last executing test programs: 3.404088026s ago: executing program 1 (id=2): r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000080)=@file={0x1, './file0/file0\x00'}, 0x6e) 3.315888504s ago: executing program 2 (id=3): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10) close(r0) socket(0x10, 0x803, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) bpf$OBJ_PIN_MAP(0x6, &(0x7f00000000c0)=@generic={&(0x7f0000000080)='./file0\x00', r1}, 0x18) r2 = syz_usb_connect$printer(0x0, 0x36, 0x0, 0x0) syz_usb_control_io(r2, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="200000006800e97800000000000000000a0000000000000008000500", @ANYRES8=r3], 0x20}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000004380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="240000001800090400000000000000000a000000000000030000000008001e0001"], 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="2800000010000100db1815168c69010000000000", @ANYRES32=0x0, @ANYBLOB="200400000000000008001b0000000000"], 0x28}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r7 = getpid() sched_setscheduler(r7, 0x2, &(0x7f0000000200)=0x7) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001900)={0x18, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f00000001c0)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000580)='sched_switch\x00', r8}, 0x10) syz_usb_disconnect(0xffffffffffffffff) 3.165192157s ago: executing program 1 (id=5): syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000180)='./file0\x00', 0x0, &(0x7f00000001c0)={[{@nodots}, {@fat=@dos1xfloppy}, {@fat=@fmask={'fmask', 0x3d, 0x10000}}, {@nodots}, {@fat=@fmask={'fmask', 0x3d, 0x8}}, {@fat=@flush}, {@fat=@dos1xfloppy}, {@fat=@dmask={'dmask', 0x3d, 0x4}}, {@nodots}]}, 0x1, 0x159, &(0x7f00000004c0)="$eJzs27GKE0EcBvB/TKJRm9RisWBjFdQnUCSCuKAoKbRSiDaJBEyz2phH8QUFSZVuRPdI7nLJkRzs7ZH8fk0++GZgpsgOs7Af738dDSfTL5M38+g0GtF6GlksGtGNG9GM0iwAgEOySCn+pJTSrVnc/hUppXNDftayMACgMjuc/wDAgXH+A8Dxcf4DwPF59/7Dq2d53n+bZZ2I37NiUAzK37J/8TLvP8r+665mzYti0Fz2j8s+O9u3485J/2RjfzMePij7f93z1/lafzeG1W8fAAAAjkIvW9p4v+/1tvVlOvV+YO3+3op7rSvbBgCwh+n3H6NP4/Hnb3uFiMvMOojQjohrsAxBqDbU/WQCqrb609e9EgAAAAAAAAAAAAAAYJudvwfqXDx4kbZPr3uPAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAsO5vAAAA//9XS09N") name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=@FILEID_UDF_WITH_PARENT={0x14, 0x52, {{0x3, 0x6, 0x7, 0xa}, 0x10001, 0x9}}, &(0x7f0000000000), 0x0) 2.917292899s ago: executing program 1 (id=6): shmat(0x0, &(0x7f0000ff9000/0x1000)=nil, 0x5000) shmat(0x0, &(0x7f0000064000/0x3000)=nil, 0x2000) 2.848747505s ago: executing program 1 (id=7): r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='ext4_discard_preallocations\x00', 0xffffffffffffffff, 0x0, 0x2}, 0x18) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) symlink(&(0x7f0000000000)='./bus\x00', &(0x7f0000000180)='./bus\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) r2 = syz_io_uring_setup(0x4b5, &(0x7f0000010400)={0x0, 0x86e1, 0x1, 0x8, 0xa0}, &(0x7f0000010080)=0x0, &(0x7f0000000000)) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0xb, 0x12, 0xffffffffffffffff, 0x662c5000) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x118, &(0x7f0000000200)=0x6, 0x0, 0x4) r4 = socket(0x29, 0x5, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) ioctl$SIOCX25GFACILITIES(r4, 0x89e2, &(0x7f0000001540)) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f00000003c0)=[{0x0}, {0x0}, {&(0x7f0000001000)=""/4083, 0xff3}], 0x3) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r2, 0x10, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000540)=[{0x0}, {&(0x7f0000000340), 0xa002a0}], &(0x7f00000005c0), 0x2}, 0x20) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="5800000010000104000000000400000000000000", @ANYRES32=0x0, @ANYBLOB="2b03000000000000280012800a000100767863616e000000180002801400010000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000008002900cabc9b9a474e5951829b6038fb61000108001b0034000000"], 0x58}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r6, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40100044}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="2410f56a6604050000000000000000000a00000205000100010000000800054000000009"], 0x24}, 0x1, 0x0, 0x0, 0x4800}, 0x24000050) r7 = socket$pppl2tp(0x18, 0x1, 0x1) r8 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r7, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x3, r8, {0x2, 0x0, @multicast2}, 0x2}}, 0x2e) connect$pppl2tp(r7, &(0x7f00000004c0)=@pppol2tp={0x18, 0x1, {0x0, r8, {0x2, 0x0, @multicast1}, 0x2, 0x2, 0x0, 0x9000}}, 0x26) ioctl$BLKIOOPT(0xffffffffffffffff, 0x1279, &(0x7f0000000380)) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f00000005c0)=ANY=[@ANYRES64=r8, @ANYRESDEC, @ANYRESHEX=r7, @ANYRESHEX=r9, @ANYRES8=r10], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r11}, 0x10) sendmsg$NFT_BATCH(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x122}}, 0x8010) r12 = socket$pppl2tp(0x18, 0x1, 0x1) setsockopt$pppl2tp_PPPOL2TP_SO_DEBUG(r12, 0x111, 0x1, 0x7, 0x4) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) 1.650419923s ago: executing program 3 (id=4): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000d00)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0xe, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0xfffffffffffff001}, 0x18) r2 = fsopen(&(0x7f00000004c0)='mqueue\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000001d40)='\xd0\x9e^\xa0\xee\xc8\x17T\xb1GI\x90\xe2Q1\xb0\x8f\xe1\xa8\x95\xa0\xcd\fL\xaei\xb6\xb7\xc1Y\xd5YG\xf9\xc2\xf1\xa4\xdb$\xf6]\xab\x1a\xdaY\xfb\x03dhS\x97nZ\xf8\xc6\x1f\x03\x00\x00\x00\x00\x00\x00\x00\x9bg-D#g\x16\xf4\xd9\x00\x00\x00\x00\x00eA\x9f\xc3\x11\x18\xe6\xc5\x95\x9e!^W\xf6\xacE\xa3\xc8\xe7\xec\xd6\xbd\x1c+\n\xc7Q( \xba\xff\x17N\x1fB\x91\x15\x83\xec(B\xc5\x05\x9d\xd6\x02|6\xdc\xee$\xb5\x1deC\xfb\xa2\xaa\xe0#\xcb\xde;sA\xad\xa6\xb6P\xa3\xf7\xc3q\xd4\xb6\x95\x02\xd8*\xa8\xd2\x94\xa3\x89\xa9\xa0\xc5\xc9=\xa5^\x00\x00\x00\x00\x00\x00\x00\x00\x00\xef\xcd\xd3\t\x01A\xd5\x81\xc1;9\xeez\xba\x00\x00\x00\xdc\x94\xff)\xa4\xe6\xfb]\x90bG\x11\b\x98#\xaa99ez|\x8b5\x92\xa5\xba\x96\xb3\xb26I\xbb\xdeb\x95?\xc0\x81', &(0x7f0000000200)='sockfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000100)='\xc0\xf1FN\x91\x9e|\x00j\xc1c\a\x0e\xef~J\xa7\x92L\x9e\xe9E<>\x13\x13q\ft`\x88\xd8\x8eb\xe9\x95\xdeg4\xa0\xbap\v\x99+\x9c\xfc-\xaf\xfaZ\xc2\xaa\xffcpd\xbc\xc7\x01\n\"\xcb6\xa2\x043\x13\xc8A\x11\x87\xa7Nh\xb1\x05\x00\xda)\x06\xc8\xef3.l\xa5\xa7D\x06\x85\xc4\r[\x9d\x7fA\xae:\xae+`\x84\xe9\x99\xa8\xc3\xb5n\x90\x9b\xb4\xf360=\xabz\xcdq\x10', &(0x7f00000001c0)='\b\x01A', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000280)='\xd0\x9e^\xa0\xee\xc8\x17T\xb1GI\x90\xe2Q1\xb0\x8f\xe1\xa8\x95\xa0\xcd\fL\xf10xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0xf, 0xb, &(0x7f0000000240)=ANY=[@ANYRESDEC], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, &(0x7f0000000100)) ioctl$PPPIOCSACTIVE(r4, 0x40107446, &(0x7f0000001000)={0x1, &(0x7f0000000140)=[{0x45, 0x9, 0x0, 0x2}]}) r5 = socket(0x10, 0x3, 0x0) r6 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800110000000000000000000000ca6c9500000000000000ffdb360734076d08000d0ba8897489c522ba66c5439753d3e0c9b47bef3c2879fc55ce1649fcc6cff6b7eddc1ae3947efadabc0399ee4099902841e1c394783c541a69c0b2af1dcd8598b5c388992876d8e7858aed8e2f5308e47d9b93e38f092f022e25a098b85645ea1b65d5b5e38355cb7d53cb83ed9d6bc2756c81b8692e12b1b572660c0d83d23e57f5ffa19bad8b1feca88786116725e92d6d6e399a37a38899d361337c02c04a0dbda849dc41b918a60e7830677446f3280ea4f0e5"], &(0x7f0000000000)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r6, 0xc, &(0x7f00000000c0)={0x0, 0x1}, 0x1, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfd90}, 0x90) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)=@newqdisc={0x3c, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_FWMARK={0x8}]}}]}, 0x3c}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={0x0}, 0x18) unshare(0x2c020400) 1.386936356s ago: executing program 0 (id=1): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000180)=ANY=[], 0x0) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) rename(0x0, &(0x7f00000000c0)='./file0/../file0/file0\x00') ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000000)={'netdevsim0\x00', &(0x7f00000000c0)=@ethtool_gfeatures={0x33}}) 1.380424117s ago: executing program 3 (id=9): socket$inet6(0xa, 0x2, 0x0) r0 = socket$kcm(0x2, 0x3, 0x84) sendmsg$inet(r0, &(0x7f0000000a00)={&(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10, &(0x7f00000001c0)=[{&(0x7f00000003c0)="00140a000000000000001d1e01e8e51f", 0xffeb}], 0x1}, 0x0) 1.169237256s ago: executing program 3 (id=10): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x45, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000080)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000540), 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000180)=@gcm_128={{0x303, 0x37}, "475566172f45f011", "bd14060000feffffffff91f94413582b", "00001000", "4e67cb72f328ac2f"}, 0x28) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) 1.004283581s ago: executing program 2 (id=11): bpf$MAP_CREATE(0x0, &(0x7f00000040c0)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x2, 0x118) r0 = syz_io_uring_setup(0x3fb1, &(0x7f0000000300)={0x0, 0x9cae, 0x40, 0x5, 0xd6}, &(0x7f0000000100), &(0x7f00000000c0)) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001b80)=ANY=[@ANYBLOB="0600000004000000080000000a"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffec5, 0x0, 0x0, 0x0, 0x200}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800700, &(0x7f00000007c0)={[{@nodioread_nolock}, {@errors_remount}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5a}}, {@nouid32}, {@resgid}, {@acl}, {@init_itable_val={'init_itable', 0x3d, 0x3}}]}, 0x1, 0x46f, &(0x7f0000000bc0)="$eJzs281rHOUfAPDvTF7a/vqS/Gp9aa0aLUJQTJq0ag9eFAWRioIe6jEm2xK6baSJYmuxqYgnQQp6Fo+if4E3EUQ9CV49eZJC0V7aeorM7Ey62WYTazaZ2P18YLPPM/PszvebeXv2eXYD6FpD2Z8kYkdE/BoRA43q0gZDjafrV89P3rh6fjKJhYXX/kjydteunp8sm5av215UhtOI9MOk2MhSs2fPnZyo12tnivro3Km3RmfPnnvinVMTJ2onaqfHjxw5fGjs6afGn+xInlle1/a9P7N/74tvXHp58tilN3/8Oot3R7G+OY9OGcoS/3Mh17ru0U5vrGI7m8pJb4WBcFt6IiLbXX35+T8QPXFz5w3ECx9UGhywrrJ705b2q+cXgDtYElVHAFSjvNFnn3/LxwZ1PTaFK882PgBleV8vHo01vZEWbfpaPt920lBEHJv/6/PsEes0DgEA0Ozjyc+O9kfEeze+einrewwsrknjnvz5t/zvrmIOZTAi/h8RuyPirojYExF3R+Rt742I+9YYz639n/TyGt9yRVn/75libmtp/6/s/cVgT1HbmefflxyfrtcOFv+T4ejbktXHVtjGt8//8km7dc39v+yRbb/sCxZxXO5tGaCbmpibyDulHXDlYsS+3uXyTxZnApKI2BsR+27vrXeVhenHvtzfrtHq+a+gA/NMC19k6c1n+c9HS/6lpHl+cvqW+cnRrVGvHRwtj4pb/fTzR6+22/6a8u+AK7XGc9P+b20ymDTP1852dvv/8vhP+5PX83nm/mLZuxNzc2fGIvqTo3l9yfLxm68t62X77PgfPrD8+b+7eE2W//0RkR3ED0TEgxHxUBH7wxHxSEQcWCHHH55bPf9IK9r/FyOmlr3+LR7/Lfv/9gs9J7//pt32/9n+P5yXhosl+fVvFcuFk10uWgNcy/8OAAAA/ivS/DvwSTqyWE7TkZHGd/j3xP/S+szs3OPHZ94+PdX4rvxg9KXlSNdAMR5an67XxpL54h0b46PjxVhxOV56qBg3/rRnW14fmZypT1WcO3S77W3O/8zvPVVHB6yzbcsuHe/f8ECACrTOo6dLqxdeCRcDuFP5vTZ0r1XO/3Sj4gA2nvs/dK/lzv8LLXVzAXBncv+H7uX8hy6Vfld1BECF3P+hK63ld/3rWNi6OcKoprBZd0peiCgL6aaIR2GdClVfmQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADrj7wAAAP//KFzmgQ==") symlinkat(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000340)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LLSEC_ADD_DEV(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x50, 0x0, 0x852dd6c070cd7e4d, 0x0, 0x0, {}, [@IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_LLSEC_DEV_KEY_MODE={0x5}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r4}, @IEEE802154_ATTR_PAN_ID={0x6}, @IEEE802154_ATTR_SHORT_ADDR={0x6}]}, 0x50}, 0x4, 0x700000000000000}, 0x0) io_uring_register$IORING_REGISTER_PBUF_RING(r0, 0x22, &(0x7f0000000380)={&(0x7f0000003000)}, 0x1) syz_emit_ethernet(0x6e, &(0x7f0000000800)={@random="617e71b72b5f", @link_local={0x17, 0x80, 0xc2, 0x2, 0x9}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "d23396", 0x38, 0x3a, 0xff, @remote, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x9, {0x7, 0x6, "3c9377", 0x5, 0x2c, 0xff, @mcast1, @loopback, [@hopopts={0x33}]}}}}}}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000002600000007"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00'}, 0x10) sendmsg(0xffffffffffffffff, &(0x7f0000002ec0)={0x0, 0x0, &(0x7f0000002c40)=[{&(0x7f0000002b80)="b2", 0x1}], 0x1}, 0x4000) kcmp(0x0, 0x0, 0x2, 0xffffffffffffffff, 0xffffffffffffffff) 55.141906ms ago: executing program 3 (id=12): syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0700000004000000800000000400000028"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x80000001}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r2}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x8, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x18) bind$netlink(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x40, 0x10, 0x401, 0x0, 0xfffffffe, {0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r4}]}}}, @IFLA_MASTER={0x8, 0x3, r4}]}, 0x40}, 0x1, 0xd, 0x0, 0x4000000}, 0x0) 0s ago: executing program 1 (id=13): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2000000}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x18) r2 = memfd_create(&(0x7f0000000180)='\b\x9dF\xd8\b\xb3~u\xa5\"\xdc\xfdq\xf6c\r;\xfcO\x8c=\x81\xb1\xfa\x8b\x8aWpA\xd4\x98\x85K\x89>N\x8ar\x17O\x0fKR\xe2{mn\xcc\xbf2\xc0\xa7\x14\xd0\xd4\xfe/m\xdf\xb6]\xc2\xaa\x86\xec(\xf7\xcd\xa6\xd9n^.\x13*\xd4\xb8\xe8\xc4\xefb\x14Vx\xc6\xfe\x9e\xee\xe7\xd7E\xe9\t\x83\xdeNX\xec\xe66\x1b\x97$\xee\x845n,B\xd5?\xe5E:+Pm\x1d\xb4\xb8\xeb\xe8Op2\x82\xc7\x0e\x97\x03\xef\x1a\xa5\x00.\x89\b!m\f\xd9\x8b$}\x9f\fX\x81\xa8\xf6\x94\xbc\xed\x80|l]\xe9\xca\xd3\xc9\xa3\x9e\x9cJI\xf1\xa2\xa0\xc4:\x00\x00\x00\x00\x00\x00\b\xfey\bJ\x86\x8d\xdf\x16\xbb3\x85\xf5\xe0zYe\xc2\n\x0f\x87\xc4\x8f\x8e\xec\xee\xcd\f\xe9\xc8\xbc\x97,\xb7!\xf2\x93\xd3\t\xd9=\x93\x1d\x945\x97\x1e\x9d\xa6\xe9\xa6\xf9p,\xf7v>\xcd\xd9\xc4\x1b\x9c(\xb8\x90\xdeg\xbf[n\x82\x96\xaev\xd4\xac \x14\xf0\x18@\xc3\xf1\xe2\x14\x1c\x0f\xa4-\xde\xae\xfa;\xaf\xae\x06\x9ag\x02\x98\xd0C2\xe7?\xfb\xb01\x9d\xf8\xd3Q\xb3\xb2\x18V\xe8\x8c\x87\xf4\t\x1c\x85\xa4\xc1\xb1\xf4k!G\xf5\xbb\xbbs&\xeac\xb3\xafW\x846\v\xb3\xca\xeb\xb7\x9e\x9e#]\x10lj\xaf\xaf\xd1\'{\x11\xaa,\x0f\xc5OY\"\x82\x84\xb6:J\x8c\xf37\x1d\xca\xf1\xef\x9f\xcf\a\xcf\xcb', 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$binfmt_misc(r4, &(0x7f0000000500)="05", 0x1) splice(r3, 0x0, r2, 0x0, 0x9, 0x1) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.21' (ED25519) to the list of known hosts. [ 80.740987][ T5754] cgroup: Unknown subsys name 'net' [ 80.848526][ T5754] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 82.493092][ T5754] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 84.317988][ T51] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 84.328354][ T51] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 84.336503][ T51] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 84.345775][ T5781] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 84.369937][ T5781] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 84.399193][ T5779] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 84.409987][ T51] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 84.418488][ T51] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 84.425757][ T5779] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 84.427767][ T51] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 84.440338][ T51] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 84.449614][ T5779] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 84.453541][ T5082] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 84.461021][ T5780] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 84.470668][ T5082] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 84.473454][ T5082] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 84.483050][ T5780] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 84.492769][ T5780] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 84.497699][ T5082] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 84.501118][ T5780] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 84.516843][ T5771] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 84.550625][ T5082] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 84.561229][ T5082] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 84.568662][ T5082] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 85.055656][ T5765] chnl_net:caif_netlink_parms(): no params data found [ 85.178929][ T5764] chnl_net:caif_netlink_parms(): no params data found [ 85.198148][ T5768] chnl_net:caif_netlink_parms(): no params data found [ 85.291250][ T5767] chnl_net:caif_netlink_parms(): no params data found [ 85.308208][ T5765] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.316925][ T5765] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.325262][ T5765] bridge_slave_0: entered allmulticast mode [ 85.337677][ T5765] bridge_slave_0: entered promiscuous mode [ 85.347776][ T5765] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.355195][ T5765] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.363346][ T5765] bridge_slave_1: entered allmulticast mode [ 85.370965][ T5765] bridge_slave_1: entered promiscuous mode [ 85.503639][ T5765] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.516747][ T5765] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.526148][ T5768] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.534115][ T5768] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.542827][ T5768] bridge_slave_0: entered allmulticast mode [ 85.550474][ T5768] bridge_slave_0: entered promiscuous mode [ 85.603129][ T5768] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.610708][ T5768] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.617893][ T5768] bridge_slave_1: entered allmulticast mode [ 85.625630][ T5768] bridge_slave_1: entered promiscuous mode [ 85.645423][ T5764] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.653045][ T5764] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.660408][ T5764] bridge_slave_0: entered allmulticast mode [ 85.667414][ T5764] bridge_slave_0: entered promiscuous mode [ 85.710597][ T5765] team0: Port device team_slave_0 added [ 85.728889][ T5764] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.736133][ T5764] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.744681][ T5764] bridge_slave_1: entered allmulticast mode [ 85.752133][ T5764] bridge_slave_1: entered promiscuous mode [ 85.759071][ T5767] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.766289][ T5767] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.774806][ T5767] bridge_slave_0: entered allmulticast mode [ 85.782397][ T5767] bridge_slave_0: entered promiscuous mode [ 85.792037][ T5765] team0: Port device team_slave_1 added [ 85.798087][ T5767] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.805399][ T5767] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.812712][ T5767] bridge_slave_1: entered allmulticast mode [ 85.820287][ T5767] bridge_slave_1: entered promiscuous mode [ 85.829346][ T5768] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.842393][ T5768] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.915713][ T5764] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.954595][ T5767] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.978709][ T5764] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.000729][ T5765] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 86.007713][ T5765] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.034092][ T5765] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.055749][ T5767] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.080174][ T5768] team0: Port device team_slave_0 added [ 86.098504][ T5765] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 86.105623][ T5765] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.132729][ T5765] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.157505][ T5768] team0: Port device team_slave_1 added [ 86.178837][ T5764] team0: Port device team_slave_0 added [ 86.189177][ T5764] team0: Port device team_slave_1 added [ 86.209837][ T5767] team0: Port device team_slave_0 added [ 86.254419][ T5767] team0: Port device team_slave_1 added [ 86.275039][ T5768] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 86.282890][ T5768] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.309467][ T5768] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.332239][ T5764] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 86.339254][ T5764] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.365472][ T5764] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.378828][ T5764] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 86.386136][ T5764] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.412471][ T5764] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.435669][ T5768] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 86.442852][ T5768] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.469435][ T5768] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.504191][ T5765] hsr_slave_0: entered promiscuous mode [ 86.510808][ T5082] Bluetooth: hci3: command tx timeout [ 86.517130][ T5765] hsr_slave_1: entered promiscuous mode [ 86.525556][ T5767] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 86.533004][ T5767] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.559001][ T5767] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.576596][ T5767] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 86.583698][ T5767] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.609667][ T5767] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.620319][ T5082] Bluetooth: hci0: command tx timeout [ 86.626015][ T5082] Bluetooth: hci1: command tx timeout [ 86.669033][ T5764] hsr_slave_0: entered promiscuous mode [ 86.676178][ T5764] hsr_slave_1: entered promiscuous mode [ 86.680042][ T5082] Bluetooth: hci2: command tx timeout [ 86.687918][ T5764] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 86.696435][ T5764] Cannot create hsr debugfs directory [ 86.735368][ T5768] hsr_slave_0: entered promiscuous mode [ 86.742358][ T5768] hsr_slave_1: entered promiscuous mode [ 86.748540][ T5768] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 86.756573][ T5768] Cannot create hsr debugfs directory [ 86.882163][ T5767] hsr_slave_0: entered promiscuous mode [ 86.888615][ T5767] hsr_slave_1: entered promiscuous mode [ 86.894965][ T5767] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 86.902599][ T5767] Cannot create hsr debugfs directory [ 87.456040][ T5768] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 87.475694][ T5768] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 87.489318][ T5768] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 87.501057][ T5768] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 87.571208][ T5765] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 87.584470][ T5765] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 87.595390][ T5765] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 87.606109][ T5765] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 87.704523][ T5764] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 87.717375][ T5764] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 87.742218][ T5764] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 87.753408][ T5764] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 87.845232][ T5767] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 87.864767][ T5767] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 87.885696][ T5768] 8021q: adding VLAN 0 to HW filter on device bond0 [ 87.895054][ T5767] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 87.905018][ T5767] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 87.949462][ T5768] 8021q: adding VLAN 0 to HW filter on device team0 [ 87.992794][ T34] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.000181][ T34] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.043867][ T5765] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.072337][ T5764] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.083247][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.090433][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.149455][ T5765] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.186513][ T3442] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.193739][ T3442] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.217205][ T5764] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.238507][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.245750][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.282442][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.289600][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.303115][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.310335][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.396993][ T5767] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.437625][ T5764] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 88.451745][ T5764] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 88.546859][ T5767] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.578926][ T3491] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.586139][ T3491] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.600261][ T5082] Bluetooth: hci3: command tx timeout [ 88.623967][ T3491] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.631194][ T3491] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.673102][ T5776] Bluetooth: hci0: command tx timeout [ 88.678700][ T5082] Bluetooth: hci1: command tx timeout [ 88.751075][ T5082] Bluetooth: hci2: command tx timeout [ 88.873727][ T5768] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.986094][ T5764] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.058641][ T5768] veth0_vlan: entered promiscuous mode [ 89.102454][ T5765] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.131398][ T5768] veth1_vlan: entered promiscuous mode [ 89.156306][ T5764] veth0_vlan: entered promiscuous mode [ 89.202782][ T5764] veth1_vlan: entered promiscuous mode [ 89.259212][ T5767] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.277713][ T5768] veth0_macvtap: entered promiscuous mode [ 89.299518][ T5765] veth0_vlan: entered promiscuous mode [ 89.314280][ T5768] veth1_macvtap: entered promiscuous mode [ 89.341445][ T5768] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.369533][ T5768] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.378892][ T5765] veth1_vlan: entered promiscuous mode [ 89.402058][ T5764] veth0_macvtap: entered promiscuous mode [ 89.416581][ T5764] veth1_macvtap: entered promiscuous mode [ 89.441217][ T5768] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.450368][ T5768] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.459092][ T5768] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.468405][ T5768] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.525756][ T5764] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.537767][ T5764] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.552199][ T5764] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.559654][ T5767] veth0_vlan: entered promiscuous mode [ 89.569391][ T5764] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.580087][ T5764] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.594397][ T5764] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.604459][ T5765] veth0_macvtap: entered promiscuous mode [ 89.618651][ T5765] veth1_macvtap: entered promiscuous mode [ 89.636717][ T5764] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.645906][ T5764] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.656154][ T5764] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.665177][ T5764] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.683929][ T5767] veth1_vlan: entered promiscuous mode [ 89.743406][ T5765] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.755072][ T5765] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.766139][ T5765] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.777265][ T5765] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.789285][ T5765] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.835011][ T5765] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.848978][ T5765] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.859694][ T5765] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.871081][ T5765] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.882767][ T5765] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.925783][ T5765] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.935359][ T5765] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.945708][ T5765] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.955695][ T5765] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.980373][ T5767] veth0_macvtap: entered promiscuous mode [ 89.980619][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.995616][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.024735][ T5767] veth1_macvtap: entered promiscuous mode [ 90.090451][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.108074][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.129593][ T34] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.137617][ T34] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.160832][ T5767] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.172860][ T5767] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.182967][ T5767] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.193907][ T5767] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.204009][ T5767] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.214655][ T5767] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.226421][ T5767] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.283168][ T5767] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.298467][ T5767] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.308764][ T5767] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.319275][ T5767] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.329232][ T5767] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.339997][ T5767] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.356183][ T5767] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.372792][ T5767] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.383116][ T5767] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.392148][ T5767] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.402077][ T5767] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.424055][ T3442] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.434955][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.447808][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.460905][ T3442] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.632253][ T34] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.666327][ T34] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.674078][ T5082] Bluetooth: hci3: command tx timeout [ 90.709019][ T34] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.745509][ T34] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.753196][ T5082] Bluetooth: hci1: command tx timeout [ 90.753244][ T5082] Bluetooth: hci0: command tx timeout [ 90.819273][ T34] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.830698][ T5776] Bluetooth: hci2: command tx timeout [ 90.853595][ T34] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.866750][ T5864] syz.1.5[5864]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 90.882654][ T5864] loop1: detected capacity change from 0 to 128 [ 91.431018][ T5862] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.439529][ T5862] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.590845][ T5869] netlink: 7 bytes leftover after parsing attributes in process `syz.1.7'. [ 91.643093][ T5869] netlink: 7 bytes leftover after parsing attributes in process `syz.1.7'. [ 91.899570][ T5862] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 91.924160][ T5862] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 92.115695][ T1189] cfg80211: failed to load regulatory.db [ 92.128643][ T5862] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.138478][ T5862] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.153122][ T5862] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.164452][ T5862] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.253406][ T5871] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7'. [ 92.636489][ T5889] IPVS: starting estimator thread 0... [ 92.750427][ T5776] Bluetooth: hci3: command tx timeout [ 92.807383][ T5902] syz.3.10[5902] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 92.807524][ T5902] syz.3.10[5902] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 92.833125][ T5776] Bluetooth: hci0: command tx timeout [ 92.850889][ T5082] Bluetooth: hci1: command tx timeout [ 92.910162][ T5776] Bluetooth: hci2: command tx timeout [ 92.963104][ T5898] IPVS: using max 18 ests per chain, 43200 per kthread [ 93.712389][ T5908] loop2: detected capacity change from 0 to 512 [ 93.900263][ T5908] ------------[ cut here ]------------ [ 93.906491][ T5908] EA inode 11 i_nlink=2 [ 93.915841][ T5908] WARNING: CPU: 1 PID: 5908 at fs/ext4/xattr.c:1075 ext4_xattr_inode_update_ref+0x4fb/0x550 [ 93.931060][ T5908] Modules linked in: [ 93.935063][ T5908] CPU: 1 PID: 5908 Comm: syz.2.11 Not tainted syzkaller #0 [ 93.942749][ T5908] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 93.953943][ T5908] RIP: 0010:ext4_xattr_inode_update_ref+0x4fb/0x550 [ 93.961113][ T5908] Code: 8d 7e 50 4c 89 f8 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 ff e8 06 2c 9a ff 49 8b 37 48 c7 c7 a0 c6 be 8a 89 da e8 35 3a 0d ff <0f> 0b 4c 8b 74 24 08 4c 8b 7c 24 10 e9 b9 fe ff ff e8 7f a3 24 08 [ 93.980855][ T5908] RSP: 0018:ffffc90004d7f1c0 EFLAGS: 00010246 [ 93.987068][ T5908] RAX: a972eca6fdf2b900 RBX: 0000000000000002 RCX: 0000000000080000 [ 93.995176][ T5908] RDX: ffffc9000d83b000 RSI: 00000000000449c8 RDI: 00000000000449c9 [ 94.003313][ T5908] RBP: ffffc90004d7f2b8 R08: ffff8880b8f28c13 R09: 1ffff110171e5182 [ 94.012526][ T5908] R10: dffffc0000000000 R11: ffffed10171e5183 R12: dffffc0000000000 [ 94.020822][ T5908] R13: ffff888077205ea8 R14: ffff888077205cb0 R15: ffff888077205d00 [ 94.028865][ T5908] FS: 00007f20819026c0(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 94.038255][ T5908] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 94.045128][ T5908] CR2: 00007ff4ed2ede9c CR3: 000000005a81f000 CR4: 00000000003506e0 [ 94.053340][ T5908] Call Trace: [ 94.056664][ T5908] [ 94.059657][ T5908] ? ext4_xattr_list_entries+0x3d0/0x3d0 [ 94.065436][ T5908] ? ext4_xattr_inode_iget+0x3df/0x600 [ 94.071099][ T5908] ext4_xattr_set_entry+0xcda/0x1e90 [ 94.076472][ T5908] ext4_xattr_ibody_set+0x254/0x6a0 [ 94.081824][ T5908] ext4_expand_extra_isize_ea+0x113a/0x19e0 [ 94.087824][ T5908] __ext4_expand_extra_isize+0x306/0x400 [ 94.093588][ T5908] __ext4_mark_inode_dirty+0x45d/0x6e0 [ 94.099110][ T5908] ext4_evict_inode+0x7ed/0xea0 [ 94.104097][ T5908] ? _raw_spin_unlock+0x28/0x40 [ 94.109014][ T5908] ? ext4_inode_is_fast_symlink+0x390/0x390 [ 94.115942][ T5908] ? do_raw_spin_unlock+0x121/0x230 [ 94.121436][ T5908] ? ext4_inode_is_fast_symlink+0x390/0x390 [ 94.127398][ T5908] evict+0x486/0x870 [ 94.131486][ T5908] ? __lock_acquire+0x7c80/0x7c80 [ 94.136582][ T5908] ? proc_nr_inodes+0x230/0x230 [ 94.141563][ T5908] ? do_raw_spin_unlock+0x121/0x230 [ 94.146822][ T5908] ? _raw_spin_unlock+0x28/0x40 [ 94.151808][ T5908] ? iput+0x70a/0x920 [ 94.155849][ T5908] ext4_orphan_cleanup+0xbd4/0x1400 [ 94.161174][ T5908] ? ext4_orphan_del+0xba0/0xba0 [ 94.166166][ T5908] ? ext4_register_li_request+0x183/0x940 [ 94.172027][ T5908] ? errseq_check_and_advance+0x66/0x120 [ 94.177720][ T5908] ext4_fill_super+0x5de4/0x66c0 [ 94.182823][ T5908] ? ext4_parse_test_dummy_encryption+0xb0/0xb0 [ 94.189124][ T5908] ? __might_sleep+0xe0/0xe0 [ 94.194208][ T5908] ? read_lock_is_recursive+0x20/0x20 [ 94.199876][ T5908] ? snprintf+0xdb/0x120 [ 94.204172][ T5908] ? vscnprintf+0x80/0x80 [ 94.208557][ T5908] ? down_write+0x162/0x1f0 [ 94.213273][ T5908] ? down_read_killable+0x340/0x340 [ 94.219497][ T5908] ? setup_bdev_super+0x56b/0x660 [ 94.224789][ T5908] get_tree_bdev+0x3e4/0x510 [ 94.229428][ T5908] ? vfs_parse_fs_string+0x160/0x160 [ 94.234837][ T5908] ? ext4_parse_test_dummy_encryption+0xb0/0xb0 [ 94.241170][ T5908] ? setup_bdev_super+0x660/0x660 [ 94.246241][ T5908] ? apparmor_capable+0x137/0x1a0 [ 94.251419][ T5908] ? bpf_lsm_capable+0x9/0x10 [ 94.256152][ T5908] ? security_capable+0x89/0xb0 [ 94.261152][ T5908] vfs_get_tree+0x8c/0x280 [ 94.265628][ T5908] do_new_mount+0x24b/0xa40 [ 94.271788][ T5908] __se_sys_mount+0x2da/0x3c0 [ 94.276559][ T5908] ? __x64_sys_mount+0xc0/0xc0 [ 94.282008][ T5908] ? lockdep_hardirqs_on+0x98/0x150 [ 94.287277][ T5908] ? __x64_sys_mount+0x20/0xc0 [ 94.292135][ T5908] do_syscall_64+0x55/0xb0 [ 94.296597][ T5908] ? clear_bhb_loop+0x40/0x90 [ 94.301428][ T5908] ? clear_bhb_loop+0x40/0x90 [ 94.306168][ T5908] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 94.312193][ T5908] RIP: 0033:0x7f2080990eea [ 94.317634][ T5908] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 94.337544][ T5908] RSP: 002b:00007f2081901e68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 94.346092][ T5908] RAX: ffffffffffffffda RBX: 00007f2081901ef0 RCX: 00007f2080990eea [ 94.354682][ T5908] RDX: 0000200000000180 RSI: 00002000000001c0 RDI: 00007f2081901eb0 [ 94.362999][ T5908] RBP: 0000200000000180 R08: 00007f2081901ef0 R09: 0000000000800700 [ 94.371066][ T5908] R10: 0000000000800700 R11: 0000000000000246 R12: 00002000000001c0 [ 94.379092][ T5908] R13: 00007f2081901eb0 R14: 000000000000046f R15: 000000000000002c [ 94.387228][ T5908] [ 94.390406][ T5908] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 94.397708][ T5908] CPU: 1 PID: 5908 Comm: syz.2.11 Not tainted syzkaller #0 [ 94.404924][ T5908] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 94.415000][ T5908] Call Trace: [ 94.418296][ T5908] [ 94.421259][ T5908] dump_stack_lvl+0x16c/0x230 [ 94.425970][ T5908] ? show_regs_print_info+0x20/0x20 [ 94.431203][ T5908] ? load_image+0x3b0/0x3b0 [ 94.435820][ T5908] panic+0x2c0/0x710 [ 94.439760][ T5908] ? bpf_jit_dump+0xd0/0xd0 [ 94.444303][ T5908] __warn+0x2e0/0x470 [ 94.448312][ T5908] ? ext4_xattr_inode_update_ref+0x4fb/0x550 [ 94.454330][ T5908] ? ext4_xattr_inode_update_ref+0x4fb/0x550 [ 94.460369][ T5908] report_bug+0x2be/0x4f0 [ 94.464734][ T5908] ? ext4_xattr_inode_update_ref+0x4fb/0x550 [ 94.470744][ T5908] ? ext4_xattr_inode_update_ref+0x4fb/0x550 [ 94.476751][ T5908] ? ext4_xattr_inode_update_ref+0x4fd/0x550 [ 94.482764][ T5908] handle_bug+0xcf/0x120 [ 94.487033][ T5908] exc_invalid_op+0x1a/0x50 [ 94.491557][ T5908] asm_exc_invalid_op+0x1a/0x20 [ 94.496437][ T5908] RIP: 0010:ext4_xattr_inode_update_ref+0x4fb/0x550 [ 94.503066][ T5908] Code: 8d 7e 50 4c 89 f8 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 ff e8 06 2c 9a ff 49 8b 37 48 c7 c7 a0 c6 be 8a 89 da e8 35 3a 0d ff <0f> 0b 4c 8b 74 24 08 4c 8b 7c 24 10 e9 b9 fe ff ff e8 7f a3 24 08 [ 94.522701][ T5908] RSP: 0018:ffffc90004d7f1c0 EFLAGS: 00010246 [ 94.528800][ T5908] RAX: a972eca6fdf2b900 RBX: 0000000000000002 RCX: 0000000000080000 [ 94.536805][ T5908] RDX: ffffc9000d83b000 RSI: 00000000000449c8 RDI: 00000000000449c9 [ 94.544883][ T5908] RBP: ffffc90004d7f2b8 R08: ffff8880b8f28c13 R09: 1ffff110171e5182 [ 94.552908][ T5908] R10: dffffc0000000000 R11: ffffed10171e5183 R12: dffffc0000000000 [ 94.560895][ T5908] R13: ffff888077205ea8 R14: ffff888077205cb0 R15: ffff888077205d00 [ 94.568914][ T5908] ? ext4_xattr_list_entries+0x3d0/0x3d0 [ 94.574577][ T5908] ? ext4_xattr_inode_iget+0x3df/0x600 [ 94.580252][ T5908] ext4_xattr_set_entry+0xcda/0x1e90 [ 94.585579][ T5908] ext4_xattr_ibody_set+0x254/0x6a0 [ 94.590838][ T5908] ext4_expand_extra_isize_ea+0x113a/0x19e0 [ 94.596786][ T5908] __ext4_expand_extra_isize+0x306/0x400 [ 94.602455][ T5908] __ext4_mark_inode_dirty+0x45d/0x6e0 [ 94.608041][ T5908] ext4_evict_inode+0x7ed/0xea0 [ 94.612922][ T5908] ? _raw_spin_unlock+0x28/0x40 [ 94.617803][ T5908] ? ext4_inode_is_fast_symlink+0x390/0x390 [ 94.623720][ T5908] ? do_raw_spin_unlock+0x121/0x230 [ 94.628945][ T5908] ? ext4_inode_is_fast_symlink+0x390/0x390 [ 94.634869][ T5908] evict+0x486/0x870 [ 94.638786][ T5908] ? __lock_acquire+0x7c80/0x7c80 [ 94.643836][ T5908] ? proc_nr_inodes+0x230/0x230 [ 94.648810][ T5908] ? do_raw_spin_unlock+0x121/0x230 [ 94.654032][ T5908] ? _raw_spin_unlock+0x28/0x40 [ 94.658900][ T5908] ? iput+0x70a/0x920 [ 94.662914][ T5908] ext4_orphan_cleanup+0xbd4/0x1400 [ 94.668311][ T5908] ? ext4_orphan_del+0xba0/0xba0 [ 94.673385][ T5908] ? ext4_register_li_request+0x183/0x940 [ 94.679137][ T5908] ? errseq_check_and_advance+0x66/0x120 [ 94.684802][ T5908] ext4_fill_super+0x5de4/0x66c0 [ 94.689777][ T5908] ? ext4_parse_test_dummy_encryption+0xb0/0xb0 [ 94.696041][ T5908] ? __might_sleep+0xe0/0xe0 [ 94.700739][ T5908] ? read_lock_is_recursive+0x20/0x20 [ 94.706139][ T5908] ? snprintf+0xdb/0x120 [ 94.710501][ T5908] ? vscnprintf+0x80/0x80 [ 94.714874][ T5908] ? down_write+0x162/0x1f0 [ 94.719402][ T5908] ? down_read_killable+0x340/0x340 [ 94.724624][ T5908] ? setup_bdev_super+0x56b/0x660 [ 94.729672][ T5908] get_tree_bdev+0x3e4/0x510 [ 94.734285][ T5908] ? vfs_parse_fs_string+0x160/0x160 [ 94.739598][ T5908] ? ext4_parse_test_dummy_encryption+0xb0/0xb0 [ 94.745854][ T5908] ? setup_bdev_super+0x660/0x660 [ 94.750893][ T5908] ? apparmor_capable+0x137/0x1a0 [ 94.755943][ T5908] ? bpf_lsm_capable+0x9/0x10 [ 94.760639][ T5908] ? security_capable+0x89/0xb0 [ 94.765510][ T5908] vfs_get_tree+0x8c/0x280 [ 94.769946][ T5908] do_new_mount+0x24b/0xa40 [ 94.774477][ T5908] __se_sys_mount+0x2da/0x3c0 [ 94.779182][ T5908] ? __x64_sys_mount+0xc0/0xc0 [ 94.784009][ T5908] ? lockdep_hardirqs_on+0x98/0x150 [ 94.789252][ T5908] ? __x64_sys_mount+0x20/0xc0 [ 94.794046][ T5908] do_syscall_64+0x55/0xb0 [ 94.798486][ T5908] ? clear_bhb_loop+0x40/0x90 [ 94.803195][ T5908] ? clear_bhb_loop+0x40/0x90 [ 94.807912][ T5908] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 94.813828][ T5908] RIP: 0033:0x7f2080990eea [ 94.818265][ T5908] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 94.837897][ T5908] RSP: 002b:00007f2081901e68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 94.846351][ T5908] RAX: ffffffffffffffda RBX: 00007f2081901ef0 RCX: 00007f2080990eea [ 94.854346][ T5908] RDX: 0000200000000180 RSI: 00002000000001c0 RDI: 00007f2081901eb0 [ 94.862353][ T5908] RBP: 0000200000000180 R08: 00007f2081901ef0 R09: 0000000000800700 [ 94.870350][ T5908] R10: 0000000000800700 R11: 0000000000000246 R12: 00002000000001c0 [ 94.878349][ T5908] R13: 00007f2081901eb0 R14: 000000000000046f R15: 000000000000002c [ 94.886355][ T5908] [ 94.889960][ T5908] Kernel Offset: disabled [ 94.894350][ T5908] Rebooting in 86400 seconds..