in 2th superblock [ 1348.529981][ T6018] team0 (unregistering): Port device team_slave_1 removed [ 1348.644838][ T6018] team0 (unregistering): Port device team_slave_0 removed [ 1350.097657][T14963] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1936'. [ 1350.541740][T14787] hsr_slave_0: entered promiscuous mode [ 1350.555692][T14787] hsr_slave_1: entered promiscuous mode [ 1350.575629][T14787] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1350.595179][T14787] Cannot create hsr debugfs directory [ 1350.662101][T14688] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1352.829829][T14873] bridge0: port 1(bridge_slave_0) entered blocking state [ 1352.844836][T14873] bridge0: port 1(bridge_slave_0) entered disabled state [ 1352.865838][T14873] bridge_slave_0: entered allmulticast mode [ 1353.012218][T14873] bridge_slave_0: entered promiscuous mode [ 1353.044329][T14873] bridge0: port 2(bridge_slave_1) entered blocking state [ 1353.380479][T14873] bridge0: port 2(bridge_slave_1) entered disabled state [ 1353.388470][T14873] bridge_slave_1: entered allmulticast mode [ 1353.396768][T14873] bridge_slave_1: entered promiscuous mode [ 1353.475445][T14989] xt_connbytes: Forcing CT accounting to be enabled [ 1353.483021][T14989] Cannot find set identified by id 0 to match [ 1355.924579][T14873] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1356.039485][T14873] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1356.533604][T14873] team0: Port device team_slave_0 added [ 1356.578847][T14873] team0: Port device team_slave_1 added [ 1356.879743][T14873] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1356.879765][T14873] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1356.879828][T14873] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1356.920279][T14873] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1356.920302][T14873] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1356.920362][T14873] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1357.160239][T15007] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1357.271779][T14873] hsr_slave_0: entered promiscuous mode [ 1357.292451][T14873] hsr_slave_1: entered promiscuous mode [ 1357.301842][T14873] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1357.301868][T14873] Cannot create hsr debugfs directory [ 1358.267431][T14688] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1358.959370][T14787] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1358.996799][T14787] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1359.026698][T14787] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1359.167920][T14787] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1359.634902][T14787] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1359.667844][T14787] 8021q: adding VLAN 0 to HW filter on device team0 [ 1359.700929][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 1359.708185][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1359.758532][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 1359.765730][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1359.987927][T14873] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1360.117509][T14873] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1360.148011][T14873] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1360.235821][T14873] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1361.036267][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 1361.055416][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 1361.248050][T10899] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci4/hci4:201' [ 1361.259325][T10899] CPU: 1 UID: 0 PID: 10899 Comm: kworker/u9:2 Not tainted 6.16.0-rc5-syzkaller-00266-g3f31a806a62e #0 PREEMPT(full) [ 1361.259362][T10899] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1361.259380][T10899] Workqueue: hci4 hci_rx_work [ 1361.259408][T10899] Call Trace: [ 1361.259419][T10899] [ 1361.259429][T10899] dump_stack_lvl+0x189/0x250 [ 1361.259465][T10899] ? kernfs_path_from_node+0x2c/0x260 [ 1361.259505][T10899] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1361.259538][T10899] ? __pfx__printk+0x10/0x10 [ 1361.259577][T10899] ? kernfs_path_from_node+0x2c/0x260 [ 1361.259613][T10899] ? kernfs_path_from_node+0x2c/0x260 [ 1361.259651][T10899] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1361.259682][T10899] ? kernfs_path_from_node+0x22c/0x260 [ 1361.259718][T10899] ? kernfs_path_from_node+0x2c/0x260 [ 1361.259759][T10899] sysfs_create_dir_ns+0x259/0x280 [ 1361.259799][T10899] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 1361.259839][T10899] ? do_raw_spin_unlock+0x122/0x240 [ 1361.259884][T10899] kobject_add_internal+0x59f/0xb40 [ 1361.259926][T10899] kobject_add+0x155/0x220 [ 1361.259952][T10899] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1361.259988][T10899] ? __pfx_kobject_add+0x10/0x10 [ 1361.260016][T10899] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1361.260046][T10899] ? _raw_spin_unlock+0x28/0x50 [ 1361.260082][T10899] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1361.260116][T10899] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1361.260145][T10899] ? get_device_parent+0x366/0x3a0 [ 1361.260185][T10899] device_add+0x408/0xb50 [ 1361.260223][T10899] hci_conn_add_sysfs+0xd5/0x1e0 [ 1361.260271][T10899] le_conn_complete_evt+0xc3a/0x1220 [ 1361.260321][T10899] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 1361.260354][T10899] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1361.260383][T10899] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 1361.260408][T10899] ? __asan_memcpy+0x40/0x70 [ 1361.260438][T10899] ? __pfx___mutex_lock+0x10/0x10 [ 1361.260464][T10899] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1361.260494][T10899] ? skb_pull_data+0xfb/0x200 [ 1361.260542][T10899] hci_le_conn_complete_evt+0x187/0x450 [ 1361.260582][T10899] hci_event_packet+0x78f/0x1200 [ 1361.260629][T10899] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 1361.260662][T10899] ? __pfx_hci_event_packet+0x10/0x10 [ 1361.260708][T10899] ? kcov_remote_start+0x4d3/0x7f0 [ 1361.260748][T10899] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1361.260778][T10899] ? lockdep_hardirqs_on+0x90/0x150 [ 1361.260823][T10899] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1361.260852][T10899] ? hci_send_to_monitor+0xe2/0x570 [ 1361.260890][T10899] hci_rx_work+0x46a/0xe80 [ 1361.260925][T10899] ? process_scheduled_works+0x9ef/0x17b0 [ 1361.260959][T10899] process_scheduled_works+0xae1/0x17b0 [ 1361.261026][T10899] ? __pfx_process_scheduled_works+0x10/0x10 [ 1361.261066][T10899] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1361.261107][T10899] worker_thread+0x8a0/0xda0 [ 1361.261143][T10899] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 1361.261193][T10899] ? __kthread_parkme+0x7b/0x200 [ 1361.261238][T10899] kthread+0x711/0x8a0 [ 1361.261285][T10899] ? __pfx_worker_thread+0x10/0x10 [ 1361.261315][T10899] ? __pfx_kthread+0x10/0x10 [ 1361.261349][T10899] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1361.261383][T10899] ? _raw_spin_unlock_irq+0x23/0x50 [ 1361.261420][T10899] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1361.261449][T10899] ? lockdep_hardirqs_on+0x9c/0x150 [ 1361.261487][T10899] ? __pfx_kthread+0x10/0x10 [ 1361.261527][T10899] ret_from_fork+0x3fc/0x770 [ 1361.261559][T10899] ? __pfx_ret_from_fork+0x10/0x10 [ 1361.261596][T10899] ? __switch_to_asm+0x39/0x70 [ 1361.261630][T10899] ? __switch_to_asm+0x33/0x70 [ 1361.261663][T10899] ? __pfx_kthread+0x10/0x10 [ 1361.261703][T10899] ret_from_fork_asm+0x1a/0x30 [ 1361.261758][T10899] [ 1361.261793][T10899] kobject: kobject_add_internal failed for hci4:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 1361.662192][T10899] Bluetooth: hci4: failed to register connection device [ 1362.325330][T14873] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1362.517741][T14873] 8021q: adding VLAN 0 to HW filter on device team0 [ 1363.084591][T11732] bridge0: port 1(bridge_slave_0) entered blocking state [ 1363.091783][T11732] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1364.244707][T11732] bridge0: port 2(bridge_slave_1) entered blocking state [ 1364.251904][T11732] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1364.404513][ T12] bridge_slave_1: left allmulticast mode [ 1364.410213][ T12] bridge_slave_1: left promiscuous mode [ 1364.520808][T15056] netlink: 'syz.5.1954': attribute type 10 has an invalid length. [ 1364.695796][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 1365.038578][T15063] Bluetooth: MGMT ver 1.23 [ 1365.146827][ T12] bridge_slave_0: left allmulticast mode [ 1365.176172][T10899] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1365.206227][T10899] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1365.221068][T10899] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1365.235130][T10899] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1365.248103][ T12] bridge_slave_0: left promiscuous mode [ 1365.252836][T10899] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1365.254520][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 1365.913720][T15071] netlink: 'syz.4.1956': attribute type 10 has an invalid length. [ 1366.849780][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1366.881052][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1366.904325][ T12] bond0 (unregistering): Released all slaves [ 1366.951336][T15075] IPVS: Error connecting to the multicast addr [ 1367.046968][T14787] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1367.210246][T15064] virt_wifi0 speed is unknown, defaulting to 1000 [ 1367.302665][T15079] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1957'. [ 1367.493720][T13285] Bluetooth: hci5: command tx timeout [ 1368.030112][ T12] hsr_slave_0: left promiscuous mode [ 1368.093795][ T12] hsr_slave_1: left promiscuous mode [ 1368.116280][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1368.219031][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1368.385984][T15089] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1960'. [ 1369.263028][ T12] team0 (unregistering): Port device team_slave_1 removed [ 1369.452524][ T12] team0 (unregistering): Port device team_slave_0 removed [ 1369.572303][T13285] Bluetooth: hci5: command tx timeout [ 1370.150210][T15100] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1371.652239][T13285] Bluetooth: hci5: command tx timeout [ 1372.756009][T15064] lo speed is unknown, defaulting to 1000 [ 1372.770907][T15105] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1963'. [ 1373.262299][T15120] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 1373.358072][T15120] F2FS-fs (loop3): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1373.368021][T15120] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 1373.382123][T15120] F2FS-fs (loop3): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1373.390039][T15120] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 1373.733307][T13285] Bluetooth: hci5: command tx timeout [ 1374.408855][T15131] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1967'. [ 1374.964438][T15064] chnl_net:caif_netlink_parms(): no params data found [ 1375.350032][T15064] bridge0: port 1(bridge_slave_0) entered blocking state [ 1375.382265][T15064] bridge0: port 1(bridge_slave_0) entered disabled state [ 1375.389483][T15064] bridge_slave_0: entered allmulticast mode [ 1375.424173][T15064] bridge_slave_0: entered promiscuous mode [ 1375.453867][T15064] bridge0: port 2(bridge_slave_1) entered blocking state [ 1375.461020][T15064] bridge0: port 2(bridge_slave_1) entered disabled state [ 1375.502330][T15064] bridge_slave_1: entered allmulticast mode [ 1375.522664][T15064] bridge_slave_1: entered promiscuous mode [ 1375.546765][T14873] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1375.809384][T15064] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1375.834686][T15064] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1376.020824][T15064] team0: Port device team_slave_0 added [ 1376.056507][T15064] team0: Port device team_slave_1 added [ 1376.264161][T15064] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1376.271161][T15064] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1376.304520][T15064] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1376.438206][T15064] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1376.463509][T15064] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1376.522387][T15064] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1376.679989][T14873] veth0_vlan: entered promiscuous mode [ 1376.814140][T15064] hsr_slave_0: entered promiscuous mode [ 1376.820750][T15064] hsr_slave_1: entered promiscuous mode [ 1376.902946][T15064] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1376.910550][T15064] Cannot create hsr debugfs directory [ 1376.945520][T14873] veth1_vlan: entered promiscuous mode [ 1377.545065][T15150] x_tables: arp_tables: CLASSIFY target: used from hooks INPUT, but only usable from FORWARD/OUTPUT [ 1378.733933][T14873] veth0_macvtap: entered promiscuous mode [ 1379.498570][T14873] veth1_macvtap: entered promiscuous mode [ 1381.094903][T10899] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1381.096400][T10899] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1381.117578][T10899] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1381.127551][T10899] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1381.138849][T10899] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1381.208942][T11740] bridge_slave_1: left allmulticast mode [ 1381.208972][T11740] bridge_slave_1: left promiscuous mode [ 1381.209189][T11740] bridge0: port 2(bridge_slave_1) entered disabled state [ 1381.302490][T11740] bridge_slave_0: left allmulticast mode [ 1381.302513][T11740] bridge_slave_0: left promiscuous mode [ 1381.302681][T11740] bridge0: port 1(bridge_slave_0) entered disabled state [ 1383.183137][T13285] Bluetooth: hci0: command tx timeout [ 1383.673002][T15191] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1979'. [ 1384.454120][T15194] x_tables: arp_tables: CLASSIFY target: used from hooks INPUT, but only usable from FORWARD/OUTPUT [ 1385.125370][T11740] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1385.134942][T11740] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1385.137176][T11740] bond0 (unregistering): Released all slaves [ 1385.249128][T14873] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1385.253571][T13285] Bluetooth: hci0: command tx timeout [ 1385.905630][T14873] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1386.009648][T14873] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1386.009693][T14873] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1386.009730][T14873] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1386.009765][T14873] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1386.144247][T15202] Cannot find set identified by id 0 to match [ 1386.235602][T11740] hsr_slave_0: left promiscuous mode [ 1386.271840][T11740] hsr_slave_1: left promiscuous mode [ 1386.287416][T11740] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1386.313102][T11740] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1387.332374][T13285] Bluetooth: hci0: command tx timeout [ 1388.812153][ T6050] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 1388.962235][ T6050] usb 6-1: device descriptor read/64, error -71 [ 1389.226911][ T6050] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 1389.246154][T11740] team0 (unregistering): Port device team_slave_1 removed [ 1389.313856][T11740] team0 (unregistering): Port device team_slave_0 removed [ 1389.371253][ T6050] usb 6-1: device descriptor read/64, error -71 [ 1389.418154][T13285] Bluetooth: hci0: command tx timeout [ 1389.542187][ T6050] usb usb6-port1: attempt power cycle [ 1389.902279][ T6050] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 1389.952883][ T6050] usb 6-1: device descriptor read/8, error -71 [ 1390.214423][ T6050] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 1390.320273][ T6050] usb 6-1: device descriptor read/8, error -71 [ 1390.477019][ T6050] usb usb6-port1: unable to enumerate USB device [ 1392.033392][T15176] virt_wifi0 speed is unknown, defaulting to 1000 [ 1392.041841][T15176] lo speed is unknown, defaulting to 1000 [ 1392.729427][T15176] chnl_net:caif_netlink_parms(): no params data found [ 1392.991580][T15064] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1393.085095][ T8955] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1393.170258][T15064] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1393.213201][T15064] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1393.235672][T15176] bridge0: port 1(bridge_slave_0) entered blocking state [ 1393.253574][T15176] bridge0: port 1(bridge_slave_0) entered disabled state [ 1393.260808][T15176] bridge_slave_0: entered allmulticast mode [ 1393.275478][T15176] bridge_slave_0: entered promiscuous mode [ 1393.288487][T15176] bridge0: port 2(bridge_slave_1) entered blocking state [ 1393.297540][T15176] bridge0: port 2(bridge_slave_1) entered disabled state [ 1393.309149][T15176] bridge_slave_1: entered allmulticast mode [ 1393.321703][T15176] bridge_slave_1: entered promiscuous mode [ 1393.357313][ T8955] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1393.379872][T15064] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1393.504242][ T8955] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1393.545141][T15176] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1393.579950][T15176] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1393.684539][ T8955] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1393.905800][T15240] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1990'. [ 1394.443356][T15245] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1395.040557][T15246] netlink: 'syz.4.1992': attribute type 10 has an invalid length. [ 1395.564332][T15176] team0: Port device team_slave_0 added [ 1395.623590][T15176] team0: Port device team_slave_1 added [ 1395.641978][T15244] IPVS: Error connecting to the multicast addr [ 1396.380524][T15176] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1396.399860][T15176] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1396.425874][ C0] vkms_vblank_simulate: vblank timer overrun [ 1396.452675][T15176] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1396.465968][T15176] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1396.473119][T15176] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1396.499721][T15176] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1396.665234][T10899] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1396.675860][T10899] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1396.684653][T10899] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1396.693023][T10899] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1397.426713][T10899] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1397.602727][T15176] hsr_slave_0: entered promiscuous mode [ 1397.633665][T15176] hsr_slave_1: entered promiscuous mode [ 1397.730452][T15264] x_tables: arp_tables: CLASSIFY target: used from hooks INPUT, but only usable from FORWARD/OUTPUT [ 1397.848169][T15176] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1397.859178][T15176] Cannot create hsr debugfs directory [ 1398.541315][T15268] x_tables: arp_tables: CLASSIFY target: used from hooks INPUT, but only usable from FORWARD/OUTPUT [ 1398.622686][ T8955] bridge_slave_1: left allmulticast mode [ 1398.622709][ T8955] bridge_slave_1: left promiscuous mode [ 1398.622902][ T8955] bridge0: port 2(bridge_slave_1) entered disabled state [ 1398.625660][ T8955] bridge_slave_0: left allmulticast mode [ 1398.625678][ T8955] bridge_slave_0: left promiscuous mode [ 1398.625863][ T8955] bridge0: port 1(bridge_slave_0) entered disabled state [ 1399.506458][T15274] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1399.563522][T10899] Bluetooth: hci1: command tx timeout [ 1403.139615][T10899] Bluetooth: hci1: command tx timeout [ 1403.222389][T15288] syz.5.2004 (15288): drop_caches: 2 [ 1403.646878][ T8955] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1403.682813][ T8955] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1403.718703][ T8955] bond0 (unregistering): Released all slaves [ 1403.759279][T15258] virt_wifi0 speed is unknown, defaulting to 1000 [ 1403.789394][T15279] workqueue: Failed to create a rescuer kthread for wq "bond11": -EINTR [ 1403.816560][T15258] lo speed is unknown, defaulting to 1000 [ 1404.054263][T15064] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1404.587967][ T8955] hsr_slave_0: left promiscuous mode [ 1404.597006][ T8955] hsr_slave_1: left promiscuous mode [ 1404.605729][ T8955] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1404.637754][ T8955] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1404.660037][ T8955] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1404.686284][ T8955] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1405.192141][T10899] Bluetooth: hci1: command tx timeout [ 1405.201059][ T8955] veth1_macvtap: left promiscuous mode [ 1405.213267][ T8955] veth0_macvtap: left promiscuous mode [ 1405.221513][ T8955] veth1_vlan: left promiscuous mode [ 1405.226922][ T8955] veth0_vlan: left promiscuous mode [ 1406.374634][T15304] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 1406.642093][T15305] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1406.651009][T15305] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 1406.662135][T15305] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1406.671139][T15305] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 1407.252325][T10899] Bluetooth: hci1: command tx timeout [ 1407.331765][ T8955] team0 (unregistering): Port device team_slave_1 removed [ 1407.401580][ T8955] team0 (unregistering): Port device team_slave_0 removed [ 1408.686756][T15064] 8021q: adding VLAN 0 to HW filter on device team0 [ 1408.863046][T11740] bridge0: port 1(bridge_slave_0) entered blocking state [ 1408.863165][T11740] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1408.866750][T11740] bridge0: port 2(bridge_slave_1) entered blocking state [ 1408.866860][T11740] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1410.569207][T15324] netlink: 104 bytes leftover after parsing attributes in process `syz.5.2014'. [ 1410.619233][T15258] chnl_net:caif_netlink_parms(): no params data found [ 1411.352639][ T6050] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 1411.492649][ T6050] usb 4-1: device descriptor read/64, error -71 [ 1412.282233][ T6050] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 1412.472208][ T6050] usb 4-1: device descriptor read/64, error -71 [ 1412.702423][ T6050] usb usb4-port1: attempt power cycle [ 1412.851658][T15258] bridge0: port 1(bridge_slave_0) entered blocking state [ 1412.862831][T15258] bridge0: port 1(bridge_slave_0) entered disabled state [ 1412.880222][T15258] bridge_slave_0: entered allmulticast mode [ 1412.900455][T15258] bridge_slave_0: entered promiscuous mode [ 1413.021837][T15258] bridge0: port 2(bridge_slave_1) entered blocking state [ 1413.050577][T15258] bridge0: port 2(bridge_slave_1) entered disabled state [ 1413.052109][ T6050] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 1413.085699][T15258] bridge_slave_1: entered allmulticast mode [ 1413.122438][T15258] bridge_slave_1: entered promiscuous mode [ 1413.133109][ T6050] usb 4-1: device descriptor read/8, error -71 [ 1413.398654][ T6050] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 1413.958022][T15258] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1414.006380][ T6050] usb 4-1: device descriptor read/8, error -71 [ 1414.039889][T15064] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1414.078638][T15258] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1414.123157][ T6050] usb usb4-port1: unable to enumerate USB device [ 1414.304465][T15353] x_tables: arp_tables: CLASSIFY target: used from hooks INPUT, but only usable from FORWARD/OUTPUT [ 1414.782082][ T30] audit: type=1326 audit(1752389249.971:141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15348 comm="syz.5.2018" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fafcbd8e929 code=0x7fc00000 [ 1414.941776][T15176] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1416.594302][T15258] team0: Port device team_slave_0 added [ 1416.634273][T15258] team0: Port device team_slave_1 added [ 1416.684969][T15176] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1416.747198][T15176] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1417.821277][T15176] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1418.351416][T15258] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1418.382376][T15258] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1418.408296][ C0] vkms_vblank_simulate: vblank timer overrun [ 1418.441613][T15258] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1418.629790][ T10] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 1418.759608][T15258] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1418.883324][T15258] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1418.989544][ T6050] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 1418.997103][ T10] usb 4-1: device descriptor read/64, error -71 [ 1419.066164][T15258] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1419.167413][ T6050] usb 5-1: device descriptor read/64, error -71 [ 1419.214936][T15392] netlink: 'syz.5.2027': attribute type 10 has an invalid length. [ 1419.352405][ T10] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 1419.622237][ T10] usb 4-1: device descriptor read/64, error -71 [ 1419.652553][ T6050] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 1419.748951][ T10] usb usb4-port1: attempt power cycle [ 1419.805745][T15258] hsr_slave_0: entered promiscuous mode [ 1419.832712][T15258] hsr_slave_1: entered promiscuous mode [ 1419.858675][T15258] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1419.875226][T15258] Cannot create hsr debugfs directory [ 1419.882208][ T6050] usb 5-1: device descriptor read/64, error -71 [ 1419.994432][ T6050] usb usb5-port1: attempt power cycle [ 1420.102627][ T10] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 1420.133147][ T10] usb 4-1: device descriptor read/8, error -71 [ 1420.632312][ T6050] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 1420.702114][ T6050] usb 5-1: device descriptor read/8, error -71 [ 1420.713241][ T10] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 1420.763035][ T10] usb 4-1: device descriptor read/8, error -71 [ 1420.779281][T15176] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1420.872501][ T10] usb usb4-port1: unable to enumerate USB device [ 1421.012240][ T6050] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 1421.029508][T15176] 8021q: adding VLAN 0 to HW filter on device team0 [ 1421.076000][ T6648] bridge0: port 1(bridge_slave_0) entered blocking state [ 1421.083233][ T6648] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1421.179786][ T1144] bridge0: port 2(bridge_slave_1) entered blocking state [ 1421.187004][ T1144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1421.264982][ T6050] usb 5-1: device not accepting address 12, error -71 [ 1421.280644][ T6050] usb usb5-port1: unable to enumerate USB device [ 1421.353978][T15176] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1421.699858][T15258] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1421.734237][T15258] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1421.749231][T15258] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1421.875576][T15258] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1422.004095][T15176] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1422.383178][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 1422.389716][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 1422.487488][T15258] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1422.565460][T15258] 8021q: adding VLAN 0 to HW filter on device team0 [ 1422.592621][ T1144] bridge0: port 1(bridge_slave_0) entered blocking state [ 1422.599768][ T1144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1422.632872][ T6648] bridge_slave_1: left allmulticast mode [ 1422.638529][ T6648] bridge_slave_1: left promiscuous mode [ 1422.682442][ T6648] bridge0: port 2(bridge_slave_1) entered disabled state [ 1422.785597][ T6648] bridge_slave_0: left allmulticast mode [ 1422.801632][ T6648] bridge_slave_0: left promiscuous mode [ 1422.808822][ T6648] bridge0: port 1(bridge_slave_0) entered disabled state [ 1423.173031][T15428] F2FS-fs (loop9): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1423.183325][T15428] F2FS-fs (loop9): Can't find valid F2FS filesystem in 1th superblock [ 1423.209604][T15428] F2FS-fs (loop9): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1423.297508][T15428] F2FS-fs (loop9): Can't find valid F2FS filesystem in 2th superblock [ 1424.239819][T13285] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1424.248969][T13285] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1424.257780][T13285] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1424.270676][T13285] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1424.279134][T13285] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1424.386355][ T6648] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1424.428962][ T6648] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1424.478495][ T6648] bond0 (unregistering): Released all slaves [ 1424.552436][T11738] bridge0: port 2(bridge_slave_1) entered blocking state [ 1424.559562][T11738] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1425.308086][ T6648] hsr_slave_0: left promiscuous mode [ 1425.392226][ T6648] hsr_slave_1: left promiscuous mode [ 1425.409128][ T6648] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1425.647119][ T6648] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1425.708201][T15437] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 1425.782886][T15438] F2FS-fs (loop5): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1425.802295][T15438] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 1425.844121][T15438] F2FS-fs (loop5): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1425.861582][T15438] F2FS-fs (loop5): Can't find valid F2FS filesystem in 2th superblock [ 1426.373340][T10899] Bluetooth: hci5: command tx timeout [ 1428.363014][T15458] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1428.466975][T10899] Bluetooth: hci5: command tx timeout [ 1430.532206][T10899] Bluetooth: hci5: command tx timeout [ 1432.578540][T15484] x_tables: arp_tables: CLASSIFY target: used from hooks INPUT, but only usable from FORWARD/OUTPUT [ 1432.622974][T10899] Bluetooth: hci5: command tx timeout [ 1432.786548][ T6648] team0 (unregistering): Port device team_slave_1 removed [ 1433.143063][ T6648] team0 (unregistering): Port device team_slave_0 removed [ 1434.685323][ T5936] kernel write not supported for file /dsp (pid: 5936 comm: kworker/1:5) [ 1436.461785][T15434] virt_wifi0 speed is unknown, defaulting to 1000 [ 1437.597502][T15434] lo speed is unknown, defaulting to 1000 [ 1437.974602][T15517] x_tables: arp_tables: CLASSIFY target: used from hooks INPUT, but only usable from FORWARD/OUTPUT [ 1438.749763][T15434] chnl_net:caif_netlink_parms(): no params data found [ 1439.184535][T15434] bridge0: port 1(bridge_slave_0) entered blocking state [ 1439.191710][T15434] bridge0: port 1(bridge_slave_0) entered disabled state [ 1439.231213][T15434] bridge_slave_0: entered allmulticast mode [ 1439.249768][T15434] bridge_slave_0: entered promiscuous mode [ 1439.280529][T15258] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1439.370855][T15434] bridge0: port 2(bridge_slave_1) entered blocking state [ 1439.380826][T15434] bridge0: port 2(bridge_slave_1) entered disabled state [ 1439.402594][T15434] bridge_slave_1: entered allmulticast mode [ 1439.422356][T15434] bridge_slave_1: entered promiscuous mode [ 1439.559337][T15434] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1439.586429][T15434] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1442.102142][ T5936] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 1442.211264][T15434] team0: Port device team_slave_0 added [ 1442.243970][T15434] team0: Port device team_slave_1 added [ 1442.272913][ T5936] usb 6-1: device descriptor read/64, error -71 [ 1443.452144][ T5936] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 1443.896286][T15562] overlayfs: missing 'lowerdir' [ 1443.923657][T15434] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1443.951000][T15434] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1443.987827][T15562] loop4: detected capacity change from 0 to 1024 [ 1444.027272][T15562] EXT4-fs (loop4): bad geometry: block count 281470681743872 exceeds size of device (512 blocks) [ 1444.048212][T15434] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1444.062079][T15566] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1444.075544][T15566] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1444.222883][T15566] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1444.232952][T15566] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1444.240966][T15566] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1445.112896][T15434] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1445.119893][T15434] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1445.166326][T15434] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1445.587128][T15434] hsr_slave_0: entered promiscuous mode [ 1445.604802][T15434] hsr_slave_1: entered promiscuous mode [ 1445.621362][T15434] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1445.639198][T15434] Cannot create hsr debugfs directory [ 1445.742992][T15564] loop5: detected capacity change from 0 to 40427 [ 1445.757937][T15258] veth0_vlan: entered promiscuous mode [ 1445.793777][T15564] F2FS-fs (loop5): invalid crc value [ 1445.873038][T15565] virt_wifi0 speed is unknown, defaulting to 1000 [ 1445.964877][T15258] veth1_vlan: entered promiscuous mode [ 1445.994308][T15565] lo speed is unknown, defaulting to 1000 [ 1446.111911][T15564] F2FS-fs (loop5): Start checkpoint disabled! [ 1446.153294][T15564] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e6 [ 1446.288087][ T9413] kworker/u8:17: attempt to access beyond end of device [ 1446.288087][ T9413] loop5: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1446.303920][T15566] Bluetooth: hci0: command tx timeout [ 1446.322251][ T5936] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 1446.344492][ T9413] CPU: 0 UID: 0 PID: 9413 Comm: kworker/u8:17 Not tainted 6.16.0-rc5-syzkaller-00266-g3f31a806a62e #0 PREEMPT(full) [ 1446.344525][ T9413] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1446.344541][ T9413] Workqueue: writeback wb_workfn (flush-7:5) [ 1446.344588][ T9413] Call Trace: [ 1446.344598][ T9413] [ 1446.344609][ T9413] dump_stack_lvl+0x189/0x250 [ 1446.344648][ T9413] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1446.344676][ T9413] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 1446.344716][ T9413] ? __pfx_queue_work_on+0x10/0x10 [ 1446.344749][ T9413] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1446.344778][ T9413] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 1446.344835][ T9413] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 1446.344875][ T9413] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1446.344903][ T9413] ? f2fs_hw_is_readonly+0x39b/0x470 [ 1446.344948][ T9413] f2fs_handle_critical_error+0x37c/0x540 [ 1446.344995][ T9413] f2fs_write_end_io+0x495/0x810 [ 1446.345017][ T9413] ? blkg_put+0x22/0x240 [ 1446.345072][ T9413] __submit_merged_bio+0x27a/0x6a0 [ 1446.345120][ T9413] __submit_merged_write_cond+0x255/0x530 [ 1446.345168][ T9413] f2fs_write_data_pages+0x261d/0x3000 [ 1446.345266][ T9413] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 1446.345328][ T9413] ? __pfx_f2fs_available_free_memory+0x10/0x10 [ 1446.345355][ T9413] ? stack_trace_save+0x9c/0xe0 [ 1446.345441][ T9413] ? __pfx_f2fs_balance_fs_bg+0x10/0x10 [ 1446.345498][ T9413] ? trace_f2fs_writepages+0x7f/0x200 [ 1446.345538][ T9413] ? f2fs_write_node_pages+0x478/0x6e0 [ 1446.345582][ T9413] ? __pfx_f2fs_write_node_pages+0x10/0x10 [ 1446.345628][ T9413] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1446.345666][ T9413] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 1446.345709][ T9413] do_writepages+0x32e/0x550 [ 1446.345744][ T9413] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1446.345773][ T9413] ? reacquire_held_locks+0x127/0x1d0 [ 1446.345804][ T9413] ? writeback_sb_inodes+0x372/0x1000 [ 1446.345846][ T9413] __writeback_single_inode+0x145/0xff0 [ 1446.345875][ T9413] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1446.345904][ T9413] ? do_raw_spin_unlock+0x122/0x240 [ 1446.345948][ T9413] writeback_sb_inodes+0x6b5/0x1000 [ 1446.345998][ T9413] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1446.346044][ T9413] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 1446.346135][ T9413] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1446.346164][ T9413] ? rcu_is_watching+0x15/0xb0 [ 1446.346194][ T9413] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1446.346236][ T9413] wb_writeback+0x43b/0xaf0 [ 1446.346280][ T9413] ? queue_io+0x3a1/0x590 [ 1446.346313][ T9413] ? __pfx_wb_writeback+0x10/0x10 [ 1446.346355][ T9413] ? _raw_spin_unlock_irq+0x23/0x50 [ 1446.346400][ T9413] wb_workfn+0x409/0xef0 [ 1446.346463][ T9413] ? __pfx_wb_workfn+0x10/0x10 [ 1446.346508][ T9413] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1446.346537][ T9413] ? __lock_acquire+0xab9/0xd20 [ 1446.346580][ T9413] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1446.346614][ T9413] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1446.346649][ T9413] ? _raw_spin_unlock_irq+0x23/0x50 [ 1446.346685][ T9413] ? process_scheduled_works+0x9ef/0x17b0 [ 1446.346714][ T9413] ? process_scheduled_works+0x9ef/0x17b0 [ 1446.346747][ T9413] process_scheduled_works+0xae1/0x17b0 [ 1446.346822][ T9413] ? __pfx_process_scheduled_works+0x10/0x10 [ 1446.346864][ T9413] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1446.346906][ T9413] worker_thread+0x8a0/0xda0 [ 1446.346942][ T9413] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 1446.346993][ T9413] ? __kthread_parkme+0x7b/0x200 [ 1446.347041][ T9413] kthread+0x711/0x8a0 [ 1446.347083][ T9413] ? __pfx_worker_thread+0x10/0x10 [ 1446.347113][ T9413] ? __pfx_kthread+0x10/0x10 [ 1446.347147][ T9413] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1446.347181][ T9413] ? _raw_spin_unlock_irq+0x23/0x50 [ 1446.347216][ T9413] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1446.347244][ T9413] ? lockdep_hardirqs_on+0x9c/0x150 [ 1446.347286][ T9413] ? __pfx_kthread+0x10/0x10 [ 1446.347326][ T9413] ret_from_fork+0x3fc/0x770 [ 1446.347359][ T9413] ? __pfx_ret_from_fork+0x10/0x10 [ 1446.347397][ T9413] ? __switch_to_asm+0x39/0x70 [ 1446.347430][ T9413] ? __switch_to_asm+0x33/0x70 [ 1446.347463][ T9413] ? __pfx_kthread+0x10/0x10 [ 1446.347502][ T9413] ret_from_fork_asm+0x1a/0x30 [ 1446.347562][ T9413] [ 1446.347572][ T9413] F2FS-fs (loop5): Stopped filesystem due to reason: 3 [ 1446.477199][ T5936] usb 4-1: Using ep0 maxpacket: 32 [ 1446.775458][ T5936] usb 4-1: config index 0 descriptor too short (expected 29220, got 36) [ 1446.790051][ T5936] usb 4-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 1446.798845][ T5936] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 1446.842196][ T5936] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1446.851866][ T5936] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1446.879518][T11738] bridge_slave_1: left allmulticast mode [ 1446.890325][T11738] bridge_slave_1: left promiscuous mode [ 1446.892343][ T5936] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1446.906342][T11738] bridge0: port 2(bridge_slave_1) entered disabled state [ 1446.960363][ T5936] usb 4-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 1446.970809][T11738] bridge_slave_0: left allmulticast mode [ 1446.978584][ T5936] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1446.995204][ T5936] usb 4-1: config 0 descriptor?? [ 1447.000405][T11738] bridge_slave_0: left promiscuous mode [ 1447.010663][T11738] bridge0: port 1(bridge_slave_0) entered disabled state [ 1448.305161][ T5936] usblp 4-1:0.0: usblp0: USB Bidirectional printer dev 25 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 1448.320076][ T5936] usb 4-1: USB disconnect, device number 25 [ 1448.343341][ T5936] usblp0: removed [ 1448.445521][T15566] Bluetooth: hci0: command tx timeout [ 1449.541490][T11738] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1449.561123][T11738] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1449.572894][T11738] bond0 (unregistering): Released all slaves [ 1449.684126][T15609] loop3: detected capacity change from 0 to 256 [ 1449.776226][T15609] loop3: detected capacity change from 0 to 512 [ 1449.829611][T15609] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 1449.843091][T15609] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 1449.891283][T15609] EXT4-fs (loop3): 1 truncate cleaned up [ 1449.911699][T15609] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1450.542181][T15566] Bluetooth: hci0: command tx timeout [ 1452.000503][T15258] veth0_macvtap: entered promiscuous mode [ 1452.011816][T15613] loop4: detected capacity change from 0 to 2048 [ 1452.078797][T15613] loop4: p1 p2 < > p3 < p5 p6 > p4 [ 1452.093338][T11738] hsr_slave_0: left promiscuous mode [ 1452.112508][T15613] loop4: partition table partially beyond EOD, truncated [ 1452.119658][T15613] loop4: p1 size 917504 extends beyond EOD, truncated [ 1452.129739][T11738] hsr_slave_1: left promiscuous mode [ 1452.141501][T11738] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1452.153270][ T5848] ================================================================== [ 1452.161337][ T5848] BUG: KASAN: slab-use-after-free in __list_del_entry_valid_or_report+0x92/0x190 [ 1452.168952][T15613] loop4: p2 start 4278190080 is beyond EOD, [ 1452.170449][ T5848] Read of size 8 at addr ffff88807d702558 by task syz-executor/5848 [ 1452.170474][ T5848] [ 1452.186687][ T5848] CPU: 0 UID: 0 PID: 5848 Comm: syz-executor Not tainted 6.16.0-rc5-syzkaller-00266-g3f31a806a62e #0 PREEMPT(full) [ 1452.186718][ T5848] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1452.186735][ T5848] Call Trace: [ 1452.186744][ T5848] [ 1452.186754][ T5848] dump_stack_lvl+0x189/0x250 [ 1452.186787][ T5848] ? __kasan_check_byte+0x12/0x40 [ 1452.186820][ T5848] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1452.186849][ T5848] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1452.186878][ T5848] ? lock_release+0x4b/0x3e0 [ 1452.186908][ T5848] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1452.186936][ T5848] ? __virt_addr_valid+0x4a5/0x5c0 [ 1452.186972][ T5848] print_report+0xca/0x230 [ 1452.186995][ T5848] ? __list_del_entry_valid_or_report+0x92/0x190 [ 1452.187033][ T5848] kasan_report+0x118/0x150 [ 1452.187066][ T5848] ? __list_del_entry_valid_or_report+0x92/0x190 [ 1452.187105][ T5848] __list_del_entry_valid_or_report+0x92/0x190 [ 1452.187141][ T5848] bt_accept_unlink+0x39/0x240 [ 1452.187171][ T5848] l2cap_sock_teardown_cb+0x17e/0x460 [ 1452.187212][ T5848] l2cap_chan_del+0xb5/0x5e0 [ 1452.187252][ T5848] l2cap_conn_del+0x388/0x680 [ 1452.187286][ T5848] ? __pfx_l2cap_disconn_cfm+0x10/0x10 [ 1452.187319][ T5848] hci_conn_hash_flush+0x10d/0x230 [ 1452.187357][ T5848] hci_dev_close_sync+0xaef/0x1330 [ 1452.187392][ T5848] ? __pfx_hci_dev_close_sync+0x10/0x10 [ 1452.187421][ T5848] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1452.187450][ T5848] ? up_write+0x1c4/0x420 [ 1452.187482][ T5848] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1452.187515][ T5848] hci_unregister_dev+0x21a/0x510 [ 1452.187541][ T5848] vhci_release+0x80/0xd0 [ 1452.187566][ T5848] ? __pfx_vhci_release+0x10/0x10 [ 1452.187590][ T5848] __fput+0x44c/0xa70 [ 1452.187634][ T5848] task_work_run+0x1d4/0x260 [ 1452.187675][ T5848] ? __pfx_task_work_run+0x10/0x10 [ 1452.187714][ T5848] ? kmem_cache_free+0x18f/0x400 [ 1452.187748][ T5848] do_exit+0x6b5/0x22e0 [ 1452.187783][ T5848] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1452.187816][ T5848] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1452.187854][ T5848] ? __pfx_do_exit+0x10/0x10 [ 1452.187893][ T5848] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1452.187924][ T5848] ? _raw_spin_unlock_irq+0x23/0x50 [ 1452.187961][ T5848] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1452.187990][ T5848] ? lockdep_hardirqs_on+0x9c/0x150 [ 1452.188036][ T5848] do_group_exit+0x21c/0x2d0 [ 1452.188076][ T5848] __x64_sys_exit_group+0x3f/0x40 [ 1452.188114][ T5848] x64_sys_call+0x21ba/0x21c0 [ 1452.188150][ T5848] do_syscall_64+0xfa/0x3b0 [ 1452.188176][ T5848] ? lockdep_hardirqs_on+0x9c/0x150 [ 1452.188215][ T5848] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1452.188240][ T5848] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1452.188268][ T5848] ? exc_page_fault+0x9f/0xf0 [ 1452.188308][ T5848] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1452.188333][ T5848] RIP: 0033:0x7feb30b8e929 [ 1452.188353][ T5848] Code: Unable to access opcode bytes at 0x7feb30b8e8ff. [ 1452.188366][ T5848] RSP: 002b:00007ffd6b3d25d8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 1452.188392][ T5848] RAX: ffffffffffffffda RBX: 00007feb30c1094a RCX: 00007feb30b8e929 [ 1452.188410][ T5848] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 1452.188426][ T5848] RBP: 0000000000000002 R08: 00007ffd6b3d0377 R09: 00007ffd6b3d3890 [ 1452.188444][ T5848] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffd6b3d3890 [ 1452.188460][ T5848] R13: 00007feb30c10925 R14: 000000000016221d R15: 00007ffd6b3d4960 [ 1452.188488][ T5848] [ 1452.188497][ T5848] [ 1452.219852][T15613] truncated [ 1452.221481][ T5848] Allocated by task 15476: [ 1452.231491][T15613] loop4: p4 size 12918784 extends beyond EOD, [ 1452.231640][ T5848] kasan_save_track+0x3e/0x80 [ 1452.262344][T15613] truncated [ 1452.263334][ T5848] __kasan_kmalloc+0x93/0xb0 [ 1452.292540][T15613] loop4: p5 size 917504 extends beyond EOD, [ 1452.294880][ T5848] __kmalloc_node_track_caller_noprof+0x271/0x4e0 [ 1452.299525][T15613] truncated [ 1452.304946][ T5848] kmalloc_reserve+0x136/0x290 [ 1452.304979][ T5848] __alloc_skb+0x142/0x2d0 [ 1452.305007][ T5848] _sctp_make_chunk+0x5e/0x430 [ 1452.305041][ T5848] sctp_make_datafrag_empty+0x122/0x230 [ 1452.305068][ T5848] sctp_datamsg_from_user+0x729/0xef0 [ 1452.305091][ T5848] sctp_sendmsg_to_asoc+0x1003/0x1810 [ 1452.305123][ T5848] sctp_sendmsg+0x1941/0x2810 [ 1452.305153][ T5848] __sock_sendmsg+0x19c/0x270 [ 1452.305174][ T5848] __sys_sendto+0x3bd/0x520 [ 1452.305201][ T5848] __x64_sys_sendto+0xde/0x100 [ 1452.305229][ T5848] do_syscall_64+0xfa/0x3b0 [ 1452.353933][T15613] loop4: p6 size 12918784 extends beyond EOD, [ 1452.354671][ T5848] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1452.359236][T15613] truncated [ 1452.364307][ T5848] [ 1452.364315][ T5848] Freed by task 15477: [ 1452.364330][ T5848] kasan_save_track+0x3e/0x80 [ 1452.364358][ T5848] kasan_save_free_info+0x46/0x50 [ 1452.647202][ T5848] __kasan_slab_free+0x62/0x70 [ 1452.651972][ T5848] kfree+0x18e/0x440 [ 1452.655866][ T5848] skb_release_data+0x62d/0x7c0 [ 1452.660721][ T5848] consume_skb+0x9e/0xf0 [ 1452.664964][ T5848] sctp_chunk_put+0x17d/0x200 [ 1452.669639][ T5848] sctp_datamsg_put+0x409/0x540 [ 1452.674483][ T5848] sctp_chunk_free+0x4a/0x60 [ 1452.679070][ T5848] __sctp_outq_teardown+0x7ab/0x9a0 [ 1452.684274][ T5848] sctp_association_free+0x240/0x7f0 [ 1452.689564][ T5848] sctp_do_sm+0x3eba/0x5a20 [ 1452.694061][ T5848] sctp_primitive_SHUTDOWN+0x98/0xc0 [ 1452.699349][ T5848] inet_shutdown+0x271/0x390 [ 1452.703933][ T5848] __x64_sys_shutdown+0x13f/0x1a0 [ 1452.708963][ T5848] do_syscall_64+0xfa/0x3b0 [ 1452.713462][ T5848] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1452.719349][ T5848] [ 1452.721661][ T5848] The buggy address belongs to the object at ffff88807d702000 [ 1452.721661][ T5848] which belongs to the cache kmalloc-2k of size 2048 [ 1452.735707][ T5848] The buggy address is located 1368 bytes inside of [ 1452.735707][ T5848] freed 2048-byte region [ffff88807d702000, ffff88807d702800) [ 1452.749672][ T5848] [ 1452.751987][ T5848] The buggy address belongs to the physical page: [ 1452.758387][ T5848] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88807d702000 pfn:0x7d700 [ 1452.768441][ T5848] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 1452.776931][ T5848] flags: 0xfff00000000240(workingset|head|node=0|zone=1|lastcpupid=0x7ff) [ 1452.785423][ T5848] page_type: f5(slab) [ 1452.789396][ T5848] raw: 00fff00000000240 ffff88801a442000 ffffea0001686010 ffffea00019ee210 [ 1452.797976][ T5848] raw: ffff88807d702000 0000000000080006 00000000f5000000 0000000000000000 [ 1452.806557][ T5848] head: 00fff00000000240 ffff88801a442000 ffffea0001686010 ffffea00019ee210 [ 1452.815223][ T5848] head: ffff88807d702000 0000000000080006 00000000f5000000 0000000000000000 [ 1452.823888][ T5848] head: 00fff00000000003 ffffea0001f5c001 00000000ffffffff 00000000ffffffff [ 1452.832556][ T5848] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 1452.841213][ T5848] page dumped because: kasan: bad access detected [ 1452.847611][ T5848] page_owner tracks the page as allocated [ 1452.853313][ T5848] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5840, tgid 5840 (syz-executor), ts 92746768642, free_ts 92697053143 [ 1452.874672][ T5848] post_alloc_hook+0x240/0x2a0 [ 1452.879439][ T5848] get_page_from_freelist+0x21e4/0x22c0 [ 1452.884989][ T5848] __alloc_frozen_pages_noprof+0x181/0x370 [ 1452.890805][ T5848] alloc_pages_mpol+0x232/0x4a0 [ 1452.895675][ T5848] allocate_slab+0x8a/0x3b0 [ 1452.900188][ T5848] ___slab_alloc+0xbfc/0x1480 [ 1452.904869][ T5848] __kvmalloc_node_noprof+0x429/0x5f0 [ 1452.910243][ T5848] page_pool_create_percpu+0x32a/0xbe0 [ 1452.915705][ T5848] nsim_open+0x3ba/0x860 [ 1452.919943][ T5848] __dev_open+0x470/0x880 [ 1452.925135][ T5848] __dev_change_flags+0x1ea/0x6d0 [ 1452.930162][ T5848] netif_change_flags+0x88/0x1a0 [ 1452.935102][ T5848] do_setlink+0xc55/0x41c0 [ 1452.939518][ T5848] rtnl_newlink+0x160b/0x1c70 [ 1452.944188][ T5848] rtnetlink_rcv_msg+0x7cf/0xb70 [ 1452.949123][ T5848] netlink_rcv_skb+0x208/0x470 [ 1452.953885][ T5848] page last free pid 5845 tgid 5845 stack trace: [ 1452.960200][ T5848] __free_frozen_pages+0xc71/0xe70 [ 1452.965314][ T5848] __slab_free+0x326/0x400 [ 1452.969733][ T5848] qlist_free_all+0x97/0x140 [ 1452.974319][ T5848] kasan_quarantine_reduce+0x148/0x160 [ 1452.979772][ T5848] __kasan_slab_alloc+0x22/0x80 [ 1452.984620][ T5848] __kvmalloc_node_noprof+0x2b0/0x5f0 [ 1452.989992][ T5848] alloc_netdev_mqs+0xa6/0x11e0 [ 1452.994853][ T5848] rtnl_create_link+0x31f/0xd10 [ 1452.999707][ T5848] rtnl_newlink_create+0x25c/0xb00 [ 1453.004816][ T5848] rtnl_newlink+0x16d6/0x1c70 [ 1453.009514][ T5848] rtnetlink_rcv_msg+0x7cf/0xb70 [ 1453.014444][ T5848] netlink_rcv_skb+0x208/0x470 [ 1453.019204][ T5848] netlink_unicast+0x75c/0x8e0 [ 1453.023963][ T5848] netlink_sendmsg+0x805/0xb30 [ 1453.028730][ T5848] __sock_sendmsg+0x21c/0x270 [ 1453.033419][ T5848] __sys_sendto+0x3bd/0x520 [ 1453.037920][ T5848] [ 1453.040232][ T5848] Memory state around the buggy address: [ 1453.045854][ T5848] ffff88807d702400: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1453.053906][ T5848] ffff88807d702480: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1453.061956][ T5848] >ffff88807d702500: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1453.070004][ T5848] ^ [ 1453.076938][ T5848] ffff88807d702580: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1453.085000][ T5848] ffff88807d702600: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1453.093058][ T5848] ================================================================== [ 1453.112245][T15566] Bluetooth: hci0: command tx timeout [ 1453.119298][ T5848] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 1453.126503][ T5848] CPU: 1 UID: 0 PID: 5848 Comm: syz-executor Not tainted 6.16.0-rc5-syzkaller-00266-g3f31a806a62e #0 PREEMPT(full) [ 1453.138662][ T5848] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1453.148726][ T5848] Call Trace: [ 1453.152008][ T5848] [ 1453.154942][ T5848] dump_stack_lvl+0x99/0x250 [ 1453.159552][ T5848] ? __asan_memcpy+0x40/0x70 [ 1453.164154][ T5848] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1453.169368][ T5848] ? __pfx__printk+0x10/0x10 [ 1453.173988][ T5848] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1453.179638][ T5848] panic+0x2db/0x790 [ 1453.183552][ T5848] ? __pfx_panic+0x10/0x10 [ 1453.187978][ T5848] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1453.193626][ T5848] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1453.199264][ T5848] ? _raw_spin_unlock_irqrestore+0xfd/0x110 [ 1453.205168][ T5848] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 1453.211501][ T5848] ? print_memory_metadata+0x314/0x400 [ 1453.216956][ T5848] ? __list_del_entry_valid_or_report+0x92/0x190 [ 1453.223290][ T5848] check_panic_on_warn+0x89/0xb0 [ 1453.228237][ T5848] ? __list_del_entry_valid_or_report+0x92/0x190 [ 1453.234572][ T5848] end_report+0x78/0x160 [ 1453.238820][ T5848] kasan_report+0x129/0x150 [ 1453.243330][ T5848] ? __list_del_entry_valid_or_report+0x92/0x190 [ 1453.249665][ T5848] __list_del_entry_valid_or_report+0x92/0x190 [ 1453.255823][ T5848] bt_accept_unlink+0x39/0x240 [ 1453.260588][ T5848] l2cap_sock_teardown_cb+0x17e/0x460 [ 1453.265973][ T5848] l2cap_chan_del+0xb5/0x5e0 [ 1453.270576][ T5848] l2cap_conn_del+0x388/0x680 [ 1453.275264][ T5848] ? __pfx_l2cap_disconn_cfm+0x10/0x10 [ 1453.280726][ T5848] hci_conn_hash_flush+0x10d/0x230 [ 1453.285847][ T5848] hci_dev_close_sync+0xaef/0x1330 [ 1453.290964][ T5848] ? __pfx_hci_dev_close_sync+0x10/0x10 [ 1453.296508][ T5848] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1453.302140][ T5848] ? up_write+0x1c4/0x420 [ 1453.306473][ T5848] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1453.312113][ T5848] hci_unregister_dev+0x21a/0x510 [ 1453.317135][ T5848] vhci_release+0x80/0xd0 [ 1453.321478][ T5848] ? __pfx_vhci_release+0x10/0x10 [ 1453.326497][ T5848] __fput+0x44c/0xa70 [ 1453.330496][ T5848] task_work_run+0x1d4/0x260 [ 1453.335104][ T5848] ? __pfx_task_work_run+0x10/0x10 [ 1453.340224][ T5848] ? kmem_cache_free+0x18f/0x400 [ 1453.345176][ T5848] do_exit+0x6b5/0x22e0 [ 1453.349340][ T5848] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1453.354974][ T5848] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1453.360354][ T5848] ? __pfx_do_exit+0x10/0x10 [ 1453.364952][ T5848] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1453.370590][ T5848] ? _raw_spin_unlock_irq+0x23/0x50 [ 1453.375794][ T5848] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1453.381425][ T5848] ? lockdep_hardirqs_on+0x9c/0x150 [ 1453.386635][ T5848] do_group_exit+0x21c/0x2d0 [ 1453.391236][ T5848] __x64_sys_exit_group+0x3f/0x40 [ 1453.396278][ T5848] x64_sys_call+0x21ba/0x21c0 [ 1453.400970][ T5848] do_syscall_64+0xfa/0x3b0 [ 1453.405472][ T5848] ? lockdep_hardirqs_on+0x9c/0x150 [ 1453.410680][ T5848] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1453.416745][ T5848] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1453.422382][ T5848] ? exc_page_fault+0x9f/0xf0 [ 1453.427072][ T5848] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1453.432962][ T5848] RIP: 0033:0x7feb30b8e929 [ 1453.437372][ T5848] Code: Unable to access opcode bytes at 0x7feb30b8e8ff. [ 1453.444377][ T5848] RSP: 002b:00007ffd6b3d25d8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 1453.452796][ T5848] RAX: ffffffffffffffda RBX: 00007feb30c1094a RCX: 00007feb30b8e929 [ 1453.460767][ T5848] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 1453.468731][ T5848] RBP: 0000000000000002 R08: 00007ffd6b3d0377 R09: 00007ffd6b3d3890 [ 1453.476698][ T5848] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffd6b3d3890 [ 1453.484662][ T5848] R13: 00007feb30c10925 R14: 000000000016221d R15: 00007ffd6b3d4960 [ 1453.492637][ T5848] [ 1453.495851][ T5848] Kernel Offset: disabled [ 1453.500170][ T5848] Rebooting in 86400 seconds..