last executing test programs: 5m34.576377862s ago: executing program 4 (id=93): r0 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="00070000420091"], 0xfe33) recvmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000003700)=""/4081, 0xff1}, {&(0x7f0000001240)=""/118, 0x76}, {&(0x7f0000001300)=""/208, 0xd0}, {&(0x7f0000000140)=""/165, 0xa5}, {&(0x7f0000000000)=""/92, 0x5c}], 0x5}, 0x60012002) 5m33.027426779s ago: executing program 4 (id=96): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x6, 0x21, &(0x7f0000000000)={@private2}, 0x20) 5m31.374509207s ago: executing program 4 (id=99): r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x20081, 0x0) write$vga_arbiter(r0, &(0x7f0000000080)=ANY=[], 0x13) 5m30.626560768s ago: executing program 4 (id=102): r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000280), 0x80200, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0x40085112, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="0500"/16, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=0x0, @ANYRES64=0xea60, @ANYBLOB="0000000001"], 0x38}, 0x2}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = dup3(r3, r4, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000000000006700000008000100000000000c00b10000008001230000000800c300741300000800c4"], 0x38}}, 0x10) r7 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r7, 0x7a7, &(0x7f0000000100)=0x80000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r7, 0x7a0, &(0x7f0000000140)={@my=0x1}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r7, 0x7a8, &(0x7f00000000c0)={{@my=0x1, 0x4}, @local, 0xd, 0x0, 0x5}) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000400)='./file0\x00', 0x806, &(0x7f0000000440)={[{@rodir}, {@shortname_winnt}, {@uni_xlateno}, {@uni_xlate}, {@utf8no}, {@utf8}, {@shortname_winnt}, {@utf8no}, {@uni_xlateno}, {@fat=@flush}, {@shortname_mixed}, {@shortname_lower}, {@fat=@dos1xfloppy}, {@shortname_winnt}, {@shortname_lower}, {@utf8}]}, 0xfe, 0x2ae, &(0x7f0000000a40)="$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") mount$nfs(&(0x7f0000000100)='\xd2\xa6.', 0x0, 0x0, 0x44, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) bind$bt_l2cap(r2, &(0x7f00000000c0)={0x1f, 0x0, @none, 0x0, 0x2}, 0xe) bind$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x1001, @none}, 0xe) syz_open_dev$midi(&(0x7f0000000000), 0x2, 0x149100) 5m26.673585597s ago: executing program 4 (id=109): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x80, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdir(&(0x7f0000000440)='./file0\x00', 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x1607010, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x34}}, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x87}, './file0\x00'}) sendto$inet6(r0, &(0x7f0000000040)='l', 0x1, 0x0, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 5m26.448503668s ago: executing program 3 (id=110): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4c0000001000030400"/20, @ANYBLOB="b55fac88000000001c00128009000100766c61", @ANYRES32, @ANYBLOB='\b\x00A'], 0x4c}}, 0x0) 5m24.946092626s ago: executing program 4 (id=115): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7b, 0x4) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600), 0x4) sendto$inet(r0, &(0x7f0000000700)="0c268a927f1f6588b967481241ba78600a34f65ac618ded8974895abeaf4b4834ff959bcecc7a95425a3a07e758044ab4ea6f7c555d88fecf90b037511bf746bec66ba", 0x994b6e03113064ae, 0x0, 0x0, 0x0) recvmsg(r0, &(0x7f0000001500)={0x0, 0x0, &(0x7f0000002200)=[{&(0x7f00000035c0)=""/4106, 0x100a}], 0x1, 0x0, 0x0, 0x407006}, 0x104) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='hybla\x00', 0x6) 5m23.121325172s ago: executing program 3 (id=117): syz_mount_image$romfs(&(0x7f0000000140), &(0x7f0000000280)='./file0\x00', 0x208008, &(0x7f0000000000)=ANY=[], 0x80, 0x14e, &(0x7f0000000e40)="$eJzs2r9Kw0AcB/AfWBE6OjoFKlHQ/Ne66ljcfIPQ5tLgxZREkPYFxElQOAdfQvAJfISMbroI+hKRmKMmUWxRIR2+n+W+8Gvvfr0rN50WR6HFEo1oe3R19LIaR6HSdfb6zGIuFXpEpOQhzbIbnb54mtbTjPRvPtCs9bdi7Gz64vCCBdyzm24JAAAAAAAAAAAAAAAAAAAAAADmpLZlaA9FeM4C7lmlajKeHLuce3HSUHuNUxX5houY4Lf5/jiV+tYrkbqfp0AcxHndrH7/WoaNoeDP9f01TsORkYwnWhC6vud7J7btdM0d09y1jY+5jPqM6p3sidLs3tQpk6b10nuzx3nem8nzb60F4vKsvtrn+SMg/DX0WvhH/S4s0UK0UQozbpXWzHtnUbSXi3Gw4nQe8vtP70d8IIv/u2dyJaqWmvrhAPCz9wAAAP//MKk80A==") mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f0000000300)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) chdir(&(0x7f0000000140)='./file0\x00') chmod(&(0x7f0000000040)='./file0\x00', 0x4) r0 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) openat$cgroup(r1, &(0x7f00000000c0)='syz1\x00', 0x200002, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0) open_by_handle_at(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="0c000000fe00030004"], 0x408100) r3 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000600)) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, 0x0, 0x0) open(0x0, 0x0, 0x88) r5 = syz_open_dev$dri(0x0, 0x50, 0x40) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r5, 0xc02064b9, 0x0) 5m21.721299476s ago: executing program 3 (id=121): r0 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="0007000042009103"], 0xfe33) recvmsg(r0, 0x0, 0x60012002) 5m20.853453679s ago: executing program 3 (id=124): r0 = socket$inet6(0xa, 0x80002, 0x88) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000ff010000850000000e000000850000005000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x9) syz_mount_image$vfat(&(0x7f0000000440), &(0x7f0000000000)='./file1\x00', 0x844, &(0x7f0000000bc0)=ANY=[@ANYBLOB="00694ba7e2ae8959c3a1a1006a809454d1b9e49ca9bcfc4fc4988c654d24bf47f27cf5182a66907790f63da0382e7e8b6fa7bc01215b438ad0a0c54300383d371f98a51969e94000800000d1a09c066c83c90eb1659f642d9740b323fc7da8f03a2e547ee2dd62af8c0b51da0e3b75a1ccf23bb04d83fa977502819dcc5fbe622c4c35880cfe115f8743ddf5255ed6532d8ce9391e704bb6c64bf7bd3c353b218ccf99b00749bc4d22cdc096d92b7e3f7731bfbfc5af583df7f136a59dade8dafa14bcefad343a259d07d5b6e7152b1031acbba628c1f5310e53cd87b92c6be007f8aa026ce147dfd51281dba68af9b738f0a097f69b277ef9a9bd369a107367e5ed6f27bd9ef071148bc60b4845accf826763066baf9b092754602e7fe53fbd347a39262850be890a0300863518f5cd8e1d6d388c66123eac43a65f0b3a585c80576666c4ee5d579c349d415741bd3de7fd5af2fa9b50f63bbd192fa1ee4eb9d2eb2b4afffa5dd5a32f292bffcecbcc18071375b13aa12b581b2b23e80fb7a1eca9816df0137b589441fca8b569993caed53c6d9deae218"], 0x1, 0x253, &(0x7f00000004c0)="$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") execve(&(0x7f0000000340)='./file0\x00', 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x4, r3, 0x10100, 0x1a724}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_PRIMARY_RESELECT={0x5, 0xc, 0x1}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40050814}, 0x4000044) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x1000007, 0x2172, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil) r4 = openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff) write$binfmt_script(r4, &(0x7f0000000440)={'#! ', './file0', [{0x20, '\aB\xd1_w\xe1\xfe\x12\xebN\xbf\x88\xab#\xe6W\xe4\xba`N\xac\xe8\xf4\xb0H\xb8T)4\xa2\x8d\x81\x02\xfa\xe0\'M\x88\xfc7\x02\xe9)\xd8m+bJ\xd4\b]\xcd\xdc\x06v\xe6\x84\x9e\x12\xd7r\xb3\xde\x04\x17\xec\x81\x81\xff\xbatz\x85\bKx\x9fr\xca\xd6?\x89P\xbb\xbc\xc6\xe7\xa3\x02T\x99j\xa1\x87\x18\x925\xc1SP`\b\x14\x81p\xb2\t\x8fT\xeb\x0f\xe4\xb8\xf3!y\x88j\x1d\xa3\xd7\xcb\xb9\xea9\xc36\xeb\xc8\xf8\x87%\xb7\xf2\xe3\xbc\xbe\x13\xb3g\xcd\xa5\xc8\x1f?\xd6.\x97\x95\x88\x8b\x81X\xc3\xde\xb0\xc3u\xc6\xe8\xdc\x1f\x8d\xa4\xc0*H\x87\x1ds\xd3\xf2\xbdO\xc9\xaf\x05\x87\xbd\xdd/9\xbfI\xec\x9e\x9e'}, {0x20, '/('}, {0x20, '\x82!{\xca\x7f@P\x93\xa0\x8e\xe8\x15n\x99\x05\x92)\x89o9\xd0\xd7\xda\xacU\xdd\xaa\xc8\xb0\x7f\xfe~\t\xfa\xd8!\x1e_\b\xc8\x8c'}, {0x20, '#! '}, {0x20, '\\'}, {0x20, '\x98X\xaf-\x86\x9au[l\xb3\xf9\x18#\'\xb9[\'(,\\[\xff\x1d\x9e*%'}], 0xa, "222b979d925f5961ab633c459e74928253f30b5257825ada412771b26ac000a8d8abc1eeee85124f21c9059adf2c4d471f4b5f5d8bc4940861b457b4dcb776c8dd645ab5455b2fcfcc3893569d894aec4974bc22d689be96344e8e2d00e5555310e934aae220277c0f716354fbedbdb4ea518d0424e1331d47d9b46f14f7847f7b649b468d391a2ed480f8df99b5aa4921e985fc407075829ee195c9a8277709b98c212e98e499238d1068d3578465f0826dca11faaa173800fbf25968de86b5904c566293962146f7fa5dec2bfa020000"}, 0x1e6) munmap(&(0x7f0000004000/0x2000)=nil, 0x2000) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[]) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000000080)) 5m17.530684915s ago: executing program 3 (id=132): r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000280), 0x80200, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0x40085112, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$can_bcm(0xffffffffffffffff, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = dup3(r3, r4, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000000000006700000008000100000000000c00b10000008001230000000800c300741300000800c4"], 0x38}}, 0x10) r7 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r7, 0x7a7, &(0x7f0000000100)=0x80000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r7, 0x7a0, &(0x7f0000000140)={@my=0x1}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r7, 0x7a8, &(0x7f00000000c0)={{@my=0x1, 0x4}, @local, 0xd, 0x0, 0x5}) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000400)='./file0\x00', 0x806, &(0x7f0000000440)={[{@rodir}, {@shortname_winnt}, {@uni_xlateno}, {@uni_xlate}, {@utf8no}, {@utf8}, {@shortname_winnt}, {@utf8no}, {@uni_xlateno}, {@fat=@flush}, {@shortname_mixed}, {@shortname_lower}, {@fat=@dos1xfloppy}, {@shortname_winnt}, {@shortname_lower}, {@utf8}]}, 0xfe, 0x2ae, &(0x7f0000000a40)="$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") mount$nfs(&(0x7f0000000100)='\xd2\xa6.', 0x0, 0x0, 0x44, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) bind$bt_l2cap(r2, &(0x7f00000000c0)={0x1f, 0x0, @none, 0x0, 0x2}, 0xe) bind$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x1001, @none}, 0xe) syz_open_dev$midi(&(0x7f0000000000), 0x2, 0x149100) 5m15.056417426s ago: executing program 3 (id=136): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={0x0, 0xb8}}, 0x4000084) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000080)=0x474c, 0x4) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(0xffffffffffffffff, 0x402c5342, &(0x7f0000000040)={0x0, 0x7a11c, 0x60}) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$inet_int(r0, 0x0, 0x17, &(0x7f0000000180)=0x40000000, 0x4) recvmmsg(r0, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0) 5m12.342368066s ago: executing program 32 (id=136): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={0x0, 0xb8}}, 0x4000084) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000080)=0x474c, 0x4) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(0xffffffffffffffff, 0x402c5342, &(0x7f0000000040)={0x0, 0x7a11c, 0x60}) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$inet_int(r0, 0x0, 0x17, &(0x7f0000000180)=0x40000000, 0x4) recvmmsg(r0, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0) 5m9.531996759s ago: executing program 33 (id=115): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7b, 0x4) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600), 0x4) sendto$inet(r0, &(0x7f0000000700)="0c268a927f1f6588b967481241ba78600a34f65ac618ded8974895abeaf4b4834ff959bcecc7a95425a3a07e758044ab4ea6f7c555d88fecf90b037511bf746bec66ba", 0x994b6e03113064ae, 0x0, 0x0, 0x0) recvmsg(r0, &(0x7f0000001500)={0x0, 0x0, &(0x7f0000002200)=[{&(0x7f00000035c0)=""/4106, 0x100a}], 0x1, 0x0, 0x0, 0x407006}, 0x104) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='hybla\x00', 0x6) 3m11.190224756s ago: executing program 6 (id=421): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x4e20, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20, @local}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000004680)=ANY=[@ANYBLOB="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"], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0x436, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x7, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r2 = socket$kcm(0x29, 0x2, 0x0) recvmmsg(r2, &(0x7f0000000380)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000180)={r0, r1}) sendmmsg(r0, &(0x7f000000bb40)=[{{0x0, 0x0, &(0x7f0000002540)=[{0x0}], 0x1}}], 0x1, 0x40800) 3m9.346194027s ago: executing program 6 (id=424): r0 = memfd_create(&(0x7f00000005c0)='\x9d#\x00\xe6Z\x00\xafq%\xa5\x83\xa6\xa1\x00\x83y\xf3\xb2\xe6b\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x17?$^\xe1O1\x99\xc4\xf1h\x15]\xa5%\x1bb\xe1YV\xeb\x91\x83;\xeb\xf1\xd0\xce\xe5\x19T\xff\x01\x00\x00\xe2\xb8b\xe9p\xdd\xa7\x8ej\xc3\x9co\xd9\xae\xcf>/\x05\x00\x00\x00\x15\x00\xbe`\'\xcb\xb6\xaf\xe4h\xfc\x14\x06\xb5\x03\x8a\xc40\xbe\xe3\x93A\x15\xec\xdb\xaa\t9\x11A\x84$&0\xdd\x19\x86\x90\xbe\xd7\xdc\n\xcbC\x15\xfc\x00\xe3\xde\x00\x00\xa8\xcbo\x90\xe1{\x84\xb5\x82q\x19\xacS\x88|\x99\xfd\x9eS\x80\xcb\x14G\xfa\xff\xff\xff\xff\xff\xff\xff\xcd\xf0%\x97!\xba\xe3J\xc2t\x96\xf8\xb1\xd2\x168\xbf`$\xbf\xca\xea\xa3\xca\x8e-k\x16\xdf\xb9q\xb6^r\xd4\xb5X\\\xdbD\n\x03G\x00\x04\x00\x00\xbc\xac\x18\xba\xce\xb3%QF\xff\b\x9dh\xcb)\xf4f\x12[\xf9\r\t\xef{h\xb0\xc0:\x8f|\x8f\x066`M\x11\x1c\xb0*8\v\x1e\xcf\x03\xd3U\xe6\xa9B\n\xc9%\x82\xed#?\xab\xd6B[\xc9\x00\xf5]\x81\xf3\xfd\x06M\xbe\xf9\xba\x9em\xe9\"\x03\x933P\xa3\xcc\x9b\f\xa7\x8f\x91O\xc9\xb9\x14M\x8b\xd0\xc0\xb8E%\xd9\xd8w\x00k\x042Y\xd9\xc5\xe59\xa95\xd1m\xd8hCuZYi\x10D\xb9\xe6\xff\x04K%yH\xe5\x00\x00\x00D~\xc9=\x95\xd4\x18\x97ie\xb7\x11\xcbcE\x0eAU\xe6\x19*\x98}!\xde\xf1\xd3\xf7\x84\x9c\xb4\xf1\x17\xf9-\xc6\xba\xe3\xa8oz\b\xfe\xbc\x1b\xff$\xac=\xf2V**\x8f\x84Oq\xe3\xa16\x1d{f\x91\xbbBORJ\xbcm\xfb\xb0Q\x1c\xd9\x1bg\xf5\xc9p\xc5o\x90\xb0\xd5\x90\x86\x19\xafC\xee7\x91O)\xf1Q\xe9\x02\x1ci+g\xb8u\xf0\x00\x00\x00\x00\x00\x00\x00\x05t\v\x12\x03\xf5hRQ\b\x97\xc3d-\xfb\x12\x1e\xb2\xce\x9br*M\x10\xd5g\fwx\xb8\xa9\t\xc5\xf9W\x9b\x06\xcc\xa0\x1a\x03\v\x14n7\x92{\x8bH\x9d\x95\xe31\xf4hy\xf6%\xcdC\x9cT\xec57\xbd\xd5\x81\xd9\x13\x06\xe0\xef\xf3\x17H\xd2\xe3k\xe0\xe3^y\xe3\xbb(fEt\x15\xeb/\x90\xca\xde\x189\xdfN 7}|\xa8 2\xd9;\xfa\xeayZS\x10.\x8b,\xd0\x02J\xf8>\xe9\xf0\r\xc2A\xc8q\x89\"+\xa6\xa9^E94\x01\xb5\xba]\xa8\xe9\x86\xea\xe5\xbaH\x11\x8fLLJ(\xfb\x96\x15\xbb\a\xcbj\x1b\xfdL\x88\xbf\xd7\x00\x00\x00\x00\x00t\xdd\xe7z=N\x9a\xd1\xe8\xe6\xe5\xa5J\xe9\xb5\xb5\xe5\x1e)\xe2\xba\xa0@I\xc9Ve\x19\xff\xc6\xbfT0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@newqdisc={0x68, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x38, 0x2, {{}, [@TCA_NETEM_CORR={0x10}, @TCA_NETEM_REORDER={0xc}]}}}]}, 0x68}}, 0x0) r11 = syz_open_dev$dri(&(0x7f0000000100), 0x1fb, 0x40) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r11, 0xc04064a0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000740), 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r11, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000200)}) ioctl$BTRFS_IOC_SCRUB(r5, 0xc400941b, &(0x7f0000000340)={0x0, 0x8000000000000001, 0x1, 0x1}) 3m6.741187244s ago: executing program 6 (id=429): sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff) r2 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt$inet_dccp_int(r2, 0x10d, 0x4, 0x0, 0x0) r3 = socket(0x840000000002, 0x3, 0x100) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000600)='/sys/power/pm_trace', 0x169a82, 0x0) r6 = syz_io_uring_setup(0xd1, &(0x7f0000000480)={0x0, 0x0, 0x400, 0x0, 0x338}, &(0x7f0000000080)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r7, r8, &(0x7f0000000040)=@IORING_OP_READV=@pass_iovec={0x1, 0x8, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000240)=[{&(0x7f0000001800)=""/224, 0xe0}], 0x1}) io_uring_enter(r6, 0x47ba, 0x0, 0x0, 0x0, 0x0) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000003280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000003500)={'wlan1\x00', 0x0}) socket$inet6_tcp(0xa, 0x1, 0x0) syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000300)='./file0\x00', 0x800, &(0x7f0000000340)=ANY=[@ANYBLOB="616c6c6f775f7574696d653d30303030303030303030303030303030303031303030302c646973636172022c0169643d", @ANYRESHEX=0x0, @ANYBLOB=',iocharset=cp874,allow_utime=00000000000000000004001,umask=00000000000000000000010,errors=continue,uid=', @ANYRESHEX=0x0, @ANYBLOB=',iocharset=cp860,discard,\x00'], 0x3, 0x1510, &(0x7f0000003640)="$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") setxattr$system_posix_acl(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='system.posix_acl_default\x00', &(0x7f0000000340), 0x24, 0x0) listxattr(&(0x7f0000000140)='./file0/../file0\x00', 0x0, 0x11) read$FUSE(r5, &(0x7f0000004b80)={0x2020}, 0x2020) sendmsg$NL80211_CMD_SET_POWER_SAVE(r4, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000003540)={0x24, r9, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_PS_STATE={0x8}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000080)={&(0x7f0000000240)={0x58, r9, 0x10, 0x70bd29, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x2}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x9}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x5}], @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x5}, @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x7}]}, 0x58}, 0x1, 0x0, 0x0, 0x44851}, 0x4048085) setsockopt$sock_int(r3, 0x1, 0x1b, &(0x7f0000000200)=0x2, 0x4) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x34, r1, 0x211, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x20, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}]}, 0x34}}, 0x0) 3m5.274515855s ago: executing program 6 (id=433): mkdir(&(0x7f0000000180)='./file0\x00', 0x0) syz_mount_image$hfsplus(&(0x7f0000000600), &(0x7f0000000180)='./bus\x00', 0x400, &(0x7f0000000440)=ANY=[], 0x1, 0x63a, &(0x7f0000000840)="$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") openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x41, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) linkat(r0, &(0x7f0000000180)='./file1\x00', r0, &(0x7f0000000640)='./bus\x00', 0x0) unlink(&(0x7f00000003c0)='./bus\x00') unlink(&(0x7f0000000180)='./file1\x00') mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000400)='cgroup2\x00', 0x0, 0x0) chdir(&(0x7f0000000240)='./file0\x00') r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) faccessat(r1, &(0x7f00000000c0)='./bus\x00', 0x150) syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000e80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f00000006c0)={[{@uni_xlateno}, {@utf8}, {@fat=@errors_continue}, {@utf8no}, {@shortname_mixed}, {@iocharset={'iocharset', 0x3d, 'cp949'}}, {@rodir}, {@iocharset={'iocharset', 0x3d, 'macroman'}}, {@uni_xlateno}, {@shortname_mixed}, {@uni_xlate}, {@shortname_lower}, {@shortname_win95}, {@fat=@codepage={'codepage', 0x3d, '860'}}, {@utf8}, {@iocharset={'iocharset', 0x3d, 'iso8859-6'}}]}, 0x1, 0x2ad, &(0x7f0000000240)="$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") syz_mount_image$fuse(0xfffffffffffffffe, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000280)='./file0\x00', &(0x7f0000000000)='./file0/../file0/file0\x00', 0x0, 0x2879c03, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x1adc51, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000400)='./file0\x00', 0x0, 0x2885013, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='mounts\x00') read$FUSE(r2, &(0x7f0000004680)={0x2020}, 0x204f) write$P9_RREADLINK(r1, &(0x7f0000000000)={0x10, 0x17, 0x2, {0x7, './file0'}}, 0x10) socket$unix(0x1, 0x1, 0x0) 3m4.125452013s ago: executing program 6 (id=436): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0], 0xfc}}, 0x0) listen(r0, 0xfff) syz_emit_ethernet(0x4a, &(0x7f00000002c0)={@local, @dev, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "083ff2", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xc2, 0x4}}}}}}}, 0x0) 2m48.574213346s ago: executing program 34 (id=436): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0], 0xfc}}, 0x0) listen(r0, 0xfff) syz_emit_ethernet(0x4a, &(0x7f00000002c0)={@local, @dev, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "083ff2", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xc2, 0x4}}}}}}}, 0x0) 2m22.275834272s ago: executing program 2 (id=23): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) pselect6(0x40, &(0x7f0000000100), 0x0, &(0x7f0000000240)={0x1f}, 0x0, 0x0) ioctl$int_in(r0, 0x5452, 0x0) (fail_nth: 1) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 1m56.786977872s ago: executing program 2 (id=23): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) pselect6(0x40, &(0x7f0000000100), 0x0, &(0x7f0000000240)={0x1f}, 0x0, 0x0) ioctl$int_in(r0, 0x5452, 0x0) (fail_nth: 1) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 1m30.112066662s ago: executing program 2 (id=23): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) pselect6(0x40, &(0x7f0000000100), 0x0, &(0x7f0000000240)={0x1f}, 0x0, 0x0) ioctl$int_in(r0, 0x5452, 0x0) (fail_nth: 1) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 1m4.250822182s ago: executing program 2 (id=23): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) pselect6(0x40, &(0x7f0000000100), 0x0, &(0x7f0000000240)={0x1f}, 0x0, 0x0) ioctl$int_in(r0, 0x5452, 0x0) (fail_nth: 1) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 39.058082722s ago: executing program 2 (id=23): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) pselect6(0x40, &(0x7f0000000100), 0x0, &(0x7f0000000240)={0x1f}, 0x0, 0x0) ioctl$int_in(r0, 0x5452, 0x0) (fail_nth: 1) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 19.990453599s ago: executing program 2 (id=23): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) pselect6(0x40, &(0x7f0000000100), 0x0, &(0x7f0000000240)={0x1f}, 0x0, 0x0) ioctl$int_in(r0, 0x5452, 0x0) (fail_nth: 1) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 6.734787868s ago: executing program 0 (id=1176): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) sendmsg$NL80211_CMD_START_AP(r0, 0x0, 0x40) 6.023331954s ago: executing program 0 (id=1180): r0 = socket$inet_udp(0x2, 0x2, 0x0) recvmmsg(r0, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}], 0x40000000000012d, 0x2, 0x0) setsockopt$inet_int(r0, 0x0, 0x6, &(0x7f0000000180)=0x80000001, 0x4) setsockopt$inet_int(r0, 0x0, 0x7, &(0x7f0000000140)=0x6, 0x4) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="34000000100003040300"/20, @ANYRES32=0x0], 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x0) syz_emit_ethernet(0x32, &(0x7f0000001140)={@broadcast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @void, {@ipv4={0x800, @udp={{0x6, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty, {[@timestamp={0x44, 0x4, 0x5e}]}}, {0x1, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}, 0x0) 5.363093588s ago: executing program 0 (id=1184): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x41, &(0x7f0000000000)=0x7f, 0x4) r1 = socket$inet_tcp(0x2, 0x1, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x2000001, 0x11, r1, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) recvmmsg(r0, &(0x7f0000006e40)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000440)=""/178, 0xb2}], 0x1}, 0x2}], 0x1, 0x40000000, 0x0) 5.192909325s ago: executing program 0 (id=1185): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r0}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000280), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r8, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg(r7, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) 4.854435065s ago: executing program 0 (id=1189): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000080)=0x474c, 0x4) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$inet_int(r0, 0x0, 0x12, 0x0, 0x0) setsockopt$inet_int(r0, 0x0, 0x6, &(0x7f0000000180)=0x3ffffffe, 0x4) recvmmsg(r0, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0) 3.659146854s ago: executing program 7 (id=1194): r0 = socket$inet_udp(0x2, 0x2, 0x0) recvmmsg(r0, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}], 0x40000000000012d, 0x2, 0x0) setsockopt$inet_int(r0, 0x0, 0x6, &(0x7f0000000180)=0x80000001, 0x4) setsockopt$inet_int(r0, 0x0, 0x7, &(0x7f0000000140)=0x6, 0x4) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="34000000100003040300"/20, @ANYRES32=0x0], 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x0) syz_emit_ethernet(0x32, &(0x7f0000001140)={@broadcast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @void, {@ipv4={0x800, @udp={{0x6, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty, {[@timestamp={0x44, 0x4, 0x5e}]}}, {0x1, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}, 0x0) 3.526895532s ago: executing program 1 (id=1195): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x41, &(0x7f0000000000)=0x7f, 0x4) r1 = socket$inet_tcp(0x2, 0x1, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x2000001, 0x11, r1, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) recvmmsg(r0, &(0x7f0000006e40)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000440)=""/178, 0xb2}], 0x1}, 0x2}], 0x1, 0x40000000, 0x0) 3.083881807s ago: executing program 1 (id=1196): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x16, 0xe, &(0x7f0000000fc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 3.060827445s ago: executing program 7 (id=1197): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) close(0x3) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x11}}, 0x10) sendto$inet(r1, 0x0, 0x0, 0xc806, &(0x7f0000000180)={0x2, 0x4e21, @multicast2}, 0x10) setsockopt$sock_int(r1, 0x1, 0x20, &(0x7f0000000040), 0x4) ioctl$int_in(r1, 0x5452, &(0x7f0000000380)=0x2) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) shutdown(r0, 0x2) 2.592864624s ago: executing program 1 (id=1199): socketpair$unix(0x1, 0x2, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="12000000080000000400000002"], 0x48) r1 = socket$inet_tcp(0x2, 0x1, 0x0) listen(r1, 0x0) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r0, &(0x7f0000000140), &(0x7f00000003c0)=@tcp=r1}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000400)={r0, &(0x7f0000000340)}, 0x20) 2.321679849s ago: executing program 5 (id=1200): r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbff, 0x2ffffffff}, 0xc) r1 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newtfilter={0x24, 0x2c, 0x10, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xe, 0x5}, {0x0, 0x10}, {0xffea, 0xa}}}, 0x24}}, 0x4000) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000008c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xa}, {}, {0xf, 0xd}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_CT_ZONE={0x6}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40040}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 2.038161582s ago: executing program 1 (id=1201): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000001c6a000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x9c}}, 0x0) 1.833973483s ago: executing program 5 (id=1202): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x40) 1.724271427s ago: executing program 7 (id=1203): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000100)={0x3, &(0x7f0000000180)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x50}, {0x6}]}, 0x10) sendto$inet6(r0, &(0x7f0000000480), 0x0, 0x0, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback, 0x697}, 0x1c) 1.492191547s ago: executing program 1 (id=1204): r0 = socket(0x28, 0x5, 0x0) r1 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r1, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) listen(r1, 0x0) connect$vsock_stream(r0, &(0x7f0000000080), 0x10) sendmmsg(r0, &(0x7f0000000100)=[{{0x0, 0x0, 0x0}}], 0x1, 0x480f0) r2 = accept4$unix(r1, 0x0, 0x0, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) recvfrom$unix(r2, &(0x7f0000000180)=""/235, 0x1ffd4, 0x0, 0x0, 0x0) 1.330934261s ago: executing program 5 (id=1205): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x4, 0x8, &(0x7f00000003c0)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x87}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}]}, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0x0, 0xd, 0x0, &(0x7f0000000000)="e06921e8682d85ff9782762f86", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) 1.225238559s ago: executing program 7 (id=1206): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x2, 0x4, &(0x7f0000000280)=@framed={{}, [@call={0x85, 0x0, 0x0, 0xad}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x68, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 978.109652ms ago: executing program 5 (id=1207): r0 = socket$inet_udp(0x2, 0x2, 0x0) recvmmsg(r0, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}], 0x40000000000012d, 0x2, 0x0) setsockopt$inet_int(r0, 0x0, 0x6, &(0x7f0000000180)=0x80000001, 0x4) setsockopt$inet_int(r0, 0x0, 0x7, &(0x7f0000000140)=0x6, 0x4) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="34000000100003040300"/20, @ANYRES32=0x0], 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x0) syz_emit_ethernet(0x32, &(0x7f0000001140)={@broadcast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @void, {@ipv4={0x800, @udp={{0x6, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty, {[@timestamp={0x44, 0x4, 0x5e}]}}, {0x1, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}, 0x0) 834.052752ms ago: executing program 0 (id=1208): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r0}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000240)={0xffffffffffffffff}, 0x4) 706.585265ms ago: executing program 7 (id=1209): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x16, 0xe, &(0x7f0000000fc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 614.28086ms ago: executing program 5 (id=1210): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r0}, 0x10) r1 = epoll_create1(0x0) r2 = socket$unix(0x1, 0x1, 0x0) socket(0x2, 0x6, 0x0) setsockopt$sock_int(r2, 0x1, 0x2e, &(0x7f0000000040)=0x80, 0x4) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000100)={0xa0028000}) 243.710764ms ago: executing program 7 (id=1211): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x9) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={0x28, r3, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x28}}, 0x0) sendmsg$MPTCP_PM_CMD_DEL_ADDR(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={0x28, 0x0, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x28}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000980)=ANY=[@ANYBLOB="84000000", @ANYRES16=r5, @ANYBLOB="010000000000fbdbdf250100000008000200000000000500050000000000080003000100000048000180050002002000000006000100020000000800060003000000080003"], 0x84}}, 0x20004800) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @fib={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_FIB_DREG={0x8}, @NFTA_FIB_FLAGS={0x8, 0x3, 0x1, 0x0, 0x7}, @NFTA_FIB_DREG={0x8, 0x1, 0x1, 0x0, 0x15}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}]}], {0x14}}, 0x80}, 0x1, 0x0, 0x0, 0x40014}, 0x4044800) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000025400100000c0a01010000000000000000070000000900020073797a31000000000900010073797a300000000014010380100100800800034000000002030106"], 0x1c4}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0e00000004000000080000000700000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000004000000000000000000"], 0x48) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'lo\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=@newlink={0x78, 0x10, 0x2, 0x0, 0x2, {0x0, 0x0, 0x0, 0x0, 0x78e7}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_TXQLEN={0x8, 0xd, 0x6}, @IFLA_EVENT={0x8, 0x2c, 0xaab}, @IFLA_MASTER={0x8, 0xa, r8}, @IFLA_MAP={0x24, 0xe, {0x5, 0x49, 0x7ff, 0xfff8, 0x4, 0x5}}, @IFLA_GROUP={0x8, 0x1b, 0xf1}]}, 0x78}, 0x1, 0x0, 0x0, 0x200040c0}, 0xc808) r9 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r9, 0xc004743e, &(0x7f0000000380)) r10 = socket$inet6_udplite(0xa, 0x2, 0x88) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x9, [@volatile={0x10}, @restrict={0x10, 0x0, 0x0, 0xb, 0x5}, @typedef={0xc, 0x0, 0x0, 0x8, 0x4}, @enum={0xc}]}, {0x0, [0x30, 0x61, 0x0, 0x0, 0x30, 0x47, 0x61]}}, &(0x7f00000003c0)=""/229, 0x51, 0xe5, 0x4, 0xff, 0x0, @void, @value}, 0x28) setsockopt$IP6T_SO_SET_REPLACE(r10, 0x29, 0x40, &(0x7f0000000840)=@raw={'raw\x00', 0x3c1, 0x3, 0x3e8, 0x1c0, 0x111, 0x4b4, 0x0, 0xd4feffff, 0x318, 0x20a, 0x278, 0x318, 0x278, 0x3, 0x0, {[{{@ipv6={@empty, @empty, [], [], 'ipvlan0\x00', 'team_slave_0\x00'}, 0x0, 0x198, 0x1c0, 0x0, {}, [@common=@inet=@tcp={{0x30, 'tcp\x00', 0x2}}, @common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "6d93eb04697dfa39de04767f46614613a407abbf4ed2e83a63b484dbb3bf6b2a850e79009e2905d2f98ba19f91f3c9faee6d3686e9bee067f4e77d9ad66238750c4100d7ee97ec7646259d90edece6e9787a97bc956c01754c34c5c9518c46178ed5f9194454980e579c80eca35a58dc47d1d5e4ff6e216c724e88c702448587"}}]}, @common=@inet=@TCPMSS={0x28}}, {{@ipv6={@loopback, @private1, [], [], 'veth1_to_hsr\x00', 'pim6reg1\x00'}, 0x0, 0xf0, 0x158, 0x0, {}, [@common=@unspec=@nfacct={{0x48}, {'syz1\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x448) ioctl$PPPIOCSACTIVE(r9, 0x40047459, &(0x7f0000000080)={0xfffffffffffffe43, 0x0}) writev(r9, &(0x7f0000000040)=[{&(0x7f0000000000)="b2ff", 0x2}], 0x1) socket$inet6_sctp(0xa, 0x1, 0x84) 46.7906ms ago: executing program 1 (id=1212): r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbff, 0x2ffffffff}, 0xc) r1 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newtfilter={0x24, 0x2c, 0x10, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xe, 0x5}, {0x0, 0x10}, {0xffea, 0xa}}}, 0x24}}, 0x4000) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000008c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xa}, {}, {0xf, 0xd}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_CT_ZONE={0x6}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40040}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 0s ago: executing program 5 (id=1213): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) close(0x3) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x11}}, 0x10) sendto$inet(r1, 0x0, 0x0, 0xc806, &(0x7f0000000180)={0x2, 0x4e21, @multicast2}, 0x10) setsockopt$sock_int(r1, 0x1, 0x20, &(0x7f0000000040), 0x4) ioctl$int_in(r1, 0x5452, &(0x7f0000000380)=0x2) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) shutdown(r0, 0x2) kernel console output (not intermixed with test programs): annel medium [ 369.465445][ T5846] usb 6-1: USB disconnect, device number 2 [ 369.475704][ T5846] mcba_usb 6-1:0.0 can0: device disconnected [ 369.773347][ T7354] netlink: 44 bytes leftover after parsing attributes in process `syz.1.288'. [ 370.428491][ T7365] loop6: detected capacity change from 0 to 1024 [ 370.470227][ T5795] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 370.479002][ T5795] Bluetooth: hci0: Injecting HCI hardware error event [ 370.488928][ T5795] Bluetooth: hci0: hardware error 0x00 [ 370.790462][ T7365] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 370.971392][ T7365] EXT4-fs (loop6): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: none. [ 371.100602][ T6345] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 371.352689][ T6345] usb 2-1: Using ep0 maxpacket: 8 [ 371.373002][ T6601] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 371.375920][ T6345] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 511, setting to 64 [ 371.394592][ T6345] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 16 [ 371.404851][ T6345] usb 2-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 18 [ 371.433828][ T6345] usb 2-1: New USB device found, idVendor=0001, idProduct=8000, bcdDevice= 0.00 [ 371.443610][ T6345] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 371.452055][ T6345] usb 2-1: SerialNumber: syz [ 371.466657][ T7374] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 371.494931][ T7382] x_tables: duplicate underflow at hook 4 [ 371.506717][ T6345] hub 2-1:1.0: bad descriptor, ignoring hub [ 371.513149][ T6345] hub 2-1:1.0: probe with driver hub failed with error -5 [ 371.532505][ T5846] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 371.748549][ T7374] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 371.883047][ T5846] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 254, changing to 11 [ 371.894851][ T5846] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 371.905013][ T5846] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 6 [ 371.918242][ T5846] usb 6-1: New USB device found, idVendor=28bd, idProduct=1903, bcdDevice= 0.00 [ 371.927643][ T5846] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 372.019209][ T5846] usb 6-1: config 0 descriptor?? [ 372.186475][ T1121] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 372.195054][ T1121] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 372.206040][ T34] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 372.214350][ T34] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 372.641468][ T5795] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 372.925200][ T7391] loop1: detected capacity change from 0 to 32768 [ 373.074482][ T7391] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.294 (7391) [ 373.220135][ T5846] usbhid 6-1:0.0: can't add hid device: -71 [ 373.226779][ T5846] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 373.352009][ T7391] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 373.364362][ T7391] BTRFS info (device loop1): using crc32c (crc32c-x86_64) checksum algorithm [ 373.374675][ T7391] BTRFS info (device loop1): using free-space-tree [ 373.416550][ T5846] usb 6-1: USB disconnect, device number 3 [ 373.513661][ T7394] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 373.603970][ T3831] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 373.751999][ T7374] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 374.020473][ T3831] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 374.069423][ T7415] loop5: detected capacity change from 0 to 4096 [ 374.365785][ T3831] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 374.596706][ T6345] cdc_ether 2-1:1.0: probe with driver cdc_ether failed with error -71 [ 374.652126][ T6345] usb 2-1: USB disconnect, device number 7 [ 374.774533][ T5792] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 374.951849][ T3831] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 375.773100][ T3831] bridge_slave_1: left allmulticast mode [ 375.779002][ T3831] bridge_slave_1: left promiscuous mode [ 375.785771][ T3831] bridge0: port 2(bridge_slave_1) entered disabled state [ 375.904192][ T3831] bridge_slave_0: left allmulticast mode [ 375.910228][ T3831] bridge_slave_0: left promiscuous mode [ 375.916802][ T3831] bridge0: port 1(bridge_slave_0) entered disabled state [ 376.409479][ T3831] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 376.503921][ T3831] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 376.554795][ T3831] bond0 (unregistering): Released all slaves [ 376.646956][ T7431] netlink: 32 bytes leftover after parsing attributes in process `syz.1.302'. [ 376.656512][ T7431] netlink: 16 bytes leftover after parsing attributes in process `syz.1.302'. [ 376.694424][ T7432] netlink: 44 bytes leftover after parsing attributes in process `syz.0.301'. [ 376.831347][ T2150] usb 6-1: new full-speed USB device number 4 using dummy_hcd [ 376.853659][ T7434] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 376.863452][ T7434] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 377.041594][ T2150] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 377.054566][ T2150] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 377.058681][ T6345] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 377.065189][ T2150] usb 6-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 377.081855][ T2150] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 377.243019][ T2150] usb 6-1: config 0 descriptor?? [ 377.267891][ T6345] usb 2-1: Using ep0 maxpacket: 16 [ 377.294224][ T6345] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 377.307153][ T6345] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 377.317469][ T6345] usb 2-1: New USB device found, idVendor=04b4, idProduct=0001, bcdDevice= 0.00 [ 377.327032][ T6345] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 377.353818][ T7435] loop6: detected capacity change from 0 to 4096 [ 377.408099][ T7435] ntfs3(loop6): Different NTFS sector size (1024) and media sector size (512). [ 377.518480][ T6345] usb 2-1: config 0 descriptor?? [ 377.551176][ T3831] hsr_slave_0: left promiscuous mode [ 377.568397][ T5791] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 377.603975][ T5791] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 377.636861][ T7435] ntfs3(loop6): Failed to read $UpCase (-4). [ 377.652572][ T5791] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 377.684420][ T3831] hsr_slave_1: left promiscuous mode [ 377.696449][ T5791] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 377.714544][ T5791] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 377.736758][ T5791] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 377.844712][ T3831] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 377.853014][ T3831] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 377.994846][ T3831] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 378.002909][ T3831] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 378.017222][ T7431] loop1: detected capacity change from 0 to 256 [ 378.104464][ T7434] FAT-fs (loop1): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 378.115790][ T7434] FAT-fs (loop1): Filesystem has been set read-only [ 378.122989][ T7434] FAT-fs (loop1): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 378.133746][ T7434] FAT-fs (loop1): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 378.168018][ T29] audit: type=1800 audit(1733123336.978:7): pid=7434 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.302" name="file1" dev="loop1" ino=1048662 res=0 errno=0 [ 378.204829][ T3831] veth1_macvtap: left promiscuous mode [ 378.210878][ T3831] veth0_macvtap: left promiscuous mode [ 378.217128][ T3831] veth1_vlan: left promiscuous mode [ 378.223328][ T3831] veth0_vlan: left promiscuous mode [ 378.228313][ T7434] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000001) [ 378.254366][ T6345] cypress 0003:04B4:0001.0003: unknown main item tag 0x0 [ 378.262787][ T6345] cypress 0003:04B4:0001.0003: unknown main item tag 0x0 [ 378.270408][ T6345] cypress 0003:04B4:0001.0003: unknown main item tag 0x0 [ 378.281943][ T6345] cypress 0003:04B4:0001.0003: unknown main item tag 0x0 [ 378.289314][ T6345] cypress 0003:04B4:0001.0003: unknown main item tag 0x0 [ 378.532469][ T6345] cypress 0003:04B4:0001.0003: hidraw0: USB HID v0.00 Device [HID 04b4:0001] on usb-dummy_hcd.1-1/input0 [ 379.284490][ T3831] team0 (unregistering): Port device team_slave_1 removed [ 379.338713][ T3831] team0 (unregistering): Port device team_slave_0 removed [ 379.682083][ T7434] syz.1.302 (7434) used greatest stack depth: 4008 bytes left [ 379.750318][ T2150] usbhid 6-1:0.0: can't add hid device: -71 [ 379.756957][ T2150] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 379.775513][ T2150] usb 6-1: USB disconnect, device number 4 [ 379.923473][ T5795] Bluetooth: hci1: command tx timeout [ 380.252416][ T6345] usb 2-1: USB disconnect, device number 8 [ 380.367537][ T7466] loop1: detected capacity change from 0 to 64 [ 380.724765][ T7460] loop5: detected capacity change from 0 to 256 [ 380.769254][ T7460] exfat: Unknown parameter 'discar' [ 380.808511][ T7476] FAULT_INJECTION: forcing a failure. [ 380.808511][ T7476] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 380.822697][ T7476] CPU: 0 UID: 0 PID: 7476 Comm: syz.1.313 Not tainted 6.13.0-rc1-syzkaller #0 [ 380.831860][ T7476] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 380.842160][ T7476] Call Trace: [ 380.845646][ T7476] [ 380.848773][ T7476] dump_stack_lvl+0x216/0x2d0 [ 380.853782][ T7476] dump_stack+0x1e/0x24 [ 380.858234][ T7476] should_fail_ex+0x748/0x7f0 [ 380.863241][ T7476] should_fail_alloc_page+0x235/0x2b0 [ 380.868922][ T7476] __alloc_pages_noprof+0x343/0xe00 [ 380.874454][ T7476] alloc_pages_mpol_noprof+0x299/0x990 [ 380.880217][ T7476] ? kmsan_get_metadata+0x13e/0x1c0 [ 380.885731][ T7476] vma_alloc_folio_noprof+0x454/0x7f0 [ 380.891486][ T7476] handle_mm_fault+0xa40e/0xdcc0 [ 380.896778][ T7476] ? kmsan_get_metadata+0x13e/0x1c0 [ 380.902315][ T7476] exc_page_fault+0x41b/0x700 [ 380.907319][ T7476] asm_exc_page_fault+0x2b/0x30 [ 380.912484][ T7476] RIP: 0033:0x7f2d66c41990 [ 380.917151][ T7476] Code: 39 4f 08 72 4c 8d 4d ff 85 ed 74 33 66 0f 1f 44 00 00 48 39 f0 72 1b 4d 8b 07 49 89 c1 49 29 f1 47 0f b6 0c 08 45 84 c9 74 08 <45> 88 0c 00 49 8b 47 10 48 83 c0 01 49 89 47 10 83 e9 01 73 d3 41 [ 380.937074][ T7476] RSP: 002b:00007f2d67c154c0 EFLAGS: 00010286 [ 380.943467][ T7476] RAX: 0000000000008000 RBX: 00007f2d67c15560 RCX: 0000000000000003 [ 380.951694][ T7476] RDX: 00000000000073ff RSI: 0000000000000400 RDI: 00007f2d67c15600 [ 380.959924][ T7476] RBP: 0000000000000004 R08: 00007f2d5c600000 R09: 00000000000000ed [ 380.968229][ T7476] R10: 0000000020000c42 R11: 0000000000000b6e R12: 0000000000000301 [ 380.976457][ T7476] R13: 00007f2d66e08320 R14: 0000000000000013 R15: 00007f2d67c15600 [ 380.984695][ T7476] [ 380.992090][ T7476] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 381.514662][ T7476] loop1: detected capacity change from 0 to 4096 [ 381.658090][ T7439] chnl_net:caif_netlink_parms(): no params data found [ 381.890030][ T7490] netlink: 44 bytes leftover after parsing attributes in process `syz.6.315'. [ 381.954777][ T7476] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 382.046571][ T5795] Bluetooth: hci1: command tx timeout [ 382.059720][ T7493] netlink: 24 bytes leftover after parsing attributes in process `syz.5.316'. [ 382.419186][ T5792] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 383.364124][ T7439] bridge0: port 1(bridge_slave_0) entered blocking state [ 383.371893][ T7439] bridge0: port 1(bridge_slave_0) entered disabled state [ 383.379614][ T7439] bridge_slave_0: entered allmulticast mode [ 383.388770][ T7439] bridge_slave_0: entered promiscuous mode [ 383.421592][ T7512] FAULT_INJECTION: forcing a failure. [ 383.421592][ T7512] name failslab, interval 1, probability 0, space 0, times 0 [ 383.435546][ T7512] CPU: 1 UID: 0 PID: 7512 Comm: syz.1.322 Not tainted 6.13.0-rc1-syzkaller #0 [ 383.444693][ T7512] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 383.454988][ T7512] Call Trace: [ 383.458463][ T7512] [ 383.461579][ T7512] dump_stack_lvl+0x216/0x2d0 [ 383.466583][ T7512] dump_stack+0x1e/0x24 [ 383.471044][ T7512] should_fail_ex+0x748/0x7f0 [ 383.476050][ T7512] should_failslab+0x17f/0x210 [ 383.481111][ T7512] kmem_cache_alloc_node_noprof+0xf4/0xe00 [ 383.487248][ T7512] ? __alloc_skb+0x1e9/0x7b0 [ 383.492106][ T7512] ? kmsan_get_metadata+0x13e/0x1c0 [ 383.497600][ T7512] __alloc_skb+0x1e9/0x7b0 [ 383.502297][ T7512] netlink_alloc_large_skb+0x1b4/0x280 [ 383.508066][ T7512] netlink_sendmsg+0xa96/0x11e0 [ 383.513265][ T7512] ? __pfx_netlink_sendmsg+0x10/0x10 [ 383.518859][ T7512] ? __pfx_netlink_sendmsg+0x10/0x10 [ 383.524466][ T7512] __sock_sendmsg+0x30f/0x380 [ 383.529468][ T7512] ____sys_sendmsg+0x877/0xb60 [ 383.534553][ T7512] ___sys_sendmsg+0x28d/0x3c0 [ 383.539512][ T7512] ? kmsan_get_metadata+0x13e/0x1c0 [ 383.545010][ T7512] ? __rcu_read_unlock+0x7b/0xe0 [ 383.550285][ T7512] ? __fget_files+0x42b/0x500 [ 383.555257][ T7512] ? kmsan_get_metadata+0x13e/0x1c0 [ 383.560741][ T7512] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 383.566842][ T7512] __x64_sys_sendmsg+0x212/0x3c0 [ 383.572085][ T7512] ? kmsan_get_metadata+0x13e/0x1c0 [ 383.577581][ T7512] x64_sys_call+0x2ed6/0x3c30 [ 383.582586][ T7512] do_syscall_64+0xcd/0x1e0 [ 383.587406][ T7512] ? clear_bhb_loop+0x25/0x80 [ 383.592395][ T7512] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 383.598602][ T7512] RIP: 0033:0x7f2d66d80849 [ 383.603264][ T7512] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 383.623176][ T7512] RSP: 002b:00007f2d67c16058 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 383.631917][ T7512] RAX: ffffffffffffffda RBX: 00007f2d66f45fa0 RCX: 00007f2d66d80849 [ 383.640142][ T7512] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000003 [ 383.648361][ T7512] RBP: 00007f2d67c160a0 R08: 0000000000000000 R09: 0000000000000000 [ 383.656580][ T7512] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 383.664795][ T7512] R13: 0000000000000000 R14: 00007f2d66f45fa0 R15: 00007fff940f65d8 [ 383.673034][ T7512] [ 383.673532][ T7439] bridge0: port 2(bridge_slave_1) entered blocking state [ 383.683963][ T7439] bridge0: port 2(bridge_slave_1) entered disabled state [ 383.691899][ T7439] bridge_slave_1: entered allmulticast mode [ 383.701475][ T7439] bridge_slave_1: entered promiscuous mode [ 383.893952][ T7439] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 383.920613][ T7439] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 383.998794][ T7516] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 384.090979][ T5795] Bluetooth: hci1: command tx timeout [ 384.174707][ T7439] team0: Port device team_slave_0 added [ 384.305755][ T7439] team0: Port device team_slave_1 added [ 384.530755][ T7523] loop6: detected capacity change from 0 to 1024 [ 384.600681][ T5837] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 384.656696][ T7439] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 384.663969][ T7439] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 384.690501][ T7439] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 384.754471][ T5837] usb 6-1: device descriptor read/64, error -71 [ 384.846951][ T7530] netlink: 44 bytes leftover after parsing attributes in process `syz.0.328'. [ 384.900233][ T7439] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 384.907415][ T7439] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 384.936753][ T7439] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 385.048166][ T5837] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 385.056776][ T6345] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 385.177161][ T7439] hsr_slave_0: entered promiscuous mode [ 385.200890][ T5837] usb 6-1: device descriptor read/64, error -71 [ 385.216136][ T7439] hsr_slave_1: entered promiscuous mode [ 385.225113][ T7439] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 385.233514][ T7439] Cannot create hsr debugfs directory [ 385.253448][ T6345] usb 7-1: Using ep0 maxpacket: 32 [ 385.276291][ T6345] usb 7-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 385.288047][ T6345] usb 7-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 385.315651][ T5837] usb usb6-port1: attempt power cycle [ 385.331686][ T6345] usb 7-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 385.341290][ T6345] usb 7-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 385.352487][ T6345] usb 7-1: Product: syz [ 385.356900][ T6345] usb 7-1: Manufacturer: syz [ 385.427723][ T6345] hub 7-1:4.0: USB hub found [ 385.669231][ T6345] hub 7-1:4.0: 11 ports detected [ 385.681229][ T6345] hub 7-1:4.0: insufficient power available to use all downstream ports [ 385.720536][ T5837] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 385.785144][ T5837] usb 6-1: device descriptor read/8, error -71 [ 386.062359][ T5837] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 386.078372][ T7523] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 386.088938][ T7523] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 386.153972][ T5795] Bluetooth: hci1: command tx timeout [ 386.166809][ T5837] usb 6-1: device descriptor read/8, error -71 [ 386.181205][ T6345] hub 7-1:4.0: set hub depth failed [ 386.272039][ T6345] usb 7-1: USB disconnect, device number 4 [ 386.301450][ T5837] usb usb6-port1: unable to enumerate USB device [ 386.790940][ T2150] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 387.021278][ T7550] netlink: 200 bytes leftover after parsing attributes in process `syz.6.333'. [ 387.085388][ T2150] usb 2-1: Using ep0 maxpacket: 16 [ 387.127218][ T2150] usb 2-1: config 0 has an invalid interface number: 128 but max is 0 [ 387.135852][ T2150] usb 2-1: config 0 has no interface number 0 [ 387.142505][ T2150] usb 2-1: config 0 interface 128 has no altsetting 0 [ 387.190580][ T2150] usb 2-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=95.91 [ 387.200122][ T2150] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 387.208387][ T2150] usb 2-1: Product: syz [ 387.212963][ T2150] usb 2-1: Manufacturer: syz [ 387.217807][ T2150] usb 2-1: SerialNumber: syz [ 387.299525][ T7439] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 387.326485][ T2150] usb 2-1: config 0 descriptor?? [ 387.354831][ T7439] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 387.380905][ T2150] radio-si470x 2-1:0.128: could not find interrupt in endpoint [ 387.388943][ T2150] radio-si470x 2-1:0.128: probe with driver radio-si470x failed with error -5 [ 387.401025][ T2150] usbhid 2-1:0.128: couldn't find an input interrupt endpoint [ 387.452936][ T7439] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 387.510681][ T7439] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 387.953954][ T7439] 8021q: adding VLAN 0 to HW filter on device bond0 [ 388.008399][ T7439] 8021q: adding VLAN 0 to HW filter on device team0 [ 388.077855][ T34] bridge0: port 1(bridge_slave_0) entered blocking state [ 388.085586][ T34] bridge0: port 1(bridge_slave_0) entered forwarding state [ 388.100850][ T34] bridge0: port 2(bridge_slave_1) entered blocking state [ 388.108518][ T34] bridge0: port 2(bridge_slave_1) entered forwarding state [ 388.368741][ T7439] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 388.588827][ T5837] usb 2-1: USB disconnect, device number 9 [ 388.922182][ T7563] loop5: detected capacity change from 0 to 4096 [ 389.005462][ T7563] ntfs3(loop5): Different NTFS sector size (4096) and media sector size (512). [ 389.655026][ T7563] netlink: 8 bytes leftover after parsing attributes in process `syz.5.334'. [ 390.001922][ T7563] ntfs3(loop5): failed to convert "c46c" to macromanian [ 390.348575][ T7439] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 390.383600][ T7588] netlink: 44 bytes leftover after parsing attributes in process `syz.6.339'. [ 390.440690][ T29] audit: type=1326 audit(1733123349.258:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7580 comm="syz.0.338" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a24380849 code=0x7fc00000 [ 391.065975][ T7439] veth0_vlan: entered promiscuous mode [ 391.194122][ T7439] veth1_vlan: entered promiscuous mode [ 391.601966][ T7439] veth0_macvtap: entered promiscuous mode [ 391.706932][ T7439] veth1_macvtap: entered promiscuous mode [ 391.752187][ T7599] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 391.881098][ T7439] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 391.892013][ T7439] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 391.905212][ T7439] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 391.917235][ T7439] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 391.927438][ T7439] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 391.938199][ T7439] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 391.948365][ T7439] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 391.960437][ T7439] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 391.975084][ T7439] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 391.995102][ T7439] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 392.008881][ T7439] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 392.019604][ T7439] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 392.030668][ T7439] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 392.040890][ T7439] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 392.051767][ T7439] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 392.061891][ T7439] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 392.072740][ T7439] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 392.087032][ T7439] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 392.108673][ T7439] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 392.118037][ T7439] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 392.127216][ T7439] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 392.136409][ T7439] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 392.155012][ T7601] loop5: detected capacity change from 0 to 512 [ 392.237220][ T7601] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 392.432768][ T7611] FAULT_INJECTION: forcing a failure. [ 392.432768][ T7611] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 392.447821][ T7611] CPU: 0 UID: 0 PID: 7611 Comm: syz.6.346 Not tainted 6.13.0-rc1-syzkaller #0 [ 392.456215][ T7601] EXT4-fs (loop5): 1 truncate cleaned up [ 392.456878][ T7611] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 392.464430][ T7601] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 392.472676][ T7611] Call Trace: [ 392.472729][ T7611] [ 392.472784][ T7611] dump_stack_lvl+0x216/0x2d0 [ 392.496860][ T7611] dump_stack+0x1e/0x24 [ 392.501325][ T7611] should_fail_ex+0x748/0x7f0 [ 392.506326][ T7611] should_fail+0x2a/0x40 [ 392.510877][ T7611] should_fail_usercopy+0x2e/0x40 [ 392.516213][ T7611] _copy_to_user+0x34/0x120 [ 392.521024][ T7611] simple_read_from_buffer+0x199/0x340 [ 392.526830][ T7611] proc_fail_nth_read+0x1e5/0x2c0 [ 392.532159][ T7611] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 392.538000][ T7611] vfs_read+0x29d/0xf50 [ 392.542461][ T7611] ? kmsan_get_metadata+0x13e/0x1c0 [ 392.547949][ T7611] ? kmsan_internal_set_shadow_origin+0x69/0x100 [ 392.554647][ T7611] ksys_read+0x240/0x4b0 [ 392.559202][ T7611] ? kmsan_get_metadata+0x13e/0x1c0 [ 392.564704][ T7611] __x64_sys_read+0x93/0xe0 [ 392.569532][ T7611] x64_sys_call+0x314c/0x3c30 [ 392.574536][ T7611] do_syscall_64+0xcd/0x1e0 [ 392.579366][ T7611] ? clear_bhb_loop+0x25/0x80 [ 392.582042][ T7616] loop1: detected capacity change from 0 to 256 [ 392.584265][ T7611] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 392.596820][ T7611] RIP: 0033:0x7f952a37f25c [ 392.601483][ T7611] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 8e 02 00 48 [ 392.621401][ T7611] RSP: 002b:00007f95281f6050 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 392.630137][ T7611] RAX: ffffffffffffffda RBX: 00007f952a545fa0 RCX: 00007f952a37f25c [ 392.638383][ T7611] RDX: 000000000000000f RSI: 00007f95281f60b0 RDI: 0000000000000007 [ 392.646601][ T7611] RBP: 00007f95281f60a0 R08: 0000000000000000 R09: 0000000000000000 [ 392.654820][ T7611] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 392.663033][ T7611] R13: 0000000000000000 R14: 00007f952a545fa0 R15: 00007ffdaf478168 [ 392.671272][ T7611] [ 392.752239][ T7616] exfat: Unknown parameter 'discar' [ 393.104731][ T6567] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 394.794788][ T29] audit: type=1326 audit(1733123353.578:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7626 comm="syz.6.351" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f952a380849 code=0x7fc00000 [ 394.817056][ C1] vkms_vblank_simulate: vblank timer overrun [ 395.467066][ T7650] loop1: detected capacity change from 0 to 8 [ 395.492276][ T7650] squashfs image failed sanity check [ 396.953126][ T5893] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 397.149145][ T5893] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 397.160737][ T5893] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 397.170934][ T5893] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 397.184292][ T5893] usb 2-1: New USB device found, idVendor=15c2, idProduct=2208, bcdDevice= 0.00 [ 397.193844][ T5893] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 397.373123][ T5893] usb 2-1: config 0 descriptor?? [ 398.062894][ T7671] xt_hashlimit: max too large, truncated to 1048576 [ 398.130243][ T5893] usbhid 2-1:0.0: can't add hid device: -71 [ 398.137361][ T5893] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 398.370446][ T5893] usb 2-1: USB disconnect, device number 10 [ 399.008816][ T7681] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 399.335950][ T7681] loop6: detected capacity change from 0 to 256 [ 399.344881][ T7681] exfat: Unknown parameter 'discar' [ 401.042136][ T7707] loop5: detected capacity change from 0 to 4096 [ 401.160137][ T7707] ntfs3(loop5): Different NTFS sector size (4096) and media sector size (512). [ 401.399583][ T29] audit: type=1326 audit(1733123360.178:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7710 comm="syz.1.367" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d66d80849 code=0x7fc00000 [ 401.424416][ T29] audit: type=1326 audit(1733123360.178:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7710 comm="syz.1.367" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f2d66d80849 code=0x7fc00000 [ 401.642823][ T5893] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 401.681910][ T7707] ntfs3(loop5): Mark volume as dirty due to NTFS errors [ 401.689315][ T7707] ntfs3(loop5): ino=3, ntfs_set_state failed, -22. [ 401.866569][ T5893] usb 7-1: config 0 has an invalid interface number: 255 but max is 0 [ 401.875236][ T5893] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 401.885841][ T5893] usb 7-1: config 0 has no interface number 0 [ 401.892222][ T5893] usb 7-1: New USB device found, idVendor=0867, idProduct=9812, bcdDevice=40.85 [ 401.892380][ T5893] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 402.014187][ T5893] usb 7-1: config 0 descriptor?? [ 402.119473][ T4304] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 402.128129][ T4304] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 402.149205][ T5893] comedi comedi0: Wrong number of endpoints [ 402.156329][ T5893] dt9812 7-1:0.255: driver 'dt9812' failed to auto-configure device. [ 402.356653][ T4304] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 402.365826][ T4304] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 402.520489][ T5893] usb 7-1: USB disconnect, device number 5 [ 402.767866][ T1121] ntfs3(loop5): ino=3, ntfs3_write_inode failed, -22. [ 402.905548][ T7730] FAULT_INJECTION: forcing a failure. [ 402.905548][ T7730] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 402.919155][ T7730] CPU: 1 UID: 0 PID: 7730 Comm: syz.5.372 Not tainted 6.13.0-rc1-syzkaller #0 [ 402.928317][ T7730] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 402.938622][ T7730] Call Trace: [ 402.942093][ T7730] [ 402.945210][ T7730] dump_stack_lvl+0x216/0x2d0 [ 402.950221][ T7730] dump_stack+0x1e/0x24 [ 402.954713][ T7730] should_fail_ex+0x748/0x7f0 [ 402.959716][ T7730] should_fail+0x2a/0x40 [ 402.964252][ T7730] should_fail_usercopy+0x2e/0x40 [ 402.969595][ T7730] _copy_from_user+0x35/0x110 [ 402.974590][ T7730] ___sys_sendmsg+0x120/0x3c0 [ 402.979567][ T7730] ? kmsan_get_metadata+0x13e/0x1c0 [ 402.985051][ T7730] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 402.991161][ T7730] ? __rcu_read_unlock+0x7b/0xe0 [ 402.996436][ T7730] ? __fget_files+0x42b/0x500 [ 403.001421][ T7730] ? kmsan_get_metadata+0x13e/0x1c0 [ 403.006909][ T7730] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 403.013019][ T7730] __x64_sys_sendmsg+0x212/0x3c0 [ 403.018257][ T7730] ? kmsan_get_metadata+0x13e/0x1c0 [ 403.023736][ T7730] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 403.029840][ T7730] ? kmsan_get_metadata+0x13e/0x1c0 [ 403.035337][ T7730] x64_sys_call+0x2ed6/0x3c30 [ 403.040346][ T7730] do_syscall_64+0xcd/0x1e0 [ 403.041470][ T7731] input: syz0 as /devices/virtual/input/input10 [ 403.045084][ T7730] ? clear_bhb_loop+0x25/0x80 [ 403.056319][ T7730] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 403.062535][ T7730] RIP: 0033:0x7fc9baf80849 [ 403.067190][ T7730] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 403.087096][ T7730] RSP: 002b:00007fc9bbd87058 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 403.095820][ T7730] RAX: ffffffffffffffda RBX: 00007fc9bb145fa0 RCX: 00007fc9baf80849 [ 403.104051][ T7730] RDX: 0000000000000000 RSI: 0000000020000180 RDI: 0000000000000003 [ 403.112275][ T7730] RBP: 00007fc9bbd870a0 R08: 0000000000000000 R09: 0000000000000000 [ 403.120500][ T7730] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 403.128714][ T7730] R13: 0000000000000000 R14: 00007fc9bb145fa0 R15: 00007fff9a7875c8 [ 403.136964][ T7730] [ 403.211222][ T2150] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 403.379324][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 403.387079][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 403.420267][ T2150] usb 2-1: Using ep0 maxpacket: 16 [ 403.435661][ T2150] usb 2-1: too many endpoints for config 0 interface 0 altsetting 53: 225, using maximum allowed: 30 [ 403.447174][ T2150] usb 2-1: config 0 interface 0 altsetting 53 has 0 endpoint descriptors, different from the interface descriptor's value: 225 [ 403.460796][ T2150] usb 2-1: config 0 interface 0 has no altsetting 0 [ 403.593390][ T2150] usb 2-1: New USB device found, idVendor=05e1, idProduct=0408, bcdDevice=80.00 [ 403.602875][ T2150] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 403.611273][ T2150] usb 2-1: Product: syz [ 403.615685][ T2150] usb 2-1: Manufacturer: syz [ 403.621797][ T2150] usb 2-1: SerialNumber: syz [ 403.655598][ T34] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 403.792577][ T2150] usb 2-1: config 0 descriptor?? [ 403.834216][ T2150] usb 2-1: no audio or video endpoints found [ 403.926606][ T34] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 404.131578][ T7740] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 404.191344][ T34] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 404.396911][ T34] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 404.455694][ T7748] loop5: detected capacity change from 0 to 256 [ 404.508328][ T6345] usb 2-1: USB disconnect, device number 11 [ 404.544357][ T7748] exfat: Unknown parameter 'discar' [ 404.938291][ T34] bridge_slave_1: left allmulticast mode [ 404.944478][ T34] bridge_slave_1: left promiscuous mode [ 404.951431][ T34] bridge0: port 2(bridge_slave_1) entered disabled state [ 405.080522][ T34] bridge_slave_0: left allmulticast mode [ 405.086545][ T34] bridge_slave_0: left promiscuous mode [ 405.093647][ T34] bridge0: port 1(bridge_slave_0) entered disabled state [ 405.830543][ T34] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 405.880126][ T34] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 405.911959][ T34] bond0 (unregistering): Released all slaves [ 406.412348][ T34] hsr_slave_0: left promiscuous mode [ 406.426444][ T34] hsr_slave_1: left promiscuous mode [ 406.447420][ T34] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 406.455688][ T34] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 406.492171][ T34] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 406.499959][ T34] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 406.526893][ T34] veth1_macvtap: left promiscuous mode [ 406.533186][ T34] veth0_macvtap: left promiscuous mode [ 406.539072][ T34] veth1_vlan: left promiscuous mode [ 406.546805][ T34] veth0_vlan: left promiscuous mode [ 407.037235][ T7766] loop1: detected capacity change from 0 to 512 [ 407.357445][ T7766] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 407.413267][ T7766] EXT4-fs (loop1): warning: maximal mount count reached, running e2fsck is recommended [ 407.443192][ T7766] EXT4-fs error (device loop1): ext4_orphan_get:1389: comm syz.1.376: inode #15: comm syz.1.376: iget: illegal inode # [ 407.457721][ T7766] EXT4-fs (loop1): Remounting filesystem read-only [ 407.468684][ T7766] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 407.482846][ T5791] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 407.509551][ T5791] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 407.523152][ T5791] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 407.537470][ T5791] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 407.578238][ T5791] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 407.591900][ T5791] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 408.295005][ T34] team0 (unregistering): Port device team_slave_1 removed [ 408.321530][ T34] team0 (unregistering): Port device team_slave_0 removed [ 409.011839][ T5792] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 409.018295][ T29] audit: type=1326 audit(1733123367.438:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7780 comm="syz.5.379" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9baf80849 code=0x7fc00000 [ 410.080707][ T7811] FAULT_INJECTION: forcing a failure. [ 410.080707][ T7811] name failslab, interval 1, probability 0, space 0, times 0 [ 410.093846][ T7811] CPU: 1 UID: 0 PID: 7811 Comm: syz.0.385 Not tainted 6.13.0-rc1-syzkaller #0 [ 410.102980][ T7811] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 410.113279][ T7811] Call Trace: [ 410.116747][ T7811] [ 410.119864][ T7811] dump_stack_lvl+0x216/0x2d0 [ 410.124885][ T7811] dump_stack+0x1e/0x24 [ 410.129349][ T7811] should_fail_ex+0x748/0x7f0 [ 410.134346][ T7811] should_failslab+0x17f/0x210 [ 410.139395][ T7811] kmem_cache_alloc_node_noprof+0xf4/0xe00 [ 410.145520][ T7811] ? __alloc_skb+0x1e9/0x7b0 [ 410.150379][ T7811] ? kmsan_get_metadata+0x13e/0x1c0 [ 410.155860][ T7811] __alloc_skb+0x1e9/0x7b0 [ 410.160555][ T7811] pfkey_sendmsg+0x1cd/0x1b90 [ 410.165538][ T7811] ? kmsan_internal_set_shadow_origin+0x69/0x100 [ 410.172207][ T7811] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 410.178309][ T7811] ? aa_sk_perm+0x881/0xd90 [ 410.183125][ T7811] ? aa_sock_msg_perm+0xea/0x240 [ 410.188359][ T7811] ? kmsan_get_metadata+0x13e/0x1c0 [ 410.193838][ T7811] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 410.199937][ T7811] ? __pfx_pfkey_sendmsg+0x10/0x10 [ 410.205350][ T7811] ? __pfx_pfkey_sendmsg+0x10/0x10 [ 410.210747][ T7811] ? __pfx_pfkey_sendmsg+0x10/0x10 [ 410.216142][ T7811] __sock_sendmsg+0x30f/0x380 [ 410.221146][ T7811] ____sys_sendmsg+0x877/0xb60 [ 410.226243][ T7811] ___sys_sendmsg+0x28d/0x3c0 [ 410.231201][ T7811] ? kmsan_get_metadata+0x13e/0x1c0 [ 410.236692][ T7811] ? __rcu_read_unlock+0x7b/0xe0 [ 410.241948][ T7811] ? __fget_files+0x42b/0x500 [ 410.246919][ T7811] ? kmsan_get_metadata+0x13e/0x1c0 [ 410.252405][ T7811] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 410.254624][ T5791] Bluetooth: hci1: command tx timeout [ 410.258412][ T7811] __x64_sys_sendmsg+0x212/0x3c0 [ 410.269150][ T7811] ? kmsan_get_metadata+0x13e/0x1c0 [ 410.274645][ T7811] x64_sys_call+0x2ed6/0x3c30 [ 410.279643][ T7811] do_syscall_64+0xcd/0x1e0 [ 410.284468][ T7811] ? clear_bhb_loop+0x25/0x80 [ 410.289455][ T7811] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 410.295661][ T7811] RIP: 0033:0x7f1a24380849 [ 410.300318][ T7811] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 410.320223][ T7811] RSP: 002b:00007f1a221f6058 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 410.328951][ T7811] RAX: ffffffffffffffda RBX: 00007f1a24545fa0 RCX: 00007f1a24380849 [ 410.337191][ T7811] RDX: 0000000000000000 RSI: 00000000200014c0 RDI: 0000000000000003 [ 410.345414][ T7811] RBP: 00007f1a221f60a0 R08: 0000000000000000 R09: 0000000000000000 [ 410.353634][ T7811] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 410.361847][ T7811] R13: 0000000000000000 R14: 00007f1a24545fa0 R15: 00007ffeb366bb08 [ 410.370090][ T7811] [ 411.074637][ T7802] overlayfs: invalid origin (0000) [ 411.127352][ T7820] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 411.351500][ T7820] loop5: detected capacity change from 0 to 256 [ 411.381981][ T7820] exfat: Unknown parameter 'discar' [ 411.472391][ T7776] chnl_net:caif_netlink_parms(): no params data found [ 412.008219][ T7836] loop1: detected capacity change from 0 to 512 [ 412.159071][ T7836] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 412.294328][ T7836] EXT4-fs (loop1): warning: maximal mount count reached, running e2fsck is recommended [ 412.312096][ T7836] EXT4-fs error (device loop1): ext4_orphan_get:1389: comm syz.1.391: inode #15: comm syz.1.391: iget: illegal inode # [ 412.321481][ T7836] EXT4-fs (loop1): Remounting filesystem read-only [ 412.346686][ T7836] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 412.420188][ T5791] Bluetooth: hci1: command tx timeout [ 412.667294][ T5792] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 413.300326][ T29] audit: type=1326 audit(1733123372.068:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7839 comm="syz.5.392" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9baf80849 code=0x7fc00000 [ 413.300561][ T29] audit: type=1326 audit(1733123372.068:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7839 comm="syz.5.392" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fc9baf80849 code=0x7fc00000 [ 413.300774][ T29] audit: type=1326 audit(1733123372.068:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7839 comm="syz.5.392" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9baf80849 code=0x7fc00000 [ 413.683048][ T7776] bridge0: port 1(bridge_slave_0) entered blocking state [ 413.683560][ T7776] bridge0: port 1(bridge_slave_0) entered disabled state [ 413.684204][ T7776] bridge_slave_0: entered allmulticast mode [ 413.687089][ T7776] bridge_slave_0: entered promiscuous mode [ 413.695178][ T7776] bridge0: port 2(bridge_slave_1) entered blocking state [ 413.695665][ T7776] bridge0: port 2(bridge_slave_1) entered disabled state [ 413.696214][ T7776] bridge_slave_1: entered allmulticast mode [ 413.699268][ T7776] bridge_slave_1: entered promiscuous mode [ 414.004436][ T7776] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 414.072092][ T7776] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 414.461273][ T7776] team0: Port device team_slave_0 added [ 414.470248][ T5791] Bluetooth: hci1: command tx timeout [ 414.544644][ T7776] team0: Port device team_slave_1 added [ 414.808779][ T7776] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 414.808860][ T7776] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 414.809001][ T7776] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 414.850120][ T7873] loop6: detected capacity change from 0 to 256 [ 414.857748][ T7776] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 414.857827][ T7776] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 414.857974][ T7776] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 415.077807][ T7873] exFAT-fs (loop6): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x99a53fd9, utbl_chksum : 0xe619d30d) [ 415.129210][ T7873] exFAT-fs (loop6): valid_size(150994954) is greater than size(10) [ 415.222798][ T7776] hsr_slave_0: entered promiscuous mode [ 415.226157][ T29] audit: type=1804 audit(1733123374.048:16): pid=7873 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.6.398" name="/newroot/47/file2/file1" dev="loop6" ino=1048667 res=1 errno=0 [ 415.292294][ T7776] hsr_slave_1: entered promiscuous mode [ 415.330397][ T7776] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 415.330482][ T7776] Cannot create hsr debugfs directory [ 415.684078][ T7883] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 415.761946][ T7878] loop5: detected capacity change from 0 to 4096 [ 415.847449][ T7878] ntfs3(loop5): Different NTFS sector size (4096) and media sector size (512). [ 416.009525][ T7885] loop1: detected capacity change from 0 to 256 [ 416.079482][ T7885] exfat: Unknown parameter 'discar' [ 416.636952][ T5791] Bluetooth: hci1: command tx timeout [ 416.830418][ T7893] syz.5.400 (7893): /proc/7876/oom_adj is deprecated, please use /proc/7876/oom_score_adj instead. [ 417.560970][ T7878] sctp: failed to load transform for md5: -2 [ 417.918507][ T7903] loop1: detected capacity change from 0 to 512 [ 417.941276][ T7776] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 418.091028][ T7776] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 418.162716][ T7903] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 418.195962][ T7776] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 418.288738][ T7776] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 418.468679][ T7903] EXT4-fs (loop1): warning: maximal mount count reached, running e2fsck is recommended [ 418.683838][ T7903] EXT4-fs error (device loop1): ext4_orphan_get:1389: comm syz.1.404: inode #15: comm syz.1.404: iget: illegal inode # [ 418.746721][ T7903] EXT4-fs (loop1): Remounting filesystem read-only [ 418.755581][ T7903] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 419.630414][ T29] audit: type=1326 audit(1733123378.228:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7906 comm="syz.6.405" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f952a380849 code=0x7fc00000 [ 420.016213][ T7776] 8021q: adding VLAN 0 to HW filter on device bond0 [ 420.077996][ T7776] 8021q: adding VLAN 0 to HW filter on device team0 [ 420.192664][ T7776] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 420.203373][ T7776] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 420.260529][ T1133] bridge0: port 1(bridge_slave_0) entered blocking state [ 420.268233][ T1133] bridge0: port 1(bridge_slave_0) entered forwarding state [ 420.285810][ T1133] bridge0: port 2(bridge_slave_1) entered blocking state [ 420.293550][ T1133] bridge0: port 2(bridge_slave_1) entered forwarding state [ 420.872269][ T7923] FAULT_INJECTION: forcing a failure. [ 420.872269][ T7923] name failslab, interval 1, probability 0, space 0, times 0 [ 420.887003][ T7923] CPU: 1 UID: 0 PID: 7923 Comm: syz.0.408 Not tainted 6.13.0-rc1-syzkaller #0 [ 420.896154][ T7923] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 420.906441][ T7923] Call Trace: [ 420.909902][ T7923] [ 420.913017][ T7923] dump_stack_lvl+0x216/0x2d0 [ 420.918013][ T7923] dump_stack+0x1e/0x24 [ 420.922462][ T7923] should_fail_ex+0x748/0x7f0 [ 420.927462][ T7923] should_failslab+0x17f/0x210 [ 420.932517][ T7923] kmem_cache_alloc_node_noprof+0xf4/0xe00 [ 420.938657][ T7923] ? __alloc_skb+0x1e9/0x7b0 [ 420.943518][ T7923] ? kmsan_get_metadata+0x13e/0x1c0 [ 420.949013][ T7923] __alloc_skb+0x1e9/0x7b0 [ 420.953715][ T7923] pfkey_sendmsg+0x1cd/0x1b90 [ 420.958677][ T7923] ? kmsan_internal_set_shadow_origin+0x69/0x100 [ 420.965349][ T7923] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 420.971450][ T7923] ? aa_sk_perm+0x881/0xd90 [ 420.976256][ T7923] ? aa_sock_msg_perm+0xea/0x240 [ 420.981499][ T7923] ? kmsan_get_metadata+0x13e/0x1c0 [ 420.986982][ T7923] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 420.993077][ T7923] ? __pfx_pfkey_sendmsg+0x10/0x10 [ 420.998482][ T7923] ? __pfx_pfkey_sendmsg+0x10/0x10 [ 421.003882][ T7923] ? __pfx_pfkey_sendmsg+0x10/0x10 [ 421.009273][ T7923] __sock_sendmsg+0x30f/0x380 [ 421.014263][ T7923] ____sys_sendmsg+0x877/0xb60 [ 421.019334][ T7923] ___sys_sendmsg+0x28d/0x3c0 [ 421.024288][ T7923] ? kmsan_get_metadata+0x13e/0x1c0 [ 421.029774][ T7923] ? __rcu_read_unlock+0x7b/0xe0 [ 421.035029][ T7923] ? __fget_files+0x42b/0x500 [ 421.039990][ T7923] ? kmsan_get_metadata+0x13e/0x1c0 [ 421.045465][ T7923] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 421.051586][ T7923] __x64_sys_sendmsg+0x212/0x3c0 [ 421.056879][ T7923] ? kmsan_get_metadata+0x13e/0x1c0 [ 421.062359][ T7923] x64_sys_call+0x2ed6/0x3c30 [ 421.067360][ T7923] do_syscall_64+0xcd/0x1e0 [ 421.072173][ T7923] ? clear_bhb_loop+0x25/0x80 [ 421.077162][ T7923] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 421.083390][ T7923] RIP: 0033:0x7f1a24380849 [ 421.088043][ T7923] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 421.107955][ T7923] RSP: 002b:00007f1a221f6058 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 421.116691][ T7923] RAX: ffffffffffffffda RBX: 00007f1a24545fa0 RCX: 00007f1a24380849 [ 421.124915][ T7923] RDX: 0000000000000000 RSI: 00000000200014c0 RDI: 0000000000000003 [ 421.133124][ T7923] RBP: 00007f1a221f60a0 R08: 0000000000000000 R09: 0000000000000000 [ 421.141336][ T7923] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 421.149543][ T7923] R13: 0000000000000000 R14: 00007f1a24545fa0 R15: 00007ffeb366bb08 [ 421.157789][ T7923] [ 421.452380][ T5792] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 422.193831][ T7776] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 422.813151][ T7776] veth0_vlan: entered promiscuous mode [ 422.877453][ T7776] veth1_vlan: entered promiscuous mode [ 422.964729][ T7776] veth0_macvtap: entered promiscuous mode [ 423.041328][ T7776] veth1_macvtap: entered promiscuous mode [ 423.142069][ T7946] loop1: detected capacity change from 0 to 256 [ 423.167609][ T7776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 423.179419][ T7776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 423.189613][ T7776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 423.202274][ T7776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 423.212504][ T7776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 423.223371][ T7776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 423.236522][ T7776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 423.247870][ T7776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 423.262495][ T7776] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 423.266474][ T7946] exfat: Unknown parameter 'discar' [ 423.584113][ T7776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 423.595032][ T7776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 423.605314][ T7776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 423.616216][ T7776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 423.626558][ T7776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 423.637392][ T7776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 423.650340][ T7776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 423.661780][ T7776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 423.676389][ T7776] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 423.903051][ T7959] netlink: 16 bytes leftover after parsing attributes in process `syz.6.418'. [ 424.137531][ T7776] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 424.147669][ T7776] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 424.159623][ T7776] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 424.169352][ T7776] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 425.105120][ T7970] binder: Unknown parameter 'sta|s' [ 425.424964][ T29] audit: type=1326 audit(1733123384.248:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7962 comm="syz.5.420" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9baf80849 code=0x7fc00000 [ 427.940260][ T2150] usb 2-1: new low-speed USB device number 12 using dummy_hcd [ 428.102249][ T7986] loop5: detected capacity change from 0 to 4096 [ 428.123670][ T2150] usb 2-1: device descriptor read/64, error -71 [ 428.385935][ T2150] usb 2-1: new low-speed USB device number 13 using dummy_hcd [ 428.561216][ T2150] usb 2-1: device descriptor read/64, error -71 [ 428.675787][ T2150] usb usb2-port1: attempt power cycle [ 429.085102][ T2150] usb 2-1: new low-speed USB device number 14 using dummy_hcd [ 429.090966][ T8002] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 429.201412][ T2150] usb 2-1: device descriptor read/8, error -71 [ 429.692444][ T2150] usb 2-1: new low-speed USB device number 15 using dummy_hcd [ 429.733156][ T2150] usb 2-1: device descriptor read/8, error -71 [ 429.744757][ T8002] loop6: detected capacity change from 0 to 256 [ 429.756481][ T8002] exfat: Unknown parameter 'discar' [ 429.881330][ T2150] usb usb2-port1: unable to enumerate USB device [ 430.772038][ T8019] loop6: detected capacity change from 0 to 1024 [ 431.032399][ T5795] Bluetooth: hci5: command 0x0406 tx timeout [ 432.264409][ T4781] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 432.272953][ T4781] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 432.374414][ T4856] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 432.382611][ T4856] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 433.425775][ T34] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 433.613745][ T34] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 434.340495][ T34] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 434.573099][ T34] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 436.160985][ T34] bridge_slave_1: left allmulticast mode [ 436.166901][ T34] bridge_slave_1: left promiscuous mode [ 436.173687][ T34] bridge0: port 2(bridge_slave_1) entered disabled state [ 436.282032][ T34] bridge_slave_0: left allmulticast mode [ 436.287945][ T34] bridge_slave_0: left promiscuous mode [ 436.294692][ T34] bridge0: port 1(bridge_slave_0) entered disabled state [ 437.792477][ T34] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 437.897305][ T34] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 438.124424][ T5795] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 438.195961][ T5795] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 438.212829][ T34] bond0 (unregistering): Released all slaves [ 438.231218][ T5795] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 438.246945][ T5795] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 438.260293][ T5795] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 438.279112][ T5795] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 440.390556][ T5795] Bluetooth: hci1: command tx timeout [ 440.480341][ T34] hsr_slave_0: left promiscuous mode [ 440.510786][ T34] hsr_slave_1: left promiscuous mode [ 440.532169][ T34] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 440.542263][ T34] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 440.603015][ T34] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 440.610846][ T34] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 440.744452][ T34] veth1_macvtap: left promiscuous mode [ 440.750583][ T34] veth0_macvtap: left promiscuous mode [ 440.756576][ T34] veth1_vlan: left promiscuous mode [ 440.762410][ T34] veth0_vlan: left promiscuous mode [ 441.827210][ T34] team0 (unregistering): Port device team_slave_1 removed [ 442.092440][ T34] team0 (unregistering): Port device team_slave_0 removed [ 442.372925][ T8106] netlink: 8 bytes leftover after parsing attributes in process `syz.1.459'. [ 442.472703][ T5795] Bluetooth: hci1: command tx timeout [ 444.550426][ T5795] Bluetooth: hci1: command tx timeout [ 445.221099][ T8059] chnl_net:caif_netlink_parms(): no params data found [ 446.648420][ T5795] Bluetooth: hci1: command tx timeout [ 447.904753][ T8059] bridge0: port 1(bridge_slave_0) entered blocking state [ 447.915911][ T8059] bridge0: port 1(bridge_slave_0) entered disabled state [ 447.923897][ T8059] bridge_slave_0: entered allmulticast mode [ 448.018396][ T8059] bridge_slave_0: entered promiscuous mode [ 448.068334][ T8059] bridge0: port 2(bridge_slave_1) entered blocking state [ 448.076508][ T8059] bridge0: port 2(bridge_slave_1) entered disabled state [ 448.084528][ T8059] bridge_slave_1: entered allmulticast mode [ 448.093616][ T8059] bridge_slave_1: entered promiscuous mode [ 448.249662][ T5791] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 448.271649][ T5791] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 448.282419][ T5791] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 448.326861][ T5791] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 448.351716][ T5791] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 448.438064][ T5791] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 448.941110][ T8059] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 449.087220][ T8059] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 449.581156][ T8059] team0: Port device team_slave_0 added [ 449.708872][ T8059] team0: Port device team_slave_1 added [ 450.202019][ T8166] Driver unsupported XDP return value 0 on prog (id 59) dev N/A, expect packet loss! [ 450.226811][ T34] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 450.422907][ T34] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 450.502116][ T8059] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 450.509305][ T8059] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 450.536133][ T8059] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 450.605018][ T34] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 450.755749][ T34] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 450.792816][ T5795] Bluetooth: hci2: command tx timeout [ 450.884480][ T8059] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 450.892374][ T8059] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 450.918812][ T8059] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 450.955802][ T8145] chnl_net:caif_netlink_parms(): no params data found [ 451.740709][ T34] bridge_slave_1: left allmulticast mode [ 451.746739][ T34] bridge_slave_1: left promiscuous mode [ 451.753900][ T34] bridge0: port 2(bridge_slave_1) entered disabled state [ 451.852891][ T34] bridge_slave_0: left allmulticast mode [ 451.858803][ T34] bridge_slave_0: left promiscuous mode [ 451.865716][ T34] bridge0: port 1(bridge_slave_0) entered disabled state [ 452.778939][ T34] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 452.894130][ T34] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 452.905661][ T5795] Bluetooth: hci2: command tx timeout [ 452.934744][ T34] bond0 (unregistering): Released all slaves [ 453.071471][ T8059] hsr_slave_0: entered promiscuous mode [ 453.192143][ T8059] hsr_slave_1: entered promiscuous mode [ 453.379277][ T8059] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 453.387301][ T8059] Cannot create hsr debugfs directory [ 454.253622][ T8145] bridge0: port 1(bridge_slave_0) entered blocking state [ 454.264754][ T8145] bridge0: port 1(bridge_slave_0) entered disabled state [ 454.272712][ T8145] bridge_slave_0: entered allmulticast mode [ 454.281832][ T8145] bridge_slave_0: entered promiscuous mode [ 454.528626][ T34] hsr_slave_0: left promiscuous mode [ 454.601839][ T34] hsr_slave_1: left promiscuous mode [ 454.625713][ T34] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 454.634068][ T34] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 454.661034][ T34] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 454.669982][ T34] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 454.758802][ T34] veth1_macvtap: left promiscuous mode [ 454.764820][ T34] veth0_macvtap: left promiscuous mode [ 454.771818][ T34] veth1_vlan: left promiscuous mode [ 454.777395][ T34] veth0_vlan: left promiscuous mode [ 454.950864][ T5795] Bluetooth: hci2: command tx timeout [ 455.344807][ T34] team0 (unregistering): Port device team_slave_1 removed [ 455.445416][ T34] team0 (unregistering): Port device team_slave_0 removed [ 455.873110][ T8145] bridge0: port 2(bridge_slave_1) entered blocking state [ 455.881088][ T8145] bridge0: port 2(bridge_slave_1) entered disabled state [ 455.888925][ T8145] bridge_slave_1: entered allmulticast mode [ 455.900266][ T8145] bridge_slave_1: entered promiscuous mode [ 456.249189][ T8145] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 456.590546][ T8145] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 456.957038][ T8145] team0: Port device team_slave_0 added [ 457.035802][ T5795] Bluetooth: hci2: command tx timeout [ 457.060901][ T8145] team0: Port device team_slave_1 added [ 457.366437][ T8145] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 457.374937][ T8145] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 457.402221][ T8145] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 457.418751][ T8145] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 457.426075][ T8145] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 457.453333][ T8145] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 457.745477][ T8145] hsr_slave_0: entered promiscuous mode [ 457.785020][ T8145] hsr_slave_1: entered promiscuous mode [ 457.798640][ T8145] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 457.806658][ T8145] Cannot create hsr debugfs directory [ 457.963212][ T8059] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 458.031373][ T8059] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 458.093743][ T8059] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 458.193925][ T8059] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 459.363532][ T8059] 8021q: adding VLAN 0 to HW filter on device bond0 [ 459.409327][ T8059] 8021q: adding VLAN 0 to HW filter on device team0 [ 459.490979][ T4955] bridge0: port 1(bridge_slave_0) entered blocking state [ 459.498638][ T4955] bridge0: port 1(bridge_slave_0) entered forwarding state [ 459.514115][ T4955] bridge0: port 2(bridge_slave_1) entered blocking state [ 459.521880][ T4955] bridge0: port 2(bridge_slave_1) entered forwarding state [ 459.686957][ T8145] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 459.779240][ T8145] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 459.812534][ T8145] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 459.976937][ T8145] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 460.129311][ T8059] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 461.155876][ T8145] 8021q: adding VLAN 0 to HW filter on device bond0 [ 461.353452][ T8145] 8021q: adding VLAN 0 to HW filter on device team0 [ 461.516913][ T3831] bridge0: port 1(bridge_slave_0) entered blocking state [ 461.524722][ T3831] bridge0: port 1(bridge_slave_0) entered forwarding state [ 461.541322][ T3831] bridge0: port 2(bridge_slave_1) entered blocking state [ 461.548998][ T3831] bridge0: port 2(bridge_slave_1) entered forwarding state [ 461.697996][ T8145] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 461.710181][ T8145] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 462.019560][ T8059] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 462.600029][ T8059] veth0_vlan: entered promiscuous mode [ 462.763018][ T8059] veth1_vlan: entered promiscuous mode [ 463.090739][ T8059] veth0_macvtap: entered promiscuous mode [ 463.227612][ T8059] veth1_macvtap: entered promiscuous mode [ 463.496824][ T8145] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 463.551536][ T8059] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 463.562315][ T8059] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 463.572474][ T8059] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 463.584459][ T8059] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 463.594940][ T8059] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 463.605698][ T8059] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 463.621338][ T8059] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 464.028753][ T8059] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 464.040483][ T8059] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 464.050687][ T8059] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 464.061421][ T8059] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 464.072473][ T8059] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 464.083209][ T8059] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 464.099302][ T8059] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 464.517243][ T8059] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 464.526855][ T8059] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 464.536153][ T8059] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 464.545414][ T8059] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 464.814204][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 464.821127][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 466.322366][ T8145] veth0_vlan: entered promiscuous mode [ 466.451709][ T8145] veth1_vlan: entered promiscuous mode [ 466.799104][ T8145] veth0_macvtap: entered promiscuous mode [ 466.858556][ T8145] veth1_macvtap: entered promiscuous mode [ 466.914122][ T8145] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 466.924982][ T8145] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 466.935973][ T8145] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 466.948117][ T8145] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 466.959201][ T8145] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 466.970445][ T8145] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 466.980560][ T8145] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 466.991311][ T8145] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 467.005808][ T8145] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 467.023531][ T8145] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 467.034970][ T8145] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 467.045064][ T8145] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 467.055796][ T8145] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 467.066962][ T8145] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 467.077984][ T8145] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 467.088103][ T8145] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 467.098897][ T8145] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 467.114232][ T8145] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 467.181954][ T8145] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 467.192005][ T8145] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 467.201120][ T8145] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 467.210301][ T8145] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 469.651127][ T8414] xt_CT: No such helper "snmp" [ 472.003770][ T5067] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 472.013194][ T5067] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 472.115136][ T3831] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 472.123952][ T3831] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 473.349520][ T59] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 473.572058][ T59] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 473.796776][ T59] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 473.928506][ T59] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 474.487981][ T59] bridge_slave_1: left allmulticast mode [ 474.494316][ T59] bridge_slave_1: left promiscuous mode [ 474.501082][ T59] bridge0: port 2(bridge_slave_1) entered disabled state [ 474.951842][ T59] bridge_slave_0: left allmulticast mode [ 474.957868][ T59] bridge_slave_0: left promiscuous mode [ 474.965563][ T59] bridge0: port 1(bridge_slave_0) entered disabled state [ 475.470840][ T59] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 475.508777][ T59] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 475.536435][ T59] bond0 (unregistering): Released all slaves [ 475.750163][ T3831] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 475.758313][ T3831] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 476.309402][ T5791] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 476.378583][ T5791] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 476.452654][ T5791] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 476.495449][ T5791] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 476.511683][ T5791] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 476.531863][ T5791] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 476.565197][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 476.573940][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 476.851777][ T59] hsr_slave_0: left promiscuous mode [ 476.885894][ T59] hsr_slave_1: left promiscuous mode [ 476.924003][ T59] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 476.933544][ T59] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 476.963200][ T59] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 476.971173][ T59] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 477.026152][ T59] veth1_macvtap: left promiscuous mode [ 477.032340][ T59] veth0_macvtap: left promiscuous mode [ 477.038365][ T59] veth1_vlan: left promiscuous mode [ 477.044508][ T59] veth0_vlan: left promiscuous mode [ 477.289119][ T6345] IPVS: starting estimator thread 0... [ 477.444368][ T8499] IPVS: using max 240 ests per chain, 12000 per kthread [ 477.667723][ T59] team0 (unregistering): Port device team_slave_1 removed [ 477.694528][ T59] team0 (unregistering): Port device team_slave_0 removed [ 478.481588][ T8498] tipc: Started in network mode [ 478.486820][ T8498] tipc: Node identity ac1414aa, cluster identity 4711 [ 478.497372][ T8498] tipc: Enabled bearer , priority 10 [ 478.761304][ T5791] Bluetooth: hci1: command tx timeout [ 479.325541][ T8491] chnl_net:caif_netlink_parms(): no params data found [ 479.610852][ T5846] tipc: Node number set to 2886997162 [ 480.393164][ T8537] netlink: 8 bytes leftover after parsing attributes in process `syz.1.568'. [ 480.879258][ T5791] Bluetooth: hci1: command tx timeout [ 481.330963][ T8491] bridge0: port 1(bridge_slave_0) entered blocking state [ 481.338666][ T8491] bridge0: port 1(bridge_slave_0) entered disabled state [ 481.346640][ T8491] bridge_slave_0: entered allmulticast mode [ 481.355791][ T8491] bridge_slave_0: entered promiscuous mode [ 481.488282][ T8491] bridge0: port 2(bridge_slave_1) entered blocking state [ 481.499211][ T8491] bridge0: port 2(bridge_slave_1) entered disabled state [ 481.507307][ T8491] bridge_slave_1: entered allmulticast mode [ 481.516478][ T8491] bridge_slave_1: entered promiscuous mode [ 481.973847][ T8491] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 482.074702][ T8491] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 482.452883][ T8491] team0: Port device team_slave_0 added [ 482.524455][ T8491] team0: Port device team_slave_1 added [ 482.780983][ T8491] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 482.788337][ T8491] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 482.815081][ T8491] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 482.960575][ T8491] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 482.967907][ T8491] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 482.995073][ T8491] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 483.004803][ T5791] Bluetooth: hci1: command tx timeout [ 483.533137][ T8491] hsr_slave_0: entered promiscuous mode [ 483.631492][ T8491] hsr_slave_1: entered promiscuous mode [ 483.690230][ T8491] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 483.698035][ T8491] Cannot create hsr debugfs directory [ 485.030994][ T5791] Bluetooth: hci1: command tx timeout [ 486.516753][ T8491] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 486.619553][ T8491] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 486.741178][ T8491] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 486.822886][ T8491] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 487.789359][ T8491] 8021q: adding VLAN 0 to HW filter on device bond0 [ 487.838636][ T8491] 8021q: adding VLAN 0 to HW filter on device team0 [ 487.866368][ T3831] bridge0: port 1(bridge_slave_0) entered blocking state [ 487.874107][ T3831] bridge0: port 1(bridge_slave_0) entered forwarding state [ 487.910338][ T3831] bridge0: port 2(bridge_slave_1) entered blocking state [ 487.918087][ T3831] bridge0: port 2(bridge_slave_1) entered forwarding state [ 489.879661][ T8491] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 490.498075][ T8491] veth0_vlan: entered promiscuous mode [ 490.573902][ T8491] veth1_vlan: entered promiscuous mode [ 490.692083][ T8491] veth0_macvtap: entered promiscuous mode [ 490.714578][ T8491] veth1_macvtap: entered promiscuous mode [ 490.768482][ T8491] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 490.779801][ T8491] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 490.789994][ T8491] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 490.800723][ T8491] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 490.810874][ T8491] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 490.823113][ T8491] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 490.833524][ T8491] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 490.844245][ T8491] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 490.859125][ T8491] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 490.876839][ T8491] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 490.888271][ T8491] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 490.898352][ T8491] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 490.909101][ T8491] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 490.920761][ T8491] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 490.931782][ T8491] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 490.942000][ T8491] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 490.952965][ T8491] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 490.973128][ T8491] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 491.137500][ T8491] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 491.146732][ T8491] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 491.156382][ T8491] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 491.165514][ T8491] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 492.025433][ T8713] loop5: detected capacity change from 0 to 512 [ 492.111712][ T8713] UDF-fs: warning (device loop5): udf_load_vrs: No VRS found [ 492.119501][ T8713] UDF-fs: Scanning with blocksize 512 failed [ 492.181561][ T8713] UDF-fs: warning (device loop5): udf_load_vrs: No VRS found [ 492.189215][ T8713] UDF-fs: Scanning with blocksize 1024 failed [ 492.256677][ T8713] UDF-fs: warning (device loop5): udf_load_vrs: No VRS found [ 492.266024][ T8713] UDF-fs: Scanning with blocksize 2048 failed [ 492.342788][ T8713] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256 [ 492.428553][ T8713] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 492.967867][ T8721] loop7: detected capacity change from 0 to 512 [ 493.050752][ T8721] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 493.228397][ T8721] EXT4-fs (loop7): 1 orphan inode deleted [ 493.234950][ T8721] EXT4-fs (loop7): 1 truncate cleaned up [ 493.242784][ T8721] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 494.039040][ T8145] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 497.827951][ T4955] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 497.836206][ T4955] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 497.865463][ T3831] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 497.873681][ T3831] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 498.726479][ T3831] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 499.426290][ T3831] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 499.644491][ T3831] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 499.751178][ T3831] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 499.991058][ T3831] bridge_slave_1: left allmulticast mode [ 499.996973][ T3831] bridge_slave_1: left promiscuous mode [ 500.004094][ T3831] bridge0: port 2(bridge_slave_1) entered disabled state [ 500.093042][ T3831] bridge_slave_0: left allmulticast mode [ 500.098957][ T3831] bridge_slave_0: left promiscuous mode [ 500.105938][ T3831] bridge0: port 1(bridge_slave_0) entered disabled state [ 500.626721][ T3831] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 500.696812][ T3831] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 500.743742][ T3831] bond0 (unregistering): Released all slaves [ 501.660644][ T3831] hsr_slave_0: left promiscuous mode [ 501.721509][ T3831] hsr_slave_1: left promiscuous mode [ 501.777684][ T3831] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 501.781457][ T5795] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 501.786304][ T3831] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 501.804713][ T5795] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 501.824592][ T5795] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 501.844082][ T3831] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 501.852071][ T3831] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 501.874834][ T3831] veth1_macvtap: left promiscuous mode [ 501.880807][ T3831] veth0_macvtap: left promiscuous mode [ 501.886701][ T3831] veth1_vlan: left promiscuous mode [ 501.892432][ T3831] veth0_vlan: left promiscuous mode [ 501.900806][ T5795] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 501.915638][ T5795] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 501.926469][ T5795] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 503.722932][ T3831] team0 (unregistering): Port device team_slave_1 removed [ 503.853936][ T3831] team0 (unregistering): Port device team_slave_0 removed [ 503.992989][ T5795] Bluetooth: hci1: command tx timeout [ 506.079984][ T5795] Bluetooth: hci1: command tx timeout [ 506.460604][ T8859] chnl_net:caif_netlink_parms(): no params data found [ 507.720304][ T8859] bridge0: port 1(bridge_slave_0) entered blocking state [ 507.728061][ T8859] bridge0: port 1(bridge_slave_0) entered disabled state [ 507.736009][ T8859] bridge_slave_0: entered allmulticast mode [ 507.745068][ T8859] bridge_slave_0: entered promiscuous mode [ 507.834666][ T8859] bridge0: port 2(bridge_slave_1) entered blocking state [ 507.842552][ T8859] bridge0: port 2(bridge_slave_1) entered disabled state [ 507.850449][ T8859] bridge_slave_1: entered allmulticast mode [ 507.859415][ T8859] bridge_slave_1: entered promiscuous mode [ 507.973657][ T8859] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 508.030066][ T8859] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 508.150890][ T5795] Bluetooth: hci1: command tx timeout [ 508.581979][ T8859] team0: Port device team_slave_0 added [ 508.599045][ T8859] team0: Port device team_slave_1 added [ 508.721973][ T8859] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 508.729150][ T8859] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 508.756708][ T8859] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 508.834660][ T8859] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 508.842955][ T8859] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 508.869847][ T8859] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 509.371377][ T8859] hsr_slave_0: entered promiscuous mode [ 509.461175][ T8859] hsr_slave_1: entered promiscuous mode [ 509.535710][ T8859] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 509.543821][ T8859] Cannot create hsr debugfs directory [ 510.230573][ T5795] Bluetooth: hci1: command tx timeout [ 511.644816][ T8859] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 511.714554][ T8859] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 511.801953][ T8859] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 511.901755][ T8859] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 513.378250][ T8859] 8021q: adding VLAN 0 to HW filter on device bond0 [ 513.486557][ T8859] 8021q: adding VLAN 0 to HW filter on device team0 [ 513.619362][ T8859] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 513.630208][ T8859] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 513.692906][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 513.700667][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 513.717148][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 513.724873][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 515.143862][ T8859] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 515.703400][ T8859] veth0_vlan: entered promiscuous mode [ 515.819150][ T8859] veth1_vlan: entered promiscuous mode [ 516.140790][ T8859] veth0_macvtap: entered promiscuous mode [ 516.272745][ T8859] veth1_macvtap: entered promiscuous mode [ 516.486313][ T8859] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 516.497077][ T8859] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 516.507284][ T8859] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 516.519572][ T8859] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 516.530336][ T8859] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 516.541058][ T8859] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 516.551183][ T8859] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 516.561918][ T8859] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 516.576374][ T8859] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 516.597529][ T8859] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 516.608367][ T8859] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 516.618529][ T8859] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 516.630810][ T8859] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 516.642161][ T8859] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 516.652890][ T8859] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 516.662990][ T8859] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 516.673796][ T8859] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 516.688162][ T8859] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 516.840524][ T8859] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 516.849593][ T8859] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 516.858928][ T8859] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 516.868060][ T8859] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 523.730325][ T4304] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 523.738299][ T4304] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 524.088393][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 524.099687][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 525.455115][ T34] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 525.678617][ T34] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 525.865696][ T34] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 526.105939][ T34] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 526.279663][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 526.286584][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 526.722041][ T34] bridge_slave_1: left allmulticast mode [ 526.727941][ T34] bridge_slave_1: left promiscuous mode [ 526.734689][ T34] bridge0: port 2(bridge_slave_1) entered disabled state [ 526.989350][ T34] bridge_slave_0: left allmulticast mode [ 526.995574][ T34] bridge_slave_0: left promiscuous mode [ 527.002342][ T34] bridge0: port 1(bridge_slave_0) entered disabled state [ 527.407539][ T34] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 527.427306][ T34] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 527.447765][ T34] bond0 (unregistering): Released all slaves [ 527.805655][ T34] hsr_slave_0: left promiscuous mode [ 527.817963][ T34] hsr_slave_1: left promiscuous mode [ 527.830296][ T34] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 527.837972][ T34] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 527.848858][ T34] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 527.856651][ T34] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 527.874493][ T34] veth1_macvtap: left promiscuous mode [ 527.880491][ T34] veth0_macvtap: left promiscuous mode [ 527.886981][ T34] veth1_vlan: left promiscuous mode [ 527.892769][ T34] veth0_vlan: left promiscuous mode [ 528.521856][ T34] team0 (unregistering): Port device team_slave_1 removed [ 528.582335][ T34] team0 (unregistering): Port device team_slave_0 removed [ 529.121295][ T5791] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 529.130886][ T5791] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 529.140530][ T5791] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 529.153613][ T5791] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 529.164656][ T5791] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 529.173934][ T5791] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 530.270808][ T9278] chnl_net:caif_netlink_parms(): no params data found [ 531.272071][ T5791] Bluetooth: hci1: command tx timeout [ 531.734721][ T9278] bridge0: port 1(bridge_slave_0) entered blocking state [ 531.743804][ T9278] bridge0: port 1(bridge_slave_0) entered disabled state [ 531.751734][ T9278] bridge_slave_0: entered allmulticast mode [ 531.761125][ T9278] bridge_slave_0: entered promiscuous mode [ 531.832929][ T9278] bridge0: port 2(bridge_slave_1) entered blocking state [ 531.840884][ T9278] bridge0: port 2(bridge_slave_1) entered disabled state [ 531.848684][ T9278] bridge_slave_1: entered allmulticast mode [ 531.857827][ T9278] bridge_slave_1: entered promiscuous mode [ 531.975350][ T9324] Bluetooth: MGMT ver 1.23 [ 532.046583][ T9278] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 532.116062][ T9278] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 532.358745][ T9278] team0: Port device team_slave_0 added [ 532.421117][ T9278] team0: Port device team_slave_1 added [ 532.674307][ T9278] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 532.681600][ T9278] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 532.710420][ T9278] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 532.727227][ T9278] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 532.734655][ T9278] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 532.761483][ T9278] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 532.934192][ T9278] hsr_slave_0: entered promiscuous mode [ 532.991033][ T9278] hsr_slave_1: entered promiscuous mode [ 533.053039][ T9278] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 533.061046][ T9278] Cannot create hsr debugfs directory [ 533.356014][ T5791] Bluetooth: hci1: command tx timeout [ 535.034578][ T9278] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 535.254772][ T9278] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 535.292775][ T9278] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 535.431081][ T5791] Bluetooth: hci1: command tx timeout [ 535.482028][ T9278] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 536.913020][ T9278] 8021q: adding VLAN 0 to HW filter on device bond0 [ 537.004230][ T9278] 8021q: adding VLAN 0 to HW filter on device team0 [ 537.069243][ T34] bridge0: port 1(bridge_slave_0) entered blocking state [ 537.077020][ T34] bridge0: port 1(bridge_slave_0) entered forwarding state [ 537.311063][ T34] bridge0: port 2(bridge_slave_1) entered blocking state [ 537.318727][ T34] bridge0: port 2(bridge_slave_1) entered forwarding state [ 537.510732][ T5791] Bluetooth: hci1: command tx timeout [ 539.262745][ T9278] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 540.010698][ T9278] veth0_vlan: entered promiscuous mode [ 540.135472][ T9278] veth1_vlan: entered promiscuous mode [ 540.483039][ T9278] veth0_macvtap: entered promiscuous mode [ 540.598951][ T9278] veth1_macvtap: entered promiscuous mode [ 540.756577][ T9278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 540.767352][ T9278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 540.778134][ T9278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 540.790405][ T9278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 540.800900][ T9278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 540.811624][ T9278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 540.821744][ T9278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 540.832542][ T9278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 540.846983][ T9278] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 540.907332][ T9278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 540.918094][ T9278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 540.928175][ T9278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 540.944704][ T9278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 540.955292][ T9278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 540.966008][ T9278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 540.976113][ T9278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 540.987092][ T9278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 541.003431][ T9278] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 541.021871][ T9278] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 541.031963][ T9278] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 541.041052][ T9278] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 541.050129][ T9278] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 547.263025][ T9534] tipc: Started in network mode [ 547.268237][ T9534] tipc: Node identity 7e63c49e18ed, cluster identity 4711 [ 547.276593][ T9534] tipc: Enabled bearer , priority 0 [ 547.439423][ T9536] tipc: Resetting bearer [ 547.751025][ T9532] tipc: Resetting bearer [ 547.891187][ T9532] tipc: Disabling bearer [ 548.609405][ T9559] netlink: 12 bytes leftover after parsing attributes in process `syz.7.898'. [ 548.954638][ T4955] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 548.962956][ T4955] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 548.977261][ T4955] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 548.986675][ T4955] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 551.087687][ T9590] netlink: 12 bytes leftover after parsing attributes in process `syz.5.909'. [ 551.371034][ T3831] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 551.605577][ T3831] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 551.833720][ T3831] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 552.007919][ T3831] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 552.435643][ T3831] bridge_slave_1: left allmulticast mode [ 552.441930][ T3831] bridge_slave_1: left promiscuous mode [ 552.448477][ T3831] bridge0: port 2(bridge_slave_1) entered disabled state [ 552.476122][ T3831] bridge_slave_0: left allmulticast mode [ 552.482240][ T3831] bridge_slave_0: left promiscuous mode [ 552.488777][ T3831] bridge0: port 1(bridge_slave_0) entered disabled state [ 552.938409][ T3831] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 552.981649][ T3831] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 552.996207][ T3831] bond0 (unregistering): Released all slaves [ 553.466319][ T3831] hsr_slave_0: left promiscuous mode [ 553.480442][ T3831] hsr_slave_1: left promiscuous mode [ 553.493185][ T3831] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 553.501061][ T3831] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 553.512916][ T3831] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 553.520679][ T3831] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 553.538042][ T3831] veth1_macvtap: left promiscuous mode [ 553.544219][ T3831] veth0_macvtap: left promiscuous mode [ 553.550253][ T3831] veth1_vlan: left promiscuous mode [ 553.555720][ T3831] veth0_vlan: left promiscuous mode [ 554.001261][ T3831] team0 (unregistering): Port device team_slave_1 removed [ 554.024686][ T3831] team0 (unregistering): Port device team_slave_0 removed [ 555.594816][ T9634] netlink: 12 bytes leftover after parsing attributes in process `syz.0.922'. [ 555.962401][ T5795] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 556.062657][ T5795] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 556.072722][ T5795] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 556.092406][ T5795] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 556.104281][ T5795] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 556.115122][ T5795] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 558.229971][ T5795] Bluetooth: hci1: command tx timeout [ 558.252223][ T9639] chnl_net:caif_netlink_parms(): no params data found [ 560.058169][ T9639] bridge0: port 1(bridge_slave_0) entered blocking state [ 560.066134][ T9639] bridge0: port 1(bridge_slave_0) entered disabled state [ 560.074231][ T9639] bridge_slave_0: entered allmulticast mode [ 560.083315][ T9639] bridge_slave_0: entered promiscuous mode [ 560.202598][ T9639] bridge0: port 2(bridge_slave_1) entered blocking state [ 560.211371][ T9639] bridge0: port 2(bridge_slave_1) entered disabled state [ 560.219153][ T9639] bridge_slave_1: entered allmulticast mode [ 560.228463][ T9639] bridge_slave_1: entered promiscuous mode [ 560.310778][ T5795] Bluetooth: hci1: command tx timeout [ 560.532225][ T9639] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 560.685791][ T9639] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 561.115488][ T9639] team0: Port device team_slave_0 added [ 561.244282][ T9639] team0: Port device team_slave_1 added [ 561.737855][ T9639] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 561.745296][ T9639] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 561.773005][ T9639] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 561.918786][ T9639] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 561.926555][ T9639] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 561.953149][ T9639] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 562.390410][ T5795] Bluetooth: hci1: command tx timeout [ 562.393341][ T9639] hsr_slave_0: entered promiscuous mode [ 562.424760][ T9639] hsr_slave_1: entered promiscuous mode [ 562.441905][ T9639] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 562.450110][ T9639] Cannot create hsr debugfs directory [ 564.389078][ T9639] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 564.473291][ T5795] Bluetooth: hci1: command tx timeout [ 564.520050][ T9639] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 564.575764][ T9639] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 564.641511][ T9639] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 565.560177][ T9639] 8021q: adding VLAN 0 to HW filter on device bond0 [ 565.627072][ T9639] 8021q: adding VLAN 0 to HW filter on device team0 [ 565.687866][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 565.695653][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 565.710864][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 565.718546][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 567.195858][ C0] EXT4-fs (loop0): error count since last fsck: 4 [ 567.202702][ C0] EXT4-fs (loop0): initial error at time 1733123220: ext4_free_branches:1023: inode 16 [ 567.212805][ C0] EXT4-fs (loop0): last error at time 1733123223: ext4_mb_generate_buddy:1220 [ 567.391295][ T9639] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 567.879835][ T9639] veth0_vlan: entered promiscuous mode [ 568.003416][ T9639] veth1_vlan: entered promiscuous mode [ 568.370664][ T9639] veth0_macvtap: entered promiscuous mode [ 568.427144][ T9639] veth1_macvtap: entered promiscuous mode [ 568.651048][ T9639] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 568.662338][ T9639] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 568.672508][ T9639] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 568.683314][ T9639] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 568.693457][ T9639] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 568.704265][ T9639] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 568.716257][ T9639] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 568.727122][ T9639] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 568.743249][ T9639] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 569.042712][ T9639] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 569.054694][ T9639] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 569.065149][ T9639] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 569.075955][ T9639] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 569.086259][ T9639] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 569.097048][ T9639] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 569.107246][ T9639] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 569.118549][ T9639] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 569.133000][ T9639] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 569.222063][ T9639] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 569.231569][ T9639] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 569.240733][ T9639] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 569.249964][ T9639] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 574.393208][ T5791] Bluetooth: hci2: command 0x0406 tx timeout [ 575.350685][ T4955] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 575.359006][ T4955] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 575.745043][ T3831] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 575.754202][ T3831] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 576.465137][ T4856] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 576.644171][ T4856] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 576.822219][ T4856] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 576.973840][ T4856] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 577.368406][ T4856] bridge_slave_1: left allmulticast mode [ 577.374513][ T4856] bridge_slave_1: left promiscuous mode [ 577.381341][ T4856] bridge0: port 2(bridge_slave_1) entered disabled state [ 577.468571][ T4856] bridge_slave_0: left allmulticast mode [ 577.474591][ T4856] bridge_slave_0: left promiscuous mode [ 577.481328][ T4856] bridge0: port 1(bridge_slave_0) entered disabled state [ 577.901576][ T4856] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 577.919895][ T4856] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 577.945375][ T4856] bond0 (unregistering): Released all slaves [ 578.320317][ T4856] hsr_slave_0: left promiscuous mode [ 578.340913][ T4856] hsr_slave_1: left promiscuous mode [ 578.356228][ T4856] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 578.364499][ T4856] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 578.387146][ T4856] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 578.395080][ T4856] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 578.424826][ T4856] veth1_macvtap: left promiscuous mode [ 578.431056][ T4856] veth0_macvtap: left promiscuous mode [ 578.436946][ T4856] veth1_vlan: left promiscuous mode [ 578.442706][ T4856] veth0_vlan: left promiscuous mode [ 579.182050][ T4856] team0 (unregistering): Port device team_slave_1 removed [ 579.227711][ T4856] team0 (unregistering): Port device team_slave_0 removed [ 580.150348][ T5791] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 580.166531][ T5791] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 580.180963][ T5791] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 580.229627][ T5791] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 580.342166][ T5791] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 580.353687][ T5791] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 581.474900][ T9948] chnl_net:caif_netlink_parms(): no params data found [ 582.476272][ T5791] Bluetooth: hci1: command tx timeout [ 582.512945][ T9948] bridge0: port 1(bridge_slave_0) entered blocking state [ 582.523978][ T9948] bridge0: port 1(bridge_slave_0) entered disabled state [ 582.531866][ T9948] bridge_slave_0: entered allmulticast mode [ 582.540913][ T9948] bridge_slave_0: entered promiscuous mode [ 582.566184][ T9948] bridge0: port 2(bridge_slave_1) entered blocking state [ 582.574095][ T9948] bridge0: port 2(bridge_slave_1) entered disabled state [ 582.582067][ T9948] bridge_slave_1: entered allmulticast mode [ 582.591075][ T9948] bridge_slave_1: entered promiscuous mode [ 582.838020][ T9948] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 582.916316][ T9948] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 583.073595][ T9948] team0: Port device team_slave_0 added [ 583.161530][ T9948] team0: Port device team_slave_1 added [ 583.337003][ T9948] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 583.344756][ T9948] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 583.371066][ T9948] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 583.392541][ T9948] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 583.401595][ T9948] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 583.429589][ T9948] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 583.801405][ T9948] hsr_slave_0: entered promiscuous mode [ 583.867373][ T9948] hsr_slave_1: entered promiscuous mode [ 583.901432][ T9948] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 583.909221][ T9948] Cannot create hsr debugfs directory [ 584.583581][ T5791] Bluetooth: hci1: command tx timeout [ 585.589492][ T9948] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 585.613390][ T9948] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 585.641346][ T9948] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 585.686397][ T9948] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 586.632131][ T5791] Bluetooth: hci1: command tx timeout [ 586.834027][ T9948] 8021q: adding VLAN 0 to HW filter on device bond0 [ 587.013731][ T9948] 8021q: adding VLAN 0 to HW filter on device team0 [ 587.111296][ T4781] bridge0: port 1(bridge_slave_0) entered blocking state [ 587.118971][ T4781] bridge0: port 1(bridge_slave_0) entered forwarding state [ 587.147625][ T4781] bridge0: port 2(bridge_slave_1) entered blocking state [ 587.155416][ T4781] bridge0: port 2(bridge_slave_1) entered forwarding state [ 587.295133][ T9948] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 587.305913][ T9948] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 587.694019][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 587.700955][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 588.757545][ T5791] Bluetooth: hci1: command tx timeout [ 588.837671][ T9948] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 589.170016][ T9948] veth0_vlan: entered promiscuous mode [ 589.213263][ T9948] veth1_vlan: entered promiscuous mode [ 589.360049][ T9948] veth0_macvtap: entered promiscuous mode [ 589.407364][ T9948] veth1_macvtap: entered promiscuous mode [ 589.483310][ T9948] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 589.495092][ T9948] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 589.505184][ T9948] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 589.515970][ T9948] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 589.526145][ T9948] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 589.538374][ T9948] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 589.548793][ T9948] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 589.559585][ T9948] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 589.573996][ T9948] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 589.614383][ T9948] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 589.625162][ T9948] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 589.636780][ T9948] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 589.648261][ T9948] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 589.658363][ T9948] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 589.669072][ T9948] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 589.679296][ T9948] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 589.690007][ T9948] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 589.704427][ T9948] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 589.728519][ T9948] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 589.739322][ T9948] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 589.748731][ T9948] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 589.758724][ T9948] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 594.564276][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 594.572742][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 594.716026][ T3831] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 594.724517][ T3831] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 595.599221][ T59] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 595.778666][ T59] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 596.067449][ T59] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 596.399190][ T59] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 596.644852][ T59] bridge_slave_1: left allmulticast mode [ 596.652068][ T59] bridge_slave_1: left promiscuous mode [ 596.658618][ T59] bridge0: port 2(bridge_slave_1) entered disabled state [ 596.673233][ T59] bridge_slave_0: left allmulticast mode [ 596.679117][ T59] bridge_slave_0: left promiscuous mode [ 596.685919][ T59] bridge0: port 1(bridge_slave_0) entered disabled state [ 597.027641][ T59] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 597.047335][ T59] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 597.066196][ T59] bond0 (unregistering): Released all slaves [ 597.451120][ T59] hsr_slave_0: left promiscuous mode [ 597.464960][ T59] hsr_slave_1: left promiscuous mode [ 597.479508][ T59] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 597.487432][ T59] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 597.502477][ T59] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 597.510750][ T59] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 597.545391][ T59] veth1_macvtap: left promiscuous mode [ 597.551829][ T59] veth0_macvtap: left promiscuous mode [ 597.557715][ T59] veth1_vlan: left promiscuous mode [ 597.563413][ T59] veth0_vlan: left promiscuous mode [ 598.632710][ T59] team0 (unregistering): Port device team_slave_1 removed [ 598.726490][ T59] team0 (unregistering): Port device team_slave_0 removed [ 599.301525][ T5795] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 599.405019][ T5795] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 599.462653][ T5795] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 599.583805][ T5795] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 599.618728][ T5795] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 599.630207][ T5795] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 600.843825][T10257] chnl_net:caif_netlink_parms(): no params data found [ 601.834033][ T5791] Bluetooth: hci1: command tx timeout [ 602.938078][T10257] bridge0: port 1(bridge_slave_0) entered blocking state [ 602.947417][T10257] bridge0: port 1(bridge_slave_0) entered disabled state [ 602.955411][T10257] bridge_slave_0: entered allmulticast mode [ 602.964569][T10257] bridge_slave_0: entered promiscuous mode [ 603.103597][T10257] bridge0: port 2(bridge_slave_1) entered blocking state [ 603.112234][T10257] bridge0: port 2(bridge_slave_1) entered disabled state [ 603.120171][T10257] bridge_slave_1: entered allmulticast mode [ 603.129052][T10257] bridge_slave_1: entered promiscuous mode [ 603.647568][T10257] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 603.680646][T10257] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 603.910102][ T5791] Bluetooth: hci1: command tx timeout [ 604.216427][T10257] team0: Port device team_slave_0 added [ 604.268040][T10257] team0: Port device team_slave_1 added [ 604.563600][T10257] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 604.571076][T10257] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 604.600345][T10257] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 604.773844][T10257] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 604.781189][T10257] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 604.809021][T10257] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 605.149179][T10257] hsr_slave_0: entered promiscuous mode [ 605.187436][T10257] hsr_slave_1: entered promiscuous mode [ 605.247094][T10257] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 605.255181][T10257] Cannot create hsr debugfs directory [ 605.991497][ T5791] Bluetooth: hci1: command tx timeout [ 606.874121][T10257] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 606.921809][T10257] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 606.964563][T10257] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 607.048270][T10257] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 608.017839][T10257] 8021q: adding VLAN 0 to HW filter on device bond0 [ 608.074017][ T5791] Bluetooth: hci1: command tx timeout [ 608.088709][T10257] 8021q: adding VLAN 0 to HW filter on device team0 [ 608.248690][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 608.256471][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 608.273130][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 608.280909][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 610.342589][T10257] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 610.912561][T10257] veth0_vlan: entered promiscuous mode [ 610.951993][T10257] veth1_vlan: entered promiscuous mode [ 611.034200][T10257] veth0_macvtap: entered promiscuous mode [ 611.055095][T10257] veth1_macvtap: entered promiscuous mode [ 611.160614][T10257] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 611.171419][T10257] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 611.182212][T10257] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 611.193022][T10257] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 611.203338][T10257] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 611.214209][T10257] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 611.224388][T10257] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 611.235208][T10257] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 611.251278][T10257] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 611.308979][T10257] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 611.320099][T10257] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 611.331891][T10257] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 611.343653][T10257] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 611.354246][T10257] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 611.365045][T10257] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 611.375289][T10257] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 611.386214][T10257] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 611.400561][T10257] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 611.427025][T10257] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 611.437322][T10257] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 611.447628][T10257] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 611.457071][T10257] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 615.621227][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 615.629436][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 615.708186][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 615.717066][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 615.812397][T10513] netlink: 36 bytes leftover after parsing attributes in process `syz.7.1211'. [ 615.822552][T10513] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1211'. [ 615.831830][T10513] netlink: 36 bytes leftover after parsing attributes in process `syz.7.1211'. [ 615.841256][T10513] netlink: 36 bytes leftover after parsing attributes in process `syz.7.1211'. [ 615.890358][ C1] ===================================================== [ 615.897866][ C1] BUG: KMSAN: uninit-value in tcp_parse_options+0x1006/0x1de0 [ 615.905603][ C1] tcp_parse_options+0x1006/0x1de0 [ 615.910979][ C1] tcp_timewait_state_process+0x1d9/0x1870 [ 615.916982][ C1] tcp_v4_rcv+0x452c/0x5750 [ 615.921748][ C1] ip_protocol_deliver_rcu+0x2a3/0x13d0 [ 615.927471][ C1] ip_local_deliver_finish+0x336/0x500 [ 615.933168][ C1] ip_local_deliver+0x21f/0x490 [ 615.938185][ C1] ip_rcv_finish+0x4a2/0x520 [ 615.943013][ C1] ip_rcv+0xcd/0x380 [ 615.947084][ C1] __netif_receive_skb+0x319/0xa00 [ 615.952434][ C1] process_backlog+0x4ad/0xa50 [ 615.957380][ C1] __napi_poll+0xe7/0x980 [ 615.961932][ C1] net_rx_action+0xa5a/0x19b0 [ 615.966798][ C1] handle_softirqs+0x1a0/0x7c0 [ 615.971831][ C1] __do_softirq+0x14/0x1a [ 615.976343][ C1] do_softirq+0x9a/0x100 [ 615.980849][ C1] __local_bh_enable_ip+0x9f/0xb0 [ 615.986102][ C1] __dev_queue_xmit+0x2758/0x57d0 [ 615.991365][ C1] ip_finish_output2+0x187c/0x1b70 [ 615.996686][ C1] __ip_finish_output+0x287/0x810 [ 616.001973][ C1] ip_finish_output+0x4b/0x600 [ 616.006922][ C1] ip_output+0x15f/0x3f0 [ 616.011395][ C1] __ip_queue_xmit+0x1f2a/0x20d0 [ 616.016512][ C1] ip_queue_xmit+0x60/0x80 [ 616.021175][ C1] __tcp_transmit_skb+0x3cea/0x4900 [ 616.026569][ C1] tcp_write_xmit+0x3b90/0x9070 [ 616.031637][ C1] __tcp_push_pending_frames+0xc4/0x380 [ 616.037371][ C1] tcp_send_fin+0x9f6/0xf50 [ 616.042090][ C1] __tcp_close+0x140c/0x1550 [ 616.046883][ C1] __mptcp_close_ssk+0x74e/0x16f0 [ 616.052160][ C1] mptcp_close_ssk+0x26b/0x2c0 [ 616.057125][ C1] mptcp_worker+0x1178/0x2100 [ 616.062065][ C1] process_scheduled_works+0xae0/0x1c40 [ 616.067859][ C1] worker_thread+0xea7/0x14f0 [ 616.072805][ C1] kthread+0x3e2/0x540 [ 616.077046][ C1] ret_from_fork+0x6d/0x90 [ 616.081713][ C1] ret_from_fork_asm+0x1a/0x30 [ 616.086730][ C1] [ 616.089164][ C1] Uninit was created at: [ 616.093735][ C1] kmem_cache_alloc_node_noprof+0x907/0xe00 [ 616.099920][ C1] kmalloc_reserve+0x13d/0x4a0 [ 616.104856][ C1] __alloc_skb+0x363/0x7b0 [ 616.109439][ C1] tcp_send_fin+0x3b9/0xf50 [ 616.114172][ C1] __tcp_close+0x140c/0x1550 [ 616.118963][ C1] __mptcp_close_ssk+0x74e/0x16f0 [ 616.124245][ C1] mptcp_close_ssk+0x26b/0x2c0 [ 616.129207][ C1] mptcp_worker+0x1178/0x2100 [ 616.134150][ C1] process_scheduled_works+0xae0/0x1c40 [ 616.139968][ C1] worker_thread+0xea7/0x14f0 [ 616.144863][ C1] kthread+0x3e2/0x540 [ 616.149115][ C1] ret_from_fork+0x6d/0x90 [ 616.153788][ C1] ret_from_fork_asm+0x1a/0x30 [ 616.158780][ C1] [ 616.161264][ C1] CPU: 1 UID: 0 PID: 5846 Comm: kworker/1:5 Not tainted 6.13.0-rc1-syzkaller #0 [ 616.170526][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 616.180817][ C1] Workqueue: events mptcp_worker [ 616.185983][ C1] ===================================================== [ 616.193132][ C1] Disabling lock debugging due to kernel taint [ 616.199430][ C1] Kernel panic - not syncing: kmsan.panic set ... [ 616.205979][ C1] CPU: 1 UID: 0 PID: 5846 Comm: kworker/1:5 Tainted: G B 6.13.0-rc1-syzkaller #0 [ 616.216677][ C1] Tainted: [B]=BAD_PAGE [ 616.220945][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 616.231151][ C1] Workqueue: events mptcp_worker [ 616.236310][ C1] Call Trace: [ 616.239688][ C1] [ 616.242637][ C1] dump_stack_lvl+0x216/0x2d0 [ 616.247512][ C1] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 616.253496][ C1] dump_stack+0x1e/0x24 [ 616.257835][ C1] panic+0x4e2/0xcf0 [ 616.261916][ C1] ? kmsan_get_metadata+0xd1/0x1c0 [ 616.267210][ C1] kmsan_report+0x2c7/0x2d0 [ 616.271880][ C1] ? __msan_warning+0x95/0x120 [ 616.276838][ C1] ? tcp_parse_options+0x1006/0x1de0 [ 616.282300][ C1] ? tcp_timewait_state_process+0x1d9/0x1870 [ 616.288448][ C1] ? tcp_v4_rcv+0x452c/0x5750 [ 616.293470][ C1] ? ip_protocol_deliver_rcu+0x2a3/0x13d0 [ 616.299354][ C1] ? ip_local_deliver_finish+0x336/0x500 [ 616.305145][ C1] ? ip_local_deliver+0x21f/0x490 [ 616.310323][ C1] ? ip_rcv_finish+0x4a2/0x520 [ 616.315247][ C1] ? ip_rcv+0xcd/0x380 [ 616.319451][ C1] ? __netif_receive_skb+0x319/0xa00 [ 616.324907][ C1] ? process_backlog+0x4ad/0xa50 [ 616.330027][ C1] ? __napi_poll+0xe7/0x980 [ 616.334685][ C1] ? net_rx_action+0xa5a/0x19b0 [ 616.339718][ C1] ? handle_softirqs+0x1a0/0x7c0 [ 616.344871][ C1] ? __do_softirq+0x14/0x1a [ 616.349553][ C1] ? do_softirq+0x9a/0x100 [ 616.354185][ C1] ? __local_bh_enable_ip+0x9f/0xb0 [ 616.359588][ C1] ? __dev_queue_xmit+0x2758/0x57d0 [ 616.364955][ C1] ? ip_finish_output2+0x187c/0x1b70 [ 616.370434][ C1] ? __ip_finish_output+0x287/0x810 [ 616.375813][ C1] ? ip_finish_output+0x4b/0x600 [ 616.380917][ C1] ? ip_output+0x15f/0x3f0 [ 616.385495][ C1] ? __ip_queue_xmit+0x1f2a/0x20d0 [ 616.391164][ C1] ? ip_queue_xmit+0x60/0x80 [ 616.395920][ C1] ? __tcp_transmit_skb+0x3cea/0x4900 [ 616.401461][ C1] ? tcp_write_xmit+0x3b90/0x9070 [ 616.406649][ C1] ? __tcp_push_pending_frames+0xc4/0x380 [ 616.412547][ C1] ? tcp_send_fin+0x9f6/0xf50 [ 616.417374][ C1] ? __tcp_close+0x140c/0x1550 [ 616.422332][ C1] ? __mptcp_close_ssk+0x74e/0x16f0 [ 616.427710][ C1] ? mptcp_close_ssk+0x26b/0x2c0 [ 616.432918][ C1] ? mptcp_worker+0x1178/0x2100 [ 616.437963][ C1] ? process_scheduled_works+0xae0/0x1c40 [ 616.443913][ C1] ? worker_thread+0xea7/0x14f0 [ 616.448977][ C1] ? kthread+0x3e2/0x540 [ 616.453371][ C1] ? ret_from_fork+0x6d/0x90 [ 616.458130][ C1] ? ret_from_fork_asm+0x1a/0x30 [ 616.463270][ C1] ? filter_irq_stacks+0x164/0x1a0 [ 616.468578][ C1] ? kmsan_get_metadata+0x13e/0x1c0 [ 616.473945][ C1] ? kmsan_get_metadata+0x13e/0x1c0 [ 616.479310][ C1] ? kmsan_get_metadata+0x13e/0x1c0 [ 616.484674][ C1] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 616.490657][ C1] __msan_warning+0x95/0x120 [ 616.495455][ C1] tcp_parse_options+0x1006/0x1de0 [ 616.500785][ C1] tcp_timewait_state_process+0x1d9/0x1870 [ 616.506769][ C1] ? kmsan_get_metadata+0x13e/0x1c0 [ 616.512150][ C1] tcp_v4_rcv+0x452c/0x5750 [ 616.516892][ C1] ? tcp_v4_rcv+0x1811/0x5750 [ 616.521767][ C1] ? __pfx_tcp_v4_rcv+0x10/0x10 [ 616.526811][ C1] ip_protocol_deliver_rcu+0x2a3/0x13d0 [ 616.532542][ C1] ip_local_deliver_finish+0x336/0x500 [ 616.538178][ C1] ip_local_deliver+0x21f/0x490 [ 616.543187][ C1] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 616.549338][ C1] ? __pfx_ip_local_deliver+0x10/0x10 [ 616.555130][ C1] ip_rcv_finish+0x4a2/0x520 [ 616.559881][ C1] ip_rcv+0xcd/0x380 [ 616.563910][ C1] ? __pfx_ip_rcv_finish+0x10/0x10 [ 616.569184][ C1] ? ip6_rcv_finish+0x920/0x970 [ 616.574194][ C1] ? __pfx_ip_rcv+0x10/0x10 [ 616.578841][ C1] __netif_receive_skb+0x319/0xa00 [ 616.584128][ C1] ? kmsan_get_metadata+0x13e/0x1c0 [ 616.589505][ C1] process_backlog+0x4ad/0xa50 [ 616.594468][ C1] ? __pfx_process_backlog+0x10/0x10 [ 616.599938][ C1] __napi_poll+0xe7/0x980 [ 616.604429][ C1] ? kmsan_get_metadata+0x13e/0x1c0 [ 616.609807][ C1] net_rx_action+0xa5a/0x19b0 [ 616.614663][ C1] ? kmsan_get_metadata+0x13e/0x1c0 [ 616.620024][ C1] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 616.626030][ C1] ? __pfx_net_rx_action+0x10/0x10 [ 616.631321][ C1] handle_softirqs+0x1a0/0x7c0 [ 616.636310][ C1] __do_softirq+0x14/0x1a [ 616.640813][ C1] do_softirq+0x9a/0x100 [ 616.645247][ C1] [ 616.648270][ C1] [ 616.651298][ C1] __local_bh_enable_ip+0x9f/0xb0 [ 616.656527][ C1] __dev_queue_xmit+0x2758/0x57d0 [ 616.661730][ C1] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 616.667738][ C1] ? filter_irq_stacks+0x164/0x1a0 [ 616.673053][ C1] ? __dev_queue_xmit+0x3d6/0x57d0 [ 616.678365][ C1] ip_finish_output2+0x187c/0x1b70 [ 616.683690][ C1] __ip_finish_output+0x287/0x810 [ 616.688902][ C1] ? nf_nat_ipv4_out+0x587/0x7d0 [ 616.694042][ C1] ip_finish_output+0x4b/0x600 [ 616.699074][ C1] ? __rcu_read_unlock+0x48/0xe0 [ 616.704253][ C1] ip_output+0x15f/0x3f0 [ 616.708684][ C1] ? __pfx_ip_finish_output+0x10/0x10 [ 616.714246][ C1] ? __pfx_ip_output+0x10/0x10 [ 616.719183][ C1] __ip_queue_xmit+0x1f2a/0x20d0 [ 616.724305][ C1] ? filter_irq_stacks+0x60/0x1a0 [ 616.729527][ C1] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 616.735532][ C1] ip_queue_xmit+0x60/0x80 [ 616.740120][ C1] ? __pfx_ip_queue_xmit+0x10/0x10 [ 616.745407][ C1] __tcp_transmit_skb+0x3cea/0x4900 [ 616.750792][ C1] ? mptcp_established_options+0x2440/0x39c0 [ 616.756971][ C1] ? filter_irq_stacks+0x60/0x1a0 [ 616.762224][ C1] tcp_write_xmit+0x3b90/0x9070 [ 616.767249][ C1] ? kmsan_get_metadata+0x13e/0x1c0 [ 616.772621][ C1] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 616.778660][ C1] __tcp_push_pending_frames+0xc4/0x380 [ 616.784381][ C1] tcp_send_fin+0x9f6/0xf50 [ 616.789057][ C1] __tcp_close+0x140c/0x1550 [ 616.793844][ C1] ? __local_bh_enable_ip+0x74/0xb0 [ 616.799264][ C1] ? _raw_spin_unlock_bh+0x2d/0x40 [ 616.804556][ C1] ? kmsan_get_metadata+0x13e/0x1c0 [ 616.809930][ C1] __mptcp_close_ssk+0x74e/0x16f0 [ 616.815167][ C1] mptcp_close_ssk+0x26b/0x2c0 [ 616.820118][ C1] mptcp_worker+0x1178/0x2100 [ 616.825010][ C1] ? __pfx_mptcp_worker+0x10/0x10 [ 616.830230][ C1] process_scheduled_works+0xae0/0x1c40 [ 616.836024][ C1] worker_thread+0xea7/0x14f0 [ 616.840906][ C1] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 616.846921][ C1] kthread+0x3e2/0x540 [ 616.851153][ C1] ? __pfx_worker_thread+0x10/0x10 [ 616.856476][ C1] ? __pfx_kthread+0x10/0x10 [ 616.861225][ C1] ret_from_fork+0x6d/0x90 [ 616.865810][ C1] ? __pfx_kthread+0x10/0x10 [ 616.870567][ C1] ret_from_fork_asm+0x1a/0x30 [ 616.875547][ C1] [ 616.879031][ C1] Kernel Offset: disabled [ 616.883434][ C1] Rebooting in 86400 seconds..