last executing test programs: 9m15.249041037s ago: executing program 1 (id=2): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x2042, 0x19d) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0, 0x0) r4 = fanotify_init(0xf00, 0x1000) fanotify_mark(r4, 0x105, 0x10000839, r3, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./bus\x00', 0x42, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./bus\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2) 9m12.994240849s ago: executing program 1 (id=16): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000001c0)={0x0, 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x9, 0x6a76) sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x0, 0x4, 0x8001, 0x0, 0xb49, 0x200000000002, 0x7, 0x8, 0x5}, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(0xffffffffffffffff, 0xc01c64ae, &(0x7f0000000100)={0x0, 0x4, 0x9, 0x3, 0xf, 0xa, 0xfffffffc}) socket$netlink(0x10, 0x3, 0x6) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x1000007, 0x10, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xc) r2 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0) timer_create(0x7, &(0x7f0000001880)={0x0, 0x2b, 0x1, @thr={0x0, 0x0}}, 0x0) syz_mount_image$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x208402, 0x0, 0x0, 0x0, 0x0) write$sysctl(r2, &(0x7f0000000580)='1\x00', 0x2) syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12011900000000406a0563000000000000010902"], 0x0) r3 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_control_io$printer(r3, 0x0, &(0x7f0000000780)={0xfc78, 0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)={0x20, 0x1, 0x1, 0x1}, 0x0}) r4 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_control_io$cdc_ecm(r3, 0x0, 0x0) ioctl$EVIOCGMASK(r4, 0x5b03, 0x0) write$sysctl(r2, &(0x7f00000000c0)='2\x00', 0x2) 8m56.75713389s ago: executing program 32 (id=16): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000001c0)={0x0, 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x9, 0x6a76) sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x0, 0x4, 0x8001, 0x0, 0xb49, 0x200000000002, 0x7, 0x8, 0x5}, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(0xffffffffffffffff, 0xc01c64ae, &(0x7f0000000100)={0x0, 0x4, 0x9, 0x3, 0xf, 0xa, 0xfffffffc}) socket$netlink(0x10, 0x3, 0x6) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x1000007, 0x10, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xc) r2 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0) timer_create(0x7, &(0x7f0000001880)={0x0, 0x2b, 0x1, @thr={0x0, 0x0}}, 0x0) syz_mount_image$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x208402, 0x0, 0x0, 0x0, 0x0) write$sysctl(r2, &(0x7f0000000580)='1\x00', 0x2) syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12011900000000406a0563000000000000010902"], 0x0) r3 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_control_io$printer(r3, 0x0, &(0x7f0000000780)={0xfc78, 0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)={0x20, 0x1, 0x1, 0x1}, 0x0}) r4 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_control_io$cdc_ecm(r3, 0x0, 0x0) ioctl$EVIOCGMASK(r4, 0x5b03, 0x0) write$sysctl(r2, &(0x7f00000000c0)='2\x00', 0x2) 8m56.689157816s ago: executing program 5 (id=36): prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(0xffffffffffffffff, 0x0, 0x48c, 0x0, 0x0) setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, 0x0, 0x0) r2 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000040)={0x84, @broadcast, 0x4e21, 0x3, 'rr\x00', 0x1, 0x10000004, 0x100008}, 0x2c) r3 = syz_open_dev$I2C(&(0x7f0000000040), 0x0, 0x80) ioctl$I2C_PEC(r3, 0x708, 0xb8f7) ioctl$I2C_SMBUS(r3, 0x720, 0x0) r4 = socket$kcm(0xa, 0x2, 0x0) sendmsg$sock(r4, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev, 0xfffffeec}, 0x80, 0x0}, 0x0) 8m53.785202044s ago: executing program 5 (id=41): syz_genetlink_get_family_id$ieee802154(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$rds(0x15, 0x5, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000900)=[@in={0x2, 0x4e23, @loopback}, @in6={0xa, 0x0, 0x0, @loopback, 0x7ff}], 0x2c) sendto$inet6(r3, &(0x7f0000000040)="e4", 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback, 0x5}, 0x1c) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r3, 0x84, 0x21, &(0x7f0000000000)=0x4, 0x4) recvmmsg(r3, &(0x7f0000000740)=[{{0x0, 0x0, 0x0}, 0x1ff}], 0x267, 0x40000023, 0x0) 8m51.626917621s ago: executing program 5 (id=46): prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(0xffffffffffffffff, 0x0, 0x48c, 0x0, 0x0) setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, 0x0, 0x0) r2 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000040)={0x84, @broadcast, 0x4e21, 0x3, 'rr\x00', 0x1, 0x10000004, 0x100008}, 0x2c) r3 = syz_open_dev$I2C(&(0x7f0000000040), 0x0, 0x80) ioctl$I2C_PEC(r3, 0x708, 0xb8f7) ioctl$I2C_SMBUS(r3, 0x720, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(0xffffffffffffffff, 0x0, 0x140000a0) socket$kcm(0xa, 0x2, 0x0) 8m49.021906395s ago: executing program 5 (id=49): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x3000046, &(0x7f00000006c0)={[{@dioread_nolock}, {@noauto_da_alloc}, {@inlinecrypt}, {@i_version}, {@data_err_ignore}, {@barrier_val={'barrier', 0x3d, 0x9}}, {@data_err_ignore}, {@grpquota}, {@noblock_validity}, {@user_xattr}, {@resuid}, {@quota}]}, 0x1, 0x553, &(0x7f0000001080)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x4, &(0x7f0000000040)=ANY=[], &(0x7f0000003ff6)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x19, &(0x7f0000000000), 0x8}, 0x94) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0/file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) socket$key(0xf, 0x3, 0x2) mremap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f0000fff000/0x1000)=nil) madvise(&(0x7f0000f0f000/0x2000)=nil, 0x2000, 0x15) pwrite64(r0, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) 8m47.400029545s ago: executing program 5 (id=53): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e22, 0x8, @loopback}, 0x1c) listen(r0, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) capset(0x0, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000003240)=[{{&(0x7f0000000100)={0x2, 0x4e23, @empty}, 0x10, &(0x7f00000016c0)=[{0x0}], 0x1}}], 0x1, 0x4000800) recvfrom(0xffffffffffffffff, &(0x7f0000000200)=""/122, 0x7a, 0x2101, 0x0, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f0000000380)={0x2, 0x4e22, @empty}, 0x10) listen(r4, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x5e22, 0x0, @empty}, 0x1c) listen(0xffffffffffffffff, 0x0) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000001500)={0x0, 0x0, 0x0}, 0x4004) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f00000009c0)={0x1, 0x401}, 0x8) accept4(r0, &(0x7f0000000240)=@x25, 0x0, 0x80800) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r5, 0x0, 0x0, 0x24040014, &(0x7f0000000000)={0xa, 0x4e22, 0x7, @empty, 0xfffffffc}, 0x1c) dup3(r0, r5, 0x0) 8m42.236885366s ago: executing program 5 (id=58): socket$inet6_udp(0xa, 0x2, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x12, {0x0, 0x0, 0x0, 0x0, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x4048000}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30}, 0x94) setsockopt$inet_sctp6_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0x2, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(0xffffffffffffffff, 0x84, 0x16, &(0x7f0000000440)=ANY=[@ANYBLOB="00f4ffeacf56598ca1c00da01e341896fc0ff3d9a3dc82eea196ee13ed09d84ab911c663fd55175795bf62906580e0048887e4f465bf2c19c774b8aca8c2209b7dcd06a8eb66a74dfd01950c7d6bb2"], 0x4) bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1f00000000000000000000000010000000000000", @ANYRES8, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES64=0x0, @ANYBLOB="0000000001000000ffffffff00000000000000000000000000000000f26731d4c8d5610614da818bb77d8c860365e7b016815e2036400aed9fbdd8a283b56998b232"], 0x50) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000300)={0x614b, 0x0, 0x8001, 0x10, 0x5, 0xfffffc01, 0x10001, 0x9}, &(0x7f0000000340)=0x20) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000380)={{0x84, @rand_addr=0x64010104, 0x4e24, 0x3, 'nq\x00', 0x8, 0x5, 0x55}, {@remote, 0x4e22, 0x0, 0x7, 0x12d5c, 0x12d58}}, 0x44) bind$alg(0xffffffffffffffff, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(serpent))\x00'}, 0x58) sendmsg$NL80211_CMD_VENDOR(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000580)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x4008011) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$alg(0x26, 0x5, 0x0) sendmsg$NL80211_CMD_VENDOR(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000dc0)=ANY=[], 0x33fe0}, 0x1, 0x0, 0x0, 0x4c822}, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) socket$packet(0x11, 0x2, 0x300) 8m26.17515973s ago: executing program 33 (id=58): socket$inet6_udp(0xa, 0x2, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x12, {0x0, 0x0, 0x0, 0x0, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x4048000}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30}, 0x94) setsockopt$inet_sctp6_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0x2, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(0xffffffffffffffff, 0x84, 0x16, &(0x7f0000000440)=ANY=[@ANYBLOB="00f4ffeacf56598ca1c00da01e341896fc0ff3d9a3dc82eea196ee13ed09d84ab911c663fd55175795bf62906580e0048887e4f465bf2c19c774b8aca8c2209b7dcd06a8eb66a74dfd01950c7d6bb2"], 0x4) bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1f00000000000000000000000010000000000000", @ANYRES8, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES64=0x0, @ANYBLOB="0000000001000000ffffffff00000000000000000000000000000000f26731d4c8d5610614da818bb77d8c860365e7b016815e2036400aed9fbdd8a283b56998b232"], 0x50) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000300)={0x614b, 0x0, 0x8001, 0x10, 0x5, 0xfffffc01, 0x10001, 0x9}, &(0x7f0000000340)=0x20) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000380)={{0x84, @rand_addr=0x64010104, 0x4e24, 0x3, 'nq\x00', 0x8, 0x5, 0x55}, {@remote, 0x4e22, 0x0, 0x7, 0x12d5c, 0x12d58}}, 0x44) bind$alg(0xffffffffffffffff, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(serpent))\x00'}, 0x58) sendmsg$NL80211_CMD_VENDOR(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000580)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x4008011) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$alg(0x26, 0x5, 0x0) sendmsg$NL80211_CMD_VENDOR(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000dc0)=ANY=[], 0x33fe0}, 0x1, 0x0, 0x0, 0x4c822}, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) socket$packet(0x11, 0x2, 0x300) 7m0.879710589s ago: executing program 0 (id=195): r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, 0x0) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$HIDIOCSUSAGES(0xffffffffffffffff, 0x501c4814, &(0x7f0000000dc0)={{0x1, 0x3, 0x9, 0x800, 0x5, 0x5}, 0x8d, [0x7, 0x93b, 0x6, 0x1, 0x1, 0xb8a, 0x2f, 0x100, 0x5, 0x7, 0x7, 0x5, 0x41d4, 0x83, 0x4, 0xffffffff, 0x9, 0x1000, 0x77e4, 0xffff0c56, 0x3, 0x1, 0x0, 0x40, 0x9, 0x200, 0x69, 0x4, 0x0, 0x6, 0x3, 0x7, 0x8, 0x8, 0xa522, 0x100, 0xfffffff8, 0x80000001, 0x0, 0x40, 0x1, 0x6, 0x1, 0x7fffffff, 0x5eb9, 0x5, 0x9c05, 0x800000c, 0x401, 0x4, 0x75, 0x817, 0xb, 0x3, 0xda90, 0x7, 0xf, 0xbc4b, 0x106, 0xfd, 0x81, 0x6, 0x101, 0x39, 0xffffff7f, 0x6, 0x5, 0x5, 0x77, 0xfffffffd, 0x0, 0x9, 0x73f, 0x5, 0x8, 0x4, 0x3, 0xffffffff, 0x5, 0x26be23d3, 0x7, 0x2, 0x9, 0x8, 0xdd2, 0xdd2, 0x3, 0x4, 0x2, 0xfff, 0x80000001, 0x9, 0x4, 0x0, 0x3, 0x2, 0x2, 0x5, 0x2, 0x1, 0x80000001, 0x7, 0x0, 0x40, 0x5, 0x101, 0x8, 0x9, 0x334c230c, 0x6, 0x4, 0xfffffff9, 0x8, 0x3, 0xffff0000, 0x7, 0x2, 0xffffffff, 0x4, 0x3, 0x4, 0x4, 0x3f, 0x81, 0x3, 0x400, 0x4, 0x984, 0x1, 0x6, 0x7, 0x8001, 0x1ff, 0x2a3, 0x6d, 0x1, 0x10000, 0x5, 0x80000000, 0x1d01e, 0x1, 0x3, 0xfffffffb, 0x8, 0x63, 0x400, 0x5, 0x401, 0x4, 0xfff, 0x0, 0x9, 0x3, 0x8, 0xfffffff9, 0x2, 0x80000000, 0x3, 0xc, 0x1, 0xad, 0x100, 0x144, 0x2, 0xfffffffc, 0x2, 0x5, 0x0, 0x5, 0x9, 0x1, 0x4, 0x1000, 0x974, 0x5, 0x2, 0x8, 0x5, 0x88, 0x1000, 0x0, 0x1, 0x2, 0x5, 0x9, 0x0, 0x57a, 0x0, 0x0, 0x6, 0x9, 0x5c, 0x6, 0x9, 0xd22, 0x2, 0x7, 0x10, 0x8, 0xffffffff, 0x2149, 0xf, 0x26a02622, 0x7fff, 0x8, 0x8, 0x7ff, 0x5, 0x8, 0x81, 0x8, 0xff, 0x5, 0xfffffffa, 0x2, 0x2, 0xffff, 0x3ff, 0x5, 0x7, 0x5, 0x100, 0x1e06, 0xf, 0xdf2, 0x0, 0xbb, 0xfff, 0x400, 0x2, 0x80000000, 0x7, 0x8, 0xf9b, 0x8, 0x7ff, 0x7, 0x3ff, 0x630a, 0x5, 0xcff, 0x9, 0xb7, 0x1, 0xff, 0x4, 0x5, 0x10, 0x1, 0x92a, 0x3, 0x5, 0xd, 0x5, 0x101, 0x6, 0x7fff, 0x800, 0x3, 0x4, 0x0, 0x7f, 0x200, 0x20, 0x7, 0x1000000, 0x0, 0x7f, 0x53, 0x8, 0x8, 0x5, 0x2, 0xf, 0xd81c, 0x840, 0x1, 0x9, 0x2, 0x81, 0x9, 0x3, 0x5, 0x1000, 0x8, 0x47, 0x94, 0x7, 0x8, 0x8001, 0x56f71053, 0x1, 0x867, 0x3ff, 0x40, 0x6, 0x3, 0xfff, 0x5, 0x197, 0x9, 0x6, 0x8000005, 0x6, 0x7, 0x0, 0xffff, 0x3, 0x1ff, 0x400, 0x3, 0xd42, 0x9, 0x5, 0x1ff, 0x4, 0x9, 0xbec, 0x5, 0x7, 0x3, 0x5, 0x64000000, 0x2, 0x1e, 0x3a, 0x6, 0x5, 0x18000, 0x2, 0xffff, 0x9, 0x6, 0x9, 0x0, 0xe4f, 0x67c, 0x27b7, 0xe, 0x9, 0x9, 0x5, 0xd, 0x5, 0x7f, 0x76, 0x9, 0xc4fe, 0x9, 0x3, 0x4, 0x8, 0x87, 0x1, 0x4, 0x6, 0x40, 0x9, 0x8, 0x1, 0x6, 0x8, 0xc75e, 0x4, 0x6, 0x1b, 0xfd3, 0x2, 0x3, 0x9, 0x10, 0x4, 0x5d2f, 0x5, 0x1b, 0x3ff, 0x5, 0x8, 0x6, 0xc000000, 0x5c, 0x9, 0x541b, 0xce, 0x6, 0x4, 0x69f, 0x3, 0x5, 0x7, 0x4, 0x200, 0x7, 0x8, 0x2323, 0xfffffff7, 0xffff, 0x7ff, 0x4, 0xd, 0xffffff42, 0x89, 0x80000001, 0x3ff, 0x3, 0x554, 0xde, 0x0, 0x400, 0x3, 0x9, 0x800, 0x7cb3aca3, 0x6, 0x6, 0x4, 0xf8000000, 0x1, 0xfffffff9, 0x0, 0xffffffff, 0x0, 0x3, 0x10000, 0x4, 0x3, 0x8001, 0x8, 0xbb, 0x5, 0xf548, 0x3, 0x36c, 0xffffffff, 0x10, 0x676, 0xe67, 0x88, 0x808, 0x560, 0x6db5, 0xa7b, 0x2, 0x4, 0x9, 0x3, 0x4, 0xffffffff, 0x6, 0xed2, 0x24bdaad2, 0x9, 0x4, 0x3, 0x1, 0xd599, 0x2, 0x6c51, 0x2, 0x0, 0x0, 0x2, 0xfce6, 0xf, 0xcd0, 0x4, 0xf, 0x0, 0x9, 0x5, 0x200, 0x6, 0x5, 0x2, 0x7, 0x17, 0xc36, 0x0, 0x9fbb, 0x3, 0x5, 0x0, 0x8, 0x8, 0x1, 0x8, 0x1000001, 0x45d8, 0x9, 0x0, 0x60000, 0x7, 0x2, 0xfffffff1, 0x3, 0x2, 0xfffffd67, 0x2, 0x4, 0x5, 0x3, 0x800, 0x10, 0xa, 0xb12c, 0x5ce, 0x1, 0xfffffffd, 0xf9c8, 0x0, 0x80f4, 0x10000, 0x3, 0x8, 0x2, 0x7, 0x5, 0x8, 0x401, 0x7, 0x10, 0x0, 0x6b, 0x100, 0x8, 0x2, 0x2, 0x5273, 0xe45f, 0x10, 0x0, 0x8, 0x4, 0x7, 0x7, 0x6, 0x4, 0x8e8b, 0x5, 0x3, 0x7, 0x3, 0xe535, 0x80, 0x5, 0x6, 0x0, 0x3, 0xff, 0x7fffffff, 0x5, 0x1, 0xa, 0x4, 0x1, 0x31, 0x0, 0xee1, 0x10001, 0x3, 0xfffffffc, 0x4, 0x1, 0x6f9, 0x7, 0xb26c, 0xb, 0x0, 0xfffffff3, 0x8, 0x8, 0x3, 0x6, 0xfd, 0x3, 0x3d, 0x6, 0x80000001, 0x5, 0x7, 0x1, 0xffffffff, 0x6, 0x3d29, 0x4, 0x7, 0x8, 0xb04, 0x3, 0xea6, 0x9, 0x101, 0x4, 0x1400, 0xfffffeff, 0x7, 0x2, 0x4, 0x8, 0x7, 0xe, 0x2, 0xc, 0x2, 0x2, 0x64c1, 0x80000000, 0x200, 0x2, 0xfffffffd, 0x1, 0x91, 0x8001, 0x401, 0x781d, 0x80, 0xfffff5b0, 0x8, 0x3, 0x8, 0xfff, 0xcd800000, 0x9, 0x6, 0x0, 0x5b5, 0x7, 0x10, 0x2, 0x5, 0x10001, 0xc, 0x9e9, 0x53, 0xfffffdd5, 0xc, 0xc00, 0x40, 0x401, 0xf2a6, 0x7, 0x3, 0x2, 0x7, 0x3800000, 0x0, 0x3ff, 0x3, 0x7fffffff, 0x4, 0x0, 0x1, 0xf, 0x7, 0xa84d, 0x3, 0xaf, 0xaf72, 0x5f, 0x1, 0xe, 0x6, 0x9, 0x5, 0x7, 0x3, 0x5, 0x3, 0x40, 0x1000, 0x75f1, 0x4, 0x3, 0x1, 0xfffffffd, 0x4, 0x8, 0x10, 0x80, 0x2, 0x6, 0x0, 0xe, 0xc, 0x3, 0x2, 0xd, 0x5, 0xfffff3f2, 0x6, 0x8, 0x3, 0x6, 0x5, 0x3, 0x101, 0x8, 0xbd, 0xa, 0x8, 0xffffed34, 0x8000, 0x2, 0x7, 0x7, 0x55f4727b, 0xd, 0x3b, 0x5, 0x8, 0xffffffff, 0x4, 0x81, 0x6, 0xb, 0x2, 0xa53, 0xff, 0x0, 0x2, 0x5, 0x3233, 0xff, 0x6, 0x2, 0x9, 0x1, 0x0, 0x3ff, 0x5, 0x8, 0x40, 0x0, 0x40, 0x88, 0x5, 0x80, 0x4, 0xd0000000, 0x8, 0x4, 0x5, 0x5, 0x7, 0x0, 0x0, 0x76b, 0xbb, 0x2, 0x5, 0x7fff, 0x9, 0xa, 0x5, 0x80, 0x4, 0x8, 0x8, 0x1f, 0x1, 0x3, 0x4, 0xd126, 0x7, 0x5, 0x0, 0x0, 0x8, 0x4, 0x1, 0x5, 0xfffffffa, 0x8, 0x270b, 0x5, 0x7fff, 0x4, 0x5, 0x6, 0x3, 0x4, 0x13f, 0x0, 0xc906, 0x6, 0x100, 0x4, 0x3, 0x3, 0x7f, 0x2b, 0x4, 0x3, 0x3, 0x8001, 0x46f, 0x19f1, 0x6, 0x20, 0x2, 0x2, 0x6, 0x5, 0x5, 0x401, 0x5, 0x6, 0x5, 0x7, 0xb, 0x200, 0x6, 0x9, 0x7, 0x3, 0x1, 0x7f, 0x9, 0xc3b, 0xfdf5, 0x0, 0x3, 0x0, 0xf, 0x1, 0x800, 0x4f35, 0x1, 0x18, 0x5, 0x0, 0x6, 0xaa5, 0x800, 0x9, 0x7, 0x800, 0x8, 0xfffffffb, 0xff, 0x5, 0x1000, 0x8, 0x81, 0x6, 0x80, 0x9, 0x8, 0x5, 0x8, 0x8, 0x100, 0x5, 0x10, 0x3, 0x7, 0x82, 0x4, 0x40, 0xabde, 0x1, 0xb, 0x8, 0x5, 0x8, 0x7f, 0x100, 0x8, 0x9, 0x6, 0x80000001, 0x2, 0x8, 0x2, 0x7fff, 0x3, 0x6, 0x4, 0x5, 0x3, 0x0, 0x1, 0x8, 0x59, 0x1, 0x0, 0x48, 0xaa19, 0xc, 0x401, 0x1, 0x401, 0x8, 0xc11, 0x4, 0x0, 0x7, 0x2, 0x7f, 0x0, 0x1, 0xc0000, 0x7, 0x4, 0xef47, 0x3, 0x1, 0x0, 0x2, 0x1, 0x0, 0xe14f, 0x5, 0x7, 0x8, 0x7fffffff, 0x7f, 0xffffffff, 0xffffff88, 0x400, 0x7fffffff, 0x10, 0x5, 0x9, 0x5, 0x0, 0xff, 0x0, 0x8, 0x3, 0x5, 0xfffffffc, 0x9, 0x11, 0x9, 0xfffffffe, 0x40, 0x3, 0x7, 0x0, 0x1, 0x2, 0x6, 0x81, 0x4, 0x401, 0x6, 0x5, 0x3, 0x0, 0xd, 0x6, 0xc, 0x2, 0x1, 0xfffffe5c, 0x40, 0x0, 0x9, 0x24, 0x1ff, 0x4, 0xe92, 0x5, 0x6e3, 0x4, 0xff, 0x0, 0xdf, 0x5, 0x7, 0x100, 0x3ac9, 0x10001, 0xae27, 0x80, 0x5, 0x7, 0x7fff, 0x0, 0xb, 0x4, 0x1, 0x1, 0x0, 0x9, 0x331d, 0x5, 0xb9, 0x7, 0x4, 0x4, 0x9, 0x6cf3, 0x8, 0x7, 0xf, 0x9, 0x9, 0xffff, 0x8000, 0x1, 0x2, 0x2, 0xdc0, 0x5, 0x100, 0x9, 0x1, 0xfffffff8, 0x800, 0x3, 0x0, 0x9, 0x644d, 0x93, 0xb0, 0x2, 0x3ff, 0x800, 0xfffffff7, 0x2, 0x0, 0xff]}) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000dc0)={0xffffffffffffffff, 0x0, &(0x7f00000000c0), &(0x7f0000000d40), 0x21800}, 0x38) bpf$MAP_LOOKUP_BATCH(0x19, &(0x7f0000000800)={0x0, &(0x7f0000000840)=""/121, &(0x7f0000000680), &(0x7f0000000540), 0x6c}, 0x38) 6m57.53988029s ago: executing program 0 (id=200): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, 0x0, 0x4000) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x48000) ioctl$sock_netdev_private(r2, 0x8914, &(0x7f0000000000)) r3 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCADDRT(r3, 0x890b, &(0x7f0000000380)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x6, @null, @bpq0, 0x0, [@bcast, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) r4 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCADDRT(r4, 0x890b, &(0x7f00000007c0)={@dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x5, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @bpq0, 0x5, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @bcast, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast]}) connect$rose(r4, &(0x7f0000000040)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x1, @null}, 0x1c) connect$rose(r4, &(0x7f0000000240)=@short={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x1, @null}, 0x1c) 6m55.630671939s ago: executing program 0 (id=203): prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(0xffffffffffffffff, 0x0, 0x48c, 0x0, 0x0) setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, 0x0, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000040)={0x84, @broadcast, 0x4e21, 0x3, 'rr\x00', 0x1, 0x10000004, 0x100008}, 0x2c) r2 = syz_open_dev$I2C(&(0x7f0000000040), 0x0, 0x80) ioctl$I2C_PEC(r2, 0x708, 0xb8f7) ioctl$I2C_SMBUS(r2, 0x720, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(0xffffffffffffffff, 0x0, 0x140000a0) r3 = socket$kcm(0xa, 0x2, 0x0) sendmsg$sock(r3, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev, 0xfffffeec}, 0x80, 0x0}, 0x0) 6m54.126331035s ago: executing program 0 (id=206): prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(0xffffffffffffffff, 0x0, 0x48c, 0x0, 0x0) setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, 0x0, 0x0) r2 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000040)={0x84, @broadcast, 0x4e21, 0x3, 'rr\x00', 0x1, 0x10000004, 0x100008}, 0x2c) r3 = syz_open_dev$I2C(&(0x7f0000000040), 0x0, 0x80) ioctl$I2C_SMBUS(r3, 0x720, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(0xffffffffffffffff, 0x0, 0x140000a0) r4 = socket$kcm(0xa, 0x2, 0x0) sendmsg$sock(r4, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev, 0xfffffeec}, 0x80, 0x0}, 0x0) 6m52.785180193s ago: executing program 0 (id=207): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) 6m50.35042952s ago: executing program 0 (id=211): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x12, {0x0, 0x0, 0x0, 0x0, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x4048000}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000000200)=ANY=[@ANYBLOB="61124c00000000006113500000000000bf2000000000000007000000180000003d030100000000009500f000000000006926000000000000bf67000000000000560602000f020000d706000020000000620a04ff0ee60000bf250000000000002d350000000000006507000002080000070700004c0000001f75000000000000bf54000000000000070400000400f9ffcd35010000000000ce040000000000001c000000000000009500000000000000db13d5d8b741f2cdaabc8383c8f56bb5df3083d20f8c2bf304000000815dcf0066d7ded3c5c49a"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30}, 0x94) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(0xffffffffffffffff, 0x84, 0x16, &(0x7f0000000440)=ANY=[@ANYBLOB="00f4ffeacf56598ca1c00da01e341896fc0ff3d9a3dc82eea196ee13ed09d84ab911c663fd55175795bf62906580e0048887e4f465bf2c19c774b8aca8c2209b7dcd06a8eb66a74dfd01950c7d6bb2"], 0x4) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000300)={0x614b, 0x0, 0x8001, 0x10, 0x5, 0xfffffc01, 0x10001, 0x9}, &(0x7f0000000340)=0x20) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000380)={{0x84, @rand_addr=0x64010104, 0x4e24, 0x3, 'nq\x00', 0x8, 0x5, 0x55}, {@remote, 0x4e22, 0x0, 0x7, 0x12d5c, 0x12d58}}, 0x44) bind$alg(0xffffffffffffffff, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(serpent))\x00'}, 0x58) sendmsg$NL80211_CMD_VENDOR(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000580)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x4008011) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 6m35.179321525s ago: executing program 34 (id=211): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x12, {0x0, 0x0, 0x0, 0x0, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x4048000}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000000200)=ANY=[@ANYBLOB="61124c00000000006113500000000000bf2000000000000007000000180000003d030100000000009500f000000000006926000000000000bf67000000000000560602000f020000d706000020000000620a04ff0ee60000bf250000000000002d350000000000006507000002080000070700004c0000001f75000000000000bf54000000000000070400000400f9ffcd35010000000000ce040000000000001c000000000000009500000000000000db13d5d8b741f2cdaabc8383c8f56bb5df3083d20f8c2bf304000000815dcf0066d7ded3c5c49a"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30}, 0x94) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(0xffffffffffffffff, 0x84, 0x16, &(0x7f0000000440)=ANY=[@ANYBLOB="00f4ffeacf56598ca1c00da01e341896fc0ff3d9a3dc82eea196ee13ed09d84ab911c663fd55175795bf62906580e0048887e4f465bf2c19c774b8aca8c2209b7dcd06a8eb66a74dfd01950c7d6bb2"], 0x4) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000300)={0x614b, 0x0, 0x8001, 0x10, 0x5, 0xfffffc01, 0x10001, 0x9}, &(0x7f0000000340)=0x20) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000380)={{0x84, @rand_addr=0x64010104, 0x4e24, 0x3, 'nq\x00', 0x8, 0x5, 0x55}, {@remote, 0x4e22, 0x0, 0x7, 0x12d5c, 0x12d58}}, 0x44) bind$alg(0xffffffffffffffff, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(serpent))\x00'}, 0x58) sendmsg$NL80211_CMD_VENDOR(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000580)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x4008011) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 13.590075242s ago: executing program 4 (id=779): openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r1, 0xc02064b9, &(0x7f00000002c0)={&(0x7f0000000240), &(0x7f0000000040)}) ioctl$DRM_IOCTL_MODE_ATOMIC(r1, 0xc03864bc, &(0x7f0000000300)={0x201, 0x0, &(0x7f0000000180), &(0x7f0000000400)=[0x3], 0x0, 0x0, 0x0, 0xffffffffffffffff}) syz_io_uring_setup(0x810, &(0x7f0000000480)={0x0, 0x5c2d, 0x80, 0x2, 0x12c}, &(0x7f0000000100)=0x0, &(0x7f0000000140)) r3 = socket$inet_tcp(0x2, 0x1, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) r4 = userfaultfd(0x801) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x10}) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000140)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x6}) ioctl$UFFDIO_WRITEPROTECT(r4, 0xc018aa06, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_emit_ethernet(0xfef3, &(0x7f0000000200)=ANY=[], 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffff8, 0x0, 0x4) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) 10.600196411s ago: executing program 4 (id=791): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r1 = eventfd2(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r2 = getpid() prctl$PR_SET_MM_MAP(0x3c, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000380)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) waitid(0x2, 0x0, 0x0, 0x1000000, 0x0) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r5], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000600)={@map=r5, 0x1e, 0x0, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000000500)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000580)=[0x0], &(0x7f00000005c0)=[0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r8, 0x29, 0x3, &(0x7f0000000000)=0x1, 0x4) bind$inet6(r8, &(0x7f0000000280)={0xa, 0x4e22, 0x9, @loopback, 0x6}, 0x1c) setsockopt$sock_int(r8, 0x1, 0x8, &(0x7f0000000080)=0x40, 0x4) connect$inet6(r8, &(0x7f0000000140)={0xa, 0x4e22, 0x56202329, @empty, 0x4000005}, 0x1c) sendmmsg$inet6(r8, &(0x7f0000000900)=[{{0x0, 0x0, &(0x7f0000003640)=[{&(0x7f0000000680)="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", 0x251}], 0x1}}], 0x1, 0x4000001) getsockopt$inet6_int(r8, 0x29, 0x2, 0x0, &(0x7f00000000c0)) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), 0xffffffffffffffff) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000001c0)={@fallback=r1, r6, 0x10, 0x2018, 0x0, @value, @void, @void, @void, r7}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB, @ANYBLOB="00000000000000006600020000000000180000000000000000000000000000009500040000000000360a02000000000018010000202078"], &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f0000000340)=""/222}, 0x94) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r1, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, 0x0) 8.903943721s ago: executing program 4 (id=784): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r1 = eventfd2(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r2 = getpid() prctl$PR_SET_MM_MAP(0x3c, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000380)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) waitid(0x2, 0x0, 0x0, 0x1000000, 0x0) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000150000001811", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000600)={@map=r5, 0x1e, 0x0, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000000500)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000580)=[0x0], &(0x7f00000005c0)=[0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r8, 0x29, 0x3, &(0x7f0000000000)=0x1, 0x4) bind$inet6(r8, &(0x7f0000000280)={0xa, 0x4e22, 0x9, @loopback, 0x6}, 0x1c) setsockopt$sock_int(r8, 0x1, 0x8, &(0x7f0000000080)=0x40, 0x4) connect$inet6(r8, &(0x7f0000000140)={0xa, 0x4e22, 0x56202329, @empty, 0x4000005}, 0x1c) sendmmsg$inet6(r8, &(0x7f0000000900)=[{{0x0, 0x0, &(0x7f0000003640)=[{&(0x7f0000000680)="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", 0x251}], 0x1}}], 0x1, 0x4000001) getsockopt$inet6_int(r8, 0x29, 0x2, 0x0, &(0x7f00000000c0)) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), 0xffffffffffffffff) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000001c0)={@fallback=r1, r6, 0x10, 0x2018, 0x0, @value, @void, @void, @void, r7}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB, @ANYBLOB="00000000000000006600020000000000180000000000000000000000000000009500040000000000360a02000000000018010000202078"], &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f0000000340)=""/222}, 0x94) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r1, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, 0x0) 7.523848913s ago: executing program 2 (id=786): r0 = fsopen(&(0x7f00000000c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r0, 0x6, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mbind(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x2, &(0x7f0000000300)=0x2, 0x779b, 0x3) fsmount(r0, 0x0, 0x0) r4 = syz_open_dev$cec(&(0x7f0000000040), 0x0, 0x8982) ioctl$CEC_ADAP_S_LOG_ADDRS(r4, 0xc05c6104, &(0x7f00000000c0)={"8858ed6b", 0xa8d2, 0x6, 0x2, 0x0, 0x1, '\x00', '\x00', "02000020", "72b59d61", ["01fdcd2bcd000000001b00", "00008b05000000010008ee10", "0c436df7ff0007ffffffff00", "ff81000000008000"]}) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x2000000008, 0xfffffffffffffffd, 0x126f, 0x0, 0x1000001000, 0x6}, 0x0, &(0x7f0000000000)={0x3ff, 0x7, 0x0, 0x9, 0x5, 0xf, 0x80000002}, 0x0, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) 7.523437952s ago: executing program 3 (id=787): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r1 = eventfd2(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r2 = getpid() prctl$PR_SET_MM_MAP(0x3c, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000380)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) waitid(0x2, 0x0, 0x0, 0x1000000, 0x0) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000600)={@map=r5, 0x1e, 0x0, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000000500)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000580), &(0x7f00000005c0)=[0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r8, 0x29, 0x3, &(0x7f0000000000)=0x1, 0x4) bind$inet6(r8, &(0x7f0000000280)={0xa, 0x4e22, 0x9, @loopback, 0x6}, 0x1c) setsockopt$sock_int(r8, 0x1, 0x8, &(0x7f0000000080)=0x40, 0x4) connect$inet6(r8, &(0x7f0000000140)={0xa, 0x4e22, 0x56202329, @empty, 0x4000005}, 0x1c) sendmmsg$inet6(r8, &(0x7f0000000900)=[{{0x0, 0x0, &(0x7f0000003640)=[{&(0x7f0000000680)="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", 0x251}], 0x1}}], 0x1, 0x4000001) getsockopt$inet6_int(r8, 0x29, 0x2, 0x0, &(0x7f00000000c0)) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), 0xffffffffffffffff) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000001c0)={@fallback=r1, r6, 0x10, 0x2018, 0x0, @value, @void, @void, @void, r7}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB, @ANYBLOB="00000000000000006600020000000000180000000000000000000000000000009500040000000000360a02000000000018010000202078"], &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f0000000340)=""/222}, 0x94) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r1, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, 0x0) 6.585362878s ago: executing program 4 (id=788): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r1 = eventfd2(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r2 = getpid() prctl$PR_SET_MM_MAP(0x3c, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000380)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) waitid(0x2, 0x0, 0x0, 0x1000000, 0x0) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000600)={@map=r5, 0x1e, 0x0, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000000500), &(0x7f0000000580)=[0x0], &(0x7f00000005c0)=[0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r8, 0x29, 0x3, &(0x7f0000000000)=0x1, 0x4) bind$inet6(r8, &(0x7f0000000280)={0xa, 0x4e22, 0x9, @loopback, 0x6}, 0x1c) setsockopt$sock_int(r8, 0x1, 0x8, &(0x7f0000000080)=0x40, 0x4) connect$inet6(r8, &(0x7f0000000140)={0xa, 0x4e22, 0x56202329, @empty, 0x4000005}, 0x1c) sendmmsg$inet6(r8, &(0x7f0000000900)=[{{0x0, 0x0, &(0x7f0000003640)=[{&(0x7f0000000680)="4137a29b582bd471798f15f967e7f8118e1abf61ebd7d146a12a42f6ffd2340daaa8dcf6da818cc0efac75e8c35abbde7a18e0226b424f5557c71db5d327baccef203377178ddb12221cdaf45711a2535ae87e6ab62ecba71b6f2ac0f6c9ead0ec52116d305204537900daaad0d6e4dd9d3ad654711b72964f28b8b5d231d709bf3cd4a0477ef446e7da5eaa15cc39e9c57d89217e33a93e080000000000000086448a8e871cf560229a3cc36317ac47bae1596458badc9ebde2c707dea2e18f859e20f7595cce0a88485e5223b2c8fc383e37cbbfe8353e2a8eb6dc65d76746a31d8f206f3152176a502d3e582a31933e40cff645d93afca045741f99af1cba5b3b6dd6c2edd5e6c4505ae594aa23cbc8a143512180028d9b3984a2517ac9a15154460ff0f654df3f8cf1c13455cb5f440a67de7a6dad269c76e2625c35222985a47aa3b920d97dea05c43bc937361d33781f8057097ca11a9d90eea3d8ae56f0e57f3a6f32f8786e165305301a3d86367337d2651a27b8c222f349491648ba165a6ed9a1e5e5397a1ee963651c2d9c79d6d5b34941375b6b53abcc7882c4e57a63de2e32c30e41030f24ae6efee9e3446eab3b5407cc20f581095dde95241e3853c4864ea7ecd07888956d9375b9ef74be4454d7693b53ed6bd0644cd93945b2eb35a6ac7c34aa11facf27ca4463e2bb1eef7126a982f0de190da6ca5b992c9fecf37053894f4b8001fa9902cb9544f8394c96faa2767c0af169cf7c3e0c49d962d47061f788999120bc2144d3bdd4cd8dc5c6f00b10958416318ef9ea9b4f2e2f92ad6ce8f2f0a6022a753acf1b3247", 0x251}], 0x1}}], 0x1, 0x4000001) getsockopt$inet6_int(r8, 0x29, 0x2, 0x0, &(0x7f00000000c0)) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), 0xffffffffffffffff) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000001c0)={@fallback=r1, r6, 0x10, 0x2018, 0x0, @value, @void, @void, @void, r7}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB, @ANYBLOB="00000000000000006600020000000000180000000000000000000000000000009500040000000000360a02000000000018010000202078"], &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f0000000340)=""/222}, 0x94) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r1, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, 0x0) 5.896724026s ago: executing program 2 (id=789): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r1 = eventfd2(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r2 = getpid() prctl$PR_SET_MM_MAP(0x3c, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000380)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) waitid(0x2, 0x0, 0x0, 0x1000000, 0x0) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000600)={@map=r5, 0x1e, 0x0, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000000500)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000580)=[0x0], &(0x7f00000005c0)=[0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r8, 0x29, 0x3, &(0x7f0000000000)=0x1, 0x4) bind$inet6(r8, &(0x7f0000000280)={0xa, 0x4e22, 0x9, @loopback, 0x6}, 0x1c) setsockopt$sock_int(r8, 0x1, 0x8, &(0x7f0000000080)=0x40, 0x4) connect$inet6(r8, &(0x7f0000000140)={0xa, 0x4e22, 0x56202329, @empty, 0x4000005}, 0x1c) sendmmsg$inet6(r8, &(0x7f0000000900)=[{{0x0, 0x0, &(0x7f0000003640)=[{&(0x7f0000000680)="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", 0x251}], 0x1}}], 0x1, 0x4000001) getsockopt$inet6_int(r8, 0x29, 0x2, 0x0, &(0x7f00000000c0)) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), 0xffffffffffffffff) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000001c0)={@fallback=r1, r6, 0x10, 0x2018, 0x0, @value, @void, @void, @void, r7}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB, @ANYBLOB="00000000000000006600020000000000180000000000000000000000000000009500040000000000360a02000000000018010000202078"], &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f0000000340)=""/222}, 0x94) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r1, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, 0x0) 4.631860506s ago: executing program 3 (id=790): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, 0x0, 0x4000) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x48000) setsockopt(0xffffffffffffffff, 0x84, 0x7f, 0x0, 0x0) ioctl$sock_netdev_private(r2, 0x8914, &(0x7f0000000000)) r3 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCADDRT(r3, 0x890b, &(0x7f0000000380)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x6, @null, @bpq0, 0x0, [@bcast, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) r4 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCADDRT(r4, 0x890b, &(0x7f00000007c0)={@dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x5, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @bpq0, 0x5, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @bcast, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast]}) connect$rose(r4, &(0x7f0000000040)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x1, @null}, 0x1c) connect$rose(r4, 0x0, 0x0) 4.595421579s ago: executing program 4 (id=792): openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r1, 0xc02064b9, &(0x7f00000002c0)={&(0x7f0000000240)=[0x0], 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_ATOMIC(r1, 0xc03864bc, &(0x7f0000000300)={0x201, 0x0, &(0x7f0000000180), &(0x7f0000000400)=[0x3], 0x0, 0x0, 0x0, 0xffffffffffffffff}) syz_io_uring_setup(0x810, &(0x7f0000000480)={0x0, 0x5c2d, 0x80, 0x2, 0x12c}, &(0x7f0000000100)=0x0, &(0x7f0000000140)) r3 = socket$inet_tcp(0x2, 0x1, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) r4 = userfaultfd(0x801) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x10}) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000140)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x6}) ioctl$UFFDIO_WRITEPROTECT(r4, 0xc018aa06, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_emit_ethernet(0xfef3, &(0x7f0000000200)=ANY=[], 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffff8, 0x0, 0x4) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) 4.391207686s ago: executing program 2 (id=793): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, 0x0, 0x4000) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x48000) setsockopt(0xffffffffffffffff, 0x84, 0x7f, 0x0, 0x0) ioctl$sock_netdev_private(r2, 0x8914, &(0x7f0000000000)) r3 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCADDRT(r3, 0x890b, &(0x7f0000000380)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x6, @null, @bpq0, 0x0, [@bcast, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) r4 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCADDRT(r4, 0x890b, &(0x7f00000007c0)={@dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x5, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @bpq0, 0x5, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @bcast, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast]}) connect$rose(r4, 0x0, 0x0) connect$rose(r4, &(0x7f0000000240)=@short={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x1, @null}, 0x1c) 3.345280436s ago: executing program 3 (id=794): r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x40800) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00'}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[], 0x6f4}}, 0x0) 3.313074568s ago: executing program 2 (id=795): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r1 = eventfd2(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r2 = getpid() prctl$PR_SET_MM_MAP(0x3c, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000380)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) waitid(0x2, 0x0, 0x0, 0x1000000, 0x0) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r5], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000600)={@map=r5, 0x1e, 0x0, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000000500)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000580)=[0x0], &(0x7f00000005c0)=[0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r8, 0x29, 0x3, &(0x7f0000000000)=0x1, 0x4) bind$inet6(r8, &(0x7f0000000280)={0xa, 0x4e22, 0x9, @loopback, 0x6}, 0x1c) setsockopt$sock_int(r8, 0x1, 0x8, &(0x7f0000000080)=0x40, 0x4) connect$inet6(r8, &(0x7f0000000140)={0xa, 0x4e22, 0x56202329, @empty, 0x4000005}, 0x1c) sendmmsg$inet6(r8, &(0x7f0000000900)=[{{0x0, 0x0, &(0x7f0000003640)=[{&(0x7f0000000680)="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", 0x251}], 0x1}}], 0x1, 0x4000001) getsockopt$inet6_int(r8, 0x29, 0x2, 0x0, &(0x7f00000000c0)) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), 0xffffffffffffffff) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000001c0)={@fallback=r1, r6, 0x10, 0x2018, 0x0, @value, @void, @void, @void, r7}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB, @ANYBLOB="00000000000000006600020000000000180000000000000000000000000000009500040000000000360a02000000000018010000202078"], &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f0000000340)=""/222}, 0x94) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r1, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, 0x0) 3.312040697s ago: executing program 4 (id=796): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r1 = eventfd2(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r2 = getpid() prctl$PR_SET_MM_MAP(0x3c, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000380)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) waitid(0x2, 0x0, 0x0, 0x1000000, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000600)={@map=r3, 0x1e, 0x0, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000000500)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000580)=[0x0], &(0x7f00000005c0)=[0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r6, 0x29, 0x3, &(0x7f0000000000)=0x1, 0x4) bind$inet6(r6, &(0x7f0000000280)={0xa, 0x4e22, 0x9, @loopback, 0x6}, 0x1c) setsockopt$sock_int(r6, 0x1, 0x8, &(0x7f0000000080)=0x40, 0x4) connect$inet6(r6, &(0x7f0000000140)={0xa, 0x4e22, 0x56202329, @empty, 0x4000005}, 0x1c) sendmmsg$inet6(r6, &(0x7f0000000900)=[{{0x0, 0x0, &(0x7f0000003640)=[{&(0x7f0000000680)="4137a29b582bd471798f15f967e7f8118e1abf61ebd7d146a12a42f6ffd2340daaa8dcf6da818cc0efac75e8c35abbde7a18e0226b424f5557c71db5d327baccef203377178ddb12221cdaf45711a2535ae87e6ab62ecba71b6f2ac0f6c9ead0ec52116d305204537900daaad0d6e4dd9d3ad654711b72964f28b8b5d231d709bf3cd4a0477ef446e7da5eaa15cc39e9c57d89217e33a93e080000000000000086448a8e871cf560229a3cc36317ac47bae1596458badc9ebde2c707dea2e18f859e20f7595cce0a88485e5223b2c8fc383e37cbbfe8353e2a8eb6dc65d76746a31d8f206f3152176a502d3e582a31933e40cff645d93afca045741f99af1cba5b3b6dd6c2edd5e6c4505ae594aa23cbc8a143512180028d9b3984a2517ac9a15154460ff0f654df3f8cf1c13455cb5f440a67de7a6dad269c76e2625c35222985a47aa3b920d97dea05c43bc937361d33781f8057097ca11a9d90eea3d8ae56f0e57f3a6f32f8786e165305301a3d86367337d2651a27b8c222f349491648ba165a6ed9a1e5e5397a1ee963651c2d9c79d6d5b34941375b6b53abcc7882c4e57a63de2e32c30e41030f24ae6efee9e3446eab3b5407cc20f581095dde95241e3853c4864ea7ecd07888956d9375b9ef74be4454d7693b53ed6bd0644cd93945b2eb35a6ac7c34aa11facf27ca4463e2bb1eef7126a982f0de190da6ca5b992c9fecf37053894f4b8001fa9902cb9544f8394c96faa2767c0af169cf7c3e0c49d962d47061f788999120bc2144d3bdd4cd8dc5c6f00b10958416318ef9ea9b4f2e2f92ad6ce8f2f0a6022a753acf1b3247", 0x251}], 0x1}}], 0x1, 0x4000001) getsockopt$inet6_int(r6, 0x29, 0x2, 0x0, &(0x7f00000000c0)) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), 0xffffffffffffffff) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000001c0)={@fallback=r1, r4, 0x10, 0x2018, 0x0, @value, @void, @void, @void, r5}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB, @ANYBLOB="00000000000000006600020000000000180000000000000000000000000000009500040000000000360a02000000000018010000202078"], &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f0000000340)=""/222}, 0x94) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r1, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, 0x0) 2.998371718s ago: executing program 3 (id=797): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) creat(&(0x7f0000000080)='./bus\x00', 0x0) mount(&(0x7f0000000240)=@filename='./bus\x00', &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)='9p\x00', 0x0, 0x0) mremap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f0000fff000/0x1000)=nil) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_DEL(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="270e28bd70000000000004"], 0x14}, 0x1, 0x40030000000000}, 0x4000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x2, 0x13, 0x0, &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0xa}, 0x94) 1.289344131s ago: executing program 3 (id=798): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x12, {0x0, 0x0, 0x0, 0x0, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x4048000}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000000200)=ANY=[@ANYBLOB="61124c00000000006113500000000000bf2000000000000007000000180000003d030100000000009500f000000000006926000000000000bf67000000000000560602000f020000d706000020000000620a04ff0ee60000bf250000000000002d350000000000006507000002080000070700004c0000001f75000000000000bf54000000000000070400000400f9ffcd35010000000000ce040000000000001c000000000000009500000000000000db13d5d8b741f2cdaabc8383c8f56bb5df3083d20f8c2bf304000000815dcf0066d7ded3c5c49a"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30}, 0x94) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(0xffffffffffffffff, 0x84, 0x16, &(0x7f0000000440)=ANY=[@ANYBLOB="00f4ffeacf56598ca1c00da01e341896fc0ff3d9a3dc82eea196ee13ed09d84ab911c663fd55175795bf62906580e0048887e4f465bf2c19c774b8aca8c2209b7dcd06a8eb66a74dfd01950c7d6bb2"], 0x4) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000300)={0x614b, 0x0, 0x8001, 0x10, 0x5, 0xfffffc01, 0x10001, 0x9}, &(0x7f0000000340)=0x20) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000380)={{0x84, @rand_addr=0x64010104, 0x4e24, 0x3, 'nq\x00', 0x8, 0x5, 0x55}, {@remote, 0x4e22, 0x0, 0x7, 0x12d5c, 0x12d58}}, 0x44) bind$alg(0xffffffffffffffff, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(serpent))\x00'}, 0x58) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) sendmsg$NL80211_CMD_VENDOR(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000dc0)=ANY=[], 0x33fe0}, 0x1, 0x0, 0x0, 0x4c822}, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 1.279603502s ago: executing program 2 (id=799): r0 = fsopen(&(0x7f00000000c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r0, 0x6, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mbind(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x2, &(0x7f0000000300)=0x2, 0x779b, 0x3) fsmount(r0, 0x0, 0x0) syz_open_dev$cec(&(0x7f0000000040), 0x0, 0x8982) 895.247528ms ago: executing program 3 (id=800): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r1 = eventfd2(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r2 = getpid() prctl$PR_SET_MM_MAP(0x3c, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000380)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) waitid(0x2, 0x0, 0x0, 0x1000000, 0x0) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000600)={@map=r5, 0x1e, 0x0, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000000500)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000580), &(0x7f00000005c0)=[0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r8, 0x29, 0x3, &(0x7f0000000000)=0x1, 0x4) bind$inet6(r8, &(0x7f0000000280)={0xa, 0x4e22, 0x9, @loopback, 0x6}, 0x1c) setsockopt$sock_int(r8, 0x1, 0x8, &(0x7f0000000080)=0x40, 0x4) connect$inet6(r8, &(0x7f0000000140)={0xa, 0x4e22, 0x56202329, @empty, 0x4000005}, 0x1c) sendmmsg$inet6(r8, &(0x7f0000000900)=[{{0x0, 0x0, &(0x7f0000003640)=[{&(0x7f0000000680)="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", 0x251}], 0x1}}], 0x1, 0x4000001) getsockopt$inet6_int(r8, 0x29, 0x2, 0x0, &(0x7f00000000c0)) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), 0xffffffffffffffff) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000001c0)={@fallback=r1, r6, 0x10, 0x2018, 0x0, @value, @void, @void, @void, r7}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB, @ANYBLOB="00000000000000006600020000000000180000000000000000000000000000009500040000000000360a02000000000018010000202078"], &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f0000000340)=""/222}, 0x94) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r1, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, 0x0) 0s ago: executing program 2 (id=801): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$SNDRV_TIMER_IOCTL_STATUS32(0xffffffffffffffff, 0x80585414, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) r5 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000001c0)={r3, r4, 0x26, 0x0, @void}, 0x10) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000013c0)={r5, 0x0, 0x0}, 0x10) kernel console output (not intermixed with test programs): stop unused estimator thread 0... [ 275.731673][ T6683] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 275.973458][ T6683] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 276.364274][ T6683] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 276.438018][ T7016] bridge0: port 1(bridge_slave_0) entered blocking state [ 276.457731][ T7016] bridge0: port 1(bridge_slave_0) entered disabled state [ 276.465020][ T7016] bridge_slave_0: entered allmulticast mode [ 276.509340][ T7016] bridge_slave_0: entered promiscuous mode [ 276.554489][ T7016] bridge0: port 2(bridge_slave_1) entered blocking state [ 276.567314][ T51] Bluetooth: hci7: command tx timeout [ 276.577327][ T7016] bridge0: port 2(bridge_slave_1) entered disabled state [ 276.584611][ T7016] bridge_slave_1: entered allmulticast mode [ 276.599381][ T7090] loop3: detected capacity change from 0 to 1024 [ 276.628051][ T7090] EXT4-fs: inline encryption not supported [ 276.633922][ T7090] EXT4-fs: Ignoring removed i_version option [ 276.668897][ T7016] bridge_slave_1: entered promiscuous mode [ 276.760934][ T7090] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 276.762373][ T6902] chnl_net:caif_netlink_parms(): no params data found [ 276.865176][ T6683] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 277.096106][ T7016] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 277.486399][ T7102] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4223: comm syz.3.249: Allocating blocks 497-513 which overlap fs metadata [ 277.792794][ T7102] EXT4-fs (loop3): pa ffff888077e77bc8: logic 256, phys. 385, len 8 [ 277.800996][ T7102] EXT4-fs error (device loop3): ext4_mb_release_inode_pa:5466: group 0, free 0, pa_free 1 [ 277.964393][ T7016] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 278.052083][ T5823] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 278.647228][ T51] Bluetooth: hci7: command tx timeout [ 279.026274][ T7016] team0: Port device team_slave_0 added [ 279.696683][ T7016] team0: Port device team_slave_1 added [ 279.763557][ T5139] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 279.797287][ T5139] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 279.806454][ T5139] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 279.826263][ T5139] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 279.845979][ T5139] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 281.046619][ T7016] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 281.067310][ T7016] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 281.147283][ T7016] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 281.197852][ T7016] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 281.204814][ T7016] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 281.366178][ T7016] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 281.428478][ T7135] loop3: detected capacity change from 0 to 1024 [ 281.442803][ T7135] EXT4-fs: inline encryption not supported [ 281.448975][ T7135] EXT4-fs: Ignoring removed i_version option [ 281.928011][ T51] Bluetooth: hci0: command tx timeout [ 282.119239][ T7135] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 282.426107][ T6902] bridge0: port 1(bridge_slave_0) entered blocking state [ 282.439840][ T6902] bridge0: port 1(bridge_slave_0) entered disabled state [ 282.882685][ T6902] bridge_slave_0: entered allmulticast mode [ 282.936113][ T6902] bridge_slave_0: entered promiscuous mode [ 283.213741][ T6902] bridge0: port 2(bridge_slave_1) entered blocking state [ 283.237655][ T6902] bridge0: port 2(bridge_slave_1) entered disabled state [ 283.252025][ T6902] bridge_slave_1: entered allmulticast mode [ 283.273390][ T6902] bridge_slave_1: entered promiscuous mode [ 283.349244][ T7016] hsr_slave_0: entered promiscuous mode [ 283.356084][ T7016] hsr_slave_1: entered promiscuous mode [ 283.402190][ T7016] debugfs: 'hsr0' already exists in 'hsr' [ 283.422687][ T7016] Cannot create hsr debugfs directory [ 283.509267][ T7151] loop2: detected capacity change from 0 to 1024 [ 283.578217][ T7151] EXT4-fs: inline encryption not supported [ 283.584112][ T7151] EXT4-fs: Ignoring removed i_version option [ 283.921069][ T7156] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4223: comm syz.3.257: Allocating blocks 497-513 which overlap fs metadata [ 283.955140][ T7156] EXT4-fs (loop3): pa ffff888077db8570: logic 256, phys. 385, len 8 [ 283.963280][ T7156] EXT4-fs error (device loop3): ext4_mb_release_inode_pa:5466: group 0, free 0, pa_free 1 [ 284.614753][ T51] Bluetooth: hci0: command tx timeout [ 285.247605][ T7151] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 285.276305][ T6902] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 285.365223][ T7151] EXT4-fs error (device loop2): mb_free_blocks:2044: group 0, inode 15: block 177:freeing already freed block (bit 11); block bitmap corrupt. [ 285.370202][ T6902] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 285.456250][ T5824] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 286.566569][ T5823] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 286.666470][ T51] Bluetooth: hci0: command tx timeout [ 287.140478][ T6902] team0: Port device team_slave_0 added [ 287.167826][ T6902] team0: Port device team_slave_1 added [ 288.286225][ T6902] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 288.293799][ T6902] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 288.787213][ T51] Bluetooth: hci0: command tx timeout [ 288.807257][ T6902] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 289.473640][ T58] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 290.693143][ T6902] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 290.747226][ T6902] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 290.867236][ T6902] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 292.470082][ T58] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 292.572394][ T6902] hsr_slave_0: entered promiscuous mode [ 292.595243][ T6902] hsr_slave_1: entered promiscuous mode [ 292.611834][ T6902] debugfs: 'hsr0' already exists in 'hsr' [ 292.637245][ T6902] Cannot create hsr debugfs directory [ 295.382705][ T58] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 296.486257][ T7237] 9pnet_virtio: no channels available for device ./bus [ 298.260208][ T58] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 298.311611][ T7250] loop4: detected capacity change from 0 to 1024 [ 298.322002][ T7250] EXT4-fs: inline encryption not supported [ 298.361039][ T7250] EXT4-fs: Ignoring removed i_version option [ 298.510917][ T7250] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 298.596161][ T7120] chnl_net:caif_netlink_parms(): no params data found [ 298.722965][ T7259] loop3: detected capacity change from 0 to 1024 [ 298.774451][ T7259] EXT4-fs: inline encryption not supported [ 298.797436][ T7259] EXT4-fs: Ignoring removed i_version option [ 299.692153][ T7259] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 299.745821][ T5820] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 300.363592][ T7268] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4223: comm syz.3.280: Allocating blocks 497-513 which overlap fs metadata [ 300.636437][ T7268] EXT4-fs (loop3): pa ffff888077e77570: logic 256, phys. 385, len 8 [ 300.644578][ T7268] EXT4-fs error (device loop3): ext4_mb_release_inode_pa:5466: group 0, free 0, pa_free 1 [ 300.895093][ T5823] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 301.830123][ T7286] loop3: detected capacity change from 0 to 1024 [ 302.061594][ T7286] EXT4-fs: inline encryption not supported [ 302.099681][ T7286] EXT4-fs: Ignoring removed i_version option [ 302.288630][ T7289] loop4: detected capacity change from 0 to 1024 [ 302.296210][ T7289] EXT4-fs: inline encryption not supported [ 302.302446][ T7289] EXT4-fs: Ignoring removed i_version option [ 302.338549][ T7286] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 302.364193][ T7016] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 302.379640][ T7289] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 302.438868][ T7016] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 303.113787][ T7303] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4223: comm syz.3.283: Allocating blocks 497-513 which overlap fs metadata [ 303.488039][ T7303] EXT4-fs (loop3): pa ffff888077e77000: logic 256, phys. 385, len 8 [ 303.497247][ T7303] EXT4-fs error (device loop3): ext4_mb_release_inode_pa:5466: group 0, free 0, pa_free 1 [ 303.552288][ T7120] bridge0: port 1(bridge_slave_0) entered blocking state [ 303.559644][ T7120] bridge0: port 1(bridge_slave_0) entered disabled state [ 303.566930][ T7120] bridge_slave_0: entered allmulticast mode [ 303.575723][ T7120] bridge_slave_0: entered promiscuous mode [ 303.600586][ T7120] bridge0: port 2(bridge_slave_1) entered blocking state [ 303.680620][ T7120] bridge0: port 2(bridge_slave_1) entered disabled state [ 303.688382][ T7120] bridge_slave_1: entered allmulticast mode [ 303.696468][ T7120] bridge_slave_1: entered promiscuous mode [ 303.747665][ T58] bridge_slave_1: left allmulticast mode [ 303.753386][ T58] bridge_slave_1: left promiscuous mode [ 303.781979][ T58] bridge0: port 2(bridge_slave_1) entered disabled state [ 303.812676][ T58] bridge_slave_0: left allmulticast mode [ 303.831271][ T5823] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 303.840514][ T58] bridge_slave_0: left promiscuous mode [ 303.846416][ T58] bridge0: port 1(bridge_slave_0) entered disabled state [ 303.891055][ T58] bridge_slave_1: left allmulticast mode [ 303.917113][ T58] bridge_slave_1: left promiscuous mode [ 303.983180][ T58] bridge0: port 2(bridge_slave_1) entered disabled state [ 304.429020][ T7310] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4223: comm syz.4.285: Allocating blocks 497-513 which overlap fs metadata [ 304.691536][ T7310] EXT4-fs (loop4): pa ffff8880537809f8: logic 256, phys. 385, len 8 [ 304.700584][ T7310] EXT4-fs error (device loop4): ext4_mb_release_inode_pa:5466: group 0, free 0, pa_free 1 [ 304.753336][ T58] bridge_slave_0: left allmulticast mode [ 304.841444][ T58] bridge_slave_0: left promiscuous mode [ 304.847645][ T58] bridge0: port 1(bridge_slave_0) entered disabled state [ 304.947809][ T58] bridge_slave_1: left allmulticast mode [ 304.961240][ T58] bridge_slave_1: left promiscuous mode [ 304.963690][ T5820] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 304.991888][ T58] bridge0: port 2(bridge_slave_1) entered disabled state [ 305.148269][ T58] bridge_slave_0: left allmulticast mode [ 305.157455][ T58] bridge_slave_0: left promiscuous mode [ 305.163338][ T58] bridge0: port 1(bridge_slave_0) entered disabled state [ 305.673963][ T58] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 305.744367][ T58] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 305.972719][ T58] bond0 (unregistering): Released all slaves [ 306.337859][ T58] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 306.386005][ T58] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 306.400710][ T58] bond0 (unregistering): Released all slaves [ 306.685366][ T58] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 306.722670][ T58] bond0 (unregistering): Released all slaves [ 306.757319][ T7016] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 307.020727][ T7120] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 307.104465][ T7120] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 307.211898][ T7330] 9pnet_virtio: no channels available for device ./bus [ 308.002064][ T7016] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 308.415378][ T7342] 9pnet_virtio: no channels available for device ./bus [ 308.707925][ T7345] 9pnet_virtio: no channels available for device ./bus [ 309.609104][ T5139] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 309.618124][ T5139] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 309.626404][ T5139] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 309.634886][ T5139] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 309.643735][ T5139] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 310.083053][ T7357] loop4: detected capacity change from 0 to 1024 [ 310.181944][ T7357] EXT4-fs: inline encryption not supported [ 310.222493][ T7357] EXT4-fs: Ignoring removed i_version option [ 310.663692][ T7357] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 311.618692][ T7375] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4223: comm syz.4.296: Allocating blocks 497-513 which overlap fs metadata [ 311.765396][ T5139] Bluetooth: hci5: command tx timeout [ 311.788804][ T7375] EXT4-fs (loop4): pa ffff8880537803a0: logic 256, phys. 385, len 8 [ 311.796846][ T7375] EXT4-fs error (device loop4): ext4_mb_release_inode_pa:5466: group 0, free 0, pa_free 1 [ 311.811342][ T7120] team0: Port device team_slave_0 added [ 312.547420][ T7120] team0: Port device team_slave_1 added [ 312.577890][ T5820] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 312.831238][ T58] hsr_slave_0: left promiscuous mode [ 312.874729][ T58] hsr_slave_1: left promiscuous mode [ 312.956888][ T7384] loop2: detected capacity change from 0 to 1024 [ 313.099830][ T58] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 313.210430][ T58] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 313.241197][ T7387] 9pnet_virtio: no channels available for device ./bus [ 313.865190][ T5139] Bluetooth: hci5: command tx timeout [ 314.113603][ T7384] EXT4-fs: inline encryption not supported [ 314.188856][ T7384] EXT4-fs: Ignoring removed i_version option [ 314.468472][ T7384] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 314.710930][ T58] hsr_slave_0: left promiscuous mode [ 314.730255][ T58] hsr_slave_1: left promiscuous mode [ 314.737074][ T58] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 314.744657][ T58] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 315.499490][ T58] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 315.506931][ T58] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 315.789162][ T7396] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4223: comm syz.2.302: Allocating blocks 497-513 which overlap fs metadata [ 315.828877][ T7396] EXT4-fs (loop2): pa ffff888077db6828: logic 256, phys. 385, len 8 [ 315.837717][ T7396] EXT4-fs error (device loop2): ext4_mb_release_inode_pa:5466: group 0, free 0, pa_free 1 [ 315.927647][ T5139] Bluetooth: hci5: command tx timeout [ 316.055469][ T58] veth1_macvtap: left promiscuous mode [ 316.081165][ T58] veth0_macvtap: left promiscuous mode [ 316.086794][ T58] veth1_vlan: left promiscuous mode [ 316.105858][ T5824] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 316.123670][ T58] veth0_vlan: left promiscuous mode [ 316.142791][ T7399] loop3: detected capacity change from 0 to 1024 [ 316.191860][ T7399] EXT4-fs: inline encryption not supported [ 316.205425][ T7399] EXT4-fs: Ignoring removed i_version option [ 316.294652][ T7399] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 316.702603][ T7406] 9pnet_virtio: no channels available for device ./bus [ 316.731430][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 316.737913][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.780063][ T58] team0 (unregistering): Port device team_slave_1 removed [ 317.795449][ T5823] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 317.848129][ T58] team0 (unregistering): Port device team_slave_0 removed [ 318.011267][ T5139] Bluetooth: hci5: command tx timeout [ 319.181150][ T58] team0 (unregistering): Port device team_slave_1 removed [ 319.744013][ T7419] 9pnet_virtio: no channels available for device ./bus [ 319.937483][ T58] team0 (unregistering): Port device team_slave_0 removed [ 321.210296][ T7431] 9pnet_virtio: no channels available for device ./bus [ 323.593351][ T7016] 8021q: adding VLAN 0 to HW filter on device bond0 [ 323.601475][ T7120] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 323.613259][ T7120] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 323.983097][ T7120] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 324.015094][ T7120] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 324.097542][ T7120] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 324.213958][ T7120] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 326.764366][ T7016] 8021q: adding VLAN 0 to HW filter on device team0 [ 326.849959][ T7463] 9pnet_virtio: no channels available for device ./bus [ 327.793195][ T7465] loop4: detected capacity change from 0 to 1024 [ 328.289116][ T7465] EXT4-fs: inline encryption not supported [ 328.372382][ T7465] EXT4-fs: Ignoring removed i_version option [ 328.421388][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 328.428634][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 328.607325][ T7465] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 328.637039][ T7120] hsr_slave_0: entered promiscuous mode [ 328.929233][ T7480] 9pnet_virtio: no channels available for device ./bus [ 329.648541][ T7120] hsr_slave_1: entered promiscuous mode [ 329.890438][ T7120] debugfs: 'hsr0' already exists in 'hsr' [ 329.896301][ T7120] Cannot create hsr debugfs directory [ 330.885933][ T5820] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 333.185618][ T51] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 333.196317][ T51] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 333.204687][ T51] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 333.222009][ T51] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 333.229875][ T51] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 334.321309][ T7512] 9pnet_virtio: no channels available for device ./bus [ 335.318187][ T51] Bluetooth: hci2: command tx timeout [ 337.384077][ T51] Bluetooth: hci2: command tx timeout [ 337.678784][ T7532] loop2: detected capacity change from 0 to 1024 [ 337.708364][ T7532] EXT4-fs: inline encryption not supported [ 337.736580][ T7532] EXT4-fs: Ignoring removed i_version option [ 338.038080][ T7532] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 338.071410][ T7348] chnl_net:caif_netlink_parms(): no params data found [ 339.335769][ T7552] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4223: comm syz.2.332: Allocating blocks 497-513 which overlap fs metadata [ 339.392621][ T7552] EXT4-fs (loop2): pa ffff888077db60e8: logic 256, phys. 385, len 8 [ 339.400757][ T7552] EXT4-fs error (device loop2): ext4_mb_release_inode_pa:5466: group 0, free 0, pa_free 1 [ 339.448933][ T51] Bluetooth: hci2: command tx timeout [ 340.328472][ T5824] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 341.427466][ T5139] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 341.436667][ T5139] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 341.444383][ T5139] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 341.497606][ T5139] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 341.505379][ T5139] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 341.532997][ T51] Bluetooth: hci2: command tx timeout [ 343.768362][ T5839] Bluetooth: hci6: command tx timeout [ 344.202070][ T7348] bridge0: port 1(bridge_slave_0) entered blocking state [ 344.293317][ T7348] bridge0: port 1(bridge_slave_0) entered disabled state [ 344.330989][ T7348] bridge_slave_0: entered allmulticast mode [ 344.547337][ T7348] bridge_slave_0: entered promiscuous mode [ 344.715475][ T7348] bridge0: port 2(bridge_slave_1) entered blocking state [ 345.019690][ T7348] bridge0: port 2(bridge_slave_1) entered disabled state [ 345.027089][ T7348] bridge_slave_1: entered allmulticast mode [ 345.660684][ T7598] 9pnet_virtio: no channels available for device ./bus [ 345.898205][ T51] Bluetooth: hci6: command tx timeout [ 346.018892][ T7348] bridge_slave_1: entered promiscuous mode [ 348.207264][ T51] Bluetooth: hci6: command tx timeout [ 348.580743][ T58] IPVS: stop unused estimator thread 0... [ 349.932447][ T7619] 9pnet_virtio: no channels available for device ./bus [ 350.247524][ T51] Bluetooth: hci6: command tx timeout [ 350.463991][ T7502] chnl_net:caif_netlink_parms(): no params data found [ 351.771285][ T7348] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 351.821416][ T7348] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 357.566830][ T7348] team0: Port device team_slave_0 added [ 357.589338][ T7348] team0: Port device team_slave_1 added [ 357.628589][ T7652] 9pnet_virtio: no channels available for device ./bus [ 357.635138][ T7502] bridge0: port 1(bridge_slave_0) entered blocking state [ 357.645343][ T7502] bridge0: port 1(bridge_slave_0) entered disabled state [ 358.093876][ T7502] bridge_slave_0: entered allmulticast mode [ 358.660612][ T7502] bridge_slave_0: entered promiscuous mode [ 360.033229][ T7502] bridge0: port 2(bridge_slave_1) entered blocking state [ 360.098414][ T7502] bridge0: port 2(bridge_slave_1) entered disabled state [ 360.302806][ T7502] bridge_slave_1: entered allmulticast mode [ 360.319666][ T7502] bridge_slave_1: entered promiscuous mode [ 362.400195][ T7348] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 362.623682][ T7348] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 363.446098][ T7348] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 363.582028][ T7502] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 363.615121][ T7502] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 365.129625][ T7502] team0: Port device team_slave_0 added [ 365.273229][ T7348] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 365.292579][ T7348] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 365.347308][ T7348] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 365.372273][ T7691] loop4: detected capacity change from 0 to 1024 [ 365.410472][ T7502] team0: Port device team_slave_1 added [ 365.429416][ T7691] EXT4-fs: inline encryption not supported [ 365.455618][ T7691] EXT4-fs: Ignoring removed i_version option [ 365.579534][ T7691] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 366.664735][ T7348] hsr_slave_0: entered promiscuous mode [ 366.818207][ T7348] hsr_slave_1: entered promiscuous mode [ 366.826246][ T7348] debugfs: 'hsr0' already exists in 'hsr' [ 366.830162][ T5820] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 366.835519][ T7348] Cannot create hsr debugfs directory [ 366.875685][ T7502] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 366.883274][ T7502] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 366.926098][ T7502] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 367.062806][ T7502] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 367.070393][ T7502] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 367.104356][ T7502] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 368.038906][ T7502] hsr_slave_0: entered promiscuous mode [ 368.066270][ T7502] hsr_slave_1: entered promiscuous mode [ 368.089149][ T7502] debugfs: 'hsr0' already exists in 'hsr' [ 368.094925][ T7502] Cannot create hsr debugfs directory [ 368.247264][ T7711] loop4: detected capacity change from 0 to 1024 [ 368.262638][ T7568] chnl_net:caif_netlink_parms(): no params data found [ 368.278126][ T7711] EXT4-fs: inline encryption not supported [ 368.283993][ T7711] EXT4-fs: Ignoring removed i_version option [ 368.374981][ T7711] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 369.540682][ T5820] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 370.464557][ T7568] bridge0: port 1(bridge_slave_0) entered blocking state [ 371.433499][ T7568] bridge0: port 1(bridge_slave_0) entered disabled state [ 371.477722][ T7568] bridge_slave_0: entered allmulticast mode [ 372.267792][ T7568] bridge_slave_0: entered promiscuous mode [ 372.299223][ T7568] bridge0: port 2(bridge_slave_1) entered blocking state [ 372.306386][ T7568] bridge0: port 2(bridge_slave_1) entered disabled state [ 372.543673][ T7568] bridge_slave_1: entered allmulticast mode [ 372.570288][ T7568] bridge_slave_1: entered promiscuous mode [ 372.741231][ T5839] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 372.750956][ T5839] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 372.759659][ T5839] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 372.775511][ T5839] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 372.787837][ T5839] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 374.957515][ T5839] Bluetooth: hci0: command tx timeout [ 376.472882][ T7568] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 376.660821][ T7568] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 376.976870][ T7787] 9pnet_virtio: no channels available for device ./bus [ 377.258173][ T5839] Bluetooth: hci0: command tx timeout [ 378.724503][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.731337][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.837564][ T5839] Bluetooth: hci0: command tx timeout [ 381.156302][ T7568] team0: Port device team_slave_0 added [ 381.475919][ T7568] team0: Port device team_slave_1 added [ 381.867897][ T5839] Bluetooth: hci0: command tx timeout [ 383.314978][ T7568] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 383.322130][ T7568] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 383.354799][ T7568] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 383.658720][ T7568] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 383.666867][ T7568] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 384.695882][ T7819] loop4: detected capacity change from 0 to 1024 [ 384.700117][ T7568] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 384.789681][ T7819] EXT4-fs: inline encryption not supported [ 384.887386][ T7819] EXT4-fs: Ignoring removed i_version option [ 385.088545][ T7819] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 388.271656][ T5820] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 388.342055][ T7568] hsr_slave_0: entered promiscuous mode [ 388.365198][ T7568] hsr_slave_1: entered promiscuous mode [ 388.398757][ T7568] debugfs: 'hsr0' already exists in 'hsr' [ 388.467273][ T7568] Cannot create hsr debugfs directory [ 390.090933][ T58] bridge_slave_1: left allmulticast mode [ 390.096620][ T58] bridge_slave_1: left promiscuous mode [ 390.132289][ T58] bridge0: port 2(bridge_slave_1) entered disabled state [ 391.251587][ T58] bridge_slave_0: left allmulticast mode [ 391.421636][ T58] bridge_slave_0: left promiscuous mode [ 391.614564][ T58] bridge0: port 1(bridge_slave_0) entered disabled state [ 392.217438][ T58] bridge_slave_1: left allmulticast mode [ 392.977245][ T58] bridge_slave_1: left promiscuous mode [ 393.017339][ T58] bridge0: port 2(bridge_slave_1) entered disabled state [ 393.649865][ T58] bridge_slave_0: left allmulticast mode [ 393.667734][ T51] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 393.698987][ T51] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 393.701413][ T58] bridge_slave_0: left promiscuous mode [ 393.713005][ T51] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 393.723554][ T51] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 393.732653][ T51] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 393.799944][ T58] bridge0: port 1(bridge_slave_0) entered disabled state [ 393.834115][ T58] bridge_slave_1: left allmulticast mode [ 393.863206][ T58] bridge_slave_1: left promiscuous mode [ 393.870558][ T58] bridge0: port 2(bridge_slave_1) entered disabled state [ 393.918486][ T58] bridge_slave_0: left allmulticast mode [ 393.947193][ T58] bridge_slave_0: left promiscuous mode [ 393.952962][ T58] bridge0: port 1(bridge_slave_0) entered disabled state [ 393.978251][ T58] bridge_slave_1: left allmulticast mode [ 393.984005][ T58] bridge_slave_1: left promiscuous mode [ 394.001761][ T58] bridge0: port 2(bridge_slave_1) entered disabled state [ 394.013817][ T58] bridge_slave_0: left allmulticast mode [ 394.019626][ T58] bridge_slave_0: left promiscuous mode [ 394.025514][ T58] bridge0: port 1(bridge_slave_0) entered disabled state [ 394.265389][ T58] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 394.278737][ T58] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 394.290182][ T58] bond0 (unregistering): Released all slaves [ 395.061992][ T58] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 395.102753][ T58] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 395.129228][ T58] bond0 (unregistering): Released all slaves [ 395.150843][ T7901] loop4: detected capacity change from 0 to 1024 [ 395.159773][ T7901] EXT4-fs: inline encryption not supported [ 395.166008][ T7901] EXT4-fs: Ignoring removed i_version option [ 395.219372][ T7901] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 395.455949][ T58] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 395.468955][ T58] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 395.505775][ T58] bond0 (unregistering): Released all slaves [ 395.848336][ T5839] Bluetooth: hci5: command tx timeout [ 396.236133][ T58] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 396.259817][ T58] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 396.271375][ T58] bond0 (unregistering): Released all slaves [ 396.389415][ T5820] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 398.683746][ T51] Bluetooth: hci5: command tx timeout [ 401.264130][ T5839] Bluetooth: hci5: command tx timeout [ 401.737319][ T58] hsr_slave_0: left promiscuous mode [ 401.768847][ T58] hsr_slave_1: left promiscuous mode [ 401.775038][ T58] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 401.793517][ T58] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 401.820455][ T58] hsr_slave_0: left promiscuous mode [ 401.827100][ T58] hsr_slave_1: left promiscuous mode [ 401.833672][ T58] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 401.842608][ T58] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 401.860969][ T58] hsr_slave_0: left promiscuous mode [ 401.867547][ T58] hsr_slave_1: left promiscuous mode [ 401.873639][ T58] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 401.889457][ T58] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 401.903663][ T58] hsr_slave_0: left promiscuous mode [ 401.911134][ T58] hsr_slave_1: left promiscuous mode [ 401.917323][ T58] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 401.925495][ T58] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 402.377549][ T7946] loop4: detected capacity change from 0 to 1024 [ 402.385140][ T7946] EXT4-fs: inline encryption not supported [ 402.399034][ T7946] EXT4-fs: Ignoring removed i_version option [ 403.357267][ T5839] Bluetooth: hci5: command tx timeout [ 403.913184][ T7946] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 403.959604][ T58] team0 (unregistering): Port device team_slave_1 removed [ 404.529256][ T58] team0 (unregistering): Port device team_slave_0 removed [ 404.759668][ T5839] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 404.773602][ T5839] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 404.781803][ T5839] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 404.810689][ T5839] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 404.824934][ T5839] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 404.847902][ T7967] loop3: detected capacity change from 0 to 1024 [ 404.856059][ T7967] EXT4-fs: inline encryption not supported [ 404.870699][ T7967] EXT4-fs: Ignoring removed i_version option [ 404.903815][ T7967] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 405.368117][ T58] team0 (unregistering): Port device team_slave_1 removed [ 405.405554][ T7975] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4223: comm syz.4.406: Allocating blocks 497-513 which overlap fs metadata [ 405.437210][ T58] team0 (unregistering): Port device team_slave_0 removed [ 405.460122][ T7975] EXT4-fs (loop4): pa ffff888077db8828: logic 256, phys. 385, len 8 [ 405.468409][ T7975] EXT4-fs error (device loop4): ext4_mb_release_inode_pa:5466: group 0, free 0, pa_free 1 [ 405.835383][ T7976] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4223: comm syz.3.409: Allocating blocks 497-513 which overlap fs metadata [ 405.914122][ T7976] EXT4-fs (loop3): pa ffff888077db5ae0: logic 256, phys. 385, len 8 [ 405.923400][ T7976] EXT4-fs error (device loop3): ext4_mb_release_inode_pa:5466: group 0, free 0, pa_free 1 [ 406.180939][ T58] team0 (unregistering): Port device team_slave_1 removed [ 406.209823][ T58] team0 (unregistering): Port device team_slave_0 removed [ 406.395441][ T5820] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 406.888989][ T51] Bluetooth: hci7: command tx timeout [ 407.556777][ T58] team0 (unregistering): Port device team_slave_1 removed [ 407.576161][ T58] team0 (unregistering): Port device team_slave_0 removed [ 407.902110][ T5823] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 408.971501][ T5839] Bluetooth: hci7: command tx timeout [ 408.980092][ T7751] chnl_net:caif_netlink_parms(): no params data found [ 411.057321][ T5839] Bluetooth: hci7: command tx timeout [ 413.137639][ T5839] Bluetooth: hci7: command tx timeout [ 415.092948][ T7751] bridge0: port 1(bridge_slave_0) entered blocking state [ 415.100284][ T7751] bridge0: port 1(bridge_slave_0) entered disabled state [ 415.125115][ T7751] bridge_slave_0: entered allmulticast mode [ 415.139537][ T7751] bridge_slave_0: entered promiscuous mode [ 415.182405][ T7751] bridge0: port 2(bridge_slave_1) entered blocking state [ 415.377780][ T7751] bridge0: port 2(bridge_slave_1) entered disabled state [ 415.397525][ T7751] bridge_slave_1: entered allmulticast mode [ 416.139519][ T7751] bridge_slave_1: entered promiscuous mode [ 417.173481][ T7751] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 417.245793][ T7751] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 417.535831][ T7887] chnl_net:caif_netlink_parms(): no params data found [ 418.601213][ T8070] loop2: detected capacity change from 0 to 1024 [ 418.603624][ T7964] chnl_net:caif_netlink_parms(): no params data found [ 419.052415][ T8070] EXT4-fs: inline encryption not supported [ 419.061835][ T8070] EXT4-fs: Ignoring removed i_version option [ 419.153497][ T8070] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 419.224021][ T7751] team0: Port device team_slave_0 added [ 419.526720][ T8070] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4223: comm syz.2.426: Allocating blocks 497-513 which overlap fs metadata [ 419.557496][ T8070] EXT4-fs (loop2): pa ffff888077db5cb0: logic 256, phys. 385, len 8 [ 419.566596][ T8070] EXT4-fs error (device loop2): ext4_mb_release_inode_pa:5466: group 0, free 0, pa_free 1 [ 419.976742][ T7751] team0: Port device team_slave_1 added [ 419.993489][ T5824] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 422.690534][ T7887] bridge0: port 1(bridge_slave_0) entered blocking state [ 422.709072][ T7887] bridge0: port 1(bridge_slave_0) entered disabled state [ 422.739826][ T7887] bridge_slave_0: entered allmulticast mode [ 422.763559][ T7887] bridge_slave_0: entered promiscuous mode [ 422.812479][ T7751] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 422.832207][ T7751] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 422.884306][ T7751] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 423.132715][ T7751] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 423.139805][ T7751] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 423.171486][ T7751] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 424.064732][ T7887] bridge0: port 2(bridge_slave_1) entered blocking state [ 424.104946][ T7887] bridge0: port 2(bridge_slave_1) entered disabled state [ 424.134807][ T7887] bridge_slave_1: entered allmulticast mode [ 424.172357][ T7887] bridge_slave_1: entered promiscuous mode [ 424.483214][ T7887] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 425.465333][ T7964] bridge0: port 1(bridge_slave_0) entered blocking state [ 425.514649][ T7964] bridge0: port 1(bridge_slave_0) entered disabled state [ 425.533172][ T7964] bridge_slave_0: entered allmulticast mode [ 425.736682][ T7964] bridge_slave_0: entered promiscuous mode [ 425.750724][ T7887] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 425.788273][ T7964] bridge0: port 2(bridge_slave_1) entered blocking state [ 425.796037][ T7964] bridge0: port 2(bridge_slave_1) entered disabled state [ 425.804147][ T7964] bridge_slave_1: entered allmulticast mode [ 425.822675][ T7964] bridge_slave_1: entered promiscuous mode [ 426.736890][ T7887] team0: Port device team_slave_0 added [ 426.771610][ T7751] hsr_slave_0: entered promiscuous mode [ 426.798702][ T7751] hsr_slave_1: entered promiscuous mode [ 426.809066][ T7751] debugfs: 'hsr0' already exists in 'hsr' [ 426.814843][ T7751] Cannot create hsr debugfs directory [ 426.829175][ T7964] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 426.881317][ T7964] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 426.921859][ T7887] team0: Port device team_slave_1 added [ 427.891458][ T7887] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 427.899712][ T7887] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 427.926299][ T7887] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 427.959614][ T7887] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 427.966689][ T7887] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 428.004098][ T7887] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 428.150319][ T7964] team0: Port device team_slave_0 added [ 428.689769][ T7964] team0: Port device team_slave_1 added [ 428.861357][ T8120] loop3: detected capacity change from 0 to 1024 [ 428.862427][ T7887] hsr_slave_0: entered promiscuous mode [ 428.889948][ T7887] hsr_slave_1: entered promiscuous mode [ 428.897679][ T7887] debugfs: 'hsr0' already exists in 'hsr' [ 428.903433][ T7887] Cannot create hsr debugfs directory [ 428.905388][ T8120] EXT4-fs: inline encryption not supported [ 428.927418][ T8120] EXT4-fs: Ignoring removed i_version option [ 429.043126][ T7964] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 429.055811][ T8120] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 429.102123][ T7964] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 429.174243][ T7964] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 429.242257][ T7964] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 429.250269][ T7964] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 429.276730][ T7964] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 430.760294][ T8129] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4223: comm syz.3.438: Allocating blocks 497-513 which overlap fs metadata [ 430.779952][ T8129] EXT4-fs (loop3): pa ffff888053780000: logic 256, phys. 385, len 8 [ 430.788186][ T8129] EXT4-fs error (device loop3): ext4_mb_release_inode_pa:5466: group 0, free 0, pa_free 1 [ 431.240454][ T7964] hsr_slave_0: entered promiscuous mode [ 431.988133][ T7964] hsr_slave_1: entered promiscuous mode [ 432.061206][ T7964] debugfs: 'hsr0' already exists in 'hsr' [ 432.067000][ T7964] Cannot create hsr debugfs directory [ 432.166370][ T8137] loop2: detected capacity change from 0 to 1024 [ 432.188455][ T8137] EXT4-fs: inline encryption not supported [ 432.194359][ T8137] EXT4-fs: Ignoring removed i_version option [ 432.277863][ T8137] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 432.419425][ T51] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 432.428950][ T51] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 432.437197][ T51] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 432.445289][ T51] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 432.453110][ T51] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 433.463521][ T8146] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4223: comm syz.2.442: Allocating blocks 497-513 which overlap fs metadata [ 434.250336][ T8146] EXT4-fs (loop2): pa ffff888038905740: logic 256, phys. 385, len 8 [ 434.258450][ T8146] EXT4-fs error (device loop2): ext4_mb_release_inode_pa:5466: group 0, free 0, pa_free 1 [ 434.593512][ T5823] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 434.612971][ T5824] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 435.500291][ T51] Bluetooth: hci0: command tx timeout [ 436.888085][ T8162] loop4: detected capacity change from 0 to 1024 [ 436.895730][ T8162] EXT4-fs: inline encryption not supported [ 436.901632][ T8162] EXT4-fs: Ignoring removed i_version option [ 436.940177][ T8164] loop2: detected capacity change from 0 to 1024 [ 436.981256][ T8164] EXT4-fs: inline encryption not supported [ 436.990219][ T8162] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 437.018136][ T8164] EXT4-fs: Ignoring removed i_version option [ 437.085023][ T8164] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 437.472526][ T58] bridge_slave_1: left allmulticast mode [ 437.482404][ T58] bridge_slave_1: left promiscuous mode [ 437.491878][ T58] bridge0: port 2(bridge_slave_1) entered disabled state [ 437.502391][ T58] bridge_slave_0: left allmulticast mode [ 437.511731][ T58] bridge_slave_0: left promiscuous mode [ 437.522070][ T58] bridge0: port 1(bridge_slave_0) entered disabled state [ 437.530228][ T51] Bluetooth: hci0: command tx timeout [ 437.551566][ T58] bridge_slave_1: left allmulticast mode [ 437.567328][ T58] bridge_slave_1: left promiscuous mode [ 437.573370][ T58] bridge0: port 2(bridge_slave_1) entered disabled state [ 437.585876][ T58] bridge_slave_0: left allmulticast mode [ 437.645966][ T58] bridge_slave_0: left promiscuous mode [ 437.660769][ T58] bridge0: port 1(bridge_slave_0) entered disabled state [ 437.709779][ T58] bridge_slave_1: left allmulticast mode [ 437.715482][ T58] bridge_slave_1: left promiscuous mode [ 437.782562][ T58] bridge0: port 2(bridge_slave_1) entered disabled state [ 438.454557][ T58] bridge_slave_0: left allmulticast mode [ 438.460326][ T58] bridge_slave_0: left promiscuous mode [ 438.466146][ T58] bridge0: port 1(bridge_slave_0) entered disabled state [ 438.489159][ T8172] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4223: comm syz.4.446: Allocating blocks 497-513 which overlap fs metadata [ 438.632034][ T8172] EXT4-fs (loop4): pa ffff888053780e80: logic 256, phys. 385, len 8 [ 438.640649][ T8172] EXT4-fs error (device loop4): ext4_mb_release_inode_pa:5466: group 0, free 0, pa_free 1 [ 438.941002][ T8177] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4223: comm syz.2.447: Allocating blocks 497-513 which overlap fs metadata [ 439.034059][ T8177] EXT4-fs (loop2): pa ffff888077db6d98: logic 256, phys. 385, len 8 [ 439.042432][ T8177] EXT4-fs error (device loop2): ext4_mb_release_inode_pa:5466: group 0, free 0, pa_free 1 [ 439.066263][ T58] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 439.084009][ T58] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 439.203871][ T58] bond0 (unregistering): Released all slaves [ 439.728952][ T51] Bluetooth: hci0: command tx timeout [ 439.736198][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.742673][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.020091][ T58] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 440.034679][ T58] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 440.050635][ T58] bond0 (unregistering): Released all slaves [ 440.151162][ T5824] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 440.433857][ T58] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 440.462963][ T58] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 440.501567][ T5820] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 440.513751][ T58] bond0 (unregistering): Released all slaves [ 441.239773][ T58] hsr_slave_0: left promiscuous mode [ 441.247528][ T58] hsr_slave_1: left promiscuous mode [ 441.254030][ T58] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 441.264727][ T58] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 441.329365][ T58] hsr_slave_0: left promiscuous mode [ 441.346293][ T58] hsr_slave_1: left promiscuous mode [ 441.385812][ T58] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 441.400962][ T58] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 441.472929][ T58] hsr_slave_0: left promiscuous mode [ 441.496070][ T58] hsr_slave_1: left promiscuous mode [ 441.515514][ T58] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 441.529655][ T58] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 441.768299][ T51] Bluetooth: hci0: command tx timeout [ 442.645299][ T58] team0 (unregistering): Port device team_slave_1 removed [ 442.750742][ T58] team0 (unregistering): Port device team_slave_0 removed [ 444.154690][ T58] team0 (unregistering): Port device team_slave_1 removed [ 444.192452][ T58] team0 (unregistering): Port device team_slave_0 removed [ 444.204091][ T8199] loop4: detected capacity change from 0 to 1024 [ 444.244992][ T8199] EXT4-fs: inline encryption not supported [ 444.267313][ T8199] EXT4-fs: Ignoring removed i_version option [ 444.354629][ T8199] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 445.394462][ T8205] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4223: comm syz.4.455: Allocating blocks 497-513 which overlap fs metadata [ 445.494383][ T8205] EXT4-fs (loop4): pa ffff88805357cd98: logic 256, phys. 385, len 8 [ 445.502575][ T8205] EXT4-fs error (device loop4): ext4_mb_release_inode_pa:5466: group 0, free 0, pa_free 1 [ 445.973267][ T58] team0 (unregistering): Port device team_slave_1 removed [ 446.020109][ T5820] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 446.044770][ T58] team0 (unregistering): Port device team_slave_0 removed [ 446.355080][ T8215] loop4: detected capacity change from 0 to 1024 [ 446.363273][ T8215] EXT4-fs: inline encryption not supported [ 446.369727][ T8215] EXT4-fs: Ignoring removed i_version option [ 447.057207][ T8215] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 447.495473][ T8223] loop3: detected capacity change from 0 to 1024 [ 447.503448][ T8223] EXT4-fs: inline encryption not supported [ 447.515237][ T8223] EXT4-fs: Ignoring removed i_version option [ 448.662249][ T8225] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4223: comm syz.4.458: Allocating blocks 497-513 which overlap fs metadata [ 449.270669][ T8225] EXT4-fs (loop4): pa ffff888053780740: logic 256, phys. 385, len 8 [ 449.278811][ T8225] EXT4-fs error (device loop4): ext4_mb_release_inode_pa:5466: group 0, free 0, pa_free 1 [ 449.304681][ T8223] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 450.120120][ T8234] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4223: comm syz.3.460: Allocating blocks 497-513 which overlap fs metadata [ 450.451658][ T8234] EXT4-fs (loop3): pa ffff888077e77ae0: logic 256, phys. 385, len 8 [ 450.459787][ T8234] EXT4-fs error (device loop3): ext4_mb_release_inode_pa:5466: group 0, free 0, pa_free 1 [ 450.509189][ T5820] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 450.762929][ T5823] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 451.006661][ T8141] chnl_net:caif_netlink_parms(): no params data found [ 451.289178][ T5839] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 451.304340][ T5839] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 451.317405][ T5839] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 451.325672][ T5839] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 451.341664][ T5839] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 452.952109][ T8141] bridge0: port 1(bridge_slave_0) entered blocking state [ 452.964882][ T8141] bridge0: port 1(bridge_slave_0) entered disabled state [ 452.980159][ T8141] bridge_slave_0: entered allmulticast mode [ 453.011084][ T8141] bridge_slave_0: entered promiscuous mode [ 453.229270][ T8141] bridge0: port 2(bridge_slave_1) entered blocking state [ 453.248576][ T8141] bridge0: port 2(bridge_slave_1) entered disabled state [ 453.257722][ T8141] bridge_slave_1: entered allmulticast mode [ 453.292322][ T8141] bridge_slave_1: entered promiscuous mode [ 453.379239][ T5839] Bluetooth: hci2: command tx timeout [ 453.489480][ T8141] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 453.582601][ T8141] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 455.016035][ T8262] 9pnet_virtio: no channels available for device ./bus [ 455.061585][ T8141] team0: Port device team_slave_0 added [ 455.095325][ T8141] team0: Port device team_slave_1 added [ 455.273552][ T8141] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 455.300452][ T8141] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 455.360673][ T8141] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 455.442454][ T8141] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 455.457216][ T5839] Bluetooth: hci2: command tx timeout [ 455.469092][ T8141] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 455.537375][ T8141] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 455.697540][ T58] bridge_slave_1: left allmulticast mode [ 455.703217][ T58] bridge_slave_1: left promiscuous mode [ 455.760952][ T58] bridge0: port 2(bridge_slave_1) entered disabled state [ 455.780961][ T58] bridge_slave_0: left allmulticast mode [ 455.786862][ T58] bridge_slave_0: left promiscuous mode [ 455.794507][ T58] bridge0: port 1(bridge_slave_0) entered disabled state [ 457.237639][ T58] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 457.250601][ T58] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 457.414416][ T58] bond0 (unregistering): Released all slaves [ 457.530845][ T5839] Bluetooth: hci2: command tx timeout [ 458.011824][ T58] hsr_slave_0: left promiscuous mode [ 458.018901][ T58] hsr_slave_1: left promiscuous mode [ 458.024997][ T58] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 458.035882][ T58] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 459.098685][ T58] team0 (unregistering): Port device team_slave_1 removed [ 459.118783][ T58] team0 (unregistering): Port device team_slave_0 removed [ 459.687582][ T5839] Bluetooth: hci2: command tx timeout [ 461.403231][ T8294] loop2: detected capacity change from 0 to 1024 [ 461.427213][ T7964] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 461.439346][ T8294] EXT4-fs: inline encryption not supported [ 461.471624][ T7964] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 461.487939][ T8294] EXT4-fs: Ignoring removed i_version option [ 461.592648][ T8294] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 461.730344][ T7964] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 461.794555][ T7964] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 463.216703][ T8305] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4223: comm syz.2.476: Allocating blocks 497-513 which overlap fs metadata [ 463.747002][ T8305] EXT4-fs (loop2): pa ffff88805357c740: logic 256, phys. 385, len 8 [ 463.747662][ T7964] kthread_run failed with err -4 [ 463.755113][ T8305] EXT4-fs error (device loop2): ext4_mb_release_inode_pa:5466: group 0, free 0, pa_free 1 [ 463.768647][ T8141] hsr_slave_0: entered promiscuous mode [ 463.813138][ T8141] hsr_slave_1: entered promiscuous mode [ 463.826393][ T8141] debugfs: 'hsr0' already exists in 'hsr' [ 463.839145][ T8141] Cannot create hsr debugfs directory [ 463.964113][ T8243] chnl_net:caif_netlink_parms(): no params data found [ 463.975244][ T5824] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 466.287960][ T8323] 9pnet_virtio: no channels available for device ./bus [ 467.120528][ T51] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 467.131138][ T51] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 467.147737][ T51] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 467.199349][ T51] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 467.207366][ T51] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 467.375629][ T8243] bridge0: port 1(bridge_slave_0) entered blocking state [ 467.384161][ T8243] bridge0: port 1(bridge_slave_0) entered disabled state [ 467.394202][ T8243] bridge_slave_0: entered allmulticast mode [ 467.404496][ T8329] loop3: detected capacity change from 0 to 1024 [ 467.404922][ T8243] bridge_slave_0: entered promiscuous mode [ 467.418599][ T8329] EXT4-fs: inline encryption not supported [ 468.210812][ T8243] bridge0: port 2(bridge_slave_1) entered blocking state [ 468.225745][ T8243] bridge0: port 2(bridge_slave_1) entered disabled state [ 468.233428][ T8243] bridge_slave_1: entered allmulticast mode [ 468.241831][ T8243] bridge_slave_1: entered promiscuous mode [ 468.249083][ T8329] EXT4-fs: Ignoring removed i_version option [ 468.370308][ T8329] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 468.519002][ T8337] loop4: detected capacity change from 0 to 1024 [ 468.527996][ T8329] EXT4-fs error (device loop3): mb_free_blocks:2044: group 0, inode 15: block 177:freeing already freed block (bit 11); block bitmap corrupt. [ 468.534866][ T8337] EXT4-fs: inline encryption not supported [ 468.592742][ T8337] EXT4-fs: Ignoring removed i_version option [ 468.636312][ T8339] loop2: detected capacity change from 0 to 1024 [ 468.644176][ T5823] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 468.655195][ T8339] EXT4-fs: inline encryption not supported [ 468.670910][ T8243] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 468.694172][ T8337] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 468.719382][ T8339] EXT4-fs: Ignoring removed i_version option [ 468.733084][ T8243] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 468.780289][ T8339] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 468.818842][ T8345] loop3: detected capacity change from 0 to 1024 [ 468.836457][ T8345] EXT4-fs: inline encryption not supported [ 468.845614][ T8345] EXT4-fs: Ignoring removed i_version option [ 468.894208][ T8345] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 469.853653][ T51] Bluetooth: hci5: command tx timeout [ 470.203600][ T8350] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4223: comm syz.4.484: Allocating blocks 497-513 which overlap fs metadata [ 470.247796][ T8351] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4223: comm syz.2.485: Allocating blocks 497-513 which overlap fs metadata [ 470.485809][ T8352] EXT4-fs error (device loop3): mb_free_blocks:2044: group 0, inode 15: block 177:freeing already freed block (bit 11); block bitmap corrupt. [ 470.599699][ T8350] EXT4-fs (loop4): pa ffff888077e772b8: logic 256, phys. 385, len 8 [ 470.608083][ T8350] EXT4-fs error (device loop4): ext4_mb_release_inode_pa:5466: group 0, free 0, pa_free 1 [ 470.612859][ T8351] EXT4-fs (loop2): pa ffff888077db8740: logic 256, phys. 385, len 8 [ 470.626138][ T8351] EXT4-fs error (device loop2): ext4_mb_release_inode_pa:5466: group 0, free 0, pa_free 1 [ 470.876244][ T5820] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 470.973620][ T5823] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 470.991624][ T8243] team0: Port device team_slave_0 added [ 471.048829][ T8243] team0: Port device team_slave_1 added [ 471.070431][ T5824] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 471.167415][ T8141] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 471.202084][ T8141] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 471.225667][ T8356] loop4: detected capacity change from 0 to 1024 [ 471.332836][ T8356] EXT4-fs: inline encryption not supported [ 471.387344][ T8356] EXT4-fs: Ignoring removed i_version option [ 471.442847][ T8141] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 472.387403][ T51] Bluetooth: hci5: command tx timeout [ 472.406735][ T8356] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 472.448399][ T8141] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 472.551394][ T8243] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 472.633381][ T8243] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 472.941336][ T8243] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 473.071392][ T8243] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 473.097223][ T8243] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 473.479681][ T8374] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4223: comm syz.4.487: Allocating blocks 497-513 which overlap fs metadata [ 473.858706][ T8374] EXT4-fs (loop4): pa ffff888077db8000: logic 256, phys. 385, len 8 [ 473.866757][ T8374] EXT4-fs error (device loop4): ext4_mb_release_inode_pa:5466: group 0, free 0, pa_free 1 [ 474.052485][ T8243] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 474.438149][ T51] Bluetooth: hci5: command tx timeout [ 474.489308][ T5820] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 475.789136][ T8243] hsr_slave_0: entered promiscuous mode [ 476.507289][ T51] Bluetooth: hci5: command tx timeout [ 476.615447][ T8243] hsr_slave_1: entered promiscuous mode [ 476.624672][ T8243] debugfs: 'hsr0' already exists in 'hsr' [ 476.631770][ T8243] Cannot create hsr debugfs directory [ 478.026574][ T8413] loop4: detected capacity change from 0 to 1024 [ 478.034879][ T8413] EXT4-fs: inline encryption not supported [ 478.040911][ T8413] EXT4-fs: Ignoring removed i_version option [ 478.115098][ T8413] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 478.480613][ T58] bridge_slave_1: left allmulticast mode [ 478.497589][ T58] bridge_slave_1: left promiscuous mode [ 478.505172][ T58] bridge0: port 2(bridge_slave_1) entered disabled state [ 478.569716][ T58] bridge_slave_0: left allmulticast mode [ 478.575538][ T58] bridge_slave_0: left promiscuous mode [ 478.582486][ T58] bridge0: port 1(bridge_slave_0) entered disabled state [ 479.436128][ T5820] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 479.452738][ T58] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 479.511317][ T58] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 479.558607][ T58] bond0 (unregistering): Released all slaves [ 479.636599][ T8421] loop4: detected capacity change from 0 to 1024 [ 479.639280][ T8325] chnl_net:caif_netlink_parms(): no params data found [ 479.712696][ T8421] EXT4-fs: inline encryption not supported [ 479.720454][ T8141] 8021q: adding VLAN 0 to HW filter on device bond0 [ 479.761842][ T8421] EXT4-fs: Ignoring removed i_version option [ 479.800654][ T8421] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 479.852020][ T58] hsr_slave_0: left promiscuous mode [ 479.862074][ T58] hsr_slave_1: left promiscuous mode [ 479.885966][ T58] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 479.945104][ T58] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 480.537533][ T8428] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4223: comm syz.4.499: Allocating blocks 497-513 which overlap fs metadata [ 480.870741][ T8428] EXT4-fs (loop4): pa ffff888077db6658: logic 256, phys. 385, len 8 [ 480.878810][ T8428] EXT4-fs error (device loop4): ext4_mb_release_inode_pa:5466: group 0, free 0, pa_free 1 [ 481.583962][ T5820] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 482.283916][ T58] team0 (unregistering): Port device team_slave_1 removed [ 482.306258][ T58] team0 (unregistering): Port device team_slave_0 removed [ 483.644756][ T8141] 8021q: adding VLAN 0 to HW filter on device team0 [ 484.341035][ T8325] bridge0: port 1(bridge_slave_0) entered blocking state [ 484.359964][ T8325] bridge0: port 1(bridge_slave_0) entered disabled state [ 484.385597][ T8325] bridge_slave_0: entered allmulticast mode [ 484.433263][ T8325] bridge_slave_0: entered promiscuous mode [ 484.462818][ T8325] bridge0: port 2(bridge_slave_1) entered blocking state [ 484.470863][ T8325] bridge0: port 2(bridge_slave_1) entered disabled state [ 484.478133][ T8325] bridge_slave_1: entered allmulticast mode [ 484.511333][ T8325] bridge_slave_1: entered promiscuous mode [ 484.525863][ T689] bridge0: port 1(bridge_slave_0) entered blocking state [ 484.533132][ T689] bridge0: port 1(bridge_slave_0) entered forwarding state [ 485.230904][ T6379] bridge0: port 2(bridge_slave_1) entered blocking state [ 485.238078][ T6379] bridge0: port 2(bridge_slave_1) entered forwarding state [ 485.289658][ T8325] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 485.321433][ T8325] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 485.655456][ T8468] loop2: detected capacity change from 0 to 1024 [ 485.685745][ T8468] EXT4-fs: inline encryption not supported [ 485.690104][ T8325] team0: Port device team_slave_0 added [ 485.726365][ T8325] team0: Port device team_slave_1 added [ 485.731801][ T8468] EXT4-fs: Ignoring removed i_version option [ 485.840893][ T8468] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 486.645238][ T8485] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4223: comm syz.2.512: Allocating blocks 497-513 which overlap fs metadata [ 487.044733][ T8485] EXT4-fs (loop2): pa ffff888077db63a0: logic 256, phys. 385, len 8 [ 487.052852][ T8485] EXT4-fs error (device loop2): ext4_mb_release_inode_pa:5466: group 0, free 0, pa_free 1 [ 487.658951][ T5824] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 487.871057][ T8325] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 487.887875][ T8325] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 487.960878][ T8325] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 487.992222][ T8325] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 488.018505][ T8325] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 488.127223][ T8325] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 488.963001][ T8500] loop3: detected capacity change from 0 to 1024 [ 488.978306][ T8500] EXT4-fs: inline encryption not supported [ 488.997228][ T8500] EXT4-fs: Ignoring removed i_version option [ 489.332085][ T8500] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 490.122923][ T8500] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4223: comm syz.3.517: Allocating blocks 497-513 which overlap fs metadata [ 490.178063][ T8500] EXT4-fs (loop3): pa ffff8880574832b8: logic 256, phys. 385, len 8 [ 490.186121][ T8500] EXT4-fs error (device loop3): ext4_mb_release_inode_pa:5466: group 0, free 0, pa_free 1 [ 490.613270][ T8243] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 490.703864][ T8243] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 491.509208][ T5823] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 491.565779][ T8325] hsr_slave_0: entered promiscuous mode [ 491.583809][ T8325] hsr_slave_1: entered promiscuous mode [ 491.602860][ T8325] debugfs: 'hsr0' already exists in 'hsr' [ 491.616465][ T8325] Cannot create hsr debugfs directory [ 491.638734][ T8243] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 491.695138][ T8243] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 495.483434][ T5839] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 495.493590][ T5839] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 495.504059][ T5839] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 495.513460][ T5839] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 495.522154][ T5839] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 495.535614][ T58] bridge_slave_1: left allmulticast mode [ 495.792897][ T58] bridge_slave_1: left promiscuous mode [ 495.814172][ T58] bridge0: port 2(bridge_slave_1) entered disabled state [ 496.507623][ T8569] 9pnet_virtio: no channels available for device ./bus [ 497.329701][ T58] bridge_slave_0: left allmulticast mode [ 497.349155][ T58] bridge_slave_0: left promiscuous mode [ 497.354993][ T58] bridge0: port 1(bridge_slave_0) entered disabled state [ 497.384267][ T8575] loop3: detected capacity change from 0 to 1024 [ 497.393463][ T8575] EXT4-fs: inline encryption not supported [ 497.402743][ T8575] EXT4-fs: Ignoring removed i_version option [ 497.460968][ T8575] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 497.613777][ T5839] Bluetooth: hci0: command tx timeout [ 497.697878][ T58] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 497.722133][ T58] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 497.741436][ T58] bond0 (unregistering): Released all slaves [ 497.989270][ T58] hsr_slave_0: left promiscuous mode [ 498.017275][ T58] hsr_slave_1: left promiscuous mode [ 498.032061][ T58] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 498.232327][ T8582] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4223: comm syz.3.529: Allocating blocks 497-513 which overlap fs metadata [ 498.286803][ T58] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 498.329438][ T8582] EXT4-fs (loop3): pa ffff888077db6000: logic 256, phys. 385, len 8 [ 498.337794][ T8582] EXT4-fs error (device loop3): ext4_mb_release_inode_pa:5466: group 0, free 0, pa_free 1 [ 499.543995][ T58] team0 (unregistering): Port device team_slave_1 removed [ 499.590436][ T58] team0 (unregistering): Port device team_slave_0 removed [ 499.690590][ T5839] Bluetooth: hci0: command tx timeout [ 500.170322][ T8243] 8021q: adding VLAN 0 to HW filter on device bond0 [ 500.530940][ T8243] 8021q: adding VLAN 0 to HW filter on device team0 [ 500.632444][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 500.639825][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 500.852793][ T5823] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 500.894701][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 500.901893][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 501.710784][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.717559][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.768588][ T5839] Bluetooth: hci0: command tx timeout [ 501.780941][ T8619] loop3: detected capacity change from 0 to 1024 [ 501.789600][ T8619] EXT4-fs: inline encryption not supported [ 501.795430][ T8619] EXT4-fs: Ignoring removed i_version option [ 501.894130][ T8619] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 503.909556][ T8640] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4223: comm syz.3.534: Allocating blocks 497-513 which overlap fs metadata [ 503.977299][ T5839] Bluetooth: hci0: command tx timeout [ 504.174764][ T8640] EXT4-fs (loop3): pa ffff888053764d98: logic 256, phys. 385, len 8 [ 504.182872][ T8640] EXT4-fs error (device loop3): ext4_mb_release_inode_pa:5466: group 0, free 0, pa_free 1 [ 504.674915][ T8325] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 506.088029][ T5823] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 506.089656][ T8243] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 506.110953][ T8243] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 506.467966][ T8656] loop3: detected capacity change from 0 to 1024 [ 506.480024][ T8656] EXT4-fs: inline encryption not supported [ 506.500201][ T8656] EXT4-fs: Ignoring removed i_version option [ 507.213130][ T8325] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 507.461150][ T8656] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 507.581159][ T8325] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 507.615163][ T8325] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 508.331887][ T8675] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4223: comm syz.3.537: Allocating blocks 497-513 which overlap fs metadata [ 509.116813][ T8558] chnl_net:caif_netlink_parms(): no params data found [ 509.450345][ T8675] EXT4-fs (loop3): pa ffff888077db71d0: logic 256, phys. 385, len 8 [ 509.458460][ T8675] EXT4-fs error (device loop3): ext4_mb_release_inode_pa:5466: group 0, free 0, pa_free 1 [ 509.666889][ T8695] loop2: detected capacity change from 0 to 1024 [ 509.696145][ T8695] EXT4-fs: inline encryption not supported [ 509.705180][ T8695] EXT4-fs: Ignoring removed i_version option [ 509.791775][ T8695] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 509.836817][ T6714] bridge_slave_1: left allmulticast mode [ 509.850491][ T6714] bridge_slave_1: left promiscuous mode [ 509.856319][ T6714] bridge0: port 2(bridge_slave_1) entered disabled state [ 509.925829][ T6714] bridge_slave_0: left allmulticast mode [ 509.987602][ T6714] bridge_slave_0: left promiscuous mode [ 510.007638][ T6714] bridge0: port 1(bridge_slave_0) entered disabled state [ 511.472085][ T6714] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 511.484237][ T6714] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 511.488234][ T5823] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 511.504279][ T6714] bond0 (unregistering): Released all slaves [ 511.910089][ T8558] bridge0: port 1(bridge_slave_0) entered blocking state [ 512.911008][ T8558] bridge0: port 1(bridge_slave_0) entered disabled state [ 513.317413][ T8558] bridge_slave_0: entered allmulticast mode [ 513.368057][ T8558] bridge_slave_0: entered promiscuous mode [ 513.473565][ T5824] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 513.876299][ T6714] hsr_slave_0: left promiscuous mode [ 513.965297][ T6714] hsr_slave_1: left promiscuous mode [ 514.037635][ T6714] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 514.152335][ T6714] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 514.160236][ T51] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 514.189704][ T51] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 514.497937][ T51] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 514.527898][ T51] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 514.539682][ T51] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 515.845703][ T6714] team0 (unregistering): Port device team_slave_1 removed [ 515.875043][ T6714] team0 (unregistering): Port device team_slave_0 removed [ 516.075534][ T8558] bridge0: port 2(bridge_slave_1) entered blocking state [ 516.091623][ T8558] bridge0: port 2(bridge_slave_1) entered disabled state [ 516.110494][ T8558] bridge_slave_1: entered allmulticast mode [ 516.129102][ T8558] bridge_slave_1: entered promiscuous mode [ 516.243771][ T8558] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 516.293052][ T8558] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 516.567438][ T5839] Bluetooth: hci6: command tx timeout [ 517.006099][ T8558] team0: Port device team_slave_0 added [ 517.600225][ T8558] team0: Port device team_slave_1 added [ 518.128431][ T8325] 8021q: adding VLAN 0 to HW filter on device bond0 [ 518.175508][ T8558] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 518.188068][ T8558] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 518.215089][ T8558] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 518.228471][ T8558] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 518.235480][ T8558] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 518.267373][ T8558] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 518.304092][ T8786] loop2: detected capacity change from 0 to 1024 [ 518.317998][ T8786] EXT4-fs: inline encryption not supported [ 518.324406][ T8786] EXT4-fs: Ignoring removed i_version option [ 518.437564][ T8786] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 518.463539][ T8325] 8021q: adding VLAN 0 to HW filter on device team0 [ 518.789462][ T5839] Bluetooth: hci6: command tx timeout [ 519.560302][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 519.567507][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 519.921597][ T8802] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4223: comm syz.2.560: Allocating blocks 497-513 which overlap fs metadata [ 520.559742][ T8802] EXT4-fs (loop2): pa ffff888053764740: logic 256, phys. 385, len 8 [ 520.568270][ T8802] EXT4-fs error (device loop2): ext4_mb_release_inode_pa:5466: group 0, free 0, pa_free 1 [ 520.585024][ T8797] loop4: detected capacity change from 0 to 1024 [ 520.598172][ T8797] EXT4-fs: inline encryption not supported [ 520.606376][ T8558] hsr_slave_0: entered promiscuous mode [ 520.616305][ T8558] hsr_slave_1: entered promiscuous mode [ 520.625232][ T8558] debugfs: 'hsr0' already exists in 'hsr' [ 520.765647][ T8558] Cannot create hsr debugfs directory [ 520.793817][ T8797] EXT4-fs: Ignoring removed i_version option [ 520.807482][ T5839] Bluetooth: hci6: command tx timeout [ 520.865658][ T5824] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 520.972240][ T8797] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 521.036381][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 521.043628][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 521.614124][ T8814] loop3: detected capacity change from 0 to 1024 [ 521.662107][ T8814] EXT4-fs: inline encryption not supported [ 521.691816][ T8814] EXT4-fs: Ignoring removed i_version option [ 521.733330][ T8814] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 522.919273][ T5839] Bluetooth: hci6: command tx timeout [ 522.973152][ T5823] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 523.119815][ T5820] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 523.860308][ T8731] chnl_net:caif_netlink_parms(): no params data found [ 526.240617][ T8731] bridge0: port 1(bridge_slave_0) entered blocking state [ 526.301578][ T8731] bridge0: port 1(bridge_slave_0) entered disabled state [ 526.418937][ T8731] bridge_slave_0: entered allmulticast mode [ 526.449420][ T8731] bridge_slave_0: entered promiscuous mode [ 526.475870][ T6714] bridge_slave_1: left allmulticast mode [ 526.482210][ T6714] bridge_slave_1: left promiscuous mode [ 526.508851][ T6714] bridge0: port 2(bridge_slave_1) entered disabled state [ 526.560751][ T51] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 526.577749][ T51] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 526.589145][ T51] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 526.603617][ T51] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 526.612180][ T51] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 526.748925][ T6714] bridge_slave_0: left allmulticast mode [ 526.754797][ T6714] bridge_slave_0: left promiscuous mode [ 526.762737][ T6714] bridge0: port 1(bridge_slave_0) entered disabled state [ 527.440306][ T8873] 9pnet_virtio: no channels available for device ./bus [ 528.590556][ T8879] loop2: detected capacity change from 0 to 1024 [ 528.636276][ T8879] EXT4-fs: inline encryption not supported [ 528.657296][ T51] Bluetooth: hci2: command tx timeout [ 528.672554][ T8879] EXT4-fs: Ignoring removed i_version option [ 528.733841][ T6714] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 528.750358][ T6714] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 528.785113][ T6714] bond0 (unregistering): Released all slaves [ 528.798457][ T8879] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 529.534496][ T8731] bridge0: port 2(bridge_slave_1) entered blocking state [ 529.694436][ T8731] bridge0: port 2(bridge_slave_1) entered disabled state [ 529.719124][ T8731] bridge_slave_1: entered allmulticast mode [ 529.980400][ T8731] bridge_slave_1: entered promiscuous mode [ 530.333738][ T8891] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4223: comm syz.2.573: Allocating blocks 497-513 which overlap fs metadata [ 530.691575][ T8891] EXT4-fs (loop2): pa ffff8880537640e8: logic 256, phys. 385, len 8 [ 530.699707][ T8891] EXT4-fs error (device loop2): ext4_mb_release_inode_pa:5466: group 0, free 0, pa_free 1 [ 530.727701][ T51] Bluetooth: hci2: command tx timeout [ 530.924929][ T5824] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 531.067877][ T6714] hsr_slave_0: left promiscuous mode [ 531.286892][ T6714] hsr_slave_1: left promiscuous mode [ 531.312215][ T6714] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 531.863662][ T6714] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 532.255456][ T8902] loop2: detected capacity change from 0 to 1024 [ 532.272175][ T8902] EXT4-fs: inline encryption not supported [ 532.328013][ T8902] EXT4-fs: Ignoring removed i_version option [ 532.602074][ T8902] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 532.817350][ T51] Bluetooth: hci2: command tx timeout [ 534.257298][ T6714] team0 (unregistering): Port device team_slave_1 removed [ 534.301445][ T6714] team0 (unregistering): Port device team_slave_0 removed [ 534.565617][ T5824] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 534.844800][ T8731] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 534.908254][ T51] Bluetooth: hci2: command tx timeout [ 534.981211][ T8731] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 536.012463][ T8731] team0: Port device team_slave_0 added [ 536.249601][ T8731] team0: Port device team_slave_1 added [ 536.319181][ T8731] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 536.326168][ T8731] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 536.453083][ T8731] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 537.113304][ T8731] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 537.148532][ T8731] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 537.252903][ T8731] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 537.403006][ T8731] hsr_slave_0: entered promiscuous mode [ 537.414762][ T8731] hsr_slave_1: entered promiscuous mode [ 537.436480][ T8731] debugfs: 'hsr0' already exists in 'hsr' [ 537.443501][ T8731] Cannot create hsr debugfs directory [ 538.324313][ T8952] 9pnet_virtio: no channels available for device ./bus [ 538.747634][ T8955] loop4: detected capacity change from 0 to 1024 [ 538.783733][ T8955] EXT4-fs: inline encryption not supported [ 538.855026][ T8955] EXT4-fs: Ignoring removed i_version option [ 538.941672][ T8955] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 539.145218][ T8861] chnl_net:caif_netlink_parms(): no params data found [ 539.255700][ T8558] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 539.411814][ T8558] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 539.467346][ T8558] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 539.600360][ T8968] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4223: comm syz.4.592: Allocating blocks 497-513 which overlap fs metadata [ 539.695220][ T8558] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 539.729903][ T8968] EXT4-fs (loop4): pa ffff888077db5910: logic 256, phys. 385, len 8 [ 539.738093][ T8968] EXT4-fs error (device loop4): ext4_mb_release_inode_pa:5466: group 0, free 0, pa_free 1 [ 540.499173][ T8861] bridge0: port 1(bridge_slave_0) entered blocking state [ 540.506340][ T8861] bridge0: port 1(bridge_slave_0) entered disabled state [ 540.535604][ T8861] bridge_slave_0: entered allmulticast mode [ 540.561059][ T8861] bridge_slave_0: entered promiscuous mode [ 540.577600][ T8861] bridge0: port 2(bridge_slave_1) entered blocking state [ 540.584746][ T8861] bridge0: port 2(bridge_slave_1) entered disabled state [ 540.638389][ T8861] bridge_slave_1: entered allmulticast mode [ 540.658263][ T5820] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 540.660289][ T8861] bridge_slave_1: entered promiscuous mode [ 541.472667][ T8861] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 541.582456][ T8861] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 542.447402][ T9001] 9pnet_virtio: no channels available for device ./bus [ 544.373977][ T8861] team0: Port device team_slave_0 added [ 544.580516][ T8861] team0: Port device team_slave_1 added [ 545.856465][ T8861] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 545.881313][ T8861] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 545.950645][ T8861] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 545.991398][ T8861] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 546.006606][ T8861] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 546.053049][ T8861] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 546.374821][ T9048] loop2: detected capacity change from 0 to 1024 [ 546.388389][ T9048] EXT4-fs: inline encryption not supported [ 546.414733][ T9048] EXT4-fs: Ignoring removed i_version option [ 546.505023][ T8558] 8021q: adding VLAN 0 to HW filter on device bond0 [ 546.520567][ T9048] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 547.438632][ T8861] hsr_slave_0: entered promiscuous mode [ 547.445696][ T8861] hsr_slave_1: entered promiscuous mode [ 547.452856][ T8861] debugfs: 'hsr0' already exists in 'hsr' [ 547.490634][ T8861] Cannot create hsr debugfs directory [ 547.518380][ T6714] bridge_slave_1: left allmulticast mode [ 547.534320][ T6714] bridge_slave_1: left promiscuous mode [ 547.544671][ T6714] bridge0: port 2(bridge_slave_1) entered disabled state [ 547.564687][ T6714] bridge_slave_0: left allmulticast mode [ 547.584067][ T6714] bridge_slave_0: left promiscuous mode [ 547.615507][ T6714] bridge0: port 1(bridge_slave_0) entered disabled state [ 547.794050][ T9059] 9pnet_virtio: no channels available for device ./bus [ 548.613842][ T9060] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4223: comm syz.2.611: Allocating blocks 497-513 which overlap fs metadata [ 548.649636][ T9060] EXT4-fs (loop2): pa ffff888077db52b8: logic 256, phys. 385, len 8 [ 548.657930][ T9060] EXT4-fs error (device loop2): ext4_mb_release_inode_pa:5466: group 0, free 0, pa_free 1 [ 548.967090][ T6714] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 548.991213][ T6714] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 549.006336][ T6714] bond0 (unregistering): Released all slaves [ 549.043307][ T5824] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 549.234708][ T6714] hsr_slave_0: left promiscuous mode [ 549.250211][ T6714] hsr_slave_1: left promiscuous mode [ 550.727457][ T6714] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 550.978669][ T6714] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 553.305748][ T6714] team0 (unregistering): Port device team_slave_1 removed [ 553.357748][ T6714] team0 (unregistering): Port device team_slave_0 removed [ 553.565627][ T5839] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 553.581409][ T5839] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 553.592762][ T5839] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 553.611478][ T5839] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 553.622967][ T5839] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 553.698739][ T8558] 8021q: adding VLAN 0 to HW filter on device team0 [ 554.340896][ T8731] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 555.254246][ T8731] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 555.687338][ T5839] Bluetooth: hci5: command tx timeout [ 555.921622][ T8731] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 556.136294][ T8731] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 557.818725][ T5839] Bluetooth: hci5: command tx timeout [ 559.252037][ T8731] 8021q: adding VLAN 0 to HW filter on device bond0 [ 559.419849][ T9111] chnl_net:caif_netlink_parms(): no params data found [ 560.150011][ T8731] 8021q: adding VLAN 0 to HW filter on device team0 [ 560.167413][ T5839] Bluetooth: hci5: command tx timeout [ 560.425505][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 560.432725][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 560.484056][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 560.491338][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 560.645950][ T6714] bridge_slave_1: left allmulticast mode [ 560.654777][ T6714] bridge_slave_1: left promiscuous mode [ 560.664790][ T6714] bridge0: port 2(bridge_slave_1) entered disabled state [ 560.680530][ T6714] bridge_slave_0: left allmulticast mode [ 560.686335][ T6714] bridge_slave_0: left promiscuous mode [ 560.696473][ T6714] bridge0: port 1(bridge_slave_0) entered disabled state [ 560.866065][ T6714] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 560.878861][ T6714] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 560.890489][ T6714] bond0 (unregistering): Released all slaves [ 561.185731][ T9111] bridge0: port 1(bridge_slave_0) entered blocking state [ 561.202306][ T9111] bridge0: port 1(bridge_slave_0) entered disabled state [ 561.221086][ T9111] bridge_slave_0: entered allmulticast mode [ 561.243312][ T9111] bridge_slave_0: entered promiscuous mode [ 561.272631][ T9111] bridge0: port 2(bridge_slave_1) entered blocking state [ 561.328139][ T9111] bridge0: port 2(bridge_slave_1) entered disabled state [ 562.070480][ T9111] bridge_slave_1: entered allmulticast mode [ 562.086881][ T9111] bridge_slave_1: entered promiscuous mode [ 562.134061][ T6714] hsr_slave_0: left promiscuous mode [ 562.145408][ T6714] hsr_slave_1: left promiscuous mode [ 562.247670][ T5839] Bluetooth: hci5: command tx timeout [ 562.289067][ T6714] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 562.393005][ T6714] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 562.442621][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.477699][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 564.408977][ T6714] team0 (unregistering): Port device team_slave_1 removed [ 564.451759][ T6714] team0 (unregistering): Port device team_slave_0 removed [ 566.532650][ T8861] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 566.564981][ T8861] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 566.593946][ T8861] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 566.619267][ T8861] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 566.782828][ T8861] 8021q: adding VLAN 0 to HW filter on device bond0 [ 566.806733][ T8861] 8021q: adding VLAN 0 to HW filter on device team0 [ 566.859154][ T8861] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 566.870848][ T8861] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 566.894343][ T6952] bridge0: port 1(bridge_slave_0) entered blocking state [ 566.901556][ T6952] bridge0: port 1(bridge_slave_0) entered forwarding state [ 566.913739][ T6952] bridge0: port 2(bridge_slave_1) entered blocking state [ 566.920936][ T6952] bridge0: port 2(bridge_slave_1) entered forwarding state [ 567.032277][ T9111] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 567.091892][ T9111] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 568.472545][ T9240] 9pnet_virtio: no channels available for device ./bus [ 570.493694][ T9111] team0: Port device team_slave_0 added [ 570.669769][ T9111] team0: Port device team_slave_1 added [ 570.925985][ T8731] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 571.709559][ T9111] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 571.757236][ T9111] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 571.892378][ T9111] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 571.941360][ T9111] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 571.970323][ T9111] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 572.037181][ T9111] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 572.253385][ T9111] hsr_slave_0: entered promiscuous mode [ 572.278511][ T9111] hsr_slave_1: entered promiscuous mode [ 572.284939][ T9111] debugfs: 'hsr0' already exists in 'hsr' [ 572.307383][ T9111] Cannot create hsr debugfs directory [ 572.347752][ T8861] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 573.490588][ T51] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 573.516211][ T51] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 573.525639][ T51] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 573.534184][ T51] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 573.543252][ T51] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 574.386989][ T9290] loop2: detected capacity change from 0 to 1024 [ 574.435460][ T9290] EXT4-fs: inline encryption not supported [ 574.455764][ T9290] EXT4-fs: Ignoring removed i_version option [ 574.559392][ T9290] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 575.637465][ T51] Bluetooth: hci0: command tx timeout [ 577.688800][ T51] Bluetooth: hci0: command tx timeout [ 577.905729][ T5824] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 579.514905][ T8861] veth0_vlan: entered promiscuous mode [ 579.543715][ T8861] veth1_vlan: entered promiscuous mode [ 579.604005][ T8861] veth0_macvtap: entered promiscuous mode [ 579.622606][ T8861] veth1_macvtap: entered promiscuous mode [ 579.702985][ T6379] bridge_slave_1: left allmulticast mode [ 579.721237][ T6379] bridge_slave_1: left promiscuous mode [ 579.738583][ T6379] bridge0: port 2(bridge_slave_1) entered disabled state [ 579.769893][ T51] Bluetooth: hci0: command tx timeout [ 579.787386][ T6379] bridge_slave_0: left allmulticast mode [ 579.801518][ T6379] bridge_slave_0: left promiscuous mode [ 580.467429][ T6379] bridge0: port 1(bridge_slave_0) entered disabled state [ 580.999719][ T6379] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 581.824107][ T6379] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 581.847755][ T51] Bluetooth: hci0: command tx timeout [ 581.855227][ T6379] bond0 (unregistering): Released all slaves [ 581.953910][ T8861] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 582.056052][ T9277] chnl_net:caif_netlink_parms(): no params data found [ 582.455478][ T6379] hsr_slave_0: left promiscuous mode [ 582.505447][ T6379] hsr_slave_1: left promiscuous mode [ 582.549509][ T6379] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 582.599769][ T6379] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 583.225538][ T6379] team0 (unregistering): Port device team_slave_1 removed [ 583.265159][ T6379] team0 (unregistering): Port device team_slave_0 removed [ 584.359394][ T8861] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 584.537314][ T1108] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 584.626011][ T1108] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 584.654729][ T1108] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 584.684906][ T9367] loop3: detected capacity change from 0 to 1024 [ 584.712887][ T9367] EXT4-fs: inline encryption not supported [ 584.721406][ T9111] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 584.738453][ T9367] EXT4-fs: Ignoring removed i_version option [ 584.768856][ T1108] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 584.821386][ T9111] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 584.831573][ T9367] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 584.870472][ T9277] bridge0: port 1(bridge_slave_0) entered blocking state [ 584.884683][ T9277] bridge0: port 1(bridge_slave_0) entered disabled state [ 584.895945][ T9277] bridge_slave_0: entered allmulticast mode [ 584.909682][ T9277] bridge_slave_0: entered promiscuous mode [ 584.919069][ T9111] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 584.948296][ T9277] bridge0: port 2(bridge_slave_1) entered blocking state [ 584.955506][ T9277] bridge0: port 2(bridge_slave_1) entered disabled state [ 584.972041][ T9277] bridge_slave_1: entered allmulticast mode [ 584.981820][ T9277] bridge_slave_1: entered promiscuous mode [ 584.991038][ T9111] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 585.083826][ T9277] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 585.102583][ T82] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 585.115681][ T82] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 585.150102][ T9277] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 585.235526][ T58] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 585.252811][ T58] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 585.259111][ T9277] team0: Port device team_slave_0 added [ 585.294672][ T9277] team0: Port device team_slave_1 added [ 585.297418][ T9382] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4223: comm syz.3.683: Allocating blocks 497-513 which overlap fs metadata [ 585.336306][ T9382] EXT4-fs (loop3): pa ffff888077db5ae0: logic 256, phys. 385, len 8 [ 585.344763][ T9382] EXT4-fs error (device loop3): ext4_mb_release_inode_pa:5466: group 0, free 0, pa_free 1 [ 585.402046][ T9277] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 585.417317][ T9277] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 585.477588][ T9277] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 585.509787][ T9277] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 585.516764][ T9277] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 585.608384][ T9277] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 585.819582][ T5823] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 585.821549][ T9277] hsr_slave_0: entered promiscuous mode [ 585.836770][ T9277] hsr_slave_1: entered promiscuous mode [ 585.857831][ T9277] debugfs: 'hsr0' already exists in 'hsr' [ 585.866162][ T9277] Cannot create hsr debugfs directory [ 586.009941][ T9111] 8021q: adding VLAN 0 to HW filter on device bond0 [ 586.118892][ T9111] 8021q: adding VLAN 0 to HW filter on device team0 [ 586.193541][ T689] bridge0: port 1(bridge_slave_0) entered blocking state [ 586.200734][ T689] bridge0: port 1(bridge_slave_0) entered forwarding state [ 586.260439][ T689] bridge0: port 2(bridge_slave_1) entered blocking state [ 586.267634][ T689] bridge0: port 2(bridge_slave_1) entered forwarding state [ 586.479145][ T5839] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 586.488544][ T5839] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 586.497859][ T5839] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 586.506881][ T5839] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 586.516046][ T5839] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 587.778283][ T6952] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 588.747496][ T5839] Bluetooth: hci2: command tx timeout [ 590.887284][ T5839] Bluetooth: hci2: command tx timeout [ 592.439253][ T6952] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 592.624282][ T6952] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 592.967386][ T5839] Bluetooth: hci2: command tx timeout [ 592.987074][ T9432] 9pnet_virtio: no channels available for device ./bus [ 593.175434][ T6952] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 594.806494][ T9277] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 595.028111][ T9277] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 595.047836][ T5839] Bluetooth: hci2: command tx timeout [ 595.212312][ T9473] loop4: detected capacity change from 0 to 1024 [ 595.267794][ T9473] EXT4-fs: inline encryption not supported [ 595.300195][ T9277] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 595.348431][ T9473] EXT4-fs: Ignoring removed i_version option [ 595.412198][ T9277] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 595.483198][ T9473] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 595.554874][ T6952] bridge_slave_1: left allmulticast mode [ 595.836648][ T6952] bridge_slave_1: left promiscuous mode [ 595.844318][ T6952] bridge0: port 2(bridge_slave_1) entered disabled state [ 596.528227][ T9490] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4223: comm syz.4.702: Allocating blocks 497-513 which overlap fs metadata [ 596.568997][ T9490] EXT4-fs (loop4): pa ffff88805761bd98: logic 256, phys. 385, len 8 [ 596.577052][ T9490] EXT4-fs error (device loop4): ext4_mb_release_inode_pa:5466: group 0, free 0, pa_free 1 [ 596.737869][ T6952] bridge_slave_0: left allmulticast mode [ 596.744385][ T6952] bridge_slave_0: left promiscuous mode [ 596.763396][ T6952] bridge0: port 1(bridge_slave_0) entered disabled state [ 596.796806][ T5820] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 597.156601][ T6952] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 597.204430][ T6952] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 597.443306][ T6952] bond0 (unregistering): Released all slaves [ 598.018653][ T9392] chnl_net:caif_netlink_parms(): no params data found [ 599.728977][ T9111] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 603.761701][ T6952] hsr_slave_0: left promiscuous mode [ 603.795133][ T6952] hsr_slave_1: left promiscuous mode [ 603.802660][ T6952] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 603.823523][ T6952] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 603.845948][ T6952] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 603.873847][ T6952] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 604.062246][ T6952] veth1_macvtap: left promiscuous mode [ 604.067900][ T6952] veth0_macvtap: left promiscuous mode [ 604.073535][ T6952] veth1_vlan: left promiscuous mode [ 604.084636][ T6952] veth0_vlan: left promiscuous mode [ 607.470913][ T9581] loop3: detected capacity change from 0 to 1024 [ 607.494916][ T9581] EXT4-fs: inline encryption not supported [ 607.513860][ T9583] loop2: detected capacity change from 0 to 1024 [ 607.520477][ T9581] EXT4-fs: Ignoring removed i_version option [ 607.531729][ T9583] EXT4-fs: inline encryption not supported [ 607.537752][ T9583] EXT4-fs: Ignoring removed i_version option [ 607.592528][ T9583] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 607.618247][ T9581] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 608.378457][ T9591] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4223: comm syz.2.723: Allocating blocks 497-513 which overlap fs metadata [ 608.723038][ T9591] EXT4-fs (loop2): pa ffff888038905658: logic 256, phys. 385, len 8 [ 608.731288][ T9591] EXT4-fs error (device loop2): ext4_mb_release_inode_pa:5466: group 0, free 0, pa_free 1 [ 609.452432][ T9592] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4223: comm syz.3.722: Allocating blocks 497-513 which overlap fs metadata [ 609.762968][ T9592] EXT4-fs (loop3): pa ffff888038905000: logic 256, phys. 385, len 8 [ 609.771448][ T9592] EXT4-fs error (device loop3): ext4_mb_release_inode_pa:5466: group 0, free 0, pa_free 1 [ 609.925159][ T5824] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 609.935638][ T6952] team0 (unregistering): Port device team_slave_1 removed [ 609.960595][ T6952] team0 (unregistering): Port device team_slave_0 removed [ 609.965115][ T5823] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 610.121841][ T9595] loop3: detected capacity change from 0 to 1024 [ 610.214741][ T9595] EXT4-fs: inline encryption not supported [ 610.294602][ T9595] EXT4-fs: Ignoring removed i_version option [ 610.666049][ T9595] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 611.375159][ T9392] bridge0: port 1(bridge_slave_0) entered blocking state [ 611.382608][ T9392] bridge0: port 1(bridge_slave_0) entered disabled state [ 611.389964][ T9392] bridge_slave_0: entered allmulticast mode [ 611.596329][ T9392] bridge_slave_0: entered promiscuous mode [ 611.762232][ T9392] bridge0: port 2(bridge_slave_1) entered blocking state [ 611.788926][ T9392] bridge0: port 2(bridge_slave_1) entered disabled state [ 611.844178][ T9392] bridge_slave_1: entered allmulticast mode [ 611.948862][ T9392] bridge_slave_1: entered promiscuous mode [ 612.045200][ T9604] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4223: comm syz.3.725: Allocating blocks 497-513 which overlap fs metadata [ 612.183620][ T9604] EXT4-fs (loop3): pa ffff888077db6658: logic 256, phys. 385, len 8 [ 612.192053][ T9604] EXT4-fs error (device loop3): ext4_mb_release_inode_pa:5466: group 0, free 0, pa_free 1 [ 612.210772][ T9392] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 612.302090][ T9392] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 612.638359][ T9392] team0: Port device team_slave_0 added [ 612.672729][ T9277] 8021q: adding VLAN 0 to HW filter on device bond0 [ 612.689373][ T9392] team0: Port device team_slave_1 added [ 612.799365][ T9111] veth0_vlan: entered promiscuous mode [ 613.938452][ T9392] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 613.945453][ T9392] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 614.049950][ T9392] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 614.170483][ T9277] 8021q: adding VLAN 0 to HW filter on device team0 [ 614.201440][ T9392] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 614.237239][ T9392] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 614.297293][ T9392] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 614.422904][ T6714] bridge0: port 1(bridge_slave_0) entered blocking state [ 614.430132][ T6714] bridge0: port 1(bridge_slave_0) entered forwarding state [ 614.476795][ T5823] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 614.503213][ T6714] bridge0: port 2(bridge_slave_1) entered blocking state [ 614.510416][ T6714] bridge0: port 2(bridge_slave_1) entered forwarding state [ 614.749598][ T9392] hsr_slave_0: entered promiscuous mode [ 614.756723][ T9392] hsr_slave_1: entered promiscuous mode [ 614.776842][ T9392] debugfs: 'hsr0' already exists in 'hsr' [ 614.797270][ T9392] Cannot create hsr debugfs directory [ 614.944833][ T9277] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 616.043470][ T5839] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 616.167726][ T5839] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 616.178386][ T5839] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 616.188453][ T5839] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 616.214374][ T5839] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 616.759276][ T9647] 9pnet_virtio: no channels available for device ./bus [ 618.372264][ T51] Bluetooth: hci5: command tx timeout [ 621.057443][ T51] Bluetooth: hci5: command tx timeout [ 621.070778][ T9675] 9pnet_virtio: no channels available for device ./bus [ 623.112774][ T9277] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 623.128946][ T51] Bluetooth: hci5: command tx timeout [ 623.964724][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 623.971258][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 625.208343][ T51] Bluetooth: hci5: command tx timeout [ 625.614439][ T6951] bridge_slave_1: left allmulticast mode [ 625.628468][ T6951] bridge_slave_1: left promiscuous mode [ 625.634298][ T6951] bridge0: port 2(bridge_slave_1) entered disabled state [ 625.688682][ T6951] bridge_slave_0: left allmulticast mode [ 625.695665][ T6951] bridge_slave_0: left promiscuous mode [ 625.727456][ T6951] bridge0: port 1(bridge_slave_0) entered disabled state [ 626.385023][ T6951] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 627.071239][ T6951] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 627.092198][ T6951] bond0 (unregistering): Released all slaves [ 628.296526][ T9277] veth0_vlan: entered promiscuous mode [ 628.388613][ T6951] hsr_slave_0: left promiscuous mode [ 628.408325][ T6951] hsr_slave_1: left promiscuous mode [ 628.445473][ T6951] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 628.474714][ T6951] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 628.824698][ T9734] 9pnet_virtio: no channels available for device ./bus [ 628.981560][ T6951] veth0_vlan: left promiscuous mode [ 630.114581][ T6951] team0 (unregistering): Port device team_slave_1 removed [ 630.132262][ T6951] team0 (unregistering): Port device team_slave_0 removed [ 630.304194][ T9639] chnl_net:caif_netlink_parms(): no params data found [ 630.374321][ T9392] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 630.460844][ T9277] veth1_vlan: entered promiscuous mode [ 630.471374][ T9392] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 630.496928][ T9392] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 630.531762][ T9392] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 631.719394][ T9639] bridge0: port 1(bridge_slave_0) entered blocking state [ 631.759676][ T9639] bridge0: port 1(bridge_slave_0) entered disabled state [ 631.767077][ T9639] bridge_slave_0: entered allmulticast mode [ 632.579601][ T9639] bridge_slave_0: entered promiscuous mode [ 632.675674][ T9639] bridge0: port 2(bridge_slave_1) entered blocking state [ 632.690659][ T9639] bridge0: port 2(bridge_slave_1) entered disabled state [ 632.698803][ T9639] bridge_slave_1: entered allmulticast mode [ 632.707019][ T9639] bridge_slave_1: entered promiscuous mode [ 634.982352][ T9639] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 635.101786][ T9639] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 635.259755][ T9790] loop2: detected capacity change from 0 to 1024 [ 635.297667][ T9790] EXT4-fs: inline encryption not supported [ 635.324429][ T9790] EXT4-fs: Ignoring removed i_version option [ 635.428258][ T9790] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 635.805366][ T9639] team0: Port device team_slave_0 added [ 635.814488][ T9639] team0: Port device team_slave_1 added [ 635.979660][ T5839] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 635.989665][ T5839] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 635.998006][ T5839] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 636.012169][ T5839] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 636.020781][ T5839] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 636.203727][ T9639] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 636.223561][ T9799] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4223: comm syz.2.757: Allocating blocks 497-513 which overlap fs metadata [ 636.252547][ T9639] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 636.273396][ T9799] EXT4-fs (loop2): pa ffff888057483ae0: logic 256, phys. 385, len 8 [ 636.286832][ T9799] EXT4-fs error (device loop2): ext4_mb_release_inode_pa:5466: group 0, free 0, pa_free 1 [ 636.300103][ T9639] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 636.377983][ T9639] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 636.385095][ T9639] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 636.437339][ T9639] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 636.766597][ T9392] 8021q: adding VLAN 0 to HW filter on device bond0 [ 636.785684][ T9639] hsr_slave_0: entered promiscuous mode [ 636.793538][ T9639] hsr_slave_1: entered promiscuous mode [ 636.806020][ T9639] debugfs: 'hsr0' already exists in 'hsr' [ 636.814473][ T9639] Cannot create hsr debugfs directory [ 636.964448][ T9392] 8021q: adding VLAN 0 to HW filter on device team0 [ 637.169570][ T6952] bridge0: port 1(bridge_slave_0) entered blocking state [ 637.176746][ T6952] bridge0: port 1(bridge_slave_0) entered forwarding state [ 637.214519][ T6952] bridge0: port 2(bridge_slave_1) entered blocking state [ 637.221769][ T6952] bridge0: port 2(bridge_slave_1) entered forwarding state [ 637.460727][ T147] bridge_slave_1: left allmulticast mode [ 637.466435][ T147] bridge_slave_1: left promiscuous mode [ 637.475619][ T147] bridge0: port 2(bridge_slave_1) entered disabled state [ 637.511377][ T147] bridge_slave_0: left allmulticast mode [ 637.517089][ T147] bridge_slave_0: left promiscuous mode [ 637.539668][ T147] bridge0: port 1(bridge_slave_0) entered disabled state [ 638.281220][ T51] Bluetooth: hci0: command tx timeout [ 640.328064][ T51] Bluetooth: hci0: command tx timeout [ 640.449069][ T5824] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 640.770663][ T147] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 640.800470][ T147] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 640.826302][ T147] bond0 (unregistering): Released all slaves [ 641.975445][ T147] hsr_slave_0: left promiscuous mode [ 642.036692][ T147] hsr_slave_1: left promiscuous mode [ 642.647966][ T51] Bluetooth: hci0: command tx timeout [ 642.999573][ T147] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 643.351998][ T147] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 643.373127][ T147] veth1_vlan: left promiscuous mode [ 643.378537][ T147] veth0_vlan: left promiscuous mode [ 644.729715][ T51] Bluetooth: hci0: command tx timeout [ 645.542824][ T147] team0 (unregistering): Port device team_slave_1 removed [ 645.711296][ T147] team0 (unregistering): Port device team_slave_0 removed [ 648.536056][ T5839] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 648.545155][ T5839] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 648.553594][ T5839] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 648.566692][ T5839] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 648.589719][ T5839] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 648.713250][ T9797] chnl_net:caif_netlink_parms(): no params data found [ 650.678030][ T51] Bluetooth: hci6: command tx timeout [ 652.727365][ T51] Bluetooth: hci6: command tx timeout [ 654.817402][ T51] Bluetooth: hci6: command tx timeout [ 655.325037][ T9797] bridge0: port 1(bridge_slave_0) entered blocking state [ 655.332699][ T9797] bridge0: port 1(bridge_slave_0) entered disabled state [ 655.345431][ T9797] bridge_slave_0: entered allmulticast mode [ 655.354388][ T9797] bridge_slave_0: entered promiscuous mode [ 655.364945][ T9797] bridge0: port 2(bridge_slave_1) entered blocking state [ 655.383706][ T9797] bridge0: port 2(bridge_slave_1) entered disabled state [ 655.394390][ T9797] bridge_slave_1: entered allmulticast mode [ 655.402970][ T9797] bridge_slave_1: entered promiscuous mode [ 655.856178][ T9797] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 656.937399][ T5839] Bluetooth: hci6: command tx timeout [ 657.421454][ T9797] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 658.671915][ T9797] team0: Port device team_slave_0 added [ 659.791915][ T9797] team0: Port device team_slave_1 added [ 659.929664][ T9639] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 659.977951][ T9797] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 659.995237][ T9797] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 660.119208][ T9797] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 660.147495][ T9639] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 660.442094][ T9797] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 660.456092][ T9797] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 661.434203][ T9797] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 661.458141][ T9639] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 661.856265][T10009] 9pnet_virtio: no channels available for device ./bus [ 662.023613][ T9639] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 663.299270][ T9797] hsr_slave_0: entered promiscuous mode [ 664.479803][ T9797] hsr_slave_1: entered promiscuous mode [ 664.696512][ T9797] debugfs: 'hsr0' already exists in 'hsr' [ 664.716774][ T9797] Cannot create hsr debugfs directory [ 664.807854][ C1] ================================================================== [ 664.816056][ C1] BUG: KASAN: slab-use-after-free in ax25_send_frame+0xae6/0xb70 [ 664.823905][ C1] Read of size 7 at addr ffff88807bf30008 by task syz.3.800/10037 [ 664.831753][ C1] [ 664.834092][ C1] CPU: 1 UID: 0 PID: 10037 Comm: syz.3.800 Not tainted syzkaller #0 PREEMPT(full) [ 664.834150][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 664.834175][ C1] Call Trace: [ 664.834188][ C1] [ 664.834202][ C1] dump_stack_lvl+0x100/0x190 [ 664.834264][ C1] print_report+0x156/0x4c9 [ 664.834319][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 664.834368][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 664.834415][ C1] ? __phys_addr+0xe8/0x180 [ 664.834468][ C1] ? ax25_send_frame+0xae6/0xb70 [ 664.834518][ C1] kasan_report+0xdf/0x1e0 [ 664.834564][ C1] ? ax25_send_frame+0xae6/0xb70 [ 664.834610][ C1] ax25_send_frame+0xae6/0xb70 [ 664.834653][ C1] rose_send_frame+0xfa/0x2a0 [ 664.834701][ C1] ? __pfx_rose_t0timer_expiry+0x10/0x10 [ 664.834749][ C1] rose_transmit_restart_request+0x1b8/0x250 [ 664.834800][ C1] rose_t0timer_expiry+0x1d/0x150 [ 664.834846][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 664.834893][ C1] call_timer_fn+0x19a/0x670 [ 664.834940][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 664.834983][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 664.835036][ C1] ? __pfx_rose_t0timer_expiry+0x10/0x10 [ 664.835084][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 664.835142][ C1] ? mark_held_locks+0x40/0x70 [ 664.835199][ C1] ? __pfx_rose_t0timer_expiry+0x10/0x10 [ 664.835249][ C1] __run_timers+0x757/0xb30 [ 664.835303][ C1] ? __pfx___run_timers+0x10/0x10 [ 664.835354][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 664.835407][ C1] ? _raw_spin_lock_irq+0x45/0x50 [ 664.835476][ C1] run_timer_base+0x114/0x190 [ 664.835524][ C1] ? __pfx_run_timer_base+0x10/0x10 [ 664.835571][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 664.835622][ C1] run_timer_softirq+0x1a/0x50 [ 664.835671][ C1] handle_softirqs+0x1eb/0x9e0 [ 664.835716][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 664.835760][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 664.835813][ C1] __irq_exit_rcu+0xef/0x150 [ 664.835853][ C1] irq_exit_rcu+0x9/0x30 [ 664.835893][ C1] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 664.835935][ C1] [ 664.835948][ C1] [ 664.835962][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 664.836006][ C1] RIP: 0010:_raw_spin_unlock_irqrestore+0x31/0x80 [ 664.836048][ C1] Code: f5 53 48 8b 74 24 10 48 89 fb 48 83 c7 18 e8 76 91 55 f6 48 89 df e8 5e e1 55 f6 f7 c5 00 02 00 00 75 23 9c 58 f6 c4 02 75 37 01 00 00 00 e8 f5 17 46 f6 65 8b 05 3e 7e 7d 08 85 c0 74 16 5b [ 664.836087][ C1] RSP: 0018:ffffc90004877758 EFLAGS: 00000246 [ 664.836125][ C1] RAX: 0000000000000006 RBX: ffff888078ed0100 RCX: 0000000000000040 [ 664.836150][ C1] RDX: 0000000000000000 RSI: ffffffff8de756c6 RDI: ffffffff8c1acf20 [ 664.836176][ C1] RBP: 0000000000000246 R08: 0000000000000001 R09: 0000000000000000 [ 664.836201][ C1] R10: 0000000000000001 R11: 0000000000000000 R12: ffff888022351780 [ 664.836226][ C1] R13: 0000000000000246 R14: ffff888078ed00e8 R15: ffffc900048778d8 [ 664.836267][ C1] __skb_try_recv_datagram+0x16a/0x500 [ 664.836331][ C1] ? __pfx_sk_busy_loop_end+0x10/0x10 [ 664.836386][ C1] ? __pfx___skb_try_recv_datagram+0x10/0x10 [ 664.836452][ C1] __unix_dgram_recvmsg+0x1bc/0xc30 [ 664.836518][ C1] ? __pfx___unix_dgram_recvmsg+0x10/0x10 [ 664.836576][ C1] ? __lock_acquire+0x4a5/0x2630 [ 664.836630][ C1] ? irqentry_exit+0x180/0x670 [ 664.836669][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 664.836715][ C1] ? lockdep_hardirqs_on+0x78/0x100 [ 664.836754][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 664.836800][ C1] ? irqentry_exit+0x180/0x670 [ 664.836844][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 664.836890][ C1] ? iovec_from_user+0xbb/0x140 [ 664.836930][ C1] unix_dgram_recvmsg+0xd0/0x110 [ 664.836987][ C1] ____sys_recvmsg+0x5f7/0x6b0 [ 664.837043][ C1] ? __pfx_____sys_recvmsg+0x10/0x10 [ 664.837101][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 664.837154][ C1] ? kfree+0x2ec/0x6b0 [ 664.837208][ C1] ? ___sys_recvmsg+0xef/0x1a0 [ 664.837268][ C1] ___sys_recvmsg+0x16a/0x1a0 [ 664.837323][ C1] ? __pfx____sys_recvmsg+0x10/0x10 [ 664.837390][ C1] ? __pfx___might_resched+0x10/0x10 [ 664.837461][ C1] do_recvmmsg+0x301/0x760 [ 664.837517][ C1] ? __pfx_do_recvmmsg+0x10/0x10 [ 664.837574][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 664.837625][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 664.837673][ C1] ? do_futex+0x192/0x350 [ 664.837737][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 664.837785][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 664.837837][ C1] __x64_sys_recvmmsg+0x22a/0x280 [ 664.837883][ C1] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 664.837928][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 664.837981][ C1] do_syscall_64+0x106/0xf80 [ 664.838023][ C1] ? irqentry_exit+0x138/0x670 [ 664.838068][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 664.838109][ C1] RIP: 0033:0x7f67ddf9bf79 [ 664.838148][ C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 664.838188][ C1] RSP: 002b:00007f67dc1f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 664.838224][ C1] RAX: ffffffffffffffda RBX: 00007f67de216090 RCX: 00007f67ddf9bf79 [ 664.838251][ C1] RDX: 0000000000010106 RSI: 00002000000000c0 RDI: 0000000000000005 [ 664.838277][ C1] RBP: 00007f67de0327e0 R08: 0000000000000000 R09: 0000000000000000 [ 664.838302][ C1] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 664.838326][ C1] R13: 00007f67de216128 R14: 00007f67de216090 R15: 00007fff6aa916e8 [ 664.838366][ C1] [ 664.838378][ C1] [ 665.386294][ C1] Allocated by task 8446: [ 665.390627][ C1] kasan_save_stack+0x30/0x50 [ 665.395335][ C1] kasan_save_track+0x14/0x30 [ 665.400031][ C1] __kasan_kmalloc+0xaa/0xb0 [ 665.404719][ C1] rose_rt_ioctl+0x586/0x2550 [ 665.409434][ C1] rose_ioctl+0x491/0x7d0 [ 665.413785][ C1] sock_do_ioctl+0x118/0x280 [ 665.418403][ C1] sock_ioctl+0x599/0x6b0 [ 665.422765][ C1] __x64_sys_ioctl+0x18e/0x210 [ 665.427546][ C1] do_syscall_64+0x106/0xf80 [ 665.432207][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 665.438122][ C1] [ 665.440440][ C1] Freed by task 10040: [ 665.444504][ C1] kasan_save_stack+0x30/0x50 [ 665.449198][ C1] kasan_save_track+0x14/0x30 [ 665.453892][ C1] kasan_save_free_info+0x3b/0x70 [ 665.458952][ C1] __kasan_slab_free+0x5f/0x80 [ 665.463737][ C1] kfree+0x1f6/0x6b0 [ 665.467666][ C1] rose_timer_expiry+0x53f/0x630 [ 665.472641][ C1] call_timer_fn+0x19a/0x670 [ 665.477252][ C1] __run_timers+0x757/0xb30 [ 665.481809][ C1] run_timer_base+0x114/0x190 [ 665.486530][ C1] run_timer_softirq+0x1a/0x50 [ 665.491327][ C1] handle_softirqs+0x1eb/0x9e0 [ 665.496118][ C1] __irq_exit_rcu+0xef/0x150 [ 665.500723][ C1] irq_exit_rcu+0x9/0x30 [ 665.504982][ C1] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 665.510632][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 665.516639][ C1] [ 665.518962][ C1] The buggy address belongs to the object at ffff88807bf30000 [ 665.518962][ C1] which belongs to the cache kmalloc-512 of size 512 [ 665.533027][ C1] The buggy address is located 8 bytes inside of [ 665.533027][ C1] freed 512-byte region [ffff88807bf30000, ffff88807bf30200) [ 665.546677][ C1] [ 665.549000][ C1] The buggy address belongs to the physical page: [ 665.555408][ C1] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88807bf32400 pfn:0x7bf30 [ 665.565569][ C1] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 665.574079][ C1] flags: 0xfff00000000240(workingset|head|node=0|zone=1|lastcpupid=0x7ff) [ 665.582590][ C1] page_type: f5(slab) [ 665.586583][ C1] raw: 00fff00000000240 ffff88813fe37c80 ffffea0001ed9210 ffffea0000d59610 [ 665.595227][ C1] raw: ffff88807bf32400 000000000010000f 00000000f5000000 0000000000000000 [ 665.603834][ C1] head: 00fff00000000240 ffff88813fe37c80 ffffea0001ed9210 ffffea0000d59610 [ 665.612530][ C1] head: ffff88807bf32400 000000000010000f 00000000f5000000 0000000000000000 [ 665.621224][ C1] head: 00fff00000000002 ffffea0001efcc01 00000000ffffffff 00000000ffffffff [ 665.630005][ C1] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004 [ 665.638779][ C1] page dumped because: kasan: bad access detected [ 665.645202][ C1] page_owner tracks the page as allocated [ 665.650920][ C1] page last allocated via order 2, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5189, tgid 5189 (udevadm), ts 31690501388, free_ts 26345350699 [ 665.671895][ C1] post_alloc_hook+0x153/0x170 [ 665.676709][ C1] get_page_from_freelist+0x111d/0x3140 [ 665.682314][ C1] __alloc_frozen_pages_noprof+0x27c/0x2ba0 [ 665.688252][ C1] new_slab+0xa6/0x6e0 [ 665.692350][ C1] refill_objects+0x26b/0x400 [ 665.697058][ C1] __pcs_replace_empty_main+0x19f/0x600 [ 665.702652][ C1] __kmalloc_cache_noprof+0x493/0x6f0 [ 665.708156][ C1] kernfs_fop_open+0x23d/0xd50 [ 665.712978][ C1] do_dentry_open+0x6d8/0x1660 [ 665.717772][ C1] vfs_open+0x82/0x3f0 [ 665.721866][ C1] path_openat+0x208c/0x31a0 [ 665.726531][ C1] do_file_open+0x20e/0x430 [ 665.731054][ C1] do_sys_openat2+0x10d/0x1e0 [ 665.735774][ C1] __x64_sys_openat+0x12d/0x210 [ 665.740648][ C1] do_syscall_64+0x106/0xf80 [ 665.745249][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 665.751160][ C1] page last free pid 1 tgid 1 stack trace: [ 665.756964][ C1] __free_frozen_pages+0x7ca/0x10a0 [ 665.762292][ C1] free_contig_range+0xde/0x1d0 [ 665.767278][ C1] destroy_args+0xa8/0x7a0 [ 665.771737][ C1] debug_vm_pgtable+0x1b66/0x34c0 [ 665.776880][ C1] do_one_initcall+0x11d/0x760 [ 665.781657][ C1] kernel_init_freeable+0x6e5/0x7a0 [ 665.786896][ C1] kernel_init+0x1f/0x1e0 [ 665.791450][ C1] ret_from_fork+0x754/0xd80 [ 665.796072][ C1] ret_from_fork_asm+0x1a/0x30 [ 665.800859][ C1] [ 665.803196][ C1] Memory state around the buggy address: [ 665.808826][ C1] ffff88807bf2ff00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 665.816893][ C1] ffff88807bf2ff80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 665.824966][ C1] >ffff88807bf30000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 665.833030][ C1] ^ [ 665.837370][ C1] ffff88807bf30080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 665.845535][ C1] ffff88807bf30100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 665.853692][ C1] ================================================================== [ 665.861893][ C1] Disabling lock debugging due to kernel taint [ 665.868107][ C1] ================================================================== [ 665.876266][ C1] BUG: KASAN: slab-use-after-free in kmemdup_noprof+0x44/0x60 [ 665.883868][ C1] Read of size 66 at addr ffff888022aed600 by task syz.3.800/10037 [ 665.891783][ C1] [ 665.894126][ C1] CPU: 1 UID: 0 PID: 10037 Comm: syz.3.800 Tainted: G B syzkaller #0 PREEMPT(full) [ 665.894185][ C1] Tainted: [B]=BAD_PAGE [ 665.894199][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 665.894223][ C1] Call Trace: [ 665.894236][ C1] [ 665.894250][ C1] dump_stack_lvl+0x100/0x190 [ 665.894313][ C1] print_report+0x156/0x4c9 [ 665.894369][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 665.894424][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 665.894473][ C1] ? __phys_addr+0xe8/0x180 [ 665.894527][ C1] ? kmemdup_noprof+0x44/0x60 [ 665.894566][ C1] kasan_report+0xdf/0x1e0 [ 665.894611][ C1] ? kmemdup_noprof+0x44/0x60 [ 665.894654][ C1] kasan_check_range+0x10f/0x1e0 [ 665.894708][ C1] __asan_memcpy+0x23/0x60 [ 665.894768][ C1] kmemdup_noprof+0x44/0x60 [ 665.894807][ C1] ax25_send_frame+0x414/0xb70 [ 665.894854][ C1] rose_send_frame+0xfa/0x2a0 [ 665.894905][ C1] ? __pfx_rose_t0timer_expiry+0x10/0x10 [ 665.894954][ C1] rose_transmit_restart_request+0x1b8/0x250 [ 665.895008][ C1] rose_t0timer_expiry+0x1d/0x150 [ 665.895056][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 665.895104][ C1] call_timer_fn+0x19a/0x670 [ 665.895152][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 665.895197][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 665.895250][ C1] ? __pfx_rose_t0timer_expiry+0x10/0x10 [ 665.895300][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 665.895347][ C1] ? mark_held_locks+0x40/0x70 [ 665.895412][ C1] ? __pfx_rose_t0timer_expiry+0x10/0x10 [ 665.895461][ C1] __run_timers+0x757/0xb30 [ 665.895515][ C1] ? __pfx___run_timers+0x10/0x10 [ 665.895567][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 665.895620][ C1] ? _raw_spin_lock_irq+0x45/0x50 [ 665.895689][ C1] run_timer_base+0x114/0x190 [ 665.895738][ C1] ? __pfx_run_timer_base+0x10/0x10 [ 665.895786][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 665.895838][ C1] run_timer_softirq+0x1a/0x50 [ 665.895887][ C1] handle_softirqs+0x1eb/0x9e0 [ 665.895934][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 665.895978][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 665.896030][ C1] __irq_exit_rcu+0xef/0x150 [ 665.896070][ C1] irq_exit_rcu+0x9/0x30 [ 665.896111][ C1] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 665.896153][ C1] [ 665.896166][ C1] [ 665.896180][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 665.896224][ C1] RIP: 0010:_raw_spin_unlock_irqrestore+0x31/0x80 [ 665.896266][ C1] Code: f5 53 48 8b 74 24 10 48 89 fb 48 83 c7 18 e8 76 91 55 f6 48 89 df e8 5e e1 55 f6 f7 c5 00 02 00 00 75 23 9c 58 f6 c4 02 75 37 01 00 00 00 e8 f5 17 46 f6 65 8b 05 3e 7e 7d 08 85 c0 74 16 5b [ 665.896306][ C1] RSP: 0018:ffffc90004877758 EFLAGS: 00000246 [ 665.896338][ C1] RAX: 0000000000000006 RBX: ffff888078ed0100 RCX: 0000000000000040 [ 665.896364][ C1] RDX: 0000000000000000 RSI: ffffffff8de756c6 RDI: ffffffff8c1acf20 [ 665.896396][ C1] RBP: 0000000000000246 R08: 0000000000000001 R09: 0000000000000000 [ 665.896420][ C1] R10: 0000000000000001 R11: 0000000000000000 R12: ffff888022351780 [ 665.896446][ C1] R13: 0000000000000246 R14: ffff888078ed00e8 R15: ffffc900048778d8 [ 665.896486][ C1] __skb_try_recv_datagram+0x16a/0x500 [ 665.896556][ C1] ? __pfx_sk_busy_loop_end+0x10/0x10 [ 665.896614][ C1] ? __pfx___skb_try_recv_datagram+0x10/0x10 [ 665.896684][ C1] __unix_dgram_recvmsg+0x1bc/0xc30 [ 665.896749][ C1] ? __pfx___unix_dgram_recvmsg+0x10/0x10 [ 665.896808][ C1] ? __lock_acquire+0x4a5/0x2630 [ 665.896863][ C1] ? irqentry_exit+0x180/0x670 [ 665.896905][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 665.896953][ C1] ? lockdep_hardirqs_on+0x78/0x100 [ 665.896994][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 665.897042][ C1] ? irqentry_exit+0x180/0x670 [ 665.897088][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 665.897143][ C1] ? iovec_from_user+0xbb/0x140 [ 665.897186][ C1] unix_dgram_recvmsg+0xd0/0x110 [ 665.897243][ C1] ____sys_recvmsg+0x5f7/0x6b0 [ 665.897297][ C1] ? __pfx_____sys_recvmsg+0x10/0x10 [ 665.897356][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 665.897415][ C1] ? kfree+0x2ec/0x6b0 [ 665.897467][ C1] ? ___sys_recvmsg+0xef/0x1a0 [ 665.897526][ C1] ___sys_recvmsg+0x16a/0x1a0 [ 665.897581][ C1] ? __pfx____sys_recvmsg+0x10/0x10 [ 665.897648][ C1] ? __pfx___might_resched+0x10/0x10 [ 665.897718][ C1] do_recvmmsg+0x301/0x760 [ 665.897775][ C1] ? __pfx_do_recvmmsg+0x10/0x10 [ 665.897831][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 665.897884][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 665.897934][ C1] ? do_futex+0x192/0x350 [ 665.897998][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 665.898047][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 665.898098][ C1] __x64_sys_recvmmsg+0x22a/0x280 [ 665.898142][ C1] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 665.898188][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 665.898241][ C1] do_syscall_64+0x106/0xf80 [ 665.898283][ C1] ? irqentry_exit+0x138/0x670 [ 665.898329][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 665.898368][ C1] RIP: 0033:0x7f67ddf9bf79 [ 665.898410][ C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 665.898449][ C1] RSP: 002b:00007f67dc1f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 665.898487][ C1] RAX: ffffffffffffffda RBX: 00007f67de216090 RCX: 00007f67ddf9bf79 [ 665.898514][ C1] RDX: 0000000000010106 RSI: 00002000000000c0 RDI: 0000000000000005 [ 665.898539][ C1] RBP: 00007f67de0327e0 R08: 0000000000000000 R09: 0000000000000000 [ 665.898564][ C1] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 665.898588][ C1] R13: 00007f67de216128 R14: 00007f67de216090 R15: 00007fff6aa916e8 [ 665.898627][ C1] [ 665.898640][ C1] [ 666.468944][ C1] Allocated by task 8446: [ 666.473268][ C1] kasan_save_stack+0x30/0x50 [ 666.477960][ C1] kasan_save_track+0x14/0x30 [ 666.482678][ C1] __kasan_kmalloc+0xaa/0xb0 [ 666.487281][ C1] rose_rt_ioctl+0x1bd8/0x2550 [ 666.492068][ C1] rose_ioctl+0x491/0x7d0 [ 666.496406][ C1] sock_do_ioctl+0x118/0x280 [ 666.501014][ C1] sock_ioctl+0x599/0x6b0 [ 666.505384][ C1] __x64_sys_ioctl+0x18e/0x210 [ 666.510182][ C1] do_syscall_64+0x106/0xf80 [ 666.514793][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 666.520710][ C1] [ 666.523117][ C1] Freed by task 10040: [ 666.527187][ C1] kasan_save_stack+0x30/0x50 [ 666.531880][ C1] kasan_save_track+0x14/0x30 [ 666.536573][ C1] kasan_save_free_info+0x3b/0x70 [ 666.541627][ C1] __kasan_slab_free+0x5f/0x80 [ 666.546405][ C1] kfree+0x1f6/0x6b0 [ 666.550324][ C1] rose_timer_expiry+0x537/0x630 [ 666.555379][ C1] call_timer_fn+0x19a/0x670 [ 666.559984][ C1] __run_timers+0x757/0xb30 [ 666.564598][ C1] run_timer_base+0x114/0x190 [ 666.569294][ C1] run_timer_softirq+0x1a/0x50 [ 666.574090][ C1] handle_softirqs+0x1eb/0x9e0 [ 666.578965][ C1] __irq_exit_rcu+0xef/0x150 [ 666.583655][ C1] irq_exit_rcu+0x9/0x30 [ 666.587904][ C1] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 666.593656][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 666.599677][ C1] [ 666.602002][ C1] The buggy address belongs to the object at ffff888022aed600 [ 666.602002][ C1] which belongs to the cache kmalloc-96 of size 96 [ 666.616001][ C1] The buggy address is located 0 bytes inside of [ 666.616001][ C1] freed 96-byte region [ffff888022aed600, ffff888022aed660) [ 666.629760][ C1] [ 666.632084][ C1] The buggy address belongs to the physical page: [ 666.638490][ C1] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888022aedf00 pfn:0x22aed [ 666.648740][ C1] flags: 0xfff00000000200(workingset|node=0|zone=1|lastcpupid=0x7ff) [ 666.656903][ C1] page_type: f5(slab) [ 666.660890][ C1] raw: 00fff00000000200 ffff88813fe37280 ffffea0000da7950 ffffea0000bf4d50 [ 666.669482][ C1] raw: ffff888022aedf00 0000000000200019 00000000f5000000 0000000000000000 [ 666.678292][ C1] page dumped because: kasan: bad access detected [ 666.684699][ C1] page_owner tracks the page as allocated [ 666.690451][ C1] page last allocated via order 0, migratetype Unmovable, gfp_mask 0xd2cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1, tgid 1 (swapper/0), ts 3110598489, free_ts 0 [ 666.709591][ C1] post_alloc_hook+0x153/0x170 [ 666.714402][ C1] get_page_from_freelist+0x111d/0x3140 [ 666.719988][ C1] __alloc_frozen_pages_noprof+0x27c/0x2ba0 [ 666.726110][ C1] new_slab+0xa6/0x6e0 [ 666.730224][ C1] refill_objects+0x26b/0x400 [ 666.734926][ C1] __pcs_replace_empty_main+0x19f/0x600 [ 666.740502][ C1] __kmalloc_cache_noprof+0x493/0x6f0 [ 666.745896][ C1] get_device_parent+0x29a/0x4c0 [ 666.750958][ C1] device_add+0x1ad/0x1950 [ 666.755488][ C1] wakeup_source_device_create+0x243/0x2e0 [ 666.761326][ C1] wakeup_source_sysfs_add+0x1c/0x90 [ 666.766642][ C1] wakeup_source_register+0x154/0x3e0 [ 666.772027][ C1] acpi_add_pm_notifier+0x123/0x270 [ 666.777239][ C1] pci_acpi_setup+0x268/0x6f0 [ 666.782012][ C1] acpi_device_notify+0x283/0x500 [ 666.787075][ C1] device_add+0x2b4/0x1950 [ 666.791550][ C1] page_owner free stack trace missing [ 666.796924][ C1] [ 666.799247][ C1] Memory state around the buggy address: [ 666.804962][ C1] ffff888022aed500: 00 00 00 00 00 00 00 00 00 fc fc fc fc fc fc fc [ 666.813029][ C1] ffff888022aed580: fa fb fb fb fb fb fb fb fb fb fb fb fc fc fc fc [ 666.821206][ C1] >ffff888022aed600: fa fb fb fb fb fb fb fb fb fb fb fb fc fc fc fc [ 666.829285][ C1] ^ [ 666.833375][ C1] ffff888022aed680: 00 00 00 00 00 00 00 00 00 00 fc fc fc fc fc fc [ 666.841571][ C1] ffff888022aed700: 00 00 00 00 00 00 00 00 00 fc fc fc fc fc fc fc [ 666.849637][ C1] ================================================================== [ 666.857961][ C1] ================================================================== [ 666.866030][ C1] BUG: KASAN: slab-use-after-free in rose_send_frame+0x266/0x2a0 [ 666.873787][ C1] Write of size 8 at addr ffff88807bf30018 by task syz.3.800/10037 [ 666.876804][ T9901] chnl_net:caif_netlink_parms(): no params data found [ 666.881687][ C1] [ 666.881711][ C1] CPU: 1 UID: 0 PID: 10037 Comm: syz.3.800 Tainted: G B syzkaller #0 PREEMPT(full) [ 666.881766][ C1] Tainted: [B]=BAD_PAGE [ 666.881780][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 666.881804][ C1] Call Trace: [ 666.881816][ C1] [ 666.881829][ C1] dump_stack_lvl+0x100/0x190 [ 666.881888][ C1] print_report+0x156/0x4c9 [ 666.881943][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 666.881991][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 666.882037][ C1] ? __phys_addr+0xe8/0x180 [ 666.882090][ C1] ? rose_send_frame+0x266/0x2a0 [ 666.882137][ C1] kasan_report+0xdf/0x1e0 [ 666.882196][ C1] ? rose_send_frame+0x266/0x2a0 [ 666.882247][ C1] rose_send_frame+0x266/0x2a0 [ 666.882294][ C1] ? __pfx_rose_t0timer_expiry+0x10/0x10 [ 666.882342][ C1] rose_transmit_restart_request+0x1b8/0x250 [ 666.882395][ C1] rose_t0timer_expiry+0x1d/0x150 [ 666.882442][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 666.882489][ C1] call_timer_fn+0x19a/0x670 [ 666.882534][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 666.882580][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 666.882631][ C1] ? __pfx_rose_t0timer_expiry+0x10/0x10 [ 666.882679][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 666.882726][ C1] ? mark_held_locks+0x40/0x70 [ 666.882781][ C1] ? __pfx_rose_t0timer_expiry+0x10/0x10 [ 666.882829][ C1] __run_timers+0x757/0xb30 [ 666.882881][ C1] ? __pfx___run_timers+0x10/0x10 [ 666.882931][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 666.882982][ C1] ? _raw_spin_lock_irq+0x45/0x50 [ 666.883048][ C1] run_timer_base+0x114/0x190 [ 666.883095][ C1] ? __pfx_run_timer_base+0x10/0x10 [ 666.883150][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 666.883200][ C1] run_timer_softirq+0x1a/0x50 [ 666.883247][ C1] handle_softirqs+0x1eb/0x9e0 [ 666.883292][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 666.883335][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 666.883385][ C1] __irq_exit_rcu+0xef/0x150 [ 666.883425][ C1] irq_exit_rcu+0x9/0x30 [ 666.883464][ C1] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 666.883505][ C1] [ 666.883518][ C1] [ 666.883532][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 666.883574][ C1] RIP: 0010:_raw_spin_unlock_irqrestore+0x31/0x80 [ 666.883616][ C1] Code: f5 53 48 8b 74 24 10 48 89 fb 48 83 c7 18 e8 76 91 55 f6 48 89 df e8 5e e1 55 f6 f7 c5 00 02 00 00 75 23 9c 58 f6 c4 02 75 37 01 00 00 00 e8 f5 17 46 f6 65 8b 05 3e 7e 7d 08 85 c0 74 16 5b [ 666.883654][ C1] RSP: 0018:ffffc90004877758 EFLAGS: 00000246 [ 666.883686][ C1] RAX: 0000000000000006 RBX: ffff888078ed0100 RCX: 0000000000000040 [ 666.883711][ C1] RDX: 0000000000000000 RSI: ffffffff8de756c6 RDI: ffffffff8c1acf20 [ 666.883736][ C1] RBP: 0000000000000246 R08: 0000000000000001 R09: 0000000000000000 [ 666.883760][ C1] R10: 0000000000000001 R11: 0000000000000000 R12: ffff888022351780 [ 666.883785][ C1] R13: 0000000000000246 R14: ffff888078ed00e8 R15: ffffc900048778d8 [ 666.883824][ C1] __skb_try_recv_datagram+0x16a/0x500 [ 666.883888][ C1] ? __pfx_sk_busy_loop_end+0x10/0x10 [ 666.883942][ C1] ? __pfx___skb_try_recv_datagram+0x10/0x10 [ 666.884007][ C1] __unix_dgram_recvmsg+0x1bc/0xc30 [ 666.884069][ C1] ? __pfx___unix_dgram_recvmsg+0x10/0x10 [ 666.884126][ C1] ? __lock_acquire+0x4a5/0x2630 [ 666.884185][ C1] ? irqentry_exit+0x180/0x670 [ 666.884225][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 666.884271][ C1] ? lockdep_hardirqs_on+0x78/0x100 [ 666.884311][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 666.884357][ C1] ? irqentry_exit+0x180/0x670 [ 666.884400][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 666.884448][ C1] ? iovec_from_user+0xbb/0x140 [ 666.884488][ C1] unix_dgram_recvmsg+0xd0/0x110 [ 666.884544][ C1] ____sys_recvmsg+0x5f7/0x6b0 [ 666.884598][ C1] ? __pfx_____sys_recvmsg+0x10/0x10 [ 666.884655][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 666.884701][ C1] ? kfree+0x2ec/0x6b0 [ 666.884752][ C1] ? ___sys_recvmsg+0xef/0x1a0 [ 666.884806][ C1] ___sys_recvmsg+0x16a/0x1a0 [ 666.884858][ C1] ? __pfx____sys_recvmsg+0x10/0x10 [ 666.884922][ C1] ? __pfx___might_resched+0x10/0x10 [ 666.884990][ C1] do_recvmmsg+0x301/0x760 [ 666.885043][ C1] ? __pfx_do_recvmmsg+0x10/0x10 [ 666.885097][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 666.885150][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 666.885196][ C1] ? do_futex+0x192/0x350 [ 666.885258][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 666.885303][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 666.885352][ C1] __x64_sys_recvmmsg+0x22a/0x280 [ 666.885399][ C1] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 666.885445][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 666.885495][ C1] do_syscall_64+0x106/0xf80 [ 666.885536][ C1] ? irqentry_exit+0x138/0x670 [ 666.885578][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 666.885617][ C1] RIP: 0033:0x7f67ddf9bf79 [ 666.885645][ C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 666.885683][ C1] RSP: 002b:00007f67dc1f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 666.885718][ C1] RAX: ffffffffffffffda RBX: 00007f67de216090 RCX: 00007f67ddf9bf79 [ 666.885744][ C1] RDX: 0000000000010106 RSI: 00002000000000c0 RDI: 0000000000000005 [ 666.885769][ C1] RBP: 00007f67de0327e0 R08: 0000000000000000 R09: 0000000000000000 [ 666.885793][ C1] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 666.885817][ C1] R13: 00007f67de216128 R14: 00007f67de216090 R15: 00007fff6aa916e8 [ 666.885854][ C1] [ 666.885866][ C1] [ 667.441776][ C1] Allocated by task 8446: [ 667.446115][ C1] kasan_save_stack+0x30/0x50 [ 667.450809][ C1] kasan_save_track+0x14/0x30 [ 667.455495][ C1] __kasan_kmalloc+0xaa/0xb0 [ 667.460093][ C1] rose_rt_ioctl+0x586/0x2550 [ 667.464951][ C1] rose_ioctl+0x491/0x7d0 [ 667.469317][ C1] sock_do_ioctl+0x118/0x280 [ 667.473934][ C1] sock_ioctl+0x599/0x6b0 [ 667.478332][ C1] __x64_sys_ioctl+0x18e/0x210 [ 667.483115][ C1] do_syscall_64+0x106/0xf80 [ 667.487722][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 667.493630][ C1] [ 667.495945][ C1] Freed by task 10040: [ 667.500115][ C1] kasan_save_stack+0x30/0x50 [ 667.504809][ C1] kasan_save_track+0x14/0x30 [ 667.509496][ C1] kasan_save_free_info+0x3b/0x70 [ 667.514547][ C1] __kasan_slab_free+0x5f/0x80 [ 667.519321][ C1] kfree+0x1f6/0x6b0 [ 667.523236][ C1] rose_timer_expiry+0x53f/0x630 [ 667.528319][ C1] call_timer_fn+0x19a/0x670 [ 667.532967][ C1] __run_timers+0x757/0xb30 [ 667.537484][ C1] run_timer_base+0x114/0x190 [ 667.542177][ C1] run_timer_softirq+0x1a/0x50 [ 667.546959][ C1] handle_softirqs+0x1eb/0x9e0 [ 667.551737][ C1] __irq_exit_rcu+0xef/0x150 [ 667.556338][ C1] irq_exit_rcu+0x9/0x30 [ 667.560597][ C1] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 667.566242][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 667.572248][ C1] [ 667.574564][ C1] The buggy address belongs to the object at ffff88807bf30000 [ 667.574564][ C1] which belongs to the cache kmalloc-512 of size 512 [ 667.588708][ C1] The buggy address is located 24 bytes inside of [ 667.588708][ C1] freed 512-byte region [ffff88807bf30000, ffff88807bf30200) [ 667.602435][ C1] [ 667.604750][ C1] The buggy address belongs to the physical page: [ 667.611208][ C1] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88807bf32400 pfn:0x7bf30 [ 667.621515][ C1] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 667.630042][ C1] flags: 0xfff00000000240(workingset|head|node=0|zone=1|lastcpupid=0x7ff) [ 667.638555][ C1] page_type: f5(slab) [ 667.642546][ C1] raw: 00fff00000000240 ffff88813fe37c80 ffffea0001ed9210 ffffea0000d59610 [ 667.651145][ C1] raw: ffff88807bf32400 000000000010000f 00000000f5000000 0000000000000000 [ 667.659835][ C1] head: 00fff00000000240 ffff88813fe37c80 ffffea0001ed9210 ffffea0000d59610 [ 667.668523][ C1] head: ffff88807bf32400 000000000010000f 00000000f5000000 0000000000000000 [ 667.677212][ C1] head: 00fff00000000002 ffffea0001efcc01 00000000ffffffff 00000000ffffffff [ 667.685900][ C1] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004 [ 667.694595][ C1] page dumped because: kasan: bad access detected [ 667.701017][ C1] page_owner tracks the page as allocated [ 667.706732][ C1] page last allocated via order 2, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5189, tgid 5189 (udevadm), ts 31690501388, free_ts 26345350699 [ 667.727693][ C1] post_alloc_hook+0x153/0x170 [ 667.732503][ C1] get_page_from_freelist+0x111d/0x3140 [ 667.738084][ C1] __alloc_frozen_pages_noprof+0x27c/0x2ba0 [ 667.744041][ C1] new_slab+0xa6/0x6e0 [ 667.748192][ C1] refill_objects+0x26b/0x400 [ 667.752915][ C1] __pcs_replace_empty_main+0x19f/0x600 [ 667.758502][ C1] __kmalloc_cache_noprof+0x493/0x6f0 [ 667.763901][ C1] kernfs_fop_open+0x23d/0xd50 [ 667.768688][ C1] do_dentry_open+0x6d8/0x1660 [ 667.773522][ C1] vfs_open+0x82/0x3f0 [ 667.777609][ C1] path_openat+0x208c/0x31a0 [ 667.782219][ C1] do_file_open+0x20e/0x430 [ 667.786762][ C1] do_sys_openat2+0x10d/0x1e0 [ 667.791465][ C1] __x64_sys_openat+0x12d/0x210 [ 667.796351][ C1] do_syscall_64+0x106/0xf80 [ 667.800958][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 667.806863][ C1] page last free pid 1 tgid 1 stack trace: [ 667.812669][ C1] __free_frozen_pages+0x7ca/0x10a0 [ 667.817892][ C1] free_contig_range+0xde/0x1d0 [ 667.822768][ C1] destroy_args+0xa8/0x7a0 [ 667.827219][ C1] debug_vm_pgtable+0x1b66/0x34c0 [ 667.832268][ C1] do_one_initcall+0x11d/0x760 [ 667.837052][ C1] kernel_init_freeable+0x6e5/0x7a0 [ 667.842291][ C1] kernel_init+0x1f/0x1e0 [ 667.846660][ C1] ret_from_fork+0x754/0xd80 [ 667.851304][ C1] ret_from_fork_asm+0x1a/0x30 [ 667.856116][ C1] [ 667.858464][ C1] Memory state around the buggy address: [ 667.864268][ C1] ffff88807bf2ff00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 667.872346][ C1] ffff88807bf2ff80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 667.880445][ C1] >ffff88807bf30000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 667.888526][ C1] ^ [ 667.893373][ C1] ffff88807bf30080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 667.901444][ C1] ffff88807bf30100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 667.909504][ C1] ================================================================== [ 667.917614][ C1] Kernel panic - not syncing: kasan.fault=panic_on_write set ... [ 667.925351][ C1] CPU: 1 UID: 0 PID: 10037 Comm: syz.3.800 Tainted: G B syzkaller #0 PREEMPT(full) [ 667.936241][ C1] Tainted: [B]=BAD_PAGE [ 667.940407][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 667.950563][ C1] Call Trace: [ 667.953845][ C1] [ 667.956689][ C1] dump_stack_lvl+0x100/0x190 [ 667.961404][ C1] vpanic+0x552/0x970 [ 667.965406][ C1] ? __pfx_vpanic+0x10/0x10 [ 667.969930][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 667.975766][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 667.981444][ C1] ? trace_irq_enable.constprop.0+0x13c/0x180 [ 667.987544][ C1] ? rose_send_frame+0x266/0x2a0 [ 667.992524][ C1] panic+0xd1/0xe0 [ 667.996295][ C1] ? __pfx_panic+0x10/0x10 [ 668.000745][ C1] ? trace_irq_enable.constprop.0+0x2f/0x180 [ 668.006844][ C1] end_report.part.0+0x68/0x90 [ 668.011658][ C1] kasan_report.cold+0xe/0x18 [ 668.016454][ C1] ? rose_send_frame+0x266/0x2a0 [ 668.021436][ C1] rose_send_frame+0x266/0x2a0 [ 668.026242][ C1] ? __pfx_rose_t0timer_expiry+0x10/0x10 [ 668.031909][ C1] rose_transmit_restart_request+0x1b8/0x250 [ 668.037915][ C1] rose_t0timer_expiry+0x1d/0x150 [ 668.042959][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 668.048617][ C1] call_timer_fn+0x19a/0x670 [ 668.053239][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 668.058365][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 668.064030][ C1] ? __pfx_rose_t0timer_expiry+0x10/0x10 [ 668.069689][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 668.075484][ C1] ? mark_held_locks+0x40/0x70 [ 668.080303][ C1] ? __pfx_rose_t0timer_expiry+0x10/0x10 [ 668.085977][ C1] __run_timers+0x757/0xb30 [ 668.090519][ C1] ? __pfx___run_timers+0x10/0x10 [ 668.095575][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 668.101239][ C1] ? _raw_spin_lock_irq+0x45/0x50 [ 668.106306][ C1] run_timer_base+0x114/0x190 [ 668.111095][ C1] ? __pfx_run_timer_base+0x10/0x10 [ 668.116336][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 668.121988][ C1] run_timer_softirq+0x1a/0x50 [ 668.126771][ C1] handle_softirqs+0x1eb/0x9e0 [ 668.131550][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 668.136850][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 668.142511][ C1] __irq_exit_rcu+0xef/0x150 [ 668.147151][ C1] irq_exit_rcu+0x9/0x30 [ 668.151429][ C1] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 668.157089][ C1] [ 668.160029][ C1] [ 668.162964][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 668.169058][ C1] RIP: 0010:_raw_spin_unlock_irqrestore+0x31/0x80 [ 668.175522][ C1] Code: f5 53 48 8b 74 24 10 48 89 fb 48 83 c7 18 e8 76 91 55 f6 48 89 df e8 5e e1 55 f6 f7 c5 00 02 00 00 75 23 9c 58 f6 c4 02 75 37 01 00 00 00 e8 f5 17 46 f6 65 8b 05 3e 7e 7d 08 85 c0 74 16 5b [ 668.195175][ C1] RSP: 0018:ffffc90004877758 EFLAGS: 00000246 [ 668.201269][ C1] RAX: 0000000000000006 RBX: ffff888078ed0100 RCX: 0000000000000040 [ 668.209249][ C1] RDX: 0000000000000000 RSI: ffffffff8de756c6 RDI: ffffffff8c1acf20 [ 668.217226][ C1] RBP: 0000000000000246 R08: 0000000000000001 R09: 0000000000000000 [ 668.225210][ C1] R10: 0000000000000001 R11: 0000000000000000 R12: ffff888022351780 [ 668.233190][ C1] R13: 0000000000000246 R14: ffff888078ed00e8 R15: ffffc900048778d8 [ 668.241217][ C1] __skb_try_recv_datagram+0x16a/0x500 [ 668.246716][ C1] ? __pfx_sk_busy_loop_end+0x10/0x10 [ 668.252117][ C1] ? __pfx___skb_try_recv_datagram+0x10/0x10 [ 668.258140][ C1] __unix_dgram_recvmsg+0x1bc/0xc30 [ 668.263458][ C1] ? __pfx___unix_dgram_recvmsg+0x10/0x10 [ 668.269314][ C1] ? __lock_acquire+0x4a5/0x2630 [ 668.274430][ C1] ? irqentry_exit+0x180/0x670 [ 668.279234][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 668.285017][ C1] ? lockdep_hardirqs_on+0x78/0x100 [ 668.290412][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 668.296173][ C1] ? irqentry_exit+0x180/0x670 [ 668.300967][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 668.306642][ C1] ? iovec_from_user+0xbb/0x140 [ 668.311535][ C1] unix_dgram_recvmsg+0xd0/0x110 [ 668.316522][ C1] ____sys_recvmsg+0x5f7/0x6b0 [ 668.321499][ C1] ? __pfx_____sys_recvmsg+0x10/0x10 [ 668.326838][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 668.332510][ C1] ? kfree+0x2ec/0x6b0 [ 668.336627][ C1] ? ___sys_recvmsg+0xef/0x1a0 [ 668.341433][ C1] ___sys_recvmsg+0x16a/0x1a0 [ 668.346152][ C1] ? __pfx____sys_recvmsg+0x10/0x10 [ 668.351410][ C1] ? __pfx___might_resched+0x10/0x10 [ 668.356759][ C1] do_recvmmsg+0x301/0x760 [ 668.361219][ C1] ? __pfx_do_recvmmsg+0x10/0x10 [ 668.366302][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 668.371972][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 668.377630][ C1] ? do_futex+0x192/0x350 [ 668.381993][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 668.387644][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 668.393311][ C1] __x64_sys_recvmmsg+0x22a/0x280 [ 668.398374][ C1] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 668.404051][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 668.409708][ C1] do_syscall_64+0x106/0xf80 [ 668.414313][ C1] ? irqentry_exit+0x138/0x670 [ 668.419152][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 668.425068][ C1] RIP: 0033:0x7f67ddf9bf79 [ 668.429494][ C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 668.449116][ C1] RSP: 002b:00007f67dc1f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 668.457571][ C1] RAX: ffffffffffffffda RBX: 00007f67de216090 RCX: 00007f67ddf9bf79 [ 668.465564][ C1] RDX: 0000000000010106 RSI: 00002000000000c0 RDI: 0000000000000005 [ 668.473539][ C1] RBP: 00007f67de0327e0 R08: 0000000000000000 R09: 0000000000000000 [ 668.481527][ C1] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 668.489506][ C1] R13: 00007f67de216128 R14: 00007f67de216090 R15: 00007fff6aa916e8 [ 668.497611][ C1] [ 668.500909][ C1] Kernel Offset: disabled [ 668.505373][ C1] Rebooting in 86400 seconds..