last executing test programs: 5m14.231742345s ago: executing program 0 (id=6): syz_mount_image$udf(&(0x7f0000000f00), &(0x7f00000000c0)='./file1\x00', 0x800, &(0x7f0000001040)=ANY=[@ANYBLOB='uid=', @ANYRESDEC=0x0, @ANYBLOB="2c756e64656c6574652c6e6f7672732c6164696e6963622c766f6c756d653d30303030303030303030303030303030303030322c7569643d666f726765742c6769643d666f726765742c6e6f7374726963742c6e6f7672732c0085f95733019d784ca386da1fd41ffabd4b47acca2b8d488be702157dd8711c31732d"], 0xff, 0xc2d, &(0x7f00000001c0)="$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") syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000180)='./file1\x00', 0x1218088, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0x4a, 0x2d1, &(0x7f0000000c80)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000940)='./file2\x00', 0x109141, 0xdf) pwrite64(r0, &(0x7f0000000bc0)="cf", 0x1, 0x7ff) 5m12.760070959s ago: executing program 0 (id=9): ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./bus\x00', 0x3000000, &(0x7f00000006c0), 0x1, 0x512, &(0x7f0000001180)="$eJzs3W1rZFcdAPD/vcmk2d3UTFVkLdgWW9ktujNJY9so0lYQfVVQ6/s1JpMQMsmEzKRuQtEsfgBBRAU/gG8EP4Ag+xFEWND3oqKI7upL3St35kbzMJMMySSzTn4/OJlz7sP5n3PJ3LkPh3sDuLJeioh3ImIsIl6NiOlielqk2OukfLnHjz5YzFMSWfbe35JIimn7deXl8Yi4Uaw2GRFf/0rEt5LjcZs7u2sL9XptqyhXW+ub1ebO7p3V9YWV2kptY25u9o35N+dfn5/JCufqZzki3vrSn370/Z99+a1ffebbv7/7l9vfyZv1hY912h0Ri+cK0EOn7lJ7W+zLt9HWRQQbkrw/pbFhtwIAgH7kx/gfjohPto//p2OsfTQHAAAAjJLs7an4VxKRAQAAACMrjYipSNJKMRZgKtK0UumM4f1oXE/rjWbr08uN7Y2lfF5EOUrp8mq9NlOMFS5HKcnLs8UY2/3ya0fKcxHxXET8cPpau1xZbNSXhn3xAwAAAK6IGy8ePv//53TazgMAAAAjptyzAAAAAIwKp/wAAAAw+pz/AwAAwEj76rvv5inbf4/30vs722uN9+8s1ZprlfXtxcpiY2uzstJorLSf2bd+Wn31RmPzs7Gxfa/aqjVb1ebO7t31xvZG6+7qoVdgAwAAAJfouRcf/C6JiL3PX2unKJ4DCHDIH4fdAGCQxobdAGBoxofdAGBoSqcuYQ8Boy45Zf7xwTuda4Xx64tpDwAAMHi3Pn78/v9EMe/0awPA/zNjfQDg6nF3D66u0llHAN4cdEuAYflQ5+OZXvN7Pryjj/v/nWsMWXamhgEAAAMz1U5JWimO06ciTSuViGfbrwUoJcur9dpMcX7w2+nSM3l5tr1mcuqYYQAAAAAAAAAAAAAAAAAAAAAAAACgI8uSyAAAAICRFpH+OWk/zT/i1vQrU4evDhx569dP3/vxvYVWa2s2YiL5+3Q+aSIiWj8ppr+WeSUAAAAAPAU65+nF5+ywWwMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAqHn86IPF/XSZcf/6xYgod4s/HpPtz8koRcT1fyQxfmC9JCLGBhB/735E3OwWP4knWZaVi1Z0i3/tguOX25ume/w0Im4MID5cZQ/y/c873b5/abzU/uz+/Rsv0nn13v+l/93/jfXY/zx7pNzL8w9/Ue0Z/37E8+Pd9z/78ZNO/EMh8sLLffbxm9/Y3e0640CV3eIfjFVtrW9Wmzu7d1bXF1ZqK7WNubnZN+bfnH99fqa6vFqvFX+7hvnBJ3755KT+X+8Rv3y4/8e2/yt99T6Lfz+89+gjnUKpW/zbL3f//b3ZI35a/PZ9qsjn82/t5/c6+YNe+PlvXjip/0s9+j95Sv9v99X/+NyrX/veH7rOObY1AIDL0NzZXVuo12tbJ2Qm+1jmkjNvPx3NGGAmno5mDCuTfbfz/3i+es65+rFMdp7Vx2MAzZg49j0di7NWmETs5XX1+Q8JAACMmP8d9J90BwkAAAAAAAAAAAAAAAAAAAC4SGd8LNlkRPS98NGYe8PpKgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAif4TAAD//4RX0Xo=") setxattr$trusted_overlay_upper(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), &(0x7f0000002700)=ANY=[], 0x1015, 0x0) sync() r0 = add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, 0x0, 0x0) syz_open_procfs(0x0, 0x0) stat(&(0x7f0000000000)='./file2\x00', 0x0) 5m10.739525265s ago: executing program 0 (id=14): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x2200454, &(0x7f0000000000), 0x1, 0x236, &(0x7f0000000300)="$eJzs3TFoM2UcBvDnLomf/b4gVRdBUEFEtFDqJrjURaEgpYgIKlREXJRWqC1urZOLg84qnVyKuFkdpUtxUQSnqh3qImhxsDjoELlcK9VGFFNz8t3vB5fcJe97//e4e95kOS5Aa00nmU/SSTKTpJekON/grnqZPt3cntpfTgaDx38shu3q7dpZv2tJtpI8mGSvLPJiN9nYffro54NH731jvXfPe7tPTU30IE8dHx0+dvLu4usfLjyw8fmX3y8WmU//D8d1+YoRn3WL5Jb/otj/RNFtegT8E0uvfvBVlftbk9w9zH8vZeqT9+baDXu93P/OX/V964cvbp/kWIHLNxj0qt/ArQHQOmWSfopyNkm9Xpazs/V/+K87V8uXVtdemXlhdX3l+aZnKuCy9JPDRz6+8tG1P+X/u06df+D6VeX/iaWdb6r1k07TowEmqcr/zLOb90X+oXXkH9pL/qG95B/aS/6hveQf2kv+ob3kH9pL/qG95B/a63z+AYB2GVxp+g5koClNzz8AAAAAAAAAAAAAAAAAAMBF21P7y2fLpGp++nZy/HCS7qj6neHziJMbh69XfyqqZr8r6m5jeebOMXcwpvcbvvv6pm+brf/ZHc3W31xJtl5LMtftXrz+itPr79+7+W++7z03ZoExPfRks/V/3Wm2/sJB8kk1/8yNmn/K3DZ8Hz3/9KvzN2b9l38ZcwcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABMzG8BAAD//8n0bSk=") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cpuset.memory_pressure_enabled\x00', 0x275a, 0x0) r1 = creat(&(0x7f00000000c0)='./bus\x00', 0x182) write$UHID_INPUT(r1, &(0x7f00000027c0)={0x8, {"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", 0xffffffffffffff48}}, 0x1006) fallocate(r0, 0x0, 0x1, 0x2000404) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000140)={0xc, r1, 0x0, 0x0, 0x0, 0xfffffffffffffffd}) request_key(&(0x7f0000000040)='cifs.spnego\x00', &(0x7f00000001c0)={'syz', 0x0}, 0x0, 0xfffffffffffffffb) write$UHID_DESTROY(r1, &(0x7f0000000240), 0x4) 5m8.643629607s ago: executing program 0 (id=20): syz_mount_image$ext4(&(0x7f00000000c0)='ext2\x00', &(0x7f0000000c40)='./file0\x00', 0x808080, &(0x7f0000000c80)={[{@discard}, {@bh}, {@noblock_validity}]}, 0x2c, 0x52c, &(0x7f0000000640)="$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") mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x109041, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x81105a, 0x0) mount$bind(&(0x7f0000000880)='./file0/../file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x1adc11, 0x0) mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x1887008, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r0, &(0x7f0000006b40)={0x2020}, 0x206e) 5m4.002156221s ago: executing program 0 (id=24): ioctl$VT_RESIZEX(0xffffffffffffffff, 0x560a, &(0x7f0000000000)={0x3ff, 0x140, 0x77, 0x8, 0x4, 0x19}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r0, &(0x7f0000000000), 0xd) 4m59.744746468s ago: executing program 0 (id=29): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40000004002c0000000b0a010300000000000000000a0000020900010073797a31000000000c001040"], 0x90}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 4m56.703654864s ago: executing program 32 (id=29): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40000004002c0000000b0a010300000000000000000a0000020900010073797a31000000000c001040"], 0x90}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 3m36.521646178s ago: executing program 4 (id=247): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="7a0b00ff0000000071"], &(0x7f0000000480)='syzkaller\x00'}, 0x94) 3m35.163008247s ago: executing program 4 (id=250): socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_NEW_STATION(r1, &(0x7f0000007380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000600)={0x28, r0, 0xe096044a3fc9e6f1, 0xffffffff, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x28}, 0x1, 0x0, 0x0, 0x200000d0}, 0x8050) 3m33.460938076s ago: executing program 4 (id=253): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) bpf$PROG_LOAD(0x5, 0x0, 0x0) epoll_create1(0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 3m28.545583553s ago: executing program 4 (id=264): socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_NEW_STATION(r1, &(0x7f0000007380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000600)={0x28, r0, 0xe096044a3fc9e6f1, 0xffffffff, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x28}, 0x1, 0x0, 0x0, 0x200000d0}, 0x8050) 3m28.080414664s ago: executing program 4 (id=266): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) r1 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNDEL(r1, 0x400448c9, &(0x7f0000000000)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}) 3m27.400010789s ago: executing program 4 (id=270): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000240)={0x1f, 0xffff, 0x2}, 0x6) recvmmsg(r0, &(0x7f0000000600), 0x204083acb88ff8b, 0x2, 0x0) write$bt_hci(r0, &(0x7f0000000580)={0x1, @le_set_scan_rsp_data={{0x2009, 0x20}, {0xff, "ad8b5a50a99c4f7bf40c544f5a5ce1666f549e4c74dc39e79dc96ea0833fe7"}}}, 0x24) 3m12.109033558s ago: executing program 33 (id=270): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000240)={0x1f, 0xffff, 0x2}, 0x6) recvmmsg(r0, &(0x7f0000000600), 0x204083acb88ff8b, 0x2, 0x0) write$bt_hci(r0, &(0x7f0000000580)={0x1, @le_set_scan_rsp_data={{0x2009, 0x20}, {0xff, "ad8b5a50a99c4f7bf40c544f5a5ce1666f549e4c74dc39e79dc96ea0833fe7"}}}, 0x24) 2m47.027179675s ago: executing program 5 (id=425): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000180)=@gcm_256={{0x303}, "c4915c7f49541ce8", "9b84f987950ff3df25fa8f46983d34157e047d27ae4a66a6d15608a32cbaa5bc", '\x00', "be0ea450d5a50003"}, 0x38) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x2, 0x3, 0xfffffffffffffffd, 0xb400}, 0x0, &(0x7f0000000240)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f000001aa40)=""/102400, 0x19000) ioctl$SIOCAX25DELUID(0xffffffffffffffff, 0x89e2, 0x0) fchown(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 2m43.144696791s ago: executing program 1 (id=430): r0 = socket$qrtr(0x2a, 0x2, 0x0) r1 = socket$qrtr(0x2a, 0x2, 0x0) recvmmsg(r0, &(0x7f0000000ac0)=[{{0x0, 0x0, 0x0}, 0x1}], 0x1, 0x0, 0x0) connect$qrtr(r1, &(0x7f0000000040)={0x2a, 0x1, 0x4000}, 0xc) ioctl$sock_qrtr_TIOCINQ(r0, 0x891a, 0x0) writev(r1, &(0x7f0000000340)=[{&(0x7f0000000080)="fb", 0x1}], 0x1) 2m41.145513477s ago: executing program 1 (id=433): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0xf, &(0x7f00000004c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x6}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000040)='GPL\x00', 0x5, 0xd3, &(0x7f0000000780)=""/211, 0x41100, 0x50, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7fffffff}, 0x94) 2m39.934657764s ago: executing program 5 (id=435): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={0x30, r1, 0x1, 0x72bd29, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TX_RATES={0x14, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x10, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x4}, @NL80211_TXRATE_HT={0x5, 0x2, [{0x0, 0xa}]}]}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 2m39.653607069s ago: executing program 1 (id=436): mount$cgroup(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000180)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r0, &(0x7f00000000c0)="04", 0x1, 0x20000845, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) r1 = dup(r0) connect$unix(r1, &(0x7f0000002200)=@file={0x0, './file0\x00'}, 0x6e) sendto$inet6(r0, &(0x7f00000006c0)='{', 0x1, 0x24008894, &(0x7f0000000040)={0xa, 0x4e20, 0x7fffffff, @empty}, 0x1c) 2m39.002257824s ago: executing program 5 (id=439): r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r1, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0}, 0x18) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000280)='workqueue_activate_work\x00', r3}, 0x18) bpf$ENABLE_STATS(0x20, 0x0, 0x0) 2m38.846489225s ago: executing program 1 (id=440): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000300)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @remote}, 0x14) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ptype\x00') r3 = socket$packet(0x11, 0x3, 0x300) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) bind$packet(r3, &(0x7f0000000280)={0x11, 0x0, r5, 0x1, 0xf, 0x6, @link_local}, 0x14) preadv(r2, &(0x7f0000000600)=[{&(0x7f0000000780)=""/219, 0xdb}], 0x1, 0x3b, 0x0) 2m38.065664854s ago: executing program 1 (id=442): r0 = socket$qrtr(0x2a, 0x2, 0x0) r1 = socket$qrtr(0x2a, 0x2, 0x0) recvmmsg(r0, &(0x7f0000000ac0)=[{{0x0, 0x0, 0x0}, 0x1}], 0x1, 0x0, 0x0) connect$qrtr(r1, &(0x7f0000000040)={0x2a, 0x1, 0x4000}, 0xc) ioctl$sock_qrtr_TIOCINQ(r0, 0x891a, 0x0) writev(r1, &(0x7f0000000340)=[{&(0x7f0000000080)="fb", 0x1}], 0x1) 2m37.210448435s ago: executing program 1 (id=444): openat$ttynull(0xffffffffffffff9c, &(0x7f00000000c0), 0x141440, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00'}, 0x10) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, 0x0, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r1, &(0x7f0000000200)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@broadcast, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x3}, {}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x33}, 0x0, @in=@private=0xa010100, 0x0, 0x0, 0x0, 0xb7, 0xffffffff}}, 0xe8) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x9000000) io_uring_enter(0xffffffffffffffff, 0x3516, 0x0, 0x0, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)) r3 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r3, 0x7a7, &(0x7f0000000040)=0x90000) socket$inet_sctp(0x2, 0x1, 0x84) 2m36.329204953s ago: executing program 5 (id=446): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), r0) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 2m35.48276213s ago: executing program 5 (id=449): mount$cgroup(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000180)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r0, &(0x7f00000000c0)="04", 0x1, 0x20000845, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) r1 = dup(r0) connect$unix(r1, &(0x7f0000002200)=@file={0x0, './file0\x00'}, 0x6e) sendto$inet6(r0, &(0x7f00000006c0)='{', 0x1, 0x24008894, &(0x7f0000000040)={0xa, 0x4e20, 0x7fffffff, @empty}, 0x1c) 2m34.3632845s ago: executing program 5 (id=452): syz_init_net_socket$netrom(0x6, 0x5, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x9, 0x1, 0x80}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x80) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0xfffffffe, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x3ffa, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0xfffffffe}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000001c0)={0xffffffffffffffff, 0x58, &(0x7f0000000340)}, 0x10) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x3c}}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ptrace$ARCH_SET_CPUID(0x1e, r1, 0x0, 0x1012) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r4 = syz_open_dev$video4linux(&(0x7f0000000000), 0x0, 0x0) ioctl$VIDIOC_SUBDEV_S_FMT(r4, 0xc0585605, &(0x7f0000000080)={0x1, 0x0, {0x0, 0x0, 0x101c, 0x3, 0xc, 0x2, 0x0, 0x5}}) 2m20.965073207s ago: executing program 34 (id=444): openat$ttynull(0xffffffffffffff9c, &(0x7f00000000c0), 0x141440, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00'}, 0x10) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, 0x0, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r1, &(0x7f0000000200)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@broadcast, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x3}, {}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x33}, 0x0, @in=@private=0xa010100, 0x0, 0x0, 0x0, 0xb7, 0xffffffff}}, 0xe8) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x9000000) io_uring_enter(0xffffffffffffffff, 0x3516, 0x0, 0x0, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)) r3 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r3, 0x7a7, &(0x7f0000000040)=0x90000) socket$inet_sctp(0x2, 0x1, 0x84) 2m18.638277617s ago: executing program 35 (id=452): syz_init_net_socket$netrom(0x6, 0x5, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x9, 0x1, 0x80}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x80) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0xfffffffe, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x3ffa, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0xfffffffe}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000001c0)={0xffffffffffffffff, 0x58, &(0x7f0000000340)}, 0x10) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x3c}}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ptrace$ARCH_SET_CPUID(0x1e, r1, 0x0, 0x1012) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r4 = syz_open_dev$video4linux(&(0x7f0000000000), 0x0, 0x0) ioctl$VIDIOC_SUBDEV_S_FMT(r4, 0xc0585605, &(0x7f0000000080)={0x1, 0x0, {0x0, 0x0, 0x101c, 0x3, 0xc, 0x2, 0x0, 0x5}}) 10.483370571s ago: executing program 2 (id=755): ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000000000000f47"]) r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000040)={0x0, &(0x7f00000007c0)=[@cpuid={0x14, 0x18, {0x3af, 0x6}}, @code={0xa, 0x5b, {"48b825f43299000000000f23c00f21f835010004000f23f83e400f795d4e66baf80cb868859587ef66bafc0ced0f350f01d166b817008ed026400fd7f966ba4000ed263eb3f6400f01c5"}}, @wr_crn={0x46, 0x20, {0x3, 0x100000001}}, @cpuid={0x14, 0x18, {0xf, 0x9e}}, @code={0xa, 0x88, {"66ba2000b000eec7442400ac000000c74424028cada29dff2c24c744240007010000c744240200000000ff2c24660fc4b421f3ff000056b805000000b9050000000f01c1672e0fc76800c744240043da8866c744240200800000c7442406000000000f011c240f54de653e0fc73bc4c1f8178500000000"}}, @uexit={0x0, 0x18, 0x713}, @cpuid={0x14, 0x18, {0x7, 0x5}}, @cpuid={0x14, 0x18, {0x8837, 0x7}}, @code={0xa, 0x58, {"440f060f07dbe2f3460fc774f000c4037d08350070000078da20c7442400d3000000c744240200700000ff2c24c4232d4c970e000000120f20e035000100000f22e0c4a16c59db"}}, @cpuid={0x14, 0x18, {0x2, 0x7d}}, @wrmsr={0x1e, 0x20, {0x256, 0x1}}, @code={0xa, 0x62, {"c4e3a55f3900660fe306c7442400b1000000c744240200000000ff1c2466ba4200b001ee26f241ab66430fd7edc442c901f664440f220166b8ae008ed866baf80cb88cb57081ef66bafc0cb87d1d54a5ef"}}, @wr_crn={0x46, 0x20, {0x2, 0x7f}}, @wr_crn={0x46, 0x20, {0x8, 0x1000000000}}, @cpuid={0x14, 0x18, {0x5, 0x3}}, @uexit={0x0, 0x18, 0x80000001}, @rdmsr={0x32, 0x18, {0xc0010140}}, @rdmsr={0x32, 0x18, {0x1dc}}, @uexit={0x0, 0x18, 0x8}], 0x325}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0xc45, 0x9, 0xfffffffffffffffd, 0x10000000, 0x10000, 0x3, 0x4002004c2, 0x1000, 0x9, 0x0, 0x400, 0x0, 0x3, 0x0, 0x8, 0x8d], 0x100000, 0x2011c0}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 10.14584212s ago: executing program 3 (id=756): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0xd000001, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) r1 = syz_open_procfs(0x0, &(0x7f0000000580)='net/tcp6\x00') preadv(r1, &(0x7f0000000000)=[{&(0x7f0000000180)=""/160, 0xa0}], 0x1, 0x1ef, 0x1000) 10.007204881s ago: executing program 7 (id=757): bind$inet(0xffffffffffffffff, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000e40)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x20702, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'pim6reg1\x00', 0xe511}) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0xe, 0x4, 0x4, 0x20006}, 0x50) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f0000000c40), 0x12) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_ro(r4, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r5, &(0x7f0000000200)=0x1, 0x12) write$cgroup_pid(r5, &(0x7f0000000140), 0x12) 9.639521281s ago: executing program 6 (id=759): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0x6, 0x0, &(0x7f0000000100)='\x00\x00\x00\x00\x00\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="001c86dd0700100000004000000060ec97000fc83c00fe8000000000000000000000000000aaff02000000000000000000000000000106"], 0xffe) 9.151271216s ago: executing program 2 (id=760): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f00020000000905050200de7e001009058b1e"], 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000540)={0x44, &(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r1, 0xc0145b0d, &(0x7f0000000040)) 8.616145396s ago: executing program 3 (id=762): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0xf, &(0x7f00000004c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x6}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, 0x0, 0x5, 0xd3, &(0x7f0000000780)=""/211, 0x41100, 0x50, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7fffffff}, 0x94) 8.610815908s ago: executing program 7 (id=763): add_key$user(0x0, &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) r0 = socket$pppoe(0x18, 0x1, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) connect$pppoe(r0, &(0x7f0000000040)={0x18, 0x0, {0x1, @multicast, 'ip6gre0\x00'}}, 0x1e) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000400)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r1, 0x80047437, &(0x7f0000001f00)) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$PPPIOCATTCHAN(r2, 0x40047438, &(0x7f0000000040)=0x2) sendmmsg(r1, &(0x7f0000001a40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x24004000) 8.139729116s ago: executing program 6 (id=764): setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, 0x0, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=@newlink={0x20, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0x9801}}, 0x20}}, 0x0) sendto$packet(r0, &(0x7f0000000000)='1', 0x1, 0x40081, &(0x7f0000000200)={0x11, 0x0, r3, 0x1, 0x4, 0x6, @local}, 0x14) 8.135907808s ago: executing program 8 (id=765): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000008500000061000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000800)={r0, 0x18000000000002a0, 0x13, 0x0, &(0x7f00000004c0)="b9ff030768441a8cb89e14f00800e075702b1c", 0x0, 0x4, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 7.772083274s ago: executing program 3 (id=766): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="60000000020601046c0001000000000000000000050005000a000000050001000600000005000400000000000900020073797a300000000014000300686173683a69702c706f72742c697000140007800800084000002f5408000640"], 0x60}}, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) 7.728008747s ago: executing program 7 (id=767): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000300)={0xffffffffffffffff}, 0x106, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f00000000c0)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f0000000080)=0x1, r1, 0x0, 0x2, 0x4}}, 0x20) syz_open_dev$swradio(&(0x7f0000000280), 0x0, 0x2) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) connect$802154_dgram(r2, &(0x7f0000000000)={0x24, @long={0x3, 0xffff, {0xaaaaaaaaaaaa0102}}}, 0x14) syz_open_dev$cec(&(0x7f0000000180), 0x0, 0x181300) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)=ANY=[@ANYRES32=0x0], 0x60}, 0x1, 0x0, 0x0, 0x24004054}, 0x0) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x5, 0x1000086}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x4002) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/mnt\x00') mbind(&(0x7f0000ff4000/0xc000)=nil, 0xc000, 0x4005, &(0x7f0000000200)=0x81, 0x5, 0x0) set_mempolicy_home_node(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r4 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi2\x00', 0xa400, 0x0) ioctl$VIDIOC_TRY_EXT_CTRLS(0xffffffffffffffff, 0xc0205647, &(0x7f00000003c0)={0x9f0000, 0x1, 0x3, 0xffffffffffffffff, 0x0, &(0x7f0000000300)={0x9c0909, 0x0, '\x00', @string=&(0x7f0000000380)=0x1}}) ioctl$COMEDI_DEVCONFIG(r4, 0x40946400, &(0x7f0000000140)={'multiq3\x00', [0x9df, 0x2566, 0x8f, 0xffffffff, 0x15d, 0x0, 0x5, 0x10, 0x1002, 0xffffffff, 0x101, 0x20005, 0x344, 0x1ff, 0x4, 0x0, 0x4, 0x4, 0x9, 0xa, 0x100, 0x1005, 0x7, 0xa, 0x2, 0x80000003, 0xb0c3, 0x7df, 0x7, 0x400007, 0xffffffff]}) bpf$MAP_CREATE(0xb00000000000000, 0x0, 0x50) 7.280749014s ago: executing program 6 (id=768): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000002c0)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) writev(0xffffffffffffffff, &(0x7f0000000780)=[{&(0x7f0000000100)}], 0x1) write$tun(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="000086dd000311000400000000006eec00be10a42f01fe8000000000000000000000000000aaff020000000000000000000000000001330022eb"], 0x10da) 7.111263074s ago: executing program 8 (id=769): r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) mmap(&(0x7f00009ff000/0x600000)=nil, 0x600000, 0x0, 0x11, r0, 0x0) sendto$inet6(r0, 0x0, 0x0, 0xfffffeffffff7ffe, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000002080)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000840)="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", 0xfc0}], 0x1}}], 0x1, 0x4000800) sendto$inet6(r0, &(0x7f0000000000)="dba9", 0x2, 0x10, 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000001c0)={&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0}, &(0x7f0000000240)=0x40) 5.646961218s ago: executing program 3 (id=770): ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000000000000f47"]) r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000040)={0x0, &(0x7f00000007c0)=[@cpuid={0x14, 0x18, {0x3af, 0x6}}, @code={0xa, 0x5b, {"48b825f43299000000000f23c00f21f835010004000f23f83e400f795d4e66baf80cb868859587ef66bafc0ced0f350f01d166b817008ed026400fd7f966ba4000ed263eb3f6400f01c5"}}, @wr_crn={0x46, 0x20, {0x3, 0x100000001}}, @cpuid={0x14, 0x18, {0xf, 0x9e}}, @code={0xa, 0x88, {"66ba2000b000eec7442400ac000000c74424028cada29dff2c24c744240007010000c744240200000000ff2c24660fc4b421f3ff000056b805000000b9050000000f01c1672e0fc76800c744240043da8866c744240200800000c7442406000000000f011c240f54de653e0fc73bc4c1f8178500000000"}}, @uexit={0x0, 0x18, 0x713}, @cpuid={0x14, 0x18, {0x7, 0x5}}, @cpuid={0x14, 0x18, {0x8837, 0x7}}, @code={0xa, 0x58, {"440f060f07dbe2f3460fc774f000c4037d08350070000078da20c7442400d3000000c744240200700000ff2c24c4232d4c970e000000120f20e035000100000f22e0c4a16c59db"}}, @cpuid={0x14, 0x18, {0x2, 0x7d}}, @wrmsr={0x1e, 0x20, {0x256, 0x1}}, @code={0xa, 0x62, {"c4e3a55f3900660fe306c7442400b1000000c744240200000000ff1c2466ba4200b001ee26f241ab66430fd7edc442c901f664440f220166b8ae008ed866baf80cb88cb57081ef66bafc0cb87d1d54a5ef"}}, @wr_crn={0x46, 0x20, {0x2, 0x7f}}, @wr_crn={0x46, 0x20, {0x8, 0x1000000000}}, @cpuid={0x14, 0x18, {0x5, 0x3}}, @uexit={0x0, 0x18, 0x80000001}, @rdmsr={0x32, 0x18, {0xc0010140}}, @rdmsr={0x32, 0x18, {0x1dc}}, @uexit={0x0, 0x18, 0x8}], 0x325}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0xc45, 0x9, 0xfffffffffffffffd, 0x10000000, 0x10000, 0x3, 0x4002004c2, 0x1000, 0x9, 0x0, 0x400, 0x0, 0x3, 0x0, 0x8, 0x8d], 0x100000, 0x2011c0}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 4.765105777s ago: executing program 8 (id=771): r0 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x10000000000) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000580)="b3185d7bb56f70f003360fa8bf71ac3086aedebf6fff904f92849a7a07395ee7f0e4cb1d78001c08a0ab73ffcf5ad07693727980eea946e6cba1723e81bfa5c3688803c8a124dcb27df7938e7ddfdd52"}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000004a40)={0x60, 0x0, &(0x7f0000000940)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x1040}, @acquire_done={0x40106309, 0x1}], 0x0, 0x0, 0x0}) 4.722487747s ago: executing program 2 (id=772): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = mq_open(&(0x7f0000000040)='!se\xf7ih,\x17i\xacP\xe6lNnuxselinux\x00', 0x6e93ebbbcc0884f2, 0x2, &(0x7f0000000300)={0x0, 0x1, 0x6}) mq_timedsend(r2, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r2, 0x0, 0x0, 0x0, 0x0) 4.273131491s ago: executing program 6 (id=773): bind$inet(0xffffffffffffffff, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000e40)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x20702, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'pim6reg1\x00', 0xe511}) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0xe, 0x4, 0x4, 0x20006}, 0x50) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f0000000c40), 0x12) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_ro(r4, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r5, &(0x7f0000000200)=0x1, 0x12) write$cgroup_pid(r5, &(0x7f0000000140), 0x12) 3.160602071s ago: executing program 3 (id=774): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getpid() connect$unix(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)={0x30, 0x0, 0x1, 0x70bd26, 0x25dfdbff, {}, [@ETHTOOL_A_LINKMODES_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_LINKMODES_OURS={0x10, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x8, 0x3, 0x0, 0x1, [{0x4}]}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x2400c054}, 0x4044014) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000200)='kmem_cache_free\x00'}, 0x10) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, &(0x7f0000000180)={[{@grpid}, {@mblk_io_submit}, {@nodioread_nolock}, {@test_dummy_encryption}, {@inode_readahead_blks}, {@nodelalloc}, {@minixdf}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x40}}]}, 0x4, 0xbaf, &(0x7f00000017c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x81) pwrite64(r0, &(0x7f0000000140)='2', 0x1, 0x8000c61) 2.426591199s ago: executing program 8 (id=775): socket$inet6_sctp(0xa, 0x5, 0x84) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='dctcp\x00', 0x6) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x3, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='illinois\x00', 0x9) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x0, 0x0, 0x0, 0x7fffffff}}}}]}, 0x4c}}, 0x0) shutdown(r0, 0x2) 2.426025035s ago: executing program 7 (id=776): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0xf, &(0x7f00000004c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x6}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000040)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0x50, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7fffffff}, 0x94) 2.384981894s ago: executing program 2 (id=777): add_key$user(0x0, &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) r0 = socket$pppoe(0x18, 0x1, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) connect$pppoe(r0, &(0x7f0000000040)={0x18, 0x0, {0x1, @multicast, 'ip6gre0\x00'}}, 0x1e) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000400)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r1, 0x80047437, &(0x7f0000001f00)) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$PPPIOCATTCHAN(r2, 0x40047438, &(0x7f0000000040)=0x2) sendmmsg(r1, &(0x7f0000001a40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x24004000) 2.322937095s ago: executing program 6 (id=778): open(&(0x7f0000000080)='./bus\x00', 0x147c7c, 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, 0x0, 0x0, 0x1000, 0x0) open(&(0x7f00000003c0)='./bus\x00', 0x14927e, 0xbb) syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x840, &(0x7f0000000180)={[{@test_dummy_encryption_v1}, {@nolazytime}]}, 0x1, 0x241, &(0x7f00000020c0)="$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") r0 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) fallocate(r0, 0x0, 0x0, 0x1000f4) 1.720293366s ago: executing program 7 (id=779): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e24, @loopback}, 0x10) sendmmsg$inet(r0, &(0x7f0000001300)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000200)="bccd84", 0x3}], 0x1}}, {{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000002c0)="b3df1f", 0x3}], 0x1}}, {{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f00000009c0)="51703a9b7c4ac4486a707a5f99fbc1d3f035ff9357b394058f0e5931b5c282a5544daaeab5d80cddf2195131c4b0fa4f40a6d90d9a9fcc61d1dab66f820d66b6c3b0a8bf807905afdaa4b25255686baac3ce009a246f8a1ff1e4bba1e5980074506aa1c93ba4de651961cf3a1957aac9997b", 0x72}], 0x1}}], 0x3, 0x8011) recvmmsg(r0, &(0x7f000000a400)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000001c80)=""/4096, 0x88}], 0x1}, 0x40}], 0x1, 0x10120, 0x0) 1.67266004s ago: executing program 2 (id=780): openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_CAP_VM_DISABLE_NX_HUGE_PAGES(0xffffffffffffffff, 0x4068aea3, &(0x7f00000001c0)) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000000000000f47"]) r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000040)={0x0, &(0x7f00000002c0)=[@rdmsr={0x32, 0x18, {0x824}}, @uexit={0x0, 0x18, 0x4}, @cpuid={0x14, 0x18, {0xf, 0x9e}}, @code={0xa, 0x88, {"66ba2000b000eec7442400ac000000c74424028cada29dff2c24c744240007010000c744240200000000ff2c24660fc4b421f3ff000056b805000000b9050000000f01c1672e0fc76800c744240043da8866c744240200800000c7442406000000000f011c240f54de653e0fc73bc4c1f8178500000000"}}, @uexit={0x0, 0x18, 0x713}, @cpuid={0x14, 0x18, {0x7, 0x5}}, @cpuid={0x14, 0x18, {0x8837, 0x7}}, @code={0xa, 0x58, {"440f060f07dbe2f3460fc774f000c4037d08350070000078da20c7442400d3000000c744240200700000ff2c24c4232d4c970e000000120f20e035000100000f22e0c4a16c59db"}}, @cpuid={0x14, 0x18, {0x2, 0x7d}}, @wrmsr={0x1e, 0x20, {0x256, 0x1}}, @code={0xa, 0x62, {"c4e3a55f3900660fe306c7442400b1000000c744240200000000ff1c2466ba4200b001ee26f241ab66430fd7edc442c901f664440f220166b8ae008ed866baf80cb88cb57081ef66bafc0cb87d1d54a5ef"}}, @wr_crn={0x46, 0x20, {0x2, 0x7f}}, @cpuid={0x14, 0x18, {0x8, 0x1000}}, @rdmsr={0x32, 0x18, {0x60d}}, @cpuid={0x14, 0x18, {0x5, 0x3}}, @uexit={0x0, 0x18, 0x7fffffff}, @rdmsr={0x32, 0x18, {0xc0010140}}, @rdmsr={0x32, 0x18, {0x1dc}}, @code={0xa, 0x47, {"f20f1ae166b8e1000f00d00f35640f350f01cb6666450f3834048c0f01c4b9800000c00f3235001000000f3066b85b008ee0460f01c9"}}], 0x301}) ioctl$KVM_TPR_ACCESS_REPORTING(0xffffffffffffffff, 0xc028ae92, &(0x7f0000000100)={0x101, 0x2}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0xc45, 0x9, 0xfffffffffffffffd, 0x10000000, 0x10000, 0x3, 0x4002004c2, 0x1000, 0x9, 0x0, 0x3fc, 0x0, 0x3, 0x0, 0x8, 0x8d], 0x100000, 0x2011c0}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.625647281s ago: executing program 8 (id=781): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r0, 0x6, 0x22, &(0x7f00000001c0)=0x1, 0x4) sendmmsg$inet(r0, &(0x7f0000002300)=[{{&(0x7f0000000000)={0x2, 0x4e24, @empty}, 0x10, &(0x7f0000000100)=[{0x0}], 0x1}}], 0x1, 0x2000c0e0) 719.929263ms ago: executing program 3 (id=782): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000010c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={r0, 0x18000000000002a0, 0xf, 0x0, &(0x7f0000000140)="b9158edfaa57fef007fdffffffffff", 0x0, 0xdc, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x4c) 719.496982ms ago: executing program 6 (id=783): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000002c0)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) writev(0xffffffffffffffff, &(0x7f0000000780)=[{&(0x7f0000000100)="3a34e7", 0x3}], 0x1) write$tun(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="000086dd000311000400000000006eec00be10a42f01fe8000000000000000000000000000aaff020000000000000000000000000001330022eb"], 0x10da) 665.944266ms ago: executing program 8 (id=784): ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000000000000f47"]) r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000040)={0x0, &(0x7f00000007c0)=[@cpuid={0x14, 0x18, {0x3af, 0x6}}, @code={0xa, 0x5b, {"48b825f43299000000000f23c00f21f835010004000f23f83e400f795d4e66baf80cb868859587ef66bafc0ced0f350f01d166b817008ed026400fd7f966ba4000ed263eb3f6400f01c5"}}, @wr_crn={0x46, 0x20, {0x3, 0x100000001}}, @cpuid={0x14, 0x18, {0xf, 0x9e}}, @code={0xa, 0x88, {"66ba2000b000eec7442400ac000000c74424028cada29dff2c24c744240007010000c744240200000000ff2c24660fc4b421f3ff000056b805000000b9050000000f01c1672e0fc76800c744240043da8866c744240200800000c7442406000000000f011c240f54de653e0fc73bc4c1f8178500000000"}}, @uexit={0x0, 0x18, 0x713}, @cpuid={0x14, 0x18, {0x7, 0x5}}, @cpuid={0x14, 0x18, {0x8837, 0x7}}, @code={0xa, 0x58, {"440f060f07dbe2f3460fc774f000c4037d08350070000078da20c7442400d3000000c744240200700000ff2c24c4232d4c970e000000120f20e035000100000f22e0c4a16c59db"}}, @cpuid={0x14, 0x18, {0x2, 0x7d}}, @wrmsr={0x1e, 0x20, {0x256, 0x1}}, @code={0xa, 0x62, {"c4e3a55f3900660fe306c7442400b1000000c744240200000000ff1c2466ba4200b001ee26f241ab66430fd7edc442c901f664440f220166b8ae008ed866baf80cb88cb57081ef66bafc0cb87d1d54a5ef"}}, @wr_crn={0x46, 0x20, {0x2, 0x7f}}, @wr_crn={0x46, 0x20, {0x8, 0x1000000000}}, @cpuid={0x14, 0x18, {0x5, 0x3}}, @uexit={0x0, 0x18, 0x80000001}, @rdmsr={0x32, 0x18, {0xc0010140}}, @rdmsr={0x32, 0x18, {0x1dc}}, @uexit={0x0, 0x18, 0x8}], 0x325}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0xc45, 0x9, 0xfffffffffffffffd, 0x10000000, 0x10000, 0x3, 0x4002004c2, 0x1000, 0x9, 0x0, 0x400, 0x0, 0x3, 0x0, 0x8, 0x8d], 0x100000, 0x2011c0}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 319.815158ms ago: executing program 2 (id=785): r0 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x10000000000) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000580)="b3185d7bb56f70f003360fa8bf71ac3086aedebf6fff904f92849a7a07395ee7f0e4cb1d78001c08a0ab73ffcf5ad07693727980eea946e6cba1723e81bfa5c3688803c8a124dcb27df7938e7ddfdd52"}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000004a40)={0x60, 0x0, &(0x7f0000000940)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x1040}, @acquire_done={0x40106309, 0x1}], 0x0, 0x0, 0x0}) 0s ago: executing program 7 (id=786): r0 = syz_init_net_socket$ax25(0x3, 0x3, 0xf0) connect$ax25(r0, 0x0, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.49' (ED25519) to the list of known hosts. [ 232.709743][ T5790] cgroup: Unknown subsys name 'net' [ 232.862223][ T5790] cgroup: Unknown subsys name 'cpuset' [ 232.880882][ T5790] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 234.912535][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 234.919236][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 239.439099][ T5790] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 244.930392][ T49] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 244.956792][ T5813] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 244.964924][ T5813] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 244.976877][ T5813] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 244.991714][ T5815] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 245.001777][ T5815] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 245.010911][ T5815] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 245.023391][ T5813] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 245.024734][ T5819] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 245.037338][ T5813] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 245.039056][ T5819] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 245.054483][ T5818] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 245.058617][ T5822] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 245.068125][ T5819] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 245.075762][ T5822] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 245.078848][ T5819] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 245.085212][ T5822] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 245.098009][ T5819] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 245.105492][ T5822] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 245.108255][ T5819] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 245.129647][ T5819] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 245.131259][ T5808] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 245.152711][ T5810] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 245.153360][ T5819] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 245.201300][ T5819] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 246.606145][ T5820] chnl_net:caif_netlink_parms(): no params data found [ 247.145163][ T49] Bluetooth: hci0: command tx timeout [ 247.230231][ T49] Bluetooth: hci1: command tx timeout [ 247.231484][ T5815] Bluetooth: hci3: command tx timeout [ 247.293592][ T5815] Bluetooth: hci2: command tx timeout [ 247.300800][ T5815] Bluetooth: hci4: command tx timeout [ 247.330404][ T5811] chnl_net:caif_netlink_parms(): no params data found [ 247.611743][ T5806] chnl_net:caif_netlink_parms(): no params data found [ 247.733502][ T5807] chnl_net:caif_netlink_parms(): no params data found [ 247.853009][ T5820] bridge0: port 1(bridge_slave_0) entered blocking state [ 247.860885][ T5820] bridge0: port 1(bridge_slave_0) entered disabled state [ 247.869258][ T5820] bridge_slave_0: entered allmulticast mode [ 247.879890][ T5820] bridge_slave_0: entered promiscuous mode [ 247.923964][ T5812] chnl_net:caif_netlink_parms(): no params data found [ 247.971033][ T5820] bridge0: port 2(bridge_slave_1) entered blocking state [ 247.978747][ T5820] bridge0: port 2(bridge_slave_1) entered disabled state [ 247.988884][ T5820] bridge_slave_1: entered allmulticast mode [ 248.001025][ T5820] bridge_slave_1: entered promiscuous mode [ 248.432719][ T5820] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 248.551614][ T5820] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 248.576293][ T5811] bridge0: port 1(bridge_slave_0) entered blocking state [ 248.584052][ T5811] bridge0: port 1(bridge_slave_0) entered disabled state [ 248.591989][ T5811] bridge_slave_0: entered allmulticast mode [ 248.601883][ T5811] bridge_slave_0: entered promiscuous mode [ 248.687993][ T5811] bridge0: port 2(bridge_slave_1) entered blocking state [ 248.697740][ T5811] bridge0: port 2(bridge_slave_1) entered disabled state [ 248.705759][ T5811] bridge_slave_1: entered allmulticast mode [ 248.715600][ T5811] bridge_slave_1: entered promiscuous mode [ 248.888778][ T5820] team0: Port device team_slave_0 added [ 249.018294][ T5820] team0: Port device team_slave_1 added [ 249.076549][ T5811] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 249.233284][ T5815] Bluetooth: hci0: command tx timeout [ 249.291698][ T5815] Bluetooth: hci1: command tx timeout [ 249.295279][ T49] Bluetooth: hci3: command tx timeout [ 249.352775][ T5806] bridge0: port 1(bridge_slave_0) entered blocking state [ 249.361361][ T5806] bridge0: port 1(bridge_slave_0) entered disabled state [ 249.369033][ T5806] bridge_slave_0: entered allmulticast mode [ 249.378774][ T5806] bridge_slave_0: entered promiscuous mode [ 249.393303][ T5820] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 249.400611][ T5820] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 249.403912][ T49] Bluetooth: hci4: command tx timeout [ 249.427171][ T5820] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 249.433010][ T49] Bluetooth: hci2: command tx timeout [ 249.456445][ T5811] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 249.559983][ T5820] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 249.567186][ T5820] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 249.593979][ T5820] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 249.628582][ T5806] bridge0: port 2(bridge_slave_1) entered blocking state [ 249.636373][ T5806] bridge0: port 2(bridge_slave_1) entered disabled state [ 249.644255][ T5806] bridge_slave_1: entered allmulticast mode [ 249.654021][ T5806] bridge_slave_1: entered promiscuous mode [ 249.663799][ T5807] bridge0: port 1(bridge_slave_0) entered blocking state [ 249.671638][ T5807] bridge0: port 1(bridge_slave_0) entered disabled state [ 249.679316][ T5807] bridge_slave_0: entered allmulticast mode [ 249.689510][ T5807] bridge_slave_0: entered promiscuous mode [ 249.756572][ T5811] team0: Port device team_slave_0 added [ 249.838587][ T5807] bridge0: port 2(bridge_slave_1) entered blocking state [ 249.847560][ T5807] bridge0: port 2(bridge_slave_1) entered disabled state [ 249.855536][ T5807] bridge_slave_1: entered allmulticast mode [ 249.864384][ T5807] bridge_slave_1: entered promiscuous mode [ 249.887213][ T5811] team0: Port device team_slave_1 added [ 250.072353][ T5812] bridge0: port 1(bridge_slave_0) entered blocking state [ 250.080108][ T5812] bridge0: port 1(bridge_slave_0) entered disabled state [ 250.087809][ T5812] bridge_slave_0: entered allmulticast mode [ 250.097158][ T5812] bridge_slave_0: entered promiscuous mode [ 250.120702][ T5806] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 250.130618][ T5812] bridge0: port 2(bridge_slave_1) entered blocking state [ 250.138154][ T5812] bridge0: port 2(bridge_slave_1) entered disabled state [ 250.146447][ T5812] bridge_slave_1: entered allmulticast mode [ 250.156672][ T5812] bridge_slave_1: entered promiscuous mode [ 250.289665][ T5806] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 250.352794][ T5820] hsr_slave_0: entered promiscuous mode [ 250.363038][ T5820] hsr_slave_1: entered promiscuous mode [ 250.386273][ T5807] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 250.400987][ T5811] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 250.408126][ T5811] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 250.434616][ T5811] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 250.530066][ T5812] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 250.553567][ T5807] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 250.567464][ T5811] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 250.575022][ T5811] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 250.601645][ T5811] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 250.659668][ T5812] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 250.827895][ T5806] team0: Port device team_slave_0 added [ 250.950658][ T5807] team0: Port device team_slave_0 added [ 251.005272][ T5806] team0: Port device team_slave_1 added [ 251.098428][ T5807] team0: Port device team_slave_1 added [ 251.264765][ T5812] team0: Port device team_slave_0 added [ 251.299985][ T5815] Bluetooth: hci0: command tx timeout [ 251.344654][ T5811] hsr_slave_0: entered promiscuous mode [ 251.354945][ T5811] hsr_slave_1: entered promiscuous mode [ 251.363926][ T5811] debugfs: 'hsr0' already exists in 'hsr' [ 251.370110][ T5811] Cannot create hsr debugfs directory [ 251.371796][ T5815] Bluetooth: hci3: command tx timeout [ 251.380393][ T5806] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 251.388222][ T5806] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 251.389595][ T5815] Bluetooth: hci1: command tx timeout [ 251.414712][ T5806] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 251.442206][ T5812] team0: Port device team_slave_1 added [ 251.530599][ T49] Bluetooth: hci2: command tx timeout [ 251.533158][ T5815] Bluetooth: hci4: command tx timeout [ 251.542123][ T5807] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 251.549337][ T5807] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 251.576041][ T5807] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 251.614387][ T5806] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 251.621758][ T5806] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 251.648126][ T5806] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 251.718682][ T5807] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 251.726206][ T5807] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 251.752862][ T5807] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 251.851331][ T5812] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 251.858582][ T5812] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 251.885168][ T5812] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 251.982767][ T5812] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 251.990250][ T5812] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 252.017838][ T5812] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 252.276997][ T5806] hsr_slave_0: entered promiscuous mode [ 252.287482][ T5806] hsr_slave_1: entered promiscuous mode [ 252.297129][ T5806] debugfs: 'hsr0' already exists in 'hsr' [ 252.303197][ T5806] Cannot create hsr debugfs directory [ 252.600162][ T5812] hsr_slave_0: entered promiscuous mode [ 252.610812][ T5812] hsr_slave_1: entered promiscuous mode [ 252.619817][ T5812] debugfs: 'hsr0' already exists in 'hsr' [ 252.625737][ T5812] Cannot create hsr debugfs directory [ 252.737480][ T5807] hsr_slave_0: entered promiscuous mode [ 252.748705][ T5807] hsr_slave_1: entered promiscuous mode [ 252.757785][ T5807] debugfs: 'hsr0' already exists in 'hsr' [ 252.763853][ T5807] Cannot create hsr debugfs directory [ 253.369988][ T5815] Bluetooth: hci0: command tx timeout [ 253.449715][ T5815] Bluetooth: hci1: command tx timeout [ 253.455352][ T5815] Bluetooth: hci3: command tx timeout [ 253.570717][ T5820] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 253.616812][ T5815] Bluetooth: hci4: command tx timeout [ 253.624180][ T5815] Bluetooth: hci2: command tx timeout [ 253.718421][ T5820] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 253.854067][ T5820] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 253.948863][ T5820] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 254.085918][ T5811] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 254.130879][ T5811] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 254.157183][ T5811] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 254.198225][ T5811] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 254.506996][ T5806] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 254.588605][ T5806] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 254.692571][ T5806] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 254.715666][ T5807] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 254.784212][ T5806] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 254.807116][ T5807] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 254.970519][ T5807] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 255.040459][ T5812] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 255.067937][ T5812] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 255.098521][ T5807] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 255.132507][ T5812] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 255.201893][ T5812] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 255.624845][ T5811] 8021q: adding VLAN 0 to HW filter on device bond0 [ 255.834019][ T5820] 8021q: adding VLAN 0 to HW filter on device bond0 [ 255.971168][ T5811] 8021q: adding VLAN 0 to HW filter on device team0 [ 256.089674][ T3440] bridge0: port 1(bridge_slave_0) entered blocking state [ 256.097254][ T3440] bridge0: port 1(bridge_slave_0) entered forwarding state [ 256.129762][ T5820] 8021q: adding VLAN 0 to HW filter on device team0 [ 256.239693][ T3440] bridge0: port 2(bridge_slave_1) entered blocking state [ 256.247329][ T3440] bridge0: port 2(bridge_slave_1) entered forwarding state [ 256.363297][ T5806] 8021q: adding VLAN 0 to HW filter on device bond0 [ 256.395609][ T3440] bridge0: port 1(bridge_slave_0) entered blocking state [ 256.403355][ T3440] bridge0: port 1(bridge_slave_0) entered forwarding state [ 256.510990][ T5807] 8021q: adding VLAN 0 to HW filter on device bond0 [ 256.584638][ T3440] bridge0: port 2(bridge_slave_1) entered blocking state [ 256.592330][ T3440] bridge0: port 2(bridge_slave_1) entered forwarding state [ 256.793615][ T5806] 8021q: adding VLAN 0 to HW filter on device team0 [ 256.821970][ T5807] 8021q: adding VLAN 0 to HW filter on device team0 [ 256.995492][ T3440] bridge0: port 1(bridge_slave_0) entered blocking state [ 257.003213][ T3440] bridge0: port 1(bridge_slave_0) entered forwarding state [ 257.022992][ T3440] bridge0: port 1(bridge_slave_0) entered blocking state [ 257.030699][ T3440] bridge0: port 1(bridge_slave_0) entered forwarding state [ 257.176625][ T5820] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 257.233800][ T3440] bridge0: port 2(bridge_slave_1) entered blocking state [ 257.241551][ T3440] bridge0: port 2(bridge_slave_1) entered forwarding state [ 257.268154][ T3440] bridge0: port 2(bridge_slave_1) entered blocking state [ 257.275875][ T3440] bridge0: port 2(bridge_slave_1) entered forwarding state [ 257.428586][ T5812] 8021q: adding VLAN 0 to HW filter on device bond0 [ 257.733200][ T5812] 8021q: adding VLAN 0 to HW filter on device team0 [ 257.805697][ T5806] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 257.818083][ T5806] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 257.982330][ T3872] bridge0: port 1(bridge_slave_0) entered blocking state [ 257.990294][ T3872] bridge0: port 1(bridge_slave_0) entered forwarding state [ 258.092246][ T3872] bridge0: port 2(bridge_slave_1) entered blocking state [ 258.099939][ T3872] bridge0: port 2(bridge_slave_1) entered forwarding state [ 259.268588][ T5811] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 259.796855][ T5820] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 259.906239][ T5811] veth0_vlan: entered promiscuous mode [ 260.037973][ T5811] veth1_vlan: entered promiscuous mode [ 260.069198][ T5807] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 260.109324][ T5806] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 260.496030][ T5811] veth0_macvtap: entered promiscuous mode [ 260.609548][ T5807] veth0_vlan: entered promiscuous mode [ 260.621919][ T5811] veth1_macvtap: entered promiscuous mode [ 260.703594][ T5812] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 260.808357][ T5807] veth1_vlan: entered promiscuous mode [ 260.917944][ T5811] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 260.969543][ T5806] veth0_vlan: entered promiscuous mode [ 261.032317][ T5811] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 261.148667][ T5806] veth1_vlan: entered promiscuous mode [ 261.191038][ T3970] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 261.236407][ T3970] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 261.300078][ T3970] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 261.342714][ T3970] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 261.381847][ T5807] veth0_macvtap: entered promiscuous mode [ 261.449297][ T5807] veth1_macvtap: entered promiscuous mode [ 261.476867][ T5812] veth0_vlan: entered promiscuous mode [ 261.605331][ T5812] veth1_vlan: entered promiscuous mode [ 261.750616][ T5806] veth0_macvtap: entered promiscuous mode [ 261.807581][ T5807] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 261.878116][ T5807] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 261.919314][ T5806] veth1_macvtap: entered promiscuous mode [ 262.002664][ T3457] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 262.092964][ T3457] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 262.152166][ T5806] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 262.175018][ T3970] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 262.197635][ T5812] veth0_macvtap: entered promiscuous mode [ 262.255860][ T3970] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 262.291561][ T5806] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 262.372557][ T5812] veth1_macvtap: entered promiscuous mode [ 262.437937][ T57] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 262.524508][ T57] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 262.633836][ T57] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 262.668727][ T5812] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 262.690775][ T57] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 262.807610][ T5812] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 262.942311][ T3872] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 262.996406][ T3872] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 263.050192][ T3872] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 263.059271][ T3872] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 263.118234][ T5820] veth0_vlan: entered promiscuous mode [ 263.265775][ T5820] veth1_vlan: entered promiscuous mode [ 263.734771][ T5820] veth0_macvtap: entered promiscuous mode [ 263.836327][ T5820] veth1_macvtap: entered promiscuous mode [ 264.157422][ T5820] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 264.261668][ T5820] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 264.390055][ T3440] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 264.451043][ T3440] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 264.506669][ T3440] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 264.570548][ T3440] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 269.122197][ T4409] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 269.130361][ T4409] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 269.365427][ T3457] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 269.374819][ T3457] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 270.006828][ T5811] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 270.044932][ T4409] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 270.053335][ T4409] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 270.286543][ T4409] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 270.295527][ T4409] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 270.512017][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 270.521056][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 270.799006][ T3457] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 270.807214][ T3457] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 270.821675][ T5992] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 270.951699][ T4370] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 270.960292][ T4370] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 271.094858][ T3970] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 271.108408][ T3970] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 272.259616][ T6008] loop2: detected capacity change from 0 to 512 [ 272.372201][ T6008] ======================================================= [ 272.372201][ T6008] WARNING: The mand mount option has been deprecated and [ 272.372201][ T6008] and is ignored by this kernel. Remove the mand [ 272.372201][ T6008] option from the mount to silence this warning. [ 272.372201][ T6008] ======================================================= [ 272.406209][ T6009] loop1: detected capacity change from 0 to 2048 [ 272.410238][ T6008] EXT4-fs: inline encryption not supported [ 272.446089][ T6007] loop0: detected capacity change from 0 to 2048 [ 272.520265][ T6008] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 272.527266][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 272.542588][ T6008] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 272.544468][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 272.621043][ T6007] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 272.690678][ T6009] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 272.791150][ T6008] EXT4-fs (loop2): 1 truncate cleaned up [ 272.799858][ T6008] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 272.868400][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 272.877048][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 273.670672][ T6019] loop0: detected capacity change from 0 to 512 [ 273.698997][ T5806] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 273.736468][ T6023] loop3: detected capacity change from 0 to 8 [ 274.001141][ T6019] EXT4-fs (loop0): 1 orphan inode deleted [ 274.009763][ T6019] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 274.023713][ T3849] Quota error (device loop0): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 274.032613][ T6022] loop4: detected capacity change from 0 to 1024 [ 274.034907][ T3849] EXT4-fs error (device loop0): ext4_release_dquot:6973: comm kworker/u8:14: Failed to release dquot type 1 [ 274.103090][ T6022] EXT4-fs: Ignoring removed oldalloc option [ 274.109671][ T6022] EXT4-fs: Ignoring removed bh option [ 274.122271][ T6019] ext4 filesystem being mounted at /2/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 274.327278][ T6022] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 274.404498][ T6030] EXT4-fs error (device loop0): ext4_lookup:1787: inode #16: comm syz.0.9: unexpected EA_INODE flag [ 274.690315][ T5872] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 274.950542][ T5872] usb 2-1: Using ep0 maxpacket: 16 [ 274.994308][ T5872] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 275.005860][ T5872] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 275.016056][ T5872] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 275.030047][ T5872] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 275.039502][ T5872] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 275.178653][ T5807] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 275.193261][ T5872] usb 2-1: config 0 descriptor?? [ 275.573222][ T5820] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 275.716204][ T5872] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0 [ 275.724150][ T5872] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0 [ 275.731965][ T5872] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0 [ 275.739604][ T5872] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0 [ 275.747350][ T5872] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0 [ 275.755072][ T5872] microsoft 0003:045E:07DA.0001: unknown main item tag 0x4 [ 275.779998][ T5872] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0 [ 275.787614][ T5872] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0 [ 275.795326][ T5872] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0 [ 275.803859][ T5872] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0 [ 275.879098][ T6040] loop2: detected capacity change from 0 to 1024 [ 275.972215][ T6042] loop0: detected capacity change from 0 to 128 [ 276.128549][ T6040] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 276.145811][ T6040] ext4 filesystem being mounted at /2/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 276.231833][ T5872] microsoft 0003:045E:07DA.0001: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 276.243755][ T5872] microsoft 0003:045E:07DA.0001: no inputs found [ 276.246882][ T6042] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 276.250643][ T5872] microsoft 0003:045E:07DA.0001: could not initialize ff, continuing anyway [ 276.315716][ T6040] EXT4-fs error (device loop2): ext4_free_blocks:6696: comm syz.2.15: Freeing blocks not in datazone - block = 0, count = 16 [ 276.350873][ T6042] ext4 filesystem being mounted at /3/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 276.428416][ T5872] usb 2-1: USB disconnect, device number 2 [ 276.567695][ T6040] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 276.685718][ T6040] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 65 with error 28 [ 276.698752][ T6040] EXT4-fs (loop2): This should not happen!! Data will be lost [ 276.698752][ T6040] [ 276.709333][ T6040] EXT4-fs (loop2): Total free blocks count 0 [ 276.715810][ T6040] EXT4-fs (loop2): Free/Dirty block details [ 276.723535][ T6040] EXT4-fs (loop2): free_blocks=4293918720 [ 276.731238][ T6040] EXT4-fs (loop2): dirty_blocks=80 [ 276.744713][ T6040] EXT4-fs (loop2): Block reservation details [ 276.753594][ T6040] EXT4-fs (loop2): i_reserved_data_blocks=5 [ 276.915753][ T6050] fido_id[6050]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 277.290335][ T5806] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 277.338734][ T5807] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 277.481535][ T6054] loop1: detected capacity change from 0 to 256 [ 277.597323][ T6054] exFAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 277.608739][ T6054] exFAT-fs (loop1): Medium has reported failures. Some data may be lost. [ 277.855876][ T6059] loop2: detected capacity change from 0 to 512 [ 277.945829][ T6054] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xe5674ec2, utbl_chksum : 0xe619d30d) [ 278.014706][ T6059] EXT4-fs (loop2): VFS: Can't find ext4 filesystem [ 278.830962][ T30] audit: type=1326 audit(1757571822.810:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6056 comm="syz.2.19" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f6e1ed8eba9 code=0x0 [ 279.490958][ T6061] loop0: detected capacity change from 0 to 512 [ 279.633342][ T6061] EXT4-fs: Ignoring removed bh option [ 279.772989][ T6061] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 279.783638][ T6061] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 280.137500][ T6061] EXT4-fs (loop0): warning: mounting unchecked fs, running e2fsck is recommended [ 280.261504][ T6061] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=c002e01c, mo2=0006] [ 280.443082][ T6061] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 280.768206][ T6067] loop4: detected capacity change from 0 to 512 [ 280.998025][ T6067] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 281.352739][ T6067] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 281.697505][ T6069] loop3: detected capacity change from 0 to 2048 [ 281.792411][ T6073] netlink: 24 bytes leftover after parsing attributes in process `syz.1.23'. [ 281.932304][ T6069] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 282.031011][ T5807] EXT4-fs error (device loop0): ext4_readdir:264: inode #2: block 3: comm syz-executor: path /4/file0: bad entry in directory: inode out of bounds - offset=24, inode=134217739, rec_len=20, size=2048 fake=0 [ 282.432118][ T5820] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 283.363667][ T5807] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 284.447501][ T6082] loop4: detected capacity change from 0 to 128 [ 285.182638][ T6082] FAT-fs (loop4): Directory bread(block 32) failed [ 285.189757][ T6082] FAT-fs (loop4): Directory bread(block 33) failed [ 285.196682][ T6082] FAT-fs (loop4): Directory bread(block 34) failed [ 285.203760][ T6082] FAT-fs (loop4): Directory bread(block 35) failed [ 285.211079][ T6082] FAT-fs (loop4): Directory bread(block 36) failed [ 285.217817][ T6082] FAT-fs (loop4): Directory bread(block 37) failed [ 285.225009][ T6082] FAT-fs (loop4): Directory bread(block 38) failed [ 285.240686][ T6082] FAT-fs (loop4): Directory bread(block 39) failed [ 285.247652][ T6082] FAT-fs (loop4): Directory bread(block 40) failed [ 285.257272][ T6082] FAT-fs (loop4): Directory bread(block 41) failed [ 285.925458][ T4370] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 286.346122][ T4370] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 286.817632][ T4370] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 287.225397][ T4370] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 287.835196][ T4370] bridge_slave_1: left allmulticast mode [ 287.841418][ T4370] bridge_slave_1: left promiscuous mode [ 287.848232][ T4370] bridge0: port 2(bridge_slave_1) entered disabled state [ 287.884374][ T4370] bridge_slave_0: left allmulticast mode [ 287.890875][ T4370] bridge_slave_0: left promiscuous mode [ 287.908173][ T4370] bridge0: port 1(bridge_slave_0) entered disabled state [ 288.465212][ T4370] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 288.521487][ T4370] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 288.537271][ T4370] bond0 (unregistering): Released all slaves [ 289.069313][ T4370] hsr_slave_0: left promiscuous mode [ 289.095810][ T4370] hsr_slave_1: left promiscuous mode [ 289.104612][ T4370] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 289.112509][ T4370] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 289.148855][ T4370] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 289.156700][ T4370] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 289.235735][ T4370] veth1_macvtap: left promiscuous mode [ 289.242274][ T4370] veth0_macvtap: left promiscuous mode [ 289.248211][ T4370] veth1_vlan: left promiscuous mode [ 289.254103][ T4370] veth0_vlan: left promiscuous mode [ 291.115803][ T5815] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 291.126715][ T5815] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 291.169024][ T4370] team0 (unregistering): Port device team_slave_1 removed [ 291.216560][ T5815] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 291.235034][ T4370] team0 (unregistering): Port device team_slave_0 removed [ 291.261324][ T5815] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 291.311104][ T5815] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 293.450819][ T5815] Bluetooth: hci1: command tx timeout [ 293.741278][ T6138] warning: `syz.4.44' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 293.971836][ T6138] tipc: Started in network mode [ 293.976949][ T6138] tipc: Node identity 4, cluster identity 4711 [ 293.983603][ T6138] tipc: Node number set to 4 [ 294.957773][ T6117] chnl_net:caif_netlink_parms(): no params data found [ 295.531285][ T5815] Bluetooth: hci1: command tx timeout [ 296.084581][ T6161] syz.1.50 uses obsolete (PF_INET,SOCK_PACKET) [ 296.372378][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 296.379182][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 297.255008][ T6117] bridge0: port 1(bridge_slave_0) entered blocking state [ 297.263121][ T6117] bridge0: port 1(bridge_slave_0) entered disabled state [ 297.271094][ T6117] bridge_slave_0: entered allmulticast mode [ 297.280953][ T6117] bridge_slave_0: entered promiscuous mode [ 297.413070][ T6117] bridge0: port 2(bridge_slave_1) entered blocking state [ 297.424146][ T6117] bridge0: port 2(bridge_slave_1) entered disabled state [ 297.432218][ T6117] bridge_slave_1: entered allmulticast mode [ 297.442420][ T6117] bridge_slave_1: entered promiscuous mode [ 297.609997][ T5815] Bluetooth: hci1: command tx timeout [ 297.994558][ T6117] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 298.030236][ T6180] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 298.149808][ T6180] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 298.328564][ T6117] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 298.882924][ T6117] team0: Port device team_slave_0 added [ 298.980037][ T6117] team0: Port device team_slave_1 added [ 299.258023][ T6117] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 299.273167][ T6117] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 299.302839][ T6117] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 299.500911][ T6117] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 299.508253][ T6117] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 299.535319][ T6117] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 299.705432][ T5815] Bluetooth: hci1: command tx timeout [ 300.049188][ T6117] hsr_slave_0: entered promiscuous mode [ 300.060121][ T6117] hsr_slave_1: entered promiscuous mode [ 300.069144][ T6117] debugfs: 'hsr0' already exists in 'hsr' [ 300.075280][ T6117] Cannot create hsr debugfs directory [ 301.979263][ T6218] loop2: detected capacity change from 0 to 164 [ 302.108197][ T6218] isofs_fill_super: root inode is not a directory. Corrupted media? [ 302.975112][ T6117] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 303.187109][ T6117] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 303.312262][ T6117] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 303.435968][ T6117] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 304.017773][ T6245] loop1: detected capacity change from 0 to 256 [ 304.149934][ T6245] exFAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 304.161322][ T6245] exFAT-fs (loop1): Medium has reported failures. Some data may be lost. [ 304.416231][ T6245] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 304.668443][ T6245] exFAT-fs (loop1): error, invalid access to FAT (entry 0xffffffff) [ 304.671782][ T30] audit: type=1800 audit(1757571848.660:3): pid=6245 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.70" name="file1" dev="loop1" ino=1048601 res=0 errno=0 [ 304.682315][ T6245] exFAT-fs (loop1): Filesystem has been set read-only [ 305.567618][ T6117] 8021q: adding VLAN 0 to HW filter on device bond0 [ 305.871095][ T6117] 8021q: adding VLAN 0 to HW filter on device team0 [ 306.010601][ T4330] bridge0: port 1(bridge_slave_0) entered blocking state [ 306.018352][ T4330] bridge0: port 1(bridge_slave_0) entered forwarding state [ 306.171474][ T4330] bridge0: port 2(bridge_slave_1) entered blocking state [ 306.179057][ T4330] bridge0: port 2(bridge_slave_1) entered forwarding state [ 307.848958][ T6278] netlink: 44 bytes leftover after parsing attributes in process `syz.3.78'. [ 307.860133][ T6278] block nbd0: not configured, cannot reconfigure [ 309.814253][ T6117] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 311.324875][ T6317] loop3: detected capacity change from 0 to 4096 [ 311.336621][ T6317] EXT4-fs: Ignoring removed mblk_io_submit option [ 311.494070][ T6317] EXT4-fs (loop3): Test dummy encryption mode enabled [ 311.689278][ T6317] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 314.718506][ T6327] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 316.704443][ T6343] tipc: Failed to remove unknown binding: 66,1,1/4:818162167/818162169 [ 316.824597][ T6346] tipc: Failed to remove unknown binding: 66,1,1/4:818162167/818162169 [ 318.712133][ T6117] veth0_vlan: entered promiscuous mode [ 318.947436][ T6117] veth1_vlan: entered promiscuous mode [ 319.791676][ T6117] veth0_macvtap: entered promiscuous mode [ 319.859334][ T6117] veth1_macvtap: entered promiscuous mode [ 319.883463][ T5812] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 320.108388][ T6117] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 320.221737][ T6117] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 320.404166][ T4330] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 320.440400][ T4330] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 320.524672][ T4330] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 320.700895][ T4330] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 321.609254][ T6380] loop4: detected capacity change from 0 to 512 [ 321.880444][ T6380] EXT4-fs error (device loop4): ext4_iget_extra_inode:5104: inode #15: comm syz.4.105: corrupted in-inode xattr: e_value size too large [ 321.951560][ T6380] EXT4-fs error (device loop4): ext4_orphan_get:1397: comm syz.4.105: couldn't read orphan inode 15 (err -117) [ 322.037249][ T6380] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 323.105276][ T5820] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 324.789873][ T6420] loop3: detected capacity change from 0 to 4096 [ 324.801225][ T6420] EXT4-fs: Ignoring removed mblk_io_submit option [ 324.987502][ T6420] EXT4-fs (loop3): Test dummy encryption mode enabled [ 325.143034][ T6420] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 326.734025][ T6431] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input6 [ 330.657218][ T6455] fuse: Bad value for 'fd' [ 333.423402][ T5812] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 336.231085][ T4370] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 336.239283][ T4370] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 336.904796][ T6508] loop4: detected capacity change from 0 to 4096 [ 336.916039][ T6508] EXT4-fs: Ignoring removed mblk_io_submit option [ 337.077803][ T6508] EXT4-fs (loop4): Test dummy encryption mode enabled [ 337.106776][ T6508] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 337.515018][ T3457] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 337.524480][ T3457] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 338.432805][ T6515] fuse: Bad value for 'fd' [ 341.254398][ T6530] IPVS: Scheduler module ip_vs_sip not found [ 345.186391][ T5820] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 352.251201][ T6647] syzkaller1: entered promiscuous mode [ 352.257052][ T6647] syzkaller1: entered allmulticast mode [ 356.238217][ T6701] Zero length message leads to an empty skb [ 356.519051][ T6704] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input7 [ 357.790533][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 357.797632][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 359.993141][ T6760] netlink: 'syz.4.211': attribute type 1 has an invalid length. [ 360.001277][ T6760] netlink: 'syz.4.211': attribute type 2 has an invalid length. [ 360.045281][ T6760] netlink: 'syz.4.211': attribute type 1 has an invalid length. [ 360.053503][ T6760] netlink: 'syz.4.211': attribute type 2 has an invalid length. [ 361.428571][ T6776] netlink: 12 bytes leftover after parsing attributes in process `syz.4.213'. [ 362.324922][ T6780] infiniband syz0: set active [ 362.330094][ T6780] infiniband syz0: added veth0_vlan [ 362.409093][ T6780] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR [ 362.478871][ T6780] infiniband syz0: Couldn't open port 1 [ 362.729204][ T6780] RDS/IB: syz0: added [ 362.733681][ T6780] smc: adding ib device syz0 with port count 1 [ 362.740311][ T6780] smc: ib device syz0 port 1 has pnetid [ 363.300669][ T6796] netlink: 24 bytes leftover after parsing attributes in process `syz.4.218'. [ 363.310138][ T6796] netlink: 24 bytes leftover after parsing attributes in process `syz.4.218'. [ 364.862565][ T6819] netlink: 112 bytes leftover after parsing attributes in process `syz.4.226'. [ 367.858363][ T6849] loop4: detected capacity change from 0 to 512 [ 367.895882][ T6849] EXT4-fs: Ignoring removed oldalloc option [ 367.902703][ T6849] EXT4-fs: inline encryption not supported [ 367.960553][ T6849] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 368.117750][ T6849] EXT4-fs (loop4): 1 truncate cleaned up [ 368.129918][ T6849] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 369.170644][ T6865] netlink: 'syz.1.244': attribute type 4 has an invalid length. [ 369.312058][ T6866] netlink: 'syz.1.244': attribute type 4 has an invalid length. [ 369.491928][ T5820] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 370.142810][ T5822] Bluetooth: hci3: command 0x0406 tx timeout [ 370.152076][ T5822] Bluetooth: hci2: command 0x0406 tx timeout [ 370.158331][ T5822] Bluetooth: hci0: command 0x0406 tx timeout [ 370.170827][ T5815] Bluetooth: hci4: command 0x0406 tx timeout [ 375.286937][ T6898] loop3: detected capacity change from 0 to 512 [ 375.437225][ T6898] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 375.722918][ T6898] EXT4-fs (loop3): 1 truncate cleaned up [ 375.731613][ T6898] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 376.451880][ T6907] netlink: 'syz.2.259': attribute type 4 has an invalid length. [ 376.705214][ T6911] netlink: 'syz.2.259': attribute type 4 has an invalid length. [ 376.843003][ T5812] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 377.652888][ T6920] loop3: detected capacity change from 0 to 8 [ 377.754883][ T6920] SQUASHFS error: Failed to read block 0x2d7: -5 [ 377.761854][ T6920] SQUASHFS error: Unable to read metadata cache entry [2d5] [ 378.640701][ T6928] loop3: detected capacity change from 0 to 512 [ 378.870942][ T6928] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 378.884540][ T6928] ext4 filesystem being mounted at /51/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 379.191468][ T6928] Quota error (device loop3): do_check_range: Getting dqdh_next_free 4294967294 out of range 0-8 [ 379.203674][ T6928] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 379.214355][ T6928] EXT4-fs error (device loop3): ext4_acquire_dquot:6937: comm syz.3.268: Failed to acquire dquot type 0 [ 380.232779][ T5812] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 387.348498][ T7024] loop2: detected capacity change from 0 to 128 [ 387.473588][ T7024] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 387.504246][ T7024] ext4 filesystem being mounted at /69/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 388.208135][ T5806] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 393.123894][ T7085] netlink: 'syz.2.331': attribute type 10 has an invalid length. [ 393.132369][ T7085] netlink: 40 bytes leftover after parsing attributes in process `syz.2.331'. [ 393.141787][ T7085] dummy0: entered promiscuous mode [ 395.783121][ T5808] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 395.797450][ T5808] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 395.809035][ T5808] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 395.839268][ T5808] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 395.853537][ T5808] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 396.333409][ T7120] netlink: 'syz.5.346': attribute type 10 has an invalid length. [ 396.349170][ T7120] netlink: 40 bytes leftover after parsing attributes in process `syz.5.346'. [ 396.361572][ T7120] dummy0: entered promiscuous mode [ 398.071359][ T5819] Bluetooth: hci5: command tx timeout [ 399.378031][ T7111] chnl_net:caif_netlink_parms(): no params data found [ 399.445814][ T7144] netlink: 'syz.2.355': attribute type 4 has an invalid length. [ 400.089841][ T5819] Bluetooth: hci5: command tx timeout [ 400.181169][ T7152] netlink: 'syz.1.358': attribute type 10 has an invalid length. [ 400.189164][ T7152] netlink: 40 bytes leftover after parsing attributes in process `syz.1.358'. [ 400.198830][ T7152] dummy0: entered promiscuous mode [ 401.695096][ T7111] bridge0: port 1(bridge_slave_0) entered blocking state [ 401.702965][ T7111] bridge0: port 1(bridge_slave_0) entered disabled state [ 401.717301][ T7111] bridge_slave_0: entered allmulticast mode [ 401.727359][ T7111] bridge_slave_0: entered promiscuous mode [ 401.854410][ T7111] bridge0: port 2(bridge_slave_1) entered blocking state [ 401.862505][ T7111] bridge0: port 2(bridge_slave_1) entered disabled state [ 401.874517][ T7111] bridge_slave_1: entered allmulticast mode [ 401.998540][ T7111] bridge_slave_1: entered promiscuous mode [ 402.199665][ T5819] Bluetooth: hci5: command tx timeout [ 402.504733][ T7111] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 402.629584][ T7111] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 403.080340][ T7180] netlink: 'syz.2.369': attribute type 4 has an invalid length. [ 403.147401][ T7111] team0: Port device team_slave_0 added [ 403.257801][ T7111] team0: Port device team_slave_1 added [ 403.791817][ T7111] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 403.798987][ T7111] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 403.828503][ T7111] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 404.028966][ T7111] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 404.036461][ T7111] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 404.063467][ T7111] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 404.276940][ T5819] Bluetooth: hci5: command tx timeout [ 404.610466][ T7111] hsr_slave_0: entered promiscuous mode [ 404.621496][ T7111] hsr_slave_1: entered promiscuous mode [ 404.644269][ T7111] debugfs: 'hsr0' already exists in 'hsr' [ 404.650705][ T7111] Cannot create hsr debugfs directory [ 406.403324][ T7211] netlink: 'syz.5.382': attribute type 4 has an invalid length. [ 406.975204][ T7111] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 407.174777][ T7111] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 407.313288][ T7111] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 407.434607][ T7111] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 409.132356][ T7111] 8021q: adding VLAN 0 to HW filter on device bond0 [ 409.346912][ T7111] 8021q: adding VLAN 0 to HW filter on device team0 [ 409.451708][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 409.459284][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 409.630681][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 409.638322][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 412.601404][ T7111] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 413.782789][ T7284] tipc: Started in network mode [ 413.788030][ T7284] tipc: Node identity f2005f47eb59, cluster identity 4711 [ 413.797115][ T7284] tipc: Enabled bearer , priority 0 [ 413.942996][ T7284] syzkaller0: entered promiscuous mode [ 413.953177][ T7284] syzkaller0: entered allmulticast mode [ 414.107573][ T7284] tipc: Resetting bearer [ 414.226238][ T7283] tipc: Resetting bearer [ 414.336297][ T7283] tipc: Disabling bearer [ 415.455901][ T5872] IPVS: starting estimator thread 0... [ 415.551415][ T7308] IPVS: using max 192 ests per chain, 9600 per kthread [ 416.369243][ T7111] veth0_vlan: entered promiscuous mode [ 416.631357][ T7111] veth1_vlan: entered promiscuous mode [ 417.089248][ T7111] veth0_macvtap: entered promiscuous mode [ 417.145140][ T7111] veth1_macvtap: entered promiscuous mode [ 417.678657][ T7111] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 417.826382][ T7111] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 417.960711][ T12] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 418.011342][ T14] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 418.070506][ T14] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 418.122647][ T4330] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 419.242773][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 419.251627][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 419.689866][ T0] NOHZ tick-stop error: local softirq work is pending, handler #242!!! [ 419.731074][ T2034] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 420.123475][ T2034] usb 4-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 420.134633][ T2034] usb 4-1: config 27 has 0 interfaces, different from the descriptor's value: 1 [ 420.145061][ T2034] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 420.155467][ T2034] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 421.077497][ T5872] usb 4-1: USB disconnect, device number 2 [ 421.329543][ T0] NOHZ tick-stop error: local softirq work is pending, handler #2c2!!! [ 424.812426][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 427.123219][ T7375] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 427.512929][ T7378] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 427.710908][ T5872] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 427.725250][ T7378] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 427.905723][ T7378] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 427.920430][ T5872] usb 4-1: Using ep0 maxpacket: 8 [ 427.986079][ T5872] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 234, changing to 11 [ 427.998122][ T5872] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 50661, setting to 1024 [ 428.009918][ T5872] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 428.019224][ T5872] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 428.141070][ T7378] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 428.196400][ T5872] usb 4-1: config 0 descriptor?? [ 428.205483][ T7383] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 428.549899][ T5872] iowarrior 4-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 428.691273][ T4370] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 428.967404][ T12] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 428.981363][ T3849] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 429.049399][ T3849] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 429.301922][ T9] usb 4-1: USB disconnect, device number 3 [ 429.310224][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 429.619673][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 430.641845][ T0] NOHZ tick-stop error: local softirq work is pending, handler #242!!! [ 431.048042][ T3872] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 431.061201][ T3872] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 431.440028][ T4330] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 431.448094][ T4330] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 432.284986][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 432.387760][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 432.591181][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 434.430807][ T0] NOHZ tick-stop error: local softirq work is pending, handler #2c0!!! [ 434.833247][ T14] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 434.996279][ T14] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 435.220880][ T14] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 435.411534][ T14] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 436.331096][ T14] bridge_slave_1: left allmulticast mode [ 436.337060][ T14] bridge_slave_1: left promiscuous mode [ 436.344395][ T14] bridge0: port 2(bridge_slave_1) entered disabled state [ 436.503276][ T14] bridge_slave_0: left allmulticast mode [ 436.509185][ T14] bridge_slave_0: left promiscuous mode [ 436.516279][ T14] bridge0: port 1(bridge_slave_0) entered disabled state [ 437.601047][ T14] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 437.633280][ T14] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 437.690068][ T14] bond0 (unregistering): Released all slaves [ 438.072213][ T14] tipc: Left network mode [ 438.533914][ T7445] loop2: detected capacity change from 0 to 4096 [ 438.544614][ T7445] EXT4-fs: Ignoring removed mblk_io_submit option [ 438.684564][ T7445] EXT4-fs (loop2): Test dummy encryption mode enabled [ 438.720436][ T7445] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 444.908544][ T7450] netlink: 12 bytes leftover after parsing attributes in process `syz.6.464'. [ 444.938046][ T5806] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 445.890458][ T7458] tipc: Started in network mode [ 445.898322][ T7458] tipc: Node identity 42a9af5cb731, cluster identity 4711 [ 445.915620][ T7458] tipc: Enabled bearer , priority 0 [ 445.994703][ T7458] syzkaller0: entered promiscuous mode [ 446.010636][ T7458] syzkaller0: entered allmulticast mode [ 446.370594][ T14] hsr_slave_0: left promiscuous mode [ 446.431512][ T14] hsr_slave_1: left promiscuous mode [ 446.472889][ T14] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 446.481621][ T14] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 446.617588][ T14] veth1_macvtap: left promiscuous mode [ 446.624451][ T14] veth0_macvtap: left promiscuous mode [ 446.630580][ T14] veth1_vlan: left promiscuous mode [ 446.636161][ T14] veth0_vlan: left promiscuous mode [ 447.090186][ T5872] tipc: Node number set to 4120424284 [ 447.517832][ T5808] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 447.527768][ T5808] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 447.580736][ T5808] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 447.626561][ T5808] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 447.663203][ T5808] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 448.418123][ T14] team0 (unregistering): Port device team_slave_1 removed [ 448.544588][ T14] team0 (unregistering): Port device team_slave_0 removed [ 449.054432][ T7464] tipc: Resetting bearer [ 449.217800][ T7457] tipc: Resetting bearer [ 449.295469][ T7457] tipc: Disabling bearer [ 449.473404][ T7481] tipc: Enabled bearer , priority 0 [ 449.528497][ T7478] tipc: Disabling bearer [ 449.773793][ T5808] Bluetooth: hci4: command tx timeout [ 451.361273][ T5819] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 451.420062][ T5819] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 451.463484][ T5819] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 451.513579][ T5819] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 451.551245][ T5819] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 451.866633][ T5808] Bluetooth: hci4: command tx timeout [ 452.484804][ T7515] loop6: detected capacity change from 0 to 4096 [ 452.494192][ T7515] EXT4-fs: Ignoring removed mblk_io_submit option [ 452.543625][ T7515] EXT4-fs (loop6): Test dummy encryption mode enabled [ 453.050720][ T7515] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 453.546219][ T7111] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 453.774451][ T5808] Bluetooth: hci6: command tx timeout [ 453.924890][ T7526] fuse: Bad value for 'fd' [ 453.940450][ T5808] Bluetooth: hci4: command tx timeout [ 454.051427][ T7470] chnl_net:caif_netlink_parms(): no params data found [ 455.856236][ T5808] Bluetooth: hci6: command tx timeout [ 456.042455][ T5808] Bluetooth: hci4: command tx timeout [ 456.510003][ T24] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 456.742104][ T24] usb 7-1: Using ep0 maxpacket: 8 [ 456.818503][ T24] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 456.828900][ T24] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 456.839181][ T24] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 456.849603][ T24] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 456.866403][ T24] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 456.876890][ T24] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 457.449701][ T24] usb 7-1: GET_CAPABILITIES returned 0 [ 457.455547][ T24] usbtmc 7-1:16.0: can't read capabilities [ 457.527670][ T7503] chnl_net:caif_netlink_parms(): no params data found [ 457.603999][ T7470] bridge0: port 1(bridge_slave_0) entered blocking state [ 457.611754][ T7470] bridge0: port 1(bridge_slave_0) entered disabled state [ 457.619629][ T7470] bridge_slave_0: entered allmulticast mode [ 457.628276][ T7470] bridge_slave_0: entered promiscuous mode [ 457.653157][ T7470] bridge0: port 2(bridge_slave_1) entered blocking state [ 457.661014][ T7470] bridge0: port 2(bridge_slave_1) entered disabled state [ 457.668911][ T7470] bridge_slave_1: entered allmulticast mode [ 457.686253][ T7470] bridge_slave_1: entered promiscuous mode [ 457.831763][ T24] usb 7-1: USB disconnect, device number 2 [ 457.935106][ T7557] loop2: detected capacity change from 0 to 4096 [ 457.944509][ T7557] EXT4-fs: Ignoring removed mblk_io_submit option [ 457.953648][ T5819] Bluetooth: hci6: command tx timeout [ 458.008427][ T7470] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 458.029009][ T7470] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 458.095278][ T7557] EXT4-fs (loop2): Test dummy encryption mode enabled [ 458.210759][ T7557] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 458.433677][ T5806] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 458.514909][ T7470] team0: Port device team_slave_0 added [ 458.695762][ T7470] team0: Port device team_slave_1 added [ 459.673838][ T7470] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 459.681632][ T7470] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 459.708218][ T7470] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 460.022008][ T5819] Bluetooth: hci6: command tx timeout [ 460.046354][ T7470] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 460.053690][ T7470] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 460.080441][ T7470] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 460.992796][ T7470] hsr_slave_0: entered promiscuous mode [ 461.003786][ T7470] hsr_slave_1: entered promiscuous mode [ 462.402806][ T3872] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 462.846882][ T7503] bridge0: port 1(bridge_slave_0) entered blocking state [ 462.854835][ T7503] bridge0: port 1(bridge_slave_0) entered disabled state [ 462.863059][ T7503] bridge_slave_0: entered allmulticast mode [ 462.873176][ T7503] bridge_slave_0: entered promiscuous mode [ 462.984429][ T3872] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 463.223753][ T7503] bridge0: port 2(bridge_slave_1) entered blocking state [ 463.231617][ T7503] bridge0: port 2(bridge_slave_1) entered disabled state [ 463.239818][ T7503] bridge_slave_1: entered allmulticast mode [ 463.249897][ T7503] bridge_slave_1: entered promiscuous mode [ 463.287920][ T3872] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 464.417777][ T3872] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 464.787189][ T7503] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 464.995100][ T7503] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 465.392243][ T7609] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 465.481158][ T3872] bridge_slave_1: left allmulticast mode [ 465.486965][ T3872] bridge_slave_1: left promiscuous mode [ 465.493522][ T3872] bridge0: port 2(bridge_slave_1) entered disabled state [ 465.606901][ T3872] bridge_slave_0: left allmulticast mode [ 465.613483][ T3872] bridge_slave_0: left promiscuous mode [ 465.620475][ T3872] bridge0: port 1(bridge_slave_0) entered disabled state [ 466.526297][ T3872] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 466.636990][ T3872] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 466.661608][ T3872] bond0 (unregistering): Released all slaves [ 467.008700][ T7503] team0: Port device team_slave_0 added [ 467.108008][ T7503] team0: Port device team_slave_1 added [ 467.684802][ T7503] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 467.692134][ T7503] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 467.722198][ T7503] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 468.044608][ T7503] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 468.052052][ T7503] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 468.078500][ T7503] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 468.140295][ T7470] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 468.252899][ T7470] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 468.411766][ T7470] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 468.649879][ T7470] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 469.255833][ T3872] hsr_slave_0: left promiscuous mode [ 469.316926][ T3872] hsr_slave_1: left promiscuous mode [ 469.325673][ T3872] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 469.333778][ T3872] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 469.407308][ T3872] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 469.415143][ T3872] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 469.570617][ T3872] veth1_macvtap: left promiscuous mode [ 469.576373][ T3872] veth0_macvtap: left promiscuous mode [ 469.582629][ T3872] veth1_vlan: left promiscuous mode [ 469.588230][ T3872] veth0_vlan: left promiscuous mode [ 470.384207][ T12] smc: removing ib device syz0 [ 470.565382][ T3872] team0 (unregistering): Port device team_slave_1 removed [ 470.631911][ T3872] team0 (unregistering): Port device team_slave_0 removed [ 471.714161][ T7503] hsr_slave_0: entered promiscuous mode [ 471.724985][ T7503] hsr_slave_1: entered promiscuous mode [ 471.734224][ T7503] debugfs: 'hsr0' already exists in 'hsr' [ 471.740279][ T7503] Cannot create hsr debugfs directory [ 473.521096][ T9] syz0: Port: 1 Link DOWN [ 475.164687][ T5819] Bluetooth: hci3: unexpected cc 0x204b length: 9 > 3 [ 475.172477][ T5819] Bluetooth: hci3: unexpected event for opcode 0x204b [ 476.324595][ T7470] 8021q: adding VLAN 0 to HW filter on device bond0 [ 476.881918][ T7470] 8021q: adding VLAN 0 to HW filter on device team0 [ 477.059421][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 477.066993][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 477.195178][ T5872] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 477.296625][ T7673] binder_alloc: 7671: binder_alloc_buf, no vma [ 477.343512][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 477.351316][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 477.483489][ T5872] usb 3-1: too many configurations: 9, using maximum allowed: 8 [ 477.553221][ T5872] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 477.562921][ T5872] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 477.574725][ T5872] usb 3-1: config 0 interface 0 has no altsetting 0 [ 477.622535][ T7503] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 477.639648][ T5872] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 477.651532][ T5872] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 477.664055][ T5872] usb 3-1: config 0 interface 0 has no altsetting 0 [ 477.713506][ T5872] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 477.723528][ T5872] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 477.734912][ T5872] usb 3-1: config 0 interface 0 has no altsetting 0 [ 477.791481][ T5872] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 477.802257][ T7503] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 477.806833][ T5872] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 477.825138][ T5872] usb 3-1: config 0 interface 0 has no altsetting 0 [ 477.996030][ T5872] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 478.005365][ T5872] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 478.016959][ T5872] usb 3-1: config 0 interface 0 has no altsetting 0 [ 478.032240][ T5872] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 478.041521][ T5872] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 478.055466][ T5872] usb 3-1: config 0 interface 0 has no altsetting 0 [ 478.068105][ T5872] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 478.077533][ T5872] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 478.090160][ T5872] usb 3-1: config 0 interface 0 has no altsetting 0 [ 478.161192][ T5872] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 478.170509][ T5872] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 478.182575][ T5872] usb 3-1: config 0 interface 0 has no altsetting 0 [ 478.311484][ T7503] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 478.392595][ T5872] usb 3-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 478.402361][ T5872] usb 3-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 478.411237][ T5872] usb 3-1: Product: syz [ 478.415615][ T5872] usb 3-1: Manufacturer: syz [ 478.420546][ T5872] usb 3-1: SerialNumber: syz [ 478.435949][ T5872] usb 3-1: config 0 descriptor?? [ 478.494972][ T7503] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 478.734470][ T5872] yurex 3-1:0.0: USB YUREX device now attached to Yurex #0 [ 480.677227][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 480.684839][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 481.131541][ T7503] 8021q: adding VLAN 0 to HW filter on device bond0 [ 481.159058][ T5872] usb 3-1: USB disconnect, device number 2 [ 481.228476][ T5872] yurex 3-1:0.0: USB YUREX #0 now disconnected [ 481.482674][ T7503] 8021q: adding VLAN 0 to HW filter on device team0 [ 481.681861][ T3440] bridge0: port 1(bridge_slave_0) entered blocking state [ 481.689616][ T3440] bridge0: port 1(bridge_slave_0) entered forwarding state [ 481.877087][ T3440] bridge0: port 2(bridge_slave_1) entered blocking state [ 481.884761][ T3440] bridge0: port 2(bridge_slave_1) entered forwarding state [ 482.516163][ T7470] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 483.872288][ T7719] tipc: Enabled bearer , priority 0 [ 483.958330][ T7719] syzkaller0: entered promiscuous mode [ 483.964404][ T7719] syzkaller0: entered allmulticast mode [ 484.100546][ T2034] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 484.154173][ T7719] tipc: Resetting bearer [ 484.288449][ T7716] tipc: Resetting bearer [ 484.319973][ T2034] usb 7-1: Using ep0 maxpacket: 8 [ 484.367699][ T2034] usb 7-1: config index 0 descriptor too short (expected 301, got 45) [ 484.376799][ T2034] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 484.387007][ T2034] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 484.397140][ T2034] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 484.410683][ T2034] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 484.425498][ T2034] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 484.434850][ T2034] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 484.497190][ T7716] tipc: Disabling bearer [ 484.995324][ T2034] usb 7-1: GET_CAPABILITIES returned 0 [ 485.001640][ T2034] usbtmc 7-1:16.0: can't read capabilities [ 485.213372][ T5871] usb 7-1: USB disconnect, device number 3 [ 485.510176][ T2034] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 485.733794][ T2034] usb 4-1: Using ep0 maxpacket: 8 [ 485.791069][ T2034] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 485.804039][ T2034] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 485.816298][ T2034] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 485.826610][ T2034] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 485.842882][ T2034] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 485.853413][ T2034] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 486.015957][ T7503] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 486.530416][ T2034] usb 4-1: GET_CAPABILITIES returned 2f [ 486.536543][ T2034] usbtmc 4-1:16.0: can't read capabilities [ 486.786575][ T2034] usb 4-1: USB disconnect, device number 4 [ 487.717239][ T7470] veth0_vlan: entered promiscuous mode [ 487.950769][ T7470] veth1_vlan: entered promiscuous mode [ 488.651132][ T7470] veth0_macvtap: entered promiscuous mode [ 488.748812][ T7470] veth1_macvtap: entered promiscuous mode [ 488.836226][ T7752] tipc: Enabled bearer , priority 0 [ 488.947568][ T7752] syzkaller0: entered promiscuous mode [ 488.955013][ T7752] syzkaller0: entered allmulticast mode [ 489.593737][ T7762] tipc: Resetting bearer [ 489.688598][ T14] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 489.778037][ T7749] tipc: Resetting bearer [ 489.854291][ T7749] tipc: Disabling bearer [ 490.098138][ T14] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 490.353294][ T14] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 490.457670][ T7470] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 490.623877][ T14] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 490.737192][ T7777] tipc: Started in network mode [ 490.742708][ T7777] tipc: Node identity deb39749d69e, cluster identity 4711 [ 490.758042][ T7777] tipc: Enabled bearer , priority 0 [ 490.793502][ T7470] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 490.868038][ T7771] syzkaller0: entered promiscuous mode [ 490.874168][ T7771] syzkaller0: entered allmulticast mode [ 490.983837][ T7775] tipc: Resetting bearer [ 490.991086][ T4409] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 491.045217][ T4409] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 491.217894][ T4409] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 491.248454][ T7769] tipc: Resetting bearer [ 491.298788][ T7769] tipc: Disabling bearer [ 491.399747][ T4409] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 491.583132][ T14] bridge_slave_1: left allmulticast mode [ 491.589188][ T14] bridge_slave_1: left promiscuous mode [ 491.596887][ T14] bridge0: port 2(bridge_slave_1) entered disabled state [ 491.711538][ T14] bridge_slave_0: left allmulticast mode [ 491.717512][ T14] bridge_slave_0: left promiscuous mode [ 491.724671][ T14] bridge0: port 1(bridge_slave_0) entered disabled state [ 493.276828][ T14] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 493.359512][ T14] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 493.388522][ T14] bond0 (unregistering): Released all slaves [ 493.705658][ T7503] veth0_vlan: entered promiscuous mode [ 494.270400][ T7503] veth1_vlan: entered promiscuous mode [ 494.429713][ T14] hsr_slave_0: left promiscuous mode [ 494.645165][ T14] hsr_slave_1: left promiscuous mode [ 494.653522][ T14] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 494.661396][ T14] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 494.734467][ T14] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 494.744348][ T14] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 495.179676][ T14] veth1_macvtap: left promiscuous mode [ 495.185449][ T14] veth0_macvtap: left promiscuous mode [ 495.191665][ T14] veth1_vlan: left promiscuous mode [ 495.197233][ T14] veth0_vlan: left promiscuous mode [ 496.143763][ T14] team0 (unregistering): Port device team_slave_1 removed [ 496.222907][ T14] team0 (unregistering): Port device team_slave_0 removed [ 497.062764][ T7816] tipc: Enabled bearer , priority 0 [ 497.142159][ T7819] syzkaller0: entered promiscuous mode [ 497.151790][ T7819] syzkaller0: entered allmulticast mode [ 497.447332][ T7503] veth0_macvtap: entered promiscuous mode [ 497.586404][ T7503] veth1_macvtap: entered promiscuous mode [ 497.823077][ T7503] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 497.875216][ T14] IPVS: stop unused estimator thread 0... [ 497.988688][ T7503] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 498.156323][ T3457] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 498.243165][ T3849] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 498.295299][ T3849] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 498.344886][ T7819] tipc: Resetting bearer [ 498.537631][ T7819] tipc: Disabling bearer [ 498.951440][ T3849] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 501.652587][ T7886] tipc: Enabled bearer , priority 0 [ 501.724604][ T7886] syzkaller0: entered promiscuous mode [ 501.730699][ T7886] syzkaller0: entered allmulticast mode [ 501.868178][ T7884] tipc: Resetting bearer [ 501.967877][ T7884] tipc: Disabling bearer [ 504.646073][ T4370] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 504.654722][ T4370] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 505.171698][ T14] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 505.180068][ T14] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 505.346957][ T7932] netlink: 8 bytes leftover after parsing attributes in process `syz.2.570'. [ 505.539758][ T7933] tipc: Enabled bearer , priority 0 [ 505.638206][ T7933] syzkaller0: entered promiscuous mode [ 505.644349][ T7933] syzkaller0: entered allmulticast mode [ 505.764445][ T7931] tipc: Resetting bearer [ 505.867634][ T7931] tipc: Disabling bearer [ 507.498391][ T5808] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 507.560525][ T5808] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 507.655026][ T5808] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 507.689759][ T5808] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 507.711244][ T5808] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 509.871643][ T5808] Bluetooth: hci1: command tx timeout [ 510.041890][ T5819] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 510.064035][ T5819] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 510.120738][ T5819] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 510.151869][ T5819] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 510.165551][ T5819] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 510.533339][ T7958] chnl_net:caif_netlink_parms(): no params data found [ 511.101953][ T7992] tipc: Enabled bearer , priority 0 [ 511.123999][ T7992] syzkaller0: entered promiscuous mode [ 511.132732][ T7992] syzkaller0: entered allmulticast mode [ 511.301326][ T7991] tipc: Resetting bearer [ 511.447343][ T7991] tipc: Disabling bearer [ 511.930885][ T5819] Bluetooth: hci1: command tx timeout [ 512.335125][ T5819] Bluetooth: hci2: command tx timeout [ 512.725304][ T7496] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 512.965665][ T7496] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 513.647860][ T7496] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 513.753605][ T7958] bridge0: port 1(bridge_slave_0) entered blocking state [ 513.764821][ T7958] bridge0: port 1(bridge_slave_0) entered disabled state [ 513.773503][ T7958] bridge_slave_0: entered allmulticast mode [ 513.783673][ T7958] bridge_slave_0: entered promiscuous mode [ 513.922027][ T7496] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 514.010319][ T5819] Bluetooth: hci1: command tx timeout [ 514.125342][ T7958] bridge0: port 2(bridge_slave_1) entered blocking state [ 514.133375][ T7958] bridge0: port 2(bridge_slave_1) entered disabled state [ 514.141429][ T7958] bridge_slave_1: entered allmulticast mode [ 514.152278][ T7958] bridge_slave_1: entered promiscuous mode [ 514.312401][ T7984] chnl_net:caif_netlink_parms(): no params data found [ 514.370639][ T8025] netlink: 16 bytes leftover after parsing attributes in process `syz.2.592'. [ 514.433405][ T5819] Bluetooth: hci2: command tx timeout [ 514.617408][ T7958] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 514.850852][ T7958] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 515.254144][ T7496] bridge_slave_1: left allmulticast mode [ 515.260604][ T7496] bridge_slave_1: left promiscuous mode [ 515.267242][ T7496] bridge0: port 2(bridge_slave_1) entered disabled state [ 515.293289][ T7496] bridge_slave_0: left allmulticast mode [ 515.299662][ T7496] bridge_slave_0: left promiscuous mode [ 515.306445][ T7496] bridge0: port 1(bridge_slave_0) entered disabled state [ 516.090860][ T5819] Bluetooth: hci1: command tx timeout [ 516.160518][ T7496] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 516.224269][ T7496] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 516.277027][ T7496] bond0 (unregistering): Released all slaves [ 516.524674][ T5819] Bluetooth: hci2: command tx timeout [ 516.629487][ T7958] team0: Port device team_slave_0 added [ 516.677076][ T8035] tipc: Enabled bearer , priority 0 [ 516.730472][ T8039] syzkaller0: entered promiscuous mode [ 516.736364][ T8039] syzkaller0: entered allmulticast mode [ 516.775339][ T7958] team0: Port device team_slave_1 added [ 517.652039][ T7958] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 517.659770][ T7958] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 517.689920][ T7958] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 517.736496][ T8039] tipc: Resetting bearer [ 517.800180][ T8039] tipc: Disabling bearer [ 518.298777][ T7958] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 518.306176][ T7958] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 518.333678][ T7958] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 518.431882][ T7984] bridge0: port 1(bridge_slave_0) entered blocking state [ 518.443423][ T7984] bridge0: port 1(bridge_slave_0) entered disabled state [ 518.451879][ T7984] bridge_slave_0: entered allmulticast mode [ 518.461878][ T7984] bridge_slave_0: entered promiscuous mode [ 518.638829][ T5819] Bluetooth: hci2: command tx timeout [ 518.645040][ T7496] hsr_slave_0: left promiscuous mode [ 518.656450][ T5819] Bluetooth: hci5: command 0x0406 tx timeout [ 518.709174][ T7496] hsr_slave_1: left promiscuous mode [ 518.718856][ T7496] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 518.726710][ T7496] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 518.914237][ T8074] 9pnet_virtio: no channels available for device syz [ 518.962945][ T7496] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 518.970734][ T7496] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 519.083952][ T7496] veth1_macvtap: left promiscuous mode [ 519.090310][ T7496] veth0_macvtap: left promiscuous mode [ 519.096332][ T7496] veth1_vlan: left promiscuous mode [ 519.102153][ T7496] veth0_vlan: left promiscuous mode [ 520.530201][ T7496] team0 (unregistering): Port device team_slave_1 removed [ 520.629845][ T7496] team0 (unregistering): Port device team_slave_0 removed [ 521.035643][ T8086] Bluetooth: MGMT ver 1.23 [ 521.978620][ T7984] bridge0: port 2(bridge_slave_1) entered blocking state [ 521.988522][ T7984] bridge0: port 2(bridge_slave_1) entered disabled state [ 521.996630][ T7984] bridge_slave_1: entered allmulticast mode [ 522.006504][ T7984] bridge_slave_1: entered promiscuous mode [ 523.454254][ T7984] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 523.634639][ T7984] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 523.661918][ T7958] hsr_slave_0: entered promiscuous mode [ 523.672540][ T7958] hsr_slave_1: entered promiscuous mode [ 524.047472][ T7496] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 524.227571][ T7984] team0: Port device team_slave_0 added [ 524.336533][ T7496] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 524.570792][ T7984] team0: Port device team_slave_1 added [ 524.584465][ T8105] tipc: Enabled bearer , priority 0 [ 524.592387][ T8108] syzkaller0: entered promiscuous mode [ 524.598295][ T8108] syzkaller0: entered allmulticast mode [ 524.721322][ T7496] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 524.908588][ T8104] tipc: Resetting bearer [ 524.985844][ T8104] tipc: Disabling bearer [ 525.124560][ T7496] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 525.531864][ T7984] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 525.539027][ T7984] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 525.568309][ T7984] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 526.065945][ T7984] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 526.073341][ T7984] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 526.103399][ T7984] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 526.265913][ T7496] bridge_slave_1: left allmulticast mode [ 526.272226][ T7496] bridge_slave_1: left promiscuous mode [ 526.278845][ T7496] bridge0: port 2(bridge_slave_1) entered disabled state [ 526.404019][ T7496] bridge_slave_0: left allmulticast mode [ 526.410142][ T7496] bridge_slave_0: left promiscuous mode [ 526.416817][ T7496] bridge0: port 1(bridge_slave_0) entered disabled state [ 528.587758][ T7496] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 528.871642][ T7496] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 528.955633][ T7496] bond0 (unregistering): Released all slaves [ 529.435032][ T7496] hsr_slave_0: left promiscuous mode [ 529.499594][ T7496] hsr_slave_1: left promiscuous mode [ 529.507813][ T7496] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 529.515680][ T7496] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 529.613085][ T7496] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 529.624610][ T7496] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 529.792528][ T7496] veth1_macvtap: left promiscuous mode [ 529.798317][ T7496] veth0_macvtap: left promiscuous mode [ 529.804573][ T7496] veth1_vlan: left promiscuous mode [ 529.810416][ T7496] veth0_vlan: left promiscuous mode [ 531.099158][ T7496] team0 (unregistering): Port device team_slave_1 removed [ 531.191158][ T7496] team0 (unregistering): Port device team_slave_0 removed [ 531.973498][ T8160] tipc: Enabled bearer , priority 0 [ 532.135954][ T8159] tipc: Resetting bearer [ 532.338402][ T7984] hsr_slave_0: entered promiscuous mode [ 532.351037][ T7984] hsr_slave_1: entered promiscuous mode [ 532.360250][ T7984] debugfs: 'hsr0' already exists in 'hsr' [ 532.366184][ T7984] Cannot create hsr debugfs directory [ 532.400611][ T8158] tipc: Disabling bearer [ 533.890858][ T7958] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 533.985558][ T7958] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 534.181627][ T7958] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 534.329755][ T7958] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 534.824072][ T8181] loop3: detected capacity change from 0 to 128 [ 534.904921][ T8181] EXT4-fs (loop3): Test dummy encryption mode enabled [ 535.062090][ T8181] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 535.136624][ T8181] ext4 filesystem being mounted at /151/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 535.265528][ T7984] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 535.376285][ T7984] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 535.511713][ T8181] fscrypt (loop3): Missing crypto API support for AES-256-XTS (API name: "xts(aes)") [ 535.553567][ T7984] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 535.654791][ T7984] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 536.154697][ T5812] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 536.268989][ T7958] 8021q: adding VLAN 0 to HW filter on device bond0 [ 536.576258][ T7958] 8021q: adding VLAN 0 to HW filter on device team0 [ 536.727330][ T3872] bridge0: port 1(bridge_slave_0) entered blocking state [ 536.735001][ T3872] bridge0: port 1(bridge_slave_0) entered forwarding state [ 536.888980][ T3872] bridge0: port 2(bridge_slave_1) entered blocking state [ 536.896644][ T3872] bridge0: port 2(bridge_slave_1) entered forwarding state [ 537.068996][ T8202] tipc: Enabled bearer , priority 0 [ 537.248133][ T8202] tipc: Resetting bearer [ 537.392299][ T8198] tipc: Disabling bearer [ 538.095327][ T7984] 8021q: adding VLAN 0 to HW filter on device bond0 [ 538.383392][ T7984] 8021q: adding VLAN 0 to HW filter on device team0 [ 538.624254][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 538.632165][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 538.781332][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 538.788925][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 540.104078][ T7958] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 540.220996][ T8236] loop2: detected capacity change from 0 to 128 [ 540.406509][ T8236] EXT4-fs (loop2): Test dummy encryption mode enabled [ 540.569005][ T8236] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 540.665343][ T8236] ext4 filesystem being mounted at /164/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 541.015902][ T8236] fscrypt (loop2): Missing crypto API support for AES-256-XTS (API name: "xts(aes)") [ 541.644325][ T5806] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 541.775103][ T7984] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 542.123213][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 542.130042][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 543.738053][ T30] audit: type=1107 audit(1757572087.730:4): pid=8280 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 544.086375][ T7958] veth0_vlan: entered promiscuous mode [ 544.256144][ T7958] veth1_vlan: entered promiscuous mode [ 544.781497][ T7958] veth0_macvtap: entered promiscuous mode [ 544.875499][ T7958] veth1_macvtap: entered promiscuous mode [ 545.143507][ T7958] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 545.152373][ T8293] tipc: Enabled bearer , priority 0 [ 545.290984][ T7958] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 545.397495][ T7496] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 545.461643][ T7452] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 545.488298][ T8296] tipc: Resetting bearer [ 545.529231][ T7452] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 545.591484][ T7452] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 545.643739][ T8292] tipc: Disabling bearer [ 546.027665][ T7984] veth0_vlan: entered promiscuous mode [ 546.186944][ T7984] veth1_vlan: entered promiscuous mode [ 546.933756][ T7984] veth0_macvtap: entered promiscuous mode [ 547.048691][ T7984] veth1_macvtap: entered promiscuous mode [ 547.416826][ T7984] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 547.557883][ T7984] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 547.726818][ T57] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 547.773438][ T57] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 547.815596][ T3440] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 547.909713][ T3440] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 555.760075][ T3970] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 555.768107][ T3970] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 556.242067][ T3872] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 556.250445][ T3872] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 558.068144][ T3849] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 558.077019][ T3849] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 558.173233][ T3849] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 558.181722][ T3849] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 559.744113][ T8446] tipc: Enabled bearer , priority 0 [ 559.819082][ T8452] syzkaller0: entered promiscuous mode [ 559.826525][ T8452] syzkaller0: entered allmulticast mode [ 560.031324][ T8446] tipc: Resetting bearer [ 560.090399][ T8443] tipc: Resetting bearer [ 560.134075][ T8443] tipc: Disabling bearer [ 562.067868][ T8488] fuse: Bad value for 'fd' [ 562.929060][ T8494] tipc: Enabled bearer , priority 0 [ 563.031269][ T8502] syzkaller0: entered promiscuous mode [ 563.036997][ T8502] syzkaller0: entered allmulticast mode [ 563.124114][ T8494] tipc: Resetting bearer [ 563.155806][ T8500] tipc: Enabled bearer , priority 0 [ 563.232506][ T8506] syzkaller0: entered promiscuous mode [ 563.238239][ T8506] syzkaller0: entered allmulticast mode [ 563.335654][ T8493] tipc: Resetting bearer [ 563.388697][ T8493] tipc: Disabling bearer [ 563.501014][ T8496] tipc: Resetting bearer [ 563.598055][ T8496] tipc: Disabling bearer [ 565.151162][ T8526] fuse: Bad value for 'fd' [ 566.450646][ T8541] tipc: Enabled bearer , priority 0 [ 566.506026][ T8544] syzkaller0: entered promiscuous mode [ 566.512602][ T8544] syzkaller0: entered allmulticast mode [ 566.711958][ T8541] tipc: Resetting bearer [ 566.795357][ T8539] tipc: Resetting bearer [ 566.913667][ T8539] tipc: Disabling bearer [ 567.028361][ T8549] tipc: Enabled bearer , priority 0 [ 567.116135][ T8547] syzkaller0: entered promiscuous mode [ 567.122039][ T8547] syzkaller0: entered allmulticast mode [ 567.234763][ T8547] tipc: Resetting bearer [ 567.397914][ T8546] tipc: Resetting bearer [ 567.440563][ T8546] tipc: Disabling bearer [ 570.065033][ T8588] tipc: Enabled bearer , priority 0 [ 570.182957][ T8591] syzkaller0: entered promiscuous mode [ 570.188853][ T8591] syzkaller0: entered allmulticast mode [ 570.311160][ T8586] tipc: Resetting bearer [ 570.382162][ T8586] tipc: Disabling bearer [ 573.972919][ T8641] tipc: Started in network mode [ 573.978116][ T8641] tipc: Node identity 0e4083b3d9b8, cluster identity 4711 [ 573.987096][ T8641] tipc: Enabled bearer , priority 0 [ 574.011574][ T8641] syzkaller0: entered promiscuous mode [ 574.017418][ T8641] syzkaller0: entered allmulticast mode [ 574.257294][ T8639] tipc: Resetting bearer [ 574.380001][ T8639] tipc: Disabling bearer [ 575.781626][ T8669] netlink: 4 bytes leftover after parsing attributes in process `syz.6.754'. [ 577.387014][ T5867] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 577.631147][ T5867] usb 3-1: Using ep0 maxpacket: 8 [ 577.721555][ T5867] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 577.733839][ T5867] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 577.744374][ T5867] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 577.754753][ T5867] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 577.764994][ T5867] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 577.778537][ T5867] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 577.792141][ T5867] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 578.124516][ T5867] usbtmc 3-1:16.0: probe with driver usbtmc failed with error -22 [ 581.142339][ T8579] usb 3-1: USB disconnect, device number 3 [ 583.928122][ T8747] loop6: detected capacity change from 0 to 128 [ 584.055042][ T8747] EXT4-fs (loop6): Test dummy encryption mode enabled [ 584.171966][ T8747] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 584.201119][ T8747] ext4 filesystem being mounted at /100/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 584.255414][ T8738] loop3: detected capacity change from 0 to 4096 [ 584.373730][ T8738] EXT4-fs: Ignoring removed mblk_io_submit option [ 584.458315][ T8738] EXT4-fs (loop3): Test dummy encryption mode enabled [ 584.536926][ T8738] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 584.659454][ T8747] fscrypt (loop6): Missing crypto API support for AES-256-XTS (API name: "xts(aes)") [ 585.262637][ T5812] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 585.292033][ T7111] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 586.107742][ T8779] ===================================================== [ 586.115281][ T8779] BUG: KMSAN: uninit-value in eth_type_trans+0x69d/0x9a0 [ 586.122764][ T8779] eth_type_trans+0x69d/0x9a0 [ 586.127696][ T8779] loopback_xmit+0x4fd/0x750 [ 586.132629][ T8779] dev_hard_start_xmit+0x22c/0xa30 [ 586.137988][ T8779] __dev_queue_xmit+0x3c51/0x5e60 [ 586.143473][ T8779] __bpf_redirect+0x162d/0x1760 [ 586.148568][ T8779] bpf_clone_redirect+0x366/0x530 [ 586.153961][ T8779] ___bpf_prog_run+0x1294/0xeba0 [ 586.159081][ T8779] __bpf_prog_run512+0xc5/0x100 [ 586.164358][ T8779] bpf_test_run+0x353/0xab0 [ 586.169081][ T8779] bpf_prog_test_run_skb+0x19f8/0x26c0 [ 586.174983][ T8779] bpf_prog_test_run+0x5c2/0xa40 [ 586.180243][ T8779] __sys_bpf+0x89a/0xed0 [ 586.184673][ T8779] __x64_sys_bpf+0xa4/0xf0 [ 586.189479][ T8779] x64_sys_call+0x3550/0x3e20 [ 586.194396][ T8779] do_syscall_64+0xd9/0x210 [ 586.199072][ T8779] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 586.205292][ T8779] [ 586.207717][ T8779] Uninit was created at: [ 586.212356][ T8779] kmem_cache_alloc_node_noprof+0x818/0xf00 [ 586.218492][ T8779] kmalloc_reserve+0x13c/0x4b0 [ 586.223605][ T8779] pskb_expand_head+0x1fc/0x1610 [ 586.228806][ T8779] skb_ensure_writable+0x44e/0x510 [ 586.234269][ T8779] bpf_clone_redirect+0x1c1/0x530 [ 586.239685][ T8779] ___bpf_prog_run+0x1294/0xeba0 [ 586.244816][ T8779] __bpf_prog_run512+0xc5/0x100 [ 586.249994][ T8779] bpf_test_run+0x353/0xab0 [ 586.254712][ T8779] bpf_prog_test_run_skb+0x19f8/0x26c0 [ 586.260528][ T8779] bpf_prog_test_run+0x5c2/0xa40 [ 586.265658][ T8779] __sys_bpf+0x89a/0xed0 [ 586.270209][ T8779] __x64_sys_bpf+0xa4/0xf0 [ 586.274859][ T8779] x64_sys_call+0x3550/0x3e20 [ 586.279898][ T8779] do_syscall_64+0xd9/0x210 [ 586.284574][ T8779] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 586.290878][ T8779] [ 586.293346][ T8779] CPU: 1 UID: 0 PID: 8779 Comm: syz.3.782 Not tainted syzkaller #0 PREEMPT(none) [ 586.302878][ T8779] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 586.313220][ T8779] ===================================================== [ 586.320423][ T8779] Disabling lock debugging due to kernel taint [ 586.326707][ T8779] Kernel panic - not syncing: kmsan.panic set ... [ 586.333308][ T8779] CPU: 1 UID: 0 PID: 8779 Comm: syz.3.782 Tainted: G B syzkaller #0 PREEMPT(none) [ 586.344311][ T8779] Tainted: [B]=BAD_PAGE [ 586.348583][ T8779] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 586.358816][ T8779] Call Trace: [ 586.362237][ T8779] [ 586.365293][ T8779] __dump_stack+0x26/0x30 [ 586.369852][ T8779] dump_stack_lvl+0x53/0x270 [ 586.374681][ T8779] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 586.380740][ T8779] dump_stack+0x1e/0x25 [ 586.385122][ T8779] vpanic+0x361/0xc50 [ 586.389344][ T8779] panic+0x15d/0x160 [ 586.393497][ T8779] kmsan_report+0x31c/0x320 [ 586.398215][ T8779] ? is_module_text_address+0x1f4/0x240 [ 586.403958][ T8779] ? __msan_warning+0x1b/0x30 [ 586.408833][ T8779] ? eth_type_trans+0x69d/0x9a0 [ 586.413930][ T8779] ? loopback_xmit+0x4fd/0x750 [ 586.418892][ T8779] ? dev_hard_start_xmit+0x22c/0xa30 [ 586.424418][ T8779] ? __dev_queue_xmit+0x3c51/0x5e60 [ 586.429863][ T8779] ? __bpf_redirect+0x162d/0x1760 [ 586.435133][ T8779] ? bpf_clone_redirect+0x366/0x530 [ 586.440620][ T8779] ? ___bpf_prog_run+0x1294/0xeba0 [ 586.445930][ T8779] ? __bpf_prog_run512+0xc5/0x100 [ 586.451156][ T8779] ? bpf_test_run+0x353/0xab0 [ 586.456064][ T8779] ? bpf_prog_test_run_skb+0x19f8/0x26c0 [ 586.461936][ T8779] ? bpf_prog_test_run+0x5c2/0xa40 [ 586.467253][ T8779] ? __sys_bpf+0x89a/0xed0 [ 586.471844][ T8779] ? __x64_sys_bpf+0xa4/0xf0 [ 586.476670][ T8779] ? x64_sys_call+0x3550/0x3e20 [ 586.481773][ T8779] ? do_syscall_64+0xd9/0x210 [ 586.486641][ T8779] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 586.492928][ T8779] ? kmsan_get_metadata+0xfb/0x160 [ 586.498268][ T8779] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 586.504310][ T8779] ? eth_get_headlen+0x141/0x1e0 [ 586.509496][ T8779] ? filter_irq_stacks+0x49/0x190 [ 586.514724][ T8779] ? stack_depot_save_flags+0x35/0x7b0 [ 586.520395][ T8779] ? kmsan_get_metadata+0xfb/0x160 [ 586.525730][ T8779] ? kmsan_internal_set_shadow_origin+0x79/0x110 [ 586.532287][ T8779] ? kmsan_get_metadata+0xfb/0x160 [ 586.537639][ T8779] __msan_warning+0x1b/0x30 [ 586.542345][ T8779] eth_type_trans+0x69d/0x9a0 [ 586.547306][ T8779] loopback_xmit+0x4fd/0x750 [ 586.552114][ T8779] ? __pfx_loopback_xmit+0x10/0x10 [ 586.557432][ T8779] dev_hard_start_xmit+0x22c/0xa30 [ 586.562840][ T8779] __dev_queue_xmit+0x3c51/0x5e60 [ 586.568128][ T8779] ? skb_release_data+0xa12/0xac0 [ 586.573401][ T8779] ? kmsan_internal_memmove_metadata+0x91/0x230 [ 586.579880][ T8779] ? kmsan_get_metadata+0xfb/0x160 [ 586.585242][ T8779] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 586.591296][ T8779] ? __dev_queue_xmit+0x30c/0x5e60 [ 586.596712][ T8779] __bpf_redirect+0x162d/0x1760 [ 586.601838][ T8779] ? kmsan_get_metadata+0xfb/0x160 [ 586.607205][ T8779] bpf_clone_redirect+0x366/0x530 [ 586.612526][ T8779] ___bpf_prog_run+0x1294/0xeba0 [ 586.617737][ T8779] __bpf_prog_run512+0xc5/0x100 [ 586.622825][ T8779] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 586.628879][ T8779] ? preempt_schedule_irq+0x91/0x110 [ 586.634409][ T8779] ? filter_irq_stacks+0x49/0x190 [ 586.639641][ T8779] ? stack_depot_save_flags+0x35/0x7b0 [ 586.645316][ T8779] ? kmsan_get_metadata+0xfb/0x160 [ 586.650674][ T8779] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 586.656720][ T8779] ? ktime_get+0x530/0x590 [ 586.661379][ T8779] ? kmsan_get_metadata+0xfb/0x160 [ 586.666739][ T8779] ? kmsan_get_metadata+0xfb/0x160 [ 586.672082][ T8779] ? kmsan_internal_set_shadow_origin+0x79/0x110 [ 586.678630][ T8779] ? kmsan_get_metadata+0x150/0x160 [ 586.684063][ T8779] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 586.690102][ T8779] ? __pfx___bpf_prog_run512+0x10/0x10 [ 586.695773][ T8779] ? __pfx___bpf_prog_run512+0x10/0x10 [ 586.701455][ T8779] bpf_test_run+0x353/0xab0 [ 586.706302][ T8779] ? kmsan_get_metadata+0xfb/0x160 [ 586.711645][ T8779] ? kmsan_internal_set_shadow_origin+0x79/0x110 [ 586.718187][ T8779] ? kmsan_get_metadata+0xfb/0x160 [ 586.723531][ T8779] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 586.729583][ T8779] ? bpf_test_run+0x1b0/0xab0 [ 586.734527][ T8779] bpf_prog_test_run_skb+0x19f8/0x26c0 [ 586.740285][ T8779] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 586.746345][ T8779] bpf_prog_test_run+0x5c2/0xa40 [ 586.751560][ T8779] __sys_bpf+0x89a/0xed0 [ 586.756048][ T8779] __x64_sys_bpf+0xa4/0xf0 [ 586.760716][ T8779] x64_sys_call+0x3550/0x3e20 [ 586.765644][ T8779] do_syscall_64+0xd9/0x210 [ 586.770333][ T8779] ? irqentry_exit+0x16/0x60 [ 586.775172][ T8779] ? clear_bhb_loop+0x40/0x90 [ 586.780070][ T8779] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 586.786182][ T8779] RIP: 0033:0x7fa5a518eba9 [ 586.790767][ T8779] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 586.810587][ T8779] RSP: 002b:00007fa5a5fe9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 586.819212][ T8779] RAX: ffffffffffffffda RBX: 00007fa5a53d5fa0 RCX: 00007fa5a518eba9 [ 586.827350][ T8779] RDX: 000000000000004c RSI: 0000200000000380 RDI: 000000000000000a [ 586.835497][ T8779] RBP: 00007fa5a5211e19 R08: 0000000000000000 R09: 0000000000000000 [ 586.843725][ T8779] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 586.851850][ T8779] R13: 00007fa5a53d6038 R14: 00007fa5a53d5fa0 R15: 00007ffd8ccb3d78 [ 586.860029][ T8779] [ 586.863549][ T8779] Kernel Offset: disabled [ 586.867951][ T8779] Rebooting in 86400 seconds..