last executing test programs: 1m7.740934363s ago: executing program 3 (id=22): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/69, 0x328000, 0x800, 0x2, 0x3}, 0x20) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000340)=0x8000, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000200)={'batadv_slave_1\x00', 0x0}) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000180)=0x100000, 0x4) bind$xdp(r0, &(0x7f0000000100)={0x2c, 0x0, r2, 0x40000}, 0x10) getsockopt$XDP_STATISTICS(r0, 0x11b, 0x7, &(0x7f0000000240), &(0x7f00000002c0)=0x30) 1m3.621511182s ago: executing program 3 (id=26): socket$phonet(0x23, 0x2, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r0 = syz_io_uring_setup(0x44cd, &(0x7f00000004c0)={0x0, 0x5331, 0x10100, 0x1000006, 0xfffefffe}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='8'], 0x38}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}) io_uring_enter(r0, 0x2d3e, 0xec84, 0x0, 0x0, 0x0) 1m2.158594815s ago: executing program 3 (id=28): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000200), 0x22200) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r0, 0x80045400, &(0x7f0000002c00)) 1m1.462837779s ago: executing program 3 (id=31): syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000000)='./file0\x00', 0x80c8d0, &(0x7f0000000140)=ANY=[], 0x1, 0x34f, &(0x7f00000004c0)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) keyctl$dh_compute(0x17, &(0x7f0000000400), 0x0, 0x0, &(0x7f00000003c0)={0x0}) 1m0.330865792s ago: executing program 3 (id=33): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_udp_int(r0, 0x11, 0x68, &(0x7f0000000080)=0xa40, 0x4) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000380)={0x2, 0x4e22, @multicast1}, 0x10) bind$inet6(r2, 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000340)=ANY=[@ANYBLOB="0a000000bbbbbbbbbbbbaaaaaaaaaabb86dd6d002000001311ff00000000000000000000000000000000ff0200000003000000000000e9ffff004f194e20"], 0x4b) 59.043834609s ago: executing program 3 (id=38): syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000180)={0x84, &(0x7f0000000140)=ANY=[@ANYBLOB="000002"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000480), 0xc) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x53) r1 = socket$kcm(0x1e, 0x5, 0x0) sendmsg$kcm(r1, 0x0, 0x0) recvmsg$kcm(r1, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000680)}, 0x42) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x21800, 0x0) setrlimit(0xa, 0x0) ioctl$TIOCMIWAIT(r2, 0x5453, 0x300fff2) ioctl$TIOCMSET(r2, 0x5418, 0x0) r3 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, 0x0, 0x20000000) r4 = landlock_create_ruleset(&(0x7f00000002c0)={0x2001}, 0x18, 0x0) writev(r4, 0x0, 0x0) syz_usb_connect$printer(0x5, 0x2d, &(0x7f0000000040)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x40, 0x3f0, 0x4, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x81, 0xd0, 0x1, "", [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x7, 0x1, 0x1, 0xf6, "", {{{0x9, 0x5, 0x1, 0x2, 0x40, 0x8, 0xb8, 0xe6}}}}}]}}]}}, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0}) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$udf(&(0x7f0000000f00), &(0x7f0000000080)='./file0\x00', 0xa04804, &(0x7f0000000f40)=ANY=[@ANYBLOB='iocharset=cp1250,lastblock=00000000000000000010,uohide,adinicb,novrs,dmode=00000000000000000000003,rootd\x00r=00000000000000000000,nostrict,iocharset=cp857,gid=forget,gid=forget,gid=forg000000\b\x00\x00\x00\x00\x00\x00\x00002311,\x00'], 0x1, 0xc4d, &(0x7f00000001c0)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x61c28c7771d1cf5f) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000080), 0x800, 0x0) 56.597426996s ago: executing program 0 (id=43): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x40008001, 0x0, 0x6, 0x7, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$fb0(0xffffffffffffff9c, 0x0, 0x145cc2, 0x0) socket$kcm(0xa, 0x5, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-asm\x00'}, 0x58) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7ffffeff}]}) r2 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='net\x00') r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000200)='/sys/power/disk', 0x141a82, 0x33) write$vga_arbiter(r3, &(0x7f0000000000)=@unlock_all, 0xb) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000100)={0x1, &(0x7f0000000140)=[{0x51f, 0x80, 0x7, 0x3ff}]}) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(0xffffffffffffffff, 0x84, 0x19, 0x0, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100001e61e410b1134200557b0102030109021b0001000000000904000001cf28fc000905822fe9"], 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x20080, 0x8}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) syz_emit_ethernet(0x0, 0x0, &(0x7f0000000180)={0x0, 0x4, [0x33f, 0x1cd, 0xe09, 0x27f]}) 46.091934641s ago: executing program 0 (id=59): socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) r2 = socket$xdp(0x2c, 0x3, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) dup3(r2, r1, 0x80000) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, 0x0, 0x48000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0xfffffffffffffffe, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f00000001c0)={@remote}, 0x14) openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r4 = fsopen(&(0x7f0000000040)='sysfs\x00', 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'bridge0\x00'}) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) truncate(0x0, 0x9) fsopen(&(0x7f0000000180)='ntfs3\x00', 0x0) close(r4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) bind$unix(r6, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) close_range(r5, r6, 0x0) 43.647825305s ago: executing program 32 (id=38): syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000180)={0x84, &(0x7f0000000140)=ANY=[@ANYBLOB="000002"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000480), 0xc) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x53) r1 = socket$kcm(0x1e, 0x5, 0x0) sendmsg$kcm(r1, 0x0, 0x0) recvmsg$kcm(r1, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000680)}, 0x42) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x21800, 0x0) setrlimit(0xa, 0x0) ioctl$TIOCMIWAIT(r2, 0x5453, 0x300fff2) ioctl$TIOCMSET(r2, 0x5418, 0x0) r3 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, 0x0, 0x20000000) r4 = landlock_create_ruleset(&(0x7f00000002c0)={0x2001}, 0x18, 0x0) writev(r4, 0x0, 0x0) syz_usb_connect$printer(0x5, 0x2d, &(0x7f0000000040)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x40, 0x3f0, 0x4, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x81, 0xd0, 0x1, "", [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x7, 0x1, 0x1, 0xf6, "", {{{0x9, 0x5, 0x1, 0x2, 0x40, 0x8, 0xb8, 0xe6}}}}}]}}]}}, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0}) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$udf(&(0x7f0000000f00), &(0x7f0000000080)='./file0\x00', 0xa04804, &(0x7f0000000f40)=ANY=[@ANYBLOB='iocharset=cp1250,lastblock=00000000000000000010,uohide,adinicb,novrs,dmode=00000000000000000000003,rootd\x00r=00000000000000000000,nostrict,iocharset=cp857,gid=forget,gid=forget,gid=forg000000\b\x00\x00\x00\x00\x00\x00\x00002311,\x00'], 0x1, 0xc4d, &(0x7f00000001c0)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x61c28c7771d1cf5f) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000080), 0x800, 0x0) 36.607540933s ago: executing program 0 (id=77): unshare(0x400) bind$x25(0xffffffffffffffff, 0x0, 0x0) 35.893438164s ago: executing program 0 (id=80): syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x4, 0x0, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f00000001c0)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000400)='./file0\x00', &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x219d88b, 0x0) mount$bind(&(0x7f0000000140)='./file0/file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x10a78c0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) 35.226506903s ago: executing program 0 (id=83): syz_usb_connect(0x5, 0x27, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000b75c7f40470501026411010203010902120001000000000904"], 0x0) r0 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2003) ioctl$I2C_RDWR(r0, 0x707, &(0x7f0000000a40)) 34.556046147s ago: executing program 0 (id=85): r0 = syz_open_dev$loop(&(0x7f0000000140), 0x75f, 0xa382) r1 = memfd_create(&(0x7f0000000880)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc90\xb9voI\xa5/\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\x81\x00V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93\x9c5\xcf\t\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\x94\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\x94\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r3 = io_uring_setup(0x2f35, &(0x7f0000000000)={0x0, 0xfca1, 0x2, 0x2, 0x1e}) io_uring_register$IORING_REGISTER_RING_FDS(r3, 0x13, &(0x7f0000001bc0), 0x2) socket$nl_route(0x10, 0x3, 0x0) 5.817597286s ago: executing program 1 (id=137): socketpair$nbd(0x1, 0x1, 0x0, 0x0) r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000000)={@local}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r0, 0x7a8, &(0x7f0000000540)={{@hyper, 0x2}, @hyper, 0x0, 0x0, 0x5e}) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000240)={@hyper}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r1, 0x7a8, &(0x7f0000000540)={{@hyper, 0x2}, @hyper, 0x0, 0x0, 0x5e}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 5.180628599s ago: executing program 1 (id=138): unshare(0x22020600) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000400)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000200)=ANY=[@ANYBLOB, @ANYRES16=r1, @ANYBLOB="ed4d00000000000000003100000008000300", @ANYRES32=r2, @ANYBLOB="0800db"], 0x24}, 0x1, 0x0, 0x0, 0x2000000}, 0x0) 4.428425656s ago: executing program 1 (id=139): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010800d972a440b72040155ab7010203010902120001000000000904000000ff"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) ioprio_set$pid(0x3, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) io_setup(0x8, &(0x7f0000004200)=0x0) io_submit(r1, 0x0, 0x0) syz_usb_control_io$uac2(r0, 0x0, &(0x7f0000000bc0)={0x44, &(0x7f0000000900)=ANY=[@ANYBLOB="e01506"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r2, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) openat$comedi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/comedi0\x00', 0x1c1602, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r3, 0x400448c9, 0x0) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000140)={0x1f, 0xffff, 0x2}, 0x6) 4.237088712s ago: executing program 4 (id=140): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback={0xe0ffffff00000000}}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f00000002c0)={0x0, 0x5, 0x0, 0x2, 0x0, 0x0, 0x0, 0xfe, 0x2, 0x0, 0x0, 0x0, 0x40, 0x11}, 0xe) recvmmsg(r0, &(0x7f0000001b80), 0x0, 0x0, 0x0) shutdown(r0, 0x1) 4.159676057s ago: executing program 2 (id=141): syz_mount_image$ext4(&(0x7f00000005c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000640), 0x1, 0x5bc, &(0x7f0000001440)="$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") syz_mount_image$vfat(&(0x7f0000000180), &(0x7f0000000100)='./bus\x00', 0xa10480, 0x0, 0xff, 0x0, &(0x7f00000007c0)) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) renameat2(r0, &(0x7f00000001c0)='./file0\x00', r0, &(0x7f0000000200)='./bus/file0\x00', 0x0) 3.533115698s ago: executing program 4 (id=142): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000020000001c0012000c000100626f6e64000000000c0002000800010005", @ANYBLOB], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)=ANY=[@ANYBLOB="6c00000010001fff109e00008000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000003f0000440012800b00010067656e6576650000340002800500030003000000060005004e20000005000400ab000000050009000100000005000a0001000000050009000100000008000a00", @ANYRES32=r3], 0x6c}, 0x1, 0x0, 0x0, 0x1}, 0x0) socket$nl_route(0x10, 0x3, 0x0) 2.852888313s ago: executing program 2 (id=143): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="440000001000ff2500000000000000", @ANYRES32=0x0, @ANYBLOB="4200000021200000240012800c0001006d6163766c616e0014000280100005800a0004"], 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x8000002) 2.360100286s ago: executing program 4 (id=144): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)) r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000000)={@local}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r0, 0x7a8, &(0x7f0000000540)={{@hyper, 0x2}, @hyper, 0x0, 0x0, 0x5e}) ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(0xffffffffffffffff, 0x7a0, &(0x7f0000000240)={@hyper}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(0xffffffffffffffff, 0x7a8, &(0x7f0000000540)={{@hyper, 0x2}, @hyper, 0x0, 0x0, 0x5e}) 1.783681693s ago: executing program 2 (id=145): socket$nl_netfilter(0x10, 0x3, 0xc) openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x303200, 0x0) syz_open_procfs(0x0, &(0x7f0000000140)='fd/3\x00') 1.681821234s ago: executing program 4 (id=146): socketpair$nbd(0x1, 0x1, 0x0, 0x0) r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000000)={@local}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r0, 0x7a8, &(0x7f0000000540)={{@hyper, 0x2}, @hyper, 0x0, 0x0, 0x5e}) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000240)={@hyper}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r1, 0x7a8, &(0x7f0000000540)={{@hyper, 0x2}, @hyper, 0x0, 0x0, 0x5e}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 1.56433943s ago: executing program 1 (id=147): unshare(0x22020600) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000400)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000200)=ANY=[@ANYBLOB, @ANYRES16=r1, @ANYBLOB="ed4d00000000000000003100000008000300", @ANYRES32=r2, @ANYBLOB="0800db"], 0x24}, 0x1, 0x0, 0x0, 0x2000000}, 0x0) 1.114570709s ago: executing program 2 (id=148): r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/anycast6\x00') preadv(r0, &(0x7f0000000000)=[{&(0x7f0000000200)=""/96, 0x60}], 0x1, 0xe, 0x401) 1.092111212s ago: executing program 4 (id=149): socket(0x11, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340)) r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) open_by_handle_at(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB="20000000f1000000", @ANYRES64=r0], 0x0) 736.546882ms ago: executing program 1 (id=150): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback={0xe0ffffff00000000}}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f00000002c0)={0x0, 0x5, 0x0, 0x2, 0x0, 0x0, 0x0, 0xfe, 0x2, 0x0, 0x0, 0x0, 0x40, 0x11}, 0xe) recvmmsg(r0, &(0x7f0000001b80), 0x0, 0x0, 0x0) shutdown(r0, 0x1) 499.76605ms ago: executing program 2 (id=151): socket$inet6_udp(0xa, 0x2, 0x0) syz_emit_ethernet(0x4a, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f0000000340), 0x0, 0x0) read$msr(r0, &(0x7f0000048040)=""/102392, 0x18ff8) syz_open_dev$tty1(0xc, 0x4, 0x1) socket$inet_smc(0x2b, 0x1, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') preadv(r1, &(0x7f0000000340)=[{&(0x7f0000000180)=""/112, 0x70}], 0x1, 0x0, 0x0) 407.705601ms ago: executing program 4 (id=152): socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0xc0a85320, 0x0) r1 = syz_open_dev$swradio(&(0x7f0000000140), 0x0, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x6, 0x100000b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r2 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_SECURITY(r2, 0x0, 0x1, &(0x7f0000000040)=0x2, 0x4) setsockopt$WPAN_SECURITY(r2, 0x0, 0x1, &(0x7f0000000080), 0x4) sendmsg$802154_dgram(r2, &(0x7f00000001c0)={&(0x7f00000000c0), 0x14, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) ioctl$F2FS_IOC_GARBAGE_COLLECT(r3, 0x4004f506, &(0x7f0000000180)=0x1) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000003c0)="7f8e685f2131c43250201433c046a5585a50cfbca40f235343b15cd1dbd95fbbd567545cc0a3c50a6bd46b939b36deeb0f6a2be76cb8c98736c122ee427d97f803fdd76ca27badae0604d1a1460ebe20e7743788279a603120c6b94788c1fc260fee1b2b57ca2146e84a021c1532d8c8ed7f6751f96832d19822cf38d34599b7b318e89b78a3ae87b02a3face324c9c07ffa5a4e2755448b7adb740c7a798f5b33a6b3dbb4c591882250a4748273d8e38544678f4929", 0xf000}, {0x0, 0x5f}], 0x2) r5 = socket$nl_generic(0x10, 0x3, 0x10) bind$bt_l2cap(0xffffffffffffffff, 0x0, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nbd(0x0, 0xffffffffffffffff) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0xfeffff, 0x0, 0x0, 0x0, 0x0, 0x804, 0x0, 0x2, 0x0, &(0x7f0000001480)='\x00\x00', 0x0, 0x3}, 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000840)=ANY=[@ANYBLOB="b702000000000000bfa30000000000000703000000feffff7a0af0fff8fff0ff79a4f0ff00000000b7060000ffffffff6d6405000000000065040400010000000404000001000000b7050000400000006a0a80fe000000008500000053000000b70000000000000095000010000000004e62011c3034fdb117168bd07ba08af339d1a1ee35fe163a255c33282044b32495ef8ab9adc67ccc945ff15d802f5132143c0a9fc7a84452569957c1002ed7d458e17f791f4798c8eb484de03312c69b3edff5be26765ba5f8f2879021c2ea53ac547a654bbd2db5356b971d83dd12742be9087a3e7b7c0efd3e38c794eb06b0b8c392904ae7dd5e4dee88518ddf12dddd4bfc6a4dd3b6beba51074229b0d4b504516c4c3e5d1aa044d8d00728141cd67bcd68f253288e655c6b34e02e90637ef2912ba7de26ff2357ef17f95a25780c3a057826ef4e912f01a201e694e3049b8c8fe8b65d8d66bb766f7f3f918c86a702522368d9f81897133af94a5a4cff7f4d8b9d8eaf302f0b2e0c252b0000000000000000ee917bca4885bbf597a14ab6458e6272d88e0c8088f404f011289ebc5623faa1182632161e073af1d69a2e36be115be3b325ecd201d2ffb0a7fa4f5d1106560cdcf071defd0a8be3b69ce3e4f361aca75827426dde87fdf4617222674280f55e98107450c19b861299fcd9ed9d8679406419406bf0c5329bd5b4697336112b0b8756ce3574046bf611a108f8df4d1a88597840b702b6fa8edfff8faf8b8ec039bab385cac0535373bb8fab90539b1a65ddff841eb671f7faf39a43a66c5540b8762b42007c9ec43193ccf617dbf8a12b4a189edbf9fb7c42b1f435ccd4b19b53b60322af0aa66e8f448e1bd96822e6b70b62912c926dbe417cccd4f696d528fa8a3ea847f10e9b1106f3bb506f1d7fbdf801000000000000006c028eb5b5a073d0de5538ab42e171b3baae34c35987b0dda497ac3f5e97e60eaeea15c6d55badf9b86b1c000100006e60cd06c9ed24313ce607d403bb6030f800000000690db0221b1705c501f802ff59b4e683efa4b6e77e042072ec9eb8166f6e28b49a7705a1befc4d315878f88a8fb1dd679fb4c5557abae6849917dc51a89d47b728502f7e621fc0e3ba04020000c149ee6601728c750930519339b44197c22da865059b475afd96187d881e93b42a5fdfd686d8900c44c67133eeb0109dcb60dddad58037fda65885a15a42560ee3027a5ebf95254744f10fd607bc3100b94932b8d9447c42f6e21ee0e54f8be386bdc09decece910a481e648e0cb074536a25ff581d92af08a06f857311a2f14326b0b290205e91a682e00c8762cbc6b904c980eef6e6ae00f0000000000006a8194479700a02b92bec8d05eae1f24fdd7b80d3dde04c22f689594de2ebb9687219de8d73ac83823feb402a2415a9850d5f0183ec67be96dc0e4acd7acf1dfe79d6771903b76e2ae47d972651390c22d641030e1ddac018dc3116e1803af10a5f2b5f7ba58aca5bcabbbab24414a3810788e5503e4be66d683daac5f00000000000000001000ba96edb95ede0e1957c2a2754258d9fd028096cc15a8b912b494d4bbe609031ea1ca65a548941d5d16297757310d9daebd5a3dabbced3b051129cd60a37d397643324e6f0aadf978d639650000000000000000570b0acbcaa196e6b46e213a34c1a550e7c2d8cee7a278cee591f360e345d37dc9f8991a16c08d72317e42d2ac9126acd76130ef1086016697e4d51c4b42b2efc8edab88d46bc3d5d6e5a634c912bc40513643bf44cb416b3149040220aa39035ae46d16d879fc815a5cb84b0d5c8ad970128adf8dec1171e860ca54ce5d6a5aa0327bca4f49a710bf8a8399071237fe5d764e2034873c94a4f21287f3bce3eeb69e94df2e14e4ab10cc7834b304bc879b80255991dd7aac2e92c9e7c411c019d229c1f1e563152f1c5ae9cda3e808000000a0c779d624c5a2b7491b8f73e767389ecd1dee951353bb22b7caf89468871520823715cfebd04189c6c6b34bd8a6541f6bc0630000000000f94e85f5111add3a3cb5bcace95f38465402c39df835754ef33056b0e1134187822c001a25304f3e00b44675d0a25a21dc4023c642cc6f5a75c45a29ab933600acf9a2d471b73a73178cdf309e5d53311996215b44295dfddc1dd6b81132e999366e460d15d366e84da02b8afc40c47e733f804460ed8300ec34eab2ed80097bd32ff1a6143ab1476037e474ca876187c85bed4391215cd77e6a1fd6399a498b96b9b0cca93255acb08c67e50004c5af6fd5b4ce7c1ebc9202bd7b329a4d2530486d5999dd7f90ebecca37f2869135438f0540801fd7481daf9ec94b799c12e714d573e2a6331f496254f254a60c52b2026ed6a72c82cd191490fabe7b151f92e5d700f21830d613fbe490f305b3845a78817e59bf7ed36471dbca01d39e50ae2535460e1d2f2614940647233a02d5000000000000000000f70e52f0d56f6a4dcf7e57c03d4b4add0500000000000000320304d0d2b308c5ed3956eae263035d703f862224e9818a3d7ac270793a7bf2af87585293960a80ac63c54e55063bf8d24639e561253ef0caf6c58118120d8acecc0528f0d81d291009fc46401baf9c22d1c452a5b61b7a1b9adfcc17f5ad99dcdf935923185db7b14a7fa7babc1f53df70618bb73aa810b756696f26653b84cf842ae433fda59fbe312be11bb7dfecdc38c1c1f688d2724568cc396fca7c74984b7f7bd000000000000003ff3e5857fc6598c933610be374909dc8622b0722259e922f40d7862f7ea72f1754f07711de7600000000000000000000000000c4cb643e73ad8a45f0c7164484540e66e29943aa72297d831ce6c978866a55ed53130c6747f569c9c9abe724b4fc647b17401d2201e8c201e7d6ffa1fa122677f7393ed4fe8a93306f048b6703b04544e42a9cd937ef8d98ee8d878a12a627791c5c2d9fc6de65356be92fd98fdbe819686c7bd3be5bd0ce627c8357675f752c73a502d25c31c831078f098c34295bfe90e882843003841f4c0c65dc1810a50000000000000015911cb03e743c482199757d35df5b59fe0a0c5240c85498d818578e2d65c4ff4acbee037498222b1f81f3726a244da1fd6b8c195f1303bedb744045f31e1547d7bc3c3eae68b8da059a59c8c37e3639c2c4eb3d8229ac24d2ce12bc0e5db4a8202d72e64d5c5eacd0d0c0cd7a879ed967f5a2bd39ae4cf7daf7c9fa1777d54fb5920c8434163f75062c62455bf6e23817a85d"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r6, 0xfeffff, 0x113, 0x3f00f000, &(0x7f0000000700)="c45c573d395de5b2891a7d637a223920f181c2e57d71483cfb2d075a3fa67258e080a194805cdb0c26d3f7ffb1e0d9cf4fa36dcb2168b72de48ac8f93e6804f1c4d70898d0810e044d7e1778eaac5dfdcc9f1208905522025bcfdf1b6f969b094d5c022c2b7ffefde71e0627b9a2069cc1e0175c4b8860aad4b0a103c589f676b6c4e85eb3950c533b6e62c39ccf9ae9bfe54ee5887358d44f46337fbe090d7c7e55847edee8130ffd3d1e719e01a68b0e691c0d35b0b56e0b514036342fd56f08ac0083f3c2fe41a1295a3d23cf3d160d4fd90f66beba68860456ed41272e1e68d16c2564c85f5556e18784113c493d13253e14d6eb891707fba3c30d07d5ee8619e4426cafec4cf6a3723c455d09b586b248", 0x0, 0xf0, 0x0, 0x4a, 0xffffff0c}, 0x40) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0xcc, 0x0, 0x0) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$TIPC_NL_KEY_SET(r5, 0x0, 0x4) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r1, &(0x7f0000000040)) r7 = dup(r1) pread64(r7, &(0x7f0000000300)=""/148, 0x94, 0x9) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x200000000000000) 0s ago: executing program 1 (id=153): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="440000001000ff2500"/18, @ANYRES32=0x0, @ANYBLOB="4200000021200000240012800c0001006d6163766c616e0014000280100005800a0004"], 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x8000002) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.234' (ED25519) to the list of known hosts. [ 154.752820][ T5758] cgroup: Unknown subsys name 'net' [ 154.881041][ T5758] cgroup: Unknown subsys name 'cpuset' [ 154.897457][ T5758] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 160.499453][ T5758] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 165.393318][ T5778] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 165.422300][ T5778] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 165.432384][ T5778] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 165.445045][ T5778] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 165.455422][ T5778] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 165.475068][ T5782] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 165.502870][ T5070] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 165.511983][ T5070] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 165.525285][ T5070] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 165.537299][ T49] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 165.548302][ T5782] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 165.560549][ T5782] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 165.595487][ T5778] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 165.616226][ T5788] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 165.633161][ T5788] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 165.644616][ T5788] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 165.653284][ T49] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 165.658605][ T5788] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 165.686512][ T5788] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 165.687848][ T49] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 165.724808][ T49] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 165.729315][ T5788] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 165.743612][ T49] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 165.755141][ T49] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 165.777543][ T5782] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 166.964483][ T5780] chnl_net:caif_netlink_parms(): no params data found [ 167.198209][ T5783] chnl_net:caif_netlink_parms(): no params data found [ 167.344842][ T5776] chnl_net:caif_netlink_parms(): no params data found [ 167.469376][ T5784] chnl_net:caif_netlink_parms(): no params data found [ 167.571991][ T5778] Bluetooth: hci0: command tx timeout [ 167.651906][ T5778] Bluetooth: hci1: command tx timeout [ 167.731918][ T5778] Bluetooth: hci2: command tx timeout [ 167.812180][ T5778] Bluetooth: hci3: command tx timeout [ 167.827574][ T5789] chnl_net:caif_netlink_parms(): no params data found [ 167.892092][ T5778] Bluetooth: hci4: command tx timeout [ 167.978149][ T5780] bridge0: port 1(bridge_slave_0) entered blocking state [ 167.986781][ T5780] bridge0: port 1(bridge_slave_0) entered disabled state [ 167.999456][ T5780] bridge_slave_0: entered allmulticast mode [ 168.010319][ T5780] bridge_slave_0: entered promiscuous mode [ 168.101742][ T5780] bridge0: port 2(bridge_slave_1) entered blocking state [ 168.122591][ T5780] bridge0: port 2(bridge_slave_1) entered disabled state [ 168.130176][ T5780] bridge_slave_1: entered allmulticast mode [ 168.155242][ T5780] bridge_slave_1: entered promiscuous mode [ 168.287765][ T5783] bridge0: port 1(bridge_slave_0) entered blocking state [ 168.296651][ T5783] bridge0: port 1(bridge_slave_0) entered disabled state [ 168.306352][ T5783] bridge_slave_0: entered allmulticast mode [ 168.316670][ T5783] bridge_slave_0: entered promiscuous mode [ 168.379428][ T5783] bridge0: port 2(bridge_slave_1) entered blocking state [ 168.388247][ T5783] bridge0: port 2(bridge_slave_1) entered disabled state [ 168.395921][ T5783] bridge_slave_1: entered allmulticast mode [ 168.404336][ T5783] bridge_slave_1: entered promiscuous mode [ 168.448846][ T5780] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 168.471077][ T5780] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 168.481219][ T5784] bridge0: port 1(bridge_slave_0) entered blocking state [ 168.491266][ T5784] bridge0: port 1(bridge_slave_0) entered disabled state [ 168.499741][ T5784] bridge_slave_0: entered allmulticast mode [ 168.510442][ T5784] bridge_slave_0: entered promiscuous mode [ 168.597282][ T5784] bridge0: port 2(bridge_slave_1) entered blocking state [ 168.605233][ T5784] bridge0: port 2(bridge_slave_1) entered disabled state [ 168.613259][ T5784] bridge_slave_1: entered allmulticast mode [ 168.621492][ T5784] bridge_slave_1: entered promiscuous mode [ 168.651049][ T5776] bridge0: port 1(bridge_slave_0) entered blocking state [ 168.658793][ T5776] bridge0: port 1(bridge_slave_0) entered disabled state [ 168.666644][ T5776] bridge_slave_0: entered allmulticast mode [ 168.675012][ T5776] bridge_slave_0: entered promiscuous mode [ 168.764820][ T5783] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 168.774800][ T5776] bridge0: port 2(bridge_slave_1) entered blocking state [ 168.782799][ T5776] bridge0: port 2(bridge_slave_1) entered disabled state [ 168.790290][ T5776] bridge_slave_1: entered allmulticast mode [ 168.798881][ T5776] bridge_slave_1: entered promiscuous mode [ 168.839245][ T5780] team0: Port device team_slave_0 added [ 168.875188][ T5783] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 168.908618][ T5789] bridge0: port 1(bridge_slave_0) entered blocking state [ 168.916378][ T5789] bridge0: port 1(bridge_slave_0) entered disabled state [ 168.924079][ T5789] bridge_slave_0: entered allmulticast mode [ 168.933231][ T5789] bridge_slave_0: entered promiscuous mode [ 168.950572][ T5780] team0: Port device team_slave_1 added [ 168.964100][ T5784] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 169.029973][ T5789] bridge0: port 2(bridge_slave_1) entered blocking state [ 169.037559][ T5789] bridge0: port 2(bridge_slave_1) entered disabled state [ 169.045614][ T5789] bridge_slave_1: entered allmulticast mode [ 169.054000][ T5789] bridge_slave_1: entered promiscuous mode [ 169.150911][ T5784] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 169.194270][ T5776] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 169.284092][ T5783] team0: Port device team_slave_0 added [ 169.297213][ T5776] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 169.331252][ T5780] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 169.339142][ T5780] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 169.365324][ T5780] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 169.406331][ T5783] team0: Port device team_slave_1 added [ 169.468456][ T5789] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 169.480185][ T5780] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 169.487844][ T5780] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 169.514265][ T5780] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 169.533671][ T5784] team0: Port device team_slave_0 added [ 169.593319][ T5789] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 169.625918][ T5784] team0: Port device team_slave_1 added [ 169.634127][ T5783] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 169.641200][ T5783] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 169.667529][ T5783] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 169.672155][ T5778] Bluetooth: hci0: command tx timeout [ 169.689643][ T5776] team0: Port device team_slave_0 added [ 169.731976][ T5778] Bluetooth: hci1: command tx timeout [ 169.777940][ T5783] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 169.785164][ T5783] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 169.811998][ T5778] Bluetooth: hci2: command tx timeout [ 169.812653][ T5783] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 169.835715][ T5776] team0: Port device team_slave_1 added [ 169.850311][ T5789] team0: Port device team_slave_0 added [ 169.865127][ T5789] team0: Port device team_slave_1 added [ 169.892246][ T5778] Bluetooth: hci3: command tx timeout [ 169.972023][ T5778] Bluetooth: hci4: command tx timeout [ 169.985637][ T5784] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 169.992887][ T5784] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 170.019359][ T5784] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 170.035952][ T5784] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 170.043238][ T5784] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 170.069870][ T5784] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 170.169374][ T5780] hsr_slave_0: entered promiscuous mode [ 170.179165][ T5780] hsr_slave_1: entered promiscuous mode [ 170.218294][ T5776] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 170.225442][ T5776] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 170.251944][ T5776] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 170.265743][ T5789] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 170.274055][ T5789] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 170.300503][ T5789] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 170.364234][ T5776] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 170.371279][ T5776] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 170.397770][ T5776] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 170.412306][ T5789] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 170.419341][ T5789] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 170.445929][ T5789] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 170.489598][ T5783] hsr_slave_0: entered promiscuous mode [ 170.498004][ T5783] hsr_slave_1: entered promiscuous mode [ 170.506193][ T5783] debugfs: 'hsr0' already exists in 'hsr' [ 170.512216][ T5783] Cannot create hsr debugfs directory [ 170.718827][ T5784] hsr_slave_0: entered promiscuous mode [ 170.727301][ T5784] hsr_slave_1: entered promiscuous mode [ 170.735536][ T5784] debugfs: 'hsr0' already exists in 'hsr' [ 170.741398][ T5784] Cannot create hsr debugfs directory [ 170.948299][ T5789] hsr_slave_0: entered promiscuous mode [ 170.956914][ T5789] hsr_slave_1: entered promiscuous mode [ 170.965196][ T5789] debugfs: 'hsr0' already exists in 'hsr' [ 170.971030][ T5789] Cannot create hsr debugfs directory [ 170.992193][ T5776] hsr_slave_0: entered promiscuous mode [ 171.000498][ T5776] hsr_slave_1: entered promiscuous mode [ 171.008768][ T5776] debugfs: 'hsr0' already exists in 'hsr' [ 171.014763][ T5776] Cannot create hsr debugfs directory [ 171.731904][ T5778] Bluetooth: hci0: command tx timeout [ 171.811884][ T5778] Bluetooth: hci1: command tx timeout [ 171.901892][ T5778] Bluetooth: hci2: command tx timeout [ 171.972076][ T5778] Bluetooth: hci3: command tx timeout [ 172.047131][ T5780] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 172.062079][ T5778] Bluetooth: hci4: command tx timeout [ 172.069923][ T5780] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 172.112071][ T5780] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 172.145092][ T5780] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 172.250878][ T5783] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 172.278882][ T5783] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 172.298591][ T5783] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 172.324935][ T5783] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 172.520818][ T5784] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 172.555004][ T5784] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 172.577856][ T5784] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 172.643888][ T5784] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 172.835408][ T5776] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 172.854831][ T5776] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 172.876923][ T5776] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 172.940284][ T5776] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 173.198893][ T5789] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 173.260800][ T5789] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 173.299911][ T5780] 8021q: adding VLAN 0 to HW filter on device bond0 [ 173.324559][ T5789] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 173.348586][ T5789] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 173.574568][ T5780] 8021q: adding VLAN 0 to HW filter on device team0 [ 173.698231][ T5783] 8021q: adding VLAN 0 to HW filter on device bond0 [ 173.736156][ T1141] bridge0: port 1(bridge_slave_0) entered blocking state [ 173.743706][ T1141] bridge0: port 1(bridge_slave_0) entered forwarding state [ 173.790710][ T1141] bridge0: port 2(bridge_slave_1) entered blocking state [ 173.798094][ T1141] bridge0: port 2(bridge_slave_1) entered forwarding state [ 173.814298][ T5778] Bluetooth: hci0: command tx timeout [ 173.892185][ T5778] Bluetooth: hci1: command tx timeout [ 173.897376][ T5784] 8021q: adding VLAN 0 to HW filter on device bond0 [ 173.939749][ T5783] 8021q: adding VLAN 0 to HW filter on device team0 [ 173.973449][ T5778] Bluetooth: hci2: command tx timeout [ 174.030442][ T1141] bridge0: port 1(bridge_slave_0) entered blocking state [ 174.038081][ T1141] bridge0: port 1(bridge_slave_0) entered forwarding state [ 174.052153][ T5778] Bluetooth: hci3: command tx timeout [ 174.107602][ T5776] 8021q: adding VLAN 0 to HW filter on device bond0 [ 174.133521][ T5778] Bluetooth: hci4: command tx timeout [ 174.140323][ T57] bridge0: port 2(bridge_slave_1) entered blocking state [ 174.147840][ T57] bridge0: port 2(bridge_slave_1) entered forwarding state [ 174.223425][ T5784] 8021q: adding VLAN 0 to HW filter on device team0 [ 174.329345][ T289] bridge0: port 1(bridge_slave_0) entered blocking state [ 174.337171][ T289] bridge0: port 1(bridge_slave_0) entered forwarding state [ 174.393646][ T1141] bridge0: port 2(bridge_slave_1) entered blocking state [ 174.401105][ T1141] bridge0: port 2(bridge_slave_1) entered forwarding state [ 174.459442][ T5776] 8021q: adding VLAN 0 to HW filter on device team0 [ 174.580734][ T5789] 8021q: adding VLAN 0 to HW filter on device bond0 [ 174.646304][ T149] bridge0: port 1(bridge_slave_0) entered blocking state [ 174.654152][ T149] bridge0: port 1(bridge_slave_0) entered forwarding state [ 174.710357][ T149] bridge0: port 2(bridge_slave_1) entered blocking state [ 174.717943][ T149] bridge0: port 2(bridge_slave_1) entered forwarding state [ 174.920395][ T5789] 8021q: adding VLAN 0 to HW filter on device team0 [ 175.005371][ T149] bridge0: port 1(bridge_slave_0) entered blocking state [ 175.012881][ T149] bridge0: port 1(bridge_slave_0) entered forwarding state [ 175.239363][ T149] bridge0: port 2(bridge_slave_1) entered blocking state [ 175.246932][ T149] bridge0: port 2(bridge_slave_1) entered forwarding state [ 175.386692][ T5780] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 176.208599][ T5780] veth0_vlan: entered promiscuous mode [ 176.358172][ T5784] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 176.405123][ T5783] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 176.424387][ T5780] veth1_vlan: entered promiscuous mode [ 176.730512][ T5780] veth0_macvtap: entered promiscuous mode [ 176.796771][ T5776] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 176.829122][ T5780] veth1_macvtap: entered promiscuous mode [ 176.953532][ T5783] veth0_vlan: entered promiscuous mode [ 176.996658][ T5780] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 177.056690][ T5780] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 177.109264][ T5784] veth0_vlan: entered promiscuous mode [ 177.136892][ T5783] veth1_vlan: entered promiscuous mode [ 177.172767][ T85] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 177.184012][ T85] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 177.229025][ T85] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 177.294256][ T85] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 177.328177][ T5789] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 177.358710][ T5776] veth0_vlan: entered promiscuous mode [ 177.394469][ T5784] veth1_vlan: entered promiscuous mode [ 177.545418][ T5776] veth1_vlan: entered promiscuous mode [ 177.802905][ T5783] veth0_macvtap: entered promiscuous mode [ 177.906671][ T5784] veth0_macvtap: entered promiscuous mode [ 177.956905][ T5783] veth1_macvtap: entered promiscuous mode [ 177.980893][ T5784] veth1_macvtap: entered promiscuous mode [ 178.116914][ T5776] veth0_macvtap: entered promiscuous mode [ 178.229095][ T5783] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 178.239659][ T5776] veth1_macvtap: entered promiscuous mode [ 178.322154][ T5784] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 178.373479][ T5783] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 178.457815][ T5784] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 178.466939][ T57] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.479621][ T57] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.546243][ T57] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.558070][ T57] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.625969][ T5776] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 178.659921][ T57] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.673410][ T57] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.733557][ T5776] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 178.761305][ T57] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.806210][ T57] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.910894][ T1040] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.951949][ T1040] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.960957][ T1040] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 179.040156][ T1040] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 179.438757][ T5789] veth0_vlan: entered promiscuous mode [ 179.613556][ T5789] veth1_vlan: entered promiscuous mode [ 179.996405][ T5789] veth0_macvtap: entered promiscuous mode [ 180.090223][ T5789] veth1_macvtap: entered promiscuous mode [ 180.352892][ T5789] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 180.487867][ T5789] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 180.600806][ T1040] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.718835][ T1040] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.751062][ T57] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.855517][ T57] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.636639][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 181.672118][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 181.951906][ T57] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 181.996341][ T57] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 182.529292][ T5780] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 183.574430][ T5942] loop1: detected capacity change from 0 to 4096 [ 183.634240][ T5942] ======================================================= [ 183.634240][ T5942] WARNING: The mand mount option has been deprecated and [ 183.634240][ T5942] and is ignored by this kernel. Remove the mand [ 183.634240][ T5942] option from the mount to silence this warning. [ 183.634240][ T5942] ======================================================= [ 183.853772][ T5951] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 184.481843][ T85] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 184.489847][ T85] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 184.740505][ T57] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 184.784450][ T57] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 184.968950][ T5962] loop1: detected capacity change from 0 to 64 [ 185.027737][ T85] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 185.060380][ T85] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 185.567250][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 185.624691][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 185.638758][ T289] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 185.690959][ T289] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 186.206621][ T289] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 186.271757][ T289] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 186.658762][ T5971] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 187.192291][ T5975] loop3: detected capacity change from 0 to 512 [ 187.222511][ T5975] EXT4-fs: inline encryption not supported [ 187.301344][ T5975] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 187.328581][ T5971] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 187.361941][ T5975] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 187.486327][ T5975] Quota error (device loop3): do_insert_tree: Free block already used in tree: block 1 [ 187.566259][ T5975] Quota error (device loop3): qtree_write_dquot: Error -5 occurred while creating quota [ 187.612019][ T5975] EXT4-fs error (device loop3): ext4_acquire_dquot:7001: comm syz.3.4: Failed to acquire dquot type 1 [ 187.666702][ T5975] loop3: lost filesystem error report for type 5 error -5 [ 187.671721][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 187.685591][ C0] EXT4-fs (loop3): initial error at time 1773290643: ext4_acquire_dquot:7001 [ 187.694738][ C0] EXT4-fs (loop3): last error at time 1773290643: ext4_acquire_dquot:7001 [ 187.708273][ T5975] EXT4-fs (loop3): Remounting filesystem read-only [ 187.724739][ T5975] EXT4-fs (loop3): 1 truncate cleaned up [ 187.725898][ T5971] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 187.743436][ T5975] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 187.936636][ T5971] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.092181][ T289] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 188.100185][ T289] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 188.677312][ T57] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 188.726637][ T57] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 189.246155][ T5784] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 190.007330][ T5995] loop3: detected capacity change from 0 to 256 [ 190.071241][ T5995] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x1d73664b, utbl_chksum : 0xe619d30d) [ 190.259606][ T5995] exFAT-fs (loop3): valid_size(150994954) is greater than size(10) [ 190.683294][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 190.906381][ T5997] Zero length message leads to an empty skb [ 192.722101][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 193.002959][ T6006] loop1: detected capacity change from 0 to 1024 [ 193.482407][ T6006] Process accounting resumed [ 193.574032][ T57] hfsplus: b-tree write err: -5, ino 25 [ 193.604966][ T57] hfsplus: b-tree write err: -5, ino 4 [ 193.628162][ T57] hfsplus: b-tree write err: -5, ino 2 [ 193.653068][ T57] hfsplus: b-tree write err: -5, ino 20 [ 194.013296][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 194.111969][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 194.337119][ T6014] loop3: detected capacity change from 0 to 512 [ 194.459496][ T0] NOHZ tick-stop error: local softirq work is pending, handler #48!!! [ 194.469232][ T6014] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 194.602024][ T6014] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 194.740119][ T6014] EXT4-fs error (device loop3): ext4_validate_block_bitmap:432: comm syz.3.17: bg 0: block 104: invalid block bitmap [ 194.851826][ T6014] loop3: lost filesystem error report for type 5 error -117 [ 194.861780][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 194.875782][ C0] EXT4-fs (loop3): initial error at time 1773290650: ext4_validate_block_bitmap:432 [ 194.885381][ C0] EXT4-fs (loop3): last error at time 1773290650: ext4_validate_block_bitmap:432 [ 194.906876][ T6014] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6685: Corrupt filesystem [ 194.922452][ T6014] loop3: lost filesystem error report for type 5 error -117 [ 194.943939][ T6014] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.17: invalid indirect mapped block 1 (level 1) [ 195.209167][ T6014] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 195.210401][ T6014] EXT4-fs (loop3): 1 truncate cleaned up [ 195.239884][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 195.328269][ T6014] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 195.494312][ T29] audit: type=1800 audit(1773290651.156:2): pid=6014 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.17" name="file1" dev="loop3" ino=18 res=0 errno=0 [ 195.677663][ T5784] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 196.263595][ T0] NOHZ tick-stop error: local softirq work is pending, handler #240!!! [ 196.365892][ T0] NOHZ tick-stop error: local softirq work is pending, handler #2c2!!! [ 196.727767][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 196.737489][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 196.753967][ T6032] ptrace attach of "./syz-executor exec"[5783] was attempted by "./syz-executor exec"[6032] [ 197.256824][ T6036] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 198.301910][ T24] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 198.585102][ T24] usb 1-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 198.618396][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 198.651161][ T24] usb 1-1: Product: syz [ 198.668072][ T24] usb 1-1: Manufacturer: syz [ 198.691086][ T24] usb 1-1: SerialNumber: syz [ 198.746525][ T24] usb 1-1: config 0 descriptor?? [ 199.594542][ T5778] Bluetooth: hci0: unexpected event 0x03 length: 1 < 11 [ 199.632250][ T24] usb 1-1: Firmware version (0.0) predates our first public release. [ 199.646394][ T24] usb 1-1: Please update to version 0.2 or newer [ 199.810361][ T24] usb 1-1: USB disconnect, device number 2 [ 202.984101][ T6059] loop0: detected capacity change from 0 to 512 [ 203.060217][ T6059] EXT4-fs: Ignoring removed bh option [ 203.085273][ T6061] loop3: detected capacity change from 0 to 128 [ 203.091843][ T6059] EXT4-fs: inline encryption not supported [ 203.152692][ T6059] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 203.284407][ T6059] EXT4-fs warning (device loop0): ext4_update_dynamic_rev:1142: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 203.300745][ T6059] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.30: bg 0: block 248: padding at end of block bitmap is not set [ 203.317135][ T6059] loop0: lost filesystem error report for type 5 error -117 [ 203.318845][ T6059] Quota error (device loop0): write_blk: dquota write failed [ 203.326607][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 203.326693][ C1] EXT4-fs (loop0): last error at time 1773290659: ext4_validate_block_bitmap:441 [ 203.362526][ T6059] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 203.373120][ T6059] EXT4-fs error (device loop0): ext4_acquire_dquot:7001: comm syz.0.30: Failed to acquire dquot type 1 [ 203.384577][ T6059] loop0: lost filesystem error report for type 5 error -117 [ 203.438713][ T6059] EXT4-fs (loop0): 1 truncate cleaned up [ 203.515584][ T6059] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 203.656557][ T6059] netlink: 28 bytes leftover after parsing attributes in process `syz.0.30'. [ 204.024474][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 204.045500][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 204.204192][ T6059] syz.0.30 (6059) used greatest stack depth: 2768 bytes left [ 204.301959][ T5776] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 204.459316][ T6069] syz.3.33 uses obsolete (PF_INET,SOCK_PACKET) [ 205.452248][ T24] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 205.729818][ T24] usb 2-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 205.749806][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 205.788724][ T24] usb 2-1: Product: syz [ 205.821970][ T24] usb 2-1: Manufacturer: syz [ 205.848289][ T24] usb 2-1: SerialNumber: syz [ 205.897729][ T24] usb 2-1: config 0 descriptor?? [ 205.993322][ T10] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 206.332921][ T10] usb 4-1: unable to get BOS descriptor or descriptor too short [ 206.535717][ T10] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 64 [ 206.932259][ T5778] Bluetooth: hci1: unexpected event 0x03 length: 1 < 11 [ 207.008247][ T24] usb 2-1: Firmware version (0.0) predates our first public release. [ 207.062256][ T10] usb 4-1: New USB device found, idVendor=03f0, idProduct=0004, bcdDevice= 0.40 [ 207.118281][ T24] usb 2-1: Please update to version 0.2 or newer [ 207.156231][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 207.188105][ T10] usb 4-1: Product: syz [ 207.202363][ T10] usb 4-1: Manufacturer: syz [ 207.235619][ T10] usb 4-1: SerialNumber: syz [ 207.346739][ T24] usb 2-1: USB disconnect, device number 2 [ 207.372022][ T6081] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 207.435970][ T6091] netlink: 8 bytes leftover after parsing attributes in process `syz.2.42'. [ 209.041860][ T24] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 209.479563][ T24] usb 1-1: Using ep0 maxpacket: 16 [ 209.645853][ T6100] loop1: detected capacity change from 0 to 2048 [ 209.697980][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 209.771059][ T6100] UDF-fs: error (device loop1): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 209.868443][ T6100] UDF-fs: warning (device loop1): udf_load_vrs: No anchor found [ 209.952843][ T6100] UDF-fs: Scanning with blocksize 512 failed [ 210.171176][ T6100] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 210.405009][ T6102] loop2: detected capacity change from 0 to 1024 [ 210.466459][ T24] usb 1-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=7b.55 [ 210.523855][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 210.582373][ T24] usb 1-1: Product: syz [ 210.607839][ T24] usb 1-1: Manufacturer: syz [ 210.651187][ T24] usb 1-1: SerialNumber: syz [ 210.718760][ T6102] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 210.774427][ T24] usb 1-1: config 0 descriptor?? [ 210.926895][ T24] usb 1-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 211.994754][ T13] usb 1-1: Failed to submit usb control message: -110 [ 212.035258][ T13] usb 1-1: unable to send the bmi data to the device: -110 [ 212.152169][ T13] usb 1-1: unable to get target info from device [ 212.193478][ T13] usb 1-1: could not get target info (-110) [ 212.196920][ T5783] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 212.206144][ T13] usb 1-1: could not probe fw (-110) [ 212.483274][ T10] usblp0: Disabling reads from problematic bidirectional printer [ 212.684207][ T10] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 2 if 0 alt 0 proto 1 vid 0x03F0 pid 0x0004 [ 214.127432][ T6125] loop2: detected capacity change from 0 to 512 [ 214.232465][ T6125] EXT4-fs: Ignoring removed bh option [ 214.237997][ T6125] EXT4-fs: inline encryption not supported [ 214.340563][ T6125] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 214.525833][ T6125] EXT4-fs warning (device loop2): ext4_update_dynamic_rev:1142: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 214.562294][ T6125] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.52: bg 0: block 248: padding at end of block bitmap is not set [ 214.712369][ T6125] loop2: lost filesystem error report for type 5 error -117 [ 214.715031][ T6125] Quota error (device loop2): write_blk: dquota write failed [ 214.722941][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 214.723027][ C1] EXT4-fs (loop2): last error at time 1773290670: ext4_validate_block_bitmap:441 [ 214.862409][ T6125] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 214.972809][ T6125] EXT4-fs error (device loop2): ext4_acquire_dquot:7001: comm syz.2.52: Failed to acquire dquot type 1 [ 215.082301][ T6125] loop2: lost filesystem error report for type 5 error -117 [ 215.126597][ T6125] EXT4-fs (loop2): 1 truncate cleaned up [ 215.183258][ T6125] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 215.339394][ T6125] netlink: 28 bytes leftover after parsing attributes in process `syz.2.52'. [ 215.396324][ T6132] netlink: 8 bytes leftover after parsing attributes in process `syz.4.54'. [ 215.665421][ T5783] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 217.116789][ T5778] Bluetooth: hci4: SCO packet for unknown connection handle 173 [ 217.902157][ T24] usb 1-1: USB disconnect, device number 3 [ 221.793573][ T6159] loop4: detected capacity change from 0 to 512 [ 221.854874][ T6159] EXT4-fs: Ignoring removed bh option [ 221.912263][ T6159] EXT4-fs: inline encryption not supported [ 222.068974][ T6159] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 222.336475][ T6159] EXT4-fs warning (device loop4): ext4_update_dynamic_rev:1142: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 222.404414][ T5782] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 222.423443][ T5782] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 222.442711][ T6159] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.65: bg 0: block 248: padding at end of block bitmap is not set [ 222.443900][ T5782] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 222.534819][ T5782] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 222.558849][ T5782] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 222.575807][ T6159] loop4: lost filesystem error report for type 5 error -117 [ 222.686782][ T6159] Quota error (device loop4): write_blk: dquota write failed [ 222.694409][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 222.694468][ C0] EXT4-fs (loop4): last error at time 1773290678: ext4_validate_block_bitmap:441 [ 222.822444][ T6159] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 222.888687][ T6159] EXT4-fs error (device loop4): ext4_acquire_dquot:7001: comm syz.4.65: Failed to acquire dquot type 1 [ 222.942444][ T6159] loop4: lost filesystem error report for type 5 error -117 [ 222.960492][ T6159] EXT4-fs (loop4): 1 truncate cleaned up [ 223.034151][ T6159] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 223.218085][ T6159] netlink: 28 bytes leftover after parsing attributes in process `syz.4.65'. [ 223.888606][ T5789] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 224.535860][ T6175] binder: 6174:6175 ioctl c0306201 80000040 returned -22 [ 224.691853][ T5778] Bluetooth: hci5: command tx timeout [ 225.145942][ T6163] chnl_net:caif_netlink_parms(): no params data found [ 225.182874][ T30] usb 4-1: USB disconnect, device number 2 [ 225.284201][ T30] usblp0: removed [ 225.488791][ T12] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 225.741082][ T12] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 226.387909][ T6189] loop1: detected capacity change from 0 to 1024 [ 226.534347][ T6189] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 226.567256][ T12] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 226.782677][ T5778] Bluetooth: hci5: command tx timeout [ 226.803740][ T12] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 227.640585][ T12] bridge_slave_1: left allmulticast mode [ 227.663325][ T12] bridge_slave_1: left promiscuous mode [ 227.693328][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 227.823472][ T12] bridge_slave_0: left allmulticast mode [ 227.842993][ T12] bridge_slave_0: left promiscuous mode [ 227.849521][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 228.492119][ T5835] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 228.678031][ T5835] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 228.702272][ T5835] usb 3-1: New USB device found, idVendor=5543, idProduct=0522, bcdDevice=10.08 [ 228.748194][ T5835] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 228.798926][ T5835] usb 3-1: config 0 descriptor?? [ 228.867965][ T5778] Bluetooth: hci5: command tx timeout [ 229.021393][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 229.051342][ T5835] usb 3-1: USB disconnect, device number 2 [ 229.142179][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 229.165415][ T12] bond0 (unregistering): Released all slaves [ 229.452031][ T6163] bridge0: port 1(bridge_slave_0) entered blocking state [ 229.459783][ T6163] bridge0: port 1(bridge_slave_0) entered disabled state [ 229.482632][ T6163] bridge_slave_0: entered allmulticast mode [ 229.538659][ T6163] bridge_slave_0: entered promiscuous mode [ 229.706338][ T6163] bridge0: port 2(bridge_slave_1) entered blocking state [ 229.742315][ T6163] bridge0: port 2(bridge_slave_1) entered disabled state [ 229.792406][ T6163] bridge_slave_1: entered allmulticast mode [ 229.842210][ T6163] bridge_slave_1: entered promiscuous mode [ 230.066431][ T5780] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 230.550545][ T6163] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 230.580478][ T6163] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 230.652198][ T12] hsr_slave_0: left promiscuous mode [ 230.676285][ T12] hsr_slave_1: left promiscuous mode [ 230.696313][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 230.731803][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 230.744763][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 230.776474][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 230.822181][ T12] veth1_macvtap: left promiscuous mode [ 230.827906][ T12] veth0_macvtap: left promiscuous mode [ 230.834881][ T12] veth1_vlan: left promiscuous mode [ 230.840480][ T12] veth0_vlan: left promiscuous mode [ 230.931860][ T5778] Bluetooth: hci5: command tx timeout [ 231.387878][ T6230] netlink: 36 bytes leftover after parsing attributes in process `syz.4.90'. [ 232.066201][ T5782] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 232.081423][ T5782] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 232.096722][ T5782] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 232.124133][ T5782] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 232.138566][ T5782] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 232.196812][ T12] team0 (unregistering): Port device team_slave_1 removed [ 232.277781][ T12] team0 (unregistering): Port device team_slave_0 removed [ 232.929151][ T6163] team0: Port device team_slave_0 added [ 233.003183][ T6163] team0: Port device team_slave_1 added [ 233.368287][ T6163] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 233.394701][ T6163] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 233.481905][ T6163] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 233.559128][ T6163] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 233.579582][ T6163] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 233.591931][ T5835] psmouse serio2: Failed to reset mouse on : -5 [ 233.703620][ T6163] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 234.154511][ T6259] fuse: Bad value for 'fd' [ 234.218398][ T5782] Bluetooth: hci0: command tx timeout [ 234.265999][ T6163] hsr_slave_0: entered promiscuous mode [ 234.305919][ T6163] hsr_slave_1: entered promiscuous mode [ 234.324034][ T6163] debugfs: 'hsr0' already exists in 'hsr' [ 234.342009][ T6163] Cannot create hsr debugfs directory [ 234.543269][ T12] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 235.228068][ T12] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 235.517527][ T12] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 235.808045][ T12] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 236.302550][ T5782] Bluetooth: hci0: command tx timeout [ 237.197198][ T12] bridge_slave_1: left allmulticast mode [ 237.231979][ T5835] misc userio: Buffer overflowed, userio client isn't keeping up [ 237.245742][ T12] bridge_slave_1: left promiscuous mode [ 237.256992][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 237.277629][ T12] bridge_slave_0: left allmulticast mode [ 237.285101][ T12] bridge_slave_0: left promiscuous mode [ 237.291785][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 237.954692][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 238.003351][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 238.027861][ T12] bond0 (unregistering): Released all slaves [ 238.197820][ T6236] chnl_net:caif_netlink_parms(): no params data found [ 238.371910][ T5782] Bluetooth: hci0: command tx timeout [ 238.504867][ T5835] input: PS/2 Generic Mouse as /devices/serio2/input/input5 [ 238.762591][ T5835] psmouse serio2: Failed to enable mouse on [ 238.831508][ T6163] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 239.059162][ T6163] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 239.201395][ T6163] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 239.387903][ T12] hsr_slave_0: left promiscuous mode [ 239.406103][ T12] hsr_slave_1: left promiscuous mode [ 239.437229][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 239.462022][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 239.502753][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 239.510332][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 239.542943][ T10] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 239.605969][ T12] veth1_macvtap: left promiscuous mode [ 239.622536][ T12] veth0_macvtap: left promiscuous mode [ 239.628426][ T12] veth1_vlan: left promiscuous mode [ 239.645015][ T12] veth0_vlan: left promiscuous mode [ 239.702029][ T10] usb 5-1: Using ep0 maxpacket: 8 [ 239.724432][ T10] usb 5-1: New USB device found, idVendor=04b4, idProduct=8613, bcdDevice=95.8f [ 239.741533][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=1 [ 239.765793][ T10] usb 5-1: Product: syz [ 239.770182][ T10] usb 5-1: Manufacturer: syz [ 239.793873][ T10] usb 5-1: SerialNumber: syz [ 239.829980][ T10] usb 5-1: config 0 descriptor?? [ 239.858216][ T10] usbtest 5-1:0.0: FX2 device [ 239.871878][ T10] usbtest 5-1:0.0: high-speed {control bulk-in bulk-out} tests (+alt) [ 240.067142][ T10] usb 5-1: USB disconnect, device number 2 [ 240.457144][ T5782] Bluetooth: hci0: command tx timeout [ 240.522677][ T5835] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 240.720239][ T5835] usb 3-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 240.733650][ T5835] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 240.748724][ T5835] usb 3-1: Product: syz [ 240.755574][ T5835] usb 3-1: Manufacturer: syz [ 240.760773][ T5835] usb 3-1: SerialNumber: syz [ 240.811253][ T5835] usb 3-1: config 0 descriptor?? [ 240.970881][ T6289] netlink: 36 bytes leftover after parsing attributes in process `syz.4.103'. [ 241.015928][ T12] team0 (unregistering): Port device team_slave_1 removed [ 241.085250][ T12] team0 (unregistering): Port device team_slave_0 removed [ 241.382157][ T6163] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 241.572293][ T5835] usb 3-1: Firmware version (0.0) predates our first public release. [ 241.591498][ T5835] usb 3-1: Please update to version 0.2 or newer [ 241.740052][ T5835] usb 3-1: USB disconnect, device number 3 [ 242.225246][ T6236] bridge0: port 1(bridge_slave_0) entered blocking state [ 242.396282][ T6236] bridge0: port 1(bridge_slave_0) entered disabled state [ 242.432811][ T6236] bridge_slave_0: entered allmulticast mode [ 242.500337][ T6236] bridge_slave_0: entered promiscuous mode [ 242.621845][ T6236] bridge0: port 2(bridge_slave_1) entered blocking state [ 242.629694][ T6236] bridge0: port 2(bridge_slave_1) entered disabled state [ 242.680919][ T6236] bridge_slave_1: entered allmulticast mode [ 242.722626][ T6236] bridge_slave_1: entered promiscuous mode [ 243.317587][ T6236] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 243.474538][ T6236] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 244.017142][ T6236] team0: Port device team_slave_0 added [ 244.146017][ T6236] team0: Port device team_slave_1 added [ 244.378609][ T6329] netlink: 4 bytes leftover after parsing attributes in process `syz.2.111'. [ 244.396390][ T6236] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 244.420170][ T6236] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 244.451980][ T6236] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 244.559780][ T6236] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 244.580118][ T6236] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 244.668607][ T6236] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 245.147421][ T6337] netlink: 36 bytes leftover after parsing attributes in process `syz.2.113'. [ 245.355682][ T6163] 8021q: adding VLAN 0 to HW filter on device bond0 [ 245.459402][ T6236] hsr_slave_0: entered promiscuous mode [ 245.523297][ T6236] hsr_slave_1: entered promiscuous mode [ 245.568462][ T6236] debugfs: 'hsr0' already exists in 'hsr' [ 245.641966][ T6236] Cannot create hsr debugfs directory [ 246.109964][ T6163] 8021q: adding VLAN 0 to HW filter on device team0 [ 246.365650][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 246.373312][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 246.451980][ T24] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 246.647785][ T24] usb 5-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 246.672014][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 246.688761][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 246.696364][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 246.698763][ T24] usb 5-1: Product: syz [ 246.749443][ T24] usb 5-1: Manufacturer: syz [ 246.771030][ T24] usb 5-1: SerialNumber: syz [ 246.802463][ T24] usb 5-1: config 0 descriptor?? [ 247.522472][ T24] usb 5-1: Firmware version (0.0) predates our first public release. [ 247.538324][ T24] usb 5-1: Please update to version 0.2 or newer [ 247.734533][ T24] usb 5-1: USB disconnect, device number 3 [ 248.199050][ T6236] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 248.441995][ T6236] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 248.599656][ T6236] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 248.926932][ T6236] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 250.143599][ T6385] netlink: 36 bytes leftover after parsing attributes in process `syz.1.123'. [ 250.544781][ T6236] 8021q: adding VLAN 0 to HW filter on device bond0 [ 250.836333][ T6236] 8021q: adding VLAN 0 to HW filter on device team0 [ 250.973842][ T6163] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 251.008912][ T149] bridge0: port 1(bridge_slave_0) entered blocking state [ 251.016592][ T149] bridge0: port 1(bridge_slave_0) entered forwarding state [ 251.321473][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 251.328950][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 252.407779][ T5892] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 252.628302][ T5892] usb 3-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 252.663563][ T5892] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 252.688131][ T6413] loop4: detected capacity change from 0 to 1024 [ 252.719146][ T5892] usb 3-1: Product: syz [ 252.738343][ T5892] usb 3-1: Manufacturer: syz [ 252.762081][ T5892] usb 3-1: SerialNumber: syz [ 252.770352][ T6413] EXT4-fs: Ignoring removed orlov option [ 252.775566][ T5892] usb 3-1: config 0 descriptor?? [ 252.970562][ T6413] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 253.118123][ T6413] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 253.538560][ T5892] usb 3-1: Firmware version (0.0) predates our first public release. [ 253.570964][ T5892] usb 3-1: Please update to version 0.2 or newer [ 253.681891][ T5892] usb 3-1: USB disconnect, device number 4 [ 254.455157][ T6236] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 254.585866][ T6163] veth0_vlan: entered promiscuous mode [ 254.760483][ T6163] veth1_vlan: entered promiscuous mode [ 255.296595][ T6163] veth0_macvtap: entered promiscuous mode [ 255.486127][ T6163] veth1_macvtap: entered promiscuous mode [ 255.781423][ T6163] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 255.945245][ T6163] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 256.154953][ T149] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 256.222854][ T149] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 256.285974][ T149] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 256.306773][ T149] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 256.349249][ T6451] netlink: 36 bytes leftover after parsing attributes in process `syz.4.134'. [ 257.278711][ T6236] veth0_vlan: entered promiscuous mode [ 257.312057][ T5892] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 257.422435][ T6236] veth1_vlan: entered promiscuous mode [ 257.524713][ T5892] usb 5-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 257.574233][ T5892] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 257.591811][ T5892] usb 5-1: Product: syz [ 257.622022][ T5892] usb 5-1: Manufacturer: syz [ 257.642499][ T5892] usb 5-1: SerialNumber: syz [ 257.684409][ T5892] usb 5-1: config 0 descriptor?? [ 257.994887][ T6236] veth0_macvtap: entered promiscuous mode [ 258.113790][ T6236] veth1_macvtap: entered promiscuous mode [ 258.406047][ T5892] usb 5-1: Firmware: major: 0, minor: 0, hardware type: ATUSB (0) [ 258.412219][ T6236] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 258.455184][ T5892] usb 5-1: Firmware version (0.0) predates our first public release. [ 258.484401][ T5892] usb 5-1: Please update to version 0.2 or newer [ 258.559828][ T6236] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 258.608520][ T5892] usb 5-1: Firmware: build  [ 258.679951][ T12] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 258.716541][ T12] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 258.822470][ T12] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 258.876267][ T12] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 259.072768][ T5892] usb 5-1: USB disconnect, device number 4 [ 260.167163][ T5892] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 260.349407][ T6492] loop2: detected capacity change from 0 to 512 [ 260.405733][ T5892] usb 2-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 260.452092][ T5892] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 260.460308][ T5892] usb 2-1: Product: syz [ 260.524511][ T5892] usb 2-1: Manufacturer: syz [ 260.529321][ T5892] usb 2-1: SerialNumber: syz [ 260.591148][ T6492] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 260.731003][ T5892] usb 2-1: config 0 descriptor?? [ 260.810136][ T6502] netlink: 'syz.4.142': attribute type 1 has an invalid length. [ 260.828783][ T6492] EXT4-fs error (device loop2): ext4_get_first_dir_block:3527: inode #12: comm syz.2.141: Directory block failed checksum [ 261.255726][ T6506] bond1: (slave geneve2): making interface the new active one [ 261.260652][ T5783] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 261.268486][ T6506] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 261.302606][ T57] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 261.319417][ T57] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 261.361986][ T149] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 261.401959][ T149] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 261.449225][ T5892] usb 2-1: Firmware version (0.0) predates our first public release. [ 261.496054][ T5892] usb 2-1: Please update to version 0.2 or newer [ 261.655197][ T5892] usb 2-1: USB disconnect, device number 3 [ 261.885197][ T6518] netlink: 36 bytes leftover after parsing attributes in process `syz.2.143'. [ 263.210265][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 263.253427][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 263.495962][ T57] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 263.561995][ T57] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 264.140105][ T6554] ===================================================== [ 264.147779][ T6554] BUG: KMSAN: uninit-value in ieee802154_hdr_push+0x9a4/0xa30 [ 264.156810][ T6554] ieee802154_hdr_push+0x9a4/0xa30 [ 264.162573][ T6554] ieee802154_header_create+0x854/0xb90 [ 264.168299][ T6554] dgram_sendmsg+0xb55/0x16f0 [ 264.173258][ T6554] ieee802154_sock_sendmsg+0x91/0xe0 [ 264.178636][ T6554] ____sys_sendmsg+0xf37/0xfd0 [ 264.183681][ T6554] ___sys_sendmsg+0x271/0x3b0 [ 264.188422][ T6554] __sys_sendmsg+0x1aa/0x300 [ 264.193658][ T6554] __ia32_compat_sys_sendmsg+0xa4/0x100 [ 264.199361][ T6554] ia32_sys_call+0x1e4a/0x4360 [ 264.204343][ T6554] __do_fast_syscall_32+0x17f/0x3f0 [ 264.209840][ T6554] do_fast_syscall_32+0x37/0x80 [ 264.215324][ T6554] do_SYSENTER_32+0x1f/0x30 [ 264.219920][ T6554] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 264.226795][ T6554] [ 264.229151][ T6554] Uninit was stored to memory at: [ 264.234433][ T6554] ieee802154_hdr_push+0x99d/0xa30 [ 264.239639][ T6554] ieee802154_header_create+0x854/0xb90 [ 264.246192][ T6554] dgram_sendmsg+0xb55/0x16f0 [ 264.251065][ T6554] ieee802154_sock_sendmsg+0x91/0xe0 [ 264.257860][ T6554] ____sys_sendmsg+0xf37/0xfd0 [ 264.263200][ T6554] ___sys_sendmsg+0x271/0x3b0 [ 264.268221][ T6554] __sys_sendmsg+0x1aa/0x300 [ 264.272961][ T6554] __ia32_compat_sys_sendmsg+0xa4/0x100 [ 264.278607][ T6554] ia32_sys_call+0x1e4a/0x4360 [ 264.283551][ T6554] __do_fast_syscall_32+0x17f/0x3f0 [ 264.288973][ T6554] do_fast_syscall_32+0x37/0x80 [ 264.294442][ T6554] do_SYSENTER_32+0x1f/0x30 [ 264.299175][ T6554] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 264.306566][ T6554] [ 264.309011][ T6554] Local variable hdr created at: [ 264.314079][ T6554] ieee802154_header_create+0x4e/0xb90 [ 264.319641][ T6554] dgram_sendmsg+0xb55/0x16f0 [ 264.324561][ T6554] [ 264.326942][ T6554] CPU: 1 UID: 0 PID: 6554 Comm: syz.4.152 Not tainted syzkaller #0 PREEMPT(full) [ 264.336341][ T6554] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 264.346555][ T6554] ===================================================== [ 264.353600][ T6554] Disabling lock debugging due to kernel taint [ 264.412119][ T6554] Kernel panic - not syncing: kmsan.panic set ... [ 264.418685][ T6554] CPU: 1 UID: 0 PID: 6554 Comm: syz.4.152 Tainted: G B syzkaller #0 PREEMPT(full) [ 264.429554][ T6554] Tainted: [B]=BAD_PAGE [ 264.433752][ T6554] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 264.443923][ T6554] Call Trace: [ 264.447276][ T6554] [ 264.450283][ T6554] __dump_stack+0x26/0x30 [ 264.454714][ T6554] dump_stack_lvl+0x50/0x1c0 [ 264.459407][ T6554] ? dump_stack+0x12/0x25 [ 264.463948][ T6554] dump_stack+0x1e/0x25 [ 264.468268][ T6554] vpanic+0x7b4/0x1430 [ 264.472482][ T6554] panic+0x15d/0x160 [ 264.476554][ T6554] kmsan_report+0x31a/0x320 [ 264.481322][ T6554] ? __msan_warning+0x1b/0x30 [ 264.486179][ T6554] ? ieee802154_hdr_push+0x9a4/0xa30 [ 264.491640][ T6554] ? ieee802154_header_create+0x854/0xb90 [ 264.497529][ T6554] ? dgram_sendmsg+0xb55/0x16f0 [ 264.503003][ T6554] ? ieee802154_sock_sendmsg+0x91/0xe0 [ 264.508615][ T6554] ? ____sys_sendmsg+0xf37/0xfd0 [ 264.513734][ T6554] ? ___sys_sendmsg+0x271/0x3b0 [ 264.518672][ T6554] ? __sys_sendmsg+0x1aa/0x300 [ 264.523520][ T6554] ? __ia32_compat_sys_sendmsg+0xa4/0x100 [ 264.529329][ T6554] ? ia32_sys_call+0x1e4a/0x4360 [ 264.534348][ T6554] ? __do_fast_syscall_32+0x17f/0x3f0 [ 264.540077][ T6554] ? do_fast_syscall_32+0x37/0x80 [ 264.545833][ T6554] ? do_SYSENTER_32+0x1f/0x30 [ 264.550605][ T6554] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 264.557235][ T6554] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 264.563857][ T6554] ? ___sys_sendmsg+0x271/0x3b0 [ 264.568848][ T6554] ? __sys_sendmsg+0x1aa/0x300 [ 264.573746][ T6554] ? kmsan_get_metadata+0xf1/0x160 [ 264.579040][ T6554] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 264.585500][ T6554] ? kmsan_internal_unpoison_memory+0x14/0x20 [ 264.591698][ T6554] ? kmsan_get_metadata+0xf1/0x160 [ 264.596948][ T6554] ? kmsan_internal_memmove_metadata+0x91/0x230 [ 264.603332][ T6554] ? kmsan_get_metadata+0xf1/0x160 [ 264.608673][ T6554] ? kmsan_internal_memmove_metadata+0x181/0x230 [ 264.615141][ T6554] ? kmsan_get_metadata+0xf1/0x160 [ 264.620389][ T6554] __msan_warning+0x1b/0x30 [ 264.625001][ T6554] ieee802154_hdr_push+0x9a4/0xa30 [ 264.630249][ T6554] ? __msan_memcpy+0x105/0x1c0 [ 264.635158][ T6554] ieee802154_header_create+0x854/0xb90 [ 264.640839][ T6554] ? kmsan_get_metadata+0xf1/0x160 [ 264.646081][ T6554] dgram_sendmsg+0xb55/0x16f0 [ 264.650899][ T6554] ? __pfx_ieee802154_header_create+0x10/0x10 [ 264.657131][ T6554] ? __pfx_dgram_sendmsg+0x10/0x10 [ 264.662433][ T6554] ieee802154_sock_sendmsg+0x91/0xe0 [ 264.667934][ T6554] ? __pfx_ieee802154_sock_sendmsg+0x10/0x10 [ 264.674268][ T6554] ____sys_sendmsg+0xf37/0xfd0 [ 264.679248][ T6554] ___sys_sendmsg+0x271/0x3b0 [ 264.684112][ T6554] ? kmsan_get_metadata+0xf1/0x160 [ 264.689444][ T6554] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 264.695412][ T6554] ? __rcu_read_unlock+0x6c/0xd0 [ 264.700562][ T6554] ? __fget_files+0x3b4/0x4a0 [ 264.705374][ T6554] ? __fget_files+0x3b9/0x4a0 [ 264.710139][ T6554] ? kmsan_get_metadata+0xf1/0x160 [ 264.715366][ T6554] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 264.721332][ T6554] __sys_sendmsg+0x1aa/0x300 [ 264.726040][ T6554] __ia32_compat_sys_sendmsg+0xa4/0x100 [ 264.731715][ T6554] ia32_sys_call+0x1e4a/0x4360 [ 264.736596][ T6554] __do_fast_syscall_32+0x17f/0x3f0 [ 264.741898][ T6554] do_fast_syscall_32+0x37/0x80 [ 264.746828][ T6554] do_SYSENTER_32+0x1f/0x30 [ 264.751431][ T6554] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 264.757945][ T6554] RIP: 0023:0xf7f64f6c [ 264.762095][ T6554] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 264.781894][ T6554] RSP: 002b:00000000f540550c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 264.790410][ T6554] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 00000000800001c0 [ 264.798722][ T6554] RDX: 0000000000004000 RSI: 0000000000000000 RDI: 0000000000000000 [ 264.806766][ T6554] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 264.814790][ T6554] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 264.822821][ T6554] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 264.830865][ T6554] [ 264.834267][ T6554] Kernel Offset: disabled [ 264.838679][ T6554] Rebooting in 86400 seconds..