last executing test programs: 2.229515268s ago: executing program 1 (id=304): r0 = open(&(0x7f0000000000)='./cgroup.cpu/cpuset.cpus\x00', 0x1a1342, 0x0) write$cgroup_subtree(r0, &(0x7f0000000140)=ANY=[@ANYBLOB='1-6:5'], 0x31) 2.168543205s ago: executing program 1 (id=307): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="440000001000010029bd7000ffdbdf2500000000", @ANYRES32=r2, @ANYBLOB="100804002010000024001280110001006272696467655f736c618c65000000000c000580050019"], 0x44}, 0x1, 0x0, 0x0, 0x404c1}, 0x40040d4) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0x7, &(0x7f0000000080)={0x1, 0xd, 0x8563, 0x5}, 0x10) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x200040d4}, 0x24044040) 2.13008783s ago: executing program 1 (id=312): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x482, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0x200, 0x15, "00000000000700000000fffe00"}) r2 = syz_open_pts(r1, 0x0) ioctl$TIOCGPTPEER(r2, 0x5441, 0x3) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() connect$can_bcm(0xffffffffffffffff, &(0x7f0000000000), 0x10) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close_range(r0, r4, 0x0) 1.121459597s ago: executing program 1 (id=349): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000000040)) openat(0xffffffffffffff9c, 0x0, 0x125c81, 0x36) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000ac0)=ANY=[@ANYBLOB="b700000081000000bfa30000000000000703000002feffff720a00fef8ffffff71a4f0ff000000002d030000000000001d400500000000004704000001ed000072030000030000001d44000000000000db0a00fe000000007303000000000000b5000000000000009500000000000000023bc065b58111c6dfa041b63af4a3912435f1a864a710aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c50000000190f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fee5bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e654400e2438ec649dc74a28610643a98d9ec21ead2ed51b104d4d91af25b845d8a7925c3109b151b8b9f75dd08d123deda88c658d42ecbf28bf7076c15b463bebc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616236fd9aa58f2477184b6a89adaf17b0a6041bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe722631cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10746443d6438e959532e0617d419c6bc6ea9f2bca4464f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b989b40000000000000da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d71cde2c140952f9a0f0bc6980fe78683ac5c0c31032599ddd71063be9261b2e1aab1675b34a22048ef8c126aeef5f510a8f1aded94a129e4aec6f8d9ab06faffc3a15d96c2ea3e2e04cfe031b2875353193f82ade69d0540059fe6c7fe7cd8697502c7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2160242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44028d6112a0c2d21b2dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0c1e02b6e4114f244a9bf93f04bf072f0861f7580e69db384ac7eeedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d1fe1399562ba6824840bd2951680f6f2f9a6a8346962a350845ffa0d829e4f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d64a532869d701723fedcbada1ee7baa5b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ceb201ddeb6dc5f6a903792283c42efc54fa84323afc4c10eff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538d6ee6ba65893ff1f908ba7554ba583fef3ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738012e4fee18a22da19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f62e96753b639a924599c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c2571f983e9673560000000000000000005a7b57f03ca91a01ba2e30ca99e8ebc15ecb4d91675767999d146aef7799738b292fd640dfef6b04d086f737a159d7e0c6e4d81ad64a8bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6de4e7c0660d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d120617d12d91db2633d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e1661261173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c3d4bbec8d722824c0ebca8db1ea4a003d2fbdc1f9be78537756ab5bbe4fe9af5d785d0128171c90d9900ce2532b0f9d01c4b45294fbba468df3e1b393cb4e62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd849904568916694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee077515d0a8811922929e085392ab3d1311b8243266d87047f601fa88a0da36b9f302e8262395174328f2482d14008de83070744f143fdec90ba5a82668d5fac114c13955ad6dca5db2231d8ba14c54c47ed04a4b4ace17e357e1d6432399f87a7a14245bbd796a09313b247b95d37ff40a404bdad74bd20000000000000000000099fef7cd7af3ce64a92f95d89d125b1e641240d7e5e27a3d1f7684448c3e3822d617e205061298b939a191be4b48e169bde2cae3accc5bd40a2968b59c93d35f8e42366fdef9a2abae1cf01ce68abff28861aac8302d268569dd42e194e330c7aaa54ebbcefd23f21ce8153b9926e12e925cb56119df72c7533a48d028ad0c74e2a9478fa3be18a1a2b65079cc1c7bc46dd12305a1ae9dd19e8d525206c0a728cfd42193abe8130bc01a2d69841f3d7799ac04bdc590bb1c89b9c695f163e57343c9bfb59909433c9001c5f8b23e38534a538fc933cac6c2a92d038df638a0f226df9fb857bd414c2cd69985e8053e3dfa41614d7c74d04d8c2471041d17c730fad28395f8d4688898cd58b9d600c851626529bb58aa364b55e73f053450665e7b94ad1012fd7a8139166fd5e59c84f4ab279b1b99c028db4cb9680c8035f967db18de738844da7e260a830c1ffa49f5af3c15423a0e315acb82a3e89218cb314e68fda4d94aa1d815babc13b9fd336d205c5913ef67"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) 1.121356222s ago: executing program 1 (id=350): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(0x0, 0x0, &(0x7f0000000040)='debugfs\x00', 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./debug/dri/0/name\x00', 0x0, 0x0) read(r0, &(0x7f0000000100)=""/256, 0x100) 1.091695239s ago: executing program 1 (id=352): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) splice(r0, 0x0, r2, 0x0, 0x6, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) bind$packet(0xffffffffffffffff, 0x0, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, 0x0, 0x0) timer_create(0x6, 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r3, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) splice(r1, 0x0, r4, 0x0, 0x6, 0xc) vmsplice(r2, &(0x7f0000000200)=[{&(0x7f0000001740)='\x00', 0x1}], 0x1, 0x6) 638.50019ms ago: executing program 4 (id=369): setresuid(0x0, 0xee00, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c40)={0x8, 0x3, &(0x7f0000001300)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000001200)='syzkaller\x00'}, 0x80) 529.559812ms ago: executing program 3 (id=372): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x12, 0x7, 0x8, 0x8}, 0x50) 529.394192ms ago: executing program 4 (id=373): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x2, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x80000) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f0000000440)=[@request_death={0x400c6313}], 0xffffffffffffff9a, 0x1000000, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000640)={0x8, 0x0, &(0x7f0000000000)=[@decrefs={0x400c6314}], 0x0, 0x0, 0x0}) 512.218361ms ago: executing program 3 (id=374): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)={0x2, 0x6, 0x0, 0x0, 0x2, 0x0, 0x70bd2c, 0x3}, 0x10}}, 0x0) 502.618276ms ago: executing program 4 (id=375): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(0x0, 0x0, &(0x7f0000000040)='debugfs\x00', 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./debug/dri/0/name\x00', 0x0, 0x0) read(r0, &(0x7f0000000100)=""/256, 0x100) 491.577441ms ago: executing program 2 (id=376): r0 = socket$inet_tcp(0x2, 0x1, 0x0) unshare(0x22020400) fcntl$setstatus(r0, 0x4, 0x800) 429.661337ms ago: executing program 2 (id=377): syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000180)={[{@acl}, {@noblock_validity}, {@bh}, {@max_batch_time={'max_batch_time', 0x3d, 0x8c9}}, {@inlinecrypt}, {@errors_remount}]}, 0x7, 0x60a, &(0x7f00000027c0)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x108) socket$inet6(0xa, 0x2, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0x40802, 0x41) getdents64(r0, 0x0, 0x0) 429.501246ms ago: executing program 3 (id=378): r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000040)={0x42}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000080)={0x42, 0xfffffbfc, 0x2}, 0x2e) sendmsg$tipc(r0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000}, 0x4000001) dup3(r0, r1, 0x0) 428.759896ms ago: executing program 4 (id=379): openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder-control\x00', 0x800, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) 409.634917ms ago: executing program 4 (id=380): r0 = add_key$keyring(&(0x7f0000000680), &(0x7f0000000000)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000000c0)={'fscrypt:', @desc4}, &(0x7f0000000100)={0x0, "00379bce195566778899aabbccddfcff00112233445566778899aabbccddeeff000011688e0346d524b29db701e5ddeeff8000", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000001c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x1, 0x30, 0x66, 0x30, 0x30, 0x30, 0x33, 0x30, 0x30, 0x30, 0x35, 0x64, 0x65]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x20}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000200)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x34]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) r1 = add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f00000005c0)={'fscrypt:', @auto=[0x37, 0x36, 0x31, 0x37, 0x66, 0x36, 0x30, 0x61, 0x122e50c9cecbd0b3, 0x37, 0x39, 0x32, 0x66, 0x30, 0x65, 0x36]}, &(0x7f0000000780)={0x0, "1b699af42db82c6710f15d09fa0ede2b461f72d024151675e76fedfc6ce85406fac0c4833efb1d72293c4e60c0cadb646c435e077ecbb2e7968117a70a9a1090", 0x2d}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000240)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x35]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000280)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x31, 0x30, 0x30, 0x30, 0x30, 0x36]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000002c0)={'fscrypt:', @auto=[0x30, 0x37, 0x31, 0x35, 0x62, 0x65, 0x34, 0x30, 0x30, 0x30, 0x0, 0x38, 0x30, 0x30, 0x30, 0x37]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000300)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x38, 0x30, 0x66, 0x30, 0x30, 0x30, 0x30, 0x0, 0x38]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000340)={'fscrypt:', @auto=[0x30, 0x31, 0x30, 0x63, 0x34, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x66, 0x36, 0x30, 0x39]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$keyring(&(0x7f0000000700), &(0x7f0000000740)={'syz', 0x0}, 0x0, 0x0, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000003c0)={'fscrypt:', @auto=[0x30, 0x30, 0x33, 0x39, 0x61, 0x30, 0x30, 0x32, 0x38, 0x30, 0x30, 0x9, 0x30, 0x30, 0x37, 0x62]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000400)={'fscrypt:', @desc3}, &(0x7f0000000100)={0x0, "00112233444d66778899aabbccddefff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff0011223344556677889c69bbccddeeff", 0x40}, 0x48, r0) add_key$user(&(0x7f0000000180), &(0x7f0000000480)={'syz', 0x3}, &(0x7f0000000800)="b974", 0x2, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000440)={'fscrypt:', @auto=[0x30, 0x30, 0x65, 0x30, 0x30, 0x30, 0x30, 0x31, 0x30, 0x62, 0x66, 0x30, 0x30, 0x30, 0x63, 0x62]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x41}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000004c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x32, 0x66]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000540)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x31, 0x31]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) keyctl$unlink(0x9, r1, r0) 385.530536ms ago: executing program 4 (id=381): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@newlink={0x40, 0x10, 0xc09, 0x0, 0x25dfdbfd, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_ERSPAN_DIR={0x5, 0x17, 0x2}]}}}]}, 0x40}}, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000000)=@security={'security\x00', 0x4, 0x4, 0x480, 0xffffffff, 0x0, 0x2a8, 0x1d0, 0xffffffff, 0xffffffff, 0x3b0, 0x3b0, 0x3b0, 0xffffffff, 0x7fffffe, 0x0, {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @remote}, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, [0x0, 0xff000000, 0xffffffff, 0xffffffff], [0xff000000, 0xff000000, 0xffffff00, 0xff], 'dvmrp0\x00', 'vlan0\x00', {0xff}, {}, 0x2f, 0xb, 0x3, 0x18}, 0x0, 0xa8, 0x1d0}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x2, 0x2, 'system_u:object_r:lib_t:s0\x00'}}}, {{@uncond, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30}}, {{@ipv6={@private1, @local, [], [0x0, 0xffffff00], 'geneve1\x00', 'macvlan0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xa8, 0x108}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@broadcast, [0xffffffff, 0xffffffff, 0xff, 0xff000000], 0x4e24, 0x4e21, 0x4e20, 0x4e24, 0x5, 0x9, 0x8, 0x1000, 0xb7a}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4e0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0xa) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000300)=@abs, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x50, 0x1, 0x1, 0x201, 0x0, 0x0, {0xa, 0x0, 0x2}, [@CTA_SYNPROXY={0x34, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x9}, @CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0xfff}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0xe182}, @CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x2de}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x3}, @CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x98}]}, @CTA_ZONE={0x6, 0x12, 0x1, 0x0, 0x1}]}, 0x50}, 0x1, 0x0, 0x0, 0x40040}, 0x40880) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[], 0xec}}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_ADDRFORM(r3, 0x29, 0x1, &(0x7f0000000000), 0x4) bpf$PROG_BIND_MAP(0xa, &(0x7f00000000c0), 0xc) 270.432115ms ago: executing program 3 (id=382): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000200)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000000)={0x0, 0xcc}, 0x8) bind$inet6(0xffffffffffffffff, &(0x7f00000002c0)={0xa, 0x4e23, 0xfffffffc, @loopback}, 0x1c) listen(0xffffffffffffffff, 0x4) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000000)={0x0, 0x4}, 0x8) sendmmsg$inet6(r0, &(0x7f00000003c0)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x280020}, 0x1c, &(0x7f00000000c0)=[{&(0x7f0000000540)='\x00', 0x1}], 0x1}}], 0x1, 0x20008050) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000340)={0x0, 0x1}, 0x8) 270.249212ms ago: executing program 2 (id=383): ioctl$vim2m_VIDIOC_STREAMOFF(0xffffffffffffffff, 0x40045612, &(0x7f0000000080)=0x2) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="440000001000010029bd7000ffdbdf2500000000", @ANYRES32, @ANYBLOB="100804002010000024001280110001006272696467655f736c618c65000000000c000580050019"], 0x44}, 0x1, 0x0, 0x0, 0x404c1}, 0x40040d4) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0x7, &(0x7f0000000080)={0x1, 0xd, 0x8563, 0x5}, 0x10) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x200040d4}, 0x24044040) 269.989329ms ago: executing program 3 (id=384): r0 = socket$igmp(0x2, 0x3, 0x2) getsockopt$inet_mreqn(r0, 0x0, 0x20, &(0x7f0000000700)={@rand_addr, @multicast2}, 0x0) syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='mnt\x00', 0x4, &(0x7f0000000000), 0x0, 0x236, &(0x7f0000000300)="$eJzs3TFoM2UcBvDnLomf/b4gVRdBUEFEtFDqJrjURaEgpYgIKlREXJRWqC1urZOLg84qnVyKuFkdpUtxUQSnqh3qImhxsDjoELlcK9VGFFNz8t3vB5fcJe97//e4e95kOS5Aa00nmU/SSTKTpJekON/grnqZPt3cntpfTgaDx38shu3q7dpZv2tJtpI8mGSvLPJiN9nYffro54NH731jvXfPe7tPTU30IE8dHx0+dvLu4usfLjyw8fmX3y8WmU//D8d1+YoRn3WL5Jb/otj/RNFtegT8E0uvfvBVlftbk9w9zH8vZeqT9+baDXu93P/OX/V964cvbp/kWIHLNxj0qt/ArQHQOmWSfopyNkm9Xpazs/V/+K87V8uXVtdemXlhdX3l+aZnKuCy9JPDRz6+8tG1P+X/u06df+D6VeX/iaWdb6r1k07TowEmqcr/zLOb90X+oXXkH9pL/qG95B/aS/6hveQf2kv+ob3kH9pL/qG95B/a63z+AYB2GVxp+g5koClNzz8AAAAAAAAAAAAAAAAAAMBF21P7y2fLpGp++nZy/HCS7qj6neHziJMbh69XfyqqZr8r6m5jeebOMXcwpvcbvvv6pm+brf/ZHc3W31xJtl5LMtftXrz+itPr79+7+W++7z03ZoExPfRks/V/3Wm2/sJB8kk1/8yNmn/K3DZ8Hz3/9KvzN2b9l38ZcwcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABMzG8BAAD//8n0bSk=") r1 = openat(0xffffffffffffff9c, &(0x7f0000000540)='mnt\x00', 0x0, 0x8f) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r1, 0xc0506617, &(0x7f0000000580)={@id={0x2, 0x0, @a}, 0x40, 0x0, '\x00', @a}) mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='mnt/encrypted_dir\x00', 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000680)='mnt/encrypted_dir\x00', 0x800, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r2, 0x800c6613, &(0x7f00000006c0)=@v2={0x2, @aes256, 0x0, '\x00', @a}) chdir(&(0x7f0000000080)='mnt/encrypted_dir\x00') syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x802, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY_ALL_USERS(r2, 0xc0406619, &(0x7f0000000140)={@id={0x2, 0x0, @a}}) 245.614399ms ago: executing program 0 (id=385): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x2, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x80000) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f0000000440)=[@request_death={0x400c6313}], 0xffffffffffffff9a, 0x1000000, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000640)={0x8, 0x0, &(0x7f0000000000)=[@decrefs={0x400c6314}], 0x0, 0x0, 0x0}) 196.725351ms ago: executing program 0 (id=386): syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f0000000300)={[{@data_err_ignore}, {@noload}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5a}}, {@errors_remount}, {@grpid}, {@noquota}, {@min_batch_time={'min_batch_time', 0x3d, 0xe1}}, {@jqfmt_vfsold}]}, 0x1, 0x47a, &(0x7f00000006c0)="$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") bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x9, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x94) r0 = socket$inet6(0xa, 0x3, 0x3c) setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x39, &(0x7f0000000480)=ANY=[@ANYBLOB="00020201"], 0x18) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000100)=',', 0x5dc}], 0x1) 188.573212ms ago: executing program 2 (id=387): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000300)={'vxcan1\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000340)={0x1d, r2, 0x0, {0x2, 0xff, 0x6}, 0xfe}, 0x18) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmmsg(r1, &(0x7f000000a540)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000005c0)='\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x9}], 0x1}}], 0x400019e, 0x24044005) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@newtfilter={0x24, 0x11, 0x1, 0x70bd2a, 0x25dfdbfc, {0x0, 0x0, 0x74, r2, {0x0, 0xc}, {0xfff1, 0xffff}, {0x2, 0x8}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x4008050) 133.668249ms ago: executing program 3 (id=388): futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) socket$nl_route(0x10, 0x3, 0x0) memfd_create(0x0, 0x2) pipe2(0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="02000000040000000800"], 0xe) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x2, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000110000007b8bf8ff00000000b70800000f0000007b8af0ff00000000bfa10000000000000701000000feffffbfa40000000000000704000000feffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70500000800000085000000ae00000095"], &(0x7f0000000380)='syzkaller\x00', 0x6, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r4 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000140)=ANY=[@ANYBLOB="440000001300a7cc4a372eaf541d002007000000", @ANYRES32=r3, @ANYBLOB="00000000100000001c001a80080002802d07420008000200", @ANYBLOB="358749"], 0x44}, 0x1, 0x0, 0x0, 0x50}, 0x0) write(r0, &(0x7f0000000000)="2400000011005f0414f9f40700090400810000000d0000000000000008000f0001000000", 0x24) 106.386754ms ago: executing program 2 (id=389): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./debug\x00', 0x0, 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./debug/dri/0/name\x00', 0x0, 0x0) read(r0, &(0x7f0000000100)=""/256, 0x100) 98.031345ms ago: executing program 0 (id=390): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r0, &(0x7f0000000280), 0x0, 0x41, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000380)="0043dd", 0x3, 0x2c010015, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000340)=[@timestamp, @window={0x3, 0x6, 0x7}, @mss={0x2, 0x7}, @window={0x3, 0x0, 0x4}, @window={0x3, 0x8, 0x6}, @timestamp, @window={0x3, 0xfffe}, @sack_perm], 0x2000000000000061) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r0, &(0x7f00000004c0)='<', 0x381, 0x805, 0x0, 0x0) 47.561202ms ago: executing program 0 (id=391): r0 = add_key$keyring(&(0x7f0000000680), &(0x7f0000000000)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000000c0)={'fscrypt:', @desc4}, &(0x7f0000000100)={0x0, "00379bce195566778899aabbccddfcff00112233445566778899aabbccddeeff000011688e0346d524b29db701e5ddeeff8000", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000001c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x1, 0x30, 0x66, 0x30, 0x30, 0x30, 0x33, 0x30, 0x30, 0x30, 0x35, 0x64, 0x65]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x20}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000200)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x34]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) r1 = add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f00000005c0)={'fscrypt:', @auto=[0x37, 0x36, 0x31, 0x37, 0x66, 0x36, 0x30, 0x61, 0x122e50c9cecbd0b3, 0x37, 0x39, 0x32, 0x66, 0x30, 0x65, 0x36]}, &(0x7f0000000780)={0x0, "1b699af42db82c6710f15d09fa0ede2b461f72d024151675e76fedfc6ce85406fac0c4833efb1d72293c4e60c0cadb646c435e077ecbb2e7968117a70a9a1090", 0x2d}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000240)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x35]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000280)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x31, 0x30, 0x30, 0x30, 0x30, 0x36]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000002c0)={'fscrypt:', @auto=[0x30, 0x37, 0x31, 0x35, 0x62, 0x65, 0x34, 0x30, 0x30, 0x30, 0x0, 0x38, 0x30, 0x30, 0x30, 0x37]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000300)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x38, 0x30, 0x66, 0x30, 0x30, 0x30, 0x30, 0x0, 0x38]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000340)={'fscrypt:', @auto=[0x30, 0x31, 0x30, 0x63, 0x34, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x66, 0x36, 0x30, 0x39]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$keyring(&(0x7f0000000700), &(0x7f0000000740)={'syz', 0x0}, 0x0, 0x0, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000003c0)={'fscrypt:', @auto=[0x30, 0x30, 0x33, 0x39, 0x61, 0x30, 0x30, 0x32, 0x38, 0x30, 0x30, 0x9, 0x30, 0x30, 0x37, 0x62]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000400)={'fscrypt:', @desc3}, &(0x7f0000000100)={0x0, "00112233444d66778899aabbccddefff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff0011223344556677889c69bbccddeeff", 0x40}, 0x48, r0) add_key$user(&(0x7f0000000180), &(0x7f0000000480)={'syz', 0x3}, &(0x7f0000000800)="b974", 0x2, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000440)={'fscrypt:', @auto=[0x30, 0x30, 0x65, 0x30, 0x30, 0x30, 0x30, 0x31, 0x30, 0x62, 0x66, 0x30, 0x30, 0x30, 0x63, 0x62]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x41}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000004c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x32, 0x66]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000540)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x31, 0x31]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) keyctl$unlink(0x9, r1, r0) 27.38789ms ago: executing program 2 (id=392): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000080)=@req={0x800000, 0x1, 0x1000, 0x800}, 0x10) mmap(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x3, 0x11, r0, 0x0) pipe2(&(0x7f0000000200)={0x0, 0x0}, 0x0) write(r2, &(0x7f0000000210)="01", 0x1) read(r1, &(0x7f0000800000)=""/8, 0x8) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_wireguard(r3, 0x8933, &(0x7f0000000280)={'wg0\x00', 0x0}) sendto$packet(r0, 0x0, 0x0, 0x4000010, &(0x7f0000000000)={0x11, 0x10, r4, 0x1, 0x0, 0x0, @multicast}, 0x14) 26.857038ms ago: executing program 0 (id=393): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000005ec0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY(0xffffffffffffffff, 0x0, 0x4000001) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000005f00)={'wlan0\x00', 0x0}) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000006000)={0x0, 0x0, &(0x7f0000005fc0)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002dbd0600ffdbdb252100000008000300", @ANYRES32=r3, @ANYBLOB="0600eb00000800000400ec000a00060008021100000100000600f70000ff000008009e"], 0x44}}, 0x0) 0s ago: executing program 0 (id=394): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, 0x0, 0x14) socket$key(0xf, 0x3, 0x2) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.226' (ED25519) to the list of known hosts. [ 29.281210][ T4698] cgroup: Unknown subsys name 'net' [ 29.380722][ T4698] cgroup: Unknown subsys name 'cpuset' [ 29.382945][ T4698] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 29.553102][ T4698] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k SS [ 30.366114][ T4725] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 30.366276][ T4726] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 30.367246][ T4726] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 30.367445][ T4726] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 30.367784][ T4726] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 30.368407][ T4726] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 30.369047][ T4717] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 30.369504][ T4717] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 30.369669][ T4717] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 30.369971][ T4717] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 30.370178][ T4717] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 30.370645][ T4712] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 30.371096][ T4712] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 30.371355][ T4712] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 30.371566][ T4712] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 30.371874][ T4712] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 30.372084][ T4712] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 30.385371][ T4712] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 30.385668][ T4712] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 30.387190][ T4712] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 30.387253][ T4712] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 30.395716][ T50] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 30.397289][ T4712] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 30.402474][ T4717] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 30.404432][ T4717] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 30.765324][ T4711] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.767279][ T4711] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.767421][ T4711] bridge_slave_0: entered allmulticast mode [ 30.768107][ T4711] bridge_slave_0: entered promiscuous mode [ 30.783441][ T4711] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.783490][ T4711] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.783843][ T4711] bridge_slave_1: entered allmulticast mode [ 30.784520][ T4711] bridge_slave_1: entered promiscuous mode [ 30.819015][ T4711] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.825532][ T4715] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.825603][ T4715] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.825670][ T4715] bridge_slave_0: entered allmulticast mode [ 30.826155][ T4715] bridge_slave_0: entered promiscuous mode [ 30.827384][ T4715] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.827408][ T4715] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.827498][ T4715] bridge_slave_1: entered allmulticast mode [ 30.827970][ T4715] bridge_slave_1: entered promiscuous mode [ 30.830158][ T4711] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.856784][ T4718] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.856864][ T4718] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.856922][ T4718] bridge_slave_0: entered allmulticast mode [ 30.857365][ T4718] bridge_slave_0: entered promiscuous mode [ 30.858913][ T4718] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.858962][ T4718] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.859016][ T4718] bridge_slave_1: entered allmulticast mode [ 30.860079][ T4718] bridge_slave_1: entered promiscuous mode [ 30.867897][ T4715] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.869011][ T4715] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.879082][ T4710] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.879129][ T4710] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.879245][ T4710] bridge_slave_0: entered allmulticast mode [ 30.883376][ T4710] bridge_slave_0: entered promiscuous mode [ 30.887987][ T4710] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.889356][ T4710] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.889452][ T4710] bridge_slave_1: entered allmulticast mode [ 30.889881][ T4710] bridge_slave_1: entered promiscuous mode [ 30.891524][ T4711] team0: Port device team_slave_0 added [ 30.892450][ T4711] team0: Port device team_slave_1 added [ 30.914570][ T4718] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.915768][ T4718] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.919148][ T4715] team0: Port device team_slave_0 added [ 30.924412][ T4710] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.924771][ T4711] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.924778][ T4711] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.924793][ T4711] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.925852][ T4711] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.925860][ T4711] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.925872][ T4711] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.941360][ T4718] team0: Port device team_slave_0 added [ 30.942206][ T4718] team0: Port device team_slave_1 added [ 30.942821][ T4715] team0: Port device team_slave_1 added [ 30.950369][ T4710] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.959745][ T4710] team0: Port device team_slave_0 added [ 30.959848][ T4719] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.959913][ T4719] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.959970][ T4719] bridge_slave_0: entered allmulticast mode [ 30.960403][ T4719] bridge_slave_0: entered promiscuous mode [ 30.961385][ T4719] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.961406][ T4719] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.961465][ T4719] bridge_slave_1: entered allmulticast mode [ 30.961889][ T4719] bridge_slave_1: entered promiscuous mode [ 30.972399][ T4715] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.973615][ T4715] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.978149][ T4715] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.980000][ T4715] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.980008][ T4715] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.980023][ T4715] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.983982][ T4711] hsr_slave_0: entered promiscuous mode [ 30.984316][ T4711] hsr_slave_1: entered promiscuous mode [ 30.992666][ T4710] team0: Port device team_slave_1 added [ 31.002905][ T4719] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 31.008508][ T4715] hsr_slave_0: entered promiscuous mode [ 31.010334][ T4715] hsr_slave_1: entered promiscuous mode [ 31.010593][ T4715] debugfs: 'hsr0' already exists in 'hsr' [ 31.010631][ T4715] Cannot create hsr debugfs directory [ 31.010958][ T4718] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 31.010965][ T4718] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 31.010980][ T4718] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 31.011852][ T4718] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 31.011859][ T4718] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 31.011869][ T4718] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 31.012280][ T4710] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 31.012286][ T4710] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 31.012300][ T4710] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 31.012972][ T4710] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 31.012981][ T4710] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 31.012996][ T4710] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 31.014420][ T4719] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 31.056190][ T4719] team0: Port device team_slave_0 added [ 31.057324][ T4719] team0: Port device team_slave_1 added [ 31.062131][ T4718] hsr_slave_0: entered promiscuous mode [ 31.062472][ T4718] hsr_slave_1: entered promiscuous mode [ 31.062676][ T4718] debugfs: 'hsr0' already exists in 'hsr' [ 31.062686][ T4718] Cannot create hsr debugfs directory [ 31.064582][ T4710] hsr_slave_0: entered promiscuous mode [ 31.064888][ T4710] hsr_slave_1: entered promiscuous mode [ 31.065104][ T4710] debugfs: 'hsr0' already exists in 'hsr' [ 31.065113][ T4710] Cannot create hsr debugfs directory [ 31.101233][ T4719] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 31.101261][ T4719] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 31.101274][ T4719] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 31.101849][ T4719] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 31.101856][ T4719] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 31.101871][ T4719] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 31.145277][ T4719] hsr_slave_0: entered promiscuous mode [ 31.145649][ T4719] hsr_slave_1: entered promiscuous mode [ 31.145840][ T4719] debugfs: 'hsr0' already exists in 'hsr' [ 31.145850][ T4719] Cannot create hsr debugfs directory [ 31.222176][ T4711] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 31.225640][ T4711] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 31.229149][ T4711] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 31.232073][ T4711] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 31.240604][ T4711] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 31.243218][ T4711] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 31.243924][ T4711] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 31.245337][ T4711] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 31.258285][ T4718] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 31.262565][ T4718] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 31.264315][ T4718] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 31.266910][ T4718] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 31.268541][ T4718] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 31.271077][ T4718] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 31.273961][ T4711] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.274019][ T4711] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.274172][ T4711] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.274207][ T4711] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.279783][ T4718] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 31.282043][ T4718] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 31.309056][ T4718] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.309105][ T4718] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.309177][ T4718] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.309248][ T4718] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.315857][ T4710] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 31.318362][ T4710] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 31.320002][ T4710] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 31.322499][ T4710] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 31.323919][ T4710] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 31.326100][ T4710] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 31.327809][ T4710] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 31.331132][ T4710] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 31.338772][ T4711] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.350366][ T3541] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.351903][ T3541] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.354750][ T3541] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.356562][ T3541] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.366847][ T4711] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.376674][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.376726][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.388332][ T4715] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 31.391652][ T4715] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 31.394955][ T3541] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.395007][ T3541] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.399121][ T4718] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.402088][ T4715] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 31.404511][ T4715] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 31.406226][ T4715] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 31.408378][ T4715] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 31.415905][ T4715] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 31.418188][ T4715] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 31.434988][ T4718] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.445676][ T4719] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 31.448549][ T4719] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 31.450477][ T4719] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 31.452555][ T4719] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 31.454259][ T4719] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 31.456317][ T4719] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 31.461490][ T40] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.461548][ T40] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.465000][ T4719] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 31.467388][ T4719] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 31.477463][ T3870] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.477505][ T3870] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.508535][ T4718] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 31.508574][ T4718] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 31.515397][ T4710] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.555091][ T4710] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.565075][ T3870] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.565126][ T3870] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.565487][ T3870] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.565504][ T3870] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.575714][ T4719] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.603886][ T4719] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.612054][ T4715] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.619027][ T1084] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.619086][ T1084] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.640375][ T1084] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.640436][ T1084] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.654690][ T4715] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.662853][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.662906][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.677227][ T4711] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.678447][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.678478][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.744549][ T4711] veth0_vlan: entered promiscuous mode [ 31.751674][ T4711] veth1_vlan: entered promiscuous mode [ 31.768211][ T4718] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.783914][ T4711] veth0_macvtap: entered promiscuous mode [ 31.786962][ T4711] veth1_macvtap: entered promiscuous mode [ 31.792813][ T4711] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.795778][ T4711] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.844877][ T4718] veth0_vlan: entered promiscuous mode [ 31.856430][ T4710] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.860684][ T3541] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.860839][ T3541] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.860962][ T3541] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.860976][ T3541] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.864827][ T4718] veth1_vlan: entered promiscuous mode [ 31.888757][ T4718] veth0_macvtap: entered promiscuous mode [ 31.889431][ T3870] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 31.889443][ T3870] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 31.894731][ T4718] veth1_macvtap: entered promiscuous mode [ 31.902079][ T4718] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.904454][ T4718] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.908472][ T4710] veth0_vlan: entered promiscuous mode [ 31.939168][ T4710] veth1_vlan: entered promiscuous mode [ 31.955100][ T4719] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.966782][ T3870] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 31.969008][ T3870] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 31.981036][ T3870] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.981245][ T3870] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.981272][ T3870] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 31.981280][ T3870] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 31.981368][ T3870] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.981853][ T3541] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.993640][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 31.993673][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 32.001562][ T4715] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.010473][ T4710] veth0_macvtap: entered promiscuous mode [ 32.022305][ T4710] veth1_macvtap: entered promiscuous mode [ 32.028285][ T4710] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.036402][ T4719] veth0_vlan: entered promiscuous mode [ 32.041816][ T4711] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 32.048328][ T4710] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.063745][ T4719] veth1_vlan: entered promiscuous mode [ 32.103699][ T4719] veth0_macvtap: entered promiscuous mode [ 32.113432][ T4719] veth1_macvtap: entered promiscuous mode [ 32.116859][ T4719] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.122136][ T4892] binder: 4890:4892 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 32.122180][ T4892] binder: 4892 RLIMIT_NICE not set [ 32.127641][ T4883] binder: undelivered freeze notification, 0000000000000000 [ 32.130157][ T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.130287][ T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.130476][ T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.130547][ T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.142604][ T4719] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.145710][ T3870] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.145806][ T3870] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.145831][ T3870] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.145848][ T3870] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.196295][ T4715] veth0_vlan: entered promiscuous mode [ 32.202979][ T3541] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 32.203011][ T3541] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 32.230523][ T4715] veth1_vlan: entered promiscuous mode [ 32.236451][ T4715] veth0_macvtap: entered promiscuous mode [ 32.237566][ T4715] veth1_macvtap: entered promiscuous mode [ 32.284243][ T39] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 32.284278][ T39] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 32.297108][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 32.297145][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 32.311628][ T4715] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.343562][ T4715] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.364742][ T12] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.364877][ T12] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.365023][ T12] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.365085][ T12] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.399121][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 32.399158][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 32.432140][ T50] Bluetooth: hci3: command tx timeout [ 32.432150][ T4724] Bluetooth: hci2: command tx timeout [ 32.432459][ T4724] Bluetooth: hci0: command tx timeout [ 32.432463][ T50] Bluetooth: hci1: command tx timeout [ 32.436740][ T4723] Bluetooth: hci4: command tx timeout [ 32.462029][ T4908] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10'. [ 32.574608][ T39] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 32.574641][ T39] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 32.635784][ T39] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 32.635832][ T39] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 32.642716][ T4927] netlink: 4 bytes leftover after parsing attributes in process `syz.0.12'. [ 32.868318][ T4951] lo: entered allmulticast mode [ 32.879017][ T4951] lo: left allmulticast mode [ 33.068302][ T4946] netlink: 8 bytes leftover after parsing attributes in process `syz.3.16'. [ 33.068349][ T4946] netlink: 8 bytes leftover after parsing attributes in process `syz.3.16'. [ 33.112587][ T4976] loop1: detected capacity change from 0 to 256 [ 33.124993][ T4976] FAT-fs (loop1): error, allocated dir entry found after end-of-directory marker (i_pos 1) [ 33.127088][ T4976] FAT-fs (loop1): Filesystem has been set read-only [ 33.143843][ T4973] futex_wake_op: syz.3.16 tries to shift op by -1; fix this program [ 33.197520][ T4984] loop1: detected capacity change from 0 to 256 [ 33.358778][ T5008] input: syz1 as /devices/virtual/input/input2 [ 33.498261][ T5023] futex_wake_op: syz.3.40 tries to shift op by -1; fix this program [ 33.790865][ T5064] process 'syz.0.52' launched './file1' with NULL argv: empty string added [ 33.866169][ T5075] netlink: 4 bytes leftover after parsing attributes in process `syz.4.53'. [ 34.056957][ C1] vxcan1: j1939_tp_rxtimer: 0x00000000275fa48b: rx timeout, send abort [ 34.509458][ T4723] Bluetooth: hci4: command tx timeout [ 34.509499][ T4717] Bluetooth: hci0: command tx timeout [ 34.509536][ T4717] Bluetooth: hci3: command tx timeout [ 34.509569][ T4717] Bluetooth: hci1: command tx timeout [ 34.509589][ T4717] Bluetooth: hci2: command tx timeout [ 34.662112][ T5095] netlink: 12 bytes leftover after parsing attributes in process `syz.1.61'. [ 34.718132][ T5104] binder: 5102:5104 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 34.718170][ T5104] binder: 5104 RLIMIT_NICE not set [ 35.024481][ T5117] binder: BC_ATTEMPT_ACQUIRE not supported [ 35.025811][ T5117] binder: 5116:5117 ioctl c0306201 200004c0 returned -22 [ 35.161043][ T5128] netlink: 8 bytes leftover after parsing attributes in process `syz.1.71'. [ 35.393592][ T5133] netlink: 12 bytes leftover after parsing attributes in process `syz.3.77'. [ 35.439812][ T4721] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 35.521031][ T5145] loop2: detected capacity change from 0 to 4096 [ 35.523390][ T5145] EXT4-fs: inline encryption not supported [ 35.524700][ T5145] EXT4-fs: Ignoring removed oldalloc option [ 35.529850][ T5145] EXT4-fs (loop2): Test dummy encryption mode enabled [ 35.535861][ T5145] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=2802c0a9, mo2=0002] [ 35.535941][ T5145] System zones: 0-5 [ 35.544720][ T5145] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 35.553443][ T5149] loop3: detected capacity change from 0 to 512 [ 35.556054][ T5145] fscrypt: AES-256-CBC-CTS using implementation "cts-cbc-aes-ce" [ 35.564504][ T5149] ======================================================= [ 35.564504][ T5149] WARNING: The mand mount option has been deprecated and [ 35.564504][ T5149] and is ignored by this kernel. Remove the mand [ 35.564504][ T5149] option from the mount to silence this warning. [ 35.564504][ T5149] ======================================================= [ 35.572817][ T5149] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 35.572862][ T5149] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 35.582487][ T5145] fscrypt: AES-256-XTS using implementation "xts-aes-ce" [ 35.598932][ T5149] EXT4-fs (loop3): 1 truncate cleaned up [ 35.614352][ T4721] usb 1-1: config 1 has an invalid interface number: 4 but max is 0 [ 35.614396][ T4721] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 35.614412][ T4721] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 1 [ 35.614422][ T4721] usb 1-1: config 1 has no interface number 1 [ 35.614441][ T4721] usb 1-1: config 1 interface 0 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 4 [ 35.614452][ T4721] usb 1-1: config 1 interface 0 has no altsetting 0 [ 35.618952][ T5149] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 35.623394][ T4721] usb 1-1: New USB device found, idVendor=174c, idProduct=55aa, bcdDevice= 1.00 [ 35.623415][ T4721] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 35.623425][ T4721] usb 1-1: Product: syz [ 35.623432][ T4721] usb 1-1: Manufacturer: syz [ 35.623438][ T4721] usb 1-1: SerialNumber: syz [ 35.650235][ T4721] usb-storage 1-1:1.4: USB Mass Storage device detected [ 35.661566][ T4721] usb-storage 1-1:1.4: Quirks match for vid 174c pid 55aa: 400000 [ 35.663518][ T4721] scsi host0: usb-storage 1-1:1.4 [ 35.667869][ T4710] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.683265][ T4721] usb-storage 1-1:1.0: USB Mass Storage device detected [ 35.686827][ T4721] usb-storage 1-1:1.0: Quirks match for vid 174c pid 55aa: 400000 [ 35.725772][ T4719] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.755151][ T5167] netlink: 12 bytes leftover after parsing attributes in process `syz.4.89'. [ 35.759623][ T5170] loop2: detected capacity change from 0 to 256 [ 35.859661][ T4721] usb 1-1: USB disconnect, device number 2 [ 35.925516][ T5186] binder: 5185:5186 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 35.928086][ T5186] binder: 5186 RLIMIT_NICE not set [ 36.077421][ T5209] loop1: detected capacity change from 0 to 1024 [ 36.094137][ T5209] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 36.094646][ T5209] JBD2: no valid journal superblock found [ 36.096415][ T5209] EXT4-fs (loop1): Could not load journal inode [ 36.194979][ T5218] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 36.195693][ T5218] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 36.501145][ T5223] syz.4.112 uses obsolete (PF_INET,SOCK_PACKET) [ 36.508813][ T5225] loop0: detected capacity change from 0 to 512 [ 36.509489][ T5225] EXT4-fs: Ignoring removed orlov option [ 36.510461][ T5225] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 36.511164][ T5225] EXT4-fs (loop0): can't mount with data_err=abort, fs mounted w/o journal [ 36.546278][ T5227] binder: 5226:5227 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 36.548928][ T5227] binder: 5227 RLIMIT_NICE not set [ 36.556772][ T5229] Zero length message leads to an empty skb [ 36.589803][ T4724] Bluetooth: hci2: command tx timeout [ 36.589893][ T50] Bluetooth: hci3: command tx timeout [ 36.589977][ T4724] Bluetooth: hci0: command tx timeout [ 36.590662][ T4717] Bluetooth: hci1: command tx timeout [ 36.590729][ T4723] Bluetooth: hci4: command tx timeout [ 36.596916][ T5233] binder: 5226:5233 tried to acquire reference to desc 0, got 1 instead [ 36.599937][ T9] binder: undelivered TRANSACTION_COMPLETE [ 36.656475][ T5241] netlink: 'syz.0.120': attribute type 3 has an invalid length. [ 36.656901][ T5241] netlink: 'syz.0.120': attribute type 3 has an invalid length. [ 36.702885][ T5245] loop0: detected capacity change from 0 to 1024 [ 36.723887][ T5245] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 36.743781][ T4718] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.777396][ T5251] loop0: detected capacity change from 0 to 1024 [ 36.817734][ T5251] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 36.855732][ T4718] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.920500][ T5267] loop1: detected capacity change from 0 to 256 [ 36.923358][ T5267] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 37.315375][ T5279] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 37.315574][ T5279] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 37.343453][ T5281] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 37.345808][ T5281] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 37.776173][ T5293] binder: 5292:5293 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 37.776212][ T5293] binder: 5293 RLIMIT_NICE not set [ 38.177885][ T5314] netlink: 24 bytes leftover after parsing attributes in process `syz.0.143'. [ 38.353562][ T5334] loop3: detected capacity change from 0 to 512 [ 38.355412][ T5334] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 38.364827][ T5333] Illegal XDP return value 65535 on prog (id 5) dev syz_tun, expect packet loss! [ 38.386186][ T5334] EXT4-fs (loop3): 1 truncate cleaned up [ 38.386656][ T5334] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 38.408423][ T4710] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.709831][ T4724] Bluetooth: hci3: command tx timeout [ 38.709875][ T4724] Bluetooth: hci0: command tx timeout [ 38.709911][ T4724] Bluetooth: hci4: command tx timeout [ 38.709938][ T4724] Bluetooth: hci2: command tx timeout [ 38.713910][ T4723] Bluetooth: hci1: command tx timeout [ 38.757195][ T5362] netlink: 4 bytes leftover after parsing attributes in process `syz.2.167'. [ 38.774039][ T5365] loop1: detected capacity change from 0 to 256 [ 38.781941][ T5365] FAT-fs (loop1): data area starts beyond volume (274 > 64) [ 38.783550][ T5365] FAT-fs (loop1): Can't find a valid FAT filesystem [ 39.009321][ T9] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 39.051386][ T3823] Bluetooth: hci5: Frame reassembly failed (-84) [ 39.176633][ T9] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 39.176672][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 39.176683][ T9] usb 1-1: Product: syz [ 39.176690][ T9] usb 1-1: Manufacturer: syz [ 39.176698][ T9] usb 1-1: SerialNumber: syz [ 39.333416][ T5391] binder: 5390:5391 BC_REQUEST_FREEZE_NOTIFICATION invalid ref 0 [ 39.333463][ T5391] binder: 5390:5391 ioctl c0306201 20000040 returned -22 [ 39.405796][ T5396] lo: entered allmulticast mode [ 39.412262][ T5396] lo: left allmulticast mode [ 39.827314][ T5422] netlink: 8 bytes leftover after parsing attributes in process `syz.3.188'. [ 40.823023][ T5431] binder: 5430:5431 BC_REQUEST_FREEZE_NOTIFICATION invalid ref 0 [ 40.823060][ T5431] binder: 5430:5431 ioctl c0306201 20000040 returned -22 [ 40.853404][ T5435] lo: entered allmulticast mode [ 40.855186][ T5435] lo: left allmulticast mode [ 40.929645][ T5445] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 40.931600][ T5445] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 41.022595][ T5453] netlink: 32 bytes leftover after parsing attributes in process `syz.1.201'. [ 41.022630][ T5453] netlink: 48 bytes leftover after parsing attributes in process `syz.1.201'. [ 41.022669][ T5453] tc_dump_action: action bad kind [ 41.062235][ T9] cdc_ncm 1-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 41.062271][ T9] cdc_ncm 1-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048 [ 41.062282][ T9] cdc_ncm 1-1:1.0: setting rx_max = 2048 [ 41.069519][ T4717] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 41.080928][ T5460] binder: 5459:5460 BC_REQUEST_FREEZE_NOTIFICATION invalid ref 0 [ 41.082492][ T5460] binder: 5459:5460 ioctl c0306201 20000040 returned -22 [ 41.125726][ T5463] loop1: detected capacity change from 0 to 1024 [ 41.134796][ T5465] lo: entered allmulticast mode [ 41.136278][ T5465] lo: left allmulticast mode [ 41.154409][ T5463] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 41.173091][ T5472] gadgetfs expected dummy_udc controller not usbip-vudc [ 41.173128][ T5472] udc usbip-vudc.0: failed to start USB Gadget filesystem: -19 [ 41.174131][ T5472] UDC core: USB Gadget filesystem: couldn't find an available UDC [ 41.195954][ T4711] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.248061][ T5481] loop2: detected capacity change from 0 to 256 [ 41.276119][ T9] cdc_ncm 1-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.0-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 41.279849][ T9] usb 1-1: USB disconnect, device number 3 [ 41.280490][ T9] cdc_ncm 1-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.0-1, CDC NCM (NO ZLP) [ 41.285168][ T5483] loop3: detected capacity change from 0 to 256 [ 41.289794][ T5483] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 41.366801][ T5489] binder: 5488:5489 BC_REQUEST_FREEZE_NOTIFICATION invalid ref 0 [ 41.366844][ T5489] binder: 5488:5489 ioctl c0306201 20000040 returned -22 [ 41.367004][ T5489] binder: 5488:5489 BC_CLEAR_FREEZE_NOTIFICATION invalid ref 0 [ 41.367012][ T5489] binder: 5488:5489 ioctl c0306201 20000640 returned -22 [ 41.370788][ T5490] netlink: 8 bytes leftover after parsing attributes in process `syz.1.214'. [ 41.454606][ T5498] lo: entered allmulticast mode [ 41.456322][ T5498] lo: left allmulticast mode [ 41.478801][ T5500] gadgetfs: bound to dummy_udc driver [ 41.779361][ T9] usb 1-1: new full-speed USB device number 4 using dummy_hcd [ 41.779568][ C0] gadgetfs: connected [ 41.780218][ T9] gadgetfs: disconnected [ 41.788581][ T5503] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 41.788809][ T5503] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 41.892518][ T5510] loop0: detected capacity change from 0 to 256 [ 42.011532][ T5518] binder: 5517:5518 BC_REQUEST_FREEZE_NOTIFICATION invalid ref 0 [ 42.011570][ T5518] binder: 5517:5518 ioctl c0306201 20000040 returned -22 [ 42.012304][ T5518] binder: 5517:5518 BC_CLEAR_FREEZE_NOTIFICATION invalid ref 0 [ 42.012532][ T5518] binder: 5517:5518 ioctl c0306201 20000640 returned -22 [ 42.078807][ T5523] loop0: detected capacity change from 0 to 2048 [ 43.015698][ T5525] loop4: detected capacity change from 0 to 512 [ 43.025568][ T5525] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 43.042844][ T5523] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 43.050563][ T5531] lo: entered allmulticast mode [ 43.051468][ T5525] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4222: comm syz.4.227: Allocating blocks 41-42 which overlap fs metadata [ 43.051545][ T5525] loop4: lost filesystem error report for type 5 error -117 [ 43.054366][ T5525] EXT4-fs (loop4): Remounting filesystem read-only [ 43.054524][ T5525] Quota error (device loop4): write_blk: dquota write failed [ 43.054534][ T5525] Quota error (device loop4): find_free_dqentry: Can't write quota data block 5 [ 43.054599][ T5525] Quota error (device loop4): write_blk: dquota write failed [ 43.054647][ T5525] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 43.054711][ T5525] EXT4-fs (loop4): 1 truncate cleaned up [ 43.055174][ T5525] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 43.072490][ T5531] lo: left allmulticast mode [ 43.108074][ T4718] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.138091][ T5544] loop3: detected capacity change from 0 to 128 [ 43.155709][ T5544] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 43.180984][ T5547] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 43.181199][ T5547] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 43.188626][ T5544] fscrypt: loop3: 1 inode(s) still busy after removing key with identifier 69b2f6edeee720cce0577937eb8a6751, including ino 12 [ 43.228956][ T5551] binder: 5550:5551 BC_REQUEST_FREEZE_NOTIFICATION invalid ref 0 [ 43.231987][ T5551] binder: 5550:5551 ioctl c0306201 20000040 returned -22 [ 43.232520][ T4715] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.237059][ T5551] binder: 5550:5551 BC_CLEAR_FREEZE_NOTIFICATION invalid ref 0 [ 43.238519][ T5551] binder: 5550:5551 ioctl c0306201 20000640 returned -22 [ 43.265359][ T4710] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 43.425214][ T5580] loop0: detected capacity change from 0 to 1024 [ 43.425648][ T5580] EXT4-fs: Ignoring removed bh option [ 43.425667][ T5580] EXT4-fs: inline encryption not supported [ 43.428075][ T5580] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 43.435418][ T5580] EXT4-fs error (device loop0): ext4_map_blocks:791: inode #3: block 2: comm syz.0.250: lblock 2 mapped to illegal pblock 2 (length 1) [ 43.435530][ T5580] loop0: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 43.436360][ T5580] EXT4-fs (loop0): Remounting filesystem read-only [ 43.436380][ T5580] Quota error (device loop0): qtree_write_dquot: dquota write failed [ 43.436422][ T5580] Quota error (device loop0): v2_write_file_info: Can't write info structure [ 43.436506][ T5580] EXT4-fs (loop0): 1 orphan inode deleted [ 43.437583][ T5580] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 43.471817][ T4718] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.534092][ T5599] binder: 5596:5599 BC_REQUEST_FREEZE_NOTIFICATION invalid ref 0 [ 43.534138][ T5599] binder: 5596:5599 ioctl c0306201 20000040 returned -22 [ 43.646493][ T5613] Bluetooth: MGMT ver 1.23 [ 43.769395][ T5633] loop3: detected capacity change from 0 to 256 [ 43.820176][ T5640] binder: 5639:5640 BC_REQUEST_FREEZE_NOTIFICATION invalid ref 0 [ 43.820218][ T5640] binder: 5639:5640 ioctl c0306201 20000040 returned -22 [ 44.251684][ T5666] netlink: 4 bytes leftover after parsing attributes in process `syz.1.276'. [ 44.374817][ T5686] binder: 5685:5686 BC_REQUEST_FREEZE_NOTIFICATION invalid ref 0 [ 44.376678][ T5686] binder: 5685:5686 ioctl c0306201 20000040 returned -22 [ 44.735813][ T5701] loop0: detected capacity change from 0 to 1024 [ 44.736789][ T5701] EXT4-fs: Ignoring removed oldalloc option [ 44.736809][ T5701] EXT4-fs: Ignoring removed bh option [ 44.768077][ T5701] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 44.788809][ T5701] EXT4-fs error (device loop0): ext4_map_blocks:833: inode #15: comm syz.0.283: lblock 0 mapped to illegal pblock 0 (length 1) [ 44.798336][ T5701] EXT4-fs (loop0): Remounting filesystem read-only [ 44.835230][ T4718] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 44.884284][ T5720] binder: 5719:5720 IncRefs 0 refcount change on invalid ref 0 ret -22 [ 44.884964][ T5720] binder: 5719:5720 BC_REQUEST_FREEZE_NOTIFICATION invalid ref 0 [ 44.884979][ T5720] binder: 5719:5720 ioctl c0306201 20000040 returned -22 [ 44.885130][ T5720] binder: 5719:5720 BC_CLEAR_FREEZE_NOTIFICATION invalid ref 0 [ 44.885139][ T5720] binder: 5719:5720 ioctl c0306201 20000640 returned -22 [ 44.913311][ T5718] netlink: 4 bytes leftover after parsing attributes in process `syz.2.290'. [ 44.964311][ T5734] loop0: detected capacity change from 0 to 256 [ 44.973433][ T5734] FAT-fs (loop0): data area starts beyond volume (274 > 64) [ 44.973466][ T5734] FAT-fs (loop0): Can't find a valid FAT filesystem [ 45.000691][ T5741] loop1: detected capacity change from 0 to 256 [ 45.025579][ T5741] FAT-fs (loop1): error, allocated dir entry found after end-of-directory marker (i_pos 1) [ 45.025613][ T5741] FAT-fs (loop1): Filesystem has been set read-only [ 45.156094][ T5765] binder: 5758:5765 IncRefs 0 refcount change on invalid ref 0 ret -22 [ 45.156530][ T5765] binder: 5758:5765 BC_REQUEST_FREEZE_NOTIFICATION invalid ref 0 [ 45.156555][ T5765] binder: 5758:5765 ioctl c0306201 20000040 returned -22 [ 45.156675][ T5765] binder: 5758:5765 ioctl c0306201 20000640 returned -22 [ 45.237400][ T5770] netlink: 4 bytes leftover after parsing attributes in process `syz.4.309'. [ 45.323442][ T5793] gadgetfs: bound to dummy_udc driver [ 45.463388][ T5815] binder: 5812:5815 ioctl c0306201 20000040 returned -22 [ 45.463519][ T5815] binder: 5812:5815 ioctl c0306201 20000640 returned -22 [ 45.559504][ T4883] usb 1-1: new full-speed USB device number 5 using dummy_hcd [ 45.562092][ C1] gadgetfs: connected [ 45.562974][ T4883] gadgetfs: disconnected [ 45.613807][ T5834] netlink: 4 bytes leftover after parsing attributes in process `syz.0.328'. [ 45.825023][ T5857] loop0: detected capacity change from 0 to 256 [ 45.917647][ T5865] gadgetfs: bound to dummy_udc driver [ 45.988672][ T5870] netlink: 4 bytes leftover after parsing attributes in process `syz.3.342'. [ 46.110806][ T5879] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 46.117574][ T5879] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 46.183481][ T5883] capability: warning: `syz.1.349' uses 32-bit capabilities (legacy support in use) [ 46.242443][ T5889] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.243112][ T5889] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.245787][ T5889] bridge0: entered allmulticast mode [ 46.255372][ T5889] bridge_slave_1: left allmulticast mode [ 46.255417][ T5889] bridge_slave_1: left promiscuous mode [ 46.255990][ T5889] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.261735][ T5889] bridge_slave_0: left allmulticast mode [ 46.261771][ T5889] bridge_slave_0: left promiscuous mode [ 46.263247][ T5889] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.409461][ C1] gadgetfs: connected [ 46.410631][ T5863] gadgetfs: suspended from state 3 [ 46.410700][ T5863] gadgetfs: disconnected [ 46.416995][ T4883] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 46.418921][ T4883] usb 1-1: can't read configurations, error -71 [ 46.457368][ T5903] netlink: 4 bytes leftover after parsing attributes in process `syz.0.356'. [ 46.660612][ T5926] gadgetfs: bound to dummy_udc driver [ 46.795081][ T5946] netlink: 4 bytes leftover after parsing attributes in process `syz.2.371'. [ 46.797147][ T5945] binder: 5941:5945 ioctl 4018620d 0 returned -22 [ 46.805598][ T5945] binder: 5941:5945 ioctl c0306201 20000040 returned -22 [ 46.805770][ T5945] binder: 5941:5945 ioctl c0306201 20000640 returned -22 [ 46.872554][ T5956] loop2: detected capacity change from 0 to 1024 [ 46.878874][ T5956] EXT4-fs: Ignoring removed bh option [ 46.882866][ T5956] EXT4-fs: inline encryption not supported [ 46.885379][ T5956] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 46.894391][ T5956] EXT4-fs error (device loop2): ext4_map_blocks:791: inode #3: block 2: comm syz.2.377: lblock 2 mapped to illegal pblock 2 (length 1) [ 46.908401][ T5956] loop2: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 46.909143][ T5956] EXT4-fs (loop2): Remounting filesystem read-only [ 46.909175][ T5956] Quota error (device loop2): qtree_write_dquot: dquota write failed [ 46.909298][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 46.909313][ C1] EXT4-fs (loop2): initial error at time 46: ext4_map_blocks:791: inode 3: block 2 [ 46.909358][ C1] EXT4-fs (loop2): last error at time 46: ext4_map_blocks:791: inode 3: block 2 [ 46.909444][ T5956] Quota error (device loop2): v2_write_file_info: Can't write info structure [ 46.909504][ T5956] EXT4-fs (loop2): 1 orphan inode deleted [ 46.909963][ T5956] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 46.956242][ T5967] xt_SECMARK: invalid mode: 2 [ 47.023368][ T4719] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.070450][ T4883] usb 1-1: new full-speed USB device number 6 using dummy_hcd [ 47.072021][ C1] gadgetfs: connected [ 47.072988][ T5925] gadgetfs: suspended from state 3 [ 47.073534][ T5925] gadgetfs: disconnected [ 47.106476][ T5983] loop3: detected capacity change from 0 to 128 [ 47.110377][ T5985] binder: 5984:5985 ioctl 4018620d 0 returned -22 [ 47.112992][ T5985] binder: 5984:5985 ioctl c0306201 20000040 returned -22 [ 47.114555][ T5985] binder: 5984:5985 ioctl c0306201 20000640 returned -22 [ 47.115551][ T5983] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 47.131127][ T5983] fscrypt: loop3: 2 inode(s) still busy after removing key with identifier 69b2f6edeee720cce0577937eb8a6751, including ino 13 [ 47.161341][ T5992] loop0: detected capacity change from 0 to 512 [ 47.165431][ T4710] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 47.194502][ T5992] EXT4-fs error (device loop0): ext4_xattr_inode_iget:441: inode #11: comm syz.0.386: iget: bad extra_isize 90 (inode size 256) [ 47.194547][ T5992] loop0: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 47.199244][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 47.199291][ C0] EXT4-fs (loop0): initial error at time 47: ext4_xattr_inode_iget:441: inode 11 [ 47.199333][ C0] EXT4-fs (loop0): last error at time 47: ext4_xattr_inode_iget:441: inode 11 [ 47.199606][ T5991] netlink: 4 bytes leftover after parsing attributes in process `syz.2.387'. [ 47.211158][ T5992] EXT4-fs (loop0): Remounting filesystem read-only [ 47.211264][ T5992] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2860: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 47.211281][ T5992] EXT4-fs warning (device loop0): ext4_evict_inode:270: couldn't mark inode dirty (err -30) [ 47.211324][ T5992] EXT4-fs (loop0): 1 orphan inode deleted [ 47.211788][ T5992] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 47.236668][ T4718] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.259435][ T6000] netlink: 4 bytes leftover after parsing attributes in process `syz.3.388'. [ 47.259510][ T6000] bridge_slave_1: left allmulticast mode [ 47.259543][ T6000] bridge_slave_1: left promiscuous mode [ 47.259673][ T6000] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.270433][ T6000] bridge_slave_0: left allmulticast mode [ 47.272373][ T6000] bridge_slave_0: left promiscuous mode [ 47.272481][ T6000] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.341507][ T6009] ------------[ cut here ]------------ [ 47.341545][ T6009] skb_assert_len [ 47.344136][ T6009] WARNING: ./include/linux/skbuff.h:2753 at __dev_queue_xmit+0x18ec/0x2bc0, CPU#1: syz.2.392/6009 [ 47.346079][ T6009] Modules linked in: [ 47.346751][ T6009] CPU: 1 UID: 0 PID: 6009 Comm: syz.2.392 Not tainted syzkaller #0 PREEMPT [ 47.348251][ T6009] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026 [ 47.349962][ T6009] pstate: 63400005 (nZCv daif +PAN -UAO +TCO +DIT -SSBS BTYPE=--) [ 47.351294][ T6009] pc : __dev_queue_xmit+0x18ec/0x2bc0 [ 47.352214][ T6009] lr : __dev_queue_xmit+0x18ec/0x2bc0 [ 47.353154][ T6009] sp : ffff800097f074c0 [ 47.353881][ T6009] x29: ffff800097f07710 x28: 1fffe0001f6fd9c6 x27: dfff800000000000 [ 47.355334][ T6009] x26: ffff700012fe0eb0 x25: 1fffe0001f6fd9d2 x24: ffff0000fb7ece30 [ 47.356728][ T6009] x23: ffff0000d5ae8000 x22: 1fffe0001f6fd9ba x21: ffff80008a188000 [ 47.358087][ T6009] x20: ffff0000fb7ecdc0 x19: ffff0000fb7ecdd0 x18: 1fffe00034bbbe28 [ 47.359446][ T6009] x17: 0000000000000003 x16: ffff800088b27000 x15: ffff800088bdd260 [ 47.360810][ T6009] x14: ffff0001a5ddf14c x13: 0000000000000001 x12: 0000000000000000 [ 47.362159][ T6009] x11: 0000000000000000 x10: 0000000000000003 x9 : 353e26894c88dc00 [ 47.363517][ T6009] x8 : 353e26894c88dc00 x7 : 0000000000000000 x6 : 0000000000000000 [ 47.364869][ T6009] x5 : 0000000000000001 x4 : 0000000000000008 x3 : ffff8000803b93e0 [ 47.366522][ T6009] x2 : 0000000000000001 x1 : ffff0000cd1c1d40 x0 : 0000000000000001 [ 47.368018][ T6009] Call trace: [ 47.368607][ T6009] __dev_queue_xmit+0x18ec/0x2bc0 (P) [ 47.369600][ T6009] packet_xmit+0x6c/0x314 [ 47.370391][ T6009] packet_sendmsg+0x1a14/0x4110 [ 47.371198][ T6009] __sock_sendmsg+0xc8/0x17c [ 47.371997][ T6009] __sys_sendto+0x250/0x328 [ 47.372740][ T6009] __arm64_sys_sendto+0xec/0x10c [ 47.373595][ T6009] invoke_syscall+0x98/0x244 [ 47.374436][ T6009] el0_svc_common+0xec/0x23c [ 47.375218][ T6009] do_el0_svc+0x4c/0x5c [ 47.375894][ T6009] el0_svc+0x64/0x260 [ 47.376529][ T6009] el0t_64_sync_handler+0x48/0x148 [ 47.377406][ T6009] el0t_64_sync+0x198/0x19c [ 47.378159][ T6009] irq event stamp: 956 [ 47.378867][ T6009] hardirqs last enabled at (955): [] finish_task_switch+0x234/0x858 [ 47.380523][ T6009] hardirqs last disabled at (956): [] el1_brk64+0x20/0x54 [ 47.381992][ T6009] softirqs last enabled at (936): [] __alloc_skb+0x1c0/0x610 [ 47.383531][ T6009] softirqs last disabled at (932): [] __alloc_skb+0x1a8/0x610 [ 47.385029][ T6009] ---[ end trace 0000000000000000 ]--- [ 47.387019][ T6009] skb len=0 data_len=0 headroom=144 headlen=0 tailroom=240 [ 47.387019][ T6009] end-tail=240 mac=(144,0) mac_len=0 net=(144,-1) trans=-1 [ 47.387019][ T6009] shinfo(txflags=0 nr_frags=0 gso(size=0 type=0 segs=0)) [ 47.387019][ T6009] csum(0x0 start=0 offset=0 ip_summed=0 complete_sw=0 valid=0 level=0) [ 47.387019][ T6009] hash(0x0 sw=0 l4=0) proto=0x0010 pkttype=0 iif=0 [ 47.387019][ T6009] priority=0x0 mark=0x0 alloc_cpu=1 vlan_all=0x0 [ 47.387019][ T6009] encapsulation=0 inner(proto=0x0000, mac=0, net=0, trans=0) [ 47.389415][ T6009] dev name=wg0 feat=0x0000010e401d4829 [ 47.389441][ T6009] sk family=17 type=2 proto=0