last executing test programs: 3m2.08496691s ago: executing program 1 (id=70): mount$overlay(0x0, 0x0, 0x0, 0x8, &(0x7f0000000340)={[{@upperdir={'upperdir', 0x3d, './file0'}}]}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000004c0)={[0x8abc, 0x4, 0x9, 0x802, 0x7ffd, 0x2000000000e, 0x120000, 0x9, 0x1, 0x101, 0x8000000000000001, 0x1, 0x0, 0x4, 0x6, 0x80000000000001], 0xeeee8000, 0x1f47a2}) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000100)=@x86={0x6, 0x2, 0x10, 0x0, 0x1000a, 0x7, 0x2, 0x9, 0x1, 0x51, 0x0, 0x8, 0x0, 0x4, 0x10, 0xff, 0xb, 0x11, 0x7, '\x00', 0x6, 0x4080000000000005}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 3m0.785005201s ago: executing program 1 (id=73): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="180000001a14"], 0x18}, 0x1, 0x0, 0x0, 0x20000010}, 0x40400c0) 3m0.006337055s ago: executing program 1 (id=75): socket(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x3, 0x7, &(0x7f00000006c0)=ANY=[@ANYBLOB, @ANYBLOB='\x00\x00\x00\x00\x00\x00', @ANYRES32], &(0x7f0000000a00)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0xe0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x10, &(0x7f0000000180), &(0x7f0000000200), 0x8, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000640)={r0, 0x0, 0x0}, 0x10) syz_mount_image$fuse(0x0, &(0x7f0000000580)='.\x02\x00', 0x2e0000, 0x0, 0x1, 0x0, 0x0) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000ddffffff850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_procs(r4, &(0x7f00000000c0)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r5, &(0x7f0000000c40), 0x12) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f00000003c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x41341) r6 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$TCXONC(r6, 0x540a, 0x3) 2m54.794269327s ago: executing program 1 (id=87): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x14, r3, 0x7}, 0x14}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) 2m53.781945669s ago: executing program 1 (id=89): syz_usb_connect(0x2, 0x2d, &(0x7f0000000a00)=ANY=[@ANYBLOB="120100000c9768405e0483020b9901e4020109021b000100000000090400fb015c291d00090509"], 0x0) syz_open_dev$audion(&(0x7f0000000000), 0x3, 0x1) r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0xf, 0x8041) ioctl$USBDEVFS_DISCONNECT_CLAIM(r0, 0x8108551b, &(0x7f0000000300)={0x0, 0x2, "4cf90fba85c830e42a3ca4b10f01bbcb15f3806c4853e7c44a6974759d9f643905a56baa4195fb396d9bfa306999f1586e5d1ca49add100a36b751a7d9fe0b182ebf2c8a0e66f72c1c08260030752f07cd4089473e52885a3c85bacf3ccfac5bb9435fe036dcfccd7254bbd8bce90e2284d29e1f17d6652270fd0abcb8729f16ff602b438bd122a9e09984e2799d0dbfef7533d1a930ea4f4b57605ace45f5815450693650ae000034aa0c5ca5e793516d156e5a5b34d6c17c40d753426a3d8e15e726d0f2622e873e0cbe63751bb62c68594d4cb0a21b92ad2e80f24a9b290a9eee6779022a0b7f5223e4e8c9f53f501ec8c439724078fdc076a51d50760566"}) msgget$private(0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 2m52.871337897s ago: executing program 0 (id=92): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) write(r0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r4, &(0x7f0000000340)=ANY=[], 0x118) write$FUSE_DIRENT(r4, &(0x7f0000000380)={0x10}, 0x10) 2m51.820760772s ago: executing program 0 (id=95): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYRESDEC, @ANYRES32, @ANYBLOB="0000000000000000b7080000080000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000000400000d00000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r0, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x2, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2169802, 0x0, 0x0, 0x0, &(0x7f00000003c0)) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000200)=ANY=[@ANYBLOB="1500000065ffff"], 0x15) r3 = dup(r2) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r4}, 0x10) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) 2m51.462467508s ago: executing program 2 (id=97): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000022020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff"], 0x15) mount$9p_fd(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) 2m51.223361605s ago: executing program 1 (id=98): preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x8) syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000980)='./bus\x00', 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="009f587a31d53b5cb6077bd11087bb6e13aac56feecaaae0b009cee43814e80646ff2772abedb27f35c706ba7c624afb75f473956061ae41834d27270063fa18a3515f9ac6cd6f15a042b1edcd60bdeb55446beed1014aa13d43d399fb4f716b8a24502a8e3e697642b172841c89aecefe0cfb3c32d7c28955601f41fb90d51951d91a35a5abeb4ffceef5cf6e190ec9eb6f91a0d06882039b54dd4485b823414e06691b0244ca11ac0baeaeec1a96861d358464329c64b77e6ff2e2d8a6bb29268be3e7c46750210270d79e1054add6c2ef3f0373", @ANYBLOB="fd5a30494a98e2fd594c7f5575b44a6b9875a6deb8a9ed63e149fdc3a5e345922596d46c4a2b3978044b864f941e1137ce034002852c9ef5606de83cf95a02ef4bacef1188250b8a73609da88d66c4224c3ea46f117012f2aab4bca171e710172b4c22e4d51e27059feb304bb3e260a2", @ANYRES32=0x0], 0x1, 0x1282, &(0x7f0000002880)="$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") prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) socket(0x10, 0x803, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7020000140000e5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) rt_sigaction(0xd, 0x0, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.dequeue\x00', 0x275a, 0x0) 2m50.718910416s ago: executing program 0 (id=99): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@nfs_export_on}]}) 2m50.553534213s ago: executing program 2 (id=100): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003780)=[{{0x0, 0x0, 0x0}}], 0x1, 0x8014) io_setup(0x8, &(0x7f0000004200)) 2m49.625102294s ago: executing program 0 (id=103): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000ff010000850000000e000000850000005000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x18) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) 2m49.624668834s ago: executing program 2 (id=104): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_wireguard(r4, 0x8933, &(0x7f00000002c0)={'wg2\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000dc0)={0x11c, r6, 0x5, 0x70bd2a, 0x25dfdbfd, {}, [@WGDEVICE_A_PEERS={0x100, 0x8, 0x0, 0x1, [{0x50, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e20, 0x1, @mcast1, 0x2}}, @WGPEER_A_FLAGS={0x8, 0x3, 0x7}]}, {0xac, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}, @WGPEER_A_ALLOWEDIPS={0x84, 0x9, 0x0, 0x1, [{0x40, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5}}]}, {0x40, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x2}}]}]}]}]}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r7}]}, 0x11c}, 0x1, 0x0, 0x0, 0x4000}, 0x40) 2m47.946899166s ago: executing program 0 (id=107): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f00000001c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) 2m46.845827077s ago: executing program 2 (id=110): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r2, 0x0, 0x0, 0x805, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) socket$packet(0x11, 0x2, 0x300) socket$packet(0x11, 0x3, 0x300) 2m45.66780699s ago: executing program 0 (id=111): r0 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000240)='wlan0\x00', 0x10) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_QOS_MAP(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x30, r2, 0x1, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_QOS_MAP={0x14, 0xc7, {[{0xfd, 0x7}, {0x34, 0x7}, {0x0, 0x2}, {0x81, 0x3}], "3829b70b8285e8c2"}}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000}, 0x8000) 2m44.849580683s ago: executing program 2 (id=113): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000e40)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd2d, 0x25dfdc00, {0x0, 0x0, 0x0, r3, {0x0, 0x3}, {}, {0xfff3, 0xffe0}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x851}, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001340)=@delchain={0x24, 0x66, 0x221, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0x0, 0x1}, {}, {0xb, 0xfff3}}}, 0x24}, 0x1, 0x0, 0x0, 0x8848}, 0x20004800) 2m42.256876619s ago: executing program 2 (id=116): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000500)={0x0, 0x0, 0x26}, 0x28) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000340)={r0, 0x58, &(0x7f0000003fc0)}, 0xe) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x5) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1600000000000000040000000500"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) ioctl$FIGETBSZ(r2, 0x2, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r5}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x0, &(0x7f00000007c0)={[{@nouid32}, {@nogrpid}, {@bh}]}, 0x1, 0x51d, &(0x7f0000001480)="$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") 2m34.775832082s ago: executing program 32 (id=98): preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x8) syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000980)='./bus\x00', 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="009f587a31d53b5cb6077bd11087bb6e13aac56feecaaae0b009cee43814e80646ff2772abedb27f35c706ba7c624afb75f473956061ae41834d27270063fa18a3515f9ac6cd6f15a042b1edcd60bdeb55446beed1014aa13d43d399fb4f716b8a24502a8e3e697642b172841c89aecefe0cfb3c32d7c28955601f41fb90d51951d91a35a5abeb4ffceef5cf6e190ec9eb6f91a0d06882039b54dd4485b823414e06691b0244ca11ac0baeaeec1a96861d358464329c64b77e6ff2e2d8a6bb29268be3e7c46750210270d79e1054add6c2ef3f0373", @ANYBLOB="fd5a30494a98e2fd594c7f5575b44a6b9875a6deb8a9ed63e149fdc3a5e345922596d46c4a2b3978044b864f941e1137ce034002852c9ef5606de83cf95a02ef4bacef1188250b8a73609da88d66c4224c3ea46f117012f2aab4bca171e710172b4c22e4d51e27059feb304bb3e260a2", @ANYRES32=0x0], 0x1, 0x1282, &(0x7f0000002880)="$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") prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) socket(0x10, 0x803, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7020000140000e5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) rt_sigaction(0xd, 0x0, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.dequeue\x00', 0x275a, 0x0) 2m29.907271178s ago: executing program 33 (id=111): r0 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000240)='wlan0\x00', 0x10) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_QOS_MAP(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x30, r2, 0x1, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_QOS_MAP={0x14, 0xc7, {[{0xfd, 0x7}, {0x34, 0x7}, {0x0, 0x2}, {0x81, 0x3}], "3829b70b8285e8c2"}}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000}, 0x8000) 2m26.167521345s ago: executing program 34 (id=116): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000500)={0x0, 0x0, 0x26}, 0x28) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000340)={r0, 0x58, &(0x7f0000003fc0)}, 0xe) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x5) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1600000000000000040000000500"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) ioctl$FIGETBSZ(r2, 0x2, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r5}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x0, &(0x7f00000007c0)={[{@nouid32}, {@nogrpid}, {@bh}]}, 0x1, 0x51d, &(0x7f0000001480)="$eJzs3c9vHFcdAPDvTLK2k7h1WnoABG1oCwFFWceb1qp6gHJCCFVC9AhSauyNZXnXa3nXpTaRcM9ckajECY78AZx74s4FwY1LOSDxwwLVSBwGzezY2di79uaHvZb385FG89688X7fizPvzbxd7wtgbN2IiJ2ImIiI9yNipjyelFu8093y8z7bfbC4t/tgMYkse++fSVGeH4uen8ldK19zKiJ+8J2IHydH47a3tlcXGo36Rpmf7TTXZ9tb27dXmgvL9eX6Wq02Pzd/5627b9YeozVTx5a+0pwoU1/+9A873/hpXq3p8khvO56lbtMrB3FylyPie6cRbAQule2ZGHVFeCJpRLwYEa8W1/9MXCp+mwDARZZlM5HN9OYBgIsuLebAkrRazgVMR5pWq905vJfiatpotTu37rc215a6c2XXo5LeX2nU75RzhdejkuT5uSL9MF87lL8bES9ExC8mrxT56mKrsTTKGx8AGGPXDo3//5nsjv8AwAV3/MdmAICLyPgPAOPH+A8A48f4DwDjpzv+X3ncH8uy7GenUR0A4Ax4/geA8WP8B4Cx8v133823bK/8/uulD7Y2V1sf3F6qt1erzc3F6mJrY7263GotF9/Z0zzp9Rqt1vrcG7H54fVvrrc7s+2t7XvN1uZa517xvd736pXirJ0zaBkAMMgLr3zy5yQfkd++UmzRs5ZDZaQ1A05bOuoKACNzadQVAEbGal8wvh4+4z/2hwBMD8AF0WeJ3kdM9fsDoSzLstOrEnDKbn7B/D+Mq575f58ChjFz0vx/sTawNwnhQjL/D+Mry5Jh1/yPYU8EAM63Y+b4r5/lfQgwOgPe/3+x3P+2fHPgR0uHz/j4NGsFAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA59v++r/Vcpnf6UjTajXiuWIBoEpyf6VRvxMRz0fEnyYrk3l+bsR1BgCeVvq3pFz/6+bM69OPFL187SA5ERE/+dV7v/xwodPZ+GPERPKvyf3jnY/L47UTg02dRgsAgOPtj9PFvudB/rPdB4v721nW5+/f7t4V5HH3didi7yD+5bhc7KeiEhFX/52U+a6kZ+7iaex8FBGf79f+JKaLOZDuLcvh+Hns5840fvpI/LRcoDkt/y0+9wzqAuPmk7z/eaff9ZfGjWLf//qfKnqop1f2f/lLLe4VfeDD+Pv936UB/d+NYWO88fvvdlNXjpZ9FPHFyxH7sfd6+p/9+MmA+K8PGf8vX3r51UFl2a8jbkb/+L2xZjvN9dn21vbtlebCcn25vlarzc/N33nr7pu12WKOenbwaPCPt289P6gsb//VAfGnTmj/V4ds/2/+9/4Pv3JM/K+/1i9+Gi8dEz8fE782ZPyFq78b+Nydx1862v5kmN//rSHjf/rX7SPLhgMAo9Pe2l5daDTqGxIS5z+R/5c9B9Xom/jWWcWaiP5FP3+te00fKsqyJ4o1qMd4FrNuwHlwcNFHxH9HXRkAAAAAAAAAAAAAAKCvs/iLpVG3EQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgIvr/wEAAP//Rb3T2A==") 7.037208311s ago: executing program 4 (id=259): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0xc2) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000240)=0x1, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x3, &(0x7f0000000440)=@framed, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kmem_cache_free\x00', r1}, 0x10) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}, 0x7}, 0x1c) io_setup(0x6, &(0x7f0000000680)=0x0) io_submit(r2, 0x1, &(0x7f0000000040)=[&(0x7f0000000000)={0x180a, 0x0, 0x3, 0x1, 0x0, r0, 0x0, 0x1802}]) 5.936344046s ago: executing program 4 (id=261): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000080)={0x3, {{0xa, 0x0, 0x0, @mcast2, 0x2}}, {{0xa, 0x4e23, 0x3, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}, 0x108) syz_emit_ethernet(0x46, &(0x7f0000000540)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaaabb86dd600101000010110000000000000000"], 0x0) 5.837745556s ago: executing program 3 (id=262): personality(0x5400004) r0 = syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000200)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x3f0, 0x4, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x7, 0x1, 0x1, 0x0, "", {{{0x9, 0x5, 0x1, 0x2, 0x20}}}}}]}}]}}, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f00000011c0)={0xffffffffffffff42, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x0, 0x1, 0x1}}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) pwritev(r1, &(0x7f00000004c0)=[{0x0}], 0x1, 0x1, 0x9) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) 5.16175604s ago: executing program 4 (id=263): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYRESDEC, @ANYRES32, @ANYBLOB="0000000000000000b7080000080000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000000400000d00000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r0, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x2, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2169802, 0x0, 0x0, 0x0, &(0x7f00000003c0)) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000200)=ANY=[@ANYBLOB="1500000065ffff097b00000800395032303030"], 0x15) r3 = dup(r2) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r4}, 0x10) write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18, 0x0, 0x0, {0x9}}, 0x18) write$FUSE_DIRENTPLUS(r3, &(0x7f0000002c00)=ANY=[@ANYBLOB="b0"], 0xb0) getresuid(&(0x7f0000000440), &(0x7f0000000480), &(0x7f00000004c0)=0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r3, @ANYBLOB=',privport,access=', @ANYRESDEC=r5]) 4.356378253s ago: executing program 4 (id=264): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r2, 0x0, 0x0, 0x805, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newlink={0x3c, 0x10, 0x439, 0x70bd2b, 0xffffffe2, {0x0, 0x0, 0xe403, 0x0, 0x243, 0x71dcb}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gre={{0x8}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_OFLAGS={0x6, 0x3, 0x84}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4090}, 0x8804) 3.694169515s ago: executing program 4 (id=265): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000a40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40040) socket$inet6_tcp(0xa, 0x1, 0x0) r2 = userfaultfd(0x80801) r3 = userfaultfd(0x801) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x280}) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000300)) ioctl$UFFDIO_COPY(r2, 0xc028aa03, &(0x7f0000000000)={&(0x7f00002b9000/0x400000)=nil, &(0x7f0000779000/0x1000)=nil, 0x400000, 0x3, 0x2}) 3.23405274s ago: executing program 3 (id=266): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x840) 2.441790115s ago: executing program 3 (id=267): bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="9feb010018000000000000007c0000007c00000002000008000000000000000e0000000000000000000000000600000d00000000000000000000000000000000000000000000000000000000000000000000000003000000fdfffffffeffffff00000000000000000000000700000000000000000000000900000000000000000000000904000000000000000000000906"], 0x0, 0x96, 0x0, 0x0, 0x0, 0x10000}, 0x28) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB], 0x0, 0x26}, 0x28) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x7, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000851000000300000018000000", @ANYRES32, @ANYBLOB="000000000000000095000000000000009500000000000000"], &(0x7f0000000280)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, 0x25, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0), 0x2}, 0x94) 2.022178511s ago: executing program 4 (id=268): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) syz_open_dev$tty1(0xc, 0x4, 0x1) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000580)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x40, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0x3, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r2], 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) keyctl$KEYCTL_MOVE(0x4, 0x0, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_GET_REG(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x14, r1, 0x701, 0x70bd2c, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x8814) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x0, &(0x7f00000000c0)}) close_range(r6, 0xffffffffffffffff, 0x0) 1.806361897s ago: executing program 3 (id=269): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000140)={0x0, 0x1, 0x0, 0x0, 0x0, 0xffff1000}) rt_sigaction(0xd, 0x0, 0x0, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x20000}}, {{0xa, 0x0, 0x40000, @dev={0xfe, 0x80, '\x00', 0x26}}}}, 0x108) setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @loopback}}}, 0x108) close(r3) r4 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r4, 0x8922, &(0x7f0000000440)={'syz_tun\x00', 0x101}) 885.806281ms ago: executing program 3 (id=270): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000080)={0x3, {{0xa, 0x0, 0x0, @mcast2, 0x2}}, {{0xa, 0x4e23, 0x3, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}, 0x108) syz_emit_ethernet(0x46, &(0x7f0000000540)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaaabb86dd600101000010110000000000000000"], 0x0) 0s ago: executing program 3 (id=271): socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x12, 0x8, 0x4, 0x2}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r1}, &(0x7f0000000040), &(0x7f0000000140)=r0}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe1d}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x401}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000a80)=ANY=[@ANYBLOB="b702000014000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d640500000000006504040001001f000404000001007d60b7030000000000006a0a00fe00000100850000000d000000b7000000000000009500000000000000c74396c8e3ebbadc20e5a7ef8c9ac1465cbf188ef10871b81ac7553358380b3a1f59916ffc9bf0bdf81524f07fb2819bf5774fedda52e39c90af27db5b56024df96b4673b4e8d5467e114604ea09b290a248a120c9c6cd87cef9000000a39c15a7ef365cc27dfeac7b9b0e9048517354b0ca4f9cf8b59ee6fa003fe1f2c4c15f20a07db4583a462d8be6602186fd68ee14a19ea2eb42122b8635a66ce6b5b92356081bc0f18a0ca83dbc089a9813c1efa26001b3f486ebfaae85c4d0b96778478ae5355e6f923b11056969f486f80a35f7f2339704fa93fa915ab8e1e0d7f31ebd19455e6827cd493907bf9d0000000000000000000000004e1fa60acabcf0553910ca2e5ea499fd5889dde9261f0848a5b8af657bfc96049308e8953431b269053627a1523551c160c813969925a892d266792352ec0204596a37ce8d6d260b32239bddbce2e79f93cb5a0ad897adb53b397d07c50f84b74f2605a565ee149016aa75ea31c0087dcd821b47c8b36efc6da4fb2ea7f1f36c85856b73ac9872babc62149699b6b8c796a79d833eb4b5ca668d430db5653a2b3c5b87e17ca1"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x2ca}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0x1b, 0x0, &(0x7f0000000180)="b90103606908068c3c270040e700009e0ff008001ffff2e1ffff81", 0x0, 0x8104, 0x6000000000000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f0000000180)=r3, 0x4) sendmsg$inet(r5, &(0x7f0000000100)={0x0, 0xfeff, 0x0}, 0x20000000) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.20' (ED25519) to the list of known hosts. [ 197.063822][ T5782] cgroup: Unknown subsys name 'net' [ 197.219348][ T5782] cgroup: Unknown subsys name 'cpuset' [ 197.238063][ T5782] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 204.442812][ T5782] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 209.972079][ T5809] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 209.990286][ T5809] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 209.999194][ T5809] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 210.016819][ T5812] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 210.026806][ T5810] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 210.035900][ T5810] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 210.040439][ T5814] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 210.045675][ T5810] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 210.055838][ T5814] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 210.067700][ T5810] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 210.068661][ T5814] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 210.082003][ T5810] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 210.090068][ T5814] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 210.092692][ T5814] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 210.116684][ T5814] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 210.127800][ T5814] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 210.142737][ T5814] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 210.155202][ T5806] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 210.155367][ T5814] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 210.172658][ T5814] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 210.187283][ T5814] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 210.197572][ T5814] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 210.214047][ T5806] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 210.226663][ T5814] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 210.250678][ T5814] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 212.128459][ T5800] chnl_net:caif_netlink_parms(): no params data found [ 212.226670][ T5816] chnl_net:caif_netlink_parms(): no params data found [ 212.251829][ T5814] Bluetooth: hci0: command tx timeout [ 212.353090][ T5814] Bluetooth: hci1: command tx timeout [ 212.353272][ T50] Bluetooth: hci3: command tx timeout [ 212.359178][ T5814] Bluetooth: hci4: command tx timeout [ 212.359301][ T5814] Bluetooth: hci2: command tx timeout [ 212.517767][ T5799] chnl_net:caif_netlink_parms(): no params data found [ 212.868152][ T5801] chnl_net:caif_netlink_parms(): no params data found [ 213.311462][ T5798] chnl_net:caif_netlink_parms(): no params data found [ 213.396939][ T5800] bridge0: port 1(bridge_slave_0) entered blocking state [ 213.405910][ T5800] bridge0: port 1(bridge_slave_0) entered disabled state [ 213.414841][ T5800] bridge_slave_0: entered allmulticast mode [ 213.425239][ T5800] bridge_slave_0: entered promiscuous mode [ 213.563898][ T5800] bridge0: port 2(bridge_slave_1) entered blocking state [ 213.581625][ T5800] bridge0: port 2(bridge_slave_1) entered disabled state [ 213.589970][ T5800] bridge_slave_1: entered allmulticast mode [ 213.600640][ T5800] bridge_slave_1: entered promiscuous mode [ 213.947319][ T5816] bridge0: port 1(bridge_slave_0) entered blocking state [ 213.956959][ T5816] bridge0: port 1(bridge_slave_0) entered disabled state [ 213.965614][ T5816] bridge_slave_0: entered allmulticast mode [ 213.975929][ T5816] bridge_slave_0: entered promiscuous mode [ 214.135474][ T5816] bridge0: port 2(bridge_slave_1) entered blocking state [ 214.143832][ T5816] bridge0: port 2(bridge_slave_1) entered disabled state [ 214.152119][ T5816] bridge_slave_1: entered allmulticast mode [ 214.160812][ T5816] bridge_slave_1: entered promiscuous mode [ 214.226732][ T5800] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 214.236594][ T5801] bridge0: port 1(bridge_slave_0) entered blocking state [ 214.244808][ T5801] bridge0: port 1(bridge_slave_0) entered disabled state [ 214.252829][ T5801] bridge_slave_0: entered allmulticast mode [ 214.263250][ T5801] bridge_slave_0: entered promiscuous mode [ 214.290381][ T5800] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 214.301070][ T5799] bridge0: port 1(bridge_slave_0) entered blocking state [ 214.309412][ T5799] bridge0: port 1(bridge_slave_0) entered disabled state [ 214.317330][ T5799] bridge_slave_0: entered allmulticast mode [ 214.318211][ T5810] Bluetooth: hci0: command tx timeout [ 214.328133][ T5799] bridge_slave_0: entered promiscuous mode [ 214.401513][ T5810] Bluetooth: hci2: command tx timeout [ 214.407744][ T5810] Bluetooth: hci3: command tx timeout [ 214.413433][ T5810] Bluetooth: hci4: command tx timeout [ 214.420531][ T5810] Bluetooth: hci1: command tx timeout [ 214.442501][ T5801] bridge0: port 2(bridge_slave_1) entered blocking state [ 214.455938][ T5801] bridge0: port 2(bridge_slave_1) entered disabled state [ 214.464390][ T5801] bridge_slave_1: entered allmulticast mode [ 214.475028][ T5801] bridge_slave_1: entered promiscuous mode [ 214.532775][ T5799] bridge0: port 2(bridge_slave_1) entered blocking state [ 214.540828][ T5799] bridge0: port 2(bridge_slave_1) entered disabled state [ 214.549175][ T5799] bridge_slave_1: entered allmulticast mode [ 214.558826][ T5799] bridge_slave_1: entered promiscuous mode [ 214.710821][ T5816] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 214.801022][ T5800] team0: Port device team_slave_0 added [ 214.894165][ T5801] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 214.915393][ T5816] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 214.941833][ T5799] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 214.963222][ T5800] team0: Port device team_slave_1 added [ 214.971503][ T5798] bridge0: port 1(bridge_slave_0) entered blocking state [ 214.980122][ T5798] bridge0: port 1(bridge_slave_0) entered disabled state [ 214.988404][ T5798] bridge_slave_0: entered allmulticast mode [ 214.999167][ T5798] bridge_slave_0: entered promiscuous mode [ 215.026489][ T5801] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 215.036949][ T5798] bridge0: port 2(bridge_slave_1) entered blocking state [ 215.045048][ T5798] bridge0: port 2(bridge_slave_1) entered disabled state [ 215.053097][ T5798] bridge_slave_1: entered allmulticast mode [ 215.063588][ T5798] bridge_slave_1: entered promiscuous mode [ 215.133180][ T5799] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 215.481283][ T5798] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 215.544767][ T5816] team0: Port device team_slave_0 added [ 215.586958][ T5800] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 215.594367][ T5800] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 215.621583][ T5800] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 215.643989][ T5799] team0: Port device team_slave_0 added [ 215.661451][ T5798] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 215.680414][ T5801] team0: Port device team_slave_0 added [ 215.698033][ T5816] team0: Port device team_slave_1 added [ 215.715107][ T5801] team0: Port device team_slave_1 added [ 215.725850][ T5800] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 215.733703][ T5800] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 215.761212][ T5800] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 215.796766][ T5799] team0: Port device team_slave_1 added [ 216.061476][ T5801] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 216.068849][ T5801] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 216.095809][ T5801] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 216.154351][ T5798] team0: Port device team_slave_0 added [ 216.165214][ T5799] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 216.172548][ T5799] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 216.199578][ T5799] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 216.214710][ T5816] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 216.222343][ T5816] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 216.249182][ T5816] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 216.268365][ T5816] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 216.275691][ T5816] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 216.302947][ T5816] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 216.318227][ T5801] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 216.326070][ T5801] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 216.352804][ T5801] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 216.372377][ T5798] team0: Port device team_slave_1 added [ 216.382695][ T5799] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 216.390149][ T5799] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 216.417318][ T5799] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 216.417353][ T50] Bluetooth: hci0: command tx timeout [ 216.478444][ T50] Bluetooth: hci1: command tx timeout [ 216.484413][ T5810] Bluetooth: hci4: command tx timeout [ 216.491278][ T5814] Bluetooth: hci3: command tx timeout [ 216.496875][ T5814] Bluetooth: hci2: command tx timeout [ 216.677819][ T5800] hsr_slave_0: entered promiscuous mode [ 216.692017][ T5800] hsr_slave_1: entered promiscuous mode [ 216.765859][ T5798] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 216.773454][ T5798] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 216.801557][ T5798] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 216.950914][ T5798] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 216.958318][ T5798] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 216.985780][ T5798] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 217.147405][ T5816] hsr_slave_0: entered promiscuous mode [ 217.157366][ T5816] hsr_slave_1: entered promiscuous mode [ 217.165746][ T5816] debugfs: 'hsr0' already exists in 'hsr' [ 217.171995][ T5816] Cannot create hsr debugfs directory [ 217.196183][ T5801] hsr_slave_0: entered promiscuous mode [ 217.205802][ T5801] hsr_slave_1: entered promiscuous mode [ 217.214836][ T5801] debugfs: 'hsr0' already exists in 'hsr' [ 217.221069][ T5801] Cannot create hsr debugfs directory [ 217.350985][ T5799] hsr_slave_0: entered promiscuous mode [ 217.362481][ T5799] hsr_slave_1: entered promiscuous mode [ 217.370710][ T5799] debugfs: 'hsr0' already exists in 'hsr' [ 217.376687][ T5799] Cannot create hsr debugfs directory [ 217.761809][ T5798] hsr_slave_0: entered promiscuous mode [ 217.771297][ T5798] hsr_slave_1: entered promiscuous mode [ 217.780826][ T5798] debugfs: 'hsr0' already exists in 'hsr' [ 217.786755][ T5798] Cannot create hsr debugfs directory [ 218.477811][ T5806] Bluetooth: hci0: command tx timeout [ 218.557821][ T5806] Bluetooth: hci1: command tx timeout [ 218.563825][ T50] Bluetooth: hci4: command tx timeout [ 218.570448][ T5810] Bluetooth: hci2: command tx timeout [ 218.576441][ T5810] Bluetooth: hci3: command tx timeout [ 219.109184][ T5800] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 219.170717][ T5800] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 219.204446][ T5800] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 219.265157][ T5800] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 219.398439][ T5816] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 219.451858][ T5816] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 219.519316][ T5816] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 219.565559][ T5816] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 219.685691][ T5799] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 219.733682][ T5799] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 219.796506][ T5799] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 219.831858][ T5799] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 219.984943][ T5801] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 220.025085][ T5801] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 220.058414][ T5801] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 220.165219][ T5801] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 220.385902][ T5798] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 220.426792][ T5798] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 220.472519][ T5798] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 220.510712][ T5798] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 221.210385][ T5816] 8021q: adding VLAN 0 to HW filter on device bond0 [ 221.236388][ T5800] 8021q: adding VLAN 0 to HW filter on device bond0 [ 221.440484][ T5800] 8021q: adding VLAN 0 to HW filter on device team0 [ 221.553191][ T5816] 8021q: adding VLAN 0 to HW filter on device team0 [ 221.577348][ T5799] 8021q: adding VLAN 0 to HW filter on device bond0 [ 221.595582][ T150] bridge0: port 1(bridge_slave_0) entered blocking state [ 221.604220][ T150] bridge0: port 1(bridge_slave_0) entered forwarding state [ 221.685949][ T150] bridge0: port 1(bridge_slave_0) entered blocking state [ 221.694066][ T150] bridge0: port 1(bridge_slave_0) entered forwarding state [ 221.778559][ T150] bridge0: port 2(bridge_slave_1) entered blocking state [ 221.786399][ T150] bridge0: port 2(bridge_slave_1) entered forwarding state [ 221.829237][ T5799] 8021q: adding VLAN 0 to HW filter on device team0 [ 221.876231][ T3645] bridge0: port 2(bridge_slave_1) entered blocking state [ 221.884537][ T3645] bridge0: port 2(bridge_slave_1) entered forwarding state [ 221.998500][ T3645] bridge0: port 1(bridge_slave_0) entered blocking state [ 222.006636][ T3645] bridge0: port 1(bridge_slave_0) entered forwarding state [ 222.079923][ T3616] bridge0: port 2(bridge_slave_1) entered blocking state [ 222.088059][ T3616] bridge0: port 2(bridge_slave_1) entered forwarding state [ 222.134753][ T5801] 8021q: adding VLAN 0 to HW filter on device bond0 [ 222.481621][ T5798] 8021q: adding VLAN 0 to HW filter on device bond0 [ 222.500590][ T5801] 8021q: adding VLAN 0 to HW filter on device team0 [ 222.669478][ T5816] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 222.708863][ T3645] bridge0: port 1(bridge_slave_0) entered blocking state [ 222.716620][ T3645] bridge0: port 1(bridge_slave_0) entered forwarding state [ 222.821744][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 222.829799][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 222.909000][ T5798] 8021q: adding VLAN 0 to HW filter on device team0 [ 223.092408][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 223.100331][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 223.123975][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 223.132055][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 223.539690][ T5801] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 223.552191][ T5801] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 225.072183][ T5800] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 225.190364][ T5816] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 225.453364][ T5799] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 225.730857][ T5798] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 225.812164][ T5816] veth0_vlan: entered promiscuous mode [ 226.015148][ T5801] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 226.042925][ T5816] veth1_vlan: entered promiscuous mode [ 226.195600][ T5799] veth0_vlan: entered promiscuous mode [ 226.336878][ T5799] veth1_vlan: entered promiscuous mode [ 226.535460][ T5798] veth0_vlan: entered promiscuous mode [ 226.558717][ T5816] veth0_macvtap: entered promiscuous mode [ 226.684310][ T5816] veth1_macvtap: entered promiscuous mode [ 226.768994][ T5798] veth1_vlan: entered promiscuous mode [ 226.786791][ T5801] veth0_vlan: entered promiscuous mode [ 226.918400][ T5799] veth0_macvtap: entered promiscuous mode [ 226.962650][ T5801] veth1_vlan: entered promiscuous mode [ 227.023735][ T5816] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 227.073877][ T5799] veth1_macvtap: entered promiscuous mode [ 227.142435][ T5816] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 227.285384][ T4103] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 227.342649][ T4103] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 227.363617][ T5798] veth0_macvtap: entered promiscuous mode [ 227.405528][ T5799] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 227.447921][ T4103] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 227.457384][ T4103] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 227.532451][ T5801] veth0_macvtap: entered promiscuous mode [ 227.574154][ T5798] veth1_macvtap: entered promiscuous mode [ 227.606370][ T5799] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 227.676671][ T5801] veth1_macvtap: entered promiscuous mode [ 227.772002][ T150] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 227.795019][ T150] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 227.854054][ T5798] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 227.894442][ T3645] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 227.938297][ T3645] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 228.012100][ T5798] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 228.114452][ T5801] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 228.191364][ T3645] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 228.264674][ T5801] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 228.273100][ T3645] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 228.310780][ T3645] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 228.354649][ T3645] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 228.382736][ T5800] veth0_vlan: entered promiscuous mode [ 228.447337][ T3726] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 228.496115][ T3726] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 228.589063][ T3726] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 228.602112][ T5800] veth1_vlan: entered promiscuous mode [ 228.648338][ T3726] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.045811][ T5800] veth0_macvtap: entered promiscuous mode [ 229.160987][ T5800] veth1_macvtap: entered promiscuous mode [ 229.411974][ T5800] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 229.535523][ T5800] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 229.700660][ T150] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.761113][ T150] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.818791][ T3726] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.868299][ T4103] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 234.770800][ T3645] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 234.779705][ T3645] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 235.071899][ T1284] ieee802154 phy0 wpan0: encryption failed: -22 [ 235.079247][ T1284] ieee802154 phy1 wpan1: encryption failed: -22 [ 235.234071][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 235.242614][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 235.316717][ T3645] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 235.326330][ T3645] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 235.462119][ T3677] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 235.474950][ T3677] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 235.894181][ T5816] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 236.035195][ T3645] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 236.045669][ T3645] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 236.253849][ T3645] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 236.263263][ T3645] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 236.558361][ T4103] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 236.567838][ T4103] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 237.068386][ T4103] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 237.078121][ T4103] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 237.248006][ T5990] loop1: detected capacity change from 0 to 512 [ 237.658368][ T5990] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 237.709722][ T3645] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 237.718842][ T3645] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 238.197984][ T1300] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 238.206973][ T1300] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 239.785960][ T5862] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 240.152131][ T5862] usb 1-1: Using ep0 maxpacket: 16 [ 240.195393][ T5862] usb 1-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 240.206489][ T5862] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 240.218708][ T5862] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 240.344910][ T5862] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 240.356039][ T5862] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 240.364856][ T5862] usb 1-1: Product: syz [ 240.369775][ T5862] usb 1-1: Manufacturer: syz [ 240.374835][ T5862] usb 1-1: SerialNumber: syz [ 241.159382][ T5862] usb 1-1: 0:2 : does not exist [ 241.226905][ T5799] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 241.610030][ T6015] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11'. [ 241.855887][ T5862] usb 1-1: USB disconnect, device number 2 [ 242.516452][ T5974] udevd[5974]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 243.612307][ T6027] netlink: 4 bytes leftover after parsing attributes in process `syz.1.15'. [ 243.622399][ T6027] bridge_slave_1: left allmulticast mode [ 243.628551][ T6027] bridge_slave_1: left promiscuous mode [ 243.635565][ T6027] bridge0: port 2(bridge_slave_1) entered disabled state [ 243.910102][ T6027] bridge_slave_0: left allmulticast mode [ 243.916735][ T6027] bridge_slave_0: left promiscuous mode [ 243.929157][ T6027] bridge0: port 1(bridge_slave_0) entered disabled state [ 245.630358][ T9] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 245.833285][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 245.878395][ T9] usb 2-1: config 0 has an invalid interface number: 200 but max is 0 [ 245.889804][ T9] usb 2-1: config 0 has no interface number 0 [ 245.897940][ T9] usb 2-1: config 0 interface 200 altsetting 2 has an endpoint descriptor with address 0xB5, changing to 0x85 [ 245.911384][ T9] usb 2-1: config 0 interface 200 altsetting 2 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 245.936362][ T9] usb 2-1: config 0 interface 200 altsetting 2 endpoint 0x85 has invalid maxpacket 1126, setting to 1024 [ 245.952779][ T9] usb 2-1: config 0 interface 200 has no altsetting 0 [ 246.175764][ T9] usb 2-1: New USB device found, idVendor=0b57, idProduct=8528, bcdDevice=6d.39 [ 246.187162][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 246.197088][ T9] usb 2-1: Product: syz [ 246.201609][ T9] usb 2-1: Manufacturer: syz [ 246.207344][ T9] usb 2-1: SerialNumber: syz [ 246.308766][ T6043] loop3: detected capacity change from 0 to 512 [ 246.315158][ T9] usb 2-1: config 0 descriptor?? [ 246.328011][ T6039] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 246.500811][ T6043] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 246.784459][ T9] input: Hanwang Art Master III 0906 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.200/input/input5 [ 246.812449][ C1] usb 2-1: hanwang_irq - nonzero urb status received: -71 [ 246.824448][ C1] usb 2-1: hanwang_irq - nonzero urb status received: -71 [ 246.834809][ C1] usb 2-1: hanwang_irq - nonzero urb status received: -71 [ 246.849001][ C1] usb 2-1: hanwang_irq - nonzero urb status received: -71 [ 246.857407][ C1] usb 2-1: hanwang_irq - nonzero urb status received: -71 [ 246.867977][ C1] usb 2-1: hanwang_irq - nonzero urb status received: -71 [ 246.876188][ C1] usb 2-1: hanwang_irq - nonzero urb status received: -71 [ 246.887242][ C1] usb 2-1: hanwang_irq - nonzero urb status received: -71 [ 246.898118][ C1] usb 2-1: hanwang_irq - nonzero urb status received: -71 [ 246.906142][ C1] usb 2-1: hanwang_irq - nonzero urb status received: -71 [ 246.914788][ C1] usb 2-1: hanwang_irq - nonzero urb status received: -71 [ 246.923512][ C1] usb 2-1: hanwang_irq - nonzero urb status received: -71 [ 246.932351][ C1] usb 2-1: hanwang_irq - nonzero urb status received: -71 [ 246.940917][ C1] usb 2-1: hanwang_irq - nonzero urb status received: -71 [ 246.949873][ C1] usb 2-1: hanwang_irq - nonzero urb status received: -71 [ 246.960797][ C1] usb 2-1: hanwang_irq - nonzero urb status received: -71 [ 246.969660][ C1] usb 2-1: hanwang_irq - nonzero urb status received: -71 [ 246.981748][ C1] usb 2-1: hanwang_irq - nonzero urb status received: -71 [ 246.994481][ C1] usb 2-1: hanwang_irq - nonzero urb status received: -71 [ 247.007744][ C1] usb 2-1: hanwang_irq - nonzero urb status received: -71 [ 247.017810][ C1] usb 2-1: hanwang_irq - nonzero urb status received: -71 [ 247.026235][ C1] usb 2-1: hanwang_irq - nonzero urb status received: -71 [ 247.031654][ T9] usb 2-1: USB disconnect, device number 2 [ 247.034411][ C1] usb 2-1: hanwang_irq - usb_submit_urb failed with result -19 [ 250.260933][ T5801] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 250.738692][ T5862] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 250.985645][ T5862] usb 3-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 250.997332][ T5862] usb 3-1: config 0 interface 0 has no altsetting 0 [ 251.082905][ T5862] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 251.093721][ T5862] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 251.102813][ T5862] usb 3-1: Product: syz [ 251.107838][ T5862] usb 3-1: Manufacturer: syz [ 251.112842][ T5862] usb 3-1: SerialNumber: syz [ 251.281420][ T5862] usb 3-1: config 0 descriptor?? [ 251.336154][ T5862] usb 3-1: selecting invalid altsetting 0 [ 251.748945][ T30] audit: type=1326 audit(1763159237.485:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6058 comm="syz.2.38" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf703d539 code=0x0 [ 254.054250][ T5862] usb 3-1: USB disconnect, device number 2 [ 255.283743][ T6081] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 255.739517][ T6081] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 258.128795][ T5862] usb 3-1: new full-speed USB device number 3 using dummy_hcd [ 258.252509][ T6103] bridge0: port 1(bridge_slave_0) entered learning state [ 258.339043][ T5862] usb 3-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 258.349944][ T5862] usb 3-1: config 0 interface 0 has no altsetting 0 [ 258.408483][ T5862] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 258.420030][ T5862] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 258.429618][ T5862] usb 3-1: Product: syz [ 258.434572][ T5862] usb 3-1: Manufacturer: syz [ 258.439670][ T5862] usb 3-1: SerialNumber: syz [ 258.511534][ T5862] usb 3-1: config 0 descriptor?? [ 258.609656][ T5862] usb 3-1: selecting invalid altsetting 0 [ 258.978814][ T30] audit: type=1326 audit(1763159244.725:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6098 comm="syz.2.46" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf703d539 code=0x0 [ 260.081646][ T5861] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 260.271504][ T5861] usb 4-1: Using ep0 maxpacket: 16 [ 260.318681][ T5861] usb 4-1: config 0 has an invalid interface number: 105 but max is 0 [ 260.328039][ T5861] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 260.342530][ T5861] usb 4-1: config 0 has no interface number 0 [ 260.396012][ T5861] usb 4-1: New USB device found, idVendor=046c, idProduct=14e8, bcdDevice= b.28 [ 260.406449][ T5861] usb 4-1: New USB device strings: Mfr=5, Product=2, SerialNumber=3 [ 260.415699][ T5861] usb 4-1: Product: syz [ 260.420455][ T5861] usb 4-1: Manufacturer: syz [ 260.425912][ T5861] usb 4-1: SerialNumber: syz [ 260.489240][ T5861] usb 4-1: config 0 descriptor?? [ 260.604500][ T5861] uvcvideo 4-1:0.105: Found UVC 0.00 device syz (046c:14e8) [ 260.612957][ T5861] uvcvideo 4-1:0.105: No valid video chain found. [ 260.742736][ T5861] usb 4-1: USB disconnect, device number 2 [ 261.320852][ T5876] usb 3-1: USB disconnect, device number 3 [ 264.691565][ T6143] loop3: detected capacity change from 0 to 8192 [ 264.734357][ T6143] ======================================================= [ 264.734357][ T6143] WARNING: The mand mount option has been deprecated and [ 264.734357][ T6143] and is ignored by this kernel. Remove the mand [ 264.734357][ T6143] option from the mount to silence this warning. [ 264.734357][ T6143] ======================================================= [ 264.907103][ T6153] netlink: 12 bytes leftover after parsing attributes in process `syz.2.69'. [ 265.642746][ T6158] FAT-fs (loop3): error, corrupted directory (invalid entries) [ 265.651909][ T6158] FAT-fs (loop3): Filesystem has been set read-only [ 265.668661][ T6143] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 2075) [ 265.755514][ T6157] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 266.264064][ T5801] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 2075) [ 268.521339][ T5876] hid-generic 0003:0004:0000.0001: unknown main item tag 0x0 [ 268.530261][ T5876] hid-generic 0003:0004:0000.0001: unknown main item tag 0x0 [ 268.539148][ T5876] hid-generic 0003:0004:0000.0001: unknown main item tag 0x0 [ 268.547862][ T5876] hid-generic 0003:0004:0000.0001: unknown main item tag 0x0 [ 268.558173][ T5876] hid-generic 0003:0004:0000.0001: unknown main item tag 0x0 [ 268.566375][ T5876] hid-generic 0003:0004:0000.0001: unknown main item tag 0x0 [ 268.574641][ T5876] hid-generic 0003:0004:0000.0001: unknown main item tag 0x0 [ 268.583103][ T5876] hid-generic 0003:0004:0000.0001: unknown main item tag 0x0 [ 268.591839][ T5876] hid-generic 0003:0004:0000.0001: unknown main item tag 0x0 [ 268.600003][ T5876] hid-generic 0003:0004:0000.0001: unknown main item tag 0x0 [ 268.856098][ T5876] hid-generic 0003:0004:0000.0001: hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 269.967684][ T6181] fido_id[6181]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 272.211245][ T6197] bridge0: port 3(bond0) entered blocking state [ 272.219342][ T6197] bridge0: port 3(bond0) entered disabled state [ 272.226701][ T6197] bond0: entered allmulticast mode [ 272.233461][ T6197] bond_slave_0: entered allmulticast mode [ 272.254759][ T6197] bond_slave_1: entered allmulticast mode [ 272.269183][ T6197] bond0: entered promiscuous mode [ 272.275655][ T6197] bond_slave_0: entered promiscuous mode [ 272.284337][ T6197] bond_slave_1: entered promiscuous mode [ 272.295272][ T6197] bridge0: port 3(bond0) entered blocking state [ 272.303637][ T6197] bridge0: port 3(bond0) entered forwarding state [ 273.480562][ T5861] usb 2-1: new full-speed USB device number 3 using dummy_hcd [ 273.706752][ T5861] usb 2-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 273.718820][ T5861] usb 2-1: config 0 interface 0 has no altsetting 0 [ 273.818479][ T5861] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 273.830713][ T5861] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 273.843168][ T5861] usb 2-1: Product: syz [ 273.848571][ T5861] usb 2-1: Manufacturer: syz [ 273.854057][ T5861] usb 2-1: SerialNumber: syz [ 273.903936][ T5861] usb 2-1: config 0 descriptor?? [ 273.942105][ T5861] usb 2-1: selecting invalid altsetting 0 [ 274.319860][ T5861] usb 2-1: USB disconnect, device number 3 [ 274.971616][ T5978] udevd[5978]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 276.392527][ T6222] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 276.407092][ T6222] overlayfs: missing 'lowerdir' [ 276.609409][ T6228] netlink: 9 bytes leftover after parsing attributes in process `syz.3.101'. [ 276.622154][ T6228] z00ªX¹¦: renamed from gretap0 (while UP) [ 276.709591][ T6228] z00ªX¹¦: entered allmulticast mode [ 276.931739][ T6220] loop1: detected capacity change from 0 to 8192 [ 280.668233][ T5876] usb 4-1: new full-speed USB device number 3 using dummy_hcd [ 281.048551][ T5876] usb 4-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 281.060199][ T5876] usb 4-1: config 0 interface 0 has no altsetting 0 [ 281.256960][ T5876] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 281.268584][ T5876] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 281.278211][ T5876] usb 4-1: Product: syz [ 281.282889][ T5876] usb 4-1: Manufacturer: syz [ 281.288135][ T5876] usb 4-1: SerialNumber: syz [ 281.626856][ T5876] usb 4-1: config 0 descriptor?? [ 281.734524][ T5876] usb 4-1: selecting invalid altsetting 0 [ 282.238437][ T5876] usb 4-1: USB disconnect, device number 3 [ 282.794719][ T6063] udevd[6063]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 286.296021][ T6270] loop2: detected capacity change from 0 to 512 [ 286.630445][ T6270] EXT4-fs: Ignoring removed bh option [ 287.681908][ T6270] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 288.648705][ T6270] ext4 filesystem being mounted at /27/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 294.903753][ T6301] qnx4: no qnx4 filesystem (no root dir). [ 296.366457][ T5814] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 296.426469][ T5814] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 296.439843][ T5814] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 296.455666][ T5814] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 296.468936][ T5814] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 296.506649][ T1284] ieee802154 phy0 wpan0: encryption failed: -22 [ 296.514796][ T1284] ieee802154 phy1 wpan1: encryption failed: -22 [ 298.638263][ T5814] Bluetooth: hci5: command tx timeout [ 299.580229][ T5806] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 299.593166][ T5806] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 299.605159][ T5806] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 299.630838][ T5806] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 299.652234][ T5806] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 299.688355][ T59] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 300.138598][ T59] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 300.418804][ T59] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 300.738760][ T5806] Bluetooth: hci5: command tx timeout [ 300.804395][ T59] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 300.959019][ T6304] chnl_net:caif_netlink_parms(): no params data found [ 301.850664][ T5806] Bluetooth: hci1: command tx timeout [ 302.545895][ T59] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 302.559685][ T5814] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 302.592992][ T5814] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 302.605155][ T5814] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 302.617248][ T59] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 302.646091][ T5814] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 302.689670][ T5814] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 302.699476][ T59] bond0 (unregistering): Released all slaves [ 302.799053][ T5814] Bluetooth: hci5: command tx timeout [ 303.918341][ T5806] Bluetooth: hci1: command tx timeout [ 304.335714][ T59] hsr_slave_0: left promiscuous mode [ 304.378032][ T59] hsr_slave_1: left promiscuous mode [ 304.387663][ T59] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 304.407362][ T59] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 304.494698][ T59] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 304.514204][ T59] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 304.719038][ T59] veth1_macvtap: left promiscuous mode [ 304.725374][ T59] veth0_macvtap: left promiscuous mode [ 304.732761][ T59] veth1_vlan: left promiscuous mode [ 304.739499][ T59] veth0_vlan: left promiscuous mode [ 304.899017][ T5806] Bluetooth: hci6: command tx timeout [ 304.905346][ T5810] Bluetooth: hci5: command tx timeout [ 305.998596][ T5810] Bluetooth: hci1: command tx timeout [ 306.473074][ T59] team0 (unregistering): Port device team_slave_1 removed [ 306.744083][ T59] team0 (unregistering): Port device team_slave_0 removed [ 306.957781][ T5810] Bluetooth: hci6: command tx timeout [ 308.207738][ T5810] Bluetooth: hci1: command tx timeout [ 308.818760][ T6304] bridge0: port 1(bridge_slave_0) entered blocking state [ 308.828810][ T6304] bridge0: port 1(bridge_slave_0) entered disabled state [ 308.839490][ T6304] bridge_slave_0: entered allmulticast mode [ 308.851581][ T6304] bridge_slave_0: entered promiscuous mode [ 309.117892][ T5810] Bluetooth: hci6: command tx timeout [ 309.174439][ T6304] bridge0: port 2(bridge_slave_1) entered blocking state [ 309.183359][ T6304] bridge0: port 2(bridge_slave_1) entered disabled state [ 309.193749][ T6304] bridge_slave_1: entered allmulticast mode [ 309.216298][ T6304] bridge_slave_1: entered promiscuous mode [ 310.712710][ T6304] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 311.070619][ T6304] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 311.308577][ T5810] Bluetooth: hci6: command tx timeout [ 312.123529][ T6346] Set syz1 is full, maxelem 65536 reached [ 312.233306][ T6304] team0: Port device team_slave_0 added [ 312.421241][ T6304] team0: Port device team_slave_1 added [ 312.597157][ T6316] chnl_net:caif_netlink_parms(): no params data found [ 312.874170][ T59] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 313.320107][ T59] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 313.437287][ T6304] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 313.445177][ T6304] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 313.474889][ T6304] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 313.564392][ T59] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 313.942412][ T6304] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 313.950471][ T6304] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 313.978556][ T6304] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 314.085457][ T59] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 314.188956][ T6329] chnl_net:caif_netlink_parms(): no params data found [ 314.698484][ T6304] hsr_slave_0: entered promiscuous mode [ 314.710961][ T6304] hsr_slave_1: entered promiscuous mode [ 314.727302][ T6304] debugfs: 'hsr0' already exists in 'hsr' [ 314.734083][ T6304] Cannot create hsr debugfs directory [ 314.787089][ T59] bridge_slave_1: left allmulticast mode [ 314.794876][ T59] bridge_slave_1: left promiscuous mode [ 314.803676][ T59] bridge0: port 2(bridge_slave_1) entered disabled state [ 314.936935][ T59] bridge_slave_0: left allmulticast mode [ 314.955517][ T59] bridge_slave_0: left promiscuous mode [ 314.963199][ T59] bridge0: port 1(bridge_slave_0) entered disabled state [ 316.110478][ T59] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 316.158711][ T59] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 316.205014][ T59] bond0 (unregistering): Released all slaves [ 317.689726][ T59] hsr_slave_0: left promiscuous mode [ 317.736876][ T59] hsr_slave_1: left promiscuous mode [ 317.746804][ T59] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 317.755628][ T59] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 317.847622][ T59] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 317.856858][ T59] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 317.984270][ T59] veth1_macvtap: left promiscuous mode [ 317.991446][ T59] veth0_macvtap: left promiscuous mode [ 317.998019][ T59] veth1_vlan: left promiscuous mode [ 318.003980][ T59] veth0_vlan: left promiscuous mode [ 318.779918][ T6402] 9pnet_fd: Insufficient options for proto=fd [ 319.263304][ T59] team0 (unregistering): Port device team_slave_1 removed [ 319.391384][ T59] team0 (unregistering): Port device team_slave_0 removed [ 320.182525][ T6316] bridge0: port 1(bridge_slave_0) entered blocking state [ 320.191757][ T6316] bridge0: port 1(bridge_slave_0) entered disabled state [ 320.203031][ T6316] bridge_slave_0: entered allmulticast mode [ 320.216342][ T6316] bridge_slave_0: entered promiscuous mode [ 320.901296][ T6316] bridge0: port 2(bridge_slave_1) entered blocking state [ 320.912589][ T6316] bridge0: port 2(bridge_slave_1) entered disabled state [ 320.923436][ T6316] bridge_slave_1: entered allmulticast mode [ 320.937891][ T6316] bridge_slave_1: entered promiscuous mode [ 321.365600][ T6329] bridge0: port 1(bridge_slave_0) entered blocking state [ 321.374406][ T6329] bridge0: port 1(bridge_slave_0) entered disabled state [ 321.383135][ T6329] bridge_slave_0: entered allmulticast mode [ 321.394298][ T6329] bridge_slave_0: entered promiscuous mode [ 322.184515][ T6411] TCP: TCP_TX_DELAY enabled [ 322.962101][ T6316] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 323.025733][ T6329] bridge0: port 2(bridge_slave_1) entered blocking state [ 323.034969][ T6329] bridge0: port 2(bridge_slave_1) entered disabled state [ 323.045235][ T6329] bridge_slave_1: entered allmulticast mode [ 323.056891][ T6329] bridge_slave_1: entered promiscuous mode [ 323.700195][ T6316] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 326.093007][ T6329] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 326.193138][ T6329] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 326.655344][ T6329] team0: Port device team_slave_0 added [ 326.767097][ T6304] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 326.890394][ T6329] team0: Port device team_slave_1 added [ 326.960895][ T6316] team0: Port device team_slave_0 added [ 326.975513][ T6304] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 327.081272][ T6316] team0: Port device team_slave_1 added [ 327.330702][ T6304] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 327.709743][ T6407] Set syz1 is full, maxelem 65536 reached [ 327.731294][ T6329] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 327.739875][ T6329] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 327.769846][ T6329] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 327.795453][ T6329] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 327.804129][ T6329] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 327.840481][ T6329] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 327.881047][ T6304] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 328.456742][ T6316] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 328.471799][ T6316] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 328.504172][ T6316] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 328.980674][ T6316] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 328.988673][ T6316] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 329.018791][ T6316] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 329.094867][ T6329] hsr_slave_0: entered promiscuous mode [ 329.109725][ T6329] hsr_slave_1: entered promiscuous mode [ 329.119771][ T6329] debugfs: 'hsr0' already exists in 'hsr' [ 329.126107][ T6329] Cannot create hsr debugfs directory [ 330.165526][ T6316] hsr_slave_0: entered promiscuous mode [ 330.178221][ T6316] hsr_slave_1: entered promiscuous mode [ 330.189480][ T6316] debugfs: 'hsr0' already exists in 'hsr' [ 330.196512][ T6316] Cannot create hsr debugfs directory [ 330.715097][ T6445] can0: slcan on ttyS3. [ 331.097859][ T6445] can0 (unregistered): slcan off ttyS3. [ 331.370727][ T6304] 8021q: adding VLAN 0 to HW filter on device bond0 [ 331.619986][ T6304] 8021q: adding VLAN 0 to HW filter on device team0 [ 331.832341][ T3459] bridge0: port 1(bridge_slave_0) entered blocking state [ 331.848730][ T3459] bridge0: port 1(bridge_slave_0) entered forwarding state [ 332.236649][ T3459] bridge0: port 2(bridge_slave_1) entered blocking state [ 332.245970][ T3459] bridge0: port 2(bridge_slave_1) entered forwarding state [ 332.695645][ T6304] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 332.784179][ T6329] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 332.944288][ T6329] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 333.110517][ T6329] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 333.320803][ T6329] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 333.596040][ T6316] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 333.822099][ T6316] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 333.959888][ T6316] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 334.160728][ T6316] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 334.479850][ T5814] Bluetooth: hci3: command 0x0406 tx timeout [ 334.480446][ T5810] Bluetooth: hci0: command 0x0406 tx timeout [ 334.488614][ T5814] Bluetooth: hci2: command 0x0406 tx timeout [ 335.739876][ T6304] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 335.799799][ T6329] 8021q: adding VLAN 0 to HW filter on device bond0 [ 336.221762][ T6329] 8021q: adding VLAN 0 to HW filter on device team0 [ 336.436125][ T4103] bridge0: port 1(bridge_slave_0) entered blocking state [ 336.448110][ T4103] bridge0: port 1(bridge_slave_0) entered forwarding state [ 336.549705][ T6316] 8021q: adding VLAN 0 to HW filter on device bond0 [ 336.720651][ T4103] bridge0: port 2(bridge_slave_1) entered blocking state [ 336.729927][ T4103] bridge0: port 2(bridge_slave_1) entered forwarding state [ 337.175005][ T6316] 8021q: adding VLAN 0 to HW filter on device team0 [ 337.256999][ T5858] usb 4-1: new full-speed USB device number 4 using dummy_hcd [ 337.396526][ T150] bridge0: port 1(bridge_slave_0) entered blocking state [ 337.404820][ T150] bridge0: port 1(bridge_slave_0) entered forwarding state [ 337.560422][ T5858] usb 4-1: config 27 interface 0 altsetting 0 has an endpoint descriptor with address 0x78, changing to 0x8 [ 337.579865][ T5858] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8 has an invalid bInterval 0, changing to 10 [ 337.595204][ T5858] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8 has invalid maxpacket 127, setting to 64 [ 337.611996][ T5858] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 5853, setting to 64 [ 337.629133][ T5858] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 337.631731][ T150] bridge0: port 2(bridge_slave_1) entered blocking state [ 337.642463][ T5858] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 337.653408][ T150] bridge0: port 2(bridge_slave_1) entered forwarding state [ 337.952134][ T6476] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 338.106393][ T6476] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 338.196901][ T5858] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 338.214003][ T5858] usb 4-1: invalid MIDI in EP 0 [ 338.255000][ T6316] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 338.268855][ T6316] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 339.085106][ T5858] snd-usb-audio 4-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 339.308064][ T5858] usb 4-1: USB disconnect, device number 4 [ 339.342872][ T6489] udevd[6489]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 341.251846][ T6329] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 341.625822][ T6304] veth0_vlan: entered promiscuous mode [ 341.806736][ T6304] veth1_vlan: entered promiscuous mode [ 342.126508][ T6316] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 342.350374][ T6304] veth0_macvtap: entered promiscuous mode [ 342.505961][ T6304] veth1_macvtap: entered promiscuous mode [ 342.823332][ T6304] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 343.014733][ T6304] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 343.236129][ T4103] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 343.379216][ T4103] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 343.458902][ T150] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 343.569040][ T150] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 346.082147][ T6329] veth0_vlan: entered promiscuous mode [ 346.290445][ T6329] veth1_vlan: entered promiscuous mode [ 346.761701][ T6316] veth0_vlan: entered promiscuous mode [ 346.904876][ T6329] veth0_macvtap: entered promiscuous mode [ 347.006780][ T6316] veth1_vlan: entered promiscuous mode [ 347.086458][ T6329] veth1_macvtap: entered promiscuous mode [ 347.386949][ T6329] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 347.546384][ T6329] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 347.726562][ T6316] veth0_macvtap: entered promiscuous mode [ 347.866470][ T6316] veth1_macvtap: entered promiscuous mode [ 347.915774][ T3645] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 347.978147][ T3645] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 348.088095][ T4152] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 348.180251][ T3616] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 348.282459][ T6316] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 348.490333][ T6316] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 348.713062][ T4310] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 348.778442][ T4310] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 348.823505][ T4310] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 348.985289][ T3616] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 355.240861][ T5810] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 355.258584][ T5810] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 355.309564][ T5810] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 355.354985][ T5810] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 355.397478][ T5810] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 357.525895][ T5810] Bluetooth: hci4: command tx timeout [ 358.031228][ T1284] ieee802154 phy0 wpan0: encryption failed: -22 [ 358.041250][ T1284] ieee802154 phy1 wpan1: encryption failed: -22 [ 359.554977][ T6617] chnl_net:caif_netlink_parms(): no params data found [ 359.600818][ T5810] Bluetooth: hci4: command tx timeout [ 360.439833][ T5814] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 360.453478][ T5814] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 360.466946][ T5814] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 360.512632][ T5814] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 360.531490][ T5814] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 361.443917][ T150] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 361.690159][ T5814] Bluetooth: hci4: command tx timeout [ 361.849145][ T6658] loop4: detected capacity change from 0 to 256 [ 361.864288][ T150] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 362.267183][ T150] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 362.705858][ T150] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 362.742768][ T5814] Bluetooth: hci7: command tx timeout [ 363.198658][ T6658] FAT-fs (loop4): Directory bread(block 64) failed [ 363.210259][ T6658] FAT-fs (loop4): Directory bread(block 65) failed [ 363.220688][ T6658] FAT-fs (loop4): Directory bread(block 66) failed [ 363.235546][ T6658] FAT-fs (loop4): Directory bread(block 67) failed [ 363.245531][ T6658] FAT-fs (loop4): Directory bread(block 68) failed [ 363.255313][ T6658] FAT-fs (loop4): Directory bread(block 69) failed [ 363.265430][ T6658] FAT-fs (loop4): Directory bread(block 70) failed [ 363.274817][ T6658] FAT-fs (loop4): Directory bread(block 71) failed [ 363.285083][ T6658] FAT-fs (loop4): Directory bread(block 72) failed [ 363.295611][ T6658] FAT-fs (loop4): Directory bread(block 73) failed [ 363.831435][ T5814] Bluetooth: hci4: command tx timeout [ 364.084493][ T6617] bridge0: port 1(bridge_slave_0) entered blocking state [ 364.106428][ T6617] bridge0: port 1(bridge_slave_0) entered disabled state [ 364.119839][ T6617] bridge_slave_0: entered allmulticast mode [ 364.136376][ T6617] bridge_slave_0: entered promiscuous mode [ 364.364234][ T5810] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 364.382113][ T5810] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 364.395431][ T5810] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 364.425483][ T5810] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 364.626302][ T6617] bridge0: port 2(bridge_slave_1) entered blocking state [ 364.641142][ T6617] bridge0: port 2(bridge_slave_1) entered disabled state [ 364.655748][ T6617] bridge_slave_1: entered allmulticast mode [ 364.669599][ T6617] bridge_slave_1: entered promiscuous mode [ 364.762189][ T5810] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 364.807871][ T5810] Bluetooth: hci7: command tx timeout [ 365.670188][ T150] bridge_slave_1: left allmulticast mode [ 365.678736][ T150] bridge_slave_1: left promiscuous mode [ 365.688087][ T150] bridge0: port 2(bridge_slave_1) entered disabled state [ 365.785047][ T150] bridge_slave_0: left allmulticast mode [ 365.793234][ T150] bridge_slave_0: left promiscuous mode [ 365.801970][ T150] bridge0: port 1(bridge_slave_0) entered disabled state [ 366.690130][ T150] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 366.790941][ T150] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 366.840733][ T150] bond0 (unregistering): Released all slaves [ 366.917962][ T5810] Bluetooth: hci7: command tx timeout [ 367.038090][ T5810] Bluetooth: hci5: command tx timeout [ 367.317613][ T6617] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 367.764635][ T150] hsr_slave_0: left promiscuous mode [ 367.879382][ T150] hsr_slave_1: left promiscuous mode [ 367.900152][ T150] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 367.911208][ T150] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 368.019242][ T150] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 368.029836][ T150] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 368.213456][ T150] veth1_macvtap: left promiscuous mode [ 368.226269][ T150] veth0_macvtap: left promiscuous mode [ 368.234999][ T150] veth1_vlan: left promiscuous mode [ 368.244281][ T150] veth0_vlan: left promiscuous mode [ 368.983375][ T5810] Bluetooth: hci7: command tx timeout [ 369.138222][ T5810] Bluetooth: hci5: command tx timeout [ 369.848043][ T150] team0 (unregistering): Port device team_slave_1 removed [ 369.994855][ T150] team0 (unregistering): Port device team_slave_0 removed [ 370.672313][ T6617] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 370.799666][ T6648] chnl_net:caif_netlink_parms(): no params data found [ 371.242028][ T5810] Bluetooth: hci5: command tx timeout [ 371.672997][ T6617] team0: Port device team_slave_0 added [ 371.983079][ T6617] team0: Port device team_slave_1 added [ 372.245328][ T150] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 372.675061][ T150] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 372.965669][ T6617] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 372.978398][ T6617] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 373.011015][ T6617] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 373.166669][ T150] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 373.308626][ T5810] Bluetooth: hci5: command tx timeout [ 373.404434][ T6617] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 373.413029][ T6617] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 373.451613][ T6617] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 373.665461][ T150] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 374.719813][ T6617] hsr_slave_0: entered promiscuous mode [ 374.734309][ T6617] hsr_slave_1: entered promiscuous mode [ 374.747696][ T6617] debugfs: 'hsr0' already exists in 'hsr' [ 374.755231][ T6617] Cannot create hsr debugfs directory [ 374.908683][ T6648] bridge0: port 1(bridge_slave_0) entered blocking state [ 374.918824][ T6648] bridge0: port 1(bridge_slave_0) entered disabled state [ 374.929379][ T6648] bridge_slave_0: entered allmulticast mode [ 374.944643][ T6648] bridge_slave_0: entered promiscuous mode [ 375.036165][ T6667] chnl_net:caif_netlink_parms(): no params data found [ 375.151011][ T6648] bridge0: port 2(bridge_slave_1) entered blocking state [ 375.162072][ T6648] bridge0: port 2(bridge_slave_1) entered disabled state [ 375.173685][ T6648] bridge_slave_1: entered allmulticast mode [ 375.187131][ T6648] bridge_slave_1: entered promiscuous mode [ 376.048987][ T6648] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 376.086443][ T6648] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 376.563528][ T150] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 376.985178][ T150] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 377.094779][ T6648] team0: Port device team_slave_0 added [ 377.164562][ T150] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 377.296769][ T6648] team0: Port device team_slave_1 added [ 377.826091][ T150] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 377.941583][ T6648] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 377.951473][ T6648] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 377.982128][ T6648] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 378.281174][ T6648] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 378.289213][ T6648] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 378.319675][ T6648] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 378.751090][ T6667] bridge0: port 1(bridge_slave_0) entered blocking state [ 378.760970][ T6667] bridge0: port 1(bridge_slave_0) entered disabled state [ 378.772248][ T6667] bridge_slave_0: entered allmulticast mode [ 378.784618][ T6667] bridge_slave_0: entered promiscuous mode [ 379.121191][ T6667] bridge0: port 2(bridge_slave_1) entered blocking state [ 379.130917][ T6667] bridge0: port 2(bridge_slave_1) entered disabled state [ 379.142121][ T6667] bridge_slave_1: entered allmulticast mode [ 379.164231][ T6667] bridge_slave_1: entered promiscuous mode [ 379.546633][ T150] bridge_slave_1: left allmulticast mode [ 379.562469][ T150] bridge_slave_1: left promiscuous mode [ 379.573846][ T150] bridge0: port 2(bridge_slave_1) entered disabled state [ 379.604841][ T150] bridge_slave_0: left allmulticast mode [ 379.614455][ T150] bridge_slave_0: left promiscuous mode [ 379.622598][ T150] bridge0: port 1(bridge_slave_0) entered disabled state [ 379.652753][ T150] bridge_slave_1: left allmulticast mode [ 379.673101][ T150] bridge_slave_1: left promiscuous mode [ 379.685489][ T150] bridge0: port 2(bridge_slave_1) entered disabled state [ 379.716587][ T150] bridge_slave_0: left allmulticast mode [ 379.724872][ T150] bridge_slave_0: left promiscuous mode [ 379.733422][ T150] bridge0: port 1(bridge_slave_0) entered disabled state [ 380.775034][ T150] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 380.856751][ T150] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 380.931518][ T150] bond0 (unregistering): Released all slaves [ 381.461341][ T150] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 381.581269][ T150] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 381.683730][ T150] bond0 (unregistering): Released all slaves [ 381.907728][ T6648] hsr_slave_0: entered promiscuous mode [ 381.922945][ T6648] hsr_slave_1: entered promiscuous mode [ 381.934771][ T6648] debugfs: 'hsr0' already exists in 'hsr' [ 381.943038][ T6648] Cannot create hsr debugfs directory [ 382.350794][ T6667] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 382.500446][ T6667] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 382.657133][ T150] hsr_slave_0: left promiscuous mode [ 382.689748][ T150] hsr_slave_1: left promiscuous mode [ 382.701359][ T150] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 382.709375][ T150] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 382.790977][ T150] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 382.802079][ T150] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 382.973343][ T150] hsr_slave_0: left promiscuous mode [ 383.018008][ T150] hsr_slave_1: left promiscuous mode [ 383.028283][ T150] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 383.036349][ T150] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 383.143927][ T150] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 383.155767][ T150] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 383.408741][ T150] veth1_macvtap: left promiscuous mode [ 383.415772][ T150] veth0_macvtap: left promiscuous mode [ 383.422671][ T150] veth1_vlan: left promiscuous mode [ 383.429558][ T150] veth0_vlan: left promiscuous mode [ 383.512681][ T150] veth1_macvtap: left promiscuous mode [ 383.520932][ T150] veth0_macvtap: left promiscuous mode [ 383.527908][ T150] veth1_vlan: left promiscuous mode [ 383.534262][ T150] veth0_vlan: left promiscuous mode [ 385.284960][ T150] team0 (unregistering): Port device team_slave_1 removed [ 385.388420][ T150] team0 (unregistering): Port device team_slave_0 removed [ 386.441586][ T150] team0 (unregistering): Port device team_slave_1 removed [ 386.580501][ T150] team0 (unregistering): Port device team_slave_0 removed [ 387.746475][ T6667] team0: Port device team_slave_0 added [ 387.927821][ T6667] team0: Port device team_slave_1 added [ 388.273543][ T6759] overlayfs: missing 'lowerdir' [ 388.484144][ T6667] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 388.492157][ T6667] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 388.523420][ T6667] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 388.853785][ T6667] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 388.862827][ T6667] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 388.903110][ T6667] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 388.961394][ T6617] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 389.348612][ T6617] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 389.500187][ T6617] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 389.833509][ T6617] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 389.989050][ T6767] netlink: 4 bytes leftover after parsing attributes in process `syz.4.212'. [ 390.188106][ T6667] hsr_slave_0: entered promiscuous mode [ 390.202205][ T6667] hsr_slave_1: entered promiscuous mode [ 390.224403][ T6667] debugfs: 'hsr0' already exists in 'hsr' [ 390.232328][ T6667] Cannot create hsr debugfs directory [ 391.363141][ T6269] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 392.197287][ T6648] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 392.363466][ T6648] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 392.549774][ T6648] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 392.716721][ T6648] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 393.188989][ T6617] 8021q: adding VLAN 0 to HW filter on device bond0 [ 393.661519][ T6617] 8021q: adding VLAN 0 to HW filter on device team0 [ 393.872931][ T3645] bridge0: port 1(bridge_slave_0) entered blocking state [ 393.882238][ T3645] bridge0: port 1(bridge_slave_0) entered forwarding state [ 394.143961][ T3645] bridge0: port 2(bridge_slave_1) entered blocking state [ 394.155599][ T3645] bridge0: port 2(bridge_slave_1) entered forwarding state [ 394.460642][ T6667] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 394.676456][ T6667] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 394.810141][ T6667] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 394.936424][ T6667] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 395.523812][ T6648] 8021q: adding VLAN 0 to HW filter on device bond0 [ 395.759885][ T6648] 8021q: adding VLAN 0 to HW filter on device team0 [ 395.855723][ T4152] bridge0: port 1(bridge_slave_0) entered blocking state [ 395.866675][ T4152] bridge0: port 1(bridge_slave_0) entered forwarding state [ 396.123579][ T4152] bridge0: port 2(bridge_slave_1) entered blocking state [ 396.131869][ T4152] bridge0: port 2(bridge_slave_1) entered forwarding state [ 397.575479][ T6667] 8021q: adding VLAN 0 to HW filter on device bond0 [ 398.159696][ T4310] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 398.385641][ T4310] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 398.492092][ T6667] 8021q: adding VLAN 0 to HW filter on device team0 [ 398.596504][ T4310] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 398.853978][ T4310] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 398.985265][ T4152] bridge0: port 1(bridge_slave_0) entered blocking state [ 398.993672][ T4152] bridge0: port 1(bridge_slave_0) entered forwarding state [ 399.079309][ T4152] bridge0: port 2(bridge_slave_1) entered blocking state [ 399.087633][ T4152] bridge0: port 2(bridge_slave_1) entered forwarding state [ 399.156044][ T6617] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 399.750625][ T4310] bridge_slave_1: left allmulticast mode [ 399.760210][ T4310] bridge_slave_1: left promiscuous mode [ 399.768721][ T4310] bridge0: port 2(bridge_slave_1) entered disabled state [ 399.889342][ T4310] bridge_slave_0: left allmulticast mode [ 399.896129][ T4310] bridge_slave_0: left promiscuous mode [ 399.904392][ T4310] bridge0: port 1(bridge_slave_0) entered disabled state [ 400.674009][ T4310] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 400.729830][ T4310] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 400.763759][ T4310] bond0 (unregistering): Released all slaves [ 400.865383][ T6648] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 401.987772][ T4310] hsr_slave_0: left promiscuous mode [ 402.043873][ T4310] hsr_slave_1: left promiscuous mode [ 402.053850][ T4310] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 402.063933][ T4310] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 402.224402][ T4310] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 402.236275][ T4310] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 402.413870][ T4310] veth1_macvtap: left promiscuous mode [ 402.420925][ T4310] veth0_macvtap: left promiscuous mode [ 402.426946][ T4310] veth1_vlan: left promiscuous mode [ 402.433202][ T4310] veth0_vlan: left promiscuous mode [ 403.612141][ T4310] team0 (unregistering): Port device team_slave_1 removed [ 403.706921][ T4310] team0 (unregistering): Port device team_slave_0 removed [ 405.024019][ T6824] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3851450944 (3851450944 ns) > initial count (1115526657 ns). Using initial count to start timer. [ 405.561451][ T6667] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 406.232966][ T6617] veth0_vlan: entered promiscuous mode [ 406.547108][ T6617] veth1_vlan: entered promiscuous mode [ 407.131082][ T6617] veth0_macvtap: entered promiscuous mode [ 407.272590][ T6648] veth0_vlan: entered promiscuous mode [ 407.290455][ T6617] veth1_macvtap: entered promiscuous mode [ 407.493532][ T6648] veth1_vlan: entered promiscuous mode [ 407.606257][ T6617] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 407.733896][ T6617] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 407.994519][ T3677] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 408.050565][ T3677] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 408.114428][ T6648] veth0_macvtap: entered promiscuous mode [ 408.148309][ T3677] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 408.185820][ T3677] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 408.217923][ T6648] veth1_macvtap: entered promiscuous mode [ 408.430265][ T6850] loop4: detected capacity change from 0 to 1024 [ 408.555367][ T6648] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 408.722722][ T6648] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 408.782145][ T6850] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 408.951959][ T6850] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 409.050228][ T4152] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 409.092792][ T6850] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2853: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 409.116129][ T4152] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 409.227008][ T4152] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 409.285213][ T4152] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 409.746215][ T6667] veth0_vlan: entered promiscuous mode [ 409.826199][ T6667] veth1_vlan: entered promiscuous mode [ 409.855445][ T5800] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 410.363506][ T6667] veth0_macvtap: entered promiscuous mode [ 410.499754][ T6667] veth1_macvtap: entered promiscuous mode [ 410.827856][ T6667] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 410.892695][ T6667] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 411.098049][ T3616] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 411.146393][ T3616] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 411.212930][ T4210] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 411.283632][ T4210] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 412.384795][ T6886] netlink: 8 bytes leftover after parsing attributes in process `syz.3.234'. [ 412.396467][ T6886] netlink: 8 bytes leftover after parsing attributes in process `syz.3.234'. [ 415.049215][ T5814] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 415.068073][ T5814] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 415.109527][ T5814] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 415.143107][ T5814] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 415.160551][ T5814] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 416.835748][ T6908] chnl_net:caif_netlink_parms(): no params data found [ 417.278059][ T5810] Bluetooth: hci0: command tx timeout [ 419.381795][ T5810] Bluetooth: hci0: command tx timeout [ 419.409510][ T1284] ieee802154 phy0 wpan0: encryption failed: -22 [ 419.417032][ T1284] ieee802154 phy1 wpan1: encryption failed: -22 [ 419.554716][ T3616] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 419.910110][ T3616] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 420.026139][ T6908] bridge0: port 1(bridge_slave_0) entered blocking state [ 420.037072][ T6908] bridge0: port 1(bridge_slave_0) entered disabled state [ 420.048840][ T6908] bridge_slave_0: entered allmulticast mode [ 420.064220][ T6908] bridge_slave_0: entered promiscuous mode [ 420.234426][ T3616] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 420.359656][ T6908] bridge0: port 2(bridge_slave_1) entered blocking state [ 420.368443][ T6908] bridge0: port 2(bridge_slave_1) entered disabled state [ 420.378539][ T6908] bridge_slave_1: entered allmulticast mode [ 420.391088][ T6908] bridge_slave_1: entered promiscuous mode [ 420.528569][ T3616] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 421.023818][ T5814] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 421.039090][ T5814] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 421.053507][ T5814] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 421.075227][ T5814] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 421.101042][ T5814] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 421.222132][ T6908] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 421.339288][ T6960] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 421.441911][ T5814] Bluetooth: hci0: command tx timeout [ 421.522814][ T6908] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 421.697028][ C1] hrtimer: interrupt took 682800 ns [ 422.421082][ T6908] team0: Port device team_slave_0 added [ 422.454937][ T3616] bridge_slave_1: left allmulticast mode [ 422.463346][ T3616] bridge_slave_1: left promiscuous mode [ 422.471234][ T3616] bridge0: port 2(bridge_slave_1) entered disabled state [ 422.586343][ T3616] bridge_slave_0: left allmulticast mode [ 422.594091][ T3616] bridge_slave_0: left promiscuous mode [ 422.603358][ T3616] bridge0: port 1(bridge_slave_0) entered disabled state [ 423.269427][ T5814] Bluetooth: hci1: command tx timeout [ 423.379099][ T3616] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 423.449908][ T3616] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 423.486994][ T3616] bond0 (unregistering): Released all slaves [ 423.518461][ T5814] Bluetooth: hci0: command tx timeout [ 423.655360][ T6908] team0: Port device team_slave_1 added [ 424.281242][ T3616] hsr_slave_0: left promiscuous mode [ 424.320572][ T3616] hsr_slave_1: left promiscuous mode [ 424.331377][ T3616] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 424.341479][ T3616] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 424.441143][ T3616] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 424.453824][ T3616] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 424.619087][ T3616] veth1_macvtap: left promiscuous mode [ 424.626228][ T3616] veth0_macvtap: left promiscuous mode [ 424.633801][ T3616] veth1_vlan: left promiscuous mode [ 424.640706][ T3616] veth0_vlan: left promiscuous mode [ 425.277081][ T5810] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 425.287977][ T5810] Bluetooth: hci1: command tx timeout [ 425.316797][ T5806] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 425.348828][ T5806] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 425.458709][ T5806] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 425.529318][ T5806] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 425.644031][ T6985] overlayfs: failed to resolve './file0': -2 [ 425.883646][ T3616] team0 (unregistering): Port device team_slave_1 removed [ 425.922940][ T3616] team0 (unregistering): Port device team_slave_0 removed [ 426.666589][ T6908] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 426.677562][ T6908] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 426.708794][ T6908] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 426.951672][ T6908] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 426.962141][ T6908] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 426.993388][ T6908] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 427.369058][ T5814] Bluetooth: hci1: command tx timeout [ 427.765970][ T5814] Bluetooth: hci4: command tx timeout [ 427.874868][ T3616] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 428.086033][ T6908] hsr_slave_0: entered promiscuous mode [ 428.098382][ T6908] hsr_slave_1: entered promiscuous mode [ 428.109218][ T6908] debugfs: 'hsr0' already exists in 'hsr' [ 428.115817][ T6908] Cannot create hsr debugfs directory [ 428.294538][ T3616] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 428.945694][ T3616] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 429.448929][ T5814] Bluetooth: hci1: command tx timeout [ 429.477042][ T3616] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 429.856238][ T5814] Bluetooth: hci4: command tx timeout [ 430.530840][ T6958] chnl_net:caif_netlink_parms(): no params data found [ 430.594562][ T3616] bridge_slave_1: left allmulticast mode [ 430.601593][ T3616] bridge_slave_1: left promiscuous mode [ 430.608736][ T3616] bridge0: port 2(bridge_slave_1) entered disabled state [ 430.691801][ T3616] bridge_slave_0: left allmulticast mode [ 430.698244][ T3616] bridge_slave_0: left promiscuous mode [ 430.705190][ T3616] bridge0: port 1(bridge_slave_0) entered disabled state [ 431.056984][ T7014] loop4: detected capacity change from 0 to 512 [ 431.546890][ T7014] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 431.568474][ T7014] ext4 filesystem being mounted at /97/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 431.770048][ T3616] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 431.869655][ T3616] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 431.915195][ T3616] bond0 (unregistering): Released all slaves [ 431.934928][ T5814] Bluetooth: hci4: command tx timeout [ 432.242019][ T7014] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 432.378875][ T3616] hsr_slave_0: left promiscuous mode [ 432.409552][ T3616] hsr_slave_1: left promiscuous mode [ 432.419903][ T3616] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 432.428244][ T3616] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 432.502725][ T3616] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 432.511458][ T3616] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 432.669077][ T3616] veth1_macvtap: left promiscuous mode [ 432.675397][ T3616] veth0_macvtap: left promiscuous mode [ 432.682827][ T3616] veth1_vlan: left promiscuous mode [ 432.688979][ T3616] veth0_vlan: left promiscuous mode [ 433.890123][ T3616] team0 (unregistering): Port device team_slave_1 removed [ 433.930450][ T3616] team0 (unregistering): Port device team_slave_0 removed [ 434.001255][ T5814] Bluetooth: hci4: command tx timeout [ 434.529473][ T6982] chnl_net:caif_netlink_parms(): no params data found [ 435.463751][ T3616] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 435.724216][ T3616] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 435.994812][ T3616] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 436.244343][ T3616] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 436.707909][ T6908] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 436.871786][ T6958] bridge0: port 1(bridge_slave_0) entered blocking state [ 436.880314][ T6958] bridge0: port 1(bridge_slave_0) entered disabled state [ 436.888534][ T6958] bridge_slave_0: entered allmulticast mode [ 436.904194][ T6958] bridge_slave_0: entered promiscuous mode [ 436.961893][ T6908] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 437.204753][ T6958] bridge0: port 2(bridge_slave_1) entered blocking state [ 437.214057][ T6958] bridge0: port 2(bridge_slave_1) entered disabled state [ 437.222877][ T6958] bridge_slave_1: entered allmulticast mode [ 437.233941][ T6958] bridge_slave_1: entered promiscuous mode [ 437.250779][ T6908] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 437.305163][ T6982] bridge0: port 1(bridge_slave_0) entered blocking state [ 437.321638][ T6982] bridge0: port 1(bridge_slave_0) entered disabled state [ 437.330388][ T6982] bridge_slave_0: entered allmulticast mode [ 437.341695][ T6982] bridge_slave_0: entered promiscuous mode [ 437.362280][ T6908] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 437.484320][ T3616] bridge_slave_1: left allmulticast mode [ 437.492323][ T3616] bridge_slave_1: left promiscuous mode [ 437.500573][ T3616] bridge0: port 2(bridge_slave_1) entered disabled state [ 437.656355][ T3616] bridge_slave_0: left allmulticast mode [ 437.663408][ T3616] bridge_slave_0: left promiscuous mode [ 437.671489][ T3616] bridge0: port 1(bridge_slave_0) entered disabled state [ 438.432600][ T3616] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 438.506429][ T3616] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 438.536905][ T3616] bond0 (unregistering): Released all slaves [ 438.974120][ T6982] bridge0: port 2(bridge_slave_1) entered blocking state [ 438.982607][ T6982] bridge0: port 2(bridge_slave_1) entered disabled state [ 438.991264][ T6982] bridge_slave_1: entered allmulticast mode [ 439.002169][ T6982] bridge_slave_1: entered promiscuous mode [ 439.131962][ T6958] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 439.404548][ T3616] hsr_slave_0: left promiscuous mode [ 439.425051][ T3616] hsr_slave_1: left promiscuous mode [ 439.434029][ T3616] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 439.447307][ T3616] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 439.489616][ T3616] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 439.498585][ T3616] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 439.578410][ T3616] veth1_macvtap: left promiscuous mode [ 439.584681][ T3616] veth0_macvtap: left promiscuous mode [ 439.593475][ T3616] veth1_vlan: left promiscuous mode [ 439.599486][ T3616] veth0_vlan: left promiscuous mode [ 440.644626][ T3616] team0 (unregistering): Port device team_slave_1 removed [ 440.674658][ T3616] team0 (unregistering): Port device team_slave_0 removed [ 441.072651][ T6958] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 441.248004][ T24] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 441.385221][ T6982] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 441.421502][ T6982] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 441.451217][ T24] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 32 [ 441.462025][ T24] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 441.585091][ T24] usb 4-1: New USB device found, idVendor=03f0, idProduct=0004, bcdDevice= 0.40 [ 441.595421][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 441.605106][ T24] usb 4-1: Product: syz [ 441.610136][ T24] usb 4-1: Manufacturer: syz [ 441.615047][ T24] usb 4-1: SerialNumber: syz [ 441.706582][ T7075] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 441.792390][ T24] usblp0: Disabling reads from problematic bidirectional printer [ 441.894474][ T6982] team0: Port device team_slave_0 added [ 442.044790][ T6958] team0: Port device team_slave_0 added [ 442.083317][ T6982] team0: Port device team_slave_1 added [ 442.130272][ T24] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 5 if 0 alt 0 proto 1 vid 0x03F0 pid 0x0004 [ 442.135887][ T6958] team0: Port device team_slave_1 added [ 442.288355][ T24] usb 4-1: USB disconnect, device number 5 [ 442.301334][ T24] usblp0: removed [ 442.540513][ T6982] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 442.548553][ T6982] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 442.578527][ T6982] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 442.708731][ T6982] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 442.716253][ T6982] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 442.744837][ T6982] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 442.790795][ T6958] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 442.799070][ T6958] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 442.827456][ T6958] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 442.855145][ T6958] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 442.863486][ T6958] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 442.890353][ T6958] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 443.257637][ T6958] hsr_slave_0: entered promiscuous mode [ 443.270085][ T6958] hsr_slave_1: entered promiscuous mode [ 443.280489][ T6958] debugfs: 'hsr0' already exists in 'hsr' [ 443.286467][ T6958] Cannot create hsr debugfs directory [ 443.625710][ T6982] hsr_slave_0: entered promiscuous mode [ 443.638356][ T6982] hsr_slave_1: entered promiscuous mode [ 443.648387][ T6982] debugfs: 'hsr0' already exists in 'hsr' [ 443.654444][ T6982] Cannot create hsr debugfs directory [ 443.734897][ T7086] Zero length message leads to an empty skb [ 444.848032][ T6908] 8021q: adding VLAN 0 to HW filter on device bond0 [ 445.538173][ T6908] 8021q: adding VLAN 0 to HW filter on device team0 [ 445.766494][ T4310] bridge0: port 1(bridge_slave_0) entered blocking state [ 445.774726][ T4310] bridge0: port 1(bridge_slave_0) entered forwarding state [ 445.918449][ T3726] bridge0: port 2(bridge_slave_1) entered blocking state [ 445.926664][ T3726] bridge0: port 2(bridge_slave_1) entered forwarding state [ 447.016882][ T7107] ===================================================== [ 447.024868][ T7107] BUG: KMSAN: uninit-value in batadv_get_vid+0x2d0/0x3b0 [ 447.033385][ T7107] batadv_get_vid+0x2d0/0x3b0 [ 447.038696][ T7107] batadv_interface_tx+0x2e5/0x1e60 [ 447.044879][ T7107] dev_hard_start_xmit+0x22f/0xa30 [ 447.051027][ T7107] __dev_queue_xmit+0x3c51/0x5e60 [ 447.057046][ T7107] __bpf_redirect+0x162d/0x1760 [ 447.063155][ T7107] bpf_clone_redirect+0x366/0x530 [ 447.069689][ T7107] ___bpf_prog_run+0x1297/0xeba0 [ 447.075408][ T7107] __bpf_prog_run512+0xc5/0x100 [ 447.080822][ T7107] bpf_test_run+0x496/0xd80 [ 447.085926][ T7107] bpf_prog_test_run_skb+0x18c1/0x26a0 [ 447.092492][ T7107] bpf_prog_test_run+0x5c2/0xa40 [ 447.098646][ T7107] __sys_bpf+0x873/0xeb0 [ 447.103117][ T7107] __ia32_sys_bpf+0xa4/0xf0 [ 447.108185][ T7107] ia32_sys_call+0xadf/0x4310 [ 447.113612][ T7107] __do_fast_syscall_32+0xb0/0x150 [ 447.119446][ T7107] do_fast_syscall_32+0x38/0x80 [ 447.124995][ T7107] do_SYSENTER_32+0x1f/0x30 [ 447.128485][ T6958] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 447.130064][ T7107] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 447.144184][ T7107] [ 447.146781][ T7107] Uninit was created at: [ 447.151981][ T7107] kmem_cache_alloc_node_noprof+0x989/0x16b0 [ 447.158413][ T7107] kmalloc_reserve+0x13c/0x4b0 [ 447.163613][ T7107] pskb_expand_head+0x1fc/0x1610 [ 447.169389][ T7107] skb_ensure_writable+0x44e/0x510 [ 447.175172][ T7107] bpf_clone_redirect+0x1c1/0x530 [ 447.180961][ T7107] ___bpf_prog_run+0x1297/0xeba0 [ 447.186463][ T7107] __bpf_prog_run512+0xc5/0x100 [ 447.192687][ T7107] bpf_test_run+0x496/0xd80 [ 447.198221][ T7107] bpf_prog_test_run_skb+0x18c1/0x26a0 [ 447.205215][ T7107] bpf_prog_test_run+0x5c2/0xa40 [ 447.211576][ T7107] __sys_bpf+0x873/0xeb0 [ 447.217184][ T7107] __ia32_sys_bpf+0xa4/0xf0 [ 447.222565][ T7107] ia32_sys_call+0xadf/0x4310 [ 447.228802][ T7107] __do_fast_syscall_32+0xb0/0x150 [ 447.234623][ T7107] do_fast_syscall_32+0x38/0x80 [ 447.240708][ T7107] do_SYSENTER_32+0x1f/0x30 [ 447.245946][ T7107] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 447.253327][ T7107] [ 447.255902][ T7107] CPU: 1 UID: 0 PID: 7107 Comm: syz.3.271 Not tainted syzkaller #0 PREEMPT(none) [ 447.266261][ T7107] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 447.277211][ T7107] ===================================================== [ 447.285285][ T7107] Disabling lock debugging due to kernel taint [ 447.292018][ T7107] Kernel panic - not syncing: kmsan.panic set ... [ 447.299139][ T7107] CPU: 1 UID: 0 PID: 7107 Comm: syz.3.271 Tainted: G B syzkaller #0 PREEMPT(none) [ 447.310874][ T7107] Tainted: [B]=BAD_PAGE [ 447.316351][ T7107] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 447.327803][ T7107] Call Trace: [ 447.331484][ T7107] [ 447.334730][ T7107] __dump_stack+0x26/0x30 [ 447.339503][ T7107] dump_stack_lvl+0x53/0x270 [ 447.344598][ T7107] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 447.350827][ T7107] dump_stack+0x1e/0x25 [ 447.355403][ T7107] vpanic+0x435/0xd30 [ 447.359738][ T7107] panic+0x15d/0x160 [ 447.364092][ T7107] kmsan_report+0x31c/0x320 [ 447.369184][ T7107] ? __msan_warning+0x1b/0x30 [ 447.374529][ T7107] ? batadv_get_vid+0x2d0/0x3b0 [ 447.379921][ T7107] ? batadv_interface_tx+0x2e5/0x1e60 [ 447.385745][ T7107] ? dev_hard_start_xmit+0x22f/0xa30 [ 447.391703][ T7107] ? __dev_queue_xmit+0x3c51/0x5e60 [ 447.397193][ T7107] ? __bpf_redirect+0x162d/0x1760 [ 447.402720][ T7107] ? bpf_clone_redirect+0x366/0x530 [ 447.408260][ T7107] ? ___bpf_prog_run+0x1297/0xeba0 [ 447.413869][ T7107] ? __bpf_prog_run512+0xc5/0x100 [ 447.419279][ T7107] ? bpf_test_run+0x496/0xd80 [ 447.424349][ T7107] ? bpf_prog_test_run_skb+0x18c1/0x26a0 [ 447.430300][ T7107] ? bpf_prog_test_run+0x5c2/0xa40 [ 447.436067][ T7107] ? __sys_bpf+0x873/0xeb0 [ 447.441117][ T7107] ? __ia32_sys_bpf+0xa4/0xf0 [ 447.446575][ T7107] ? ia32_sys_call+0xadf/0x4310 [ 447.451857][ T7107] ? __do_fast_syscall_32+0xb0/0x150 [ 447.457543][ T7107] ? do_fast_syscall_32+0x38/0x80 [ 447.462824][ T7107] ? do_SYSENTER_32+0x1f/0x30 [ 447.468019][ T7107] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 447.474918][ T7107] ? kmsan_get_metadata+0xfb/0x160 [ 447.480328][ T7107] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 447.486700][ T7107] ? kmsan_get_metadata+0xfb/0x160 [ 447.492487][ T7107] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 447.498532][ T7107] ? batadv_interface_tx+0x81/0x1e60 [ 447.504167][ T7107] ? filter_irq_stacks+0x49/0x190 [ 447.510250][ T7107] ? stack_depot_save_flags+0x35/0x7b0 [ 447.516346][ T7107] ? kmsan_get_metadata+0xfb/0x160 [ 447.521895][ T7107] __msan_warning+0x1b/0x30 [ 447.526767][ T7107] batadv_get_vid+0x2d0/0x3b0 [ 447.531890][ T7107] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 447.538297][ T7107] batadv_interface_tx+0x2e5/0x1e60 [ 447.543928][ T7107] ? kmsan_get_metadata+0xfb/0x160 [ 447.549796][ T7107] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 447.557369][ T7107] ? kmsan_get_metadata+0xfb/0x160 [ 447.563504][ T7107] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 447.570238][ T7107] ? __pfx_batadv_interface_tx+0x10/0x10 [ 447.576552][ T7107] dev_hard_start_xmit+0x22f/0xa30 [ 447.582212][ T7107] __dev_queue_xmit+0x3c51/0x5e60 [ 447.587574][ T7107] ? skb_release_data+0xa12/0xac0 [ 447.593002][ T7107] ? kmsan_internal_memmove_metadata+0x91/0x230 [ 447.599893][ T7107] ? kmsan_get_metadata+0xfb/0x160 [ 447.606120][ T7107] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 447.612712][ T7107] ? __dev_queue_xmit+0x30c/0x5e60 [ 447.618315][ T7107] __bpf_redirect+0x162d/0x1760 [ 447.623503][ T7107] ? kmsan_get_metadata+0xfb/0x160 [ 447.629289][ T7107] bpf_clone_redirect+0x366/0x530 [ 447.634873][ T7107] ___bpf_prog_run+0x1297/0xeba0 [ 447.640142][ T7107] __bpf_prog_run512+0xc5/0x100 [ 447.645383][ T7107] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 447.652093][ T7107] ? kmsan_internal_poison_memory+0x78/0x90 [ 447.658515][ T7107] ? kmsan_get_metadata+0xfb/0x160 [ 447.664056][ T7107] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 447.670867][ T7107] ? kmsan_internal_unpoison_memory+0x14/0x20 [ 447.677487][ T7107] ? _raw_spin_unlock_irqrestore+0x3f/0x60 [ 447.683546][ T7107] ? kmsan_get_metadata+0xfb/0x160 [ 447.689210][ T7107] ? kmsan_get_metadata+0xfb/0x160 [ 447.694700][ T7107] ? kmsan_get_metadata+0xfb/0x160 [ 447.700042][ T7107] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 447.706857][ T7107] ? kmsan_get_metadata+0x150/0x160 [ 447.712321][ T7107] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 447.718367][ T7107] ? __pfx___bpf_prog_run512+0x10/0x10 [ 447.724205][ T7107] ? __pfx___bpf_prog_run512+0x10/0x10 [ 447.730223][ T7107] bpf_test_run+0x496/0xd80 [ 447.735033][ T7107] ? kmsan_get_metadata+0xfb/0x160 [ 447.741111][ T7107] ? bpf_test_run+0x2f7/0xd80 [ 447.746341][ T7107] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 447.753002][ T7107] bpf_prog_test_run_skb+0x18c1/0x26a0 [ 447.758846][ T7107] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 447.766073][ T7107] bpf_prog_test_run+0x5c2/0xa40 [ 447.771566][ T7107] __sys_bpf+0x873/0xeb0 [ 447.776163][ T7107] __ia32_sys_bpf+0xa4/0xf0 [ 447.781296][ T7107] ia32_sys_call+0xadf/0x4310 [ 447.786857][ T7107] __do_fast_syscall_32+0xb0/0x150 [ 447.792603][ T7107] ? irqentry_exit_to_user_mode+0x7f/0xa0 [ 447.798685][ T7107] do_fast_syscall_32+0x38/0x80 [ 447.804313][ T7107] do_SYSENTER_32+0x1f/0x30 [ 447.809855][ T7107] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 447.816588][ T7107] RIP: 0023:0xf70ed539 [ 447.821667][ T7107] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 447.843598][ T7107] RSP: 002b:00000000f54dd55c EFLAGS: 00000206 ORIG_RAX: 0000000000000165 [ 447.853449][ T7107] RAX: ffffffffffffffda RBX: 000000000000000a RCX: 0000000080000080 [ 447.862306][ T7107] RDX: 0000000000000050 RSI: 0000000000000000 RDI: 0000000000000000 [ 447.870859][ T7107] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 447.879324][ T7107] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 447.888488][ T7107] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 447.897085][ T7107] [ 447.902070][ T7107] Kernel Offset: disabled [ 447.906646][ T7107] Rebooting in 86400 seconds..