last executing test programs: 9.152894048s ago: executing program 1 (id=49): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, &(0x7f0000000140)={0x4, &(0x7f00000000c0)=[{0x1, 0x2, 0x9, 0x7b9}, {0x9, 0x68, 0x1, 0x732667d4}, {0x1, 0x7, 0x6, 0x7}, {0x2, 0x5, 0x2, 0x80000001}]}) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000005c0)=@updpolicy={0xb8, 0x19, 0x905, 0x0, 0x0, {{@in6=@private0={0xfc, 0x0, '\x00', 0x3}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x0, 0x0, 0x2, 0x20}}}, 0xb8}}, 0x0) syz_emit_ethernet(0x32, &(0x7f00000001c0)=ANY=[@ANYBLOB="bbbbbbbbbbbb00000000000008004500002400000000002f9078ac14d8621b002c17a940a64fd50b15a5daa37fe5224fbb737955c1aa451866a4a3cbd58890326a0c3e4dda740ccb3f97ca635b315385ae92d3c9b30d063dde0e4240996c4c63e540b431659bd0c9b61108b57f24462eec9387b78c54e6891e882cc3bb40fb3543609b"], 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000280)={0x6, 0x0}, 0x8) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000002c0)={r1}, 0x4) r2 = fsopen(&(0x7f0000000100)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000340)={0x1, &(0x7f0000000300)=[{0x9, 0xfc, 0x3f, 0x5}]}) r3 = open(&(0x7f0000000000)='./bus\x00', 0x60142, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1, 0x28011, r3, 0x0) faccessat2(r3, &(0x7f0000000100)='./file0\x00', 0x0, 0x1000) r4 = fsmount(r3, 0x0, 0x8a) mknodat(r4, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) linkat(r4, &(0x7f0000000040)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) r5 = epoll_create(0xa991) epoll_ctl$EPOLL_CTL_MOD(r5, 0x3, 0xffffffffffffffff, 0x0) setfsuid(0x0) 8.467854407s ago: executing program 1 (id=52): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xd, &(0x7f0000000200)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}}, @jmp={0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x1}]}, &(0x7f0000000280)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='tlb_flush\x00', r1}, 0x10) 7.622070669s ago: executing program 0 (id=55): r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000080)={0x18, 0x0, {0x1, @link_local, 'geneve0\x00'}}, 0x1e) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$btrfs_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount$bind(0x0, &(0x7f0000000180)='./file0/file0\x00', 0x0, 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(0xffffffffffffffff, 0x50009405, &(0x7f0000000180)) ioctl$PPPIOCATTCHAN(r1, 0x40047438, &(0x7f0000000100)=0x1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000280)={'geneve0\x00'}) 7.215208203s ago: executing program 1 (id=57): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001240)=@newqdisc={0x2c, 0x24, 0x0, 0x0, 0x0, {}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) r0 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote, 0x5}, 0x1c) sendmsg(r0, &(0x7f00000000c0)={0x0, 0x952c, &(0x7f0000000100)=[{&(0x7f0000000000)='+v', 0xffbd}], 0x1, 0x0, 0x0, 0x2c}, 0x4) 6.711404867s ago: executing program 0 (id=60): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=@newsa={0x134, 0x10, 0x1, 0x0, 0x0, {{@in6=@remote, @in6=@empty}, {@in6=@ipv4={'\x00', '\xff\xff', @multicast2}, 0x0, 0x32}, @in6=@loopback, {}, {}, {}, 0x0, 0x0, 0x2, 0x0, 0x0, 0x20}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}]}, 0x134}}, 0x0) 6.417945305s ago: executing program 3 (id=61): r0 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) r1 = add_key$user(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x1}, &(0x7f0000000140)="c5", 0x1, r0) r2 = add_key$user(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x2}, &(0x7f0000000200)="4319e2aabc1e4a13e696a7f0d7557242d86bf77f9c16bad3035548f5cdb5bc12d17a90b4063934ce295fa65c2323953d5e52a3ff4c543f094d35b793ab9f722d816203247e4fb54ca97d0053f1606f9fe21d35d3b25e2c3a713579039c1ea1f53aaeabd7b902297b5fd3dccd0b11db742f0e5a832b3adef3a6eae7952cbf3874ef323373b5d03e736994b6eef1e78e566d8c26a21a5e0896bc5b515603985946e75f93f7bd54adfdb387b992d26814248b9a22e770160dcb9694b89abd64650a", 0xc0, r0) r3 = add_key$user(&(0x7f0000000200), &(0x7f0000000300)={'syz', 0x1}, &(0x7f0000000480)="03", 0x1, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000000)={r1, r2, r3}, &(0x7f00000005c0)=""/28, 0x1c, &(0x7f0000000340)={&(0x7f00000004c0)={'crc32c-generic\x00'}, &(0x7f0000000540)="03", 0x1}) 6.072535547s ago: executing program 1 (id=63): syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="1201000009a65d0860040800dec30102030109021b050000000000090400000178eaf500090584", @ANYRES32], 0x0) 5.905710087s ago: executing program 3 (id=64): openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) r0 = syz_io_uring_setup(0x239, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000000)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r0, 0x1f82, 0x0, 0x0, 0x0, 0x0) 5.097778269s ago: executing program 2 (id=65): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e24, @local}, 0x10) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000000c0)=0x3, 0x4) r1 = syz_io_uring_setup(0x239, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000000)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000380)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r1, 0x2def, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r1, 0x6256, 0x0, 0x0, 0x0, 0x0) 5.08924502s ago: executing program 0 (id=66): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="b4050000000000007110bf0000000000460000000000000095000000004a000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd96, &(0x7f0000000080)=""/201, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffd56, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_NEW_KEY(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x2c, r1, 0x101, 0x0, 0x0, {{0x9}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_KEY_IDX={0x5}, @NL80211_ATTR_KEY_TYPE={0x8}]}, 0x2c}}, 0x0) 4.931451803s ago: executing program 4 (id=67): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xd, &(0x7f0000000200)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}}, @jmp={0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x1}]}, &(0x7f0000000280)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='tlb_flush\x00', r1}, 0x10) 4.861649906s ago: executing program 3 (id=68): mknodat$loop(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) fcntl$setstatus(r0, 0x4, 0x42000) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) fcntl$setstatus(r1, 0x4, 0x2400) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) fcntl$setstatus(r2, 0x4, 0x2400) open(&(0x7f0000000000)='./file0\x00', 0x8e040, 0x0) 3.8146739s ago: executing program 0 (id=69): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r0}, 0x10) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000003c0)='./file0\x00', 0x40, &(0x7f0000000140), 0x84, 0x4d7, &(0x7f0000000c00)="$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") 3.768221212s ago: executing program 4 (id=70): rt_tgsigqueueinfo(0x0, 0x0, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x5}) 3.611095822s ago: executing program 3 (id=71): r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000080)={0x18, 0x0, {0x1, @link_local, 'geneve0\x00'}}, 0x1e) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$btrfs_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount$bind(0x0, &(0x7f0000000180)='./file0/file0\x00', 0x0, 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(0xffffffffffffffff, 0x50009405, &(0x7f0000000180)) ioctl$PPPIOCATTCHAN(r1, 0x40047438, &(0x7f0000000100)=0x1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000280)={'geneve0\x00'}) 3.464267656s ago: executing program 2 (id=72): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="b405000000000000711031000000000066000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x366, 0x10, &(0x7f0000000000), 0x2b2}, 0x48) 3.105103959s ago: executing program 4 (id=73): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001240)=@newqdisc={0x2c, 0x24, 0x0, 0x0, 0x0, {}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) r0 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote, 0x5}, 0x1c) sendmsg(r0, &(0x7f00000000c0)={0x0, 0x952c, &(0x7f0000000100)=[{&(0x7f0000000000)='+v', 0xffbd}], 0x1, 0x0, 0x0, 0x2c}, 0x4) 2.688749027s ago: executing program 2 (id=74): r0 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) r1 = add_key$user(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x1}, &(0x7f0000000140)="c5", 0x1, r0) r2 = add_key$user(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x2}, &(0x7f0000000200)="4319e2aabc1e4a13e696a7f0d7557242d86bf77f9c16bad3035548f5cdb5bc12d17a90b4063934ce295fa65c2323953d5e52a3ff4c543f094d35b793ab9f722d816203247e4fb54ca97d0053f1606f9fe21d35d3b25e2c3a713579039c1ea1f53aaeabd7b902297b5fd3dccd0b11db742f0e5a832b3adef3a6eae7952cbf3874ef323373b5d03e736994b6eef1e78e566d8c26a21a5e0896bc5b515603985946e75f93f7bd54adfdb387b992d26814248b9a22e770160dcb9694b89abd64650a", 0xc0, r0) r3 = add_key$user(&(0x7f0000000200), &(0x7f0000000300)={'syz', 0x1}, &(0x7f0000000480)="03", 0x1, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000000)={r1, r2, r3}, &(0x7f00000005c0)=""/28, 0x1c, &(0x7f0000000340)={&(0x7f00000004c0)={'crc32c-generic\x00'}, &(0x7f0000000540)="03", 0x1}) 2.596668454s ago: executing program 3 (id=75): r0 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) syz_mount_image$squashfs(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000200), 0x1, 0x178, &(0x7f0000000240)="$eJzsVb1OKkEU/g4MC/dWFLe6ucktJAqFsCxq7OwMD+ADSGBF4uIPS6IQirXiPWx4DQvfwUJjg4UxscDerJmZs+vwAJqQzJfsfud8M2fOzBTfHIcXYR7Ax2LSBoqQEPiDByIIAP9JSdjPa351NFc5fxGaK6zfMD8yh6PxSSsI/ME3Bj/RwwY2sMGqBV/p3nUGb8rL7heTtgwOAcRxHEutoz8y52QB3Blz/gr1URZxOkean0w2ANSG/fNaOBpv9vqtrt/1Tz2vseNuue62VzvqBb6r/2S0yGiPhOQKAOmpv4zxHIAnNtjfWAYZW+NxMmsdw5zLa8u1GaM2YcJtWsveDnkFB1hHAcBlRIZaUqsIqCM1QchyUhfG/nSvghqots+CzhQESspmEOka9TlyaeKZSWM3SrY9ZS4xN5lnzHPm5M1K3iKhVnjmrBwBDq5aw+GgLiUdpZqXal4xMi9Mdn13lg/3Lw8LCwsLCwsLixXDZwAAAP//pexiBA==") mount$tmpfs(0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='gid=', @ANYRESHEX=0x0]) mount(&(0x7f0000000000)=@nullb, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='adfs\x00', 0x0, &(0x7f0000000240)) read$FUSE(r0, &(0x7f00000021c0)={0x2020}, 0x100000027) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000070080000000000000000000850000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socketpair(0x1d, 0x2, 0x6, &(0x7f0000000000)) write$binfmt_script(r2, 0x0, 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2800002, 0x10, 0xffffffffffffffff, 0x0) pipe2$watch_queue(&(0x7f0000000340)={0xffffffffffffffff}, 0x80) pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r4, 0x5761, &(0x7f0000000080)=ANY=[@ANYBLOB="01"]) close_range(r3, 0xffffffffffffffff, 0x0) 2.096978097s ago: executing program 1 (id=76): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=@newsa={0x134, 0x10, 0x1, 0x0, 0x0, {{@in6=@remote, @in6=@empty}, {@in6=@ipv4={'\x00', '\xff\xff', @multicast2}, 0x0, 0x32}, @in6=@loopback, {}, {}, {}, 0x0, 0x0, 0x2, 0x0, 0x0, 0x20}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}]}, 0x134}}, 0x0) 2.090679204s ago: executing program 4 (id=77): r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setreuid(0x0, r1) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0x3ff, &(0x7f0000000500)=0x0) io_destroy(r3) fcntl$setstatus(r2, 0x4, 0x42800) 1.866899891s ago: executing program 0 (id=78): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000340)={0x48, r1, 0xb97534d5fe9704cf, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_STA_SUPPORTED_RATES={0x4}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6}, @NL80211_ATTR_PEER_AID={0x6, 0xb5, 0x185}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_WME={0xc, 0x81, [@NL80211_STA_WME_UAPSD_QUEUES={0x5}]}]}, 0x48}}, 0x0) 1.758226301s ago: executing program 2 (id=79): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="b4050000000000007110bf0000000000460000000000000095000000004a000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd96, &(0x7f0000000080)=""/201, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffd56, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_NEW_KEY(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x2c, r1, 0x101, 0x0, 0x0, {{0x9}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_KEY_IDX={0x5}, @NL80211_ATTR_KEY_TYPE={0x8}]}, 0x2c}}, 0x0) 1.136368701s ago: executing program 4 (id=80): r0 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0x5ba8, 0xfffffffffffffffd) keyctl$read(0xb, r0, 0x0, 0x0) 1.062029329s ago: executing program 2 (id=81): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/pm_freeze_timeout', 0x40a02, 0x0) write$tcp_mem(r0, &(0x7f0000000040)={0xa00000000000000}, 0x48) 721.811136ms ago: executing program 1 (id=82): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e24, @local}, 0x10) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000000c0)=0x3, 0x4) r1 = syz_io_uring_setup(0x239, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000000)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000380)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r1, 0x2def, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r1, 0x6256, 0x0, 0x0, 0x0, 0x0) 572.538248ms ago: executing program 0 (id=83): rt_tgsigqueueinfo(0x0, 0x0, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x5}) 395.615404ms ago: executing program 3 (id=84): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_emit_vhci(&(0x7f0000000300)=ANY=[@ANYRES32=r0], 0x2) 88.599265ms ago: executing program 4 (id=85): r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000080)={0x18, 0x0, {0x1, @link_local, 'geneve0\x00'}}, 0x1e) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$btrfs_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount$bind(0x0, &(0x7f0000000180)='./file0/file0\x00', 0x0, 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(0xffffffffffffffff, 0x50009405, &(0x7f0000000180)) ioctl$PPPIOCATTCHAN(r1, 0x40047438, &(0x7f0000000100)=0x1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000280)={'geneve0\x00'}) 0s ago: executing program 2 (id=86): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="b405000000000000711031000000000066000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x366, 0x10, &(0x7f0000000000), 0x2b2}, 0x48) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.106' (ED25519) to the list of known hosts. syzkaller login: [ 177.772448][ T5045] cgroup: Unknown subsys name 'net' [ 177.944893][ T5045] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 229.333588][ T1223] ieee802154 phy0 wpan0: encryption failed: -22 [ 229.340646][ T1223] ieee802154 phy1 wpan1: encryption failed: -22 [ 232.473987][ T5045] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 237.737897][ T5062] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 237.794601][ T5067] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 237.805543][ T5067] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 237.829577][ T5071] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 237.839525][ T5071] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 237.848223][ T5072] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 237.860346][ T5072] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 237.870578][ T5073] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 237.879192][ T5072] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 237.887722][ T5073] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 237.888778][ T5071] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 237.903049][ T5073] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 237.907352][ T5075] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 237.917337][ T5076] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 237.919775][ T5076] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 237.925991][ T5071] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 237.934172][ T5072] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 237.941948][ T5075] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 237.964901][ T5075] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 237.984061][ T51] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 237.995463][ T51] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 237.995517][ T5075] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 238.018880][ T5075] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 238.040549][ T5075] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 238.155995][ T5067] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 238.168283][ T5067] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 238.178081][ T5067] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 238.192277][ T5067] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 238.204351][ T5067] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 238.214508][ T5067] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 239.609228][ T5064] chnl_net:caif_netlink_parms(): no params data found [ 240.036630][ T5067] Bluetooth: hci2: command tx timeout [ 240.042332][ T5067] Bluetooth: hci0: command tx timeout [ 240.117159][ T5075] Bluetooth: hci3: command tx timeout [ 240.123690][ T5065] chnl_net:caif_netlink_parms(): no params data found [ 240.167138][ T5061] chnl_net:caif_netlink_parms(): no params data found [ 240.196649][ T5075] Bluetooth: hci1: command tx timeout [ 240.518155][ T5075] Bluetooth: hci4: command tx timeout [ 240.746707][ T5078] chnl_net:caif_netlink_parms(): no params data found [ 240.850534][ T5064] bridge0: port 1(bridge_slave_0) entered blocking state [ 240.858647][ T5064] bridge0: port 1(bridge_slave_0) entered disabled state [ 240.866694][ T5064] bridge_slave_0: entered allmulticast mode [ 240.876451][ T5064] bridge_slave_0: entered promiscuous mode [ 240.931690][ T5064] bridge0: port 2(bridge_slave_1) entered blocking state [ 240.939917][ T5064] bridge0: port 2(bridge_slave_1) entered disabled state [ 240.947924][ T5064] bridge_slave_1: entered allmulticast mode [ 240.957583][ T5064] bridge_slave_1: entered promiscuous mode [ 241.014743][ T5069] chnl_net:caif_netlink_parms(): no params data found [ 241.182119][ T5064] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 241.249400][ T5064] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 241.577460][ T5064] team0: Port device team_slave_0 added [ 241.641117][ T5061] bridge0: port 1(bridge_slave_0) entered blocking state [ 241.649203][ T5061] bridge0: port 1(bridge_slave_0) entered disabled state [ 241.657271][ T5061] bridge_slave_0: entered allmulticast mode [ 241.666874][ T5061] bridge_slave_0: entered promiscuous mode [ 241.828008][ T5064] team0: Port device team_slave_1 added [ 241.887797][ T5061] bridge0: port 2(bridge_slave_1) entered blocking state [ 241.895667][ T5061] bridge0: port 2(bridge_slave_1) entered disabled state [ 241.905513][ T5061] bridge_slave_1: entered allmulticast mode [ 241.921656][ T5061] bridge_slave_1: entered promiscuous mode [ 241.934541][ T5065] bridge0: port 1(bridge_slave_0) entered blocking state [ 241.942818][ T5065] bridge0: port 1(bridge_slave_0) entered disabled state [ 241.950915][ T5065] bridge_slave_0: entered allmulticast mode [ 241.960327][ T5065] bridge_slave_0: entered promiscuous mode [ 242.136417][ T5075] Bluetooth: hci0: command tx timeout [ 242.142482][ T5075] Bluetooth: hci2: command tx timeout [ 242.159348][ T5065] bridge0: port 2(bridge_slave_1) entered blocking state [ 242.167574][ T5065] bridge0: port 2(bridge_slave_1) entered disabled state [ 242.175417][ T5065] bridge_slave_1: entered allmulticast mode [ 242.185210][ T5065] bridge_slave_1: entered promiscuous mode [ 242.197196][ T5067] Bluetooth: hci3: command tx timeout [ 242.276890][ T5067] Bluetooth: hci1: command tx timeout [ 242.313394][ T5061] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 242.413671][ T5064] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 242.421061][ T5064] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 242.448537][ T5064] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 242.474183][ T5061] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 242.527036][ T5065] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 242.537371][ T5078] bridge0: port 1(bridge_slave_0) entered blocking state [ 242.545178][ T5078] bridge0: port 1(bridge_slave_0) entered disabled state [ 242.553309][ T5078] bridge_slave_0: entered allmulticast mode [ 242.562833][ T5078] bridge_slave_0: entered promiscuous mode [ 242.578594][ T5064] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 242.585810][ T5064] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 242.612521][ T5064] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 242.623552][ T5067] Bluetooth: hci4: command tx timeout [ 242.715878][ T5065] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 242.784502][ T5078] bridge0: port 2(bridge_slave_1) entered blocking state [ 242.792880][ T5078] bridge0: port 2(bridge_slave_1) entered disabled state [ 242.800807][ T5078] bridge_slave_1: entered allmulticast mode [ 242.810741][ T5078] bridge_slave_1: entered promiscuous mode [ 242.901312][ T5069] bridge0: port 1(bridge_slave_0) entered blocking state [ 242.909950][ T5069] bridge0: port 1(bridge_slave_0) entered disabled state [ 242.917966][ T5069] bridge_slave_0: entered allmulticast mode [ 242.927568][ T5069] bridge_slave_0: entered promiscuous mode [ 243.062989][ T5061] team0: Port device team_slave_0 added [ 243.086691][ T5078] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 243.107967][ T5069] bridge0: port 2(bridge_slave_1) entered blocking state [ 243.115880][ T5069] bridge0: port 2(bridge_slave_1) entered disabled state [ 243.124027][ T5069] bridge_slave_1: entered allmulticast mode [ 243.133514][ T5069] bridge_slave_1: entered promiscuous mode [ 243.189744][ T5065] team0: Port device team_slave_0 added [ 243.248400][ T5061] team0: Port device team_slave_1 added [ 243.268534][ T5078] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 243.327260][ T5065] team0: Port device team_slave_1 added [ 243.348741][ T5064] hsr_slave_0: entered promiscuous mode [ 243.360687][ T5064] hsr_slave_1: entered promiscuous mode [ 243.645713][ T5069] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 243.663903][ T5078] team0: Port device team_slave_0 added [ 243.714209][ T5061] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 243.721736][ T5061] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 243.748170][ T5061] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 243.763926][ T5065] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 243.771354][ T5065] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 243.798981][ T5065] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 243.840404][ T5078] team0: Port device team_slave_1 added [ 243.858044][ T5069] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 243.925675][ T5061] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 243.933045][ T5061] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 243.960881][ T5061] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 243.975778][ T5065] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 243.983232][ T5065] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 244.009824][ T5065] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 244.216889][ T5067] Bluetooth: hci2: command tx timeout [ 244.222764][ T5067] Bluetooth: hci0: command tx timeout [ 244.237634][ T5078] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 244.244855][ T5078] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 244.271942][ T5078] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 244.292605][ T5078] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 244.296395][ T5067] Bluetooth: hci3: command tx timeout [ 244.301920][ T5078] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 244.333455][ T5078] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 244.363854][ T5067] Bluetooth: hci1: command tx timeout [ 244.491084][ T5069] team0: Port device team_slave_0 added [ 244.575306][ T5061] hsr_slave_0: entered promiscuous mode [ 244.585982][ T5061] hsr_slave_1: entered promiscuous mode [ 244.595570][ T5061] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 244.604635][ T5061] Cannot create hsr debugfs directory [ 244.676629][ T5067] Bluetooth: hci4: command tx timeout [ 244.702518][ T5069] team0: Port device team_slave_1 added [ 244.724536][ T5065] hsr_slave_0: entered promiscuous mode [ 244.737420][ T5065] hsr_slave_1: entered promiscuous mode [ 244.746044][ T5065] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 244.754094][ T5065] Cannot create hsr debugfs directory [ 245.009975][ T5069] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 245.017325][ T5069] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 245.043989][ T5069] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 245.176440][ T5069] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 245.183630][ T5069] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 245.211700][ T5069] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 245.238663][ T5078] hsr_slave_0: entered promiscuous mode [ 245.250022][ T5078] hsr_slave_1: entered promiscuous mode [ 245.259697][ T5078] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 245.267664][ T5078] Cannot create hsr debugfs directory [ 245.985237][ T5069] hsr_slave_0: entered promiscuous mode [ 245.995192][ T5069] hsr_slave_1: entered promiscuous mode [ 246.004859][ T5069] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 246.012799][ T5069] Cannot create hsr debugfs directory [ 246.276904][ T5067] Bluetooth: hci2: command tx timeout [ 246.277931][ T5075] Bluetooth: hci0: command tx timeout [ 246.366512][ T5075] Bluetooth: hci3: command tx timeout [ 246.410679][ T5064] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 246.437458][ T5075] Bluetooth: hci1: command tx timeout [ 246.491295][ T5064] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 246.548758][ T5064] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 246.590851][ T5064] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 246.778566][ T5075] Bluetooth: hci4: command tx timeout [ 246.792811][ T5065] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 246.827824][ T5065] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 246.894723][ T5065] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 246.918689][ T5065] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 247.303483][ T5061] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 247.330525][ T5061] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 247.353528][ T5078] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 247.397866][ T5078] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 247.426102][ T5078] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 247.450631][ T5061] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 247.535449][ T5078] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 247.563714][ T5069] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 247.592954][ T5061] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 247.642606][ T5069] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 247.770345][ T5069] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 247.830046][ T5069] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 248.562538][ T5064] 8021q: adding VLAN 0 to HW filter on device bond0 [ 248.890217][ T5064] 8021q: adding VLAN 0 to HW filter on device team0 [ 249.010677][ T1041] bridge0: port 1(bridge_slave_0) entered blocking state [ 249.018706][ T1041] bridge0: port 1(bridge_slave_0) entered forwarding state [ 249.085001][ T5078] 8021q: adding VLAN 0 to HW filter on device bond0 [ 249.154263][ T5061] 8021q: adding VLAN 0 to HW filter on device bond0 [ 249.180495][ T10] bridge0: port 2(bridge_slave_1) entered blocking state [ 249.188423][ T10] bridge0: port 2(bridge_slave_1) entered forwarding state [ 249.228761][ T5065] 8021q: adding VLAN 0 to HW filter on device bond0 [ 249.468604][ T5078] 8021q: adding VLAN 0 to HW filter on device team0 [ 249.508352][ T5061] 8021q: adding VLAN 0 to HW filter on device team0 [ 249.602568][ T25] bridge0: port 1(bridge_slave_0) entered blocking state [ 249.610627][ T25] bridge0: port 1(bridge_slave_0) entered forwarding state [ 249.678836][ T5065] 8021q: adding VLAN 0 to HW filter on device team0 [ 249.757876][ T25] bridge0: port 2(bridge_slave_1) entered blocking state [ 249.765748][ T25] bridge0: port 2(bridge_slave_1) entered forwarding state [ 249.797325][ T25] bridge0: port 1(bridge_slave_0) entered blocking state [ 249.805286][ T25] bridge0: port 1(bridge_slave_0) entered forwarding state [ 249.871867][ T10] bridge0: port 1(bridge_slave_0) entered blocking state [ 249.880078][ T10] bridge0: port 1(bridge_slave_0) entered forwarding state [ 249.971902][ T5069] 8021q: adding VLAN 0 to HW filter on device bond0 [ 250.021139][ T10] bridge0: port 2(bridge_slave_1) entered blocking state [ 250.029005][ T10] bridge0: port 2(bridge_slave_1) entered forwarding state [ 250.172759][ T10] bridge0: port 2(bridge_slave_1) entered blocking state [ 250.180731][ T10] bridge0: port 2(bridge_slave_1) entered forwarding state [ 250.301677][ T5069] 8021q: adding VLAN 0 to HW filter on device team0 [ 250.541997][ T10] bridge0: port 1(bridge_slave_0) entered blocking state [ 250.549893][ T10] bridge0: port 1(bridge_slave_0) entered forwarding state [ 250.696438][ T5061] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 250.761815][ T10] bridge0: port 2(bridge_slave_1) entered blocking state [ 250.769701][ T10] bridge0: port 2(bridge_slave_1) entered forwarding state [ 252.879491][ T5064] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 252.968516][ T5065] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 253.097035][ T5078] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 253.243699][ T5061] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 253.434690][ T5069] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 253.817745][ T5065] veth0_vlan: entered promiscuous mode [ 253.914774][ T5078] veth0_vlan: entered promiscuous mode [ 254.051290][ T5065] veth1_vlan: entered promiscuous mode [ 254.091971][ T5078] veth1_vlan: entered promiscuous mode [ 254.161747][ T5061] veth0_vlan: entered promiscuous mode [ 254.326560][ T5061] veth1_vlan: entered promiscuous mode [ 254.517202][ T5069] veth0_vlan: entered promiscuous mode [ 254.592690][ T5065] veth0_macvtap: entered promiscuous mode [ 254.653706][ T5078] veth0_macvtap: entered promiscuous mode [ 254.683339][ T5069] veth1_vlan: entered promiscuous mode [ 254.705547][ T5065] veth1_macvtap: entered promiscuous mode [ 254.752366][ T5078] veth1_macvtap: entered promiscuous mode [ 254.938260][ T5061] veth0_macvtap: entered promiscuous mode [ 255.009408][ T5061] veth1_macvtap: entered promiscuous mode [ 255.061633][ T5065] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 255.137565][ T5078] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 255.149516][ T5078] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 255.167089][ T5078] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 255.254574][ T5069] veth0_macvtap: entered promiscuous mode [ 255.274956][ T5065] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 255.325936][ T5078] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 255.338507][ T5078] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 255.354369][ T5078] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 255.388077][ T5061] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 255.398976][ T5061] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 255.409287][ T5061] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 255.420205][ T5061] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 255.436608][ T5061] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 255.450663][ T5069] veth1_macvtap: entered promiscuous mode [ 255.505552][ T5065] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 255.514838][ T5065] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 255.524187][ T5065] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 255.533444][ T5065] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 255.623332][ T5061] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 255.637178][ T5061] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 255.647622][ T5061] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 255.658412][ T5061] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 255.674205][ T5061] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 255.744786][ T5078] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 255.754290][ T5078] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 255.763750][ T5078] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 255.772922][ T5078] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 255.878947][ T5069] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 255.889838][ T5069] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 255.900108][ T5069] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 255.911034][ T5069] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 255.921224][ T5069] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 255.932159][ T5069] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 255.948649][ T5069] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 255.983583][ T5061] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 255.994700][ T5061] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 256.004117][ T5061] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 256.013410][ T5061] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 256.157910][ T5069] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 256.168955][ T5069] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 256.179343][ T5069] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 256.190209][ T5069] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 256.202049][ T5069] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 256.213929][ T5069] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 256.230002][ T5069] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 256.414619][ T5069] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 256.425784][ T5069] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 256.437109][ T5069] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 256.450494][ T5069] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 256.553530][ T5064] veth0_vlan: entered promiscuous mode [ 256.640186][ T5064] veth1_vlan: entered promiscuous mode [ 257.078218][ T5064] veth0_macvtap: entered promiscuous mode [ 257.193678][ T5064] veth1_macvtap: entered promiscuous mode [ 257.488108][ T5064] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 257.501142][ T5064] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 257.511432][ T5064] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 257.522305][ T5064] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 257.532638][ T5064] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 257.543631][ T5064] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 257.553917][ T5064] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 257.567538][ T5064] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 257.584376][ T5064] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 257.774613][ T5064] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 257.787221][ T5064] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 257.799629][ T5064] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 257.811080][ T5064] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 257.821377][ T5064] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 257.832283][ T5064] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 257.842488][ T5064] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 257.853325][ T5064] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 257.869709][ T5064] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 258.282624][ T5064] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 258.293566][ T5064] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 258.302850][ T5064] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 258.312056][ T5064] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 263.448842][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 263.457123][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 263.579498][ T3032] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 263.587773][ T3032] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 263.622637][ T3503] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 263.630992][ T3503] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 263.868436][ T3503] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 263.880998][ T3503] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 264.428395][ T3914] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 264.438090][ T3914] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 264.754286][ T3914] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 264.762656][ T3914] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 264.896891][ T3914] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 264.905128][ T3914] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 265.250834][ T5248] batadv0: entered promiscuous mode [ 265.256648][ T5248] macvlan2: entered allmulticast mode [ 265.262299][ T5248] batadv0: entered allmulticast mode [ 265.273319][ T5248] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 265.382293][ T5248] batadv0: left allmulticast mode [ 265.388022][ T5248] batadv0: left promiscuous mode [ 265.692386][ T3976] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 265.701404][ T3976] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 265.998742][ T5254] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1'. [ 266.542983][ T3976] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 266.551358][ T3976] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 267.150562][ T4224] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 267.159279][ T4224] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 268.186793][ T5145] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 268.509274][ T5145] usb 2-1: config 0 has too many interfaces: 36, using maximum allowed: 32 [ 268.521557][ T5145] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 36 [ 268.532185][ T5145] usb 2-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 268.541722][ T5145] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 268.614911][ T5145] usb 2-1: config 0 descriptor?? [ 269.031843][ T5145] usb 2-1: USB disconnect, device number 2 [ 269.668552][ T5282] batadv0: entered promiscuous mode [ 269.674197][ T5282] macvlan2: entered allmulticast mode [ 269.680382][ T5282] batadv0: entered allmulticast mode [ 269.692095][ T5282] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 269.901641][ T5282] batadv0: left allmulticast mode [ 269.907673][ T5282] batadv0: left promiscuous mode [ 270.090409][ T5286] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 270.326011][ T5288] netlink: 4 bytes leftover after parsing attributes in process `syz.0.18'. [ 272.557052][ T5145] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 272.562097][ T5317] loop0: detected capacity change from 0 to 8 [ 273.082384][ T5145] usb 4-1: config 0 has too many interfaces: 36, using maximum allowed: 32 [ 273.092021][ T5145] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 36 [ 273.101653][ T5145] usb 4-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 273.111232][ T5145] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 273.134021][ T5317] ADFS-fs (nullb0): error: can't find an ADFS filesystem on dev nullb0. [ 273.232239][ T5145] usb 4-1: config 0 descriptor?? [ 273.578987][ T5323] loop1: detected capacity change from 0 to 512 [ 273.591175][ T5323] ======================================================= [ 273.591175][ T5323] WARNING: The mand mount option has been deprecated and [ 273.591175][ T5323] and is ignored by this kernel. Remove the mand [ 273.591175][ T5323] option from the mount to silence this warning. [ 273.591175][ T5323] ======================================================= [ 273.710682][ T5323] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a842e01c, mo2=0002] [ 273.774452][ T5120] usb 4-1: USB disconnect, device number 2 [ 273.800636][ T5323] System zones: 1-12 [ 273.912813][ T5323] EXT4-fs error (device loop1): ext4_get_branch:178: inode #13: block 33619980: comm syz.1.32: invalid block [ 273.986730][ T5323] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.32: invalid indirect mapped block 1819239214 (level 1) [ 274.204326][ T5323] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.32: bg 0: block 361: padding at end of block bitmap is not set [ 274.348833][ T5323] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6551: Corrupt filesystem [ 274.426703][ T5323] EXT4-fs error (device loop1): ext4_clear_blocks:883: inode #13: comm syz.1.32: attempt to clear invalid blocks 33619980 len 1 [ 274.537855][ T5323] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.32: invalid indirect mapped block 1819239214 (level 0) [ 274.584272][ T5323] EXT4-fs (loop1): 1 truncate cleaned up [ 274.592709][ T5323] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 274.737580][ T5333] netlink: 4 bytes leftover after parsing attributes in process `syz.2.34'. [ 275.048575][ T5078] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 276.321898][ T5353] loop1: detected capacity change from 0 to 8 [ 276.647276][ T5120] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 276.876589][ T5120] usb 4-1: Using ep0 maxpacket: 8 [ 276.905175][ T5120] usb 4-1: config index 0 descriptor too short (expected 1307, got 27) [ 276.917474][ T5120] usb 4-1: config 0 has an invalid interface number: 0 but max is -1 [ 276.926999][ T5120] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 276.936491][ T5120] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 255, changing to 11 [ 276.948252][ T5120] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 59391, setting to 1024 [ 277.040172][ T5351] ADFS-fs (nullb0): error: can't find an ADFS filesystem on dev nullb0. [ 277.062660][ T5120] usb 4-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=c3.de [ 277.072203][ T5120] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 277.081034][ T5120] usb 4-1: Product: syz [ 277.085513][ T5120] usb 4-1: Manufacturer: syz [ 277.090632][ T5120] usb 4-1: SerialNumber: syz [ 277.179895][ T5120] usb 4-1: config 0 descriptor?? [ 277.189440][ T5352] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 277.261715][ T5120] hub 4-1:0.0: bad descriptor, ignoring hub [ 277.268719][ T5120] hub 4-1:0.0: probe with driver hub failed with error -5 [ 277.286716][ T5120] input: syz syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input5 [ 277.499180][ T5363] loop0: detected capacity change from 0 to 256 [ 277.539480][ T5120] usb 4-1: USB disconnect, device number 3 [ 277.539766][ C1] usb_acecad 4-1:0.0: can't resubmit intr, dummy_hcd.3-1/input0, status -19 [ 277.824928][ T5365] loop4: detected capacity change from 0 to 512 [ 278.167956][ T5365] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a842e01c, mo2=0002] [ 278.231963][ T5365] System zones: 1-12 [ 278.289816][ T5372] netlink: 4 bytes leftover after parsing attributes in process `syz.1.49'. [ 278.352929][ T5365] EXT4-fs error (device loop4): ext4_get_branch:178: inode #13: block 33619980: comm syz.4.48: invalid block [ 278.392767][ T5365] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.48: invalid indirect mapped block 1819239214 (level 1) [ 278.546601][ T5365] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.48: bg 0: block 361: padding at end of block bitmap is not set [ 278.687391][ T5365] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6551: Corrupt filesystem [ 278.798793][ T5365] EXT4-fs error (device loop4): ext4_clear_blocks:883: inode #13: comm syz.4.48: attempt to clear invalid blocks 33619980 len 1 [ 278.909144][ T5365] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.48: invalid indirect mapped block 1819239214 (level 0) [ 278.993274][ T5365] EXT4-fs (loop4): 1 truncate cleaned up [ 279.002582][ T5365] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 279.715339][ T5064] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 280.409913][ T5396] loop2: detected capacity change from 0 to 8 [ 281.143595][ T5391] ADFS-fs (nullb0): error: can't find an ADFS filesystem on dev nullb0. [ 281.361972][ T5408] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 281.643551][ T25] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 281.939185][ T25] usb 2-1: Using ep0 maxpacket: 8 [ 281.994527][ T25] usb 2-1: config index 0 descriptor too short (expected 1307, got 27) [ 282.004041][ T25] usb 2-1: config 0 has an invalid interface number: 0 but max is -1 [ 282.018918][ T25] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 282.028300][ T25] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 255, changing to 11 [ 282.048427][ T25] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 59391, setting to 1024 [ 282.149995][ T25] usb 2-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=c3.de [ 282.159700][ T25] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 282.168204][ T25] usb 2-1: Product: syz [ 282.172650][ T25] usb 2-1: Manufacturer: syz [ 282.177760][ T25] usb 2-1: SerialNumber: syz [ 282.253024][ T25] usb 2-1: config 0 descriptor?? [ 282.263905][ T5406] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 282.300319][ T25] hub 2-1:0.0: bad descriptor, ignoring hub [ 282.306893][ T25] hub 2-1:0.0: probe with driver hub failed with error -5 [ 282.324778][ T25] input: syz syz as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input6 [ 282.418234][ C0] usb_acecad 2-1:0.0: can't resubmit intr, dummy_hcd.1-1/input0, status -1 [ 282.776976][ T5120] usb 2-1: USB disconnect, device number 3 [ 283.931728][ T5426] loop0: detected capacity change from 0 to 512 [ 284.110358][ T5426] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a842e01c, mo2=0002] [ 284.168762][ T5426] System zones: 1-12 [ 284.240008][ T5426] EXT4-fs error (device loop0): ext4_get_branch:178: inode #13: block 33619980: comm syz.0.69: invalid block [ 284.317603][ T5426] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.69: invalid indirect mapped block 1819239214 (level 1) [ 284.508944][ T5426] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.69: bg 0: block 361: padding at end of block bitmap is not set [ 284.542599][ T5426] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6551: Corrupt filesystem [ 284.571561][ T5426] EXT4-fs error (device loop0): ext4_clear_blocks:883: inode #13: comm syz.0.69: attempt to clear invalid blocks 33619980 len 1 [ 284.587899][ T5426] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.69: invalid indirect mapped block 1819239214 (level 0) [ 284.628797][ T5426] EXT4-fs (loop0): 1 truncate cleaned up [ 284.637319][ T5426] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 285.174000][ T5441] loop3: detected capacity change from 0 to 8 [ 285.188433][ T5061] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 285.894438][ T5441] ADFS-fs (nullb0): error: can't find an ADFS filesystem on dev nullb0. [ 287.159824][ T5075] ===================================================== [ 287.167347][ T5075] BUG: KMSAN: uninit-value in hci_rx_work+0x10a8/0x1130 [ 287.174522][ T5075] hci_rx_work+0x10a8/0x1130 [ 287.180783][ T5075] process_scheduled_works+0xae0/0x1c40 [ 287.187271][ T5075] worker_thread+0xea5/0x1520 [ 287.192289][ T5075] kthread+0x3e2/0x540 [ 287.196951][ T5075] ret_from_fork+0x6d/0x90 [ 287.201588][ T5075] ret_from_fork_asm+0x1a/0x30 [ 287.206751][ T5075] [ 287.209194][ T5075] Uninit was created at: [ 287.214348][ T5075] kmem_cache_alloc_node_noprof+0x6bf/0xb80 [ 287.220834][ T5075] kmalloc_reserve+0x13d/0x4a0 [ 287.225867][ T5075] __alloc_skb+0x363/0x7b0 [ 287.230718][ T5075] vhci_write+0x128/0x910 [ 287.235292][ T5075] vfs_write+0xb2f/0x1550 [ 287.240228][ T5075] ksys_write+0x20f/0x4c0 [ 287.244809][ T5075] __ia32_sys_write+0x91/0xe0 [ 287.249950][ T5075] ia32_sys_call+0x2e34/0x40d0 [ 287.261731][ T5075] __do_fast_syscall_32+0xb0/0x110 [ 287.270793][ T5075] do_fast_syscall_32+0x38/0x80 [ 287.276027][ T5075] do_SYSENTER_32+0x1f/0x30 [ 287.281102][ T5075] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 287.287823][ T5075] [ 287.290288][ T5075] CPU: 1 PID: 5075 Comm: kworker/u9:7 Not tainted 6.10.0-syzkaller-11185-g2c9b3512402e #0 [ 287.300756][ T5075] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 287.311201][ T5075] Workqueue: hci2 hci_rx_work [ 287.316106][ T5075] ===================================================== [ 287.323425][ T5075] Disabling lock debugging due to kernel taint [ 287.329939][ T5075] Kernel panic - not syncing: kmsan.panic set ... [ 287.336512][ T5075] CPU: 1 PID: 5075 Comm: kworker/u9:7 Tainted: G B 6.10.0-syzkaller-11185-g2c9b3512402e #0 [ 287.348123][ T5075] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 287.358365][ T5075] Workqueue: hci2 hci_rx_work [ 287.363269][ T5075] Call Trace: [ 287.366785][ T5075] [ 287.369938][ T5075] dump_stack_lvl+0x216/0x2d0 [ 287.374852][ T5075] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 287.380932][ T5075] dump_stack+0x1e/0x30 [ 287.385309][ T5075] panic+0x4e2/0xcd0 [ 287.389421][ T5075] ? kmsan_get_metadata+0xf1/0x1d0 [ 287.394804][ T5075] kmsan_report+0x2d5/0x2e0 [ 287.399557][ T5075] ? kmsan_get_metadata+0x146/0x1d0 [ 287.405016][ T5075] ? __msan_warning+0x95/0x120 [ 287.410007][ T5075] ? hci_rx_work+0x10a8/0x1130 [ 287.415133][ T5075] ? process_scheduled_works+0xae0/0x1c40 [ 287.421064][ T5075] ? worker_thread+0xea5/0x1520 [ 287.426123][ T5075] ? kthread+0x3e2/0x540 [ 287.430611][ T5075] ? ret_from_fork+0x6d/0x90 [ 287.435391][ T5075] ? ret_from_fork_asm+0x1a/0x30 [ 287.440562][ T5075] ? filter_irq_stacks+0x60/0x1a0 [ 287.445938][ T5075] ? kmsan_get_metadata+0x146/0x1d0 [ 287.451385][ T5075] ? kmsan_get_metadata+0x146/0x1d0 [ 287.456850][ T5075] ? kmsan_internal_set_shadow_origin+0x69/0x100 [ 287.463434][ T5075] ? kmsan_get_metadata+0x146/0x1d0 [ 287.468888][ T5075] ? kmsan_get_metadata+0x146/0x1d0 [ 287.474350][ T5075] ? kmsan_get_metadata+0x146/0x1d0 [ 287.479797][ T5075] ? kmsan_get_metadata+0x146/0x1d0 [ 287.485281][ T5075] ? kmsan_internal_set_shadow_origin+0x69/0x100 [ 287.491951][ T5075] ? kmsan_get_metadata+0x146/0x1d0 [ 287.497400][ T5075] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 287.503467][ T5075] __msan_warning+0x95/0x120 [ 287.508293][ T5075] hci_rx_work+0x10a8/0x1130 [ 287.513097][ T5075] ? __pfx_hci_rx_work+0x10/0x10 [ 287.518222][ T5075] process_scheduled_works+0xae0/0x1c40 [ 287.524122][ T5075] worker_thread+0xea5/0x1520 [ 287.529020][ T5075] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 287.535112][ T5075] kthread+0x3e2/0x540 [ 287.539408][ T5075] ? __pfx_worker_thread+0x10/0x10 [ 287.544753][ T5075] ? __pfx_kthread+0x10/0x10 [ 287.549572][ T5075] ret_from_fork+0x6d/0x90 [ 287.554182][ T5075] ? __pfx_kthread+0x10/0x10 [ 287.559086][ T5075] ret_from_fork_asm+0x1a/0x30 [ 287.564094][ T5075] [ 287.567512][ T5075] Kernel Offset: disabled [ 287.572025][ T5075] Rebooting in 86400 seconds..