last executing test programs: 9.306978784s ago: executing program 0 (id=1): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={0x0}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 8.534547673s ago: executing program 0 (id=6): mmap(&(0x7f00004b8000/0x2000)=nil, 0x2000, 0x0, 0x2010, 0xffffffffffffffff, 0xede6000) r0 = userfaultfd(0x80801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x208}) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x10000, &(0x7f0000000080), 0x3, 0x4d0, &(0x7f0000019280)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mremap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000fff000/0x1000)=nil) socket(0xa, 0x3, 0x3a) r3 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') pread64(r3, &(0x7f0000000200)=""/102400, 0x19000, 0x1000000000) ioctl$UFFDIO_WRITEPROTECT(r0, 0xc018aa06, &(0x7f00000000c0)={{&(0x7f00001c7000/0x3000)=nil, 0x3000}, 0x1}) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, 0x0) 7.286511928s ago: executing program 2 (id=7): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000280)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x1c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x84}, 0x0) 6.654236607s ago: executing program 0 (id=8): unshare(0x22020600) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c"], 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000280)={r0, 0x68, &(0x7f0000000200)}, 0x10) 6.630797812s ago: executing program 2 (id=9): read$fb(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000003c0)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x800}, 0x50) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000140)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x7ff, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3, 0x9, 0x0, 0x1, 0x3801}, {0x2c}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0xffc0}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8, 0x20}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x7, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sk_msg=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe}, 0x94) 6.208771019s ago: executing program 3 (id=4): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x800}, 0x50) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000140)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x7ff, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3, 0x9, 0x0, 0x1, 0x3801}, {0x2c}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0xffc0}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8, 0x20}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x7, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sk_msg=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe}, 0x94) 4.245599688s ago: executing program 0 (id=10): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet6(0xa, 0x805, 0x0) syz_open_dev$sndctrl(&(0x7f0000000000), 0x1, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$dvb_frontend(&(0x7f00000002c0), 0x0, 0x0) sendmsg$nl_generic(r4, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, 0x0, &(0x7f0000000440)) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8923, &(0x7f00000000c0)={'lo\x00', @random="01320136b1ff"}) 4.059424471s ago: executing program 4 (id=5): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x80071c, &(0x7f00000000c0)={[{@nogrpid}, {@acl}, {@lazytime}, {@noblock_validity}, {@errors_continue}]}, 0x1, 0x4c0, &(0x7f00000006c0)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b) syz_mount_image$ext4(&(0x7f0000001d40)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000000a40)={[{@auto_da_alloc}, {@barrier}, {@noblock_validity}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x4}}, {@delalloc}, {@auto_da_alloc}]}, 0x1, 0x490, &(0x7f0000000580)="$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") open(&(0x7f0000000040)='./bus\x00', 0x400141042, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000e80), 0x0, 0x931766f6719c6d41) mount(0x0, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x8000, 0xa0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000c00)={0x0, 0x0, 0x0, 0x0, 0x8005, 0x0, 0x0, 0x3, 0xd, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c67808cf335263bd9bffbcc2542ded71038259ca171ce1a311ef07ec3ad71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x9]}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000440)={'sit0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @empty}}}}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 2.581671412s ago: executing program 2 (id=11): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$inet6(0xa, 0x2, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x802, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000440)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x58, 0x18, &(0x7f00000005c0)={@flat=@weak_binder={0x77622a85, 0x1000}, @flat=@binder={0x73622a85, 0x1000}, @ptr={0x70742a85, 0x0, &(0x7f0000000500)=""/78, 0x4e, 0x2, 0x31}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 2.035368998s ago: executing program 3 (id=12): unshare(0x22020600) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c"], 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000280)={r0, 0x68, &(0x7f0000000200)}, 0x10) 1.086878262s ago: executing program 2 (id=13): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={0x0}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 955.94402ms ago: executing program 0 (id=14): socket$netlink(0x10, 0x3, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8}, 0x28) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000000400000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) 809.284665ms ago: executing program 2 (id=15): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, 0x0}], 0x1, 0x5f, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x43, 0x0, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f0000000040)=0x1000) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000002c0)={0x1, 0x0, [{0x40000073, 0x0, 0x81}]}) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@x86={0x40, 0x1, 0xc, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x80, 0x9, 0x0, 0x0, 0x0, 0xfffffff8, 0x0, 0xff, 0xff}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 775.159229ms ago: executing program 3 (id=16): r0 = socket$nl_route(0x10, 0x3, 0x0) syz_mount_image$udf(&(0x7f0000000c40), &(0x7f0000000340)='./file0\x00', 0x0, &(0x7f0000000100)=ANY=[], 0x43, 0xc20, &(0x7f0000001940)="$eJzs3U1sHOd9P/Dfs0OaS/r/d+g4kZM2ThdIkQhMJegtEgMVARUzbAMochCKQX0Kly9SFqaWAkk1ctoGbIu0QC9BfSl6KYimRgvk0FPdY5nGBRIUAYogh/RQgEATw4ceeAhQoIXDYmafJZcSJTGWKVL252PQ39mZ3yyfZ57V7CzAZycAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgIjPfu7SqdPpsFsBADxKVya/dOqs938AeE+5+vY+//cdSGMAAAAAAAAAAAAAAIC9pCjiWKQYem0zTVePO+qXW+1bt6fGJ+7e5dmIGEyRohZFVV/+1E+fOXvuU+cvjHbz3vsfhA/HC5NXLzWeX7xxc2l+eXl+rjHVbs0uzs3v+xkedv87jVQHoHHjpVtz164tN86cPLtr8+3hNwaePDZ88cKJ86Pd2qnxiYnJnpq+/rf92+9yrxkeT0QRzUjx1vCbqRkRtXj4Y3Gf186jMFh1YqTqxNT4RNWRhVazvVJuTLVcVYto9Ow01j1Gj2AsHspYxGrZ/LLBI2X3Jm82l5ozC/ONLzaXVlorrcV2qnVaW/anEbUYTRFrEbExcPfT9UcRH40Ur5zaTDMRUXSPwyericEPbk/tAPq4D2U7G/0Ra7XHYMyOsIEo4kqk+Pnrx2M2z+uq5nZ9POILZb4W8WqZn4lI5QvjXMTP9ngd8XjqiyJ+GCkW02aaq84H3fPK5S83Pt++tthT2z2vPPbvD4/SET831aOImeqMv5ne/sUOAAAAAAAAAAAAAAAAAO+0wSji25Hij5/73WpecVTz0t93cfT/vfhbvXPGn33A85S1JyNitba/Obn9eepwqpX/HUDH2Jd6FPGNPP/vDw+7MQAAAAAAAAAAAAAAAAAAAO9pRbwYKb5y4nhai957irfa1xtXmzMLnbvCdu/9271n+tbW1lYjdXIs53TO1ZxrOddzbuSMWt4/51jO6ZyrOddyrufcyBlF3j/nWM7pnKs513Ku59zIGX15/5xjOadzruZcy7mecyNnHJF79wIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAvJvUoohfRIpvfW0zRYqIsYjp6OT6wGG3DgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAo1VMRJyPF+ov16vFaLeJqRPxia2ur+xMRm2U+rMPuKwAAAAAAAAAAAAAAAAAAABxZqYiPRYpn/mczNSLi9vAbA08eG7544cT50SKKSGVJb/0Lk1cvNZ5fvHFzaX55eX6uMdVuzS7Oze/319Uvt9q3bk+NTxxIZx5o8IDbP1h/fvHmy0ut619d2XP7UP3SzPLKUnN2780xGLWI6d41I1WDp8YnqkYvtJrtatdUu0cDaxFj++0MAAAAAAAAAAAAAAAAAAAAR8ZQKuJzkeKn/3EudeeN93Xm/P//zqNiu/bV39/5LoCFO7Kr9/sD9rOc9tvQkWrifWNqfGJismd1X//dpWWbUiri2UjxiVc+VM2HTzG059z4su6psu7GuVw3/Ktl3equqvrI1PhE48pi+8SlhYXF2eZKc2ZhvjF5szm77y8OAAAAAAAAAAAAAAAAAAAAgPsYSkX8OFL819/9W+redz7P/+/rPOqZ//+b1RT6Sj3tzm3V3P6nqrn9neX3XRwd+uhz91p/EPP/yzalVMQ3I8XZH3+oup9+d/7/9B21Zd2fRoo3n/tIrqs9UdY1u93pPOO11sL8qbL2ryLFr73VrY2q9nqufWan9nRZOxgp/mJzd+1Xc+0HdmrPlLXHI8X3/nPv2g/u1J4ta38aKf7xbxvd2qGy9vdy7bGd2pOziwtzDzqs5fh/J1L8zZXfTt0+33P8e77/YfWO3HbXmN9/+Z0a/+Gedat5XP8kj3/zAeN/PlJ8p/6RXNc59jN5+9PV/3fG/xOR4t//dXfttVz7/p3a0/vt1mErx//bkeK7f/mT7T6nzk//zqOO3vH/lb7duf0qOaTxf7pn3XBu1+wveSzei5Zf/vpLzYWF+SULFixY2F447DMTj0L5/v9nkeJ/jxWpex3Tuf57Kj/auf7772/svP9fvCO3HdL7//t71l3MVy39fRH1lRs3+5+NqC+//PUTrRvN6/PX59tnTp/69KfPnz51+nz/E92Lu52l/bboXaEc/x9Eih/9/Y+2P8f07br+2/v6f+iO3HZI4/9Mb592Xdfs+1C8J5Xj/9eR4unP/mT782bffa7/u5//j39sd27/+zuk8f9Az7rh3K7WL3ksAAAAAAAAAAAAHidDqYg/jxS/80e/kbpziPbz939zd+S2Q/r7r2M96+Ye0byGfR9kAIAjpLz++2Ck+Ket72/P5d59/Re/3q3tvf67l6Nw/38AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHjcpSjiDyLF0GubaX2gfNxRv9xq37o9NT6x926DKVLUoqjqy5/66TNnz33q/IXRbt5//3fah+OFyauXGs8v3ri5NL+8PD/XmGq3Zhfn5vf9DA+7/51GqgPQuPHSrblr15YbZ06e3bX59vAbA08eG7544cT50W7t1PjExGRPTV//2/7td0n3WP9EFPH9SPHW8JvpuwMRtXj4Y/GA185BG6w6MVJ1Ymp8ourIQqvZXik3plquqkU0enYa6x6jRzAWD2UsYrVsftngkbJ7kzebS82ZhfnGF5tLK62V1mI71TqtLfvTiFqMpoi1iNgYuPvp+qOIb0aKV05tpn8eiCi6x+GTVya/dOrsg9tTO4A+7kPZzkZ/xFrtMRizI2wgiviHSPHz14/H9wYi+iLih+WGj0d8oczXIl4t8zMRqXxhnIv42R6vIx5PfVHEuUixmDbT6wPl+aB7Xrn85cbn29cWe2q755XH/v3hUTri56Z6FPGD6oy/mf7Fv2sAAAAAAAAAAAAAAACAI6SItUjxlRPHUzU/eHtOcat9vXG1ObPQmdbXnfvXnTO9tbW11UidHMs5nXM151rO9ZwbOaOW9885lnM652rOtZzrOTdyRpH3zzmWczrnas61nOs5N3JGX94/51jO6ZyrOddyrufcyBlHZO4eAAAAAAAAAAAAAAAAAADw7lKLorqL+7e+tpm2Bjr3l56OTq67H+i73v8FAAD//49mddo=") mkdir(&(0x7f0000000000)='./control\x00', 0x85) r1 = syz_open_dev$sndctrl(&(0x7f0000000480), 0x0, 0x40) ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r1, 0xc0405519, &(0x7f00000004c0)={0xf, 0x0, 0xdd, 0x7fffffff, 'syz1\x00', 0x3}) mount(0x0, &(0x7f0000000240)='.\x00', 0x0, 0x2200020, 0x0) rmdir(&(0x7f0000000040)='./control\x00') sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x1, 0x70bd2e, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x4}, [@IFLA_IFNAME={0x14, 0x3, 'veth0_macvtap\x00'}, @IFLA_VFINFO_LIST={0x14, 0x16, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@IFLA_VF_TRUST={0xc, 0x9, {0x2, 0x7fffffff}}]}]}]}, 0x48}}, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed}]}) r2 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000200)={[0xc45, 0x9, 0xfffffffffffffffd, 0x0, 0x10000, 0x3, 0x4002004c2, 0x7ff, 0x9, 0x6, 0x400, 0x80, 0x100089, 0x0, 0x8, 0x8d], 0x100000, 0x240046}) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 342.322474ms ago: executing program 1 (id=2): prctl$PR_SET_MM(0x23, 0x6, &(0x7f0000ffc000/0x4000)=nil) mprotect(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffb}, [@call={0x85, 0x0, 0x0, 0xbc}, @call={0x85, 0x0, 0x0, 0xf}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0xfe2c, 0x0, &(0x7f0000000100)="54ae1f8219560625baa794a469ce", 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x448c0}, 0x400504c) r2 = gettid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r3, 0x5452, &(0x7f0000b28000)=0x3) fcntl$setsig(r3, 0xa, 0x12) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r5 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x2a8302, 0x80) socket$nl_route(0x10, 0x3, 0x0) r6 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) readv(r4, &(0x7f0000000400)=[{&(0x7f00000004c0)=""/157, 0x9d}], 0x1) fcntl$setown(r3, 0x8, r2) tkill(r2, 0x13) 170.569671ms ago: executing program 4 (id=17): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xffff, 0x20000000000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x7b53a000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsopen(0x0, 0x1) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000000cc0)="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", 0x2000, &(0x7f0000003ec0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lseek(0xffffffffffffffff, 0xffffffffffffffff, 0x1) 94.601678ms ago: executing program 0 (id=18): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r0, 0x0, 0x0, 0x2100, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) openat$ppp(0xffffffffffffff9c, 0x0, 0x80, 0x0) unshare(0x26020480) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000040)={0x3, &(0x7f0000000140)=[{0x20, 0x0, 0x0, 0xfffff024}, {0x94, 0x0, 0x0, 0xffeff024}, {0x6, 0x0, 0x4}]}, 0x10) socket(0x2, 0x6, 0x5) sendmsg$unix(r1, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000780)=ANY=[@ANYBLOB], 0x18}, 0x0) 0s ago: executing program 2 (id=19): add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000140), 0x0, 0xfffffffffffffffe) pipe2(&(0x7f0000000340)={0x0, 0x0}, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) socket$kcm(0x10, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) writev(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000000c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="01002bbd70000e0010005400"], 0x14}, 0x1, 0x0, 0x0, 0x20000850}, 0x4000000) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.52' (ED25519) to the list of known hosts. [ 155.728742][ T5558] cgroup: Unknown subsys name 'net' [ 155.851024][ T5558] cgroup: Unknown subsys name 'cpuset' [ 155.864674][ T5558] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 161.346470][ T5558] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 165.663084][ T48] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 165.685801][ T5586] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 165.695049][ T5586] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 165.700324][ T5581] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 165.710672][ T5581] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 165.712816][ T5586] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 165.721540][ T5581] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 165.727473][ T5586] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 165.752650][ T5581] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 165.776906][ T5589] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 165.777136][ T5590] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 165.798564][ T5590] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 165.810168][ T5590] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 165.813539][ T5589] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 165.825716][ T5590] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 165.834788][ T5590] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 165.849504][ T5590] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 165.854614][ T5589] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 165.878092][ T5589] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 165.899470][ T4871] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 165.913544][ T4871] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 165.924628][ T5586] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 165.936877][ T5586] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 165.953148][ T5586] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 165.968167][ T5586] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 167.873210][ T5586] Bluetooth: hci1: command tx timeout [ 167.952180][ T5586] Bluetooth: hci3: command tx timeout [ 167.957840][ T5586] Bluetooth: hci0: command tx timeout [ 167.963664][ T5590] Bluetooth: hci2: command tx timeout [ 168.042005][ T5590] Bluetooth: hci4: command tx timeout [ 169.952272][ T5590] Bluetooth: hci1: command tx timeout [ 170.032191][ T5590] Bluetooth: hci2: command tx timeout [ 170.032281][ T4871] Bluetooth: hci0: command tx timeout [ 170.037814][ T5590] Bluetooth: hci3: command tx timeout [ 170.096821][ T5576] bridge0: port 1(bridge_slave_0) entered blocking state [ 170.113255][ T5576] bridge0: port 1(bridge_slave_0) entered disabled state [ 170.114769][ T5590] Bluetooth: hci4: command tx timeout [ 170.128834][ T5576] bridge_slave_0: entered allmulticast mode [ 170.142418][ T5576] bridge_slave_0: entered promiscuous mode [ 170.235996][ T5576] bridge0: port 2(bridge_slave_1) entered blocking state [ 170.246395][ T5576] bridge0: port 2(bridge_slave_1) entered disabled state [ 170.255551][ T5576] bridge_slave_1: entered allmulticast mode [ 170.266347][ T5576] bridge_slave_1: entered promiscuous mode [ 170.290301][ T5577] bridge0: port 1(bridge_slave_0) entered blocking state [ 170.312278][ T5577] bridge0: port 1(bridge_slave_0) entered disabled state [ 170.320087][ T5577] bridge_slave_0: entered allmulticast mode [ 170.351091][ T5577] bridge_slave_0: entered promiscuous mode [ 170.440019][ T5577] bridge0: port 2(bridge_slave_1) entered blocking state [ 170.448034][ T5577] bridge0: port 2(bridge_slave_1) entered disabled state [ 170.457281][ T5577] bridge_slave_1: entered allmulticast mode [ 170.471440][ T5577] bridge_slave_1: entered promiscuous mode [ 170.522517][ T5576] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 170.656144][ T5576] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 170.715712][ T5580] bridge0: port 1(bridge_slave_0) entered blocking state [ 170.723498][ T5580] bridge0: port 1(bridge_slave_0) entered disabled state [ 170.730942][ T5580] bridge_slave_0: entered allmulticast mode [ 170.740460][ T5580] bridge_slave_0: entered promiscuous mode [ 170.750957][ T5585] bridge0: port 1(bridge_slave_0) entered blocking state [ 170.759349][ T5585] bridge0: port 1(bridge_slave_0) entered disabled state [ 170.766898][ T5585] bridge_slave_0: entered allmulticast mode [ 170.775459][ T5585] bridge_slave_0: entered promiscuous mode [ 170.817411][ T5577] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 170.827345][ T5580] bridge0: port 2(bridge_slave_1) entered blocking state [ 170.835243][ T5580] bridge0: port 2(bridge_slave_1) entered disabled state [ 170.842860][ T5580] bridge_slave_1: entered allmulticast mode [ 170.850937][ T5580] bridge_slave_1: entered promiscuous mode [ 170.881036][ T5585] bridge0: port 2(bridge_slave_1) entered blocking state [ 170.888957][ T5585] bridge0: port 2(bridge_slave_1) entered disabled state [ 170.896644][ T5585] bridge_slave_1: entered allmulticast mode [ 170.904774][ T5585] bridge_slave_1: entered promiscuous mode [ 170.920813][ T5576] team0: Port device team_slave_0 added [ 170.934291][ T5577] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 171.110392][ T5576] team0: Port device team_slave_1 added [ 171.163832][ T5582] bridge0: port 1(bridge_slave_0) entered blocking state [ 171.171479][ T5582] bridge0: port 1(bridge_slave_0) entered disabled state [ 171.180254][ T5582] bridge_slave_0: entered allmulticast mode [ 171.188364][ T5582] bridge_slave_0: entered promiscuous mode [ 171.268656][ T5580] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 171.278624][ T5582] bridge0: port 2(bridge_slave_1) entered blocking state [ 171.286311][ T5582] bridge0: port 2(bridge_slave_1) entered disabled state [ 171.294136][ T5582] bridge_slave_1: entered allmulticast mode [ 171.302452][ T5582] bridge_slave_1: entered promiscuous mode [ 171.318746][ T5585] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 171.357217][ T5577] team0: Port device team_slave_0 added [ 171.370052][ T5577] team0: Port device team_slave_1 added [ 171.383300][ T5580] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 171.422823][ T5585] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 171.434414][ T5576] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 171.441511][ T5576] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 171.467825][ T5576] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 171.572818][ T5576] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 171.579849][ T5576] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 171.606116][ T5576] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 171.667740][ T5582] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 171.717308][ T5577] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 171.724702][ T5577] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 171.750832][ T5577] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 171.769820][ T5580] team0: Port device team_slave_0 added [ 171.782678][ T5582] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 171.798150][ T5585] team0: Port device team_slave_0 added [ 171.815821][ T5585] team0: Port device team_slave_1 added [ 171.824310][ T5577] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 171.831385][ T5577] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 171.858308][ T5577] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 171.876440][ T5580] team0: Port device team_slave_1 added [ 172.033447][ T5590] Bluetooth: hci1: command tx timeout [ 172.083739][ T5582] team0: Port device team_slave_0 added [ 172.112228][ T5590] Bluetooth: hci0: command tx timeout [ 172.112374][ T5586] Bluetooth: hci2: command tx timeout [ 172.119950][ T5585] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 172.126145][ T4871] Bluetooth: hci3: command tx timeout [ 172.130571][ T5585] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 172.162287][ T5585] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 172.180275][ T5585] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 172.187704][ T5585] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 172.214016][ T5585] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 172.215104][ T4871] Bluetooth: hci4: command tx timeout [ 172.229070][ T5580] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 172.237682][ T5580] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 172.264106][ T5580] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 172.283892][ T5582] team0: Port device team_slave_1 added [ 172.300934][ T5576] hsr_slave_0: entered promiscuous mode [ 172.309931][ T5576] hsr_slave_1: entered promiscuous mode [ 172.358424][ T5580] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 172.365600][ T5580] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 172.391859][ T5580] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 172.469292][ T5577] hsr_slave_0: entered promiscuous mode [ 172.477709][ T5577] hsr_slave_1: entered promiscuous mode [ 172.485685][ T5577] debugfs: 'hsr0' already exists in 'hsr' [ 172.491509][ T5577] Cannot create hsr debugfs directory [ 172.548970][ T5582] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 172.556301][ T5582] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 172.582766][ T5582] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 172.646026][ T5582] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 172.653185][ T5582] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 172.680615][ T5582] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 172.821921][ T5585] hsr_slave_0: entered promiscuous mode [ 172.830265][ T5585] hsr_slave_1: entered promiscuous mode [ 172.838338][ T5585] debugfs: 'hsr0' already exists in 'hsr' [ 172.844256][ T5585] Cannot create hsr debugfs directory [ 172.905358][ T5580] hsr_slave_0: entered promiscuous mode [ 172.915314][ T5580] hsr_slave_1: entered promiscuous mode [ 172.924081][ T5580] debugfs: 'hsr0' already exists in 'hsr' [ 172.929956][ T5580] Cannot create hsr debugfs directory [ 173.187634][ T5582] hsr_slave_0: entered promiscuous mode [ 173.196325][ T5582] hsr_slave_1: entered promiscuous mode [ 173.204422][ T5582] debugfs: 'hsr0' already exists in 'hsr' [ 173.210321][ T5582] Cannot create hsr debugfs directory [ 174.112112][ T4871] Bluetooth: hci1: command tx timeout [ 174.137171][ T5576] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 174.162513][ T5576] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 174.175198][ T5576] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 174.194897][ T5576] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 174.194925][ T4871] Bluetooth: hci0: command tx timeout [ 174.202515][ T5586] Bluetooth: hci2: command tx timeout [ 174.213537][ T4871] Bluetooth: hci3: command tx timeout [ 174.230003][ T5576] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 174.248326][ T5576] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 174.259482][ T5576] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 174.272115][ T4871] Bluetooth: hci4: command tx timeout [ 174.280538][ T5576] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 174.377734][ T5577] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 174.401135][ T5577] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 174.414936][ T5577] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 174.429900][ T5577] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 174.440215][ T5577] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 174.459632][ T5577] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 174.479082][ T5577] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 174.498736][ T5577] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 174.688149][ T5585] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 174.705580][ T5585] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 174.725469][ T5585] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 174.741565][ T5585] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 174.753665][ T5585] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 174.772245][ T5585] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 174.782557][ T5585] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 174.800050][ T5585] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 175.062600][ T5580] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 175.080308][ T5580] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 175.110451][ T5580] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 175.131640][ T5580] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 175.141139][ T5580] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 175.161699][ T5580] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 175.198212][ T5580] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 175.218565][ T5580] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 175.430242][ T5582] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 175.449981][ T5582] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 175.460361][ T5582] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 175.479520][ T5582] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 175.523101][ T5582] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 175.541509][ T5582] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 175.568123][ T5582] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 175.587145][ T5582] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 175.629055][ T5576] 8021q: adding VLAN 0 to HW filter on device bond0 [ 175.770167][ T5577] 8021q: adding VLAN 0 to HW filter on device bond0 [ 175.827348][ T5576] 8021q: adding VLAN 0 to HW filter on device team0 [ 175.923616][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 175.930953][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 175.983013][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 175.990389][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 176.054898][ T5577] 8021q: adding VLAN 0 to HW filter on device team0 [ 176.072662][ T5585] 8021q: adding VLAN 0 to HW filter on device bond0 [ 176.151821][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 176.159194][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 176.239529][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 176.246938][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 176.328201][ T5585] 8021q: adding VLAN 0 to HW filter on device team0 [ 176.391633][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 176.399205][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 176.460378][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 176.467770][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 176.557925][ T5580] 8021q: adding VLAN 0 to HW filter on device bond0 [ 176.907157][ T5580] 8021q: adding VLAN 0 to HW filter on device team0 [ 177.022814][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 177.030205][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 177.085158][ T3228] bridge0: port 2(bridge_slave_1) entered blocking state [ 177.092734][ T3228] bridge0: port 2(bridge_slave_1) entered forwarding state [ 177.155281][ T5582] 8021q: adding VLAN 0 to HW filter on device bond0 [ 177.448576][ T5582] 8021q: adding VLAN 0 to HW filter on device team0 [ 177.586760][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 177.594288][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 177.679953][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 177.687490][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 179.754719][ T5576] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 179.868548][ T5577] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 180.324398][ T5585] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 180.462977][ T5576] veth0_vlan: entered promiscuous mode [ 180.727708][ T5576] veth1_vlan: entered promiscuous mode [ 180.751187][ T5577] veth0_vlan: entered promiscuous mode [ 180.953708][ T5580] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 180.974769][ T5577] veth1_vlan: entered promiscuous mode [ 181.296058][ T5576] veth0_macvtap: entered promiscuous mode [ 181.348286][ T5576] veth1_macvtap: entered promiscuous mode [ 181.389490][ T5582] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 181.517848][ T5577] veth0_macvtap: entered promiscuous mode [ 181.611132][ T5580] veth0_vlan: entered promiscuous mode [ 181.619971][ T5577] veth1_macvtap: entered promiscuous mode [ 181.636695][ T5576] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 181.720679][ T5576] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 181.791646][ T5580] veth1_vlan: entered promiscuous mode [ 181.843615][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.853721][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.868693][ T5577] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 181.906002][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.915774][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.017733][ T5577] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 182.045253][ T5585] veth0_vlan: entered promiscuous mode [ 182.170580][ T3249] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.181010][ T3249] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.222131][ T3249] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.238372][ T3249] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.286234][ T5585] veth1_vlan: entered promiscuous mode [ 182.340218][ T5580] veth0_macvtap: entered promiscuous mode [ 182.386928][ T5582] veth0_vlan: entered promiscuous mode [ 182.469535][ T5580] veth1_macvtap: entered promiscuous mode [ 182.561071][ T5582] veth1_vlan: entered promiscuous mode [ 182.736074][ T5580] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 182.885800][ T5580] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 182.963833][ T13] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.973221][ T13] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.996421][ T5585] veth0_macvtap: entered promiscuous mode [ 183.025777][ T56] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 183.055847][ T13] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 183.140238][ T5585] veth1_macvtap: entered promiscuous mode [ 183.361171][ T5582] veth0_macvtap: entered promiscuous mode [ 183.426982][ T5585] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 183.576899][ T5585] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 183.600405][ T5582] veth1_macvtap: entered promiscuous mode [ 183.781256][ T13] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 183.804155][ T13] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 183.857385][ T13] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 183.868170][ T13] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 184.066705][ T5582] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 184.187063][ T5582] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 184.333394][ T3221] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 184.369570][ T3221] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 184.423460][ T3221] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 184.479824][ T3221] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.833667][ T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 186.880916][ T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 187.130948][ T56] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 187.175199][ T56] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 187.506739][ T77] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 187.538808][ T77] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 187.644771][ T5576] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 187.855308][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 187.882109][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 188.432738][ T5829] Zero length message leads to an empty skb [ 189.095917][ T5839] loop0: detected capacity change from 0 to 512 [ 189.157656][ T1043] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 189.157742][ T1043] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 189.177299][ T5839] EXT4-fs error (device loop0): ext4_orphan_get:1397: inode #15: comm syz.0.6: iget: bad i_size value: 38620345925642 [ 189.177439][ T5839] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 189.179787][ T5839] EXT4-fs error (device loop0): ext4_orphan_get:1402: comm syz.0.6: couldn't read orphan inode 15 (err -117) [ 189.179926][ T5839] loop0: lost filesystem error report for type 5 error -117 [ 189.191698][ T5839] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 189.880265][ T1043] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 189.933852][ T1043] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 190.491377][ T77] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 190.563777][ T5576] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 190.574715][ T77] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 190.848425][ T3221] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 190.915116][ T3221] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 194.869180][ T5869] loop4: detected capacity change from 0 to 512 [ 195.075654][ T5869] EXT4-fs error (device loop4): ext4_orphan_get:1397: inode #15: comm syz.4.5: inode has both inline data and extents flags [ 195.193130][ T5869] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 195.194252][ T5869] EXT4-fs error (device loop4): ext4_orphan_get:1402: comm syz.4.5: couldn't read orphan inode 15 (err -117) [ 195.203887][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 195.203976][ C0] EXT4-fs (loop4): initial error at time 1778482389: ext4_orphan_get:1397: inode 15 [ 195.204145][ C0] EXT4-fs (loop4): last error at time 1778482389: ext4_orphan_get:1397: inode 15 [ 195.328792][ T5869] loop4: lost filesystem error report for type 5 error -117 [ 195.388841][ T5869] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 195.530636][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 195.620372][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 196.279310][ T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 196.351174][ T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 196.538090][ T29] audit: type=1804 audit(1778482391.164:2): pid=5877 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.5" name="/newroot/0/file1/bus" dev="loop4" ino=19 res=1 errno=0 [ 196.598711][ T5881] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 197.005772][ T5585] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 197.027194][ T5887] loop3: detected capacity change from 0 to 2048 [ 197.149823][ T5887] UDF-fs: error (device loop3): udf_process_sequence: Primary Volume Descriptor not found! [ 197.227985][ T5887] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 199.615849][ C1] ===================================================== [ 199.623082][ C1] BUG: KMSAN: uninit-value in __flush_smp_call_function_queue+0x343/0x1810 [ 199.631933][ C1] __flush_smp_call_function_queue+0x343/0x1810 [ 199.638345][ C1] generic_smp_call_function_single_interrupt+0x1c/0x30 [ 199.645515][ C1] __sysvec_call_function_single+0x48/0x350 [ 199.651795][ C1] sysvec_call_function_single+0x7c/0x90 [ 199.657588][ C1] asm_sysvec_call_function_single+0x1f/0x30 [ 199.663837][ C1] __msan_metadata_ptr_for_store_8+0x2f/0x40 [ 199.670093][ C1] update_stack_state+0x180/0x1c0 [ 199.675300][ C1] unwind_next_frame+0x116/0x350 [ 199.680409][ C1] arch_stack_walk+0x1b0/0x280 [ 199.685351][ C1] stack_trace_save+0xc2/0x100 [ 199.690285][ C1] kmsan_internal_poison_memory+0x4a/0x90 [ 199.696155][ C1] kmsan_slab_free+0xce/0x140 [ 199.700975][ C1] kfree+0x315/0x1100 [ 199.705093][ C1] skb_free_head+0xaf/0x610 [ 199.709748][ C1] skb_release_data+0x106b/0x1140 [ 199.714991][ C1] __kfree_skb+0x6b/0x260 [ 199.719539][ C1] consume_skb+0x86/0x260 [ 199.723989][ C1] ieee80211_iface_work+0x16be/0x2010 [ 199.729521][ C1] cfg80211_wiphy_work+0x354/0x850 [ 199.734862][ C1] process_scheduled_works+0xb65/0x1e40 [ 199.740768][ C1] worker_thread+0xee4/0x1590 [ 199.745701][ C1] kthread+0x53f/0x600 [ 199.750006][ C1] ret_from_fork+0x20f/0x8d0 [ 199.754722][ C1] ret_from_fork_asm+0x1a/0x30 [ 199.759631][ C1] [ 199.762010][ C1] Local variable cycles.i created at: [ 199.767433][ C1] clockevents_program_event+0x178/0x830 [ 199.773196][ C1] tick_program_event+0xfb/0x190 [ 199.778276][ C1] [ 199.780816][ C1] CPU: 1 UID: 0 PID: 5903 Comm: kworker/u8:13 Not tainted syzkaller #0 PREEMPT(full) [ 199.790491][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 199.800646][ C1] Workqueue: events_unbound cfg80211_wiphy_work [ 199.807042][ C1] ===================================================== [ 199.814044][ C1] Disabling lock debugging due to kernel taint [ 199.820255][ C1] Kernel panic - not syncing: kmsan.panic set ... [ 199.826757][ C1] CPU: 1 UID: 0 PID: 5903 Comm: kworker/u8:13 Tainted: G B syzkaller #0 PREEMPT(full) [ 199.838016][ C1] Tainted: [B]=BAD_PAGE [ 199.842226][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 199.852403][ C1] Workqueue: events_unbound cfg80211_wiphy_work [ 199.858825][ C1] Call Trace: [ 199.862184][ C1] [ 199.865095][ C1] __dump_stack+0x26/0x30 [ 199.869563][ C1] dump_stack_lvl+0x50/0x1c0 [ 199.874282][ C1] ? dump_stack+0x12/0x25 [ 199.878753][ C1] dump_stack+0x1e/0x25 [ 199.883056][ C1] vpanic+0x7b4/0x1430 [ 199.887294][ C1] panic+0x15d/0x160 [ 199.891376][ C1] kmsan_report+0x31a/0x320 [ 199.896037][ C1] ? __msan_warning+0x1b/0x30 [ 199.900847][ C1] ? __flush_smp_call_function_queue+0x343/0x1810 [ 199.907428][ C1] ? generic_smp_call_function_single_interrupt+0x1c/0x30 [ 199.914708][ C1] ? __sysvec_call_function_single+0x48/0x350 [ 199.920919][ C1] ? sysvec_call_function_single+0x7c/0x90 [ 199.926868][ C1] ? asm_sysvec_call_function_single+0x1f/0x30 [ 199.933173][ C1] ? __msan_metadata_ptr_for_store_8+0x2f/0x40 [ 199.939481][ C1] ? update_stack_state+0x180/0x1c0 [ 199.944844][ C1] ? unwind_next_frame+0x116/0x350 [ 199.950121][ C1] ? arch_stack_walk+0x1b0/0x280 [ 199.955207][ C1] ? stack_trace_save+0xc2/0x100 [ 199.960304][ C1] ? kmsan_internal_poison_memory+0x4a/0x90 [ 199.966358][ C1] ? kmsan_slab_free+0xce/0x140 [ 199.971346][ C1] ? kfree+0x315/0x1100 [ 199.975648][ C1] ? skb_free_head+0xaf/0x610 [ 199.980464][ C1] ? skb_release_data+0x106b/0x1140 [ 199.985806][ C1] ? __kfree_skb+0x6b/0x260 [ 199.990435][ C1] ? consume_skb+0x86/0x260 [ 199.995054][ C1] ? ieee80211_iface_work+0x16be/0x2010 [ 200.000730][ C1] ? cfg80211_wiphy_work+0x354/0x850 [ 200.006140][ C1] ? process_scheduled_works+0xb65/0x1e40 [ 200.012016][ C1] ? worker_thread+0xee4/0x1590 [ 200.017100][ C1] ? kthread+0x53f/0x600 [ 200.021491][ C1] ? ret_from_fork+0x20f/0x8d0 [ 200.026384][ C1] ? ret_from_fork_asm+0x1a/0x30 [ 200.031481][ C1] ? kmsan_get_metadata+0xf1/0x160 [ 200.036846][ C1] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 200.043338][ C1] ? kmsan_get_metadata+0xf1/0x160 [ 200.048612][ C1] ? kmsan_get_metadata+0xf1/0x160 [ 200.053882][ C1] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 200.060371][ C1] ? kmsan_get_metadata+0xf1/0x160 [ 200.065645][ C1] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 200.071618][ C1] ? kmsan_get_metadata+0xf1/0x160 [ 200.076894][ C1] __msan_warning+0x1b/0x30 [ 200.081543][ C1] __flush_smp_call_function_queue+0x343/0x1810 [ 200.087957][ C1] ? kmsan_get_metadata+0xf1/0x160 [ 200.093256][ C1] generic_smp_call_function_single_interrupt+0x1c/0x30 [ 200.100367][ C1] __sysvec_call_function_single+0x48/0x350 [ 200.106424][ C1] sysvec_call_function_single+0x7c/0x90 [ 200.112200][ C1] [ 200.115196][ C1] [ 200.118193][ C1] asm_sysvec_call_function_single+0x1f/0x30 [ 200.124323][ C1] RIP: 0010:__msan_metadata_ptr_for_store_8+0x2f/0x40 [ 200.131263][ C1] Code: 48 89 e5 53 48 83 ec 10 9c 8f 45 e8 0f 01 ca 48 8b 5d e8 be 08 00 00 00 ba 01 00 00 00 e8 99 26 00 00 48 89 5d f0 ff 75 f0 9d <48> 83 c4 10 5b 5d e9 d6 4f 4a 0e cc 0f 1f 44 00 00 90 90 90 90 90 [ 200.151006][ C1] RSP: 0000:ffff8880586433d0 EFLAGS: 00000282 [ 200.157197][ C1] RAX: ffff888057e434e0 RBX: 0000000000000282 RCX: 00000000001b8b4f [ 200.165265][ C1] RDX: ffff8880582434e0 RSI: 0000000000000001 RDI: ffff8880586434e0 [ 200.173337][ C1] RBP: ffff8880586433e8 R08: ffffea000000000f R09: ffff888058644000 [ 200.181414][ C1] R10: ffff888058640000 R11: 0000000000000001 R12: ffff888058643488 [ 200.189485][ C1] R13: 0000000000000000 R14: ffffffff8184b6ef R15: ffff888058643ed0 [ 200.197569][ C1] ? ret_from_fork+0x20f/0x8d0 [ 200.202508][ C1] update_stack_state+0x180/0x1c0 [ 200.207718][ C1] unwind_next_frame+0x116/0x350 [ 200.212835][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 200.219172][ C1] arch_stack_walk+0x1b0/0x280 [ 200.224108][ C1] ? kthread+0x53f/0x600 [ 200.228522][ C1] stack_trace_save+0xc2/0x100 [ 200.233461][ C1] kmsan_internal_poison_memory+0x4a/0x90 [ 200.239333][ C1] ? kfree+0x315/0x1100 [ 200.243641][ C1] ? kmsan_internal_poison_memory+0x4a/0x90 [ 200.249676][ C1] ? kmsan_slab_free+0xce/0x140 [ 200.254670][ C1] ? kfree+0x315/0x1100 [ 200.258976][ C1] ? skb_free_head+0xaf/0x610 [ 200.263789][ C1] ? skb_release_data+0x106b/0x1140 [ 200.269124][ C1] ? __kfree_skb+0x6b/0x260 [ 200.273746][ C1] ? consume_skb+0x86/0x260 [ 200.278371][ C1] ? ieee80211_iface_work+0x16be/0x2010 [ 200.284045][ C1] ? cfg80211_wiphy_work+0x354/0x850 [ 200.289456][ C1] ? process_scheduled_works+0xb65/0x1e40 [ 200.295321][ C1] ? worker_thread+0xee4/0x1590 [ 200.300312][ C1] ? kthread+0x53f/0x600 [ 200.304745][ C1] ? kmsan_get_metadata+0xf1/0x160 [ 200.310021][ C1] ? kmsan_get_metadata+0xf1/0x160 [ 200.315291][ C1] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 200.321270][ C1] ? kfree+0x1e1/0x1100 [ 200.325572][ C1] ? filter_irq_stacks+0x49/0x190 [ 200.330731][ C1] ? stack_depot_save_flags+0x35/0x790 [ 200.336353][ C1] ? kmsan_get_metadata+0xf1/0x160 [ 200.341634][ C1] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 200.348121][ C1] ? kmsan_get_metadata+0xf1/0x160 [ 200.353406][ C1] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 200.359371][ C1] kmsan_slab_free+0xce/0x140 [ 200.364196][ C1] kfree+0x315/0x1100 [ 200.368323][ C1] ? skb_free_head+0xaf/0x610 [ 200.373149][ C1] ? kmsan_get_metadata+0xf1/0x160 [ 200.378435][ C1] skb_free_head+0xaf/0x610 [ 200.383087][ C1] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 200.389067][ C1] skb_release_data+0x106b/0x1140 [ 200.394278][ C1] ? ieee80211_iface_work+0x16be/0x2010 [ 200.400143][ C1] __kfree_skb+0x6b/0x260 [ 200.404598][ C1] ? ieee80211_iface_work+0x16be/0x2010 [ 200.410289][ C1] consume_skb+0x86/0x260 [ 200.414773][ C1] ieee80211_iface_work+0x16be/0x2010 [ 200.420311][ C1] ? __pfx_ieee80211_iface_work+0x10/0x10 [ 200.426173][ C1] cfg80211_wiphy_work+0x354/0x850 [ 200.431610][ C1] ? __pfx_cfg80211_wiphy_work+0x10/0x10 [ 200.437384][ C1] process_scheduled_works+0xb65/0x1e40 [ 200.443150][ C1] worker_thread+0xee4/0x1590 [ 200.448014][ C1] kthread+0x53f/0x600 [ 200.452246][ C1] ? __pfx_worker_thread+0x10/0x10 [ 200.457524][ C1] ? __pfx_kthread+0x10/0x10 [ 200.462269][ C1] ret_from_fork+0x20f/0x8d0 [ 200.467014][ C1] ? __switch_to+0x573/0x7a0 [ 200.471803][ C1] ? __pfx_kthread+0x10/0x10 [ 200.476584][ C1] ret_from_fork_asm+0x1a/0x30 [ 200.481539][ C1] [ 200.484784][ C1] Kernel Offset: disabled [ 200.489153][ C1] Rebooting in 86400 seconds..