last executing test programs: 2m30.778554775s ago: executing program 2 (id=1210): mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='nfs4\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@abs, 0x6e) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbee3, 0x8031, 0xffffffffffffffff, 0x0) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r5 = syz_open_dev$MSR(&(0x7f0000000000), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet6(0xa, 0x3, 0x87) io_submit(0x0, 0x0, &(0x7f0000000540)) r6 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r6, 0xc1105517, &(0x7f0000000340)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x6, 0x0, 0x4, 0x0, 0x59, 0x0, 'syz1\x00', 0x0}) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r6, 0xc1105518, &(0x7f0000000040)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x1, [0x0, 0x4, 0x0, 0x5, 0xffffffffffffffff, 0x0, 0x7, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x1, 0x0, 0x8000000000000000, 0x0, 0xfffffffffffffffe, 0xa, 0x0, 0x5, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x401, 0x9, 0x0, 0x9, 0x0, 0x3, 0x800, 0x0, 0xfffffffffffffffe, 0x0, 0x7, 0x0, 0x7, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xfffffffffffffffe, 0x4, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x3, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x4, 0x800000, 0x0, 0x105, 0x0, 0xd721, 0x0, 0x9, 0x0, 0x0, 0x1, 0x7, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000001, 0x0, 0xad3]}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) 2m29.152484526s ago: executing program 2 (id=1212): creat(&(0x7f0000000040)='./file0\x00', 0x140) syz_open_procfs(0x0, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$inet6_tcp(0xa, 0x1, 0x0) r3 = open(&(0x7f00000001c0)='./bus\x00', 0x101000, 0x0) copy_file_range(r3, 0x0, 0xffffffffffffffff, 0x0, 0x3df1, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000580)=@flushsa={0x14, 0x1c, 0x1, 0x70bd27, 0x0, {0xff}}, 0x14}}, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x2004050, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@noextend}], [], 0x6b}}) 2m25.212252773s ago: executing program 2 (id=1216): sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x20000023896) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r0 = socket(0x10, 0x803, 0x2) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x200000d, 0x110, r0, 0x1000) socket$inet_udp(0x2, 0x2, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019a00)=""/102384, 0x18ff0) socket$unix(0x1, 0x5, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x101) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_udp(0x2, 0x2, 0x0) getpeername$inet6(0xffffffffffffffff, 0x0, 0x0) connect$bt_l2cap(r1, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) 2m23.215543724s ago: executing program 2 (id=1218): r0 = socket$packet(0x11, 0x2, 0x300) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBENT(r1, 0x4b47, &(0x7f0000000040)={0x1, 0x0, 0x27f}) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000080)=[{0x48, 0x83, 0x0, 0x10}, {0x6, 0x0, 0x0, 0x1000000}]}, 0x10) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0xa00008, &(0x7f0000000140)={[{@min_batch_time={'min_batch_time', 0x3d, 0xd}}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@noblock_validity}]}, 0x1, 0x7ad, &(0x7f00000007c0)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x1c1840, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000e80)='./bus\x00', 0x1c1002, 0x0) write(r4, &(0x7f0000004200)='t', 0x1) sendfile(r4, r2, 0x0, 0x40001) sendfile(r4, r3, 0x0, 0x7ffff000) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000001c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, 0x0) r7 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r8 = dup3(r7, r6, 0x0) r9 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r9, 0x10000000000) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000180)={0x4c, 0x0, &(0x7f0000000580)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x27, 0x18, &(0x7f0000000980)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x1, 0x3}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x800000, 0x22}, @ptr={0x70742a85, 0x1, 0x0, 0x0, 0x0, 0x39}}, &(0x7f0000000240)={0x0, 0x28, 0x50}}, 0x1000}], 0x0, 0x0, 0x0}) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$TIPC_NL_BEARER_DISABLE(r4, &(0x7f00000010c0)={&(0x7f0000000fc0)={0x10, 0x0, 0x0, 0x2010800}, 0xc, &(0x7f0000001080)={&(0x7f0000001100)=ANY=[@ANYBLOB='t\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="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"], 0x74}, 0x1, 0x0, 0x0, 0x8000}, 0x10000800) fcntl$notify(0xffffffffffffffff, 0x402, 0x8000001f) rename(&(0x7f0000000040)='./file1\x00', &(0x7f0000000000)='./file0/file0\x00') syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x201c448, &(0x7f0000000e00)=ANY=[@ANYBLOB='map=acorn,utf8,session=0x0000000000000004,session=0x0000000000000056,map=normal,session=0x000000000000003d,unhide,norock,block=0x0000000000000400,map=off,session=0x00000,uid=\x00'/185, @ANYRESOCT=r0, @ANYBLOB="5df068e90aee213f4bec3006ae750b3de615325b262a25f2314e0571237c9f9cfe53de378244d768e67b312fe7ee45008401af21ae7d8b6c1b920d7192dd4c8079631d7dcca0642bdda33b0c4a109b7ed17a2ab1ba4520c1821acb416b8d6bcaefa8f7ee80c9ffe20cfff20d0f42e91fb76051c421f187d28167d0b5abf0acd65ed0387b79f6942fefe5d9dd443eb2def61bac99d6d0bf87840766f72d0cb02c7ce519e497ac4dbecd9e344cd1dd510ce40644d48a9ce0d4a9f678596ddda3dc05d3a8", @ANYRES32, @ANYRESOCT], 0x0, 0xa82, &(0x7f0000000180)="$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") 2m20.28153942s ago: executing program 2 (id=1223): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet6(0xa, 0x80002, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'md5-generic\x00'}, 0x5a) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x128}, 0x0) capget(&(0x7f0000000040)={0x20071026}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r4, &(0x7f0000000000)={0x1f, 0x0, @none}, 0xe) syz_open_dev$tty1(0xc, 0x4, 0x1) bind$bt_l2cap(r4, &(0x7f0000000f80)={0x1f, 0x8001, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000200)='gid', &(0x7f0000000580)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xeaEb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80Y\xc2\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\xf8\xc9@h\x01\xf5\xcb\x88\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9a\x84\'\xa3\xf1\xd9<\xb9k\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xc, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x2a, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xb, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="b400000000090000dd0a00000000000073013b00000000009500000000000000425e494e53a90f38f870e056d03b2010633dee8a3a6601dbd212"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x19, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x94) 2m18.697800848s ago: executing program 2 (id=1226): sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x20000023896) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r0 = socket(0x10, 0x803, 0x2) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x200000d, 0x110, r0, 0x1000) socket$inet_udp(0x2, 0x2, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019a00)=""/102384, 0x18ff0) socket$unix(0x1, 0x5, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x101) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_udp(0x2, 0x2, 0x0) getpeername$inet6(0xffffffffffffffff, 0x0, 0x0) connect$bt_l2cap(r1, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) 2m4.739032241s ago: executing program 0 (id=1243): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000440)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r3 = accept$alg(r2, 0x0, 0x0) r4 = dup(r3) write$FUSE_INIT(r4, &(0x7f0000000080)={0x4f}, 0xfffffdef) setsockopt(r4, 0x1, 0x20, &(0x7f0000000040)="c04bfa0a", 0x4) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r5 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000000)={0x1, 0x1}, 0x4) socket$packet(0x11, 0x2, 0x300) bpf$PROG_LOAD(0x5, 0x0, 0x0) 2m3.194641565s ago: executing program 32 (id=1226): sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x20000023896) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r0 = socket(0x10, 0x803, 0x2) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x200000d, 0x110, r0, 0x1000) socket$inet_udp(0x2, 0x2, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019a00)=""/102384, 0x18ff0) socket$unix(0x1, 0x5, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x101) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_udp(0x2, 0x2, 0x0) getpeername$inet6(0xffffffffffffffff, 0x0, 0x0) connect$bt_l2cap(r1, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) 1m57.595467536s ago: executing program 0 (id=1256): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet6(0xa, 0x80002, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'md5-generic\x00'}, 0x5a) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x128}, 0x0) capget(&(0x7f0000000040)={0x20071026}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) syz_open_dev$tty1(0xc, 0x4, 0x1) bind$bt_l2cap(r4, &(0x7f0000000f80)={0x1f, 0x8001, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) r5 = fsopen(&(0x7f0000000300)='tracefs\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xc, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x2a, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) 1m54.837662468s ago: executing program 0 (id=1259): syz_mount_image$udf(&(0x7f0000000100), &(0x7f0000000500)='./file0\x00', 0x200000, &(0x7f0000000000)=ANY=[@ANYRES16=0x0], 0x1, 0x495, &(0x7f0000000a40)="$eJzs29trHGUYx/HfM8luNttqt22aVil0VVCpWHPo0XjRQwwVekjTRqSoEJtNXJoT2VTaIlq88dYbb0REQUGqaEHEG6+0d/4BCoKgF16I4F54AEGQmX1nZ7LZtkn3kGz7/UC7k3eemXkP+8777s67AgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA0uGnD/X02mrnAgAANNOJ0yM9fYz/AADcVc7w+R8AAOBuYvL0g0yDI0U7HvxdkjqWn7lwcXRwqPphnRYc2RbE+/9SvX39u/fs3bc/fL358fV2n06ePnMoe2R2em4+VyjkxrOjM/lzs+O5ZZ+h1uMr7QwqIDt9/sL4xEQh27erf9Hui5lfO9Z1Zwb2dR/0wtjRwaGh07GY9sRtX32JG83wk/K0TabfH/7MTkjyVHtd3OK902idQSF2BoUYHRwKCjKVH5tZ8HcOhxXhubI6ybCOmtAWNemS/HxZsj6f2RLydFCm7l+KdlJSW1gPjwVfDN/4wPa6XP62+fl8QdKDaoE2W8M65OknmaY3pDS8+s2KJmuXp4sy/TlQtFPB/cDvT/5t89iz2WdmJmZjscPmelSrjw/NtMbvTSl5OhHc8Ys2stqZQdP5k6W3ZdryySvBvELBvHTDwL4nT/XHZxhbb3EeP3aXmz8uZ0xOuNhhGzbz6l8uAAAAAAAAAFKHefpepuLX2SgxY/Jij4xTKj0Yyq5OFgE0inl6R6ZTI8Xga/j4upS22PqeslZ/9tfY/HemjszOXZrPT768UHV/OnXopcLC/Ni56rvV6d9n2+Ipt1rHUqOEeUrK9PxfH1v5uqX7v1sKEOXmo6eiNTOpyusH75t7S+uZwmdIB85ujW9XzfIKno/61zTztCDT4U3b3FqVtJbUmUpxX8j0x/vbXZyX9DMfnjZTOuNEfirX48d+I9MH/4WxwbIorXOxm6PYXj/WZHrr+OLY9S62K4rt82OHZLr+YvXYLVFsvx/7hkxzv2XD2LQfu8PFdkexu87NTo1Xq0pgpfz+/7NM73VlLewb7aX339L+/2o0FlypPNEN+nyt/T8TS7vi+vVZv///vS3oy0H/96r3/zdl+vTL7S6u1PeSbv/G4P+o/z8n0+R3i2PTLnZTFNu77IptEX77b5fp6JZr5bpx7e9aIGq1ePvfX/nuaFD7b4ylZdx1O+pTdEgqXLp8fmxqKjfPRq0brkavrJX8rJGNHWsjG2yscGOVb0xoCn/8/9yfRX31Y3m+48Z/9zElmln981o0/g9UnqhB4/+mWNqAm40k2qXUwvRcYquUKly6/Hh+emwyN5mb2d2zt2fP7gO9B/YnkuHkLtqqua7uRH77fyvTv+uulj/vLp7/VZ//pytP1KD23xxLSy+ar9RcdLj2vyrTA9evlb+XuNn8P/z+59GHSq/l/tmg9u+KpWXcde+pT9EBAAAAAAAAAAAAAAAAoKUlzNOHMh19ot3C35otZ/3fkh+gNWj9V3csbbxJv1eouVIBoAV48vSuTI+oaK/7Ceul4/FX3NH+DwAA///WsSBT") bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000005c0)='sched_switch\x00', r0}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x4, 0xe, &(0x7f0000001580)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000001c0), 0xfffffedf, 0x10, &(0x7f0000000040), 0xffffff95, 0x0, 0xffffffffffffffff, 0xd}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r1, 0x0, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x9ffc, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1m52.408353173s ago: executing program 0 (id=1265): r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getsockopt$inet6_mreq(r0, 0x29, 0x1c, &(0x7f0000000300)={@empty}, &(0x7f0000000340)=0x14) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = getpid() r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0x18, &(0x7f0000000080)=0x80000001, 0x4) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x3, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0a00000001010000ff450000cc"], 0x50) 1m50.525682575s ago: executing program 0 (id=1268): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet6(0xa, 0x80002, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'md5-generic\x00'}, 0x5a) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x128}, 0x0) capget(&(0x7f0000000040)={0x20071026}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x0, @none}, 0xe) syz_open_dev$tty1(0xc, 0x4, 0x1) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000f80)={0x1f, 0x8001, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) r4 = fsopen(&(0x7f0000000300)='tracefs\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xc, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x2a, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) 1m48.985769449s ago: executing program 0 (id=1270): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=@ipv6_newroute={0x1c, 0x18, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0xfd, 0x0, 0x0, 0x0, 0x2200}}, 0x1c}}, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000400)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f0000000240)={0x30, r2, 0x1, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SCAN_FLAGS={0x8, 0x9e, 0x3808}, @NL80211_ATTR_BSSID={0xa, 0xf5, @from_mac=@broadcast}]}, 0x30}, 0x1, 0x0, 0x0, 0x805}, 0x40084) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) recvmmsg(r5, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r6, 0x10e, 0x1, &(0x7f00000000c0)=0x7, 0x4) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000100000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={{0x14}, [@NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0xa}}], {0x14}}, 0x3c}}, 0x0) r8 = openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r8, 0x3b81, &(0x7f00000000c0)={0xc}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r8, 0x3ba0, 0x0) r9 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340), 0x48) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x6, 0x6, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffc}, [@map_val={0x18, 0x0, 0x2, 0x0, r9, 0x0, 0x0, 0x0, 0x4}, @ldst={0x3, 0x0, 0x6}]}, &(0x7f0000000180)='syzkaller\x00', 0x3, 0xd2, &(0x7f00000002c0)=""/210}, 0x94) 1m33.989238436s ago: executing program 33 (id=1270): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=@ipv6_newroute={0x1c, 0x18, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0xfd, 0x0, 0x0, 0x0, 0x2200}}, 0x1c}}, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000400)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f0000000240)={0x30, r2, 0x1, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SCAN_FLAGS={0x8, 0x9e, 0x3808}, @NL80211_ATTR_BSSID={0xa, 0xf5, @from_mac=@broadcast}]}, 0x30}, 0x1, 0x0, 0x0, 0x805}, 0x40084) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) recvmmsg(r5, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r6, 0x10e, 0x1, &(0x7f00000000c0)=0x7, 0x4) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000100000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={{0x14}, [@NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0xa}}], {0x14}}, 0x3c}}, 0x0) r8 = openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r8, 0x3b81, &(0x7f00000000c0)={0xc}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r8, 0x3ba0, 0x0) r9 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340), 0x48) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x6, 0x6, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffc}, [@map_val={0x18, 0x0, 0x2, 0x0, r9, 0x0, 0x0, 0x0, 0x4}, @ldst={0x3, 0x0, 0x6}]}, &(0x7f0000000180)='syzkaller\x00', 0x3, 0xd2, &(0x7f00000002c0)=""/210}, 0x94) 30.870271465s ago: executing program 5 (id=1341): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet6(0xa, 0x80002, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'md5-generic\x00'}, 0x5a) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x128}, 0x0) capget(&(0x7f0000000040)={0x20071026}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) syz_open_dev$tty1(0xc, 0x4, 0x1) bind$bt_l2cap(r4, &(0x7f0000000f80)={0x1f, 0x8001, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) r5 = fsopen(&(0x7f0000000300)='tracefs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000200)='gid', &(0x7f0000000580)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xeaEb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80Y\xc2\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\xf8\xc9@h\x01\xf5\xcb\x88\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9a\x84\'\xa3\xf1\xd9<\xb9k\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xc, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x2a, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xb, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="b400000000090000dd0a00000000000073013b00000000009500000000000000425e494e53a90f38f870e056d03b2010633dee8a3a6601dbd212"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x19, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x94) 24.889744497s ago: executing program 5 (id=1346): r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/rpc\x00') r1 = fanotify_init(0x20, 0x2) r2 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x50) readv(r1, &(0x7f0000000100)=[{&(0x7f0000000400)=""/169, 0xa9}], 0x1) fanotify_mark(r1, 0x1, 0x40001019, r2, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) getdents(r0, &(0x7f0000001200)=""/198, 0xc6) 24.690493393s ago: executing program 4 (id=1347): syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x2004000, &(0x7f0000000380)={[{@max_dir_size_kb}, {@min_batch_time={'min_batch_time', 0x3d, 0x1}}, {@usrjquota}]}, 0xfe, 0x563, &(0x7f00000007c0)="$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") unlinkat(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x0, 0x2}, 0x94) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) quotactl$Q_SETQUOTA(0xffffffff80000800, &(0x7f0000000000)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2241, 0x0) write$tun(r1, &(0x7f0000000040)=ANY=[], 0x1043) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r0, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000c40)='./file1\x00', 0x0) socket$packet(0x11, 0x2, 0x300) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x4, 0x0, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x11, r2, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, 0x0, 0x0) 23.792437815s ago: executing program 5 (id=1357): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000100)=ANY=[@ANYBLOB="60b80000", @ANYRES16, @ANYBLOB="050427bd7000fedbdf250100000008000100", @ANYRES32, @ANYBLOB="4400028040000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005"], 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x4040084) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20004055) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 21.970410702s ago: executing program 1 (id=1349): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet6(0xa, 0x80002, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'md5-generic\x00'}, 0x5a) capget(&(0x7f0000000040)={0x20071026}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r4, &(0x7f0000000000)={0x1f, 0x0, @none}, 0xe) syz_open_dev$tty1(0xc, 0x4, 0x1) bind$bt_l2cap(r4, &(0x7f0000000f80)={0x1f, 0x8001, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) r5 = fsopen(&(0x7f0000000300)='tracefs\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xc, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x2a, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) 19.799855256s ago: executing program 5 (id=1351): socket$packet(0x11, 0x2, 0x300) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) creat(&(0x7f0000000040)='./bus\x00', 0x0) sendto$inet6(r1, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r1, &(0x7f0000000080)='D', 0x1, 0x4014, 0x0, 0x0) shutdown(r1, 0x1) splice(r1, 0x0, r0, 0x0, 0x1, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=@base={0x5, 0x7, 0x8, 0x5, 0x80}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000700)={{r2}, &(0x7f0000000600), &(0x7f00000006c0)}, 0x20) 19.061005355s ago: executing program 5 (id=1353): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) socket$inet6(0xa, 0x80002, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'md5-generic\x00'}, 0x5a) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000f80)={0x1f, 0x8001, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) r2 = fsopen(&(0x7f0000000300)='tracefs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000200)='gid', &(0x7f0000000580)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xeaEb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80Y\xc2\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\xf8\xc9@h\x01\xf5\xcb\x88\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9a\x84\'\xa3\xf1\xd9<\xb9k\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xc, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x2a, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) 18.925739127s ago: executing program 4 (id=1354): read$FUSE(0xffffffffffffffff, &(0x7f0000000900)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, 0x0) socket(0x10, 0x3, 0x0) socket$inet(0x2, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000000c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) kcmp(0x0, 0x0, 0x2, 0xffffffffffffffff, 0xffffffffffffffff) openat$binfmt_register(0xffffffffffffff9c, 0x0, 0x1, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) connect$inet(0xffffffffffffffff, 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r4, 0x29, 0x3, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r4, &(0x7f0000000140)={0xa, 0x4e22, 0x23, @loopback, 0x23}, 0x1c) sched_setscheduler(r0, 0x0, &(0x7f0000000000)=0x9) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 17.031757989s ago: executing program 1 (id=1355): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000008dc0)={0x0, 0x0, &(0x7f0000008cc0)=[{&(0x7f0000008a40)='|r', 0x2}, {&(0x7f0000008c80)="9d", 0x1}], 0x2}, 0x0) 15.571563847s ago: executing program 5 (id=1356): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet6(0xa, 0x80002, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'md5-generic\x00'}, 0x5a) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x128}, 0x0) capget(&(0x7f0000000040)={0x20071026}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) syz_open_dev$tty1(0xc, 0x4, 0x1) bind$bt_l2cap(r4, &(0x7f0000000f80)={0x1f, 0x8001, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) r5 = fsopen(&(0x7f0000000300)='tracefs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000200)='gid', &(0x7f0000000580)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xeaEb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80Y\xc2\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\xf8\xc9@h\x01\xf5\xcb\x88\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9a\x84\'\xa3\xf1\xd9<\xb9k\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xc, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x2a, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xb, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="b400000000090000dd0a00000000000073013b00000000009500000000000000425e494e53a90f38f870e056d03b2010633dee8a3a6601dbd212"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x19, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x94) 13.817582578s ago: executing program 4 (id=1359): socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() sched_setscheduler(r0, 0x3, &(0x7f0000000040)=0x2003) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000000)={0x2, &(0x7f0000000100)=[{0x3c}, {0x6, 0x0, 0x2}]}) 13.671427489s ago: executing program 3 (id=1360): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) shutdown(r0, 0x1) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, 0x0, 0x0) bind$inet6(r0, &(0x7f0000000a00)={0xa, 0x4e20, 0x16e, @empty, 0x5}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0xfffffff1, @empty, 0x2}, 0x1c) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x8, @empty, 0x9f}, 0x1c) capset(0x0, 0x0) sendto$inet6(r0, &(0x7f00000001c0), 0x0, 0x20000804, &(0x7f0000000240)={0xa, 0x4e21, 0x4516, @ipv4={'\x00', '\xff\xff', @remote}, 0xe000}, 0x1c) 13.41091007s ago: executing program 3 (id=1361): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000100)=ANY=[@ANYBLOB="60b80000", @ANYRES16, @ANYBLOB="050427bd7000fedbdf250100000008000100", @ANYRES32, @ANYBLOB="4400028040000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005"], 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x4040084) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20004055) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 12.954931397s ago: executing program 3 (id=1362): socket$packet(0x11, 0x2, 0x300) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r1, &(0x7f0000000080)='D', 0x1, 0x4014, 0x0, 0x0) shutdown(r1, 0x1) splice(r1, 0x0, r0, 0x0, 0x1, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=@base={0x5, 0x7, 0x8, 0x5, 0x80}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000700)={{r2}, &(0x7f0000000600), &(0x7f00000006c0)}, 0x20) 12.556459119s ago: executing program 3 (id=1363): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip_mr_vif\x00') sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x4040000) syz_emit_ethernet(0x32, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) socket$nl_route(0x10, 0x3, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) sigaltstack(0x0, 0x0) sigaltstack(0x0, 0x0) r1 = getpid() ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f0000000080)={0x9, 0x2, 0x8, 0x800, 0x0, "8079738642c47f42b98efcbf3d8fb516e7dd5c", 0x7, 0x3ff}) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f00000004c0)={{{@in6=@loopback, @in=@broadcast, 0x0, 0x0, 0xfffc, 0xffff, 0xa}, {0x0, 0x4}, {0x2}}, {{@in=@multicast1, 0x0, 0x2b}, 0x0, @in=@empty, 0x200000}}, 0xe8) close(r3) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='blkio.bfq.io_wait_time\x00', 0x275a, 0x0) ioctl$FS_IOC_GETFSMAP(r4, 0xc0c0583b, &(0x7f0000000200)=ANY=[@ANYBLOB="0000009027c41a14d98d111415a3004c90020052feffff0300010000000000000000000000008b2a00000000000000000000779d0b00000000000000000000000000000000000000000000000000000000000000000000000000000000000000a75314927b98147600b77f0feeed3d03cdeb5a8d94000000001c3cfa75bd4cb4dc5f00000000000000000000000000000000000000000000000000000000000000000000009750467476c7eb4ee010ffffffff00000000000000000000000000000000000000000000000000000000000000000000000754450fba266d2e1e472d9d08f8536f560516fc18dd3795e88071b8bd6323a91e5ce496cffe7921a1cd381064425adb065cfef0c5e254a8628e3f9e1a0411e4565e5f7ed0042f53c92ed8e40587a0c8aa31db886adcae2d"]) 12.521959012s ago: executing program 1 (id=1364): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet6(0xa, 0x80002, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'md5-generic\x00'}, 0x5a) capget(&(0x7f0000000040)={0x20071026}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r4, &(0x7f0000000000)={0x1f, 0x0, @none}, 0xe) syz_open_dev$tty1(0xc, 0x4, 0x1) bind$bt_l2cap(r4, &(0x7f0000000f80)={0x1f, 0x8001, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) r5 = fsopen(&(0x7f0000000300)='tracefs\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xc, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x2a, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) 11.257682384s ago: executing program 3 (id=1365): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) syz_usb_connect(0x5, 0xa4, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) timer_create(0x3, &(0x7f000049efa0)={0x0, 0x14, 0x4}, &(0x7f0000044000)) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000000000)=0x587, 0x4) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000080)=[{{&(0x7f00000002c0)={0xa, 0x4e22, 0xf58, @mcast2}, 0x1c, 0x0}}], 0x1, 0x4040884) bind$alg(r0, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(md5)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r4 = accept4$alg(r0, 0x0, 0x0, 0x80800) read$alg(r4, &(0x7f0000000000)=""/52, 0x34) r5 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f0000000180)={@loopback, 0x800, 0x0, 0x3, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f0000000080)={@loopback, 0x800, 0x0, 0x3}, 0x20) 9.69091926s ago: executing program 1 (id=1366): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/stat\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x20000023896) ppoll(&(0x7f0000000100)=[{r0, 0x4050}, {r1, 0x148}], 0x2, 0x0, 0x0, 0x0) 6.756165026s ago: executing program 4 (id=1367): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socket(0x2a, 0x80000, 0xb) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) madvise(&(0x7f000042f000/0x800000)=nil, 0x800000, 0x15) syz_open_procfs(r1, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f00000000c0), 0x4) 6.245609977s ago: executing program 1 (id=1368): read$FUSE(0xffffffffffffffff, &(0x7f0000000900)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, 0x0) socket(0x10, 0x3, 0x0) socket$inet(0x2, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000000c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) kcmp(0x0, 0x0, 0x2, 0xffffffffffffffff, 0xffffffffffffffff) openat$binfmt_register(0xffffffffffffff9c, 0x0, 0x1, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) connect$inet(0xffffffffffffffff, 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r4, 0x29, 0x3, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r4, &(0x7f0000000140)={0xa, 0x4e22, 0x23, @loopback, 0x23}, 0x1c) sched_setscheduler(r0, 0x0, &(0x7f0000000000)=0x9) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 3.166265825s ago: executing program 3 (id=1369): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) shutdown(r0, 0x1) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, 0x0, 0x0) bind$inet6(r0, &(0x7f0000000a00)={0xa, 0x4e20, 0x16e, @empty, 0x5}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0xfffffff1, @empty, 0x2}, 0x1c) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x8, @empty, 0x9f}, 0x1c) capset(0x0, 0x0) sendto$inet6(r0, &(0x7f00000001c0), 0x0, 0x20000804, &(0x7f0000000240)={0xa, 0x4e21, 0x4516, @ipv4={'\x00', '\xff\xff', @remote}, 0xe000}, 0x1c) 3.160480615s ago: executing program 1 (id=1370): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000100)=ANY=[@ANYBLOB="60b80000", @ANYRES16, @ANYBLOB="050427bd7000fedbdf250100000008000100", @ANYRES32, @ANYBLOB="4400028040000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005"], 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x4040084) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x20004055) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 284.420247ms ago: executing program 34 (id=1356): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet6(0xa, 0x80002, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'md5-generic\x00'}, 0x5a) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x128}, 0x0) capget(&(0x7f0000000040)={0x20071026}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) syz_open_dev$tty1(0xc, 0x4, 0x1) bind$bt_l2cap(r4, &(0x7f0000000f80)={0x1f, 0x8001, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) r5 = fsopen(&(0x7f0000000300)='tracefs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000200)='gid', &(0x7f0000000580)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xeaEb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80Y\xc2\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\xf8\xc9@h\x01\xf5\xcb\x88\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9a\x84\'\xa3\xf1\xd9<\xb9k\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xc, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x2a, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xb, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="b400000000090000dd0a00000000000073013b00000000009500000000000000425e494e53a90f38f870e056d03b2010633dee8a3a6601dbd212"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x19, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x94) 277.248478ms ago: executing program 4 (id=1372): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000008dc0)={0x0, 0x0, &(0x7f0000008cc0)=[{&(0x7f0000008a40)='|r', 0x2}, {&(0x7f0000008c80)="9d", 0x1}], 0x2}, 0x0) 0s ago: executing program 4 (id=1373): syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='mnt\x00', 0x1000000, &(0x7f0000000040)={[{@usrjquota}, {}]}, 0x0, 0x248, &(0x7f0000000940)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='mnt/encrypted_dir\x00', 0x0) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x80) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000180)='./bus\x00', 0x0, 0x63d014, 0x0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x185102, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2, 0x28011, r1, 0x0) syz_mount_image$squashfs(&(0x7f0000000100), &(0x7f0000000780)='./bus\x00', 0x8000, &(0x7f0000000cc0)=ANY=[@ANYRESOCT=r0, @ANYBLOB="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", @ANYRES64=r0, @ANYBLOB="a92fe8de136908e852768595aa546296821087e5b1bbc32156ada61f7c8a700880fe17c721514fd66f6d073702603f43f39d10ed62b784f0ea603a4573db0aae2174a30374bec0296612104179832730d5741398231d9ffd1e9995a06bb5ada99b9f2d4a71c580fe19a6dea2485a8ef6042e0d96839465522c03ac9b1e3e4be07bd09a1568add843860228063e6e4a59adc27ad98e26260605e1df1bd5e5dcc1735af362ce57237d4455a267daeea0b2368f8c69ed577f4849d608dcd60b0dabe1d6dada51feb6b1751d82f9c2fa136da4ab1a73a25bcfba9ba846676558290f27b2a256c2257003da", @ANYRESHEX=r1, @ANYRESHEX, @ANYRES16=0x0, @ANYRES32=r0, @ANYRESHEX, @ANYRESHEX, @ANYRES8, @ANYBLOB="171263d59f8cbffd0f9f9a2ef9a5f6f2c8c119f2d43929f3ee0d855e7515bc347d06201637efc696515095ee16034c8ed8bdc0c0fd6ec7dc41f9930a8b2420722f76faf7000000000000000029c9330167f231926712da08cfe34bfbd13b1f10c34104fe0af226f51805ce2ae0e3528544a8d316b2b399737407ccf56665b4a27e5f8c9856d29aed796ed0d8e51b6253074bfff7d11910a8be994780298bcf31176d21c35274c32f39673cc639e0a3f7605ebba065c3c879dd25d39227611cb596abbc901d7778bc7c28f974c0941786141582322aac673d4c113026aed1585a83932473e679c479244e3d9a494d5458f02ce5a84c1cc8118b83c57736eb3eb2518dd342d5b0d662063faee3cc946a910827a7de0286dafa1839706c6e5b305231dd59ae322e4752e711feb4f4daf111cae0caab60bd6088b55bcb456f1ad9c143005c3dd834309224b588b0dda054d14d8cb344be2e8c551a5cdf4e510d2156d2f2a3ad7a31fc5372dc3e6f6ec570933eb4769c38e2300f3ecf8fbf06a0df8c6a76c273b8ed46a890d07e175e0c4a49743bb433cc5aa20b02046064495b07095a6651de2537c12459e2a06c72a6b852fe09498ddb3b95191e14392bb4895759f5416226da247f5590336d5c22164e334d4088a9f3529ed157ad15a27d879be7ddc94f913ff14558a080c24131a27ccf43ac420c0b3ec06f24ffb86a25333da5"], 0x10, 0x1c4, &(0x7f0000000440)="$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") chdir(&(0x7f00000002c0)='mnt/encrypted_dir\x00') r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x121c80, 0x47) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000280)=0x40000000) creat(&(0x7f0000000d80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x22) kernel console output (not intermixed with test programs): ] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 86.627574][ T5795] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 86.638542][ T5795] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 86.646993][ T5795] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 86.657966][ T5795] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 86.666312][ T5795] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 86.674962][ T5799] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 86.692026][ T5797] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 86.705783][ T5797] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 86.713933][ T5797] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 86.721489][ T5797] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 86.727369][ T5795] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 86.764369][ T5790] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 86.772852][ T5790] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 86.784182][ T5790] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 86.784193][ T5797] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 86.786639][ T5797] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 86.807855][ T5797] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 86.816681][ T5790] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 86.825568][ T5790] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 86.833551][ T5797] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 86.842493][ T5797] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 87.370592][ T5788] chnl_net:caif_netlink_parms(): no params data found [ 87.616570][ T5792] chnl_net:caif_netlink_parms(): no params data found [ 87.694518][ T5793] chnl_net:caif_netlink_parms(): no params data found [ 87.727429][ T5788] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.735672][ T5788] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.743209][ T5788] bridge_slave_0: entered allmulticast mode [ 87.751105][ T5788] bridge_slave_0: entered promiscuous mode [ 87.794525][ T5788] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.801997][ T5788] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.809532][ T5788] bridge_slave_1: entered allmulticast mode [ 87.817248][ T5788] bridge_slave_1: entered promiscuous mode [ 87.843426][ T5800] chnl_net:caif_netlink_parms(): no params data found [ 87.928444][ T5792] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.935832][ T5792] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.943031][ T5792] bridge_slave_0: entered allmulticast mode [ 87.951902][ T5792] bridge_slave_0: entered promiscuous mode [ 87.994585][ T5792] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.002215][ T5792] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.010354][ T5792] bridge_slave_1: entered allmulticast mode [ 88.018282][ T5792] bridge_slave_1: entered promiscuous mode [ 88.040993][ T5788] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.053722][ T5788] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.070516][ T5793] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.077712][ T5793] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.084969][ T5793] bridge_slave_0: entered allmulticast mode [ 88.092747][ T5793] bridge_slave_0: entered promiscuous mode [ 88.141947][ T5793] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.149433][ T5793] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.157105][ T5793] bridge_slave_1: entered allmulticast mode [ 88.164171][ T5793] bridge_slave_1: entered promiscuous mode [ 88.173611][ T5792] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.188080][ T5792] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.261968][ T5788] team0: Port device team_slave_0 added [ 88.274569][ T5800] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.282166][ T5800] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.290265][ T5800] bridge_slave_0: entered allmulticast mode [ 88.297776][ T5800] bridge_slave_0: entered promiscuous mode [ 88.321074][ T5793] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.333246][ T5792] team0: Port device team_slave_0 added [ 88.342344][ T5792] team0: Port device team_slave_1 added [ 88.351380][ T5788] team0: Port device team_slave_1 added [ 88.359310][ T5800] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.366730][ T5800] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.374039][ T5800] bridge_slave_1: entered allmulticast mode [ 88.381424][ T5800] bridge_slave_1: entered promiscuous mode [ 88.401720][ T5793] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.480434][ T5793] team0: Port device team_slave_0 added [ 88.516702][ T5800] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.530560][ T5800] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.541721][ T5793] team0: Port device team_slave_1 added [ 88.562866][ T5792] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.573057][ T5792] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.603805][ T5792] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.617184][ T5788] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.624178][ T5788] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.650762][ T5788] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.686635][ T5792] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.693666][ T5792] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.719932][ T5792] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.732505][ T5788] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.740271][ T5788] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.766360][ T5788] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.790456][ T5793] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.797580][ T5793] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.816949][ T5795] Bluetooth: hci0: command tx timeout [ 88.824183][ T5793] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.829699][ T5797] Bluetooth: hci1: command tx timeout [ 88.842608][ T5793] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.852937][ T5793] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.879718][ T5793] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.895971][ T5797] Bluetooth: hci3: command tx timeout [ 88.901692][ T5797] Bluetooth: hci2: command tx timeout [ 88.933501][ T5800] team0: Port device team_slave_0 added [ 88.947224][ T5800] team0: Port device team_slave_1 added [ 89.009399][ T5800] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.017011][ T5800] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.043441][ T5800] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.083995][ T5788] hsr_slave_0: entered promiscuous mode [ 89.091108][ T5788] hsr_slave_1: entered promiscuous mode [ 89.112444][ T5800] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.119638][ T5800] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.146008][ T5800] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.162423][ T5792] hsr_slave_0: entered promiscuous mode [ 89.169732][ T5792] hsr_slave_1: entered promiscuous mode [ 89.176982][ T5792] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 89.184805][ T5792] Cannot create hsr debugfs directory [ 89.209356][ T5793] hsr_slave_0: entered promiscuous mode [ 89.217075][ T5793] hsr_slave_1: entered promiscuous mode [ 89.223451][ T5793] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 89.231324][ T5793] Cannot create hsr debugfs directory [ 89.413017][ T5800] hsr_slave_0: entered promiscuous mode [ 89.419990][ T5800] hsr_slave_1: entered promiscuous mode [ 89.426875][ T5800] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 89.434491][ T5800] Cannot create hsr debugfs directory [ 89.752460][ T5792] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 89.774760][ T5792] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 89.787904][ T5792] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 89.799300][ T5792] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 89.877715][ T5800] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 89.894929][ T5800] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 89.906521][ T5800] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 89.920727][ T5800] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 90.020353][ T5793] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 90.034545][ T5793] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 90.058262][ T5793] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 90.069755][ T5793] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 90.157418][ T5788] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 90.168818][ T5788] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 90.180599][ T5788] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 90.192089][ T5788] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 90.270276][ T5792] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.359180][ T5792] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.382113][ T1096] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.389653][ T1096] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.420047][ T5800] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.451831][ T1123] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.459089][ T1123] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.491877][ T5800] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.537297][ T5793] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.553098][ T1123] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.560313][ T1123] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.603837][ T34] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.611073][ T34] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.669802][ T5788] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.700051][ T5793] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.747188][ T5788] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.779623][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.787027][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.816060][ T1096] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.823274][ T1096] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.863702][ T1096] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.870983][ T1096] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.883286][ T1096] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.890533][ T1096] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.901077][ T5797] Bluetooth: hci1: command tx timeout [ 90.901146][ T5795] Bluetooth: hci0: command tx timeout [ 90.933960][ T5800] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 90.976660][ T5797] Bluetooth: hci3: command tx timeout [ 90.982217][ T5795] Bluetooth: hci2: command tx timeout [ 91.117312][ T5793] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 91.228910][ T5792] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.383223][ T5792] veth0_vlan: entered promiscuous mode [ 91.441508][ T5792] veth1_vlan: entered promiscuous mode [ 91.522433][ T5792] veth0_macvtap: entered promiscuous mode [ 91.543349][ T5800] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.556269][ T5792] veth1_macvtap: entered promiscuous mode [ 91.596499][ T5788] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.619814][ T5792] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.633845][ T5792] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.659742][ T5792] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.672193][ T5792] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.681088][ T5792] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.691694][ T5792] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.732687][ T5793] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.831152][ T5788] veth0_vlan: entered promiscuous mode [ 91.869011][ T5788] veth1_vlan: entered promiscuous mode [ 91.883140][ T5800] veth0_vlan: entered promiscuous mode [ 91.928944][ T5800] veth1_vlan: entered promiscuous mode [ 91.937340][ T1096] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.955455][ T1096] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.990108][ T5793] veth0_vlan: entered promiscuous mode [ 92.038391][ T5793] veth1_vlan: entered promiscuous mode [ 92.052702][ T5800] veth0_macvtap: entered promiscuous mode [ 92.070651][ T1096] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.079001][ T1096] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.088806][ T5800] veth1_macvtap: entered promiscuous mode [ 92.136124][ T5793] veth0_macvtap: entered promiscuous mode [ 92.146956][ T5788] veth0_macvtap: entered promiscuous mode [ 92.169750][ T5793] veth1_macvtap: entered promiscuous mode [ 92.184038][ T27] cfg80211: failed to load regulatory.db [ 92.194259][ T5800] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.212044][ T5800] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.225014][ T5800] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.239201][ T5788] veth1_macvtap: entered promiscuous mode [ 92.283916][ T5800] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.298460][ T5800] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.311218][ T5800] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.323589][ T5800] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.334103][ T5800] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.356351][ T5800] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.365115][ T5800] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.413471][ T5793] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 93.145323][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 94.365165][ C1] sched: RT throttling activated [ 94.366678][ T5795] Bluetooth: hci0: command tx timeout [ 94.376118][ T5793] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.377165][ T5797] Bluetooth: hci1: command tx timeout [ 94.392486][ T5797] Bluetooth: hci2: command tx timeout [ 94.395348][ T5795] Bluetooth: hci3: command tx timeout [ 94.437587][ T5793] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 94.448310][ T5793] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.460446][ T5793] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.518172][ T5788] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 94.534949][ T5788] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.546400][ T5788] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 94.559364][ T5788] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.569435][ T5788] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 94.580981][ T5788] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.593156][ T5788] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.602448][ T5793] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 94.618405][ T5793] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.629750][ T5793] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 94.644034][ T5793] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.661143][ T5793] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.711538][ T5788] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 94.722267][ T5788] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.741179][ T5788] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 94.751853][ T5788] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.768397][ T5788] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 94.783616][ T5788] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.798498][ T5788] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.810792][ T5793] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.820942][ T5793] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.830431][ T5793] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.839430][ T5793] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.881617][ T5788] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.896878][ T5788] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.905860][ T5788] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.914597][ T5788] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.013180][ T34] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.024227][ T34] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.134037][ T133] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.144067][ T133] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.261227][ T34] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.286425][ T34] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.309464][ T34] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.320789][ T34] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.377182][ T1096] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.385076][ T1096] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.518184][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.615997][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 95.624262][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 95.892170][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 95.994584][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 96.003450][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 96.096944][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 96.105810][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 96.199360][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 96.208211][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 96.425445][ T5796] Bluetooth: hci2: command tx timeout [ 96.426955][ T5795] Bluetooth: hci0: command tx timeout [ 96.430949][ T5796] Bluetooth: hci1: command tx timeout [ 96.499792][ T5796] Bluetooth: hci3: command tx timeout [ 96.570076][ T5889] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 96.667537][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.216737][ T5891] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 97.278286][ T5894] syz.0.6[5894]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 97.412278][ T5899] loop2: detected capacity change from 0 to 512 [ 97.433328][ T5901] overlayfs: missing 'lowerdir' [ 97.437267][ T5894] loop0: detected capacity change from 0 to 2048 [ 97.495460][ T5899] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 97.526050][ T5899] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 97.623460][ T5899] EXT4-fs (loop2): 1 truncate cleaned up [ 97.636368][ T5899] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 97.778486][ T5899] input input5: cannot allocate more than FF_MAX_EFFECTS effects [ 98.518972][ T5893] kvm: kvm [5892]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0x808 [ 98.714881][ T5788] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.679961][ T5912] mmap: syz.3.10 (5912) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 100.931769][ T5915] binder: 5911:5915 unknown command 0 [ 100.957701][ T5915] binder: 5911:5915 ioctl c0306201 200000000080 returned -22 [ 101.088107][ T5915] binder: 5911:5915 ioctl c0306201 200000000280 returned -14 [ 102.973867][ T5918] loop2: detected capacity change from 0 to 2048 [ 104.350770][ T5928] input: syz1 as /devices/virtual/input/input6 [ 104.366181][ T5918] EXT4-fs: error -4 creating inode table initialization thread [ 104.419605][ T5918] EXT4-fs (loop2): mount failed [ 105.039638][ T8] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 105.328328][ T8] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 105.496717][ T8] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 105.744709][ T8] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 105.785988][ T8] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 105.820870][ T8] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 105.894908][ T8] usb 3-1: config 0 descriptor?? [ 106.002187][ T5938] loop1: detected capacity change from 0 to 128 [ 106.037193][ T5938] EXT4-fs: Ignoring removed nobh option [ 106.054230][ T5940] loop0: detected capacity change from 0 to 1024 [ 106.087384][ T5938] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 106.125518][ T5938] ext4 filesystem being mounted at /2/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 106.612598][ T5793] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 106.763326][ T8] plantronics 0003:047F:FFFF.0001: No inputs registered, leaving [ 106.808316][ T5940] hfsplus: xattr searching failed [ 107.188688][ T8] plantronics 0003:047F:FFFF.0001: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 107.275855][ T8] usb 3-1: USB disconnect, device number 2 [ 107.448113][ T5954] netlink: 12 bytes leftover after parsing attributes in process `syz.0.21'. [ 107.476371][ T5954] netlink: 108 bytes leftover after parsing attributes in process `syz.0.21'. [ 107.492195][ T5951] fido_id[5951]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 107.523900][ T5956] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 107.618265][ T5957] ksmbd: Unknown IPC event: 6, ignore. [ 107.894816][ T5961] syzkaller1: entered promiscuous mode [ 107.909905][ T5961] syzkaller1: entered allmulticast mode [ 109.132115][ T5992] netlink: 16 bytes leftover after parsing attributes in process `syz.0.30'. [ 109.165948][ T5996] tipc: Started in network mode [ 109.171176][ T5996] tipc: Node identity , cluster identity 4711 [ 109.185353][ T5996] tipc: Failed to obtain node identity [ 109.190926][ T5996] tipc: Enabling of bearer rejected, failed to enable media [ 109.379219][ T5987] syzkaller0: entered promiscuous mode [ 109.405312][ T5987] syzkaller0: entered allmulticast mode [ 109.463546][ T5999] netlink: 4 bytes leftover after parsing attributes in process `syz.0.31'. [ 109.544520][ T5999] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 109.554059][ T5999] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 109.562892][ T5999] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 109.571753][ T5999] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 111.852562][ T5952] Set syz1 is full, maxelem 65536 reached [ 112.038342][ T6007] netlink: 64 bytes leftover after parsing attributes in process `syz.1.33'. [ 112.319990][ T6012] netlink: 'syz.1.34': attribute type 1 has an invalid length. [ 112.343289][ T6012] loop1: detected capacity change from 0 to 8 [ 112.383108][ T6012] SQUASHFS error: lzo decompression failed, data probably corrupt [ 112.393472][ T6012] SQUASHFS error: Failed to read block 0x91: -5 [ 112.423835][ T6012] SQUASHFS error: Unable to read metadata cache entry [8f] [ 112.431360][ T6012] SQUASHFS error: Unable to read inode 0x11f [ 112.446229][ T5999] netlink: 4 bytes leftover after parsing attributes in process `syz.0.31'. [ 112.457630][ T5999] Zero length message leads to an empty skb [ 112.539109][ T6011] bridge0: port 2(bridge_slave_1) entered disabled state [ 112.549161][ T6011] bridge0: port 1(bridge_slave_0) entered disabled state [ 113.028058][ T6027] Bluetooth: MGMT ver 1.22 [ 113.097443][ T6030] ======================================================= [ 113.097443][ T6030] WARNING: The mand mount option has been deprecated and [ 113.097443][ T6030] and is ignored by this kernel. Remove the mand [ 113.097443][ T6030] option from the mount to silence this warning. [ 113.097443][ T6030] ======================================================= [ 113.314369][ T787] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 113.985462][ T787] usb 1-1: Using ep0 maxpacket: 32 [ 114.267830][ T787] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 114.319818][ T787] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 114.330002][ T787] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 114.339734][ T787] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 114.468224][ T787] usb 1-1: config 0 descriptor?? [ 116.226885][ T787] savu 0003:1E7D:2D5A.0002: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.0-1/input0 [ 116.796772][ T6051] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 117.470315][ T6017] loop0: detected capacity change from 0 to 4096 [ 117.544227][ T6017] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 123.526305][ T23] usb 1-1: reset high-speed USB device number 2 using dummy_hcd [ 123.582206][ T5800] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 123.627637][ T6065] cgroup: fork rejected by pids controller in /syz3 [ 123.710291][ T6070] syz.2.46[6070] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 123.710469][ T6070] syz.2.46[6070] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 124.549599][ T27] usb 1-1: USB disconnect, device number 2 [ 124.975994][ T6191] netlink: 4 bytes leftover after parsing attributes in process `syz.2.48'. [ 125.401776][ T54] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.555978][ T54] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.724513][ T54] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.889491][ T54] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.085266][ T5876] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 126.295328][ T5876] usb 2-1: Using ep0 maxpacket: 16 [ 126.302934][ T5876] usb 2-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 32, changing to 9 [ 126.337987][ T5876] usb 2-1: config 0 interface 0 has no altsetting 0 [ 126.344714][ T5876] usb 2-1: New USB device found, idVendor=046d, idProduct=c24f, bcdDevice= 0.00 [ 126.395933][ T5876] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 126.448541][ T5876] usb 2-1: config 0 descriptor?? [ 126.701418][ T5795] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 126.711572][ T5795] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 126.724414][ T5795] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 126.734916][ T5795] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 126.754056][ T5795] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 126.762070][ T5795] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 126.787471][ T5796] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 126.883608][ T6233] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 126.911258][ T5796] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 126.923946][ T5796] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 126.944366][ T5796] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 127.048374][ T5796] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 127.062793][ T5796] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 127.419251][ T5876] logitech 0003:046D:C24F.0003: unknown main item tag 0x0 [ 127.453229][ T5876] logitech 0003:046D:C24F.0003: unknown main item tag 0x0 [ 127.464668][ T5876] logitech 0003:046D:C24F.0003: unknown main item tag 0x0 [ 127.500517][ T5876] logitech 0003:046D:C24F.0003: unknown main item tag 0x0 [ 127.511858][ T5876] logitech 0003:046D:C24F.0003: unknown main item tag 0x0 [ 127.538951][ T5876] logitech 0003:046D:C24F.0003: hidraw0: USB HID v0.05 Device [HID 046d:c24f] on usb-dummy_hcd.1-1/input0 [ 127.573246][ T5876] logitech 0003:046D:C24F.0003: no inputs found [ 127.628288][ T5876] usb 2-1: USB disconnect, device number 2 [ 127.701389][ T6238] fido_id[6238]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 128.207687][ T6251] loop0: detected capacity change from 0 to 16 [ 128.243427][ T6251] erofs: (device loop0): mounted with root inode @ nid 36. [ 129.135635][ T5795] Bluetooth: hci2: command tx timeout [ 129.182414][ T6260] netlink: 64 bytes leftover after parsing attributes in process `syz.0.63'. [ 129.223788][ T6230] chnl_net:caif_netlink_parms(): no params data found [ 129.448351][ T6271] netlink: 4 bytes leftover after parsing attributes in process `syz.1.66'. [ 129.508911][ T6271] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 129.517978][ T6271] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 129.526844][ T6271] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 129.535759][ T6271] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 129.563951][ T6271] netlink: 4 bytes leftover after parsing attributes in process `syz.1.66'. [ 129.603828][ T6267] netlink: 4 bytes leftover after parsing attributes in process `syz.2.65'. [ 129.772884][ T6278] netlink: 16 bytes leftover after parsing attributes in process `syz.1.67'. [ 130.292667][ T6230] bridge0: port 1(bridge_slave_0) entered blocking state [ 130.305314][ T6230] bridge0: port 1(bridge_slave_0) entered disabled state [ 130.312725][ T6230] bridge_slave_0: entered allmulticast mode [ 130.321079][ T6230] bridge_slave_0: entered promiscuous mode [ 130.332607][ T6230] bridge0: port 2(bridge_slave_1) entered blocking state [ 130.342150][ T6230] bridge0: port 2(bridge_slave_1) entered disabled state [ 130.384536][ T6230] bridge_slave_1: entered allmulticast mode [ 130.410883][ T6294] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 130.552922][ T6230] bridge_slave_1: entered promiscuous mode [ 131.152455][ T6299] loop0: detected capacity change from 0 to 512 [ 131.196822][ T6230] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 131.216104][ T5795] Bluetooth: hci2: command tx timeout [ 131.245409][ T6230] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 131.406280][ T6230] team0: Port device team_slave_0 added [ 131.434367][ T6230] team0: Port device team_slave_1 added [ 131.731028][ T6308] syzkaller0: entered promiscuous mode [ 131.737399][ T6308] syzkaller0: entered allmulticast mode [ 131.825495][ T54] hsr_slave_0: left promiscuous mode [ 131.832877][ T54] hsr_slave_1: left promiscuous mode [ 131.840100][ T54] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 131.853307][ T54] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 131.864078][ T54] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 131.872966][ T54] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 131.881658][ T54] bridge_slave_1: left allmulticast mode [ 131.888007][ T54] bridge_slave_1: left promiscuous mode [ 131.895302][ T54] bridge0: port 2(bridge_slave_1) entered disabled state [ 131.908789][ T54] bridge_slave_0: left allmulticast mode [ 131.914611][ T54] bridge_slave_0: left promiscuous mode [ 131.922711][ T54] bridge0: port 1(bridge_slave_0) entered disabled state [ 131.952333][ T54] veth1_macvtap: left promiscuous mode [ 131.959129][ T54] veth0_macvtap: left promiscuous mode [ 131.964790][ T54] veth1_vlan: left promiscuous mode [ 131.971241][ T54] veth0_vlan: left promiscuous mode [ 132.579835][ T54] team0 (unregistering): Port device team_slave_1 removed [ 132.620244][ T54] team0 (unregistering): Port device team_slave_0 removed [ 132.659671][ T54] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 132.703730][ T54] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 133.102996][ T54] bond0 (unregistering): Released all slaves [ 133.153089][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.160349][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.181861][ T6305] tipc: Started in network mode [ 133.187273][ T6305] tipc: Node identity , cluster identity 4711 [ 133.193454][ T6305] tipc: Failed to obtain node identity [ 133.199107][ T6305] tipc: Enabling of bearer rejected, failed to enable media [ 133.209612][ T6230] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 133.220142][ T6230] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 133.254522][ T6230] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 133.273560][ T6230] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 133.281037][ T6230] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 133.295731][ T5795] Bluetooth: hci2: command tx timeout [ 133.323930][ T6230] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 134.905833][ T6230] hsr_slave_0: entered promiscuous mode [ 134.946487][ T6230] hsr_slave_1: entered promiscuous mode [ 134.964685][ T6230] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 134.979359][ T6230] Cannot create hsr debugfs directory [ 135.144241][ T6325] netlink: 4 bytes leftover after parsing attributes in process `syz.2.79'. [ 135.185420][ T6327] netlink: 64 bytes leftover after parsing attributes in process `syz.1.88'. [ 135.192208][ T6325] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 135.203250][ T6325] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 135.212022][ T6325] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 135.221311][ T6325] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 135.245722][ T6325] netlink: 4 bytes leftover after parsing attributes in process `syz.2.79'. [ 135.370027][ T6331] loop1: detected capacity change from 0 to 512 [ 135.435313][ T5795] Bluetooth: hci2: command tx timeout [ 135.577614][ T6333] netlink: 4 bytes leftover after parsing attributes in process `syz.0.81'. [ 135.658609][ T6335] netlink: 16 bytes leftover after parsing attributes in process `syz.2.83'. [ 136.063301][ T6345] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 137.079675][ T6230] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 137.220933][ T6230] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 137.256758][ T6230] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 137.294911][ T6230] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 137.306986][ T6356] netlink: 4 bytes leftover after parsing attributes in process `syz.2.94'. [ 137.512213][ T6230] 8021q: adding VLAN 0 to HW filter on device bond0 [ 137.559020][ T6230] 8021q: adding VLAN 0 to HW filter on device team0 [ 137.574158][ T54] bridge0: port 1(bridge_slave_0) entered blocking state [ 137.581409][ T54] bridge0: port 1(bridge_slave_0) entered forwarding state [ 137.631454][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 137.638864][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 137.913010][ T6371] netlink: 16 bytes leftover after parsing attributes in process `syz.0.97'. [ 138.106552][ T6377] netlink: 16 bytes leftover after parsing attributes in process `syz.0.99'. [ 138.138446][ T6381] tipc: Enabling of bearer rejected, failed to enable media [ 138.370623][ T6388] netlink: 64 bytes leftover after parsing attributes in process `syz.2.91'. [ 138.456675][ T6230] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 138.604756][ T6395] loop1: detected capacity change from 0 to 512 [ 138.680772][ T6230] veth0_vlan: entered promiscuous mode [ 138.722492][ T6230] veth1_vlan: entered promiscuous mode [ 138.866643][ T6230] veth0_macvtap: entered promiscuous mode [ 138.893680][ T6230] veth1_macvtap: entered promiscuous mode [ 139.151839][ T6406] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 139.825436][ T6408] netlink: 4 bytes leftover after parsing attributes in process `syz.2.98'. [ 139.909074][ T6230] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 139.924265][ T6230] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 139.948768][ T6230] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 139.981153][ T6230] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 139.994239][ T6230] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 140.010725][ T6230] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 140.024396][ T6230] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 140.074339][ T6230] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 140.105671][ T6230] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 140.116106][ T6230] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 140.127137][ T6230] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 140.137175][ T6230] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 140.152886][ T6230] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 140.172538][ T6230] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 140.202592][ T6230] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 140.271116][ T6230] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 140.292458][ T6230] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 140.329328][ T6230] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 140.505100][ T133] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 140.513132][ T133] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 140.613830][ T6419] syzkaller0: entered promiscuous mode [ 140.624285][ T6419] syzkaller0: entered allmulticast mode [ 140.688739][ T3472] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 140.710947][ T3472] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 140.834531][ T6429] netlink: 64 bytes leftover after parsing attributes in process `syz.2.105'. [ 140.854299][ T6419] tipc: Started in network mode [ 140.880351][ T6419] tipc: Node identity , cluster identity 4711 [ 140.915669][ T6419] tipc: Failed to obtain node identity [ 140.922328][ T6419] tipc: Enabling of bearer rejected, failed to enable media [ 140.946661][ T6427] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 141.433451][ T6431] loop3: detected capacity change from 0 to 32768 [ 141.579843][ T6431] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 142.331994][ T6435] syz.3.53 (6435) used greatest stack depth: 18856 bytes left [ 142.623612][ T6230] (syz-executor,6230,0):ocfs2_inode_is_valid_to_delete:872 ERROR: Skipping delete of system file 72 [ 142.680716][ T6230] ocfs2: Unmounting device (7,3) on (node local) [ 142.962039][ T6446] loop3: detected capacity change from 0 to 512 [ 144.973629][ T6457] netlink: 4 bytes leftover after parsing attributes in process `syz.2.110'. [ 145.384560][ T6467] netlink: 64 bytes leftover after parsing attributes in process `syz.0.116'. [ 145.591974][ T6472] loop3: detected capacity change from 0 to 512 [ 145.695476][ T6473] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 146.532445][ T6479] syzkaller1: entered promiscuous mode [ 146.538525][ T6479] syzkaller1: entered allmulticast mode [ 146.796362][ T6476] loop0: detected capacity change from 0 to 32768 [ 146.893642][ T6476] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 147.111516][ T6492] netlink: 64 bytes leftover after parsing attributes in process `syz.1.126'. [ 147.949730][ T5800] (syz-executor,5800,0):ocfs2_inode_is_valid_to_delete:872 ERROR: Skipping delete of system file 72 [ 147.966095][ T6501] loop1: detected capacity change from 0 to 512 [ 148.054639][ T5800] ocfs2: Unmounting device (7,0) on (node local) [ 148.091116][ T6502] netlink: 4 bytes leftover after parsing attributes in process `syz.3.129'. [ 148.717136][ T6518] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 149.655323][ T6524] netlink: 64 bytes leftover after parsing attributes in process `syz.2.139'. [ 149.909996][ T6521] loop3: detected capacity change from 0 to 32768 [ 149.982258][ T6521] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 150.088468][ T6531] loop0: detected capacity change from 0 to 512 [ 151.032586][ T6230] (syz-executor,6230,1):ocfs2_inode_is_valid_to_delete:872 ERROR: Skipping delete of system file 72 [ 151.096887][ T6230] ocfs2: Unmounting device (7,3) on (node local) [ 151.629794][ T6553] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 152.092680][ T6556] netlink: 64 bytes leftover after parsing attributes in process `syz.0.151'. [ 152.445929][ T6542] netlink: 4 bytes leftover after parsing attributes in process `syz.2.146'. [ 152.581783][ T6562] loop1: detected capacity change from 0 to 512 [ 153.374817][ T6580] netlink: 64 bytes leftover after parsing attributes in process `syz.3.162'. [ 154.284873][ T6592] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 154.292046][ T6591] loop1: detected capacity change from 0 to 512 [ 154.547967][ T6570] netlink: 4 bytes leftover after parsing attributes in process `syz.0.165'. [ 155.055904][ T6607] netlink: 64 bytes leftover after parsing attributes in process `syz.2.174'. [ 155.516767][ T6612] loop0: detected capacity change from 0 to 32768 [ 155.516935][ T6617] loop1: detected capacity change from 0 to 512 [ 155.589314][ T6612] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 156.567062][ T5800] (syz-executor,5800,1):ocfs2_inode_is_valid_to_delete:872 ERROR: Skipping delete of system file 72 [ 156.604100][ T5800] ocfs2: Unmounting device (7,0) on (node local) [ 156.927403][ T6639] netlink: 64 bytes leftover after parsing attributes in process `syz.0.186'. [ 157.343536][ T6648] netlink: 4 bytes leftover after parsing attributes in process `syz.1.184'. [ 157.780933][ T6659] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 159.065017][ T6669] netlink: 64 bytes leftover after parsing attributes in process `syz.0.199'. [ 159.092818][ T6670] loop1: detected capacity change from 0 to 512 [ 159.679153][ T6679] loop0: detected capacity change from 0 to 32768 [ 159.755877][ T6679] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 160.135967][ T6695] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 160.758130][ T5800] (syz-executor,5800,1):ocfs2_inode_is_valid_to_delete:872 ERROR: Skipping delete of system file 72 [ 160.944602][ T5800] ocfs2: Unmounting device (7,0) on (node local) [ 161.350135][ T6703] netlink: 64 bytes leftover after parsing attributes in process `syz.0.212'. [ 161.427455][ T6702] netlink: 4 bytes leftover after parsing attributes in process `syz.3.208'. [ 161.911311][ T6717] loop1: detected capacity change from 0 to 32768 [ 161.991872][ T6717] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 162.053339][ T6725] loop3: detected capacity change from 0 to 512 [ 162.126728][ T6728] netlink: 64 bytes leftover after parsing attributes in process `syz.2.225'. [ 162.640646][ T6737] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 162.762730][ T5793] (syz-executor,5793,0):ocfs2_inode_is_valid_to_delete:872 ERROR: Skipping delete of system file 72 [ 163.203591][ T5793] ocfs2: Unmounting device (7,1) on (node local) [ 163.490488][ T6741] netlink: 12 bytes leftover after parsing attributes in process `syz.3.230'. [ 163.507014][ T6741] netlink: 108 bytes leftover after parsing attributes in process `syz.3.230'. [ 163.783102][ T6745] ksmbd: Unknown IPC event: 6, ignore. [ 163.798058][ T6746] netlink: 24 bytes leftover after parsing attributes in process `syz.1.228'. [ 163.818878][ T6746] netlink: 24 bytes leftover after parsing attributes in process `syz.1.228'. [ 163.832202][ T6748] netlink: 4 bytes leftover after parsing attributes in process `syz.2.231'. [ 163.954453][ T6754] netlink: 64 bytes leftover after parsing attributes in process `syz.1.234'. [ 164.078018][ T6758] loop0: detected capacity change from 0 to 512 [ 164.352578][ T6756] loop1: detected capacity change from 0 to 32768 [ 164.507455][ T6756] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 165.122780][ T5793] (syz-executor,5793,0):ocfs2_inode_is_valid_to_delete:872 ERROR: Skipping delete of system file 72 [ 165.147410][ T6779] netlink: 64 bytes leftover after parsing attributes in process `syz.0.244'. [ 165.149631][ T6777] netlink: 24 bytes leftover after parsing attributes in process `syz.3.242'. [ 165.178642][ T5793] ocfs2: Unmounting device (7,1) on (node local) [ 165.179392][ T6777] netlink: 24 bytes leftover after parsing attributes in process `syz.3.242'. [ 165.264264][ T6780] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 165.978980][ T6783] loop0: detected capacity change from 0 to 512 [ 166.480166][ T6790] netlink: 4 bytes leftover after parsing attributes in process `syz.0.247'. [ 166.592359][ T6796] netlink: 12 bytes leftover after parsing attributes in process `syz.2.249'. [ 166.694014][ T6796] netlink: 108 bytes leftover after parsing attributes in process `syz.2.249'. [ 166.934762][ T6806] netlink: 64 bytes leftover after parsing attributes in process `syz.3.253'. [ 166.980307][ T6808] netlink: 24 bytes leftover after parsing attributes in process `syz.2.254'. [ 167.019106][ T6808] netlink: 24 bytes leftover after parsing attributes in process `syz.2.254'. [ 167.036211][ T6804] loop1: detected capacity change from 0 to 32768 [ 167.167735][ T6804] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 167.362417][ T6815] loop0: detected capacity change from 0 to 512 [ 167.689831][ T5793] (syz-executor,5793,1):ocfs2_inode_is_valid_to_delete:872 ERROR: Skipping delete of system file 72 [ 167.758173][ T5793] ocfs2: Unmounting device (7,1) on (node local) [ 167.897629][ T6825] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 168.799438][ T6833] loop3: detected capacity change from 0 to 512 [ 169.004081][ T6840] netlink: 8 bytes leftover after parsing attributes in process `syz.3.265'. [ 169.043227][ T6840] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 169.052812][ T6840] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 169.062083][ T6840] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 169.071211][ T6840] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 169.388318][ T6850] ksmbd: Unknown IPC event: 6, ignore. [ 169.766365][ T6852] loop3: detected capacity change from 0 to 32768 [ 169.838425][ T6852] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 170.156284][ T6870] __nla_validate_parse: 7 callbacks suppressed [ 170.156304][ T6870] netlink: 64 bytes leftover after parsing attributes in process `syz.0.276'. [ 170.430284][ T6230] (syz-executor,6230,1):ocfs2_inode_is_valid_to_delete:872 ERROR: Skipping delete of system file 72 [ 170.523341][ T6872] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 170.718112][ T6230] ocfs2: Unmounting device (7,3) on (node local) [ 171.243109][ T6874] netlink: 8 bytes leftover after parsing attributes in process `syz.0.278'. [ 171.262350][ T6874] netlink: 4 bytes leftover after parsing attributes in process `syz.0.278'. [ 171.285792][ T6874] netlink: 8 bytes leftover after parsing attributes in process `syz.0.278'. [ 171.325746][ T6874] netlink: 4 bytes leftover after parsing attributes in process `syz.0.278'. [ 171.886096][ T6892] netlink: 12 bytes leftover after parsing attributes in process `syz.0.284'. [ 171.950473][ T6896] netlink: 108 bytes leftover after parsing attributes in process `syz.0.284'. [ 172.229988][ T6895] netlink: 4 bytes leftover after parsing attributes in process `syz.1.285'. [ 172.914992][ T6902] loop1: detected capacity change from 0 to 512 [ 173.316256][ T6909] netlink: 8 bytes leftover after parsing attributes in process `syz.0.289'. [ 173.357936][ T6909] netlink: 4 bytes leftover after parsing attributes in process `syz.0.289'. [ 175.389062][ T6935] loop1: detected capacity change from 0 to 32768 [ 175.482095][ T6935] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 176.652585][ T5793] (syz-executor,5793,0):ocfs2_inode_is_valid_to_delete:872 ERROR: Skipping delete of system file 72 [ 176.727323][ T5793] ocfs2: Unmounting device (7,1) on (node local) [ 177.110066][ T6956] __nla_validate_parse: 3 callbacks suppressed [ 177.110083][ T6956] netlink: 4 bytes leftover after parsing attributes in process `syz.0.305'. [ 178.299920][ T6974] loop0: detected capacity change from 0 to 32768 [ 179.038175][ T6974] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 179.881943][ T5800] (syz-executor,5800,1):ocfs2_inode_is_valid_to_delete:872 ERROR: Skipping delete of system file 72 [ 179.929540][ T5800] ocfs2: Unmounting device (7,0) on (node local) [ 180.315517][ T7002] netlink: 28 bytes leftover after parsing attributes in process `syz.2.322'. [ 180.361060][ T7002] netlink: 44 bytes leftover after parsing attributes in process `syz.2.322'. [ 180.569774][ T7003] loop0: detected capacity change from 0 to 32768 [ 180.800620][ T7003] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 180.843807][ T7008] netlink: 4 bytes leftover after parsing attributes in process `syz.2.323'. [ 181.012895][ T7010] loop1: detected capacity change from 0 to 512 [ 181.236077][ T5800] (syz-executor,5800,1):ocfs2_inode_is_valid_to_delete:872 ERROR: Skipping delete of system file 72 [ 181.268936][ T6878] Set syz1 is full, maxelem 65536 reached [ 181.294986][ T5800] ocfs2: Unmounting device (7,0) on (node local) [ 181.840322][ T7026] netlink: 28 bytes leftover after parsing attributes in process `syz.1.332'. [ 181.856311][ T7026] netlink: 44 bytes leftover after parsing attributes in process `syz.1.332'. [ 182.869129][ T7036] loop3: detected capacity change from 0 to 512 [ 183.466987][ T7046] netlink: 4 bytes leftover after parsing attributes in process `syz.1.337'. [ 183.588995][ T7049] netlink: 28 bytes leftover after parsing attributes in process `syz.3.341'. [ 183.622979][ T7049] netlink: 44 bytes leftover after parsing attributes in process `syz.3.341'. [ 183.826564][ T7055] loop3: detected capacity change from 0 to 1024 [ 184.087011][ T7055] hfsplus: xattr searching failed [ 185.414687][ T7069] loop1: detected capacity change from 0 to 32768 [ 185.515470][ T7069] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 185.915387][ T7078] netlink: 28 bytes leftover after parsing attributes in process `syz.3.351'. [ 185.970818][ T5793] (syz-executor,5793,1):ocfs2_inode_is_valid_to_delete:872 ERROR: Skipping delete of system file 72 [ 186.045507][ T7078] netlink: 44 bytes leftover after parsing attributes in process `syz.3.351'. [ 186.138825][ T5793] ocfs2: Unmounting device (7,1) on (node local) [ 186.263103][ T7082] netlink: 4 bytes leftover after parsing attributes in process `syz.2.352'. [ 187.877718][ T7101] loop1: detected capacity change from 0 to 1024 [ 188.061273][ T7101] hfsplus: xattr searching failed [ 188.133154][ T7106] binder: 7105:7106 unknown command 0 [ 188.169531][ T7106] binder: 7105:7106 ioctl c0306201 200000000080 returned -22 [ 188.212614][ T7106] binder: 7105:7106 ioctl c0306201 200000000280 returned -14 [ 188.506389][ T7109] loop1: detected capacity change from 0 to 32768 [ 188.537076][ T7111] netlink: 28 bytes leftover after parsing attributes in process `syz.3.363'. [ 188.561851][ T7111] netlink: 44 bytes leftover after parsing attributes in process `syz.3.363'. [ 188.674563][ T7109] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 188.887074][ T5793] (syz-executor,5793,0):ocfs2_inode_is_valid_to_delete:872 ERROR: Skipping delete of system file 72 [ 188.983829][ T5793] ocfs2: Unmounting device (7,1) on (node local) [ 189.101684][ T7120] netlink: 4 bytes leftover after parsing attributes in process `syz.3.364'. [ 190.519066][ T7135] loop3: detected capacity change from 0 to 1024 [ 190.547168][ T7139] netlink: 28 bytes leftover after parsing attributes in process `syz.1.372'. [ 190.557785][ T7139] netlink: 44 bytes leftover after parsing attributes in process `syz.1.372'. [ 191.990913][ T7151] loop3: detected capacity change from 0 to 32768 [ 192.227861][ T7151] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 192.306550][ T6230] (syz-executor,6230,1):ocfs2_inode_is_valid_to_delete:872 ERROR: Skipping delete of system file 72 [ 192.354064][ T7160] netlink: 4 bytes leftover after parsing attributes in process `syz.2.379'. [ 192.363498][ T6230] ocfs2: Unmounting device (7,3) on (node local) [ 192.648426][ T7166] netlink: 20 bytes leftover after parsing attributes in process `syz.3.382'. [ 192.692327][ T7166] netlink: 36 bytes leftover after parsing attributes in process `syz.3.382'. [ 192.962017][ T7040] Set syz1 is full, maxelem 65536 reached [ 194.580876][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.587715][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.078547][ T7192] overlayfs: missing 'lowerdir' [ 195.255363][ T7200] netlink: 20 bytes leftover after parsing attributes in process `syz.2.395'. [ 195.335867][ T7200] netlink: 36 bytes leftover after parsing attributes in process `syz.2.395'. [ 195.541841][ T7205] netlink: 4 bytes leftover after parsing attributes in process `syz.0.393'. [ 195.603766][ T7209] syzkaller1: entered promiscuous mode [ 195.612001][ T7209] syzkaller1: entered allmulticast mode [ 197.650674][ T7223] loop0: detected capacity change from 0 to 512 [ 197.682782][ T7223] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 197.734698][ T7223] EXT4-fs (loop0): 1 truncate cleaned up [ 197.791212][ T7223] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 198.025014][ T7223] input input8: cannot allocate more than FF_MAX_EFFECTS effects [ 198.043960][ T7233] bridge0: port 2(bridge_slave_1) entered disabled state [ 198.051786][ T7233] bridge0: port 1(bridge_slave_0) entered disabled state [ 198.100740][ T7235] netlink: 'syz.2.409': attribute type 1 has an invalid length. [ 198.165527][ T5800] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 198.351816][ T7239] syzkaller1: entered promiscuous mode [ 198.367665][ T7239] syzkaller1: entered allmulticast mode [ 199.557224][ T7249] loop1: detected capacity change from 0 to 1024 [ 199.626070][ T7254] netlink: 20 bytes leftover after parsing attributes in process `syz.3.407'. [ 199.653437][ T7254] netlink: 36 bytes leftover after parsing attributes in process `syz.3.407'. [ 199.884619][ T7258] netlink: 4 bytes leftover after parsing attributes in process `syz.2.415'. [ 199.991815][ T7263] netlink: 8 bytes leftover after parsing attributes in process `syz.0.419'. [ 200.011592][ T7263] netlink: 4 bytes leftover after parsing attributes in process `syz.0.419'. [ 200.023422][ T7263] netlink: 8 bytes leftover after parsing attributes in process `syz.0.419'. [ 200.041862][ T7263] netlink: 4 bytes leftover after parsing attributes in process `syz.0.419'. [ 200.249614][ T7270] bridge0: port 2(bridge_slave_1) entered disabled state [ 200.257482][ T7270] bridge0: port 1(bridge_slave_0) entered disabled state [ 200.276569][ T5777] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 200.323207][ T7270] netlink: 'syz.3.423': attribute type 1 has an invalid length. [ 200.338897][ T7270] loop3: detected capacity change from 0 to 8 [ 200.363931][ T7270] SQUASHFS error: lzo decompression failed, data probably corrupt [ 200.391241][ T7270] SQUASHFS error: Failed to read block 0x91: -5 [ 200.411329][ T7270] SQUASHFS error: Unable to read metadata cache entry [8f] [ 200.437932][ T7270] SQUASHFS error: Unable to read inode 0x11f [ 200.555247][ T5777] usb 2-1: Using ep0 maxpacket: 32 [ 200.586540][ T5777] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 200.602586][ T5777] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 200.625271][ T5777] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 200.634132][ T7280] netlink: 20 bytes leftover after parsing attributes in process `syz.2.426'. [ 200.645616][ T5777] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 200.656388][ T7280] netlink: 36 bytes leftover after parsing attributes in process `syz.2.426'. [ 200.685546][ T5777] usb 2-1: config 0 descriptor?? [ 203.393696][ T7295] netlink: 8 bytes leftover after parsing attributes in process `syz.0.430'. [ 203.412462][ T7295] netlink: 4 bytes leftover after parsing attributes in process `syz.0.430'. [ 203.412564][ T7288] input: syz1 as /devices/virtual/input/input9 [ 203.445618][ T5777] savu 0003:1E7D:2D5A.0004: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.1-1/input0 [ 203.468049][ T7295] netlink: 8 bytes leftover after parsing attributes in process `syz.0.430'. [ 203.492975][ T7295] netlink: 4 bytes leftover after parsing attributes in process `syz.0.430'. [ 203.503913][ T5777] usb 2-1: USB disconnect, device number 3 [ 203.567653][ T7302] loop1: detected capacity change from 0 to 1024 [ 203.903082][ T7303] fido_id[7303]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 204.012774][ T7309] loop3: detected capacity change from 0 to 512 [ 204.044892][ T7309] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 204.068684][ T7310] netlink: 4 bytes leftover after parsing attributes in process `syz.2.434'. [ 204.095854][ T7309] EXT4-fs (loop3): 1 truncate cleaned up [ 204.104228][ T7309] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 204.129845][ T7316] netlink: 20 bytes leftover after parsing attributes in process `syz.1.437'. [ 204.140366][ T7316] netlink: 36 bytes leftover after parsing attributes in process `syz.1.437'. [ 207.658555][ T7309] input input10: cannot allocate more than FF_MAX_EFFECTS effects [ 207.816710][ T6230] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 208.215469][ T5876] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 208.268478][ T7336] netlink: 20 bytes leftover after parsing attributes in process `syz.0.447'. [ 208.311298][ T7336] netlink: 36 bytes leftover after parsing attributes in process `syz.0.447'. [ 208.416686][ T5876] usb 4-1: Using ep0 maxpacket: 32 [ 208.424052][ T5876] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 208.445156][ T5876] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 208.467553][ T5876] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 208.485551][ T5876] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 208.517602][ T5876] usb 4-1: config 0 descriptor?? [ 208.976443][ T7345] netlink: 8 bytes leftover after parsing attributes in process `syz.1.442'. [ 208.983363][ T5876] savu 0003:1E7D:2D5A.0005: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.3-1/input0 [ 208.991099][ T7345] netlink: 4 bytes leftover after parsing attributes in process `syz.1.442'. [ 209.015808][ T7345] netlink: 8 bytes leftover after parsing attributes in process `syz.1.442'. [ 209.033975][ T7343] netlink: 4 bytes leftover after parsing attributes in process `syz.0.449'. [ 209.040474][ T7345] netlink: 4 bytes leftover after parsing attributes in process `syz.1.442'. [ 209.337635][ T7330] loop3: detected capacity change from 0 to 4096 [ 209.388333][ T7330] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 210.126298][ T7330] fs-verity: sha512 using implementation "sha512-avx2" [ 211.764337][ T7330] fs-verity (loop3, inode 16): Error -4 reading file data [ 211.875335][ T7330] fs-verity (loop3, inode 16): Error -4 building Merkle tree [ 213.132739][ T9] usb 4-1: reset high-speed USB device number 2 using dummy_hcd [ 213.187723][ T7363] loop1: detected capacity change from 0 to 1024 [ 213.350719][ T6230] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 213.673240][ T7369] input: syz0 as /devices/virtual/input/input11 [ 214.138979][ T787] usb 4-1: USB disconnect, device number 2 [ 214.192683][ T7376] netlink: 8 bytes leftover after parsing attributes in process `syz.1.460'. [ 214.226391][ T7376] netlink: 4 bytes leftover after parsing attributes in process `syz.1.460'. [ 214.276155][ T7376] netlink: 8 bytes leftover after parsing attributes in process `syz.1.460'. [ 214.297566][ T7376] netlink: 4 bytes leftover after parsing attributes in process `syz.1.460'. [ 214.411717][ T7371] kvm: kvm [7370]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0x808 [ 214.435730][ T7371] kvm: kvm [7370]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0x820 [ 214.480041][ T7371] kvm: kvm [7370]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0x800 [ 214.528216][ T7371] kvm: kvm [7370]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x800 [ 214.788974][ T7380] netlink: 4 bytes leftover after parsing attributes in process `syz.1.461'. [ 214.950891][ T7384] netlink: 16 bytes leftover after parsing attributes in process `syz.0.456'. [ 215.044439][ T7386] netlink: 8 bytes leftover after parsing attributes in process `syz.2.471'. [ 215.085322][ T7386] netlink: 4 bytes leftover after parsing attributes in process `syz.2.471'. [ 215.099530][ T7386] netlink: 8 bytes leftover after parsing attributes in process `syz.2.471'. [ 215.109412][ T7386] netlink: 4 bytes leftover after parsing attributes in process `syz.2.471'. [ 216.510302][ T7400] loop1: detected capacity change from 0 to 1024 [ 218.494016][ T7412] netlink: 'syz.2.474': attribute type 1 has an invalid length. [ 220.100746][ T7429] __nla_validate_parse: 2 callbacks suppressed [ 220.100764][ T7429] netlink: 16 bytes leftover after parsing attributes in process `syz.2.482'. [ 222.534491][ T7448] netlink: 4 bytes leftover after parsing attributes in process `syz.2.487'. [ 223.199671][ T7450] netlink: 8 bytes leftover after parsing attributes in process `syz.2.488'. [ 223.240926][ T7450] netlink: 4 bytes leftover after parsing attributes in process `syz.2.488'. [ 223.280478][ T7450] netlink: 8 bytes leftover after parsing attributes in process `syz.2.488'. [ 223.320488][ T7450] netlink: 4 bytes leftover after parsing attributes in process `syz.2.488'. [ 223.733166][ T7461] netlink: 16 bytes leftover after parsing attributes in process `syz.0.493'. [ 223.746977][ T7462] input: syz0 as /devices/virtual/input/input12 [ 227.044692][ T7485] netlink: 8 bytes leftover after parsing attributes in process `syz.0.501'. [ 227.057736][ T7485] netlink: 4 bytes leftover after parsing attributes in process `syz.0.501'. [ 227.070193][ T7485] netlink: 8 bytes leftover after parsing attributes in process `syz.0.501'. [ 227.087436][ T7485] netlink: 4 bytes leftover after parsing attributes in process `syz.0.501'. [ 233.500962][ T7509] loop1: detected capacity change from 0 to 128 [ 233.566385][ T7512] netlink: 8 bytes leftover after parsing attributes in process `syz.2.512'. [ 233.576104][ T7512] netlink: 4 bytes leftover after parsing attributes in process `syz.2.512'. [ 233.585702][ T7512] netlink: 8 bytes leftover after parsing attributes in process `syz.2.512'. [ 233.594514][ T7512] netlink: 4 bytes leftover after parsing attributes in process `syz.2.512'. [ 233.673344][ T28] audit: type=1804 audit(1756382434.545:2): pid=7509 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.498" name="/newroot/129/file0/bus" dev="loop1" ino=1048619 res=1 errno=0 [ 235.887356][ T7526] input: syz0 as /devices/virtual/input/input13 [ 237.532656][ T7545] netlink: 8 bytes leftover after parsing attributes in process `syz.1.523'. [ 237.559501][ T7545] netlink: 4 bytes leftover after parsing attributes in process `syz.1.523'. [ 237.600566][ T7545] netlink: 8 bytes leftover after parsing attributes in process `syz.1.523'. [ 237.615276][ T7545] netlink: 4 bytes leftover after parsing attributes in process `syz.1.523'. [ 243.103978][ T7579] input: syz0 as /devices/virtual/input/input14 [ 243.212896][ T7582] netlink: 8 bytes leftover after parsing attributes in process `syz.3.534'. [ 243.245433][ T7582] netlink: 4 bytes leftover after parsing attributes in process `syz.3.534'. [ 243.254837][ T7582] netlink: 8 bytes leftover after parsing attributes in process `syz.3.534'. [ 243.303247][ T7582] netlink: 4 bytes leftover after parsing attributes in process `syz.3.534'. [ 245.348014][ T7594] netlink: 4 bytes leftover after parsing attributes in process `syz.3.538'. [ 247.462671][ T7602] netlink: 24 bytes leftover after parsing attributes in process `syz.3.542'. [ 248.786380][ T7614] netlink: 8 bytes leftover after parsing attributes in process `syz.2.546'. [ 248.815299][ T7614] netlink: 4 bytes leftover after parsing attributes in process `syz.2.546'. [ 248.856719][ T7614] netlink: 8 bytes leftover after parsing attributes in process `syz.2.546'. [ 248.900925][ T7614] netlink: 4 bytes leftover after parsing attributes in process `syz.2.546'. [ 249.356193][ T7617] netlink: 4 bytes leftover after parsing attributes in process `syz.2.548'. [ 250.562845][ T7628] syzkaller1: entered promiscuous mode [ 250.580261][ T7628] syzkaller1: entered allmulticast mode [ 251.969611][ T7638] loop1: detected capacity change from 0 to 256 [ 252.005483][ T7640] netlink: 8 bytes leftover after parsing attributes in process `syz.0.556'. [ 252.014389][ T7638] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 252.095300][ T7640] netlink: 4 bytes leftover after parsing attributes in process `syz.0.556'. [ 252.115889][ T7640] netlink: 8 bytes leftover after parsing attributes in process `syz.0.556'. [ 252.137704][ T7640] netlink: 4 bytes leftover after parsing attributes in process `syz.0.556'. [ 252.815136][ T7654] netlink: 4 bytes leftover after parsing attributes in process `syz.3.559'. [ 256.151466][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.158109][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.574098][ T7690] 9pnet_fd: Insufficient options for proto=fd [ 257.525729][ T7700] __nla_validate_parse: 1 callbacks suppressed [ 257.525747][ T7700] netlink: 40 bytes leftover after parsing attributes in process `syz.1.575'. [ 257.542992][ T7698] netlink: 4 bytes leftover after parsing attributes in process `syz.0.571'. [ 258.901359][ T7708] loop1: detected capacity change from 0 to 1024 [ 259.986921][ T7720] 9pnet_fd: Insufficient options for proto=fd [ 260.675599][ T7724] netlink: 8 bytes leftover after parsing attributes in process `syz.2.566'. [ 260.684490][ T7724] netlink: 4 bytes leftover after parsing attributes in process `syz.2.566'. [ 260.861073][ T7724] netlink: 8 bytes leftover after parsing attributes in process `syz.2.566'. [ 260.907441][ T7724] netlink: 4 bytes leftover after parsing attributes in process `syz.2.566'. [ 262.427821][ T7738] netlink: 4 bytes leftover after parsing attributes in process `syz.1.584'. [ 264.812525][ T7748] loop1: detected capacity change from 0 to 1024 [ 270.547297][ T7786] 9pnet_fd: Insufficient options for proto=fd [ 272.313058][ T7796] netlink: 4 bytes leftover after parsing attributes in process `syz.1.596'. [ 275.391025][ T7818] loop1: detected capacity change from 0 to 1024 [ 275.488177][ T7818] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 275.539329][ T7818] ext4 filesystem being mounted at /153/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 275.852585][ T7827] EXT4-fs error (device loop1): ext4_validate_block_bitmap:439: comm syz.1.610: bg 0: block 393: padding at end of block bitmap is not set [ 275.993480][ T7827] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 268 with max blocks 36 with error 117 [ 276.077160][ T7827] EXT4-fs (loop1): This should not happen!! Data will be lost [ 276.077160][ T7827] [ 276.307884][ T7827] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 2050 with max blocks 1 with error 28 [ 276.574512][ T7827] EXT4-fs (loop1): This should not happen!! Data will be lost [ 276.574512][ T7827] [ 276.834406][ T7827] EXT4-fs (loop1): Total free blocks count 0 [ 276.866810][ T7827] EXT4-fs (loop1): Free/Dirty block details [ 276.872839][ T7827] EXT4-fs (loop1): free_blocks=0 [ 276.877986][ T7827] EXT4-fs (loop1): dirty_blocks=32 [ 276.883154][ T7827] EXT4-fs (loop1): Block reservation details [ 276.987355][ T7836] netlink: 8 bytes leftover after parsing attributes in process `syz.3.607'. [ 276.998019][ T7836] netlink: 4 bytes leftover after parsing attributes in process `syz.3.607'. [ 277.007665][ T7836] netlink: 8 bytes leftover after parsing attributes in process `syz.3.607'. [ 277.016614][ T7836] netlink: 4 bytes leftover after parsing attributes in process `syz.3.607'. [ 277.407759][ T7846] netlink: 4 bytes leftover after parsing attributes in process `syz.3.615'. [ 282.907901][ T7871] netlink: 8 bytes leftover after parsing attributes in process `syz.3.624'. [ 282.930137][ T7871] netlink: 4 bytes leftover after parsing attributes in process `syz.3.624'. [ 282.955537][ T7871] netlink: 8 bytes leftover after parsing attributes in process `syz.3.624'. [ 282.964523][ T7871] netlink: 4 bytes leftover after parsing attributes in process `syz.3.624'. [ 283.399426][ T7879] netlink: 4 bytes leftover after parsing attributes in process `syz.3.627'. [ 286.196986][ T7902] netlink: 8 bytes leftover after parsing attributes in process `syz.3.635'. [ 286.230101][ T7902] netlink: 4 bytes leftover after parsing attributes in process `syz.3.635'. [ 286.249930][ T7902] netlink: 8 bytes leftover after parsing attributes in process `syz.3.635'. [ 286.275315][ T7902] netlink: 4 bytes leftover after parsing attributes in process `syz.3.635'. [ 286.349858][ T7906] syzkaller1: entered promiscuous mode [ 286.355999][ T7906] syzkaller1: entered allmulticast mode [ 286.859773][ T7916] netlink: 4 bytes leftover after parsing attributes in process `syz.2.641'. [ 289.248997][ T7933] netlink: 8 bytes leftover after parsing attributes in process `syz.2.647'. [ 289.261823][ T7933] netlink: 4 bytes leftover after parsing attributes in process `syz.2.647'. [ 289.271229][ T7933] netlink: 8 bytes leftover after parsing attributes in process `syz.2.647'. [ 289.281786][ T7933] netlink: 4 bytes leftover after parsing attributes in process `syz.2.647'. [ 289.551602][ T7945] netlink: 9 bytes leftover after parsing attributes in process `syz.2.651'. [ 289.574427][ T7945] gretap0: entered promiscuous mode [ 289.615459][ T5876] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 289.960349][ T7952] netlink: 4 bytes leftover after parsing attributes in process `syz.2.652'. [ 290.271213][ T5876] usb 2-1: Using ep0 maxpacket: 32 [ 290.288117][ T5876] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 212, changing to 11 [ 290.300072][ T5876] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59052, setting to 1024 [ 290.311363][ T5876] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 290.400706][ T5876] usb 2-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 290.410845][ T5876] usb 2-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 290.420817][ T5876] usb 2-1: Product: syz [ 290.456960][ T5876] usb 2-1: Manufacturer: syz [ 290.470897][ T5876] usb 2-1: SerialNumber: syz [ 291.223742][ T7935] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 291.280223][ T5876] input: appletouch as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/input/input16 [ 291.365444][ C0] appletouch 2-1:1.0: atp_complete: usb_submit_urb failed with result -1 [ 292.412596][ T7975] netlink: 8 bytes leftover after parsing attributes in process `syz.0.657'. [ 292.424114][ T7975] netlink: 4 bytes leftover after parsing attributes in process `syz.0.657'. [ 292.449461][ T7975] netlink: 8 bytes leftover after parsing attributes in process `syz.0.657'. [ 292.458871][ T7975] netlink: 4 bytes leftover after parsing attributes in process `syz.0.657'. [ 292.725400][ T27] usb 2-1: USB disconnect, device number 4 [ 292.796039][ T27] appletouch 2-1:1.0: input: appletouch disconnected [ 296.253629][ T8032] __nla_validate_parse: 5 callbacks suppressed [ 296.253647][ T8032] netlink: 8 bytes leftover after parsing attributes in process `syz.2.677'. [ 296.315312][ T8032] netlink: 4 bytes leftover after parsing attributes in process `syz.2.677'. [ 296.376900][ T8032] netlink: 8 bytes leftover after parsing attributes in process `syz.2.677'. [ 296.401768][ T8032] netlink: 4 bytes leftover after parsing attributes in process `syz.2.677'. [ 297.967658][ T8046] netlink: 4 bytes leftover after parsing attributes in process `syz.3.680'. [ 302.418351][ T8072] netlink: 8 bytes leftover after parsing attributes in process `syz.1.690'. [ 302.457808][ T8072] netlink: 4 bytes leftover after parsing attributes in process `syz.1.690'. [ 302.496265][ T8072] netlink: 8 bytes leftover after parsing attributes in process `syz.1.690'. [ 302.533516][ T8072] netlink: 4 bytes leftover after parsing attributes in process `syz.1.690'. [ 302.581886][ T8080] netlink: 16 bytes leftover after parsing attributes in process `syz.0.692'. [ 304.385217][ T8087] loop1: detected capacity change from 0 to 128 [ 304.565877][ T8087] FAT-fs (loop1): bogus number of reserved sectors [ 304.572672][ T8087] FAT-fs (loop1): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 304.609048][ T8087] FAT-fs (loop1): Can't find a valid FAT filesystem [ 305.237264][ T8094] netlink: 4 bytes leftover after parsing attributes in process `syz.3.693'. [ 307.675605][ T8115] netlink: 16 bytes leftover after parsing attributes in process `syz.3.702'. [ 308.856357][ T8117] netlink: 8 bytes leftover after parsing attributes in process `syz.1.703'. [ 308.913836][ T8117] netlink: 4 bytes leftover after parsing attributes in process `syz.1.703'. [ 310.100578][ T8117] netlink: 8 bytes leftover after parsing attributes in process `syz.1.703'. [ 310.110405][ T8117] netlink: 4 bytes leftover after parsing attributes in process `syz.1.703'. [ 310.311984][ T8132] 9pnet_fd: Insufficient options for proto=fd [ 310.608184][ T8134] netlink: 4 bytes leftover after parsing attributes in process `syz.1.710'. [ 311.678045][ T8148] netlink: 16 bytes leftover after parsing attributes in process `syz.1.714'. [ 313.830213][ T8155] netlink: 8 bytes leftover after parsing attributes in process `syz.2.718'. [ 313.842538][ T8155] netlink: 4 bytes leftover after parsing attributes in process `syz.2.718'. [ 313.852156][ T8155] netlink: 8 bytes leftover after parsing attributes in process `syz.2.718'. [ 313.870661][ T8155] netlink: 4 bytes leftover after parsing attributes in process `syz.2.718'. [ 316.975552][ T8172] netlink: 64 bytes leftover after parsing attributes in process `syz.0.723'. [ 317.302017][ T8174] netlink: 16 bytes leftover after parsing attributes in process `syz.0.724'. [ 317.461686][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.468774][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 319.755935][ T8195] 9pnet_fd: Insufficient options for proto=fd [ 320.626457][ T8201] netlink: 64 bytes leftover after parsing attributes in process `syz.3.732'. [ 320.865543][ T8209] netlink: 16 bytes leftover after parsing attributes in process `syz.2.734'. [ 322.526327][ T8219] netlink: 32 bytes leftover after parsing attributes in process `syz.2.737'. [ 325.542693][ T8237] netlink: 16 bytes leftover after parsing attributes in process `syz.3.745'. [ 327.376134][ T8246] netlink: 8 bytes leftover after parsing attributes in process `syz.1.748'. [ 327.405313][ T8246] netlink: 12 bytes leftover after parsing attributes in process `syz.1.748'. [ 327.795889][ T8250] netlink: 64 bytes leftover after parsing attributes in process `syz.2.742'. [ 332.687896][ T8283] netlink: 8 bytes leftover after parsing attributes in process `syz.1.758'. [ 333.105171][ T8283] netlink: 12 bytes leftover after parsing attributes in process `syz.1.758'. [ 333.214656][ T8286] netlink: 64 bytes leftover after parsing attributes in process `syz.3.760'. [ 333.489754][ T8288] loop1: detected capacity change from 0 to 2048 [ 333.573605][ T8288] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 333.946683][ T28] audit: type=1800 audit(1756382534.785:3): pid=8295 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.761" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop1" ino=1438 res=0 errno=0 [ 334.856781][ T8308] netlink: 8 bytes leftover after parsing attributes in process `syz.3.769'. [ 334.869114][ T8308] netlink: 12 bytes leftover after parsing attributes in process `syz.3.769'. [ 334.901520][ T8310] netlink: 64 bytes leftover after parsing attributes in process `syz.2.771'. [ 338.339858][ T8337] loop1: detected capacity change from 0 to 1024 [ 338.755720][ T8343] netlink: 8 bytes leftover after parsing attributes in process `syz.1.780'. [ 338.785244][ T8343] netlink: 12 bytes leftover after parsing attributes in process `syz.1.780'. [ 338.825397][ T8344] netlink: 64 bytes leftover after parsing attributes in process `syz.0.781'. [ 340.107547][ T8365] loop1: detected capacity change from 0 to 1024 [ 340.479231][ T8374] netlink: 8 bytes leftover after parsing attributes in process `syz.1.790'. [ 340.496445][ T8374] netlink: 12 bytes leftover after parsing attributes in process `syz.1.790'. [ 340.798575][ T8378] netlink: 64 bytes leftover after parsing attributes in process `syz.1.792'. [ 342.377499][ T8394] loop1: detected capacity change from 0 to 1024 [ 343.397847][ T8404] netlink: 8 bytes leftover after parsing attributes in process `syz.2.800'. [ 343.427316][ T8404] netlink: 12 bytes leftover after parsing attributes in process `syz.2.800'. [ 343.658605][ T8409] netlink: 64 bytes leftover after parsing attributes in process `syz.2.802'. [ 344.029223][ T8413] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 345.747263][ T8432] netlink: 8 bytes leftover after parsing attributes in process `syz.2.810'. [ 345.792603][ T8432] netlink: 8 bytes leftover after parsing attributes in process `syz.2.810'. [ 345.923068][ T8419] loop1: detected capacity change from 0 to 32768 [ 346.161556][ T8419] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 348.248057][ T5793] (syz-executor,5793,1):ocfs2_inode_is_valid_to_delete:872 ERROR: Skipping delete of system file 72 [ 348.523537][ T5793] ocfs2: Unmounting device (7,1) on (node local) [ 349.043159][ T8459] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 349.901424][ T8467] netlink: 8 bytes leftover after parsing attributes in process `syz.0.821'. [ 349.910750][ T8467] netlink: 8 bytes leftover after parsing attributes in process `syz.0.821'. [ 349.911779][ T8465] loop1: detected capacity change from 0 to 1024 [ 352.274443][ T8499] netlink: 8 bytes leftover after parsing attributes in process `syz.3.831'. [ 352.331679][ T8484] loop1: detected capacity change from 0 to 32768 [ 352.335186][ T8499] netlink: 8 bytes leftover after parsing attributes in process `syz.3.831'. [ 352.455725][ T8484] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 354.775395][ T8529] netlink: 8 bytes leftover after parsing attributes in process `syz.0.840'. [ 356.282672][ T8541] netlink: 28 bytes leftover after parsing attributes in process `syz.2.844'. [ 357.658022][ T5793] (syz-executor,5793,1):ocfs2_inode_is_valid_to_delete:872 ERROR: Skipping delete of system file 72 [ 357.693022][ T5793] ocfs2: Unmounting device (7,1) on (node local) [ 358.233454][ T8561] netlink: 8 bytes leftover after parsing attributes in process `syz.0.850'. [ 361.914479][ T8592] netlink: 8 bytes leftover after parsing attributes in process `syz.3.861'. [ 367.026676][ T8638] netlink: 12 bytes leftover after parsing attributes in process `syz.1.872'. [ 367.885863][ T8644] netlink: 64 bytes leftover after parsing attributes in process `syz.1.878'. [ 371.921271][ T8662] syzkaller1: entered promiscuous mode [ 371.935252][ T8662] syzkaller1: entered allmulticast mode [ 372.184571][ T8666] netlink: 12 bytes leftover after parsing attributes in process `syz.0.886'. [ 373.083027][ T8672] netlink: 64 bytes leftover after parsing attributes in process `syz.0.888'. [ 376.000726][ T8691] netlink: 8 bytes leftover after parsing attributes in process `syz.1.892'. [ 376.029215][ T8691] netlink: 4 bytes leftover after parsing attributes in process `syz.1.892'. [ 376.062709][ T8691] netlink: 8 bytes leftover after parsing attributes in process `syz.1.892'. [ 376.098816][ T8691] netlink: 4 bytes leftover after parsing attributes in process `syz.1.892'. [ 376.528626][ T8702] netlink: 12 bytes leftover after parsing attributes in process `syz.3.896'. [ 376.704897][ T8706] netlink: 64 bytes leftover after parsing attributes in process `syz.3.897'. [ 377.560341][ T8697] loop1: detected capacity change from 0 to 32768 [ 377.830160][ T8721] netlink: 8 bytes leftover after parsing attributes in process `syz.2.902'. [ 377.839213][ T8721] netlink: 4 bytes leftover after parsing attributes in process `syz.2.902'. [ 377.854716][ T8721] netlink: 8 bytes leftover after parsing attributes in process `syz.2.902'. [ 377.864006][ T8721] netlink: 4 bytes leftover after parsing attributes in process `syz.2.902'. [ 377.869766][ T8697] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 379.122147][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 380.355383][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 380.556967][ T5793] (syz-executor,5793,0):ocfs2_inode_is_valid_to_delete:872 ERROR: Skipping delete of system file 72 [ 380.608298][ T5793] ocfs2: Unmounting device (7,1) on (node local) [ 380.615235][ T8746] netlink: 64 bytes leftover after parsing attributes in process `syz.3.908'. [ 382.353528][ T8765] netlink: 8 bytes leftover after parsing attributes in process `syz.2.914'. [ 382.362559][ T8765] netlink: 4 bytes leftover after parsing attributes in process `syz.2.914'. [ 382.372568][ T8765] netlink: 8 bytes leftover after parsing attributes in process `syz.2.914'. [ 382.381950][ T8765] netlink: 4 bytes leftover after parsing attributes in process `syz.2.914'. [ 382.911048][ T8776] netlink: 64 bytes leftover after parsing attributes in process `syz.1.919'. [ 384.906792][ T8786] capability: warning: `syz.2.921' uses deprecated v2 capabilities in a way that may be insecure [ 386.844428][ T8799] netlink: 16 bytes leftover after parsing attributes in process `syz.1.928'. [ 387.082388][ T8805] netlink: 64 bytes leftover after parsing attributes in process `syz.1.931'. [ 387.415441][ T8807] netlink: 452 bytes leftover after parsing attributes in process `syz.0.930'. [ 389.812355][ T8822] netlink: 8 bytes leftover after parsing attributes in process `syz.2.926'. [ 389.821420][ T8822] netlink: 4 bytes leftover after parsing attributes in process `syz.2.926'. [ 389.831078][ T8822] netlink: 8 bytes leftover after parsing attributes in process `syz.2.926'. [ 389.840583][ T8822] netlink: 4 bytes leftover after parsing attributes in process `syz.2.926'. [ 390.209733][ T8811] loop1: detected capacity change from 0 to 32768 [ 390.296948][ T8811] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 390.606582][ T8840] netlink: 64 bytes leftover after parsing attributes in process `syz.0.941'. [ 391.905832][ T5793] (syz-executor,5793,1):ocfs2_inode_is_valid_to_delete:872 ERROR: Skipping delete of system file 72 [ 392.035680][ T5793] ocfs2: Unmounting device (7,1) on (node local) [ 393.772182][ T8858] netlink: 8 bytes leftover after parsing attributes in process `syz.1.946'. [ 393.827697][ T8858] netlink: 4 bytes leftover after parsing attributes in process `syz.1.946'. [ 393.916760][ T8858] netlink: 8 bytes leftover after parsing attributes in process `syz.1.946'. [ 393.940345][ T8858] netlink: 4 bytes leftover after parsing attributes in process `syz.1.946'. [ 394.919306][ T8868] netlink: 64 bytes leftover after parsing attributes in process `syz.2.952'. [ 396.100855][ T8878] loop1: detected capacity change from 0 to 512 [ 396.238609][ T8885] netlink: 8 bytes leftover after parsing attributes in process `syz.2.959'. [ 396.265681][ T8885] netlink: 4 bytes leftover after parsing attributes in process `syz.2.959'. [ 396.306925][ T8885] netlink: 8 bytes leftover after parsing attributes in process `syz.2.959'. [ 396.345369][ T8885] netlink: 4 bytes leftover after parsing attributes in process `syz.2.959'. [ 396.384128][ T8888] netlink: 32 bytes leftover after parsing attributes in process `syz.3.960'. [ 396.398066][ T8878] EXT4-fs (loop1): Test dummy encryption mode enabled [ 396.404898][ T8878] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 396.457827][ T8878] EXT4-fs error (device loop1): ext4_orphan_get:1425: comm syz.1.957: bad orphan inode 131083 [ 396.497492][ T8878] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 397.032701][ T8878] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 397.664437][ T8878] fscrypt (loop1): Missing crypto API support for AES-256-XTS (API name: "xts(aes)") [ 397.866092][ T5793] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 398.115415][ T8912] netlink: 64 bytes leftover after parsing attributes in process `syz.1.963'. [ 399.871919][ T8925] netlink: 8 bytes leftover after parsing attributes in process `syz.3.969'. [ 399.885633][ T8925] netlink: 4 bytes leftover after parsing attributes in process `syz.3.969'. [ 399.899991][ T8925] netlink: 8 bytes leftover after parsing attributes in process `syz.3.969'. [ 400.001910][ T8927] __nla_validate_parse: 1 callbacks suppressed [ 400.001928][ T8927] netlink: 32 bytes leftover after parsing attributes in process `syz.3.970'. [ 401.312623][ T8935] netlink: 64 bytes leftover after parsing attributes in process `syz.3.973'. [ 404.258054][ T8951] netlink: 8 bytes leftover after parsing attributes in process `syz.0.979'. [ 404.315164][ T8951] netlink: 4 bytes leftover after parsing attributes in process `syz.0.979'. [ 404.349914][ T8951] netlink: 8 bytes leftover after parsing attributes in process `syz.0.979'. [ 404.390647][ T8951] netlink: 4 bytes leftover after parsing attributes in process `syz.0.979'. [ 406.515502][ T8969] netlink: 64 bytes leftover after parsing attributes in process `syz.1.985'. [ 407.262118][ T8979] loop1: detected capacity change from 0 to 32768 [ 407.300728][ T8979] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 408.394594][ T5793] (syz-executor,5793,1):ocfs2_inode_is_valid_to_delete:872 ERROR: Skipping delete of system file 72 [ 408.450173][ T5793] ocfs2: Unmounting device (7,1) on (node local) [ 409.053433][ T27] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 410.105956][ T27] usb 2-1: Using ep0 maxpacket: 32 [ 410.123833][ T27] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 410.146171][ T27] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 410.157851][ T27] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 410.167174][ T27] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 410.187771][ T27] usb 2-1: config 0 descriptor?? [ 410.212616][ T27] hub 2-1:0.0: USB hub found [ 411.889910][ T27] hub 2-1:0.0: config failed, can't read hub descriptor (err -22) [ 413.037410][ T27] usbhid 2-1:0.0: can't add hid device: -71 [ 413.047608][ T27] usbhid: probe of 2-1:0.0 failed with error -71 [ 413.128924][ T27] usb 2-1: USB disconnect, device number 5 [ 413.636780][ T9020] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1000'. [ 415.977937][ T9038] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1004'. [ 418.359863][ T9051] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1007'. [ 418.369591][ T9051] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1007'. [ 418.385705][ T9049] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1009'. [ 418.685287][ T9058] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1012'. [ 420.483201][ T9074] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1016'. [ 423.552899][ T9086] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1021'. [ 423.565655][ T9084] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1020'. [ 423.590660][ T9086] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1021'. [ 430.206139][ T9118] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1032'. [ 430.368312][ T9120] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1033'. [ 430.385445][ T9120] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1033'. [ 430.425436][ T9120] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1033'. [ 430.454714][ T9120] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1033'. [ 433.112078][ T9150] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1043'. [ 433.364044][ T9154] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1045'. [ 433.395147][ T9154] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1045'. [ 433.424881][ T9154] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1045'. [ 433.450767][ T9154] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1045'. [ 436.321092][ T9169] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1051'. [ 436.790845][ T9176] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1054'. [ 438.303901][ T9194] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1056'. [ 440.525808][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.532214][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.912704][ T9211] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1063'. [ 446.106014][ T9239] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1075'. [ 452.389161][ T9286] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1089'. [ 455.655439][ T9312] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1099'. [ 455.664828][ T9312] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1099'. [ 455.705746][ T9312] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1099'. [ 455.714681][ T9312] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1099'. [ 455.971572][ T9317] loop1: detected capacity change from 0 to 128 [ 456.079808][ T9256] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 463.798424][ T9357] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1112'. [ 463.807618][ T9357] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1112'. [ 463.817572][ T9357] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1112'. [ 463.835340][ T9357] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1112'. [ 465.745211][ T9376] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1120'. [ 471.467675][ T9398] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1128'. [ 471.505060][ T9398] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1128'. [ 471.535818][ T9398] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1128'. [ 471.544745][ T9398] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1128'. [ 473.736977][ T9405] loop1: detected capacity change from 0 to 1024 [ 474.945815][ T9405] EXT4-fs warning (device loop1): ext4_multi_mount_protect:398: Unable to create kmmpd thread for loop1. [ 478.307949][ T9439] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1141'. [ 478.357813][ T9439] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1141'. [ 478.422625][ T9439] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1141'. [ 478.492680][ T9439] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1141'. [ 498.145224][ T9] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 499.690574][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 499.729166][ T9] usb 2-1: config 0 has an invalid interface number: 52 but max is 0 [ 499.758200][ T9] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 499.785211][ T9] usb 2-1: config 0 has no interface number 0 [ 499.805365][ T9] usb 2-1: config 0 interface 52 altsetting 1 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 499.857418][ T9] usb 2-1: config 0 interface 52 altsetting 1 endpoint 0x8A has invalid wMaxPacketSize 0 [ 499.887447][ T9] usb 2-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 499.935041][ T9] usb 2-1: config 0 interface 52 has no altsetting 0 [ 499.980277][ T9] usb 2-1: string descriptor 0 read error: -71 [ 500.006385][ T9] usb 2-1: New USB device found, idVendor=06cb, idProduct=0003, bcdDevice= 0.00 [ 500.040424][ T9] usb 2-1: New USB device strings: Mfr=0, Product=234, SerialNumber=34 [ 501.676683][ T9] usb 2-1: config 0 descriptor?? [ 501.695697][ T9] usb 2-1: can't set config #0, error -71 [ 501.745482][ T9] usb 2-1: USB disconnect, device number 6 [ 501.787852][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.794619][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 503.127915][ T9553] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1170'. [ 503.145942][ T9553] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1170'. [ 515.321184][ T9598] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1186'. [ 515.331297][ T9598] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1186'. [ 521.635311][ T9620] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1190'. [ 524.595781][ T9] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 524.815425][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 524.827933][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 524.844909][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 524.870270][ T9] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 524.889590][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 524.913104][ T9] usb 2-1: config 0 descriptor?? [ 525.312597][ T9641] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1197'. [ 525.323794][ T9641] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1197'. [ 525.466591][ T9] savu 0003:1E7D:2D5A.0006: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.1-1/input0 [ 527.120761][ T5777] usb 2-1: USB disconnect, device number 7 [ 531.186949][ T9677] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1208'. [ 531.633274][ T9677] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1208'. [ 539.765523][ T9718] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1219'. [ 539.785828][ T9718] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1219'. [ 542.157757][ T9733] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1221'. [ 546.590813][ T9754] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1229'. [ 558.416359][ T9811] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1244'. [ 559.212677][ T9823] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1239'. [ 563.116854][ T5796] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 563.149919][ T5796] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 563.161700][ T5796] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 563.171111][ T5796] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 563.220366][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.226867][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.325222][ T5796] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 563.342022][ T5796] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 563.368833][ T5795] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 563.387246][ T5795] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 563.395706][ T5795] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 563.435570][ T5795] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 563.485989][ T5795] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 563.493558][ T5795] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 564.088220][ T9850] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1253'. [ 564.733594][ T11] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 564.734274][ T9855] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1254'. [ 564.775476][ T11] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 566.123220][ T5795] Bluetooth: hci4: command tx timeout [ 566.505481][ T11] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 566.515893][ T11] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 567.878322][ T11] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 567.909449][ T11] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 568.030804][ T9837] chnl_net:caif_netlink_parms(): no params data found [ 568.175308][ T5795] Bluetooth: hci4: command tx timeout [ 568.234249][ T11] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 568.292571][ T11] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 568.737970][ T9837] bridge0: port 1(bridge_slave_0) entered blocking state [ 568.755615][ T9837] bridge0: port 1(bridge_slave_0) entered disabled state [ 568.775641][ T9837] bridge_slave_0: entered allmulticast mode [ 568.805546][ T9837] bridge_slave_0: entered promiscuous mode [ 568.975189][ T9837] bridge0: port 2(bridge_slave_1) entered blocking state [ 568.982481][ T9837] bridge0: port 2(bridge_slave_1) entered disabled state [ 568.995330][ T9837] bridge_slave_1: entered allmulticast mode [ 569.002922][ T9837] bridge_slave_1: entered promiscuous mode [ 569.007478][ T9883] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1262'. [ 569.219845][ T9837] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 569.276923][ T9837] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 569.607024][ T9837] team0: Port device team_slave_0 added [ 569.664187][ T9837] team0: Port device team_slave_1 added [ 569.785752][ T9890] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1263'. [ 569.952431][ T9892] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1264'. [ 570.036221][ T9837] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 570.052878][ T9837] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 570.123581][ T9837] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 570.174492][ T9837] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 570.199046][ T9837] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 570.265253][ T5795] Bluetooth: hci4: command tx timeout [ 570.296553][ T9837] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 572.345254][ T5795] Bluetooth: hci4: command tx timeout [ 572.423672][ T9837] hsr_slave_0: entered promiscuous mode [ 572.442672][ T9837] hsr_slave_1: entered promiscuous mode [ 572.455583][ T9837] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 572.463289][ T9837] Cannot create hsr debugfs directory [ 574.376152][ T9923] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1271'. [ 574.765566][ T9837] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 574.945044][ T9837] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 574.985701][ T9837] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 575.188410][ T9837] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 575.345783][ T11] hsr_slave_0: left promiscuous mode [ 575.359368][ T11] hsr_slave_1: left promiscuous mode [ 575.371486][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 575.406892][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 575.415391][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 575.423043][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 575.431134][ T11] bridge_slave_1: left allmulticast mode [ 575.441483][ T11] bridge_slave_1: left promiscuous mode [ 575.449116][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 575.474422][ T11] bridge_slave_0: left allmulticast mode [ 575.491869][ T11] bridge_slave_0: left promiscuous mode [ 575.520054][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 575.735714][ T9945] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1270'. [ 575.760972][ T11] veth1_macvtap: left promiscuous mode [ 575.780497][ T11] veth0_macvtap: left promiscuous mode [ 575.805170][ T11] veth1_vlan: left promiscuous mode [ 575.810582][ T11] veth0_vlan: left promiscuous mode [ 578.371855][ T11] bond1 (unregistering): Released all slaves [ 585.201948][ T11] team0 (unregistering): Port device team_slave_1 removed [ 585.285903][ T11] team0 (unregistering): Port device team_slave_0 removed [ 585.374845][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 585.454840][ T9971] loop1: detected capacity change from 0 to 32768 [ 585.475909][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 585.563353][ T9971] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 586.387071][ T9979] syz.1.1279 (9979) used greatest stack depth: 17808 bytes left [ 586.444382][ T5793] (syz-executor,5793,1):ocfs2_inode_is_valid_to_delete:872 ERROR: Skipping delete of system file 72 [ 586.514353][ T5793] ocfs2: Unmounting device (7,1) on (node local) [ 586.688951][ T9981] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1280'. [ 590.478137][ T5796] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 590.496902][ T5796] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 590.506598][ T5796] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 590.516798][ T11] bond0 (unregistering): Released all slaves [ 590.535583][ T5796] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 590.543395][ T5796] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 590.550997][ T5796] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 592.661162][ T5795] Bluetooth: hci0: command tx timeout [ 593.165670][T10005] loop1: detected capacity change from 0 to 32768 [ 593.233853][ T9837] 8021q: adding VLAN 0 to HW filter on device bond0 [ 593.265382][T10005] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 594.110136][ T9837] 8021q: adding VLAN 0 to HW filter on device team0 [ 594.294886][ T3472] bridge0: port 1(bridge_slave_0) entered blocking state [ 594.302177][ T3472] bridge0: port 1(bridge_slave_0) entered forwarding state [ 594.383068][ T3472] bridge0: port 2(bridge_slave_1) entered blocking state [ 594.390343][ T3472] bridge0: port 2(bridge_slave_1) entered forwarding state [ 594.423271][ T5793] (syz-executor,5793,1):ocfs2_inode_is_valid_to_delete:872 ERROR: Skipping delete of system file 72 [ 594.461691][ T5793] ocfs2: Unmounting device (7,1) on (node local) [ 594.633002][ T9994] chnl_net:caif_netlink_parms(): no params data found [ 594.735472][ T5796] Bluetooth: hci0: command tx timeout [ 594.999656][ T9837] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 595.185235][ T11] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 595.196126][ T11] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 595.223998][ T9994] bridge0: port 1(bridge_slave_0) entered blocking state [ 595.231885][ T9994] bridge0: port 1(bridge_slave_0) entered disabled state [ 595.239671][ T9994] bridge_slave_0: entered allmulticast mode [ 595.250014][ T9994] bridge_slave_0: entered promiscuous mode [ 595.305117][ T11] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 595.325375][ T11] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 595.355626][ T9994] bridge0: port 2(bridge_slave_1) entered blocking state [ 595.373122][ T9994] bridge0: port 2(bridge_slave_1) entered disabled state [ 595.392964][ T9994] bridge_slave_1: entered allmulticast mode [ 595.404621][ T9994] bridge_slave_1: entered promiscuous mode [ 595.476227][ T11] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 595.489521][ T11] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 595.519838][T10043] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1290'. [ 595.526631][ T9994] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 595.569745][ T9994] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 596.798096][ T11] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 596.815179][ T5796] Bluetooth: hci0: command tx timeout [ 596.823020][ T11] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 596.851821][ T9994] team0: Port device team_slave_0 added [ 596.871119][ T9994] team0: Port device team_slave_1 added [ 597.021973][ T9994] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 597.055104][ T9994] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 597.105500][ T9994] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 597.129025][ T9994] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 597.145105][ T9994] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 597.172235][ T9994] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 597.297735][ T9837] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 597.351991][ T9994] hsr_slave_0: entered promiscuous mode [ 597.385985][ T9994] hsr_slave_1: entered promiscuous mode [ 599.176229][ T5796] Bluetooth: hci0: command tx timeout [ 599.615584][ T9994] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 599.650644][ T9837] veth0_vlan: entered promiscuous mode [ 599.680045][T10079] loop1: detected capacity change from 0 to 32768 [ 599.773679][T10079] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 599.798368][ T9994] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 599.886213][ T9994] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 600.051630][ T9994] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 600.110357][ T9837] veth1_vlan: entered promiscuous mode [ 600.756424][ T5793] (syz-executor,5793,1):ocfs2_inode_is_valid_to_delete:872 ERROR: Skipping delete of system file 72 [ 600.805674][ T5793] ocfs2: Unmounting device (7,1) on (node local) [ 602.994690][ T9837] veth0_macvtap: entered promiscuous mode [ 603.038259][ T11] hsr_slave_0: left promiscuous mode [ 603.057458][ T11] hsr_slave_1: left promiscuous mode [ 603.075696][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 603.083194][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 603.083384][T10112] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1297'. [ 603.101705][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 603.115137][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 603.134384][ T11] bridge_slave_1: left allmulticast mode [ 603.145252][ T11] bridge_slave_1: left promiscuous mode [ 603.151091][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 603.180365][ T11] bridge_slave_0: left allmulticast mode [ 603.195033][ T11] bridge_slave_0: left promiscuous mode [ 603.206277][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 604.363774][ T11] veth1_macvtap: left promiscuous mode [ 604.370947][ T11] veth0_macvtap: left promiscuous mode [ 604.377234][ T11] veth1_vlan: left promiscuous mode [ 604.382867][ T11] veth0_vlan: left promiscuous mode [ 604.618511][ T11] bond1 (unregistering): Released all slaves [ 607.086632][ T11] team0 (unregistering): Port device team_slave_1 removed [ 607.213423][ T11] team0 (unregistering): Port device team_slave_0 removed [ 607.801947][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 608.540320][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 612.693035][ T11] bond0 (unregistering): Released all slaves [ 612.862014][ T9837] veth1_macvtap: entered promiscuous mode [ 612.956789][ T9837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 612.991003][ T9837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 613.015370][ T9837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 613.036775][ T9837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 613.056637][ T9837] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 613.104472][ T9837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 613.125234][ T9837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 613.165017][ T9837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 613.192083][ T9837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 613.218045][ T9837] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 613.239729][ T9837] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 613.265244][ T9837] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 613.274021][ T9837] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 613.305013][ T9837] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 613.392311][ T9994] 8021q: adding VLAN 0 to HW filter on device bond0 [ 613.504384][T10154] loop1: detected capacity change from 0 to 32768 [ 613.592748][T10154] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 613.790042][ T9994] 8021q: adding VLAN 0 to HW filter on device team0 [ 613.928901][ T3472] bridge0: port 1(bridge_slave_0) entered blocking state [ 613.936172][ T3472] bridge0: port 1(bridge_slave_0) entered forwarding state [ 613.996961][ T3472] bridge0: port 2(bridge_slave_1) entered blocking state [ 614.004209][ T3472] bridge0: port 2(bridge_slave_1) entered forwarding state [ 615.086313][ T5793] (syz-executor,5793,0):ocfs2_inode_is_valid_to_delete:872 ERROR: Skipping delete of system file 72 [ 615.135529][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 615.143406][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 615.212656][ T5793] ocfs2: Unmounting device (7,1) on (node local) [ 615.405542][ T34] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 615.413441][ T34] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 616.921245][T10182] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1246'. [ 616.961328][T10182] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1246'. [ 617.013424][T10182] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 617.022304][T10182] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 617.031127][T10182] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 617.039941][T10182] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 617.066304][T10186] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1311'. [ 617.137313][T10182] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1246'. [ 617.210385][T10182] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1246'. [ 617.314839][ T9994] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 619.622405][T10202] loop1: detected capacity change from 0 to 32768 [ 619.722723][T10202] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 620.725081][ T5793] (syz-executor,5793,1):ocfs2_inode_is_valid_to_delete:872 ERROR: Skipping delete of system file 72 [ 620.821599][ T5793] ocfs2: Unmounting device (7,1) on (node local) [ 620.892458][ T9994] veth0_vlan: entered promiscuous mode [ 620.952708][ T9994] veth1_vlan: entered promiscuous mode [ 622.162462][ T9994] veth0_macvtap: entered promiscuous mode [ 622.173285][ T9994] veth1_macvtap: entered promiscuous mode [ 622.193635][ T9994] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 622.205897][ T9994] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 622.215849][ T9994] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 622.226368][ T9994] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 622.236969][ T9994] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 622.247685][ T9994] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 622.259617][ T9994] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 625.479776][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 625.486346][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 625.623014][ T9994] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 625.675055][ T9994] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 625.725145][ T9994] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 625.771536][ T9994] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 625.795126][ T9994] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 625.815286][ T9994] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 625.842555][ T9994] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 625.884716][ T9994] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 625.915161][ T9994] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 625.924016][ T9994] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 625.945016][ T9994] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 626.186445][ T1096] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 626.194343][ T1096] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 626.314361][ T9998] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 626.336297][ T9998] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 630.884404][T10263] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1322'. [ 635.806054][T10295] loop1: detected capacity change from 0 to 32768 [ 635.883670][T10295] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 641.238871][ T5793] (syz-executor,5793,1):ocfs2_inode_is_valid_to_delete:872 ERROR: Skipping delete of system file 72 [ 641.325886][ T5793] ocfs2: Unmounting device (7,1) on (node local) [ 642.632206][T10320] loop1: detected capacity change from 0 to 512 [ 642.766451][T10320] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 642.900266][T10320] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2244: inode #15: comm syz.1.1331: corrupted in-inode xattr: invalid ea_ino [ 643.115177][T10327] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1335'. [ 643.186899][ T5793] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 643.523913][T10332] loop1: detected capacity change from 0 to 512 [ 643.642252][T10332] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 643.685290][T10332] EXT4-fs (loop1): can't mount with data_err=abort, fs mounted w/o journal [ 656.056664][T10386] loop4: detected capacity change from 0 to 1024 [ 657.076006][T10386] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 657.982044][ T9837] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 658.674431][T10408] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1339'. [ 658.694202][T10408] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1339'. [ 662.305393][T10421] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1357'. [ 662.536687][T10421] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1357'. [ 662.964198][T10432] loop4: detected capacity change from 0 to 1024 [ 663.153000][T10432] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 663.278278][T10431] EXT4-fs error (device loop4): __ext4_get_inode_loc:4483: comm syz.4.1347: Invalid inode table block 8588853217098616062 in block_group 0 [ 663.343387][T10431] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5902: Corrupt filesystem [ 663.397428][T10431] EXT4-fs error (device loop4): ext4_dirty_inode:6106: inode #15: comm syz.4.1347: mark_inode_dirty error [ 663.459556][T10431] EXT4-fs error (device loop4): __ext4_get_inode_loc:4483: comm syz.4.1347: Invalid inode table block 8588853217098616062 in block_group 0 [ 663.703820][ T54] EXT4-fs error (device loop4): __ext4_get_inode_loc:4483: comm kworker/u4:4: Invalid inode table block 8588853217098616062 in block_group 0 [ 663.774615][ T9837] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 669.408030][T10479] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1361'. [ 669.485374][T10479] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1361'. [ 675.006965][ T28] audit: type=1326 audit(1756382875.885:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10506 comm="syz.4.1359" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd616b8ebe9 code=0x0 [ 682.817746][T10556] loop4: detected capacity change from 0 to 128 [ 682.986422][T10556] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 683.086777][T10556] ext4 filesystem being mounted at /14/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 683.422955][T10567] general protection fault, probably for non-canonical address 0xdffffc0000000003: 0000 [#1] PREEMPT SMP KASAN [ 683.434724][T10567] KASAN: null-ptr-deref in range [0x0000000000000018-0x000000000000001f] [ 683.443193][T10567] CPU: 1 PID: 10567 Comm: syz.4.1373 Not tainted 6.6.102-syzkaller #0 [ 683.451388][T10567] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 683.461505][T10567] RIP: 0010:utf8nlookup+0x39/0xa50 [ 683.466692][T10567] Code: 89 44 24 10 49 89 ce 48 89 14 24 89 f5 49 89 fd 49 bf 00 00 00 00 00 fc ff df e8 e2 1f f8 fe 49 8d 5d 18 48 89 d8 48 c1 e8 03 <42> 80 3c 38 00 74 08 48 89 df e8 f8 66 4f ff 48 8b 1b 48 83 c3 30 [ 683.469081][T10566] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1370'. [ 683.486324][T10567] RSP: 0018:ffffc900054174c0 EFLAGS: 00010206 [ 683.486350][T10567] RAX: 0000000000000003 RBX: 0000000000000018 RCX: 0000000000080000 [ 683.486363][T10567] RDX: ffffc900188a9000 RSI: 0000000000001ea1 RDI: 0000000000001ea2 [ 683.486375][T10567] RBP: 0000000000000001 R08: 00000000000000f9 R09: 0000000000000000 [ 683.486387][T10567] R10: ffffc90005417658 R11: fffff52000a82ece R12: dffffc0000000000 [ 683.486401][T10567] R13: 0000000000000000 R14: ffff888059edac10 R15: dffffc0000000000 [ 683.541887][T10567] FS: 00007fd6179a86c0(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 683.550866][T10567] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 683.557496][T10567] CR2: 00007ff80bdb7dac CR3: 0000000030b94000 CR4: 00000000003506e0 [ 683.565520][T10567] Call Trace: [ 683.568833][T10567] [ 683.571805][T10567] ? __kasan_kmalloc+0x8f/0xa0 [ 683.576635][T10567] ? ext4_fname_prepare_lookup+0x213/0x3a0 [ 683.582488][T10567] ? ext4_lookup+0xfa/0x6d0 [ 683.587056][T10567] ? path_openat+0x10b8/0x3190 [ 683.591864][T10567] ? do_filp_open+0x1c5/0x3d0 [ 683.596561][T10567] utf8byte+0x34f/0x1370 [ 683.600829][T10567] ? utf8ncursor+0x170/0x210 [ 683.605440][T10567] utf8_casefold+0x130/0x230 [ 683.610066][T10567] ? utf8_strncasecmp_folded+0x250/0x250 [ 683.615733][T10567] ext4_fname_setup_ci_filename+0x1d5/0x430 [ 683.621667][T10567] ext4_fname_prepare_lookup+0x213/0x3a0 [ 683.627330][T10567] ? ext4_fname_free_filename+0xb0/0xb0 [ 683.632903][T10567] ? aa_get_newest_label+0xf8/0x5c0 [ 683.638109][T10567] ? from_kgid+0x15d/0x680 [ 683.642545][T10567] ext4_lookup+0xfa/0x6d0 [ 683.646903][T10567] ? bpf_lsm_capable+0x9/0x10 [ 683.651628][T10567] ? security_capable+0x89/0xb0 [ 683.656495][T10567] ? ext4_add_entry+0xd70/0xd70 [ 683.661431][T10567] ? generic_permission+0x253/0x590 [ 683.666654][T10567] ? inode_permission+0xf3/0x480 [ 683.671694][T10567] ? bpf_lsm_inode_create+0x9/0x10 [ 683.676847][T10567] ? security_inode_create+0xb7/0x100 [ 683.682232][T10567] ? ext4_add_entry+0xd70/0xd70 [ 683.687265][T10567] path_openat+0x10b8/0x3190 [ 683.691890][T10567] ? do_filp_open+0x3d0/0x3d0 [ 683.696588][T10567] do_filp_open+0x1c5/0x3d0 [ 683.701120][T10567] ? vfs_tmpfile+0x490/0x490 [ 683.705832][T10567] ? _raw_spin_unlock+0x28/0x40 [ 683.710695][T10567] ? alloc_fd+0x58f/0x630 [ 683.715039][T10567] do_sys_openat2+0x12c/0x1c0 [ 683.719737][T10567] ? do_sys_open+0xe0/0xe0 [ 683.724160][T10567] ? lockdep_hardirqs_on_prepare+0x400/0x760 [ 683.730153][T10567] ? lock_chain_count+0x20/0x20 [ 683.735011][T10567] ? lock_chain_count+0x20/0x20 [ 683.739876][T10567] __x64_sys_creat+0x90/0xb0 [ 683.744594][T10567] do_syscall_64+0x55/0xb0 [ 683.749017][T10567] ? clear_bhb_loop+0x40/0x90 [ 683.753701][T10567] ? clear_bhb_loop+0x40/0x90 [ 683.758419][T10567] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 683.764329][T10567] RIP: 0033:0x7fd616b8ebe9 [ 683.768766][T10567] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 683.788474][T10567] RSP: 002b:00007fd6179a8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000055 [ 683.796900][T10567] RAX: ffffffffffffffda RBX: 00007fd616db6090 RCX: 00007fd616b8ebe9 [ 683.804888][T10567] RDX: 0000000000000000 RSI: 0000000000000022 RDI: 0000200000000d80 [ 683.812879][T10567] RBP: 00007fd616c11e19 R08: 0000000000000000 R09: 0000000000000000 [ 683.820865][T10567] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 683.828848][T10567] R13: 00007fd616db6128 R14: 00007fd616db6090 R15: 00007ffeb8340b18 [ 683.836841][T10567] [ 683.839872][T10567] Modules linked in: SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 683.870773][T10566] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1370'. [ 683.913316][T10567] ---[ end trace 0000000000000000 ]--- [ 683.927930][T10567] RIP: 0010:utf8nlookup+0x39/0xa50 [ 683.933140][T10567] Code: 89 44 24 10 49 89 ce 48 89 14 24 89 f5 49 89 fd 49 bf 00 00 00 00 00 fc ff df e8 e2 1f f8 fe 49 8d 5d 18 48 89 d8 48 c1 e8 03 <42> 80 3c 38 00 74 08 48 89 df e8 f8 66 4f ff 48 8b 1b 48 83 c3 30 [ 683.960491][ T5795] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 683.967923][ T5795] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 683.975805][ T5795] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 683.983836][ T5795] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 683.992708][ T5795] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 683.995072][T10567] RSP: 0018:ffffc900054174c0 EFLAGS: 00010206 [ 684.000101][ T5795] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 684.068532][T10567] [ 684.070910][T10567] RAX: 0000000000000003 RBX: 0000000000000018 RCX: 0000000000080000 [ 684.204979][T10567] RDX: ffffc900188a9000 RSI: 0000000000001ea1 RDI: 0000000000001ea2 [ 684.213032][T10567] RBP: 0000000000000001 R08: 00000000000000f9 R09: 0000000000000000 [ 684.295801][T10567] R10: ffffc90005417658 R11: fffff52000a82ece R12: dffffc0000000000 [ 684.303883][T10567] R13: 0000000000000000 R14: ffff888059edac10 R15: dffffc0000000000 [ 684.372017][T10567] FS: 00007fd6179a86c0(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 684.405910][T10567] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 684.412583][T10567] CR2: 0000562ed1de6950 CR3: 0000000030b94000 CR4: 00000000003506e0 [ 684.466564][T10567] Kernel panic - not syncing: Fatal exception [ 684.473098][T10567] Kernel Offset: disabled [ 684.477464][T10567] Rebooting in 86400 seconds..