last executing test programs: 4m44.049251733s ago: executing program 32 (id=454): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)=ANY=[], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f00000000c0)='kfree\x00', r0, 0x0, 0xfffffffffffffffd}, 0x18) futex(&(0x7f000000cffc)=0x1, 0x6, 0xffffffff, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc)=0x1, 0x6, 0xf0, 0x0, 0x0, 0x0) timer_create(0x7, &(0x7f0000000680)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) 3m22.27932475s ago: executing program 4 (id=950): r0 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_STOP_AP(r0, &(0x7f0000002cc0)={0x0, 0x0, &(0x7f00000028c0)={0x0, 0x28}}, 0x0) getsockname$packet(r0, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)=@newlink={0x48, 0x10, 0x401, 0x0, 0x101, {0x0, 0x0, 0x0, 0x0, 0x9}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8, 0x1, r1}]}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x48}}, 0x0) 3m21.761088333s ago: executing program 3 (id=955): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendto$packet(r1, &(0x7f0000000080)="a99c383d33c9c607b1b9d49688a883", 0xf, 0x0, &(0x7f0000000000)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @link_local}, 0x14) recvmmsg(r0, &(0x7f0000000480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=""/11, 0x17}}], 0x400000000000179, 0x10022, 0x0) 3m21.55403464s ago: executing program 4 (id=957): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000001c0)={'syzkaller0\x00', 0x2}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x304) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast}) 3m21.320165248s ago: executing program 2 (id=958): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000003380)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000006cfa000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='rss_stat\x00', r1}, 0x10) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x6, 0x31, 0xffffffffffffffff, 0x660f3000) ioctl$KDGKBDIACR(r2, 0x80085610, &(0x7f0000004100)=""/42) 3m21.269328027s ago: executing program 3 (id=960): r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) r2 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x8042, 0x0) fcntl$setlease(r2, 0x400, 0x0) link(&(0x7f0000000200)='./file1\x00', &(0x7f0000000300)='./bus\x00') 3m20.916280894s ago: executing program 4 (id=961): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000040)=ANY=[], 0x8) syz_io_uring_setup(0x3c5f, &(0x7f0000000240)={0x0, 0x0, 0x27, 0x2}, &(0x7f0000000200), &(0x7f0000000300)) connect$inet6(r0, &(0x7f00000004c0)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10) sendmmsg$inet6(r0, &(0x7f00000000c0)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000000)="82", 0x1}, {&(0x7f0000000140)="84", 0x1}], 0x2}}], 0x1, 0x4400c800) sendto$inet6(r0, &(0x7f0000000300), 0x16, 0x3b00, 0x0, 0xfffffffffffffdfd) 3m20.906498968s ago: executing program 2 (id=962): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000000000d00000000080000000850000007d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000280)='netlink_extack\x00', r0}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newtaction={0x68, 0x30, 0x1, 0x0, 0x0, {}, [{0x54, 0x1, [@m_tunnel_key={0x50, 0x1, 0x0, 0x0, {{0xf}, {0x20, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x1, 0x0, 0x20000000}, 0x2}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x4}, 0x40) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000000203030001"], 0x14}}, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) 3m20.904745961s ago: executing program 3 (id=963): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x142) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) utimensat(0xffffffffffffff9c, &(0x7f0000000140)='./file0/file1\x00', 0x0, 0x100) write$FUSE_INIT(r0, &(0x7f0000000240)={0x50, 0x0, r1, {0x7, 0x2b, 0x0, 0x11580c7, 0x0, 0x0, 0x401, 0x3, 0x0, 0x0, 0x80}}, 0x50) syz_fuse_handle_req(r0, &(0x7f0000008400)="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", 0x2000, &(0x7f0000001400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)={0x90, 0x0, 0xfffffffffffffffb, {0x6, 0x1000, 0x9, 0x1, 0x2, 0xe0, {0x2, 0x2, 0x4, 0x0, 0x100000001, 0x9, 0x9, 0x3, 0x2, 0x6000, 0x5, r2, r3, 0xfffffffe, 0xffffffff}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) 3m20.584736095s ago: executing program 3 (id=964): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850) sendmsg$nl_route_sched(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000002300)=@newtfilter={0x7c, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r3, {0xf000, 0xffff}, {}, {0x7, 0xa}}, [@filter_kind_options=@f_route={{0xa}, {0x4c, 0x2, [@TCA_ROUTE4_POLICE={0x48, 0x5, [@TCA_POLICE_AVRATE={0x8, 0x4, 0x2}, @TCA_POLICE_TBF={0x3c, 0x1, {0x8001, 0x7, 0x0, 0x8001, 0x6, {0x6, 0xe8279d27690c3ade, 0x97b7, 0xe76, 0xec00}, {0x3, 0x1, 0x1ff, 0x7ff, 0x7fff, 0x7}, 0xfc9c, 0xad5, 0x4}}]}]}}]}, 0x7c}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) 3m20.563776592s ago: executing program 4 (id=965): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x3, 0xb, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x2}, [@printk={@llx, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0xd0}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x800}, 0x94) r0 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff) clock_gettime(0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x10, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000005000000000000008000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000000000000850000008600000018010000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000050000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000003000000b70400000200000085000000a600000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 3m20.48000395s ago: executing program 2 (id=966): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={r2, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) listen(r0, 0x2) 3m20.28830888s ago: executing program 1 (id=967): r0 = socket(0x2, 0x80805, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e20, @private=0xa010100}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={r2, 0x0, 0x0}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) setsockopt(r0, 0x84, 0x81, &(0x7f0000000000)="f89fcfb587a4792b", 0x8) 3m20.147095336s ago: executing program 4 (id=970): r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) symlink(&(0x7f0000000680)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000240)='./file1\x00') openat(r1, &(0x7f0000000000)='./file1\x00', 0x240, 0x4) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) 3m20.061038942s ago: executing program 2 (id=971): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x12, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r1}, 0x10) r2 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f00000004c0)={'ip6_vti0\x00', &(0x7f0000000740)={'syztnl1\x00', 0x0, 0x29, 0x0, 0x3, 0x0, 0x4e, @local, @local, 0x10, 0x7, 0x2, 0x8}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000000600)={'syztnl1\x00', 0x0}) 3m19.643691568s ago: executing program 3 (id=984): syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_RECVMSG={0xa, 0x34, 0x3, 0xffffffffffffffff, 0x0, &(0x7f00000010c0)={0x0, 0x0, 0x0}, 0x0, 0x40000000, 0x1}) r0 = syz_io_uring_setup(0x74d, &(0x7f0000000100)={0x0, 0x59c4, 0x8, 0x1000, 0x5cc}, &(0x7f0000000300)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f00000000c0)={0x1, &(0x7f0000000200)=[{0x30, 0x4, 0x0, 0x2}]}, 0xffffffffffffff0e) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_ACCEPT={0xd, 0x4, 0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x81800, 0x1}) io_uring_enter(r0, 0x749f, 0x4, 0x0, 0x0, 0xfffffffffffffef5) 3m19.609625197s ago: executing program 4 (id=974): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) splice(r2, 0x0, r1, 0x0, 0x6, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') 3m19.385100038s ago: executing program 2 (id=975): r0 = syz_io_uring_setup(0x3380, &(0x7f0000000180)={0x0, 0x7ff3, 0x10100}, &(0x7f0000000380)=0x0, &(0x7f00000000c0)=0x0) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000040)={0x0, @l2tp={0x2, 0x0, @empty}, @nfc, @l2tp={0x2, 0x0, @empty}, 0xa00, 0x0, 0x0, 0x0, 0x51, 0x0, 0x2}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f0000000040)=ANY=[@ANYBLOB='5'], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r0, 0x2d3e, 0x0, 0x0, 0x0, 0x0) 3m19.090202627s ago: executing program 1 (id=977): r0 = socket$unix(0x1, 0x5, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r1, &(0x7f00000000c0)={0x1d, r2}, 0x10) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="0100000003ece1e40ad8871461ab0800", @ANYRES64=r1, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r0, @ANYBLOB="3bf81bb9f9"], 0x20000600}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000) sendmmsg$inet(r1, &(0x7f0000002640)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000005c0)="d98f11bddd2292b8e0e0404d6d4c868af7d03e22da97756fb5b6856751dcfc8ea4faab022f4fb511503368a50ff6d0b9abd6855d37ccf9b9c5cd0f124689fafd786e8c8bd2", 0x45}], 0x1}}], 0x1, 0x20004800) sendmsg$can_bcm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[], 0x4640}, 0x2}, 0x0) 3m18.971884953s ago: executing program 3 (id=979): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="17fa00000000090000000400000000001c110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x5, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000300)='sys_enter\x00', r1}, 0x10) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000080)=@generic={0x0, 0x0, 0x18}, 0x18) 3m18.958787358s ago: executing program 2 (id=980): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x49, 0x1}, 0x48) socketpair$unix(0x1, 0x2, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r0, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) utime(&(0x7f0000000000)='.\x00', 0x0) 1m10.398479401s ago: executing program 33 (id=978): r0 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f00000005c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000580)=0x14) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newlink={0x48, 0x10, 0x437, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, r1, 0x40c89}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x14, 0x6, @private1}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x20000000) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24004880}, 0x0) 1m10.287205958s ago: executing program 34 (id=977): r0 = socket$unix(0x1, 0x5, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r1, &(0x7f00000000c0)={0x1d, r2}, 0x10) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="0100000003ece1e40ad8871461ab0800", @ANYRES64=r1, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r0, @ANYBLOB="3bf81bb9f9"], 0x20000600}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000) sendmmsg$inet(r1, &(0x7f0000002640)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000005c0)="d98f11bddd2292b8e0e0404d6d4c868af7d03e22da97756fb5b6856751dcfc8ea4faab022f4fb511503368a50ff6d0b9abd6855d37ccf9b9c5cd0f124689fafd786e8c8bd2", 0x45}], 0x1}}], 0x1, 0x20004800) sendmsg$can_bcm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[], 0x4640}, 0x2}, 0x0) 1m10.075451351s ago: executing program 35 (id=980): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x49, 0x1}, 0x48) socketpair$unix(0x1, 0x2, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r0, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) utime(&(0x7f0000000000)='.\x00', 0x0) 1m9.792027272s ago: executing program 36 (id=979): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="17fa00000000090000000400000000001c110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x5, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000300)='sys_enter\x00', r1}, 0x10) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000080)=@generic={0x0, 0x0, 0x18}, 0x18) 1m9.514295575s ago: executing program 37 (id=974): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) splice(r2, 0x0, r1, 0x0, 0x6, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') 34.026815756s ago: executing program 6 (id=981): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r0, &(0x7f0000000e80)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000006c0)="0d18687da3e7f33aed145cf8ff2d1e5a18c0d5f9856f4824f41040f6987d0b531da10713ed151bc4867681f28e033aef683334d03864ed30590dd4ea64a20ecbbc1346c9f42510d91eec0632885b7da95ca85f4b1435c5c1e993a85257df5f19bdfc5e038a16e6a8aef907e347081fdb93cee93217e11f19cde423e6138bd1b79ee615527ccaf8049959ac6e32af", 0x8e}, {&(0x7f00000002c0)}], 0x2}}, {{0x0, 0x0, &(0x7f0000000e40)=[{&(0x7f0000001800)="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", 0x24f}], 0x1}}], 0x2, 0x0) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 33.402744105s ago: executing program 6 (id=988): r0 = fsopen(&(0x7f00000014c0)='proc\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x1, 0x0) fchdir(r1) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0x8880, 0x85) lseek(r2, 0x100, 0x1) getdents64(r2, 0x0, 0x0) 32.732184011s ago: executing program 6 (id=990): syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x400c84, &(0x7f0000000340), 0x1, 0x786, &(0x7f0000001900)="$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") creat(&(0x7f0000000300)='./bus\x00', 0x0) mount(&(0x7f0000000440)=@loop={'/dev/loop', 0x0}, &(0x7f0000000080)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x40, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x400, 0x0, 0x0, 0x1, 0x0, "ef35af413bb901527fe4d0ce5d29c3ee5e5c3676345a41499db7aac63a01000000000000004faa2ae2c084a0ea0000000000000000000c00002000", "036c47c67808200400000000000000335263bdbcef549ba197fce47ddfdd753abd950100002a00ffffffffffffffff00000000e8f20000000200", "b7326736181c208220000000b9000000000000000000f0fffffffff2ff00", [0x4]}) r1 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r1, 0x0, 0x0) 31.167000667s ago: executing program 6 (id=996): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r2, &(0x7f0000001980)={0x0, 0x0, &(0x7f0000001940)={0x0, 0x20}, 0x1, 0x0, 0x0, 0xc001}, 0x4000000) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=@newlink={0x40, 0x10, 0xffffff1f, 0xfffffffc, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @broadcast}]}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x40}, 0x1, 0x0, 0x0, 0x24008010}, 0x20000890) 29.847707632s ago: executing program 6 (id=1005): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) r1 = socket(0x1e, 0x2, 0x0) r2 = epoll_create1(0x0) epoll_pwait(r2, &(0x7f0000000540), 0x5a, 0xfffffff3, 0x0, 0x0) dup3(r1, r2, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) 28.428872957s ago: executing program 38 (id=1005): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) r1 = socket(0x1e, 0x2, 0x0) r2 = epoll_create1(0x0) epoll_pwait(r2, &(0x7f0000000540), 0x5a, 0xfffffff3, 0x0, 0x0) dup3(r1, r2, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) 25.011091393s ago: executing program 0 (id=1023): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ptrace(0x10, r0) renameat2(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000380)={r1}, 0x4) ptrace$getregset(0x4205, r0, 0x202, &(0x7f0000000240)={&(0x7f0000000180)=""/120, 0xffffffffffffff28}) 24.25178462s ago: executing program 0 (id=1025): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000a40)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4$alg(r0, 0x0, 0x0, 0x80800) sendmmsg(r1, &(0x7f00000005c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4004840) io_setup(0xff, &(0x7f0000000380)=0x0) io_submit(r2, 0x2000000000000225, &(0x7f0000001440)=[&(0x7f0000000200)={0x1000000, 0x0, 0x700000000000000, 0x0, 0xfffb, r1, &(0x7f0000000340), 0x2d}]) 23.831308516s ago: executing program 0 (id=1027): r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x40000, 0x0) fcntl$notify(r0, 0x402, 0x8000001c) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fcntl$notify(r1, 0x402, 0x21) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fcntl$notify(r2, 0x402, 0x1c) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) 23.430256462s ago: executing program 0 (id=1030): syz_mount_image$bfs(&(0x7f0000000000), &(0x7f0000000240)='./bus\x00', 0x8008, &(0x7f0000000100)=ANY=[@ANYRES64=0x0], 0xf, 0xab, &(0x7f0000010140)="$eJzs1zGKwkAYBeB/s7CbdptFsLBO4x08ilhqI1aK4A3Ei3gVj5DewiKtiCOYiIidRQT5vmLgzWPgtbM7brubIiKtIlLRme7T3Wy+GA8n9Rl8pCwifiMij4jeX50Pg7r7avqyWo7K6vv58c+69b0AAMDrsug/5nNqLk7NL/Aa/m993vI+AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgHe7BAAA//+dfyiL") mknodat(0xffffffffffffff9c, &(0x7f0000000140)='./file4\x00', 0x40, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000200)='./bus\x00', 0x40942, 0x0) mount(&(0x7f0000000440)=@loop={'/dev/loop', 0x0}, &(0x7f0000000080)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x400, 0x0, 0x0, 0x1, 0x0, "ef35af413bb901527fe4d0ce5d29c3ee5e5c3676345a41499db7aac63a01000000000000004faa2ae2c084a0ea0000000000000000000c00002000", "036c47c67808200400000000000000335263bdbcef549ba197fce47ddfdd753abd950100002a00ffffffffffffffff00000000e8f20000000200", "b7326736181c208220000000b9000000000000000000f0fffffffff2ff00", [0x4]}) linkat(0xffffffffffffff9c, &(0x7f0000000000)='./file4\x00', 0xffffffffffffff9c, &(0x7f00000006c0)='./file5\x00', 0x0) 22.600443979s ago: executing program 0 (id=1033): connect$pppoe(0xffffffffffffffff, &(0x7f0000000040)={0x18, 0x0, {0x1, @multicast, 'ip6gre0\x00'}}, 0x1e) setsockopt(0xffffffffffffffff, 0x84, 0x81, &(0x7f0000000280)="1a00000002", 0x5) openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000040)={0x0, 0x9}, &(0x7f0000000240)=0x8) 21.65176409s ago: executing program 0 (id=1039): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @empty, 0x3}], 0x1c) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='syz_tun\x00', 0x10) shutdown(r0, 0x1) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(r1, 0x84, 0x23, &(0x7f0000000440)={0x0, 0xf}, 0x8) 20.238867704s ago: executing program 39 (id=1039): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @empty, 0x3}], 0x1c) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='syz_tun\x00', 0x10) shutdown(r0, 0x1) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(r1, 0x84, 0x23, &(0x7f0000000440)={0x0, 0xf}, 0x8) 4.537977432s ago: executing program 5 (id=1106): r0 = epoll_create(0x7) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000180)) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000140)={0xa0000006}) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r3, &(0x7f0000000080)) 4.490596175s ago: executing program 9 (id=1107): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) r2 = syz_clone(0x16040000, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) r3 = syz_pidfd_open(r2, 0x0) setns(r3, 0x10000000) 4.173221339s ago: executing program 5 (id=1108): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newqdisc={0x44, 0x24, 0x2, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x9, 0x5}, {0xc, 0x6}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x14, 0x2, [@TCA_CODEL_INTERVAL={0x8, 0x3, 0x7}, @TCA_CODEL_ECN={0x8}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010001fff752b056800080000faff8141", @ANYRES32=0x0, @ANYBLOB="67a9fde500000000280012800a00010076786c616e"], 0x3}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) write$char_usb(0xffffffffffffffff, &(0x7f0000000040)="e2", 0x2250) write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe6, 0x0) 3.639792057s ago: executing program 8 (id=1111): r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000000180)=@file={0x1}, 0x6e) listen(r0, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) connect$unix(r1, &(0x7f0000000000)=@file={0x1}, 0x6e) connect$unix(r1, &(0x7f0000000080)=@file={0x1}, 0x6e) close(r0) 3.404809467s ago: executing program 9 (id=1113): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000280)={'syzkaller0\x00', 0xca02}) close(r0) socket$netlink(0x10, 0x3, 0x0) preadv(r1, &(0x7f0000001300)=[{&(0x7f00000000c0)=""/124, 0x3}], 0x3e8, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) 3.239734436s ago: executing program 8 (id=1114): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41, 0x0, 0x4000000}}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_DEST_DROPPABLE(r1, 0x10f, 0x81, &(0x7f0000000040)=0x7ff, 0x4) sendmsg$tipc(r1, &(0x7f0000000240)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x3, {{0x41}}}, 0x10, 0x0}, 0x0) close(0x4) 3.178481915s ago: executing program 7 (id=1115): r0 = syz_io_uring_setup(0x3e, &(0x7f0000000640)={0x0, 0xaddc, 0x10100, 0x1, 0x203}, &(0x7f0000000380)=0x0, &(0x7f00000003c0)=0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000600)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000019c0)=[{&(0x7f00000002c0)=""/183, 0xb7}], 0x1}, 0x0, 0x80002101}) io_uring_enter(r0, 0xd81, 0x0, 0x0, 0x0, 0x0) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCMIWAIT(r5, 0x545c, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000280), r4) 2.945049308s ago: executing program 5 (id=1116): r0 = userfaultfd(0x80801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) r1 = dup(r0) r2 = syz_io_uring_setup(0x10e, &(0x7f00000000c0)={0x0, 0x8d2dc, 0x0, 0xffffffff}, &(0x7f00000003c0)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x40, 0x4, r1, 0x0, 0x0, 0x0, 0x80000}) io_uring_enter(r2, 0x47f5, 0x0, 0x0, 0x0, 0x0) 2.839728837s ago: executing program 8 (id=1117): syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000b40)='./file1\x00', 0x0, 0x100, 0x12345}) r0 = syz_io_uring_setup(0x81f, &(0x7f0000000480)={0x0, 0xfe15, 0x10, 0x0, 0x30f}, &(0x7f00000000c0)=0x0, &(0x7f0000000540)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x30, 0x0, 0x0, 0x4}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x50, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r0, 0x47bc, 0x0, 0x21, 0x0, 0x0) 2.758280949s ago: executing program 9 (id=1118): rt_sigprocmask(0x0, &(0x7f0000000100)={[0xfffffffffffe]}, 0x0, 0x8) r0 = gettid() timer_create(0x9, &(0x7f0000000180)={0x0, 0x1e, 0x4, @tid=r0}, &(0x7f00000000c0)=0x0) timer_settime(0x0, 0x5, &(0x7f00000001c0)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) timer_gettime(r1, 0x0) r2 = signalfd4(0xffffffffffffffff, &(0x7f0000000080)={[0xfffffffffffffffe]}, 0x8, 0x0) readv(r2, &(0x7f0000000000)=[{&(0x7f0000000200)=""/215, 0x7ffff000}], 0x6) 2.475242484s ago: executing program 8 (id=1119): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x5, 0x3032, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x5, 0x14, 0x0, &(0x7f0000000100)="259a53f271a76d2608fff74588a80a3888a82f15", 0x0, 0xd11, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 2.459765463s ago: executing program 5 (id=1120): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x1000, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f0000000600)=0x7, 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0xfdef, 0x10008095, 0x0, 0x0) close(0x3) 2.329340245s ago: executing program 9 (id=1121): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000140)='ramfs\x00', 0x10, 0x0) syz_mount_image$fuse(&(0x7f0000000200), &(0x7f0000000280)='./file0\x00', 0x2100060, &(0x7f0000000700)=ANY=[], 0x1, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x12) write(r1, &(0x7f0000004200)='t', 0x1) sendfile(r1, r0, 0x0, 0x3ffff) 1.886305621s ago: executing program 7 (id=1122): r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$qrtrtun(r0, &(0x7f0000000340)="6a0cc193beb70a52", 0x8) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r2, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000280)='./file0\x00', &(0x7f0000000240)=[0x7, 0x2], 0x0, 0x0, 0x2}}, 0x40) munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000) 1.647493774s ago: executing program 5 (id=1123): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x79, 0x0, &(0x7f0000000400)="cf2240e6919817e49555d221b4e6c6ba11c4d974ddab2318db7b52cee499399a00be4b710e9246d7bca28cc8346eb84414e45f3f4633f4acb77bf8cc38c4c16fe035905db79cdc0be634a915662c4cac58ae94706f86ea320f339c21399b5bb7607044916c63c528ab4149718d6215a9a3749113c268e49b2b", 0x0, 0x0, 0x8000}, 0x4c) r0 = socket(0x10, 0x803, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=@getchain={0x24, 0x66, 0x0, 0x3, 0x2000, {0x0, 0x0, 0x0, 0x0, {0x0, 0x8}, {0x0, 0xffff}}}, 0x86}}, 0x400c0) getsockname$packet(r0, &(0x7f0000000740)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000700)=0x14) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="480000001000010400"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012800b000100697036746e6c00001800028014000300"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="9800000010000104fcffffff0000000000000000", @ANYRES32=r2, @ANYBLOB="0025000000000000780012800b000100697036746e6c000068000280"], 0x98}, 0x1, 0x0, 0x0, 0x40001}, 0x20004090) 1.646264565s ago: executing program 1 (id=1041): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @loopback}, 0x8}, 0x1c) connect$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e22, 0x7, @empty, 0x106}, 0x1c) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000400)=0x10, 0x4) sendmmsg(r1, &(0x7f0000009d00)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000001900)="3e71b7709af21e50c0e18147e07bcfc62e205834e68c4826830f496e3587e8409f752e08a754ef0b1dd8f7f555fbb1b4a8ee91078270b8f3e2dfc3ed9b50b4f4716092e8ceb9d79d968ab83911230fb4be29bdd5eaf0f5ab72b90646adc347dcecffd424c54363d693586da17bae9cd0329c3c1e5214b3c33be565b5a8fdcdf9a2bbc8681c44669dea31d0a2a3bdd0770b55032debc24ab790eb5cd8bac3b2ed092efd2aef748a6ee9b188c322ba294b363afa049539e5e5ce70eaebc601b14b1f1780385a0e1f5417bb4764", 0xcc}, {&(0x7f0000001a00)="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", 0x474}], 0x2}}], 0x1, 0x4008000) shutdown(r0, 0x1) 1.36838949s ago: executing program 7 (id=1124): r0 = epoll_create1(0x80000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000040)={0xe0002015}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000100)={0x20000014}) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000000)={0xa0000001}) epoll_pwait(r2, &(0x7f0000000140)=[{}, {}], 0x2, 0xfff, 0x0, 0x0) 1.151980697s ago: executing program 1 (id=1125): r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010101}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={r2, @in6={{0xa, 0x4e23, 0x6, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x4}}}, &(0x7f0000000040)=0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000000), &(0x7f00000000c0)=0x4) 1.045449082s ago: executing program 5 (id=1126): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) io_uring_setup(0x3eae, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x71}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) migrate_pages(r0, 0x5, 0x0, &(0x7f0000000080)=0x272) 898.563166ms ago: executing program 7 (id=1127): r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x20) open(&(0x7f0000000040)='./file0\x00', 0x551083, 0x28) rmdir(&(0x7f0000000280)='./file0\x00') 736.200488ms ago: executing program 8 (id=1128): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) recvmmsg(r1, &(0x7f0000002a80)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000006c0)=""/57, 0x39}, {&(0x7f0000000300)=""/171, 0xab}, {&(0x7f0000000200)=""/41, 0x29}, {&(0x7f00000003c0)=""/213, 0xd5}, {&(0x7f00000004c0)=""/11, 0xb}, {&(0x7f0000000500)=""/29, 0x1d}], 0x6}, 0x3}], 0x1, 0x10101, 0x0) sendmsg$nl_route_sched_retired(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000012100), 0xe078}}, 0x0) 676.088774ms ago: executing program 1 (id=1129): mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) acct(&(0x7f00000001c0)='./file0\x00') r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) acct(&(0x7f0000000240)='./file0\x00') close_range(r1, 0xffffffffffffffff, 0x0) 574.83799ms ago: executing program 9 (id=1130): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in, @in6=@remote, 0x0, 0x0, 0x0, 0x3, 0x2}, {0x0, 0x7, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x200000000000}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x2, 0x2b}, 0xa, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x0, 0x4}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="180000", @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000001980)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x18}}], 0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r1, &(0x7f0000000100)={0x0, 0x2800, &(0x7f0000000080)={&(0x7f00000001c0)={0x54, r2, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}}, {0x14, 0x2, @in={0x2, 0x0, @broadcast}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0) 489.461085ms ago: executing program 7 (id=1131): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xd}}, 0x6}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x106}, 0x1c) sendto$inet6(r0, &(0x7f0000000000)="12", 0x1, 0x4040800, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f0000000400)=0x10, 0x4) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000000)={&(0x7f0000ffd000/0x2000)=nil, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x46, 0x0, 0x0}, &(0x7f0000000400)=0x40) 232.412707ms ago: executing program 8 (id=1132): pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f00000005c0)='fd', 0x0, r0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x2) symlinkat(&(0x7f0000000080)='./file0\x00', r2, &(0x7f00000000c0)='./file0\x00') unlinkat(r2, &(0x7f0000000040)='./file0\x00', 0x0) 76.026835ms ago: executing program 1 (id=1133): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x1c, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x8004020}, 0x4000004) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) fgetxattr(r2, &(0x7f0000000080)=@known='security.selinux\x00', 0x0, 0x0) ioctl$sock_SIOCBRDELBR(r1, 0x89a2, &(0x7f0000000000)='bridge0\x00') sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)=ANY=[@ANYBLOB="24000000240035b90000000000000000070000000600040000ef0000060003"], 0x24}}, 0x0) 55.535437ms ago: executing program 7 (id=1134): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000080)='./file3\x00', 0x210048, &(0x7f00000003c0)=ANY=[], 0xfd, 0x1d1, &(0x7f0000000440)="$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") r0 = open(&(0x7f0000000000)='./file1\x00', 0x4000, 0x0) r1 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) sendfile(r1, r0, 0x0, 0x3) 0s ago: executing program 9 (id=1135): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000540)='inet_sock_set_state\x00', r1}, 0x10) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) listen(r2, 0x2) close_range(r0, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): [ 184.088441][ T5816] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 184.381021][ T5812] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 184.691050][ T5810] veth0_vlan: entered promiscuous mode [ 184.699156][ T5816] veth0_vlan: entered promiscuous mode [ 184.813727][ T5810] veth1_vlan: entered promiscuous mode [ 184.859226][ T5807] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 184.934483][ T5812] veth0_vlan: entered promiscuous mode [ 184.946903][ T5816] veth1_vlan: entered promiscuous mode [ 185.004080][ T5817] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 185.085068][ T5812] veth1_vlan: entered promiscuous mode [ 185.204631][ T5810] veth0_macvtap: entered promiscuous mode [ 185.275160][ T5810] veth1_macvtap: entered promiscuous mode [ 185.417764][ T5816] veth0_macvtap: entered promiscuous mode [ 185.513280][ T5816] veth1_macvtap: entered promiscuous mode [ 185.550926][ T5812] veth0_macvtap: entered promiscuous mode [ 185.574285][ T5810] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 185.648272][ T5810] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 185.699619][ T5817] veth0_vlan: entered promiscuous mode [ 185.712742][ T5812] veth1_macvtap: entered promiscuous mode [ 185.757250][ T5816] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 185.814448][ T5817] veth1_vlan: entered promiscuous mode [ 185.835383][ T3849] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.876156][ T5816] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 185.904191][ T85] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.949579][ T85] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.984633][ T5812] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 186.014242][ T3505] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.062532][ T3505] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.101264][ T5812] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 186.122375][ T3505] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.137574][ T14] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.241830][ T5817] veth0_macvtap: entered promiscuous mode [ 186.282311][ T14] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.291495][ T14] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.358926][ T5817] veth1_macvtap: entered promiscuous mode [ 186.412561][ T14] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.425733][ T3849] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.503135][ T3849] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.575372][ T5817] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 186.696732][ T5817] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 186.818837][ T3849] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.865609][ T4071] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.915395][ T14] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.956714][ T14] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 187.896053][ T5807] veth0_vlan: entered promiscuous mode [ 187.985260][ T5807] veth1_vlan: entered promiscuous mode [ 188.238433][ T5807] veth0_macvtap: entered promiscuous mode [ 188.299366][ T5807] veth1_macvtap: entered promiscuous mode [ 188.531146][ T5807] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 188.618629][ T5807] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 188.733790][ T3934] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 188.777065][ T3934] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 188.817275][ T3934] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 188.871180][ T3934] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 192.407980][ T4071] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 192.416375][ T4071] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 192.569440][ T4248] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 192.577747][ T4248] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 192.760064][ T4071] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 192.768293][ T4071] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 192.823077][ T4071] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 192.832771][ T4071] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 192.951489][ T4248] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 192.960450][ T4248] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 193.130685][ T4071] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 193.140721][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 193.140819][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 193.177945][ T4071] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 193.340309][ T5810] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 193.452580][ T4248] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 193.460598][ T4248] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 194.131994][ T5997] netlink: 'syz.0.1': attribute type 2 has an invalid length. [ 194.970421][ T6014] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9'. [ 195.516635][ T3934] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 195.525524][ T3934] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 195.608191][ T6022] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 195.688453][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 195.697922][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 196.557647][ T6033] overlayfs: metacopy with no lower data found - abort lookup (/file2) [ 197.044529][ T6045] veth0: entered promiscuous mode [ 197.106134][ T6045] netlink: 4 bytes leftover after parsing attributes in process `syz.2.18'. [ 197.508578][ T6048] netlink: 'syz.1.20': attribute type 5 has an invalid length. [ 198.752932][ T6066] loop4: detected capacity change from 0 to 128 [ 198.855559][ T6066] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 199.001573][ T6066] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 199.295001][ T6065] UDF-fs: error (device loop4): udf_bitmap_new_block: bitmap for partition 0 corrupted (block 48 marked as free, partition length is 40) [ 199.350243][ T6078] UDF-fs: error (device loop4): udf_bitmap_new_block: bitmap for partition 0 corrupted (block 48 marked as free, partition length is 40) [ 199.830209][ T6083] sctp: [Deprecated]: syz.0.34 (pid 6083) Use of struct sctp_assoc_value in delayed_ack socket option. [ 199.830209][ T6083] Use struct sctp_sack_info instead [ 200.448748][ T6092] vhci_hcd vhci_hcd.0: pdev(0) rhport(1) sockfd(6) [ 200.455700][ T6092] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 200.463368][ T6090] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 200.470250][ T6090] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 200.478349][ T6092] vhci_hcd vhci_hcd.0: Device attached [ 200.478449][ T6090] vhci_hcd vhci_hcd.0: Device attached [ 200.494723][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 200.495857][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 200.753284][ T6092] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 200.772767][ T2230] usb 33-1: new low-speed USB device number 2 using vhci_hcd [ 200.882657][ T6098] vhci_hcd vhci_hcd.0: pdev(0) rhport(2) sockfd(8) [ 200.889412][ T6098] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 200.899136][ T6098] vhci_hcd vhci_hcd.0: Device attached [ 200.901720][ T6103] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 201.012281][ T6090] vhci_hcd vhci_hcd.0: pdev(0) rhport(4) sockfd(13) [ 201.019211][ T6090] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 201.030357][ T6090] vhci_hcd vhci_hcd.0: Device attached [ 201.183009][ T6092] vhci_hcd vhci_hcd.0: pdev(0) rhport(6) sockfd(10) [ 201.190114][ T6092] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 201.192962][ T1855] libceph: connect (1)[c::]:6789 error -101 [ 201.198455][ T6092] vhci_hcd vhci_hcd.0: Device attached [ 201.204427][ T1855] libceph: mon0 (1)[c::]:6789 connect error [ 201.280748][ T6110] vhci_hcd: connection closed [ 201.288948][ T6111] ceph: No mds server is up or the cluster is laggy [ 201.312873][ T3934] vhci_hcd: stop threads [ 201.322794][ T3934] vhci_hcd: release socket [ 201.327439][ T3934] vhci_hcd: disconnect device [ 201.352513][ T6102] vhci_hcd: connection closed [ 201.357449][ T6095] vhci_hcd: connection closed [ 201.357579][ T6093] vhci_hcd: connection reset by peer [ 201.373238][ T6100] vhci_hcd: connection closed [ 201.402392][ T4071] vhci_hcd: stop threads [ 201.411668][ T4071] vhci_hcd: release socket [ 201.417013][ T4071] vhci_hcd: disconnect device [ 201.471090][ T4071] vhci_hcd: stop threads [ 201.479965][ T4071] vhci_hcd: release socket [ 201.487250][ T4071] vhci_hcd: disconnect device [ 201.529969][ T4071] vhci_hcd: stop threads [ 201.539243][ T4071] vhci_hcd: release socket [ 201.545516][ T4071] vhci_hcd: disconnect device [ 201.599203][ T4071] vhci_hcd: stop threads [ 201.604052][ T4071] vhci_hcd: release socket [ 201.608753][ T4071] vhci_hcd: disconnect device [ 202.974908][ T6142] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 203.238132][ T6143] loop4: detected capacity change from 0 to 2048 [ 203.457124][ T6143] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 203.470675][ T6143] ext4 filesystem being mounted at /7/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 203.655920][ T6143] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 204.144554][ T5807] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 204.363556][ T6157] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 205.279583][ T6172] netlink: 84 bytes leftover after parsing attributes in process `syz.2.64'. [ 205.872604][ T2230] vhci_hcd: vhci_device speed not set [ 207.159566][ T6191] loop1: detected capacity change from 0 to 2048 [ 207.455309][ T6191] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 207.465645][ T6197] netlink: 44 bytes leftover after parsing attributes in process `syz.3.72'. [ 207.950767][ T6206] process 'syz.4.76' launched './file1' with NULL argv: empty string added [ 208.318476][ T5817] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 208.844787][ T5861] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 208.855924][ T6217] trusted_key: syz.1.79 sent an empty control message without MSG_MORE. [ 209.089810][ T5861] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 209.100463][ T5861] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 209.115385][ T5861] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 209.126607][ T5861] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 209.140011][ T5861] usb 1-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9 [ 209.149505][ T5861] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 209.244798][ T6220] team0 (unregistering): Port device team_slave_0 removed [ 209.337591][ T6220] team0 (unregistering): Port device team_slave_1 removed [ 209.432535][ T5861] usb 1-1: config 0 descriptor?? [ 209.476836][ T5861] gspca_main: spca561-2.14.0 probing abcd:cdee [ 209.685509][ T5861] spca561 1-1:0.0: probe with driver spca561 failed with error -22 [ 209.697621][ T5861] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 209.704990][ T5861] usb 1-1: MIDIStreaming interface descriptor not found [ 210.110239][ T5861] usb 1-1: USB disconnect, device number 2 [ 210.294219][ T6064] udevd[6064]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 210.439241][ T6235] ======================================================= [ 210.439241][ T6235] WARNING: The mand mount option has been deprecated and [ 210.439241][ T6235] and is ignored by this kernel. Remove the mand [ 210.439241][ T6235] option from the mount to silence this warning. [ 210.439241][ T6235] ======================================================= [ 210.995737][ T6240] loop0: detected capacity change from 0 to 256 [ 211.070807][ T6240] exFAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 211.235689][ T6240] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010364, chksum : 0x44009a1b, utbl_chksum : 0xe619d30d) [ 212.272401][ T2230] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 212.546842][ T2230] usb 1-1: config 0 has no interfaces? [ 212.642340][ T2230] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 212.651938][ T2230] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 212.660749][ T2230] usb 1-1: Product: syz [ 212.665343][ T2230] usb 1-1: Manufacturer: syz [ 212.670110][ T2230] usb 1-1: SerialNumber: syz [ 212.845354][ T2230] usb 1-1: config 0 descriptor?? [ 213.078045][ T5893] usb 1-1: USB disconnect, device number 3 [ 214.368762][ T6283] loop0: detected capacity change from 0 to 128 [ 214.492694][ T6283] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 214.584144][ T6283] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 214.796249][ T6280] UDF-fs: error (device loop0): udf_bitmap_new_block: bitmap for partition 0 corrupted (block 48 marked as free, partition length is 40) [ 215.149695][ T6289] UDF-fs: error (device loop0): udf_bitmap_new_block: bitmap for partition 0 corrupted (block 48 marked as free, partition length is 40) [ 216.155575][ T6303] veth0: entered promiscuous mode [ 216.239457][ T6303] netlink: 4 bytes leftover after parsing attributes in process `syz.4.117'. [ 216.747726][ T6310] loop1: detected capacity change from 0 to 128 [ 216.879039][ T6310] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 216.992792][ T6310] ext4 filesystem being mounted at /27/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 217.402787][ T5861] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 217.601128][ T5817] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 217.615899][ T5861] usb 4-1: Using ep0 maxpacket: 8 [ 217.656412][ T5861] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 217.667128][ T5861] usb 4-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 217.676894][ T5861] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 217.751901][ T5861] usb 4-1: config 0 descriptor?? [ 217.779304][ T5861] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 218.483929][ T6333] loop2: detected capacity change from 0 to 128 [ 218.574575][ T6333] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 218.684656][ T6333] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 219.049465][ T6332] UDF-fs: error (device loop2): udf_bitmap_new_block: bitmap for partition 0 corrupted (block 48 marked as free, partition length is 40) [ 219.221530][ T6342] UDF-fs: error (device loop2): udf_bitmap_new_block: bitmap for partition 0 corrupted (block 48 marked as free, partition length is 40) [ 219.290753][ T5861] gspca_vc032x: reg_w err -71 [ 219.297021][ T5861] vc032x 4-1:0.0: probe with driver vc032x failed with error -71 [ 219.364335][ T5861] usb 4-1: USB disconnect, device number 2 [ 221.521163][ T30] audit: type=1800 audit(1754673805.114:2): pid=6373 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.142" name="file1" dev="tmpfs" ino=207 res=0 errno=0 [ 222.619495][ T6394] netlink: 60 bytes leftover after parsing attributes in process `syz.3.148'. [ 222.634528][ T6394] netlink: 60 bytes leftover after parsing attributes in process `syz.3.148'. [ 222.930883][ T6400] syz_tun: entered allmulticast mode [ 222.984543][ T6400] netlink: 'syz.1.150': attribute type 27 has an invalid length. [ 223.027373][ T6394] netlink: 60 bytes leftover after parsing attributes in process `syz.3.148'. [ 223.037178][ T6394] netlink: 60 bytes leftover after parsing attributes in process `syz.3.148'. [ 223.073698][ T6399] syz_tun: left allmulticast mode [ 223.676601][ T6411] netlink: 'syz.2.155': attribute type 12 has an invalid length. [ 223.685038][ T6411] netlink: 'syz.2.155': attribute type 29 has an invalid length. [ 223.693802][ T6411] netlink: 148 bytes leftover after parsing attributes in process `syz.2.155'. [ 223.703104][ T6411] netlink: 'syz.2.155': attribute type 2 has an invalid length. [ 223.710909][ T6411] netlink: 'syz.2.155': attribute type 3 has an invalid length. [ 223.789129][ T6411] netlink: 'syz.2.155': attribute type 12 has an invalid length. [ 223.797882][ T6411] netlink: 'syz.2.155': attribute type 29 has an invalid length. [ 223.806129][ T6411] netlink: 148 bytes leftover after parsing attributes in process `syz.2.155'. [ 223.815685][ T6411] netlink: 'syz.2.155': attribute type 2 has an invalid length. [ 223.823613][ T6411] netlink: 'syz.2.155': attribute type 3 has an invalid length. [ 223.929101][ T6411] Zero length message leads to an empty skb [ 224.533273][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 224.539904][ T1286] ieee802154 phy1 wpan1: encryption failed: -22 [ 224.661449][ T6427] fuse: root generation should be zero [ 225.420002][ T6441] netlink: 4 bytes leftover after parsing attributes in process `syz.1.167'. [ 225.509699][ T6441] erspan0: entered promiscuous mode [ 225.515578][ T6441] macvtap1: entered promiscuous mode [ 225.521717][ T6441] macvtap1: entered allmulticast mode [ 225.527894][ T6441] erspan0: entered allmulticast mode [ 225.970198][ T6443] loop2: detected capacity change from 0 to 4096 [ 226.041204][ T6443] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 226.255779][ T6457] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 227.086078][ T5816] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 228.025614][ T6487] netlink: 76 bytes leftover after parsing attributes in process `syz.1.183'. [ 229.458502][ T6508] netlink: 12 bytes leftover after parsing attributes in process `syz.4.190'. [ 229.634274][ T6510] netlink: 'syz.2.191': attribute type 1 has an invalid length. [ 229.717329][ T6510] bond1: entered promiscuous mode [ 229.724138][ T6510] 8021q: adding VLAN 0 to HW filter on device bond1 [ 229.777282][ T6510] netlink: 3 bytes leftover after parsing attributes in process `syz.2.191'. [ 229.814079][ T6510] batadv1: entered promiscuous mode [ 229.819756][ T6510] batadv1: entered allmulticast mode [ 229.833366][ T6510] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 229.847958][ T6510] bond1: (slave batadv1): making interface the new active one [ 229.859935][ T6510] bond1: (slave batadv1): Enslaving as an active interface with an up link [ 230.633243][ T6529] loop6: detected capacity change from 0 to 7 [ 230.654604][ T6529] Dev loop6: unable to read RDB block 7 [ 230.660524][ T6529] loop6: AHDI p3 p4 [ 230.665251][ T6529] loop6: partition table partially beyond EOD, truncated [ 230.673595][ T6529] loop6: p3 start 1886353253 is beyond EOD, truncated [ 231.892399][ T30] audit: type=1326 audit(1754673815.474:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6534 comm="syz.3.202" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf710e539 code=0x7fc00000 [ 232.424885][ T30] audit: type=1326 audit(1754673816.014:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6534 comm="syz.3.202" exe="/root/syz-executor" sig=0 arch=40000003 syscall=20 compat=1 ip=0xf710e539 code=0x7fc00000 [ 232.577352][ T4248] Bluetooth: hci5: Frame reassembly failed (-84) [ 233.533466][ T6566] syz.3.216 uses obsolete (PF_INET,SOCK_PACKET) [ 234.038582][ T6565] syz.0.215 (6565) used greatest stack depth: 2360 bytes left [ 234.592813][ T5813] Bluetooth: hci5: command 0x1003 tx timeout [ 234.599177][ T49] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 237.772638][ T6630] netlink: 'syz.0.242': attribute type 11 has an invalid length. [ 239.457968][ T6659] netlink: 4 bytes leftover after parsing attributes in process `syz.0.254'. [ 239.502038][ T6661] loop3: detected capacity change from 0 to 512 [ 239.575334][ T6661] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 239.589043][ T6661] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 239.733146][ T6661] EXT4-fs (loop3): 1 truncate cleaned up [ 239.740937][ T6661] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 239.870179][ T6661] syz.3.255 (pid 6661) is setting deprecated v1 encryption policy; recommend upgrading to v2. [ 239.979551][ T6661] fscrypt: key with description 'fscrypt:0000111122223333' has invalid payload [ 240.396569][ T5810] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 242.317199][ T6699] netlink: 64 bytes leftover after parsing attributes in process `syz.1.269'. [ 242.331190][ T6699] netlink: 76 bytes leftover after parsing attributes in process `syz.1.269'. [ 242.900568][ T6708] loop4: detected capacity change from 0 to 128 [ 242.951417][ T6710] overlayfs: failed to clone upperpath [ 242.981119][ T6708] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 243.352970][ T6715] UDF-fs: error (device loop4): udf_bitmap_new_block: bitmap for partition 0 corrupted (block 264 marked as free, partition length is 40) [ 244.173000][ T6714] sctp: failed to load transform for md5: -2 [ 244.180457][ T6719] sctp: failed to load transform for md5: -2 [ 245.433770][ T6750] netlink: 4 bytes leftover after parsing attributes in process `syz.2.287'. [ 245.443754][ T6750] bridge_slave_1: left allmulticast mode [ 245.449666][ T6750] bridge_slave_1: left promiscuous mode [ 245.457176][ T6750] bridge0: port 2(bridge_slave_1) entered disabled state [ 245.577250][ T6750] bridge_slave_0: left allmulticast mode [ 245.583983][ T6750] bridge_slave_0: left promiscuous mode [ 245.590604][ T6750] bridge0: port 1(bridge_slave_0) entered disabled state [ 246.749717][ T6767] netlink: 24 bytes leftover after parsing attributes in process `syz.4.293'. [ 247.067375][ T6773] netlink: 'syz.1.295': attribute type 1 has an invalid length. [ 247.369084][ T6775] bond1: (slave gretap1): making interface the new active one [ 247.382409][ T6775] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 248.275580][ T6787] nbd0: detected capacity change from 0 to 10 [ 248.304567][ T5983] block nbd0: Send control failed (result -89) [ 248.311514][ T5983] block nbd0: Request send failed, requeueing [ 248.322162][ T25] block nbd0: Dead connection, failed to find a fallback [ 248.328710][ T49] block nbd0: Receive control failed (result -32) [ 248.329462][ T25] block nbd0: shutting down sockets [ 248.329545][ T25] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 248.355427][ T25] Buffer I/O error on dev nbd0, logical block 0, async page read [ 248.405013][ T6788] nbd0: detected capacity change from 10 to 12 [ 248.405294][ T5983] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 248.420923][ T5983] Buffer I/O error on dev nbd0, logical block 0, async page read [ 248.429992][ T5983] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 248.447278][ T5983] Buffer I/O error on dev nbd0, logical block 0, async page read [ 248.460687][ T5983] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 248.470419][ T5983] Buffer I/O error on dev nbd0, logical block 0, async page read [ 248.478738][ T5983] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 248.488224][ T5983] Buffer I/O error on dev nbd0, logical block 0, async page read [ 248.496614][ T5983] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 248.506127][ T5983] Buffer I/O error on dev nbd0, logical block 0, async page read [ 248.514849][ T5983] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 248.524505][ T5983] Buffer I/O error on dev nbd0, logical block 0, async page read [ 248.532895][ T5983] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 248.546763][ T5983] Buffer I/O error on dev nbd0, logical block 0, async page read [ 248.556276][ T5983] ldm_validate_partition_table(): Disk read failed. [ 248.563658][ T5983] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 248.573200][ T5983] Buffer I/O error on dev nbd0, logical block 0, async page read [ 248.581493][ T5983] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 248.590916][ T5983] Buffer I/O error on dev nbd0, logical block 0, async page read [ 248.599490][ T5983] Dev nbd0: unable to read RDB block 0 [ 248.607746][ T5983] nbd0: unable to read partition table [ 248.614653][ T5983] nbd0: partition table beyond EOD, truncated [ 248.650452][ T5983] ldm_validate_partition_table(): Disk read failed. [ 248.658195][ T5983] Dev nbd0: unable to read RDB block 0 [ 248.664423][ T5983] nbd0: unable to read partition table [ 248.670825][ T5983] nbd0: partition table beyond EOD, truncated [ 248.688677][ T5983] ldm_validate_partition_table(): Disk read failed. [ 248.696454][ T5983] Dev nbd0: unable to read RDB block 0 [ 248.702725][ T5983] nbd0: unable to read partition table [ 248.709344][ T5983] nbd0: partition table beyond EOD, truncated [ 248.744096][ T5983] ldm_validate_partition_table(): Disk read failed. [ 248.753067][ T5983] Dev nbd0: unable to read RDB block 0 [ 248.759295][ T5983] nbd0: unable to read partition table [ 248.766096][ T5983] nbd0: partition table beyond EOD, truncated [ 248.784034][ T5983] ldm_validate_partition_table(): Disk read failed. [ 248.791533][ T5983] Dev nbd0: unable to read RDB block 0 [ 248.797900][ T5983] nbd0: unable to read partition table [ 248.804581][ T5983] nbd0: partition table beyond EOD, truncated [ 250.674798][ T6814] netlink: 'syz.0.311': attribute type 12 has an invalid length. [ 250.683123][ T6814] netlink: 'syz.0.311': attribute type 29 has an invalid length. [ 250.696696][ T6814] netlink: 148 bytes leftover after parsing attributes in process `syz.0.311'. [ 250.708970][ T6814] netlink: 'syz.0.311': attribute type 2 has an invalid length. [ 251.222320][ T5862] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 251.413647][ T5862] usb 3-1: Using ep0 maxpacket: 8 [ 251.473811][ T5862] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 251.484232][ T5862] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 251.494371][ T5862] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 251.504660][ T5862] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 251.522497][ T5862] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 251.533699][ T5862] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 251.971591][ T5862] usb 3-1: GET_CAPABILITIES returned f8 [ 251.977730][ T5862] usbtmc 3-1:16.0: can't read capabilities [ 252.198017][ T5862] usb 3-1: USB disconnect, device number 2 [ 252.737221][ T6846] netlink: 'syz.1.325': attribute type 1 has an invalid length. [ 252.747247][ T6846] netlink: 'syz.1.325': attribute type 4 has an invalid length. [ 252.755533][ T6846] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.325'. [ 253.715323][ T6857] netlink: 28 bytes leftover after parsing attributes in process `syz.4.330'. [ 253.725485][ T6857] netlink: 'syz.4.330': attribute type 7 has an invalid length. [ 253.733480][ T6857] netlink: 'syz.4.330': attribute type 8 has an invalid length. [ 253.741448][ T6857] netlink: 4 bytes leftover after parsing attributes in process `syz.4.330'. [ 254.023510][ T6865] netlink: 156 bytes leftover after parsing attributes in process `syz.1.333'. [ 255.238572][ T6885] loop0: detected capacity change from 0 to 16 [ 255.337921][ T6885] erofs (device loop0): mounted with root inode @ nid 36. [ 256.633042][ T6906] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 257.925482][ T6925] netlink: 4 bytes leftover after parsing attributes in process `syz.3.354'. [ 258.316262][ T6929] loop2: detected capacity change from 0 to 512 [ 258.408326][ T6929] EXT4-fs (loop2): blocks per group (34) and clusters per group (32768) inconsistent [ 258.584464][ T6931] loop0: detected capacity change from 0 to 512 [ 258.644599][ T6931] EXT4-fs: Ignoring removed nobh option [ 258.725156][ T6933] loop3: detected capacity change from 0 to 512 [ 258.876493][ T6931] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #3: comm syz.0.357: corrupted inode contents [ 258.940772][ T6933] EXT4-fs (loop3): 1 orphan inode deleted [ 258.949584][ T6933] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 258.964477][ T14] Quota error (device loop3): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 258.975178][ T14] EXT4-fs error (device loop3): ext4_release_dquot:6969: comm kworker/u8:1: Failed to release dquot type 1 [ 258.987132][ T6933] ext4 filesystem being mounted at /65/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 259.003862][ T6931] EXT4-fs error (device loop0): ext4_dirty_inode:6538: inode #3: comm syz.0.357: mark_inode_dirty error [ 259.020364][ T6931] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #3: comm syz.0.357: corrupted inode contents [ 259.035055][ T6931] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #3: comm syz.0.357: mark_inode_dirty error [ 259.073815][ T6931] Quota error (device loop0): write_blk: dquota write failed [ 259.082173][ T6931] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 259.099168][ T6931] EXT4-fs error (device loop0): ext4_acquire_dquot:6933: comm syz.0.357: Failed to acquire dquot type 0 [ 259.151119][ T6931] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #16: comm syz.0.357: corrupted inode contents [ 259.202342][ T6931] EXT4-fs error (device loop0): ext4_dirty_inode:6538: inode #16: comm syz.0.357: mark_inode_dirty error [ 259.294523][ T6931] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #16: comm syz.0.357: corrupted inode contents [ 259.422050][ T5861] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 259.436929][ T6931] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #16: comm syz.0.357: mark_inode_dirty error [ 259.497019][ T6931] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #16: comm syz.0.357: corrupted inode contents [ 259.554780][ T6931] EXT4-fs error (device loop0) in ext4_orphan_del:305: Corrupt filesystem [ 259.607700][ T6931] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #16: comm syz.0.357: corrupted inode contents [ 259.652410][ T5861] usb 3-1: Using ep0 maxpacket: 32 [ 259.681400][ T6931] EXT4-fs error (device loop0): ext4_truncate:4666: inode #16: comm syz.0.357: mark_inode_dirty error [ 259.703903][ T5810] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 259.734247][ T5861] usb 3-1: New USB device found, idVendor=041e, idProduct=403c, bcdDevice=cc.d7 [ 259.743761][ T5861] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 259.781437][ T6931] EXT4-fs error (device loop0) in ext4_process_orphan:347: Corrupt filesystem [ 259.959759][ T5861] usb 3-1: config 0 descriptor?? [ 259.982623][ T6931] EXT4-fs (loop0): 1 truncate cleaned up [ 259.990495][ T6931] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 260.003903][ T6931] ext4 filesystem being mounted at /68/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 260.033177][ T5861] gspca_main: sq930x-2.14.0 probing 041e:403c [ 260.942370][ T5812] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 261.280078][ T6966] loop3: detected capacity change from 0 to 256 [ 261.406884][ T6966] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 261.532996][ T5861] gspca_sq930x: reg_w 0105 bc00 failed -71 [ 261.539269][ T5861] sq930x 3-1:0.0: probe with driver sq930x failed with error -71 [ 261.633676][ T5861] usb 3-1: USB disconnect, device number 3 [ 262.144168][ T6976] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap1 [ 262.172636][ T6976] batman_adv: batadv0: Adding interface: ip6gretap1 [ 262.179634][ T6976] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 262.206019][ T6976] batman_adv: batadv0: Interface activated: ip6gretap1 [ 262.605623][ T6985] tls_set_device_offload_rx: netdev not found [ 263.290330][ T6993] bridge0: port 2(bridge_slave_1) entered disabled state [ 263.300108][ T6993] bridge0: port 1(bridge_slave_0) entered disabled state [ 263.810820][ T6993] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 263.834169][ T6993] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 264.024396][ T7003] futex_wake_op: syz.0.384 tries to shift op by -1; fix this program [ 264.317609][ T7010] loop4: detected capacity change from 0 to 512 [ 264.419429][ T7010] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 264.871125][ T7010] EXT4-fs (loop4): 1 truncate cleaned up [ 264.879082][ T7010] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 266.213786][ T5807] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 266.382743][ T6993] erspan0: left allmulticast mode [ 266.546412][ T85] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 266.576339][ T85] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 266.612800][ T85] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 266.998883][ T85] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 267.709042][ T7023] loop2: detected capacity change from 0 to 2048 [ 267.978117][ T7023] loop2: p1 < > p4 [ 267.988784][ T7023] loop2: p4 size 8388608 extends beyond EOD, truncated [ 268.283373][ T5164] loop2: p1 < > p4 [ 268.343912][ T5164] loop2: p4 size 8388608 extends beyond EOD, truncated [ 269.468195][ T7001] Set syz1 is full, maxelem 65536 reached [ 269.627089][ T7036] netlink: 'syz.2.394': attribute type 10 has an invalid length. [ 269.702746][ T5983] udevd[5983]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 269.728848][ T6260] udevd[6260]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 269.759613][ T7037] netlink: 'syz.2.394': attribute type 10 has an invalid length. [ 269.782506][ T7037] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 270.167261][ T7043] netlink: 4 bytes leftover after parsing attributes in process `syz.1.396'. [ 270.203878][ T5861] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 270.278067][ T6260] udevd[6260]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 270.477223][ T5861] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 270.487217][ T5861] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 270.495756][ T5861] usb 1-1: Product: syz [ 270.500137][ T5861] usb 1-1: Manufacturer: syz [ 270.505147][ T5861] usb 1-1: SerialNumber: syz [ 271.480753][ T7053] netlink: 4 bytes leftover after parsing attributes in process `syz.1.400'. [ 271.852716][ T5861] cdc_ncm 1-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 271.865776][ T5861] cdc_ncm 1-1:1.0: setting tx_max = 184 [ 272.378564][ T5861] cdc_ncm 1-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.0-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 272.433333][ T5861] usb 1-1: USB disconnect, device number 4 [ 272.441182][ T5861] cdc_ncm 1-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.0-1, CDC NCM (NO ZLP) [ 272.564366][ T30] audit: type=1326 audit(1754673856.164:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7071 comm="syz.4.408" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf711e539 code=0x7ffc0000 [ 272.587170][ T30] audit: type=1326 audit(1754673856.164:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7071 comm="syz.4.408" exe="/root/syz-executor" sig=0 arch=40000003 syscall=30 compat=1 ip=0xf711e539 code=0x7ffc0000 [ 272.612695][ T30] audit: type=1326 audit(1754673856.164:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7071 comm="syz.4.408" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf711e539 code=0x7ffc0000 [ 284.947777][ T30] audit: type=1804 audit(1754673868.514:8): pid=7141 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.437" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="ramfs" ino=12559 res=1 errno=0 [ 285.985306][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 285.992085][ T1286] ieee802154 phy1 wpan1: encryption failed: -22 [ 286.103298][ T7148] netlink: 'syz.1.439': attribute type 4 has an invalid length. [ 286.771456][ T7148] netlink: 'syz.1.439': attribute type 4 has an invalid length. [ 287.490476][ T7157] loop0: detected capacity change from 0 to 2048 [ 288.621634][ T7169] netlink: 'syz.2.445': attribute type 11 has an invalid length. [ 288.635617][ T7157] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 289.081123][ T7157] loop0: detected capacity change from 2048 to 0 [ 289.126149][ C0] blk_print_req_error: 80 callbacks suppressed [ 289.126224][ C0] I/O error, dev loop0, sector 64 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 289.143219][ T7173] syz.0.442: attempt to access beyond end of device [ 289.143219][ T7173] loop0: rw=12288, sector=64, nr_sectors = 4 limit=0 [ 289.424099][ T7117] Set syz1 is full, maxelem 65536 reached [ 289.625653][ T5812] syz-executor: attempt to access beyond end of device [ 289.625653][ T5812] loop0: rw=12288, sector=64, nr_sectors = 4 limit=0 [ 289.941206][ T5812] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 289.979419][ T5812] syz-executor: attempt to access beyond end of device [ 289.979419][ T5812] loop0: rw=145409, sector=0, nr_sectors = 4 limit=0 [ 289.994602][ T5812] buffer_io_error: 80 callbacks suppressed [ 289.994673][ T5812] Buffer I/O error on dev loop0, logical block 0, lost sync page write [ 290.012930][ T5812] EXT4-fs (loop0): I/O error while writing superblock [ 290.032417][ T7164] kmmpd-loop0: attempt to access beyond end of device [ 290.032417][ T7164] loop0: rw=14337, sector=256, nr_sectors = 4 limit=0 [ 290.046668][ T7164] Buffer I/O error on dev loop0, logical block 64, lost sync page write [ 290.102774][ T7178] 9pnet: p9_errstr2errno: server reported unknown error "†WŠðX¸>, PŽÑñäK_‘ýWázª÷{gAõŒNBk¹±¬&Ûº|näWñ»ŒëNŠiÛ…ë±ß•þÇ󵽕Ýr [ 290.178414][ T3810] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 290.493988][ T3810] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 290.754643][ T3810] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 290.911160][ T3810] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 291.399587][ T3810] bridge_slave_1: left allmulticast mode [ 291.405860][ T3810] bridge_slave_1: left promiscuous mode [ 291.412581][ T3810] bridge0: port 2(bridge_slave_1) entered disabled state [ 291.439168][ T3810] bridge_slave_0: left allmulticast mode [ 291.449020][ T3810] bridge_slave_0: left promiscuous mode [ 291.456037][ T3810] bridge0: port 1(bridge_slave_0) entered disabled state [ 291.957990][ T3810] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 291.993570][ T3810] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 292.027162][ T3810] bond0 (unregistering): Released all slaves [ 292.617994][ T3810] hsr_slave_0: left promiscuous mode [ 292.669324][ T3810] hsr_slave_1: left promiscuous mode [ 292.681431][ T3810] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 292.689302][ T3810] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 292.754699][ T3810] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 292.765152][ T3810] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 292.824352][ T3810] veth1_macvtap: left promiscuous mode [ 292.830158][ T3810] veth0_macvtap: left promiscuous mode [ 292.845830][ T3810] veth1_vlan: left promiscuous mode [ 292.855476][ T3810] veth0_vlan: left promiscuous mode [ 293.780273][ T3810] team0 (unregistering): Port device team_slave_1 removed [ 293.877710][ T3810] team0 (unregistering): Port device team_slave_0 removed [ 294.060996][ T30] audit: type=1326 audit(1754673877.634:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7206 comm="syz.2.460" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7ff7539 code=0x0 [ 294.703111][ T5813] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 294.747680][ T5813] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 294.756947][ T5813] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 294.776478][ T5813] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 294.791125][ T5813] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 296.557108][ T7218] chnl_net:caif_netlink_parms(): no params data found [ 296.912244][ T5814] Bluetooth: hci1: command tx timeout [ 297.525057][ T7249] 9pnet: p9_errstr2errno: server reported unknown error a‘'Îä%6UÃ;qB&ð žæ®)ð°{Æþyl¨ÁöNlº6²wŒ_JXb_ᕯCɇ [ [ 298.173903][ T7218] bridge0: port 1(bridge_slave_0) entered blocking state [ 298.181456][ T7218] bridge0: port 1(bridge_slave_0) entered disabled state [ 298.191333][ T7218] bridge_slave_0: entered allmulticast mode [ 298.206607][ T7218] bridge_slave_0: entered promiscuous mode [ 298.272413][ T5814] Bluetooth: hci2: command 0x0406 tx timeout [ 298.278979][ T5814] Bluetooth: hci4: command 0x0406 tx timeout [ 298.279265][ T5808] Bluetooth: hci0: command 0x0406 tx timeout [ 298.287859][ T5814] Bluetooth: hci3: command 0x0406 tx timeout [ 298.359112][ T7218] bridge0: port 2(bridge_slave_1) entered blocking state [ 298.367548][ T7218] bridge0: port 2(bridge_slave_1) entered disabled state [ 298.375532][ T7218] bridge_slave_1: entered allmulticast mode [ 298.384893][ T7218] bridge_slave_1: entered promiscuous mode [ 298.723969][ T7276] fuse: Bad value for 'fd' [ 298.909349][ T7218] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 299.015261][ T5104] Bluetooth: hci1: command tx timeout [ 299.049073][ T7218] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 299.286844][ T7218] team0: Port device team_slave_0 added [ 299.352812][ T7218] team0: Port device team_slave_1 added [ 299.688426][ T7218] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 299.695829][ T7218] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 299.722232][ T7218] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 299.913553][ T7218] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 299.920987][ T7218] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 299.951138][ T7218] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 300.458120][ T7218] hsr_slave_0: entered promiscuous mode [ 300.469039][ T7218] hsr_slave_1: entered promiscuous mode [ 300.477959][ T7218] debugfs: 'hsr0' already exists in 'hsr' [ 300.484213][ T7218] Cannot create hsr debugfs directory [ 300.727796][ T7308] batadv_slave_0: entered promiscuous mode [ 300.892301][ T7306] batadv_slave_0: left promiscuous mode [ 301.147895][ T5104] Bluetooth: hci1: command tx timeout [ 302.034862][ T7218] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 302.174890][ T7218] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 302.273481][ T7218] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 302.373373][ T7218] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 303.235989][ T5104] Bluetooth: hci1: command tx timeout [ 303.768498][ T7218] 8021q: adding VLAN 0 to HW filter on device bond0 [ 303.996012][ T7218] 8021q: adding VLAN 0 to HW filter on device team0 [ 304.083426][ T3879] bridge0: port 1(bridge_slave_0) entered blocking state [ 304.090946][ T3879] bridge0: port 1(bridge_slave_0) entered forwarding state [ 304.221107][ T3879] bridge0: port 2(bridge_slave_1) entered blocking state [ 304.228668][ T3879] bridge0: port 2(bridge_slave_1) entered forwarding state [ 304.294690][ T7352] netlink: 4 bytes leftover after parsing attributes in process `syz.2.503'. [ 304.326504][ T7352] netlink: 4 bytes leftover after parsing attributes in process `syz.2.503'. [ 304.940441][ T7365] loop4: detected capacity change from 0 to 256 [ 305.056354][ T7365] exFAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 305.069968][ T7365] exFAT-fs (loop4): Medium has reported failures. Some data may be lost. [ 305.227664][ T7365] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 305.398346][ T30] audit: type=1326 audit(1754673888.974:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7364 comm="syz.4.506" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf711e539 code=0x7ffc0000 [ 305.421661][ T30] audit: type=1326 audit(1754673888.984:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7364 comm="syz.4.506" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf711e539 code=0x7ffc0000 [ 305.444591][ T30] audit: type=1326 audit(1754673888.984:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7364 comm="syz.4.506" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf711e539 code=0x7ffc0000 [ 305.466822][ T30] audit: type=1326 audit(1754673888.984:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7364 comm="syz.4.506" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf711e539 code=0x7ffc0000 [ 305.491248][ T30] audit: type=1326 audit(1754673888.984:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7364 comm="syz.4.506" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf711e539 code=0x7ffc0000 [ 305.514864][ T30] audit: type=1326 audit(1754673889.104:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7364 comm="syz.4.506" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf711e539 code=0x7ffc0000 [ 305.537926][ T30] audit: type=1326 audit(1754673889.104:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7364 comm="syz.4.506" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf711e539 code=0x7ffc0000 [ 305.560441][ T30] audit: type=1326 audit(1754673889.104:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7364 comm="syz.4.506" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf711e539 code=0x7ffc0000 [ 305.584667][ T30] audit: type=1326 audit(1754673889.114:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7364 comm="syz.4.506" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf711e539 code=0x7ffc0000 [ 305.607933][ T30] audit: type=1326 audit(1754673889.114:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7364 comm="syz.4.506" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf711e539 code=0x7ffc0000 [ 306.074013][ T5862] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 306.336170][ T5862] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 306.346867][ T5862] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 306.466691][ T5862] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 306.477701][ T5862] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 306.487121][ T5862] usb 3-1: SerialNumber: syz [ 306.507829][ T7392] netlink: 24 bytes leftover after parsing attributes in process `syz.4.512'. [ 306.556190][ T7218] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 306.834555][ T5862] usb 3-1: 0:2 : does not exist [ 306.839722][ T5862] usb 3-1: unit 5: unexpected type 0x09 [ 307.037641][ T5862] usb 3-1: USB disconnect, device number 4 [ 307.280844][ T5983] udevd[5983]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 307.793999][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 307.812647][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 309.305774][ T7218] veth0_vlan: entered promiscuous mode [ 309.417865][ T7218] veth1_vlan: entered promiscuous mode [ 309.732625][ T7218] veth0_macvtap: entered promiscuous mode [ 309.790053][ T7218] veth1_macvtap: entered promiscuous mode [ 309.939509][ T7218] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 310.077685][ T7218] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 310.184129][ T4071] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 310.219633][ T4071] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 310.288991][ T4071] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 310.372705][ T4071] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 311.353230][ T7460] loop2: detected capacity change from 0 to 512 [ 311.415913][ T7460] EXT4-fs: Ignoring removed oldalloc option [ 311.472444][ T7460] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 311.623440][ T7460] EXT4-fs (loop2): corrupt root inode, run e2fsck [ 311.630233][ T7460] EXT4-fs (loop2): mount failed [ 311.877307][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 311.877378][ T30] audit: type=1800 audit(1754673895.464:22): pid=7472 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.533" name="bus" dev="overlay" ino=628 res=0 errno=0 [ 312.688147][ T7486] input: syz0 as /devices/virtual/input/input5 [ 313.373634][ T7496] netlink: 51 bytes leftover after parsing attributes in process `syz.3.539'. [ 314.078923][ T7510] netlink: 4104 bytes leftover after parsing attributes in process `syz.4.543'. [ 314.914595][ T5104] Bluetooth: hci0: command 0x0406 tx timeout [ 314.921624][ T7523] netlink: 'syz.1.547': attribute type 1 has an invalid length. [ 314.947685][ T2230] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 314.954442][ T2230] Bluetooth: hci0: Error when powering off device on rfkill (-110) [ 315.081090][ T7523] 8021q: adding VLAN 0 to HW filter on device bond2 [ 315.249287][ T7529] bond2: (slave gretap2): making interface the new active one [ 315.263997][ T7529] bond2: (slave gretap2): Enslaving as an active interface with an up link [ 317.072189][ T5104] Bluetooth: hci2: command 0x0406 tx timeout [ 317.082444][ T2230] Bluetooth: hci2: Opcode 0x0c1a failed: -110 [ 317.088815][ T2230] Bluetooth: hci2: Error when powering off device on rfkill (-110) [ 317.282736][ T7558] netlink: 24 bytes leftover after parsing attributes in process `syz.4.556'. [ 317.897706][ T7563] mmap: syz.3.557 (7563) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 318.080362][ T30] audit: type=1326 audit(1754673901.644:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7564 comm="syz.1.558" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f57539 code=0x7ffc0000 [ 318.103408][ T30] audit: type=1326 audit(1754673901.644:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7564 comm="syz.1.558" exe="/root/syz-executor" sig=0 arch=40000003 syscall=328 compat=1 ip=0xf7f57539 code=0x7ffc0000 [ 318.125803][ T30] audit: type=1326 audit(1754673901.644:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7564 comm="syz.1.558" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f57539 code=0x7ffc0000 [ 318.148062][ T30] audit: type=1326 audit(1754673901.644:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7564 comm="syz.1.558" exe="/root/syz-executor" sig=0 arch=40000003 syscall=385 compat=1 ip=0xf7f57539 code=0x7ffc0000 [ 318.281376][ T30] audit: type=1326 audit(1754673901.824:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7564 comm="syz.1.558" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f57539 code=0x7ffc0000 [ 318.304958][ T30] audit: type=1326 audit(1754673901.824:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7564 comm="syz.1.558" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f57539 code=0x7ffc0000 [ 319.233195][ T2230] Bluetooth: hci3: Opcode 0x0c1a failed: -110 [ 319.239721][ T2230] Bluetooth: hci3: Error when powering off device on rfkill (-110) [ 319.248558][ T5104] Bluetooth: hci3: command 0x0406 tx timeout [ 319.443439][ T7592] netlink: 4 bytes leftover after parsing attributes in process `syz.3.567'. [ 320.339571][ T7612] overlayfs: failed to clone upperpath [ 321.306594][ T7633] fuse: Bad value for 'fd' [ 321.312764][ T5104] Bluetooth: hci4: command 0x0406 tx timeout [ 321.319153][ T2230] Bluetooth: hci4: Opcode 0x0c1a failed: -110 [ 321.325910][ T2230] Bluetooth: hci4: Error when powering off device on rfkill (-110) [ 322.269125][ T7645] overlayfs: failed to clone upperpath [ 322.671160][ T7653] fuse: Bad value for 'fd' [ 323.097798][ T7663] netlink: 8 bytes leftover after parsing attributes in process `syz.1.598'. [ 323.737192][ T5104] Bluetooth: hci1: command 0x0c1a tx timeout [ 324.013479][ T2230] Bluetooth: hci1: Opcode 0x0c1a failed: -110 [ 324.019909][ T2230] Bluetooth: hci1: Error when powering off device on rfkill (-110) [ 324.592968][ T4071] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 324.601019][ T4071] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 324.729758][ T7674] fuse: Bad value for 'fd' [ 324.791541][ T3505] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 324.800075][ T3505] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 325.932651][ T7694] loop5: detected capacity change from 0 to 512 [ 326.104706][ T7694] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 326.117913][ T7694] ext4 filesystem being mounted at /1/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 326.290510][ T7694] netlink: 4 bytes leftover after parsing attributes in process `syz.5.609'. [ 326.315767][ T7694] netlink: 4 bytes leftover after parsing attributes in process `syz.5.609'. [ 326.352651][ T7694] netlink: 4 bytes leftover after parsing attributes in process `syz.5.609'. [ 326.649855][ T7218] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 328.882231][ T7742] overlayfs: failed to clone upperpath [ 328.895763][ T7743] netlink: 8 bytes leftover after parsing attributes in process `syz.5.626'. [ 329.280691][ T7747] team0 (unregistering): Port device team_slave_0 removed [ 329.329991][ T7747] team0 (unregistering): Port device team_slave_1 removed [ 331.105209][ T7789] loop2: detected capacity change from 0 to 128 [ 331.194009][ T7789] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 331.248036][ T7789] ext4 filesystem being mounted at /126/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 331.734482][ T5816] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 335.067496][ T7877] syz_tun: entered allmulticast mode [ 335.172184][ T7877] netlink: 'syz.4.680': attribute type 27 has an invalid length. [ 335.198376][ T7876] syz_tun: left allmulticast mode [ 335.538690][ T7889] netlink: 60 bytes leftover after parsing attributes in process `syz.4.683'. [ 335.548356][ T7889] netlink: 60 bytes leftover after parsing attributes in process `syz.4.683'. [ 335.812696][ T7889] netlink: 60 bytes leftover after parsing attributes in process `syz.4.683'. [ 335.822251][ T7889] netlink: 60 bytes leftover after parsing attributes in process `syz.4.683'. [ 336.152832][ T7889] netlink: 60 bytes leftover after parsing attributes in process `syz.4.683'. [ 336.162333][ T7889] netlink: 60 bytes leftover after parsing attributes in process `syz.4.683'. [ 336.812292][ T7918] netlink: 4 bytes leftover after parsing attributes in process `syz.2.695'. [ 336.864678][ T7918] erspan0: entered promiscuous mode [ 336.870488][ T7918] macvtap1: entered promiscuous mode [ 336.877314][ T7918] macvtap1: entered allmulticast mode [ 336.883084][ T7918] erspan0: entered allmulticast mode [ 340.442516][ T5862] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 340.658711][ T5862] usb 3-1: Using ep0 maxpacket: 8 [ 340.691669][ T5862] usb 3-1: New USB device found, idVendor=0c45, idProduct=613e, bcdDevice=c4.6d [ 340.705570][ T5862] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 340.714572][ T5862] usb 3-1: Product: syz [ 340.719039][ T5862] usb 3-1: Manufacturer: syz [ 340.723951][ T5862] usb 3-1: SerialNumber: syz [ 340.742661][ T5862] usb 3-1: config 0 descriptor?? [ 340.824149][ T5862] gspca_main: sonixj-2.14.0 probing 0c45:613e [ 341.472448][ T8004] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma? [ 341.991330][ T8013] overlayfs: failed to clone upperpath [ 342.234451][ T5862] gspca_sonixj: i2c_w8 err -71 [ 342.282823][ T5862] sonixj 3-1:0.0: probe with driver sonixj failed with error -71 [ 342.301094][ T5862] usb 3-1: USB disconnect, device number 5 [ 343.885096][ T8041] overlayfs: failed to clone upperpath [ 344.865485][ T5862] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 345.052279][ T5862] usb 5-1: Using ep0 maxpacket: 8 [ 345.092438][ T5862] usb 5-1: New USB device found, idVendor=0c45, idProduct=613e, bcdDevice=c4.6d [ 345.103342][ T5862] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 345.111720][ T5862] usb 5-1: Product: syz [ 345.116974][ T5862] usb 5-1: Manufacturer: syz [ 345.121930][ T5862] usb 5-1: SerialNumber: syz [ 345.138228][ T5862] usb 5-1: config 0 descriptor?? [ 345.155643][ T5862] gspca_main: sonixj-2.14.0 probing 0c45:613e [ 346.643732][ T5862] gspca_sonixj: i2c_w8 err -71 [ 346.688791][ T5862] sonixj 5-1:0.0: probe with driver sonixj failed with error -71 [ 346.708981][ T5862] usb 5-1: USB disconnect, device number 2 [ 347.165521][ T8101] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma? [ 347.419671][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 347.426491][ T1286] ieee802154 phy1 wpan1: encryption failed: -22 [ 348.453364][ T8122] overlayfs: failed to clone upperpath [ 351.066592][ T8171] netlink: 'syz.5.795': attribute type 11 has an invalid length. [ 351.493553][ T8175] netlink: 4 bytes leftover after parsing attributes in process `syz.1.810'. [ 351.503584][ T8175] bridge_slave_1: left allmulticast mode [ 351.510249][ T8175] bridge_slave_1: left promiscuous mode [ 351.517396][ T8175] bridge0: port 2(bridge_slave_1) entered disabled state [ 351.539768][ T8175] bridge_slave_0: left allmulticast mode [ 351.546941][ T8175] bridge_slave_0: left promiscuous mode [ 351.556369][ T8175] bridge0: port 1(bridge_slave_0) entered disabled state [ 353.556156][ T8224] netlink: 24 bytes leftover after parsing attributes in process `syz.1.818'. [ 354.764234][ T8239] netlink: 64 bytes leftover after parsing attributes in process `syz.3.824'. [ 354.773780][ T8239] netlink: 76 bytes leftover after parsing attributes in process `syz.3.824'. [ 354.791324][ T8240] loop4: detected capacity change from 0 to 512 [ 354.853811][ T8240] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 354.936556][ T8240] EXT4-fs (loop4): 1 truncate cleaned up [ 354.944979][ T8240] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 355.016265][ T8240] fscrypt: key with description 'fscrypt:0000111122223333' has invalid payload [ 355.375175][ T5807] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 356.139221][ T8261] loop2: detected capacity change from 0 to 128 [ 356.212154][ T8261] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 356.412530][ T8261] UDF-fs: error (device loop2): udf_bitmap_new_block: bitmap for partition 0 corrupted (block 264 marked as free, partition length is 40) [ 357.457882][ T8291] netlink: 28 bytes leftover after parsing attributes in process `syz.3.844'. [ 357.467582][ T8291] netlink: 'syz.3.844': attribute type 7 has an invalid length. [ 357.475627][ T8291] netlink: 'syz.3.844': attribute type 8 has an invalid length. [ 357.483809][ T8291] netlink: 4 bytes leftover after parsing attributes in process `syz.3.844'. [ 358.772567][ T8320] nbd4: detected capacity change from 0 to 10 [ 358.865705][ T8320] nbd4: detected capacity change from 10 to 12 [ 359.483481][ T8317] block nbd4: shutting down sockets [ 360.378084][ T8338] netlink: 'syz.4.862': attribute type 1 has an invalid length. [ 360.508864][ T8343] netlink: 24 bytes leftover after parsing attributes in process `syz.3.861'. [ 360.509482][ T8342] netlink: 'syz.5.874': attribute type 12 has an invalid length. [ 360.526666][ T8342] netlink: 'syz.5.874': attribute type 29 has an invalid length. [ 360.534315][ T8345] overlayfs: failed to resolve './file0': -2 [ 360.534812][ T8342] netlink: 148 bytes leftover after parsing attributes in process `syz.5.874'. [ 360.549938][ T8342] netlink: 'syz.5.874': attribute type 2 has an invalid length. [ 360.661697][ T8338] bond1: (slave gretap1): making interface the new active one [ 360.674898][ T8338] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 361.060668][ T8353] loop2: detected capacity change from 0 to 512 [ 361.190529][ T8353] EXT4-fs (loop2): 1 orphan inode deleted [ 361.199150][ T8353] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 361.214030][ T3505] Quota error (device loop2): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 361.224954][ T3505] EXT4-fs error (device loop2): ext4_release_dquot:6969: comm kworker/u8:8: Failed to release dquot type 1 [ 361.250320][ T8353] ext4 filesystem being mounted at /165/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 361.401058][ T5816] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 362.930066][ T8388] netlink: 'syz.3.880': attribute type 1 has an invalid length. [ 363.095731][ T8390] bond1: (slave gretap1): making interface the new active one [ 363.109150][ T8390] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 363.448652][ T8394] netlink: 4 bytes leftover after parsing attributes in process `syz.2.882'. [ 364.004510][ T8402] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 364.026786][ T8405] loop2: detected capacity change from 0 to 256 [ 364.143528][ T8405] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 364.883121][ T8414] overlayfs: failed to resolve './file0': -2 [ 367.261166][ T8450] overlayfs: failed to resolve './file0': -2 [ 367.354074][ T8455] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 367.402453][ T8454] netlink: 4 bytes leftover after parsing attributes in process `syz.3.908'. [ 367.502360][ T5862] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 367.682283][ T5862] usb 5-1: Using ep0 maxpacket: 32 [ 367.698464][ T5862] usb 5-1: New USB device found, idVendor=041e, idProduct=403c, bcdDevice=cc.d7 [ 367.708531][ T5862] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 367.763634][ T5862] usb 5-1: config 0 descriptor?? [ 367.780383][ T5862] gspca_main: sq930x-2.14.0 probing 041e:403c [ 367.909166][ T30] audit: type=1326 audit(1754673951.474:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8461 comm="syz.3.913" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf710e539 code=0x7ffc0000 [ 367.931554][ T30] audit: type=1326 audit(1754673951.484:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8461 comm="syz.3.913" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf710e539 code=0x7ffc0000 [ 367.954076][ T30] audit: type=1326 audit(1754673951.484:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8461 comm="syz.3.913" exe="/root/syz-executor" sig=0 arch=40000003 syscall=30 compat=1 ip=0xf710e539 code=0x7ffc0000 [ 367.976463][ T30] audit: type=1326 audit(1754673951.484:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8461 comm="syz.3.913" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf710e539 code=0x7ffc0000 [ 369.297131][ T5862] gspca_sq930x: reg_w 0105 bc00 failed -71 [ 369.305338][ T5862] sq930x 5-1:0.0: probe with driver sq930x failed with error -71 [ 369.333743][ T5862] usb 5-1: USB disconnect, device number 3 [ 370.162836][ T8489] loop4: detected capacity change from 0 to 512 [ 370.313865][ T8489] EXT4-fs (loop4): 1 orphan inode deleted [ 370.321608][ T8489] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 370.336901][ T4248] Quota error (device loop4): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 370.348271][ T4248] EXT4-fs error (device loop4): ext4_release_dquot:6969: comm kworker/u8:21: Failed to release dquot type 1 [ 370.379999][ T8489] ext4 filesystem being mounted at /169/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 370.785985][ T5807] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 372.080006][ T8508] tls_set_device_offload_rx: netdev not found [ 374.158783][ T8539] tls_set_device_offload_rx: netdev not found [ 374.939280][ T8550] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap1 [ 374.958626][ T8550] batman_adv: batadv0: Adding interface: ip6gretap1 [ 374.965652][ T8550] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 374.991636][ T8550] batman_adv: batadv0: Interface activated: ip6gretap1 [ 375.744931][ T8567] syzkaller0: entered promiscuous mode [ 375.750602][ T8567] syzkaller0: entered allmulticast mode [ 377.203611][ T30] audit: type=1804 audit(1754673960.794:33): pid=8603 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.970" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="ramfs" ino=17580 res=1 errno=0 [ 377.452581][ T8607] netlink: 'syz.5.973': attribute type 4 has an invalid length. [ 377.562543][ T8611] netlink: 'syz.5.973': attribute type 4 has an invalid length. [ 408.883549][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 408.890371][ T1286] ieee802154 phy1 wpan1: encryption failed: -22 [ 470.313308][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 470.320038][ T1286] ieee802154 phy1 wpan1: encryption failed: -22 [ 508.024454][ T5104] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 508.082610][ T5104] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 508.108365][ T5813] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 508.132686][ T5813] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 508.155851][ T5813] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 508.226884][ T5813] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 508.253282][ T5813] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 508.262623][ T5813] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 508.322614][ T5814] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 508.497494][ T5814] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 508.513483][ T5814] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 508.686095][ T5814] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 508.733150][ T5823] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 508.773889][ T5104] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 508.785997][ T5104] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 508.933774][ T5813] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 508.963350][ T5813] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 508.982903][ T5813] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 509.004785][ T5813] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 509.021226][ T5813] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 509.408709][ T5823] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 509.423720][ T5823] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 509.510588][ T5823] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 509.694104][ T5823] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 509.705416][ T5823] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 510.273763][ T5823] Bluetooth: hci5: command tx timeout [ 510.761520][ T8628] chnl_net:caif_netlink_parms(): no params data found [ 510.842237][ T5823] Bluetooth: hci6: command tx timeout [ 510.980115][ T8626] chnl_net:caif_netlink_parms(): no params data found [ 511.072269][ T5823] Bluetooth: hci7: command tx timeout [ 511.269295][ T5823] Bluetooth: hci8: command tx timeout [ 511.398259][ T8630] chnl_net:caif_netlink_parms(): no params data found [ 511.597507][ T4248] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 511.792589][ T5823] Bluetooth: hci9: command tx timeout [ 511.798222][ T4248] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 511.962808][ T4248] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 512.113492][ T8636] chnl_net:caif_netlink_parms(): no params data found [ 512.169522][ T4248] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 512.204588][ T8633] chnl_net:caif_netlink_parms(): no params data found [ 512.362102][ T5823] Bluetooth: hci5: command tx timeout [ 512.943233][ T5823] Bluetooth: hci6: command tx timeout [ 512.970146][ T4248] erspan0 (unregistering): left allmulticast mode [ 513.081279][ T4248] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 513.115729][ T4248] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 513.133757][ T4248] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 513.147890][ T4248] bond0 (unregistering): Released all slaves [ 513.167153][ T5823] Bluetooth: hci7: command tx timeout [ 513.175464][ T4248] bond1 (unregistering): (slave batadv1): Releasing active interface [ 513.191566][ T4248] bond1 (unregistering): Released all slaves [ 513.222446][ T8626] bridge0: port 1(bridge_slave_0) entered blocking state [ 513.231654][ T8626] bridge0: port 1(bridge_slave_0) entered disabled state [ 513.241302][ T8626] bridge_slave_0: entered allmulticast mode [ 513.252680][ T8626] bridge_slave_0: entered promiscuous mode [ 513.321122][ T5823] Bluetooth: hci8: command tx timeout [ 513.445305][ T8626] bridge0: port 2(bridge_slave_1) entered blocking state [ 513.456303][ T8626] bridge0: port 2(bridge_slave_1) entered disabled state [ 513.464849][ T8626] bridge_slave_1: entered allmulticast mode [ 513.474382][ T8626] bridge_slave_1: entered promiscuous mode [ 513.704475][ T8630] bridge0: port 1(bridge_slave_0) entered blocking state [ 513.712680][ T8630] bridge0: port 1(bridge_slave_0) entered disabled state [ 513.720367][ T8630] bridge_slave_0: entered allmulticast mode [ 513.729941][ T8630] bridge_slave_0: entered promiscuous mode [ 513.761147][ T8628] bridge0: port 1(bridge_slave_0) entered blocking state [ 513.768968][ T8628] bridge0: port 1(bridge_slave_0) entered disabled state [ 513.776877][ T8628] bridge_slave_0: entered allmulticast mode [ 513.786397][ T8628] bridge_slave_0: entered promiscuous mode [ 513.872678][ T5823] Bluetooth: hci9: command tx timeout [ 513.880863][ T8626] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 513.930938][ T8630] bridge0: port 2(bridge_slave_1) entered blocking state [ 513.939127][ T8630] bridge0: port 2(bridge_slave_1) entered disabled state [ 513.947014][ T8630] bridge_slave_1: entered allmulticast mode [ 513.956556][ T8630] bridge_slave_1: entered promiscuous mode [ 514.025434][ T8628] bridge0: port 2(bridge_slave_1) entered blocking state [ 514.035339][ T8628] bridge0: port 2(bridge_slave_1) entered disabled state [ 514.043250][ T8628] bridge_slave_1: entered allmulticast mode [ 514.053004][ T8628] bridge_slave_1: entered promiscuous mode [ 514.074313][ T8626] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 514.200237][ T8636] bridge0: port 1(bridge_slave_0) entered blocking state [ 514.207855][ T8636] bridge0: port 1(bridge_slave_0) entered disabled state [ 514.216004][ T8636] bridge_slave_0: entered allmulticast mode [ 514.225635][ T8636] bridge_slave_0: entered promiscuous mode [ 514.264589][ T4248] hsr_slave_0: left promiscuous mode [ 514.281331][ T4248] hsr_slave_1: left promiscuous mode [ 514.290906][ T4248] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 514.298744][ T4248] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 514.309226][ T4248] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 514.317173][ T4248] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 514.332754][ T4248] veth1_macvtap: left promiscuous mode [ 514.338468][ T4248] veth0_macvtap: left promiscuous mode [ 514.344598][ T4248] veth1_vlan: left promiscuous mode [ 514.350171][ T4248] veth0_vlan: left promiscuous mode [ 514.470674][ T5823] Bluetooth: hci5: command tx timeout [ 514.992035][ T5823] Bluetooth: hci6: command tx timeout [ 515.232608][ T5823] Bluetooth: hci7: command tx timeout [ 515.367864][ T8630] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 515.383338][ T8636] bridge0: port 2(bridge_slave_1) entered blocking state [ 515.390830][ T8636] bridge0: port 2(bridge_slave_1) entered disabled state [ 515.398395][ T5823] Bluetooth: hci8: command tx timeout [ 515.406145][ T8636] bridge_slave_1: entered allmulticast mode [ 515.415832][ T8636] bridge_slave_1: entered promiscuous mode [ 515.480598][ T8628] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 515.491085][ T8633] bridge0: port 1(bridge_slave_0) entered blocking state [ 515.499606][ T8633] bridge0: port 1(bridge_slave_0) entered disabled state [ 515.508325][ T8633] bridge_slave_0: entered allmulticast mode [ 515.518249][ T8633] bridge_slave_0: entered promiscuous mode [ 515.537698][ T8630] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 515.548740][ T8633] bridge0: port 2(bridge_slave_1) entered blocking state [ 515.556505][ T8633] bridge0: port 2(bridge_slave_1) entered disabled state [ 515.564393][ T8633] bridge_slave_1: entered allmulticast mode [ 515.573875][ T8633] bridge_slave_1: entered promiscuous mode [ 515.634114][ T8626] team0: Port device team_slave_0 added [ 515.650390][ T8628] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 515.864444][ T8626] team0: Port device team_slave_1 added [ 515.882983][ T8636] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 515.952319][ T5823] Bluetooth: hci9: command tx timeout [ 515.983878][ T8633] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 516.006190][ T8633] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 516.026243][ T8630] team0: Port device team_slave_0 added [ 516.087295][ T8636] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 516.143901][ T8628] team0: Port device team_slave_0 added [ 516.198539][ T8630] team0: Port device team_slave_1 added [ 516.326302][ T8626] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 516.334937][ T8626] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 516.362853][ T8626] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 516.386148][ T8628] team0: Port device team_slave_1 added [ 516.398015][ T8626] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 516.405459][ T8626] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 516.432708][ T8626] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 516.483092][ T8630] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 516.490403][ T8630] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 516.517237][ T8630] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 516.523318][ T5823] Bluetooth: hci5: command tx timeout [ 516.644120][ T8633] team0: Port device team_slave_0 added [ 516.657190][ T8630] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 516.666063][ T8630] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 516.692809][ T8630] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 516.716590][ T8636] team0: Port device team_slave_0 added [ 516.779491][ T8633] team0: Port device team_slave_1 added [ 516.812664][ T8636] team0: Port device team_slave_1 added [ 516.878047][ T8628] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 516.885969][ T8628] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 516.912559][ T8628] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 517.072195][ T5823] Bluetooth: hci6: command tx timeout [ 517.128427][ T8628] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 517.137267][ T8628] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 517.165231][ T8628] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 517.277083][ T8626] hsr_slave_0: entered promiscuous mode [ 517.287269][ T8626] hsr_slave_1: entered promiscuous mode [ 517.296153][ T8626] debugfs: 'hsr0' already exists in 'hsr' [ 517.302125][ T8626] Cannot create hsr debugfs directory [ 517.311553][ T8633] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 517.319745][ T8633] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 517.347902][ T8633] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 517.352506][ T5823] Bluetooth: hci7: command tx timeout [ 517.382831][ T8633] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 517.390114][ T8633] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 517.417066][ T8633] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 517.458360][ T8630] hsr_slave_0: entered promiscuous mode [ 517.467454][ T8630] hsr_slave_1: entered promiscuous mode [ 517.477152][ T8630] debugfs: 'hsr0' already exists in 'hsr' [ 517.482341][ T5823] Bluetooth: hci8: command tx timeout [ 517.483348][ T8630] Cannot create hsr debugfs directory [ 517.498620][ T8636] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 517.506102][ T8636] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 517.534049][ T8636] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 517.557656][ T8636] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 517.564960][ T8636] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 517.591564][ T8636] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 517.945075][ T8636] hsr_slave_0: entered promiscuous mode [ 517.955425][ T8636] hsr_slave_1: entered promiscuous mode [ 517.964408][ T8636] debugfs: 'hsr0' already exists in 'hsr' [ 517.970498][ T8636] Cannot create hsr debugfs directory [ 518.047716][ T5823] Bluetooth: hci9: command tx timeout [ 518.090969][ T8628] hsr_slave_0: entered promiscuous mode [ 518.101210][ T8628] hsr_slave_1: entered promiscuous mode [ 518.110087][ T8628] debugfs: 'hsr0' already exists in 'hsr' [ 518.116291][ T8628] Cannot create hsr debugfs directory [ 518.176222][ T8633] hsr_slave_0: entered promiscuous mode [ 518.186529][ T8633] hsr_slave_1: entered promiscuous mode [ 518.195491][ T8633] debugfs: 'hsr0' already exists in 'hsr' [ 518.201386][ T8633] Cannot create hsr debugfs directory [ 518.950794][ T4248] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 519.101198][ T4248] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 519.313784][ T4248] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 519.545760][ T4248] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 519.906294][ T8626] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 519.976440][ T8626] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 520.036903][ T8626] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 520.116870][ T8626] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 520.160899][ T4248] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 520.303207][ T4248] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 520.350305][ T8630] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 520.396357][ T8630] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 520.451360][ T4248] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 520.486013][ T8630] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 520.523190][ T8628] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 520.547732][ T8630] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 520.593094][ T4248] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 520.625365][ T8628] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 520.727219][ T8628] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 520.821505][ T8628] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 520.874874][ T8633] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 520.928385][ T8633] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 521.053922][ T8633] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 521.242511][ T8633] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 521.487005][ T4248] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 521.584461][ T4248] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 521.740005][ T4248] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 521.818857][ T8636] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 521.849478][ T8636] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 521.921620][ T4248] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 521.955024][ T8636] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 522.004015][ T8636] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 522.254864][ T8626] 8021q: adding VLAN 0 to HW filter on device bond0 [ 522.545375][ T4248] bridge_slave_1: left allmulticast mode [ 522.551218][ T4248] bridge_slave_1: left promiscuous mode [ 522.559177][ T4248] bridge0: port 2(bridge_slave_1) entered disabled state [ 522.576970][ T4248] bridge_slave_0: left allmulticast mode [ 522.583168][ T4248] bridge_slave_0: left promiscuous mode [ 522.589762][ T4248] bridge0: port 1(bridge_slave_0) entered disabled state [ 522.607410][ T4248] bridge_slave_1: left allmulticast mode [ 522.613665][ T4248] bridge_slave_1: left promiscuous mode [ 522.620112][ T4248] bridge0: port 2(bridge_slave_1) entered disabled state [ 522.634830][ T4248] bridge_slave_0: left allmulticast mode [ 522.640659][ T4248] bridge_slave_0: left promiscuous mode [ 522.647707][ T4248] bridge0: port 1(bridge_slave_0) entered disabled state [ 522.665462][ T4248] bridge_slave_1: left allmulticast mode [ 522.671294][ T4248] bridge_slave_1: left promiscuous mode [ 522.680835][ T4248] bridge0: port 2(bridge_slave_1) entered disabled state [ 522.693404][ T4248] bridge_slave_0: left allmulticast mode [ 522.699230][ T4248] bridge_slave_0: left promiscuous mode [ 522.706852][ T4248] bridge0: port 1(bridge_slave_0) entered disabled state [ 522.721574][ T4248] batman_adv: batadv0: Interface deactivated: ip6gretap1 [ 522.731995][ T4248] batman_adv: batadv0: Interface deactivated: ip6gretap1 [ 523.307416][ T4248] bond1 (unregistering): (slave gretap1): Releasing active interface [ 523.328283][ T4248] bond2 (unregistering): (slave gretap2): Releasing active interface [ 523.397643][ T4248] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 523.449184][ T4248] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 523.461106][ T4248] bond0 (unregistering): Released all slaves [ 523.480322][ T4248] bond1 (unregistering): Released all slaves [ 523.505448][ T4248] bond2 (unregistering): Released all slaves [ 523.819363][ T4248] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 523.839771][ T4248] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 523.855155][ T4248] bond0 (unregistering): Released all slaves [ 523.898581][ T4248] batman_adv: batadv0: Removing interface: ip6gretap1 [ 523.969822][ T4248] bond1 (unregistering): (slave gretap1): Releasing active interface [ 524.129722][ T4248] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 524.146737][ T4248] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 524.159797][ T4248] bond0 (unregistering): Released all slaves [ 524.188683][ T4248] bond1 (unregistering): Released all slaves [ 524.236516][ T4248] batman_adv: batadv0: Removing interface: ip6gretap1 [ 524.313123][ T4248] bond1 (unregistering): (slave gretap1): Releasing active interface [ 524.471535][ T4248] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 524.489417][ T4248] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 524.505825][ T4248] bond0 (unregistering): Released all slaves [ 524.534310][ T4248] bond1 (unregistering): Released all slaves [ 524.593300][ T8630] 8021q: adding VLAN 0 to HW filter on device bond0 [ 524.682840][ T8626] 8021q: adding VLAN 0 to HW filter on device team0 [ 524.769811][ T8628] 8021q: adding VLAN 0 to HW filter on device bond0 [ 524.792881][ T8630] 8021q: adding VLAN 0 to HW filter on device team0 [ 524.874438][ T3879] bridge0: port 1(bridge_slave_0) entered blocking state [ 524.882131][ T3879] bridge0: port 1(bridge_slave_0) entered forwarding state [ 524.979122][ T3879] bridge0: port 1(bridge_slave_0) entered blocking state [ 524.986884][ T3879] bridge0: port 1(bridge_slave_0) entered forwarding state [ 525.004391][ T3879] bridge0: port 2(bridge_slave_1) entered blocking state [ 525.012027][ T3879] bridge0: port 2(bridge_slave_1) entered forwarding state [ 525.027520][ T3879] bridge0: port 2(bridge_slave_1) entered blocking state [ 525.035071][ T3879] bridge0: port 2(bridge_slave_1) entered forwarding state [ 525.147464][ T8633] 8021q: adding VLAN 0 to HW filter on device bond0 [ 525.192428][ T8628] 8021q: adding VLAN 0 to HW filter on device team0 [ 525.259284][ T3879] bridge0: port 1(bridge_slave_0) entered blocking state [ 525.266897][ T3879] bridge0: port 1(bridge_slave_0) entered forwarding state [ 525.356680][ T1328] bridge0: port 2(bridge_slave_1) entered blocking state [ 525.364408][ T1328] bridge0: port 2(bridge_slave_1) entered forwarding state [ 525.567417][ T8633] 8021q: adding VLAN 0 to HW filter on device team0 [ 525.708549][ T1328] bridge0: port 1(bridge_slave_0) entered blocking state [ 525.716202][ T1328] bridge0: port 1(bridge_slave_0) entered forwarding state [ 525.768837][ T1328] bridge0: port 2(bridge_slave_1) entered blocking state [ 525.776477][ T1328] bridge0: port 2(bridge_slave_1) entered forwarding state [ 526.155283][ T8636] 8021q: adding VLAN 0 to HW filter on device bond0 [ 526.633683][ T8636] 8021q: adding VLAN 0 to HW filter on device team0 [ 526.804072][ T1328] bridge0: port 1(bridge_slave_0) entered blocking state [ 526.811887][ T1328] bridge0: port 1(bridge_slave_0) entered forwarding state [ 526.996692][ T1328] bridge0: port 2(bridge_slave_1) entered blocking state [ 527.004351][ T1328] bridge0: port 2(bridge_slave_1) entered forwarding state [ 527.047271][ T4248] hsr_slave_0: left promiscuous mode [ 527.056939][ T4248] hsr_slave_1: left promiscuous mode [ 527.064898][ T4248] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 527.075982][ T4248] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 527.137930][ T4248] hsr_slave_0: left promiscuous mode [ 527.149635][ T4248] hsr_slave_1: left promiscuous mode [ 527.162045][ T4248] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 527.169756][ T4248] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 527.198199][ T4248] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 527.206361][ T4248] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 527.250084][ T4248] hsr_slave_0: left promiscuous mode [ 527.258303][ T4248] hsr_slave_1: left promiscuous mode [ 527.266317][ T4248] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 527.276824][ T4248] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 527.289247][ T4248] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 527.297016][ T4248] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 527.334496][ T4248] hsr_slave_0: left promiscuous mode [ 527.342082][ T4248] hsr_slave_1: left promiscuous mode [ 527.349913][ T4248] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 527.357721][ T4248] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 527.375610][ T4248] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 527.383257][ T4248] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 527.431719][ T4248] veth1_macvtap: left promiscuous mode [ 527.437683][ T4248] veth0_macvtap: left promiscuous mode [ 527.447616][ T4248] veth1_vlan: left promiscuous mode [ 527.453240][ T4248] veth0_vlan: left promiscuous mode [ 527.460293][ T4248] veth1_macvtap: left promiscuous mode [ 527.466204][ T4248] veth0_macvtap: left promiscuous mode [ 527.472777][ T4248] veth1_vlan: left promiscuous mode [ 527.478312][ T4248] veth0_vlan: left promiscuous mode [ 527.488662][ T4248] veth1_macvtap: left promiscuous mode [ 527.494506][ T4248] veth0_macvtap: left promiscuous mode [ 527.500260][ T4248] veth1_vlan: left promiscuous mode [ 527.505994][ T4248] veth0_vlan: left promiscuous mode [ 528.502071][ T4248] team0 (unregistering): Port device team_slave_1 removed [ 528.527586][ T4248] team0 (unregistering): Port device team_slave_0 removed [ 529.075929][ T4248] team0 (unregistering): Port device team_slave_1 removed [ 529.102446][ T4248] team0 (unregistering): Port device team_slave_0 removed [ 530.172950][ T4248] team0 (unregistering): Port device team_slave_1 removed [ 530.198027][ T4248] team0 (unregistering): Port device team_slave_0 removed [ 530.651266][ T8626] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 531.509871][ T8630] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 531.643280][ T8628] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 531.665147][ T8633] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 531.743839][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 531.750632][ T1286] ieee802154 phy1 wpan1: encryption failed: -22 [ 533.440881][ T8636] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 534.067224][ T8636] veth0_vlan: entered promiscuous mode [ 534.191267][ T8636] veth1_vlan: entered promiscuous mode [ 534.864913][ T8626] veth0_vlan: entered promiscuous mode [ 534.994670][ T8626] veth1_vlan: entered promiscuous mode [ 535.252578][ T8636] veth0_macvtap: entered promiscuous mode [ 535.363136][ T8636] veth1_macvtap: entered promiscuous mode [ 535.736013][ T8636] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 535.785540][ T8626] veth0_macvtap: entered promiscuous mode [ 535.875591][ T8626] veth1_macvtap: entered promiscuous mode [ 535.989536][ T8636] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 536.144364][ T8633] veth0_vlan: entered promiscuous mode [ 536.208070][ T8633] veth1_vlan: entered promiscuous mode [ 536.221439][ T85] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 536.247892][ T8626] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 536.284864][ T8630] veth0_vlan: entered promiscuous mode [ 536.294148][ T3934] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 536.335853][ T8626] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 536.402933][ T3934] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 536.502859][ T3934] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 536.516820][ T8630] veth1_vlan: entered promiscuous mode [ 536.589075][ T3934] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 536.683961][ T85] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 536.716353][ T85] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 536.781095][ T8633] veth0_macvtap: entered promiscuous mode [ 536.795139][ T3879] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 536.842644][ T8633] veth1_macvtap: entered promiscuous mode [ 537.024547][ T8628] veth0_vlan: entered promiscuous mode [ 537.146600][ T8630] veth0_macvtap: entered promiscuous mode [ 537.190712][ T8633] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 537.207396][ T8628] veth1_vlan: entered promiscuous mode [ 537.227840][ T8630] veth1_macvtap: entered promiscuous mode [ 537.298874][ T8633] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 537.424403][ T3879] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 537.468895][ T8630] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 537.497058][ T3879] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 537.571256][ T3879] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 537.638190][ T8628] veth0_macvtap: entered promiscuous mode [ 537.655879][ T8630] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 537.673344][ T57] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 537.760067][ T8628] veth1_macvtap: entered promiscuous mode [ 537.783146][ T1328] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 537.863839][ T1328] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 537.931481][ T1328] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 538.017791][ T1328] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 538.040106][ T8628] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 538.117699][ T8628] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 538.258947][ T3879] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 538.327137][ T3879] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 538.371050][ T3879] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 538.462106][ T3879] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 542.185416][ T3879] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 542.194300][ T3879] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 542.312169][ T4071] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 542.320285][ T4071] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 542.529654][ T85] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 542.537956][ T85] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 542.664807][ T3810] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 542.673070][ T3810] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 543.123758][ T57] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 543.133017][ T57] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 543.307606][ T4071] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 543.318739][ T4071] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 543.333806][ T3879] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 543.341981][ T3879] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 543.400769][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 543.409191][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 543.540966][ T57] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 543.549405][ T57] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 543.631057][ T1328] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 543.641343][ T1328] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 544.739608][ T8832] loop6: detected capacity change from 0 to 2048 [ 544.792632][ T8835] futex_wake_op: syz.8.991 tries to shift op by -1; fix this program [ 545.019362][ T8832] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 545.334239][ T8832] loop6: detected capacity change from 2048 to 0 [ 545.426953][ T8846] syz.6.990: attempt to access beyond end of device [ 545.426953][ T8846] loop6: rw=12288, sector=64, nr_sectors = 4 limit=0 [ 545.784281][ T8626] syz-executor: attempt to access beyond end of device [ 545.784281][ T8626] loop6: rw=12288, sector=64, nr_sectors = 4 limit=0 [ 546.416357][ T8626] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 546.539236][ T8626] syz-executor: attempt to access beyond end of device [ 546.539236][ T8626] loop6: rw=145409, sector=0, nr_sectors = 4 limit=0 [ 546.553256][ T8626] Buffer I/O error on dev loop6, logical block 0, lost sync page write [ 546.562061][ T8626] EXT4-fs (loop6): I/O error while writing superblock [ 546.715099][ T8838] kmmpd-loop6: attempt to access beyond end of device [ 546.715099][ T8838] loop6: rw=14337, sector=256, nr_sectors = 4 limit=0 [ 546.732834][ T8838] Buffer I/O error on dev loop6, logical block 64, lost sync page write [ 547.104511][ T4071] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 547.226818][ T4071] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 547.412032][ T4071] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 547.591702][ T4071] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 547.872415][ T4071] bridge_slave_1: left allmulticast mode [ 547.878556][ T4071] bridge_slave_1: left promiscuous mode [ 547.885421][ T4071] bridge0: port 2(bridge_slave_1) entered disabled state [ 547.933106][ T4071] bridge_slave_0: left allmulticast mode [ 547.938953][ T4071] bridge_slave_0: left promiscuous mode [ 547.946754][ T4071] bridge0: port 1(bridge_slave_0) entered disabled state [ 548.434992][ T4071] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 548.489236][ T4071] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 548.507137][ T4071] bond0 (unregistering): Released all slaves [ 549.226779][ T4071] hsr_slave_0: left promiscuous mode [ 549.263310][ T4071] hsr_slave_1: left promiscuous mode [ 549.271116][ T4071] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 549.279448][ T4071] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 549.348744][ T4071] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 549.356498][ T4071] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 549.429231][ T8886] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1012'. [ 549.438692][ T8886] netlink: 'syz.8.1012': attribute type 15 has an invalid length. [ 549.467112][ T8885] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1013'. [ 549.476901][ T8885] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1013'. [ 549.502106][ T4071] veth1_macvtap: left promiscuous mode [ 549.507836][ T4071] veth0_macvtap: left promiscuous mode [ 549.514051][ T4071] veth1_vlan: left promiscuous mode [ 549.519629][ T4071] veth0_vlan: left promiscuous mode [ 549.865799][ T5813] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 549.905002][ T5813] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 549.953247][ T5813] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 549.984844][ T8882] loop9: detected capacity change from 0 to 8192 [ 550.017684][ T5813] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 550.025123][ T8882] FAT-fs (loop9): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 550.050947][ T5813] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 550.384329][ T4071] team0 (unregistering): Port device team_slave_1 removed [ 550.449357][ T4071] team0 (unregistering): Port device team_slave_0 removed [ 550.692735][ T8886] vxlan0: entered promiscuous mode [ 550.814523][ T3810] netdevsim netdevsim8 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 551.115362][ T8898] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 551.187657][ T3810] netdevsim netdevsim8 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 551.224022][ T3810] netdevsim netdevsim8 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 551.380550][ T8898] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 551.440621][ T1328] netdevsim netdevsim8 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 551.546163][ T8898] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 551.709703][ T8898] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 552.129261][ T5813] Bluetooth: hci0: command tx timeout [ 552.221301][ T8916] loop8: detected capacity change from 0 to 512 [ 552.269330][ T3810] netdevsim netdevsim9 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 552.328201][ T8916] EXT4-fs (loop8): orphan cleanup on readonly fs [ 552.344994][ T8916] Quota error (device loop8): find_tree_dqentry: Cycle in quota tree detected: block 2 index 0 [ 552.356395][ T8916] Quota error (device loop8): qtree_read_dquot: Can't read quota structure for id 0 [ 552.371870][ T8916] EXT4-fs error (device loop8): ext4_acquire_dquot:6933: comm syz.8.1021: Failed to acquire dquot type 1 [ 552.416203][ T3879] netdevsim netdevsim9 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 552.433155][ T1328] netdevsim netdevsim9 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 552.434117][ T8916] EXT4-fs (loop8): 1 truncate cleaned up [ 552.442121][ T1328] netdevsim netdevsim9 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 552.456300][ T8916] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 552.509761][ T8916] EXT4-fs (loop8): re-mounted 00000000-0000-0000-0000-000000000000. [ 552.577226][ T8892] chnl_net:caif_netlink_parms(): no params data found [ 552.827680][ T8630] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 553.647480][ T8942] loop0: detected capacity change from 0 to 64 [ 553.820662][ T8892] bridge0: port 1(bridge_slave_0) entered blocking state [ 553.828597][ T8892] bridge0: port 1(bridge_slave_0) entered disabled state [ 553.836652][ T8892] bridge_slave_0: entered allmulticast mode [ 553.846126][ T8892] bridge_slave_0: entered promiscuous mode [ 553.883768][ T8892] bridge0: port 2(bridge_slave_1) entered blocking state [ 553.891558][ T8892] bridge0: port 2(bridge_slave_1) entered disabled state [ 553.905195][ T8892] bridge_slave_1: entered allmulticast mode [ 553.914794][ T8892] bridge_slave_1: entered promiscuous mode [ 553.943508][ T8942] loop0: detected capacity change from 64 to 0 [ 553.965696][ C1] I/O error, dev loop0, sector 7 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 553.975870][ T8943] syz.0.1030: attempt to access beyond end of device [ 553.975870][ T8943] loop0: rw=0, sector=8, nr_sectors = 1 limit=0 [ 553.990482][ T8943] syz.0.1030: attempt to access beyond end of device [ 553.990482][ T8943] loop0: rw=0, sector=7, nr_sectors = 1 limit=0 [ 554.142146][ T8892] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 554.171209][ T8892] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 554.219521][ T5813] Bluetooth: hci0: command tx timeout [ 554.291120][ T8892] team0: Port device team_slave_0 added [ 554.319536][ T8892] team0: Port device team_slave_1 added [ 554.396155][ T8636] syz-executor: attempt to access beyond end of device [ 554.396155][ T8636] loop0: rw=0, sector=7, nr_sectors = 1 limit=0 [ 554.413006][ T8636] syz-executor: attempt to access beyond end of device [ 554.413006][ T8636] loop0: rw=0, sector=8, nr_sectors = 1 limit=0 [ 554.450311][ T8892] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 554.458786][ T8892] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 554.486446][ T8892] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 554.549592][ T8949] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1034'. [ 554.573883][ T8892] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 554.581181][ T8892] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 554.607785][ T8892] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 554.647966][ T12] kworker/u8:0: attempt to access beyond end of device [ 554.647966][ T12] loop0: rw=0, sector=1, nr_sectors = 1 limit=0 [ 554.661589][ T12] BFS-fs: find_inode(): Unable to read inode loop0:00000001 [ 554.736990][ T8952] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1035'. [ 554.750039][ T12] kworker/u8:0: attempt to access beyond end of device [ 554.750039][ T12] loop0: rw=0, sector=1, nr_sectors = 1 limit=0 [ 554.765571][ T12] BFS-fs: find_inode(): Unable to read inode loop0:00000000 [ 554.779844][ T12] kworker/u8:0: attempt to access beyond end of device [ 554.779844][ T12] loop0: rw=0, sector=1, nr_sectors = 1 limit=0 [ 554.793756][ T12] BFS-fs: find_inode(): Unable to read inode loop0:00000002 [ 554.824006][ T8952] bridge0: port 2(bridge_slave_1) entered disabled state [ 554.833783][ T8952] bridge0: port 1(bridge_slave_0) entered disabled state [ 555.029721][ T8892] hsr_slave_0: entered promiscuous mode [ 555.039890][ T8892] hsr_slave_1: entered promiscuous mode [ 555.304979][ T12] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 555.505455][ T12] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 555.733977][ T12] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 555.888021][ T12] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 556.259166][ T12] bridge_slave_1: left allmulticast mode [ 556.265345][ T12] bridge_slave_1: left promiscuous mode [ 556.273211][ T5813] Bluetooth: hci0: command tx timeout [ 556.273911][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 556.318892][ T12] bridge_slave_0: left allmulticast mode [ 556.325279][ T12] bridge_slave_0: left promiscuous mode [ 556.332038][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 556.813698][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 556.892234][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 556.939646][ T12] bond0 (unregistering): Released all slaves [ 557.544892][ T5823] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 557.554290][ T5823] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 557.567806][ T5823] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 557.620505][ T5823] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 557.634349][ T5823] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 557.801460][ T8977] loop8: detected capacity change from 0 to 47 [ 557.921618][ T12] hsr_slave_0: left promiscuous mode [ 557.946475][ T12] hsr_slave_1: left promiscuous mode [ 557.963924][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 557.971709][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 557.993005][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 558.000838][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 558.090060][ T12] veth1_macvtap: left promiscuous mode [ 558.098914][ T12] veth0_macvtap: left promiscuous mode [ 558.108962][ T12] veth1_vlan: left promiscuous mode [ 558.114650][ T12] veth0_vlan: left promiscuous mode [ 558.127658][ T8981] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1049'. [ 558.171145][ T8981] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1049'. [ 558.258463][ T8981] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1049'. [ 558.312831][ T8981] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1049'. [ 558.353724][ T5813] Bluetooth: hci0: command tx timeout [ 558.644554][ T8986] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1051'. [ 558.860217][ T12] team0 (unregistering): Port device team_slave_1 removed [ 558.908307][ T12] team0 (unregistering): Port device team_slave_0 removed [ 559.272342][ T8892] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 559.478180][ T8892] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 559.577341][ T8892] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 559.707990][ T8892] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 559.718335][ T5813] Bluetooth: hci1: command tx timeout [ 559.824408][ T12] ------------[ cut here ]------------ [ 559.830063][ T12] WARNING: CPU: 1 PID: 12 at net/xfrm/xfrm_state.c:3303 xfrm_state_fini+0x2fa/0x4c0 [ 559.842679][ T12] Modules linked in: [ 559.846844][ T12] CPU: 1 UID: 0 PID: 12 Comm: kworker/u8:0 Not tainted 6.16.0-syzkaller-12063-g37816488247d #0 PREEMPT(none) [ 559.859914][ T12] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 559.871610][ T12] Workqueue: netns cleanup_net [ 559.878024][ T12] RIP: 0010:xfrm_state_fini+0x2fa/0x4c0 [ 559.885881][ T12] Code: 48 83 c4 18 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc 8b 3a e8 25 50 c6 f3 4d 39 f7 0f 84 ac fd ff ff e8 c7 80 23 f3 90 <0f> 0b 90 e9 a3 fd ff ff 8b 3a e8 07 50 c6 f3 4d 85 f6 0f 84 03 fe [ 559.906147][ T12] RSP: 0000:ffff88810069fa48 EFLAGS: 00010293 [ 559.913437][ T12] RAX: ffffffff8ed173c9 RBX: ffff8880171c2f80 RCX: ffff88810068c180 [ 559.922211][ T12] RDX: 0000000000000000 RSI: 0000000000000001 RDI: ffff8880171c3d80 [ 559.930370][ T12] RBP: ffff88810069fa88 R08: ffffea000000000f R09: 0000000000000000 [ 559.941122][ T12] R10: ffff8880bba9f910 R11: 0000000000000000 R12: 0000000004ea00f2 [ 559.950473][ T12] R13: ffff8880171c2fa8 R14: ffff8880171c3d80 R15: ffff8881187680d8 [ 559.959024][ T12] FS: 0000000000000000(0000) GS:ffff8881aa79a000(0000) knlGS:0000000000000000 [ 559.969435][ T12] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 559.977098][ T12] CR2: 00000000f7330bd0 CR3: 0000000125f36000 CR4: 00000000003526f0 [ 559.985433][ T12] Call Trace: [ 559.989026][ T12] [ 559.992352][ T12] xfrm_net_exit+0x46/0x90 [ 559.997003][ T12] ? __pfx_xfrm_net_exit+0x10/0x10 [ 560.002657][ T12] ops_undo_list+0x6c5/0xb80 [ 560.007788][ T12] cleanup_net+0xb8f/0x14b0 [ 560.012761][ T12] ? __pfx_cleanup_net+0x10/0x10 [ 560.018202][ T12] process_scheduled_works+0xb91/0x1d80 [ 560.024227][ T12] worker_thread+0xedf/0x1590 [ 560.029299][ T12] kthread+0xd59/0xf00 [ 560.033717][ T12] ? __pfx_worker_thread+0x10/0x10 [ 560.042685][ T12] ? __pfx_kthread+0x10/0x10 [ 560.047513][ T12] ret_from_fork+0x1e3/0x310 [ 560.052514][ T12] ? __pfx_kthread+0x10/0x10 [ 560.057400][ T12] ret_from_fork_asm+0x1a/0x30 [ 560.063178][ T12] [ 560.066375][ T12] ---[ end trace 0000000000000000 ]--- [ 560.196485][ T8998] bond0: (slave macvlan2): Error -98 calling set_mac_address [ 560.427282][ T9004] loop7: detected capacity change from 0 to 1024 [ 560.520723][ T9004] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 560.540545][ T8974] chnl_net:caif_netlink_parms(): no params data found [ 560.983258][ T8892] 8021q: adding VLAN 0 to HW filter on device bond0 [ 561.138848][ T8628] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 561.216995][ T8892] 8021q: adding VLAN 0 to HW filter on device team0 [ 561.321471][ T3810] bridge0: port 1(bridge_slave_0) entered blocking state [ 561.329266][ T3810] bridge0: port 1(bridge_slave_0) entered forwarding state [ 561.443224][ T3810] bridge0: port 2(bridge_slave_1) entered blocking state [ 561.450718][ T3810] bridge0: port 2(bridge_slave_1) entered forwarding state [ 561.797375][ T5813] Bluetooth: hci1: command tx timeout [ 562.070813][ T8974] bridge0: port 1(bridge_slave_0) entered blocking state [ 562.078575][ T8974] bridge0: port 1(bridge_slave_0) entered disabled state [ 562.090111][ T8974] bridge_slave_0: entered allmulticast mode [ 562.099577][ T8974] bridge_slave_0: entered promiscuous mode [ 562.215073][ T8974] bridge0: port 2(bridge_slave_1) entered blocking state [ 562.222841][ T8974] bridge0: port 2(bridge_slave_1) entered disabled state [ 562.230606][ T8974] bridge_slave_1: entered allmulticast mode [ 562.240326][ T8974] bridge_slave_1: entered promiscuous mode [ 562.530426][ T8974] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 562.625391][ T8974] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 562.825780][ T8974] team0: Port device team_slave_0 added [ 562.892424][ T8974] team0: Port device team_slave_1 added [ 563.049300][ T8974] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 563.058095][ T8974] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 563.088460][ T8974] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 563.145083][ T8892] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 563.188204][ T8974] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 563.195630][ T8974] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 563.226436][ T8974] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 563.635040][ T8974] hsr_slave_0: entered promiscuous mode [ 563.646988][ T8974] hsr_slave_1: entered promiscuous mode [ 563.655826][ T8974] debugfs: 'hsr0' already exists in 'hsr' [ 563.661724][ T8974] Cannot create hsr debugfs directory [ 563.875122][ T5813] Bluetooth: hci1: command tx timeout [ 564.684629][ T1855] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 564.868356][ T9067] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1074'. [ 564.922454][ T1855] usb 9-1: Using ep0 maxpacket: 16 [ 564.935408][ T1855] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 564.946959][ T1855] usb 9-1: New USB device found, idVendor=0458, idProduct=0087, bcdDevice= 0.00 [ 564.959660][ T1855] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 564.977656][ T8892] veth0_vlan: entered promiscuous mode [ 565.028421][ T1855] usb 9-1: config 0 descriptor?? [ 565.041053][ T8974] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 565.095655][ T8892] veth1_vlan: entered promiscuous mode [ 565.110109][ T8974] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 565.185335][ T8974] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 565.269165][ T8974] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 565.397192][ T8892] veth0_macvtap: entered promiscuous mode [ 565.457291][ T1855] kye 0003:0458:0087.0001: reserved main item tag 0xd [ 565.464619][ T1855] kye 0003:0458:0087.0001: unexpected long global item [ 565.477661][ T8892] veth1_macvtap: entered promiscuous mode [ 565.536049][ T1855] kye 0003:0458:0087.0001: parse failed [ 565.542689][ T1855] kye 0003:0458:0087.0001: probe with driver kye failed with error -22 [ 565.628863][ T8892] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 565.694418][ T8892] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 565.721099][ T8676] usb 9-1: USB disconnect, device number 2 [ 565.791108][ T3810] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 565.845560][ T3810] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 565.880425][ T3810] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 565.911001][ T3810] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 565.953938][ T5813] Bluetooth: hci1: command tx timeout [ 565.971423][ T9078] netlink: 'syz.9.1077': attribute type 13 has an invalid length. [ 565.983704][ T9078] netlink: 'syz.9.1077': attribute type 17 has an invalid length. [ 566.396969][ T9078] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 566.704173][ T8974] 8021q: adding VLAN 0 to HW filter on device bond0 [ 566.858227][ T8974] 8021q: adding VLAN 0 to HW filter on device team0 [ 566.965155][ T3810] bridge0: port 1(bridge_slave_0) entered blocking state [ 566.972883][ T3810] bridge0: port 1(bridge_slave_0) entered forwarding state [ 566.990697][ T3810] bridge0: port 2(bridge_slave_1) entered blocking state [ 566.998302][ T3810] bridge0: port 2(bridge_slave_1) entered forwarding state [ 567.894692][ T9103] evm: overlay not supported [ 568.738468][ T8974] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 569.175858][ T8974] veth0_vlan: entered promiscuous mode [ 569.265446][ T8974] veth1_vlan: entered promiscuous mode [ 569.495490][ T8974] veth0_macvtap: entered promiscuous mode [ 569.565548][ T8974] veth1_macvtap: entered promiscuous mode [ 569.580462][ T9127] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1092'. [ 569.643012][ T9127] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1092'. [ 569.730107][ T8974] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 569.846266][ T8974] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 569.919574][ T3505] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 569.982321][ T3505] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 570.026180][ T3505] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 570.053928][ T3505] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 570.959654][ T1855] kernel write not supported for file bpf-prog (pid: 1855 comm: kworker/1:2) [ 571.501306][ T4071] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 571.512351][ T4071] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 571.670070][ T3879] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 571.679082][ T3879] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 572.161065][ T9169] netlink: 156 bytes leftover after parsing attributes in process `syz.5.1006'. [ 572.208378][ T9169] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1006'. [ 572.744386][ T30] audit: type=1326 audit(1754674156.334:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9176 comm="syz.9.1107" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf703e539 code=0x0 [ 573.065889][ T9187] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1108'. [ 574.679091][ T3505] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 574.692285][ T3505] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 574.903300][ T57] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 574.911312][ T57] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 574.954063][ T30] audit: type=1804 audit(1754674158.534:35): pid=9223 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.9.1121" name="/newroot/37/file0/bus" dev="ramfs" ino=24393 res=1 errno=0 [ 575.621449][ T9229] netlink: 100 bytes leftover after parsing attributes in process `syz.5.1123'. [ 576.046368][ T9234] sctp: [Deprecated]: syz.1.1125 (pid 9234) Use of int in max_burst socket option. [ 576.046368][ T9234] Use struct sctp_assoc_value instead [ 576.649699][ T9246] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1130'. [ 576.685504][ T9246] tipc: Started in network mode [ 576.690648][ T9246] tipc: Node identity ac14140f, cluster identity 4711 [ 576.698930][ T9246] tipc: New replicast peer: 255.255.255.255 [ 576.707197][ T9246] tipc: Enabled bearer , priority 10 [ 577.121202][ T9256] loop7: detected capacity change from 0 to 16 [ 577.135096][ T9257] bridge0: port 3(syz_tun) entered blocking state [ 577.147589][ T9257] bridge0: port 3(syz_tun) entered disabled state [ 577.157476][ C0] ===================================================== [ 577.158288][ T9257] syz_tun: entered allmulticast mode [ 577.164995][ C0] BUG: KMSAN: uninit-value in pfkey_send_notify+0x291/0xe60 [ 577.173362][ T9257] syz_tun: entered promiscuous mode [ 577.177579][ C0] pfkey_send_notify+0x291/0xe60 [ 577.185001][ T9257] bridge0: port 3(syz_tun) entered blocking state [ 577.187777][ C0] xfrm_timer_handler+0x467/0x1320 [ 577.194658][ T9257] bridge0: port 3(syz_tun) entered forwarding state [ 577.199524][ C0] __hrtimer_run_queues+0x556/0xd80 [ 577.211482][ C0] hrtimer_run_softirq+0x18e/0x760 [ 577.216839][ C0] handle_softirqs+0x166/0x6e0 [ 577.221850][ C0] __irq_exit_rcu+0x66/0x180 [ 577.226574][ C0] irq_exit_rcu+0x12/0x20 [ 577.231149][ C0] sysvec_apic_timer_interrupt+0x84/0x90 [ 577.237178][ C0] asm_sysvec_apic_timer_interrupt+0x1f/0x30 [ 577.243401][ C0] kmsan_metadata_is_contiguous+0xc/0x1e0 [ 577.249273][ C0] kmsan_get_shadow_origin_ptr+0x27/0xb0 [ 577.252115][ T9256] erofs (device loop7): mounted with root inode @ nid 36. [ 577.255305][ C0] __msan_metadata_ptr_for_load_4+0x24/0x40 [ 577.268369][ C0] unwind_done+0x1f/0x60 [ 577.272849][ C0] unwind_next_frame+0x2c/0x350 [ 577.277873][ C0] arch_stack_walk+0x1b1/0x280 [ 577.282858][ C0] stack_trace_save+0xc3/0x100 [ 577.287812][ C0] kmsan_internal_poison_memory+0x4a/0xa0 [ 577.293801][ C0] kmsan_slab_free+0xd0/0x140 [ 577.298637][ C0] kmem_cache_free+0x2a1/0xec0 [ 577.299240][ T30] audit: type=1800 audit(1754674160.874:36): pid=9256 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.1134" name="file1" dev="loop7" ino=86 res=0 errno=0 [ 577.303617][ C0] skb_free_head+0x13c/0x3a0 [ 577.303721][ C0] skb_release_data+0x9f7/0xac0 [ 577.303859][ C0] __kfree_skb+0x6b/0x260 [ 577.338683][ C0] sk_skb_reason_drop+0x126/0x440 [ 577.344083][ C0] ieee80211_iface_work+0x1631/0x1e70 [ 577.349618][ C0] cfg80211_wiphy_work+0x341/0x850 [ 577.355071][ C0] process_scheduled_works+0xb91/0x1d80 [ 577.360848][ C0] worker_thread+0xedf/0x1590 [ 577.365773][ C0] kthread+0xd59/0xf00 [ 577.369978][ C0] ret_from_fork+0x1e3/0x310 [ 577.374771][ C0] ret_from_fork_asm+0x1a/0x30 [ 577.379820][ C0] [ 577.382432][ C0] Uninit was created at: [ 577.386897][ C0] __kvmalloc_node_noprof+0xa36/0x1530 [ 577.392583][ C0] io_alloc_cache_init+0x53/0x150 [ 577.397869][ C0] io_ring_ctx_alloc+0x617/0x14f0 [ 577.403216][ C0] io_uring_create+0x32f/0x1400 [ 577.408252][ C0] __se_sys_io_uring_setup+0x572/0x590 [ 577.413948][ C0] __ia32_sys_io_uring_setup+0x76/0xb0 [ 577.419622][ C0] ia32_sys_call+0x38f0/0x4310 [ 577.424604][ C0] __do_fast_syscall_32+0xb0/0x150 [ 577.429960][ C0] do_fast_syscall_32+0x38/0x80 [ 577.435023][ C0] do_SYSENTER_32+0x1f/0x30 [ 577.439684][ C0] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 577.446249][ C0] [ 577.448745][ C0] CPU: 0 UID: 0 PID: 57 Comm: kworker/u8:3 Tainted: G W 6.16.0-syzkaller-12063-g37816488247d #0 PREEMPT(none) [ 577.462188][ C0] Tainted: [W]=WARN [ 577.466089][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 577.476453][ C0] Workqueue: events_unbound cfg80211_wiphy_work [ 577.482963][ C0] ===================================================== [ 577.490071][ C0] Disabling lock debugging due to kernel taint [ 577.496397][ C0] Kernel panic - not syncing: kmsan.panic set ... [ 577.502932][ C0] CPU: 0 UID: 0 PID: 57 Comm: kworker/u8:3 Tainted: G B W 6.16.0-syzkaller-12063-g37816488247d #0 PREEMPT(none) [ 577.516534][ C0] Tainted: [B]=BAD_PAGE, [W]=WARN [ 577.521647][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 577.531815][ C0] Workqueue: events_unbound cfg80211_wiphy_work [ 577.538246][ C0] Call Trace: [ 577.541617][ C0] [ 577.544540][ C0] __dump_stack+0x26/0x30 [ 577.549125][ C0] dump_stack_lvl+0x53/0x270 [ 577.553895][ C0] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 577.559920][ C0] dump_stack+0x1e/0x25 [ 577.564234][ C0] vpanic+0x361/0xc50 [ 577.568383][ C0] panic+0x15d/0x160 [ 577.572560][ C0] kmsan_report+0x31c/0x320 [ 577.577207][ C0] ? __msan_warning+0x1b/0x30 [ 577.582003][ C0] ? pfkey_send_notify+0x291/0xe60 [ 577.587278][ C0] ? xfrm_timer_handler+0x467/0x1320 [ 577.592881][ C0] ? __hrtimer_run_queues+0x556/0xd80 [ 577.598420][ C0] ? hrtimer_run_softirq+0x18e/0x760 [ 577.603866][ C0] ? handle_softirqs+0x166/0x6e0 [ 577.608926][ C0] ? __irq_exit_rcu+0x66/0x180 [ 577.613810][ C0] ? irq_exit_rcu+0x12/0x20 [ 577.618421][ C0] ? sysvec_apic_timer_interrupt+0x84/0x90 [ 577.624367][ C0] ? asm_sysvec_apic_timer_interrupt+0x1f/0x30 [ 577.630657][ C0] ? kmsan_metadata_is_contiguous+0xc/0x1e0 [ 577.636675][ C0] ? kmsan_get_shadow_origin_ptr+0x27/0xb0 [ 577.642629][ C0] ? __msan_metadata_ptr_for_load_4+0x24/0x40 [ 577.648820][ C0] ? unwind_done+0x1f/0x60 [ 577.653367][ C0] ? unwind_next_frame+0x2c/0x350 [ 577.658619][ C0] ? arch_stack_walk+0x1b1/0x280 [ 577.663698][ C0] ? stack_trace_save+0xc3/0x100 [ 577.668882][ C0] ? kmsan_internal_poison_memory+0x4a/0xa0 [ 577.674993][ C0] ? kmsan_slab_free+0xd0/0x140 [ 577.680244][ C0] ? kmem_cache_free+0x2a1/0xec0 [ 577.685355][ C0] ? skb_free_head+0x13c/0x3a0 [ 577.690677][ C0] ? skb_release_data+0x9f7/0xac0 [ 577.695860][ C0] ? __kfree_skb+0x6b/0x260 [ 577.700526][ C0] ? sk_skb_reason_drop+0x126/0x440 [ 577.705918][ C0] ? ieee80211_iface_work+0x1631/0x1e70 [ 577.711602][ C0] ? cfg80211_wiphy_work+0x341/0x850 [ 577.717064][ C0] ? process_scheduled_works+0xb91/0x1d80 [ 577.722954][ C0] ? worker_thread+0xedf/0x1590 [ 577.727959][ C0] ? kthread+0xd59/0xf00 [ 577.732357][ C0] ? ret_from_fork+0x1e3/0x310 [ 577.737321][ C0] ? ret_from_fork_asm+0x1a/0x30 [ 577.742535][ C0] ? __kfree_skb+0x20b/0x260 [ 577.747378][ C0] ? xfrm_send_state_notify+0x22a5/0x3230 [ 577.753264][ C0] ? kmsan_get_metadata+0xfb/0x160 [ 577.758528][ C0] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 577.764542][ C0] __msan_warning+0x1b/0x30 [ 577.769190][ C0] pfkey_send_notify+0x291/0xe60 [ 577.774301][ C0] ? kmsan_get_metadata+0xfb/0x160 [ 577.779568][ C0] ? __pfx_pfkey_send_notify+0x10/0x10 [ 577.785187][ C0] xfrm_timer_handler+0x467/0x1320 [ 577.790626][ C0] ? kmsan_internal_set_shadow_origin+0x79/0x110 [ 577.797173][ C0] ? __pfx_xfrm_timer_handler+0x10/0x10 [ 577.802877][ C0] __hrtimer_run_queues+0x556/0xd80 [ 577.808386][ C0] hrtimer_run_softirq+0x18e/0x760 [ 577.813649][ C0] ? kmsan_get_metadata+0xfb/0x160 [ 577.818894][ C0] ? kmsan_internal_set_shadow_origin+0x79/0x110 [ 577.825526][ C0] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 577.831489][ C0] ? __pfx_hrtimer_run_softirq+0x10/0x10 [ 577.837275][ C0] handle_softirqs+0x166/0x6e0 [ 577.842192][ C0] __irq_exit_rcu+0x66/0x180 [ 577.846994][ C0] irq_exit_rcu+0x12/0x20 [ 577.851434][ C0] sysvec_apic_timer_interrupt+0x84/0x90 [ 577.857200][ C0] [ 577.860209][ C0] [ 577.863222][ C0] asm_sysvec_apic_timer_interrupt+0x1f/0x30 [ 577.869386][ C0] RIP: 0010:kmsan_metadata_is_contiguous+0xc/0x1e0 [ 577.876026][ C0] Code: 10 00 0f 84 80 fe ff ff 90 0f 0b 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 66 0f 1f 00 55 48 89 e5 41 57 41 56 <41> 55 41 54 53 48 83 ec 28 41 b5 01 48 85 f6 0f 84 ea 00 00 00 49 [ 577.895951][ C0] RSP: 0000:ffff888104037408 EFLAGS: 00000202 [ 577.902176][ C0] RAX: ffff88810402ac20 RBX: 0000000000000000 RCX: 0000000000000000 [ 577.910260][ C0] RDX: 0000000000000000 RSI: 0000000000000004 RDI: ffff8881040374d8 [ 577.918351][ C0] RBP: ffff888104037418 R08: ffffea000000000f R09: ffff888104037570 [ 577.926451][ C0] R10: ffff888104038000 R11: ffffffff81d43b20 R12: ffff8881040374d8 [ 577.934635][ C0] R13: 0000000000000000 R14: ffff8881040374d8 R15: 0000000000000001 [ 577.942724][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 577.949087][ C0] kmsan_get_shadow_origin_ptr+0x27/0xb0 [ 577.955137][ C0] __msan_metadata_ptr_for_load_4+0x24/0x40 [ 577.961177][ C0] unwind_done+0x1f/0x60 [ 577.965571][ C0] unwind_next_frame+0x2c/0x350 [ 577.970571][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 577.976895][ C0] arch_stack_walk+0x1b1/0x280 [ 577.981807][ C0] ? stack_trace_save+0xc3/0x100 [ 577.986925][ C0] stack_trace_save+0xc3/0x100 [ 577.991869][ C0] kmsan_internal_poison_memory+0x4a/0xa0 [ 577.997875][ C0] ? process_scheduled_works+0xb91/0x1d80 [ 578.004030][ C0] ? kthread+0xd59/0xf00 [ 578.008404][ C0] ? ret_from_fork+0x1e3/0x310 [ 578.013293][ C0] ? ret_from_fork_asm+0x1a/0x30 [ 578.018397][ C0] ? ieee80211_ibss_process_chanswitch+0x254/0x14a0 [ 578.025271][ C0] ? ieee80211_ibss_process_chanswitch+0x2d2/0x14a0 [ 578.032055][ C0] ? kmsan_get_metadata+0xfb/0x160 [ 578.037398][ C0] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 578.043350][ C0] ? kmsan_get_metadata+0xfb/0x160 [ 578.048597][ C0] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 578.054576][ C0] ? kmem_cache_free+0x191/0xec0 [ 578.059703][ C0] ? filter_irq_stacks+0x49/0x190 [ 578.065071][ C0] ? stack_depot_save_flags+0x35/0x7b0 [ 578.070710][ C0] ? kmsan_get_metadata+0xfb/0x160 [ 578.076067][ C0] ? kmsan_internal_set_shadow_origin+0x79/0x110 [ 578.082603][ C0] ? kmsan_get_metadata+0xfb/0x160 [ 578.087953][ C0] ? kmsan_get_shadow_origin_ptr+0x35/0xb0 [ 578.093932][ C0] kmsan_slab_free+0xd0/0x140 [ 578.098955][ C0] kmem_cache_free+0x2a1/0xec0 [ 578.103961][ C0] ? skb_free_head+0x13c/0x3a0 [ 578.109000][ C0] skb_free_head+0x13c/0x3a0 [ 578.113760][ C0] skb_release_data+0x9f7/0xac0 [ 578.118849][ C0] ? ieee80211_iface_work+0x1631/0x1e70 [ 578.124646][ C0] __kfree_skb+0x6b/0x260 [ 578.129153][ C0] ? ieee80211_iface_work+0x1631/0x1e70 [ 578.134831][ C0] sk_skb_reason_drop+0x126/0x440 [ 578.140047][ C0] ieee80211_iface_work+0x1631/0x1e70 [ 578.145663][ C0] ? __pfx_ieee80211_iface_work+0x10/0x10 [ 578.151590][ C0] cfg80211_wiphy_work+0x341/0x850 [ 578.156870][ C0] ? __pfx_cfg80211_wiphy_work+0x10/0x10 [ 578.162670][ C0] process_scheduled_works+0xb91/0x1d80 [ 578.168470][ C0] worker_thread+0xedf/0x1590 [ 578.173369][ C0] kthread+0xd59/0xf00 [ 578.177563][ C0] ? __pfx_worker_thread+0x10/0x10 [ 578.182946][ C0] ? __pfx_kthread+0x10/0x10 [ 578.187743][ C0] ret_from_fork+0x1e3/0x310 [ 578.192457][ C0] ? __pfx_kthread+0x10/0x10 [ 578.197263][ C0] ret_from_fork_asm+0x1a/0x30 [ 578.202217][ C0] [ 578.205838][ C0] Kernel Offset: disabled [ 578.210230][ C0] Rebooting in 86400 seconds..