last executing test programs: 5.820495041s ago: executing program 3 (id=115): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x7}, 0x8) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000200)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c, &(0x7f0000000580)=[{&(0x7f0000000240)='\x00', 0x1}], 0x1}}], 0x1, 0x0) 5.242358948s ago: executing program 4 (id=117): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='syzkaller\x00', 0x3, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0xffffffff, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10) r2 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r3 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r3, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) write$qrtrtun(r2, &(0x7f0000000280)="ca1c808bb35bdabb49f35c09d456591f0c15", 0x12) write$qrtrtun(r2, &(0x7f0000000c00)="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", 0x235) write$UHID_INPUT(r2, &(0x7f0000001300)={0x8, {"af0014920c989bde943127351c7e048fe805d44569c987d51286ac5e80b0961cfe3629729c82e28c53b31e3ecbb8722bff9c0906027d5cb6fbd929cb4b5e657cc88a443809e6a720828c27b6519e7c18904d67528373733934aa5240afd60544d489e1ec3779ac45095c12c6c5f13c086306dfbbd31926b74150ff2c87db2be1d995e9b3a16fb7360de12618b05d94c291acfcdab84c919de60133f54a0a18d2517c1d0de417ae39fec1c9fa306573205051a9880da1f213b9a27c22b72d42d92b7b260b41bcc1868a0404936774ea5209f02929ec3eef4298818ddb708de6c0e1fda05436037d7d4042d2de3adebc8a62f58ec6ccb4160435c4393ba913250b56ec2fce544a01a5a3ce4363fd497fb256910f31e9416f5b719d64f931bd6d71b54787841b3e49e01fe6ac9598ddb5ef1aeb3d1cabb75845d46806a494b6cf89ec9c8203b92dd0dadc5a3c02545cd005b5f26b7d2b848cb684cb58245d591472d5109e7fbe1175656d729fdd689af57802b33d7d53d427aa57eb0af7a63d9f73be83cd9c12bd06463083b4cc853aad416e9faf484fa069d3b7599b6fc6d94152811403201b91da2547ff6721b0ea237c37464b47b3b4f37384e50ba5773a63356991a5abef659e089cc95e5c3b6d8428115efcf9e89e2743b167d7b9824392d868c159fd1264bea8b9b8b26769d15a27df3af350e2a6e9e37b35c153bf980e8ad15de3b0f3add5f98eb2cbc03eeb2b04e6fb032991d7a88b14c7d2cf2959fc4ed27c4c93c13f5760d0803f10afb91effb45967b4793c58e4bc2e4348c93b4e59f1544a01e89530f6056cda3f972050ae79d9297af71cce0d82c764db2422967f05c9847715c66321e8ab0075a361e8fd78a956074945e687ec1ad01f8dfeb7f3ae2c25daff35617a5d752ad5b019689f10c789d0196f73011f5a4e002aebb676ccb2d8b92ff6c1eb60de10ed0d42f2d19fe96786938eca0fd09a3f16f7b52ef806183282c05ff9fccf96abd096b442c73c494c78c4161ce0599bf6e637664f5dbefa129e69a0d53525d77f871716052385649c1249a402a4a9ecadfd7182a4aba3fc48d76890dfe8a5442ff1b833b95fdb7ae5f052e5c18e9b0ad482ed80c4567f0d0645e6525e3390195b3a4314ab063ffca639d2b181efe15d5bb09e967900fd55ad9db7f6ba99268e0d7e2785c5b14f801b16b6fe9966bb3fa88352bc2ca79aa9a77ec5f9c271dcc62b6124a4d5ed1014fa6eb98521d4be4ca4323311d39e44002e71469326056d98af69fd42eed1dfec48d191587b35e2641abe8c80a2553b92cb43feea49505b5b5ca35dfaf06c693730033ebcad45b6b8026d4722b5c7e13d69269808f438816f77a7b1ed2d31ab44968657e70a51e8d98e520e3628014a09e55f36ca5c4c630d687b20e5a7bdfd6d43613fd3738c8ec1464561586987388885b7a424c949a3110e5de795ffdcf1ef43fb8b5b0364cdb0e9a62c1c6922f08125d456f0ee5d58fa670ff071a8d5b57c06efe30d960f9a67d3dd7dd6ec13c799f9b89d90593ba794c5c582f8bd583af0a59043a1da36cee8e2cc173610960e33300ec48cf7281887ffe66e7ec113a29ed339556d84d638ae9554bb20f2a7695da8bcad10e5f155fe5d54eb511087f7abb4a8ae9e78e233b1e079a44c9cdf2529ed3166c24f80a2bda3b2dfdd2e1c2f650cc35fccf8cb17c03681c6f379f535eeaf46caa1dd95f0b72ea6cf301f2d713844b36c7e90e052528f04a668e1dc5ed11e95bbb86268c712af3f6c77d538c9d3dafeceaacc7ba6b20d9266d75c7470d627725700bfd36a9faf5488532a0871a00e18466f3499e3e3270513168d05f52472045b8558d3fb7880805b6fe3a56b3df9eaea72d147f94ee09e763fcf66d0c71b708fb842bbe619eeeaf483fa717864ab435ca03503285591364727a3615582c80d2023897f7bfdda9b00d095ec11f42482f3851a9232ed09ec6733d54020a9e3b98cb3a014f094e9d968672632a30f967a6d2f00c64fb0aefbeb64510edca5496c9f69379f71412f08fe6afeeb604040a42f00290bc04a40f66f0b84c9c6d7e4d1bc213ed49142215b259be08a0a305c68cbec769ce195ea62b7a2ce632da0a98b469284fd7802bb8c47943ac1c8a7a2b0ee36ed45cde2d13cc00ecc11ca9516d9e917fa28d703566b8d5743c5aba0da662f0446768c6d0df6773d1b0c46dac6a6213aa7b5095a8bd9f34048394a8baac9ec65d740ad8acb8eb683702eaf509c30b547bf355561ca00841efdccd413295a430344d17d2d5f4f435d0a33fafe1b4f6826e9d91436b379cc46039551997e54692487562f65a406b769f2856d37c87a73e2e3738c9afdfa5e0f088bbd2799c7c722c23a7cc37266af557beecb9cc8340bc76ba85a147530f3a9bd8cfe82358c0d799f0687540d463e0f010d1e914f043027284292bf31af75301e27689910393e41f877832797dd7c184249e7b2ec0a79b0decb9a3eead5b3c82ac60fe1485829bf75b8af597b5fd9e47460ebb6d809733eb790027094b019ef2bfb76d75876a5e1e312e80e841c5e074c78b35be6a4070c99372dbb13dc27966a8d448b8e3225b11af907985f3142d41da70a682166814fce9e535cca37058bbb3a02894f6ada82c266e763f431d7e1926da2fc86805b02d6af712c82e7a36e667bd3091661be9cc0cdbd3b3cc690594cf8bac39dd9dac1f883cfb0e500759b0e5dc36721b3ed452addc26d39733a2d76d852d897298009dea9546bae66e9aac7f35277e025d440ca93fdec4bbd58970a130fc79056af96f81b0461ef0e16d4fb12014313438a4bb95b2f9cac98e24a713ed14b539ceddf55e90b6c000044a24be6597e2c5a397a772d7c493ad53a05d6076b584ee7c1615ee7f9de627ac9d7d0d4a12b5a080a9c4977da436704bc9eb9f1d25ba91498e4b575550a69aab83e9157a910c4b2907ea97bcc171dcb7ff6fa982dee16d5c5aaaf93fcc225a6c67c96e54ead190f9c6f949b8025988a46d29c86cf18623882d5aa996a3ece81881ba63e0e7d62b585a179631c7e22f924be7aad5699af389c6651c92848153007d9929683648c8a3fb102a50d9a3e9c83e6cabeae5f97d7faad7a803f8c6dbd9237fa4bec7b33db2cc4db5cd7b3baf1c4f4ddc1f16ec6484cbd1adecab06617045b2d5bac8d1bf97a37ed2780a967a678095a6849cabd87256dbe46f52c960ba8ead52e666a131abfb019d2ac7dd2b055bf91168322b23821a522d241f27a2e7ef892d589a0e55b606167e53b0725a089cae5ef65f02f8a2f32dedb370bf2dc34dac5218be294e755915b399cece7e5c3fa887909961a3d626e4a43bab7edd193a9bc0a7a764640943a635fec7722ff8b3add819b26b78c4e54ff970c15d6b27971cd135d288f081a66e792a8ee5b2d89d5945a99f4216ac21fd9a61e305b4a908f4cbe38e5ccd5eab65f5962877a570524809dffa4ca0ed90d505601d7d244273f20cc47feca7259bd1362e334be459e25a59d4873fc8ede03744c88599a5e5f2a6fb0ca08d085e40c8bd71a0777f7715153e71f4a67f6bb73bbbcd766a9dd4287671dcf6b7daacc4f4b81b32ea0d0381fc32807fe9393249e596d3d5ae4bc5a1cb3e48d63478679eb381fbe8cafd2c6890ba29c1af695f2597c6b472a163b7584dde7327933b9d5e88e0d77e3a3d526a619966dde7f82c7ab7a67a59ded2c880ee0e2f736f054b7d99cc68df48c28d76ab12762c85d07a1f3215d3d4ef2ebd65b0f7eacf62ec12997ccdada731992513263a06e063c27eccfdb3c9d1199136c1a2c3d6b5ea6b2e96c9aa6be3bfbda408b2779ad4eba91809a495c1b872e40d49b0acf4b19b4677e6ea8d07b9a621816c4c5f0e5aa364d4803567da0b2b646604563b31aaa298130576690cbab52bf1ddad7c64a7a416ceb36d6b3202f377ed003e8d74cabd4a6a7be18c95716022cc30c45157d6743785746cf8b0e21ec3208336ab0a43ad9c058fffa3021f84ca8b037dea55254ab944493ca03d025a4b42df3e5b830b81471cddf81fd14aed18e45cfed27b1ef015827942f833a0eee4cc0fcd57f0180f83f32e17d27e4784e42eb1a256404aa6e12f9daabddb907230b20693f3bc74723be6808d95c6463ef7bb6bc4a756fdc805ef4077303e5cd504e6c1754ee8303ee92b94808782984f75c0df49436d3859c092133b0545dac0d8f84fc95a1f0f38e4ecbe3f935d33e86b97bb11ca6f502a602bc7e05b4e6514ddc8ae4d8231874b350b32f96ff6cfbe03f1bf5a0fda73c15eca00afe85c026f5e34e699910ab16502b224b8f383a9a863ca351a1e87c17baadb3f7141aa1295a2a6be4d88d1347da9c356ba9b3bfcc678b58add1b224a0c9b7c3cc4c828abc56acd320e8a8ad22da90a0cf6ae40a471c150581da040297aed0e4889c5963bd8c1415acecbd932f9acda87315e3b2dade276b8324dc7d95141cdd8c4fba82c834a95f9efeb2c74c31e7fd32f96a6a68d9e9942c0bdc55bedd1617e47420877b9f640094a37ceea39656468215ebe789a277f585adc1cc0285b53e33afae1616b0806aeed78b6cc4da54e3bdfa3d49ead4e4fa3623f86a4dfa3042ed403684c62a5d148a30c99c24c3cf9a8858e02800e49e0eed84472a559c9f208f6c3310050e4c5948320b5b4eeefe583bb0bcc0bc01356e76e3465f66a7d0c56ca7abc069db5bd7ad20ec01307f391b5bc890b5034271ee31d5bd374a9422a08ce949667512c8d0bb60eb5d4d22fa0e2a5d172edc7b7386abe63222ef8fc5c676828a1441c5ed19ed5827b0d73d568efc51f46f65ea4f205ac26924d6a7f11477fe23049e0de65bd534c81756556c1cd8bc70b3ce71e4e13d44500773e0767bc735c98f0e1d06dc79e43b946a2faaf698e188cf5909e433edbc546beffcbdea76064ff9d5d56273ca05af42c541b896bc5a942665599c9a8f52db36dbd6d42e8f9bb3446df5f44e3971eb408d0c63381b4aa5997441e01a5eff9fa51d82b7d60d8c3ead784e50b562db074b19e855e8290896b808611c40ed7e0691f758103208900d69cd4c86310318d339eeb473b4bea27be94622560cf35416eea7333bb72110afe202dfcc55c755ed32ea9b4851378b554546b52ebd71b90828733ac3040daf1e3d23bfcadd20bb9248731ab11155aebd259b7e693ebad5d43e6a85f14ea317f31eca905634f9e8d5b1ff73dc5dbd2bbeef6c2965932c885969e00e1939685b472c097b4504c9e6f273e1038045e5ac4010ac232288b77de7d3433a143292f145465b6d1f9020aa4f8405bda4310059b82ad8fd41e698a7824456e11f44e577dc5d5a0eb93b98421a2867c3d40627f9061c1d5689205915c7a91da42348ad3bd12038d84175bddaee423b73c93aebf873c850ef44d66324a80ad0cf268998d71fac6988cb0b1879ebcb6c4c3bce2c45daf73db246bc55fb8221341ef760f5f5264113a437e03cbcf03bb276cdc4100138afc6a1eeb9d90e7f43ce8abbd8be6b9c5b54920f76f07d1557167292feb4c970da3f582d40c0661af8f043e01db8016e2600f655175fa7d705bda3a14d1733ccf6603b7f8709b71f2046211468460791330234fa21f417e6a68cdb1d4496808923a87d02f0ebfb09e102a7c9f7c870c082d6993d10e0de2dbe119ac811848661ab30ab8d7a528acf262bf7d21c2f235e5638be58171b61bed99ac3fef801562aabcf3feff77fe9498d09de3e9c3cf18914392433030595aa31d9c79abc29350a2a2a1d0c2f311246", 0x1000}}, 0x1006) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r4, 0x0, 0x30, 0xe1515f8735398fb, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000002c0)=[0x45c], 0x0, 0x0, 0x1, 0x1}}, 0x3c) 4.921633711s ago: executing program 2 (id=118): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000093850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) lsm_set_self_attr(0x66, 0x0, 0x20, 0x0) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x8, [@float={0x6, 0x0, 0x0, 0x10, 0x10}]}, {0x0, [0x30, 0xa9ac12d5568ebf78, 0x2e, 0x61, 0x61, 0x0]}}, &(0x7f0000000240)=""/150, 0x2c, 0x96, 0x1, 0x40, 0x0, @void, @value}, 0x28) r3 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000380)={0x0, r2}, 0x8) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='\x00'/20, @ANYRES32, @ANYRES8=r3, @ANYBLOB="7d17642e995f45d75ad085656205cee3ac01ca8eab9bce43b32d01185fc6cfa2da2a56eae79132a1f4ffadcfff8944ef183b04b0b7dfb4b8e80386a440fdf01a135343ca4e9d8ee380c95d3bc17be3d08886d0fc7c16da52cc1c38d1865910935889b5d0", @ANYRESOCT=r1, @ANYRESHEX=r2], 0x50) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = getpid() tkill(r5, 0x22) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000ac0), r4) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000006400)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x20002, 0x600a8}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x20, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x9}, @IFLA_BR_FORWARD_DELAY={0x8, 0x1, 0x11}, @IFLA_BR_MCAST_QUERIER_INTVL={0xc, 0x20, 0x10001}]}}}]}, 0x50}}, 0x24008040) socket$pppl2tp(0x18, 0x1, 0x1) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f00000000c0)=@ccm_128={{0x305}, '\x00', "bcbd13b603e0f7b3bfa8909ef43c0aeb", "0000fd9f", "b08068ebce17ab00"}, 0x28) setsockopt$inet6_tcp_TCP_REPAIR(r7, 0x6, 0x13, &(0x7f0000000100)=0x1, 0x4) setsockopt$inet6_tcp_int(r7, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0x1959cc36) connect$inet6(r7, &(0x7f00000001c0)={0xa, 0x4000, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r7, 0x1, 0x19, &(0x7f0000000240)='tunl0\x00', 0x10) prctl$PR_SET_MM(0x23, 0x5, &(0x7f0000351000/0x2000)=nil) r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') pread64(r8, &(0x7f0000002180)=""/4105, 0x1009, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r7, 0x6, 0x13, &(0x7f0000000000), 0x4) 4.336785968s ago: executing program 3 (id=119): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0x2}, 0x18) setsockopt$MRT_ADD_MFC(0xffffffffffffffff, 0x0, 0x5, &(0x7f0000000240)={@local, @empty, 0xffff, "66c5aff8a7eb3af1f6cec2e7420000008c84aea31700", 0x3, 0x0, 0x80, 0x4f04}, 0x3c) setsockopt$MRT_INIT(0xffffffffffffffff, 0x0, 0xc8, &(0x7f0000000080)=0x300, 0x4) 3.901599312s ago: executing program 4 (id=121): socket$inet6(0xa, 0x80001, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) memfd_secret(0x80000) epoll_create1(0x0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="02000000040000000400000008"], 0x48) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_udp(0x2, 0x2, 0x0) r0 = syz_io_uring_setup(0xb4e, &(0x7f0000000240)={0x0, 0xf92c, 0x10100, 0x12000000}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, 0x36e10853185f3b19}) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000001c0)) write$UHID_CREATE2(r3, &(0x7f00000001c0)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r0, 0x2d3e, 0x0, 0x0, 0x0, 0x0) 3.500923842s ago: executing program 0 (id=122): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r0}, &(0x7f0000000280), &(0x7f0000000300)=r1}, 0x20) r2 = socket$inet(0xa, 0x801, 0x84) connect$inet(r2, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r2, 0x8) r3 = accept4(r2, 0x0, 0x0, 0x0) sendto$inet6(r3, &(0x7f00000062c0)='^', 0x1, 0x40, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f0000000340)={0x0, 0x4}, 0x8) close(r3) 3.346886509s ago: executing program 2 (id=123): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x18) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x3000000, 0x0) 3.197865486s ago: executing program 3 (id=124): unshare(0x2040400) r0 = socket$netlink(0x10, 0x3, 0x0) getsockopt$netlink(r0, 0x10e, 0xa, 0x0, 0x0) 3.161947343s ago: executing program 1 (id=125): mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000140), 0x0, &(0x7f0000000500)) 2.974291793s ago: executing program 4 (id=126): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f0000000040)=0x9, 0x4) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000740)=@filter={'filter\x00', 0xe, 0x4, 0x340, 0xffffffff, 0x0, 0x130, 0x248, 0xffffffff, 0xffffffff, 0x340, 0x340, 0x340, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @empty, [0xff000000, 0xffffffff, 0x0, 0xffffffff], [0x0, 0x0, 0xffffffff, 0xff000000], 'netdevsim0\x00', 'wlan0\x00', {}, {0xff}, 0x2f, 0x2, 0xf, 0x24}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x7f, 0x500, 0x2}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x7}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x3}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3a0) recvmmsg(r0, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) readv(r1, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/243, 0xfffffdef}], 0x1) write$cgroup_subtree(r2, &(0x7f0000000700)=ANY=[], 0xfe33) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) creat(0x0, 0x0) getsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x3f, 0x0, 0x0) 2.76125739s ago: executing program 0 (id=127): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x6, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18020000000400000000000000000000850000002c000000850000002a00000095"], &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000001c0)={r2, r1, 0x25, 0x0, @val=@netkit={@void, @value=r2}}, 0x1c) syz_emit_ethernet(0xad9, &(0x7f0000002d40)={@multicast, @empty, @void, {@mpls_mc={0x8848, {[], @ipv6=@dccp_packet={0xc, 0x6, "9f0301", 0xaa3, 0x21, 0xff, @rand_addr=' \x01\x00', @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, {[@dstopts={0x4, 0x4, '\x00', [@enc_lim={0x4, 0x1, 0x7}, @ra={0x5, 0x2, 0x401}, @enc_lim, @pad1, @enc_lim={0x4, 0x1, 0x80}, @hao={0xc9, 0x10, @empty}]}, @dstopts={0x2, 0x1a, '\x00', [@generic={0x87, 0xaa, "c2bed083cb26ca7d33ce389d8dc8a6f2fe2eb2b6c96733de09d9dce0f7a75a81ae7903b57a99b1278a309b03d9cd9c482f85e9dfa39ce1dcb7ec82825b539a9f0e3906398b7b29aaa62cee3f7a19b1fa45fd1910756c304a9e3cc29bba4d9fb75dcf4e61bc3e0ac42d9a3ff608999d71af01e4fc8cdc979159eeaf0a5a1a41620593e2c73c277b11b89ec9dec0c90f75840a1e568c118b00b721e974b107d09313a169ddaad0c0b81f86"}, @ra={0x5, 0x2, 0x5}, @calipso={0x7, 0x18, {0x1, 0x4, 0xfe, 0x40, [0x9, 0xffffffffffffffff]}}, @ra, @enc_lim={0x4, 0x1, 0x1}]}, @fragment={0xa4, 0x0, 0x5, 0x1, 0x0, 0x5, 0x68}, @fragment={0x33, 0x0, 0xa, 0x0, 0x0, 0x1, 0x66}, @hopopts={0x11, 0x8, '\x00', [@generic={0xe, 0x33, "9cc0f3e6cc8460381b471a013ba5d6e0fcf41f298d15f29aa5c031001b3f76db9c7b08e900a77786e856874be3997fc1756ae7"}, @ra={0x5, 0x2, 0x5}, @padn={0x1, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}, @dstopts={0x7, 0x115, '\x00', [@generic={0x1, 0x8a6, "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"}]}], {{0x4e21, 0x4e24, 0x4, 0x1, 0xf, 0x0, 0x0, 0x0, 0x5, "6330b3", 0x73, "a02f58"}, "ef86816eba6b5d742a65607c2c36b0a7c252a3422bc55444d67de7885c6524c24d86b8f8379a8c49ff934a87ecb58423b06ddeea72054c1d5b235f7004e73389336e23ea918a540b6eaa3a7fd3a4218eeff0693bcf29c8c699c08fa844afcd75663e58238a42bb2cd68d346662565917db14e6"}}}}}}}, 0x0) 2.741718282s ago: executing program 3 (id=128): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d00)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000007b00000000000000000000850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r0, 0x0, 0x5}, 0x18) r1 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) sendmsg$TIPC_NL_BEARER_SET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)={0x14, 0x0, 0x1, 0x70bd28, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x48c05}, 0x4040140) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f0000000040)=ANY=[@ANYRES64=0x0]) 2.571846181s ago: executing program 2 (id=129): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000001100)='./file1\x00', 0x3014490, &(0x7f0000000100)={[{@nombcache}, {@usrjquota}, {@discard}, {@norecovery}, {@abort}, {@mblk_io_submit}, {@nouid32}, {@dioread_lock}, {@grpjquota}, {}]}, 0x45, 0x7ce, &(0x7f0000000500)="$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") chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000040)=""/41, 0x29) getdents64(r0, 0xfffffffffffffffe, 0x29) 2.509502508s ago: executing program 1 (id=130): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, 0x0) r0 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r0, &(0x7f0000001fc0)=""/184, 0xb8) 2.238343946s ago: executing program 4 (id=131): r0 = gettid() syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000c80)='./bus\x00', 0x100c000, &(0x7f0000000840)={[{@nolazytime}, {}, {@barrier_val}, {@debug}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@resuid}, {@nodelalloc}, {@acl}, {@min_batch_time={'min_batch_time', 0x3d, 0x7}}]}, 0xfc, 0x57c, &(0x7f0000000100)="$eJzs3V1rHNUbAPBnNpv0/d8USvnrhRR6YaV20yS+VBCsl6LFgt7XJZmGkk23ZDeliQXbC3vjjRRBxIL4Abz3svgF/BQFLRQpQS9EiMxmNt0ku3nrxk27vx9Mcs7OTM48e+aZnLOzywbQt05mPwoRL0XE10nEUMu6YuQrTy5vt/jk1kS2JLG09MkfSST5Y83tk/z3obzy/4j45cuIM4X17dbmF6bLlUo6m9dH6jPXR2rzC2evzpSn0qn02tj4+Pk3x8feefutrsX62qW/vvv4wQfnvzq1+O1Pj47dS+JCHM7XtcbxDG63Vk6W/8lLg3FhzYajXWhsL0l6fQDsyECe54ORXQOOxkCe9cCL74uIWAL6VCL/oU81xwHNuX2X5sHPjcfvL0+AGrEPtcZfXH5tJPY35kYHF5NVM6NsvjvchfazNn7+/f69bImNX4c4sEkdYFtu34mIc8Xi+ut/kl//du5c48Xjja1to9/+/0AvPcjGP6+3G/8VVsY/0Wb8c6hN7u7E5vlfeNSFZjrKxn/vth3/rly6hgfy2pHGmG8wuXK1kp6LiP9FxOkY3JfVN7qfc37x4VKnda3jv2zJ2m+OBfPjeFTct3qfyXK9HKtv1e3Y4zsRLxfbxZ+s9H/Spv+z5+PSFts4kd5/pdO6NfEnxXXx766lHyNebdv/T+9oJRvfnxxpnA8jzbNivT/vnvi1U/ub9//uyvr/4MbxDyet92tr22/jh/1/p53W7fT8H0o+bZSbSXCzXK/PjkYMJR+tf3zs6b7NenP7LP7Tpza+/rU7/7PJ12dbjP/u8bsdN10d/5HoRf9Pbqv/t194+OHn33dqf2v9/0ajdDp/JL/+tZefK1s9wGd9/gAAAAAAAGAvKUTE4UgKpZVyoVAqLb+/43gcLFSqtfqZK9W5a5PR+KzscAwWmne6j7a8H2I0fz9ssz62pj4eEcci4puBA416aaJamex18AAAAAAAAAAAAAAAAAAAALBHHOrw+f/MbwO9Pjpg1zW+2GBfr48C6IVNv/K/G9/0BOxJm+Y/8MKS/9C/5D/0L/kP/Uv+Q/+S/9C/5D/0L/kPAAAAAAAAAAAAAAAAAAAAAAAAAAAAXXXp4sVsWVp8cmsiq0/emJ+brt44O5nWpkszcxOliers9dJUtTpVSUsT1ZnN/l6lWr0+OhZzN0fqaa0+UptfuDxTnbtWv3x1pjyVXk4H/5OoAAAAAAAAAAAAAAAAAAAA4PlSm1+YLlcq6axCx8J7sScOYzcDXLaj3Yt7JQqFDoU7efdub68eXpQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYI1/AwAA///VDy/N") unlink(&(0x7f0000000000)='./file0/file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x0, 0x0) r2 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000000), 0x801, 0x0) ioctl$RNDGETENTCNT(r2, 0x80045200, 0x0) mkdirat(r1, &(0x7f0000000380)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x105) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) mkdirat(r3, &(0x7f0000000180)='./bus\x00', 0x0) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xffffffed]}, 0x0, 0x8) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r4, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000340)={0x3c, r5, 0x1, 0x70bd2a, 0x25dfdbff, {}, [@ETHTOOL_A_STRSET_STRINGSETS={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}]}]}, @ETHTOOL_A_STRSET_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1\x00'}]}]}, 0x3c}}, 0x40) r6 = signalfd4(0xffffffffffffffff, &(0x7f0000000400)={[0xfffffffffffffff5]}, 0x8, 0x80000) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r6, 0x8983, &(0x7f0000000040)={0x1, 'geneve0\x00', {}, 0x200}) io_setup(0xa7d, &(0x7f0000000080)=0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r8 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r8, 0x40485404, 0x0) io_setup(0x9, &(0x7f00000000c0)=0x0) r10 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x20001, 0x0) io_submit(r7, 0x1, &(0x7f0000000040)=[&(0x7f0000001500)={0x0, 0x0, 0x0, 0x1, 0x0, r10, &(0x7f0000000100)='9', 0x1, 0x0, 0x0, 0x3}]) io_getevents(r9, 0x9, 0x8, &(0x7f00000000c0)=[{}, {}, {}, {}, {}, {}, {}, {}], &(0x7f00000001c0)={0x0, 0x3938700}) ppoll(&(0x7f0000000000)=[{r6, 0x4d1}], 0x1, 0x0, 0x0, 0x0) timer_create(0x3, &(0x7f000049efa0)={0x0, 0x14, 0x4, @tid=r0}, &(0x7f0000044000)) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) 2.190546868s ago: executing program 0 (id=132): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000060000000000000000008500000007000000850000000e00000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000012c0)={&(0x7f0000000040)='kfree\x00', r0}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x9, 0x1b, 0x8, 0x40, 0x42, 0x1, 0x99, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000bc0)={r1, 0x0}, 0x20) 2.11675698s ago: executing program 3 (id=133): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000093850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) lsm_set_self_attr(0x66, 0x0, 0x20, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x8, [@float={0x6, 0x0, 0x0, 0x10, 0x10}]}, {0x0, [0x30, 0xa9ac12d5568ebf78, 0x2e, 0x61, 0x61, 0x0]}}, &(0x7f0000000240)=""/150, 0x2c, 0x96, 0x1, 0x40, 0x0, @void, @value}, 0x28) 1.971262405s ago: executing program 1 (id=134): r0 = syz_open_dev$loop(&(0x7f0000000440), 0x81, 0x2a82) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='cpuset.effective_cpus\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000005c0)={r1, 0x800, {0x2a00, 0x80010000, 0x0, 0x5, 0x401, 0x0, 0x0, 0x1, 0x1d, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd6447a4b4e00d9683dda1af1ea09de2b7fb0a0100000000000000000300", "2809e8dbe108598904004ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dac00000000000000000000002000", "90be8b1c5512406c7f00", [0x4]}}) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f00000000c0)={0x20, {}, 0x0, {}, 0xa2, 0x6, 0x9, 0x15, "9f495762172396b1adfa5f11a5ad178bd037324fe94c7aa7dfc1e425aee3b1c62f904074efd29dea67b748d6da93740fc4dcd65cf5beadb5b3b2be7946812959", "5fafaad2b1e09c4ac4223c62b859f74bb8e7e33830d073c0632cd0476af8a72e", [0xc3, 0xfffffffffffffff8]}) 1.610074367s ago: executing program 3 (id=135): syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) socket(0x0, 0x3, 0x0) r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) syz_usb_disconnect(r1) syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[], 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) ioctl$EVIOCGBITSW(r1, 0x40095505, 0x0) 1.437545166s ago: executing program 0 (id=136): socket$inet6(0xa, 0x80001, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) memfd_secret(0x80000) r0 = io_uring_setup(0x203c, &(0x7f00000000c0)={0x0, 0xd4b5, 0x2, 0x3}) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="02000000040000000400000008"], 0x48) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_udp(0x2, 0x2, 0x0) r1 = syz_io_uring_setup(0xb4e, &(0x7f0000000240)={0x0, 0xf92c, 0x10100, 0x12000000}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) syz_io_uring_submit(0x0, r3, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, 0x36e10853185f3b19, 0x0, {0x0, 0x0, r0}}) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000001c0)) write$UHID_CREATE2(r4, &(0x7f00000001c0)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r4, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r1, 0x2d3e, 0x0, 0x0, 0x0, 0x0) 1.37454349s ago: executing program 1 (id=137): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) readv(r0, &(0x7f0000000000)=[{&(0x7f0000001300)=""/244, 0x940}], 0x1) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) 1.345590357s ago: executing program 2 (id=138): unshare(0x2040400) r0 = socket$netlink(0x10, 0x3, 0x0) getsockopt$netlink(r0, 0x10e, 0xa, 0x0, 0x0) 917.419665ms ago: executing program 0 (id=139): r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f0000000140)=[{{0x0, 0x0, 0x1}, {0x0, 0x0, 0x1, 0x1}}, {{0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x1, 0x1}}], 0x10) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x3, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x11, 0x10, &(0x7f0000000980)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r2}, 0x18) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f0000000100)=[{{0x0, 0x0, 0x1}, {0x0, 0x0, 0x1, 0x1}}], 0x8) 757.357625ms ago: executing program 1 (id=140): r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000000140)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf38, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) r3 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[], 0x1b4}}, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f0000000040)={0x0, 0x1}, 0x1e) close(r3) 701.918457ms ago: executing program 2 (id=141): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x5, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000f00)='kfree\x00', r0}, 0x18) r1 = socket$kcm(0x10, 0xf, 0x0) sendmsg$kcm(r1, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='sys_enter\x00', r2}, 0x18) utimes(0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0) request_key(0x0, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00'}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, 0xffffffffffffffff, 0x0, 0x101}, 0x18) r3 = mq_open(&(0x7f0000000180)='\r\x00elinu\xef\xe3elinux\x00\x96\xf6\x92\n#*\xac\x05\xce\xf8D\\\x9a\xe6[]L+\xf6\v\xe8\xf2\xd3\b\x15\n\xb8F!Q9o\x1f#\xbdt\r\xfb\"\x18%\xfdM\xaf_t\xd2\xdcJ\x10\a\xbab\x1a\xdf\xb1\xbdU\xd7Lo\xe7\xac\x81\x10k\xce-\xf5@\xbb\x9d;\xe8\xf6\xffQ\x04\xaai\x92k\x1b;\xddM\xa2\xe1-\x0e\xd8\xde\x00\xff\x18\xdd\bL\xfb\xa2.\xb6{\xb5\x85#\x88\xdc\xf0\x0f\x05\xf1\xc4 \xdeV\x80q\xf7\x04\xf5\x85T\x1f\xc2S]*\xc9lw\xd3J\xc5\xe8\x02\xcb\xbbAHxr\xac\xb77F\xdf\x1c\xcb\xd4\xce\x88L\xf1\xf9[\x98\xd4+pTx\x95\xb5\x1b]x\x1a\x95\xe1c6\xe7`83\xb7n#\xe0\xc1_\xec\xba\xde\a\x8b\xc5\x86woo\xbc\x1c\xa3r\x82\xf3enq-\x90/\xed\xff\xad+\x03\x10\t\xda\xfd\xa2\xd0\xef4\n%\xf1\xd8', 0x6e93ebbbcc0884f2, 0x1e0, &(0x7f0000000040)={0x0, 0x1, 0x4}) mq_getsetattr(r3, &(0x7f0000000700)={0x800, 0x7, 0x1}, 0x0) mq_timedreceive(r3, &(0x7f0000000340)=""/195, 0xc3, 0x0, 0x0) mq_timedreceive(r3, &(0x7f0000000080)=""/92, 0x5c, 0x0, 0x0) 652.119469ms ago: executing program 4 (id=142): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x6, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18020000000400000000000000000000850000002c000000850000002a00000095"], &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000001c0)={r2, r1, 0x25, 0x0, @val=@netkit={@void, @value=r2}}, 0x1c) syz_emit_ethernet(0xc51, &(0x7f0000002d40)={@multicast, @empty, @void, {@mpls_mc={0x8848, {[], @ipv6=@dccp_packet={0xc, 0x6, "9f0301", 0xc1b, 0x21, 0xff, @rand_addr=' \x01\x00', @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, {[@dstopts={0x4, 0x4, '\x00', [@enc_lim={0x4, 0x1, 0x7}, @ra={0x5, 0x2, 0x401}, @enc_lim, @pad1, @enc_lim={0x4, 0x1, 0x80}, @hao={0xc9, 0x10, @empty}]}, @dstopts={0x2, 0x1a, '\x00', [@generic={0x87, 0xaa, "c2bed083cb26ca7d33ce389d8dc8a6f2fe2eb2b6c96733de09d9dce0f7a75a81ae7903b57a99b1278a309b03d9cd9c482f85e9dfa39ce1dcb7ec82825b539a9f0e3906398b7b29aaa62cee3f7a19b1fa45fd1910756c304a9e3cc29bba4d9fb75dcf4e61bc3e0ac42d9a3ff608999d71af01e4fc8cdc979159eeaf0a5a1a41620593e2c73c277b11b89ec9dec0c90f75840a1e568c118b00b721e974b107d09313a169ddaad0c0b81f86"}, @ra={0x5, 0x2, 0x5}, @calipso={0x7, 0x18, {0x1, 0x4, 0xfe, 0x40, [0x9, 0xffffffffffffffff]}}, @ra, @enc_lim={0x4, 0x1, 0x1}]}, @fragment={0xa4, 0x0, 0x5, 0x1, 0x0, 0x5, 0x68}, @fragment={0x33, 0x0, 0xa, 0x0, 0x0, 0x1, 0x66}, @hopopts={0x11, 0x8, '\x00', [@generic={0xe, 0x33, "9cc0f3e6cc8460381b471a013ba5d6e0fcf41f298d15f29aa5c031001b3f76db9c7b08e900a77786e856874be3997fc1756ae7"}, @ra={0x5, 0x2, 0x5}, @padn={0x1, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}, @dstopts={0x7, 0x143, '\x00', [@generic={0x1, 0xa17, "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"}]}], {{0x4e21, 0x4e24, 0x4, 0x1, 0xf, 0x0, 0x0, 0x0, 0x5, "6330b3", 0x73, "a02f58"}, "ef86816eba6b5d742a65607c2c36b0a7c252a3422bc55444d67de7885c6524c24d86b8f8379a8c49ff934a87ecb58423b06ddeea72054c1d5b235f7004e73389336e23ea918a540b6eaa3a7fd3a4218eeff0693bcf29c8c699c08fa844afcd75663e58238a42bb2cd68d346662565917db14e6"}}}}}}}, 0x0) 177.701447ms ago: executing program 0 (id=143): r0 = syz_io_uring_setup(0x110, &(0x7f0000000340)={0x0, 0x810c, 0x8, 0x40000, 0x100000f0}, &(0x7f0000000400)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r4}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r5}, 0x10) syz_io_uring_submit(r1, r2, &(0x7f0000000440)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x348}, 0x0, 0x800, 0x1}) io_uring_enter(r0, 0x8aa, 0x0, 0x0, 0x0, 0x0) 177.434451ms ago: executing program 1 (id=144): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, 0x0) r0 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r0, &(0x7f0000001fc0)=""/184, 0xb8) 35.335655ms ago: executing program 4 (id=145): bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x8, [@float={0x6, 0x0, 0x0, 0x10, 0x10}]}, {0x0, [0x30, 0xa9ac12d5568ebf78, 0x2e, 0x61, 0x61, 0x0]}}, &(0x7f0000000240)=""/150, 0x2c, 0x96, 0x1, 0x40, 0x0, @void, @value}, 0x28) 0s ago: executing program 2 (id=146): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000040000000c"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000181100", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r4 = dup(r3) write$P9_RLERRORu(r4, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r4]) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.2' (ED25519) to the list of known hosts. [ 197.964299][ T5766] cgroup: Unknown subsys name 'net' [ 198.114327][ T5766] cgroup: Unknown subsys name 'cpuset' [ 198.133685][ T5766] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 229.424663][ T1282] ieee802154 phy0 wpan0: encryption failed: -22 [ 229.431377][ T1282] ieee802154 phy1 wpan1: encryption failed: -22 [ 252.894509][ T5766] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 258.185081][ T52] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 258.194868][ T52] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 258.205675][ T52] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 258.219410][ T52] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 258.268305][ T52] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 258.289632][ T52] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 258.351426][ T5784] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 258.367669][ T5789] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 258.377576][ T5789] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 258.385887][ T5784] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 258.404795][ T5789] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 258.413245][ T5784] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 258.424106][ T5784] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 258.436203][ T5789] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 258.447825][ T5789] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 258.458206][ T5789] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 258.469421][ T5789] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 258.485322][ T5789] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 258.547120][ T5082] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 258.603707][ T5082] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 258.697945][ T5082] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 258.715324][ T5789] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 258.716748][ T5082] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 258.731671][ T5082] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 258.794616][ T5789] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 258.806713][ T5789] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 258.819585][ T5789] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 258.830276][ T5789] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 258.838783][ T5789] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 258.850031][ T5789] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 259.776241][ T5790] chnl_net:caif_netlink_parms(): no params data found [ 259.971318][ T5782] chnl_net:caif_netlink_parms(): no params data found [ 260.374444][ T5787] Bluetooth: hci0: command tx timeout [ 260.519205][ T5786] chnl_net:caif_netlink_parms(): no params data found [ 260.613270][ T5787] Bluetooth: hci2: command tx timeout [ 260.619175][ T5787] Bluetooth: hci1: command tx timeout [ 260.924813][ T5787] Bluetooth: hci3: command tx timeout [ 260.949258][ T5787] Bluetooth: hci4: command tx timeout [ 260.974497][ T5795] chnl_net:caif_netlink_parms(): no params data found [ 260.995249][ T5793] chnl_net:caif_netlink_parms(): no params data found [ 261.107995][ T5790] bridge0: port 1(bridge_slave_0) entered blocking state [ 261.116164][ T5790] bridge0: port 1(bridge_slave_0) entered disabled state [ 261.127104][ T5790] bridge_slave_0: entered allmulticast mode [ 261.141958][ T5790] bridge_slave_0: entered promiscuous mode [ 261.228773][ T5790] bridge0: port 2(bridge_slave_1) entered blocking state [ 261.237049][ T5790] bridge0: port 2(bridge_slave_1) entered disabled state [ 261.245049][ T5790] bridge_slave_1: entered allmulticast mode [ 261.254730][ T5790] bridge_slave_1: entered promiscuous mode [ 261.420107][ T5782] bridge0: port 1(bridge_slave_0) entered blocking state [ 261.428099][ T5782] bridge0: port 1(bridge_slave_0) entered disabled state [ 261.436112][ T5782] bridge_slave_0: entered allmulticast mode [ 261.445547][ T5782] bridge_slave_0: entered promiscuous mode [ 261.601344][ T5790] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 261.620115][ T5782] bridge0: port 2(bridge_slave_1) entered blocking state [ 261.631517][ T5782] bridge0: port 2(bridge_slave_1) entered disabled state [ 261.639534][ T5782] bridge_slave_1: entered allmulticast mode [ 261.649087][ T5782] bridge_slave_1: entered promiscuous mode [ 261.679889][ T5790] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 261.947840][ T5782] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 261.961314][ T5786] bridge0: port 1(bridge_slave_0) entered blocking state [ 261.972690][ T5786] bridge0: port 1(bridge_slave_0) entered disabled state [ 261.980487][ T5786] bridge_slave_0: entered allmulticast mode [ 261.989934][ T5786] bridge_slave_0: entered promiscuous mode [ 262.059318][ T5782] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 262.112992][ T5786] bridge0: port 2(bridge_slave_1) entered blocking state [ 262.120775][ T5786] bridge0: port 2(bridge_slave_1) entered disabled state [ 262.128914][ T5786] bridge_slave_1: entered allmulticast mode [ 262.138274][ T5786] bridge_slave_1: entered promiscuous mode [ 262.163004][ T5790] team0: Port device team_slave_0 added [ 262.275629][ T5790] team0: Port device team_slave_1 added [ 262.437004][ T5795] bridge0: port 1(bridge_slave_0) entered blocking state [ 262.447673][ T5795] bridge0: port 1(bridge_slave_0) entered disabled state [ 262.455622][ T5795] bridge_slave_0: entered allmulticast mode [ 262.465030][ T5795] bridge_slave_0: entered promiscuous mode [ 262.475902][ T5787] Bluetooth: hci0: command tx timeout [ 262.523051][ T5782] team0: Port device team_slave_0 added [ 262.600565][ T5795] bridge0: port 2(bridge_slave_1) entered blocking state [ 262.608828][ T5795] bridge0: port 2(bridge_slave_1) entered disabled state [ 262.616760][ T5795] bridge_slave_1: entered allmulticast mode [ 262.626213][ T5795] bridge_slave_1: entered promiscuous mode [ 262.682178][ T5782] team0: Port device team_slave_1 added [ 262.690846][ T5787] Bluetooth: hci1: command tx timeout [ 262.691902][ T5082] Bluetooth: hci2: command tx timeout [ 262.718228][ T5790] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 262.727127][ T5790] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 262.754241][ T5790] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 262.778250][ T5786] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 262.894132][ T5790] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 262.901348][ T5790] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 262.927996][ T5790] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 262.949206][ T5786] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 263.009794][ T5795] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 263.012667][ T5082] Bluetooth: hci4: command tx timeout [ 263.019789][ T5787] Bluetooth: hci3: command tx timeout [ 263.115534][ T5793] bridge0: port 1(bridge_slave_0) entered blocking state [ 263.125694][ T5793] bridge0: port 1(bridge_slave_0) entered disabled state [ 263.133640][ T5793] bridge_slave_0: entered allmulticast mode [ 263.142761][ T5793] bridge_slave_0: entered promiscuous mode [ 263.206873][ T5795] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 263.219231][ T5782] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 263.226670][ T5782] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 263.254281][ T5782] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 263.272671][ T5782] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 263.279852][ T5782] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 263.306182][ T5782] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 263.319477][ T5793] bridge0: port 2(bridge_slave_1) entered blocking state [ 263.327426][ T5793] bridge0: port 2(bridge_slave_1) entered disabled state [ 263.335418][ T5793] bridge_slave_1: entered allmulticast mode [ 263.344802][ T5793] bridge_slave_1: entered promiscuous mode [ 263.380636][ T5786] team0: Port device team_slave_0 added [ 263.510192][ T5786] team0: Port device team_slave_1 added [ 263.599118][ T5795] team0: Port device team_slave_0 added [ 263.688460][ T5793] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 263.707148][ T5795] team0: Port device team_slave_1 added [ 263.730914][ T5790] hsr_slave_0: entered promiscuous mode [ 263.741248][ T5790] hsr_slave_1: entered promiscuous mode [ 263.828379][ T5793] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 264.000766][ T5786] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 264.009037][ T5786] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 264.035536][ T5786] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 264.189049][ T5782] hsr_slave_0: entered promiscuous mode [ 264.198261][ T5782] hsr_slave_1: entered promiscuous mode [ 264.207272][ T5782] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 264.215167][ T5782] Cannot create hsr debugfs directory [ 264.224010][ T5786] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 264.231192][ T5786] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 264.257709][ T5786] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 264.295577][ T5793] team0: Port device team_slave_0 added [ 264.305847][ T5795] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 264.313238][ T5795] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 264.339625][ T5795] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 264.441702][ T5793] team0: Port device team_slave_1 added [ 264.469072][ T5795] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 264.476583][ T5795] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 264.503052][ T5795] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 264.532626][ T5787] Bluetooth: hci0: command tx timeout [ 264.774113][ T5787] Bluetooth: hci2: command tx timeout [ 264.779843][ T5082] Bluetooth: hci1: command tx timeout [ 264.828355][ T5793] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 264.835719][ T5793] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 264.862168][ T5793] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 264.936469][ T5786] hsr_slave_0: entered promiscuous mode [ 264.946859][ T5786] hsr_slave_1: entered promiscuous mode [ 264.955749][ T5786] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 264.963600][ T5786] Cannot create hsr debugfs directory [ 265.008541][ T5793] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 265.015924][ T5793] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 265.042371][ T5793] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 265.083288][ T5082] Bluetooth: hci4: command tx timeout [ 265.088983][ T5082] Bluetooth: hci3: command tx timeout [ 265.193246][ T5795] hsr_slave_0: entered promiscuous mode [ 265.203668][ T5795] hsr_slave_1: entered promiscuous mode [ 265.212957][ T5795] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 265.220804][ T5795] Cannot create hsr debugfs directory [ 265.591197][ T5793] hsr_slave_0: entered promiscuous mode [ 265.601680][ T5793] hsr_slave_1: entered promiscuous mode [ 265.611000][ T5793] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 265.618913][ T5793] Cannot create hsr debugfs directory [ 265.929198][ T5790] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 266.077342][ T5790] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 266.165335][ T5790] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 266.281663][ T5790] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 266.508872][ T5782] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 266.622064][ T5782] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 266.622639][ T5082] Bluetooth: hci0: command tx timeout [ 266.733434][ T5782] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 266.757111][ T5782] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 266.898610][ T5082] Bluetooth: hci1: command tx timeout [ 266.898763][ T5787] Bluetooth: hci2: command tx timeout [ 267.112985][ T5786] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 267.164504][ T5787] Bluetooth: hci3: command tx timeout [ 267.167733][ T5082] Bluetooth: hci4: command tx timeout [ 267.192121][ T5786] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 267.234989][ T5786] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 267.260849][ T5786] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 267.283525][ T5795] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 267.379630][ T5795] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 267.493296][ T5795] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 267.524676][ T5795] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 267.669305][ T5793] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 267.724413][ T5793] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 267.824085][ T5793] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 267.881725][ T5793] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 268.255844][ T5790] 8021q: adding VLAN 0 to HW filter on device bond0 [ 268.532766][ T5782] 8021q: adding VLAN 0 to HW filter on device bond0 [ 268.558004][ T5790] 8021q: adding VLAN 0 to HW filter on device team0 [ 268.653487][ T5786] 8021q: adding VLAN 0 to HW filter on device bond0 [ 268.716464][ T3756] bridge0: port 1(bridge_slave_0) entered blocking state [ 268.724403][ T3756] bridge0: port 1(bridge_slave_0) entered forwarding state [ 268.794965][ T5782] 8021q: adding VLAN 0 to HW filter on device team0 [ 268.858974][ T3756] bridge0: port 2(bridge_slave_1) entered blocking state [ 268.866806][ T3756] bridge0: port 2(bridge_slave_1) entered forwarding state [ 269.024637][ T5795] 8021q: adding VLAN 0 to HW filter on device bond0 [ 269.077219][ T5786] 8021q: adding VLAN 0 to HW filter on device team0 [ 269.183361][ T3756] bridge0: port 1(bridge_slave_0) entered blocking state [ 269.191095][ T3756] bridge0: port 1(bridge_slave_0) entered forwarding state [ 269.208979][ T3756] bridge0: port 2(bridge_slave_1) entered blocking state [ 269.216903][ T3756] bridge0: port 2(bridge_slave_1) entered forwarding state [ 269.318748][ T5795] 8021q: adding VLAN 0 to HW filter on device team0 [ 269.436751][ T3756] bridge0: port 1(bridge_slave_0) entered blocking state [ 269.444562][ T3756] bridge0: port 1(bridge_slave_0) entered forwarding state [ 269.521858][ T3756] bridge0: port 2(bridge_slave_1) entered blocking state [ 269.529663][ T3756] bridge0: port 2(bridge_slave_1) entered forwarding state [ 269.678384][ T5782] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 269.689229][ T5782] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 269.738995][ T5793] 8021q: adding VLAN 0 to HW filter on device bond0 [ 269.781967][ T5790] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 269.792896][ T5790] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 269.824280][ T3756] bridge0: port 1(bridge_slave_0) entered blocking state [ 269.832019][ T3756] bridge0: port 1(bridge_slave_0) entered forwarding state [ 269.861395][ T3756] bridge0: port 2(bridge_slave_1) entered blocking state [ 269.869005][ T3756] bridge0: port 2(bridge_slave_1) entered forwarding state [ 270.243233][ T5793] 8021q: adding VLAN 0 to HW filter on device team0 [ 270.330620][ T5795] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 270.409449][ T3756] bridge0: port 1(bridge_slave_0) entered blocking state [ 270.417329][ T3756] bridge0: port 1(bridge_slave_0) entered forwarding state [ 270.597955][ T3756] bridge0: port 2(bridge_slave_1) entered blocking state [ 270.606024][ T3756] bridge0: port 2(bridge_slave_1) entered forwarding state [ 272.014381][ T5790] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 272.121433][ T5782] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 272.325186][ T5786] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 272.779116][ T5795] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 272.858176][ T5790] veth0_vlan: entered promiscuous mode [ 272.897599][ T5782] veth0_vlan: entered promiscuous mode [ 273.026346][ T5790] veth1_vlan: entered promiscuous mode [ 273.043070][ T5786] veth0_vlan: entered promiscuous mode [ 273.111898][ T5782] veth1_vlan: entered promiscuous mode [ 273.215481][ T5793] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 273.295432][ T5786] veth1_vlan: entered promiscuous mode [ 273.452896][ T5795] veth0_vlan: entered promiscuous mode [ 273.500838][ T5790] veth0_macvtap: entered promiscuous mode [ 273.546379][ T5782] veth0_macvtap: entered promiscuous mode [ 273.594460][ T5790] veth1_macvtap: entered promiscuous mode [ 273.617095][ T5782] veth1_macvtap: entered promiscuous mode [ 273.659735][ T5795] veth1_vlan: entered promiscuous mode [ 273.851524][ T5786] veth0_macvtap: entered promiscuous mode [ 273.879892][ T5782] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 273.930329][ T5786] veth1_macvtap: entered promiscuous mode [ 273.964410][ T5790] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 273.976918][ T5790] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 273.993294][ T5790] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 274.026658][ T5782] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 274.088923][ T5790] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 274.100108][ T5790] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 274.117057][ T5790] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 274.174102][ T5782] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 274.183628][ T5782] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 274.192962][ T5782] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 274.202014][ T5782] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 274.228700][ T5790] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 274.237930][ T5790] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 274.247238][ T5790] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 274.256530][ T5790] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 274.294390][ T5795] veth0_macvtap: entered promiscuous mode [ 274.393338][ T5786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 274.404355][ T5786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 274.414739][ T5786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 274.425729][ T5786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 274.441358][ T5786] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 274.462170][ T5795] veth1_macvtap: entered promiscuous mode [ 274.695332][ T5786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 274.707995][ T5786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 274.718627][ T5786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 274.729504][ T5786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 274.744943][ T5786] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 274.764848][ T5795] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 274.775693][ T5795] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 274.786003][ T5795] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 274.796803][ T5795] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 274.807155][ T5795] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 274.820784][ T5795] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 274.839437][ T5795] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 274.910103][ T5795] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 274.924019][ T5795] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 274.934356][ T5795] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 274.945173][ T5795] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 274.955305][ T5795] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 274.967878][ T5795] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 274.983719][ T5795] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 275.029106][ T5786] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 275.040178][ T5786] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 275.051964][ T5786] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 275.061173][ T5786] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 275.203228][ T5795] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 275.212533][ T5795] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 275.221720][ T5795] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 275.231004][ T5795] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 276.674880][ T5793] veth0_vlan: entered promiscuous mode [ 276.830016][ T5793] veth1_vlan: entered promiscuous mode [ 277.188105][ T5793] veth0_macvtap: entered promiscuous mode [ 277.275161][ T5793] veth1_macvtap: entered promiscuous mode [ 277.501592][ T5793] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 277.512727][ T5793] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 277.523033][ T5793] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 277.533942][ T5793] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 277.544143][ T5793] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 277.554966][ T5793] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 277.566078][ T5793] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 277.577463][ T5793] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 277.593278][ T5793] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 277.683072][ T5793] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 277.694294][ T5793] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 277.704616][ T5793] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 277.715481][ T5793] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 277.726530][ T5793] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 277.737484][ T5793] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 277.747688][ T5793] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 277.758757][ T5793] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 277.774369][ T5793] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 277.954376][ T5793] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 277.965590][ T5793] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 277.976337][ T5793] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 277.986483][ T5793] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 281.613677][ T4162] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 281.621675][ T4162] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 281.857577][ T4869] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 281.866245][ T4869] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 281.923256][ T4869] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 281.931381][ T4869] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 282.049086][ T4339] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 282.058540][ T4339] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 282.502786][ T3889] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 282.510885][ T3889] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 282.734488][ T4869] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 282.742662][ T4869] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 282.828085][ T4339] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 282.836767][ T4339] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 282.897810][ T3011] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 282.906549][ T3011] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 282.969440][ T5782] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 284.026701][ T5966] loop1: detected capacity change from 0 to 512 [ 284.268462][ T5966] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 284.282467][ T5966] ext4 filesystem being mounted at /0/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 284.312740][ T5966] process 'syz.1.2' launched '/dev/fd/8' with NULL argv: empty string added [ 284.564607][ T5782] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 285.365575][ T5984] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 581 [ 285.991305][ T3889] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 285.999759][ T3889] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 286.334217][ T4339] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 286.342567][ T4339] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 287.433491][ T6000] loop2: detected capacity change from 0 to 512 [ 287.477687][ T6000] ======================================================= [ 287.477687][ T6000] WARNING: The mand mount option has been deprecated and [ 287.477687][ T6000] and is ignored by this kernel. Remove the mand [ 287.477687][ T6000] option from the mount to silence this warning. [ 287.477687][ T6000] ======================================================= [ 287.699988][ T6000] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 287.794901][ T6000] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 287.808378][ T6000] ext4 filesystem being mounted at /3/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 288.200981][ T6009] IPv6: Can't replace route, no match found [ 288.337114][ T6012] program syz.3.18 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 288.350163][ T6012] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 288.691856][ T5786] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 288.747848][ T6015] vxcan0: tx drop: invalid sa for name 0x0000000000000005 [ 289.094708][ T6007] loop1: detected capacity change from 0 to 8192 [ 289.298911][ T6017] loop3: detected capacity change from 0 to 512 [ 289.367838][ T6017] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 289.642387][ T6017] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 289.655797][ T6017] ext4 filesystem being mounted at /4/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 289.855068][ T6025] netlink: 8 bytes leftover after parsing attributes in process `syz.0.23'. [ 289.977112][ T6025] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 290.221757][ T6025] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 290.462770][ T6025] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 290.584458][ T5790] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 290.701361][ T6025] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 290.906377][ T1282] ieee802154 phy0 wpan0: encryption failed: -22 [ 290.913414][ T1282] ieee802154 phy1 wpan1: encryption failed: -22 [ 291.056417][ T6025] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 291.092329][ T6025] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 291.122928][ T6025] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 291.153935][ T6025] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 293.385558][ T6055] netlink: 132 bytes leftover after parsing attributes in process `syz.0.36'. [ 296.010853][ T6090] netlink: 'syz.0.50': attribute type 28 has an invalid length. [ 296.213351][ T6090] loop0: detected capacity change from 0 to 1024 [ 296.265677][ T6090] EXT4-fs: Ignoring removed nomblk_io_submit option [ 296.450256][ T6090] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 296.483748][ T6094] loop4: detected capacity change from 0 to 256 [ 296.968241][ T6094] FAT-fs (loop4): Directory bread(block 64) failed [ 296.971226][ T5795] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 296.976893][ T6094] FAT-fs (loop4): Directory bread(block 65) failed [ 296.991513][ T6094] FAT-fs (loop4): Directory bread(block 66) failed [ 296.998509][ T6094] FAT-fs (loop4): Directory bread(block 67) failed [ 297.012879][ T6094] FAT-fs (loop4): Directory bread(block 68) failed [ 297.019700][ T6094] FAT-fs (loop4): Directory bread(block 69) failed [ 297.029267][ T6094] FAT-fs (loop4): Directory bread(block 70) failed [ 297.033402][ T6105] loop1: detected capacity change from 0 to 1024 [ 297.036210][ T6094] FAT-fs (loop4): Directory bread(block 71) failed [ 297.049734][ T6094] FAT-fs (loop4): Directory bread(block 72) failed [ 297.058316][ T6094] FAT-fs (loop4): Directory bread(block 73) failed [ 297.240461][ T6105] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a040c018, mo2=0002] [ 297.344926][ T6105] System zones: 0-1, 3-12 [ 297.353177][ T6105] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 297.453495][ T6105] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2863: Unable to expand inode 12. Delete some EAs or run e2fsck. [ 298.090472][ T6121] netlink: 64 bytes leftover after parsing attributes in process `syz.0.61'. [ 298.141198][ T5782] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 298.814544][ T6130] tmpfs: Bad value for 'mpol' [ 299.339529][ T6132] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 299.550702][ T6132] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 299.760817][ T6132] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 299.994875][ T6132] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 300.277406][ T6144] loop0: detected capacity change from 0 to 256 [ 300.324451][ T6132] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 300.354634][ T6132] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 300.396463][ T6132] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 300.427437][ T6132] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 300.702792][ T6144] FAT-fs (loop0): Directory bread(block 64) failed [ 300.709735][ T6144] FAT-fs (loop0): Directory bread(block 65) failed [ 300.717338][ T6144] FAT-fs (loop0): Directory bread(block 66) failed [ 300.724235][ T6144] FAT-fs (loop0): Directory bread(block 67) failed [ 300.731192][ T6144] FAT-fs (loop0): Directory bread(block 68) failed [ 300.738206][ T6144] FAT-fs (loop0): Directory bread(block 69) failed [ 300.745251][ T6144] FAT-fs (loop0): Directory bread(block 70) failed [ 300.752034][ T6144] FAT-fs (loop0): Directory bread(block 71) failed [ 300.759328][ T6144] FAT-fs (loop0): Directory bread(block 72) failed [ 300.765269][ T6146] loop2: detected capacity change from 0 to 512 [ 300.766202][ T6144] FAT-fs (loop0): Directory bread(block 73) failed [ 300.828675][ T6146] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 300.953959][ T6146] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 300.967787][ T6146] ext4 filesystem being mounted at /14/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 301.076077][ T6154] loop1: detected capacity change from 0 to 1024 [ 301.169492][ T6154] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a040c018, mo2=0002] [ 301.183492][ T6154] System zones: 0-1, 3-12 [ 301.207963][ T6154] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 301.664522][ T5786] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 302.046193][ T5782] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 302.353818][ T6160] loop0: detected capacity change from 0 to 8192 [ 303.923475][ T6183] loop4: detected capacity change from 0 to 1024 [ 304.034354][ T6183] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a040c018, mo2=0002] [ 304.059377][ T6183] System zones: 0-1, 3-12 [ 304.065660][ T6192] loop3: detected capacity change from 0 to 256 [ 304.129898][ T6183] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 304.156645][ T6193] loop2: detected capacity change from 0 to 512 [ 304.169859][ T6193] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 304.282093][ T6193] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 304.304931][ T6193] ext4 filesystem being mounted at /17/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 304.419275][ T6192] FAT-fs (loop3): Directory bread(block 64) failed [ 304.426626][ T6192] FAT-fs (loop3): Directory bread(block 65) failed [ 304.433960][ T6192] FAT-fs (loop3): Directory bread(block 66) failed [ 304.440783][ T6192] FAT-fs (loop3): Directory bread(block 67) failed [ 304.447952][ T6192] FAT-fs (loop3): Directory bread(block 68) failed [ 304.454992][ T6192] FAT-fs (loop3): Directory bread(block 69) failed [ 304.461959][ T6192] FAT-fs (loop3): Directory bread(block 70) failed [ 304.468953][ T6192] FAT-fs (loop3): Directory bread(block 71) failed [ 304.476095][ T6192] FAT-fs (loop3): Directory bread(block 72) failed [ 304.490430][ T6192] FAT-fs (loop3): Directory bread(block 73) failed [ 304.916373][ T5793] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 305.026365][ T5786] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 305.443192][ T6201] loop1: detected capacity change from 0 to 8192 [ 305.519824][ T6201] Dev loop1: unable to read RDB block 8 [ 305.530582][ T6201] loop1: unable to read partition table [ 305.584583][ T6201] loop_reread_partitions: partition scan of loop1 () failed (rc=-5) [ 307.103499][ T6225] loop2: detected capacity change from 0 to 256 [ 307.418484][ T6225] FAT-fs (loop2): Directory bread(block 64) failed [ 307.425673][ T6225] FAT-fs (loop2): Directory bread(block 65) failed [ 307.432891][ T6225] FAT-fs (loop2): Directory bread(block 66) failed [ 307.439823][ T6225] FAT-fs (loop2): Directory bread(block 67) failed [ 307.447171][ T6225] FAT-fs (loop2): Directory bread(block 68) failed [ 307.461516][ T6225] FAT-fs (loop2): Directory bread(block 69) failed [ 307.470925][ T6225] FAT-fs (loop2): Directory bread(block 70) failed [ 307.478000][ T6225] FAT-fs (loop2): Directory bread(block 71) failed [ 307.489887][ T6225] FAT-fs (loop2): Directory bread(block 72) failed [ 307.499691][ T6225] FAT-fs (loop2): Directory bread(block 73) failed [ 308.500598][ T6241] loop4: detected capacity change from 0 to 512 [ 308.544553][ T6241] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 308.558148][ T6241] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 308.658402][ T6241] EXT4-fs (loop4): 1 truncate cleaned up [ 308.666405][ T6241] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 308.776384][ T6240] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2240: inode #15: comm syz.4.107: corrupted in-inode xattr: overlapping e_value [ 308.854863][ T6240] EXT4-fs warning (device loop4): ext4_xattr_set_entry:1772: inode #15: comm syz.4.107: unable to update i_inline_off [ 308.868213][ T6240] EXT4-fs error (device loop4): ext4_xattr_ibody_get:653: inode #15: comm syz.4.107: corrupted in-inode xattr: overlapping e_value [ 309.243234][ T6251] loop1: detected capacity change from 0 to 2048 [ 309.373680][ T5793] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 309.376169][ T6251] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 309.402911][ T6251] ext4 filesystem being mounted at /22/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 309.450070][ T6249] loop3: detected capacity change from 0 to 8192 [ 309.500735][ T6258] netlink: 60 bytes leftover after parsing attributes in process `syz.0.112'. [ 309.510609][ T6258] netlink: 60 bytes leftover after parsing attributes in process `syz.0.112'. [ 309.538304][ T6249] loop3: unable to read partition table [ 309.563922][ T6249] loop_reread_partitions: partition scan of loop3 () failed (rc=-5) [ 309.873143][ T5834] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 309.925558][ T6251] syz.1.110 (6251) used greatest stack depth: 3120 bytes left [ 309.937340][ T6258] netlink: 60 bytes leftover after parsing attributes in process `syz.0.112'. [ 309.947057][ T6258] netlink: 60 bytes leftover after parsing attributes in process `syz.0.112'. [ 310.030672][ T3978] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm kworker/u8:17: bg 0: block 345: padding at end of block bitmap is not set [ 310.091043][ T3978] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 119 with error 117 [ 310.104528][ T3978] EXT4-fs (loop1): This should not happen!! Data will be lost [ 310.104528][ T3978] [ 310.192813][ T5834] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 310.203536][ T5834] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 310.211822][ T5834] usb 1-1: Product: syz [ 310.219199][ T5834] usb 1-1: Manufacturer: syz [ 310.224974][ T5834] usb 1-1: SerialNumber: syz [ 310.254147][ T5782] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 310.390352][ T5834] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 310.792605][ T10] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 310.859249][ T6258] netlink: 60 bytes leftover after parsing attributes in process `syz.0.112'. [ 310.868960][ T6258] netlink: 60 bytes leftover after parsing attributes in process `syz.0.112'. [ 311.142449][ T5834] usb 1-1: USB disconnect, device number 2 [ 311.384029][ T29] audit: type=1326 audit(1740474311.300:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6272 comm="+}[@" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf747d579 code=0x7ffc0000 [ 311.407709][ T29] audit: type=1326 audit(1740474311.310:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6272 comm="+}[@" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf747d579 code=0x7ffc0000 [ 311.578620][ T29] audit: type=1326 audit(1740474311.360:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6272 comm="+}[@" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf747d579 code=0x7ffc0000 [ 311.600765][ T29] audit: type=1326 audit(1740474311.360:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6272 comm="+}[@" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf747d579 code=0x7ffc0000 [ 311.623009][ T29] audit: type=1326 audit(1740474311.360:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6272 comm="+}[@" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf747d579 code=0x7ffc0000 [ 311.644899][ T29] audit: type=1326 audit(1740474311.370:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6272 comm="+}[@" exe="/root/syz-executor" sig=0 arch=40000003 syscall=366 compat=1 ip=0xf747d579 code=0x7ffc0000 [ 311.674480][ T29] audit: type=1326 audit(1740474311.380:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6272 comm="+}[@" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf747d579 code=0x7ffc0000 [ 311.696460][ T29] audit: type=1326 audit(1740474311.380:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6272 comm="+}[@" exe="/root/syz-executor" sig=0 arch=40000003 syscall=366 compat=1 ip=0xf747d579 code=0x7ffc0000 [ 311.718291][ T29] audit: type=1326 audit(1740474311.390:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6272 comm="+}[@" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf747d579 code=0x7ffc0000 [ 311.741173][ T29] audit: type=1326 audit(1740474311.400:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6272 comm="+}[@" exe="/root/syz-executor" sig=0 arch=40000003 syscall=366 compat=1 ip=0xf747d579 code=0x7ffc0000 [ 311.889441][ T10] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 311.897503][ T10] ath9k_htc: Failed to initialize the device [ 311.964969][ T5834] usb 1-1: ath9k_htc: USB layer deinitialized [ 312.750966][ T6287] mmap: syz.2.123 (6287) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 312.849575][ T6291] 9pnet_fd: Insufficient options for proto=fd [ 313.324914][ T6298] program syz.3.128 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 313.681569][ T6300] loop2: detected capacity change from 0 to 2048 [ 313.739109][ T6300] EXT4-fs: Ignoring removed mblk_io_submit option [ 313.856921][ T6300] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 313.936811][ T6309] loop4: detected capacity change from 0 to 1024 [ 313.985048][ T6309] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a040c018, mo2=0002] [ 314.022789][ T6309] System zones: 0-1, 3-12 [ 314.030324][ T6309] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 314.380134][ T5786] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 314.833354][ T10] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 314.992653][ T10] usb 4-1: device descriptor read/64, error -71 [ 315.063504][ T5793] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 315.253373][ T10] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 315.453232][ T10] usb 4-1: device descriptor read/64, error -71 [ 315.564542][ T10] usb usb4-port1: attempt power cycle [ 315.811307][ T6338] ===================================================== [ 315.818850][ T6338] BUG: KMSAN: uninit-value in cmsghdr_from_user_compat_to_kern+0x568/0x10d0 [ 315.828861][ T6338] cmsghdr_from_user_compat_to_kern+0x568/0x10d0 [ 315.835828][ T6338] ____sys_sendmsg+0x22c/0xda0 [ 315.840803][ T6338] __sys_sendmsg_sock+0x42/0x60 [ 315.848961][ T6338] io_sendmsg+0x36a/0xe30 [ 315.854798][ T6338] io_issue_sqe+0x394/0x1fb0 [ 315.859647][ T6338] io_submit_sqes+0x11c3/0x2ff0 [ 315.865390][ T6338] __se_sys_io_uring_enter+0x41d/0x4da0 [ 315.871230][ T6338] __ia32_sys_io_uring_enter+0x11d/0x1a0 [ 315.877282][ T6338] ia32_sys_call+0xd59/0x4180 [ 315.882340][ T6338] __do_fast_syscall_32+0xb0/0x110 [ 315.887720][ T6338] do_fast_syscall_32+0x38/0x80 [ 315.892919][ T6338] do_SYSENTER_32+0x1f/0x30 [ 315.897686][ T6338] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 315.904616][ T6338] [ 315.907070][ T6338] Uninit was stored to memory at: [ 315.914673][ T6338] io_sendmsg+0x694/0xe30 [ 315.919271][ T6338] io_issue_sqe+0x394/0x1fb0 [ 315.924495][ T6338] io_submit_sqes+0x11c3/0x2ff0 [ 315.929635][ T6338] __se_sys_io_uring_enter+0x41d/0x4da0 [ 315.935576][ T6338] __ia32_sys_io_uring_enter+0x11d/0x1a0 [ 315.941495][ T6338] ia32_sys_call+0xd59/0x4180 [ 315.946747][ T6338] __do_fast_syscall_32+0xb0/0x110 [ 315.955451][ T6338] do_fast_syscall_32+0x38/0x80 [ 315.960538][ T6338] do_SYSENTER_32+0x1f/0x30 [ 315.967154][ T6338] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 315.974009][ T6338] [ 315.976465][ T6338] Uninit was created at: [ 315.981018][ T6338] __alloc_frozen_pages_noprof+0x9a7/0xe00 [ 315.987296][ T6338] alloc_pages_mpol+0x4cd/0x890 [ 315.992558][ T6338] alloc_frozen_pages_noprof+0x1bf/0x1e0 [ 315.998521][ T6338] allocate_slab+0x23a/0x1110 [ 316.003707][ T6338] ___slab_alloc+0x1287/0x3540 [ 316.008725][ T6338] kmem_cache_alloc_bulk_noprof+0x486/0x1330 [ 316.015057][ T6338] __io_alloc_req_refill+0x84/0x5b0 [ 316.020486][ T6338] io_submit_sqes+0x90f/0x2ff0 [ 316.025722][ T6338] __se_sys_io_uring_enter+0x41d/0x4da0 [ 316.031628][ T6338] __ia32_sys_io_uring_enter+0x11d/0x1a0 [ 316.037687][ T6338] ia32_sys_call+0xd59/0x4180 [ 316.043435][ T6338] __do_fast_syscall_32+0xb0/0x110 [ 316.048794][ T6338] do_fast_syscall_32+0x38/0x80 [ 316.057279][ T6338] do_SYSENTER_32+0x1f/0x30 [ 316.063129][ T6338] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 316.069754][ T6338] [ 316.072546][ T6338] CPU: 0 UID: 0 PID: 6338 Comm: syz.0.143 Not tainted 6.14.0-rc4-syzkaller #0 [ 316.081642][ T6338] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 316.092117][ T6338] ===================================================== [ 316.099303][ T6338] Disabling lock debugging due to kernel taint [ 316.105763][ T6338] Kernel panic - not syncing: kmsan.panic set ... [ 316.112443][ T6338] CPU: 0 UID: 0 PID: 6338 Comm: syz.0.143 Tainted: G B 6.14.0-rc4-syzkaller #0 [ 316.123014][ T6338] Tainted: [B]=BAD_PAGE [ 316.127288][ T6338] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 316.137531][ T6338] Call Trace: [ 316.140943][ T6338] [ 316.143991][ T6338] dump_stack_lvl+0x216/0x2d0 [ 316.148856][ T6338] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 316.154932][ T6338] dump_stack+0x1e/0x24 [ 316.159288][ T6338] panic+0x4e2/0xcf0 [ 316.163521][ T6338] ? kmsan_get_metadata+0xc1/0x1c0 [ 316.169338][ T6338] kmsan_report+0x2c7/0x2d0 [ 316.174095][ T6338] ? kmsan_get_metadata+0xc0/0x1c0 [ 316.179427][ T6338] ? __msan_warning+0x95/0x120 [ 316.184397][ T6338] ? cmsghdr_from_user_compat_to_kern+0x568/0x10d0 [ 316.191147][ T6338] ? ____sys_sendmsg+0x22c/0xda0 [ 316.196266][ T6338] ? __sys_sendmsg_sock+0x42/0x60 [ 316.201465][ T6338] ? io_sendmsg+0x36a/0xe30 [ 316.206200][ T6338] ? io_issue_sqe+0x394/0x1fb0 [ 316.211165][ T6338] ? io_submit_sqes+0x11c3/0x2ff0 [ 316.216406][ T6338] ? __se_sys_io_uring_enter+0x41d/0x4da0 [ 316.222372][ T6338] ? __ia32_sys_io_uring_enter+0x11d/0x1a0 [ 316.228426][ T6338] ? ia32_sys_call+0xd59/0x4180 [ 316.233497][ T6338] ? __do_fast_syscall_32+0xb0/0x110 [ 316.238999][ T6338] ? do_fast_syscall_32+0x38/0x80 [ 316.244224][ T6338] ? do_SYSENTER_32+0x1f/0x30 [ 316.249093][ T6338] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 316.255857][ T6338] ? kmsan_get_metadata+0x13e/0x1c0 [ 316.261313][ T6338] ? kmsan_internal_set_shadow_origin+0x69/0x100 [ 316.267914][ T6338] ? kmsan_get_metadata+0x13e/0x1c0 [ 316.273337][ T6338] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 316.279390][ T6338] ? _raw_spin_unlock_irqrestore+0x3f/0x60 [ 316.285446][ T6338] ? kmsan_get_metadata+0x13e/0x1c0 [ 316.290871][ T6338] ? kmsan_internal_set_shadow_origin+0x69/0x100 [ 316.297431][ T6338] ? kmsan_get_metadata+0x13e/0x1c0 [ 316.302861][ T6338] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 316.308889][ T6338] __msan_warning+0x95/0x120 [ 316.313678][ T6338] cmsghdr_from_user_compat_to_kern+0x568/0x10d0 [ 316.320233][ T6338] ? _raw_spin_unlock_irqrestore+0x3f/0x60 [ 316.326275][ T6338] ? stack_depot_save_flags+0x6db/0x750 [ 316.332043][ T6338] ? kmsan_internal_set_shadow_origin+0x69/0x100 [ 316.338591][ T6338] ? kmsan_get_metadata+0x13e/0x1c0 [ 316.344044][ T6338] ____sys_sendmsg+0x22c/0xda0 [ 316.349002][ T6338] ? __fget_files+0x42b/0x500 [ 316.353929][ T6338] ? kmsan_get_metadata+0xc0/0x1c0 [ 316.359276][ T6338] __sys_sendmsg_sock+0x42/0x60 [ 316.364340][ T6338] io_sendmsg+0x36a/0xe30 [ 316.368919][ T6338] ? __pfx_io_sendmsg+0x10/0x10 [ 316.374185][ T6338] io_issue_sqe+0x394/0x1fb0 [ 316.379036][ T6338] io_submit_sqes+0x11c3/0x2ff0 [ 316.384175][ T6338] ? kmsan_get_metadata+0xc0/0x1c0 [ 316.389518][ T6338] ? kmsan_internal_set_shadow_origin+0x69/0x100 [ 316.396076][ T6338] __se_sys_io_uring_enter+0x41d/0x4da0 [ 316.401859][ T6338] ? finish_task_switch+0x1c8/0x8f0 [ 316.407295][ T6338] ? do_futex+0x380/0x4a0 [ 316.411812][ T6338] ? kmsan_get_metadata+0x13e/0x1c0 [ 316.417232][ T6338] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 316.423276][ T6338] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 316.429308][ T6338] __ia32_sys_io_uring_enter+0x11d/0x1a0 [ 316.435194][ T6338] ia32_sys_call+0xd59/0x4180 [ 316.440078][ T6338] __do_fast_syscall_32+0xb0/0x110 [ 316.445389][ T6338] ? switch_fpu_return+0x17/0x20 [ 316.450574][ T6338] do_fast_syscall_32+0x38/0x80 [ 316.455626][ T6338] do_SYSENTER_32+0x1f/0x30 [ 316.460333][ T6338] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 316.466944][ T6338] RIP: 0023:0xf744d579 [ 316.471170][ T6338] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 316.491004][ T6338] RSP: 002b:00000000f50d655c EFLAGS: 00000206 ORIG_RAX: 00000000000001aa [ 316.499638][ T6338] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000000008aa [ 316.507767][ T6338] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 316.515890][ T6338] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 316.524024][ T6338] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 316.532156][ T6338] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 316.540320][ T6338] [ 316.543841][ T6338] Kernel Offset: disabled [ 316.548272][ T6338] Rebooting in 86400 seconds..