last executing test programs: 36.270228799s ago: executing program 1 (id=6): socket(0x0, 0x3, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x10000000000) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r2, &(0x7f0000000000)={0xc0002003}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000004a40)={0x44, 0x0, &(0x7f00000049c0)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 35.30976431s ago: executing program 1 (id=7): socket(0x0, 0x3, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x10000000000) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r2, &(0x7f0000000000)={0xc0002003}) 34.37592275s ago: executing program 1 (id=8): socket(0x0, 0x3, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x10000000000) r4 = epoll_create1(0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000002400)={0x4c, 0x0, &(0x7f00000022c0)=[@transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r2, &(0x7f0000000000)={0xc0002003}) 33.469387278s ago: executing program 1 (id=9): socket(0x0, 0x3, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x10000000000) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000002400)={0x4c, 0x0, &(0x7f00000022c0)=[@transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 32.656961946s ago: executing program 1 (id=10): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=@can_newroute={0x34, 0x18, 0x1, 0x70bd29, 0x25dfdbfd, {0x1d, 0x1, 0x4}, [@CGW_MOD_OR={0x15, 0x2, {{{0x0, 0x1, 0x1, 0x1}, 0x7, 0x2, 0x0, 0x0, "34a9cba83638d083"}, 0x1}}, @CGW_CS_XOR={0x8, 0x5, {0x6, 0xfffffffffffffffc, 0xfffffffffffffff9, 0xf8}}]}, 0x34}}, 0x4c0c8) 31.905476654s ago: executing program 1 (id=11): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x1c, 0x0, 0x0) connect$unix(r1, &(0x7f0000000200)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) getpid() recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 16.469740679s ago: executing program 32 (id=11): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x1c, 0x0, 0x0) connect$unix(r1, &(0x7f0000000200)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) getpid() recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 9.738743038s ago: executing program 3 (id=76): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000280)={{{@in6=@mcast1, @in=@local, 0x0, 0x0, 0x4e20, 0x1, 0x2}, {0x0, 0x4, 0x1, 0x0, 0x4, 0xb}, {0x1ff, 0xffffffffe, 0x4053e5, 0x20}, 0x6, 0x80001, 0x1, 0x0, 0x1, 0x1}, {{@in6=@ipv4={'\x00', '\xff\xff', @local}, 0x4d1, 0x32}, 0x2, @in=@private=0xa010101, 0x3501, 0x1, 0x0, 0x0, 0xa, 0xfffffffd}}, 0xe8) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}, 0x9df}, 0x1c) 9.073074339s ago: executing program 3 (id=78): r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) bind$can_raw(r0, &(0x7f00000001c0)={0x1d, r1}, 0x10) write(r0, 0x0, 0x0) 8.966585856s ago: executing program 2 (id=79): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000005c0), 0x2, 0x0) ioctl$VIDIOC_LOG_STATUS(r0, 0x5646, 0x0) 8.636615371s ago: executing program 3 (id=82): openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) socket(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x1070bd26, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x20048884) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@newqdisc={0x34, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) 7.814998736s ago: executing program 2 (id=83): socket$inet6_tcp(0xa, 0x1, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000280)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000040)=ANY=[], 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) r3 = socket(0x2a, 0x2, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendto$packet(r4, &(0x7f0000000240)="f2435f0100088000000000850800", 0xe, 0x1, &(0x7f0000000200)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x13}}, 0x14) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c00000013000100000000000000000000000002", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n', @ANYRES32=r5, @ANYBLOB="1400350064756d6d7930"], 0x3c}, 0x1, 0x0, 0x0, 0x8080}, 0x0) ioctl$SIOCSIFMTU(r3, 0x8922, &(0x7f0000000080)={'dummy0\x00'}) r7 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) r8 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/tty/drivers\x00', 0x0, 0x0) sendfile(r7, r8, 0x0, 0x106f) r9 = socket$rds(0x15, 0x5, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0xffffffffffffff2d, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, 0x0, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) bind$rds(r9, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) prctl$PR_MCE_KILL(0x4e, 0x1, 0x20000) 7.725187033s ago: executing program 0 (id=84): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x101100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000016000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, 0x0}], 0x1, 0x4e, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000180)={0x0, 0xd000}) syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa0f"], 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 7.101329858s ago: executing program 3 (id=86): socket$inet_udp(0x2, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$inet6(0xa, 0x80002, 0x0) socket$netlink(0x10, 0x3, 0x0) creat(&(0x7f00000001c0)='./file0\x00', 0x0) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r1, @ANYBLOB="1f003300d00000000802110000010802110000005050505050500000", @ANYRES8], 0x3c}}, 0x10) 6.773536142s ago: executing program 0 (id=87): socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$inet6(0xa, 0x3, 0x87) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000280)={{{@in6=@mcast1, @in=@local, 0x0, 0x0, 0x4e20, 0x1, 0x2}, {0x0, 0x4, 0x1, 0x0, 0x4, 0xb}, {0x1ff, 0xffffffffe, 0x4053e5, 0x20}, 0x6, 0x80001, 0x1, 0x0, 0x1, 0x1}, {{@in6=@ipv4={'\x00', '\xff\xff', @local}, 0x4d1, 0x32}, 0x2, @in=@private=0xa010101, 0x3501, 0x1, 0x0, 0x0, 0xa, 0xfffffffd}}, 0xe8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}, 0x9df}, 0x1c) 6.158868599s ago: executing program 0 (id=89): r0 = syz_open_dev$vcsa(&(0x7f0000000040), 0x1, 0x48042) writev(r0, &(0x7f0000000c40)=[{0x0}, {&(0x7f00000005c0)="c21cfb", 0x3}, {0x0}, {&(0x7f0000000900)}], 0x4) 6.103322566s ago: executing program 3 (id=90): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x4040054}, 0x4000) mount(&(0x7f0000000140)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='xfs\x00', 0x2208004, 0x0) r3 = syz_open_dev$sg(&(0x7f00000002c0), 0x0, 0x5) ioctl$SG_GET_REQUEST_TABLE(r3, 0x2286, &(0x7f0000000440)) r4 = syz_open_procfs(0x0, &(0x7f00000001c0)='mountinfo\x00') read$FUSE(r4, &(0x7f0000003480)={0x2020}, 0x2020) r5 = add_key$fscrypt_v1(&(0x7f0000000180), &(0x7f00000001c0)={'fscrypt:', @desc3}, &(0x7f0000000280)={0x0, "c683faa6825f1a25af3b6191facc8751ba3d8a447a0f359cf181bb0d58924dd9d9b34837a9ef3a3f72c925bbd42a07f3b2f9b25d4e7c08909985c4a4734ae2bd"}, 0x48, 0xfffffffffffffffe) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0x0, 0x0, 0x1) keyctl$KEYCTL_MOVE(0x1e, r5, 0x0, 0x0, 0x1) 5.654527271s ago: executing program 4 (id=91): r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) bind$can_raw(r0, &(0x7f00000001c0)={0x1d, r1}, 0x10) write(r0, 0x0, 0x0) 5.475251933s ago: executing program 0 (id=92): syz_open_dev$loop(0x0, 0x47ffffa, 0x1a6c42) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002000)=""/102384, 0x18ff0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) 4.85077722s ago: executing program 4 (id=93): socket(0x0, 0x3, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000002400)={0x4c, 0x0, &(0x7f00000022c0)=[@transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 3.859392892s ago: executing program 0 (id=94): socket$inet_udp(0x2, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$inet6(0xa, 0x80002, 0x0) socket$netlink(0x10, 0x3, 0x0) creat(&(0x7f00000001c0)='./file0\x00', 0x0) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r1, @ANYBLOB="1f003300d00000000802110000010802110000005050505050500000", @ANYRES8], 0x3c}}, 0x10) 3.670508715s ago: executing program 4 (id=95): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f0000000080)={[{@quota}, {@quota}, {@barrier_val={'barrier', 0x3d, 0x3}}, {@orlov}, {@test_dummy_encryption_v1}, {@jqfmt_vfsv1}]}, 0x3, 0x448, &(0x7f0000000440)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0xc4042, 0x1ff) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x6200, 0x0) sendfile(r0, r1, 0x0, 0x20fffe82) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r0, 0x6628) 3.192282533s ago: executing program 0 (id=96): syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0xa04080, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x2, 0x5524, &(0x7f00000108c0)="$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") openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x40441, 0x106) linkat(0xffffffffffffff9c, &(0x7f00000006c0)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000000100)='./file7\x00', 0x0) 2.721215667s ago: executing program 2 (id=97): syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB], 0x10) 2.029947713s ago: executing program 4 (id=98): socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$inet6(0xa, 0x3, 0x87) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000280)={{{@in6=@mcast1, @in=@local, 0x0, 0x0, 0x4e20, 0x1, 0x2}, {0x0, 0x4, 0x1, 0x0, 0x4, 0xb}, {0x1ff, 0xffffffffe, 0x4053e5, 0x20}, 0x6, 0x80001, 0x1, 0x0, 0x1, 0x1}, {{@in6=@ipv4={'\x00', '\xff\xff', @local}, 0x4d1, 0x32}, 0x2, @in=@private=0xa010101, 0x3501, 0x1, 0x0, 0x0, 0xa, 0xfffffffd}}, 0xe8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}, 0x9df}, 0x1c) 1.964673453s ago: executing program 2 (id=99): socket$inet_udp(0x2, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$inet6(0xa, 0x80002, 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="1f003300d00000000802110000010802110000005050505050500000", @ANYRES8=r0], 0x3c}}, 0x10) 1.150567458s ago: executing program 4 (id=100): syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000000)='./file2\x00', 0x2810812, &(0x7f0000000c80)=ANY=[@ANYBLOB='mode=0x0000000000000002,iocharset=macromanian,check=strict,check=relaxed,block=0x0000000000000800,map=off,overriderockperm,uid=', @ANYRESHEX=0x0, @ANYBLOB="2c696f636861727065743d69736f383835392d332c975ae02377a3d25942b49273800a422670771f52ee70dd13fdcf458f622fdb84c8604fd306d6d763860926d97f857a1cafab070022778430e1e2e6048dcf79c958434b79557e6356078b68c9ec9f0900ee1bc33749ef16ff6a24b516d0fe84618f5fafed05a6ccc0e5d82cd6d81dd3bcb80885db3d35de663dda8ba92af955d509df0689b90b92e38fe953cfe2112b3e0cf685b18d6c5f30bd2b5fe72072bed5c48fd4c868be2b22393bd7beb12400a67924ec8014103c26af400c0db4d2"], 0x1, 0xa36, &(0x7f0000000240)="$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") r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000b40)=ANY=[@ANYBLOB="14020000", @ANYRES16, @ANYBLOB="01002bbd7000fbdbdf250100000008000100010000000c0004800500030080ff000008000200010000000400088008000100ffffffff24000c8004000b801c000b8008000900"], 0x214}, 0x1, 0x0, 0x0, 0x1}, 0x48084) 1.110650197s ago: executing program 2 (id=101): r0 = syz_open_dev$vcsa(&(0x7f0000000040), 0x1, 0x48042) writev(r0, &(0x7f0000000c40)=[{0x0}, {&(0x7f00000005c0)="c21cfb", 0x3}, {0x0}, {&(0x7f0000000900)}], 0x4) 883.103056ms ago: executing program 3 (id=102): syz_mount_image$hfs(&(0x7f0000000100), &(0x7f0000000380)='./file0\x00', 0x0, &(0x7f0000000080)={[{}, {@uid}, {@codepage={'codepage', 0x3d, 'maccenteuro'}}, {@umask={'umask', 0x3d, 0x5}}, {@iocharset={'iocharset', 0x3d, 'macroman'}}]}, 0x21, 0x318, &(0x7f0000000480)="$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") openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x40, 0x1ff) 308.556519ms ago: executing program 2 (id=103): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x10a480, &(0x7f0000000180), 0x4, 0x795, &(0x7f0000001740)="$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") ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000580)={0x1ff, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x13, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000007c0)=[@text32={0x20, 0x0}], 0x1, 0x9, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000024c0), 0x0, 0x1) r3 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r3, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x10) ioctl$KVM_RUN(r2, 0xae80, 0x0) 0s ago: executing program 4 (id=104): socket(0x0, 0x3, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000002400)={0x4c, 0x0, &(0x7f00000022c0)=[@transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.34' (ED25519) to the list of known hosts. [ 154.539855][ T5558] cgroup: Unknown subsys name 'net' [ 154.687525][ T5558] cgroup: Unknown subsys name 'cpuset' [ 154.701096][ T5558] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 160.142722][ T5558] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 164.419815][ T5577] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 164.431295][ T5577] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 164.449944][ T5577] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 164.470061][ T48] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 164.482069][ T48] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 164.492989][ T48] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 164.505230][ T48] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 164.516305][ T48] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 164.528927][ T48] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 164.554829][ T48] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 164.576659][ T48] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 164.618455][ T4869] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 164.627790][ T4869] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 164.646924][ T4869] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 164.661684][ T5581] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 164.698523][ T5577] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 164.709153][ T5577] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 164.723002][ T5581] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 164.735845][ T5581] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 164.753908][ T5581] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 164.795385][ T5581] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 164.804414][ T5581] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 164.819639][ T5581] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 164.836614][ T5581] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 164.852817][ T5581] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 166.579536][ T5581] Bluetooth: hci0: command tx timeout [ 166.659487][ T5581] Bluetooth: hci1: command tx timeout [ 166.739692][ T5581] Bluetooth: hci2: command tx timeout [ 166.829937][ T5581] Bluetooth: hci3: command tx timeout [ 166.899463][ T5581] Bluetooth: hci4: command tx timeout [ 168.586523][ T5580] bridge0: port 1(bridge_slave_0) entered blocking state [ 168.599817][ T5580] bridge0: port 1(bridge_slave_0) entered disabled state [ 168.619188][ T5580] bridge_slave_0: entered allmulticast mode [ 168.633843][ T5580] bridge_slave_0: entered promiscuous mode [ 168.663991][ T5581] Bluetooth: hci0: command tx timeout [ 168.743681][ T5581] Bluetooth: hci1: command tx timeout [ 168.771537][ T5580] bridge0: port 2(bridge_slave_1) entered blocking state [ 168.780051][ T5580] bridge0: port 2(bridge_slave_1) entered disabled state [ 168.787575][ T5580] bridge_slave_1: entered allmulticast mode [ 168.797092][ T5580] bridge_slave_1: entered promiscuous mode [ 168.819785][ T5581] Bluetooth: hci2: command tx timeout [ 168.841385][ T5583] bridge0: port 1(bridge_slave_0) entered blocking state [ 168.850789][ T5583] bridge0: port 1(bridge_slave_0) entered disabled state [ 168.858317][ T5583] bridge_slave_0: entered allmulticast mode [ 168.869009][ T5583] bridge_slave_0: entered promiscuous mode [ 168.909515][ T5581] Bluetooth: hci3: command tx timeout [ 168.968974][ T5583] bridge0: port 2(bridge_slave_1) entered blocking state [ 168.982314][ T5581] Bluetooth: hci4: command tx timeout [ 168.982766][ T5583] bridge0: port 2(bridge_slave_1) entered disabled state [ 168.996561][ T5583] bridge_slave_1: entered allmulticast mode [ 169.004941][ T5583] bridge_slave_1: entered promiscuous mode [ 169.049119][ T5580] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 169.155174][ T5580] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 169.165991][ T5587] bridge0: port 1(bridge_slave_0) entered blocking state [ 169.173888][ T5587] bridge0: port 1(bridge_slave_0) entered disabled state [ 169.181430][ T5587] bridge_slave_0: entered allmulticast mode [ 169.189901][ T5587] bridge_slave_0: entered promiscuous mode [ 169.230438][ T5583] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 169.262880][ T5587] bridge0: port 2(bridge_slave_1) entered blocking state [ 169.270792][ T5587] bridge0: port 2(bridge_slave_1) entered disabled state [ 169.278213][ T5587] bridge_slave_1: entered allmulticast mode [ 169.286659][ T5587] bridge_slave_1: entered promiscuous mode [ 169.317975][ T5576] bridge0: port 1(bridge_slave_0) entered blocking state [ 169.325503][ T5576] bridge0: port 1(bridge_slave_0) entered disabled state [ 169.333112][ T5576] bridge_slave_0: entered allmulticast mode [ 169.342050][ T5576] bridge_slave_0: entered promiscuous mode [ 169.359053][ T5583] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 169.461451][ T5576] bridge0: port 2(bridge_slave_1) entered blocking state [ 169.469105][ T5576] bridge0: port 2(bridge_slave_1) entered disabled state [ 169.476967][ T5576] bridge_slave_1: entered allmulticast mode [ 169.485226][ T5576] bridge_slave_1: entered promiscuous mode [ 169.522564][ T5580] team0: Port device team_slave_0 added [ 169.549761][ T5586] bridge0: port 1(bridge_slave_0) entered blocking state [ 169.557378][ T5586] bridge0: port 1(bridge_slave_0) entered disabled state [ 169.564987][ T5586] bridge_slave_0: entered allmulticast mode [ 169.573005][ T5586] bridge_slave_0: entered promiscuous mode [ 169.610487][ T5583] team0: Port device team_slave_0 added [ 169.623781][ T5580] team0: Port device team_slave_1 added [ 169.636528][ T5587] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 169.646389][ T5586] bridge0: port 2(bridge_slave_1) entered blocking state [ 169.654311][ T5586] bridge0: port 2(bridge_slave_1) entered disabled state [ 169.661875][ T5586] bridge_slave_1: entered allmulticast mode [ 169.670094][ T5586] bridge_slave_1: entered promiscuous mode [ 169.709120][ T5583] team0: Port device team_slave_1 added [ 169.742498][ T5587] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 169.828683][ T5576] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 169.938445][ T5576] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 169.971633][ T5580] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 169.978662][ T5580] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 170.004899][ T5580] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 170.046680][ T5586] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 170.079478][ T5583] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 170.086579][ T5583] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 170.113359][ T5583] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 170.127171][ T5580] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 170.134453][ T5580] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 170.160585][ T5580] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 170.178091][ T5587] team0: Port device team_slave_0 added [ 170.191498][ T5586] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 170.225284][ T5583] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 170.232755][ T5583] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 170.259105][ T5583] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 170.293335][ T5587] team0: Port device team_slave_1 added [ 170.327369][ T5576] team0: Port device team_slave_0 added [ 170.403217][ T5576] team0: Port device team_slave_1 added [ 170.443243][ T5586] team0: Port device team_slave_0 added [ 170.497357][ T5587] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 170.504547][ T5587] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 170.530852][ T5587] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 170.548968][ T5586] team0: Port device team_slave_1 added [ 170.635622][ T5587] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 170.642800][ T5587] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 170.669479][ T5587] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 170.705700][ T5576] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 170.712929][ T5576] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 170.739636][ T5581] Bluetooth: hci0: command tx timeout [ 170.742359][ T5576] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 170.787905][ T5580] hsr_slave_0: entered promiscuous mode [ 170.796248][ T5580] hsr_slave_1: entered promiscuous mode [ 170.819816][ T5581] Bluetooth: hci1: command tx timeout [ 170.847110][ T5576] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 170.854692][ T5576] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 170.881001][ T5576] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 170.899645][ T5581] Bluetooth: hci2: command tx timeout [ 170.908109][ T5583] hsr_slave_0: entered promiscuous mode [ 170.916527][ T5583] hsr_slave_1: entered promiscuous mode [ 170.924830][ T5583] debugfs: 'hsr0' already exists in 'hsr' [ 170.930743][ T5583] Cannot create hsr debugfs directory [ 170.946944][ T5586] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 170.954103][ T5586] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 170.980307][ T5586] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 170.980343][ T5581] Bluetooth: hci3: command tx timeout [ 171.019354][ T5586] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 171.026411][ T5586] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 171.052553][ T5586] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 171.063347][ T5581] Bluetooth: hci4: command tx timeout [ 171.262040][ T5587] hsr_slave_0: entered promiscuous mode [ 171.270662][ T5587] hsr_slave_1: entered promiscuous mode [ 171.277966][ T5587] debugfs: 'hsr0' already exists in 'hsr' [ 171.284072][ T5587] Cannot create hsr debugfs directory [ 171.397471][ T5576] hsr_slave_0: entered promiscuous mode [ 171.405661][ T5576] hsr_slave_1: entered promiscuous mode [ 171.413688][ T5576] debugfs: 'hsr0' already exists in 'hsr' [ 171.419605][ T5576] Cannot create hsr debugfs directory [ 171.492325][ T5586] hsr_slave_0: entered promiscuous mode [ 171.501706][ T5586] hsr_slave_1: entered promiscuous mode [ 171.510645][ T5586] debugfs: 'hsr0' already exists in 'hsr' [ 171.516506][ T5586] Cannot create hsr debugfs directory [ 172.617738][ T5580] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 172.645398][ T5580] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 172.655322][ T5580] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 172.673411][ T5580] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 172.682990][ T5580] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 172.698672][ T5580] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 172.721286][ T5580] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 172.739014][ T5580] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 172.820962][ T5581] Bluetooth: hci0: command tx timeout [ 172.833716][ T5583] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 172.868838][ T5583] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 172.884077][ T5583] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 172.898928][ T5583] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 172.907021][ T5581] Bluetooth: hci1: command tx timeout [ 172.924000][ T5583] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 172.941982][ T5583] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 172.951805][ T5583] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 172.967988][ T5583] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 172.986802][ T5581] Bluetooth: hci2: command tx timeout [ 173.060461][ T5581] Bluetooth: hci3: command tx timeout [ 173.139659][ T5581] Bluetooth: hci4: command tx timeout [ 173.194498][ T5576] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 173.211881][ T5576] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 173.225442][ T5576] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 173.240413][ T5576] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 173.258827][ T5576] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 173.277999][ T5576] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 173.291010][ T5576] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 173.315475][ T5576] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 173.526292][ T5586] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 173.544729][ T5586] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 173.554917][ T5586] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 173.571365][ T5586] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 173.581393][ T5586] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 173.598192][ T5586] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 173.614542][ T5586] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 173.632483][ T5586] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 173.803956][ T5580] 8021q: adding VLAN 0 to HW filter on device bond0 [ 173.920273][ T5587] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 173.937593][ T5587] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 173.952601][ T5587] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 173.972004][ T5587] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 174.012470][ T5587] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 174.034655][ T5587] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 174.044618][ T5587] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 174.063722][ T5587] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 174.186940][ T5580] 8021q: adding VLAN 0 to HW filter on device team0 [ 174.310107][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 174.317475][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 174.341840][ T5583] 8021q: adding VLAN 0 to HW filter on device bond0 [ 174.376093][ T55] bridge0: port 2(bridge_slave_1) entered blocking state [ 174.383424][ T55] bridge0: port 2(bridge_slave_1) entered forwarding state [ 174.512586][ T5583] 8021q: adding VLAN 0 to HW filter on device team0 [ 174.632274][ T5576] 8021q: adding VLAN 0 to HW filter on device bond0 [ 174.658533][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 174.666025][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 174.766355][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 174.773744][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 174.821513][ T5586] 8021q: adding VLAN 0 to HW filter on device bond0 [ 174.887833][ T5576] 8021q: adding VLAN 0 to HW filter on device team0 [ 174.994847][ T64] bridge0: port 1(bridge_slave_0) entered blocking state [ 175.002397][ T64] bridge0: port 1(bridge_slave_0) entered forwarding state [ 175.053958][ T5586] 8021q: adding VLAN 0 to HW filter on device team0 [ 175.112517][ T64] bridge0: port 2(bridge_slave_1) entered blocking state [ 175.120286][ T64] bridge0: port 2(bridge_slave_1) entered forwarding state [ 175.208002][ T55] bridge0: port 1(bridge_slave_0) entered blocking state [ 175.215520][ T55] bridge0: port 1(bridge_slave_0) entered forwarding state [ 175.277332][ T5587] 8021q: adding VLAN 0 to HW filter on device bond0 [ 175.325492][ T55] bridge0: port 2(bridge_slave_1) entered blocking state [ 175.333002][ T55] bridge0: port 2(bridge_slave_1) entered forwarding state [ 175.527748][ T5587] 8021q: adding VLAN 0 to HW filter on device team0 [ 175.711835][ T151] bridge0: port 1(bridge_slave_0) entered blocking state [ 175.719465][ T151] bridge0: port 1(bridge_slave_0) entered forwarding state [ 175.742568][ T151] bridge0: port 2(bridge_slave_1) entered blocking state [ 175.750072][ T151] bridge0: port 2(bridge_slave_1) entered forwarding state [ 176.854475][ T5580] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 177.563732][ T5580] veth0_vlan: entered promiscuous mode [ 177.678064][ T5580] veth1_vlan: entered promiscuous mode [ 178.091124][ T5583] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 178.161657][ T5580] veth0_macvtap: entered promiscuous mode [ 178.295735][ T5580] veth1_macvtap: entered promiscuous mode [ 178.545025][ T5580] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 178.578254][ T5576] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 178.688381][ T5580] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 178.795538][ T151] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.810612][ T151] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.841465][ T151] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.916309][ T151] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 179.386954][ T5587] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 179.406994][ T5586] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 179.421308][ T5576] veth0_vlan: entered promiscuous mode [ 179.556068][ T5576] veth1_vlan: entered promiscuous mode [ 180.162248][ T5576] veth0_macvtap: entered promiscuous mode [ 180.174663][ T5583] veth0_vlan: entered promiscuous mode [ 180.211182][ T5587] veth0_vlan: entered promiscuous mode [ 180.246899][ T5576] veth1_macvtap: entered promiscuous mode [ 180.273488][ T5586] veth0_vlan: entered promiscuous mode [ 180.346903][ T5583] veth1_vlan: entered promiscuous mode [ 180.390698][ T5587] veth1_vlan: entered promiscuous mode [ 180.472729][ T5576] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 180.483641][ T5586] veth1_vlan: entered promiscuous mode [ 180.558886][ T5576] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 180.672454][ T56] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.683907][ T56] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.708716][ T56] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.718199][ T56] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.833611][ T5583] veth0_macvtap: entered promiscuous mode [ 180.918012][ T5583] veth1_macvtap: entered promiscuous mode [ 181.001972][ T5587] veth0_macvtap: entered promiscuous mode [ 181.111479][ T5586] veth0_macvtap: entered promiscuous mode [ 181.144510][ T5587] veth1_macvtap: entered promiscuous mode [ 181.202495][ T5586] veth1_macvtap: entered promiscuous mode [ 181.288935][ T5583] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 181.457552][ T5583] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 181.533150][ T5587] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 181.643868][ T5586] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 181.668032][ T55] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.693448][ T55] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.763771][ T55] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.786432][ T55] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.815256][ T5587] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 181.912936][ T5586] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 181.997823][ T1017] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.047410][ T1017] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.062417][ T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.106516][ T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.146224][ T13] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.168224][ T55] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 182.210619][ T55] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 182.246549][ T64] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.283639][ T64] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.416904][ T64] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.596159][ T55] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 182.636838][ T55] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 183.213160][ T5580] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 186.054322][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 186.093488][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 186.316662][ T55] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 186.369461][ T55] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 187.438217][ T34] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 187.451066][ T4893] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 187.471876][ T34] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 187.651263][ T4893] usb 1-1: Using ep0 maxpacket: 16 [ 187.682971][ T4893] usb 1-1: config 0 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 25 [ 187.704240][ T34] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 187.725453][ T4893] usb 1-1: config 0 interface 0 has no altsetting 0 [ 187.744672][ T34] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 187.756002][ T4893] usb 1-1: New USB device found, idVendor=0b05, idProduct=1822, bcdDevice= 0.00 [ 187.799196][ T4893] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 187.862837][ T4893] usb 1-1: config 0 descriptor?? [ 188.427741][ T4893] usbhid 1-1:0.0: can't add hid device: -71 [ 188.457547][ T4893] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 188.484045][ T34] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 188.500668][ T34] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 188.513854][ T4893] usb 1-1: USB disconnect, device number 2 [ 188.629641][ T5862] loop4: detected capacity change from 0 to 128 [ 188.744462][ T64] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 188.785640][ T5862] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 188.808792][ T64] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 188.831304][ T5862] ext4 filesystem being mounted at /0/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 189.056078][ T5583] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 189.079485][ T5711] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 189.115259][ T5711] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 189.239802][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 189.274652][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 190.100177][ T5874] batman_adv: batadv0: Adding interface: dummy0 [ 190.124113][ T5874] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 190.263825][ T5874] batman_adv: batadv0: Interface activated: dummy0 [ 190.419620][ T5877] batadv0: mtu less than device minimum [ 190.453667][ T5877] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 190.466600][ T5877] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 190.479445][ T5877] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 190.492185][ T5877] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 190.504898][ T5877] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 190.517612][ T5877] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 190.530425][ T5877] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 190.543173][ T5877] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 190.555909][ T5877] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 191.364657][ T4893] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 191.561940][ T4893] usb 4-1: Using ep0 maxpacket: 32 [ 191.593280][ T4893] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 191.640436][ T4893] usb 4-1: New USB device found, idVendor=0582, idProduct=007d, bcdDevice= 0.40 [ 191.680909][ T4893] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 191.710248][ T4893] usb 4-1: Product: syz [ 191.735495][ T4893] usb 4-1: Manufacturer: syz [ 191.749741][ T4893] usb 4-1: SerialNumber: syz [ 191.876201][ T4893] snd-ua101 4-1:1.1: sample format descriptor not found [ 191.906261][ T4893] snd-ua101 4-1:1.0: invalid num_altsetting [ 192.258852][ T4893] usb 4-1: USB disconnect, device number 2 [ 192.577600][ T5897] netlink: 20 bytes leftover after parsing attributes in process `syz.2.18'. [ 193.072511][ T5901] loop0: detected capacity change from 0 to 128 [ 193.208497][ T5904] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 193.245070][ T5901] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 193.281306][ T5901] ext4 filesystem being mounted at /5/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 193.640916][ T5576] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 193.660857][ T4893] usb 4-1: new low-speed USB device number 3 using dummy_hcd [ 193.903438][ T4893] usb 4-1: config 0 interface 0 altsetting 67 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 193.950465][ T4893] usb 4-1: config 0 interface 0 altsetting 67 endpoint 0x81 has invalid maxpacket 64, setting to 8 [ 194.018860][ T4893] usb 4-1: config 0 interface 0 altsetting 67 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 194.083791][ T4893] usb 4-1: config 0 interface 0 has no altsetting 0 [ 194.085714][ T5911] loop0: detected capacity change from 0 to 256 [ 194.093107][ T4893] usb 4-1: New USB device found, idVendor=18b1, idProduct=0037, bcdDevice= 0.00 [ 194.149446][ T4893] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 194.208614][ T4893] usb 4-1: config 0 descriptor?? [ 194.238659][ T5907] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 194.687229][ T4893] usbhid 4-1:0.0: can't add hid device: -71 [ 194.747737][ T4893] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 194.800747][ T4893] usb 4-1: USB disconnect, device number 3 [ 196.687040][ T5935] Zero length message leads to an empty skb [ 196.841288][ T5937] loop2: detected capacity change from 0 to 128 [ 197.117026][ T5939] loop0: detected capacity change from 0 to 128 [ 197.218355][ T5939] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 197.306939][ T5939] ext4 filesystem being mounted at /10/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 197.750935][ T5576] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 198.231245][ T5952] syz.0.37 uses obsolete (PF_INET,SOCK_PACKET) [ 198.386437][ T5952] netlink: 71 bytes leftover after parsing attributes in process `syz.0.37'. [ 198.750571][ T807] usb 4-1: new low-speed USB device number 4 using dummy_hcd [ 198.927714][ T807] usb 4-1: config 0 interface 0 altsetting 67 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 198.972955][ T807] usb 4-1: config 0 interface 0 altsetting 67 endpoint 0x81 has invalid maxpacket 64, setting to 8 [ 199.008398][ T807] usb 4-1: config 0 interface 0 altsetting 67 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 199.048542][ T807] usb 4-1: config 0 interface 0 has no altsetting 0 [ 199.083646][ T807] usb 4-1: New USB device found, idVendor=18b1, idProduct=0037, bcdDevice= 0.00 [ 199.120026][ T807] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 199.132616][ T5961] random: crng reseeded on system resumption [ 199.162785][ T807] usb 4-1: config 0 descriptor?? [ 199.179059][ T5956] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 199.661726][ T807] usbhid 4-1:0.0: can't add hid device: -71 [ 199.687257][ T807] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 199.730239][ T807] usb 4-1: USB disconnect, device number 4 [ 200.431418][ T5976] netlink: 8 bytes leftover after parsing attributes in process `syz.4.44'. [ 200.641493][ T807] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 200.843535][ T807] usb 3-1: Using ep0 maxpacket: 8 [ 200.865843][ T807] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 200.887496][ T807] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 200.917989][ T807] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 200.966267][ T807] usb 3-1: New USB device found, idVendor=04e8, idProduct=ff30, bcdDevice=a6.d1 [ 200.984252][ T807] usb 3-1: New USB device strings: Mfr=1, Product=34, SerialNumber=3 [ 200.990928][ T4893] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 201.019676][ T807] usb 3-1: Product: syz [ 201.031632][ T807] usb 3-1: Manufacturer: syz [ 201.059492][ T807] usb 3-1: SerialNumber: syz [ 201.078687][ T807] usb 3-1: config 0 descriptor?? [ 201.180625][ T4893] usb 1-1: Using ep0 maxpacket: 16 [ 201.217449][ T4893] usb 1-1: config index 0 descriptor too short (expected 52, got 36) [ 201.252370][ T4893] usb 1-1: config 0 has an invalid interface number: 251 but max is 0 [ 201.282800][ T4893] usb 1-1: config 0 has no interface number 0 [ 201.303220][ T4893] usb 1-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 201.336564][ T4893] usb 1-1: config 0 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 201.417015][ T4893] usb 1-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 201.442043][ T807] rc_core: IR keymap rc-imon-rsc not found [ 201.456289][ T807] Registered IR keymap rc-empty [ 201.470286][ T807] rc rc0: iMON Station as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 201.476836][ T4893] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 201.493703][ T807] input: iMON Station as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input5 [ 201.521319][ T4893] usb 1-1: Product: syz [ 201.526362][ T4893] usb 1-1: Manufacturer: syz [ 201.568810][ T4893] usb 1-1: SerialNumber: syz [ 201.638801][ T4893] usb 1-1: config 0 descriptor?? [ 201.654187][ T807] usb 3-1: USB disconnect, device number 2 [ 201.681985][ T5978] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 201.700448][ T5978] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 201.793246][ T5987] loop3: detected capacity change from 0 to 4096 [ 201.927653][ T5987] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 202.030733][ T5978] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 202.062402][ T5978] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 202.259938][ T5991] binder_alloc: 5989: binder_alloc_buf, no vma [ 202.415369][ T4893] asix 1-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 202.458552][ T4893] asix 1-1:0.251 (unnamed net_device) (uninitialized): Failed to read MAC address: -71 [ 202.504314][ T4893] asix 1-1:0.251: probe with driver asix failed with error -5 [ 202.610478][ T4893] usb 1-1: USB disconnect, device number 3 [ 203.235083][ T5586] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 203.951409][ T1310] ieee802154 phy0 wpan0: encryption failed: -22 [ 203.964077][ T1310] ieee802154 phy1 wpan1: encryption failed: -22 [ 203.998003][ T4893] usb 5-1: new low-speed USB device number 2 using dummy_hcd [ 204.231077][ T4893] usb 5-1: config 0 interface 0 altsetting 67 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 204.298567][ T4893] usb 5-1: config 0 interface 0 altsetting 67 endpoint 0x81 has invalid maxpacket 64, setting to 8 [ 204.351258][ T4893] usb 5-1: config 0 interface 0 altsetting 67 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 204.415871][ T4893] usb 5-1: config 0 interface 0 has no altsetting 0 [ 204.455075][ T4893] usb 5-1: New USB device found, idVendor=18b1, idProduct=0037, bcdDevice= 0.00 [ 204.491621][ T4893] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 204.565199][ T4893] usb 5-1: config 0 descriptor?? [ 204.592308][ T6007] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 205.066522][ T4893] usbhid 5-1:0.0: can't add hid device: -71 [ 205.094971][ T4893] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 205.154234][ T4893] usb 5-1: USB disconnect, device number 2 [ 205.391058][ T5581] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 205.400317][ T5581] Bluetooth: hci3: Injecting HCI hardware error event [ 205.407750][ T5581] Bluetooth: hci3: hardware error 0x00 [ 205.637514][ T5577] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 205.654584][ T5577] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 205.664675][ T5577] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 205.679100][ T5577] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 205.694976][ T5577] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 205.702140][ T6024] binder_alloc: 6021: binder_alloc_buf, no vma [ 207.464353][ T5581] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 207.786057][ T5581] Bluetooth: hci5: command tx timeout [ 208.254169][ T6048] loop4: detected capacity change from 0 to 4096 [ 208.329801][ T6048] EXT4-fs: inline encryption not supported [ 208.339172][ T6048] EXT4-fs: Ignoring removed bh option [ 208.363308][ T6048] EXT4-fs: Ignoring removed i_version option [ 208.393355][ T6048] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 208.502856][ T6048] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0002] [ 208.542978][ T6048] System zones: 0-5 [ 208.638218][ T6048] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 209.021856][ T4893] usb 4-1: new low-speed USB device number 5 using dummy_hcd [ 209.275291][ T4893] usb 4-1: config 0 interface 0 altsetting 67 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 209.333583][ T4893] usb 4-1: config 0 interface 0 altsetting 67 endpoint 0x81 has invalid maxpacket 64, setting to 8 [ 209.380872][ T4893] usb 4-1: config 0 interface 0 altsetting 67 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 209.431858][ T4893] usb 4-1: config 0 interface 0 has no altsetting 0 [ 209.475251][ T4893] usb 4-1: New USB device found, idVendor=18b1, idProduct=0037, bcdDevice= 0.00 [ 209.529483][ T4893] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 209.580549][ T4893] usb 4-1: config 0 descriptor?? [ 209.603068][ T6059] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 209.852967][ T807] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 209.861338][ T5581] Bluetooth: hci5: command tx timeout [ 210.059457][ T807] usb 1-1: Using ep0 maxpacket: 8 [ 210.090455][ T4893] usbhid 4-1:0.0: can't add hid device: -71 [ 210.091158][ T807] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 210.109829][ T4893] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 210.182997][ T807] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 210.205057][ T4893] usb 4-1: USB disconnect, device number 5 [ 210.224931][ T807] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 210.281061][ T807] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 210.387139][ T807] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 210.440612][ T807] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 210.712218][ T807] usb 1-1: GET_CAPABILITIES returned 0 [ 210.733403][ T807] usbtmc 1-1:16.0: can't read capabilities [ 210.935522][ T807] usb 1-1: USB disconnect, device number 4 [ 211.852101][ T5583] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 211.939720][ T5581] Bluetooth: hci5: command tx timeout [ 212.096794][ T6080] vivid-007: ================= START STATUS ================= [ 212.145515][ T6080] vivid-007: Generate PTS: true [ 212.167122][ T6080] vivid-007: Generate SCR: true [ 212.191577][ T6080] tpg source WxH: 320x240 (Y'CbCr) [ 212.217808][ T6080] tpg field: 1 [ 212.238031][ T6080] tpg crop: (0,0)/320x240 [ 212.278108][ T6080] tpg compose: (0,0)/320x240 [ 212.303475][ T6080] tpg colorspace: 8 [ 212.335655][ T6080] tpg transfer function: 0/0 [ 212.355308][ T6080] tpg Y'CbCr encoding: 0/0 [ 212.385890][ T6080] tpg quantization: 0/0 [ 212.417423][ T6080] tpg RGB range: 0/2 [ 212.439750][ T6080] vivid-007: ================== END STATUS ================== [ 213.387175][ T6025] bridge0: port 1(bridge_slave_0) entered blocking state [ 213.410027][ T6025] bridge0: port 1(bridge_slave_0) entered disabled state [ 213.446275][ T6025] bridge_slave_0: entered allmulticast mode [ 213.492292][ T6025] bridge_slave_0: entered promiscuous mode [ 213.563505][ T6025] bridge0: port 2(bridge_slave_1) entered blocking state [ 213.628037][ T6025] bridge0: port 2(bridge_slave_1) entered disabled state [ 213.648276][ T6098] loop4: detected capacity change from 0 to 1764 [ 213.670038][ T6025] bridge_slave_1: entered allmulticast mode [ 213.686945][ T6098] iso9660: Unknown parameter 'iocharpet' [ 213.730247][ T6025] bridge_slave_1: entered promiscuous mode [ 213.797202][ T6098] netlink: 436 bytes leftover after parsing attributes in process `syz.4.85'. [ 213.830007][ T6098] netlink: 16 bytes leftover after parsing attributes in process `syz.4.85'. [ 214.019989][ T5581] Bluetooth: hci5: command tx timeout [ 214.160914][ T6025] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 214.224373][ T6025] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 214.617382][ T6025] team0: Port device team_slave_0 added [ 214.699146][ T6025] team0: Port device team_slave_1 added [ 215.042101][ T6025] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 215.066807][ T6025] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 215.215221][ T6025] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 215.320691][ T6025] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 215.327813][ T6025] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 215.455033][ T6025] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 216.157503][ T6025] hsr_slave_0: entered promiscuous mode [ 216.217052][ T6025] hsr_slave_1: entered promiscuous mode [ 216.254076][ T6025] debugfs: 'hsr0' already exists in 'hsr' [ 216.273877][ T6025] Cannot create hsr debugfs directory [ 217.422560][ T6123] loop4: detected capacity change from 0 to 512 [ 217.477575][ T6123] EXT4-fs: Ignoring removed orlov option [ 217.523554][ T6123] EXT4-fs (loop4): Test dummy encryption mode enabled [ 217.568683][ T6123] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 217.625595][ T6123] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 217.720051][ T6123] EXT4-fs (loop4): 1 truncate cleaned up [ 217.738728][ T6123] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 217.927514][ T29] audit: type=1800 audit(1778615063.523:2): pid=6123 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.95" name="file1" dev="loop4" ino=15 res=0 errno=0 [ 218.558768][ T6025] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 218.563838][ T5583] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 218.638573][ T6025] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 218.697131][ T6025] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 218.739605][ T5581] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 218.748337][ T5581] Bluetooth: hci2: Injecting HCI hardware error event [ 218.760951][ T4869] Bluetooth: hci2: hardware error 0x00 [ 218.825268][ T6025] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 218.886178][ T6025] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 219.020719][ T6025] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 219.071753][ T6025] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 219.160871][ T6025] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 220.082033][ T6137] loop4: detected capacity change from 0 to 1764 [ 220.150118][ T6137] iso9660: Unknown parameter 'iocharpet' [ 220.236439][ T6141] loop3: detected capacity change from 0 to 64 [ 220.615181][ T6025] 8021q: adding VLAN 0 to HW filter on device bond0 [ 220.802925][ T5899] ===================================================== [ 220.814256][ T5899] BUG: KMSAN: uninit-value in __d_lookup_rcu+0x37d/0x5e0 [ 220.822798][ T5899] __d_lookup_rcu+0x37d/0x5e0 [ 220.827655][ T5899] lookup_fast+0x186/0xa40 [ 220.829666][ T4869] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 220.832415][ T5899] path_openat+0xa07/0x64c0 [ 220.843067][ T5899] do_file_open+0x2aa/0x680 [ 220.847734][ T5899] do_sys_openat2+0x163/0x370 [ 220.853067][ T5899] __x64_sys_openat+0x240/0x300 [ 220.858609][ T5899] x64_sys_call+0x2445/0x3ea0 [ 220.863609][ T5899] do_syscall_64+0x134/0xf80 [ 220.868354][ T5899] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 220.874512][ T5899] [ 220.876905][ T5899] [ 220.876905][ T5899] [ 220.886000][ T5899] Uninit was stored to memory at: [ 220.891377][ T5899] __d_move+0xf72/0x2aa0 [ 220.895764][ T5899] d_move+0x71/0xf0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 220.901300][ T5899] vfs_rename+0x2510/0x2650 [ 220.905933][ T5899] filename_renameat2+0xb7f/0x1260 [ 220.914925][ T5899] __se_sys_rename+0xc5/0x5d0 [ 220.924514][ T5899] __x64_sys_rename+0x78/0xb0 [ 220.929446][ T5899] x64_sys_call+0x329/0x3ea0 [ 220.934195][ T5899] do_syscall_64+0x134/0xf80 [ 220.938933][ T5899] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 220.945234][ T5899] [ 220.947615][ T5899] Uninit was stored to memory at: [ 220.952987][ T5899] __d_move+0xf72/0x2aa0 [ 220.957375][ T5899] d_move+0x71/0xf0 [ 220.961440][ T5899] vfs_rename+0x2510/0x2650 [ 220.966062][ T5899] filename_renameat2+0xb7f/0x1260 [ 220.971430][ T5899] __se_sys_rename+0xc5/0x5d0 [ 220.976233][ T5899] __x64_sys_rename+0x78/0xb0 [ 220.981192][ T5899] x64_sys_call+0x329/0x3ea0 [ 220.985935][ T5899] do_syscall_64+0x134/0xf80 [ 220.990779][ T5899] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 220.996822][ T5899] [ 220.999206][ T5899] Uninit was stored to memory at: [ 221.004694][ T5899] __d_move+0xf72/0x2aa0 [ 221.013786][ T5899] d_move+0x71/0xf0 [ 221.017748][ T5899] vfs_rename+0x2510/0x2650 [ 221.023566][ T6025] 8021q: adding VLAN 0 to HW filter on device team0 [ 221.030387][ T5899] filename_renameat2+0xb7f/0x1260 [ 221.035628][ T5899] __se_sys_rename+0xc5/0x5d0 [ 221.040554][ T5899] __x64_sys_rename+0x78/0xb0 [ 221.045354][ T5899] x64_sys_call+0x329/0x3ea0 [ 221.050225][ T5899] do_syscall_64+0x134/0xf80 [ 221.054956][ T5899] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 221.063171][ T5899] [ 221.065930][ T5899] Uninit was stored to memory at: [ 221.071374][ T5899] __d_move+0xf72/0x2aa0 [ 221.075768][ T5899] d_move+0x71/0xf0 [ 221.079990][ T5899] vfs_rename+0x2510/0x2650 [ 221.084614][ T5899] filename_renameat2+0xb7f/0x1260 [ 221.090119][ T5899] __se_sys_rename+0xc5/0x5d0 [ 221.094930][ T5899] __x64_sys_rename+0x78/0xb0 [ 221.099913][ T5899] x64_sys_call+0x329/0x3ea0 [ 221.104662][ T5899] do_syscall_64+0x134/0xf80 [ 221.109584][ T5899] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 221.118533][ T5899] [ 221.122284][ T5899] Uninit was stored to memory at: [ 221.127559][ T5899] __d_move+0xf72/0x2aa0 [ 221.132113][ T5899] d_move+0x71/0xf0 [ 221.136068][ T5899] vfs_rename+0x2510/0x2650 [ 221.141107][ T5899] filename_renameat2+0xb7f/0x1260 [ 221.146344][ T5899] __se_sys_rename+0xc5/0x5d0 [ 221.151915][ T5899] __x64_sys_rename+0x78/0xb0 [ 221.156717][ T5899] x64_sys_call+0x329/0x3ea0 [ 221.160562][ T5711] bridge0: port 1(bridge_slave_0) entered blocking state [ 221.161651][ T5899] do_syscall_64+0x134/0xf80 [ 221.168848][ T5711] bridge0: port 1(bridge_slave_0) entered forwarding state [ 221.173249][ T5899] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 221.186443][ T5899] [ 221.188826][ T5899] Uninit was stored to memory at: [ 221.194259][ T5899] __d_move+0xf72/0x2aa0 [ 221.198647][ T5899] d_move+0x71/0xf0 [ 221.202768][ T5899] vfs_rename+0x2510/0x2650 [ 221.207401][ T5899] filename_renameat2+0xb7f/0x1260 [ 221.212889][ T5899] __se_sys_rename+0xc5/0x5d0 [ 221.221028][ T5899] __x64_sys_rename+0x78/0xb0 [ 221.225840][ T5899] x64_sys_call+0x329/0x3ea0 [ 221.232180][ T5899] do_syscall_64+0x134/0xf80 [ 221.236934][ T5899] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 221.243145][ T5899] [ 221.245542][ T5899] Uninit was stored to memory at: [ 221.250986][ T5899] __d_move+0xf72/0x2aa0 [ 221.255373][ T5899] d_move+0x71/0xf0 [ 221.259486][ T5899] vfs_rename+0x2510/0x2650 [ 221.264108][ T5899] filename_renameat2+0xb7f/0x1260 [ 221.269612][ T5899] __se_sys_rename+0xc5/0x5d0 [ 221.274413][ T5899] __x64_sys_rename+0x78/0xb0 [ 221.279209][ T5899] x64_sys_call+0x329/0x3ea0 [ 221.284130][ T5899] do_syscall_64+0x134/0xf80 [ 221.288881][ T5899] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 221.295106][ T5899] [ 221.297490][ T5899] Uninit was created at: [ 221.302218][ T5899] kmem_cache_alloc_lru_noprof+0x37a/0x1260 [ 221.308291][ T5899] __d_alloc+0x55/0xa00 [ 221.312783][ T5899] d_alloc+0x57/0x300 [ 221.321074][ T5899] lookup_one_qstr_excl+0x19d/0x7b0 [ 221.326427][ T5899] __start_renaming+0x38e/0x870 [ 221.332773][ T5899] filename_renameat2+0x735/0x1260 [ 221.338030][ T5899] __se_sys_rename+0xc5/0x5d0 [ 221.343091][ T5899] __x64_sys_rename+0x78/0xb0 [ 221.347894][ T5899] x64_sys_call+0x329/0x3ea0 [ 221.352773][ T5899] do_syscall_64+0x134/0xf80 [ 221.357520][ T5899] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 221.363681][ T5899] [ 221.366116][ T5899] CPU: 1 UID: 0 PID: 5899 Comm: udevd Not tainted syzkaller #0 PREEMPT(full) [ 221.375269][ T5899] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 221.378007][ T55] bridge0: port 2(bridge_slave_1) entered blocking state [ 221.385576][ T5899] ===================================================== [ 221.392888][ T55] bridge0: port 2(bridge_slave_1) entered forwarding state [ 221.400083][ T5899] Disabling lock debugging due to kernel taint [ 221.579677][ T6144] loop2: detected capacity change from 0 to 2048 [ 222.604434][ T5899] Kernel panic - not syncing: kmsan.panic set ... [ 222.611022][ T5899] CPU: 1 UID: 0 PID: 5899 Comm: udevd Tainted: G B syzkaller #0 PREEMPT(full) [ 222.621616][ T5899] Tainted: [B]=BAD_PAGE [ 222.625846][ T5899] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 222.636021][ T5899] Call Trace: [ 222.639379][ T5899] [ 222.642383][ T5899] __dump_stack+0x26/0x30 [ 222.646861][ T5899] dump_stack_lvl+0x50/0x1c0 [ 222.651594][ T5899] ? dump_stack+0x12/0x25 [ 222.656073][ T5899] dump_stack+0x1e/0x25 [ 222.660377][ T5899] vpanic+0x7b4/0x1430 [ 222.664631][ T5899] panic+0x15d/0x160 [ 222.668729][ T5899] kmsan_report+0x31a/0x320 [ 222.673411][ T5899] ? __msan_warning+0x1b/0x30 [ 222.678229][ T5899] ? __d_lookup_rcu+0x37d/0x5e0 [ 222.683231][ T5899] ? lookup_fast+0x186/0xa40 [ 222.687953][ T5899] ? path_openat+0xa07/0x64c0 [ 222.692775][ T5899] ? do_file_open+0x2aa/0x680 [ 222.697591][ T5899] ? do_sys_openat2+0x163/0x370 [ 222.702563][ T5899] ? __x64_sys_openat+0x240/0x300 [ 222.707708][ T5899] ? x64_sys_call+0x2445/0x3ea0 [ 222.712702][ T5899] ? do_syscall_64+0x134/0xf80 [ 222.717608][ T5899] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 222.723874][ T5899] ? irqentry_exit+0x7b/0x820 [ 222.728692][ T5899] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 222.735176][ T5899] ? kmsan_internal_unpoison_memory+0x14/0x20 [ 222.741396][ T5899] ? sysvec_apic_timer_interrupt+0x52/0x90 [ 222.747368][ T5899] ? kmsan_get_metadata+0x12e/0x160 [ 222.752724][ T5899] ? kmsan_get_metadata+0xf1/0x160 [ 222.758020][ T5899] __msan_warning+0x1b/0x30 [ 222.762669][ T5899] __d_lookup_rcu+0x37d/0x5e0 [ 222.767522][ T5899] lookup_fast+0x186/0xa40 [ 222.772078][ T5899] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 222.778052][ T5899] path_openat+0xa07/0x64c0 [ 222.782703][ T5899] ? kmsan_get_metadata+0xf1/0x160 [ 222.787974][ T5899] ? do_file_open+0x1/0x680 [ 222.792626][ T5899] ? stack_depot_save_flags+0x35/0x790 [ 222.798242][ T5899] ? kmsan_get_metadata+0xf1/0x160 [ 222.803504][ T5899] ? kmsan_get_metadata+0xf1/0x160 [ 222.808792][ T5899] do_file_open+0x2aa/0x680 [ 222.813492][ T5899] do_sys_openat2+0x163/0x370 [ 222.818315][ T5899] __x64_sys_openat+0x240/0x300 [ 222.823309][ T5899] x64_sys_call+0x2445/0x3ea0 [ 222.828135][ T5899] do_syscall_64+0x134/0xf80 [ 222.832866][ T5899] ? clear_bhb_loop+0x50/0xa0 [ 222.837686][ T5899] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 222.843721][ T5899] RIP: 0033:0x7fe57d8a7407 [ 222.848242][ T5899] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 222.867973][ T5899] RSP: 002b:00007ffd57a89e20 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 222.876525][ T5899] RAX: ffffffffffffffda RBX: 00007fe57df89880 RCX: 00007fe57d8a7407 [ 222.884593][ T5899] RDX: 0000000000080241 RSI: 00007ffd57a8a380 RDI: ffffffffffffff9c [ 222.892663][ T5899] RBP: 0000000000000004 R08: 0000000000000000 R09: 0000000000000000 [ 222.900719][ T5899] R10: 00000000000001b6 R11: 0000000000000202 R12: 0000558018affdfc [ 222.908775][ T5899] R13: 0000558018affdfc R14: 0000000000000001 R15: 0000558034e37be0 [ 222.916878][ T5899] [ 222.920335][ T5899] Kernel Offset: disabled [ 222.924701][ T5899] Rebooting in 86400 seconds..