last executing test programs: 8m39.839659357s ago: executing program 32 (id=634): r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x60}}, {{0x9, 0x5, 0x81, 0x3, 0x200, 0xc5}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x12, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x90) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x1, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="6000000010000304000300"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000003000128009000100766c616e00000000200002800c000200060000000f00000006000100fe0f00000600050088a8000008000500", @ANYRES32=r3, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r3], 0x60}, 0x1, 0x0, 0x0, 0x4044000}, 0x8000) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10}}, 0x0, 0x0, 0x0, 0x0}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000013c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a200000feff0a03000000070000040900010073797a300000000060000000090a01040000000000000000070000030800fe2adba7931157b5a81cb6d15414476d0a40000000000900020073797a300000000044c0a659edfe60572f800f5d0900010073797a3000000000080005400000000d1c001280180020800e000100636f6e6e6c696d6974000000040002ffffff7f400000"], 0xa8}}, 0x20050800) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_ep_write(r0, 0x82, 0x5, &(0x7f0000002340)='hello') 7m27.113745775s ago: executing program 33 (id=886): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000003, 0x4031, 0xffffffffffffffff, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0x5c, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff00000000bfa100000000000007010000b8ffffffb702000000000000b703000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0xc, 0xe, &(0x7f0000002ec0)=ANY=[@ANYRES16], &(0x7f0000000340)='syzkaller\x00'}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001300)={&(0x7f0000000c00)='net_dev_start_xmit\x00', r2}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0xe2c, 0x60000000, &(0x7f0000000100)="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", 0x0, 0x24, 0x60000000}, 0x2c) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000c40)={0x6, 0xf, &(0x7f00000005c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x7fffffff}, [@map_idx={0x18, 0x7, 0x5, 0x0, 0x10}, @tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}, @tail_call]}, &(0x7f0000000740)='GPL\x00', 0x5, 0xa3, &(0x7f0000000780)=""/163, 0x40f00, 0x28, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000a00)={0x1, 0x10, 0x0, 0x4}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000000a80)=[0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000ac0)=[{0x2, 0x4, 0x1, 0x9}, {0x4, 0x3, 0x10, 0x3}]}, 0x94) sendmsg$NFT_MSG_GETSETELEM(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000b00)=ANY=[], 0x40}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) remap_file_pages(&(0x7f0000983000/0x2000)=nil, 0x2000, 0x1, 0x5, 0x0) 6m25.884758061s ago: executing program 34 (id=1054): r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) openat$fb0(0xffffffffffffff9c, 0x0, 0x180300, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f000001b700)=""/102392, 0x18ff8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f00000000c0)=[{0x20, 0x0, 0x20, 0xfffff034}, {0x6}]}, 0x10) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000700)=ANY=[@ANYBLOB="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"], 0x118}}, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0585609, 0x0) 5m29.580086748s ago: executing program 7 (id=1238): r0 = socket$inet(0xa, 0x801, 0x84) listen(r0, 0x8) r1 = socket$netlink(0x10, 0x3, 0x4) writev(r1, 0x0, 0x0) 5m27.703853792s ago: executing program 7 (id=1245): r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x1c0002, 0x0) write$vga_arbiter(r0, &(0x7f0000000180)=@other={'lock', ' ', 'mem'}, 0x9) r1 = epoll_create(0x1) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000140)) write$vga_arbiter(r0, &(0x7f0000000500)=ANY=[@ANYBLOB="6465636f646573206e6f6e650016ebd79f667a37426fe5de48d72003dd693ca31d610e5148d90cf3233a8f"], 0xd) 5m27.060718932s ago: executing program 7 (id=1248): close(0xffffffffffffffff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) modify_ldt$write2(0x11, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0xc0a85320, &(0x7f0000000180)={{0x80}, 'port0\x00', 0x7e, 0xa1c07, 0x6, 0x0, 0x100000}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r2, 0x0, 0x800) listen(0xffffffffffffffff, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r3 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000001440), 0x0, 0x0) ioctl$IMADDTIMER(r3, 0x80044940, &(0x7f0000000080)=0x14) close(r3) 5m20.839782912s ago: executing program 7 (id=1259): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) epoll_create1(0x80000) syz_emit_ethernet(0x7a, &(0x7f0000000140)={@local, @local, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "92c01f", 0x44, 0x2f, 0x0, @remote, @loopback={0x57}, {[], {{0x0, 0x0, 0x1, 0x0, 0x2, 0x1}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x57}}}}}}}, 0x0) 5m20.531341513s ago: executing program 7 (id=1261): r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000300)={'vcan0\x00', 0x0}) bind$can_raw(r0, &(0x7f0000000000)={0x1d, r1}, 0x10) bind$can_raw(r0, &(0x7f0000000080), 0x10) 5m20.099559417s ago: executing program 7 (id=1262): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r0 = syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000180)={0x1, @pix={0x0, 0x0, 0x20493859, 0x0, 0x0, 0x0, 0x5, 0xfeedcafe, 0x3, 0x7}}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002000)=""/102400, 0x19000) socket(0x2a, 0x2, 0x0) select(0x40, &(0x7f0000000400)={0x9, 0x3, 0x80000000, 0x0, 0x7, 0x7, 0x100000}, 0x0, 0x0, &(0x7f0000000100)={0x0, 0xea60}) 5m4.440008918s ago: executing program 35 (id=1262): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r0 = syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000180)={0x1, @pix={0x0, 0x0, 0x20493859, 0x0, 0x0, 0x0, 0x5, 0xfeedcafe, 0x3, 0x7}}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002000)=""/102400, 0x19000) socket(0x2a, 0x2, 0x0) select(0x40, &(0x7f0000000400)={0x9, 0x3, 0x80000000, 0x0, 0x7, 0x7, 0x100000}, 0x0, 0x0, &(0x7f0000000100)={0x0, 0xea60}) 3m36.979452164s ago: executing program 3 (id=1713): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) 3m36.536037835s ago: executing program 3 (id=1716): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 3m36.162713946s ago: executing program 3 (id=1718): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, 0x0, 0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000026c0)={0xc4, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x33, 0xe, {{{}, {}, @device_a, @broadcast, @from_mac}, 0x0, @default, 0x1, @val, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @val={0x71, 0x7, {0x1, 0x1, 0x1, 0x1, 0x0, 0xa, 0x8}}, @void}}, @NL80211_ATTR_IE_PROBE_RESP={0x4d, 0x7f, [@ibss={0x6, 0x2, 0x6}, @sec_chan_ofs={0x3e, 0x1, 0x3}, @rann={0x7e, 0x15, {{0x1, 0x28}, 0x46, 0x4f, @broadcast, 0x4c, 0x2}}, @prep={0x83, 0x25, {{0x0, 0x1}, 0x2b, 0x7, @device_a, 0x6, @value=@broadcast, 0xf855, 0xffffff8f, @broadcast, 0xd}}, @ibss={0x6, 0x2, 0x400}]}, @NL80211_ATTR_FTM_RESPONDER={0xc, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_CIVICLOC={0x4}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}]}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0xc4}}, 0x0) 3m35.857046491s ago: executing program 3 (id=1720): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000340)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x9, 0x4, 0x7ffc0002}]}) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d0000000700000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r0}, 0x10) setrlimit(0x40000000000008, 0x0) 3m35.37359679s ago: executing program 3 (id=1721): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) r2 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000001c0)={r0, r1, 0x5, 0x0, @void}, 0x10) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000040)={r2, r0, 0x4, r0}, 0x6) 3m34.979757691s ago: executing program 3 (id=1723): setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x3, &(0x7f0000000000)=0x1, 0x4) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f0000000080)=0x40, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000400)='jbd2_handle_extend\x00'}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x44, 0x86}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000480), 0x400034f, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004"], 0x48) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="563f0000180059"], 0xfe33) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='\'\x00\x00\x00'], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x8) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000003c0), 0x1, 0x0) writev(r4, &(0x7f0000001040)=[{&(0x7f0000000040)='\n', 0x1}], 0x1) bind$bt_hci(r3, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000300)=ANY=[@ANYRES32=0x0, @ANYRES32=r1, @ANYBLOB="0d00fc961bb8000000000000", @ANYBLOB, @ANYRES64=0x0], 0x20) write$binfmt_misc(r3, &(0x7f0000000000), 0xd) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000a70000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='percpu_alloc_percpu\x00', r5}, 0x10) syz_io_uring_setup(0x111, &(0x7f0000000340)={0x0, 0x11, 0x2}, 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4e22, 0x23, @loopback, 0x23}, 0x1c) dup(0xffffffffffffffff) 3m19.680385463s ago: executing program 36 (id=1723): setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x3, &(0x7f0000000000)=0x1, 0x4) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f0000000080)=0x40, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000400)='jbd2_handle_extend\x00'}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x44, 0x86}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000480), 0x400034f, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004"], 0x48) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="563f0000180059"], 0xfe33) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='\'\x00\x00\x00'], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x8) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000003c0), 0x1, 0x0) writev(r4, &(0x7f0000001040)=[{&(0x7f0000000040)='\n', 0x1}], 0x1) bind$bt_hci(r3, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000300)=ANY=[@ANYRES32=0x0, @ANYRES32=r1, @ANYBLOB="0d00fc961bb8000000000000", @ANYBLOB, @ANYRES64=0x0], 0x20) write$binfmt_misc(r3, &(0x7f0000000000), 0xd) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000a70000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='percpu_alloc_percpu\x00', r5}, 0x10) syz_io_uring_setup(0x111, &(0x7f0000000340)={0x0, 0x11, 0x2}, 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4e22, 0x23, @loopback, 0x23}, 0x1c) dup(0xffffffffffffffff) 2m50.493368594s ago: executing program 9 (id=1878): sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket(0x23, 0x5, 0x0) listen(r1, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) accept4$inet6(r1, 0x0, 0x0, 0x0) 2m38.684395301s ago: executing program 9 (id=1908): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_usb_connect(0x3, 0x1c, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$can_bcm(0x1d, 0x2, 0x2) r3 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000040)={'vxcan1\x00', 0x0}) bind$can_j1939(r3, &(0x7f0000000100)={0x1d, r4, 0x2, {0x3}}, 0x18) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000100)={'vxcan0\x00', 0x0}) sendmsg$nl_generic(r3, 0x0, 0xc000) syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), r3) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x8, &(0x7f00000001c0)={&(0x7f0000000380)=@getchain={0x24, 0x11, 0x1, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {}, {0x7, 0x2}, {0x0, 0xf}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000}, 0x98) 2m37.718019111s ago: executing program 9 (id=1912): r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) close(r0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000180)) ioctl$SIOCSIFHWADDR(r0, 0x8b18, &(0x7f0000000000)={'wlan1\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}}) 2m37.324423239s ago: executing program 9 (id=1913): bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SET_NAME(0xf, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @local}, 0x10) setsockopt$inet_opts(r0, 0x0, 0x4, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c00000021000f0000f9090000002100"], 0x1c}}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0), 0x4) 2m37.035287345s ago: executing program 9 (id=1915): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) r2 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000001c0)={r0, r1, 0x5, 0x0, @void}, 0x10) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000040)={r2, r0, 0x4, r0}, 0x6) 2m36.644317641s ago: executing program 9 (id=1917): sendmsg$tipc(0xffffffffffffffff, 0x0, 0x4080) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) syz_usb_connect(0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) bind$netrom(r1, &(0x7f00000004c0)={{0x6, @rose, 0x7}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bcast, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null]}, 0x48) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 2m21.358176681s ago: executing program 37 (id=1917): sendmsg$tipc(0xffffffffffffffff, 0x0, 0x4080) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) syz_usb_connect(0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) bind$netrom(r1, &(0x7f00000004c0)={{0x6, @rose, 0x7}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bcast, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null]}, 0x48) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 2m7.85336235s ago: executing program 8 (id=2040): capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)) r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000000), 0x208e24b) ioctl$SCSI_IOCTL_GET_PCI(r0, 0x5393, &(0x7f0000000000)) 2m7.347916971s ago: executing program 8 (id=2043): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000007c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000170900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}}, 0x2000c450) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000940)={{0x14}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0xe}}}, 0x28}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) 2m7.003913748s ago: executing program 8 (id=2045): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) io_setup(0x8, &(0x7f0000000000)=0x0) r1 = eventfd2(0x0, 0x0) io_submit(r0, 0x1, &(0x7f00000002c0)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000000180)="d1f7624a6b0e53c3", 0x8}]) writev(r1, &(0x7f0000000480)=[{&(0x7f0000000340)="7e9adf65e9c6bafa", 0x8}], 0x1) 2m6.486990648s ago: executing program 8 (id=2047): syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00'}) r1 = socket(0x2b, 0x80801, 0x1) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x401101, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) unshare(0x2040400) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x8000) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_clone(0x60100000, 0x0, 0x0, &(0x7f00000022c0), &(0x7f0000002300), 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) r4 = openat$kvm(0xffffffffffffff9c, 0x0, 0x42, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(r5, 0x4068aea3, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2) ioctl$KVM_SET_VAPIC_ADDR(r6, 0x4008ae93, 0x0) bind$unix(r1, &(0x7f00000002c0)=@abs={0x0, 0x0, 0x4e23}, 0x6e) 2m4.675989651s ago: executing program 8 (id=2051): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={0x0, r0}, 0x18) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r3) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r4, 0x8943, &(0x7f0000000100)={'syzkaller0\x00'}) ioctl$SIOCSIFHWADDR(r3, 0x8943, &(0x7f0000002280)={'syzkaller0\x00', @random="001300"}) 2m3.958825531s ago: executing program 8 (id=2058): r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup\x00', 0x0, 0x42) open_by_handle_at(r0, &(0x7f0000000380)=ANY=[@ANYRES8=r0], 0x40000) ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc04c565d, &(0x7f00000002c0)=@multiplanar_fd={0xc3b4eab, 0x7, 0x4, 0x400, 0x4, {0x0, 0xea60}, {0x5, 0x0, 0x7, 0xb, 0x4, 0x3, "f6de8be8"}, 0xac14, 0x4, {0x0}, 0x2}) mknod$loop(&(0x7f0000000140)='./file0\x00', 0x8fff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x6, 0x88}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0xfffffffffffffffe) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) read$nci(0xffffffffffffffff, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi3\x00', 0x2000, 0x0) ioctl$COMEDI_INSN(r2, 0x8028640c, &(0x7f0000000000)={0x4000000, 0x0, 0x0, 0x0, 0x80000000}) write$nci(0xffffffffffffffff, &(0x7f0000001740)=ANY=[@ANYBLOB="500105010c0000000303000409056dac131b1126baa0c7c8a90c3a824b51746b39f2b0295b6999a3cee94bac3b6ad3a4472906319cbee76bb972143bf81dbf25e67a468298c2cd66ee042b490d38191a80eac4a0c3669195482e070fa2157afc927a66cf21fac07d1e662e320e134bd9cde6bc84789344"], 0x83) keyctl$read(0x2, 0x0, &(0x7f00000000c0)=""/4096, 0x1000) execve(&(0x7f0000000040)='./file0\x00', &(0x7f0000001900), &(0x7f0000000a80)={[&(0x7f00000018c0)='.^*%$\'-\\:\x00\xfb\x12#\x19\t\x99n\x1e\xef,NA\xf3)\xc8\xcd\x9bM\x83\x9d\v\x80\xcbU\xdcV\xe4\xff\xa8\xf1']}) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000180)={0xfb, 0x8, 0x0, "062383a78614d321eb086bebba55db0dfca05613826fffd4ee640ffed6cd68cb", 0x32314d54}) socket$inet_icmp_raw(0x2, 0x3, 0x1) 1m48.395107799s ago: executing program 38 (id=2058): r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup\x00', 0x0, 0x42) open_by_handle_at(r0, &(0x7f0000000380)=ANY=[@ANYRES8=r0], 0x40000) ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc04c565d, &(0x7f00000002c0)=@multiplanar_fd={0xc3b4eab, 0x7, 0x4, 0x400, 0x4, {0x0, 0xea60}, {0x5, 0x0, 0x7, 0xb, 0x4, 0x3, "f6de8be8"}, 0xac14, 0x4, {0x0}, 0x2}) mknod$loop(&(0x7f0000000140)='./file0\x00', 0x8fff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x6, 0x88}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0xfffffffffffffffe) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) read$nci(0xffffffffffffffff, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi3\x00', 0x2000, 0x0) ioctl$COMEDI_INSN(r2, 0x8028640c, &(0x7f0000000000)={0x4000000, 0x0, 0x0, 0x0, 0x80000000}) write$nci(0xffffffffffffffff, &(0x7f0000001740)=ANY=[@ANYBLOB="500105010c0000000303000409056dac131b1126baa0c7c8a90c3a824b51746b39f2b0295b6999a3cee94bac3b6ad3a4472906319cbee76bb972143bf81dbf25e67a468298c2cd66ee042b490d38191a80eac4a0c3669195482e070fa2157afc927a66cf21fac07d1e662e320e134bd9cde6bc84789344"], 0x83) keyctl$read(0x2, 0x0, &(0x7f00000000c0)=""/4096, 0x1000) execve(&(0x7f0000000040)='./file0\x00', &(0x7f0000001900), &(0x7f0000000a80)={[&(0x7f00000018c0)='.^*%$\'-\\:\x00\xfb\x12#\x19\t\x99n\x1e\xef,NA\xf3)\xc8\xcd\x9bM\x83\x9d\v\x80\xcbU\xdcV\xe4\xff\xa8\xf1']}) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000180)={0xfb, 0x8, 0x0, "062383a78614d321eb086bebba55db0dfca05613826fffd4ee640ffed6cd68cb", 0x32314d54}) socket$inet_icmp_raw(0x2, 0x3, 0x1) 56.104138854s ago: executing program 5 (id=2311): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900030073797a30000000000900010073797a300000000058000000060a010400000000000000000100000008000b40000000000900010073797a3000000000300004802c0001800a0001007175657565"], 0xcc}, 0x1, 0x0, 0x0, 0x24000090}, 0x0) 55.604515267s ago: executing program 5 (id=2316): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000440)={0x0, 0x128}}, 0x20030080) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000002ac0)=@newtaction={0x18c, 0x30, 0xc96f2b0dc02612b1, 0x71bd23, 0x25dfdbff, {}, [{0x178, 0x1, [@m_csum={0xcc, 0x34, 0x0, 0x0, {{0x9}, {0x4}, {0x9d, 0x6, "576458eea52fd27eec92e713a172e757e1f62fe8475fa8817d9bd39d398251801f64d9b8e312b47b111ff094a2f452e1fd749b169123625c664a63e06baa8402c6b5fe34fbffaf329e5589fe1d00f704d8d13b0100000081ec7a1e9e21427be570631961812505684e260d3f73821a372961e6acf9f73f3ab3a6d19010c501877fc1473ff3fe388a502702c7e7d4eb99cd479f52bef8df8dc2"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}, @m_ife={0xa8, 0x4, 0x0, 0x0, {{0x8}, {0x58, 0x2, 0x0, 0x1, [@TCA_IFE_TYPE={0x6, 0x5, 0x1}, @TCA_IFE_SMAC={0xa, 0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x8}}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x2, 0x4, 0x1, 0x7}}}, @TCA_IFE_SMAC={0xa, 0x4, @multicast}, @TCA_IFE_METALST={0xc, 0x6, [@IFE_META_TCINDEX={0x6, 0x5, @val=0x4}]}, @TCA_IFE_SMAC={0xa, 0x4, @local}]}, {0x2a, 0x6, "91ee006b0fddf50a8e24f8dae49128826481a23a4f6a15b0baafbd3caabb34800341a46986d6"}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x18c}, 0x1, 0x0, 0x0, 0x4004000}, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x8804, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4088, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x44}, {&(0x7f0000000200)=""/63, 0x334}, {&(0x7f00000007c0)=""/154, 0x2c}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 55.179662501s ago: executing program 5 (id=2320): socket$vsock_stream(0x28, 0x1, 0x0) io_destroy(0x0) sched_setaffinity(0x0, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000005c0)=ANY=[@ANYBLOB="14000000100001ff00000000000000000000000a2c00000048a6540319e0b58500000000020000000900030073797a32000002000900010073797a300000000014000000020a031747d21400000000000000000014000000110001"], 0x68}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYBLOB="14000000100001000b000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000044000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f28000340000000045c0000000c0a01020000000000000000010000000900020073797a32000000000900010073797a3000000000300003802c00008028000180230001"], 0xe8}}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[], 0xe8}}, 0x0) 54.707984744s ago: executing program 5 (id=2322): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=@newqdisc={0x68, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x3c, 0x2, [@TCA_TBF_PBURST={0x8, 0x7, 0xb86}, @TCA_TBF_PARMS={0x28, 0x1, {{0xa, 0x2, 0xffff, 0x7, 0xcc, 0x3}, {0x0, 0x1, 0x7, 0x8, 0x7f, 0x9}, 0xa6, 0x7, 0x1bb6}}, @TCA_TBF_BURST={0x8, 0x6, 0x7f}]}}]}, 0x68}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r3, {}, {0x2, 0xb}, {0xd, 0xfff3}}, [@qdisc_kind_options=@q_plug={{0x9}, {0xffffffffffffff95, 0x2, {0x1, 0x5}}}]}, 0x3c}}, 0x4008000) 54.116240556s ago: executing program 5 (id=2325): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0500000004000000990000000b"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001803000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c3"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000e00)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x27, 0x0, &(0x7f0000000c40)="bcceb54f8793761baf54949ccc1878cb76eb90f4191b23f64e322f258a5acd9fa6c3616f23f307", 0x0, 0x2, 0x0, 0x5}, 0x50) r2 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c018030029000b12d25a80648c2594f90124fc60100c020000040000053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0) 53.757227997s ago: executing program 5 (id=2327): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x42902, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x10, 0x803, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400010bce) r2 = syz_open_dev$MSR(&(0x7f0000000380), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x78, 0x2c, 0xd27, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, r4, {0xc, 0xfff1}, {}, {0x5, 0xf}}, [@filter_kind_options=@f_flow={{0x9}, {0x48, 0x2, [@TCA_FLOW_EMATCHES={0x44, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xfffb}}, @TCA_EMATCH_TREE_LIST={0x38, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x7, 0x7, 0x2}, {{0x0, 0x1, 0x0, 0x1}, {0x0, 0x1, 0x1, 0x1}}}}, @TCF_EM_META={0x20, 0x2, 0x0, 0x0, {{0xfffb, 0x4, 0x2}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x5, 0xe, 0x2}, {0x0, 0x7, 0x2}}}, @TCA_EM_META_RVALUE={0x6, 0x3, [@TCF_META_TYPE_VAR="5bb4"]}]}}]}]}]}}]}, 0x78}}, 0x20040054) write$tun(0xffffffffffffffff, 0x0, 0x0) 38.374526173s ago: executing program 39 (id=2327): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x42902, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x10, 0x803, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400010bce) r2 = syz_open_dev$MSR(&(0x7f0000000380), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x78, 0x2c, 0xd27, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, r4, {0xc, 0xfff1}, {}, {0x5, 0xf}}, [@filter_kind_options=@f_flow={{0x9}, {0x48, 0x2, [@TCA_FLOW_EMATCHES={0x44, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xfffb}}, @TCA_EMATCH_TREE_LIST={0x38, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x7, 0x7, 0x2}, {{0x0, 0x1, 0x0, 0x1}, {0x0, 0x1, 0x1, 0x1}}}}, @TCF_EM_META={0x20, 0x2, 0x0, 0x0, {{0xfffb, 0x4, 0x2}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x5, 0xe, 0x2}, {0x0, 0x7, 0x2}}}, @TCA_EM_META_RVALUE={0x6, 0x3, [@TCF_META_TYPE_VAR="5bb4"]}]}}]}]}]}}]}, 0x78}}, 0x20040054) write$tun(0xffffffffffffffff, 0x0, 0x0) 12.021595342s ago: executing program 6 (id=2453): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000540)=0x4) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x1) close(0xffffffffffffffff) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f0000000280)='g', 0x1, 0x4008891, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x2}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f00000000c0)={0xb, 0x4, 0xfe, 0x2, 0x3, 0x0, 0x5, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x5}, 0xe) setsockopt$sock_int(r1, 0x1, 0x28, 0x0, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_buf(r2, 0x0, 0x8008000000010, &(0x7f0000000080)="17000000020001000003d68c5ee17688a2003c08020300ecff3f0200000300000a00000c89f1608558134fcf9f98c1811900009afc5ad9485bbb6a880000d6c8db0000dba67e060180000a0000f10607bdff59100ac45761407a681f009cee4a5acb3da400001fb700674f19b44e09f9315033bf79ac2dff060115003901000000000000ea000000000000000009ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68", 0xb8) r3 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x41, 0x0) write$nbd(r3, 0x0, 0x40) 10.866494616s ago: executing program 6 (id=2455): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000140), 0x10) sendmsg$can_bcm(r0, &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40084}, 0x20000000) 10.520124657s ago: executing program 6 (id=2460): r0 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0/file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) mlock(&(0x7f0000c00000/0x400000)=nil, 0x400000) mremap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f0000fff000/0x1000)=nil) madvise(&(0x7f0000f0f000/0x2000)=nil, 0x2000, 0x15) sendmsg$NL80211_CMD_GET_SCAN(r0, 0x0, 0x44000) 9.006551617s ago: executing program 1 (id=2473): sched_setaffinity(0x0, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000005c0)=ANY=[], 0x68}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYBLOB="14000000100001000b000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000044000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f28000340000000045c0000000c0a01020000000000000000010000000900020073797a32000000000900010073797a3000000000300003802c00008028000180230001"], 0xe8}}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[], 0xe8}}, 0x0) 8.863920741s ago: executing program 4 (id=2475): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0x10, &(0x7f0000000e40)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b704000008000000850000001c00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 8.678110288s ago: executing program 1 (id=2477): syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) r1 = syz_usb_connect$hid(0x0, 0x3f, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_fuse_handle_req(r0, &(0x7f000000a0c0)="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", 0x2000, 0x0) socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) r2 = socket(0x1, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="7fff0000000000002800128009000100766c616e000000001800028006000100340200000c0002001f0000001e00000008000500", @ANYRES32=r3], 0x50}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newlink={0x50, 0x10, 0x421, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x88a8ffad, 0x60e1}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0xe, 0xa}}, @IFLA_VLAN_ID={0x6, 0x1, 0x400}]}}}, @IFLA_LINK={0x8, 0x5, r6}]}, 0x50}}, 0x2) 8.479133949s ago: executing program 4 (id=2479): r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x41, 0x0) write$nbd(r0, 0x0, 0x40) 8.179222054s ago: executing program 4 (id=2480): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r0) ioctl$SIOCSIFHWADDR(r0, 0x8943, &(0x7f0000002280)={'syzkaller0\x00', @random="001300"}) 7.703013436s ago: executing program 1 (id=2483): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) r2 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000001c0)={r0, r1, 0x5, 0x0, @void}, 0x10) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000040)={r2, r0, 0x4, r0}, 0x6) 7.655794568s ago: executing program 4 (id=2484): socketpair$unix(0x1, 0x2, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r3 = dup(r2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r3, 0x2000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x9) 7.252243732s ago: executing program 1 (id=2488): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x2c}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) 6.901127985s ago: executing program 1 (id=2491): r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) connect$bt_rfcomm(r0, &(0x7f00000004c0)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x2}, 0xa) r1 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) connect$bt_rfcomm(r1, 0x0, 0x0) syz_open_procfs$pagemap(0x0, 0x0) shutdown(r0, 0x1) 6.534013062s ago: executing program 1 (id=2494): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r0) ioctl$SIOCSIFHWADDR(r0, 0x8943, &(0x7f0000002280)={'syzkaller0\x00', @random="001300"}) 4.036427853s ago: executing program 2 (id=2504): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000004300), 0x1, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x4) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x527) 3.617640237s ago: executing program 2 (id=2506): read$msr(0xffffffffffffffff, 0x0, 0x0) gettid() sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000100)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r1 = timerfd_create(0x0, 0x0) read(r1, &(0x7f0000000080)=""/149, 0x95) bpf$MAP_CREATE(0x0, 0x0, 0x48) close(0x3) 2.761837332s ago: executing program 2 (id=2509): creat(&(0x7f0000001380)='./file0\x00', 0x4) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0xe0000000, 0x5e490420, 0x1, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}}, 0x50) syz_fuse_handle_req(r0, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x24d01, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) dup3(r0, r2, 0x6700000000000000) 1.980224024s ago: executing program 0 (id=2511): sched_setaffinity(0x0, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000005c0)=ANY=[@ANYBLOB], 0x68}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYBLOB="14000000100001000b000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000044000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f28000340000000045c0000000c0a01020000000000000000010000000900020073797a32000000000900010073797a3000000000300003802c00008028000180230001"], 0xe8}}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[], 0xe8}}, 0x0) 1.943373919s ago: executing program 6 (id=2512): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[], 0x2c}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) 1.592083012s ago: executing program 0 (id=2513): write$nbd(0xffffffffffffffff, 0x0, 0x40) 1.524427275s ago: executing program 2 (id=2514): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0x10, &(0x7f0000000e40)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b704000008000000850000001c00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.505843859s ago: executing program 6 (id=2515): syz_mount_image$hfsplus(&(0x7f0000000100), &(0x7f0000002900)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000010, &(0x7f00000022c0)=ANY=[], 0xff, 0x6ee, &(0x7f0000000f00)="$eJzs3ctvHHcdAPDvjNdrb4iC0yZtDkVYiVSQLBI/5IK5YBBCOVSoKoeerWTTWN04leMit0LgAoITEof+AQXJNw4IiXtQuHApt159rITEJeIQ9bJoHvvyzvoVvwKfTzSe38zvMd/5zsu7zmoD+L91eyZqjyOJ2zNvbmbLO9sLrZ3thYmyuhURWTmNqBWzSNYikicRy1l90jdF33zIJ6tLb3/+dOeLYqlWTnn7sW6/yQOFXLGNrXKK6XK86cqe4wcavxgrDy8uRsSdcj6oftCxBhpmSbtRzuHMtYdsHab7yOsdOP86T6ekeG4OmYq4UD6Z898JyrtDenoRnoxD3eUAAADgBfXZw7OOAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAF485ff/J+WUlvOYjqTz/f/1zrqyfA4tH7jl4xONAwAAAAAAAABOx9efxbPYjEud5XaS/83/er5wJb5sR3wlPohH0Yz1uBmbsRIbsRHrMRcRU30D1TdXNjbW57o9M9U95yt7zp/WHgMAAAAAAADA/6RfRqP3938AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgPkoixYpZPV8p5TEVai15dbEX8MyLqZx3vISRVKx+ffhwAAADwXCaP0Oerz+JZbMalznI7yV/zv5K/Xp6MD2ItNmI1NqIVzbhbvobOXvWnO9sLrZ3thQfZlC0Pjvv9fx8qjHo5wli+VLXla3mLRtyL1XzNzbiTXMwCbqfFtm9EXOvE0xdXn4+zmJLvlQ4YWa1Ma7bnvx/1LsKxGHwrIt2jZaMXXEQ3I7NlbFnPy0UGkvyNmojdmdj36NQGlqbyUce7W5qLtPvOz5UTyPmFcp7tz29ONOeH1c1EGnkm5iPtHqlX9s5ExDf++qd37rfW3rt/79HM+dmlfYyNWL/7nFjoy8SrL3QmaodsP5tn4mp3+Xb8KH4SMzEdb8V6rMZPYyU2ohntsn6lPJ+zn1N7Z2p5YOmt/SKpl8elOGYHiWk6fpiXVuJ63vdSrEYSD+NuNOON/N98zMW3YzEWY6nvCF8dGXe+b/lVn+6+6jtH+m+Vwd/4ZlnI7m6/7d3llvfa41Fn53Ep7v1ZXi/35bU46592W13uuw5m+7L0Uic745WDH+XeWOvscbaNX+3znDhdU2Umsguo85ToRPdykYla/iwaPs//0M76RWut3b6/8v6I8bd2XZivl/PstNr+2lDrEaNUH4rjlZ0vL8VkeScZPDuyupe7d5m+unbvXC7qBp+4Wb+reV2SdK7UH8fD/AQYvlLr5e9wxUhjfSPN53WvVm5lIa+71lc38PtWPIxW3D2F/AFwFP94p1ucigv1xr8anzU+bfy6cb/x5uQPJr4z8Vo9xv8+/t3a7Njr6WvJX+LT+Hnv9T8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHB0jz786L2VVqu5Xl1IR1etLHe+uKbVajZid5vdIye1yNtMVA+YlF/os08857IQteGqySwv/WvGi0TtPeBEHHOEjd1hDBXav4jj3uj+hc6XCFa3+V1WqA2dUVWF5YE1fx4e8ONDRpgc7Lo4wUIap7vR7CquqjqjGxJwam5tPHj/1qMPP/rW6oOVd5vvNtfGFxeXZpcW31i4dW+11Zwtfg50qZ9ZsMCx6j30u6vO3RfzAgAAAAAAAAAAAIOqPhhw/eJ+Hxo50Gc8hv9nIQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMAR3J6J2uNIYm725my2vLO90MqmTrnXshYRaRqR/CwieRKxHMUUU33DJfHHJ9Gu2M4nq0tvf/5054veWLWifURazkfbuzYitsoppiNirJw/h4Hx7jz3eMl/OvuQJezLdru9/HzxwfH4bwAAAP//BmPvOg==") mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) prlimit64(0x0, 0xe, 0x0, 0x0) ioctl$UDMABUF_CREATE(0xffffffffffffffff, 0x40187542, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) rename(&(0x7f0000000a40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000b40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 1.446945062s ago: executing program 4 (id=2516): bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) rt_sigprocmask(0x0, 0x0, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f00000001c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000480)='kmem_cache_free\x00', r0}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000000340)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x9, 0x4, 0xfff}]}) memfd_secret(0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) getpriority(0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB="010300000100fddbdf2526"], 0x14}}, 0x0) 1.228845035s ago: executing program 0 (id=2517): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x10}}, 0x6}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x4c}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) sendmsg$GTP_CMD_GETPDP(r0, &(0x7f00000025c0)={0x0, 0x0, &(0x7f0000002580)={&(0x7f0000002500)={0x14, 0x0, 0x10, 0x70bd2c, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x20000050}, 0x1) 1.200005798s ago: executing program 2 (id=2518): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000440)={0x0, 0x128}}, 0x20030080) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000002ac0)=@newtaction={0x224, 0x30, 0xc96f2b0dc02612b1, 0x71bd23, 0x25dfdbff, {}, [{0x210, 0x1, [@m_csum={0xcc, 0x34, 0x0, 0x0, {{0x9}, {0x4}, {0x9d, 0x6, "576458eea52fd27eec92e713a172e757e1f62fe8475fa8817d9bd39d398251801f64d9b8e312b47b111ff094a2f452e1fd749b169123625c664a63e06baa8402c6b5fe34fbffaf329e5589fe1d00f704d8d13b0100000081ec7a1e9e21427be570631961812505684e260d3f73821a372961e6acf9f73f3ab3a6d19010c501877fc1473ff3fe388a502702c7e7d4eb99cd479f52bef8df8dc2"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}, @m_bpf={0x98, 0x9, 0x0, 0x0, {{0x8}, {0x44, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_FD={0x8}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x8001, 0x4, 0x7, 0x87f3, 0x6}}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x2, 0x9, 0x6, 0x3, 0x8000}}, @TCA_ACT_BPF_FD={0x8}]}, {0x2d, 0x6, "a09e88b2fafe2ad0dddad3cdaa9b726cf5b56034a46fe446c7d19b5780d1bd141230a65f0db61f93ab"}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}, @m_ife={0xa8, 0x4, 0x0, 0x0, {{0x8}, {0x58, 0x2, 0x0, 0x1, [@TCA_IFE_TYPE={0x6, 0x5, 0x1}, @TCA_IFE_SMAC={0xa, 0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x8}}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x2, 0x4, 0x1, 0x7}}}, @TCA_IFE_SMAC={0xa, 0x4, @multicast}, @TCA_IFE_METALST={0xc, 0x6, [@IFE_META_TCINDEX={0x6, 0x5, @val=0x4}]}, @TCA_IFE_SMAC={0xa, 0x4, @local}]}, {0x2a, 0x6, "91ee006b0fddf50a8e24f8dae49128826481a23a4f6a15b0baafbd3caabb34800341a46986d6"}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x224}, 0x1, 0x0, 0x0, 0x4004000}, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x8804, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4088, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x44}, {&(0x7f0000000200)=""/63, 0x334}, {&(0x7f00000007c0)=""/154, 0x2c}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 959.618256ms ago: executing program 0 (id=2519): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x0, &(0x7f0000000200)}) quotactl$Q_SYNC(0xffffffff80000102, 0x0, 0x0, 0x0) 772.452355ms ago: executing program 0 (id=2520): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) r2 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000001c0)={r0, r1, 0x5, 0x0, @void}, 0x10) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000040)={r2, r0, 0x4, r0}, 0x6) 135.508518ms ago: executing program 4 (id=2521): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) unshare(0x20000400) write$cgroup_pid(r0, &(0x7f0000000000), 0x2a979d) write$tun(r0, 0x0, 0x0) 78.821531ms ago: executing program 2 (id=2522): sched_setaffinity(0x0, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000005c0)=ANY=[@ANYBLOB], 0x68}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYBLOB="14000000100001000b000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000044000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f28000340000000045c0000000c0a01020000000000000000010000000900020073797a32000000000900010073797a3000000000300003802c00008028000180230001"], 0xe8}}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[], 0xe8}}, 0x0) 297.729µs ago: executing program 6 (id=2523): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) readv(r1, &(0x7f0000001340)=[{&(0x7f0000000580)=""/148, 0x94}], 0x1) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x2000c10, &(0x7f00000002c0)={[{@sysvgroups}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x4000}}, {@usrjquota}, {@acl}, {@grpjquota}]}, 0xff, 0x23f, &(0x7f0000000540)="$eJzs3T1oLFUYBuB3Zne95t5FrtoI4g+IiAbCtRNsYqMQkBBEBBUiIjZKIsQEu8TKxkJrlVQ2QeyMlpIm2CiCVdQUsRE0WBgstFiZnURisuLPxh1xngdmZ2b3nPnOMPOe3WbYAK11Nclskk6S6SS9JMXpBnfWy9Xj3c2p3cVkMHjsh2LYrt6vnfS7kmQjyQNJdsoiL3STte2nDn7ae+Se11d7d7+7/eTURE/y2OHB/qNH78y/9sHc/WufffHdfJHZ9H93XhevGPFet0hu+jeK/UcU3aZHwF+x8Mr7X1a5vznJXcP891KmvnhvrFy308t9b/9R3ze///zWSY4VuHiDQa/6DtwYAK1TJumnKGeS1NtlOTNT/4b/qnO5fHF55eXp55dXl55reqYCLko/2X/4o0sfXjmT/287df6B/68q/48vbH1dbR91mh4NMBG31asq/9PPrN8b+YfWkX9oL/mH9pJ/aC/5h/aSf2gv+Yf2kn9oL/mH9pJ/aK/T+QcA2mVwqeknkIGmND3/AAAAAAAAAAAAAAAAAAAA521O7S6eLJOq+clbyeFDSbqj6neG/0ecXD98vfxjUTX7TVF3G8vTd4x5gDG91/DT1zd802z9T29vtv76UrLxapJr3e75+684vv/+uRv/5PPes2MW+JuKM/sPPjHZ+mf9stVs/bm95ONq/rk2av4pc8twPXr+6VfXb8z6L/085gEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACYmF8DAAD//xFQbUc=") r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 0s ago: executing program 0 (id=2524): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[], 0x2c}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) kernel console output (not intermixed with test programs): is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 534.374300][ T9950] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 534.471541][ T4159] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 534.670235][ T4159] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 534.913758][ T4159] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 535.096790][ T4159] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 535.179875][ T9950] hsr_slave_0: entered promiscuous mode [ 535.189405][ T9950] hsr_slave_1: entered promiscuous mode [ 535.197012][ T9950] debugfs: 'hsr0' already exists in 'hsr' [ 535.202986][ T9950] Cannot create hsr debugfs directory [ 535.339041][ T5823] Bluetooth: hci3: command tx timeout [ 535.932798][ T4159] bridge_slave_1: left allmulticast mode [ 535.938989][ T4159] bridge_slave_1: left promiscuous mode [ 535.945524][ T4159] bridge0: port 2(bridge_slave_1) entered disabled state [ 536.051860][ T4159] bridge_slave_0: left allmulticast mode [ 536.058036][ T4159] bridge_slave_0: left promiscuous mode [ 536.064529][ T4159] bridge0: port 1(bridge_slave_0) entered disabled state [ 536.544862][ T9992] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1306'. [ 536.895765][ T4159] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 536.942456][ T4159] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 536.969098][ T4159] bond0 (unregistering): Released all slaves [ 537.429645][ T5823] Bluetooth: hci3: command tx timeout [ 537.968084][ T4159] hsr_slave_0: left promiscuous mode [ 537.991773][ T4159] hsr_slave_1: left promiscuous mode [ 538.000097][ T4159] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 538.007804][ T4159] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 538.092242][ T4159] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 538.100024][ T4159] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 538.199714][ T4159] veth1_macvtap: left promiscuous mode [ 538.205409][ T4159] veth0_macvtap: left promiscuous mode [ 538.212991][ T4159] veth1_vlan: left promiscuous mode [ 538.219912][ T4159] veth0_vlan: left promiscuous mode [ 538.425578][ T5823] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci4/hci4:0' [ 538.435184][ T5823] CPU: 1 UID: 0 PID: 5823 Comm: kworker/u9:5 Not tainted syzkaller #0 PREEMPT(none) [ 538.435315][ T5823] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 538.435433][ T5823] Workqueue: hci4 hci_rx_work [ 538.435565][ T5823] Call Trace: [ 538.435610][ T5823] [ 538.435649][ T5823] __dump_stack+0x26/0x30 [ 538.435798][ T5823] dump_stack_lvl+0x1df/0x270 [ 538.435955][ T5823] dump_stack+0x1e/0x25 [ 538.436089][ T5823] sysfs_create_dir_ns+0x46c/0x540 [ 538.436282][ T5823] kobject_add_internal+0xeed/0x1840 [ 538.436483][ T5823] kobject_add+0x2c1/0x410 [ 538.436678][ T5823] ? kmsan_get_metadata+0xfb/0x160 [ 538.436817][ T5823] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 538.436965][ T5823] device_add+0xa70/0x1c10 [ 538.437112][ T5823] hci_conn_add_sysfs+0x15f/0x2f0 [ 538.437278][ T5823] le_conn_complete_evt+0x1b35/0x21b0 [ 538.437465][ T5823] hci_le_enh_conn_complete_evt+0x158/0x260 [ 538.437638][ T5823] hci_le_meta_evt+0x6eb/0x960 [ 538.437768][ T5823] ? __pfx_hci_le_enh_conn_complete_evt+0x10/0x10 [ 538.437937][ T5823] hci_event_packet+0xcdf/0x1e40 [ 538.438102][ T5823] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 538.438272][ T5823] hci_rx_work+0x9a8/0x12b0 [ 538.438411][ T5823] ? __pfx_hci_rx_work+0x10/0x10 [ 538.438541][ T5823] process_scheduled_works+0xb8e/0x1d80 [ 538.438766][ T5823] worker_thread+0xedf/0x1590 [ 538.438967][ T5823] kthread+0xd59/0xf00 [ 538.439082][ T5823] ? __pfx_worker_thread+0x10/0x10 [ 538.439265][ T5823] ? __pfx_kthread+0x10/0x10 [ 538.439389][ T5823] ret_from_fork+0x1e3/0x310 [ 538.439511][ T5823] ? __pfx_kthread+0x10/0x10 [ 538.439640][ T5823] ret_from_fork_asm+0x1a/0x30 [ 538.439823][ T5823] [ 538.604337][ T5823] kobject: kobject_add_internal failed for hci4:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 538.618751][ T5823] Bluetooth: hci4: failed to register connection device [ 539.259612][ T4159] team0 (unregistering): Port device team_slave_1 removed [ 539.286185][ T4159] team0 (unregistering): Port device team_slave_0 removed [ 539.624275][ T9950] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 539.745158][ T9950] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 539.829232][ T9950] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 539.915965][ T9950] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 540.704804][ T5823] Bluetooth: hci4: command 0x0405 tx timeout [ 540.838775][T10019] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 540.919275][ T9950] 8021q: adding VLAN 0 to HW filter on device bond0 [ 541.084759][ T9950] 8021q: adding VLAN 0 to HW filter on device team0 [ 541.172608][ T8577] bridge0: port 1(bridge_slave_0) entered blocking state [ 541.180160][ T8577] bridge0: port 1(bridge_slave_0) entered forwarding state [ 541.195887][ T8577] bridge0: port 2(bridge_slave_1) entered blocking state [ 541.203423][ T8577] bridge0: port 2(bridge_slave_1) entered forwarding state [ 541.739881][T10024] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1319'. [ 541.852943][T10027] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1319'. [ 541.862462][T10027] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1319'. [ 542.093531][ T2211] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 542.105312][T10029] overlayfs: failed to clone upperpath [ 542.308051][ T2211] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 542.631482][T10034] overlayfs: failed to clone upperpath [ 542.799257][ T9950] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 544.625476][ T5832] Bluetooth: hci2: command 0x0406 tx timeout [ 544.642589][ T9950] veth0_vlan: entered promiscuous mode [ 544.687191][ T9950] veth1_vlan: entered promiscuous mode [ 544.866164][ T9950] veth0_macvtap: entered promiscuous mode [ 544.899668][ T9950] veth1_macvtap: entered promiscuous mode [ 545.028216][ T9950] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 545.131765][ T9950] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 545.192664][ T8577] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 545.218828][ T4082] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 545.287293][ T4082] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 545.296819][ T4082] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 546.106067][ T5832] Bluetooth: hci2: Ignoring HCI_Connection_Complete for existing connection [ 546.625878][T10074] netlink: 'syz.4.1333': attribute type 10 has an invalid length. [ 546.634072][T10074] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1333'. [ 546.643379][T10074] team0: entered promiscuous mode [ 546.648592][T10074] team_slave_0: entered promiscuous mode [ 546.655026][T10074] team_slave_1: entered promiscuous mode [ 546.661752][T10074] team0: entered allmulticast mode [ 546.666957][T10074] team_slave_0: entered allmulticast mode [ 546.672827][T10074] team_slave_1: entered allmulticast mode [ 546.681254][T10074] bridge0: port 3(team0) entered blocking state [ 546.688087][T10074] bridge0: port 3(team0) entered disabled state [ 546.700211][T10074] bridge0: port 3(team0) entered blocking state [ 546.706748][T10074] bridge0: port 3(team0) entered forwarding state [ 549.774954][ T4082] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 549.783529][ T4082] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 549.960327][ T4037] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 549.968522][ T4037] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 552.939280][ T5823] Bluetooth: hci3: command tx timeout [ 553.909257][T10133] overlayfs: failed to clone upperpath [ 554.968330][ T5823] Bluetooth: hci4: Ignoring HCI_Connection_Complete for existing connection [ 555.693121][T10148] lo: entered allmulticast mode [ 555.763384][T10148] tunl0: entered allmulticast mode [ 555.825332][T10148] gre0: entered allmulticast mode [ 555.987165][T10148] gretap0: entered allmulticast mode [ 556.003789][T10148] erspan0: entered allmulticast mode [ 556.020319][T10148] ip_vti0: entered allmulticast mode [ 556.031319][T10148] ip6_vti0: entered allmulticast mode [ 556.043798][T10148] sit0: entered allmulticast mode [ 556.061278][T10148] ip6tnl0: entered allmulticast mode [ 556.074575][T10148] ip6gre0: entered allmulticast mode [ 556.195695][T10148] syz_tun: entered allmulticast mode [ 556.334970][T10148] ip6gretap0: entered allmulticast mode [ 556.396679][T10148] bridge0: entered allmulticast mode [ 556.442795][T10148] vcan0: entered allmulticast mode [ 556.581801][T10148] bond0: entered allmulticast mode [ 556.677789][T10148] team0: left promiscuous mode [ 556.682739][T10148] team0: entered allmulticast mode [ 556.752711][T10148] dummy0: entered allmulticast mode [ 556.849003][T10148] nlmon0: entered allmulticast mode [ 556.931093][T10148] caif0: entered allmulticast mode [ 556.937671][T10148] batadv0: entered allmulticast mode [ 556.998790][T10148] vxcan0: entered allmulticast mode [ 557.020793][T10148] vxcan1: entered allmulticast mode [ 557.044286][T10148] veth0: entered allmulticast mode [ 557.066951][T10148] veth1: entered allmulticast mode [ 557.127198][T10148] veth0_to_bridge: entered allmulticast mode [ 557.167014][T10148] bridge_slave_0: entered allmulticast mode [ 557.220242][T10148] veth1_to_bridge: entered allmulticast mode [ 557.254428][T10148] bridge_slave_1: entered allmulticast mode [ 557.290288][T10148] veth0_to_bond: entered allmulticast mode [ 557.313360][T10148] bond_slave_0: entered allmulticast mode [ 557.333740][T10148] veth1_to_bond: entered allmulticast mode [ 557.423638][T10148] bond_slave_1: entered allmulticast mode [ 557.467847][T10148] veth0_to_team: entered allmulticast mode [ 557.529211][T10148] team_slave_0: entered allmulticast mode [ 557.598270][T10148] veth1_to_team: entered allmulticast mode [ 557.647194][T10148] team_slave_1: entered allmulticast mode [ 557.654146][T10148] veth0_to_batadv: entered allmulticast mode [ 557.705534][T10148] batadv_slave_0: entered allmulticast mode [ 557.770927][T10148] veth1_to_batadv: entered allmulticast mode [ 557.857063][T10148] batadv_slave_1: entered allmulticast mode [ 557.883055][T10148] xfrm0: entered allmulticast mode [ 557.945306][T10148] veth0_to_hsr: entered allmulticast mode [ 557.979551][T10148] hsr_slave_0: entered allmulticast mode [ 558.046526][T10148] veth1_to_hsr: entered allmulticast mode [ 558.091068][T10148] hsr_slave_1: entered allmulticast mode [ 558.144558][T10148] hsr0: entered allmulticast mode [ 558.260577][T10148] veth1_virt_wifi: entered allmulticast mode [ 558.353368][T10148] veth0_virt_wifi: entered allmulticast mode [ 558.403997][T10148] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 558.412299][T10148] veth1_macvtap: entered allmulticast mode [ 558.481368][T10148] veth0_macvtap: entered allmulticast mode [ 558.546616][T10148] macvtap0: entered allmulticast mode [ 558.613411][T10148] macsec0: entered allmulticast mode [ 558.664691][T10148] geneve0: entered allmulticast mode [ 558.746366][T10148] geneve1: entered allmulticast mode [ 558.866204][T10148] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 558.903078][T10162] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1364'. [ 558.943441][T10148] netdevsim netdevsim1 netdevsim1: entered allmulticast mode [ 559.010235][T10148] netdevsim netdevsim1 netdevsim2: entered allmulticast mode [ 559.076237][T10148] netdevsim netdevsim1 netdevsim3: entered allmulticast mode [ 559.133386][T10148] mac80211_hwsim hwsim4 wlan0: entered allmulticast mode [ 559.236584][T10148] mac80211_hwsim hwsim5 wlan1: entered allmulticast mode [ 559.306436][T10148] bond1: entered allmulticast mode [ 559.314313][T10148] bond2: entered allmulticast mode [ 559.320136][T10148] bond3: entered allmulticast mode [ 559.325745][T10148] syztnl2: entered allmulticast mode [ 559.331623][T10148] syztnl0: entered allmulticast mode [ 559.348129][T10160] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1362'. [ 559.378448][ T4037] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 559.420893][ T4082] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 559.469612][ T4082] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 559.508174][ T4037] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 559.559956][ T5823] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:0' [ 559.570161][ T5823] CPU: 1 UID: 0 PID: 5823 Comm: kworker/u9:5 Not tainted syzkaller #0 PREEMPT(none) [ 559.570292][ T5823] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 559.570390][ T5823] Workqueue: hci2 hci_rx_work [ 559.570519][ T5823] Call Trace: [ 559.570563][ T5823] [ 559.570608][ T5823] __dump_stack+0x26/0x30 [ 559.570766][ T5823] dump_stack_lvl+0x1df/0x270 [ 559.570923][ T5823] dump_stack+0x1e/0x25 [ 559.571060][ T5823] sysfs_create_dir_ns+0x46c/0x540 [ 559.571257][ T5823] kobject_add_internal+0xeed/0x1840 [ 559.571454][ T5823] kobject_add+0x2c1/0x410 [ 559.571644][ T5823] ? kmsan_get_metadata+0xfb/0x160 [ 559.571791][ T5823] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 559.571945][ T5823] device_add+0xa70/0x1c10 [ 559.572095][ T5823] hci_conn_add_sysfs+0x15f/0x2f0 [ 559.572271][ T5823] le_conn_complete_evt+0x1b35/0x21b0 [ 559.572451][ T5823] hci_le_enh_conn_complete_evt+0x158/0x260 [ 559.572616][ T5823] hci_le_meta_evt+0x6eb/0x960 [ 559.572753][ T5823] ? __pfx_hci_le_enh_conn_complete_evt+0x10/0x10 [ 559.572920][ T5823] hci_event_packet+0xcdf/0x1e40 [ 559.573087][ T5823] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 559.573259][ T5823] hci_rx_work+0x9a8/0x12b0 [ 559.573398][ T5823] ? __pfx_hci_rx_work+0x10/0x10 [ 559.573538][ T5823] process_scheduled_works+0xb8e/0x1d80 [ 559.573767][ T5823] worker_thread+0xedf/0x1590 [ 559.573963][ T5823] kthread+0xd59/0xf00 [ 559.574083][ T5823] ? __pfx_worker_thread+0x10/0x10 [ 559.574268][ T5823] ? __pfx_kthread+0x10/0x10 [ 559.574393][ T5823] ret_from_fork+0x1e3/0x310 [ 559.574516][ T5823] ? __pfx_kthread+0x10/0x10 [ 559.574642][ T5823] ret_from_fork_asm+0x1a/0x30 [ 559.574826][ T5823] [ 559.574927][ T5823] kobject: kobject_add_internal failed for hci2:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 559.759224][ T5823] Bluetooth: hci2: failed to register connection device [ 560.410190][T10177] netlink: 'syz.3.1372': attribute type 2 has an invalid length. [ 560.418403][T10177] netlink: 137592 bytes leftover after parsing attributes in process `syz.3.1372'. [ 560.866526][T10185] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1375'. [ 560.919164][T10185] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1375'. [ 560.991864][T10187] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1375'. [ 561.001446][T10187] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1375'. [ 561.041417][T10189] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1377'. [ 561.260355][T10193] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1378'. [ 561.317822][ T5823] Bluetooth: hci2: Ignoring HCI_Connection_Complete for existing connection [ 561.528044][T10195] lo: entered allmulticast mode [ 561.563850][T10195] tunl0: entered allmulticast mode [ 561.602601][T10195] gre0: entered allmulticast mode [ 561.636755][T10195] gretap0: entered allmulticast mode [ 561.695313][T10195] erspan0: entered allmulticast mode [ 561.743306][T10195] ip_vti0: entered allmulticast mode [ 561.798212][T10195] ip6_vti0: entered allmulticast mode [ 561.817930][ T5823] Bluetooth: hci2: command 0x0406 tx timeout [ 561.823993][T10195] sit0: entered allmulticast mode [ 561.843555][T10195] ip6tnl0: entered allmulticast mode [ 561.867818][T10195] ip6gre0: entered allmulticast mode [ 561.891444][T10195] syz_tun: entered allmulticast mode [ 561.915519][T10195] ip6gretap0: entered allmulticast mode [ 561.936910][T10195] bridge0: port 2(bridge_slave_1) entered disabled state [ 561.946506][T10195] bridge0: port 1(bridge_slave_0) entered disabled state [ 561.957827][T10195] bridge0: entered allmulticast mode [ 561.996687][T10195] vcan0: entered allmulticast mode [ 562.029549][T10195] bond0: entered allmulticast mode [ 562.034844][T10195] bond_slave_0: entered allmulticast mode [ 562.041450][T10195] bond_slave_1: entered allmulticast mode [ 562.074222][T10195] team0: entered allmulticast mode [ 562.080652][T10195] team_slave_0: entered allmulticast mode [ 562.086857][T10195] team_slave_1: entered allmulticast mode [ 562.123891][T10195] dummy0: entered allmulticast mode [ 562.151155][T10195] nlmon0: entered allmulticast mode [ 562.169558][T10195] caif0: entered allmulticast mode [ 562.175758][T10195] batadv0: entered allmulticast mode [ 562.195610][T10195] vxcan0: entered allmulticast mode [ 562.248820][T10195] vxcan1: entered allmulticast mode [ 562.257905][T10195] veth0: entered allmulticast mode [ 562.288764][T10195] veth1: entered allmulticast mode [ 562.321586][T10195] veth0_to_bridge: entered allmulticast mode [ 562.401372][T10195] veth1_to_bridge: entered allmulticast mode [ 562.441124][T10195] veth0_to_bond: entered allmulticast mode [ 562.496800][T10195] veth1_to_bond: entered allmulticast mode [ 562.539829][T10195] veth0_to_team: entered allmulticast mode [ 562.599483][T10195] veth1_to_team: entered allmulticast mode [ 562.640276][T10195] veth0_to_batadv: entered allmulticast mode [ 562.660407][T10195] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 562.668300][T10195] batadv_slave_0: entered allmulticast mode [ 562.699444][T10195] veth1_to_batadv: entered allmulticast mode [ 562.725523][T10195] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 562.733258][T10195] batadv_slave_1: entered allmulticast mode [ 562.760524][T10195] xfrm0: entered allmulticast mode [ 562.783760][T10195] veth0_to_hsr: entered allmulticast mode [ 562.821602][T10195] hsr_slave_0: entered allmulticast mode [ 562.884959][T10195] veth1_to_hsr: entered allmulticast mode [ 562.915372][T10195] hsr_slave_1: entered allmulticast mode [ 563.136585][T10195] hsr0: entered allmulticast mode [ 563.172349][T10195] veth1_virt_wifi: entered allmulticast mode [ 563.191445][T10195] veth0_virt_wifi: entered allmulticast mode [ 563.211538][T10195] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 563.225629][T10195] veth1_vlan: entered allmulticast mode [ 563.272218][T10195] veth0_vlan: entered allmulticast mode [ 563.336929][T10195] vlan0: entered allmulticast mode [ 563.343200][T10195] vlan1: entered allmulticast mode [ 563.363151][T10195] macvlan0: entered allmulticast mode [ 563.370739][T10219] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1391'. [ 563.385339][T10195] macvlan1: entered allmulticast mode [ 563.415925][T10195] ipvlan0: entered allmulticast mode [ 563.422398][T10195] ipvlan1: entered allmulticast mode [ 563.429078][T10195] veth1_macvtap: entered allmulticast mode [ 563.452061][T10195] veth0_macvtap: entered allmulticast mode [ 563.469574][T10195] macvtap0: entered allmulticast mode [ 563.490852][T10195] macsec0: entered allmulticast mode [ 563.524109][T10195] geneve0: entered allmulticast mode [ 563.576081][T10195] geneve1: entered allmulticast mode [ 563.598533][T10195] netdevsim netdevsim8 netdevsim0: entered allmulticast mode [ 563.622292][T10195] netdevsim netdevsim8 netdevsim1: entered allmulticast mode [ 563.632617][ T5823] Bluetooth: hci2: Ignoring HCI_Connection_Complete for existing connection [ 563.650394][T10195] netdevsim netdevsim8 netdevsim2: entered allmulticast mode [ 563.668377][T10195] netdevsim netdevsim8 netdevsim3: entered allmulticast mode [ 563.698537][T10195] mac80211_hwsim hwsim18 wlan0: entered allmulticast mode [ 563.725460][T10195] mac80211_hwsim hwsim19 wlan1: entered allmulticast mode [ 563.762972][ T8575] netdevsim netdevsim8 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 563.788559][ T8575] netdevsim netdevsim8 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 563.813015][ T8575] netdevsim netdevsim8 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 563.835413][ T8575] netdevsim netdevsim8 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 564.096321][T10230] netlink: 'syz.3.1396': attribute type 2 has an invalid length. [ 564.379755][T10237] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1400'. [ 564.640620][ T5823] Bluetooth: hci2: Ignoring HCI_Connection_Complete for existing connection [ 565.357731][T10266] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1414'. [ 565.400336][T10266] netlink: 277 bytes leftover after parsing attributes in process `syz.4.1414'. [ 565.409942][T10266] netlink: 277 bytes leftover after parsing attributes in process `syz.4.1414'. [ 565.770476][ T5832] Bluetooth: hci4: Ignoring HCI_Connection_Complete for existing connection [ 565.990434][T10281] netlink: 14593 bytes leftover after parsing attributes in process `syz.1.1421'. [ 566.416438][T10291] netlink: 'syz.0.1426': attribute type 4 has an invalid length. [ 566.424559][T10291] netlink: 17 bytes leftover after parsing attributes in process `syz.0.1426'. [ 566.618818][T10299] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1430'. [ 567.574881][T10319] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1440'. [ 567.910740][T10327] netlink: 'syz.3.1443': attribute type 10 has an invalid length. [ 567.960152][T10327] team0: Port device syz_tun added [ 568.007229][T10329] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1444'. [ 568.132453][ T5832] Bluetooth: hci2: Ignoring HCI_Connection_Complete for existing connection [ 568.416102][T10340] overlayfs: missing 'lowerdir' [ 569.062849][T10360] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1458'. [ 569.309292][T10366] netlink: 'syz.1.1460': attribute type 2 has an invalid length. [ 569.317209][T10366] nbd: must specify at least one socket [ 569.366714][ T5832] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:0' [ 569.376889][ T5832] CPU: 0 UID: 0 PID: 5832 Comm: kworker/u9:9 Not tainted syzkaller #0 PREEMPT(none) [ 569.377020][ T5832] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 569.377113][ T5832] Workqueue: hci3 hci_rx_work [ 569.377241][ T5832] Call Trace: [ 569.377284][ T5832] [ 569.377335][ T5832] __dump_stack+0x26/0x30 [ 569.377483][ T5832] dump_stack_lvl+0x1df/0x270 [ 569.377638][ T5832] dump_stack+0x1e/0x25 [ 569.377774][ T5832] sysfs_create_dir_ns+0x46c/0x540 [ 569.377972][ T5832] kobject_add_internal+0xeed/0x1840 [ 569.378165][ T5832] kobject_add+0x2c1/0x410 [ 569.378351][ T5832] ? kmsan_get_metadata+0xfb/0x160 [ 569.378487][ T5832] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 569.378639][ T5832] device_add+0xa70/0x1c10 [ 569.378786][ T5832] hci_conn_add_sysfs+0x15f/0x2f0 [ 569.378965][ T5832] le_conn_complete_evt+0x1b35/0x21b0 [ 569.379146][ T5832] hci_le_enh_conn_complete_evt+0x158/0x260 [ 569.379305][ T5832] hci_le_meta_evt+0x6eb/0x960 [ 569.379428][ T5832] ? __pfx_hci_le_enh_conn_complete_evt+0x10/0x10 [ 569.379591][ T5832] hci_event_packet+0xcdf/0x1e40 [ 569.379760][ T5832] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 569.379929][ T5832] hci_rx_work+0x9a8/0x12b0 [ 569.380065][ T5832] ? __pfx_hci_rx_work+0x10/0x10 [ 569.380188][ T5832] process_scheduled_works+0xb8e/0x1d80 [ 569.380413][ T5832] worker_thread+0xedf/0x1590 [ 569.380608][ T5832] kthread+0xd59/0xf00 [ 569.380724][ T5832] ? __pfx_worker_thread+0x10/0x10 [ 569.380914][ T5832] ? __pfx_kthread+0x10/0x10 [ 569.381037][ T5832] ret_from_fork+0x1e3/0x310 [ 569.381163][ T5832] ? __pfx_kthread+0x10/0x10 [ 569.381288][ T5832] ret_from_fork_asm+0x1a/0x30 [ 569.381472][ T5832] [ 569.546262][ T5832] kobject: kobject_add_internal failed for hci3:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 569.564168][ T5832] Bluetooth: hci3: failed to register connection device [ 569.971474][T10375] overlayfs: missing 'lowerdir' [ 571.161415][T10401] netlink: 'syz.0.1476': attribute type 2 has an invalid length. [ 571.170682][T10401] __nla_validate_parse: 3 callbacks suppressed [ 571.170748][T10401] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.1476'. [ 571.187032][T10401] nbd: must specify at least one socket [ 571.579683][ T5823] Bluetooth: hci3: command tx timeout [ 571.653088][T10407] team0: Port device syz_tun removed [ 571.754885][ T2211] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 572.232274][T10423] netlink: 104 bytes leftover after parsing attributes in process `syz.4.1485'. [ 572.298361][ T2211] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 572.833426][T10433] netlink: 'syz.4.1489': attribute type 2 has an invalid length. [ 572.842299][T10433] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.1489'. [ 572.852708][T10433] nbd: must specify at least one socket [ 574.225293][T10465] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1507'. [ 575.395667][T10496] tipc: Enabling of bearer rejected, failed to enable media [ 576.403869][T10518] loop8: detected capacity change from 0 to 512 [ 576.611041][T10518] EXT4-fs error (device loop8): ext4_orphan_get:1418: comm syz.8.1530: bad orphan inode 11862016 [ 576.679397][T10527] fuse: Bad value for 'fd' [ 576.719391][T10518] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 576.734260][T10518] ext4 filesystem being mounted at /31/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 577.286166][ T9950] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 582.775823][T10605] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1555'. [ 586.405323][T10621] loop8: detected capacity change from 0 to 32768 [ 586.450679][T10621] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop8 (7:8) scanned by syz.8.1575 (10621) [ 586.507899][T10621] BTRFS info (device loop8): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 586.518845][T10621] BTRFS info (device loop8): using crc32c (crc32c-lib) checksum algorithm [ 586.759424][T10621] BTRFS info (device loop8): enabling ssd optimizations [ 586.766579][T10621] BTRFS info (device loop8): enabling free space tree [ 587.387869][ T9950] BTRFS info (device loop8): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 588.003970][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 588.010989][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 588.102728][T10676] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1597'. [ 588.882321][T10683] netlink: 60 bytes leftover after parsing attributes in process `syz.8.1591'. [ 589.772224][T10704] tipc: Enabling of bearer rejected, failed to enable media [ 591.401637][T10730] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1620'. [ 593.129533][ T5823] Bluetooth: hci2: ACL packet for unknown connection handle 200 [ 594.109828][T10764] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1634'. [ 594.903406][T10769] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 595.420333][ T4082] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 595.428603][ T4082] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 596.888955][T10782] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1642'. [ 597.534970][T10789] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1645'. [ 598.037075][T10793] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1647'. [ 598.046766][T10793] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1647'. [ 600.063147][T10803] bridge0: port 3(team0) entered disabled state [ 600.163265][T10803] bridge_slave_0: left allmulticast mode [ 600.169224][T10803] bridge_slave_0: left promiscuous mode [ 600.177159][T10803] bridge0: port 1(bridge_slave_0) entered disabled state [ 600.276310][T10803] bridge_slave_1: left allmulticast mode [ 600.282476][T10803] bridge_slave_1: left promiscuous mode [ 600.289177][T10803] bridge0: port 2(bridge_slave_1) entered disabled state [ 600.492423][T10803] bond0: (slave bond_slave_0): Releasing backup interface [ 600.630745][T10803] bond0: (slave bond_slave_1): Releasing backup interface [ 600.704442][T10803] team_slave_0: left promiscuous mode [ 600.712347][T10803] team_slave_0: left allmulticast mode [ 600.781910][T10803] team0: Port device team_slave_0 removed [ 600.799224][T10803] team_slave_1: left promiscuous mode [ 600.805585][T10803] team_slave_1: left allmulticast mode [ 600.870451][T10803] team0: Port device team_slave_1 removed [ 600.881013][T10803] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 600.891026][T10803] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 600.914684][T10803] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 600.922425][T10803] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 601.734709][T10818] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1658'. [ 601.740990][T10820] can-isotp: isotp_sendmsg: can_send_ret -ENETDOWN [ 601.744299][T10818] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1658'. [ 601.776375][T10820] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1659'. [ 603.981467][T10842] bond0: (slave syz_tun): Releasing backup interface [ 603.991329][T10844] netlink: 20 bytes leftover after parsing attributes in process `syz.8.1671'. [ 604.001048][T10844] netlink: 16 bytes leftover after parsing attributes in process `syz.8.1671'. [ 604.026692][T10842] bridge_slave_0: left promiscuous mode [ 604.035044][T10842] bridge0: port 1(bridge_slave_0) entered disabled state [ 604.104914][T10842] bridge_slave_1: left promiscuous mode [ 604.115452][T10842] bridge0: port 2(bridge_slave_1) entered disabled state [ 604.208962][T10842] bond0: (slave bond_slave_0): Releasing backup interface [ 604.294622][T10842] bond0: (slave bond_slave_1): Releasing backup interface [ 604.325013][T10846] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1672'. [ 604.344528][T10842] team0: Port device team_slave_0 removed [ 604.381768][T10842] team0: Port device team_slave_1 removed [ 604.389634][T10842] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 604.420655][T10842] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 604.481570][T10842] team0: Port device netdevsim1 removed [ 604.934350][T10858] loop8: detected capacity change from 0 to 1024 [ 605.015931][T10858] EXT4-fs (loop8): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 605.028916][T10858] ext4 filesystem being mounted at /62/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 605.090285][T10861] overlayfs: failed to clone upperpath [ 608.908859][T10880] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1683'. [ 608.918707][T10880] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1683'. [ 609.546904][T10862] EXT4-fs error (device loop8): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 610.045020][T10885] ecryptfs_validate_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README [ 610.059035][T10885] Error validating options; rc = [-22] [ 611.712828][T10890] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1687'. [ 612.900143][T10905] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1694'. [ 612.909619][T10905] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1694'. [ 613.220428][T10911] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1697'. [ 613.854511][T10928] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1703'. [ 614.515217][T10937] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1707'. [ 614.525040][T10937] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1707'. [ 614.795091][ T30] audit: type=1326 audit(1755837249.271:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10938 comm="syz.3.1709" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff8539 code=0x7ffc0000 [ 614.887835][ T30] audit: type=1326 audit(1755837249.301:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10938 comm="syz.3.1709" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7ff8539 code=0x7ffc0000 [ 614.910661][ T30] audit: type=1326 audit(1755837249.311:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10938 comm="syz.3.1709" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff8539 code=0x7ffc0000 [ 614.933882][ T30] audit: type=1326 audit(1755837249.311:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10938 comm="syz.3.1709" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff8539 code=0x7ffc0000 [ 614.956851][ T30] audit: type=1326 audit(1755837249.311:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10938 comm="syz.3.1709" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7ff8539 code=0x7ffc0000 [ 614.979352][ T30] audit: type=1326 audit(1755837249.311:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10938 comm="syz.3.1709" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff8539 code=0x7ffc0000 [ 615.001812][ T30] audit: type=1326 audit(1755837249.331:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10938 comm="syz.3.1709" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff8539 code=0x7ffc0000 [ 615.024998][ T30] audit: type=1326 audit(1755837249.331:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10938 comm="syz.3.1709" exe="/root/syz-executor" sig=0 arch=40000003 syscall=75 compat=1 ip=0xf7ff8539 code=0x7ffc0000 [ 615.047683][ T30] audit: type=1326 audit(1755837249.331:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10938 comm="syz.3.1709" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff8539 code=0x7ffc0000 [ 615.070158][ T30] audit: type=1326 audit(1755837249.331:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10938 comm="syz.3.1709" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff8539 code=0x7ffc0000 [ 615.098913][ T5832] Bluetooth: hci1: command 0x0406 tx timeout [ 615.452272][ T9950] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 616.672502][T10959] lo: entered allmulticast mode [ 616.704310][T10959] tunl0: entered allmulticast mode [ 616.752494][T10959] gre0: entered allmulticast mode [ 616.823065][T10959] gretap0: entered allmulticast mode [ 616.868566][T10959] erspan0: entered allmulticast mode [ 616.903858][T10959] ip_vti0: entered allmulticast mode [ 616.970957][T10959] ip6_vti0: entered allmulticast mode [ 617.024735][T10959] sit0: entered allmulticast mode [ 617.110980][T10959] ip6tnl0: entered allmulticast mode [ 617.185095][T10959] ip6gre0: entered allmulticast mode [ 617.308571][T10959] syz_tun: entered allmulticast mode [ 617.370484][T10959] ip6gretap0: entered allmulticast mode [ 617.411104][T10959] bridge0: entered allmulticast mode [ 617.445957][T10959] vcan0: entered allmulticast mode [ 617.533794][T10959] bond0: entered allmulticast mode [ 617.570413][T10959] team0: left promiscuous mode [ 617.605774][T10959] dummy0: entered allmulticast mode [ 617.659113][T10959] nlmon0: entered allmulticast mode [ 617.690425][T10959] caif0: entered allmulticast mode [ 617.696804][T10959] batadv0: entered allmulticast mode [ 617.738568][T10959] veth0: entered allmulticast mode [ 617.781982][ T11] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 617.782908][T10959] veth1: entered allmulticast mode [ 617.814907][T10959] veth0_to_bridge: entered allmulticast mode [ 617.856097][T10959] bridge_slave_0: entered allmulticast mode [ 617.893065][T10959] veth1_to_bridge: entered allmulticast mode [ 617.938027][T10959] bridge_slave_1: entered allmulticast mode [ 617.979892][ T11] usb 9-1: too many configurations: 9, using maximum allowed: 8 [ 617.981263][T10959] veth0_to_bond: entered allmulticast mode [ 618.009900][ T11] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 618.019926][ T11] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 618.030345][ T11] usb 9-1: config 0 interface 0 has no altsetting 0 [ 618.031410][T10959] bond_slave_0: entered allmulticast mode [ 618.085830][T10959] veth1_to_bond: entered allmulticast mode [ 618.098215][ T11] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 618.107506][ T11] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 618.118363][ T11] usb 9-1: config 0 interface 0 has no altsetting 0 [ 618.133172][T10959] bond_slave_1: entered allmulticast mode [ 618.142649][T10959] veth0_to_team: entered allmulticast mode [ 618.150990][ T11] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 618.160178][ T11] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 618.170349][ T11] usb 9-1: config 0 interface 0 has no altsetting 0 [ 618.186759][T10959] team_slave_0: entered allmulticast mode [ 618.205213][ T11] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 618.214431][ T11] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 618.225417][ T11] usb 9-1: config 0 interface 0 has no altsetting 0 [ 618.249259][T10959] veth1_to_team: entered allmulticast mode [ 618.263410][T10959] team_slave_1: entered allmulticast mode [ 618.270551][T10959] veth0_to_batadv: entered allmulticast mode [ 618.298512][ T11] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 618.308133][ T11] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 618.318225][ T11] usb 9-1: config 0 interface 0 has no altsetting 0 [ 618.344530][T10959] batadv_slave_0: entered allmulticast mode [ 618.372487][ T11] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 618.382960][ T11] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 618.393019][ T11] usb 9-1: config 0 interface 0 has no altsetting 0 [ 618.400691][T10959] veth1_to_batadv: entered allmulticast mode [ 618.455082][T10959] batadv_slave_1: entered allmulticast mode [ 618.458282][ T11] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 618.470891][ T11] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 618.480875][ T11] usb 9-1: config 0 interface 0 has no altsetting 0 [ 618.510818][T10959] xfrm0: entered allmulticast mode [ 618.547225][ T11] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 618.556856][ T11] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 618.560899][T10959] veth0_to_hsr: entered allmulticast mode [ 618.566960][ T11] usb 9-1: config 0 interface 0 has no altsetting 0 [ 618.586329][T10959] hsr_slave_0: entered allmulticast mode [ 618.640792][T10959] veth1_to_hsr: entered allmulticast mode [ 618.649915][ T11] usb 9-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 618.659604][ T11] usb 9-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 618.668303][ T11] usb 9-1: Product: syz [ 618.672611][ T11] usb 9-1: Manufacturer: syz [ 618.677608][ T11] usb 9-1: SerialNumber: syz [ 618.679165][T10959] hsr_slave_1: entered allmulticast mode [ 618.701541][T10959] hsr0: entered allmulticast mode [ 618.741967][T10959] veth1_virt_wifi: entered allmulticast mode [ 618.755217][ T11] usb 9-1: config 0 descriptor?? [ 618.767631][T10959] veth0_virt_wifi: entered allmulticast mode [ 618.804498][ T11] yurex 9-1:0.0: Could not find endpoints [ 618.806281][T10959] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 618.820988][T10959] veth1_vlan: entered allmulticast mode [ 618.848061][T10959] veth0_vlan: entered allmulticast mode [ 618.885178][T10959] vlan1: entered allmulticast mode [ 618.905872][T10959] macvlan0: entered allmulticast mode [ 618.934274][T10959] macvlan1: entered allmulticast mode [ 618.957886][T10959] ipvlan0: entered allmulticast mode [ 618.964342][T10959] ipvlan1: entered allmulticast mode [ 618.987686][T10959] veth1_macvtap: entered allmulticast mode [ 619.011481][T10959] veth0_macvtap: entered allmulticast mode [ 619.051219][T10959] macvtap0: entered allmulticast mode [ 619.070764][T10959] macsec0: entered allmulticast mode [ 619.103288][T10959] geneve0: entered allmulticast mode [ 619.154308][T10959] geneve1: entered allmulticast mode [ 619.185420][T10959] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 619.212526][T10959] netdevsim netdevsim4 netdevsim1: entered allmulticast mode [ 619.234450][T10959] netdevsim netdevsim4 netdevsim2: entered allmulticast mode [ 619.272735][T10959] netdevsim netdevsim4 netdevsim3: entered allmulticast mode [ 619.306456][T10959] mac80211_hwsim hwsim10 wlan0: left promiscuous mode [ 619.313831][T10959] mac80211_hwsim hwsim10 wlan0: entered allmulticast mode [ 619.359142][T10959] mac80211_hwsim hwsim11 wlan1: entered allmulticast mode [ 619.384248][T10959] bond1: entered allmulticast mode [ 619.392906][T10959] vxcan2: entered allmulticast mode [ 619.401220][T10959] vxcan3: entered allmulticast mode [ 619.409010][T10959] bond2: entered allmulticast mode [ 619.415317][T10959] bond3: entered allmulticast mode [ 619.421448][T10959] ip6erspan0: entered allmulticast mode [ 619.429583][T10965] tipc: Started in network mode [ 619.434584][T10965] tipc: Node identity 4, cluster identity 4711 [ 619.441190][T10965] tipc: Node number set to 4 [ 619.467985][ T8598] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 619.489010][ T8598] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 619.503045][ T8598] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 619.515444][ T8598] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 619.839471][T10982] vlan0: entered promiscuous mode [ 619.844669][T10982] veth0_virt_wifi: entered promiscuous mode [ 619.851673][T10982] vlan0: entered allmulticast mode [ 620.092705][T10988] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1728'. [ 620.212365][ T30] kauditd_printk_skb: 11 callbacks suppressed [ 620.212436][ T30] audit: type=1326 audit(1755837254.691:128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10991 comm="syz.1.1731" exe="/root/syz-executor" sig=0 arch=40000003 syscall=20 compat=1 ip=0xf7fc3539 code=0x7ffc0000 [ 620.242000][ T30] audit: type=1326 audit(1755837254.691:129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10991 comm="syz.1.1731" exe="/root/syz-executor" sig=0 arch=40000003 syscall=173 compat=1 ip=0xf7fc3567 code=0x7ffc0000 [ 620.361396][ T30] audit: type=1326 audit(1755837254.761:130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10991 comm="syz.1.1731" exe="/root/syz-executor" sig=0 arch=40000003 syscall=20 compat=1 ip=0xf7fc3539 code=0x7ffc0000 [ 620.384249][ T30] audit: type=1326 audit(1755837254.761:131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10991 comm="syz.1.1731" exe="/root/syz-executor" sig=0 arch=40000003 syscall=173 compat=1 ip=0xf7fc3567 code=0x7ffc0000 [ 620.406813][ T30] audit: type=1326 audit(1755837254.761:132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10991 comm="syz.1.1731" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc3539 code=0x7ffc0000 [ 620.429235][ T30] audit: type=1326 audit(1755837254.761:133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10991 comm="syz.1.1731" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc3539 code=0x7ffc0000 [ 620.452887][ T30] audit: type=1326 audit(1755837254.821:134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10991 comm="syz.1.1731" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7fc3539 code=0x7ffc0000 [ 620.475463][ T30] audit: type=1326 audit(1755837254.821:135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10991 comm="syz.1.1731" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc3539 code=0x7ffc0000 [ 620.497907][ T30] audit: type=1326 audit(1755837254.831:136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10991 comm="syz.1.1731" exe="/root/syz-executor" sig=0 arch=40000003 syscall=75 compat=1 ip=0xf7fc3539 code=0x7ffc0000 [ 620.522851][ T30] audit: type=1326 audit(1755837254.831:137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10991 comm="syz.1.1731" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc3539 code=0x7ffc0000 [ 620.650342][ T11] usb 9-1: USB disconnect, device number 2 [ 621.160913][T11003] loop8: detected capacity change from 0 to 2048 [ 621.260381][T11003] NILFS (loop8): invalid segment: Magic number mismatch [ 621.268851][T11003] NILFS (loop8): trying rollback from an earlier position [ 621.339773][T11003] NILFS (loop8): recovery complete [ 621.366337][T11014] NILFS (loop8): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 626.106632][ T30] kauditd_printk_skb: 8 callbacks suppressed [ 626.106704][ T30] audit: type=1326 audit(1755837260.581:146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11049 comm="syz.0.1755" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708e539 code=0x7ffc0000 [ 626.238151][ T30] audit: type=1326 audit(1755837260.621:147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11049 comm="syz.0.1755" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708e539 code=0x7ffc0000 [ 626.260743][ T30] audit: type=1326 audit(1755837260.621:148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11049 comm="syz.0.1755" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf708e539 code=0x7ffc0000 [ 626.283841][ T30] audit: type=1326 audit(1755837260.631:149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11049 comm="syz.0.1755" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708e539 code=0x7ffc0000 [ 626.306491][ T30] audit: type=1326 audit(1755837260.631:150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11049 comm="syz.0.1755" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708e539 code=0x7ffc0000 [ 626.329049][ T30] audit: type=1326 audit(1755837260.631:151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11049 comm="syz.0.1755" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf708e539 code=0x7ffc0000 [ 626.351399][ T30] audit: type=1326 audit(1755837260.631:152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11049 comm="syz.0.1755" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708e539 code=0x7ffc0000 [ 626.373773][ T30] audit: type=1326 audit(1755837260.631:153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11049 comm="syz.0.1755" exe="/root/syz-executor" sig=0 arch=40000003 syscall=75 compat=1 ip=0xf708e539 code=0x7ffc0000 [ 626.398336][ T30] audit: type=1326 audit(1755837260.641:154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11049 comm="syz.0.1755" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708e539 code=0x7ffc0000 [ 629.885904][ T30] audit: type=1326 audit(1755837264.351:155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11074 comm="syz.8.1767" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f61539 code=0x7ffc0000 [ 630.354724][T11078] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1768'. [ 631.306580][T11092] vlan0: left promiscuous mode [ 631.311745][T11092] veth0_virt_wifi: left promiscuous mode [ 632.342567][T11100] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1777'. [ 632.398240][T11100] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1777'. [ 632.737910][ T30] kauditd_printk_skb: 9 callbacks suppressed [ 632.737983][ T30] audit: type=1326 audit(1755837267.211:165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11102 comm="syz.8.1778" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f61539 code=0x7ffc0000 [ 632.814139][ T30] audit: type=1326 audit(1755837267.251:166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11102 comm="syz.8.1778" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f61539 code=0x7ffc0000 [ 632.937160][ T30] audit: type=1326 audit(1755837267.321:167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11102 comm="syz.8.1778" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7f61539 code=0x7ffc0000 [ 632.960680][ T30] audit: type=1326 audit(1755837267.321:168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11102 comm="syz.8.1778" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f61539 code=0x7ffc0000 [ 632.983705][ T30] audit: type=1326 audit(1755837267.331:169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11102 comm="syz.8.1778" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7f61539 code=0x7ffc0000 [ 633.006145][ T30] audit: type=1326 audit(1755837267.331:170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11102 comm="syz.8.1778" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f61539 code=0x7ffc0000 [ 633.028710][ T30] audit: type=1326 audit(1755837267.331:171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11102 comm="syz.8.1778" exe="/root/syz-executor" sig=0 arch=40000003 syscall=75 compat=1 ip=0xf7f61539 code=0x7ffc0000 [ 633.051816][ T30] audit: type=1326 audit(1755837267.331:172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11102 comm="syz.8.1778" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f61539 code=0x7ffc0000 [ 633.527970][T11108] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1780'. [ 633.783405][ T5823] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 633.793575][ T5823] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 633.803788][ T5823] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 633.819301][ T5823] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 633.842785][ T5823] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 634.753145][T11110] chnl_net:caif_netlink_parms(): no params data found [ 634.929614][T11118] ptrace attach of "./syz-executor exec"[5815] was attempted by "./syz-executor exec"[11118] [ 635.897628][ T5823] Bluetooth: hci5: command tx timeout [ 636.411949][T11110] bridge0: port 1(bridge_slave_0) entered blocking state [ 636.419693][T11110] bridge0: port 1(bridge_slave_0) entered disabled state [ 636.428763][T11110] bridge_slave_0: entered allmulticast mode [ 636.437941][T11110] bridge_slave_0: entered promiscuous mode [ 636.560110][T11110] bridge0: port 2(bridge_slave_1) entered blocking state [ 636.567810][T11110] bridge0: port 2(bridge_slave_1) entered disabled state [ 636.575470][T11110] bridge_slave_1: entered allmulticast mode [ 636.584861][T11110] bridge_slave_1: entered promiscuous mode [ 636.913359][T11110] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 636.979469][T11132] syztnl1: entered allmulticast mode [ 637.018382][T11110] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 637.367112][T11110] team0: Port device team_slave_0 added [ 637.393309][ T30] audit: type=1326 audit(1755837271.861:173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11136 comm="syz.0.1789" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708e539 code=0x7ffc0000 [ 637.416766][T11110] team0: Port device team_slave_1 added [ 637.541590][T11144] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1790'. [ 637.561294][ T30] audit: type=1326 audit(1755837271.911:174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11136 comm="syz.0.1789" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708e539 code=0x7ffc0000 [ 637.812782][T11110] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 637.821180][T11110] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 637.847573][T11110] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 637.981242][ T5823] Bluetooth: hci5: command tx timeout [ 638.014691][T11110] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 638.023127][T11110] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 638.049641][T11110] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 638.478848][T11110] hsr_slave_0: entered promiscuous mode [ 638.488646][T11110] hsr_slave_1: entered promiscuous mode [ 638.497210][T11110] debugfs: 'hsr0' already exists in 'hsr' [ 638.503165][T11110] Cannot create hsr debugfs directory [ 639.748003][ T30] kauditd_printk_skb: 6 callbacks suppressed [ 639.748080][ T30] audit: type=1326 audit(1755837274.191:181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11165 comm="syz.0.1800" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708e539 code=0x7ffc0000 [ 639.777124][ T30] audit: type=1326 audit(1755837274.191:182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11165 comm="syz.0.1800" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708e539 code=0x7ffc0000 [ 639.914205][ T30] audit: type=1326 audit(1755837274.291:183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11165 comm="syz.0.1800" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf708e539 code=0x7ffc0000 [ 639.937134][ T30] audit: type=1326 audit(1755837274.291:184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11165 comm="syz.0.1800" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708e539 code=0x7ffc0000 [ 639.959927][ T30] audit: type=1326 audit(1755837274.311:185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11165 comm="syz.0.1800" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf708e539 code=0x7ffc0000 [ 639.980022][T11110] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 639.982400][ T30] audit: type=1326 audit(1755837274.311:186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11165 comm="syz.0.1800" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708e539 code=0x7ffc0000 [ 640.011897][ T30] audit: type=1326 audit(1755837274.311:187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11165 comm="syz.0.1800" exe="/root/syz-executor" sig=0 arch=40000003 syscall=75 compat=1 ip=0xf708e539 code=0x7ffc0000 [ 640.034831][ T30] audit: type=1326 audit(1755837274.321:188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11165 comm="syz.0.1800" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708e539 code=0x7ffc0000 [ 640.095751][ T5823] Bluetooth: hci5: command tx timeout [ 640.113593][T11110] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 640.253781][T11110] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 640.355369][T11110] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 641.228139][T11110] 8021q: adding VLAN 0 to HW filter on device bond0 [ 641.412282][T11110] 8021q: adding VLAN 0 to HW filter on device team0 [ 641.479131][ T8585] bridge0: port 1(bridge_slave_0) entered blocking state [ 641.486825][ T8585] bridge0: port 1(bridge_slave_0) entered forwarding state [ 641.806816][ T8585] bridge0: port 2(bridge_slave_1) entered blocking state [ 641.814818][ T8585] bridge0: port 2(bridge_slave_1) entered forwarding state [ 642.147546][ T5823] Bluetooth: hci5: command tx timeout [ 643.132010][T11192] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1806'. [ 643.575020][T11110] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 645.708228][T11110] veth0_vlan: entered promiscuous mode [ 645.822450][T11110] veth1_vlan: entered promiscuous mode [ 646.130798][T11110] veth0_macvtap: entered promiscuous mode [ 646.179246][T11110] veth1_macvtap: entered promiscuous mode [ 646.311098][T11110] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 646.411473][T11110] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 646.524447][ T8567] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 646.593599][ T8567] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 646.668670][ T8567] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 646.723649][ T8567] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 648.697998][T11240] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1819'. [ 649.455523][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 649.462788][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 649.768190][ T30] audit: type=1326 audit(1755837284.231:189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11248 comm="syz.8.1821" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f61539 code=0x7ffc0000 [ 649.867533][ T30] audit: type=1326 audit(1755837284.281:190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11248 comm="syz.8.1821" exe="/root/syz-executor" sig=0 arch=40000003 syscall=30 compat=1 ip=0xf7f61539 code=0x7ffc0000 [ 649.890188][ T30] audit: type=1326 audit(1755837284.281:191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11248 comm="syz.8.1821" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f61539 code=0x7ffc0000 [ 649.912611][ T30] audit: type=1326 audit(1755837284.281:192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11248 comm="syz.8.1821" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f61539 code=0x7ffc0000 [ 650.262824][T11256] lo: left allmulticast mode [ 651.498744][ T5832] Bluetooth: hci3: command 0x0406 tx timeout [ 651.875286][ T8589] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 651.884241][ T8589] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 652.127864][ T8589] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 652.135815][ T8589] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 652.313873][T11290] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1833'. [ 654.043122][T11310] lo: entered allmulticast mode [ 654.090149][T11310] tunl0: entered allmulticast mode [ 654.122570][T11310] gre0: entered allmulticast mode [ 654.249654][T11310] gretap0: entered allmulticast mode [ 654.308012][T11310] erspan0: entered allmulticast mode [ 654.352481][T11310] ip_vti0: entered allmulticast mode [ 654.412522][T11310] ip6_vti0: entered allmulticast mode [ 654.454922][T11310] sit0: entered allmulticast mode [ 654.534108][T11310] ip6tnl0: entered allmulticast mode [ 654.564924][T11310] ip6gre0: entered allmulticast mode [ 654.649312][T11310] syz_tun: entered allmulticast mode [ 654.706473][T11310] ip6gretap0: entered allmulticast mode [ 654.740866][T11310] bridge0: port 2(bridge_slave_1) entered disabled state [ 654.750475][T11310] bridge0: port 1(bridge_slave_0) entered disabled state [ 654.765677][T11310] bridge0: entered allmulticast mode [ 654.945199][T11310] vcan0: entered allmulticast mode [ 654.991274][T11310] bond0: entered allmulticast mode [ 654.996720][T11310] bond_slave_0: entered allmulticast mode [ 655.003734][T11310] bond_slave_1: entered allmulticast mode [ 655.064507][T11310] team0: entered allmulticast mode [ 655.070045][T11310] team_slave_0: entered allmulticast mode [ 655.075925][T11310] team_slave_1: entered allmulticast mode [ 655.116055][T11310] dummy0: entered allmulticast mode [ 655.167758][T11310] nlmon0: entered allmulticast mode [ 655.212791][T11310] caif0: entered allmulticast mode [ 655.219336][T11310] batadv0: entered allmulticast mode [ 655.269459][T11310] vxcan0: entered allmulticast mode [ 655.309902][T11310] vxcan1: entered allmulticast mode [ 655.330443][T11310] veth0: entered allmulticast mode [ 655.385060][T11310] veth1: entered allmulticast mode [ 655.452562][T11310] veth0_to_bridge: entered allmulticast mode [ 655.536392][T11310] veth1_to_bridge: entered allmulticast mode [ 655.635362][T11310] veth0_to_bond: entered allmulticast mode [ 655.740338][T11310] veth1_to_bond: entered allmulticast mode [ 655.815019][T11310] veth0_to_team: entered allmulticast mode [ 655.887090][T11310] veth1_to_team: entered allmulticast mode [ 655.984920][T11310] veth0_to_batadv: entered allmulticast mode [ 656.025354][T11310] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 656.034737][T11310] batadv_slave_0: entered allmulticast mode [ 656.125364][T11310] veth1_to_batadv: entered allmulticast mode [ 656.126345][T11333] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1851'. [ 656.171139][T11310] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 656.178996][T11310] batadv_slave_1: entered allmulticast mode [ 656.273185][T11310] xfrm0: entered allmulticast mode [ 656.324198][T11310] veth0_to_hsr: entered allmulticast mode [ 656.330721][T11335] netlink: 'syz.4.1852': attribute type 2 has an invalid length. [ 656.338989][T11335] netlink: 137592 bytes leftover after parsing attributes in process `syz.4.1852'. [ 656.373813][T11310] hsr_slave_0: entered allmulticast mode [ 656.441012][T11310] veth1_to_hsr: entered allmulticast mode [ 656.496697][T11310] hsr_slave_1: entered allmulticast mode [ 656.557137][T11310] hsr0: entered allmulticast mode [ 656.601837][T11310] veth1_virt_wifi: entered allmulticast mode [ 656.664892][T11310] veth0_virt_wifi: entered allmulticast mode [ 656.727066][T11310] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 656.737649][T11310] veth1_vlan: entered allmulticast mode [ 656.785793][T11310] veth0_vlan: entered allmulticast mode [ 656.909039][T11310] vlan0: entered allmulticast mode [ 656.915152][T11310] vlan1: entered allmulticast mode [ 656.948767][T11310] macvlan0: entered allmulticast mode [ 656.996046][T11310] macvlan1: entered allmulticast mode [ 657.036577][T11310] ipvlan0: entered allmulticast mode [ 657.043031][T11310] ipvlan1: entered allmulticast mode [ 657.050019][T11310] veth1_macvtap: entered allmulticast mode [ 657.152137][T11310] veth0_macvtap: entered allmulticast mode [ 657.213212][T11310] macvtap0: entered allmulticast mode [ 657.264772][T11310] macsec0: entered allmulticast mode [ 657.326091][T11310] geneve0: entered allmulticast mode [ 657.375277][T11310] geneve1: entered allmulticast mode [ 657.468912][T11310] netdevsim netdevsim9 netdevsim0: entered allmulticast mode [ 657.561487][T11310] netdevsim netdevsim9 netdevsim1: entered allmulticast mode [ 657.644546][T11310] netdevsim netdevsim9 netdevsim2: entered allmulticast mode [ 657.694618][T11310] netdevsim netdevsim9 netdevsim3: entered allmulticast mode [ 657.782902][T11310] mac80211_hwsim hwsim20 wlan0: entered allmulticast mode [ 657.873536][T11310] mac80211_hwsim hwsim21 wlan1: entered allmulticast mode [ 657.905635][T10997] netdevsim netdevsim9 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 657.949171][T10997] netdevsim netdevsim9 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 657.989747][T10997] netdevsim netdevsim9 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 658.023975][T10997] netdevsim netdevsim9 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 659.063765][T11356] netlink: 112 bytes leftover after parsing attributes in process `syz.1.1859'. [ 659.243160][ T5823] Bluetooth: hci5: unexpected event 0x2f length: 1017 > 260 [ 659.950446][T11364] netlink: 'syz.1.1863': attribute type 2 has an invalid length. [ 659.966015][T11364] netlink: 137592 bytes leftover after parsing attributes in process `syz.1.1863'. [ 660.122205][T11369] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0 [ 660.123672][T11366] IPVS: stopping backup sync thread 11369 ... [ 660.793379][T11382] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1869'. [ 661.212063][ T30] audit: type=1326 audit(1755837295.681:193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11387 comm="syz.9.1873" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f42539 code=0x7ffc0000 [ 661.234916][ T30] audit: type=1326 audit(1755837295.691:194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11387 comm="syz.9.1873" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f42539 code=0x7ffc0000 [ 661.257591][ T30] audit: type=1326 audit(1755837295.721:195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11387 comm="syz.9.1873" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7f42539 code=0x7ffc0000 [ 661.280000][ T30] audit: type=1326 audit(1755837295.721:196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11387 comm="syz.9.1873" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f42539 code=0x7ffc0000 [ 661.302487][ T30] audit: type=1326 audit(1755837295.721:197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11387 comm="syz.9.1873" exe="/root/syz-executor" sig=0 arch=40000003 syscall=370 compat=1 ip=0xf7f42539 code=0x7ffc0000 [ 661.322376][T11388] loop9: detected capacity change from 0 to 512 [ 661.325727][ T30] audit: type=1326 audit(1755837295.721:198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11387 comm="syz.9.1873" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f42539 code=0x7ffc0000 [ 661.353676][ T30] audit: type=1326 audit(1755837295.721:199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11387 comm="syz.9.1873" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7f42539 code=0x7ffc0000 [ 661.376552][ T30] audit: type=1326 audit(1755837295.721:200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11387 comm="syz.9.1873" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f42539 code=0x7ffc0000 [ 661.399081][ T30] audit: type=1326 audit(1755837295.721:201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11387 comm="syz.9.1873" exe="/root/syz-executor" sig=0 arch=40000003 syscall=356 compat=1 ip=0xf7f42539 code=0x7ffc0000 [ 661.422256][ T30] audit: type=1326 audit(1755837295.721:202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11387 comm="syz.9.1873" exe="/root/syz-executor" sig=0 arch=40000003 syscall=192 compat=1 ip=0xf7f42539 code=0x7ffc0000 [ 661.588684][T11388] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 661.601853][T11388] ext4 filesystem being mounted at /10/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 661.726314][T11396] EXT4-fs error (device loop9): ext4_acquire_dquot:6937: comm syz.9.1873: Failed to acquire dquot type 0 [ 661.982831][T11110] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 662.000589][T11400] netlink: 'syz.1.1877': attribute type 2 has an invalid length. [ 662.008866][T11400] netlink: 137592 bytes leftover after parsing attributes in process `syz.1.1877'. [ 664.780541][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 667.820813][T11436] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1890'. [ 667.880369][T11435] netlink: 'syz.4.1891': attribute type 2 has an invalid length. [ 667.888608][T11435] netlink: 137592 bytes leftover after parsing attributes in process `syz.4.1891'. [ 669.485800][T11457] team0: No ports can be present during mode change [ 669.538212][T11457] tipc: Enabled bearer , priority 0 [ 672.090839][T11471] netlink: 'syz.0.1904': attribute type 2 has an invalid length. [ 672.099216][T11471] netlink: 137592 bytes leftover after parsing attributes in process `syz.0.1904'. [ 673.786650][T11480] lo: entered allmulticast mode [ 673.918691][T11482] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1908'. [ 677.200874][T11519] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1922'. [ 679.282413][ T30] kauditd_printk_skb: 17 callbacks suppressed [ 679.282487][ T30] audit: type=1326 audit(1755837313.751:218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11532 comm="syz.1.1928" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc3539 code=0x7ffc0000 [ 679.350258][ T30] audit: type=1326 audit(1755837313.801:219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11532 comm="syz.1.1928" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7fc3539 code=0x7ffc0000 [ 679.372967][ T30] audit: type=1326 audit(1755837313.801:220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11532 comm="syz.1.1928" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc3539 code=0x7ffc0000 [ 679.395446][ T30] audit: type=1326 audit(1755837313.811:221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11532 comm="syz.1.1928" exe="/root/syz-executor" sig=0 arch=40000003 syscall=370 compat=1 ip=0xf7fc3539 code=0x7ffc0000 [ 679.417961][ T30] audit: type=1326 audit(1755837313.811:222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11532 comm="syz.1.1928" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc3539 code=0x7ffc0000 [ 679.441257][ T30] audit: type=1326 audit(1755837313.831:223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11532 comm="syz.1.1928" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc3539 code=0x7ffc0000 [ 679.463952][ T30] audit: type=1326 audit(1755837313.831:224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11532 comm="syz.1.1928" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7fc3539 code=0x7ffc0000 [ 679.487085][ T30] audit: type=1326 audit(1755837313.831:225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11532 comm="syz.1.1928" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc3539 code=0x7ffc0000 [ 679.509721][ T30] audit: type=1326 audit(1755837313.831:226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11532 comm="syz.1.1928" exe="/root/syz-executor" sig=0 arch=40000003 syscall=356 compat=1 ip=0xf7fc3539 code=0x7ffc0000 [ 679.532863][ T30] audit: type=1326 audit(1755837313.831:227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11532 comm="syz.1.1928" exe="/root/syz-executor" sig=0 arch=40000003 syscall=192 compat=1 ip=0xf7fc3539 code=0x7ffc0000 [ 680.668733][T11556] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1937'. [ 680.780698][T11556] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1937'. [ 680.805334][T11560] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1936'. [ 682.158404][T11575] vlan2: entered promiscuous mode [ 682.163557][T11575] veth0_virt_wifi: entered promiscuous mode [ 682.170396][T11575] vlan2: entered allmulticast mode [ 682.306506][T11575] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1944'. [ 682.448324][T11575] hsr_slave_1 (unregistering): left promiscuous mode [ 682.918578][T11582] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1948'. [ 683.356052][T11588] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1950'. [ 683.402523][T11588] netlink: 104 bytes leftover after parsing attributes in process `syz.4.1950'. [ 683.789579][T11594] loop8: detected capacity change from 0 to 1024 [ 683.829571][T11594] EXT4-fs: Ignoring removed orlov option [ 683.887245][T11594] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 684.318042][ T9950] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 685.190523][T11617] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1962'. [ 685.398708][T11620] vlan0: entered promiscuous mode [ 685.403857][T11620] veth0_virt_wifi: entered promiscuous mode [ 685.410584][T11620] vlan0: entered allmulticast mode [ 685.436990][T11622] netlink: 104 bytes leftover after parsing attributes in process `syz.8.1965'. [ 685.862308][T11625] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1966'. [ 685.880957][T11627] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1967'. [ 687.570150][T11646] netlink: 104 bytes leftover after parsing attributes in process `syz.8.1976'. [ 687.764697][T11648] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1975'. [ 687.876516][T11652] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1978'. [ 690.219110][T11681] netlink: 104 bytes leftover after parsing attributes in process `syz.4.1989'. [ 690.794279][T11689] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1992'. [ 692.303061][ T5832] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 692.339178][ T5832] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 692.360589][ T5832] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 692.441015][ T5832] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 692.451959][ T5832] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 692.759375][T11713] netlink: 104 bytes leftover after parsing attributes in process `syz.8.2001'. [ 693.702781][T11705] chnl_net:caif_netlink_parms(): no params data found [ 694.539488][ T5832] Bluetooth: hci4: command tx timeout [ 696.461916][T11705] bridge0: port 1(bridge_slave_0) entered blocking state [ 696.469414][T11705] bridge0: port 1(bridge_slave_0) entered disabled state [ 696.476869][T11705] bridge_slave_0: entered allmulticast mode [ 696.486045][T11705] bridge_slave_0: entered promiscuous mode [ 696.622869][ T5832] Bluetooth: hci4: command tx timeout [ 696.656406][T11705] bridge0: port 2(bridge_slave_1) entered blocking state [ 696.663878][T11705] bridge0: port 2(bridge_slave_1) entered disabled state [ 696.671750][T11705] bridge_slave_1: entered allmulticast mode [ 696.681025][T11705] bridge_slave_1: entered promiscuous mode [ 696.775969][T11705] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 696.978318][T11705] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 697.065532][T11705] team0: Port device team_slave_0 added [ 697.090536][T11705] team0: Port device team_slave_1 added [ 697.414047][T11705] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 697.421375][T11705] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 697.448025][T11705] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 697.682254][T11705] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 697.689459][T11705] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 697.715692][T11705] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 698.078735][T11748] netlink: 104 bytes leftover after parsing attributes in process `syz.4.2012'. [ 698.300523][T11705] hsr_slave_0: entered promiscuous mode [ 698.309376][T11705] hsr_slave_1: entered promiscuous mode [ 698.316777][T11705] debugfs: 'hsr0' already exists in 'hsr' [ 698.323187][T11705] Cannot create hsr debugfs directory [ 698.698037][ T5832] Bluetooth: hci4: command tx timeout [ 700.330585][T11705] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 700.508741][T11705] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 700.598723][T11705] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 700.708889][T11705] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 700.779434][ T5832] Bluetooth: hci4: command tx timeout [ 701.125719][T11779] netlink: 104 bytes leftover after parsing attributes in process `syz.0.2024'. [ 701.695331][T11785] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2027'. [ 701.794591][T11705] 8021q: adding VLAN 0 to HW filter on device bond0 [ 702.007240][T11705] 8021q: adding VLAN 0 to HW filter on device team0 [ 702.084985][ T3918] bridge0: port 1(bridge_slave_0) entered blocking state [ 702.092655][ T3918] bridge0: port 1(bridge_slave_0) entered forwarding state [ 702.196422][ T3918] bridge0: port 2(bridge_slave_1) entered blocking state [ 702.203970][ T3918] bridge0: port 2(bridge_slave_1) entered forwarding state [ 704.336419][T11816] netlink: 104 bytes leftover after parsing attributes in process `syz.8.2037'. [ 704.411032][T11705] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 704.578663][T11818] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2038'. [ 704.767612][T11705] veth0_vlan: entered promiscuous mode [ 704.831889][T11705] veth1_vlan: entered promiscuous mode [ 705.089518][T11705] veth0_macvtap: entered promiscuous mode [ 705.140792][T11705] veth1_macvtap: entered promiscuous mode [ 705.260619][T11705] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 705.340660][T11705] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 705.439295][T10995] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 705.500903][T10995] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 705.529491][T10995] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 705.570352][T10995] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 707.413661][T11854] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2050'. [ 707.522808][T11859] netlink: 104 bytes leftover after parsing attributes in process `syz.0.2049'. [ 710.821655][T11902] netlink: 104 bytes leftover after parsing attributes in process `syz.1.2061'. [ 710.899321][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 710.905906][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 711.119503][T11905] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2062'. [ 711.452603][T10995] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 711.461275][T10995] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 711.662736][ T8575] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 711.671406][ T8575] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 712.142619][T11915] loop2: detected capacity change from 0 to 1024 [ 712.316227][T11915] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 712.329792][T11915] ext4 filesystem being mounted at /0/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 712.383414][ T5832] Bluetooth: hci1: unexpected event 0x2f length: 1017 > 260 [ 712.679751][T11705] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 714.098695][T11932] netlink: 104 bytes leftover after parsing attributes in process `syz.0.2072'. [ 714.701499][T11934] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2073'. [ 715.285466][T11944] pim6reg: entered allmulticast mode [ 715.322382][T11944] pim6reg: left allmulticast mode [ 716.057545][ T5832] Bluetooth: hci2: unexpected event 0x2f length: 1017 > 260 [ 716.691856][T11955] vlan2: left promiscuous mode [ 716.705009][T11955] veth0_virt_wifi: left promiscuous mode [ 716.935229][T11960] netlink: 104 bytes leftover after parsing attributes in process `syz.1.2084'. [ 717.691064][T11966] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2087'. [ 718.995985][T11978] loop2: detected capacity change from 0 to 1024 [ 719.460075][ T5832] Bluetooth: hci1: unexpected event 0x2f length: 1017 > 260 [ 720.631520][T11991] netlink: 104 bytes leftover after parsing attributes in process `syz.0.2096'. [ 720.691202][T11993] netlink: 'syz.2.2097': attribute type 2 has an invalid length. [ 720.700555][T11993] netlink: 137592 bytes leftover after parsing attributes in process `syz.2.2097'. [ 721.131035][T11996] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2099'. [ 721.927590][ T5869] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 722.119954][ T5869] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 722.129921][ T5869] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 722.140663][ T5869] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 722.150328][ T5869] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 722.161580][ T5869] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9649, setting to 1024 [ 722.205444][ T5869] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 722.215551][ T5869] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 722.224192][ T5869] usb 3-1: Product: syz [ 722.228660][ T5869] usb 3-1: Manufacturer: syz [ 722.243881][T12005] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 722.300656][ T5869] cdc_wdm 3-1:1.0: skipping garbage [ 722.306159][ T5869] cdc_wdm 3-1:1.0: skipping garbage [ 722.340495][ T5869] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 722.346973][ T5869] cdc_wdm 3-1:1.0: Unknown control protocol [ 722.529817][T12005] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(4) [ 722.536540][T12005] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 722.539675][ T5832] Bluetooth: hci2: unexpected event 0x2f length: 1017 > 260 [ 722.546077][T12005] vhci_hcd vhci_hcd.0: Device attached [ 722.603581][ T42] usb 3-1: USB disconnect, device number 17 [ 722.605542][T12011] vhci_hcd: connection closed [ 722.612596][ T8593] vhci_hcd: stop threads [ 722.622229][ T8593] vhci_hcd: release socket [ 722.626769][ T8593] vhci_hcd: disconnect device [ 724.460152][T12028] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2112'. [ 725.054132][ T5823] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 725.068722][ T5823] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 725.081303][ T5823] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 725.111965][ T5823] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 725.124104][ T5823] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 725.260339][ T30] kauditd_printk_skb: 11 callbacks suppressed [ 725.260410][ T30] audit: type=1326 audit(1755837359.741:239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12038 comm="syz.2.2115" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f64539 code=0x7ffc0000 [ 725.289685][ T30] audit: type=1326 audit(1755837359.741:240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12038 comm="syz.2.2115" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f64539 code=0x7ffc0000 [ 725.500878][ T30] audit: type=1326 audit(1755837359.791:241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12038 comm="syz.2.2115" exe="/root/syz-executor" sig=0 arch=40000003 syscall=224 compat=1 ip=0xf7f64539 code=0x7ffc0000 [ 725.524376][ T30] audit: type=1326 audit(1755837359.791:242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12038 comm="syz.2.2115" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f64539 code=0x7ffc0000 [ 725.547748][ T30] audit: type=1326 audit(1755837359.791:243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12038 comm="syz.2.2115" exe="/root/syz-executor" sig=0 arch=40000003 syscall=259 compat=1 ip=0xf7f64539 code=0x7ffc0000 [ 725.570783][ T30] audit: type=1326 audit(1755837359.791:244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12038 comm="syz.2.2115" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f64539 code=0x7ffc0000 [ 725.593103][ T30] audit: type=1326 audit(1755837359.801:245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12038 comm="syz.2.2115" exe="/root/syz-executor" sig=0 arch=40000003 syscall=260 compat=1 ip=0xf7f64539 code=0x7ffc0000 [ 725.616529][ T30] audit: type=1326 audit(1755837359.801:246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12038 comm="syz.2.2115" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f64539 code=0x7ffc0000 [ 725.639681][ T30] audit: type=1326 audit(1755837359.801:247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12038 comm="syz.2.2115" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7f64539 code=0x7ffc0000 [ 725.662054][ T30] audit: type=1326 audit(1755837359.801:248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12038 comm="syz.2.2115" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f64539 code=0x7ffc0000 [ 726.110812][T12034] chnl_net:caif_netlink_parms(): no params data found [ 727.177754][ T5823] Bluetooth: hci5: command tx timeout [ 727.199135][ T5823] Bluetooth: hci4: unexpected event 0x2f length: 1017 > 260 [ 727.596551][T12034] bridge0: port 1(bridge_slave_0) entered blocking state [ 727.616530][T12034] bridge0: port 1(bridge_slave_0) entered disabled state [ 727.624482][T12034] bridge_slave_0: entered allmulticast mode [ 727.633831][T12034] bridge_slave_0: entered promiscuous mode [ 727.782810][T12034] bridge0: port 2(bridge_slave_1) entered blocking state [ 727.791689][T12034] bridge0: port 2(bridge_slave_1) entered disabled state [ 727.799558][T12034] bridge_slave_1: entered allmulticast mode [ 727.808874][T12034] bridge_slave_1: entered promiscuous mode [ 728.289145][T12034] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 728.358401][T12034] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 728.712855][T12034] team0: Port device team_slave_0 added [ 728.772105][T12034] team0: Port device team_slave_1 added [ 729.055479][T12058] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2121'. [ 729.095613][T12034] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 729.104084][T12034] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 729.130636][T12034] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 729.267591][ T5823] Bluetooth: hci5: command tx timeout [ 729.291836][T12034] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 729.300131][T12034] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 729.327552][T12034] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 729.614695][T12034] hsr_slave_0: entered promiscuous mode [ 729.623330][T12034] hsr_slave_1: entered promiscuous mode [ 729.631894][T12034] debugfs: 'hsr0' already exists in 'hsr' [ 729.637830][T12034] Cannot create hsr debugfs directory [ 729.803370][T12060] loop2: detected capacity change from 0 to 256 [ 729.850058][T12060] exfat: Deprecated parameter 'utf8' [ 729.855839][T12060] exfat: Deprecated parameter 'namecase' [ 729.862221][T12060] exfat: Deprecated parameter 'namecase' [ 729.868151][T12060] exfat: Deprecated parameter 'utf8' [ 730.064529][T12060] exFAT-fs (loop2): failed to load upcase table (idx : 0x00012153, chksum : 0x5270ca8d, utbl_chksum : 0xe619d30d) [ 730.966853][T12062] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2123'. [ 731.339914][ T5823] Bluetooth: hci5: command tx timeout [ 731.851275][T12034] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 731.931703][T12034] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 731.981430][T12034] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 732.031116][T12034] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 732.878565][T12079] geneve2: entered promiscuous mode [ 732.885205][T12079] geneve2: entered allmulticast mode [ 733.103446][T12034] 8021q: adding VLAN 0 to HW filter on device bond0 [ 733.266753][T12034] 8021q: adding VLAN 0 to HW filter on device team0 [ 733.330938][ T8593] bridge0: port 1(bridge_slave_0) entered blocking state [ 733.338417][ T8593] bridge0: port 1(bridge_slave_0) entered forwarding state [ 733.418489][ T5832] Bluetooth: hci5: command tx timeout [ 733.437413][ T8593] bridge0: port 2(bridge_slave_1) entered blocking state [ 733.444848][ T8593] bridge0: port 2(bridge_slave_1) entered forwarding state [ 734.460171][T12096] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2125'. [ 734.555924][T12096] loop2: detected capacity change from 0 to 764 [ 735.091339][T12034] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 736.025128][T12115] netlink: 'syz.0.2142': attribute type 10 has an invalid length. [ 736.033737][T12115] syz_tun: left allmulticast mode [ 736.050748][T12115] syz_tun: entered allmulticast mode [ 736.061419][T12115] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 736.994769][T12034] veth0_vlan: entered promiscuous mode [ 737.051917][T12123] syz_tun: left promiscuous mode [ 737.124641][T12034] veth1_vlan: entered promiscuous mode [ 737.365082][T12034] veth0_macvtap: entered promiscuous mode [ 737.453470][T12034] veth1_macvtap: entered promiscuous mode [ 737.572481][T12034] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 737.628784][T12034] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 737.711865][ T8593] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 737.750044][T10997] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 737.793957][T10997] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 737.821223][T10997] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 739.590088][T12149] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2153'. [ 741.312448][T12160] lo: entered allmulticast mode [ 741.358781][T12160] tunl0: entered allmulticast mode [ 741.396735][T12160] gre0: entered allmulticast mode [ 741.537654][T12160] gretap0: entered allmulticast mode [ 741.588161][T12160] erspan0: entered allmulticast mode [ 741.627132][T12160] ip_vti0: entered allmulticast mode [ 741.667095][T12160] ip6_vti0: entered allmulticast mode [ 741.701339][T12160] sit0: entered allmulticast mode [ 741.738964][T12160] ip6tnl0: entered allmulticast mode [ 741.765702][T12160] ip6gre0: entered allmulticast mode [ 741.806400][T12160] syz_tun: entered allmulticast mode [ 741.845222][T12160] ip6gretap0: entered allmulticast mode [ 741.880227][T12160] bridge0: port 2(bridge_slave_1) entered disabled state [ 741.889694][T12160] bridge0: port 1(bridge_slave_0) entered disabled state [ 741.901408][T12160] bridge0: entered allmulticast mode [ 741.939497][T12160] vcan0: entered allmulticast mode [ 741.970920][T12160] bond0: entered allmulticast mode [ 741.976205][T12160] bond_slave_0: entered allmulticast mode [ 741.982443][T12160] bond_slave_1: entered allmulticast mode [ 742.018249][T12160] team0: entered allmulticast mode [ 742.024871][T12160] team_slave_0: entered allmulticast mode [ 742.031409][T12160] team_slave_1: entered allmulticast mode [ 742.130478][T12160] dummy0: entered allmulticast mode [ 742.177577][T12160] nlmon0: entered allmulticast mode [ 742.204121][T12160] caif0: entered allmulticast mode [ 742.211498][T12160] batadv0: entered allmulticast mode [ 742.250096][T12160] vxcan0: entered allmulticast mode [ 742.299329][T12160] vxcan1: entered allmulticast mode [ 742.321565][T12160] veth0: entered allmulticast mode [ 742.352095][T12160] veth1: entered allmulticast mode [ 742.386927][T12160] veth0_to_bridge: entered allmulticast mode [ 742.454724][T12160] veth1_to_bridge: entered allmulticast mode [ 742.515533][T12160] veth0_to_bond: entered allmulticast mode [ 742.590904][T12160] veth1_to_bond: entered allmulticast mode [ 742.654751][T12160] veth0_to_team: entered allmulticast mode [ 742.718771][T12160] veth1_to_team: entered allmulticast mode [ 742.770529][T12160] veth0_to_batadv: entered allmulticast mode [ 742.815191][T12160] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 742.823101][T12160] batadv_slave_0: entered allmulticast mode [ 742.859293][T12160] veth1_to_batadv: entered allmulticast mode [ 742.884169][T12160] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 742.891909][T12160] batadv_slave_1: entered allmulticast mode [ 742.913409][T12160] xfrm0: entered allmulticast mode [ 742.945588][T12160] veth0_to_hsr: entered allmulticast mode [ 742.977147][T12160] hsr_slave_0: entered allmulticast mode [ 742.999548][T12160] veth1_to_hsr: entered allmulticast mode [ 743.017166][T12160] hsr_slave_1: entered allmulticast mode [ 743.045939][T12160] hsr0: entered allmulticast mode [ 743.061193][T12160] veth1_virt_wifi: entered allmulticast mode [ 743.081562][T12160] veth0_virt_wifi: entered allmulticast mode [ 743.100545][T12160] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 743.111549][T12160] veth1_vlan: entered allmulticast mode [ 743.148132][T12160] veth0_vlan: entered allmulticast mode [ 743.205480][T12160] vlan0: entered allmulticast mode [ 743.213382][T12160] vlan1: entered allmulticast mode [ 743.239136][T12160] macvlan0: entered allmulticast mode [ 743.278324][T12160] macvlan1: entered allmulticast mode [ 743.292773][T12160] ipvlan0: entered allmulticast mode [ 743.299136][T12160] ipvlan1: entered allmulticast mode [ 743.305708][T12160] veth1_macvtap: entered allmulticast mode [ 743.364791][T12160] veth0_macvtap: entered allmulticast mode [ 743.408110][T12160] macvtap0: entered allmulticast mode [ 743.444209][T12160] macsec0: entered allmulticast mode [ 743.532439][T12160] geneve0: entered allmulticast mode [ 743.588513][T12160] geneve1: entered allmulticast mode [ 743.608013][T12160] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 743.643519][T12160] netdevsim netdevsim2 netdevsim1: entered allmulticast mode [ 743.683586][T12160] netdevsim netdevsim2 netdevsim2: entered allmulticast mode [ 743.738499][T12160] netdevsim netdevsim2 netdevsim3: entered allmulticast mode [ 743.793666][T12160] mac80211_hwsim hwsim22 wlan0: entered allmulticast mode [ 743.866619][T12160] mac80211_hwsim hwsim23 wlan1: entered allmulticast mode [ 743.897534][ T3918] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 743.944558][ T3918] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 743.978832][ T3918] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 744.017509][ T3918] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 744.501270][ T8567] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 744.509818][ T8567] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 744.631986][ T8593] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 744.640154][ T8593] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 746.398747][T12188] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2163'. [ 746.567192][T12190] loop2: detected capacity change from 0 to 2048 [ 746.630779][T12190] loop2: p1 < > p4 [ 746.646987][T12190] loop2: p4 size 8388608 extends beyond EOD, truncated [ 748.236702][T12215] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2176'. [ 748.272072][T12214] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2174'. [ 748.600270][T12219] bridge0: port 1(syz_tun) entered blocking state [ 748.607133][T12219] bridge0: port 1(syz_tun) entered disabled state [ 748.619074][T12219] syz_tun: entered promiscuous mode [ 748.774740][T12227] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2178'. [ 749.709225][T12241] netlink: 248 bytes leftover after parsing attributes in process `syz.2.2167'. [ 749.720387][T12241] unsupported nlmsg_type 40 [ 750.153430][T12249] netlink: 'syz.4.2190': attribute type 2 has an invalid length. [ 750.162152][T12249] netlink: 137592 bytes leftover after parsing attributes in process `syz.4.2190'. [ 751.273368][T12261] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2196'. [ 752.959104][T12283] netlink: 'syz.4.2203': attribute type 2 has an invalid length. [ 752.967100][T12283] netlink: 137592 bytes leftover after parsing attributes in process `syz.4.2203'. [ 753.500691][T12296] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2209'. [ 755.028369][T12318] netlink: 'syz.4.2218': attribute type 2 has an invalid length. [ 755.036263][T12318] netlink: 137592 bytes leftover after parsing attributes in process `syz.4.2218'. [ 755.689729][T12326] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2222'. [ 755.951310][T12334] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2223'. [ 757.846118][T12354] netlink: 'syz.4.2231': attribute type 2 has an invalid length. [ 757.854577][T12354] netlink: 137592 bytes leftover after parsing attributes in process `syz.4.2231'. [ 758.248848][T12357] vlan0: left promiscuous mode [ 758.253799][T12357] veth0_virt_wifi: left promiscuous mode [ 759.485187][ T30] kauditd_printk_skb: 78 callbacks suppressed [ 759.485256][ T30] audit: type=1400 audit(1755837393.961:327): apparmor="DENIED" operation="stack" class="file" info="label not found" error=-2 profile="unconfined" name="sched_" pid=12339 comm="syz.2.2226" [ 760.562356][T12388] netlink: 'syz.1.2244': attribute type 2 has an invalid length. [ 760.571140][T12388] netlink: 137592 bytes leftover after parsing attributes in process `syz.1.2244'. [ 760.800917][T12390] dvmrp17: entered allmulticast mode [ 760.835591][T12390] dvmrp17: left allmulticast mode [ 763.172424][T12418] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2257'. [ 763.182217][T12418] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2257'. [ 763.280910][T12420] loop2: detected capacity change from 0 to 128 [ 763.346771][T12420] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 763.370258][T12420] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 766.092782][T12450] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2269'. [ 766.102843][T12450] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2269'. [ 766.331774][T12450] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2269'. [ 766.341338][T12450] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2269'. [ 768.863649][T12471] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2277'. [ 768.873078][T12471] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2277'. [ 768.882604][T12471] netlink: 72 bytes leftover after parsing attributes in process `syz.4.2277'. [ 769.674339][T12483] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2282'. [ 769.684964][T12483] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2282'. [ 770.035396][T12483] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2282'. [ 771.052952][T12493] netlink: 'syz.2.2284': attribute type 10 has an invalid length. [ 771.061184][T12493] macvlan0: left allmulticast mode [ 771.073283][T12493] macvlan0: entered allmulticast mode [ 771.082447][T12493] team0: Port device macvlan0 added [ 772.321206][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 772.327939][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 773.661938][ T5869] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 773.828629][ T5869] usb 6-1: Using ep0 maxpacket: 8 [ 773.871275][ T5869] usb 6-1: config 0 has no interfaces? [ 773.901701][ T5869] usb 6-1: New USB device found, idVendor=06cb, idProduct=0003, bcdDevice=e8.00 [ 773.912015][ T5869] usb 6-1: New USB device strings: Mfr=22, Product=0, SerialNumber=0 [ 773.920568][ T5869] usb 6-1: Manufacturer: syz [ 773.949617][ T5869] usb 6-1: config 0 descriptor?? [ 774.158445][T12518] __nla_validate_parse: 1 callbacks suppressed [ 774.158522][T12518] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2294'. [ 774.178062][T12518] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2294'. [ 774.239909][ T42] usb 6-1: USB disconnect, device number 3 [ 774.494493][T12518] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2294'. [ 774.504404][T12518] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2294'. [ 774.934193][T12518] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2294'. [ 774.945014][T12518] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2294'. [ 776.074778][T12551] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2306'. [ 776.533904][T12559] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2311'. [ 776.543525][T12559] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2311'. [ 777.447771][T12575] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2320'. [ 777.932679][T12581] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 778.458841][T12587] netlink: 'syz.5.2325': attribute type 2 has an invalid length. [ 780.687858][T12606] __nla_validate_parse: 2 callbacks suppressed [ 780.687930][T12606] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2332'. [ 782.199242][T12614] loop2: detected capacity change from 0 to 512 [ 782.338339][T12614] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 782.351892][T12614] ext4 filesystem being mounted at /52/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 782.556886][T12614] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 782.603717][T12614] Quota error (device loop2): write_blk: dquota write failed [ 782.613305][T12614] Quota error (device loop2): qtree_write_dquot: Error -28 occurred while creating quota [ 782.623858][T12614] EXT4-fs error (device loop2): ext4_acquire_dquot:6937: comm syz.2.2335: Failed to acquire dquot type 1 [ 782.904063][T11705] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 783.363753][T12623] netlink: 'syz.2.2337': attribute type 2 has an invalid length. [ 783.373225][T12623] netlink: 137592 bytes leftover after parsing attributes in process `syz.2.2337'. [ 786.989359][T12637] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2344'. [ 788.853483][T12646] netlink: 'syz.1.2349': attribute type 2 has an invalid length. [ 788.861736][T12646] netlink: 137592 bytes leftover after parsing attributes in process `syz.1.2349'. [ 788.929502][T12647] netdevsim netdevsim2 eth0: entered allmulticast mode [ 788.937700][T12647] netdevsim netdevsim2 eth1: entered allmulticast mode [ 788.945515][T12647] netdevsim netdevsim2 eth2: entered allmulticast mode [ 788.953539][T12647] netdevsim netdevsim2 eth3: entered allmulticast mode [ 789.850441][T12659] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2355'. [ 790.988525][T12677] loop2: detected capacity change from 0 to 1024 [ 791.065191][T12677] EXT4-fs: Ignoring removed orlov option [ 791.183338][T12677] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 791.322730][ T30] audit: type=1800 audit(1755837425.801:328): pid=12677 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2359" name="bus" dev="loop2" ino=18 res=0 errno=0 [ 791.344342][ T30] audit: type=1804 audit(1755837425.801:329): pid=12677 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.2359" name="/newroot/65/bus/bus" dev="loop2" ino=18 res=1 errno=0 [ 792.252636][T12683] netlink: 'syz.4.2361': attribute type 10 has an invalid length. [ 792.261059][T12683] team0: left allmulticast mode [ 792.268957][T12683] batman_adv: batadv0: Adding interface: team0 [ 792.276206][T12683] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 792.303361][T12683] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 792.424192][T11705] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 793.354566][T12690] netlink: 'syz.2.2363': attribute type 2 has an invalid length. [ 793.362738][T12690] netlink: 137592 bytes leftover after parsing attributes in process `syz.2.2363'. [ 795.298636][ T5823] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 795.308095][ T5823] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 795.319285][ T5823] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 795.332047][ T5823] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 795.349010][ T5823] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 796.028367][T12701] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2367'. [ 796.903791][T12695] chnl_net:caif_netlink_parms(): no params data found [ 797.419829][ T5832] Bluetooth: hci3: command tx timeout [ 798.544807][ T8567] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 798.718702][T12723] netlink: 'syz.1.2375': attribute type 2 has an invalid length. [ 798.727684][T12723] netlink: 137592 bytes leftover after parsing attributes in process `syz.1.2375'. [ 798.803080][ T8567] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 798.877540][ T42] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 798.906734][T12695] bridge0: port 1(bridge_slave_0) entered blocking state [ 798.914318][T12695] bridge0: port 1(bridge_slave_0) entered disabled state [ 798.922157][T12695] bridge_slave_0: entered allmulticast mode [ 798.933174][T12695] bridge_slave_0: entered promiscuous mode [ 799.010861][ T8567] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 799.045252][ T42] usb 3-1: config 0 has an invalid interface number: 199 but max is 1 [ 799.053807][ T42] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 799.064690][ T42] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 799.074074][ T42] usb 3-1: config 0 has no interface number 0 [ 799.080409][ T42] usb 3-1: config 0 interface 199 altsetting 0 endpoint 0xA has an invalid bInterval 0, changing to 7 [ 799.091588][ T42] usb 3-1: config 0 interface 199 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 799.130533][ T42] usb 3-1: New USB device found, idVendor=0002, idProduct=0000, bcdDevice= 0.00 [ 799.140560][ T42] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 799.149093][ T42] usb 3-1: SerialNumber: syz [ 799.169090][ T42] usb 3-1: config 0 descriptor?? [ 799.203463][ T42] usb 3-1: Found UVC 0.00 device (0002:0000) [ 799.211055][ T42] usb 3-1: No valid video chain found. [ 799.227936][T12695] bridge0: port 2(bridge_slave_1) entered blocking state [ 799.235391][T12695] bridge0: port 2(bridge_slave_1) entered disabled state [ 799.244797][T12695] bridge_slave_1: entered allmulticast mode [ 799.254156][T12695] bridge_slave_1: entered promiscuous mode [ 799.321340][ T8567] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 799.390277][ T42] usb 3-1: USB disconnect, device number 18 [ 799.501867][ T5832] Bluetooth: hci3: command tx timeout [ 799.725104][T12695] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 799.851694][T12729] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2378'. [ 799.877701][T12695] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 799.890163][ T8567] bridge_slave_1: left allmulticast mode [ 799.895955][ T8567] bridge_slave_1: left promiscuous mode [ 799.902728][ T8567] bridge0: port 2(bridge_slave_1) entered disabled state [ 799.974841][ T8567] bridge_slave_0: left allmulticast mode [ 799.981871][ T8567] bridge_slave_0: left promiscuous mode [ 799.988778][ T8567] bridge0: port 1(bridge_slave_0) entered disabled state [ 800.686855][ T8567] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 800.729545][ T8567] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 800.768835][ T8567] bond0 (unregistering): Released all slaves [ 801.104648][T12695] team0: Port device team_slave_0 added [ 801.231127][T12695] team0: Port device team_slave_1 added [ 801.342863][ T8567] hsr_slave_0: left promiscuous mode [ 801.363388][ T8567] hsr_slave_1: left promiscuous mode [ 801.374911][ T8567] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 801.382615][ T8567] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 801.458727][ T8567] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 801.466270][ T8567] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 801.540512][ T8567] veth1_macvtap: left promiscuous mode [ 801.546301][ T8567] veth0_macvtap: left promiscuous mode [ 801.553570][ T8567] veth1_vlan: left promiscuous mode [ 801.559177][ T8567] veth0_vlan: left promiscuous mode [ 801.577580][ T5832] Bluetooth: hci3: command tx timeout [ 801.632358][T12744] netlink: 'syz.0.2385': attribute type 1 has an invalid length. [ 802.468174][ T8567] team0 (unregistering): Port device team_slave_1 removed [ 802.504229][ T8567] team0 (unregistering): Port device team_slave_0 removed [ 802.897696][T12744] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 803.068016][T12695] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 803.083685][T12695] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 803.090908][T12754] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2388'. [ 803.110087][T12695] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 803.151095][T12695] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 803.158382][T12695] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 803.184714][T12695] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 803.543188][T12695] hsr_slave_0: entered promiscuous mode [ 803.554633][T12695] hsr_slave_1: entered promiscuous mode [ 803.563185][T12695] debugfs: 'hsr0' already exists in 'hsr' [ 803.569542][T12695] Cannot create hsr debugfs directory [ 803.658452][ T5832] Bluetooth: hci3: command tx timeout [ 804.912577][T12695] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 804.999557][T12695] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 805.057742][T12695] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 805.103026][T12695] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 805.888689][T12695] 8021q: adding VLAN 0 to HW filter on device bond0 [ 806.038675][T12695] 8021q: adding VLAN 0 to HW filter on device team0 [ 806.096363][T10995] bridge0: port 1(bridge_slave_0) entered blocking state [ 806.103882][T10995] bridge0: port 1(bridge_slave_0) entered forwarding state [ 806.212888][T10995] bridge0: port 2(bridge_slave_1) entered blocking state [ 806.220464][T10995] bridge0: port 2(bridge_slave_1) entered forwarding state [ 807.583711][T12695] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 808.328273][T12792] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2400'. [ 809.370860][T12695] veth0_vlan: entered promiscuous mode [ 809.461407][T12695] veth1_vlan: entered promiscuous mode [ 809.695123][T12695] veth0_macvtap: entered promiscuous mode [ 809.754523][T12695] veth1_macvtap: entered promiscuous mode [ 809.884331][T12695] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 809.951517][T12695] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 810.021384][T10995] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 810.055584][T10995] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 810.101447][T10995] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 810.158823][ T8575] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 810.487018][T12809] loop2: detected capacity change from 0 to 1024 [ 810.519796][T12809] EXT4-fs: Ignoring removed orlov option [ 810.606223][T12809] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 810.823999][ T30] audit: type=1800 audit(1755837445.291:330): pid=12809 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2406" name="bus" dev="loop2" ino=18 res=0 errno=0 [ 811.099521][T11705] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 811.128538][T12819] team0: entered allmulticast mode [ 811.376197][T12824] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2410'. [ 813.465968][T12849] loop2: detected capacity change from 0 to 1024 [ 813.537041][T12849] EXT4-fs: Ignoring removed orlov option [ 813.606442][T12849] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 813.907586][ T30] audit: type=1800 audit(1755837448.381:331): pid=12849 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2419" name="bus" dev="loop2" ino=18 res=0 errno=0 [ 814.302273][T11705] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 814.581823][T12862] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2422'. [ 815.154695][T12867] vlan2: entered promiscuous mode [ 815.160002][T12867] veth0_virt_wifi: entered promiscuous mode [ 815.166552][T12867] vlan2: entered allmulticast mode [ 815.339796][ T8575] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 815.348776][ T8575] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 815.393016][ T5823] Bluetooth: hci4: command 0x0406 tx timeout [ 815.532353][T10995] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 815.540502][T10995] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 816.838675][T12888] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2433'. [ 818.315657][T12912] lo: entered allmulticast mode [ 818.353762][T12912] tunl0: entered allmulticast mode [ 818.400621][T12912] gre0: entered allmulticast mode [ 818.460053][T12912] gretap0: entered allmulticast mode [ 818.525146][T12912] erspan0: entered allmulticast mode [ 818.570438][T12912] ip_vti0: entered allmulticast mode [ 818.740335][T12912] ip6_vti0: entered allmulticast mode [ 818.766394][T12912] sit0: entered allmulticast mode [ 818.802878][T12912] ip6tnl0: entered allmulticast mode [ 818.828548][T12912] ip6gre0: entered allmulticast mode [ 818.909385][T12912] syz_tun: entered allmulticast mode [ 818.932439][T12912] ip6gretap0: entered allmulticast mode [ 818.963236][T12912] bridge0: port 2(bridge_slave_1) entered disabled state [ 818.973054][T12912] bridge0: port 1(bridge_slave_0) entered disabled state [ 818.983660][T12912] bridge0: entered allmulticast mode [ 819.003596][T12912] vcan0: entered allmulticast mode [ 819.017027][T12912] bond0: entered allmulticast mode [ 819.022716][T12912] bond_slave_0: entered allmulticast mode [ 819.030395][T12912] bond_slave_1: entered allmulticast mode [ 819.049573][T12912] team0: entered allmulticast mode [ 819.055084][T12912] team_slave_0: entered allmulticast mode [ 819.061144][T12912] team_slave_1: entered allmulticast mode [ 819.077121][T12921] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2447'. [ 819.079235][T12912] dummy0: entered allmulticast mode [ 819.115455][T12912] nlmon0: entered allmulticast mode [ 819.154932][T12912] caif0: entered allmulticast mode [ 819.162955][T12912] batadv0: entered allmulticast mode [ 819.181603][T12912] vxcan0: entered allmulticast mode [ 819.194146][T12912] vxcan1: entered allmulticast mode [ 819.203416][T12912] veth0: entered allmulticast mode [ 819.230222][T12912] veth1: entered allmulticast mode [ 819.247714][T12912] veth0_to_bridge: entered allmulticast mode [ 819.276825][T12912] veth1_to_bridge: entered allmulticast mode [ 819.307618][T12912] veth0_to_bond: entered allmulticast mode [ 819.331802][T12912] veth1_to_bond: entered allmulticast mode [ 819.356777][T12912] veth0_to_team: entered allmulticast mode [ 819.391679][T12912] veth1_to_team: entered allmulticast mode [ 819.422220][T12912] veth0_to_batadv: entered allmulticast mode [ 819.441601][T12912] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 819.450137][T12912] batadv_slave_0: entered allmulticast mode [ 819.474671][T12912] veth1_to_batadv: entered allmulticast mode [ 819.491750][T12912] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 819.500317][T12912] batadv_slave_1: entered allmulticast mode [ 819.521543][T12912] xfrm0: entered allmulticast mode [ 819.535409][T12912] veth0_to_hsr: entered allmulticast mode [ 819.552886][T12912] hsr_slave_0: entered allmulticast mode [ 819.566162][T12912] veth1_to_hsr: entered allmulticast mode [ 819.582975][T12912] hsr_slave_1: entered allmulticast mode [ 819.600131][T12912] hsr0: entered allmulticast mode [ 819.616245][T12912] veth1_virt_wifi: entered allmulticast mode [ 819.633679][T12912] veth0_virt_wifi: entered allmulticast mode [ 819.649332][T12912] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 819.659928][T12912] veth1_vlan: entered allmulticast mode [ 819.672971][T12912] veth0_vlan: entered allmulticast mode [ 819.711888][T12912] vlan0: entered allmulticast mode [ 819.722110][T12912] vlan1: entered allmulticast mode [ 819.729828][T12912] macvlan0: entered allmulticast mode [ 819.745319][T12912] macvlan1: entered allmulticast mode [ 819.776585][T12912] ipvlan0: entered allmulticast mode [ 819.783234][T12912] ipvlan1: entered allmulticast mode [ 819.791286][T12912] veth1_macvtap: entered allmulticast mode [ 819.806913][T12912] veth0_macvtap: entered allmulticast mode [ 819.836860][T12912] macvtap0: entered allmulticast mode [ 819.872897][T12912] macsec0: entered allmulticast mode [ 819.907775][T12912] geneve0: entered allmulticast mode [ 819.934661][T12912] geneve1: entered allmulticast mode [ 819.972591][T12912] netdevsim netdevsim6 netdevsim0: entered allmulticast mode [ 820.016209][T12912] netdevsim netdevsim6 netdevsim1: entered allmulticast mode [ 820.054402][T12912] netdevsim netdevsim6 netdevsim2: entered allmulticast mode [ 820.085452][T12912] netdevsim netdevsim6 netdevsim3: entered allmulticast mode [ 820.153510][T12912] mac80211_hwsim hwsim26 wlan0: entered allmulticast mode [ 820.192481][T12912] mac80211_hwsim hwsim27 wlan1: entered allmulticast mode [ 820.264423][ T8567] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 820.307984][ T8567] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 820.325192][ T8567] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 820.353433][ T8567] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 821.893570][T12947] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2458'. [ 822.726094][T12965] loop2: detected capacity change from 0 to 1024 [ 822.749788][T12965] EXT4-fs: Ignoring removed orlov option [ 822.822702][T12965] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 822.967578][ T30] audit: type=1800 audit(1755837457.441:332): pid=12965 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2467" name="bus" dev="loop2" ino=18 res=0 errno=0 [ 822.988665][ T30] audit: type=1804 audit(1755837457.441:333): pid=12965 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.2467" name="/newroot/92/bus/bus" dev="loop2" ino=18 res=1 errno=0 [ 823.581358][T12981] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2473'. [ 823.678398][T11705] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 824.126886][T12990] vlan2: left promiscuous mode [ 824.132252][T12990] veth0_virt_wifi: left promiscuous mode [ 825.236337][T13014] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2487'. [ 826.028323][T13027] netlink: 'syz.2.2493': attribute type 2 has an invalid length. [ 826.036443][T13027] netlink: 137592 bytes leftover after parsing attributes in process `syz.2.2493'. [ 827.217966][ T5823] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 827.238435][ T5823] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 827.268762][ T5823] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 827.302273][ T5823] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 827.330314][ T5823] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 827.603095][T13043] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2500'. [ 828.309047][T13039] chnl_net:caif_netlink_parms(): no params data found [ 828.640806][T13056] netlink: 'syz.0.2505': attribute type 2 has an invalid length. [ 828.648911][T13056] netlink: 137592 bytes leftover after parsing attributes in process `syz.0.2505'. [ 829.441133][ T5823] Bluetooth: hci5: command tx timeout [ 829.875924][T13039] bridge0: port 1(bridge_slave_0) entered blocking state [ 829.885426][T13039] bridge0: port 1(bridge_slave_0) entered disabled state [ 829.895038][T13039] bridge_slave_0: entered allmulticast mode [ 829.906253][T13039] bridge_slave_0: entered promiscuous mode [ 829.983231][T13039] bridge0: port 2(bridge_slave_1) entered blocking state [ 829.993993][T13039] bridge0: port 2(bridge_slave_1) entered disabled state [ 830.003727][T13039] bridge_slave_1: entered allmulticast mode [ 830.016512][T13039] bridge_slave_1: entered promiscuous mode [ 830.525411][ T3918] bond0 (unregistering): Released all slaves [ 830.545398][ T3918] bond1 (unregistering): Released all slaves [ 830.565657][ T3918] bond2 (unregistering): Released all slaves [ 830.586273][ T3918] bond3 (unregistering): Released all slaves [ 830.693439][T13075] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2511'. [ 830.826583][T13039] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 830.911009][T13039] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 831.150399][T13039] team0: Port device team_slave_0 added [ 831.217149][T13039] team0: Port device team_slave_1 added [ 831.225938][T13084] loop6: detected capacity change from 0 to 1024 [ 831.233421][ T30] audit: type=1326 audit(1755837465.691:334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13082 comm="syz.4.2516" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf705e539 code=0x0 [ 831.448979][T13039] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 831.456065][T13039] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 831.482431][T13039] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 831.498436][ T5823] Bluetooth: hci5: command tx timeout [ 831.646108][ T3918] hsr_slave_0: left promiscuous mode [ 831.670433][ T3918] hsr_slave_1: left promiscuous mode [ 832.085719][T13039] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 832.093884][T13039] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 832.121986][T13039] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 832.503791][ T8575] ===================================================== [ 832.511228][ T8575] BUG: KMSAN: uninit-value in hfsplus_cat_case_cmp_key+0xd9/0x190 [ 832.520234][ T8575] hfsplus_cat_case_cmp_key+0xd9/0x190 [ 832.526126][ T8575] hfs_find_rec_by_key+0xab/0x240 [ 832.531389][ T8575] __hfsplus_brec_find+0x274/0x840 [ 832.536661][ T8575] hfsplus_brec_find+0x4df/0x9f0 [ 832.541378][T13099] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2522'. [ 832.542325][ T8575] hfsplus_brec_read+0x46/0x1f0 [ 832.555715][ T8575] hfsplus_find_cat+0xb5/0x4f0 [ 832.561155][ T8575] hfsplus_cat_write_inode+0x2ca/0xe20 [ 832.566756][ T8575] hfsplus_write_inode+0x178/0x960 [ 832.572212][ T8575] __writeback_single_inode+0x88f/0x1190 [ 832.578060][ T8575] writeback_sb_inodes+0xac1/0x1cb0 [ 832.583380][ T8575] wb_writeback+0x4ce/0xc00 [ 832.588070][ T8575] wb_workfn+0x397/0x1910 [ 832.592544][ T8575] process_scheduled_works+0xb8e/0x1d80 [ 832.598325][ T8575] worker_thread+0xedf/0x1590 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 832.603149][ T8575] kthread+0xd59/0xf00 [ 832.607862][ T8575] ret_from_fork+0x1e3/0x310 [ 832.612575][ T8575] ret_from_fork_asm+0x1a/0x30 [ 832.618018][ T8575] [ 832.621293][ T8575] Uninit was created at: [ 832.625719][ T8575] __kmalloc_noprof+0x95f/0x1310 [ 832.632053][ T8575] hfsplus_find_init+0x90/0x1d0 [ 832.637069][ T8575] hfsplus_cat_write_inode+0x1a8/0xe20 [ 832.642914][ T8575] hfsplus_write_inode+0x178/0x960 [ 832.648261][ T8575] __writeback_single_inode+0x88f/0x1190 [ 832.654019][ T8575] writeback_sb_inodes+0xac1/0x1cb0 [ 832.659402][ T8575] wb_writeback+0x4ce/0xc00 [ 832.664015][ T8575] wb_workfn+0x397/0x1910 [ 832.668558][ T8575] process_scheduled_works+0xb8e/0x1d80 [ 832.674269][ T8575] worker_thread+0xedf/0x1590 [ 832.679193][ T8575] kthread+0xd59/0xf00 [ 832.683379][ T8575] ret_from_fork+0x1e3/0x310 [ 832.688245][ T8575] ret_from_fork_asm+0x1a/0x30 [ 832.693166][ T8575] [ 832.695557][ T8575] CPU: 0 UID: 0 PID: 8575 Comm: kworker/u8:5 Not tainted syzkaller #0 PREEMPT(none) [ 832.705377][ T8575] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 832.715614][ T8575] Workqueue: writeback wb_workfn (flush-7:6) [ 832.722842][ T8575] ===================================================== [ 832.730356][ T8575] Disabling lock debugging due to kernel taint [ 832.736592][ T8575] Kernel panic - not syncing: kmsan.panic set ... [ 832.743115][ T8575] CPU: 0 UID: 0 PID: 8575 Comm: kworker/u8:5 Tainted: G B syzkaller #0 PREEMPT(none) [ 832.754294][ T8575] Tainted: [B]=BAD_PAGE [ 832.758513][ T8575] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 832.768679][ T8575] Workqueue: writeback wb_workfn (flush-7:6) [ 832.774881][ T8575] Call Trace: [ 832.778233][ T8575] [ 832.781238][ T8575] __dump_stack+0x26/0x30 [ 832.785718][ T8575] dump_stack_lvl+0x53/0x270 [ 832.790465][ T8575] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 832.796436][ T8575] dump_stack+0x1e/0x25 [ 832.800743][ T8575] vpanic+0x361/0xc50 [ 832.804909][ T8575] panic+0x15d/0x160 [ 832.808996][ T8575] kmsan_report+0x31c/0x320 [ 832.813652][ T8575] ? __msan_warning+0x1b/0x30 [ 832.818451][ T8575] ? hfsplus_cat_case_cmp_key+0xd9/0x190 [ 832.824242][ T8575] ? hfs_find_rec_by_key+0xab/0x240 [ 832.829611][ T8575] ? __hfsplus_brec_find+0x274/0x840 [ 832.835063][ T8575] ? hfsplus_brec_find+0x4df/0x9f0 [ 832.840351][ T8575] ? hfsplus_brec_read+0x46/0x1f0 [ 832.845544][ T8575] ? hfsplus_find_cat+0xb5/0x4f0 [ 832.850623][ T8575] ? hfsplus_cat_write_inode+0x2ca/0xe20 [ 832.856484][ T8575] ? hfsplus_write_inode+0x178/0x960 [ 832.861896][ T8575] ? __writeback_single_inode+0x88f/0x1190 [ 832.867844][ T8575] ? writeback_sb_inodes+0xac1/0x1cb0 [ 832.873347][ T8575] ? wb_writeback+0x4ce/0xc00 [ 832.878141][ T8575] ? wb_workfn+0x397/0x1910 [ 832.882800][ T8575] ? process_scheduled_works+0xb8e/0x1d80 [ 832.888689][ T8575] ? worker_thread+0xedf/0x1590 [ 832.893698][ T8575] ? kthread+0xd59/0xf00 [ 832.898064][ T8575] ? ret_from_fork+0x1e3/0x310 [ 832.902942][ T8575] ? ret_from_fork_asm+0x1a/0x30 [ 832.908034][ T8575] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 832.913992][ T8575] ? kmsan_get_metadata+0xfb/0x160 [ 832.919249][ T8575] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 832.925205][ T8575] ? kmsan_get_metadata+0xfb/0x160 [ 832.930445][ T8575] ? kmsan_internal_memmove_metadata+0x91/0x230 [ 832.936823][ T8575] ? kmsan_get_metadata+0xfb/0x160 [ 832.942056][ T8575] ? kmsan_internal_memmove_metadata+0x91/0x230 [ 832.948422][ T8575] ? kmsan_get_metadata+0xfb/0x160 [ 832.953662][ T8575] __msan_warning+0x1b/0x30 [ 832.958268][ T8575] hfsplus_cat_case_cmp_key+0xd9/0x190 [ 832.963876][ T8575] hfs_find_rec_by_key+0xab/0x240 [ 832.969055][ T8575] ? __pfx_hfsplus_cat_case_cmp_key+0x10/0x10 [ 832.975269][ T8575] __hfsplus_brec_find+0x274/0x840 [ 832.980537][ T8575] ? __pfx_hfs_find_rec_by_key+0x10/0x10 [ 832.986344][ T8575] hfsplus_brec_find+0x4df/0x9f0 [ 832.991427][ T8575] ? __pfx_hfs_find_rec_by_key+0x10/0x10 [ 832.997254][ T8575] hfsplus_brec_read+0x46/0x1f0 [ 833.002255][ T8575] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 833.008203][ T8575] hfsplus_find_cat+0xb5/0x4f0 [ 833.013094][ T8575] ? kmsan_get_metadata+0xfb/0x160 [ 833.018336][ T8575] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 833.024280][ T8575] ? should_fail_ex+0x45/0x8a0 [ 833.029184][ T8575] ? kmsan_get_metadata+0xfb/0x160 [ 833.034412][ T8575] ? kmsan_get_metadata+0xfb/0x160 [ 833.039648][ T8575] ? kmsan_internal_set_shadow_origin+0x79/0x110 [ 833.046099][ T8575] ? kmsan_get_metadata+0xfb/0x160 [ 833.051339][ T8575] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 833.057284][ T8575] ? kmsan_get_metadata+0xfb/0x160 [ 833.062521][ T8575] ? kmsan_internal_set_shadow_origin+0x79/0x110 [ 833.068968][ T8575] ? kmsan_internal_unpoison_memory+0x14/0x20 [ 833.075207][ T8575] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 833.081148][ T8575] ? kmsan_get_metadata+0xfb/0x160 [ 833.086384][ T8575] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 833.092328][ T8575] hfsplus_cat_write_inode+0x2ca/0xe20 [ 833.097919][ T8575] ? kmsan_internal_unpoison_memory+0x14/0x20 [ 833.104168][ T8575] ? _raw_spin_unlock+0x30/0x50 [ 833.109131][ T8575] ? kmsan_get_metadata+0xfb/0x160 [ 833.114368][ T8575] ? kmsan_get_shadow_origin_ptr+0x35/0xb0 [ 833.120307][ T8575] ? kmsan_get_metadata+0xfb/0x160 [ 833.125544][ T8575] ? kmsan_internal_set_shadow_origin+0x79/0x110 [ 833.131999][ T8575] ? kmsan_internal_unpoison_memory+0x14/0x20 [ 833.138243][ T8575] ? kmsan_get_metadata+0xfb/0x160 [ 833.143482][ T8575] ? kmsan_internal_set_shadow_origin+0x79/0x110 [ 833.149930][ T8575] ? kmsan_internal_unpoison_memory+0x14/0x20 [ 833.156171][ T8575] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 833.162140][ T8575] hfsplus_write_inode+0x178/0x960 [ 833.167362][ T8575] ? kmsan_internal_set_shadow_origin+0x79/0x110 [ 833.173806][ T8575] ? kmsan_get_metadata+0xfb/0x160 [ 833.179040][ T8575] ? kmsan_get_metadata+0xfb/0x160 [ 833.184280][ T8575] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 833.190213][ T8575] ? __pfx_hfsplus_write_inode+0x10/0x10 [ 833.195965][ T8575] ? __pfx_hfsplus_write_inode+0x10/0x10 [ 833.201712][ T8575] __writeback_single_inode+0x88f/0x1190 [ 833.207490][ T8575] writeback_sb_inodes+0xac1/0x1cb0 [ 833.212925][ T8575] wb_writeback+0x4ce/0xc00 [ 833.217553][ T8575] ? queue_io+0x461/0x790 [ 833.222003][ T8575] wb_workfn+0x397/0x1910 [ 833.226482][ T8575] ? kmsan_get_metadata+0xfb/0x160 [ 833.231736][ T8575] ? __pfx_wb_workfn+0x10/0x10 [ 833.236640][ T8575] process_scheduled_works+0xb8e/0x1d80 [ 833.242386][ T8575] worker_thread+0xedf/0x1590 [ 833.247244][ T8575] kthread+0xd59/0xf00 [ 833.251419][ T8575] ? __pfx_worker_thread+0x10/0x10 [ 833.256691][ T8575] ? __pfx_kthread+0x10/0x10 [ 833.261388][ T8575] ret_from_fork+0x1e3/0x310 [ 833.266089][ T8575] ? __pfx_kthread+0x10/0x10 [ 833.270791][ T8575] ret_from_fork_asm+0x1a/0x30 [ 833.275722][ T8575] [ 833.279069][ T8575] Kernel Offset: disabled [ 833.283430][ T8575] Rebooting in 86400 seconds..