last executing test programs: 19.076088512s ago: executing program 2 (id=3): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x18, 0x7, &(0x7f0000000080)=ANY=[@ANYBLOB="180000"], 0x0, 0x1, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000}, 0x94) r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x810) 18.306228685s ago: executing program 2 (id=16): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x10, 0x4, 0x4, 0x2}, 0x50) bpf$MAP_GET_NEXT_KEY(0x3, &(0x7f0000000180)={r2, &(0x7f0000000040), 0x0}, 0x20) 9.509723386s ago: executing program 4 (id=47): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x6, 0x5) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) io_setup(0x1, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x2) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x1c, 0x7, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x1c}}, 0x0) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000000b00)={[{@user_xattr}, {@nodioread_nolock}, {@nodelalloc}]}, 0x1, 0x4a3, &(0x7f0000000580)="$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") close_range(r0, 0xffffffffffffffff, 0x0) 8.183062058s ago: executing program 4 (id=52): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x32}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="380000001000050700000000000400000000", @ANYRES32=r2, @ANYBLOB="00000016010000001800120008000100736974000c0002000800030036"], 0x38}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=@newlink={0x50, 0x10, 0x439, 0x70bd2c, 0xffffffea, {0x0, 0x0, 0xe403, r2, 0x408f3}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @sit={{0x8}, {0x24, 0x2, 0x0, 0x1, [@IFLA_IPTUN_PROTO={0x5, 0x9, 0x29}, @IFLA_IPTUN_6RD_RELAY_PREFIX={0x8, 0xc, 0x7ffffffe}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @multicast1}, @IFLA_IPTUN_6RD_RELAY_PREFIXLEN={0x6}]}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x8000}, 0x4040) 7.7987392s ago: executing program 1 (id=53): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x403, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x74, 0x0, 0x804, 0x55007}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_XFRM_LINK={0x8, 0x1, 0x2}, @IFLA_XFRM_IF_ID={0x8, 0x2, 0x2}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x800}, 0x0) 7.271012317s ago: executing program 2 (id=55): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @dev={0xac, 0x14, 0x14, 0x14}}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x30040043}, 0x240008c4) 7.26455429s ago: executing program 4 (id=56): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x103}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_open_procfs(0x0, &(0x7f0000001940)='net/snmp\x00') socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x14, 0x6c}, [@ldst={0x4}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x48) ioctl$PIO_UNIMAP(r0, 0x4b67, &(0x7f0000000040)={0x3ffffffffffffe96, &(0x7f0000000000)=[{0x2000, 0x5}]}) syz_usb_connect(0x0, 0x2d, 0x0, 0x0) 6.446266704s ago: executing program 1 (id=57): r0 = socket$kcm(0xa, 0x2, 0x73) sendmsg$inet(r0, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0x0, @multicast2}, 0x10, &(0x7f0000001080)=[{&(0x7f00000012c0)="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", 0xe05}, {&(0x7f0000001040)="9d7fcf3efc63f4a6a555ba8b4726d7ccaf8a207100e69cfac4377876021d7131b838059f96bd206d4776368ed2", 0x2d}], 0x2, &(0x7f00000010c0)=[@ip_ttl={{0x14}}, @ip_tos_u8={{0x11, 0x29, 0x4}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @broadcast, @remote}}}], 0x50}, 0x0) 5.055690725s ago: executing program 2 (id=58): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="020000000400000008"], 0x50) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$SNDRV_PCM_IOCTL_SYNC_PTR(0xffffffffffffffff, 0x40084146, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) chmod(0x0, 0x20e) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) ptrace$pokeuser(0x6, r2, 0x358, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='\'\x00\x00\x00\a'], 0x50) 4.482199417s ago: executing program 0 (id=59): unshare(0xa000400) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r0, 0x0, 0x0) connect$bt_sco(r0, &(0x7f0000000000)={0x1f, @none}, 0x8) 4.418142362s ago: executing program 1 (id=60): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a3000000000090003007379"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @queue={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_QUEUE_NUM={0x6, 0x1, 0x1, 0x0, 0x4004}, @NFTA_QUEUE_TOTAL={0x6, 0x2, 0x1, 0x0, 0x7}, @NFTA_QUEUE_FLAGS={0x6, 0x3, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x84}}, 0x0) 4.278858913s ago: executing program 3 (id=61): timer_create(0x3, &(0x7f0000533fa0)={0x0, 0x21}, &(0x7f00000001c0)) timer_settime(0x0, 0xd0b02c7ea12f0313, &(0x7f0000000100)={{0x0, 0x3938700}, {0x0, 0x9}}, 0x0) setrlimit(0xf, 0x0) mlock(&(0x7f0000bff000/0x400000)=nil, 0x400000) 4.02566041s ago: executing program 2 (id=62): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000100)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_NEIGHBORS(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="310300000000000000000900000008000600", @ANYRES32=r0, @ANYBLOB="08000300", @ANYRES64=r2], 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 3.733248324s ago: executing program 1 (id=63): unshare(0x2040400) syz_mount_image$ext4(&(0x7f0000000700)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x8052, &(0x7f00000001c0), 0x3, 0x515, &(0x7f0000001140)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000002c0)='.\x00', 0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r0, 0x8004587d, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x8000200000000000, 0x0, 0x85c, 0x5}) 3.715823316s ago: executing program 0 (id=64): r0 = socket$inet6(0xa, 0x3, 0x87) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000940)={{{@in=@private=0xa010100, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, {}, 0x9, 0x0, 0x1}, {{@in=@empty, 0x2000000, 0x33}, 0xa, @in6=@ipv4={'\x00', '\xff\xff', @local}, 0x0, 0x0, 0x1, 0x3}}, 0xe8) connect$inet6(r0, &(0x7f00000000c0), 0x1c) 3.291835542s ago: executing program 2 (id=65): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x10, 0x4, 0x4, 0x2}, 0x50) bpf$MAP_GET_NEXT_KEY(0x3, &(0x7f0000000180)={r2, &(0x7f0000000040), 0x0}, 0x20) 3.218528626s ago: executing program 0 (id=66): syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0xb8}, 0x1, 0x0, 0x0, 0x20000080}, 0x4004) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x10) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[], 0x80}, 0x1, 0x0, 0x0, 0x40048}, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000e00), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000001080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2c010000", @ANYRES16=r1, @ANYBLOB="01000000000000000000170000000c00060001000000010000000c01308014000400976f1044852bca665354bd217b6b9037200001800c0005000400000200000200080001000300000005000200030000000500020008000000240003"], 0x12c}, 0x1, 0x0, 0x0, 0x24004821}, 0x0) 2.772136262s ago: executing program 3 (id=67): setsockopt$inet6_mreq(0xffffffffffffffff, 0x11e, 0x1e, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, 0x0, 0x0) r1 = socket$kcm(0xa, 0x2, 0x0) r2 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000100)={{0x84, @remote, 0x4e24, 0x3, 'lblc\x00', 0x16, 0x2, 0x5}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e23, 0x0, 0x101c8, 0x12d61, 0x12d58}}, 0x44) setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, 0x0, 0x0) sendmsg$sock(r1, &(0x7f0000000080)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) 2.255419341s ago: executing program 0 (id=68): socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, 0x0, 0x48) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$can_j1939(0xffffffffffffffff, &(0x7f0000000380)={0x1d, 0x0, 0x1, {0x0, 0x1, 0x3}, 0xfe}, 0x18) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x3, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0000000206030000000000000000000000000005000100070000000900020073797a31000000001400078005001500070000000800124000000000050005000200000005000400000000000d000300686173683a6e6574"], 0x5c}}, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @dev={0xac, 0x14, 0x14, 0x14}}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x30040043}, 0x240008c4) 1.985762356s ago: executing program 3 (id=69): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xa, 0x0, 0x0, 0x0}, 0x94) r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a3000000000090003"], 0x7c}}, 0x0) r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000040), 0x8002) write$binfmt_aout(r1, &(0x7f0000000380)=ANY=[@ANYBLOB="03070000b5"], 0xc8) write$binfmt_aout(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="03040000b500000001008aea0000feff"], 0xc8) dup3(r1, r0, 0x0) 1.832790938s ago: executing program 1 (id=70): r0 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r0, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x3f, 0x2, 0x10, {0x2, 0x4e22, @empty}}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000ac0)="ee", 0xfffffe5e}], 0x1, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b57000000860f5878c37ffe36e1165814d435be5b317c6c8189587d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988ab013f40afe403041323110f62055394412158e7a3adb148d641aa40d4ab077fe34232aa8b31851466d0998a61d7da0c86d70000001010"], 0x10b8}, 0x8000) 1.642448187s ago: executing program 0 (id=71): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000001080)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r1 = socket(0x1e, 0x4, 0x0) r2 = syz_io_uring_setup(0x111, &(0x7f0000000140)={0x0, 0x334e, 0x10, 0x4, 0x312}, &(0x7f00000029c0)=0x0, &(0x7f0000000300)=0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.memory_pressure_enabled\x00', 0x275a, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x1, 0x7}) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$UHID_CREATE2(r5, &(0x7f00000001c0)=ANY=[@ANYBLOB="06"], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r5, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, 0x0, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0, 0x60, 0x185100}) io_uring_enter(r2, 0x7277, 0x0, 0x28, 0x0, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0) recvmmsg$unix(r1, &(0x7f0000004180)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000180)=""/103, 0x67}], 0x1}}], 0x1, 0x0, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) 1.635756782s ago: executing program 4 (id=72): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="020000000400000008"], 0x50) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$SNDRV_PCM_IOCTL_SYNC_PTR(0xffffffffffffffff, 0x40084146, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) chmod(0x0, 0x20e) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) ptrace$pokeuser(0x6, r2, 0x358, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='\'\x00\x00\x00\a'], 0x50) 1.118081071s ago: executing program 3 (id=73): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x32}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="38000000100005070000000000040000000000", @ANYRES32=r2, @ANYBLOB="00000016010000001800120008000100736974000c0002000800030036"], 0x38}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=@newlink={0x50, 0x10, 0x439, 0x70bd2c, 0xffffffea, {0x0, 0x0, 0xe403, r2, 0x408f3}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @sit={{0x8}, {0x24, 0x2, 0x0, 0x1, [@IFLA_IPTUN_PROTO={0x5, 0x9, 0x29}, @IFLA_IPTUN_6RD_RELAY_PREFIX={0x8, 0xc, 0x7ffffffe}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @multicast1}, @IFLA_IPTUN_6RD_RELAY_PREFIXLEN={0x6}]}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x8000}, 0x4040) 946.005556ms ago: executing program 4 (id=74): unshare(0xa000400) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r0, &(0x7f0000000280)={0x1f, @fixed}, 0x8) connect$bt_sco(r0, 0x0, 0x0) 572.682588ms ago: executing program 3 (id=75): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004ddffff8400fa002f00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) 372.693593ms ago: executing program 1 (id=76): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000840)={'batadv_slave_0\x00', 0x0}) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', r2}, 0x94) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000380)=ANY=[@ANYBLOB="340000001000010027bd70000000000000000000", @ANYRES32=r1, @ANYBLOB="004100000000000014002b8008000100", @ANYRES32=r3], 0x34}}, 0x4008000) 305.742939ms ago: executing program 4 (id=77): bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000010040), 0x0, 0xffffffffffffffff, 0x4}, 0x38) r0 = io_uring_setup(0xf08, &(0x7f00000003c0)={0x0, 0xfb6e, 0x38c1, 0x4, 0xf0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000020c0)=@newtaction={0x14, 0x30, 0x200, 0x70bd29, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x4040080) io_uring_register$IORING_REGISTER_FILES(r0, 0x20, 0x0, 0x0) 305.393361ms ago: executing program 0 (id=78): r0 = socket(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000005c0)={'ip6gretap0\x00', 0x0}) bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @remote}, 0x14) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0xe9, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x10, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61}, 0x94) sendmsg$netlink(r0, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000280)=ANY=[@ANYBLOB="3f011400dcdc14"], 0xdd12}], 0x1}, 0x20040051) 0s ago: executing program 3 (id=79): setsockopt$inet6_mreq(0xffffffffffffffff, 0x11e, 0x1e, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, 0x0, 0x0) r1 = socket$kcm(0xa, 0x2, 0x0) r2 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000100)={{0x84, @remote, 0x4e24, 0x3, 'lblc\x00', 0x16, 0x2, 0x5}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e23, 0x0, 0x101c8, 0x12d61, 0x12d58}}, 0x44) setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, 0x0, 0x0) sendmsg$sock(r1, &(0x7f0000000080)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.195' (ED25519) to the list of known hosts. [ 192.893119][ T5762] cgroup: Unknown subsys name 'net' [ 193.046477][ T5762] cgroup: Unknown subsys name 'cpuset' [ 193.062231][ T5762] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 199.576925][ T5762] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 204.531017][ T5786] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 204.540011][ T5786] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 204.550619][ T5786] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 204.562432][ T5786] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 204.574931][ T5786] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 204.588585][ T5786] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 204.597679][ T5786] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 204.597700][ T5789] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 204.616096][ T5786] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 204.618733][ T5789] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 204.632464][ T5786] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 204.646611][ T5793] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 204.655163][ T5793] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 204.667163][ T5793] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 204.694421][ T5786] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 204.704619][ T51] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 204.715737][ T51] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 204.727535][ T51] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 204.748423][ T51] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 204.759986][ T51] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 204.839604][ T5793] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 204.858161][ T5793] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 204.868832][ T5793] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 204.883734][ T5793] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 204.896336][ T5793] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 206.438613][ T5781] chnl_net:caif_netlink_parms(): no params data found [ 206.540742][ T5791] chnl_net:caif_netlink_parms(): no params data found [ 206.707089][ T5780] chnl_net:caif_netlink_parms(): no params data found [ 206.716491][ T5793] Bluetooth: hci1: command tx timeout [ 206.796123][ T5793] Bluetooth: hci0: command tx timeout [ 206.796657][ T51] Bluetooth: hci3: command tx timeout [ 206.801849][ T5787] Bluetooth: hci2: command tx timeout [ 206.956321][ T5793] Bluetooth: hci4: command tx timeout [ 206.980885][ T5794] chnl_net:caif_netlink_parms(): no params data found [ 207.192679][ T5782] chnl_net:caif_netlink_parms(): no params data found [ 207.854105][ T5781] bridge0: port 1(bridge_slave_0) entered blocking state [ 207.866507][ T5781] bridge0: port 1(bridge_slave_0) entered disabled state [ 207.874809][ T5781] bridge_slave_0: entered allmulticast mode [ 207.895752][ T5781] bridge_slave_0: entered promiscuous mode [ 207.992522][ T5781] bridge0: port 2(bridge_slave_1) entered blocking state [ 208.004143][ T5781] bridge0: port 2(bridge_slave_1) entered disabled state [ 208.017168][ T5781] bridge_slave_1: entered allmulticast mode [ 208.028861][ T5781] bridge_slave_1: entered promiscuous mode [ 208.118282][ T5780] bridge0: port 1(bridge_slave_0) entered blocking state [ 208.126012][ T5780] bridge0: port 1(bridge_slave_0) entered disabled state [ 208.138222][ T5780] bridge_slave_0: entered allmulticast mode [ 208.149087][ T5780] bridge_slave_0: entered promiscuous mode [ 208.201104][ T5791] bridge0: port 1(bridge_slave_0) entered blocking state [ 208.208804][ T5791] bridge0: port 1(bridge_slave_0) entered disabled state [ 208.246138][ T5791] bridge_slave_0: entered allmulticast mode [ 208.278769][ T5791] bridge_slave_0: entered promiscuous mode [ 208.303795][ T5780] bridge0: port 2(bridge_slave_1) entered blocking state [ 208.313510][ T5780] bridge0: port 2(bridge_slave_1) entered disabled state [ 208.329920][ T5780] bridge_slave_1: entered allmulticast mode [ 208.340818][ T5780] bridge_slave_1: entered promiscuous mode [ 208.371416][ T5781] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 208.384902][ T5791] bridge0: port 2(bridge_slave_1) entered blocking state [ 208.392759][ T5791] bridge0: port 2(bridge_slave_1) entered disabled state [ 208.400672][ T5791] bridge_slave_1: entered allmulticast mode [ 208.409712][ T5791] bridge_slave_1: entered promiscuous mode [ 208.487346][ T5781] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 208.697260][ T5794] bridge0: port 1(bridge_slave_0) entered blocking state [ 208.704837][ T5794] bridge0: port 1(bridge_slave_0) entered disabled state [ 208.713246][ T5794] bridge_slave_0: entered allmulticast mode [ 208.722197][ T5794] bridge_slave_0: entered promiscuous mode [ 208.743075][ T5780] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 208.789103][ T5791] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 208.797031][ T5793] Bluetooth: hci1: command tx timeout [ 208.804930][ T5782] bridge0: port 1(bridge_slave_0) entered blocking state [ 208.812871][ T5782] bridge0: port 1(bridge_slave_0) entered disabled state [ 208.821837][ T5782] bridge_slave_0: entered allmulticast mode [ 208.830685][ T5782] bridge_slave_0: entered promiscuous mode [ 208.843120][ T5794] bridge0: port 2(bridge_slave_1) entered blocking state [ 208.850963][ T5794] bridge0: port 2(bridge_slave_1) entered disabled state [ 208.859296][ T5794] bridge_slave_1: entered allmulticast mode [ 208.868679][ T5794] bridge_slave_1: entered promiscuous mode [ 208.876095][ T5793] Bluetooth: hci3: command tx timeout [ 208.881774][ T5787] Bluetooth: hci0: command tx timeout [ 208.881874][ T51] Bluetooth: hci2: command tx timeout [ 208.903935][ T5780] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 208.921607][ T5781] team0: Port device team_slave_0 added [ 208.936921][ T5791] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 208.947589][ T5782] bridge0: port 2(bridge_slave_1) entered blocking state [ 208.955147][ T5782] bridge0: port 2(bridge_slave_1) entered disabled state [ 208.963291][ T5782] bridge_slave_1: entered allmulticast mode [ 208.972798][ T5782] bridge_slave_1: entered promiscuous mode [ 209.035856][ T51] Bluetooth: hci4: command tx timeout [ 209.053242][ T5781] team0: Port device team_slave_1 added [ 209.210547][ T5780] team0: Port device team_slave_0 added [ 209.283141][ T5794] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 209.328464][ T5780] team0: Port device team_slave_1 added [ 209.342046][ T5791] team0: Port device team_slave_0 added [ 209.358942][ T5782] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 209.377725][ T5794] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 209.389795][ T5781] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 209.397341][ T5781] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 209.423764][ T5781] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 209.490197][ T5791] team0: Port device team_slave_1 added [ 209.506483][ T5782] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 209.574223][ T5781] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 209.581638][ T5781] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 209.608169][ T5781] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 209.757328][ T5780] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 209.764484][ T5780] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 209.790912][ T5780] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 209.842433][ T5782] team0: Port device team_slave_0 added [ 209.856896][ T5794] team0: Port device team_slave_0 added [ 209.876025][ T5794] team0: Port device team_slave_1 added [ 209.884157][ T5780] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 209.891462][ T5780] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 209.918049][ T5780] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 209.932374][ T5791] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 209.939864][ T5791] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 209.966228][ T5791] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 209.986568][ T5782] team0: Port device team_slave_1 added [ 210.080689][ T5791] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 210.088081][ T5791] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 210.114364][ T5791] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 210.183782][ T5794] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 210.191098][ T5794] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 210.217538][ T5794] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 210.235994][ T5794] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 210.243170][ T5794] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 210.269476][ T5794] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 210.376161][ T5781] hsr_slave_0: entered promiscuous mode [ 210.385197][ T5781] hsr_slave_1: entered promiscuous mode [ 210.419910][ T5782] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 210.427230][ T5782] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 210.453507][ T5782] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 210.546953][ T5782] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 210.554076][ T5782] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 210.580536][ T5782] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 210.623612][ T5780] hsr_slave_0: entered promiscuous mode [ 210.633119][ T5780] hsr_slave_1: entered promiscuous mode [ 210.642016][ T5780] debugfs: 'hsr0' already exists in 'hsr' [ 210.648124][ T5780] Cannot create hsr debugfs directory [ 210.877570][ T51] Bluetooth: hci1: command tx timeout [ 210.890479][ T5791] hsr_slave_0: entered promiscuous mode [ 210.899909][ T5791] hsr_slave_1: entered promiscuous mode [ 210.908870][ T5791] debugfs: 'hsr0' already exists in 'hsr' [ 210.914805][ T5791] Cannot create hsr debugfs directory [ 210.935272][ T5794] hsr_slave_0: entered promiscuous mode [ 210.944369][ T5794] hsr_slave_1: entered promiscuous mode [ 210.953037][ T5794] debugfs: 'hsr0' already exists in 'hsr' [ 210.959065][ T5794] Cannot create hsr debugfs directory [ 210.965472][ T51] Bluetooth: hci0: command tx timeout [ 210.965931][ T5787] Bluetooth: hci3: command tx timeout [ 210.971390][ T51] Bluetooth: hci2: command tx timeout [ 211.115877][ T51] Bluetooth: hci4: command tx timeout [ 211.365199][ T5782] hsr_slave_0: entered promiscuous mode [ 211.374820][ T5782] hsr_slave_1: entered promiscuous mode [ 211.383966][ T5782] debugfs: 'hsr0' already exists in 'hsr' [ 211.390005][ T5782] Cannot create hsr debugfs directory [ 212.563659][ T5781] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 212.588739][ T5781] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 212.624532][ T5781] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 212.647390][ T5781] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 212.770740][ T5780] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 212.827294][ T5780] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 212.850156][ T5780] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 212.872811][ T5780] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 212.956540][ T51] Bluetooth: hci1: command tx timeout [ 213.036046][ T51] Bluetooth: hci3: command tx timeout [ 213.038153][ T5787] Bluetooth: hci2: command tx timeout [ 213.041789][ T5793] Bluetooth: hci0: command tx timeout [ 213.122125][ T5794] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 213.160521][ T5794] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 213.180964][ T5794] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 213.196097][ T51] Bluetooth: hci4: command tx timeout [ 213.244277][ T5794] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 213.520076][ T5782] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 213.545136][ T5782] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 213.567374][ T5782] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 213.640439][ T5782] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 214.011463][ T5791] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 214.048095][ T5791] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 214.108126][ T5791] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 214.152760][ T5791] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 214.286699][ T5781] 8021q: adding VLAN 0 to HW filter on device bond0 [ 214.346708][ T5780] 8021q: adding VLAN 0 to HW filter on device bond0 [ 214.576438][ T5780] 8021q: adding VLAN 0 to HW filter on device team0 [ 214.621774][ T5781] 8021q: adding VLAN 0 to HW filter on device team0 [ 214.665012][ T5794] 8021q: adding VLAN 0 to HW filter on device bond0 [ 214.713404][ T1139] bridge0: port 1(bridge_slave_0) entered blocking state [ 214.721051][ T1139] bridge0: port 1(bridge_slave_0) entered forwarding state [ 214.740775][ T1139] bridge0: port 1(bridge_slave_0) entered blocking state [ 214.748362][ T1139] bridge0: port 1(bridge_slave_0) entered forwarding state [ 214.833898][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 214.841600][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 214.869463][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 214.877183][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 215.039765][ T5794] 8021q: adding VLAN 0 to HW filter on device team0 [ 215.151670][ T5782] 8021q: adding VLAN 0 to HW filter on device bond0 [ 215.167647][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 215.175078][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 215.302727][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 215.310453][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 215.592731][ T5782] 8021q: adding VLAN 0 to HW filter on device team0 [ 215.782777][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 215.790584][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 215.881107][ T5791] 8021q: adding VLAN 0 to HW filter on device bond0 [ 215.924675][ T1139] bridge0: port 2(bridge_slave_1) entered blocking state [ 215.932343][ T1139] bridge0: port 2(bridge_slave_1) entered forwarding state [ 216.154380][ T5791] 8021q: adding VLAN 0 to HW filter on device team0 [ 216.319864][ T1024] bridge0: port 1(bridge_slave_0) entered blocking state [ 216.327513][ T1024] bridge0: port 1(bridge_slave_0) entered forwarding state [ 216.491341][ T1024] bridge0: port 2(bridge_slave_1) entered blocking state [ 216.499130][ T1024] bridge0: port 2(bridge_slave_1) entered forwarding state [ 216.787429][ T5781] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 217.376605][ T5780] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 217.772289][ T5781] veth0_vlan: entered promiscuous mode [ 217.923681][ T5794] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 217.964914][ T5781] veth1_vlan: entered promiscuous mode [ 218.213864][ T5780] veth0_vlan: entered promiscuous mode [ 218.361113][ T5782] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 218.383612][ T5780] veth1_vlan: entered promiscuous mode [ 218.399504][ T5781] veth0_macvtap: entered promiscuous mode [ 218.465435][ T5781] veth1_macvtap: entered promiscuous mode [ 218.699683][ T5791] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 218.759100][ T5794] veth0_vlan: entered promiscuous mode [ 218.843602][ T5781] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 218.882994][ T5781] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 218.962054][ T5794] veth1_vlan: entered promiscuous mode [ 219.004291][ T1043] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.080629][ T1043] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.098658][ T1043] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.160685][ T13] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.201921][ T5780] veth0_macvtap: entered promiscuous mode [ 219.322921][ T5780] veth1_macvtap: entered promiscuous mode [ 219.570606][ T5780] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 219.692011][ T5791] veth0_vlan: entered promiscuous mode [ 219.726324][ T5794] veth0_macvtap: entered promiscuous mode [ 219.775266][ T5780] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 219.881354][ T5794] veth1_macvtap: entered promiscuous mode [ 219.931404][ T5791] veth1_vlan: entered promiscuous mode [ 219.978022][ T35] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.073576][ T35] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.143157][ T35] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.216962][ T35] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.314883][ T5794] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 220.469223][ T5794] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 220.532355][ T5791] veth0_macvtap: entered promiscuous mode [ 220.563787][ T5782] veth0_vlan: entered promiscuous mode [ 220.626485][ T5791] veth1_macvtap: entered promiscuous mode [ 220.738263][ T1139] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.789622][ T1024] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.802626][ T5782] veth1_vlan: entered promiscuous mode [ 220.833442][ T1024] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.890608][ T1024] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.941371][ T5791] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 221.064025][ T5791] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 221.178490][ T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.232231][ T1043] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.281944][ T1024] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.375871][ T1024] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.489470][ T5782] veth0_macvtap: entered promiscuous mode [ 221.584913][ T5782] veth1_macvtap: entered promiscuous mode [ 221.883959][ T5782] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 222.028918][ T5782] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 222.219379][ T1133] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.271055][ T1133] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.340994][ T1133] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.365921][ T1133] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 225.288677][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 225.297138][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 225.622957][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 225.631255][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 226.262915][ T5781] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 226.944353][ T5958] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 227.069708][ T1043] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 227.078562][ T1043] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 227.431234][ T62] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 227.445030][ T62] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 228.292028][ T1043] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 228.301964][ T1043] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 228.867877][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 228.878008][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 229.066203][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 229.074413][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 229.584649][ T1043] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 229.594087][ T1043] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 229.953689][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 229.962119][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 230.212107][ T62] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 230.220469][ T62] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 230.973559][ T5990] loop3: detected capacity change from 0 to 1024 [ 231.068976][ T5990] ======================================================= [ 231.068976][ T5990] WARNING: The mand mount option has been deprecated and [ 231.068976][ T5990] and is ignored by this kernel. Remove the mand [ 231.068976][ T5990] option from the mount to silence this warning. [ 231.068976][ T5990] ======================================================= [ 231.235080][ T5990] EXT4-fs: Ignoring removed bh option [ 231.325252][ T5990] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 231.525273][ T30] audit: type=1326 audit(1769496743.117:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6003 comm="syz.0.15" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40e1f9aeb9 code=0x7ffc0000 [ 231.548473][ T30] audit: type=1326 audit(1769496743.117:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6003 comm="syz.0.15" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40e1f9aeb9 code=0x7ffc0000 [ 231.625217][ T30] audit: type=1326 audit(1769496743.207:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6003 comm="syz.0.15" exe="/root/syz-executor" sig=0 arch=c000003e syscall=424 compat=0 ip=0x7f40e1f9aeb9 code=0x7ffc0000 [ 231.639406][ T5990] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:483: comm syz.3.11: Invalid block bitmap block 0 in block_group 0 [ 231.649084][ T30] audit: type=1326 audit(1769496743.207:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6003 comm="syz.0.15" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40e1f9aeb9 code=0x7ffc0000 [ 231.688328][ T30] audit: type=1326 audit(1769496743.207:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6003 comm="syz.0.15" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40e1f9aeb9 code=0x7ffc0000 [ 231.746776][ T5990] EXT4-fs (loop3): Remounting filesystem read-only [ 231.754162][ T5990] Quota error (device loop3): write_blk: dquota write failed [ 231.763430][ T5990] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 231.876983][ T5990] EXT4-fs (loop3): 1 orphan inode deleted [ 231.885291][ T5990] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 232.168283][ T5990] syz.3.11 (5990) used greatest stack depth: 3144 bytes left [ 232.192705][ T6014] netlink: 'syz.1.18': attribute type 10 has an invalid length. [ 232.203047][ T6014] bridge0: port 2(bridge_slave_1) entered disabled state [ 232.212944][ T6014] bridge0: port 1(bridge_slave_0) entered disabled state [ 232.279408][ T5794] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 232.354963][ T6014] bridge0: port 2(bridge_slave_1) entered blocking state [ 232.362734][ T6014] bridge0: port 2(bridge_slave_1) entered forwarding state [ 232.371824][ T6014] bridge0: port 1(bridge_slave_0) entered blocking state [ 232.379557][ T6014] bridge0: port 1(bridge_slave_0) entered forwarding state [ 232.519505][ T6014] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 233.426104][ T5838] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 233.632966][ T5838] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 233.643251][ T5838] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 233.654047][ T5838] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 233.704824][ T5838] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 233.748269][ T5838] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 233.758506][ T5838] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 233.774873][ T5838] usb 5-1: Product: syz [ 233.782718][ T5838] usb 5-1: Manufacturer: syz [ 233.927164][ T5838] cdc_wdm 5-1:1.0: skipping garbage [ 233.947175][ T5838] cdc_wdm 5-1:1.0: skipping garbage [ 234.011388][ T5838] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 234.017897][ T5838] cdc_wdm 5-1:1.0: Unknown control protocol [ 234.204796][ T5837] usb 5-1: USB disconnect, device number 2 [ 234.722287][ T5837] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 234.913102][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 234.920039][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 234.970989][ T5837] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 234.980113][ T5837] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 234.991705][ T5837] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 235.037168][ T6039] loop1: detected capacity change from 0 to 512 [ 235.056948][ T5837] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 235.073061][ T6039] /dev/loop1: Can't open blockdev [ 235.117682][ T5837] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 235.128767][ T5837] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 235.138125][ T5837] usb 5-1: Product: syz [ 235.142526][ T5837] usb 5-1: Manufacturer: syz [ 235.323088][ T5837] cdc_wdm 5-1:1.0: skipping garbage [ 235.328787][ T5837] cdc_wdm 5-1:1.0: skipping garbage [ 235.397571][ T5837] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 235.407054][ T5837] cdc_wdm 5-1:1.0: Unknown control protocol [ 235.756455][ T5793] Bluetooth: hci4: command 0x0405 tx timeout [ 236.186815][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 236.193711][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 236.201030][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 236.207875][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 236.214668][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 236.221501][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 236.236917][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 236.244228][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 236.258927][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 236.265824][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 236.272851][ T5837] usb 5-1: USB disconnect, device number 3 [ 236.279468][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 236.279598][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 236.279709][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 236.886157][ T5837] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 237.185988][ T5837] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 237.195025][ T5837] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 237.205833][ T5837] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 237.276452][ T5837] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 237.344070][ T5837] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 237.354627][ T5837] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 237.365359][ T5837] usb 5-1: Product: syz [ 237.370420][ T5837] usb 5-1: Manufacturer: syz [ 237.480555][ T5837] cdc_wdm 5-1:1.0: skipping garbage [ 237.490330][ T5837] cdc_wdm 5-1:1.0: skipping garbage [ 237.581590][ T5837] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 237.588633][ T5837] cdc_wdm 5-1:1.0: Unknown control protocol [ 237.819881][ T5837] usb 5-1: USB disconnect, device number 4 [ 238.637837][ T6067] netlink: 4 bytes leftover after parsing attributes in process `syz.4.39'. [ 240.595032][ T6086] loop4: detected capacity change from 0 to 512 [ 240.831734][ T6086] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 240.906349][ T6086] ext4 filesystem being mounted at /7/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 241.168780][ T6092] loop3: detected capacity change from 0 to 512 [ 241.369578][ T6092] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 241.385142][ T6094] Illegal XDP return value 4294967294 on prog (id 2) dev syz_tun, expect packet loss! [ 241.466819][ T6092] ext4 filesystem being mounted at /6/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 241.510656][ T5782] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 242.185201][ T6100] netlink: 4 bytes leftover after parsing attributes in process `syz.4.52'. [ 242.564473][ T5794] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 246.399742][ T6131] loop1: detected capacity change from 0 to 512 [ 246.658951][ T6131] EXT4-fs error (device loop1): ext4_get_branch:178: inode #11: block 4294967295: comm syz.1.63: invalid block [ 246.799677][ T6131] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.63: invalid indirect mapped block 4294967295 (level 1) [ 246.860160][ T6131] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.63: invalid indirect mapped block 4294967295 (level 1) [ 246.957749][ T6131] EXT4-fs (loop1): 2 truncates cleaned up [ 246.969308][ T6131] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 247.005966][ T6139] netlink: 168 bytes leftover after parsing attributes in process `syz.0.66'. [ 247.188350][ T6131] EXT4-fs (loop1): shut down requested (0) [ 247.676377][ T5793] Bluetooth: hci4: command 0x0405 tx timeout [ 247.851314][ T5781] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 248.827775][ T6156] netlink: 24 bytes leftover after parsing attributes in process `syz.3.73'. [ 249.799932][ T6165] erspan0: entered promiscuous mode [ 249.812801][ T6166] ===================================================== [ 249.820268][ T6166] BUG: KMSAN: uninit-value in validate_xmit_skb+0x14e1/0x2400 [ 249.828186][ T6166] validate_xmit_skb+0x14e1/0x2400 [ 249.833561][ T6166] validate_xmit_skb_list+0xd4/0x320 [ 249.839473][ T6166] sch_direct_xmit+0xd4/0xcf0 [ 249.844420][ T6166] __dev_queue_xmit+0x2f2d/0x5890 [ 249.849879][ T6166] packet_xmit+0x8f/0x710 [ 249.854447][ T6166] packet_sendmsg+0x91d9/0xa320 [ 249.859676][ T6166] ____sys_sendmsg+0xfe7/0x1080 [ 249.864800][ T6166] ___sys_sendmsg+0x271/0x3b0 [ 249.869836][ T6166] __x64_sys_sendmsg+0x211/0x3e0 [ 249.874973][ T6166] x64_sys_call+0x1c60/0x3e70 [ 249.880074][ T6166] do_syscall_64+0xc9/0xf80 [ 249.884811][ T6166] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 249.891104][ T6166] [ 249.893543][ T6166] Uninit was stored to memory at: [ 249.899006][ T6166] validate_xmit_skb+0x14da/0x2400 [ 249.904370][ T6166] validate_xmit_skb_list+0xd4/0x320 [ 249.910104][ T6166] sch_direct_xmit+0xd4/0xcf0 [ 249.915006][ T6166] __dev_queue_xmit+0x2f2d/0x5890 [ 249.920457][ T6166] packet_xmit+0x8f/0x710 [ 249.925024][ T6166] packet_sendmsg+0x91d9/0xa320 [ 249.930267][ T6166] ____sys_sendmsg+0xfe7/0x1080 [ 249.935398][ T6166] ___sys_sendmsg+0x271/0x3b0 [ 249.940374][ T6166] __x64_sys_sendmsg+0x211/0x3e0 [ 249.945667][ T6166] x64_sys_call+0x1c60/0x3e70 [ 249.950616][ T6166] do_syscall_64+0xc9/0xf80 [ 249.955343][ T6166] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 249.961618][ T6166] [ 249.964047][ T6166] Uninit was created at: [ 249.968749][ T6166] kmem_cache_alloc_node_noprof+0x9de/0x1780 [ 249.974945][ T6166] kmalloc_reserve+0x13c/0x4b0 [ 249.980110][ T6166] __alloc_skb+0x805/0x1030 [ 249.984843][ T6166] alloc_skb_with_frags+0xc5/0xa60 [ 249.990362][ T6166] sock_alloc_send_pskb+0xacb/0xc60 [ 249.995880][ T6166] packet_sendmsg+0x7477/0xa320 [ 250.000951][ T6166] ____sys_sendmsg+0xfe7/0x1080 [ 250.006240][ T6166] ___sys_sendmsg+0x271/0x3b0 [ 250.011118][ T6166] __x64_sys_sendmsg+0x211/0x3e0 [ 250.016449][ T6166] x64_sys_call+0x1c60/0x3e70 [ 250.021390][ T6166] do_syscall_64+0xc9/0xf80 [ 250.026327][ T6166] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 250.032471][ T6166] [ 250.034959][ T6166] CPU: 1 UID: 0 PID: 6166 Comm: syz.0.78 Not tainted syzkaller #0 PREEMPT(voluntary) [ 250.044954][ T6166] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 250.055400][ T6166] ===================================================== [ 250.062566][ T6166] Disabling lock debugging due to kernel taint [ 250.069065][ T6166] Kernel panic - not syncing: kmsan.panic set ... [ 250.075668][ T6166] CPU: 1 UID: 0 PID: 6166 Comm: syz.0.78 Tainted: G B syzkaller #0 PREEMPT(voluntary) [ 250.087030][ T6166] Tainted: [B]=BAD_PAGE [ 250.091319][ T6166] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 250.101570][ T6166] Call Trace: [ 250.104993][ T6166] [ 250.108055][ T6166] __dump_stack+0x26/0x30 [ 250.112628][ T6166] dump_stack_lvl+0x50/0x1c0 [ 250.117468][ T6166] ? dump_stack+0x12/0x25 [ 250.122024][ T6166] dump_stack+0x1e/0x25 [ 250.126429][ T6166] vpanic+0x435/0xd40 [ 250.130670][ T6166] panic+0x15d/0x160 [ 250.134849][ T6166] kmsan_report+0x31a/0x320 [ 250.139613][ T6166] ? __msan_warning+0x1b/0x30 [ 250.144530][ T6166] ? validate_xmit_skb+0x14e1/0x2400 [ 250.150065][ T6166] ? validate_xmit_skb_list+0xd4/0x320 [ 250.155783][ T6166] ? sch_direct_xmit+0xd4/0xcf0 [ 250.160863][ T6166] ? __dev_queue_xmit+0x2f2d/0x5890 [ 250.166316][ T6166] ? packet_xmit+0x8f/0x710 [ 250.171059][ T6166] ? packet_sendmsg+0x91d9/0xa320 [ 250.176317][ T6166] ? ____sys_sendmsg+0xfe7/0x1080 [ 250.181639][ T6166] ? ___sys_sendmsg+0x271/0x3b0 [ 250.186710][ T6166] ? __x64_sys_sendmsg+0x211/0x3e0 [ 250.192081][ T6166] ? x64_sys_call+0x1c60/0x3e70 [ 250.197192][ T6166] ? do_syscall_64+0xc9/0xf80 [ 250.202112][ T6166] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 250.208409][ T6166] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 250.214716][ T6166] ? skb_network_protocol+0x898/0xaa0 [ 250.220378][ T6166] ? kmsan_get_metadata+0xf1/0x160 [ 250.225770][ T6166] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 250.231871][ T6166] ? netif_skb_features+0x1788/0x2160 [ 250.237555][ T6166] ? kmsan_get_metadata+0xf1/0x160 [ 250.242956][ T6166] __msan_warning+0x1b/0x30 [ 250.247699][ T6166] validate_xmit_skb+0x14e1/0x2400 [ 250.253075][ T6166] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 250.259174][ T6166] ? filter_irq_stacks+0x49/0x190 [ 250.264477][ T6166] validate_xmit_skb_list+0xd4/0x320 [ 250.270053][ T6166] sch_direct_xmit+0xd4/0xcf0 [ 250.274970][ T6166] ? kmsan_get_metadata+0x146/0x160 [ 250.280446][ T6166] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 250.287065][ T6166] __dev_queue_xmit+0x2f2d/0x5890 [ 250.292572][ T6166] ? kmsan_get_metadata+0xf1/0x160 [ 250.297965][ T6166] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 250.304082][ T6166] ? __dev_queue_xmit+0x27d/0x5890 [ 250.309550][ T6166] packet_xmit+0x8f/0x710 [ 250.314133][ T6166] ? kmsan_get_metadata+0xf1/0x160 [ 250.319530][ T6166] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 250.325629][ T6166] packet_sendmsg+0x91d9/0xa320 [ 250.330711][ T6166] ? kmsan_get_metadata+0xf1/0x160 [ 250.336103][ T6166] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 250.342274][ T6166] ? aa_label_sk_perm+0x759/0x810 [ 250.347526][ T6166] ? tomoyo_socket_bind_permission+0x2e1/0x370 [ 250.353946][ T6166] ? filter_irq_stacks+0x49/0x190 [ 250.359201][ T6166] ? sg_free_table_chained+0x90/0x110 [ 250.364786][ T6166] ? kmsan_get_metadata+0xf1/0x160 [ 250.370223][ T6166] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 250.376944][ T6166] ? __pfx_packet_sendmsg+0x10/0x10 [ 250.382380][ T6166] ? __pfx_packet_sendmsg+0x10/0x10 [ 250.387820][ T6166] ____sys_sendmsg+0xfe7/0x1080 [ 250.392994][ T6166] ___sys_sendmsg+0x271/0x3b0 [ 250.397866][ T6166] ? kmsan_get_metadata+0xf1/0x160 [ 250.403276][ T6166] ? __rcu_read_unlock+0x6c/0xd0 [ 250.408442][ T6166] ? __fget_files+0x3b4/0x4a0 [ 250.413389][ T6166] ? __fget_files+0x3b9/0x4a0 [ 250.418339][ T6166] ? kmsan_get_metadata+0xf1/0x160 [ 250.423732][ T6166] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 250.429830][ T6166] __x64_sys_sendmsg+0x211/0x3e0 [ 250.435000][ T6166] ? kmsan_get_metadata+0xf1/0x160 [ 250.440415][ T6166] x64_sys_call+0x1c60/0x3e70 [ 250.445359][ T6166] do_syscall_64+0xc9/0xf80 [ 250.450117][ T6166] ? clear_bhb_loop+0x40/0x90 [ 250.455050][ T6166] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 250.461216][ T6166] RIP: 0033:0x7f40e1f9aeb9 [ 250.465819][ T6166] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 250.485658][ T6166] RSP: 002b:00007f40e2e2d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 250.494307][ T6166] RAX: ffffffffffffffda RBX: 00007f40e2215fa0 RCX: 00007f40e1f9aeb9 [ 250.502472][ T6166] RDX: 0000000020040051 RSI: 0000200000002ac0 RDI: 0000000000000003 [ 250.510629][ T6166] RBP: 00007f40e2008c1f R08: 0000000000000000 R09: 0000000000000000 [ 250.518789][ T6166] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 250.526924][ T6166] R13: 00007f40e2216038 R14: 00007f40e2215fa0 R15: 00007ffe5faacad8 [ 250.535093][ T6166] [ 250.538874][ T6166] Kernel Offset: disabled [ 250.543287][ T6166] Rebooting in 86400 seconds..