last executing test programs: 10.204789493s ago: executing program 3 (id=513): r0 = socket(0x28, 0x5, 0x0) r1 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r1, &(0x7f0000000040), 0x10) listen(r1, 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000fc0)={0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000080)="3bfdd75fa5717852d59a9367444a2130e72cd4dabc8854532cca0c32a5b9f844a4610c7525650ce3d3b76b15026d93e6dee896115e9364066aa3d14e33ef732b4681335c576902153114bdb9c74b538a71115fb1d1a63d1b04129661b29aab89d0be999a6b7c9bea755adedbf305a79f70b71d3d4c98577b49db4963ce89b0def5e840f459659cb6f86d56b069a5de11d601d348ff88ca6e5e2cfe40176880b33e9e8dbc32ba2e6a99b1b50276dc4f06166000d7069a3cc76f", 0xb9}, {&(0x7f0000000180)="892950e2405ee8629d9384a91c16d1706a3e61f305119f95cac0f1927f4c205b971eb41147cb1f86883d6910e68ac3996551800b3ec64b77f8444b18345a2c8b178eeeba0cde7319a5a46bfe7f5770e019efd9d52069ed", 0x57}, {&(0x7f0000000200)="a68cde0d56b170df7710b54f17d9a39c4f98f3547190", 0x16}, {&(0x7f0000000240)="45e04400f2b383517a08c397dd0a76e67ecfc8e74573c24dedd3a48fb62418c1412fdcd15e888cb0f5d02e77bfecefda6b064c0bb2b66a9a522e63873dde02330510255eec7dfa1af708cdab59fb71eca786a359a2c3b0cbad35144ec5b069c53f90e43339845dc7fd140c55b0149ab38eb27c140f374bcc2c95b0b121d1a9302f3a01b888243b3fc0d46f0de0", 0x8d}, {&(0x7f0000000300)="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", 0xcb3}], 0x5, &(0x7f0000001480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private, @multicast1}}}], 0x20}, 0x0) connect$vsock_stream(r0, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) sendmmsg(r0, &(0x7f0000000100)=[{{0x0, 0xffffffc2, &(0x7f00000000c0)=[{&(0x7f0000000000)="1b", 0x40000}], 0x1}}], 0x51, 0x0) 10.122088089s ago: executing program 3 (id=514): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000007c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x100, 0x3, 0x6361, 0x5, 0xfffffffd, 0x10000}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000001}, 0x20000804) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x20004000}, 0x4010004) ioctl$SIOCSIFHWADDR(r1, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="640000004ec6"}) 9.746151671s ago: executing program 3 (id=520): r0 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xd, 0x0, &(0x7f0000000040)) r2 = socket(0x2, 0x80805, 0x0) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f0000000080)={0x634c, 0x4, 0x3}, 0x10) 9.575210011s ago: executing program 3 (id=522): r0 = socket(0x28, 0x5, 0x0) r1 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r1, &(0x7f0000000040), 0x10) listen(r1, 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000fc0)={0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000080)="3bfdd75fa5717852d59a9367444a2130e72cd4dabc8854532cca0c32a5b9f844a4610c7525650ce3d3b76b15026d93e6dee896115e9364066aa3d14e33ef732b4681335c576902153114bdb9c74b538a71115fb1d1a63d1b04129661b29aab89d0be999a6b7c9bea755adedbf305a79f70b71d3d4c98577b49db4963ce89b0def5e840f459659cb6f86d56b069a5de11d601d348ff88ca6e5e2cfe40176880b33e9e8dbc32ba2e6a99b1b50276dc4f06166000d7069a3cc76f", 0xb9}, {&(0x7f0000000180)="892950e2405ee8629d9384a91c16d1706a3e61f305119f95cac0f1927f4c205b971eb41147cb1f86883d6910e68ac3996551800b3ec64b77f8444b18345a2c8b178eeeba0cde7319a5a46bfe7f5770e019efd9d52069ed", 0x57}, {&(0x7f0000000200)="a68cde0d56b170df7710b54f17d9a39c4f98f3547190", 0x16}, {&(0x7f0000000240)="45e04400f2b383517a08c397dd0a76e67ecfc8e74573c24dedd3a48fb62418c1412fdcd15e888cb0f5d02e77bfecefda6b064c0bb2b66a9a522e63873dde02330510255eec7dfa1af708cdab59fb71eca786a359a2c3b0cbad35144ec5b069c53f90e43339845dc7fd140c55b0149ab38eb27c140f374bcc2c95b0b121d1a9302f3a01b888243b3fc0d46f0de0", 0x8d}, {&(0x7f0000000300)="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", 0xcb3}], 0x5, &(0x7f0000001480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private, @multicast1}}}], 0x20}, 0x0) connect$vsock_stream(r0, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) sendmmsg(r0, &(0x7f0000000100)=[{{0x0, 0xffffffc2, &(0x7f00000000c0)=[{&(0x7f0000000000)="1b", 0x40000}], 0x1}}], 0x51, 0x0) 9.404035731s ago: executing program 3 (id=523): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000000)={'vxcan1\x00'}) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vxcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000280)={0x1d, r2}, 0x18) sendmsg$can_j1939(r1, 0x0, 0x4004004) 9.06358531s ago: executing program 3 (id=527): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000000)) r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, 0x0, 0x0) readv(r0, &(0x7f0000000200), 0x0) sendmsg$can_bcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x80}}, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="500000000206030000000000000000000d0000000c000300686173683a69700005000400000000000900020073797a31000000000c000780080008400000005d05000500020000000500010006"], 0x50}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000740)={0x40, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x18, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty=0xfffffffe}}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x8}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, 0x7, 0x6, 0x801, 0x0, 0x0, {0xa, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000005}, 0x80) socket$inet6_tcp(0xa, 0x1, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x4d2f02, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0x7}, {0xffff, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006040)={0x0, 0x0, 0x0}, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f000000000000000000", 0x19) recvmmsg(0xffffffffffffffff, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) 2.56242777s ago: executing program 2 (id=568): setsockopt$bt_BT_SECURITY(0xffffffffffffffff, 0x112, 0x4, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) close(r4) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = socket$inet6(0xa, 0x2, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r8 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000780)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd2b, 0x25dfdbff, {0x0, 0x0, 0x0, r9, {0x0, 0x10}, {}, {0x8, 0x4}}, [@filter_kind_options=@f_flow={{0x9}, {0x14, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x13fa6}]}}]}, 0x44}}, 0x2) sendmmsg$inet(r5, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e23, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000340)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r7, @dev={0xac, 0x14, 0x14, 0x41}, @initdev={0xac, 0x1e, 0x0, 0x0}}}}], 0x20}}], 0x1, 0x4004800) 2.279853137s ago: executing program 0 (id=569): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newqdisc={0x6c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x3c, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x40, 0x6, 0x3, 0x8, 0x6, 0xffffff26, 0x2, 0x80, 0x8, 0x7, 0x15, 0x9d, 0x4, 0x5, 0x7, 0xc5f7}}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x200400dc}, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r5, 0x0, 0x20000800) close(0x3) 1.919908318s ago: executing program 2 (id=572): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000140)={0x3, 0x2, 0xfec00000, 0x1000, &(0x7f0000f40000/0x1000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x2, 0x2, 0xddcbf000, 0x1000, &(0x7f0000d69000/0x1000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION2(r1, 0x40a0ae49, &(0x7f0000000280)={0x5, 0x0, 0x4000, 0x2000, &(0x7f0000d6c000/0x2000)=nil, 0x7}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0) 1.905061588s ago: executing program 1 (id=573): bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000040)={@cgroup, 0xffffffffffffffff, 0x2f}, 0x20) sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, 0x0, 0x10) r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r0) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/net\x00') r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, 0x0, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r1, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) r2 = syz_open_procfs$namespace(0x0, &(0x7f0000000280)='ns/net\x00') bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000480)={@cgroup=r2, 0x11, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000640)={@cgroup=r3, 0x24, 0x0, 0xffff, &(0x7f0000000000)=[0x0], 0x40e8, 0x0, 0x0, 0x0, 0x0}, 0x40) 1.88684385s ago: executing program 0 (id=574): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) socket$inet_udplite(0x2, 0x2, 0x88) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8000}, 0x0) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socket$packet(0x11, 0x3, 0x300) syz_mount_image$fuse(0x0, &(0x7f0000000000)='./bus\x00', 0x300f401, 0x0, 0x2, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) 1.647951803s ago: executing program 1 (id=575): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000540)=ANY=[@ANYBLOB="18"], 0x0, 0x5, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xff}, 0x94) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000500)=ANY=[@ANYBLOB="440000001000090400000000fbdbdf2500000000", @ANYRES32=r2, @ANYBLOB="000e03000000000024001280110001006272696467655f736c6176650000"], 0x44}}, 0x40c4) 1.479662383s ago: executing program 1 (id=576): socketpair$unix(0x1, 0x3, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) 1.410671697s ago: executing program 2 (id=577): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000280)='./file1\x00', 0x2800000, &(0x7f0000000400)={[{@debug}, {@noacl}, {@bh}, {@test_dummy_encryption}, {@i_version}, {@data_ordered}, {@nolazytime}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x40}}]}, 0x1, 0xbcd, &(0x7f0000000740)="$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") r0 = fsopen(&(0x7f00000001c0)='devtmpfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000080), 0x1e1983, 0x0) semctl$IPC_RMID(0x0, 0x0, 0xb00) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000300)='./file0\x00', 0xa00008, &(0x7f0000000000), 0x1, 0x7c8, &(0x7f0000001280)="$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") mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, 0xffffffffffffffff, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000380)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000001f40)=ANY=[@ANYBLOB]) r2 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) fanotify_mark(0xffffffffffffffff, 0x641, 0x20, r2, 0x0) execve(&(0x7f0000000440)='./file0\x00', 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000300), &(0x7f0000000280)='./bus\x00', 0x3c9c9b, 0x0, 0x0, 0x0, &(0x7f00000000c0)) mkdir(&(0x7f0000000140)='./file0\x00', 0x115) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="14"], &(0x7f0000000000), 0x0) ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x4b72, 0x0) open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x0) 1.20005109s ago: executing program 0 (id=578): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vxcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000280)={0x1d, r3}, 0x18) sendmsg$can_j1939(r1, &(0x7f0000001300)={&(0x7f0000000340)={0x1d, r2, 0x0, {0x1, 0x1}}, 0x18, 0x0, 0x1, 0x0, 0x0, 0x24004102}, 0x4004004) 1.073860047s ago: executing program 1 (id=579): r0 = socket(0x28, 0x5, 0x0) r1 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r1, &(0x7f0000000040), 0x10) listen(r1, 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000fc0)={0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000080)="3bfdd75fa5717852d59a9367444a2130e72cd4dabc8854532cca0c32a5b9f844a4610c7525650ce3d3b76b15026d93e6dee896115e9364066aa3d14e33ef732b4681335c576902153114bdb9c74b538a71115fb1d1a63d1b04129661b29aab89d0be999a6b7c9bea755adedbf305a79f70b71d3d4c98577b49db4963ce89b0def5e840f459659cb6f86d56b069a5de11d601d348ff88ca6e5e2cfe40176880b33e9e8dbc32ba2e6a99b1b50276dc4f06166000d7069a3cc76f", 0xb9}, {&(0x7f0000000180)="892950e2405ee8629d9384a91c16d1706a3e61f305119f95cac0f1927f4c205b971eb41147cb1f86883d6910e68ac3996551800b3ec64b77f8444b18345a2c8b178eeeba0cde7319a5a46bfe7f5770e019efd9d52069edcced33a758c4e657f3a792dc193a1911b4e82ea800", 0x6c}, {&(0x7f0000000200)="a68cde0d56b170df7710b54f17d9a39c4f98f3547190", 0x16}, {&(0x7f0000000240)="45e04400f2b383517a08c397dd0a76e67ecfc8e74573c24dedd3a48fb62418c1412fdcd15e888cb0f5d02e77bfecefda6b064c0bb2b66a9a522e63873dde02330510255eec7dfa1af708cdab59fb71eca786a359a2c3b0cbad35144ec5b069c53f90e43339845dc7fd140c55b0149ab38eb27c140f374bcc2c95b0b121d1a9302f3a01b888243b3fc0d46f0de0", 0x8d}, {&(0x7f0000000300)="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", 0xcb3}], 0x5, &(0x7f0000001480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private, @multicast1}}}], 0x20}, 0x0) connect$vsock_stream(r0, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) sendmmsg(r0, &(0x7f0000000100)=[{{0x0, 0xffffffc2, &(0x7f00000000c0)=[{&(0x7f0000000000)="1b", 0x40000}], 0x1}}], 0x51, 0x0) 807.967832ms ago: executing program 0 (id=580): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x7}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) r4 = socket$unix(0x1, 0x2, 0x0) socket$kcm(0x11, 0x3, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r5) socket$unix(0x1, 0x2, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000003f00)=@newtfilter={0x50, 0x2c, 0xd3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0xb, 0xfff3}, {}, {0x8, 0x300}}, [@filter_kind_options=@f_flower={{0xb}, {0x20, 0x2, [@TCA_FLOWER_KEY_ENC_IPV6_SRC={0x14, 0x1f, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @TCA_FLOWER_KEY_CVLAN_ID={0x6, 0x4d, 0xbc3}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x10}, 0x0) 588.397035ms ago: executing program 1 (id=581): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x9}]}, 0x24}}, 0x20000800) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)={0x6c, r1, 0x5, 0x4, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x38, 0xe, {{{}, {0x1}, @device_b, @broadcast, @from_mac}, 0x0, @default, 0x0, @val, @val, @void, @void, @void, @void, @void, @val={0x2a, 0x1, {0x1, 0x1}}, @void, @void, @void, @val={0x71, 0x7, {0x81, 0x11, 0x0, 0x1, 0x1, 0xf0, 0x8}}, @void}}, @NL80211_ATTR_FTM_RESPONDER={0x8, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_ENABLED={0x4}]}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x6c}}, 0x0) 441.441654ms ago: executing program 2 (id=582): r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x9}, 0x94) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r0) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002bbd7000fddbdf253700000008000300", @ANYRES32=r1, @ANYBLOB="080026006c0900000800a0000900000008005700881300000800a10000100000080027"], 0x44}, 0x1, 0x0, 0x0, 0x40}, 0x90) 312.440401ms ago: executing program 0 (id=583): bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000040)={@cgroup, 0xffffffffffffffff, 0x2f}, 0x20) sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, 0x0, 0x10) r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r0) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/net\x00') r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, 0x0, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r1, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) r2 = syz_open_procfs$namespace(0x0, &(0x7f0000000280)='ns/net\x00') bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000480)={@cgroup=r2, 0x11, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000640)={@cgroup=r3, 0x24, 0x0, 0xffff, &(0x7f0000000000)=[0x0], 0x40e8, 0x0, 0x0, 0x0, 0x0}, 0x40) 227.976627ms ago: executing program 1 (id=584): unshare(0x6a040000) openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCADDRT(r0, 0x890c, &(0x7f0000000040)={0x0, @l2tp={0x2, 0x0, @empty}, @l2tp={0x2, 0x0, @broadcast, 0xfffffffe}, @nl=@unspec, 0x0, 0x0, 0x0, 0x0, 0x3}) 223.767207ms ago: executing program 2 (id=585): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000540)=ANY=[@ANYBLOB="18"], 0x0, 0x5, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xff}, 0x94) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000500)=ANY=[@ANYBLOB="440000001000090400000000fbdbdf2500000000", @ANYRES32=r2, @ANYBLOB="000e03000000000024001280110001006272696467655f736c6176650000"], 0x44}}, 0x40c4) 110.866813ms ago: executing program 0 (id=586): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x30000c6, &(0x7f0000000080)={[{@auto_da_alloc}, {@mblk_io_submit}]}, 0x1, 0x569, &(0x7f0000000a00)="$eJzs3d1rm9UfAPDvkzZ7//3WwRgqIgUvnMyla+vLBC/mtQ4Gej9D+6yMpsto0rHWgduFu5bhnQPxXrz2UvwHvPBvGOhgyCiCeBN50idZ2iZtuqUvms8HnnK+z0vPOXlyTs7JSUgAQ2s8+1OIeDkivkoiTkZEkh8bjfzg+Np5q0/vzGRbEo3GJ38kzfOyuPW/Wtcdz4OXIuLnLyPOFTbnW1temS9XKuliHk/UF25O1JZXzl9fKM+lc+mNqenpi+9MT73/3rsDq+ubV7KCjOTRqQdJXIoTedRZjxdwtzMYj/H8MSnGpQ0nTg4gs4Mk6br3hz0vBzszkrfzYmR9wMkYyVs98N/3RUQ0gCGV7Lj9/1rcnZIAe6s1DmjN7Qc0D/7XePLh2gRoc/1H194biSPNudGx1WTdzCib744NIP8sjx9/f/gg22Jw70MAbOvuvYi4MDq6uf9L8v7v+V3o45yNeej/YO/8lI1/3uo2/im0xz/RZfxzvEvbfR7bt//C4wFk01M2/vug6/i3vWg1NpJH/2uO+YrJteuVNOvb/h8RZ6N4OIu3Ws+5uPqo0etY5/gv27L8W2PBvByPRw+vv2a2XC+/SJ07PbkX8UrX8W/Svv/J2v1ft8STPR5X+szjTPrwtV7Htq//7mp8F/FG1/v/rLrJ1uuTE83nw0TrWbHZn/fP/NIr//2uf3b/j21d/7Gkc722tvM8vj3ydxrt9eT11tU/+n/+H0o+baYP5ftul+v1xcmIQ8nH7f2F1v6pZ9e24tb5Wf3Pvr51/5d06f+ORsRnfdb//unvX+117CDc/9mu9789u91w/3eeePTR59/0yr+//u/tZupsvqef/q/fAr7IYwcAAAAAAAAHTSEiTkRSKLXThUKptPb5jtNxrFCp1urnrlWXbsxG87uyY1EstFa6T3Z8HmIyXzFsxVMb4umIOBURX48cbcalmWpldr8rDwAAAAAAAAAAAAAAAAAAAAfE8R7f/8/8NrLfpQN2nZ/8huG1bfsfxC89AQeS138YXto/DK++2n9x98sB7D2v/zC8tH8YXto/DC/tH4aX9g8AAAAAAAAAAAAAAAAAAAAAAAAAAAADdeXy5WxrrD69M5PFs7eWl+art87PprX50sLSTGmmunizNFetzlXS0kx1Ybv/V6lWb05OxdLtiXpaq0/UlleuLlSXbtSvXl8oz6VXU78iBgAAAAAAAAAAAAAAAAAAAJvVllfmy5VKuigxxIm/Go3G814+ut+Fl9iVxH73TAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwzD8BAAD//1hdMq0=") setxattr$incfs_metadata(&(0x7f0000000240)='./file1\x00', &(0x7f0000000580), &(0x7f00000002c0)="30573472b621739991c336124406e8a5c812ca847e3bf9b837c91d46ab", 0x1d, 0x1) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r0 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r0, &(0x7f0000000480)={0xa, 0xfffe, 0x3, @mcast1, 0x5}, 0x1c) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) lsetxattr$trusted_overlay_upper(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000180), &(0x7f0000000000)=ANY=[], 0x361, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000340)='./file1\x00', &(0x7f0000000400), 0x0, 0x0, 0x2) lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./file1\x00', &(0x7f00000000c0), &(0x7f0000000440)=ANY=[], 0xfe37, 0x0) 0s ago: executing program 2 (id=587): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.181' (ED25519) to the list of known hosts. [ 74.486918][ T5758] cgroup: Unknown subsys name 'net' [ 74.623798][ T5758] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 76.385193][ T5758] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 78.082072][ T5779] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 78.082068][ T5780] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 78.083179][ T5780] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 78.091236][ T5779] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 78.098880][ T5780] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 78.105614][ T5783] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 78.112843][ T5780] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 78.134312][ T5779] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 78.135390][ T5780] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 78.150339][ T5780] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 78.160207][ T5779] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 78.160318][ T5780] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 78.176454][ T5780] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 78.185267][ T5780] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 78.193219][ T5783] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 78.193963][ T5780] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 78.200698][ T5779] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 78.211586][ T5780] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 78.225427][ T5783] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 78.227035][ T5780] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 78.239361][ T5779] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 78.239830][ T5779] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 78.248589][ T5778] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 78.262183][ T5778] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 78.729936][ T5770] chnl_net:caif_netlink_parms(): no params data found [ 78.784632][ T5771] chnl_net:caif_netlink_parms(): no params data found [ 78.885778][ T5773] chnl_net:caif_netlink_parms(): no params data found [ 78.901558][ T5769] chnl_net:caif_netlink_parms(): no params data found [ 79.028795][ T5770] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.036702][ T5770] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.044244][ T5770] bridge_slave_0: entered allmulticast mode [ 79.052117][ T5770] bridge_slave_0: entered promiscuous mode [ 79.066807][ T5771] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.073979][ T5771] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.081451][ T5771] bridge_slave_0: entered allmulticast mode [ 79.088624][ T5771] bridge_slave_0: entered promiscuous mode [ 79.104283][ T5770] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.111734][ T5770] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.119265][ T5770] bridge_slave_1: entered allmulticast mode [ 79.128702][ T5770] bridge_slave_1: entered promiscuous mode [ 79.154384][ T5771] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.161812][ T5771] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.169361][ T5771] bridge_slave_1: entered allmulticast mode [ 79.176983][ T5771] bridge_slave_1: entered promiscuous mode [ 79.247300][ T5771] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.258921][ T5770] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.271529][ T5769] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.278837][ T5769] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.285994][ T5769] bridge_slave_0: entered allmulticast mode [ 79.293465][ T5769] bridge_slave_0: entered promiscuous mode [ 79.314556][ T5771] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.333842][ T5770] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.346728][ T5769] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.353881][ T5769] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.362077][ T5769] bridge_slave_1: entered allmulticast mode [ 79.369451][ T5769] bridge_slave_1: entered promiscuous mode [ 79.376785][ T5773] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.384026][ T5773] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.391356][ T5773] bridge_slave_0: entered allmulticast mode [ 79.398694][ T5773] bridge_slave_0: entered promiscuous mode [ 79.407588][ T5773] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.414988][ T5773] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.422312][ T5773] bridge_slave_1: entered allmulticast mode [ 79.429776][ T5773] bridge_slave_1: entered promiscuous mode [ 79.459209][ T5771] team0: Port device team_slave_0 added [ 79.478172][ T5771] team0: Port device team_slave_1 added [ 79.534269][ T5769] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.549243][ T5770] team0: Port device team_slave_0 added [ 79.565833][ T5773] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.577607][ T5769] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.591198][ T5770] team0: Port device team_slave_1 added [ 79.598194][ T5771] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.605335][ T5771] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.632619][ T5771] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.647737][ T5773] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.699641][ T5771] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.706764][ T5771] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.733406][ T5771] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.764989][ T5769] team0: Port device team_slave_0 added [ 79.801779][ T5773] team0: Port device team_slave_0 added [ 79.810670][ T5769] team0: Port device team_slave_1 added [ 79.817769][ T5770] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.824758][ T5770] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.853910][ T5770] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.885122][ T5770] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.892318][ T5770] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.919136][ T5770] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.933116][ T5773] team0: Port device team_slave_1 added [ 79.955737][ T5771] hsr_slave_0: entered promiscuous mode [ 79.963254][ T5771] hsr_slave_1: entered promiscuous mode [ 80.008541][ T5769] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.015549][ T5769] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.042393][ T5769] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.055635][ T5769] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.062930][ T5769] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.089402][ T5769] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.110053][ T5773] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.117302][ T5773] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.143787][ T5773] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.190826][ T5773] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.198715][ T5773] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.225538][ T5773] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.248475][ T5770] hsr_slave_0: entered promiscuous mode [ 80.257942][ T5770] hsr_slave_1: entered promiscuous mode [ 80.264266][ T5770] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 80.272473][ T5770] Cannot create hsr debugfs directory [ 80.277297][ T5778] Bluetooth: hci3: command tx timeout [ 80.278118][ T5774] Bluetooth: hci0: command tx timeout [ 80.283846][ T5779] Bluetooth: hci2: command tx timeout [ 80.374489][ T5779] Bluetooth: hci1: command tx timeout [ 80.392104][ T5769] hsr_slave_0: entered promiscuous mode [ 80.398551][ T5769] hsr_slave_1: entered promiscuous mode [ 80.404608][ T5769] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 80.412696][ T5769] Cannot create hsr debugfs directory [ 80.453682][ T5773] hsr_slave_0: entered promiscuous mode [ 80.460398][ T5773] hsr_slave_1: entered promiscuous mode [ 80.467468][ T5773] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 80.475367][ T5773] Cannot create hsr debugfs directory [ 80.850591][ T5771] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 80.863130][ T5771] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 80.874632][ T5771] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 80.885059][ T5771] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 80.959667][ T5770] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 80.985322][ T5770] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 80.999413][ T5770] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 81.012060][ T5770] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 81.094288][ T5769] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 81.103993][ T5769] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 81.139483][ T5769] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 81.153677][ T5769] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 81.242410][ T5773] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 81.253887][ T5773] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 81.271573][ T5773] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 81.283475][ T5773] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 81.347785][ T5771] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.411565][ T5771] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.461419][ T3470] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.468911][ T3470] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.491269][ T5770] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.504755][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.512193][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.562924][ T5770] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.579942][ T5769] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.613737][ T3470] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.621149][ T3470] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.644142][ T3470] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.651335][ T3470] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.712421][ T5773] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.754907][ T5769] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.789568][ T5773] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.823483][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.830810][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.862707][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.869984][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.881896][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.889702][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.920824][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.928020][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.190821][ T5771] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.356824][ T5779] Bluetooth: hci3: command tx timeout [ 82.362576][ T5779] Bluetooth: hci0: command tx timeout [ 82.366149][ T5778] Bluetooth: hci2: command tx timeout [ 82.424897][ T5771] veth0_vlan: entered promiscuous mode [ 82.438364][ T5778] Bluetooth: hci1: command tx timeout [ 82.492580][ T5771] veth1_vlan: entered promiscuous mode [ 82.639917][ T5771] veth0_macvtap: entered promiscuous mode [ 82.708941][ T5771] veth1_macvtap: entered promiscuous mode [ 82.735400][ T5771] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.795704][ T5771] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.841115][ T5770] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.869210][ T5771] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.879216][ T5771] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.889004][ T5771] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.898367][ T5771] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.980759][ T5769] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.012540][ T5773] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.163288][ T5770] veth0_vlan: entered promiscuous mode [ 83.197501][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.205648][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.235627][ T5769] veth0_vlan: entered promiscuous mode [ 83.250396][ T5770] veth1_vlan: entered promiscuous mode [ 83.303781][ T5769] veth1_vlan: entered promiscuous mode [ 83.340369][ T3504] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.350772][ T3504] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.358707][ T5773] veth0_vlan: entered promiscuous mode [ 83.387987][ T5770] veth0_macvtap: entered promiscuous mode [ 83.428617][ T5770] veth1_macvtap: entered promiscuous mode [ 83.455383][ T5770] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.471695][ T5770] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.484978][ T5770] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.497723][ T5769] veth0_macvtap: entered promiscuous mode [ 83.505437][ T5773] veth1_vlan: entered promiscuous mode [ 83.524211][ T5770] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.536359][ T5770] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.548401][ T5770] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.573438][ T5769] veth1_macvtap: entered promiscuous mode [ 83.613172][ T5770] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.623519][ T5770] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.637701][ T5770] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.650490][ T5770] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.735806][ T5773] veth0_macvtap: entered promiscuous mode [ 83.752240][ T5769] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.770228][ T5769] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.780389][ T5769] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.792493][ T5769] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.138206][ T5769] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.336961][ T5773] veth1_macvtap: entered promiscuous mode [ 84.420261][ T5769] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.436689][ T5778] Bluetooth: hci0: command tx timeout [ 84.436993][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 84.442629][ T5778] Bluetooth: hci3: command tx timeout [ 84.456773][ T5778] Bluetooth: hci2: command tx timeout [ 84.494734][ T5769] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.506449][ T5769] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.518204][ T5769] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.530399][ T5774] Bluetooth: hci1: command tx timeout [ 84.596865][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 84.687842][ T5769] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.718786][ T5773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.734909][ T5773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.752295][ T5773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.763291][ T5773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.774038][ T5773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.785276][ T5773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.797906][ T5773] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.813247][ T5769] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.828919][ T5769] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.838465][ T5769] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.848394][ T5769] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.945311][ T5773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.976019][ T5773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.991387][ T5773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.002516][ T5773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.013282][ T5773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.030407][ T5773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.050535][ T5773] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.109746][ T5773] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.129482][ T5773] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.142645][ T5773] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.163598][ T5773] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.858316][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.936201][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.998843][ T5874] syz.0.7[5874]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 86.043310][ T5874] loop0: detected capacity change from 0 to 256 [ 86.045126][ T744] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.066295][ T744] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.098377][ T5874] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 86.209869][ T3504] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.231630][ T3504] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.344107][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.517441][ T5778] Bluetooth: hci3: command tx timeout [ 86.522920][ T5778] Bluetooth: hci0: command tx timeout [ 86.528470][ T5774] Bluetooth: hci2: command tx timeout [ 86.537148][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.563192][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.634483][ T5876] FAT-fs (loop0): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 86.645950][ T5876] FAT-fs (loop0): Filesystem has been set read-only [ 86.653817][ T5876] FAT-fs (loop0): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 86.665553][ T5876] FAT-fs (loop0): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 86.678154][ T5774] Bluetooth: hci1: command tx timeout [ 86.713570][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.133466][ T23] cfg80211: failed to load regulatory.db [ 87.224279][ T3513] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.261342][ T3513] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.557713][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 87.714728][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 87.723286][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 88.123950][ T0] NOHZ tick-stop error: local softirq work is pending, handler #182!!! [ 88.124417][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 88.141350][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 88.206622][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 88.206687][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 89.780068][ T5884] loop1: detected capacity change from 0 to 8192 [ 90.099745][ T5894] damon-dbgfs: DAMON debugfs interface is deprecated, so users should move to DAMON_SYSFS. If you cannot, please report your usecase to damon@lists.linux.dev and linux-mm@kvack.org. [ 90.124082][ T5894] smc: net device bond0 applied user defined pnetid SYZ2 [ 90.769305][ T5884] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 90.816240][ T5884] REISERFS (device loop1): found reiserfs format "3.6" with non-standard journal [ 90.869412][ T5884] REISERFS (device loop1): using ordered data mode [ 90.875995][ T5884] reiserfs: using flush barriers [ 90.906175][ T5884] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 90.973465][ T5884] REISERFS (device loop1): checking transaction log (loop1) [ 92.881261][ T5884] REISERFS (device loop1): Using tea hash to sort names [ 92.881734][ T5907] IPVS: set_ctl: invalid protocol: 46 224.0.0.2:20002 [ 92.927219][ T5884] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 93.097822][ T5909] Zero length message leads to an empty skb [ 93.558055][ T5913] tipc: Started in network mode [ 93.586391][ T5913] tipc: Node identity 523dca4f9feb, cluster identity 4711 [ 93.618012][ T5913] tipc: Enabled bearer , priority 0 [ 93.652826][ T5917] syzkaller0: entered promiscuous mode [ 93.672044][ T5917] syzkaller0: entered allmulticast mode [ 93.722464][ T5913] tipc: Resetting bearer [ 93.762644][ T5912] tipc: Resetting bearer [ 93.853266][ T5912] tipc: Disabling bearer [ 94.273176][ T5926] xt_hashlimit: size too large, truncated to 1048576 [ 94.306811][ T5926] xt_hashlimit: invalid interval [ 94.934963][ T5940] netlink: 'syz.0.25': attribute type 1 has an invalid length. [ 96.903507][ T5955] loop2: detected capacity change from 0 to 256 [ 96.986316][ T5955] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 97.429843][ T5962] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 97.440338][ T5962] FAT-fs (loop2): Filesystem has been set read-only [ 97.447602][ T5962] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 97.458110][ T5962] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 98.304651][ T5963] tipc: Enabling of bearer rejected, failed to enable media [ 100.112407][ T5970] xt_hashlimit: size too large, truncated to 1048576 [ 100.227719][ T5970] xt_hashlimit: invalid interval [ 101.630340][ T5994] netlink: 12 bytes leftover after parsing attributes in process `syz.2.40'. [ 101.666798][ T5997] netlink: 44 bytes leftover after parsing attributes in process `syz.2.40'. [ 105.400155][ T6015] tipc: Started in network mode [ 105.405107][ T6015] tipc: Node identity f66d1ef93ca1, cluster identity 4711 [ 105.436633][ T6015] tipc: Enabled bearer , priority 0 [ 105.606824][ T6017] syzkaller0: entered promiscuous mode [ 105.613435][ T6017] syzkaller0: entered allmulticast mode [ 105.625576][ T6017] tipc: Resetting bearer [ 105.633113][ T6016] tipc: Started in network mode [ 105.705561][ T6016] tipc: Node identity 0a4ff4a7a4a8, cluster identity 4711 [ 105.720264][ T6016] tipc: Enabled bearer , priority 0 [ 105.732113][ T6018] syzkaller0: entered promiscuous mode [ 105.740361][ T6018] syzkaller0: entered allmulticast mode [ 105.774293][ T6013] tipc: Resetting bearer [ 106.305074][ T6035] xt_hashlimit: size too large, truncated to 1048576 [ 106.312406][ T6035] xt_hashlimit: invalid interval [ 106.953692][ T6044] block device autoloading is deprecated and will be removed. [ 106.973465][ T6044] syz.1.51: attempt to access beyond end of device [ 106.973465][ T6044] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 108.878780][ T6013] tipc: Disabling bearer [ 108.895146][ T6016] tipc: Resetting bearer [ 108.914595][ T6029] netlink: 76 bytes leftover after parsing attributes in process `syz.3.49'. [ 108.925432][ T6014] tipc: Resetting bearer [ 108.952461][ T6014] tipc: Disabling bearer [ 108.965768][ T5824] tipc: Node number set to 3402374905 [ 108.973539][ T967] tipc: Node number set to 2934437031 [ 109.334545][ T6068] loop0: detected capacity change from 0 to 4096 [ 109.472637][ T6068] ext4: Unknown parameter 'noacl' [ 110.009242][ T6068] process 'syz.0.55' launched './file0' with NULL argv: empty string added [ 110.544330][ T6080] xt_hashlimit: size too large, truncated to 1048576 [ 110.619018][ T6080] xt_hashlimit: invalid interval [ 110.636998][ T6085] tipc: Enabled bearer , priority 0 [ 110.661518][ T6084] tipc: Disabling bearer [ 110.673433][ T6088] netlink: 76 bytes leftover after parsing attributes in process `syz.3.62'. [ 110.950350][ T6092] tipc: Enabled bearer , priority 0 [ 110.968970][ T6092] syzkaller0: entered promiscuous mode [ 110.975383][ T6092] syzkaller0: entered allmulticast mode [ 111.077349][ T6092] tipc: Resetting bearer [ 111.104067][ T6091] tipc: Resetting bearer [ 111.166126][ T6091] tipc: Disabling bearer [ 111.358680][ T6104] loop1: detected capacity change from 0 to 256 [ 111.543037][ T6104] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 112.191815][ T6109] FAT-fs (loop1): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 112.202383][ T6109] FAT-fs (loop1): Filesystem has been set read-only [ 112.209408][ T6109] FAT-fs (loop1): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 112.219921][ T6109] FAT-fs (loop1): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 114.165478][ T6128] xt_hashlimit: size too large, truncated to 1048576 [ 114.190624][ T6128] xt_hashlimit: invalid interval [ 122.967573][ T6207] netlink: 12 bytes leftover after parsing attributes in process `syz.0.94'. [ 122.986604][ T6207] 8021q: VLANs not supported on caif0 [ 123.333797][ T6213] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 126.592031][ T6240] netlink: 12 bytes leftover after parsing attributes in process `syz.0.103'. [ 126.627032][ T6240] 8021q: VLANs not supported on caif0 [ 127.188906][ T6252] syzkaller0: entered promiscuous mode [ 127.194726][ T6252] syzkaller0: entered allmulticast mode [ 131.409788][ T6279] loop1: detected capacity change from 0 to 4100 [ 131.447925][ T6279] ntfs: (device loop1): check_mft_mirror(): $MFT and $MFTMirr (record 0) do not match. Run ntfsfix or chkdsk. [ 131.460048][ T6279] ntfs: (device loop1): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 131.474984][ T6279] syz.1.113: attempt to access beyond end of device [ 131.474984][ T6279] loop1: rw=0, sector=7738, nr_sectors = 1 limit=4100 [ 131.488643][ T6279] ntfs: (device loop1): ntfs_end_buffer_async_read(): Buffer I/O error, logical block 0x1e3a. [ 131.499005][ T6279] syz.1.113: attempt to access beyond end of device [ 131.499005][ T6279] loop1: rw=0, sector=7739, nr_sectors = 1 limit=4100 [ 131.512509][ T6279] ntfs: (device loop1): ntfs_end_buffer_async_read(): Buffer I/O error, logical block 0x1e3b. [ 131.523073][ T6279] syz.1.113: attempt to access beyond end of device [ 131.523073][ T6279] loop1: rw=0, sector=7740, nr_sectors = 1 limit=4100 [ 131.536649][ T6279] ntfs: (device loop1): ntfs_end_buffer_async_read(): Buffer I/O error, logical block 0x1e3c. [ 131.547754][ T6279] syz.1.113: attempt to access beyond end of device [ 131.547754][ T6279] loop1: rw=0, sector=7741, nr_sectors = 1 limit=4100 [ 131.561139][ T6279] ntfs: (device loop1): ntfs_end_buffer_async_read(): Buffer I/O error, logical block 0x1e3d. [ 131.571489][ T6279] syz.1.113: attempt to access beyond end of device [ 131.571489][ T6279] loop1: rw=0, sector=7742, nr_sectors = 1 limit=4100 [ 131.585005][ T6279] ntfs: (device loop1): ntfs_end_buffer_async_read(): Buffer I/O error, logical block 0x1e3e. [ 131.596134][ T6279] syz.1.113: attempt to access beyond end of device [ 131.596134][ T6279] loop1: rw=0, sector=7743, nr_sectors = 1 limit=4100 [ 131.609862][ T6279] ntfs: (device loop1): ntfs_end_buffer_async_read(): Buffer I/O error, logical block 0x1e3f. [ 131.620419][ T6279] syz.1.113: attempt to access beyond end of device [ 131.620419][ T6279] loop1: rw=0, sector=7744, nr_sectors = 1 limit=4100 [ 131.633882][ T6279] ntfs: (device loop1): ntfs_end_buffer_async_read(): Buffer I/O error, logical block 0x1e40. [ 131.644883][ T6279] syz.1.113: attempt to access beyond end of device [ 131.644883][ T6279] loop1: rw=0, sector=7745, nr_sectors = 1 limit=4100 [ 131.658532][ T6279] ntfs: (device loop1): ntfs_end_buffer_async_read(): Buffer I/O error, logical block 0x1e41. [ 131.674536][ T6279] ntfs: volume version 3.1. [ 133.556895][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.563570][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 134.668936][ T6318] syzkaller0: entered promiscuous mode [ 136.159754][ T6318] syzkaller0: entered allmulticast mode [ 136.893079][ T6328] smc: net device bond0 applied user defined pnetid SYZ2 [ 139.661444][ T6348] netlink: 12 bytes leftover after parsing attributes in process `syz.2.138'. [ 139.667281][ T6335] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 139.728671][ T6348] 8021q: adding VLAN 0 to HW filter on device bond1 [ 141.567203][ T6361] syzkaller0: entered promiscuous mode [ 141.586185][ T6361] syzkaller0: entered allmulticast mode [ 142.559761][ T6376] xt_hashlimit: size too large, truncated to 1048576 [ 142.596368][ T6376] xt_hashlimit: invalid interval [ 142.650755][ T6374] loop3: detected capacity change from 0 to 4096 [ 142.703785][ T6374] __ntfs_error: 8 callbacks suppressed [ 142.703804][ T6374] ntfs: (device loop3): check_mft_mirror(): $MFT and $MFTMirr (record 2) do not match. Run ntfsfix or chkdsk. [ 142.768164][ T6374] ntfs: (device loop3): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 142.812462][ T6374] syz.3.148: attempt to access beyond end of device [ 142.812462][ T6374] loop3: rw=0, sector=7738, nr_sectors = 1 limit=4096 [ 142.853215][ T6374] ntfs: (device loop3): ntfs_end_buffer_async_read(): Buffer I/O error, logical block 0x1e3a. [ 142.876198][ T6374] syz.3.148: attempt to access beyond end of device [ 142.876198][ T6374] loop3: rw=0, sector=7739, nr_sectors = 1 limit=4096 [ 142.910312][ T6374] ntfs: (device loop3): ntfs_end_buffer_async_read(): Buffer I/O error, logical block 0x1e3b. [ 142.966284][ T6374] syz.3.148: attempt to access beyond end of device [ 142.966284][ T6374] loop3: rw=0, sector=7740, nr_sectors = 1 limit=4096 [ 143.000343][ T6374] ntfs: (device loop3): ntfs_end_buffer_async_read(): Buffer I/O error, logical block 0x1e3c. [ 143.005811][ T6383] netlink: 12 bytes leftover after parsing attributes in process `syz.0.152'. [ 143.040017][ T6383] 8021q: VLANs not supported on caif0 [ 143.056165][ T6374] syz.3.148: attempt to access beyond end of device [ 143.056165][ T6374] loop3: rw=0, sector=7741, nr_sectors = 1 limit=4096 [ 143.106501][ T6374] ntfs: (device loop3): ntfs_end_buffer_async_read(): Buffer I/O error, logical block 0x1e3d. [ 143.144421][ T6374] syz.3.148: attempt to access beyond end of device [ 143.144421][ T6374] loop3: rw=0, sector=7742, nr_sectors = 1 limit=4096 [ 143.196132][ T6374] ntfs: (device loop3): ntfs_end_buffer_async_read(): Buffer I/O error, logical block 0x1e3e. [ 143.230602][ T6374] syz.3.148: attempt to access beyond end of device [ 143.230602][ T6374] loop3: rw=0, sector=7743, nr_sectors = 1 limit=4096 [ 143.284669][ T6374] ntfs: (device loop3): ntfs_end_buffer_async_read(): Buffer I/O error, logical block 0x1e3f. [ 143.306847][ T6374] syz.3.148: attempt to access beyond end of device [ 143.306847][ T6374] loop3: rw=0, sector=7744, nr_sectors = 1 limit=4096 [ 143.333440][ T6374] ntfs: (device loop3): ntfs_end_buffer_async_read(): Buffer I/O error, logical block 0x1e40. [ 143.364517][ T6374] syz.3.148: attempt to access beyond end of device [ 143.364517][ T6374] loop3: rw=0, sector=7745, nr_sectors = 1 limit=4096 [ 143.386189][ T6374] ntfs: (device loop3): ntfs_end_buffer_async_read(): Buffer I/O error, logical block 0x1e41. [ 143.441637][ T6374] ntfs: volume version 3.1. [ 143.519657][ T6397] syzkaller0: entered promiscuous mode [ 143.536623][ T6397] syzkaller0: entered allmulticast mode [ 144.429308][ T6414] xt_hashlimit: size too large, truncated to 1048576 [ 144.466288][ T6414] xt_hashlimit: invalid interval [ 144.677633][ T6417] netlink: 12 bytes leftover after parsing attributes in process `syz.0.163'. [ 144.697599][ T6417] 8021q: VLANs not supported on caif0 [ 145.042001][ T6425] syzkaller0: entered promiscuous mode [ 145.076244][ T6425] syzkaller0: entered allmulticast mode [ 145.400261][ T6436] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 145.414462][ T6436] netlink: 'syz.3.170': attribute type 12 has an invalid length. [ 145.436377][ T6436] netlink: 'syz.3.170': attribute type 29 has an invalid length. [ 145.444398][ T6436] netlink: 148 bytes leftover after parsing attributes in process `syz.3.170'. [ 145.456459][ T6436] netlink: 'syz.3.170': attribute type 2 has an invalid length. [ 145.464933][ T6436] netlink: 23 bytes leftover after parsing attributes in process `syz.3.170'. [ 145.673309][ T6441] netlink: 12 bytes leftover after parsing attributes in process `syz.2.171'. [ 145.784588][ T6443] netlink: 12 bytes leftover after parsing attributes in process `syz.3.173'. [ 145.794261][ T6443] 8021q: VLANs not supported on caif0 [ 147.888412][ T6472] syz.0.184 uses obsolete (PF_INET,SOCK_PACKET) [ 148.425753][ T6480] netlink: 12 bytes leftover after parsing attributes in process `syz.0.186'. [ 148.445455][ T6480] 8021q: VLANs not supported on caif0 [ 152.260077][ T6505] smc: net device bond0 applied user defined pnetid SYZ2 [ 152.498991][ T6507] netlink: 12 bytes leftover after parsing attributes in process `syz.0.196'. [ 152.537944][ T6507] 8021q: VLANs not supported on caif0 [ 152.962930][ T6511] syzkaller0: entered promiscuous mode [ 152.979895][ T6511] syzkaller0: entered allmulticast mode [ 154.730577][ T6524] syzkaller0: entered promiscuous mode [ 154.746685][ T6524] syzkaller0: entered allmulticast mode [ 156.795503][ T6536] netlink: 12 bytes leftover after parsing attributes in process `syz.0.200'. [ 159.848279][ T6555] tipc: Enabled bearer , priority 0 [ 159.878471][ T6555] tipc: Resetting bearer [ 159.967754][ T6553] tipc: Disabling bearer [ 162.829119][ T6565] loop3: detected capacity change from 0 to 4096 [ 162.857397][ T6565] ext4: Unknown parameter 'noacl' [ 162.928522][ T5772] I/O error, dev loop3, sector 3968 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 163.082491][ T6565] loop3: detected capacity change from 0 to 2048 [ 163.178201][ T6565] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 163.232053][ T6565] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 163.496361][ T6577] netlink: 12 bytes leftover after parsing attributes in process `syz.0.218'. [ 164.671990][ T6602] syzkaller0: entered promiscuous mode [ 164.682210][ T6602] syzkaller0: entered allmulticast mode [ 164.911490][ T6606] syzkaller0: entered promiscuous mode [ 164.921039][ T6606] syzkaller0: entered allmulticast mode [ 165.063647][ T6609] netlink: 12 bytes leftover after parsing attributes in process `syz.2.229'. [ 165.498328][ T6620] syzkaller0: entered promiscuous mode [ 165.504583][ T6620] syzkaller0: entered allmulticast mode [ 165.891984][ T6628] netlink: 12 bytes leftover after parsing attributes in process `syz.2.238'. [ 165.950362][ T6628] netlink: 44 bytes leftover after parsing attributes in process `syz.2.238'. [ 165.969366][ T6628] 8021q: adding VLAN 0 to HW filter on device bond2 [ 166.084892][ T6633] syzkaller0: entered promiscuous mode [ 166.090821][ T6633] syzkaller0: entered allmulticast mode [ 168.646751][ T6644] netlink: 12 bytes leftover after parsing attributes in process `syz.3.240'. [ 170.657585][ T6678] netlink: 12 bytes leftover after parsing attributes in process `syz.3.251'. [ 171.044745][ T6686] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 171.246928][ T6688] netlink: 12 bytes leftover after parsing attributes in process `syz.2.255'. [ 171.420481][ T6691] netlink: 32 bytes leftover after parsing attributes in process `syz.2.255'. [ 171.482460][ T6697] 8021q: adding VLAN 0 to HW filter on device bond3 [ 171.695695][ T6705] netlink: 4 bytes leftover after parsing attributes in process `syz.0.258'. [ 173.106045][ C0] sched: RT throttling activated [ 173.318903][ T6717] 8021q: adding VLAN 0 to HW filter on device bond4 [ 173.399872][ T6721] bond4: (slave syz_tun): Enslaving as an active interface with an up link [ 173.648016][ T6723] syzkaller0: entered promiscuous mode [ 173.665692][ T6723] syzkaller0: entered allmulticast mode [ 173.847748][ T6733] netlink: 12 bytes leftover after parsing attributes in process `syz.0.267'. [ 173.925317][ T6736] netlink: 32 bytes leftover after parsing attributes in process `syz.0.267'. [ 173.938694][ T6737] 8021q: adding VLAN 0 to HW filter on device bond1 [ 174.093676][ T6742] ip6gre1: entered promiscuous mode [ 174.169347][ T6742] ip6gre1: entered allmulticast mode [ 175.398503][ T23] IPVS: starting estimator thread 0... [ 175.432958][ T6761] IPVS: fo: FWM 3 0x00000003 - no destination available [ 175.507221][ T6765] IPVS: using max 17 ests per chain, 40800 per kthread [ 176.311056][ T6770] tipc: Enabled bearer , priority 0 [ 176.340806][ T6770] syzkaller0: entered promiscuous mode [ 176.363105][ T6770] syzkaller0: entered allmulticast mode [ 176.393978][ T6775] syzkaller0: entered promiscuous mode [ 176.416315][ T6775] syzkaller0: entered allmulticast mode [ 176.507717][ T6777] netlink: 12 bytes leftover after parsing attributes in process `syz.2.280'. [ 176.524944][ T6779] loop1: detected capacity change from 0 to 4096 [ 176.527895][ T6777] 8021q: VLANs not supported on caif0 [ 176.556889][ T6779] ext4: Unknown parameter 'noacl' [ 176.693590][ T6770] tipc: Resetting bearer [ 176.746625][ T6769] tipc: Resetting bearer [ 176.821672][ T6779] loop1: detected capacity change from 0 to 2048 [ 176.927116][ T6769] tipc: Disabling bearer [ 176.999075][ T6779] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 177.210635][ T6779] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 177.335391][ T6801] netlink: 4 bytes leftover after parsing attributes in process `syz.2.286'. [ 178.839663][ T6814] 8021q: adding VLAN 0 to HW filter on device bond2 [ 178.853795][ T6819] bond2: (slave syz_tun): Enslaving as an active interface with an up link [ 178.872503][ T6815] netlink: 12 bytes leftover after parsing attributes in process `syz.2.291'. [ 178.916431][ T6815] 8021q: VLANs not supported on caif0 [ 179.171177][ T6829] tipc: Started in network mode [ 179.187973][ T6829] tipc: Node identity 0e3ebc3e5ed8, cluster identity 4711 [ 179.195690][ T6829] tipc: Enabled bearer , priority 0 [ 179.222460][ T6823] syzkaller0: entered promiscuous mode [ 179.233125][ T6823] syzkaller0: entered allmulticast mode [ 179.249202][ T6829] tipc: Resetting bearer [ 179.497352][ T6827] tipc: Disabling bearer [ 180.767402][ T6857] 8021q: adding VLAN 0 to HW filter on device bond3 [ 180.795345][ T6864] bond2: (slave syz_tun): Releasing backup interface [ 180.818722][ T6864] bond3: (slave syz_tun): Enslaving as an active interface with an up link [ 180.968730][ T6872] netlink: 4 bytes leftover after parsing attributes in process `syz.1.305'. [ 181.691918][ T6889] tipc: Enabled bearer , priority 0 [ 181.721638][ T6889] tipc: Resetting bearer [ 181.807592][ T6887] tipc: Disabling bearer [ 182.094782][ T6898] loop0: detected capacity change from 0 to 4096 [ 182.116918][ T6898] ext4: Unknown parameter 'noacl' [ 182.130799][ T5774] Bluetooth: hci3: link tx timeout [ 182.137101][ T5774] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 182.984935][ T5772] I/O error, dev loop0, sector 3968 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 183.131615][ T6905] 8021q: adding VLAN 0 to HW filter on device bond1 [ 183.175210][ T5778] Bluetooth: hci3: link tx timeout [ 183.181977][ T5778] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 183.197654][ T5778] Bluetooth: hci3: link tx timeout [ 183.202846][ T5778] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 183.233598][ T6907] bond1: (slave syz_tun): Enslaving as an active interface with an up link [ 183.243376][ T6898] loop0: detected capacity change from 0 to 2048 [ 183.347285][ T6912] netlink: 4 bytes leftover after parsing attributes in process `syz.3.317'. [ 183.358366][ T5778] Bluetooth: hci3: link tx timeout [ 183.363904][ T5778] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 183.380763][ T6898] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 183.413304][ T6898] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 183.576335][ T5778] Bluetooth: hci3: link tx timeout [ 183.588138][ T5778] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 185.424130][ T5778] Bluetooth: hci3: command 0x0406 tx timeout [ 185.469888][ T6930] tipc: Enabled bearer , priority 0 [ 185.498759][ T6930] tipc: Resetting bearer [ 185.630923][ T6927] tipc: Disabling bearer [ 185.897300][ T6945] netlink: 12 bytes leftover after parsing attributes in process `syz.1.328'. [ 186.121823][ T6950] netlink: 44 bytes leftover after parsing attributes in process `syz.1.328'. [ 186.173249][ T6953] 8021q: adding VLAN 0 to HW filter on device bond2 [ 186.230166][ T6961] netlink: 'syz.3.331': attribute type 4 has an invalid length. [ 186.346410][ T6963] netlink: 'syz.3.331': attribute type 4 has an invalid length. [ 187.556417][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 188.279216][ T6975] netlink: 8 bytes leftover after parsing attributes in process `syz.1.336'. [ 188.641335][ T6961] bridge0: port 2(bridge_slave_1) entered disabled state [ 188.650386][ T6961] bridge0: port 1(bridge_slave_0) entered disabled state [ 189.190307][ T6961] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 189.237507][ T6961] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 189.778172][ T6961] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.809220][ T6961] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.830211][ T6961] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.841494][ T6961] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 190.069558][ T6961] syz.3.331 (6961) used greatest stack depth: 20296 bytes left [ 190.122585][ T6999] netlink: 'syz.2.341': attribute type 1 has an invalid length. [ 190.181799][ T6999] 8021q: adding VLAN 0 to HW filter on device bond5 [ 190.214909][ T7000] bond4: (slave syz_tun): Releasing backup interface [ 190.245993][ T7000] bond5: (slave syz_tun): Enslaving as an active interface with an up link [ 190.286301][ T7005] netlink: 12 bytes leftover after parsing attributes in process `syz.1.342'. [ 190.494209][ T7007] netlink: 20 bytes leftover after parsing attributes in process `syz.1.342'. [ 191.932264][ T7007] bond3: (slave bridge1): Enslaving as an active interface with an up link [ 192.214934][ T7024] tipc: Enabled bearer , priority 0 [ 192.223179][ T7024] syzkaller0: entered promiscuous mode [ 192.229432][ T7024] syzkaller0: entered allmulticast mode [ 192.252354][ T7024] tipc: Resetting bearer [ 192.260614][ T7023] tipc: Resetting bearer [ 192.325371][ T7023] tipc: Disabling bearer [ 192.861916][ T7036] syzkaller0: entered promiscuous mode [ 192.871210][ T7036] syzkaller0: entered allmulticast mode [ 194.190565][ T7045] workqueue: Failed to create a rescuer kthread for wq "ceph-watch-notify": -EINTR [ 194.967754][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.986176][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.065855][ T7055] (null): rxe_set_mtu: Set mtu to 1024 [ 195.209327][ T7060] netlink: 'syz.1.360': attribute type 1 has an invalid length. [ 195.331164][ T7060] 8021q: adding VLAN 0 to HW filter on device bond4 [ 195.454832][ T7062] bond1: (slave syz_tun): Releasing backup interface [ 195.471481][ T7062] bond4: (slave syz_tun): Enslaving as an active interface with an up link [ 195.686531][ T7055] infiniband syz0: set active [ 195.701161][ T7055] infiniband syz0: added bond_slave_0 [ 195.704312][ T7070] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 195.741344][ T7070] netlink: 36 bytes leftover after parsing attributes in process `syz.1.364'. [ 195.798177][ T7055] RDS/IB: syz0: added [ 195.803480][ T7055] smc: adding ib device syz0 with port count 1 [ 195.810555][ T7055] smc: ib device syz0 port 1 has pnetid [ 197.991888][ T7085] tipc: Enabled bearer , priority 0 [ 198.010508][ T7085] syzkaller0: entered promiscuous mode [ 198.029436][ T7085] syzkaller0: entered allmulticast mode [ 198.059575][ T7085] tipc: Resetting bearer [ 198.083514][ T7084] tipc: Resetting bearer [ 198.152337][ T7084] tipc: Disabling bearer [ 198.451565][ T7094] netlink: 'syz.3.373': attribute type 1 has an invalid length. [ 198.568945][ T7094] 8021q: adding VLAN 0 to HW filter on device bond1 [ 198.627659][ T7097] bond1: (slave syz_tun): Enslaving as an active interface with an up link [ 198.841081][ T7101] netlink: 8 bytes leftover after parsing attributes in process `syz.2.382'. [ 198.911353][ T7099] tipc: Enabling of bearer rejected, failed to enable media [ 200.854282][ T7122] netlink: 'syz.3.383': attribute type 1 has an invalid length. [ 201.005711][ T7122] 8021q: adding VLAN 0 to HW filter on device bond2 [ 201.046758][ T7126] bond1: (slave syz_tun): Releasing backup interface [ 201.074977][ T7126] bond2: (slave syz_tun): Enslaving as an active interface with an up link [ 201.338984][ T7128] syzkaller0: entered promiscuous mode [ 201.353810][ T7128] syzkaller0: entered allmulticast mode [ 202.771237][ T5783] Bluetooth: hci2: command 0x0406 tx timeout [ 202.777707][ T5084] Bluetooth: hci0: command 0x0406 tx timeout [ 202.777724][ T5780] Bluetooth: hci1: command 0x0406 tx timeout [ 202.836291][ T5780] Bluetooth: hci3: command 0x0406 tx timeout [ 204.839342][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 207.653421][ T7180] netlink: 4 bytes leftover after parsing attributes in process `syz.3.396'. [ 207.699486][ T7181] bond2: (slave syz_tun): Releasing backup interface [ 209.343278][ T7191] netlink: 12 bytes leftover after parsing attributes in process `syz.0.399'. [ 209.355824][ T7191] 8021q: VLANs not supported on caif0 [ 209.368467][ T7189] syzkaller1: entered promiscuous mode [ 209.386349][ T7189] syzkaller1: entered allmulticast mode [ 212.175507][ T7235] netlink: 12 bytes leftover after parsing attributes in process `syz.1.411'. [ 212.186472][ T7235] 8021q: VLANs not supported on caif0 [ 212.435848][ T7242] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 212.516851][ T7246] tipc: Enabled bearer , priority 0 [ 212.537334][ T7246] syzkaller0: entered promiscuous mode [ 212.562112][ T7246] syzkaller0: entered allmulticast mode [ 212.678265][ T7246] tipc: Resetting bearer [ 212.747639][ T7245] tipc: Resetting bearer [ 212.816967][ T7245] tipc: Disabling bearer [ 212.901315][ T7255] syzkaller0: entered promiscuous mode [ 212.913795][ T7255] syzkaller0: entered allmulticast mode [ 213.051391][ T7257] netlink: 4 bytes leftover after parsing attributes in process `syz.0.410'. [ 213.102722][ T7257] bond3: (slave syz_tun): Releasing backup interface [ 213.297962][ T7271] netlink: 12 bytes leftover after parsing attributes in process `syz.2.422'. [ 213.320209][ T7271] 8021q: VLANs not supported on caif0 [ 213.603478][ T7281] tipc: Enabled bearer , priority 0 [ 213.617205][ T7281] syzkaller0: entered promiscuous mode [ 213.624471][ T7281] syzkaller0: entered allmulticast mode [ 213.750333][ T7281] tipc: Resetting bearer [ 213.796411][ T7280] tipc: Resetting bearer [ 213.823010][ T7280] tipc: Disabling bearer [ 213.836413][ T7290] tipc: Enabled bearer , priority 0 [ 213.844371][ T7292] syzkaller0: entered promiscuous mode [ 213.854207][ T7292] syzkaller0: entered allmulticast mode [ 213.864285][ T7290] syzkaller0: entered promiscuous mode [ 213.876173][ T7290] syzkaller0: entered allmulticast mode [ 213.955745][ T7290] tipc: Resetting bearer [ 214.036557][ T7289] tipc: Resetting bearer [ 214.066686][ T7289] tipc: Disabling bearer [ 214.362510][ T7308] netlink: 12 bytes leftover after parsing attributes in process `syz.0.433'. [ 214.406767][ T7308] 8021q: VLANs not supported on caif0 [ 214.812477][ T7327] tipc: Enabled bearer , priority 0 [ 214.835707][ T7327] syzkaller0: entered promiscuous mode [ 214.854967][ T7327] syzkaller0: entered allmulticast mode [ 215.008656][ T7327] tipc: Resetting bearer [ 215.058452][ T7326] tipc: Resetting bearer [ 215.115493][ T7326] tipc: Disabling bearer [ 215.141442][ T7337] syzkaller0: entered promiscuous mode [ 215.150930][ T7337] syzkaller0: entered allmulticast mode [ 215.407931][ T7341] tipc: Enabled bearer , priority 0 [ 215.435487][ T7341] syzkaller0: entered promiscuous mode [ 215.456202][ T7341] syzkaller0: entered allmulticast mode [ 215.544696][ T7341] tipc: Resetting bearer [ 215.582690][ T7340] tipc: Resetting bearer [ 215.674596][ T7340] tipc: Disabling bearer [ 215.972040][ T7349] netlink: 12 bytes leftover after parsing attributes in process `syz.1.447'. [ 215.981592][ T7349] 8021q: VLANs not supported on caif0 [ 216.222122][ T7361] netlink: 36 bytes leftover after parsing attributes in process `syz.3.451'. [ 216.567217][ T7371] hsr0: VLAN not yet supported [ 216.719988][ T7373] tipc: Enabled bearer , priority 0 [ 216.733915][ T7373] syzkaller0: entered promiscuous mode [ 216.741112][ T7373] syzkaller0: entered allmulticast mode [ 216.792532][ T7373] tipc: Resetting bearer [ 216.825877][ T7372] tipc: Resetting bearer [ 216.918713][ T7372] tipc: Disabling bearer [ 217.161770][ T7383] netlink: 12 bytes leftover after parsing attributes in process `syz.3.461'. [ 217.217406][ T7384] netlink: 12 bytes leftover after parsing attributes in process `syz.1.460'. [ 217.232109][ T7384] 8021q: VLANs not supported on caif0 [ 218.054046][ T7415] tipc: Enabled bearer , priority 0 [ 218.078316][ T7415] syzkaller0: entered promiscuous mode [ 218.096575][ T7415] syzkaller0: entered allmulticast mode [ 218.202465][ T7418] tipc: Resetting bearer [ 218.218467][ T7420] netlink: 12 bytes leftover after parsing attributes in process `syz.1.471'. [ 218.243254][ T7420] bridge0: port 2(bridge_slave_1) entered disabled state [ 218.269678][ T7414] tipc: Resetting bearer [ 218.416793][ T7414] tipc: Disabling bearer [ 218.725282][ T7429] netlink: 12 bytes leftover after parsing attributes in process `syz.0.473'. [ 218.737008][ T7429] 8021q: VLANs not supported on caif0 [ 218.968469][ T7437] syzkaller0: entered promiscuous mode [ 218.976790][ T7437] syzkaller0: entered allmulticast mode [ 219.597572][ T7453] tipc: Enabled bearer , priority 0 [ 219.615601][ T7453] syzkaller0: entered promiscuous mode [ 219.633445][ T7453] syzkaller0: entered allmulticast mode [ 219.670212][ T7457] netlink: 12 bytes leftover after parsing attributes in process `syz.0.485'. [ 219.688688][ T7457] 8021q: VLANs not supported on caif0 [ 219.703594][ T7453] tipc: Resetting bearer [ 219.761060][ T7451] tipc: Resetting bearer [ 219.829829][ T7451] tipc: Disabling bearer [ 220.437620][ T7474] syzkaller0: entered promiscuous mode [ 220.450090][ T7474] syzkaller0: entered allmulticast mode [ 220.604103][ T7476] netlink: 12 bytes leftover after parsing attributes in process `syz.1.494'. [ 220.616261][ T7476] 8021q: VLANs not supported on caif0 [ 220.884441][ T7483] tipc: Enabled bearer , priority 0 [ 220.897750][ T7314] Set syz1 is full, maxelem 65536 reached [ 220.909457][ T7483] syzkaller0: entered promiscuous mode [ 220.915106][ T7483] syzkaller0: entered allmulticast mode [ 221.020516][ T7483] tipc: Resetting bearer [ 221.053710][ T7482] tipc: Resetting bearer [ 221.175676][ T7482] tipc: Disabling bearer [ 221.463115][ T7503] netlink: 12 bytes leftover after parsing attributes in process `syz.0.505'. [ 221.496500][ T7503] 8021q: VLANs not supported on caif0 [ 221.532505][ T7500] syzkaller0: entered promiscuous mode [ 221.563542][ T7500] syzkaller0: entered allmulticast mode [ 221.622117][ T744] nci: nci_ntf_packet: unsupported ntf opcode 0xf00 [ 221.663990][ T744] nci: nci_rf_intf_activated_ntf_packet: unsupported activation_rf_tech_and_mode 0x6c [ 222.518656][ T7532] tipc: Enabled bearer , priority 0 [ 222.526586][ T7532] syzkaller0: entered promiscuous mode [ 222.532366][ T7532] syzkaller0: entered allmulticast mode [ 222.561153][ T7534] netlink: 12 bytes leftover after parsing attributes in process `syz.2.515'. [ 222.586955][ T7534] 8021q: VLANs not supported on caif0 [ 222.603199][ T7532] tipc: Resetting bearer [ 222.613028][ T7531] tipc: Resetting bearer [ 222.650385][ T7531] tipc: Disabling bearer [ 222.823755][ T7538] syzkaller0: entered promiscuous mode [ 222.866111][ T7538] syzkaller0: entered allmulticast mode [ 222.945341][ T7542] loop1: detected capacity change from 0 to 4096 [ 222.987690][ T7542] ext4: Unknown parameter 'noacl' [ 223.371114][ T7557] netlink: 12 bytes leftover after parsing attributes in process `syz.0.525'. [ 223.393664][ T7557] 8021q: VLANs not supported on caif0 [ 223.587383][ T7565] netlink: 8 bytes leftover after parsing attributes in process `syz.2.528'. [ 223.623263][ T7565] netlink: 4 bytes leftover after parsing attributes in process `syz.2.528'. [ 223.649772][ T7565] netlink: 4 bytes leftover after parsing attributes in process `syz.2.528'. [ 223.681808][ T7569] tipc: Enabled bearer , priority 0 [ 223.703334][ T7569] syzkaller0: entered promiscuous mode [ 223.716726][ T7569] syzkaller0: entered allmulticast mode [ 223.826917][ T7569] tipc: Resetting bearer [ 223.882148][ T7567] tipc: Resetting bearer [ 223.919847][ T7567] tipc: Disabling bearer [ 224.477676][ T7587] loop0: detected capacity change from 0 to 4096 [ 224.492402][ T7587] ext4: Unknown parameter 'noacl' [ 224.918284][ T7601] netlink: 12 bytes leftover after parsing attributes in process `syz.2.538'. [ 224.946348][ T7601] 8021q: VLANs not supported on caif0 [ 225.900928][ T7622] loop0: detected capacity change from 0 to 4096 [ 225.919277][ T7622] ext4: Unknown parameter 'noacl' [ 225.989493][ T5772] I/O error, dev loop0, sector 3968 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 226.193094][ T7622] loop0: detected capacity change from 0 to 2048 [ 226.294046][ T7622] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 226.373915][ T7622] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 226.461840][ T7636] netlink: 12 bytes leftover after parsing attributes in process `syz.2.550'. [ 226.496380][ T7636] 8021q: VLANs not supported on caif0 [ 226.538970][ T5772] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 228.580322][ T7667] loop1: detected capacity change from 0 to 4096 [ 228.600792][ T7667] ext4: Unknown parameter 'noacl' [ 228.806400][ T7671] tipc: Enabled bearer , priority 0 [ 228.983631][ T7674] syzkaller0: entered promiscuous mode [ 229.079739][ T7674] syzkaller0: entered allmulticast mode [ 229.529880][ T7667] loop1: detected capacity change from 0 to 2048 [ 229.620770][ T7674] tipc: Resetting bearer [ 229.656279][ T7669] tipc: Resetting bearer [ 229.723703][ T7667] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 229.745899][ T7667] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 229.781715][ T7669] tipc: Disabling bearer [ 230.177087][ T7685] syzkaller0: entered promiscuous mode [ 230.190632][ T7685] syzkaller0: entered allmulticast mode [ 230.205351][ T7687] syzkaller0: entered promiscuous mode [ 230.222050][ T7687] syzkaller0: entered allmulticast mode [ 230.732946][ T7696] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 231.034817][ T7705] netlink: 12 bytes leftover after parsing attributes in process `syz.1.575'. [ 231.420145][ T7709] loop2: detected capacity change from 0 to 4096 [ 231.431239][ T7709] ext4: Unknown parameter 'noacl' [ 231.505110][ T5787] I/O error, dev loop2, sector 3968 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 231.672000][ T7709] loop2: detected capacity change from 0 to 2048 [ 231.811921][ T7709] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 231.883862][ T7709] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 231.931594][ T7722] syzkaller0: entered promiscuous mode [ 231.946217][ T7722] syzkaller0: entered allmulticast mode [ 232.418353][ T7733] netlink: 12 bytes leftover after parsing attributes in process `syz.2.585'. [ 232.448961][ T7733] bridge0: port 2(bridge_slave_1) entered disabled state [ 232.619535][ T7736] loop0: detected capacity change from 0 to 1024 [ 232.651815][ T7736] ======================================================= [ 232.651815][ T7736] WARNING: The mand mount option has been deprecated and [ 232.651815][ T7736] and is ignored by this kernel. Remove the mand [ 232.651815][ T7736] option from the mount to silence this warning. [ 232.651815][ T7736] ======================================================= [ 232.746353][ T7736] EXT4-fs: Ignoring removed mblk_io_submit option [ 232.819874][ T7736] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 232.824168][ T7562] Set syz1 is full, maxelem 65536 reached [ 232.884037][ T7736] ================================================================== [ 232.892185][ T7736] BUG: KASAN: out-of-bounds in ext4_xattr_set_entry+0x94b/0x1e90 [ 232.899970][ T7736] Read of size 18446744073709551588 at addr ffff888022a2b840 by task syz.0.586/7736 [ 232.909552][ T7736] [ 232.912002][ T7736] CPU: 1 PID: 7736 Comm: syz.0.586 Not tainted syzkaller #0 [ 232.919412][ T7736] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 232.929678][ T7736] Call Trace: [ 232.932997][ T7736] [ 232.935964][ T7736] dump_stack_lvl+0x18c/0x250 [ 232.940779][ T7736] ? read_lock_is_recursive+0x20/0x20 [ 232.946283][ T7736] ? show_regs_print_info+0x20/0x20 [ 232.951603][ T7736] ? load_image+0x400/0x400 [ 232.956221][ T7736] ? _raw_spin_lock_irqsave+0xc0/0x100 [ 232.961870][ T7736] ? __virt_addr_valid+0x18c/0x540 [ 232.967251][ T7736] ? __virt_addr_valid+0x469/0x540 [ 232.972519][ T7736] print_report+0xa8/0x210 [ 232.977218][ T7736] ? ext4_xattr_set_entry+0x94b/0x1e90 [ 232.983471][ T7736] kasan_report+0x117/0x150 [ 232.988341][ T7736] ? ext4_xattr_set_entry+0x94b/0x1e90 [ 232.994080][ T7736] ? ext4_xattr_set_entry+0x94b/0x1e90 [ 232.999652][ T7736] kasan_check_range+0x241/0x290 [ 233.004708][ T7736] ? ext4_xattr_set_entry+0x94b/0x1e90 [ 233.010203][ T7736] __asan_memmove+0x29/0x70 [ 233.014807][ T7736] ext4_xattr_set_entry+0x94b/0x1e90 [ 233.020646][ T7736] ext4_xattr_block_set+0xae8/0x32b0 [ 233.026127][ T7736] ? ext4_destroy_inode+0x200/0x200 [ 233.031342][ T7736] ? proc_nr_inodes+0x230/0x230 [ 233.036207][ T7736] ? do_raw_spin_unlock+0x121/0x230 [ 233.041684][ T7736] ? _raw_spin_unlock+0x28/0x40 [ 233.046648][ T7736] ? ext4_xattr_block_find+0x350/0x350 [ 233.052209][ T7736] ? ext4_xattr_ibody_set+0x50d/0x6a0 [ 233.057591][ T7736] ext4_xattr_set_handle+0x1280/0x14c0 [ 233.063456][ T7736] ? ext4_xattr_inode_free_quota+0x1b0/0x1b0 [ 233.069632][ T7736] ? __ext4_journal_start_sb+0x259/0x560 [ 233.075279][ T7736] ext4_xattr_set+0x252/0x340 [ 233.079972][ T7736] ? end_current_label_crit_section+0x170/0x170 [ 233.086315][ T7736] ? ext4_xattr_set_credits+0x2f0/0x2f0 [ 233.091877][ T7736] ? posix_xattr_acl+0x93/0xb0 [ 233.096724][ T7736] ? ext4_xattr_trusted_get+0x40/0x40 [ 233.102201][ T7736] __vfs_setxattr+0x431/0x470 [ 233.106895][ T7736] __vfs_setxattr_noperm+0x12d/0x5e0 [ 233.112194][ T7736] vfs_setxattr+0x16b/0x2f0 [ 233.116977][ T7736] ? xattr_permission+0x470/0x470 [ 233.122187][ T7736] ? __mnt_want_write+0x223/0x2a0 [ 233.127583][ T7736] ? path_setxattr+0x3a1/0x5d0 [ 233.132358][ T7736] path_setxattr+0x3f3/0x5d0 [ 233.137077][ T7736] ? simple_xattrs_free+0x150/0x150 [ 233.142336][ T7736] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 233.148342][ T7736] ? lock_chain_count+0x20/0x20 [ 233.153386][ T7736] __x64_sys_lsetxattr+0xb8/0xd0 [ 233.158441][ T7736] do_syscall_64+0x55/0xa0 [ 233.162956][ T7736] ? clear_bhb_loop+0x40/0x90 [ 233.167643][ T7736] ? clear_bhb_loop+0x40/0x90 [ 233.172348][ T7736] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 233.178344][ T7736] RIP: 0033:0x7f91b879aeb9 [ 233.182774][ T7736] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 233.202565][ T7736] RSP: 002b:00007f91b95ef028 EFLAGS: 00000246 ORIG_RAX: 00000000000000bd [ 233.211164][ T7736] RAX: ffffffffffffffda RBX: 00007f91b8a15fa0 RCX: 00007f91b879aeb9 [ 233.219348][ T7736] RDX: 0000200000000000 RSI: 0000200000000180 RDI: 00002000000001c0 [ 233.227781][ T7736] RBP: 00007f91b8808c1f R08: 0000000000000000 R09: 0000000000000000 [ 233.235778][ T7736] R10: 0000000000000361 R11: 0000000000000246 R12: 0000000000000000 [ 233.243956][ T7736] R13: 00007f91b8a16038 R14: 00007f91b8a15fa0 R15: 00007ffdefd460b8 [ 233.252213][ T7736] [ 233.255239][ T7736] [ 233.257568][ T7736] Allocated by task 7736: [ 233.261997][ T7736] kasan_set_track+0x4e/0x70 [ 233.266778][ T7736] __kasan_kmalloc+0x8f/0xa0 [ 233.271549][ T7736] __kmalloc_node_track_caller+0xb2/0x230 [ 233.277487][ T7736] kmemdup+0x2b/0x70 [ 233.281518][ T7736] ext4_xattr_block_set+0x9ea/0x32b0 [ 233.286902][ T7736] ext4_xattr_set_handle+0x1280/0x14c0 [ 233.292373][ T7736] ext4_xattr_set+0x252/0x340 [ 233.297165][ T7736] __vfs_setxattr+0x431/0x470 [ 233.302285][ T7736] __vfs_setxattr_noperm+0x12d/0x5e0 [ 233.307618][ T7736] vfs_setxattr+0x16b/0x2f0 [ 233.312128][ T7736] path_setxattr+0x3f3/0x5d0 [ 233.316728][ T7736] __x64_sys_lsetxattr+0xb8/0xd0 [ 233.321673][ T7736] do_syscall_64+0x55/0xa0 [ 233.326120][ T7736] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 233.332023][ T7736] [ 233.334353][ T7736] The buggy address belongs to the object at ffff888022a2b800 [ 233.334353][ T7736] which belongs to the cache kmalloc-1k of size 1024 [ 233.349022][ T7736] The buggy address is located 64 bytes inside of [ 233.349022][ T7736] 1024-byte region [ffff888022a2b800, ffff888022a2bc00) [ 233.362398][ T7736] [ 233.364735][ T7736] The buggy address belongs to the physical page: [ 233.371255][ T7736] page:ffffea00008a8a00 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x22a28 [ 233.381441][ T7736] head:ffffea00008a8a00 order:3 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 233.390477][ T7736] anon flags: 0xfff00000000840(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 233.399242][ T7736] page_type: 0xffffffff() [ 233.403755][ T7736] raw: 00fff00000000840 ffff888017c41dc0 0000000000000000 dead000000000001 [ 233.412437][ T7736] raw: 0000000000000000 0000000080100010 00000001ffffffff 0000000000000000 [ 233.421018][ T7736] page dumped because: kasan: bad access detected [ 233.427435][ T7736] page_owner tracks the page as allocated [ 233.433149][ T7736] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x152820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_HARDWALL), pid 744, tgid 744 (kworker/u4:5), ts 89662299737, free_ts 89515674988 [ 233.453734][ T7736] post_alloc_hook+0x1c1/0x200 [ 233.458630][ T7736] get_page_from_freelist+0x1951/0x19e0 [ 233.464351][ T7736] __alloc_pages+0x1f0/0x460 [ 233.469128][ T7736] alloc_slab_page+0x5d/0x160 [ 233.473900][ T7736] new_slab+0x87/0x2d0 [ 233.478162][ T7736] ___slab_alloc+0xc5d/0x12f0 [ 233.483021][ T7736] __kmem_cache_alloc_node+0x19e/0x250 [ 233.488488][ T7736] __kmalloc+0xa4/0x230 [ 233.492747][ T7736] ieee802_11_parse_elems_full+0xb9/0x20c0 [ 233.498746][ T7736] ieee80211_inform_bss+0x127/0x1080 [ 233.504043][ T7736] rdev_inform_bss+0x106/0x410 [ 233.508852][ T7736] cfg80211_inform_bss_frame_data+0xb8b/0x13d0 [ 233.515024][ T7736] ieee80211_bss_info_update+0x759/0x9b0 [ 233.520836][ T7736] ieee80211_ibss_rx_queued_mgmt+0x18ae/0x2c80 [ 233.527113][ T7736] ieee80211_iface_work+0x717/0xc70 [ 233.532410][ T7736] cfg80211_wiphy_work+0x225/0x260 [ 233.537633][ T7736] page last free stack trace: [ 233.542395][ T7736] free_unref_page_prepare+0x7b2/0x8c0 [ 233.547870][ T7736] free_unref_page+0x32/0x2e0 [ 233.552566][ T7736] __unfreeze_partials+0x1cf/0x210 [ 233.557769][ T7736] put_cpu_partial+0x17c/0x250 [ 233.562537][ T7736] __slab_free+0x319/0x400 [ 233.567041][ T7736] qlist_free_all+0x75/0xd0 [ 233.571558][ T7736] kasan_quarantine_reduce+0x143/0x160 [ 233.577032][ T7736] __kasan_slab_alloc+0x22/0x80 [ 233.581889][ T7736] slab_post_alloc_hook+0x6e/0x4b0 [ 233.587018][ T7736] kmem_cache_alloc+0x11a/0x2d0 [ 233.591879][ T7736] getname_flags+0xbb/0x500 [ 233.596494][ T7736] user_path_at_empty+0x2c/0x60 [ 233.601368][ T7736] do_readlinkat+0xdd/0x490 [ 233.605887][ T7736] __x64_sys_readlink+0x7f/0x90 [ 233.611005][ T7736] do_syscall_64+0x55/0xa0 [ 233.615436][ T7736] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 233.621361][ T7736] [ 233.623686][ T7736] Memory state around the buggy address: [ 233.629316][ T7736] ffff888022a2b700: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 233.637554][ T7736] ffff888022a2b780: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 233.645645][ T7736] >ffff888022a2b800: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 233.653714][ T7736] ^ [ 233.659871][ T7736] ffff888022a2b880: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 233.667935][ T7736] ffff888022a2b900: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 233.675998][ T7736] ================================================================== [ 233.685337][ T7736] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 233.692725][ T7736] CPU: 0 PID: 7736 Comm: syz.0.586 Not tainted syzkaller #0 [ 233.700042][ T7736] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 233.710111][ T7736] Call Trace: [ 233.713475][ T7736] [ 233.716429][ T7736] dump_stack_lvl+0x18c/0x250 [ 233.721147][ T7736] ? show_regs_print_info+0x20/0x20 [ 233.726407][ T7736] ? load_image+0x400/0x400 [ 233.730958][ T7736] panic+0x2dc/0x730 [ 233.734888][ T7736] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 233.741060][ T7736] ? bpf_jit_dump+0xd0/0xd0 [ 233.745567][ T7736] ? _raw_spin_unlock_irqrestore+0x111/0x120 [ 233.751701][ T7736] ? _raw_spin_unlock+0x40/0x40 [ 233.756754][ T7736] ? ext4_xattr_set_entry+0x94b/0x1e90 [ 233.762216][ T7736] check_panic_on_warn+0x84/0xa0 [ 233.767243][ T7736] ? ext4_xattr_set_entry+0x94b/0x1e90 [ 233.772816][ T7736] end_report+0x6f/0x130 [ 233.777085][ T7736] kasan_report+0x128/0x150 [ 233.781625][ T7736] ? ext4_xattr_set_entry+0x94b/0x1e90 [ 233.787176][ T7736] ? ext4_xattr_set_entry+0x94b/0x1e90 [ 233.792639][ T7736] kasan_check_range+0x241/0x290 [ 233.797666][ T7736] ? ext4_xattr_set_entry+0x94b/0x1e90 [ 233.803566][ T7736] __asan_memmove+0x29/0x70 [ 233.808066][ T7736] ext4_xattr_set_entry+0x94b/0x1e90 [ 233.813368][ T7736] ext4_xattr_block_set+0xae8/0x32b0 [ 233.818661][ T7736] ? ext4_destroy_inode+0x200/0x200 [ 233.823944][ T7736] ? proc_nr_inodes+0x230/0x230 [ 233.829069][ T7736] ? do_raw_spin_unlock+0x121/0x230 [ 233.834352][ T7736] ? _raw_spin_unlock+0x28/0x40 [ 233.839221][ T7736] ? ext4_xattr_block_find+0x350/0x350 [ 233.844705][ T7736] ? ext4_xattr_ibody_set+0x50d/0x6a0 [ 233.850254][ T7736] ext4_xattr_set_handle+0x1280/0x14c0 [ 233.855760][ T7736] ? ext4_xattr_inode_free_quota+0x1b0/0x1b0 [ 233.861813][ T7736] ? __ext4_journal_start_sb+0x259/0x560 [ 233.867530][ T7736] ext4_xattr_set+0x252/0x340 [ 233.872221][ T7736] ? end_current_label_crit_section+0x170/0x170 [ 233.878469][ T7736] ? ext4_xattr_set_credits+0x2f0/0x2f0 [ 233.884311][ T7736] ? posix_xattr_acl+0x93/0xb0 [ 233.889083][ T7736] ? ext4_xattr_trusted_get+0x40/0x40 [ 233.894477][ T7736] __vfs_setxattr+0x431/0x470 [ 233.899173][ T7736] __vfs_setxattr_noperm+0x12d/0x5e0 [ 233.904548][ T7736] vfs_setxattr+0x16b/0x2f0 [ 233.909060][ T7736] ? xattr_permission+0x470/0x470 [ 233.914347][ T7736] ? __mnt_want_write+0x223/0x2a0 [ 233.919548][ T7736] ? path_setxattr+0x3a1/0x5d0 [ 233.924496][ T7736] path_setxattr+0x3f3/0x5d0 [ 233.929262][ T7736] ? simple_xattrs_free+0x150/0x150 [ 233.934525][ T7736] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 233.940594][ T7736] ? lock_chain_count+0x20/0x20 [ 233.945444][ T7736] __x64_sys_lsetxattr+0xb8/0xd0 [ 233.950442][ T7736] do_syscall_64+0x55/0xa0 [ 233.954897][ T7736] ? clear_bhb_loop+0x40/0x90 [ 233.959667][ T7736] ? clear_bhb_loop+0x40/0x90 [ 233.964350][ T7736] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 233.970340][ T7736] RIP: 0033:0x7f91b879aeb9 [ 233.974763][ T7736] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 233.994905][ T7736] RSP: 002b:00007f91b95ef028 EFLAGS: 00000246 ORIG_RAX: 00000000000000bd [ 234.003541][ T7736] RAX: ffffffffffffffda RBX: 00007f91b8a15fa0 RCX: 00007f91b879aeb9 [ 234.011778][ T7736] RDX: 0000200000000000 RSI: 0000200000000180 RDI: 00002000000001c0 [ 234.019787][ T7736] RBP: 00007f91b8808c1f R08: 0000000000000000 R09: 0000000000000000 [ 234.027941][ T7736] R10: 0000000000000361 R11: 0000000000000246 R12: 0000000000000000 [ 234.036001][ T7736] R13: 00007f91b8a16038 R14: 00007f91b8a15fa0 R15: 00007ffdefd460b8 [ 234.044275][ T7736] [ 234.047916][ T7736] Kernel Offset: disabled [ 234.052241][ T7736] Rebooting in 86400 seconds..