last executing test programs: 14m56.159715825s ago: executing program 0 (id=1): socket$isdn_base(0x22, 0x3, 0x0) syz_emit_ethernet(0x76, &(0x7f00000002c0)=ANY=[@ANYBLOB], 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) r0 = socket(0x10, 0x3, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'lo\x00'}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={0x0}}, 0x44080) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newqdisc={0x4c, 0x24, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c}}]}, 0x4c}}, 0x0) 14m55.233479373s ago: executing program 0 (id=7): syz_emit_ethernet(0x3e, &(0x7f0000000000)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @loopback, @loopback}}}}}}, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='veth1_virt_wifi\x00', 0x10) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f0000000240)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0xffffffffffffff6b, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x48) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f0000000180)=@raw={'raw\x00', 0x4001, 0x3, 0x258, 0x120, 0xb, 0x148, 0x0, 0x148, 0x1f8, 0x230, 0x242, 0x1f8, 0x215, 0x3, 0x0, {[{{@ip={@local, @remote, 0x0, 0x0, 'batadv_slave_0\x00', 'macvtap0\x00', {0x7f}, {}, 0x73, 0x0, 0x70}, 0x0, 0xa0, 0xe8, 0x0, {0xff0f000000000000}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x0, 0x0, 0x8}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x4e, 0x6, 0x5eef6840, 'syz0\x00', {0xb}}}}, {{@uncond, 0xec010000, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x4, 0xffffffff, 0x101, 'pptp\x00', 'syz1\x00', {0x333}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2b8) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x2, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r3, 0x0, 0x40040) socket$nl_route(0x10, 0x3, 0x0) 14m53.583937805s ago: executing program 0 (id=9): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000180)=@newqdisc={0x6c, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x3c, 0x2, {{0x8, 0x1000, 0x1, 0x9, 0xff, 0x3}, [@TCA_NETEM_RATE={0x14, 0x6, {0x3, 0x8, 0x6, 0x9046}}, @TCA_NETEM_RATE64={0xc, 0x8, 0xdb7b2e35abe274a3}]}}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4000040}, 0x24044092) 14m52.92660033s ago: executing program 0 (id=10): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=@newlink={0x50, 0x10, 0x1, 0x70bd28, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2974, 0x48056}, [@IFLA_IFNAME={0x14, 0x3, 'netdevsim0\x00'}, @IFLA_VFINFO_LIST={0x14, 0x16, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@IFLA_VF_TRUST={0xc, 0x9, {0x9, 0x3}}]}]}, @IFLA_MASTER={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x1}, 0x200088c4) 14m52.175799554s ago: executing program 0 (id=16): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x4, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c045942824251d7d17b5191584bcd4fbe40a23424d", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x8, 0x0, 0x0, 0x41100}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) recvmmsg(r0, &(0x7f000000be00)=[{{0x0, 0x0, &(0x7f0000002880)=[{&(0x7f00000006c0)=""/4096, 0x1000}], 0x1}, 0x10001}], 0x1, 0x40000000, 0x0) 14m50.583665868s ago: executing program 0 (id=23): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3000004, 0x3032, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0xedc623580215bdcd, 0x12, r0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@func_proto={0x0, 0x0, 0x0, 0xd, 0xa}]}}, &(0x7f0000000f40)=""/4089, 0x26, 0xff9, 0x1}, 0x28) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r1) sendmsg$NL80211_CMD_SET_CQM(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)={0x38, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_CQM={0x1c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x4}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x63}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x4a8}]}]}, 0x38}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000540)={0x38, 0x1403, 0x1, 0x70bd2d, 0x0, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'batadv0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x854}, 0x20000040) 14m35.37029098s ago: executing program 32 (id=23): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3000004, 0x3032, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0xedc623580215bdcd, 0x12, r0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@func_proto={0x0, 0x0, 0x0, 0xd, 0xa}]}}, &(0x7f0000000f40)=""/4089, 0x26, 0xff9, 0x1}, 0x28) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r1) sendmsg$NL80211_CMD_SET_CQM(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)={0x38, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_CQM={0x1c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x4}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x63}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x4a8}]}]}, 0x38}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000540)={0x38, 0x1403, 0x1, 0x70bd2d, 0x0, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'batadv0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x854}, 0x20000040) 10m6.502752861s ago: executing program 4 (id=1401): socket(0x2b, 0x1, 0x1) r0 = syz_genetlink_get_family_id$fou(&(0x7f0000000140), 0xffffffffffffffff) unshare(0x2020400) bind$x25(0xffffffffffffffff, 0x0, 0x0) sendmsg$FOU_CMD_GET(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000180)={0x1c, r0, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@FOU_ATTR_PORT={0x6, 0x1, 0x4e20}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x2400c800) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r2, &(0x7f0000000240)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)=ANY=[@ANYBLOB, @ANYRES16=r1, @ANYBLOB='\b\x00\x00\x00\x00\x00\x00', @ANYRES8=r1, @ANYRES16=r1], 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x4000020) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000100)={'wpan0\x00', 0x0}) r5 = syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/net\x00') sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010c25bd7000ffdbdf251400000008001d00", @ANYRES32=r5, @ANYBLOB="08000300", @ANYRES32=r4], 0x24}, 0x1, 0x0, 0x0, 0x20040801}, 0x20000004) 10m4.966175548s ago: executing program 4 (id=1405): socketpair$unix(0x1, 0x2, 0x0, 0x0) bind$unix(0xffffffffffffffff, &(0x7f0000000c40)=@abs={0x1}, 0x6e) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x1}, 0x6e) socket$nl_route(0x10, 0x3, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cpuacct.usage_user\x00', 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x38, '\x00', 0x0, 0x0, r0}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r1, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r1, 0x0, 0x0}, 0x10) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r2, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_VIF(r2, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = socket$igmp(0x2, 0x3, 0x2) syz_mount_image$udf(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x400, &(0x7f0000001500)=ANY=[@ANYBLOB='nostrict,umask=00000000000000000000010,unhide,longad,utf8,lastblock=00000000000000002304,anchor=18446744073709551615,gid=', @ANYRESDEC=0x0, @ANYRES64=0x0, @ANYBLOB="c97001abf7577b7e", @ANYBLOB="2c66fefb470f721c43121ffc27a11d06c5e375d3b012410fe2f581d9ab30ed7131b91b6b0f1e794ab538fc85c0e03ce4f240db8fb4df78f32f2a76bc249b005c9bf5f55e1b49ee2da6f492d1ce0125c401c16ee7b7a157a4953c188c2bec6580362f7990f88bb2a8bd1317c025029c13b5271b580b16cf04ff7dd9e16ff2dcee46633afb43c98a675be2f2b4d9ae978a89c2754836e7af8d9a55309f8c0000", @ANYRES8, @ANYBLOB="2cc30c26652e1807e34d433353a73fa54323002e05", @ANYBLOB="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", @ANYRESOCT], 0x5, 0xc29, &(0x7f00000008c0)="$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") chmod(0x0, 0x0) r5 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) getsockopt$bt_rfcomm_RFCOMM_LM(r5, 0x12, 0x3, 0x0, 0x0) r6 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, 0x0, 0x0) write(r6, 0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f00000076c0)={0x2020}, 0x2020) setsockopt$MRT_ADD_VIF(r4, 0x0, 0xca, &(0x7f00000000c0)={0x8, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) setsockopt$inet_mreq(r3, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x3e, &(0x7f0000000240)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x80, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @dest_unreach={0x3, 0x7, 0x0, 0x0, 0x3, 0xc58, {0x5, 0x4, 0x0, 0x7, 0x0, 0x65, 0xe, 0x4e, 0x24, 0xc, @empty, @dev={0xac, 0x14, 0x14, 0x44}}}}}}}, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000002380)='net/ip_mr_cache\x00') pread64(r7, &(0x7f0000000100)=""/253, 0xfd, 0x1) 10m3.927124695s ago: executing program 4 (id=1411): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x50) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x18, 0x1c, &(0x7f0000000500)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x100b0}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x6, 0x0, 0xb, 0x9, 0x0, 0x0, 0x4000}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0xa0}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x7, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000001140)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) 10m3.50393077s ago: executing program 4 (id=1415): socket(0x2b, 0x1, 0x1) r0 = syz_genetlink_get_family_id$fou(&(0x7f0000000140), 0xffffffffffffffff) unshare(0x2020400) bind$x25(0xffffffffffffffff, 0x0, 0x0) sendmsg$FOU_CMD_GET(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000180)={0x1c, r0, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@FOU_ATTR_PORT={0x6, 0x1, 0x4e20}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x2400c800) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r2, &(0x7f0000000240)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)=ANY=[@ANYBLOB, @ANYRES16=r1, @ANYBLOB='\b\x00\x00\x00\x00\x00\x00', @ANYRES8=r1, @ANYRES16=r1], 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x4000020) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000100)={'wpan0\x00', 0x0}) r5 = syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/net\x00') sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010c25bd7000ffdbdf251400000008001d00", @ANYRES32=r5, @ANYBLOB="08000300", @ANYRES32=r4], 0x24}, 0x1, 0x0, 0x0, 0x20040801}, 0x20000004) 10m1.351610282s ago: executing program 4 (id=1419): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b00)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb, 0x0, &(0x7f0000000000)="259a53f271a76d2673004c", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r1, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4) readv(r1, &(0x7f00000006c0)=[{&(0x7f00000004c0)=""/217, 0xd9}], 0x1) 10m0.276260682s ago: executing program 4 (id=1423): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_GUEST_MEMFD(r1, 0xc040aed4, &(0x7f00000001c0)={0x1000200001ee0000, 0x3}) mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000500)=0x7) io_setup(0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x19, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r3, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x6, 0x0, 0x8100, 0x0, {0xc3}, {}, {0xe, 0xd}}, [@TCA_RATE={0x6}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x4c014) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) syz_open_dev$vim2m(0x0, 0x47b, 0x2) syz_usb_connect(0x0, 0x24, &(0x7f0000001040)=ANY=[@ANYBLOB="1201000040154220a9055015bbe4010203010902120001000000000904"], 0x0) r5 = syz_usb_connect$hid(0x2, 0x0, 0x0, 0x0) syz_usb_control_io$hid(r5, 0x0, 0x0) 9m56.672556935s ago: executing program 1 (id=1430): syz_mount_image$xfs(&(0x7f0000009700), &(0x7f0000009740)='./file0\x00', 0xa00086, &(0x7f0000009780), 0x1, 0x9759, &(0x7f000001c600)="$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") setxattr$trusted_overlay_upper(&(0x7f0000000380)='./file1\x00', &(0x7f00000001c0), &(0x7f0000001400)=ANY=[], 0x835, 0x0) lsetxattr$trusted_overlay_upper(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000180), &(0x7f0000000840)=ANY=[], 0x361, 0x0) 9m52.050829976s ago: executing program 1 (id=1435): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a6c000000060a010400000000000000000200ffff400005803c0001800e000100696d6d6564696174650000002800028008000140000000001c000280180002800900020073797a320000000008000180fffffffd0900010073797a30000000000900020073797a320000000014000000110001"], 0x94}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000050a0900000000000000001d020000000900010073797a30000000000900030073797a32"], 0x54}}, 0x0) 9m51.793513807s ago: executing program 1 (id=1436): socketpair$unix(0x1, 0x2, 0x0, 0x0) bind$unix(0xffffffffffffffff, &(0x7f0000000c40)=@abs={0x1}, 0x6e) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x1}, 0x6e) socket$nl_route(0x10, 0x3, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cpuacct.usage_user\x00', 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x38, '\x00', 0x0, 0x0, r0}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r1, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r1, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r2, 0x0, 0xc8, 0x0, 0x0) setsockopt$MRT_ADD_VIF(r2, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = socket$igmp(0x2, 0x3, 0x2) syz_mount_image$udf(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x400, &(0x7f0000001500)=ANY=[@ANYBLOB='nostrict,umask=00000000000000000000010,unhide,longad,utf8,lastblock=00000000000000002304,anchor=18446744073709551615,gid=', @ANYRESDEC=0x0, @ANYRES64=0x0, @ANYBLOB="c97001abf7577b7e", @ANYBLOB="2c66fefb470f721c43121ffc27a11d06c5e375d3b012410fe2f581d9ab30ed7131b91b6b0f1e794ab538fc85c0e03ce4f240db8fb4df78f32f2a76bc249b005c9bf5f55e1b49ee2da6f492d1ce0125c401c16ee7b7a157a4953c188c2bec6580362f7990f88bb2a8bd1317c025029c13b5271b580b16cf04ff7dd9e16ff2dcee46633afb43c98a675be2f2b4d9ae978a89c2754836e7af8d9a55309f8c0000", @ANYRES8, @ANYBLOB="2cc30c26652e1807e34d433353a73fa54323002e05", @ANYBLOB="c52c8f9a55aa3736bd172c5b62aa85ebfda3c008554f727c6e204081a0c60e297c2a6ad903339407eb100e3a0a0fa4eaa2d59d6c1f88b8ad2bee0062ebad86e033ed189ab1145ca79c5e6d1df61dc04a207f379cb92aed9753e6c7ca0308c35422fcb3da22604996b163a7995d057b64d452d378a1b9b37c1155752acc06030d609c91677756a6f4a0b4e7b17cdc157d178a8af4c3091bb4dd4d9daa51472b4e2a618341e5d2a87fb097ce92bbe9ab11ecc97fc04cb6546ffb81fedab72faa9393bcc7bfcc4656b28fc924a69277f264bb560db8e22f5902340fcc460628cb1c806d8bdd9d886efa0483ceecde2c8076eae37d876f4728564f5ec7cd51cd98e12acbd48976bc942fe2462868c6a128073d41dce3be4131865867a73872643581cdc60ff93b2cd1b2b4e1d01aa2f6aaa6b54b98e6f19879deb0c0b656202e686baa8ac95629eba62be09c9f3fc6a58497270a96c8df278f1ccbed0515828a2760a6cc471860f78e1af7785ac4f8d55819e6b7d0dc77bec4141872d36e2face94b8ad69693c24b5a169a8662607b787a2627c0f5f694fc438a2bb9a34d0a019342b38fd194c043d6e0c489cc6ddfeaf72b3604edbc12fc0a4f6f691a7e9d70b25081df6f277b24fb3bf31164c356c8e6862dbdc770e7ee9f90b8ba92694e108e12f2e6c9d56887bea402e92f6c86ea02f4e2d3330984ba3c76303f7e11f16d747d8ab2afdc721403663d7038d0fd093ae1cf02a8bba048680512d5f841912f91d303c35c9304c6a0daa127f66efc46b3eb18de2ca0d68e0d40e3d37d297bd6a6766a4d69a3b4a12159dea0f078bceab79914b41d5fa71eb227fb7837e75dec2b49c3b6a4ec72165e4d34f84968bf0776250366d49d67d274fd3b38fafb8b07fed4435091d3100bc5b02426acde7dd3978c202743b61b7bf885049ae94d0e0159ae133f5ba60af0a4dfe999d69a6acb4cb3c2ea2c8abeaedb2ac68c54cf75a23e1a27e9de0f1c5c92bbb31603788418d487a3555711e12ea00d90683b31c959d64623be243fc78de33f44a06b0e45638da69d7dda8dde833b9cf19f9480b3b2392c55661419db2c3aed0efed139fb9c7f61460972fb93c784fee73c4bf000a79dce9e96c17402f7faf7ce367c8ab983944c2a107c3ec35ec8d4e96e6efd96c8623358a3bcca29448811c3b2bf5c55fb4d9059e8d4d9eaddf771b8a66d424655cce165e93e941b3b4e956d23e1fd8986f3688aa09a632da49cb6b4db30bbcdf48844eb12600fca388528df0b529df135aeb420db37826c8aea7570db7ccd0ce63f4216ea7d6ca1c1a6d922a3daaff3929881b8aa073bce9a0d70cdefae5825912bf37f09038c824cc8d3a321514da4cebc25d1f7c555cde170aa2e878432246d645f5e39e91a5d3c443b93f3c9b7aa447ffd0718b5b93b0a180ff9e8ed7510d9a541356e119bd1b564ff25be0c736babdd6f3142232715e67ca957297d6ea9aeed0041b631ee1f8e02780f4c00a1b9e62eca8b6506a963a287b2b2619fca9b48968733f4e6e4c58103cabd19daf4e799bc45068cad418565bbb85041c3b0c9ca79d74308c547eeee4335e1f1776a4b81379be40da4dfdd8441616b6565722c1a59f72be7349e29ce7e3edeab492d0180dfa02318b3369dd77968fb5c34cd7398ab18018a7fec238ee3c815615439b8c47f53f63449258b54e9a252598b389c1edc5c375d967a522ce7416816586e609bb72e5a54a66b5ef64a040c9d1ddc54a3a3007662cbd561929295d1db650206bcfa8586a1ef049556c249d57c40d8b904f2933c63bec0a9e0ea02a9d08257405d8c672c62f9cf49addf2a8c798e8216aac5055810523f83a7a22fbf5aa101877e35915698c8131cc09c93e14b7ec9fb8f2d5189b0a4cd3747e1cc521d70e52e29ee34040d81c567011df56a51998ea720c612ac1ba5896ebf52cab6217bbf4d482cc0e1b504580e72ec2b722de27712e950d531a681a7d6d77b1097e8f01ef6c1678407a726f7fdf1a268ac4ca8e0f664b33844dfe2dc7b26e83d1abbb98ac9c0280500d5646ac91bff9c6f83a39a8f84a6e53c34c86461daea56c5335714be908667fcd1c0c41eeee39c1d99d22563e8e0a341ba6471a4e41f290f5e3a0f120257c3dcaee4375f4b0802704ea872e845fe106f040e91c63c2fe4edb02c346a5185ab3d449f8d5ab750b7f25728a7e96c500c712fee7c1c1280834cddc63350d2cf97fd1d662021f452d0b7448cc66febdd94ca3fb3254f61fb2f86aa03290e7a8d356a3f69e0d85056dbb4409380bed36a24a316a8537acb0043b377c5053a858ff755d042ba6feb68a9f4348f246d3b496d7613a424e711eafc7772ce9b5d40b4dc3b384fe5495e8a2e7136b38c668d489a78ee8bec7901bc5f8187419079b3aab9c5f121674137de387fde6c825442976c0ec51d52580d51e18ee6eeef1cc61f8bf2e113a6e8a23b55bc2ba5832f1887b24f3070ea929d2dc24866c6d3a5428903bbf4f102481e4d1b86442caea7be1a584d5b9a08c543141e64c48860376899f545b82a9ae5afde813e78e8c95247aebd08d4bff1b942f8b8ce4ac58943a19baa61189b4d7367168c2069ba1ad6f3d346fac9f3c7b3b38a24ab1c4693826a706336ba44487b11abd1acc783bc2e010dca9829ff13c1c252ffab3797d4dd4b3b96869ce6f1005af68dbd41f9dbaf008ae707a80fc662111b2803953616a3a3cca0063f26c0e483a5cb48f63cca2b8a923e8cdf05872c2b2add4be11be1b655c14ca7fab3f3ed96f626b11b16e9b03fc557d46a7a90279301955afa9db9cb81027922121e2cc54538c30e705d00d96c9b51317489ea7d64b3d23dad499c45979c8f5975286edb3506da0ef047bd38597bcee39dd06d28305b68d63fcef66ed0c31b2eb1c56424c5e084a1085f17e4de4dd6290e1d8b74cf06a3b5958da659d9afab8fc998dde09cdf1551a07028722344dc65c6894031929026eb5b79cc1d2db7aff4df005313bbb6fa72548f2fd8817be068444b0b84aaf69882d9fbed0eb3ac4a0f37b65aca117a4457d4df81402e57acc67419020381dd436b84744aae7f9788056dc831bbb5e2d26d905ca602803797dfb9647522e0b22b764b204a44b9bffd7df6c0ded78206df1dde62d9b5217a6462504d2ebeeedaaa9d7721506e3f371b271725ea7b8f3df5c9e91f0af414ee798cc636053db041b036dd0cba418d49d6898159d24808922409f039b0298d31157de561a16f989487625080c070e21241bf040511a40769da4642c12339063cd1e14b041e7175a66e6a8ff77cdd04693fb73db4062eb024c2cf5a19bdbfe18bfedc00b32b7b0d5f277c1874156bfc27ffd157c8d15e7fae166a1809208a3786050a8fe7c69728da1abffab4c7977276c09892de30bb622c35106aa24e35bc71b51fce29709dc3ca498e1c5d2222dbd9b9c562c28c6a1a0dfeac259f4b3e82c69251f9357be445d98eefb423df1073e46d512401df87cdb25ff2f9074e4b528358267d0981a02982b216b5b24024f0b8000149424e88b47b97eb9753d050f9273fc337de87fc96b8408b0000c2aec1b5f4b8b3861b88e27c89a672a73845d4cbd6b68f0985fd73e6de0625d2f005eadad91030d84f3866be46a3783931003639e7ab3a942ca5a69cc3d5e4fc8da43b7f5ee4ff78ca63a939b5dfc790d0e979559bb44028326be182627018f75e545c70e474046e8f6081e86e18c4d6ad6fe7ca0a9da1c4f102bae78456390e78f04e52b5b7d0f30b8c77ac7b221f1199a5e448a0ceb61d5300c106e1ca9e11fc27e567007eb7ab090c7cd91beafe45d04667b83f7f4ea2f31efa40f95a26f1bc79f631ba71524d49379a404be27ee3fc608b534cb29c2f868a7d653538eee71502f89c9290dcd7d4931b6ed987f537f36e7c9d7e751a4b46cf66f8e61b60e20250e8812dad8c689a3cdf6825d1e7a60242e55894ad1c29a9fc3b0ef3d4c7bdecf105d148cc776de008045204bc68ff8711804f3d2a5e5e963d12105cbdc4c9a870385161ffd12510bce29c66adf5eef1a293b50c241a04b57aa4596f93eb82d25e3250df1d0d13713afe068c53aac920ec8572edcad6a5de27f5094abe9885469082288a0ea3b369f86b942dc7185c477e2c203401bcef658133e6160b1a9bef9d0e2400de82bc4c032584d53ce45bd0ddb2e4430032e327166ca356345e14b1cc6e67899647200073cd11aa1164467cf3fffb3c495919e47212b4004697457a6fd64becde91cdebe8b6b2769fda3c1dd273adbb60b94c74985d64fdf6e5185ace483562e037a7b660dd64a50cbaac2084167ad327e2084cdf166d57d9f5c6b7752653a9b9affcb077ae9a01ecdc15093e745ef7c5d6f90e0a8ab768b96fa92478c98050866cace74bb9aafcf3119519a198771598de5821a675232766adb79db257876ec0ab368d98f62e00e23a24c8a62908066e269311e420dc0db1259acf0bc65f821ea225de44e63cacc2f8c9867dc969d4c5a3d0590f942f6a11c4a50183fe8a04337986520ebae8c5de9beb8569f3a9d94106b4282e8688f5ee3343b02c4d9758486fc143a8fedabb1a0b0c84989678052b5b3922ba5a5167e320dc36ca46b5b30d3d64a55c1f8dd71f5830ea5fb87719a2fce4ceadef987d15b1d763023a732c730cc259f172794efc3cb55fc18787b5b1832bc5b0a0d6bfcbfe762516b5d0ec25742c40e7206250d6bdf12742c9730646e935862edde3d3efd4f21801db07efd49daa8c2978643e5ef16317a01548f66bd2b27c4d439fc55dd513e50223c624a1007895000f9bf50f0db0fa820bec348be95432c8a6e903c8a02615ce7772d57edc069b1536249976b0adab4f5b0389e17d3862f05542fa708ca03abecf2b69a5eab38d3cabfadc5f00b54794390bae1f382f00f7682a7bb1616d49b7b9d2c6e75578ef263412db9fb7542f359e3b612eed4ee938b1499854a0519c06c12087a8dfc4318e4f87197f40675b62ea7ab66ffca2e6d8433699f1bb48cef984b8559c5f49e8f331c4d5627181b416e67e745e5633d9c594c8aead11ed81cd28101efdd2839e92c24be823117a6a2512f21a453e599e529b20a8e81c3761fd8eb5529714d41d3de15383ae2cf2c48baf9767a8211243ea8d755b23774b3260d678292e12881259b2e8ac8009f697fc7df6ed07aa4d58ac6e6775ead5c42621d6b5a5e3879acbe163a8d6dfdda9648a2c6f38ab77ea1026cc9fde091fd42575d0ac89f58e64841b9b51360b06a642d335e4c348fe0b5a0260d36189179d689e1ba7cb5a55c5c7f625690db6d6291472c0bf41ec7a665c0f0242c401398760f595215a0454cb93cf755e0c911e26ce667096e52a7938d4c5beba99de2542eb59edefae2ff54fb1a0c1091435dc41b1c2a35dfa5c5087776e7b26b208a521ae02ae3fc6e4209adcd8a050e3b9b9958617462d3b7936f53ef8e42a2f08ff4745b1dac5ff57aae4b6bedf7340001807971975a8574e7ce2810cd65f69348590f5ffffdc0a746b7b03b563db7297d8d70cb9e78c2aac59d838b32f71b3aaf72e0d4dcc691c6233ea34780ebf3e32dcfd06ef94dcfc8e190ec9a9c53698abd2f6ab40911c44d5560414898b0afecf6c36753abdc6175ba80ab2c8bb61ae0c1eeba866995a86c4c0940c699d55e26e3a1120748a5032b5af888e6ee02832addcebf88ce5953e1df3167b93349cb875aee5d6bbf81e02d73cb7bce8126fce983159e49e91d93ccfde06747fc09a199a946cd624649c0e", @ANYRESOCT], 0x5, 0xc29, &(0x7f00000008c0)="$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") chmod(0x0, 0x0) r5 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) getsockopt$bt_rfcomm_RFCOMM_LM(r5, 0x12, 0x3, 0x0, 0x0) r6 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, 0x0, 0x0) write(r6, 0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f00000076c0)={0x2020}, 0x2020) setsockopt$MRT_ADD_VIF(r4, 0x0, 0xca, &(0x7f00000000c0)={0x8, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) setsockopt$inet_mreq(r3, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x3e, &(0x7f0000000240)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x80, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @dest_unreach={0x3, 0x7, 0x0, 0x0, 0x3, 0xc58, {0x5, 0x4, 0x0, 0x7, 0x0, 0x65, 0xe, 0x4e, 0x24, 0xc, @empty, @dev={0xac, 0x14, 0x14, 0x44}}}}}}}, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000002380)='net/ip_mr_cache\x00') pread64(r7, &(0x7f0000000100)=""/253, 0xfd, 0x1) 9m50.340505749s ago: executing program 1 (id=1440): pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, 0x0) write$tun(r0, &(0x7f0000000440)={@val={0x70}, @void, @eth={@broadcast, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x2f, 0x0, @rand_addr=0x64010101, @multicast1}, {0x0, 0x6558, 0x18, 0x0, @wg=@data={0x4, 0x0, 0xffffdd86}}}}}}}, 0x3e) 9m48.550714665s ago: executing program 1 (id=1443): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 9m47.916319321s ago: executing program 1 (id=1447): socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) bind$xdp(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$kcm(0x29, 0x5, 0x0) sendmsg(r2, &(0x7f0000003680)={0x0, 0x0, &(0x7f0000003140)}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000004700)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r5, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000780)={0x20, r6, 0x405, 0x70bd27, 0x25dfdbff, {}, [{{0x8, 0x1, r7}, {0x4}}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000401}, 0x44094) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'macvlan1\x00'}) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_mreq(r8, 0x29, 0x1b, &(0x7f0000000140)={@remote}, 0x14) r9 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r9, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0x0, 0x2, 0xffffffff, 0x3, 0x22}, 0x7}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) socket(0x840000000002, 0x3, 0xff) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14, 0x10, 0x4}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSETELEM={0x80, 0xc, 0xa, 0x301, 0x0, 0x0, {0x7, 0x0, 0x9}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x60, 0x3, 0x0, 0x1, [{0x5c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPRESSIONS={0x50, 0xb, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @quota={{0xa}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_QUOTA_BYTES={0xc}]}}}, {0x2c, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_LIMIT_UNIT={0xc}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x3}]}}}]}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xc8}}, 0x0) 9m42.325692285s ago: executing program 33 (id=1423): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_GUEST_MEMFD(r1, 0xc040aed4, &(0x7f00000001c0)={0x1000200001ee0000, 0x3}) mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000500)=0x7) io_setup(0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x19, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r3, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x6, 0x0, 0x8100, 0x0, {0xc3}, {}, {0xe, 0xd}}, [@TCA_RATE={0x6}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x4c014) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) syz_open_dev$vim2m(0x0, 0x47b, 0x2) syz_usb_connect(0x0, 0x24, &(0x7f0000001040)=ANY=[@ANYBLOB="1201000040154220a9055015bbe4010203010902120001000000000904"], 0x0) r5 = syz_usb_connect$hid(0x2, 0x0, 0x0, 0x0) syz_usb_control_io$hid(r5, 0x0, 0x0) 9m32.376647241s ago: executing program 34 (id=1447): socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) bind$xdp(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$kcm(0x29, 0x5, 0x0) sendmsg(r2, &(0x7f0000003680)={0x0, 0x0, &(0x7f0000003140)}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000004700)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r5, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000780)={0x20, r6, 0x405, 0x70bd27, 0x25dfdbff, {}, [{{0x8, 0x1, r7}, {0x4}}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000401}, 0x44094) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'macvlan1\x00'}) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_mreq(r8, 0x29, 0x1b, &(0x7f0000000140)={@remote}, 0x14) r9 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r9, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0x0, 0x2, 0xffffffff, 0x3, 0x22}, 0x7}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) socket(0x840000000002, 0x3, 0xff) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14, 0x10, 0x4}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSETELEM={0x80, 0xc, 0xa, 0x301, 0x0, 0x0, {0x7, 0x0, 0x9}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x60, 0x3, 0x0, 0x1, [{0x5c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPRESSIONS={0x50, 0xb, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @quota={{0xa}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_QUOTA_BYTES={0xc}]}}}, {0x2c, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_LIMIT_UNIT={0xc}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x3}]}}}]}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xc8}}, 0x0) 7m30.680287449s ago: executing program 6 (id=1694): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000080)={0x0, 0x382, &(0x7f0000000140)={0x0, 0xb7ff}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001280)=ANY=[], 0x34}}, 0x0) r3 = socket(0x10, 0x803, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="2c0000001400b59500000000000000000a400000", @ANYRES32=r5, @ANYBLOB="1400020000000000000000000000ffff"], 0x2c}}, 0x0) r6 = socket(0x10, 0x803, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@ipv6_newaddr={0x34, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r8}, [@IFA_FLAGS={0x8, 0x8, 0x3778bcbaae6b531f}, @IFA_LOCAL={0x14, 0x2, @ipv4}]}, 0x34}}, 0x0) r9 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r9) getsockname$packet(r9, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r10, @ANYBLOB="010000"], 0x3c}}, 0x0) 7m28.670555815s ago: executing program 6 (id=1699): syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000380)='./file1\x00', 0x1218088, &(0x7f00000005c0)=ANY=[], 0x4a, 0x2d1, &(0x7f0000000c80)="$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") renameat2(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000000140)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) 7m27.17524387s ago: executing program 6 (id=1703): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) r1 = socket$kcm(0x2, 0x5, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, &(0x7f00000002c0)=r0, 0x4) sendmsg$inet(r1, &(0x7f00000004c0)={&(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xff}}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000140)}], 0x1}, 0x3e8) 7m24.692707597s ago: executing program 6 (id=1706): syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/net\x00') bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xb, &(0x7f0000000580)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xb, &(0x7f0000000580)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000004c0)={r0, 0x3, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x44) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfb6}, 0x94) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[], &(0x7f0000000140)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x21}, 0x94) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000001100)={0x9, 0x0}, 0x8) r3 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000040)=r2, 0x4) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000200)={r3, r1, 0x4, r0}, 0x10) 7m23.30850033s ago: executing program 6 (id=1709): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000080)={0x0, 0x382, &(0x7f0000000140)={0x0, 0xb7ff}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001280)=ANY=[@ANYBLOB="3400000010000104000009040000000000000000", @ANYRES32=r3], 0x34}}, 0x0) r4 = socket(0x10, 0x803, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="2c0000001400b59500000000000000000a400000", @ANYRES32=r6, @ANYBLOB="1400020000000000000000000000ffff"], 0x2c}}, 0x0) r7 = socket(0x10, 0x803, 0x0) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@ipv6_newaddr={0x34, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r9}, [@IFA_FLAGS={0x8, 0x8, 0x3778bcbaae6b531f}, @IFA_LOCAL={0x14, 0x2, @ipv4}]}, 0x34}}, 0x0) r10 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r10) getsockname$packet(r10, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r11, @ANYBLOB="010000"], 0x3c}}, 0x0) 7m16.22439148s ago: executing program 6 (id=1713): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_dev$sg(&(0x7f0000000040), 0x7, 0x80) ioctl$SG_SET_DEBUG(r2, 0x227e, 0x0) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x1000, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000180)=0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) syz_open_dev$dri(0x0, 0x0, 0x28900) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000200)={'bond0\x00', &(0x7f0000000880)=@ethtool_per_queue_op={0x4b, 0x1d, [0x4, 0x8, 0xfffffff1, 0x8, 0x0, 0x1, 0x3e7, 0x5, 0x9, 0x6, 0x5, 0x6, 0x7ff, 0x4, 0x4, 0x3ff, 0x4, 0x8, 0xfffffffe, 0x4, 0x9, 0x4, 0x8, 0x1, 0xfffffa0c, 0x7, 0x8, 0x9be, 0x3, 0x3ff, 0xa, 0x14dc, 0x147, 0xd, 0x2, 0x3, 0x1, 0x0, 0x89, 0x1, 0x7, 0x5, 0x4, 0x4, 0x8, 0x80000000, 0x1005, 0x100, 0x5, 0x19dd, 0x7, 0x3ff, 0x588, 0x6, 0xf667, 0xfffffffc, 0x5, 0x8, 0x7f, 0x6, 0xc8, 0x6, 0x0, 0xc3, 0x4, 0x10, 0xffffffa8, 0x1, 0x5, 0x1, 0x5, 0x83, 0xe39, 0xcf, 0x10, 0x401, 0x41267e2a, 0x7, 0x2a, 0x71c9, 0x3, 0x321, 0xfffffeff, 0x7f, 0x66, 0x1c24, 0xff, 0x9, 0x4, 0x2, 0x3, 0xff, 0x100, 0x126, 0x6, 0x8, 0xc, 0xc, 0x4, 0x8, 0xffffffc0, 0x1, 0x10001, 0x5, 0x4, 0x4e27, 0x6fb26e6, 0x0, 0x8356, 0x0, 0x100009, 0x9b7, 0x1, 0x80000001, 0x7f, 0xea, 0x6, 0x80000000, 0xff, 0x7, 0x4da8e6f3, 0x5, 0x10001, 0x8, 0x69e4, 0x80000001, 0xfffffff4, 0x100], "81be740924d2e750097e7928e499c6c74ccfe9134767046ad485ecb22b963519b784ba7509ded29466e9ee30a6c4e51b5795b65c07e2bba6d08f2ecec6b3b0d0aaf707bff22fc2bdd0676c020d98f2936679e91e"}}) sched_rr_get_interval(r3, &(0x7f0000000000)) r4 = syz_io_uring_setup(0xad3, &(0x7f00000002c0)={0x0, 0x3594, 0x10, 0x1003, 0x21e}, &(0x7f0000000240)=0x0, &(0x7f0000000340)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0x2a5cc081, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000004c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x4, 0x0, 0x80, 0x2, 0x0, 0x127, 0x0, 0x1, {0x1}}) io_uring_enter(r4, 0x6efc, 0x3900, 0xb, 0x0, 0x0) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r4, 0x18, 0x0, 0x1) 6m59.642804935s ago: executing program 35 (id=1713): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_dev$sg(&(0x7f0000000040), 0x7, 0x80) ioctl$SG_SET_DEBUG(r2, 0x227e, 0x0) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x1000, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000180)=0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) syz_open_dev$dri(0x0, 0x0, 0x28900) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000200)={'bond0\x00', &(0x7f0000000880)=@ethtool_per_queue_op={0x4b, 0x1d, [0x4, 0x8, 0xfffffff1, 0x8, 0x0, 0x1, 0x3e7, 0x5, 0x9, 0x6, 0x5, 0x6, 0x7ff, 0x4, 0x4, 0x3ff, 0x4, 0x8, 0xfffffffe, 0x4, 0x9, 0x4, 0x8, 0x1, 0xfffffa0c, 0x7, 0x8, 0x9be, 0x3, 0x3ff, 0xa, 0x14dc, 0x147, 0xd, 0x2, 0x3, 0x1, 0x0, 0x89, 0x1, 0x7, 0x5, 0x4, 0x4, 0x8, 0x80000000, 0x1005, 0x100, 0x5, 0x19dd, 0x7, 0x3ff, 0x588, 0x6, 0xf667, 0xfffffffc, 0x5, 0x8, 0x7f, 0x6, 0xc8, 0x6, 0x0, 0xc3, 0x4, 0x10, 0xffffffa8, 0x1, 0x5, 0x1, 0x5, 0x83, 0xe39, 0xcf, 0x10, 0x401, 0x41267e2a, 0x7, 0x2a, 0x71c9, 0x3, 0x321, 0xfffffeff, 0x7f, 0x66, 0x1c24, 0xff, 0x9, 0x4, 0x2, 0x3, 0xff, 0x100, 0x126, 0x6, 0x8, 0xc, 0xc, 0x4, 0x8, 0xffffffc0, 0x1, 0x10001, 0x5, 0x4, 0x4e27, 0x6fb26e6, 0x0, 0x8356, 0x0, 0x100009, 0x9b7, 0x1, 0x80000001, 0x7f, 0xea, 0x6, 0x80000000, 0xff, 0x7, 0x4da8e6f3, 0x5, 0x10001, 0x8, 0x69e4, 0x80000001, 0xfffffff4, 0x100], "81be740924d2e750097e7928e499c6c74ccfe9134767046ad485ecb22b963519b784ba7509ded29466e9ee30a6c4e51b5795b65c07e2bba6d08f2ecec6b3b0d0aaf707bff22fc2bdd0676c020d98f2936679e91e"}}) sched_rr_get_interval(r3, &(0x7f0000000000)) r4 = syz_io_uring_setup(0xad3, &(0x7f00000002c0)={0x0, 0x3594, 0x10, 0x1003, 0x21e}, &(0x7f0000000240)=0x0, &(0x7f0000000340)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0x2a5cc081, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000004c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x4, 0x0, 0x80, 0x2, 0x0, 0x127, 0x0, 0x1, {0x1}}) io_uring_enter(r4, 0x6efc, 0x3900, 0xb, 0x0, 0x0) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r4, 0x18, 0x0, 0x1) 6m12.446580052s ago: executing program 5 (id=1808): r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) sendto$llc(r0, 0x0, 0x0, 0x0, &(0x7f0000000380), 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1800"/16], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x59, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r2, 0x2000000, 0xe, 0x0, &(0x7f00000004c0)="630b008646dc3f0adf33c9f7b986", 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20}, 0x50) 6m10.183060589s ago: executing program 5 (id=1810): syz_mount_image$hfs(&(0x7f0000000180), &(0x7f0000000000)='./mnt\x00', 0x3000080, &(0x7f0000000200)=ANY=[@ANYRES64=0x0, @ANYRES8], 0x13, 0x2d2, &(0x7f0000000bc0)="$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") openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x0) truncate(&(0x7f0000000000)='./file1\x00', 0x8000) 6m8.904280822s ago: executing program 5 (id=1814): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4) recvmmsg(r2, &(0x7f0000000480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=""/11, 0x17}}], 0x400000000000179, 0x0, 0x0) write$tun(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="000086dd0001090004000000a60c6eec00be00442ffffe80000000"], 0x7a) 6m5.958491234s ago: executing program 5 (id=1821): socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) socket$inet6(0xa, 0x2, 0x0) close(0x3) socket$l2tp6(0xa, 0x2, 0x73) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1900000004000000040000000c"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x7, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="720ac4ff000000007110b00000000000720ac0ff0100000095"], 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1, 0x4, &(0x7f0000020440)=ANY=[@ANYBLOB="18000000004000000000000009000000850000000f00000095"], &(0x7f0000000000)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) syz_init_net_socket$netrom(0x6, 0x5, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000340)='GPL\x00'}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0xffe, &(0x7f0000000940)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c000200200000001f000000060001000000000008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="0a000100000070"], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x0) 6m4.370217934s ago: executing program 5 (id=1824): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000006800010002000000fcffff7f000000000000000014000200010000000500000002001000fe00000004000b"], 0x30}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) io_uring_setup(0x734a, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB]) socketpair$unix(0x1, 0x2, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x802) ptrace$cont(0x21, 0x0, 0x80000001, 0x4) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r1, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00'}) mount$afs(0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=ANY=[]) chdir(0x0) 6m2.512541041s ago: executing program 5 (id=1827): prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000002c0)=0x2) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x2000c0d0, &(0x7f0000000080)={0x11, 0x8100, 0x0, 0x1, 0x6, 0x6, @random="fa2bb943b256"}, 0x14) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020200600000000000000bfa100000000000007010000f8ffffffb702000008000000b7030000f8ffffff8500000070000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x7ffe, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0x9}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x0) socket$inet6(0xa, 0x80002, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 5m47.133780993s ago: executing program 36 (id=1827): prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000002c0)=0x2) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x2000c0d0, &(0x7f0000000080)={0x11, 0x8100, 0x0, 0x1, 0x6, 0x6, @random="fa2bb943b256"}, 0x14) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020200600000000000000bfa100000000000007010000f8ffffffb702000008000000b7030000f8ffffff8500000070000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x7ffe, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0x9}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x0) socket$inet6(0xa, 0x80002, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 5m11.870265412s ago: executing program 2 (id=1887): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$kcm(0x11, 0x3, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r5) socket$tipc(0x1e, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r4, &(0x7f0000000280)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r6, 0x3e}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000180)="27030200000214000e00002fb96dffff1144ee163cddcb000000800000827600000000000000", 0x26}, {&(0x7f00000004c0)="f058050000007f8f", 0x300}], 0x2}, 0x5) 5m10.27743689s ago: executing program 2 (id=1892): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000006a000085000000860000008500000007000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x7}, 0x4) setsockopt$packet_int(r1, 0x107, 0x16, &(0x7f0000000000)=0x4, 0x4) r2 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000780)=@newtfilter={0x24, 0x2c, 0xd27, 0x70bd2b, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x0, 0x10}, {}, {0x8, 0x4}}}, 0x24}}, 0x2) 5m8.766365173s ago: executing program 2 (id=1893): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000800)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc2c0000000b0a050000000000000000000a0000050900010073797a31"], 0x90}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 5m7.911108558s ago: executing program 2 (id=1894): creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39dcdb) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = open(&(0x7f0000000200)='./file0\x00', 0x800, 0x1a1) fcntl$setlease(r1, 0x400, 0x1) execve(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) 5m7.425878447s ago: executing program 2 (id=1895): r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) sendto$llc(r0, 0x0, 0x0, 0x0, &(0x7f0000000380), 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x59, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r2, 0x2000000, 0xe, 0x0, &(0x7f00000004c0)="630b008646dc3f0adf33c9f7b986", 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20}, 0x50) 5m6.21769687s ago: executing program 2 (id=1899): socket$inet6_icmp(0xa, 0x2, 0x3a) epoll_create1(0x80000) r0 = memfd_create(&(0x7f0000000900)='y\x105\xfb\xf7u\x83%\x1f\xe09@:r\xc2\xb9x0\x90P\x03\x00\x00\x00\x00\x00\x00\x00\xfe,\x1c\xf1\xdd\xcf]\xac\xbc\t\xbb\xfc\xa4j\x9f\xceX\x8f5=\xaa\xd5\xe9n\xab s\xa5\x00\x8d\tV\t\x91\x18\x06O\xb0=D\xda\xb6F\x1a\xc82\x8b\xc0l\xd0\x89d\xe6\xb7\xd8\x97\xb8\xde\xa3\x89\xc2%/u\x17\xdaM\x8d\x01Lh\x1e^\x9ej\x1c\xc5\xf0\xf6\x92\x05\x9aH\x00\'\xd4\x94d_\v\xfc\xad\x0f\xa8\xc5\xad\x00\xc2\x12\xff\xff\xff\xff\xff\xff\x00\x00\x00\x00\nj\x8c\xef\x90\xc0Z\xfa\x1a\xb3\xf0wVq\xe9d\xf8N\x80\xd1g\xd8e\xc8\x16\xad1\x02\xab\xce3\xb2\xb0\xd1\x11\xf0\xc3Gj+kV$\x80\x8aJ$\x81\xc0\x16\xf5\x9cz\x10\x97\xdb\x12H\xee/\xe3sY\x02D;L~\xd0\xb44\x01*\xfb\xa4 \xb2b\x90H$\xb2\xad\xbf\x8aM\xb6\x81\x81^\x02\xa0\xa7t\xfbHb\xa5=\xdd+$\xc06J\xb4\xf0\xab\x85Xz\x9f\xb2D$\xbe\xd9\x7f-\r\x9aj9r\n_\x11\xd4\x19\xb0\xa0G\xb7\x94\xf7\xfd~\xe9\xb6G\xbfE\xbb\x15\x15\xa6\xca2\xd0\xd3\x8c\xf7nO\xf9\xa8\xfd\x8a\xd2\xb2\xab\xff\xe4\xb0;\xd9\xa8\f\x03R\xbd%\x9fF\xee\x05\x06.3(QF?\f\x05\xa4uY\xee\xab\x8a\xeb~\xed\xcb0\xb7\xe7\xe6?8g\x8aN\xda\x8f\x9d\xde\x1eNaS\x8fLk\xf1\x965N\x18\x8c\xb9=5\x991\xae\x89N\x13\xd1\xf7\xf0\x13\xb2\xaeS\xa1\x97\x18j\xea\x9f\xde\xb6\xd4\xdc\xe6*\x9c\xfdV\x82\x05\'u\xa4\x00_\xaf8\xdf-J?V=\xf3\xb4\xac\x179\x9f\x04\x100\x9f\xd4\xd6\x8d\xde\xc2Z\x17H\v\xeb_ug\xb1\x90_}\x9f\xa05D\xa8\xce#h`\x1c\x98\xa8\x0e\x86\xda&i)R1\xb7\xf5\n\x87\xd9z6\xc4\x9c1\xf3E-{1V\xe4\x99[\xe1\x85\x83??e\xae\x8a\xb2\xf8\x14z\xd3T/9\x00g\xba\x13x0}\xf6\xeb\xaeT\xa9\xe18\x06\xd8GwS\xc7\x85u\xc4\xa1\x9e\xf1\xc0\x8b\xd1\x14j\x88\x99\xfe\xeb\x83\x13]\r\xb7\xbf\x9cSL\xe3i\xc3\xfe\r\xf7%\x92,\xef\xf2\xc1\xb5\xb0\x16\x17W\xbc\x14\xc3\x05\xcdnY\x9a2\xa8U\x13\x869\xc5\xb6\xa3\x00\x86\xb9\xb0\x91\x83\x8an\xc5\x9a\xaeML\x91\xa0r\v\xbd\x8d\xf4\xa6\xc7E\xf8\x8bC0s\x99jO\x9dc\xefa\x85\x9a\xb1\x90\x01-\xb0L\x82\xe9\x03\xc2\xae', 0x3) ftruncate(r0, 0xffff) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000580)=""/162) fcntl$addseals(0xffffffffffffffff, 0x409, 0x7) close(0x3) 4m50.820422734s ago: executing program 37 (id=1899): socket$inet6_icmp(0xa, 0x2, 0x3a) epoll_create1(0x80000) r0 = memfd_create(&(0x7f0000000900)='y\x105\xfb\xf7u\x83%\x1f\xe09@:r\xc2\xb9x0\x90P\x03\x00\x00\x00\x00\x00\x00\x00\xfe,\x1c\xf1\xdd\xcf]\xac\xbc\t\xbb\xfc\xa4j\x9f\xceX\x8f5=\xaa\xd5\xe9n\xab s\xa5\x00\x8d\tV\t\x91\x18\x06O\xb0=D\xda\xb6F\x1a\xc82\x8b\xc0l\xd0\x89d\xe6\xb7\xd8\x97\xb8\xde\xa3\x89\xc2%/u\x17\xdaM\x8d\x01Lh\x1e^\x9ej\x1c\xc5\xf0\xf6\x92\x05\x9aH\x00\'\xd4\x94d_\v\xfc\xad\x0f\xa8\xc5\xad\x00\xc2\x12\xff\xff\xff\xff\xff\xff\x00\x00\x00\x00\nj\x8c\xef\x90\xc0Z\xfa\x1a\xb3\xf0wVq\xe9d\xf8N\x80\xd1g\xd8e\xc8\x16\xad1\x02\xab\xce3\xb2\xb0\xd1\x11\xf0\xc3Gj+kV$\x80\x8aJ$\x81\xc0\x16\xf5\x9cz\x10\x97\xdb\x12H\xee/\xe3sY\x02D;L~\xd0\xb44\x01*\xfb\xa4 \xb2b\x90H$\xb2\xad\xbf\x8aM\xb6\x81\x81^\x02\xa0\xa7t\xfbHb\xa5=\xdd+$\xc06J\xb4\xf0\xab\x85Xz\x9f\xb2D$\xbe\xd9\x7f-\r\x9aj9r\n_\x11\xd4\x19\xb0\xa0G\xb7\x94\xf7\xfd~\xe9\xb6G\xbfE\xbb\x15\x15\xa6\xca2\xd0\xd3\x8c\xf7nO\xf9\xa8\xfd\x8a\xd2\xb2\xab\xff\xe4\xb0;\xd9\xa8\f\x03R\xbd%\x9fF\xee\x05\x06.3(QF?\f\x05\xa4uY\xee\xab\x8a\xeb~\xed\xcb0\xb7\xe7\xe6?8g\x8aN\xda\x8f\x9d\xde\x1eNaS\x8fLk\xf1\x965N\x18\x8c\xb9=5\x991\xae\x89N\x13\xd1\xf7\xf0\x13\xb2\xaeS\xa1\x97\x18j\xea\x9f\xde\xb6\xd4\xdc\xe6*\x9c\xfdV\x82\x05\'u\xa4\x00_\xaf8\xdf-J?V=\xf3\xb4\xac\x179\x9f\x04\x100\x9f\xd4\xd6\x8d\xde\xc2Z\x17H\v\xeb_ug\xb1\x90_}\x9f\xa05D\xa8\xce#h`\x1c\x98\xa8\x0e\x86\xda&i)R1\xb7\xf5\n\x87\xd9z6\xc4\x9c1\xf3E-{1V\xe4\x99[\xe1\x85\x83??e\xae\x8a\xb2\xf8\x14z\xd3T/9\x00g\xba\x13x0}\xf6\xeb\xaeT\xa9\xe18\x06\xd8GwS\xc7\x85u\xc4\xa1\x9e\xf1\xc0\x8b\xd1\x14j\x88\x99\xfe\xeb\x83\x13]\r\xb7\xbf\x9cSL\xe3i\xc3\xfe\r\xf7%\x92,\xef\xf2\xc1\xb5\xb0\x16\x17W\xbc\x14\xc3\x05\xcdnY\x9a2\xa8U\x13\x869\xc5\xb6\xa3\x00\x86\xb9\xb0\x91\x83\x8an\xc5\x9a\xaeML\x91\xa0r\v\xbd\x8d\xf4\xa6\xc7E\xf8\x8bC0s\x99jO\x9dc\xefa\x85\x9a\xb1\x90\x01-\xb0L\x82\xe9\x03\xc2\xae', 0x3) ftruncate(r0, 0xffff) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000580)=""/162) fcntl$addseals(0xffffffffffffffff, 0x409, 0x7) close(0x3) 16.098838106s ago: executing program 3 (id=2213): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)=@ipv6_newnexthop={0x1c, 0x68, 0x1, 0x40000, 0xfffffffd, {0x2, 0x0, 0x0, 0x0, 0x4}, [@NHA_BLACKHOLE={0x4}]}, 0x1c}}, 0x20000014) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000480)={0x2, 0x3, 0x0, 0x3, 0xf, 0x0, 0x4070bd2c, 0x25dfdbfc, [@sadb_key={0x1, 0x9}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x4e23, 0x7, @mcast1, 0x80000001}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x7, 0xc, 0x80000000}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x4e23, 0xff, @local, 0x1ff}}]}, 0x78}, 0x1, 0x7}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=@ipv6_newnexthop={0x40, 0x68, 0x1, 0x0, 0x0, {}, [@NHA_ENCAP_TYPE={0x6, 0x7, 0x2}, @NHA_ENCAP={0x18, 0x8, 0x0, 0x1, @SEG6_IPTUNNEL_SRH={0x14}}, @NHA_OIF={0x8, 0x5, r6}]}, 0x40}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@ipv4_newroute={0x24, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x10, 0x0, 0xfe, 0x4, 0x0, 0x1, 0x20000000}, [@RTA_NH_ID={0x8, 0x1e, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x4a044}, 0x4010) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@ipv4_newroute={0x24, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x10, 0x0, 0xfd, 0x4, 0x0, 0x1, 0x20000000}, [@RTA_NH_ID={0x8, 0x1e, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x4a044}, 0x4010) ioctl$sock_SIOCGIFVLAN_SET_VLAN_FLAG_CMD(r0, 0x8982, &(0x7f00000000c0)={0x7, 'erspan0\x00', {0x8}, 0x5}) writev(r1, &(0x7f00000003c0), 0x0) 15.990402037s ago: executing program 7 (id=2214): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={0x14, r1, 0x1}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x4000004) 13.554324106s ago: executing program 7 (id=2215): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380), 0xc0001, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TCSETS(r0, 0x40384708, &(0x7f0000000040)={0x8, 0x1, 0x4, 0x1000205, 0x1b, "3eccd25569e20900"}) 13.354702344s ago: executing program 3 (id=2216): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_opts(r3, 0x0, 0x4, 0x0, 0x0) connect$inet(r3, &(0x7f0000000240)={0x2, 0x9ffb, @empty}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r3, 0x6, 0x1d, 0x0, 0x0) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000280)={'lo\x00', {0x2, 0x4e20, @empty}}) 13.061302626s ago: executing program 7 (id=2217): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000280)={{0x12, 0x1, 0x141, 0xf2, 0xc5, 0x96, 0x20, 0x16d0, 0x10b8, 0xde8e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x0, 0x2, 0x2, 0x0, 0x83, 0xec, 0x0, [], [{{0x9, 0x5, 0x6, 0x2, 0x200, 0x2, 0x0, 0xa}}, {{0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0x1, 0x10}}]}}]}}]}}, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000040)={0x84, &(0x7f00000009c0)=ANY=[@ANYBLOB='@0\f'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000880)={0x2c, &(0x7f0000000640)={0x40, 0x12, 0x28, "436655104e7e54c46de2faf6c30b4c6e371bbabe1d142fa39c83b9bf3f31f3d26920ecfc447567b8"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) 10.755916198s ago: executing program 7 (id=2218): r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) r1 = creat(&(0x7f0000000000)='./file1\x00', 0x1ec) r2 = fanotify_init(0xf00, 0x1) fanotify_mark(r2, 0x105, 0x40009975, r1, 0x0) fallocate(r0, 0x0, 0x1000000, 0x3) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r0, 0x0) 9.35106525s ago: executing program 3 (id=2219): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000340)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x4c, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x20, 0x3, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x5, 0x1, 'X'}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x8}]}]}]}, @NFT_MSG_NEWCHAIN={0x1c, 0x3, 0xa, 0x801, 0x0, 0x0, {0x2, 0x0, 0x6}, [@NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x3}]}, @NFT_MSG_DELTABLE={0x60, 0x2, 0xa, 0x201, 0x0, 0x0, {0x5, 0x0, 0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x4}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x4}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x2}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x1}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0xf0}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 9.047398846s ago: executing program 3 (id=2220): fsmount(0xffffffffffffffff, 0x0, 0x80) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x4000, &(0x7f0000000180)={[{@test_dummy_encryption}, {@i_version}, {@noblock_validity}, {@commit={'commit', 0x3d, 0x5}}, {@noinit_itable}, {@max_batch_time}, {@abort}, {@auto_da_alloc}, {@lazytime}, {@noauto_da_alloc}, {@block_validity}]}, 0xd, 0x5d8, &(0x7f0000000c00)="$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") r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = dup(r3) write$UHID_INPUT(r4, &(0x7f0000001980)={0xb, {"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", 0x1000}}, 0x1006) setfsgid(0xee00) getpid() setns(0xffffffffffffffff, 0x24020000) setns(0xffffffffffffffff, 0x10000000) 8.732259855s ago: executing program 7 (id=2221): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) close(r4) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = socket$inet6(0xa, 0x2, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r8 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd2b, 0x25dfdbff, {0x0, 0x0, 0x0, r9, {0x0, 0x10}, {}, {0x8, 0x4}}, [@filter_kind_options=@f_flow={{0x9}, {0x4}}]}, 0x34}}, 0x2) sendmmsg$inet(r5, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e23, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000340)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r7, @dev={0xac, 0x14, 0x14, 0x41}, @initdev={0xac, 0x1e, 0x0, 0x0}}}}], 0x20}}], 0x1, 0x4004800) 4.740269099s ago: executing program 7 (id=2222): socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) unshare(0x8000000) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r3, 0x84, 0x13, &(0x7f00000000c0)={0x0, 0x2}, &(0x7f0000000300)=0x8) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r3, 0x84, 0x6, &(0x7f0000000340)={r4, @in6={{0xa, 0x4e21, 0x6, @dev={0xfe, 0x80, '\x00', 0x31}, 0x3}}}, 0x84) sendmsg$BATADV_CMD_GET_MESH(r3, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r5, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@newqdisc={0x44, 0x24, 0xe0b, 0xfefffffc, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0x9}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_WASH={0x8, 0xd, 0x1}, @TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x3}]}}]}, 0x44}}, 0x0) semget$private(0x0, 0x4000, 0x0) setsockopt$inet6_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x29, 0x2d, &(0x7f00000001c0)={0xa, {{0xa, 0x4e20, 0x6, @local}}}, 0x84) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000200)="480000001400190d7ebdeb75fd0d8c562c84d8c033ed7a80fae0090f000000000000a2bc", 0x24}], 0x1) open$dir(0x0, 0x2225c3, 0x0) r6 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r6, 0x4020565a, &(0x7f0000000100)={0x3, 0x980900}) r7 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r7, 0x4020565a, &(0x7f0000000280)={0x3, 0x980900, 0x2eae0342ca72d7ea}) ioctl$VIDIOC_QUERYMENU(r7, 0xc008561c, &(0x7f00000001c0)={0x980900, 0xfffffff2, @value=0x9}) 817.890841ms ago: executing program 3 (id=2223): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0x9800, 0xc000, 0x8, 0xc1}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x2, 0x4, 0xa, 0xbf22}, 0x50) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x44, 0x10, 0x1, 0x8470bd27, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x74614, 0x36a01}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0xc, 0x5, 0x0, 0x1, [@IFLA_BRPORT_STATE={0x5, 0x1, 0x37}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x400c0d1}, 0x8002) io_uring_enter(r0, 0x6f55, 0x7721, 0x16, 0x0, 0x0) 0s ago: executing program 3 (id=2224): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r4 = socket$rds(0x15, 0x5, 0x0) bind$rds(r4, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$rds(r4, &(0x7f0000000680)={&(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) io_setup(0x7, 0x0) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="001b96d0043a3706"], 0x8) pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) fcntl$setstatus(r5, 0x4, 0x7c00) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x14, &(0x7f0000000000)={0x0, 0xea60}, 0x10) kernel console output (not intermixed with test programs): rface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 783.982732][T11909] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 784.020676][T11937] bridge0: port 1(bridge_slave_0) entered blocking state [ 784.070527][T11937] bridge0: port 1(bridge_slave_0) entered disabled state [ 784.110927][T11937] bridge_slave_0: entered allmulticast mode [ 784.165919][T11937] bridge_slave_0: entered promiscuous mode [ 784.260998][T11937] bridge0: port 2(bridge_slave_1) entered blocking state [ 784.285847][ T5829] gs_usb 8-1:0.0: Couldn't get device config: (err=-121) [ 784.293162][ T5829] gs_usb 8-1:0.0: probe with driver gs_usb failed with error -121 [ 784.333345][T11937] bridge0: port 2(bridge_slave_1) entered disabled state [ 784.396541][T11937] bridge_slave_1: entered allmulticast mode [ 784.475821][T11937] bridge_slave_1: entered promiscuous mode [ 785.190335][T11937] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 785.224381][T11937] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 785.518967][T11909] hsr_slave_0: entered promiscuous mode [ 785.560415][T11909] hsr_slave_1: entered promiscuous mode [ 785.583348][T11909] debugfs: 'hsr0' already exists in 'hsr' [ 785.610778][T11909] Cannot create hsr debugfs directory [ 786.024771][T11937] team0: Port device team_slave_0 added [ 786.199195][ T1957] usb 8-1: USB disconnect, device number 3 [ 786.380470][T11937] team0: Port device team_slave_1 added [ 786.841236][T11937] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 786.871854][T11937] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 787.035773][T11937] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 787.137311][T12188] netlink: 'syz.3.1884': attribute type 4 has an invalid length. [ 787.450952][T11937] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 787.500732][T11937] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 787.625403][T11937] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 789.112034][T11937] hsr_slave_0: entered promiscuous mode [ 789.150436][T11937] hsr_slave_1: entered promiscuous mode [ 789.196941][T11937] debugfs: 'hsr0' already exists in 'hsr' [ 789.202894][T11937] Cannot create hsr debugfs directory [ 789.679928][ T1957] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 791.173966][T12230] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1893'. [ 792.179161][ T1957] usb 8-1: Using ep0 maxpacket: 32 [ 792.192090][ T1957] usb 8-1: config 0 interface 0 has no altsetting 0 [ 792.214651][ T1957] usb 8-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 792.251167][ T1957] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 792.297157][ T1957] usb 8-1: Product: syz [ 792.301581][ T1957] usb 8-1: Manufacturer: syz [ 792.329293][ T1957] usb 8-1: SerialNumber: syz [ 792.422737][ T1957] usb 8-1: config 0 descriptor?? [ 792.800988][ T1957] usb 8-1: can't set config #0, error -71 [ 792.843193][ T1957] usb 8-1: USB disconnect, device number 4 [ 793.336314][ T84] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 794.810349][T12247] netlink: 'syz.7.1897': attribute type 4 has an invalid length. [ 795.508755][T11909] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 795.814810][T11909] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 796.259812][T11909] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 796.581819][T11909] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 797.307416][T11937] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 797.660137][T11937] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 797.933692][T11937] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 798.127482][T11937] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 799.218645][T12273] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1902'. [ 800.988133][T11909] 8021q: adding VLAN 0 to HW filter on device bond0 [ 801.723014][T11909] 8021q: adding VLAN 0 to HW filter on device team0 [ 803.003164][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 803.010809][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 803.262533][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 803.270225][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 803.577028][T10692] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 803.836003][T10692] usb 4-1: Using ep0 maxpacket: 32 [ 803.942079][T10692] usb 4-1: config 0 interface 0 has no altsetting 0 [ 804.111128][T10692] usb 4-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 804.167330][T11937] 8021q: adding VLAN 0 to HW filter on device bond0 [ 804.255506][T10692] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 804.332707][T10692] usb 4-1: Product: syz [ 804.414340][T10692] usb 4-1: Manufacturer: syz [ 804.466543][T10692] usb 4-1: SerialNumber: syz [ 804.511763][T10692] usb 4-1: config 0 descriptor?? [ 804.681888][T11937] 8021q: adding VLAN 0 to HW filter on device team0 [ 804.881219][ T3444] bridge0: port 1(bridge_slave_0) entered blocking state [ 804.888962][ T3444] bridge0: port 1(bridge_slave_0) entered forwarding state [ 804.921406][T12292] loop7: detected capacity change from 0 to 16 [ 804.984047][T12292] erofs (device loop7): invalid ishare xattr prefix id 0 [ 805.095956][T10692] gs_usb 4-1:0.0: Couldn't get device config: (err=-121) [ 805.103276][T10692] gs_usb 4-1:0.0: probe with driver gs_usb failed with error -121 [ 805.193515][ T3444] bridge0: port 2(bridge_slave_1) entered blocking state [ 805.201204][ T3444] bridge0: port 2(bridge_slave_1) entered forwarding state [ 805.339862][T12293] loop7: detected capacity change from 0 to 512 [ 805.399192][T12293] vfat: Unknown parameter 'iocharse' [ 805.859773][ T5776] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 805.895822][ T5776] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 805.906311][ T5776] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 805.958879][ T5776] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 805.975051][ T5776] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 806.612822][T10272] usb 4-1: USB disconnect, device number 7 [ 807.487960][T12309] netlink: 'syz.3.1908': attribute type 4 has an invalid length. [ 808.136780][ T5772] Bluetooth: hci3: command tx timeout [ 810.252421][ T5772] Bluetooth: hci3: command tx timeout [ 811.142492][T12296] chnl_net:caif_netlink_parms(): no params data found [ 811.456394][T11937] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 812.295915][ T5772] Bluetooth: hci3: command tx timeout [ 813.046159][ T5776] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 813.077043][ T5776] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 813.089811][ T5776] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 813.103595][ T5776] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 813.126062][ T5776] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 814.385683][ T5776] Bluetooth: hci3: command tx timeout [ 815.345684][ T5776] Bluetooth: hci0: command tx timeout [ 816.907854][ T6419] bridge_slave_1: left allmulticast mode [ 816.913754][ T6419] bridge_slave_1: left promiscuous mode [ 817.032197][ T5776] Bluetooth: hci2: unexpected event 0x2f length: 509 > 260 [ 817.067332][ T6419] bridge0: port 2(bridge_slave_1) entered disabled state [ 817.416969][ T5776] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 817.424445][ T5776] Bluetooth: hci0: command tx timeout [ 817.446307][ T6419] bridge_slave_0: left allmulticast mode [ 817.453931][T11119] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 817.466709][T11119] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 817.506329][T11119] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 817.522882][T11119] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 817.636087][ T6419] bridge_slave_0: left promiscuous mode [ 817.660554][ T6419] bridge0: port 1(bridge_slave_0) entered disabled state [ 818.330191][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 818.813403][ T6419] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 818.958159][ T6419] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 819.096050][ T6419] bond0 (unregistering): Released all slaves [ 819.496016][T11119] Bluetooth: hci0: command tx timeout [ 819.543836][T12376] netlink: 'syz.3.1919': attribute type 4 has an invalid length. [ 819.655433][T11119] Bluetooth: hci5: command tx timeout [ 819.948214][ T6419] hsr_slave_0: left promiscuous mode [ 820.013234][ T6419] hsr_slave_1: left promiscuous mode [ 820.037972][ T6419] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 820.084996][ T6419] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 820.803861][ T6419] team0 (unregistering): Port device team_slave_1 removed [ 820.892134][ T6419] team0 (unregistering): Port device team_slave_0 removed [ 821.576539][T11119] Bluetooth: hci0: command tx timeout [ 821.586775][T12296] bridge0: port 1(bridge_slave_0) entered blocking state [ 821.641019][T12296] bridge0: port 1(bridge_slave_0) entered disabled state [ 821.649023][T12296] bridge_slave_0: entered allmulticast mode [ 821.658856][T12296] bridge_slave_0: entered promiscuous mode [ 821.710923][T12258] syz_tun (unregistering): left allmulticast mode [ 821.944983][T11119] Bluetooth: hci5: command tx timeout [ 822.727523][T12296] bridge0: port 2(bridge_slave_1) entered blocking state [ 822.735075][T12296] bridge0: port 2(bridge_slave_1) entered disabled state [ 822.792898][T12296] bridge_slave_1: entered allmulticast mode [ 822.844914][T12296] bridge_slave_1: entered promiscuous mode [ 823.873300][T12296] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 823.976007][T11119] Bluetooth: hci5: command tx timeout [ 824.574516][T12296] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 825.315010][T12400] loop3: detected capacity change from 0 to 4096 [ 825.470643][T12400] ntfs3(loop3): Different NTFS sector size (4096) and media sector size (512). [ 825.575421][T12400] ntfs3(loop3): ino=3, mi_enum_attr [ 825.620858][T12400] ntfs3(loop3): Failed to load $Volume (-22). [ 825.658331][T12296] team0: Port device team_slave_0 added [ 826.065885][T11119] Bluetooth: hci5: command tx timeout [ 826.359427][T12296] team0: Port device team_slave_1 added [ 826.645446][ T84] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 827.574034][T12296] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 827.666525][T12296] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 827.820710][T12296] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 827.892282][T12343] chnl_net:caif_netlink_parms(): no params data found [ 828.232489][T12296] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 828.265731][T12296] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 828.506240][T12296] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 828.855697][T10272] usb 4-1: new full-speed USB device number 8 using dummy_hcd [ 829.053269][T10272] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 829.115706][T10272] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 829.165731][T10272] usb 4-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 829.221756][T10272] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 829.281750][T10272] usb 4-1: config 0 descriptor?? [ 829.447251][T10272] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 829.454217][T10272] dvb-usb: bulk message failed: -22 (3/0) [ 829.595727][T10272] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 829.683400][T10272] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 829.736819][T10272] usb 4-1: media controller created [ 829.809000][T10272] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 829.881388][T10272] dvb-usb: bulk message failed: -22 (6/0) [ 829.905105][T10272] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 829.940731][T10272] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input6 [ 830.050195][T10272] dvb-usb: schedule remote query interval to 150 msecs. [ 830.106295][T10272] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 830.197096][T10272] usb 4-1: USB disconnect, device number 8 [ 830.265490][T11475] dvb-usb: bulk message failed: -22 (1/0) [ 830.271474][T11475] dvb-usb: error while querying for an remote control event. [ 830.546613][T10272] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 830.547773][T12296] hsr_slave_0: entered promiscuous mode [ 830.630168][T12296] hsr_slave_1: entered promiscuous mode [ 830.664936][T12296] debugfs: 'hsr0' already exists in 'hsr' [ 830.690181][T12296] Cannot create hsr debugfs directory [ 830.936720][T12438] netlink: 'syz.3.1932': attribute type 4 has an invalid length. [ 831.471063][T12356] chnl_net:caif_netlink_parms(): no params data found [ 831.953954][T12343] bridge0: port 1(bridge_slave_0) entered blocking state [ 831.996820][T12343] bridge0: port 1(bridge_slave_0) entered disabled state [ 832.013839][T12343] bridge_slave_0: entered allmulticast mode [ 832.039613][T12343] bridge_slave_0: entered promiscuous mode [ 832.253220][T12343] bridge0: port 2(bridge_slave_1) entered blocking state [ 832.263502][T12343] bridge0: port 2(bridge_slave_1) entered disabled state [ 832.273472][T12343] bridge_slave_1: entered allmulticast mode [ 832.287105][T12343] bridge_slave_1: entered promiscuous mode [ 832.340516][T12445] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1934'. [ 832.534393][T12446] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1934'. [ 832.643508][T12343] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 832.958335][T12343] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 833.489137][T12343] team0: Port device team_slave_0 added [ 833.499053][T12356] bridge0: port 1(bridge_slave_0) entered blocking state [ 833.512928][T12356] bridge0: port 1(bridge_slave_0) entered disabled state [ 833.525063][T12455] netlink: 'syz.7.1937': attribute type 4 has an invalid length. [ 833.536737][T12356] bridge_slave_0: entered allmulticast mode [ 833.547764][T12356] bridge_slave_0: entered promiscuous mode [ 833.579609][T12356] bridge0: port 2(bridge_slave_1) entered blocking state [ 833.596844][T12356] bridge0: port 2(bridge_slave_1) entered disabled state [ 833.621346][T12356] bridge_slave_1: entered allmulticast mode [ 833.645501][T12356] bridge_slave_1: entered promiscuous mode [ 833.760479][T12343] team0: Port device team_slave_1 added [ 833.975773][T10692] usb 4-1: new full-speed USB device number 9 using dummy_hcd [ 834.153137][T10692] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 834.166401][T10692] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 834.178093][T10692] usb 4-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 834.189117][T10692] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 834.219062][T10692] usb 4-1: config 0 descriptor?? [ 834.261291][T10692] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 834.283656][T10692] dvb-usb: bulk message failed: -22 (3/0) [ 834.314347][T10692] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 834.346646][T10692] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 834.353931][T10692] usb 4-1: media controller created [ 834.378475][T10692] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 834.418932][T10692] dvb-usb: bulk message failed: -22 (6/0) [ 834.435943][T10692] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 834.487628][T10692] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input7 [ 834.504744][T12460] dvb-usb: bulk message failed: -22 (2/0) [ 834.581512][T10692] dvb-usb: schedule remote query interval to 150 msecs. [ 834.609868][T10692] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 834.706560][T10692] usb 4-1: USB disconnect, device number 9 [ 835.147354][T12356] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 835.167670][T10692] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 835.348228][T12343] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 835.419790][T12343] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 835.526298][T12343] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 835.799049][T12356] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 836.124450][T12343] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 836.161344][T12343] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 836.220567][T12471] netlink: 'syz.3.1941': attribute type 4 has an invalid length. [ 836.328290][T12343] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 836.733999][ T34] bridge_slave_1: left allmulticast mode [ 836.764620][ T34] bridge_slave_1: left promiscuous mode [ 836.809292][ T34] bridge0: port 2(bridge_slave_1) entered disabled state [ 836.874568][ T34] bridge_slave_0: left allmulticast mode [ 836.883431][ T34] bridge_slave_0: left promiscuous mode [ 836.905355][ T34] bridge0: port 1(bridge_slave_0) entered disabled state [ 836.997987][ T34] bridge_slave_1: left allmulticast mode [ 837.014117][ T34] bridge_slave_1: left promiscuous mode [ 837.040755][ T34] bridge0: port 2(bridge_slave_1) entered disabled state [ 837.107160][ T34] bridge_slave_0: left allmulticast mode [ 837.113429][ T34] bridge_slave_0: left promiscuous mode [ 837.122482][ T34] bridge0: port 1(bridge_slave_0) entered disabled state [ 837.817896][ T34] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 837.855082][ T34] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 837.871875][ T34] bond0 (unregistering): Released all slaves [ 838.546920][ T34] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 838.560621][ T34] bond_slave_0: left promiscuous mode [ 838.574874][ T34] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 838.593383][ T34] bond_slave_1: left promiscuous mode [ 838.602479][ T34] bond0 (unregistering): Released all slaves [ 838.703760][T12356] team0: Port device team_slave_0 added [ 839.036446][T12476] loop7: detected capacity change from 0 to 40427 [ 839.124003][T12476] F2FS-fs (loop7): Image doesn't support compression [ 839.166304][T12476] F2FS-fs (loop7): build fault injection rate: 690 [ 839.182674][T12356] team0: Port device team_slave_1 added [ 839.208027][T12476] F2FS-fs (loop7): invalid crc value [ 839.384257][ T34] tipc: Left network mode [ 839.387496][T12478] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1943'. [ 839.489528][T12343] hsr_slave_0: entered promiscuous mode [ 839.522915][T12343] hsr_slave_1: entered promiscuous mode [ 839.558524][T12343] debugfs: 'hsr0' already exists in 'hsr' [ 839.564439][T12343] Cannot create hsr debugfs directory [ 839.862112][T12479] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1943'. [ 840.005114][T12476] F2FS-fs (loop7): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 840.010769][T12356] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 840.052085][T12476] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5 [ 840.053551][T12356] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 840.160688][T12356] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 840.179473][ T29] audit: type=1800 audit(1771391452.369:73): pid=12476 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.1942" name="file1" dev="loop7" ino=10 res=0 errno=0 [ 840.401580][T10754] syz-executor: attempt to access beyond end of device [ 840.401580][T10754] loop7: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 840.444814][T10754] CPU: 1 UID: 0 PID: 10754 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 840.444967][T10754] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 840.445072][T10754] Call Trace: [ 840.445143][T10754] [ 840.445208][T10754] __dump_stack+0x26/0x30 [ 840.445393][T10754] dump_stack_lvl+0x14c/0x1c0 [ 840.445584][T10754] dump_stack+0x1e/0x25 [ 840.445747][T10754] f2fs_handle_critical_error+0xa6f/0xc20 [ 840.445951][T10754] f2fs_stop_checkpoint+0x65/0x80 [ 840.446175][T10754] f2fs_write_end_io+0x12e6/0x2560 [ 840.446405][T10754] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 840.446570][T10754] bio_endio+0x1006/0x1160 [ 840.446787][T10754] submit_bio_noacct+0x533/0x2960 [ 840.447026][T10754] submit_bio+0x57a/0x620 [ 840.447214][T10754] f2fs_submit_write_bio+0x115/0x350 [ 840.447375][T10754] __submit_merged_bio+0x16f/0x780 [ 840.447454][T12356] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 840.447536][T10754] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 840.447966][T10754] __submit_merged_write_cond+0x4ba/0xae0 [ 840.448377][T10754] f2fs_write_data_pages+0x5073/0x5e10 [ 840.448941][T10754] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 840.449573][T10754] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 840.450061][T10754] ? free_unref_folios+0x2a08/0x2a70 [ 840.450380][T10754] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 840.450918][T10754] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 840.451331][T10754] ? kmsan_get_metadata+0xf1/0x160 [ 840.451719][T10754] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 840.452198][T10754] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 840.452603][T10754] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 840.452992][T10754] do_writepages+0x3f2/0x860 [ 840.453499][T10754] ? _raw_spin_unlock+0x30/0x50 [ 840.453876][T10754] ? wbc_attach_and_unlock_inode+0x131/0x660 [ 840.454446][T10754] filemap_fdatawrite+0x207/0x260 [ 840.455053][T10754] f2fs_sync_dirty_inodes+0x2aa/0xaa0 [ 840.455577][T10754] f2fs_write_checkpoint+0x10e1/0x3d20 [ 840.456242][T10754] ? _raw_spin_unlock_irqrestore+0x3f/0x60 [ 840.456751][T10754] kill_f2fs_super+0x320/0x990 [ 840.457271][T10754] ? __pfx_kill_f2fs_super+0x10/0x10 [ 840.457451][T10754] deactivate_locked_super+0xcb/0x3c0 [ 840.457807][T10754] deactivate_super+0x12f/0x140 [ 840.458135][T10754] cleanup_mnt+0x7eb/0x870 [ 840.458470][T10754] ? __pfx___cleanup_mnt+0x10/0x10 [ 840.458766][T10754] __cleanup_mnt+0x22/0x30 [ 840.459146][T10754] task_work_run+0x208/0x2b0 [ 840.459626][T10754] exit_to_user_mode_loop+0x306/0x1b60 [ 840.460137][T10754] ? user_path_at+0x1fc/0x330 [ 840.460529][T10754] ? __x64_sys_umount+0x1dc/0x250 [ 840.460934][T10754] do_syscall_64+0x24d/0xf80 [ 840.461346][T10754] ? clear_bhb_loop+0x50/0xa0 [ 840.461702][T10754] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 840.462076][T10754] RIP: 0033:0x7f30a879d897 [ 840.462346][T10754] Code: a2 c7 05 5c ee 24 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 840.462620][T10754] RSP: 002b:00007ffc510a0f98 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 840.462943][T10754] RAX: 0000000000000000 RBX: 00007f30a8831ef0 RCX: 00007f30a879d897 [ 840.463194][T10754] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffc510a1050 [ 840.463445][T10754] RBP: 00007ffc510a1050 R08: 00007ffc510a2050 R09: 00000000ffffffff [ 840.463688][T10754] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffc510a20e0 [ 840.463914][T10754] R13: 00007f30a8831ef0 R14: 00000000000cd214 R15: 00007ffc510a2120 [ 840.464286][T10754] [ 840.477884][T10754] F2FS-fs (loop7): Stopped filesystem due to reason: 3 [ 840.605933][T12356] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 840.860200][T12356] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 841.441327][ T34] hsr_slave_0: left promiscuous mode [ 841.471802][ T34] hsr_slave_1: left promiscuous mode [ 842.077857][ T34] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 842.137866][ T34] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 842.244527][ T34] hsr_slave_0: left promiscuous mode [ 842.281429][ T34] hsr_slave_1: left promiscuous mode [ 842.333378][ T34] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 842.363071][ T34] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 843.699249][ T34] team0 (unregistering): Port device team_slave_1 removed [ 843.779782][ T34] team0 (unregistering): Port device team_slave_0 removed [ 844.916850][T12497] netlink: 'syz.7.1947': attribute type 4 has an invalid length. [ 846.029291][T12296] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 846.472780][T12296] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 846.609828][T12356] hsr_slave_0: entered promiscuous mode [ 846.633287][T12356] hsr_slave_1: entered promiscuous mode [ 846.647978][T12356] debugfs: 'hsr0' already exists in 'hsr' [ 846.653882][T12356] Cannot create hsr debugfs directory [ 846.729005][ T1957] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 846.750855][T12296] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 846.803031][T12296] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 846.905514][ T1957] usb 4-1: Using ep0 maxpacket: 32 [ 846.946190][ T1957] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 846.960971][ T1957] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 846.985614][ T1957] usb 4-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 847.002507][ T1957] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 847.042360][ T1957] usb 4-1: config 0 descriptor?? [ 847.533676][ T1957] usbhid 4-1:0.0: can't add hid device: -71 [ 847.559914][ T1957] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 847.630929][ T1957] usb 4-1: USB disconnect, device number 10 [ 847.763420][T12511] netlink: 60 bytes leftover after parsing attributes in process `syz.7.1951'. [ 847.851930][T12512] netlink: 60 bytes leftover after parsing attributes in process `syz.7.1951'. [ 848.747075][T11119] Bluetooth: hci2: unexpected event for opcode 0x040e [ 849.590461][T12296] 8021q: adding VLAN 0 to HW filter on device bond0 [ 849.922395][T12296] 8021q: adding VLAN 0 to HW filter on device team0 [ 850.024683][ T56] bridge0: port 1(bridge_slave_0) entered blocking state [ 850.032271][ T56] bridge0: port 1(bridge_slave_0) entered forwarding state [ 850.104838][T12522] loop3: detected capacity change from 0 to 1024 [ 850.114489][T12343] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 850.171290][T12522] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e055c01c, mo2=0002] [ 850.196777][T12343] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 850.217229][T12522] System zones: 0-1, 3-36 [ 850.242636][T12522] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 850.293272][T12522] syz.3.1955 (pid 12522) is setting deprecated v1 encryption policy; recommend upgrading to v2. [ 850.362389][T12343] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 850.526458][ T5775] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 850.765816][T12343] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 850.945088][T11146] bridge0: port 2(bridge_slave_1) entered blocking state [ 850.952705][T11146] bridge0: port 2(bridge_slave_1) entered forwarding state [ 850.962481][T12528] netlink: 'syz.7.1957': attribute type 4 has an invalid length. [ 851.145020][T12356] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 851.307012][T12356] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 851.475050][T12537] syzkaller0: entered promiscuous mode [ 851.481198][T12537] syzkaller0: entered allmulticast mode [ 851.556084][T12356] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 851.605816][T12541] netlink: 60 bytes leftover after parsing attributes in process `syz.7.1959'. [ 851.617448][T12356] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 851.892642][T12542] netlink: 60 bytes leftover after parsing attributes in process `syz.7.1959'. [ 852.362624][T12547] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1961'. [ 853.550923][T12356] 8021q: adding VLAN 0 to HW filter on device bond0 [ 853.671885][T12343] 8021q: adding VLAN 0 to HW filter on device bond0 [ 853.901614][T12356] 8021q: adding VLAN 0 to HW filter on device team0 [ 854.118713][T12343] 8021q: adding VLAN 0 to HW filter on device team0 [ 854.203865][ T84] bridge0: port 1(bridge_slave_0) entered blocking state [ 854.211522][ T84] bridge0: port 1(bridge_slave_0) entered forwarding state [ 854.332923][ T84] bridge0: port 1(bridge_slave_0) entered blocking state [ 854.340586][ T84] bridge0: port 1(bridge_slave_0) entered forwarding state [ 854.436342][T12561] netlink: 'syz.7.1966': attribute type 4 has an invalid length. [ 854.491418][ T84] bridge0: port 2(bridge_slave_1) entered blocking state [ 854.499039][ T84] bridge0: port 2(bridge_slave_1) entered forwarding state [ 854.580261][ T84] bridge0: port 2(bridge_slave_1) entered blocking state [ 854.587951][ T84] bridge0: port 2(bridge_slave_1) entered forwarding state [ 854.860285][T12296] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 855.410818][T12356] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 855.701187][T12573] syzkaller0: entered promiscuous mode [ 855.707759][T12573] syzkaller0: entered allmulticast mode [ 856.171304][T12584] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1970'. [ 857.961369][T12356] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 858.024755][T12296] veth0_vlan: entered promiscuous mode [ 858.287835][T12296] veth1_vlan: entered promiscuous mode [ 858.450505][T12605] netlink: 'syz.3.1975': attribute type 4 has an invalid length. [ 858.619928][ T13] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 858.734068][T12343] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 859.291815][T12296] veth0_macvtap: entered promiscuous mode [ 859.434761][T12296] veth1_macvtap: entered promiscuous mode [ 859.875946][T12343] veth0_vlan: entered promiscuous mode [ 859.931892][T12296] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 860.177504][T12296] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 860.193558][T12343] veth1_vlan: entered promiscuous mode [ 860.541974][T12618] syzkaller0: entered promiscuous mode [ 860.550777][T12618] syzkaller0: entered allmulticast mode [ 860.736407][ T13] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 860.775888][ T13] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 860.862647][ T34] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 860.905004][ T34] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 861.558839][T12343] veth0_macvtap: entered promiscuous mode [ 861.821501][T12356] veth0_vlan: entered promiscuous mode [ 861.860158][T12343] veth1_macvtap: entered promiscuous mode [ 862.021123][T12356] veth1_vlan: entered promiscuous mode [ 862.071350][T12636] netlink: 'syz.7.1983': attribute type 4 has an invalid length. [ 862.258778][T12343] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 862.465516][T12343] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 862.563164][ T5821] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 862.728771][ T6419] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 862.739159][ T6419] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 862.755534][ T5821] usb 4-1: Using ep0 maxpacket: 32 [ 862.774479][ T5821] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 862.790715][T12356] veth0_macvtap: entered promiscuous mode [ 862.830030][ T5821] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 862.851616][ T5821] usb 4-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 862.896373][ T6419] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 862.924463][ T5821] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 862.981436][ T5821] usb 4-1: config 0 descriptor?? [ 862.992718][T12356] veth1_macvtap: entered promiscuous mode [ 863.051288][ T6421] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 863.494363][ T5821] usbhid 4-1:0.0: can't add hid device: -71 [ 863.520310][T12356] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 863.531559][ T5821] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 863.587633][ T5821] usb 4-1: USB disconnect, device number 11 [ 863.791893][T12356] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 864.066500][ T6419] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 864.108143][ T6419] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 864.158256][ T6419] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 864.211653][ T6419] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 864.885329][T12661] syzkaller0: entered promiscuous mode [ 864.891048][T12661] syzkaller0: entered allmulticast mode [ 865.546076][ T5772] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 865.596058][ T5772] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 865.646261][ T5772] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 865.710516][ T5772] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 865.737948][ T5772] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 865.980292][ T1957] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 866.205433][ T1957] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 866.245385][ T1957] usb 8-1: config 0 has no interfaces? [ 866.272295][ T1957] usb 8-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 866.331077][ T1957] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 866.401933][ T1957] usb 8-1: config 0 descriptor?? [ 866.785880][T10692] usb 8-1: USB disconnect, device number 5 [ 867.699484][T12687] netlink: 'syz.3.1992': attribute type 4 has an invalid length. [ 867.818395][T11119] Bluetooth: hci4: command tx timeout [ 868.575542][ T6421] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 868.624170][T12702] netlink: 60 bytes leftover after parsing attributes in process `syz.7.1995'. [ 868.734355][T12704] netlink: 60 bytes leftover after parsing attributes in process `syz.7.1995'. [ 868.787836][T12667] chnl_net:caif_netlink_parms(): no params data found [ 869.033811][ T6421] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 869.720526][ T6421] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 869.899092][T11119] Bluetooth: hci4: command tx timeout [ 870.020716][ T6421] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 871.636099][ T6421] bridge_slave_1: left allmulticast mode [ 871.713849][ T6421] bridge_slave_1: left promiscuous mode [ 871.761306][ T6421] bridge0: port 2(bridge_slave_1) entered disabled state [ 871.901610][T12671] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 871.994166][T12671] Bluetooth: hci4: command tx timeout [ 872.047252][T12671] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 872.067826][T12671] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 872.310789][T12743] workqueue: Failed to create a rescuer kthread for wq "ceph-completion": -EINTR [ 872.317242][T12671] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 872.396044][T12671] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 872.886948][ T6421] bridge_slave_0: left allmulticast mode [ 872.892917][ T6421] bridge_slave_0: left promiscuous mode [ 873.702262][T12751] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(9) [ 873.709055][T12751] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 873.794737][T12751] vhci_hcd vhci_hcd.0: Device attached [ 873.871629][ T6421] bridge0: port 1(bridge_slave_0) entered disabled state [ 873.871755][T12754] vhci_hcd vhci_hcd.0: pdev(3) rhport(1) sockfd(12) [ 873.885602][T12754] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 873.926284][T12754] vhci_hcd vhci_hcd.0: Device attached [ 874.025860][T12751] vhci_hcd vhci_hcd.0: pdev(3) rhport(2) sockfd(11) [ 874.032757][T12751] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 874.069696][T10692] usb 39-1: new low-speed USB device number 2 using vhci_hcd [ 874.078192][T12671] Bluetooth: hci4: command tx timeout [ 874.106485][T12751] vhci_hcd vhci_hcd.0: Device attached [ 874.192721][T12751] vhci_hcd vhci_hcd.0: pdev(3) rhport(3) sockfd(15) [ 874.199594][T12751] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 874.275722][T12751] vhci_hcd vhci_hcd.0: Device attached [ 874.327952][T12751] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 874.391014][T12762] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(18) [ 874.397901][T12762] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 874.477239][T12754] vhci_hcd vhci_hcd.0: pdev(3) rhport(4) sockfd(17) [ 874.484080][T12754] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 874.588941][T12754] vhci_hcd vhci_hcd.0: Device attached [ 874.744107][T12769] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 874.786434][T12762] vhci_hcd vhci_hcd.0: Device attached [ 874.832682][T12751] vhci_hcd vhci_hcd.0: pdev(3) rhport(7) sockfd(20) [ 874.839546][T12751] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 874.916933][T12754] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 874.936085][T12671] Bluetooth: hci3: command tx timeout [ 874.963663][T12751] vhci_hcd vhci_hcd.0: Device attached [ 875.193692][T12760] vhci_hcd: connection closed [ 875.199273][T12755] vhci_hcd: connection closed [ 875.206084][T12752] vhci_hcd: connection reset by peer [ 875.217381][ T34] vhci_hcd vhci_hcd.3: stop threads [ 875.222786][ T34] vhci_hcd vhci_hcd.3: release socket [ 875.232707][T12757] vhci_hcd: connection closed [ 875.235422][T12771] vhci_hcd: connection closed [ 875.245407][T12764] vhci_hcd: connection closed [ 875.250699][T12763] vhci_hcd: connection closed [ 875.272612][ T34] vhci_hcd vhci_hcd.3: disconnect device [ 875.336279][ T34] vhci_hcd vhci_hcd.3: stop threads [ 875.348250][ T34] vhci_hcd vhci_hcd.3: release socket [ 875.370390][ T34] vhci_hcd vhci_hcd.3: disconnect device [ 875.400665][ T34] vhci_hcd vhci_hcd.3: stop threads [ 875.426624][ T34] vhci_hcd vhci_hcd.3: release socket [ 875.455848][ T34] vhci_hcd vhci_hcd.3: disconnect device [ 875.469784][ T34] vhci_hcd vhci_hcd.3: stop threads [ 875.500887][ T34] vhci_hcd vhci_hcd.3: release socket [ 875.526435][ T34] vhci_hcd vhci_hcd.3: disconnect device [ 875.552629][ T34] vhci_hcd vhci_hcd.3: stop threads [ 875.575524][ T34] vhci_hcd vhci_hcd.3: release socket [ 875.601631][ T34] vhci_hcd vhci_hcd.3: disconnect device [ 875.612662][ T34] vhci_hcd vhci_hcd.3: stop threads [ 875.619578][ T34] vhci_hcd vhci_hcd.3: release socket [ 875.650624][ T34] vhci_hcd vhci_hcd.3: disconnect device [ 875.686004][ T34] vhci_hcd vhci_hcd.3: stop threads [ 875.691464][ T34] vhci_hcd vhci_hcd.3: release socket [ 875.718431][ T6421] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 875.732020][ T34] vhci_hcd vhci_hcd.3: disconnect device [ 875.767933][ T6421] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 875.810587][ T6421] bond0 (unregistering): Released all slaves [ 876.179342][T11119] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 876.195781][T11119] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 876.215027][T11119] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 876.256872][T11119] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 876.281139][T11119] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 876.615653][ T6421] hsr_slave_0: left promiscuous mode [ 876.646737][ T6421] hsr_slave_1: left promiscuous mode [ 876.667146][ T6421] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 876.720526][ T6421] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 876.744659][ T6421] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 876.760249][ T6421] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 876.829301][ T6421] veth1_macvtap: left promiscuous mode [ 876.845521][ T6421] veth0_macvtap: left promiscuous mode [ 876.862068][ T6421] veth1_vlan: left promiscuous mode [ 876.897774][ T6421] veth0_vlan: left promiscuous mode [ 877.045457][T11119] Bluetooth: hci3: command tx timeout [ 878.375732][T11119] Bluetooth: hci0: command tx timeout [ 878.994375][ T6421] team0 (unregistering): Port device team_slave_1 removed [ 879.034560][ T6421] team0 (unregistering): Port device team_slave_0 removed [ 879.100624][T11119] Bluetooth: hci3: command tx timeout [ 879.245551][T10692] vhci_hcd vhci_hcd.3: vhci_device speed not set [ 879.462802][T12667] bridge0: port 1(bridge_slave_0) entered blocking state [ 879.472810][T12667] bridge0: port 1(bridge_slave_0) entered disabled state [ 879.542229][T12667] bridge_slave_0: entered allmulticast mode [ 879.561565][T12667] bridge_slave_0: entered promiscuous mode [ 879.761399][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 879.962502][T12667] bridge0: port 2(bridge_slave_1) entered blocking state [ 879.972932][T12667] bridge0: port 2(bridge_slave_1) entered disabled state [ 879.986709][T12667] bridge_slave_1: entered allmulticast mode [ 880.067227][T12667] bridge_slave_1: entered promiscuous mode [ 880.459693][T11119] Bluetooth: hci0: command tx timeout [ 880.572048][ T5829] usb usb40-port1: attempt power cycle [ 880.728117][T12667] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 880.926197][T12667] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 881.175625][T11119] Bluetooth: hci3: command tx timeout [ 881.223585][ T5829] usb usb40-port1: unable to enumerate USB device [ 881.354150][T12829] netlink: 20 bytes leftover after parsing attributes in process `syz.7.2010'. [ 881.410921][ T6421] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 881.576304][T12833] loop3: detected capacity change from 0 to 128 [ 881.649689][T12667] team0: Port device team_slave_0 added [ 881.707457][T12667] team0: Port device team_slave_1 added [ 881.862512][ T6421] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 882.060504][ T6421] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 882.511444][ T6421] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 882.549985][T11119] Bluetooth: hci0: command tx timeout [ 882.852174][T12842] syzkaller0: entered promiscuous mode [ 882.857974][T12842] syzkaller0: entered allmulticast mode [ 882.881132][T12667] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 882.889356][T12667] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 882.921350][T12667] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 882.960894][T12667] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 882.968194][T12667] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 883.000349][T12667] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 883.783947][T12667] hsr_slave_0: entered promiscuous mode [ 883.820371][T12667] hsr_slave_1: entered promiscuous mode [ 883.829791][T12667] debugfs: 'hsr0' already exists in 'hsr' [ 883.836145][T12667] Cannot create hsr debugfs directory [ 884.563238][T12867] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2019'. [ 884.630374][T11119] Bluetooth: hci0: command tx timeout [ 884.673248][T12871] loop3: detected capacity change from 0 to 128 [ 885.154144][ T6421] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 885.346924][T12739] chnl_net:caif_netlink_parms(): no params data found [ 885.559526][ T6421] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 886.131727][ T6421] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 887.771477][ T6421] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 888.649083][T12776] chnl_net:caif_netlink_parms(): no params data found [ 890.458566][ T6421] bridge_slave_1: left allmulticast mode [ 890.464445][ T6421] bridge_slave_1: left promiscuous mode [ 890.484250][ T6421] bridge0: port 2(bridge_slave_1) entered disabled state [ 890.617214][ T6421] bridge_slave_0: left allmulticast mode [ 890.623066][ T6421] bridge_slave_0: left promiscuous mode [ 890.626314][ T6419] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 890.681847][ T6421] bridge0: port 1(bridge_slave_0) entered disabled state [ 890.741952][ T6421] bridge_slave_1: left allmulticast mode [ 890.755849][ T6421] bridge_slave_1: left promiscuous mode [ 890.762328][T12931] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2028'. [ 890.786826][ T6421] bridge0: port 2(bridge_slave_1) entered disabled state [ 890.820965][ T6421] bridge_slave_0: left allmulticast mode [ 890.846183][ T6421] bridge_slave_0: left promiscuous mode [ 890.852722][ T6421] bridge0: port 1(bridge_slave_0) entered disabled state [ 891.512022][T12934] loop7: detected capacity change from 0 to 128 [ 892.621776][ T6421] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 892.662911][ T6421] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 892.734545][ T6421] bond0 (unregistering): Released all slaves [ 893.616200][T12946] loop3: detected capacity change from 0 to 256 [ 893.643089][T12946] exfat: Deprecated parameter 'utf8' [ 893.969300][T12946] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d) [ 894.778432][ T6421] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 894.846130][ T6421] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 894.901826][ T6421] bond0 (unregistering): Released all slaves [ 896.937551][ T6421] hsr_slave_0: left promiscuous mode [ 897.036484][ T6421] hsr_slave_1: left promiscuous mode [ 897.069604][ T6421] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 897.098953][ T6421] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 897.188734][ T6421] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 897.254440][ T6421] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 897.525658][ T6421] hsr_slave_0: left promiscuous mode [ 897.680992][ T6421] hsr_slave_1: left promiscuous mode [ 897.761029][ T6421] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 897.852506][ T6421] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 897.950514][ T6421] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 898.010945][ T6421] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 898.452126][ T6421] veth1_macvtap: left promiscuous mode [ 898.506227][ T6421] veth0_macvtap: left promiscuous mode [ 898.512210][ T6421] veth1_vlan: left promiscuous mode [ 898.541970][ T6421] veth0_vlan: left promiscuous mode [ 898.549755][ T6421] veth1_macvtap: left promiscuous mode [ 898.567156][ T6421] veth0_macvtap: left promiscuous mode [ 898.573287][ T6421] veth1_vlan: left promiscuous mode [ 898.580382][ T6421] veth0_vlan: left promiscuous mode [ 901.292270][ T6421] team0 (unregistering): Port device team_slave_1 removed [ 901.367890][ T6421] team0 (unregistering): Port device team_slave_0 removed [ 902.132490][ T6421] team0 (unregistering): Port device team_slave_1 removed [ 902.164151][ T6421] team0 (unregistering): Port device team_slave_0 removed [ 902.413886][T12739] bridge0: port 1(bridge_slave_0) entered blocking state [ 902.439823][T12739] bridge0: port 1(bridge_slave_0) entered disabled state [ 902.449355][T12739] bridge_slave_0: entered allmulticast mode [ 902.460248][T12739] bridge_slave_0: entered promiscuous mode [ 902.612044][T12739] bridge0: port 2(bridge_slave_1) entered blocking state [ 902.628588][T12739] bridge0: port 2(bridge_slave_1) entered disabled state [ 902.655856][T12739] bridge_slave_1: entered allmulticast mode [ 902.669774][T12739] bridge_slave_1: entered promiscuous mode [ 902.690794][T12776] bridge0: port 1(bridge_slave_0) entered blocking state [ 902.701342][T12776] bridge0: port 1(bridge_slave_0) entered disabled state [ 902.724456][T12776] bridge_slave_0: entered allmulticast mode [ 902.746005][T12776] bridge_slave_0: entered promiscuous mode [ 903.034487][T12776] bridge0: port 2(bridge_slave_1) entered blocking state [ 903.062874][T12776] bridge0: port 2(bridge_slave_1) entered disabled state [ 903.081977][T12776] bridge_slave_1: entered allmulticast mode [ 903.108288][T12776] bridge_slave_1: entered promiscuous mode [ 903.531343][T12739] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 903.561930][T12990] loop3: detected capacity change from 0 to 128 [ 903.728505][T12990] syz.3.2037: attempt to access beyond end of device [ 903.728505][T12990] loop3: rw=2049, sector=153, nr_sectors = 8 limit=128 [ 903.750836][T12776] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 903.806649][T12990] syz.3.2037: attempt to access beyond end of device [ 903.806649][T12990] loop3: rw=2049, sector=169, nr_sectors = 8 limit=128 [ 903.848824][T12776] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 903.866151][T12990] syz.3.2037: attempt to access beyond end of device [ 903.866151][T12990] loop3: rw=2049, sector=185, nr_sectors = 8 limit=128 [ 903.971243][T12739] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 904.654479][T12776] team0: Port device team_slave_0 added [ 904.714844][T12739] team0: Port device team_slave_0 added [ 904.796138][T12776] team0: Port device team_slave_1 added [ 904.923536][T12739] team0: Port device team_slave_1 added [ 904.948299][T12667] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 906.144910][T13026] loop7: detected capacity change from 0 to 256 [ 906.169737][T13026] exfat: Deprecated parameter 'utf8' [ 906.415728][T13026] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d) [ 906.976297][T12667] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 908.091476][T12667] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 908.198216][T12776] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 908.206265][T12776] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 908.305909][T12776] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 908.421257][T12739] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 908.444400][T12739] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 908.554544][T12739] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 908.815561][T13028] syzkaller0: entered promiscuous mode [ 908.825460][T13028] syzkaller0: entered allmulticast mode [ 908.865883][T12667] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 908.960489][T12776] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 909.010459][T12776] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 909.096086][T12776] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 909.678355][T12739] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 909.707934][T12739] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 909.796114][T12739] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 910.782654][T12776] hsr_slave_0: entered promiscuous mode [ 910.867684][T12776] hsr_slave_1: entered promiscuous mode [ 910.906783][T12776] debugfs: 'hsr0' already exists in 'hsr' [ 910.912723][T12776] Cannot create hsr debugfs directory [ 911.621980][T12739] hsr_slave_0: entered promiscuous mode [ 911.702633][T12739] hsr_slave_1: entered promiscuous mode [ 911.769307][T12739] debugfs: 'hsr0' already exists in 'hsr' [ 911.810172][T12739] Cannot create hsr debugfs directory [ 914.642247][T13066] syzkaller0: entered promiscuous mode [ 914.649485][T13066] syzkaller0: entered allmulticast mode [ 915.239684][T13077] syzkaller0: entered promiscuous mode [ 915.245962][T13077] syzkaller0: entered allmulticast mode [ 916.096826][T12667] 8021q: adding VLAN 0 to HW filter on device bond0 [ 916.297731][T12667] 8021q: adding VLAN 0 to HW filter on device team0 [ 916.474027][ T1003] bridge0: port 1(bridge_slave_0) entered blocking state [ 916.481692][ T1003] bridge0: port 1(bridge_slave_0) entered forwarding state [ 916.664474][ T3444] bridge0: port 2(bridge_slave_1) entered blocking state [ 916.672190][ T3444] bridge0: port 2(bridge_slave_1) entered forwarding state [ 917.744730][T12739] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 917.966159][T12739] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 918.063282][T13113] syzkaller0: entered promiscuous mode [ 918.071625][T13113] syzkaller0: entered allmulticast mode [ 918.314238][T12739] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 918.428064][T12739] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 918.872074][T13119] syzkaller0: entered promiscuous mode [ 918.878284][T13119] syzkaller0: entered allmulticast mode [ 919.081512][T12776] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 919.570321][T12776] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 919.641794][T12776] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 919.800592][T12776] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 920.344218][T12667] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 921.679489][T12739] 8021q: adding VLAN 0 to HW filter on device bond0 [ 922.316076][T13161] loop3: detected capacity change from 0 to 1024 [ 922.340983][T13161] EXT4-fs: Ignoring removed i_version option [ 922.480473][T13161] EXT4-fs (loop3): Test dummy encryption mode enabled [ 922.619029][T13161] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 923.037652][ T1144] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 924.275669][T12776] 8021q: adding VLAN 0 to HW filter on device bond0 [ 924.625565][T13169] syzkaller0: entered promiscuous mode [ 924.636722][T13169] syzkaller0: entered allmulticast mode [ 925.214556][T12739] 8021q: adding VLAN 0 to HW filter on device team0 [ 925.674575][T12776] 8021q: adding VLAN 0 to HW filter on device team0 [ 925.752809][T11147] bridge0: port 1(bridge_slave_0) entered blocking state [ 925.760528][T11147] bridge0: port 1(bridge_slave_0) entered forwarding state [ 926.462365][ T1144] bridge0: port 2(bridge_slave_1) entered blocking state [ 926.470173][ T1144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 926.761159][ T1144] bridge0: port 1(bridge_slave_0) entered blocking state [ 926.768818][ T1144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 927.040441][ T1144] bridge0: port 2(bridge_slave_1) entered blocking state [ 927.048189][ T1144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 928.034752][T12671] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 928.066843][T12671] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 928.119239][T12671] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 928.177741][T12671] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 928.190001][T12671] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 928.838556][T13183] netlink: 60 bytes leftover after parsing attributes in process `syz.7.2070'. [ 929.045770][T13184] netlink: 60 bytes leftover after parsing attributes in process `syz.7.2070'. [ 930.314069][T12671] Bluetooth: hci5: command tx timeout [ 930.618375][ T5775] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 932.376247][T12671] Bluetooth: hci5: command tx timeout [ 932.445902][T11119] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 932.480483][T11119] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 932.498134][T11119] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 932.540168][T11119] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 932.599633][T11119] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 934.298925][T13180] chnl_net:caif_netlink_parms(): no params data found [ 934.458572][T12671] Bluetooth: hci5: command tx timeout [ 934.698241][T12671] Bluetooth: hci4: command tx timeout [ 934.916724][T12776] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 935.025185][T13242] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2078'. [ 935.057576][T13243] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2078'. [ 935.792549][T13253] loop7: detected capacity change from 0 to 128 [ 936.540632][T12671] Bluetooth: hci5: command tx timeout [ 936.642819][T11119] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 936.656592][T11119] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 936.667414][T11119] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 936.706573][T10692] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 936.726975][T11119] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 936.757089][T11119] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 936.786137][T12671] Bluetooth: hci4: command tx timeout [ 936.925665][T10692] usb 4-1: Using ep0 maxpacket: 16 [ 936.950221][T10692] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 936.975340][T10692] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 937.003251][T10692] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 937.025450][T10692] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 937.033714][T10692] usb 4-1: Product: syz [ 937.052367][T10692] usb 4-1: Manufacturer: syz [ 937.111957][T10692] usb 4-1: SerialNumber: syz [ 937.373992][T11146] bridge_slave_1: left allmulticast mode [ 937.420692][T11146] bridge_slave_1: left promiscuous mode [ 937.465247][T11146] bridge0: port 2(bridge_slave_1) entered disabled state [ 937.554093][T11146] bridge_slave_0: left allmulticast mode [ 937.582705][T11146] bridge_slave_0: left promiscuous mode [ 937.615390][T11146] bridge0: port 1(bridge_slave_0) entered disabled state [ 937.686364][T10692] usb 4-1: cannot find UAC_HEADER [ 938.106921][T10692] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 938.187111][T10692] usb 4-1: USB disconnect, device number 12 [ 938.351220][T12999] udevd[12999]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 938.729666][T11146] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 938.796198][T11146] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 938.839003][T11146] bond0 (unregistering): Released all slaves [ 938.855940][T11119] Bluetooth: hci4: command tx timeout [ 938.862204][T12671] Bluetooth: hci3: command tx timeout [ 938.914126][T13267] 8021q: VLANs not supported on caif0 [ 939.631703][T11146] hsr_slave_0: left promiscuous mode [ 939.659362][T11146] hsr_slave_1: left promiscuous mode [ 939.671871][T11146] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 939.693659][T11146] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 940.196077][T13291] netlink: 'syz.7.2085': attribute type 4 has an invalid length. [ 940.293130][T11146] team0 (unregistering): Port device team_slave_1 removed [ 940.350657][T11146] team0 (unregistering): Port device team_slave_0 removed [ 940.597359][T13212] chnl_net:caif_netlink_parms(): no params data found [ 940.661642][T13180] bridge0: port 1(bridge_slave_0) entered blocking state [ 940.669959][T13180] bridge0: port 1(bridge_slave_0) entered disabled state [ 940.679794][T13180] bridge_slave_0: entered allmulticast mode [ 940.690579][T13180] bridge_slave_0: entered promiscuous mode [ 940.939565][T11119] Bluetooth: hci4: command tx timeout [ 940.939586][T12671] Bluetooth: hci3: command tx timeout [ 941.032894][T13180] bridge0: port 2(bridge_slave_1) entered blocking state [ 941.041359][T13180] bridge0: port 2(bridge_slave_1) entered disabled state [ 941.050701][T13180] bridge_slave_1: entered allmulticast mode [ 941.061498][T13180] bridge_slave_1: entered promiscuous mode [ 941.217544][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 941.296900][T13293] netlink: 60 bytes leftover after parsing attributes in process `syz.7.2086'. [ 941.489368][T13294] netlink: 60 bytes leftover after parsing attributes in process `syz.7.2086'. [ 941.715817][T13180] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 941.777542][T13180] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 941.930569][T13304] loop7: detected capacity change from 0 to 256 [ 942.016740][T13180] team0: Port device team_slave_0 added [ 942.110449][T13304] FAT-fs (loop7): Directory bread(block 64) failed [ 942.117515][T13304] FAT-fs (loop7): Directory bread(block 65) failed [ 942.124356][T13304] FAT-fs (loop7): Directory bread(block 66) failed [ 942.131188][T13304] FAT-fs (loop7): Directory bread(block 67) failed [ 942.138317][T13304] FAT-fs (loop7): Directory bread(block 68) failed [ 942.145044][T13304] FAT-fs (loop7): Directory bread(block 69) failed [ 942.151972][T13304] FAT-fs (loop7): Directory bread(block 70) failed [ 942.161552][T13304] FAT-fs (loop7): Directory bread(block 71) failed [ 942.168588][T13304] FAT-fs (loop7): Directory bread(block 72) failed [ 942.175926][T13304] FAT-fs (loop7): Directory bread(block 73) failed [ 942.313283][T13299] syzkaller0: entered promiscuous mode [ 942.344980][T13299] syzkaller0: entered allmulticast mode [ 942.912002][T13180] team0: Port device team_slave_1 added [ 943.015995][T11119] Bluetooth: hci3: command tx timeout [ 945.095834][T11119] Bluetooth: hci3: command tx timeout [ 945.801576][T13180] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 945.875637][T13180] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 945.976152][T13180] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 946.072055][T13314] loop7: detected capacity change from 0 to 128 [ 946.362051][T13180] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 946.386493][T13180] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 946.464895][T13180] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 946.836359][T13316] 8021q: VLANs not supported on caif0 [ 947.075017][T13212] bridge0: port 1(bridge_slave_0) entered blocking state [ 947.082794][T13212] bridge0: port 1(bridge_slave_0) entered disabled state [ 947.126491][T13212] bridge_slave_0: entered allmulticast mode [ 947.146868][T13212] bridge_slave_0: entered promiscuous mode [ 947.194611][T13212] bridge0: port 2(bridge_slave_1) entered blocking state [ 947.202228][T13212] bridge0: port 2(bridge_slave_1) entered disabled state [ 947.210839][T13324] netlink: 'syz.7.2093': attribute type 4 has an invalid length. [ 947.219578][T13212] bridge_slave_1: entered allmulticast mode [ 947.234271][T13212] bridge_slave_1: entered promiscuous mode [ 947.551808][T13212] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 947.680063][T13326] syzkaller0: entered promiscuous mode [ 947.691701][T13326] syzkaller0: entered allmulticast mode [ 947.730575][T13212] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 947.798434][T13259] chnl_net:caif_netlink_parms(): no params data found [ 947.832605][T13329] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 947.848907][T13330] netlink: 60 bytes leftover after parsing attributes in process `syz.7.2095'. [ 947.898787][T13180] hsr_slave_0: entered promiscuous mode [ 947.912795][T13180] hsr_slave_1: entered promiscuous mode [ 947.936508][T13180] debugfs: 'hsr0' already exists in 'hsr' [ 947.960655][T13180] Cannot create hsr debugfs directory [ 948.184522][T13331] netlink: 60 bytes leftover after parsing attributes in process `syz.7.2095'. [ 948.263375][T13212] team0: Port device team_slave_0 added [ 948.749081][T13212] team0: Port device team_slave_1 added [ 950.577851][T13212] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 950.585012][T13212] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 950.720015][T13212] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 950.814575][T11119] Bluetooth: hci1: unexpected event for opcode 0x2006 [ 951.009438][T13212] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 951.056034][T13212] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 951.145317][T13212] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 951.222345][T13360] loop7: detected capacity change from 0 to 128 [ 952.144649][T13366] 8021q: VLANs not supported on caif0 [ 952.210330][T13368] netlink: 'syz.3.2102': attribute type 4 has an invalid length. [ 952.321192][T13212] hsr_slave_0: entered promiscuous mode [ 952.349735][T13212] hsr_slave_1: entered promiscuous mode [ 952.360119][T13212] debugfs: 'hsr0' already exists in 'hsr' [ 952.367505][T13212] Cannot create hsr debugfs directory [ 952.385820][T13259] bridge0: port 1(bridge_slave_0) entered blocking state [ 952.409278][T13259] bridge0: port 1(bridge_slave_0) entered disabled state [ 952.429641][T13259] bridge_slave_0: entered allmulticast mode [ 952.450339][T13259] bridge_slave_0: entered promiscuous mode [ 952.645445][T13259] bridge0: port 2(bridge_slave_1) entered blocking state [ 952.673931][T13259] bridge0: port 2(bridge_slave_1) entered disabled state [ 952.695008][T13259] bridge_slave_1: entered allmulticast mode [ 952.740200][T13259] bridge_slave_1: entered promiscuous mode [ 953.511586][T13376] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 953.648246][T13259] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 953.714353][T13378] syzkaller0: entered promiscuous mode [ 953.724654][T13378] syzkaller0: entered allmulticast mode [ 953.846178][T13259] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 954.235818][T11146] bridge_slave_1: left allmulticast mode [ 954.266672][T11146] bridge_slave_1: left promiscuous mode [ 954.273351][T11146] bridge0: port 2(bridge_slave_1) entered disabled state [ 954.376226][T11146] bridge_slave_0: left allmulticast mode [ 954.382197][T11146] bridge_slave_0: left promiscuous mode [ 954.416619][T11146] bridge0: port 1(bridge_slave_0) entered disabled state [ 954.483837][T11146] bridge_slave_1: left allmulticast mode [ 955.276652][ T6419] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 955.338808][T13373] loop7: detected capacity change from 0 to 40427 [ 955.465533][T11146] bridge_slave_1: left promiscuous mode [ 955.473132][T13373] F2FS-fs (loop7): invalid crc value [ 955.483832][T11146] bridge0: port 2(bridge_slave_1) entered disabled state [ 955.510548][T11146] bridge_slave_0: left allmulticast mode [ 956.467872][T11146] bridge_slave_0: left promiscuous mode [ 956.474526][T11146] bridge0: port 1(bridge_slave_0) entered disabled state [ 956.905887][T13398] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(15) [ 956.912805][T13398] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 956.985646][T13398] vhci_hcd vhci_hcd.0: Device attached [ 956.993982][T13373] F2FS-fs (loop7): f2fs_recover_fsync_data: recovery fsync data, check_only: 1 [ 957.022717][T13402] vhci_hcd vhci_hcd.0: pdev(3) rhport(1) sockfd(18) [ 957.029783][T13402] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 957.055993][T13373] F2FS-fs (loop7): Start checkpoint disabled! [ 957.060341][T13402] vhci_hcd vhci_hcd.0: Device attached [ 957.079536][T13373] F2FS-fs (loop7): f2fs_disable_checkpoint() finish, err:0 [ 957.095529][T13373] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e6 [ 957.111516][T13407] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 957.140593][T13398] vhci_hcd vhci_hcd.0: pdev(3) rhport(2) sockfd(20) [ 957.147466][T13398] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 957.164366][T13407] vhci_hcd vhci_hcd.0: pdev(3) rhport(4) sockfd(25) [ 957.171226][T13407] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 957.212426][T13398] vhci_hcd vhci_hcd.0: Device attached [ 957.233919][T13407] vhci_hcd vhci_hcd.0: Device attached [ 957.281556][T13402] vhci_hcd vhci_hcd.0: pdev(3) rhport(5) sockfd(17) [ 957.288425][T13402] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 957.337074][ T5828] usb 39-1: new low-speed USB device number 3 using vhci_hcd [ 957.358137][T13402] vhci_hcd vhci_hcd.0: Device attached [ 957.372685][T13398] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 957.438127][T13405] vhci_hcd: connection closed [ 957.439364][T11147] vhci_hcd vhci_hcd.3: stop threads [ 957.450181][T13409] vhci_hcd: connection closed [ 957.450846][T13411] vhci_hcd: connection closed [ 957.456695][T13400] vhci_hcd: connection reset by peer [ 957.461326][T11147] vhci_hcd vhci_hcd.3: release socket [ 957.463233][T13404] vhci_hcd: connection closed [ 957.484353][T11147] vhci_hcd vhci_hcd.3: disconnect device [ 957.508187][T11147] vhci_hcd vhci_hcd.3: stop threads [ 957.513615][T11147] vhci_hcd vhci_hcd.3: release socket [ 957.542058][T11147] vhci_hcd vhci_hcd.3: disconnect device [ 957.552617][T11147] vhci_hcd vhci_hcd.3: stop threads [ 957.573564][T11147] vhci_hcd vhci_hcd.3: release socket [ 957.596828][T11147] vhci_hcd vhci_hcd.3: disconnect device [ 957.625045][T11147] vhci_hcd vhci_hcd.3: stop threads [ 957.630707][T11147] vhci_hcd vhci_hcd.3: release socket [ 957.659880][T11147] vhci_hcd vhci_hcd.3: disconnect device [ 957.685499][T11147] vhci_hcd vhci_hcd.3: stop threads [ 957.715695][T11147] vhci_hcd vhci_hcd.3: release socket [ 957.755024][T11147] vhci_hcd vhci_hcd.3: disconnect device [ 958.051961][T11146] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 958.133296][T11146] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 958.188106][T11146] bond0 (unregistering): Released all slaves [ 958.720134][T11146] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 958.786920][T11146] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 958.806692][T11146] bond0 (unregistering): Released all slaves [ 958.956544][T13259] team0: Port device team_slave_0 added [ 959.183907][T13259] team0: Port device team_slave_1 added [ 959.220949][T13421] loop3: detected capacity change from 0 to 256 [ 959.560405][T11146] hsr_slave_0: left promiscuous mode [ 959.644156][T11146] hsr_slave_1: left promiscuous mode [ 959.695646][T11146] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 959.773790][T11146] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 959.952172][T11146] hsr_slave_0: left promiscuous mode [ 960.008616][T11146] hsr_slave_1: left promiscuous mode [ 960.038163][T11146] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 960.097533][T11146] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 961.372394][T13437] serio: Serial port ttyS3 [ 963.296042][ T5828] vhci_hcd vhci_hcd.3: vhci_device speed not set [ 964.056643][T11146] team0 (unregistering): Port device team_slave_1 removed [ 964.122378][T11146] team0 (unregistering): Port device team_slave_0 removed [ 964.407231][T13453] netlink: 'syz.7.2111': attribute type 4 has an invalid length. [ 964.897506][T11146] team0 (unregistering): Port device team_slave_1 removed [ 964.943421][T11146] team0 (unregistering): Port device team_slave_0 removed [ 965.224787][T13259] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 965.233530][T13259] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 965.261865][T13259] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 965.333515][T13434] 8021q: VLANs not supported on caif0 [ 965.391325][T13259] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 965.422344][T13259] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 965.538442][T13259] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 966.784447][T13462] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 967.226622][T13259] hsr_slave_0: entered promiscuous mode [ 967.277614][T13259] hsr_slave_1: entered promiscuous mode [ 967.335677][T13259] debugfs: 'hsr0' already exists in 'hsr' [ 967.345494][T13259] Cannot create hsr debugfs directory [ 967.493226][T13180] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 968.044769][T13180] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 968.183953][T13475] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(15) [ 968.190830][T13475] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 968.240845][T13480] vhci_hcd vhci_hcd.0: pdev(3) rhport(1) sockfd(18) [ 968.247709][T13480] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 968.335434][T13475] vhci_hcd vhci_hcd.0: Device attached [ 968.345036][T13480] vhci_hcd vhci_hcd.0: Device attached [ 968.401624][T13484] vhci_hcd vhci_hcd.0: pdev(3) rhport(2) sockfd(17) [ 968.408481][T13484] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 968.416399][T13475] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 968.435711][T10707] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 968.437227][T13180] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 968.486438][T13475] vhci_hcd vhci_hcd.0: pdev(3) rhport(4) sockfd(24) [ 968.493298][T13475] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 968.503080][T13475] vhci_hcd vhci_hcd.0: Device attached [ 968.521734][T13475] vhci_hcd vhci_hcd.0: pdev(3) rhport(5) sockfd(26) [ 968.528576][T13475] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 968.536857][T13484] vhci_hcd vhci_hcd.0: Device attached [ 968.544874][T13180] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 968.607155][T13480] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 968.615675][ T5828] usb 39-1: new low-speed USB device number 4 using vhci_hcd [ 968.650784][T13475] vhci_hcd vhci_hcd.0: Device attached [ 968.683376][T10707] usb 8-1: config 1 has an invalid interface number: 188 but max is 0 [ 968.721067][T10707] usb 8-1: config 1 has an invalid descriptor of length 102, skipping remainder of the config [ 968.752909][T13485] vhci_hcd: connection closed [ 968.755384][T13488] vhci_hcd: connection closed [ 968.759271][T11021] vhci_hcd vhci_hcd.3: stop threads [ 968.770775][T13490] vhci_hcd: connection closed [ 968.776519][T10707] usb 8-1: config 1 has no interface number 0 [ 968.793233][T13478] vhci_hcd: connection reset by peer [ 968.810525][T13481] vhci_hcd: connection closed [ 968.839398][T11021] vhci_hcd vhci_hcd.3: release socket [ 968.854556][T10707] usb 8-1: config 1 interface 188 altsetting 209 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 968.884079][T11021] vhci_hcd vhci_hcd.3: disconnect device [ 968.895479][T10707] usb 8-1: config 1 interface 188 has no altsetting 0 [ 968.927655][T11021] vhci_hcd vhci_hcd.3: stop threads [ 968.933074][T11021] vhci_hcd vhci_hcd.3: release socket [ 968.965565][T10707] usb 8-1: New USB device found, idVendor=2040, idProduct=7200, bcdDevice=5b.6b [ 968.994553][T11021] vhci_hcd vhci_hcd.3: disconnect device [ 969.005311][T10707] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 969.026517][T11021] vhci_hcd vhci_hcd.3: stop threads [ 969.031952][T11021] vhci_hcd vhci_hcd.3: release socket [ 969.046268][T10707] usb 8-1: Product: syz [ 969.050628][T10707] usb 8-1: Manufacturer: syz [ 969.076260][T11021] vhci_hcd vhci_hcd.3: disconnect device [ 969.085891][T10707] usb 8-1: SerialNumber: syz [ 969.106194][T11021] vhci_hcd vhci_hcd.3: stop threads [ 969.111638][T11021] vhci_hcd vhci_hcd.3: release socket [ 969.124232][T11021] vhci_hcd vhci_hcd.3: disconnect device [ 969.175073][T11021] vhci_hcd vhci_hcd.3: stop threads [ 969.199163][T10707] usb 8-1: Audio class v2/v3 interfaces need an interface association [ 969.220003][T11021] vhci_hcd vhci_hcd.3: release socket [ 969.251572][T11021] vhci_hcd vhci_hcd.3: disconnect device [ 969.712345][T10707] snd-usb-audio 8-1:1.188: probe with driver snd-usb-audio failed with error -22 [ 969.780529][T10707] usb 8-1: USB disconnect, device number 6 [ 969.890723][T12999] udevd[12999]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.188/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 970.437055][T13212] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 970.445974][T13502] loop7: detected capacity change from 0 to 256 [ 971.350889][T13212] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 972.966052][T13511] 8021q: VLANs not supported on caif0 [ 972.973591][T13212] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 973.189643][T13212] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 973.880268][ T5828] vhci_hcd vhci_hcd.3: vhci_device speed not set [ 974.040214][T13518] netlink: 'syz.7.2120': attribute type 4 has an invalid length. [ 975.524120][T13180] 8021q: adding VLAN 0 to HW filter on device bond0 [ 975.697507][T13526] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 975.961216][T13259] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 976.193446][T13180] 8021q: adding VLAN 0 to HW filter on device team0 [ 976.245960][T13259] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 976.360140][T13259] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 976.551685][T11021] bridge0: port 1(bridge_slave_0) entered blocking state [ 976.559397][T11021] bridge0: port 1(bridge_slave_0) entered forwarding state [ 976.645492][T13259] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 976.997513][T11021] bridge0: port 2(bridge_slave_1) entered blocking state [ 977.005210][T11021] bridge0: port 2(bridge_slave_1) entered forwarding state [ 977.678336][T13540] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(15) [ 977.685224][T13540] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 977.731755][T13540] vhci_hcd vhci_hcd.0: Device attached [ 977.784367][T13544] vhci_hcd vhci_hcd.0: pdev(7) rhport(1) sockfd(18) [ 977.791250][T13544] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 977.867440][T13548] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 977.918719][T13544] vhci_hcd vhci_hcd.0: Device attached [ 977.988556][T13552] vhci_hcd vhci_hcd.0: pdev(7) rhport(4) sockfd(20) [ 977.995434][T13552] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 978.017105][T13540] vhci_hcd vhci_hcd.0: pdev(7) rhport(2) sockfd(17) [ 978.023982][T13540] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 978.035894][ T794] usb 47-1: new low-speed USB device number 2 using vhci_hcd [ 978.123059][T13212] 8021q: adding VLAN 0 to HW filter on device bond0 [ 978.189634][T13540] vhci_hcd vhci_hcd.0: Device attached [ 978.243858][T13548] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 978.341626][T13544] vhci_hcd vhci_hcd.0: pdev(7) rhport(5) sockfd(27) [ 978.348514][T13544] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 978.455646][T13552] vhci_hcd vhci_hcd.0: Device attached [ 978.655845][T13544] vhci_hcd vhci_hcd.0: Device attached [ 978.812503][T13553] vhci_hcd: connection closed [ 978.826222][T13549] vhci_hcd: connection closed [ 978.831780][T13557] vhci_hcd: connection closed [ 978.838604][T13542] vhci_hcd: connection reset by peer [ 978.854017][ T84] vhci_hcd vhci_hcd.7: stop threads [ 978.857958][T13545] vhci_hcd: connection closed [ 979.865613][ T84] vhci_hcd vhci_hcd.7: release socket [ 980.032042][ T84] vhci_hcd vhci_hcd.7: disconnect device [ 980.123688][ T84] vhci_hcd vhci_hcd.7: stop threads [ 980.213876][ T84] vhci_hcd vhci_hcd.7: release socket [ 980.300688][ T84] vhci_hcd vhci_hcd.7: disconnect device [ 980.377271][T13212] 8021q: adding VLAN 0 to HW filter on device team0 [ 980.421095][ T84] vhci_hcd vhci_hcd.7: stop threads [ 980.487662][ T84] vhci_hcd vhci_hcd.7: release socket [ 980.552338][ T84] vhci_hcd vhci_hcd.7: disconnect device [ 980.713460][ T84] vhci_hcd vhci_hcd.7: stop threads [ 980.774025][ T84] vhci_hcd vhci_hcd.7: release socket [ 980.790435][ T84] vhci_hcd vhci_hcd.7: disconnect device [ 980.840903][ T84] vhci_hcd vhci_hcd.7: stop threads [ 980.964107][ T84] vhci_hcd vhci_hcd.7: release socket [ 981.023668][ T34] bridge0: port 1(bridge_slave_0) entered blocking state [ 981.031233][ T34] bridge0: port 1(bridge_slave_0) entered forwarding state [ 981.125877][ T84] vhci_hcd vhci_hcd.7: disconnect device [ 981.317401][ T34] bridge0: port 2(bridge_slave_1) entered blocking state [ 981.325052][ T34] bridge0: port 2(bridge_slave_1) entered forwarding state [ 982.023678][T13574] loop3: detected capacity change from 0 to 256 [ 982.333718][T13259] 8021q: adding VLAN 0 to HW filter on device bond0 [ 983.198172][T13259] 8021q: adding VLAN 0 to HW filter on device team0 [ 983.397213][T13579] 8021q: VLANs not supported on caif0 [ 983.667056][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 983.674620][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 983.959931][T11146] bridge0: port 2(bridge_slave_1) entered blocking state [ 983.967616][T11146] bridge0: port 2(bridge_slave_1) entered forwarding state [ 984.205080][ T794] vhci_hcd vhci_hcd.7: vhci_device speed not set [ 987.194399][ T1003] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 987.918681][T13180] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 988.520881][T13259] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 989.397699][T13597] netlink: 'syz.7.2129': attribute type 4 has an invalid length. [ 992.500404][T12671] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 992.517690][T12671] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 992.539942][T12671] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 992.572277][T12671] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 992.589830][T12671] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 994.538548][T13259] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 994.696316][T12671] Bluetooth: hci0: command tx timeout [ 996.656356][T11119] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 996.679565][T11119] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 996.689702][T11119] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 996.706382][T11119] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 996.718897][T11119] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 996.779264][T12671] Bluetooth: hci0: command tx timeout [ 997.159123][T13634] loop7: detected capacity change from 0 to 128 [ 998.888915][T12671] Bluetooth: hci6: command tx timeout [ 998.894575][T12671] Bluetooth: hci0: command tx timeout [ 1000.955793][T11119] Bluetooth: hci0: command tx timeout [ 1000.961435][T11119] Bluetooth: hci6: command tx timeout [ 1001.437317][T12671] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1001.451483][T12671] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1001.468230][T12671] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1001.483354][T12671] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1001.503893][T12671] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1002.282229][T13643] syzkaller0: entered promiscuous mode [ 1002.305476][T13643] syzkaller0: entered allmulticast mode [ 1002.595422][T10707] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 1002.643946][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 1002.739362][T10707] usb 4-1: device descriptor read/64, error -71 [ 1002.761675][T13616] chnl_net:caif_netlink_parms(): no params data found [ 1002.985688][T10707] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 1003.017934][T12671] Bluetooth: hci6: command tx timeout [ 1003.145407][T10707] usb 4-1: device descriptor read/64, error -71 [ 1003.267230][T10707] usb usb4-port1: attempt power cycle [ 1003.580004][T12671] Bluetooth: hci5: command tx timeout [ 1003.656610][T10707] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 1003.688828][T10707] usb 4-1: device descriptor read/8, error -71 [ 1003.780071][T13670] netlink: 'syz.7.2137': attribute type 4 has an invalid length. [ 1003.945472][T10707] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 1003.977522][T10707] usb 4-1: device descriptor read/8, error -71 [ 1004.092369][T10707] usb usb4-port1: unable to enumerate USB device [ 1004.291290][T13676] loop7: detected capacity change from 0 to 256 [ 1005.096115][T12671] Bluetooth: hci6: command tx timeout [ 1005.178440][T13630] chnl_net:caif_netlink_parms(): no params data found [ 1005.655396][T12671] Bluetooth: hci5: command tx timeout [ 1006.131684][ T84] bridge_slave_1: left allmulticast mode [ 1006.161040][T13682] loop3: detected capacity change from 0 to 128 [ 1006.174419][ T84] bridge_slave_1: left promiscuous mode [ 1006.204152][ T84] bridge0: port 2(bridge_slave_1) entered disabled state [ 1006.276650][T13682] MINIX-fs: file system does not have enough imap blocks allocated. Refusing to mount. [ 1006.347250][ T84] bridge_slave_0: left allmulticast mode [ 1006.372013][T13682] MINIX-fs: bad superblock [ 1006.417141][ T84] bridge_slave_0: left promiscuous mode [ 1006.492948][ T84] bridge0: port 1(bridge_slave_0) entered disabled state [ 1007.742627][T12671] Bluetooth: hci5: command tx timeout [ 1008.083104][ T84] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1008.152910][ T84] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1008.209490][ T84] bond0 (unregistering): Released all slaves [ 1008.691611][T13616] bridge0: port 1(bridge_slave_0) entered blocking state [ 1008.752749][T13616] bridge0: port 1(bridge_slave_0) entered disabled state [ 1008.796240][T13616] bridge_slave_0: entered allmulticast mode [ 1008.831126][T13616] bridge_slave_0: entered promiscuous mode [ 1008.967215][ T84] hsr_slave_0: left promiscuous mode [ 1009.051050][ T84] hsr_slave_1: left promiscuous mode [ 1009.086274][ T84] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1009.141891][ T84] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1009.824900][T12671] Bluetooth: hci5: command tx timeout [ 1011.304726][ T84] team0 (unregistering): Port device team_slave_1 removed [ 1011.453876][ T84] team0 (unregistering): Port device team_slave_0 removed [ 1012.686676][T13690] loop3: detected capacity change from 0 to 256 [ 1013.076928][T13616] bridge0: port 2(bridge_slave_1) entered blocking state [ 1013.138835][T13616] bridge0: port 2(bridge_slave_1) entered disabled state [ 1013.216545][T13616] bridge_slave_1: entered allmulticast mode [ 1013.244084][T13616] bridge_slave_1: entered promiscuous mode [ 1013.396226][T13690] FAT-fs (loop3): Directory bread(block 64) failed [ 1013.453162][T13690] FAT-fs (loop3): Directory bread(block 65) failed [ 1013.513248][T13690] FAT-fs (loop3): Directory bread(block 66) failed [ 1013.563617][T13690] FAT-fs (loop3): Directory bread(block 67) failed [ 1013.594816][T13690] FAT-fs (loop3): Directory bread(block 68) failed [ 1013.605721][T13690] FAT-fs (loop3): Directory bread(block 69) failed [ 1013.612610][T13690] FAT-fs (loop3): Directory bread(block 70) failed [ 1013.704932][T13690] FAT-fs (loop3): Directory bread(block 71) failed [ 1013.750911][T13690] FAT-fs (loop3): Directory bread(block 72) failed [ 1014.372412][T13690] FAT-fs (loop3): Directory bread(block 73) failed [ 1014.468174][T13616] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1015.019896][T13616] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1015.811418][T13616] team0: Port device team_slave_0 added [ 1015.997632][T13710] netlink: 'syz.3.2145': attribute type 4 has an invalid length. [ 1016.157816][T13616] team0: Port device team_slave_1 added [ 1016.187552][T13630] bridge0: port 1(bridge_slave_0) entered blocking state [ 1016.227190][T13630] bridge0: port 1(bridge_slave_0) entered disabled state [ 1016.241702][T13630] bridge_slave_0: entered allmulticast mode [ 1016.304043][T13630] bridge_slave_0: entered promiscuous mode [ 1016.346149][T13651] chnl_net:caif_netlink_parms(): no params data found [ 1016.658528][T13630] bridge0: port 2(bridge_slave_1) entered blocking state [ 1016.676184][T13630] bridge0: port 2(bridge_slave_1) entered disabled state [ 1016.693482][T13630] bridge_slave_1: entered allmulticast mode [ 1016.735986][T13630] bridge_slave_1: entered promiscuous mode [ 1016.860457][T13616] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1016.879510][T13616] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1016.916309][T13616] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1016.965785][T10692] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 1017.098466][T13616] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1017.123514][T13616] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1017.174293][T13616] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1017.185671][T10692] usb 4-1: Using ep0 maxpacket: 32 [ 1017.207844][T10692] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1017.234952][T10692] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1017.244750][T10692] usb 4-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 1017.273423][T10692] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1017.320321][T10692] usb 4-1: config 0 descriptor?? [ 1017.574878][T13630] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1017.669865][T13630] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1017.782428][T13616] hsr_slave_0: entered promiscuous mode [ 1017.800738][T13616] hsr_slave_1: entered promiscuous mode [ 1017.813979][T13616] debugfs: 'hsr0' already exists in 'hsr' [ 1017.821138][T13616] Cannot create hsr debugfs directory [ 1018.362112][T13630] team0: Port device team_slave_0 added [ 1018.568329][T13630] team0: Port device team_slave_1 added [ 1018.757455][T13651] bridge0: port 1(bridge_slave_0) entered blocking state [ 1018.773343][T13651] bridge0: port 1(bridge_slave_0) entered disabled state [ 1018.800000][T13651] bridge_slave_0: entered allmulticast mode [ 1018.815040][T13651] bridge_slave_0: entered promiscuous mode [ 1019.010423][T13651] bridge0: port 2(bridge_slave_1) entered blocking state [ 1019.024828][T13651] bridge0: port 2(bridge_slave_1) entered disabled state [ 1019.048018][T13651] bridge_slave_1: entered allmulticast mode [ 1019.074132][T13651] bridge_slave_1: entered promiscuous mode [ 1019.409887][T13630] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1019.426188][T13630] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1019.466618][T13630] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1019.822654][T13630] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1019.857297][T13630] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1019.895429][T13630] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1019.975469][T10707] usb 4-1: USB disconnect, device number 17 [ 1020.049119][T13651] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1020.364100][T13651] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1020.542813][ T1003] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1022.116232][T13651] team0: Port device team_slave_0 added [ 1022.444406][T13651] team0: Port device team_slave_1 added [ 1022.623055][T13630] hsr_slave_0: entered promiscuous mode [ 1022.651010][T13630] hsr_slave_1: entered promiscuous mode [ 1022.672415][T13630] debugfs: 'hsr0' already exists in 'hsr' [ 1022.683556][T13630] Cannot create hsr debugfs directory [ 1022.809123][T13750] 8021q: VLANs not supported on caif0 [ 1023.177994][T13651] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1023.209147][T13651] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1023.295416][T13651] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1023.581582][T13651] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1023.595022][T13651] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1023.638695][T13651] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1023.993428][T13756] netlink: 'syz.3.2153': attribute type 4 has an invalid length. [ 1024.235849][T13753] syzkaller0: entered promiscuous mode [ 1024.242297][T13753] syzkaller0: entered allmulticast mode [ 1024.851332][T13651] hsr_slave_0: entered promiscuous mode [ 1024.864562][T13651] hsr_slave_1: entered promiscuous mode [ 1024.903285][T13651] debugfs: 'hsr0' already exists in 'hsr' [ 1024.915949][T13651] Cannot create hsr debugfs directory [ 1025.307080][ T794] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 1025.465209][ T84] bridge_slave_1: left allmulticast mode [ 1025.471084][ T84] bridge_slave_1: left promiscuous mode [ 1025.485777][ T794] usb 8-1: Using ep0 maxpacket: 32 [ 1025.498587][ T84] bridge0: port 2(bridge_slave_1) entered disabled state [ 1025.531366][ T794] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1025.546745][ T84] bridge_slave_0: left allmulticast mode [ 1025.552607][ T84] bridge_slave_0: left promiscuous mode [ 1025.557154][ T794] usb 8-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1025.577343][ T794] usb 8-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 1025.587151][ T794] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1025.601527][ T794] usb 8-1: config 0 descriptor?? [ 1025.607137][ T84] bridge0: port 1(bridge_slave_0) entered disabled state [ 1025.650611][ T84] bridge_slave_1: left allmulticast mode [ 1025.656732][ T84] bridge_slave_1: left promiscuous mode [ 1025.663574][ T84] bridge0: port 2(bridge_slave_1) entered disabled state [ 1025.678913][ T84] bridge_slave_0: left allmulticast mode [ 1025.702973][ T84] bridge_slave_0: left promiscuous mode [ 1025.711935][ T84] bridge0: port 1(bridge_slave_0) entered disabled state [ 1026.452416][ T84] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1026.473776][ T84] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1026.494434][ T84] bond0 (unregistering): Released all slaves [ 1026.693782][ T84] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1026.718890][ T84] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1026.742651][ T84] bond0 (unregistering): Released all slaves [ 1026.923789][T13776] tipc: Enabling of bearer rejected, failed to enable media [ 1027.077925][ T84] hsr_slave_0: left promiscuous mode [ 1027.092934][ T84] hsr_slave_1: left promiscuous mode [ 1027.102630][ T84] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1027.133253][ T84] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1027.201860][ T84] hsr_slave_0: left promiscuous mode [ 1027.217839][ T84] hsr_slave_1: left promiscuous mode [ 1027.254985][ T84] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1027.277657][ T84] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1028.117411][ T84] team0 (unregistering): Port device team_slave_1 removed [ 1028.179996][ T794] usb 8-1: USB disconnect, device number 7 [ 1028.249372][ T84] team0 (unregistering): Port device team_slave_0 removed [ 1028.317418][T13792] loop7: detected capacity change from 0 to 256 [ 1029.104211][T13798] netlink: 'syz.7.2162': attribute type 4 has an invalid length. [ 1029.149868][ T84] team0 (unregistering): Port device team_slave_1 removed [ 1029.206809][ T84] team0 (unregistering): Port device team_slave_0 removed [ 1029.462003][T13616] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1029.608232][T13790] 8021q: VLANs not supported on caif0 [ 1029.629424][T13616] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1029.699669][T13616] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1029.922091][T13616] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1031.113955][T13810] loop3: detected capacity change from 0 to 1024 [ 1031.140454][T13810] EXT4-fs: Ignoring removed i_version option [ 1031.250798][T13810] EXT4-fs (loop3): Test dummy encryption mode enabled [ 1031.337157][T13807] syzkaller0: entered promiscuous mode [ 1031.438313][T13810] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1031.815642][T13807] syzkaller0: entered allmulticast mode [ 1035.081857][T13630] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1035.465394][T13630] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1035.881287][T13822] syzkaller0: entered promiscuous mode [ 1035.920886][T13822] syzkaller0: entered allmulticast mode [ 1036.006053][T13630] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1036.129711][T13821] tipc: Started in network mode [ 1036.156000][T13821] tipc: Node identity da03f6950b0b, cluster identity 4711 [ 1036.186539][T13821] tipc: Enabled bearer , priority 0 [ 1036.323103][T13630] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1036.437758][T13818] tipc: Resetting bearer [ 1036.544223][T13818] tipc: Disabling bearer [ 1037.250720][T13616] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1038.124697][T13616] 8021q: adding VLAN 0 to HW filter on device team0 [ 1038.349883][T11146] bridge0: port 1(bridge_slave_0) entered blocking state [ 1038.357516][T11146] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1038.772239][T13310] bridge0: port 2(bridge_slave_1) entered blocking state [ 1038.779923][T13310] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1039.106240][ T5775] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1039.148651][T13651] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1039.365353][T13651] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1039.534556][T13651] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1039.701671][T13651] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1039.968527][ T5828] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 1040.170186][ T5828] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1040.205516][ T5828] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1040.263024][ T5828] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1040.299603][ T5828] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1040.330948][ T5828] usb 4-1: SerialNumber: syz [ 1040.487857][T13630] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1040.609679][ T5828] usb 4-1: 0:2 : does not exist [ 1040.834859][T13630] 8021q: adding VLAN 0 to HW filter on device team0 [ 1040.913124][T11147] bridge0: port 1(bridge_slave_0) entered blocking state [ 1040.920810][T11147] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1041.047305][T11147] bridge0: port 2(bridge_slave_1) entered blocking state [ 1041.054851][T11147] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1041.182071][ T5828] usb 4-1: USB disconnect, device number 18 [ 1041.482109][T13695] udevd[13695]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1042.117781][T13847] 8021q: VLANs not supported on caif0 [ 1042.397320][T13651] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1042.759979][T13651] 8021q: adding VLAN 0 to HW filter on device team0 [ 1042.870022][ T1003] bridge0: port 1(bridge_slave_0) entered blocking state [ 1042.877675][ T1003] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1042.971165][T13856] netlink: 'syz.3.2171': attribute type 4 has an invalid length. [ 1043.119208][ T1003] bridge0: port 2(bridge_slave_1) entered blocking state [ 1043.126834][ T1003] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1043.488872][T13616] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1043.555601][T13862] syzkaller0: entered promiscuous mode [ 1043.561347][T13862] syzkaller0: entered allmulticast mode [ 1044.748748][T13877] tipc: Enabled bearer , priority 0 [ 1044.806770][T13879] syzkaller0: entered promiscuous mode [ 1044.812532][T13879] syzkaller0: entered allmulticast mode [ 1044.986357][T13876] tipc: Resetting bearer [ 1045.040764][T13876] tipc: Disabling bearer [ 1046.182170][T13891] loop7: detected capacity change from 0 to 1024 [ 1046.210970][T13891] EXT4-fs: Ignoring removed i_version option [ 1046.917055][T13891] EXT4-fs (loop7): Test dummy encryption mode enabled [ 1046.955383][T10272] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 1047.149280][T13891] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1048.915924][T10272] usb 4-1: Using ep0 maxpacket: 32 [ 1049.222466][T13630] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1049.899339][T10272] usb 4-1: device descriptor read/all, error -71 [ 1051.760512][T13630] veth0_vlan: entered promiscuous mode [ 1052.323972][T13630] veth1_vlan: entered promiscuous mode [ 1052.538021][ T56] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1054.507828][T10754] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1054.902225][T13651] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1054.940305][T11119] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1054.950114][T11119] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1054.967908][T11119] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1054.999276][T11119] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1055.014377][T11119] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1056.080050][T12671] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1056.091643][T12671] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1056.102782][T12671] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1056.124102][T12671] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1056.166192][T12671] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1056.266640][T13926] netlink: 'syz.7.2180': attribute type 4 has an invalid length. [ 1057.095394][T12671] Bluetooth: hci3: command tx timeout [ 1058.296718][T12671] Bluetooth: hci4: command tx timeout [ 1058.955609][T11119] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1058.991696][T11119] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1059.016163][T11119] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1059.060543][T11119] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1059.084456][T11119] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1059.177404][T11119] Bluetooth: hci3: command tx timeout [ 1059.726804][T13956] tipc: Enabled bearer , priority 0 [ 1060.101353][T13948] tipc: Resetting bearer [ 1060.151951][T13946] tipc: Disabling bearer [ 1060.304526][T13915] chnl_net:caif_netlink_parms(): no params data found [ 1060.385408][T11119] Bluetooth: hci4: command tx timeout [ 1061.035392][ T5821] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 1061.175516][T11119] Bluetooth: hci0: command tx timeout [ 1061.236753][ T5821] usb 4-1: Using ep0 maxpacket: 32 [ 1061.255564][T11119] Bluetooth: hci3: command tx timeout [ 1061.266325][ T5821] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1061.294795][ T5821] usb 4-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 1061.316357][ T5821] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1061.324640][ T5821] usb 4-1: Product: syz [ 1061.339698][ T5821] usb 4-1: Manufacturer: syz [ 1061.344562][ T5821] usb 4-1: SerialNumber: syz [ 1061.433962][ T5821] usb 4-1: config 0 descriptor?? [ 1062.478121][T11119] Bluetooth: hci4: command tx timeout [ 1063.170512][ T5821] gs_usb 4-1:0.0: Configuring for 1 interfaces [ 1063.185023][ T5821] gs_usb 4-1:0.0: Couldn't get bit timing const for channel 0 (-EREMOTEIO) [ 1063.197459][ T5821] gs_usb 4-1:0.0: probe with driver gs_usb failed with error -121 [ 1063.265589][T11119] Bluetooth: hci0: command tx timeout [ 1063.337422][T11119] Bluetooth: hci3: command tx timeout [ 1064.020288][ T6421] bridge_slave_1: left allmulticast mode [ 1064.094072][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 1064.143519][ T6421] bridge_slave_1: left promiscuous mode [ 1064.213785][ T6421] bridge0: port 2(bridge_slave_1) entered disabled state [ 1064.476505][ T6421] bridge_slave_0: left allmulticast mode [ 1064.510929][ T6421] bridge_slave_0: left promiscuous mode [ 1064.535553][T11119] Bluetooth: hci4: command tx timeout [ 1064.617222][ T6421] bridge0: port 1(bridge_slave_0) entered disabled state [ 1064.982120][T12103] usb 4-1: USB disconnect, device number 21 [ 1065.336359][T11119] Bluetooth: hci0: command tx timeout [ 1066.017832][ T6421] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1066.033091][ T6421] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1066.113881][ T6421] bond0 (unregistering): Released all slaves [ 1066.271115][T13924] chnl_net:caif_netlink_parms(): no params data found [ 1066.810241][ T6421] hsr_slave_0: left promiscuous mode [ 1066.833434][ T6421] hsr_slave_1: left promiscuous mode [ 1066.846193][ T6421] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1066.875511][ T6421] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1067.415406][T11119] Bluetooth: hci0: command tx timeout [ 1068.636100][ T6421] team0 (unregistering): Port device team_slave_1 removed [ 1068.717594][ T6421] team0 (unregistering): Port device team_slave_0 removed [ 1069.760680][T13915] bridge0: port 1(bridge_slave_0) entered blocking state [ 1069.786178][T13915] bridge0: port 1(bridge_slave_0) entered disabled state [ 1069.794032][T13915] bridge_slave_0: entered allmulticast mode [ 1069.845870][T13915] bridge_slave_0: entered promiscuous mode [ 1070.052064][T14038] syzkaller0: entered promiscuous mode [ 1070.072129][T14038] syzkaller0: entered allmulticast mode [ 1070.109177][T13915] bridge0: port 2(bridge_slave_1) entered blocking state [ 1070.136284][T13915] bridge0: port 2(bridge_slave_1) entered disabled state [ 1070.162796][T13915] bridge_slave_1: entered allmulticast mode [ 1070.181262][T13915] bridge_slave_1: entered promiscuous mode [ 1070.212165][T14046] tipc: Enabling of bearer rejected, failed to enable media [ 1071.177357][T14046] syzkaller0: entered promiscuous mode [ 1071.195988][T14046] syzkaller0: entered allmulticast mode [ 1071.302650][T13915] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1071.368916][T13915] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1072.091743][T13924] bridge0: port 1(bridge_slave_0) entered blocking state [ 1072.114377][T13924] bridge0: port 1(bridge_slave_0) entered disabled state [ 1072.136840][T13924] bridge_slave_0: entered allmulticast mode [ 1072.153209][T13924] bridge_slave_0: entered promiscuous mode [ 1072.245747][ T5828] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 1072.263806][T13915] team0: Port device team_slave_0 added [ 1072.299904][T13924] bridge0: port 2(bridge_slave_1) entered blocking state [ 1072.322159][T13924] bridge0: port 2(bridge_slave_1) entered disabled state [ 1072.331086][T13924] bridge_slave_1: entered allmulticast mode [ 1072.341973][T13924] bridge_slave_1: entered promiscuous mode [ 1072.438888][T13949] chnl_net:caif_netlink_parms(): no params data found [ 1072.446136][ T5828] usb 4-1: Using ep0 maxpacket: 32 [ 1072.468229][ T5828] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1072.507362][ T5828] usb 4-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 1072.539678][ T5828] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1072.554427][ T5828] usb 4-1: Product: syz [ 1072.569673][ T5828] usb 4-1: Manufacturer: syz [ 1072.574507][ T5828] usb 4-1: SerialNumber: syz [ 1072.587785][T13915] team0: Port device team_slave_1 added [ 1072.607125][ T5828] usb 4-1: config 0 descriptor?? [ 1073.054978][ T5828] gs_usb 4-1:0.0: Configuring for 1 interfaces [ 1073.068614][T13924] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1073.102984][T13924] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1073.171924][T13915] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1073.189489][T13915] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1073.264937][T13915] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1073.532117][T13915] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1073.550914][T13915] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1073.606674][ T5828] usb 4-1: USB disconnect, device number 22 [ 1073.632326][T13915] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1073.897825][T13924] team0: Port device team_slave_0 added [ 1074.521252][T13924] team0: Port device team_slave_1 added [ 1074.639157][T14086] netem: change failed [ 1075.025737][T13915] hsr_slave_0: entered promiscuous mode [ 1075.069017][T13915] hsr_slave_1: entered promiscuous mode [ 1075.089083][T13915] debugfs: 'hsr0' already exists in 'hsr' [ 1075.097318][T13915] Cannot create hsr debugfs directory [ 1075.197592][T13924] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1075.207789][T13924] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1075.238718][T13924] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1075.617904][T13924] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1075.654871][T13924] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1075.709826][T13924] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1075.849314][T14094] syzkaller0: entered promiscuous mode [ 1075.855019][T14094] syzkaller0: entered allmulticast mode [ 1076.112165][T14099] tipc: Enabled bearer , priority 0 [ 1076.319804][T13949] bridge0: port 1(bridge_slave_0) entered blocking state [ 1076.330127][T13949] bridge0: port 1(bridge_slave_0) entered disabled state [ 1076.340681][T13949] bridge_slave_0: entered allmulticast mode [ 1076.353694][T13949] bridge_slave_0: entered promiscuous mode [ 1076.458565][T14099] tipc: Resetting bearer [ 1076.482834][T14100] syzkaller0: entered promiscuous mode [ 1076.496166][T14100] syzkaller0: entered allmulticast mode [ 1076.533273][T14096] tipc: Resetting bearer [ 1076.579882][T14096] tipc: Disabling bearer [ 1076.723929][T13949] bridge0: port 2(bridge_slave_1) entered blocking state [ 1076.739305][T13949] bridge0: port 2(bridge_slave_1) entered disabled state [ 1076.752326][T13949] bridge_slave_1: entered allmulticast mode [ 1076.777014][T13949] bridge_slave_1: entered promiscuous mode [ 1077.288525][T13924] hsr_slave_0: entered promiscuous mode [ 1077.308607][T13924] hsr_slave_1: entered promiscuous mode [ 1077.331816][T13924] debugfs: 'hsr0' already exists in 'hsr' [ 1077.339748][T13924] Cannot create hsr debugfs directory [ 1077.409082][T13949] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1077.768742][T13949] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1078.293971][T13949] team0: Port device team_slave_0 added [ 1078.306091][ T5828] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 1078.465425][ T5828] usb 8-1: Using ep0 maxpacket: 32 [ 1078.494934][ T5828] usb 8-1: config 0 interface 0 has no altsetting 0 [ 1078.523495][ T5828] usb 8-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 1078.548459][ T5828] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1078.561522][ T5828] usb 8-1: Product: syz [ 1078.563134][T13949] team0: Port device team_slave_1 added [ 1078.568887][ T5828] usb 8-1: Manufacturer: syz [ 1078.583581][ T5828] usb 8-1: SerialNumber: syz [ 1078.598274][ T5828] usb 8-1: config 0 descriptor?? [ 1078.823892][T13949] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1078.831241][T13949] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1078.882015][T13949] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1079.051421][T13949] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1079.076099][T13949] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1079.105799][ T5828] gs_usb 8-1:0.0: Configuring for 1 interfaces [ 1079.127400][T13949] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1079.598583][ T5828] usb 8-1: USB disconnect, device number 8 [ 1080.424769][T13949] hsr_slave_0: entered promiscuous mode [ 1080.475910][T13949] hsr_slave_1: entered promiscuous mode [ 1080.504108][T13949] debugfs: 'hsr0' already exists in 'hsr' [ 1080.522303][T13949] Cannot create hsr debugfs directory [ 1080.994756][ T13] bridge_slave_1: left allmulticast mode [ 1081.019195][ T13] bridge_slave_1: left promiscuous mode [ 1081.047815][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 1081.108332][ T13] bridge_slave_0: left allmulticast mode [ 1081.128249][ T13] bridge_slave_0: left promiscuous mode [ 1081.134953][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 1081.196923][ T13] bridge_slave_1: left allmulticast mode [ 1081.202808][ T13] bridge_slave_1: left promiscuous mode [ 1081.234349][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 1081.262032][ T13] bridge_slave_0: left allmulticast mode [ 1081.275798][ T13] bridge_slave_0: left promiscuous mode [ 1081.292926][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 1082.534248][T14146] netlink: 'syz.3.2212': attribute type 4 has an invalid length. [ 1082.554137][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1082.598835][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1082.632734][ T13] bond0 (unregistering): Released all slaves [ 1082.988959][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1083.005717][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1083.024548][ T13] bond0 (unregistering): Released all slaves [ 1083.406278][T13915] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1083.549272][ T13] hsr_slave_0: left promiscuous mode [ 1083.591640][ T13] hsr_slave_1: left promiscuous mode [ 1083.614031][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1083.648126][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1083.706223][ T13] hsr_slave_0: left promiscuous mode [ 1083.714217][ T13] hsr_slave_1: left promiscuous mode [ 1083.723062][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1083.745886][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1083.788981][ T13] veth1_vlan: left promiscuous mode [ 1083.794505][ T13] veth0_vlan: left promiscuous mode [ 1084.696205][ T13] team0 (unregistering): Port device team_slave_1 removed [ 1084.734263][ T13] team0 (unregistering): Port device team_slave_0 removed [ 1085.346854][ T13] team0 (unregistering): Port device team_slave_1 removed [ 1085.374463][ T13] team0 (unregistering): Port device team_slave_0 removed [ 1085.708080][T13915] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1085.826673][ T84] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1085.952920][T13915] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1086.363618][T13915] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1086.905636][ T5821] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 1087.075891][ T5821] usb 8-1: Using ep0 maxpacket: 32 [ 1087.092227][ T5821] usb 8-1: config 0 interface 0 has no altsetting 0 [ 1087.129933][ T5821] usb 8-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 1087.143331][ T5821] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1087.153429][ T5821] usb 8-1: Product: syz [ 1087.162138][ T5821] usb 8-1: Manufacturer: syz [ 1087.168530][ T5821] usb 8-1: SerialNumber: syz [ 1087.180623][ T5821] usb 8-1: config 0 descriptor?? [ 1087.442844][T13924] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1087.530671][T13924] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1087.639312][ T5821] gs_usb 8-1:0.0: Configuring for 1 interfaces [ 1087.650999][T13924] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1087.725631][T13924] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1088.085925][ T5821] usb 8-1: USB disconnect, device number 9 [ 1088.523460][T13915] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1088.799999][T13915] 8021q: adding VLAN 0 to HW filter on device team0 [ 1088.828093][T13949] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1088.883242][T13949] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1089.053159][T13949] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1089.164211][T13949] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1089.243884][ T6419] bridge0: port 1(bridge_slave_0) entered blocking state [ 1089.251620][ T6419] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1089.496458][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 1089.503998][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1090.418453][T13924] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1091.758245][T14186] loop3: detected capacity change from 0 to 1024 [ 1091.784244][T14186] EXT4-fs: Ignoring removed i_version option [ 1091.961631][T14186] EXT4-fs (loop3): Test dummy encryption mode enabled [ 1092.240494][T14186] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1093.440574][T13924] 8021q: adding VLAN 0 to HW filter on device team0 [ 1094.219626][ T3444] bridge0: port 1(bridge_slave_0) entered blocking state [ 1094.227384][ T3444] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1094.513960][ T3444] bridge0: port 2(bridge_slave_1) entered blocking state [ 1094.521655][ T3444] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1098.579229][T14198] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2222'. [ 1098.653413][ T5775] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1099.331330][T13949] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1099.627843][T13915] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1100.320901][ T3444] ===================================================== [ 1100.329191][ T3444] BUG: KMSAN: uninit-value in __inet_bind+0x8a4/0xf20 [ 1100.336397][ T3444] __inet_bind+0x8a4/0xf20 [ 1100.341010][ T3444] inet_bind+0x12c/0x1a0 [ 1100.346151][ T3444] kernel_bind+0xd6/0x130 [ 1100.350752][ T3444] rds_tcp_conn_path_connect+0x952/0xff0 [ 1100.356806][ T3444] rds_connect_worker+0x353/0x4d0 [ 1100.362060][ T3444] process_scheduled_works+0xb21/0x1e30 [ 1100.369800][ T3444] worker_thread+0xede/0x1580 [ 1100.379120][ T3444] kthread+0x53f/0x600 [ 1100.383431][ T3444] ret_from_fork+0x20f/0x910 [ 1100.388517][ T3444] ret_from_fork_asm+0x1a/0x30 [ 1100.393504][ T3444] [ 1100.396055][ T3444] Uninit was stored to memory at: [ 1100.401382][ T3444] kernel_bind+0x92/0x130 [ 1100.406082][ T3444] rds_tcp_conn_path_connect+0x952/0xff0 [ 1100.411931][ T3444] rds_connect_worker+0x353/0x4d0 [ 1100.417387][ T3444] process_scheduled_works+0xb21/0x1e30 [ 1100.423149][ T3444] worker_thread+0xede/0x1580 [ 1100.429488][ T3444] kthread+0x53f/0x600 [ 1100.433769][ T3444] ret_from_fork+0x20f/0x910 [ 1100.438824][ T3444] ret_from_fork_asm+0x1a/0x30 [ 1100.443856][ T3444] [ 1100.447119][ T3444] Uninit was stored to memory at: [ 1100.452414][ T3444] rds_tcp_conn_path_connect+0xaf8/0xff0 [ 1100.458411][ T3444] rds_connect_worker+0x353/0x4d0 [ 1100.463645][ T3444] process_scheduled_works+0xb21/0x1e30 [ 1100.470897][ T3444] worker_thread+0xede/0x1580 [ 1100.476796][ T3444] kthread+0x53f/0x600 [ 1100.481072][ T3444] ret_from_fork+0x20f/0x910 [ 1100.486005][ T3444] ret_from_fork_asm+0x1a/0x30 [ 1100.490995][ T3444] [ 1100.493441][ T3444] Uninit was created at: [ 1100.498100][ T3444] kmem_cache_alloc_noprof+0x37b/0x1270 [ 1100.503890][ T3444] rds_tcp_conn_alloc+0x7b/0xbb0 [ 1100.509313][ T3444] __rds_conn_create+0x267f/0x34e0 [ 1100.514715][ T3444] rds_conn_create_outgoing+0x5d/0x80 [ 1100.520440][ T3444] rds_sendmsg+0x2684/0x4d70 [ 1100.525286][ T3444] ____sys_sendmsg+0xfe7/0x1080 [ 1100.530358][ T3444] ___sys_sendmsg+0x271/0x3b0 [ 1100.538123][ T3444] __x64_sys_sendmsg+0x211/0x3e0 [ 1100.543283][ T3444] x64_sys_call+0x1e20/0x3ea0 [ 1100.548694][ T3444] do_syscall_64+0x134/0xf80 [ 1100.553529][ T3444] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1100.559794][ T3444] [ 1100.562233][ T3444] CPU: 0 UID: 0 PID: 3444 Comm: kworker/u8:9 Not tainted syzkaller #0 PREEMPT(full) [ 1100.573437][ T3444] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1100.584452][ T3444] Workqueue: krds_cp_wq#0/0 rds_connect_worker [ 1100.590981][ T3444] ===================================================== [ 1100.598188][ T3444] Disabling lock debugging due to kernel taint SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1100.955487][ T3444] Kernel panic - not syncing: kmsan.panic set ... [ 1100.962100][ T3444] CPU: 0 UID: 0 PID: 3444 Comm: kworker/u8:9 Tainted: G B syzkaller #0 PREEMPT(full) [ 1100.974922][ T3444] Tainted: [B]=BAD_PAGE [ 1100.979226][ T3444] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1100.989452][ T3444] Workqueue: krds_cp_wq#0/0 rds_connect_worker [ 1100.995841][ T3444] Call Trace: [ 1100.999241][ T3444] [ 1101.002296][ T3444] __dump_stack+0x26/0x30 [ 1101.006938][ T3444] dump_stack_lvl+0x50/0x1c0 [ 1101.011734][ T3444] ? dump_stack+0x12/0x25 [ 1101.016276][ T3444] dump_stack+0x1e/0x25 [ 1101.020624][ T3444] vpanic+0x7b4/0x1430 [ 1101.024930][ T3444] panic+0x15d/0x160 [ 1101.029081][ T3444] kmsan_report+0x31a/0x320 [ 1101.033835][ T3444] ? __msan_warning+0x1b/0x30 [ 1101.038725][ T3444] ? __inet_bind+0x8a4/0xf20 [ 1101.043559][ T3444] ? inet_bind+0x12c/0x1a0 [ 1101.048194][ T3444] ? kernel_bind+0xd6/0x130 [ 1101.052923][ T3444] ? rds_tcp_conn_path_connect+0x952/0xff0 [ 1101.058958][ T3444] ? rds_connect_worker+0x353/0x4d0 [ 1101.064381][ T3444] ? process_scheduled_works+0xb21/0x1e30 [ 1101.070307][ T3444] ? worker_thread+0xede/0x1580 [ 1101.075352][ T3444] ? kthread+0x53f/0x600 [ 1101.079816][ T3444] ? ret_from_fork+0x20f/0x910 [ 1101.084791][ T3444] ? ret_from_fork_asm+0x1a/0x30 [ 1101.090008][ T3444] ? kmsan_get_metadata+0xf1/0x160 [ 1101.095367][ T3444] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1101.101428][ T3444] ? __rcu_read_unlock+0x6c/0xd0 [ 1101.106609][ T3444] ? inet_addr_type_table+0x33b/0x560 [ 1101.112219][ T3444] ? kmsan_get_metadata+0xf1/0x160 [ 1101.117590][ T3444] __msan_warning+0x1b/0x30 [ 1101.122301][ T3444] __inet_bind+0x8a4/0xf20 [ 1101.126966][ T3444] inet_bind+0x12c/0x1a0 [ 1101.131419][ T3444] ? __pfx_inet_bind+0x10/0x10 [ 1101.136400][ T3444] kernel_bind+0xd6/0x130 [ 1101.141051][ T3444] ? rds_tcp_tune+0x834/0xe60 [ 1101.145919][ T3444] ? kmsan_get_metadata+0xf1/0x160 [ 1101.151270][ T3444] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1101.157359][ T3444] rds_tcp_conn_path_connect+0x952/0xff0 [ 1101.163242][ T3444] ? __pfx_rds_tcp_conn_path_connect+0x10/0x10 [ 1101.169641][ T3444] ? __pfx_rds_tcp_conn_path_connect+0x10/0x10 [ 1101.176008][ T3444] rds_connect_worker+0x353/0x4d0 [ 1101.181199][ T3444] ? __pfx_rds_connect_worker+0x10/0x10 [ 1101.186925][ T3444] process_scheduled_works+0xb21/0x1e30 [ 1101.192747][ T3444] worker_thread+0xede/0x1580 [ 1101.197645][ T3444] kthread+0x53f/0x600 [ 1101.201905][ T3444] ? __pfx_worker_thread+0x10/0x10 [ 1101.207200][ T3444] ? __pfx_kthread+0x10/0x10 [ 1101.211989][ T3444] ret_from_fork+0x20f/0x910 [ 1101.216763][ T3444] ? __switch_to+0x51c/0x750 [ 1101.221602][ T3444] ? __pfx_kthread+0x10/0x10 [ 1101.226418][ T3444] ret_from_fork_asm+0x1a/0x30 [ 1101.231421][ T3444] [ 1101.235184][ T3444] Kernel Offset: disabled [ 1101.239583][ T3444] Rebooting in 86400 seconds..