last executing test programs: 7.84695992s ago: executing program 2 (id=334): r0 = socket$inet_tcp(0x2, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000002c00)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000300)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56561, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_TARGET={0x8}]}}]}, 0x3c}}, 0x0) bind$inet6(r1, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$BTRFS_IOC_SNAP_CREATE(0xffffffffffffffff, 0x50009401, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x20004809, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) close_range(r0, 0xffffffffffffffff, 0x0) 6.990709553s ago: executing program 2 (id=338): syz_open_procfs(0x0, &(0x7f0000000040)='timerslack_ns\x00') openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000080)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0) openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={0x0}}, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x20010004, 0x0, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x9) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000980)=ANY=[@ANYBLOB="84000000", @ANYRES16=r6, @ANYBLOB="010000000000fbdbdf250100000008000200000000000500050000000000080003000100000048000180050002002000000006000100020000000800060003000000080003"], 0x84}}, 0x0) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) close(0x4) syz_usb_control_io(r0, 0x0, &(0x7f0000000300)={0x44, &(0x7f0000000980)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$FS_IOC_GETVERSION(0xffffffffffffffff, 0xc0145b0e, &(0x7f0000000040)) 5.951234431s ago: executing program 0 (id=340): r0 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5) writev(r0, &(0x7f0000000400)=[{&(0x7f0000000000)="aefdda9d240300005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d76641cb010052f436dd2a", 0x2a}, {&(0x7f0000000040)="aa1d484e243103000000f7c08bfcd111fbdf23ea32db0e8f21d5bc27bd806306", 0x20}], 0x2) 5.454863518s ago: executing program 0 (id=343): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180100001100000000000000000000001812", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r1}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) 5.012216283s ago: executing program 0 (id=346): socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}}, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0xfffffcb7, &(0x7f0000000280)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000010140)=@newtfilter={0x54, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {}, {0x2, 0x1}}, [@filter_kind_options=@f_basic={{0xa}, {0x24, 0x2, [@TCA_BASIC_EMATCHES={0x20, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0xfffffe81, 0x1, 0x0, 0x0, {{0x1, 0x0, 0xa3cc}, "7011"}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x8a}}]}]}}]}, 0x54}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={0x0}, 0x18) rename(0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f00000005c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000400)={0xffffffffffffffff}, 0x106, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_REJECT(r3, &(0x7f0000000800)={0x9, 0x108, 0xfa00, {r4, 0x3, "3e22ed", "db09a8f96f80be14b8316a36f3ff7264ca3e20ff60d62ac3ca206d628e3b1e92446e0e9a183f2d78a0e337cea88b00f8124d7d77c5b3ad2eaed2656bef79495842c52bfc8e5e9c2128353b131def27bc02251c5f08bd555b40f3b94b921c96f57c1f32bbd512cddc1c5c922f8930ee758ba3dfd4651225389c41d86e898c3a85e23bf32dc7f47cba122fa8a9d8342c742886f1b28355f00c2b5447565d3e0f435ad113cbcde5058e8b59dc2457257bc16918c03dba5f3211fa8d9036bbd1e3661cf38ce663f7cc721923fa3c75a427bddf3e35082e2ced9e6c870303306addc79a4d6b1f231d276985fc604d43cd97d55da9ebded4868b92e71b7b7373f6f62b"}}, 0x110) setgroups(0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000200)='./file0\x00', 0x2814000, &(0x7f0000000480)={[{@user_xattr}, {@init_itable_val={'init_itable', 0x3d, 0x20000003}}, {@dioread_lock}, {@max_batch_time={'max_batch_time', 0x3d, 0x4000600}}, {@block_validity}, {@i_version}, {}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1}}, {@max_batch_time={'max_batch_time', 0x3d, 0x6}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x20}}, {@dioread_nolock}, {@discard}, {@block_validity}, {@user_xattr}, {@grpid}]}, 0x1, 0x558, &(0x7f0000001b00)="$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") syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mounts\x00') bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='sys_enter\x00'}, 0x10) kexec_load(0x0, 0x0, 0x0, 0x3e0000) socket$packet(0x11, 0x2, 0x300) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000003000000070000000900000000000000", @ANYRES32, @ANYBLOB="0000000000000000000036178e9e692410b70000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) 4.643203841s ago: executing program 3 (id=348): syz_emit_ethernet(0x32, &(0x7f0000000000)={@random="e90c630faca2", @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0xe000, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0x10, 0x0, @gue={{0x2, 0x1, 0x3, 0x2, 0x0, @val=0x80}}}}}}}, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @loopback}, 0x10) sendto$inet(r2, &(0x7f0000000040)="a6", 0x100b20, 0x0, 0x0, 0x0) 4.504039709s ago: executing program 2 (id=349): unshare(0x20000400) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) ioctl$SNDRV_PCM_IOCTL_WRITEN_FRAMES(r0, 0x400c4152, 0x0) 4.258592878s ago: executing program 0 (id=350): r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={0x4c, 0x12, 0x301, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, 0xf0ffffff}}, 0x4c}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), r0) 4.114747333s ago: executing program 2 (id=351): syz_open_procfs(0x0, &(0x7f0000000040)='timerslack_ns\x00') r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000080)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0) openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r2) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={0x0}}, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x20010004, 0x0, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r2, 0x9) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r6, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000980)=ANY=[@ANYBLOB="84000000", @ANYRES16=r7, @ANYBLOB="010000000000fbdbdf250100000008000200000000000500050000000000080003000100000048000180050002002000000006000100020000000800060003000000080003"], 0x84}}, 0x0) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) close(0x4) syz_usb_control_io(r1, 0x0, &(0x7f0000000300)={0x44, &(0x7f0000000980)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 3.6805171s ago: executing program 4 (id=352): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC_PROXY(r0, 0x0, 0xd2, &(0x7f0000000000)={@remote, @multicast1, 0x0, "d30f388c52647612d91de4353d68b0fa00"}, 0x3c) setsockopt$MRT_ADD_MFC(r0, 0x0, 0xcc, &(0x7f0000000280)={@multicast2, @multicast1, 0x0, "7ea97ddb2ac127ffa5b7216fe75ebaa2855a422a8bf8ec7caf003751804500"}, 0x3c) setsockopt$MRT_ADD_MFC(r0, 0x0, 0xcc, &(0x7f0000000200)={@empty, @private, 0x0, "606b177019716ea6ac38f5bd6e0630e369c7b35d21ff1f4d7ed79c31e2b0f1da"}, 0x3c) setsockopt$MRT_ADD_MFC(r0, 0x0, 0xcc, &(0x7f0000000300)={@private, @multicast2, 0x0, "941621a61c5815f4678d8fd4a8e14b0447113c694d1fd55708018620fd419884"}, 0x3c) 3.41910184s ago: executing program 3 (id=353): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000005, 0x12, r1, 0x0) r2 = socket(0x15, 0x5, 0x0) getsockopt(r2, 0x200000000114, 0x2716, 0x0, &(0x7f0000000000)) 3.359197768s ago: executing program 0 (id=354): r0 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5) writev(r0, &(0x7f0000000400)=[{&(0x7f0000000000)="aefdda9d240300005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d76641cb010052f436dd2a", 0x2a}, {&(0x7f0000000040)="aa1d484e243103000000f7c08bfcd111fbdf23ea32db0e8f21d5bc27bd806306", 0x20}], 0x2) 3.355882437s ago: executing program 1 (id=355): r0 = openat$vicodec1(0xffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_G_TUNER(r0, 0xc054561d, &(0x7f0000000080)={0xf, "f2bc0bb42413ed339cfe3bddc076fd524b4ea9b50787d8485e3c16e7ecfa5eeb", 0x2, 0x40, 0x5, 0x7ff, 0x4, 0x4, 0x8, 0x3}) 3.113338665s ago: executing program 4 (id=356): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180100001100000000000000000000001812", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r1}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) 2.743013418s ago: executing program 1 (id=357): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0xfebd) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x4b0}}, 0x0) 2.699941809s ago: executing program 3 (id=358): r0 = openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) renameat2(r0, &(0x7f00000000c0)='./file0\x00', 0xffffffffffffffff, 0x0, 0x4) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0xa, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="ffff0800"/20, @ANYRES32=0x0, @ANYBLOB="f7e8010000000000140012800b0001006d616373656300000400028008000500", @ANYRES32, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB], 0x44}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000041}, 0x40084) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209"], 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000327000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f326635004000000f300f20e06635800000000f22e0f30fa6c8", 0x50}], 0x1, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 2.680658265s ago: executing program 0 (id=359): syz_open_procfs(0x0, &(0x7f0000000040)='timerslack_ns\x00') openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000080)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0) openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={0x0}}, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x20010004, 0x0, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x9) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000980)=ANY=[@ANYBLOB="84000000", @ANYRES16=r6, @ANYBLOB="010000000000fbdbdf250100000008000200000000000500050000000000080003000100000048000180050002002000000006000100020000000800060003000000080003"], 0x84}}, 0x0) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) close(0x4) syz_usb_control_io(r0, 0x0, &(0x7f0000000300)={0x44, &(0x7f0000000980)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$FS_IOC_GETVERSION(0xffffffffffffffff, 0xc0145b0e, &(0x7f0000000040)) 2.482691188s ago: executing program 4 (id=360): socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}}, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0xfffffcb7, &(0x7f0000000280)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000010140)=@newtfilter={0x54, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {}, {0x2, 0x1}}, [@filter_kind_options=@f_basic={{0xa}, {0x24, 0x2, [@TCA_BASIC_EMATCHES={0x20, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0xfffffe81, 0x1, 0x0, 0x0, {{0x1, 0x0, 0xa3cc}, "7011"}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x8a}}]}]}}]}, 0x54}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000000)='kmem_cache_free\x00'}, 0x10) rename(0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) r3 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f00000005c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000400)={0xffffffffffffffff}, 0x106, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_REJECT(r3, &(0x7f0000000800)={0x9, 0x108, 0xfa00, {r4, 0x3, "3e22ed", "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"}}, 0x110) setgroups(0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000200)='./file0\x00', 0x2814000, &(0x7f0000000480)={[{@user_xattr}, {@init_itable_val={'init_itable', 0x3d, 0x20000003}}, {@dioread_lock}, {@max_batch_time={'max_batch_time', 0x3d, 0x4000600}}, {@block_validity}, {@i_version}, {}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1}}, {@max_batch_time={'max_batch_time', 0x3d, 0x6}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x20}}, {@dioread_nolock}, {@discard}, {@block_validity}, {@user_xattr}, {@grpid}]}, 0x1, 0x558, &(0x7f0000001b00)="$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") syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mounts\x00') bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='sys_enter\x00'}, 0x10) kexec_load(0x0, 0x0, 0x0, 0x3e0000) socket$packet(0x11, 0x2, 0x300) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000003000000070000000900000000000000", @ANYRES32, @ANYBLOB="0000000000000000000036178e9e692410b70000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) 2.16043809s ago: executing program 1 (id=361): r0 = socket$can_bcm(0x1d, 0x2, 0x2) sendmsg$can_bcm(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) 1.82744966s ago: executing program 1 (id=362): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000001400000000000000ff000000850000000e00000085"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @rand_addr, 0x3}, 0x1c) listen(r1, 0x9) r2 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r2, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) close(r1) 1.767926254s ago: executing program 2 (id=363): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r1) sendmsg$nl_route_sched_retired(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f000001be40)={&(0x7f000001bec0)=@newtaction={0x100, 0x30, 0x0, 0x0, 0x0, {}, [{0xec, 0x1, [@m_ipt={0x2c, 0x0, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc}, {0xc}}}, @m_ipt={0x6c, 0x200, 0x0, 0x0, {{0x8}, {0x28, 0x2, 0x0, 0x1, [@TCA_IPT_TABLE={0x24, 0x1, 'mangle\x00'}]}, {0x1d, 0x6, "f46756d0da560b4c8eabc516cc9648bbe27be1507811dea43c"}, {0xc}, {0xc}}}, @m_ipt={0x50, 0x1000, 0x0, 0x0, {{0x8}, {0x28, 0x2, 0x0, 0x1, [@TCA_IPT_TABLE={0x24, 0x1, 'raw\x00'}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x100}}, 0x0) 1.727718531s ago: executing program 3 (id=364): r0 = syz_open_dev$video4linux(&(0x7f0000000100), 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000540)=@newtaction={0x44, 0x32, 0x1, 0x70bd29, 0x0, {}, [{0x30}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000044}, 0x0) ioctl$VIDIOC_TRY_EXT_CTRLS(r0, 0xc0205647, &(0x7f0000000180)={0x9e0000, 0x0, 0x6, 0xffffffffffffffff, 0x0, 0x0}) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x1) r3 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r3, 0x107, 0xf, &(0x7f0000000000), 0x49) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000100)=@sco, 0x80, &(0x7f0000000040)}, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r2, 0xc058534f, &(0x7f0000000400)={{0x0, 0x1}, 0x0, 0x10001, 0x3}) r4 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r5 = socket$packet(0x11, 0x2, 0x300) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x42, 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) mount$fuse(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r6, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESHEX=r1, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r6, &(0x7f000000c3c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r6, &(0x7f00000000c0)={0x50, 0x0, r7, {0x7, 0x1f}}, 0x50) r8 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x4080, 0x0) syz_fuse_handle_req(r6, &(0x7f0000006380)="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", 0x2000, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x78, 0x0, 0xe29, {0x0, 0x0, 0x0, {0x0, 0x10000, 0x0, 0x0, 0x200, 0x2, 0x0, 0x0, 0xfffffffc, 0x8000}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) sendfile(r5, r8, 0x0, 0x4) ioctl$VIDIOC_STREAMOFF(r4, 0x40045613, &(0x7f00000000c0)=0x7) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r9, &(0x7f0000000040)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x11, r9, 0x0) r10 = socket$l2tp(0x2, 0x2, 0x73) bind$l2tp(r10, &(0x7f00000000c0), 0x10) r11 = syz_io_uring_setup(0x3b, &(0x7f0000000580)={0x0, 0x2000, 0x10100, 0x1}, &(0x7f00000002c0)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r12, r13, &(0x7f0000000380)=@IORING_OP_MSG_RING={0x28, 0x0, 0x0, r11, 0x0, &(0x7f0000001280)}) io_uring_enter(r11, 0x92, 0x0, 0x0, 0x0, 0x0) 1.465096402s ago: executing program 4 (id=365): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_int(r0, 0x1, 0xc, 0x0, &(0x7f00000000c0)) 898.647489ms ago: executing program 2 (id=366): r0 = syz_usb_connect$printer(0x0, 0x2d, &(0x7f00000004c0)=ANY=[@ANYBLOB="12010000000000202505a8a440000102030109021b00010100000009040000010701010009050102"], 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000b40)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00)={0x20, 0x0, 0x1}}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, &(0x7f0000000140)="83", 0x1) 706.536528ms ago: executing program 4 (id=367): unshare(0x24020400) unshare(0x22020400) r0 = landlock_create_ruleset(&(0x7f00000002c0)={0x5020}, 0x10, 0x0) landlock_restrict_self(r0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000001c0)='.\x00', 0x0, 0x0) 635.271354ms ago: executing program 1 (id=368): syz_emit_ethernet(0x9a, &(0x7f00000001c0)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xf}, @empty, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0x64, 0x11, 0x0, @remote, @local, {[], {0x0, 0xe22, 0x64, 0x0, @wg=@response={0x2, 0x3, 0x2, "eb8879088226ab60e673e8e842628f81d9b4a6c5ff6407e287cff3da0512ad42", "4a62cdf6b6d28285930d4d1c25eedfaa", {"c06a48575dda86a76aeca87956fc7332", "892d6573dbe3e2d1728ca82e6abbfb8f"}}}}}}}}, 0x0) 474.991546ms ago: executing program 3 (id=369): r0 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5) writev(r0, &(0x7f0000000400)=[{&(0x7f0000000000)="aefdda9d240300005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d76641cb010052f436dd2a", 0x2a}, {&(0x7f0000000040)="aa1d484e243103000000f7c08bfcd111fbdf23ea32db0e8f21d5bc27bd8063067a06", 0x22}], 0x2) 220.516074ms ago: executing program 1 (id=370): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f00000001c0)={0x79, 0x0, 0x100}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000040)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x200000], 0x0, 0x80200}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 87.810346ms ago: executing program 4 (id=371): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0xfebd) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x4b0}}, 0x0) 0s ago: executing program 3 (id=372): ioctl$sock_SIOCSPGRP(0xffffffffffffffff, 0x8902, &(0x7f0000001240)) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00304, 0x15) r0 = socket(0x15, 0x5, 0x0) getsockopt(r0, 0x200000000114, 0x8, &(0x7f0000001e00)=""/102400, &(0x7f0000000040)=0x19000) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.152' (ED25519) to the list of known hosts. [ 173.168697][ T5171] cgroup: Unknown subsys name 'net' [ 173.319194][ T5171] cgroup: Unknown subsys name 'cpuset' [ 173.334131][ T5171] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 224.159343][ T1240] ieee802154 phy0 wpan0: encryption failed: -22 [ 224.166362][ T1240] ieee802154 phy1 wpan1: encryption failed: -22 [ 226.113240][ T5171] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 230.348494][ T5188] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 230.368169][ T5192] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 230.381025][ T5192] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 230.395128][ T5192] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 230.408316][ T5193] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 230.411927][ T5192] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 230.425987][ T5193] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 230.427412][ T5192] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 230.444127][ T5193] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 230.478441][ T5193] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 230.490594][ T4561] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 230.502415][ T4561] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 230.511939][ T4561] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 230.548439][ T5193] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 230.566811][ T5196] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 230.580663][ T5196] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 230.593240][ T5196] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 230.602664][ T5196] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 230.669177][ T5188] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 230.683016][ T5188] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 230.699440][ T5196] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 230.781093][ T5196] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 230.792319][ T5196] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 230.800565][ T5199] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 230.824201][ T5196] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 230.918622][ T5196] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 230.974751][ T5199] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 230.983044][ T5196] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 231.010675][ T4561] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 231.024423][ T4561] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 231.771100][ T5189] chnl_net:caif_netlink_parms(): no params data found [ 232.130304][ T5187] chnl_net:caif_netlink_parms(): no params data found [ 232.545355][ T5188] Bluetooth: hci1: command tx timeout [ 232.551056][ T5188] Bluetooth: hci0: command tx timeout [ 232.721309][ T5196] Bluetooth: hci2: command tx timeout [ 232.746303][ T5190] chnl_net:caif_netlink_parms(): no params data found [ 232.767511][ T5201] chnl_net:caif_netlink_parms(): no params data found [ 232.928104][ T5203] chnl_net:caif_netlink_parms(): no params data found [ 232.950879][ T5189] bridge0: port 1(bridge_slave_0) entered blocking state [ 232.959134][ T5189] bridge0: port 1(bridge_slave_0) entered disabled state [ 232.968142][ T5189] bridge_slave_0: entered allmulticast mode [ 232.977620][ T5189] bridge_slave_0: entered promiscuous mode [ 233.028401][ T5196] Bluetooth: hci3: command tx timeout [ 233.105130][ T5196] Bluetooth: hci4: command tx timeout [ 233.118823][ T5189] bridge0: port 2(bridge_slave_1) entered blocking state [ 233.128736][ T5189] bridge0: port 2(bridge_slave_1) entered disabled state [ 233.136822][ T5189] bridge_slave_1: entered allmulticast mode [ 233.145874][ T5189] bridge_slave_1: entered promiscuous mode [ 233.448629][ T5189] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 233.459317][ T5187] bridge0: port 1(bridge_slave_0) entered blocking state [ 233.467339][ T5187] bridge0: port 1(bridge_slave_0) entered disabled state [ 233.476449][ T5187] bridge_slave_0: entered allmulticast mode [ 233.485995][ T5187] bridge_slave_0: entered promiscuous mode [ 233.525310][ T5189] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 233.546421][ T5187] bridge0: port 2(bridge_slave_1) entered blocking state [ 233.554197][ T5187] bridge0: port 2(bridge_slave_1) entered disabled state [ 233.562430][ T5187] bridge_slave_1: entered allmulticast mode [ 233.571869][ T5187] bridge_slave_1: entered promiscuous mode [ 233.819940][ T5189] team0: Port device team_slave_0 added [ 233.863537][ T5189] team0: Port device team_slave_1 added [ 233.884522][ T5187] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 233.998697][ T5187] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 234.093901][ T5189] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 234.101328][ T5189] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 234.127723][ T5189] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 234.284306][ T5189] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 234.291646][ T5189] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 234.318156][ T5189] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 234.548078][ T5187] team0: Port device team_slave_0 added [ 234.651401][ T5196] Bluetooth: hci0: command tx timeout [ 234.657288][ T5188] Bluetooth: hci1: command tx timeout [ 234.720899][ T5187] team0: Port device team_slave_1 added [ 234.728596][ T5201] bridge0: port 1(bridge_slave_0) entered blocking state [ 234.738869][ T5201] bridge0: port 1(bridge_slave_0) entered disabled state [ 234.746844][ T5201] bridge_slave_0: entered allmulticast mode [ 234.755951][ T5201] bridge_slave_0: entered promiscuous mode [ 234.767545][ T5190] bridge0: port 1(bridge_slave_0) entered blocking state [ 234.775508][ T5190] bridge0: port 1(bridge_slave_0) entered disabled state [ 234.783253][ T5190] bridge_slave_0: entered allmulticast mode [ 234.792536][ T5190] bridge_slave_0: entered promiscuous mode [ 234.797684][ T5196] Bluetooth: hci2: command tx timeout [ 234.846397][ T5203] bridge0: port 1(bridge_slave_0) entered blocking state [ 234.854112][ T5203] bridge0: port 1(bridge_slave_0) entered disabled state [ 234.862166][ T5203] bridge_slave_0: entered allmulticast mode [ 234.872051][ T5203] bridge_slave_0: entered promiscuous mode [ 234.918596][ T5201] bridge0: port 2(bridge_slave_1) entered blocking state [ 234.926567][ T5201] bridge0: port 2(bridge_slave_1) entered disabled state [ 234.934070][ T5201] bridge_slave_1: entered allmulticast mode [ 234.943303][ T5201] bridge_slave_1: entered promiscuous mode [ 234.952608][ T5190] bridge0: port 2(bridge_slave_1) entered blocking state [ 234.960507][ T5190] bridge0: port 2(bridge_slave_1) entered disabled state [ 234.969862][ T5190] bridge_slave_1: entered allmulticast mode [ 234.979147][ T5190] bridge_slave_1: entered promiscuous mode [ 235.024180][ T5203] bridge0: port 2(bridge_slave_1) entered blocking state [ 235.032630][ T5203] bridge0: port 2(bridge_slave_1) entered disabled state [ 235.040511][ T5203] bridge_slave_1: entered allmulticast mode [ 235.049768][ T5203] bridge_slave_1: entered promiscuous mode [ 235.113106][ T5196] Bluetooth: hci3: command tx timeout [ 235.193505][ T5189] hsr_slave_0: entered promiscuous mode [ 235.204641][ T5196] Bluetooth: hci4: command tx timeout [ 235.208985][ T5189] hsr_slave_1: entered promiscuous mode [ 235.251774][ T5187] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 235.259235][ T5187] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 235.285694][ T5187] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 235.340701][ T5201] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 235.361251][ T5201] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 235.403957][ T5187] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 235.411276][ T5187] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 235.437706][ T5187] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 235.474311][ T5203] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 235.566900][ T5190] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 235.591114][ T5190] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 235.610464][ T5203] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 235.728097][ T5201] team0: Port device team_slave_0 added [ 235.826565][ T5203] team0: Port device team_slave_0 added [ 235.922680][ T5201] team0: Port device team_slave_1 added [ 235.973481][ T5203] team0: Port device team_slave_1 added [ 235.992230][ T5187] hsr_slave_0: entered promiscuous mode [ 236.002981][ T5187] hsr_slave_1: entered promiscuous mode [ 236.011769][ T5187] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 236.019748][ T5187] Cannot create hsr debugfs directory [ 236.083463][ T5190] team0: Port device team_slave_0 added [ 236.220363][ T5190] team0: Port device team_slave_1 added [ 236.234279][ T5201] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 236.241627][ T5201] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 236.267946][ T5201] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 236.325471][ T5203] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 236.332676][ T5203] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 236.359093][ T5203] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 236.452511][ T5201] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 236.459902][ T5201] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 236.487594][ T5201] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 236.517628][ T5203] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 236.524787][ T5203] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 236.552117][ T5203] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 236.711637][ T5196] Bluetooth: hci0: command tx timeout [ 236.716303][ T5188] Bluetooth: hci1: command tx timeout [ 236.759335][ T5190] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 236.766625][ T5190] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 236.794076][ T5190] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 236.813776][ T5190] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 236.821369][ T5190] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 236.847813][ T5190] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 236.869461][ T5188] Bluetooth: hci2: command tx timeout [ 237.011026][ T5201] hsr_slave_0: entered promiscuous mode [ 237.022610][ T5201] hsr_slave_1: entered promiscuous mode [ 237.032441][ T5201] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 237.041787][ T5201] Cannot create hsr debugfs directory [ 237.093384][ T5203] hsr_slave_0: entered promiscuous mode [ 237.102473][ T5203] hsr_slave_1: entered promiscuous mode [ 237.112463][ T5203] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 237.120390][ T5203] Cannot create hsr debugfs directory [ 237.186639][ T5188] Bluetooth: hci3: command tx timeout [ 237.265781][ T5188] Bluetooth: hci4: command tx timeout [ 237.411514][ T5190] hsr_slave_0: entered promiscuous mode [ 237.421866][ T5190] hsr_slave_1: entered promiscuous mode [ 237.431697][ T5190] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 237.439631][ T5190] Cannot create hsr debugfs directory [ 237.941411][ T5189] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 238.078273][ T5189] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 238.113918][ T5189] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 238.228768][ T5189] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 238.482352][ T5187] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 238.502777][ T5187] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 238.526689][ T5187] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 238.560557][ T5187] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 238.806182][ T5188] Bluetooth: hci0: command tx timeout [ 238.811863][ T5188] Bluetooth: hci1: command tx timeout [ 238.909910][ T5201] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 238.946013][ T5196] Bluetooth: hci2: command tx timeout [ 238.989539][ T5203] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 239.010514][ T5203] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 239.035660][ T5201] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 239.060847][ T5201] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 239.084625][ T5201] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 239.173603][ T5203] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 239.205472][ T5203] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 239.244788][ T5190] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 239.272993][ T5196] Bluetooth: hci3: command tx timeout [ 239.345647][ T5196] Bluetooth: hci4: command tx timeout [ 239.389770][ T5190] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 239.457352][ T5190] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 239.493399][ T5190] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 239.996820][ T5189] 8021q: adding VLAN 0 to HW filter on device bond0 [ 240.278803][ T5189] 8021q: adding VLAN 0 to HW filter on device team0 [ 240.299663][ T5187] 8021q: adding VLAN 0 to HW filter on device bond0 [ 240.418626][ T4022] bridge0: port 1(bridge_slave_0) entered blocking state [ 240.426490][ T4022] bridge0: port 1(bridge_slave_0) entered forwarding state [ 240.483037][ T5201] 8021q: adding VLAN 0 to HW filter on device bond0 [ 240.541690][ T5187] 8021q: adding VLAN 0 to HW filter on device team0 [ 240.604770][ T4022] bridge0: port 2(bridge_slave_1) entered blocking state [ 240.612617][ T4022] bridge0: port 2(bridge_slave_1) entered forwarding state [ 240.800891][ T5201] 8021q: adding VLAN 0 to HW filter on device team0 [ 240.862253][ T4022] bridge0: port 1(bridge_slave_0) entered blocking state [ 240.870094][ T4022] bridge0: port 1(bridge_slave_0) entered forwarding state [ 241.027319][ T3710] bridge0: port 1(bridge_slave_0) entered blocking state [ 241.035199][ T3710] bridge0: port 1(bridge_slave_0) entered forwarding state [ 241.058853][ T3710] bridge0: port 2(bridge_slave_1) entered blocking state [ 241.066697][ T3710] bridge0: port 2(bridge_slave_1) entered forwarding state [ 241.082923][ T3710] bridge0: port 2(bridge_slave_1) entered blocking state [ 241.090733][ T3710] bridge0: port 2(bridge_slave_1) entered forwarding state [ 241.224485][ T5203] 8021q: adding VLAN 0 to HW filter on device bond0 [ 241.387235][ T5190] 8021q: adding VLAN 0 to HW filter on device bond0 [ 241.607621][ T5203] 8021q: adding VLAN 0 to HW filter on device team0 [ 241.711121][ T5190] 8021q: adding VLAN 0 to HW filter on device team0 [ 241.782628][ T3131] bridge0: port 1(bridge_slave_0) entered blocking state [ 241.790454][ T3131] bridge0: port 1(bridge_slave_0) entered forwarding state [ 241.955410][ T3131] bridge0: port 2(bridge_slave_1) entered blocking state [ 241.963266][ T3131] bridge0: port 2(bridge_slave_1) entered forwarding state [ 241.980162][ T3131] bridge0: port 1(bridge_slave_0) entered blocking state [ 241.987954][ T3131] bridge0: port 1(bridge_slave_0) entered forwarding state [ 242.009533][ T3131] bridge0: port 2(bridge_slave_1) entered blocking state [ 242.017470][ T3131] bridge0: port 2(bridge_slave_1) entered forwarding state [ 243.744563][ T5189] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 243.902445][ T5187] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 243.991884][ T5201] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 244.433932][ T5189] veth0_vlan: entered promiscuous mode [ 244.617991][ T5203] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 244.639283][ T5187] veth0_vlan: entered promiscuous mode [ 244.661301][ T5189] veth1_vlan: entered promiscuous mode [ 244.680328][ T5201] veth0_vlan: entered promiscuous mode [ 244.786932][ T5187] veth1_vlan: entered promiscuous mode [ 244.813655][ T5190] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 244.830891][ T5201] veth1_vlan: entered promiscuous mode [ 245.093378][ T5189] veth0_macvtap: entered promiscuous mode [ 245.204119][ T5187] veth0_macvtap: entered promiscuous mode [ 245.239311][ T5189] veth1_macvtap: entered promiscuous mode [ 245.297878][ T5201] veth0_macvtap: entered promiscuous mode [ 245.366167][ T5187] veth1_macvtap: entered promiscuous mode [ 245.421557][ T5189] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 245.445675][ T5201] veth1_macvtap: entered promiscuous mode [ 245.547826][ T5189] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 245.622805][ T5187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 245.636311][ T5187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 245.653009][ T5187] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 245.666567][ T5190] veth0_vlan: entered promiscuous mode [ 245.726405][ T5189] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 245.735608][ T5189] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 245.744654][ T5189] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 245.756481][ T5189] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 245.810628][ T5187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 245.823121][ T5187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 245.841827][ T5187] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 245.859461][ T5201] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 245.872110][ T5201] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 245.882366][ T5201] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 245.893204][ T5201] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 245.909837][ T5201] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 246.032396][ T5190] veth1_vlan: entered promiscuous mode [ 246.087916][ T5187] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 246.097599][ T5187] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 246.106890][ T5187] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 246.116263][ T5187] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 246.139277][ T5201] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 246.152946][ T5201] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 246.163987][ T5201] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 246.174816][ T5201] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 246.190262][ T5201] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 246.364784][ T5201] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 246.375945][ T5201] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 246.385246][ T5201] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 246.394342][ T5201] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 246.618014][ T5190] veth0_macvtap: entered promiscuous mode [ 246.678329][ T5190] veth1_macvtap: entered promiscuous mode [ 246.862383][ T5190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 246.874813][ T5190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 246.885939][ T5190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 246.896903][ T5190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 246.907073][ T5190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 246.917859][ T5190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 246.934625][ T5190] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 247.034386][ T5190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 247.045326][ T5190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 247.055528][ T5190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 247.066286][ T5190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 247.076572][ T5190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 247.087372][ T5190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 247.102745][ T5190] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 247.403942][ T5190] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 247.414206][ T5190] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 247.423539][ T5190] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 247.436107][ T5190] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 247.814455][ T5203] veth0_vlan: entered promiscuous mode [ 247.917856][ T5203] veth1_vlan: entered promiscuous mode [ 248.324698][ T5203] veth0_macvtap: entered promiscuous mode [ 248.419541][ T5203] veth1_macvtap: entered promiscuous mode [ 248.649725][ T5203] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 248.662316][ T5203] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 248.673223][ T5203] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 248.684018][ T5203] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 248.694166][ T5203] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 248.705056][ T5203] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 248.715260][ T5203] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 248.726011][ T5203] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 248.741434][ T5203] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 248.822449][ T5203] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 248.834730][ T5203] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 248.846302][ T5203] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 248.858092][ T5203] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 248.869232][ T5203] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 248.880574][ T5203] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 248.892345][ T5203] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 248.903153][ T5203] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 248.918494][ T5203] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 248.974028][ T5203] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 248.983719][ T5203] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 248.992955][ T5203] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 249.002133][ T5203] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 252.820333][ T2556] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 252.828679][ T2556] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 253.029544][ T2520] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 253.037761][ T2520] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 253.337614][ T60] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 253.349041][ T60] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 253.446979][ T3710] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 253.455325][ T3710] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 253.704731][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 253.713312][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 253.892397][ T3579] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 253.901010][ T3579] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 254.571089][ T5370] netlink: 'syz.0.1': attribute type 2 has an invalid length. [ 255.005932][ T2556] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 255.014047][ T2556] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 255.172610][ T3579] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 255.181197][ T3579] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 256.126865][ T5384] netlink: 'syz.3.8': attribute type 10 has an invalid length. [ 256.296763][ T5384] 8021q: adding VLAN 0 to HW filter on device team0 [ 256.315522][ T5384] bond0: (slave team0): Enslaving as an active interface with an up link [ 256.486074][ T5393] loop0: detected capacity change from 0 to 512 [ 256.622290][ T5388] netlink: 'syz.3.8': attribute type 10 has an invalid length. [ 256.639448][ T5388] bond0: (slave team0): Releasing backup interface [ 256.727536][ T5393] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 256.736506][ T5393] EXT4-fs (loop0): blocks per group (34) and clusters per group (32768) inconsistent [ 257.103839][ T5388] bridge0: port 3(team0) entered blocking state [ 257.111034][ T5388] bridge0: port 3(team0) entered disabled state [ 257.118463][ T5388] team0: entered allmulticast mode [ 257.123829][ T5388] team_slave_0: entered allmulticast mode [ 257.129881][ T5388] team_slave_1: entered allmulticast mode [ 257.140578][ T5388] team0: entered promiscuous mode [ 257.146086][ T5388] team_slave_0: entered promiscuous mode [ 257.152979][ T5388] team_slave_1: entered promiscuous mode [ 258.340772][ T2556] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 258.349175][ T2556] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 258.747570][ T2520] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 258.757097][ T2520] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 260.147489][ T5419] loop4: detected capacity change from 0 to 1024 [ 260.159954][ T5419] EXT4-fs: Ignoring removed i_version option [ 260.352264][ T5419] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 260.926454][ T5203] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 264.036569][ T5474] Zero length message leads to an empty skb [ 264.236934][ T5474] loop0: detected capacity change from 0 to 1024 [ 264.246766][ T5474] EXT4-fs: Ignoring removed i_version option [ 264.359229][ T5474] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 264.586502][ T5480] loop1: detected capacity change from 0 to 512 [ 264.630181][ T5480] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 264.639160][ T5480] EXT4-fs (loop1): blocks per group (34) and clusters per group (32768) inconsistent [ 265.121304][ T5187] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 266.216704][ T5495] netlink: 'syz.3.39': attribute type 10 has an invalid length. [ 266.225692][ T5495] team0: left allmulticast mode [ 266.230832][ T5495] team_slave_0: left allmulticast mode [ 266.236661][ T5495] team_slave_1: left allmulticast mode [ 266.242384][ T5495] team0: left promiscuous mode [ 266.247529][ T5495] team_slave_0: left promiscuous mode [ 266.254215][ T5495] team_slave_1: left promiscuous mode [ 266.262447][ T5495] bridge0: port 3(team0) entered disabled state [ 266.404069][ T5495] 8021q: adding VLAN 0 to HW filter on device team0 [ 266.419766][ T5495] bond0: (slave team0): Enslaving as an active interface with an up link [ 266.457807][ T5496] netlink: 'syz.3.39': attribute type 10 has an invalid length. [ 266.607051][ T5496] bond0: (slave team0): Releasing backup interface [ 266.747081][ T5496] bridge0: port 3(team0) entered blocking state [ 266.754171][ T5496] bridge0: port 3(team0) entered disabled state [ 266.761564][ T5496] team0: entered allmulticast mode [ 266.767089][ T5496] team_slave_0: entered allmulticast mode [ 266.773079][ T5496] team_slave_1: entered allmulticast mode [ 266.782200][ T5496] team0: entered promiscuous mode [ 266.787893][ T5496] team_slave_0: entered promiscuous mode [ 266.803747][ T5496] team_slave_1: entered promiscuous mode [ 269.271383][ T5521] loop4: detected capacity change from 0 to 1024 [ 269.337379][ T5521] EXT4-fs: Ignoring removed i_version option [ 269.514031][ T5521] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 270.428361][ T5203] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 272.444214][ T5551] netlink: 'syz.0.55': attribute type 10 has an invalid length. [ 272.686449][ T5551] 8021q: adding VLAN 0 to HW filter on device team0 [ 272.694542][ T5551] bond0: (slave team0): Enslaving as an active interface with an up link [ 273.068222][ T5552] netlink: 'syz.0.55': attribute type 10 has an invalid length. [ 273.170056][ T5552] bond0: (slave team0): Releasing backup interface [ 273.313152][ T5552] bridge0: port 3(team0) entered blocking state [ 273.320583][ T5552] bridge0: port 3(team0) entered disabled state [ 273.327792][ T5552] team0: entered allmulticast mode [ 273.333170][ T5552] team_slave_0: entered allmulticast mode [ 273.339377][ T5552] team_slave_1: entered allmulticast mode [ 273.358119][ T5552] team0: entered promiscuous mode [ 273.363403][ T5552] team_slave_0: entered promiscuous mode [ 273.370455][ T5552] team_slave_1: entered promiscuous mode [ 273.958254][ T5565] loop4: detected capacity change from 0 to 512 [ 274.146596][ T5565] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 274.155527][ T5565] EXT4-fs (loop4): blocks per group (34) and clusters per group (32768) inconsistent [ 274.525730][ T29] audit: type=1326 audit(1726778923.093:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5568 comm="syz.0.64" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd74497def9 code=0x7ffc0000 [ 274.548285][ T29] audit: type=1326 audit(1726778923.093:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5568 comm="syz.0.64" exe="/root/syz-executor" sig=0 arch=c000003e syscall=133 compat=0 ip=0x7fd74497def9 code=0x7ffc0000 [ 274.570853][ T29] audit: type=1326 audit(1726778923.113:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5568 comm="syz.0.64" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd74497def9 code=0x7ffc0000 [ 274.598009][ T29] audit: type=1326 audit(1726778923.113:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5568 comm="syz.0.64" exe="/root/syz-executor" sig=0 arch=c000003e syscall=63 compat=0 ip=0x7fd74497def9 code=0x7ffc0000 [ 274.622041][ T29] audit: type=1326 audit(1726778923.113:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5568 comm="syz.0.64" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd74497def9 code=0x7ffc0000 [ 274.644484][ T29] audit: type=1326 audit(1726778923.133:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5568 comm="syz.0.64" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd74497def9 code=0x7ffc0000 [ 274.666965][ T29] audit: type=1326 audit(1726778923.133:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5568 comm="syz.0.64" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd74497def9 code=0x7ffc0000 [ 274.694276][ T29] audit: type=1326 audit(1726778923.143:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5568 comm="syz.0.64" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fd74497def9 code=0x7ffc0000 [ 274.718376][ T29] audit: type=1326 audit(1726778923.143:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5568 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd74497def9 code=0x7ffc0000 [ 274.744582][ T29] audit: type=1326 audit(1726778923.153:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5568 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd74497def9 code=0x7ffc0000 [ 274.820540][ T5569] loop0: detected capacity change from 0 to 512 [ 274.932993][ T5569] EXT4-fs (loop0): failed to initialize system zone (-117) [ 275.014185][ T5569] EXT4-fs (loop0): mount failed [ 275.584534][ T5576] loop3: detected capacity change from 0 to 1024 [ 275.627620][ T5576] EXT4-fs: Ignoring removed i_version option [ 275.787239][ T5576] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 276.385394][ T5201] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 278.538583][ T5599] netlink: 'syz.1.74': attribute type 10 has an invalid length. [ 278.680650][ T5599] 8021q: adding VLAN 0 to HW filter on device team0 [ 278.702198][ T5599] bond0: (slave team0): Enslaving as an active interface with an up link [ 279.173345][ T5603] netlink: 'syz.1.74': attribute type 10 has an invalid length. [ 279.232120][ T5603] bond0: (slave team0): Releasing backup interface [ 279.268558][ T5603] bridge0: port 3(team0) entered blocking state [ 279.276245][ T5603] bridge0: port 3(team0) entered disabled state [ 279.283271][ T5603] team0: entered allmulticast mode [ 279.295774][ T5603] team_slave_0: entered allmulticast mode [ 279.303531][ T5603] team_slave_1: entered allmulticast mode [ 279.314041][ T5603] team0: entered promiscuous mode [ 279.320115][ T5603] team_slave_0: entered promiscuous mode [ 279.327133][ T5603] team_slave_1: entered promiscuous mode [ 280.096925][ T5613] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 280.473129][ T5621] capability: warning: `syz.3.81' uses deprecated v2 capabilities in a way that may be insecure [ 280.571290][ T5622] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 281.145730][ T5624] loop0: detected capacity change from 0 to 1024 [ 281.187615][ T5624] EXT4-fs: Ignoring removed i_version option [ 281.386858][ T5624] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 281.544640][ T5187] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 281.567877][ T5641] loop3: detected capacity change from 0 to 128 [ 281.802377][ T5641] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 281.936474][ T5641] ext4 filesystem being mounted at /20/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 283.201612][ T5201] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 284.035252][ T5658] netlink: 'syz.4.89': attribute type 10 has an invalid length. [ 284.175028][ T5660] loop2: detected capacity change from 0 to 512 [ 284.228349][ T5658] 8021q: adding VLAN 0 to HW filter on device team0 [ 284.243248][ T5658] bond0: (slave team0): Enslaving as an active interface with an up link [ 284.478018][ T5660] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 284.487720][ T5660] EXT4-fs (loop2): blocks per group (34) and clusters per group (32768) inconsistent [ 284.618310][ T5663] netlink: 'syz.4.89': attribute type 10 has an invalid length. [ 284.759079][ T5663] bond0: (slave team0): Releasing backup interface [ 284.892417][ T5663] bridge0: port 3(team0) entered blocking state [ 284.899614][ T5663] bridge0: port 3(team0) entered disabled state [ 284.906796][ T5663] team0: entered allmulticast mode [ 284.912154][ T5663] team_slave_0: entered allmulticast mode [ 284.926406][ T5663] team_slave_1: entered allmulticast mode [ 284.938187][ T5663] team0: entered promiscuous mode [ 284.943451][ T5663] team_slave_0: entered promiscuous mode [ 284.950595][ T5663] team_slave_1: entered promiscuous mode [ 285.347837][ T5672] 9pnet_fd: Insufficient options for proto=fd [ 285.663210][ T1240] ieee802154 phy0 wpan0: encryption failed: -22 [ 285.671627][ T1240] ieee802154 phy1 wpan1: encryption failed: -22 [ 286.148765][ T5684] loop4: detected capacity change from 0 to 1024 [ 286.184001][ T5249] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x4 [ 286.192204][ T5249] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x2 [ 286.200421][ T5249] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x0 [ 286.202534][ T5684] EXT4-fs: Ignoring removed i_version option [ 286.208404][ T5249] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x0 [ 286.222568][ T5249] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x0 [ 286.230966][ T5249] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x0 [ 286.239119][ T5249] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x0 [ 286.253642][ T5249] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x0 [ 286.263321][ T5249] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x0 [ 286.271363][ T5249] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x0 [ 286.279472][ T5249] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x0 [ 286.287664][ T5249] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x0 [ 286.295732][ T5249] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x0 [ 286.303749][ T5249] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x0 [ 286.311820][ T5249] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x0 [ 286.319912][ T5249] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x0 [ 286.375419][ T29] kauditd_printk_skb: 30 callbacks suppressed [ 286.375499][ T29] audit: type=1326 audit(1726778935.103:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5689 comm="syz.0.101" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd74497def9 code=0x7ffc0000 [ 286.419089][ T5249] hid-generic 0000:3000000:0000.0001: hidraw0: HID v0.00 Device [sy] on syz0 [ 286.471512][ T5684] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 286.515494][ T29] audit: type=1326 audit(1726778935.163:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5689 comm="syz.0.101" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd74497def9 code=0x7ffc0000 [ 286.538535][ T29] audit: type=1326 audit(1726778935.173:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5689 comm="syz.0.101" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd74497def9 code=0x7ffc0000 [ 286.566540][ T29] audit: type=1326 audit(1726778935.173:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5689 comm="syz.0.101" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd74497def9 code=0x7ffc0000 [ 286.592324][ T29] audit: type=1326 audit(1726778935.183:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5689 comm="syz.0.101" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd74497def9 code=0x7ffc0000 [ 286.615485][ T29] audit: type=1326 audit(1726778935.183:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5689 comm="syz.0.101" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd74497def9 code=0x7ffc0000 [ 286.638443][ T29] audit: type=1326 audit(1726778935.183:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5689 comm="syz.0.101" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd74497def9 code=0x7ffc0000 [ 286.665521][ T29] audit: type=1326 audit(1726778935.203:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5689 comm="syz.0.101" exe="/root/syz-executor" sig=0 arch=c000003e syscall=166 compat=0 ip=0x7fd74497def9 code=0x7ffc0000 [ 286.689996][ T29] audit: type=1326 audit(1726778935.203:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5689 comm="syz.0.101" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd74497def9 code=0x7ffc0000 [ 286.712654][ T29] audit: type=1326 audit(1726778935.273:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5689 comm="syz.0.101" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fd74497def9 code=0x7ffc0000 [ 287.300878][ T5203] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 289.584009][ T5715] netlink: 'syz.3.108': attribute type 10 has an invalid length. [ 289.593320][ T5715] team0: left allmulticast mode [ 289.598656][ T5715] team_slave_0: left allmulticast mode [ 289.604389][ T5715] team_slave_1: left allmulticast mode [ 289.610175][ T5715] team0: left promiscuous mode [ 289.615312][ T5715] team_slave_0: left promiscuous mode [ 289.621823][ T5715] team_slave_1: left promiscuous mode [ 289.637665][ T5715] bridge0: port 3(team0) entered disabled state [ 289.995876][ T5718] 9pnet_fd: Insufficient options for proto=fd [ 290.204138][ T5715] 8021q: adding VLAN 0 to HW filter on device team0 [ 290.221914][ T5715] bond0: (slave team0): Enslaving as an active interface with an up link [ 290.515681][ T5716] netlink: 'syz.3.108': attribute type 10 has an invalid length. [ 290.667429][ T5716] bond0: (slave team0): Releasing backup interface [ 290.797443][ T5716] bridge0: port 3(team0) entered blocking state [ 290.804521][ T5716] bridge0: port 3(team0) entered disabled state [ 290.811704][ T5716] team0: entered allmulticast mode [ 290.817181][ T5716] team_slave_0: entered allmulticast mode [ 290.823174][ T5716] team_slave_1: entered allmulticast mode [ 290.832110][ T5716] team0: entered promiscuous mode [ 290.837508][ T5716] team_slave_0: entered promiscuous mode [ 290.844403][ T5716] team_slave_1: entered promiscuous mode [ 291.739731][ T5732] loop4: detected capacity change from 0 to 1024 [ 291.767836][ T5732] EXT4-fs: Ignoring removed i_version option [ 291.853999][ T5736] loop2: detected capacity change from 0 to 512 [ 291.865088][ T5732] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 291.939665][ T5736] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 291.948659][ T5736] EXT4-fs (loop2): blocks per group (34) and clusters per group (32768) inconsistent [ 292.167393][ T5203] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 292.863672][ T5755] 9pnet_fd: Insufficient options for proto=fd [ 292.893083][ T29] audit: type=1326 audit(1726778941.503:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5750 comm="syz.1.122" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2135d7def9 code=0x7ffc0000 [ 292.919578][ T29] audit: type=1326 audit(1726778941.533:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5750 comm="syz.1.122" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2135d7def9 code=0x7ffc0000 [ 292.943344][ T29] audit: type=1326 audit(1726778941.533:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5750 comm="syz.1.122" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2135d7def9 code=0x7ffc0000 [ 292.966445][ T29] audit: type=1326 audit(1726778941.543:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5750 comm="syz.1.122" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2135d7def9 code=0x7ffc0000 [ 292.989064][ T29] audit: type=1326 audit(1726778941.553:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5750 comm="syz.1.122" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2135d7def9 code=0x7ffc0000 [ 293.014834][ T29] audit: type=1326 audit(1726778941.553:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5750 comm="syz.1.122" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2135d7def9 code=0x7ffc0000 [ 293.040481][ T29] audit: type=1326 audit(1726778941.553:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5750 comm="syz.1.122" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f2135d7def9 code=0x7ffc0000 [ 293.063078][ T5247] hid-generic 0000:3000000:0000.0002: unknown main item tag 0x4 [ 293.063326][ T5247] hid-generic 0000:3000000:0000.0002: unknown main item tag 0x2 [ 293.071361][ T29] audit: type=1326 audit(1726778941.553:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5750 comm="syz.1.122" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2135d7def9 code=0x7ffc0000 [ 293.080658][ T5247] hid-generic 0000:3000000:0000.0002: unknown main item tag 0x0 [ 293.101329][ T29] audit: type=1326 audit(1726778941.553:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5750 comm="syz.1.122" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2135d7def9 code=0x7ffc0000 [ 293.115659][ T5247] hid-generic 0000:3000000:0000.0002: unknown main item tag 0x0 [ 293.136723][ T29] audit: type=1326 audit(1726778941.583:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5750 comm="syz.1.122" exe="/root/syz-executor" sig=0 arch=c000003e syscall=50 compat=0 ip=0x7f2135d7def9 code=0x7ffc0000 [ 293.144272][ T5247] hid-generic 0000:3000000:0000.0002: unknown main item tag 0x0 [ 293.175022][ T5247] hid-generic 0000:3000000:0000.0002: unknown main item tag 0x0 [ 293.183022][ T5247] hid-generic 0000:3000000:0000.0002: unknown main item tag 0x0 [ 293.191116][ T5247] hid-generic 0000:3000000:0000.0002: unknown main item tag 0x0 [ 293.199258][ T5247] hid-generic 0000:3000000:0000.0002: unknown main item tag 0x0 [ 293.207357][ T5247] hid-generic 0000:3000000:0000.0002: unknown main item tag 0x0 [ 293.221646][ T5247] hid-generic 0000:3000000:0000.0002: unknown main item tag 0x0 [ 293.231520][ T5247] hid-generic 0000:3000000:0000.0002: unknown main item tag 0x0 [ 293.239753][ T5247] hid-generic 0000:3000000:0000.0002: unknown main item tag 0x0 [ 293.247846][ T5247] hid-generic 0000:3000000:0000.0002: unknown main item tag 0x0 [ 293.255946][ T5247] hid-generic 0000:3000000:0000.0002: unknown main item tag 0x0 [ 293.263960][ T5247] hid-generic 0000:3000000:0000.0002: unknown main item tag 0x0 [ 293.628659][ T5247] hid-generic 0000:3000000:0000.0002: hidraw0: HID v0.00 Device [sy] on syz0 [ 294.465145][ T5769] netlink: 'syz.3.125': attribute type 10 has an invalid length. [ 294.473860][ T5769] team0: left allmulticast mode [ 294.479139][ T5769] team_slave_0: left allmulticast mode [ 294.485004][ T5769] team_slave_1: left allmulticast mode [ 294.490708][ T5769] team0: left promiscuous mode [ 294.495791][ T5769] team_slave_0: left promiscuous mode [ 294.502371][ T5769] team_slave_1: left promiscuous mode [ 294.510048][ T5769] bridge0: port 3(team0) entered disabled state [ 294.982057][ T5769] 8021q: adding VLAN 0 to HW filter on device team0 [ 294.997573][ T5769] bond0: (slave team0): Enslaving as an active interface with an up link [ 295.453147][ T5771] netlink: 'syz.3.125': attribute type 10 has an invalid length. [ 295.848875][ T5771] bond0: (slave team0): Releasing backup interface [ 296.102794][ T5771] bridge0: port 3(team0) entered blocking state [ 296.109975][ T5771] bridge0: port 3(team0) entered disabled state [ 296.117056][ T5771] team0: entered allmulticast mode [ 296.122422][ T5771] team_slave_0: entered allmulticast mode [ 296.128523][ T5771] team_slave_1: entered allmulticast mode [ 296.137513][ T5771] team0: entered promiscuous mode [ 296.142885][ T5771] team_slave_0: entered promiscuous mode [ 296.149942][ T5771] team_slave_1: entered promiscuous mode [ 297.445779][ T5789] loop1: detected capacity change from 0 to 1024 [ 297.491651][ T5789] EXT4-fs: Ignoring removed i_version option [ 297.703400][ T5789] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 298.265210][ T5190] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 298.450747][ T5803] loop2: detected capacity change from 0 to 512 [ 298.585349][ T5803] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 298.594045][ T5803] EXT4-fs (loop2): blocks per group (34) and clusters per group (32768) inconsistent [ 298.679245][ T5808] loop1: detected capacity change from 0 to 512 [ 299.463839][ T5808] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 299.478419][ T5808] ext4 filesystem being mounted at /29/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 299.630257][ T29] kauditd_printk_skb: 29 callbacks suppressed [ 299.630329][ T29] audit: type=1326 audit(1726778948.353:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5817 comm="syz.3.143" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f63a197def9 code=0x0 [ 299.821221][ T5808] EXT4-fs error (device loop1): ext4_do_update_inode:5151: inode #2: comm syz.1.139: corrupted inode contents [ 299.990250][ T5808] EXT4-fs error (device loop1): ext4_dirty_inode:6011: inode #2: comm syz.1.139: mark_inode_dirty error [ 300.157968][ T5808] EXT4-fs error (device loop1): ext4_do_update_inode:5151: inode #2: comm syz.1.139: corrupted inode contents [ 300.426681][ T5827] EXT4-fs error (device loop1): ext4_add_entry:2435: inode #2: comm syz.1.139: Directory hole found for htree leaf block 0 [ 300.917542][ T5190] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 302.479288][ T5838] loop0: detected capacity change from 0 to 1024 [ 302.540747][ T5838] EXT4-fs: Ignoring removed i_version option [ 302.810958][ T5838] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 304.155772][ T5187] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 305.429357][ T29] audit: type=1326 audit(1726778954.143:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5861 comm="syz.1.157" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2135d7def9 code=0x7ffc0000 [ 305.456962][ T29] audit: type=1326 audit(1726778954.143:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5861 comm="syz.1.157" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2135d7def9 code=0x7ffc0000 [ 305.559571][ T29] audit: type=1326 audit(1726778954.273:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5861 comm="syz.1.157" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2135d7def9 code=0x7ffc0000 [ 305.582268][ T29] audit: type=1326 audit(1726778954.273:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5861 comm="syz.1.157" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2135d7def9 code=0x7ffc0000 [ 305.609511][ T29] audit: type=1326 audit(1726778954.283:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5861 comm="syz.1.157" exe="/root/syz-executor" sig=0 arch=c000003e syscall=459 compat=0 ip=0x7f2135d7def9 code=0x7ffc0000 [ 305.633971][ T29] audit: type=1326 audit(1726778954.283:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5861 comm="syz.1.157" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2135d7def9 code=0x7ffc0000 [ 308.842415][ T5888] loop2: detected capacity change from 0 to 1024 [ 308.910695][ T5888] EXT4-fs: Ignoring removed i_version option [ 309.038028][ T5888] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 309.432886][ T5189] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 309.775214][ T5908] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 309.974168][ C1] Unknown status report in ack skb [ 310.113684][ T5908] kvm: kvm [5906]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0x80200000800 [ 310.146098][ T5908] kvm: kvm [5906]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x80200000000 [ 310.223298][ T5908] kvm: kvm [5906]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x11e) = 0x80200000000 [ 310.287585][ T5908] kvm: kvm [5906]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x186) = 0x80200000000 [ 310.347320][ T5908] kvm: kvm [5906]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x187) = 0x80200000800 [ 312.448629][ T5934] loop2: detected capacity change from 0 to 1024 [ 312.528254][ T5934] EXT4-fs: Ignoring removed i_version option [ 312.862806][ T5934] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 313.696544][ T5189] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 313.986109][ T5948] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 314.031836][ T5948] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 315.785528][ T5978] loop1: detected capacity change from 0 to 1024 [ 315.828395][ T5978] EXT4-fs: Ignoring removed i_version option [ 315.989767][ T5978] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 316.177168][ T5982] tipc: Enabling of bearer rejected, failed to enable media [ 317.278964][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 317.995556][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 318.003986][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 318.097871][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 318.106279][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 318.405286][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 318.413746][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 318.507756][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 318.516169][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 318.815452][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 319.417469][ T5190] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 319.437381][ T44] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 320.525470][ T5247] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 320.736049][ T5247] usb 3-1: Using ep0 maxpacket: 8 [ 320.782942][ T5247] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 320.793325][ T5247] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 320.803471][ T5247] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 320.813826][ T5247] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 320.827458][ T5247] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 320.836905][ T5247] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 321.418252][ T6019] netlink: 36 bytes leftover after parsing attributes in process `syz.2.208'. [ 321.428020][ T6019] netlink: 16 bytes leftover after parsing attributes in process `syz.2.208'. [ 321.439201][ T6019] netlink: 36 bytes leftover after parsing attributes in process `syz.2.208'. [ 321.449311][ T6019] netlink: 36 bytes leftover after parsing attributes in process `syz.2.208'. [ 321.646287][ T5247] usb 3-1: GET_CAPABILITIES returned 0 [ 321.652175][ T5247] usbtmc 3-1:16.0: can't read capabilities [ 321.907273][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 321.917160][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 321.926931][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 321.936661][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 321.946263][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 321.955917][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 321.965785][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 321.976341][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 321.991618][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 322.003149][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 322.012865][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 322.022553][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 322.032565][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 322.042286][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 322.052135][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 322.061797][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 322.154203][ T6022] netlink: 4 bytes leftover after parsing attributes in process `syz.4.215'. [ 322.163583][ T6022] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 322.171393][ T6022] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 322.215389][ T44] usb 3-1: USB disconnect, device number 2 [ 322.270652][ T6022] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 322.279292][ T6022] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 322.351799][ T6026] loop0: detected capacity change from 0 to 512 [ 322.416766][ T6026] ======================================================= [ 322.416766][ T6026] WARNING: The mand mount option has been deprecated and [ 322.416766][ T6026] and is ignored by this kernel. Remove the mand [ 322.416766][ T6026] option from the mount to silence this warning. [ 322.416766][ T6026] ======================================================= [ 322.556560][ T6026] EXT4-fs error (device loop0): ext4_orphan_get:1417: comm syz.0.216: bad orphan inode 17 [ 322.612075][ T6026] ext4_test_bit(bit=16, block=4) = 1 [ 322.617999][ T6026] is_bad_inode(inode)=0 [ 322.622441][ T6026] NEXT_ORPHAN(inode)=0 [ 322.626993][ T6026] max_ino=32 [ 322.630507][ T6026] i_nlink=1 [ 322.636968][ T6026] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 323.128328][ T6039] bond_slave_0: entered promiscuous mode [ 323.134356][ T6039] bond_slave_1: entered promiscuous mode [ 323.142826][ T6039] vlan2: entered promiscuous mode [ 323.148204][ T6039] bond0: entered promiscuous mode [ 323.305851][ T6042] netlink: 8 bytes leftover after parsing attributes in process `syz.4.220'. [ 323.506737][ T5187] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 325.169643][ T6065] loop0: detected capacity change from 0 to 2048 [ 325.332827][ T6065] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 325.703917][ T6074] loop2: detected capacity change from 0 to 512 [ 325.764798][ T5187] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 325.865770][ T6074] EXT4-fs error (device loop2): ext4_orphan_get:1417: comm syz.2.231: bad orphan inode 17 [ 325.997728][ T6074] ext4_test_bit(bit=16, block=4) = 1 [ 326.003988][ T6074] is_bad_inode(inode)=0 [ 326.008669][ T6074] NEXT_ORPHAN(inode)=0 [ 326.012929][ T6074] max_ino=32 [ 326.016391][ T6074] i_nlink=1 [ 326.021431][ T6074] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 326.747192][ T6087] team_slave_0: entered promiscuous mode [ 326.753227][ T6087] team_slave_1: entered promiscuous mode [ 326.761613][ T6087] vlan2: entered promiscuous mode [ 326.767032][ T6087] team0: entered promiscuous mode [ 327.390349][ T5189] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 328.410713][ T6092] syz.3.236 (6092): drop_caches: 2 [ 329.037089][ T6125] 9pnet_fd: Insufficient options for proto=fd [ 329.185595][ T44] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 329.262253][ T6123] loop4: detected capacity change from 0 to 2048 [ 329.313197][ T6130] netlink: 8 bytes leftover after parsing attributes in process `syz.2.247'. [ 329.385237][ T44] usb 2-1: Using ep0 maxpacket: 8 [ 329.427970][ T6123] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 329.498959][ T44] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 329.510160][ T44] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 329.519077][ T44] usb 2-1: Product: syz [ 329.523512][ T44] usb 2-1: Manufacturer: syz [ 329.528537][ T44] usb 2-1: SerialNumber: syz [ 329.569600][ T44] usb 2-1: config 0 descriptor?? [ 329.725522][ T6135] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 329.919952][ T5203] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 329.954267][ T6137] loop0: detected capacity change from 0 to 512 [ 330.134451][ T6137] EXT4-fs error (device loop0): ext4_orphan_get:1417: comm syz.0.250: bad orphan inode 17 [ 330.223125][ T6137] ext4_test_bit(bit=16, block=4) = 1 [ 330.228846][ T6137] is_bad_inode(inode)=0 [ 330.233219][ T6137] NEXT_ORPHAN(inode)=0 [ 330.237741][ T6137] max_ino=32 [ 330.241143][ T6137] i_nlink=1 [ 330.376644][ T6137] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 330.735938][ T44] dvb_usb_rtl28xxu 2-1:0.0: chip type detection failed -110 [ 330.743742][ T44] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -110 [ 330.986064][ T6148] EXT4-fs (sda1): shut down requested (2) [ 330.992142][ T6148] Aborting journal on device sda1-8. [ 331.266867][ T5187] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 331.936566][ T6164] 9pnet_fd: Insufficient options for proto=fd [ 332.182837][ T5247] usb 2-1: USB disconnect, device number 2 [ 332.799484][ T6173] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 332.823899][ T25] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 333.070969][ T25] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 333.122371][ T25] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 333.132465][ T25] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 333.140928][ T25] usb 4-1: SerialNumber: syz [ 333.227338][ T25] usb 4-1: bad CDC descriptors [ 333.521787][ T5249] usb 4-1: USB disconnect, device number 2 [ 333.882512][ T6184] loop2: detected capacity change from 0 to 512 [ 333.973730][ T6184] EXT4-fs error (device loop2): ext4_orphan_get:1417: comm syz.2.268: bad orphan inode 17 [ 334.015365][ T6184] ext4_test_bit(bit=16, block=4) = 1 [ 334.020886][ T6184] is_bad_inode(inode)=0 [ 334.026140][ T6184] NEXT_ORPHAN(inode)=0 [ 334.030399][ T6184] max_ino=32 [ 334.033772][ T6184] i_nlink=1 [ 334.038689][ T6184] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 334.672798][ T5189] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 335.388643][ T6205] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 335.395309][ T6205] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 335.441843][ T6205] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 335.509669][ T6205] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 335.515999][ T6205] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 335.664546][ T6205] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 335.686909][ T6205] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 335.693436][ T6205] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 335.780056][ T6205] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 335.844554][ T6205] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 335.851287][ T6205] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 335.887175][ T6205] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 335.924333][ T6205] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 335.931380][ T6205] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 335.963089][ T6205] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 336.405404][ T6222] netlink: 4 bytes leftover after parsing attributes in process `syz.0.284'. [ 336.483478][ T6219] loop3: detected capacity change from 0 to 1024 [ 336.501136][ T6219] EXT4-fs: Ignoring removed i_version option [ 336.710347][ T6219] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 337.110225][ T5201] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 337.258424][ T6235] netlink: 4 bytes leftover after parsing attributes in process `syz.1.288'. [ 337.425477][ T5196] Bluetooth: hci0: command 0x0c1a tx timeout [ 337.435356][ T5249] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 337.586135][ T5196] Bluetooth: hci1: command 0x0c1a tx timeout [ 337.625110][ T5249] usb 5-1: Using ep0 maxpacket: 8 [ 337.639669][ T5249] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 337.651206][ T5249] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 337.666026][ T5249] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 337.679478][ T5249] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 337.693178][ T5249] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 337.702667][ T5249] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 337.746175][ T5196] Bluetooth: hci2: command 0x0c1a tx timeout [ 337.905604][ T5196] Bluetooth: hci3: command 0x0c1a tx timeout [ 337.942616][ T5249] usb 5-1: usb_control_msg returned -32 [ 337.948720][ T5249] usbtmc 5-1:16.0: can't read capabilities [ 337.985188][ T5196] Bluetooth: hci4: command 0x0c1a tx timeout [ 338.327877][ C0] usbtmc 5-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 338.386043][ T6250] usbtmc 5-1:16.0: Unable to send data, error -71 [ 338.439001][ T6250] netlink: 12 bytes leftover after parsing attributes in process `syz.4.287'. [ 339.174313][ T6262] loop0: detected capacity change from 0 to 1024 [ 339.247710][ T6262] EXT4-fs: Ignoring removed i_version option [ 339.387039][ T6262] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 339.512464][ T5196] Bluetooth: hci0: command 0x0c1a tx timeout [ 339.667637][ T5196] Bluetooth: hci1: command 0x0c1a tx timeout [ 339.808205][ T5187] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 339.826040][ T5196] Bluetooth: hci2: command 0x0c1a tx timeout [ 339.985480][ T5196] Bluetooth: hci3: command 0x0c1a tx timeout [ 340.065471][ T5196] Bluetooth: hci4: command 0x0c1a tx timeout [ 340.309186][ T5249] usb 5-1: USB disconnect, device number 3 [ 340.687344][ T5196] Bluetooth: hci1: unexpected subevent 0x19 length: 16 < 28 [ 341.555309][ T25] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 341.585196][ T5196] Bluetooth: hci0: command 0x0c1a tx timeout [ 341.737894][ T25] usb 3-1: Using ep0 maxpacket: 8 [ 341.746481][ T5196] Bluetooth: hci1: command 0x0c1a tx timeout [ 341.799382][ T25] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 341.809889][ T25] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 341.820337][ T25] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 341.830763][ T25] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 341.844300][ T25] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 341.857309][ T25] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 341.911735][ T5196] Bluetooth: hci2: command 0x0c1a tx timeout [ 342.009839][ T6311] loop0: detected capacity change from 0 to 1024 [ 342.020049][ T6311] EXT4-fs: Ignoring removed i_version option [ 342.065618][ T5196] Bluetooth: hci3: command 0x0c1a tx timeout [ 342.075732][ T5249] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 342.145370][ T5196] Bluetooth: hci4: command 0x0c1a tx timeout [ 342.270569][ T6311] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 342.290380][ T5249] usb 5-1: Using ep0 maxpacket: 8 [ 342.350652][ T5249] usb 5-1: config 162 has an invalid interface number: 162 but max is 1 [ 342.359551][ T5249] usb 5-1: config 162 has an invalid descriptor of length 0, skipping remainder of the config [ 342.376364][ T5249] usb 5-1: config 162 has 1 interface, different from the descriptor's value: 2 [ 342.385774][ T5249] usb 5-1: config 162 has no interface number 0 [ 342.392287][ T5249] usb 5-1: config 162 interface 162 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 342.406097][ T5249] usb 5-1: config 162 interface 162 has no altsetting 0 [ 342.462812][ T6321] netlink: 36 bytes leftover after parsing attributes in process `syz.2.313'. [ 342.477964][ T6321] netlink: 16 bytes leftover after parsing attributes in process `syz.2.313'. [ 342.488636][ T6321] netlink: 36 bytes leftover after parsing attributes in process `syz.2.313'. [ 342.497901][ T6321] netlink: 36 bytes leftover after parsing attributes in process `syz.2.313'. [ 342.538201][ T5249] usb 5-1: New USB device found, idVendor=079b, idProduct=0027, bcdDevice=69.9c [ 342.547733][ T5249] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 342.556078][ T5249] usb 5-1: Product: syz [ 342.560458][ T5249] usb 5-1: Manufacturer: syz [ 342.565340][ T5249] usb 5-1: SerialNumber: syz [ 342.599408][ T25] usb 3-1: GET_CAPABILITIES returned 2f [ 342.605623][ T25] usbtmc 3-1:16.0: can't read capabilities [ 342.610245][ T5187] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 342.801850][ C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 342.811735][ C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 342.821571][ C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 342.831606][ C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 342.841420][ C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 342.851191][ C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 342.861014][ C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 342.870790][ C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 342.883807][ C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 342.894498][ C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 342.904375][ C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 342.914148][ C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 342.929808][ C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 342.939696][ C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 342.950977][ C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 342.961145][ C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 344.573966][ T44] usb 3-1: USB disconnect, device number 3 [ 345.296705][ T5249] pl2303 5-1:162.162: required endpoints missing [ 345.389857][ T5249] usb 5-1: USB disconnect, device number 4 [ 345.650877][ T6353] loop1: detected capacity change from 0 to 1024 [ 345.686492][ T6353] EXT4-fs: Ignoring removed i_version option [ 345.781998][ T6353] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 345.937170][ T5247] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 346.195185][ T5247] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 346.206612][ T5247] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 346.217109][ T5247] usb 4-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 346.226512][ T5247] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 346.327182][ T5190] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 346.364491][ T5247] usb 4-1: config 0 descriptor?? [ 346.697892][ T6357] syz_tun: entered promiscuous mode [ 346.703473][ T6357] vlan2: entered promiscuous mode [ 346.709965][ T6357] vlan2: entered allmulticast mode [ 346.715471][ T6357] syz_tun: entered allmulticast mode [ 346.753703][ T6371] random: crng reseeded on system resumption [ 346.823976][ T6357] syz_tun: left allmulticast mode [ 346.831208][ T6357] syz_tun: left promiscuous mode [ 346.904538][ C0] hrtimer: interrupt took 306451 ns [ 346.947580][ T5249] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 347.063295][ T1240] ieee802154 phy0 wpan0: encryption failed: -22 [ 347.070344][ T1240] ieee802154 phy1 wpan1: encryption failed: -22 [ 347.151132][ T5247] usbhid 4-1:0.0: can't add hid device: -71 [ 347.158267][ T5247] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 347.216796][ T5247] usb 4-1: USB disconnect, device number 3 [ 347.275592][ T5249] usb 3-1: Using ep0 maxpacket: 8 [ 347.344293][ T5249] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 347.354940][ T5249] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 347.365131][ T5249] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 347.375398][ T5249] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 347.393532][ T5249] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 347.404464][ T5249] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 347.767536][ T6368] netlink: 36 bytes leftover after parsing attributes in process `syz.2.338'. [ 347.777342][ T6368] netlink: 16 bytes leftover after parsing attributes in process `syz.2.338'. [ 347.786786][ T6368] netlink: 36 bytes leftover after parsing attributes in process `syz.2.338'. [ 347.802146][ T6368] netlink: 36 bytes leftover after parsing attributes in process `syz.2.338'. [ 347.949858][ T5249] usb 3-1: GET_CAPABILITIES returned 2f [ 347.955968][ T5249] usbtmc 3-1:16.0: can't read capabilities [ 348.159179][ T5249] usb 3-1: USB disconnect, device number 4 [ 348.849715][ T6390] loop0: detected capacity change from 0 to 1024 [ 348.881847][ T6390] EXT4-fs: Ignoring removed i_version option [ 348.981986][ T6390] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 349.159525][ T5187] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 349.638775][ T5249] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 349.815207][ T5249] usb 3-1: Using ep0 maxpacket: 8 [ 349.862234][ T5249] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 349.872690][ T5249] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 349.882870][ T5249] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 349.893175][ T5249] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 349.906616][ T5249] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 349.916102][ T5249] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 350.327310][ T6403] netlink: 36 bytes leftover after parsing attributes in process `syz.2.351'. [ 350.337987][ T6403] netlink: 16 bytes leftover after parsing attributes in process `syz.2.351'. [ 350.347387][ T6403] netlink: 36 bytes leftover after parsing attributes in process `syz.2.351'. [ 350.360638][ T6403] netlink: 36 bytes leftover after parsing attributes in process `syz.2.351'. [ 350.746307][ T5249] usb 3-1: USB disconnect, device number 5 [ 351.285941][ T5247] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 351.397551][ T6427] loop4: detected capacity change from 0 to 1024 [ 351.438849][ T6427] EXT4-fs: Ignoring removed i_version option [ 351.492970][ T5247] usb 1-1: Using ep0 maxpacket: 8 [ 351.527929][ T5247] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 351.538185][ T5247] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 351.548454][ T5247] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 351.558914][ T5247] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 351.572314][ T5247] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 351.586473][ T5247] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 351.675729][ T6427] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 351.810379][ T6435] netlink: 44 bytes leftover after parsing attributes in process `syz.3.364'. [ 351.975625][ T5203] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 352.158893][ T6448] netlink: 36 bytes leftover after parsing attributes in process `syz.0.359'. [ 352.305930][ T5247] usb 1-1: GET_CAPABILITIES returned 2f [ 352.312005][ T5247] usbtmc 1-1:16.0: can't read capabilities [ 352.945273][ T5247] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 353.155260][ T5247] usb 3-1: Using ep0 maxpacket: 32 [ 353.180427][ T5247] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 353.191942][ T5247] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 353.275880][ T5247] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 353.285730][ T5247] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 353.294027][ T5247] usb 3-1: Product: syz [ 353.298628][ T5247] usb 3-1: Manufacturer: syz [ 353.303500][ T5247] usb 3-1: SerialNumber: syz [ 353.603915][ T5247] usblp 3-1:1.0: usblp1: USB Unidirectional printer dev 6 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 353.813301][ T6454] ===================================================== [ 353.821432][ T6454] BUG: KMSAN: kernel-usb-infoleak in usb_submit_urb+0x597/0x2350 [ 353.829699][ T6454] usb_submit_urb+0x597/0x2350 [ 353.838387][ T6454] usbtmc_write+0xc2c/0x1210 [ 353.843245][ T6454] vfs_write+0x487/0x1540 [ 353.849272][ T6454] ksys_write+0x20f/0x4c0 [ 353.853867][ T6454] __x64_sys_write+0x93/0xe0 [ 353.859023][ T6454] x64_sys_call+0x306a/0x3ba0 [ 353.863961][ T6454] do_syscall_64+0xcd/0x1e0 [ 353.868996][ T6454] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 353.875760][ T6454] [ 353.878218][ T6454] Uninit was created at: [ 353.882739][ T6454] __kmalloc_cache_noprof+0x4f0/0xb00 [ 353.888566][ T6454] usbtmc_write+0x3cd/0x1210 [ 353.893405][ T6454] vfs_write+0x487/0x1540 [ 353.898182][ T6454] ksys_write+0x20f/0x4c0 [ 353.902778][ T6454] __x64_sys_write+0x93/0xe0 [ 353.907944][ T6454] x64_sys_call+0x306a/0x3ba0 [ 353.912869][ T6454] do_syscall_64+0xcd/0x1e0 [ 353.917814][ T6454] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 353.923975][ T6454] [ 353.928036][ T6454] Bytes 13-15 of 16 are uninitialized [ 353.937380][ T6454] Memory access of size 16 starts at ffff88803da30000 [ 353.944322][ T6454] [ 353.948060][ T6454] CPU: 1 UID: 0 PID: 6454 Comm: syz.2.366 Not tainted 6.11.0-syzkaller-07262-g839c4f596f89 #0 [ 353.958747][ T6454] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 353.969277][ T6454] ===================================================== [ 353.976480][ T6454] Disabling lock debugging due to kernel taint [ 353.982765][ T6454] Kernel panic - not syncing: kmsan.panic set ... [ 353.989342][ T6454] CPU: 1 UID: 0 PID: 6454 Comm: syz.2.366 Tainted: G B 6.11.0-syzkaller-07262-g839c4f596f89 #0 [ 354.001329][ T6454] Tainted: [B]=BAD_PAGE [ 354.005599][ T6454] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 354.015829][ T6454] Call Trace: [ 354.019232][ T6454] [ 354.022295][ T6454] dump_stack_lvl+0x216/0x2d0 [ 354.027168][ T6454] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 354.033211][ T6454] dump_stack+0x1e/0x30 [ 354.037543][ T6454] panic+0x4e2/0xcf0 [ 354.041637][ T6454] ? kmsan_get_metadata+0x101/0x1c0 [ 354.047091][ T6454] kmsan_report+0x2c7/0x2d0 [ 354.051805][ T6454] ? do_syscall_64+0xcd/0x1e0 [ 354.056691][ T6454] ? kmsan_internal_check_memory+0x48c/0x560 [ 354.062877][ T6454] ? kmsan_handle_urb+0x2c/0x40 [ 354.067922][ T6454] ? usb_submit_urb+0x597/0x2350 [ 354.073058][ T6454] ? usbtmc_write+0xc2c/0x1210 [ 354.078041][ T6454] ? vfs_write+0x487/0x1540 [ 354.082774][ T6454] ? ksys_write+0x20f/0x4c0 [ 354.087500][ T6454] ? __x64_sys_write+0x93/0xe0 [ 354.092499][ T6454] ? x64_sys_call+0x306a/0x3ba0 [ 354.097564][ T6454] ? do_syscall_64+0xcd/0x1e0 [ 354.102430][ T6454] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 354.108745][ T6454] ? kmsan_get_metadata+0x13e/0x1c0 [ 354.114151][ T6454] ? kmsan_internal_set_shadow_origin+0x69/0x100 [ 354.120679][ T6454] ? kmsan_internal_poison_memory+0x7d/0x90 [ 354.126769][ T6454] ? x64_sys_call+0x306a/0x3ba0 [ 354.131838][ T6454] ? kmsan_internal_poison_memory+0x49/0x90 [ 354.137907][ T6454] ? kmsan_slab_alloc+0xdf/0x160 [ 354.143033][ T6454] ? __kmalloc_cache_noprof+0x4f0/0xb00 [ 354.148784][ T6454] ? usbtmc_write+0x3cd/0x1210 [ 354.153749][ T6454] ? vfs_write+0x487/0x1540 [ 354.158485][ T6454] ? ksys_write+0x20f/0x4c0 [ 354.163202][ T6454] ? __x64_sys_write+0x93/0xe0 [ 354.168157][ T6454] ? x64_sys_call+0x306a/0x3ba0 [ 354.173199][ T6454] ? do_syscall_64+0xcd/0x1e0 [ 354.178049][ T6454] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 354.184349][ T6454] ? kmsan_get_metadata+0x13e/0x1c0 [ 354.189801][ T6454] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 354.195819][ T6454] ? _raw_spin_lock_irqsave+0x35/0xc0 [ 354.201424][ T6454] ? filter_irq_stacks+0x60/0x1a0 [ 354.206696][ T6454] kmsan_internal_check_memory+0x48c/0x560 [ 354.212704][ T6454] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 354.218722][ T6454] kmsan_handle_urb+0x2c/0x40 [ 354.223612][ T6454] usb_submit_urb+0x597/0x2350 [ 354.228566][ T6454] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 354.234616][ T6454] usbtmc_write+0xc2c/0x1210 [ 354.239427][ T6454] ? __pfx_usbtmc_write+0x10/0x10 [ 354.244689][ T6454] vfs_write+0x487/0x1540 [ 354.249261][ T6454] ? kmsan_get_metadata+0x13e/0x1c0 [ 354.254666][ T6454] ? kmsan_internal_set_shadow_origin+0x69/0x100 [ 354.261198][ T6454] ? kmsan_get_metadata+0x13e/0x1c0 [ 354.266613][ T6454] ksys_write+0x20f/0x4c0 [ 354.271159][ T6454] __x64_sys_write+0x93/0xe0 [ 354.275970][ T6454] x64_sys_call+0x306a/0x3ba0 [ 354.280864][ T6454] do_syscall_64+0xcd/0x1e0 [ 354.285557][ T6454] ? clear_bhb_loop+0x25/0x80 [ 354.290458][ T6454] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 354.296584][ T6454] RIP: 0033:0x7ff7e397def9 [ 354.301147][ T6454] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 354.320960][ T6454] RSP: 002b:00007ff7e46c5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 354.329593][ T6454] RAX: ffffffffffffffda RBX: 00007ff7e3b35f80 RCX: 00007ff7e397def9 [ 354.337742][ T6454] RDX: 0000000000000001 RSI: 0000000020000140 RDI: 0000000000000004 [ 354.345872][ T6454] RBP: 00007ff7e39f0b76 R08: 0000000000000000 R09: 0000000000000000 [ 354.354012][ T6454] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 354.362135][ T6454] R13: 0000000000000000 R14: 00007ff7e3b35f80 R15: 00007ffe9f49f838 [ 354.370284][ T6454] [ 354.373863][ T6454] Kernel Offset: disabled [ 354.378271][ T6454] Rebooting in 86400 seconds..