last executing test programs: 27m40.045839375s ago: executing program 32 (id=7): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xa9525000) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$tun(0xffffffffffffffff, &(0x7f0000000240)=ANY=[@ANYBLOB="034886dd0900300003003000000060ce902d"], 0xfdef) pwritev(r0, &(0x7f0000000600)=[{&(0x7f0000000240)="02000000", 0x1b}, {&(0x7f0000000080)="f6c9e32ae40f4dc0815fd0d897079a161cfb7702311e629acda76933ddd0c24165eb4d4d28d99f73071535534b2ce744440aa8cdc5aab34c689a95423df70dd6d743273b8f4edfe04c818640a2009a7501acdffa95b58c89e4ff78d363773d65dcd089b0a2faec1608bcb51f78a088acfb5776c00b86c304bb3a298fe0386425971a0e3014c853966b4a5f22b59736eabc5e77d720840b916215f16789e493bc97796e68318f84983461913d8f41e1622569e39875bb2f3f58c5e42d5a4604588509954415a7665a8ea11fe3666500ff2a5a562a153bed774fddb9d54f0e411917b3e95c48c4234bd21a02058d", 0x4}, {&(0x7f0000000340)="527302587e0a4e47ad", 0x11}], 0x3, 0x0, 0x0) 27m1.362065225s ago: executing program 33 (id=46): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'wg2\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@bridge_newneigh={0x24, 0x1c, 0x114236db3b607435, 0x70bd28, 0x25dfd3fe, {0x2, 0x0, 0x0, r1, 0x80, 0x80, 0x4}, [@NDA_DST_IPV4={0x8, 0x1, @remote}]}, 0x24}, 0x1, 0x0, 0x0, 0x20040001}, 0x80c0) 26m34.123867721s ago: executing program 34 (id=79): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001a00010000000000000000000a000000000000000000000006001d000000000006001c"], 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 26m12.352190745s ago: executing program 4 (id=103): bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x19, 0xc, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000000000008500000011000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000009e00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @cgroup_sockopt=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 26m11.844829386s ago: executing program 4 (id=104): unshare(0x22020400) socket$nl_netfilter(0x10, 0x3, 0xc) syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000280)='./file1\x00', 0x1400c, &(0x7f0000000680)={[{@test_dummy_encryption}, {@init_itable}, {@noload}]}, 0x3, 0x473, &(0x7f0000001380)="$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") syz_mount_image$exfat(0x0, &(0x7f0000000080)='./bus\x00', 0x0, 0x0, 0x7d, 0x0, &(0x7f0000001a00)) chdir(&(0x7f0000000140)='./bus\x00') openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) getdents(r0, &(0x7f00000000c0)=""/127, 0x7f) 26m11.07537584s ago: executing program 4 (id=105): r0 = semget$private(0x0, 0x7, 0x0) semtimedop(r0, &(0x7f0000000080)=[{0x3, 0xfff7, 0x1000}, {0x2, 0x8000, 0x800}], 0x2, 0x0) semctl$SETVAL(r0, 0x3, 0x10, &(0x7f00000000c0)=0x4) 26m10.528126669s ago: executing program 4 (id=106): syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000002240)='./file0\x00', 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="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", @ANYRESHEX], 0x1, 0x2c2, &(0x7f00000006c0)="$eJzs3T+LI2UYAPBndpNJ7iySwkoEB7SwOm6vtckiOThMpaRQC128O5AkCHew4CkGK1sbSz+BINj5JWwEP4DgB7DzioNXJpkh2btJsoHLrX9+vyL77Lzv877POzPZPyzz7sevziZ3i7j/9Ze/R7ebxdEgBvE4i34cRS2llGJl8G0AAP9mj1OKP9PSJVMG5UsWEd3DlgYAHMje3/9/OnhJAMCBvff+B++cjkbDd4uiG7dn35yPy9/sy4/L9tP78WlM417cjF48Wf4toP5poXy9nVKat4pSP96Yzc/HZebso1+q8U/riU6iF/1FdDH/zmh4Uiyt5c/LOq5X8w/K+W9FL15umP/OaHirIT/Gebz5+lr9N6IXv34Sn8U07i6KWOV/dVIUb6fv/vriw7K8Mj+bn487i34r6fjFXRUAAAAAAAAAAAAAAAAAAAAAAP7rblR753RisX9Peajaf+f4SflJO4pa/+L+PMv8rB7oqf2B5im+T6nTihgNbxZFkaqOq/xWvNKK1tWsGgAAAAAAAAAAAAAAAAAAAP5ZHn7+aHI2nd570BD8dj1iQ9OGoN4NoH6sf0fW8aamwdqR1+LR5KyzecC1pqMq3DJpHNd9soity4lWux65v9dJ2D+4tqnmH37cd8Du7j7tbefn+QT13TU5y6KxTyfqI936mv683iePS86Vb2pKu2+/tSBvbOrtvfb8pUUw39Insm2FvfXH8sxVR7KnV5EvzmpjenttN47me6P5Wmx6pzwjW7yt8+f3xQcAAAAAAAAAAAAAAAAAALhg9dDvM03XdqQepc7BygIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAF2r1///3COZV8iU65/Hg4RUvEQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgP+BvwMAAP//QSRWPA==") syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mkdir(&(0x7f0000000280)='./file1\x00', 0x21) 26m9.903442427s ago: executing program 4 (id=107): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01040000000000000000010000000900010073797a310000000040000000030a01020000000000000000010000000900030073797a"], 0xc4}}, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000002c0)={0x0, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r1, &(0x7f0000000000)=[{0x1e, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}], 0x1001a) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r1, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0x0, 0x2, 0xffffffff, 0x3, 0x22}, 0x4005}) close_range(r0, 0xffffffffffffffff, 0x0) 26m9.54057231s ago: executing program 4 (id=108): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x0, 0x0) syz_io_uring_setup(0x7676, &(0x7f0000000100)={0x0, 0x22e7, 0x100, 0x1, 0x10f}, 0x0, 0x0, &(0x7f0000000000)) r2 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r2, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @local}, 0xc) setsockopt$inet_msfilter(r2, 0x0, 0x29, &(0x7f0000000140)=ANY=[@ANYRES16], 0x1c) syz_emit_ethernet(0x2a, &(0x7f0000000e80)=ANY=[@ANYBLOB="0180c200aaaaaaaaaa08004500001c0083b01c5511e790786e1414aae000000100004e20000890000000"], 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000032680)=""/102400, 0x19000) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/keys\x00', 0x0, 0x0) read$FUSE(r4, &(0x7f0000000400)={0x2020}, 0x2020) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB="1500000065ffff0900000008003950ac37c192a532"], 0x15) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r5 = epoll_create1(0x80000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f0000000180)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r7, &(0x7f00000bd000), 0x318, 0x0) r8 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r7, &(0x7f0000000100)={0x20000014}) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r5, &(0x7f0000000000)={0xa0000001}) poll(&(0x7f00000000c0)=[{r8, 0x1009}], 0x1, 0x8000007) 25m54.264246432s ago: executing program 35 (id=108): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x0, 0x0) syz_io_uring_setup(0x7676, &(0x7f0000000100)={0x0, 0x22e7, 0x100, 0x1, 0x10f}, 0x0, 0x0, &(0x7f0000000000)) r2 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r2, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @local}, 0xc) setsockopt$inet_msfilter(r2, 0x0, 0x29, &(0x7f0000000140)=ANY=[@ANYRES16], 0x1c) syz_emit_ethernet(0x2a, &(0x7f0000000e80)=ANY=[@ANYBLOB="0180c200aaaaaaaaaa08004500001c0083b01c5511e790786e1414aae000000100004e20000890000000"], 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000032680)=""/102400, 0x19000) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/keys\x00', 0x0, 0x0) read$FUSE(r4, &(0x7f0000000400)={0x2020}, 0x2020) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB="1500000065ffff0900000008003950ac37c192a532"], 0x15) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r5 = epoll_create1(0x80000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f0000000180)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r7, &(0x7f00000bd000), 0x318, 0x0) r8 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r7, &(0x7f0000000100)={0x20000014}) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r5, &(0x7f0000000000)={0xa0000001}) poll(&(0x7f00000000c0)=[{r8, 0x1009}], 0x1, 0x8000007) 18m37.704045238s ago: executing program 0 (id=363): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000b80)=ANY=[@ANYBLOB="700000000101010100000000000000000a000000500001800c00028005000100390000000c0002800500010088000000140001800800010064010100080002007f00000114000180080001007f000001080002007f0000010c00028005000100110000000c001980080001006803"], 0x70}, 0x1, 0x0, 0x0, 0x4}, 0x0) 18m36.240434871s ago: executing program 0 (id=364): r0 = syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x0, &(0x7f0000000180)={[{@debug}]}, 0x0, 0x236, &(0x7f0000000300)="$eJzs3TFoM2UcBvDnLomf/b4gVRdBUEFEtFDqJrjURaEgpYgIKlREXJRWqC1urZOLg84qnVyKuFkdpUtxUQSnqh3qImhxsDjoELlcK9VGFFNz8t3vB5fcJe97//e4e95kOS5Aa00nmU/SSTKTpJekON/grnqZPt3cntpfTgaDx38shu3q7dpZv2tJtpI8mGSvLPJiN9nYffro54NH731jvXfPe7tPTU30IE8dHx0+dvLu4usfLjyw8fmX3y8WmU//D8d1+YoRn3WL5Jb/otj/RNFtegT8E0uvfvBVlftbk9w9zH8vZeqT9+baDXu93P/OX/V964cvbp/kWIHLNxj0qt/ArQHQOmWSfopyNkm9Xpazs/V/+K87V8uXVtdemXlhdX3l+aZnKuCy9JPDRz6+8tG1P+X/u06df+D6VeX/iaWdb6r1k07TowEmqcr/zLOb90X+oXXkH9pL/qG95B/aS/6hveQf2kv+ob3kH9pL/qG95B/a63z+AYB2GVxp+g5koClNzz8AAAAAAAAAAAAAAAAAAMBF21P7y2fLpGp++nZy/HCS7qj6neHziJMbh69XfyqqZr8r6m5jeebOMXcwpvcbvvv6pm+brf/ZHc3W31xJtl5LMtftXrz+itPr79+7+W++7z03ZoExPfRks/V/3Wm2/sJB8kk1/8yNmn/K3DZ8Hz3/9KvzN2b9l38ZcwcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABMzG8BAAD//8n0bSk=") mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) ioctl$EXT4_IOC_GROUP_EXTEND(r0, 0x40086607, &(0x7f00000001c0)=0x8) 18m33.528968614s ago: executing program 0 (id=365): pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) chdir(&(0x7f0000000540)='./cgroup\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) lseek(r1, 0x7ffffffc, 0x0) getdents64(r1, 0x0, 0x45) close_range(r0, 0xffffffffffffffff, 0x0) 18m32.677254099s ago: executing program 0 (id=366): syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x2a0471a, &(0x7f0000000280)={[{}]}, 0x82, 0x4a5, &(0x7f0000000380)="$eJzs3MtrXNUfAPDvvXn09+szatW2Fo0WMfhImrRqF24UBRcVFV1UXcUkLaVpI00EU0obRepGkIKu1aXgX+DOjagrQXCleykU7aZVXIzcO/c2k0mmeTiZSTOfD0xzzpxz55xzz5w7557TmQA6Vn/2TxKxPSJ+jYhd1ejCDP3VPzeunR/769r5sSQqldf+SPJ816+dHyuzlsdtKyIDaUT6YVIUstD07LlTo5OTE2eL+NDM6XeGpmfPPXHy9OiJiRMTZ0aOHDl8aPjpp0aebEo7s3Zd33dhav/eF9+4/NLYsctv//B1Vt/tRXptO9akd/FT/VnD/6zk6tMejv//p+I2mh014aS7jRVhVboiIuuunmz8VyqVizVpu+KFD5Y5fNs6Vw9YR9ln05Ylni8+F+cqDSW3TAVuB0m0uwZAe5Sf99n9b/lo4fSj7a4+W70Bytp9o3hUU7ojLfL01N3fNlN/RByb+/vz7BHNWIcAAFjGx2OfHY3Hl5r/pXFPTb6dxR5KX0TcERF3RsRdEbE7Iu6OyPPeGxF7VlJozQZB/dbQ4vlPeqUuS1N3F7L53zPF3tbC+V85+4u+riK2I29/T3L85OTEweKcDETPliw+fIsyvn3+508apdXO/7JHVn45FyzqcaW7boFufHRmNJ+UNsHV9yP2dcc/lUqlrv3JzROdRMTeiNi3upfeWQZOPvrV/kaZlm//opeb14R3QuXLiEeq/T8X1fZvr8+TLN6f7N0xvz859L+YnDg4VL4rFvvxp0uvNCp/5e1fH1n/b134/i9SvpgtAn1v1e7XTkeDnctFp+2mS7991PCeZq3v/97k9fx6VG67vjc6M3N2OKI3OZrHFzw/Mn9sGS/zZ+0fOJCllO0vj0zza1wU/X9fROwv9svuj4gHiro/GBEPRcSBpZuXX0S+f67hqdkQ/T9e0/9JzI//qj0Xqn/L/p9ddaDr1HffNCp/Zf1/OA8NFM/k179lrLSCaz9zAAAAcPtI85WbJB28GU7TwcHqf+zdHVvTyanpmceOT717Zry6wtMXPWm50rWrZj10OJkrXrEaHynWisv0Q8W68addkccHx6Ymx9vcduh02xqM/8zvXe2uHbDultpHG1niC23A5lM//tOF0Ysvt7IyQEv5vjZ0rmXGf9qqegCt5/MfOtdS4/9iXdxeAGxOteN/c/0sHbAc83/oXMY/dK668d8Vv7SrJkALreHr/AIbJvDq4GqO2hLNLD3SDXISVhBY+e9BrHfgzdUe1dOuqrb7ygQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANAc/wYAAP//ymPqSg==") open(&(0x7f0000000040)='.\x00', 0x8800, 0x153) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x22000000) sched_setscheduler(0x0, 0x2, 0x0) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$getregset(0x4205, r0, 0x202, &(0x7f0000000240)={&(0x7f0000000180)=""/120, 0xffffffffffffff28}) 18m30.58517689s ago: executing program 0 (id=367): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_VENDOR(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000001b40)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="a1ab00000000000000003200000008001781"], 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_STOP(r0, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, r1, 0x1, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8}, 0x800) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000140)=@updsa={0xf0, 0x10, 0x1, 0x0, 0x200000, {{@in6=@dev={0xfe, 0x80, '\x00', 0x29}, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x32}, {@in6=@private1, 0x0, 0x32}, @in=@local, {0xfffffffffffffffd}, {}, {0xfffffffc, 0x0, 0xfffffffe}, 0x200, 0x8000000, 0xa}}, 0xf0}}, 0x0) syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="040e07050220"], 0xa) syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="043e1301"], 0x16) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) r5 = accept$alg(r4, 0x0, 0x0) sendmmsg(r5, &(0x7f0000000280)=[{{&(0x7f0000000000)=@un=@file={0x0, './file0\x00'}, 0x80, 0x0}}, {{&(0x7f0000000300)=@un=@file={0x0, './file0\x00'}, 0x80, 0x0, 0x0, &(0x7f00000004c0)=ANY=[], 0x10}}], 0x2, 0xc000) ioctl$HCIINQUIRY(r3, 0x400448ca, 0x0) 18m25.886513596s ago: executing program 0 (id=368): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}}, 0xc080) sendmsg$NL80211_CMD_ASSOCIATE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={0x30, r1, 0x1, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_DISABLE_HT={0x4}, @NL80211_ATTR_PREV_BSSID={0xa, 0x4f, @random="c69a9dcafe92"}, @NL80211_ATTR_SSID={0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x10}, 0xc00) 18m23.281973734s ago: executing program 36 (id=368): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}}, 0xc080) sendmsg$NL80211_CMD_ASSOCIATE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={0x30, r1, 0x1, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_DISABLE_HT={0x4}, @NL80211_ATTR_PREV_BSSID={0xa, 0x4f, @random="c69a9dcafe92"}, @NL80211_ATTR_SSID={0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x10}, 0xc00) 16m22.01959772s ago: executing program 5 (id=9): r0 = syz_open_dev$sndpcmc(&(0x7f0000000d00), 0x0, 0x0) personality(0xfe47fef9f5ff7379) mmap$snddsp_control(&(0x7f0000000000/0x3000)=nil, 0x1000, 0x1, 0x13, r0, 0x81000000) 16m19.000735474s ago: executing program 5 (id=376): syz_mount_image$vfat(&(0x7f00000007c0), &(0x7f0000000800)='./file0\x00', 0xc000, &(0x7f0000000080)={[{@shortname_lower}, {@utf8no}, {@uni_xlate}, {@utf8}, {@fat=@dos1xfloppy}]}, 0x11, 0x321, &(0x7f0000000840)="$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") 16m17.795302066s ago: executing program 5 (id=378): socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000001400)={0x800, 0xfffffffd, 0xfdffffff, 0xe}, 0x10) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@ipv6_getaddrlabel={0x24, 0x4a, 0x321, 0x0, 0x0, {}, [@IFAL_LABEL={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000880}, 0x8084) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x15, &(0x7f00000004c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0xc}, {}, {}, [@tail_call, @jmp={0x5, 0x0, 0x0, 0xb, 0x7, 0x6}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='syzkaller\x00'}, 0x94) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) ioctl$F2FS_IOC_GARBAGE_COLLECT(r0, 0x4004f506, &(0x7f0000000080)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x0, 0x0) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x400000bce) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_BT_SNDMTU(r4, 0x112, 0xc, 0x0, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000032680)=""/102400, 0x19000) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000280)={'syzkaller0\x00', 0x1}) ioctl$TUNSETQUEUE(r6, 0x400454d9, &(0x7f00000001c0)={'ipvlan1\x00', 0x400}) read$FUSE(0xffffffffffffffff, &(0x7f0000001440)={0x2020}, 0x2020) recvmsg$unix(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x0) 16m10.693145341s ago: executing program 5 (id=380): socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000040)='./file1\x00', 0x440, &(0x7f0000000140)=ANY=[], 0x4, 0x68b, &(0x7f0000000a40)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.stat\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b) fdatasync(r0) 15m55.219765344s ago: executing program 37 (id=380): socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000040)='./file1\x00', 0x440, &(0x7f0000000140)=ANY=[], 0x4, 0x68b, &(0x7f0000000a40)="$eJzs3U1sHGf9B/DvbnbX3vz/Sp02SQOqRNRIBRGROLGSYi4NCKFIVKgqB8TRSpzGyiatHBc5EYLwfuDCoXeKRG5cQOIeVM7AqVcfKyFx6SmAxKKZnbXXL7F3ndhri88nmp3nmedlnuc3Mzu7s4oc4H/WtXNpPE4t1869uVzkVx7NdFYezdzpp5NMJKknjd4qtbtJ7aPkanpLPlNsrLqrPW0/HyzMvv3xpyuf9HKNainr17drt8mV+hYbH1ZLziQ5Uq2fwbr+rm/orzVyd7XVGRYBO9sPHIxbM0l3ne+eWivZ0fDXLXBg1Xr3zU0X9FRyNMlk9Tmgd1fs3bMPtYfjHgAAAADsgxd+WX6FPzbucQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMBhUv39/1q11PvpM6n1//5/q9qWKn2oPR73AAAAAAAAAABgdN/8/w0bPvckT7KcY/18t1b+5v9qmTlRvv5f3s+9zGcx57OcuSxlKYu5mGSqLG+Wr63luaWlxYtDtLy02jIDLS8NOYP27icPAAAAAAAAAIdFY/QmP861td//AQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgIKglR3qrcjnRT0+l3kgymaRV1HuY/LWfPpB+/afBXPff3dKmao/3c0wAAAAwJi88yZMs51g/362V3/lPld/7J/N+7mYpC1lKJ/O5UT4L6H3rr688mumsPJq5Uyyb+/3qP0YaRtljes8ett7z6bJGOzezUG45n+t5N53cSL1sWTjdH8/W4/pRMabaG5UhR3ajWhcz/1WaI81qN2pD15wqI1KMqBeR6aptEY3j20dixKPT31M/9hdTX33yc+J5xny5t3r9t711MZ+fjxSTvbYxEpcGzr5T20ci+fwff/edW527tydu3jt3cKY0gomBJ2gbIzEzEImXh43ErcMaiUHTZSROruav5Rv5ds7lTN7KYhbyvcxlKfM5k69nLkcyV53PxevU9pG6ui731k4jaZXHpVm9iw4/pqXM5dWy7bEs5Ft5Nzcynyvlv0u5mNdzOZczO3CETw5x1ddHe6c9+4WBh8m/SNIert0+KAZ2fPXuNHjWT5fXwfF1W9ai9OLzvx81Plslin38pFofDBsjcXEgEi9tH4nflG8r9zp3by/emntvyP29Vq2L6+hnB+ouUZwvLxYHq8ytPzuKspc2lk324tWqfnHpla2/4xZlJ1fLdrpSW9VnuM09XSrLXt6ybKYsOz1Qtu7z1tXe5y0ADryjXzzaav+9/Zf2h+2ftm+135z82sSXJ15ppfnn5lca00deq79S+0M+zA/Wvv8DAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC7d+/+g9tznc784oZEt9v94VOK9jDRTtLfkuzUqpmd6+xNopWkTDT6idH6mRiqcmvt6Lzx+2cZc3PUVslzCVSjOsnuP7j9z263u++HaYtEc5tzfi3RrWwq6g7VfGyJf3WfX4djfmMC9tyFpTvvXbh3/8GXFu7MvTP/zvzd2cuXZ6dnL1/524WbC5356d7ruEcJ7IW1m/64RwIAAAAAAAAAAAAMaz/+W8JTdv2ffZ4qAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAcEhdOzdRpc5PF68rj2Y6xdJPr1Ysq9WT1L6f1D5Krqa3ZGqgu9rT9vPBwuzbH3+68kkv16iWsn59XbvmbmbxsFpyJsmRaj1o8hn6u16tdzWyUm11hkXAzvYDB+P23wAAAP//+B8RmQ==") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.stat\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b) fdatasync(r0) 14m2.080186213s ago: executing program 7 (id=474): syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="043e1d19"], 0x10) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) ioctl$sock_inet_SIOCGIFBRDADDR(0xffffffffffffffff, 0x8919, &(0x7f0000000280)={'netpci0\x00', {0x2, 0x0, @local}}) 14m1.738947659s ago: executing program 7 (id=475): fanotify_init(0x0, 0x0) creat(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() r1 = socket$inet6(0xa, 0x3, 0x8) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x4e24, 0x2, @empty, 0x1}, 0x1c) sendmmsg(r1, &(0x7f00000015c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001600)=ANY=[], 0x218}}], 0x1, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102400, 0x19000) bpf$MAP_CREATE(0x0, 0x0, 0x50) socketpair$unix(0x1, 0x5, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) socket(0x10, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x2, &(0x7f0000000680)={0x3, 0x3, &(0x7f0000000740)=ANY=[], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc4c85513, &(0x7f0000000540)={{0xb, 0x6, 0x0, 0x2, 'syz0\x00', 0x281d}, 0x0, [0x1, 0x4ea3, 0x9, 0x56cd, 0x5, 0x6, 0x0, 0x80000001, 0x201, 0x1, 0x3fb, 0x1, 0x9, 0x7, 0x4, 0x10000, 0x8, 0x49b5e351, 0x80, 0xe8de, 0xfffffffffffffff9, 0x9, 0x201, 0x9, 0x1, 0x8, 0x1, 0x4, 0x0, 0x8000, 0x8, 0xa36, 0x57bf4b04, 0x4, 0x40000000000001, 0x6, 0x8, 0x100000000, 0x8, 0x7ff, 0x6, 0x401, 0x5, 0x10001, 0x1ff, 0x2, 0x2, 0xb7, 0x0, 0x5, 0xbe5, 0xa0000000000, 0x0, 0x1, 0x8, 0x7fffffffffffffff, 0xd3d, 0xbbeb, 0x1, 0x6, 0x4, 0x6, 0x8001, 0x3, 0x1, 0xec7, 0x646, 0xc58e, 0x5, 0x11ad, 0x0, 0x6, 0x8000, 0x100080, 0x7f, 0x9, 0x1, 0x5, 0x8000000000000000, 0x2, 0x7, 0xa5, 0x1b13, 0x4, 0x85, 0x8, 0x3, 0xf75, 0x9, 0xb, 0xffffffffffff66e3, 0xfffffffffffffff9, 0x851a, 0x5e997b8e, 0x0, 0x7, 0x6, 0x4, 0x100, 0x1000000004, 0x3ff, 0x6, 0x0, 0xffffffffffffff95, 0xa, 0x108000001, 0xcc7e, 0x8, 0x0, 0x6, 0x800000000006, 0xfffffffffffffd96, 0x3f3, 0x1, 0x4, 0x0, 0x7, 0x5, 0x6, 0x1, 0xe1, 0xec2, 0x1, 0x5, 0xfff, 0x0, 0x80]}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x4000, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) syz_kvm_setup_syzos_vm$x86(r5, &(0x7f0000a1e000/0x400000)=nil) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2) ioctl$KVM_SET_MSRS(r6, 0x4008ae89, &(0x7f00000000c0)={0x1, 0x0, [{0x4b564d01, 0x2000000, 0x7}]}) munmap(&(0x7f0000def000/0x4000)=nil, 0x4000) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@ipv4_newrule={0x34, 0x20, 0x1, 0x70bd2b, 0x25ffdbff, {0x2, 0x20, 0x20, 0x0, 0xb8, 0x0, 0x0, 0x8, 0x10007}, [@FRA_GENERIC_POLICY=@FRA_DPORT_RANGE={0x8, 0x18, {0x4e20, 0x4e23}}, @FRA_DST={0x8, 0x1, @multicast2}, @FRA_SRC={0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}]}, 0x34}}, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x8040, 0x0) 13m58.208572323s ago: executing program 7 (id=477): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000c, 0x204031, 0xffffffffffffffff, 0xffffd000) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x2) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001180), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000010c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x8000}}) unshare(0x2000400) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1) fstatfs(r1, 0x0) read$FUSE(r0, &(0x7f0000004280)={0x2020}, 0x2020) 13m56.195701135s ago: executing program 7 (id=480): ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) syz_mount_image$ext4(&(0x7f0000000500)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f00000004c0)={[{}]}, 0x1, 0x453, &(0x7f0000001040)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000002c0)=0x2000000) write$cgroup_int(r0, &(0x7f0000000380)=0x5, 0x12) open(&(0x7f0000000040)='./bus\x00', 0x400141042, 0x2a) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x8000, 0xa0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x8005, 0x0, 0x0, 0x12, 0xd, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x204]}) close(r0) 13m54.787335603s ago: executing program 7 (id=481): madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) capset(&(0x7f0000000000)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200003, 0x0, 0x0, 0x7, 0x3}) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x17, 0x3, &(0x7f0000001300)=@framed, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x8}, 0x94) 13m50.422528855s ago: executing program 7 (id=484): r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x1bc}) read(r0, &(0x7f0000000140)=""/4096, 0x1000) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) 13m42.913336096s ago: executing program 38 (id=484): r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x1bc}) read(r0, &(0x7f0000000140)=""/4096, 0x1000) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) 10m49.5464272s ago: executing program 9 (id=575): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x8, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0x2e}}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @cgroup_sock_addr=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 10m48.904351601s ago: executing program 9 (id=576): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x2000, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'macvlan1\x00', 0xfd2}) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000780)={0x3, &(0x7f0000000600)=[{0x35, 0x3}, {0x2}, {0x406, 0x80, 0x0, 0x1ff}]}) 10m47.515962699s ago: executing program 9 (id=577): socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_VENDOR(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000001b40)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="a1ab00000000000000003200000008001781"], 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000140)=@updsa={0xf0, 0x10, 0x1, 0x0, 0x200000, {{@in6=@dev={0xfe, 0x80, '\x00', 0x29}, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x32}, {@in6=@private1, 0x0, 0x32}, @in=@local, {0xfffffffffffffffd}, {}, {0xfffffffc, 0x0, 0xfffffffe}, 0x200, 0x8000000, 0xa}}, 0xf0}}, 0x0) syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="040e07050220"], 0xa) syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="043e1301"], 0x16) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) r4 = accept$alg(r3, 0x0, 0x0) sendmmsg(r4, &(0x7f0000000280)=[{{&(0x7f0000000000)=@un=@file={0x0, './file0\x00'}, 0x80, 0x0}}, {{&(0x7f0000000300)=@un=@file={0x0, './file0\x00'}, 0x80, 0x0, 0x0, &(0x7f00000004c0)=ANY=[], 0x10}}], 0x2, 0xc000) syz_clone(0x40c0000, &(0x7f0000000040)="f92b8df3d7f9118d0cd2f3b2d9c1b71f62b7525488c1b4f650e3d7345d13be70e423faeb15e3931065dbced4b6292f7cdc5e24dea2aa9e1fbd607d90d3d1e6c8f971f956b6f4f32642e8ad77edcf7fbd9155c7f38c153f8fded5ad42bb4a6da74803eb5a2002ffa4a61c07c326a99d631fa69c7bb8cc648f8e0069384a8af877dfc92b2cedd969a633da720476b72d8a188e", 0x92, &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0)="15cc850b0113e559cb878efac49ac010162f24e4b4094d72beab90513118e3") ioctl$HCIINQUIRY(r2, 0x400448ca, 0x0) 10m45.935546022s ago: executing program 9 (id=578): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r0, 0x1, 0x42, &(0x7f0000000040), 0x3b) 10m45.06568875s ago: executing program 9 (id=579): syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="043e0b06c90006"], 0xe) pipe(&(0x7f0000000200)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x0, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000032680)=""/102400, 0x19000) socket(0x10, 0x3, 0x0) ptrace$ARCH_SET_GS(0x1e, 0x0, 0x0, 0x1001) chmod(0x0, 0x29d) 10m42.606419069s ago: executing program 9 (id=580): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) ptrace$pokeuser(0x6, r2, 0x358, 0x800000000000) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"], 0x208}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) close_range(r3, 0xffffffffffffffff, 0x2) recvmmsg(0xffffffffffffffff, &(0x7f0000001f40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000a80)=""/4096, 0x1000}}], 0x1, 0x0, 0x0) 10m23.9349415s ago: executing program 39 (id=580): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) ptrace$pokeuser(0x6, r2, 0x358, 0x800000000000) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"], 0x208}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) close_range(r3, 0xffffffffffffffff, 0x2) recvmmsg(0xffffffffffffffff, &(0x7f0000001f40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000a80)=""/4096, 0x1000}}], 0x1, 0x0, 0x0) 2m51.464093197s ago: executing program 6 (id=1032): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) ptrace$pokeuser(0x6, r2, 0x358, 0x800000000000) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) syz_clone(0x2020000, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"], 0x208}, 0x0) socketpair(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) sendmsg(r3, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[], 0x208}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) close_range(r4, 0xffffffffffffffff, 0x2) recvmmsg(0xffffffffffffffff, &(0x7f0000001f40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000a80)=""/4096, 0x1000}}], 0x1, 0x0, 0x0) 2m47.56842306s ago: executing program 6 (id=1036): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x801, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000800)={0x0, {0xfffffff9, 0x0, 0x8, 0x3, 0x3, 0xbb}}) write$uinput_user_dev(r0, &(0x7f0000000240)={'syz0\x00', {0x9, 0x1, 0x2, 0x3}, 0x2, [0x5, 0x5, 0x81, 0x8, 0x4, 0x1000, 0x50000, 0x1, 0x10001, 0xffffa103, 0x3, 0x6, 0x6, 0x6, 0x7, 0x3, 0x6, 0x0, 0x40, 0x5, 0x1cac, 0x3eb, 0xb8f, 0x3, 0x400, 0x40, 0x6, 0x0, 0xfffffffa, 0xdc, 0xffffffff, 0xa1bc, 0x200, 0x7, 0x6, 0x6, 0x3, 0x1, 0x2, 0x0, 0x2, 0x400, 0x7a08, 0x200, 0x3, 0x6, 0x7ff, 0x7f, 0x1c, 0x7, 0xe, 0x9, 0x5, 0x7, 0x3, 0x2, 0xf7, 0xfff, 0x71, 0x5, 0x1ac0, 0x4f, 0x6, 0x8], [0x5, 0x3ff, 0x6, 0xea, 0x3, 0x0, 0xca, 0x1c5936c5, 0x9, 0xfffffff8, 0x4, 0x1, 0x7, 0x6, 0xa, 0x4, 0x2, 0x0, 0x5, 0x2, 0x0, 0x6, 0x0, 0x1, 0x9, 0x6, 0x5e5893ee, 0xfffffff7, 0x9, 0x10000, 0x3, 0x8001, 0x2e6d, 0x7ff, 0x1, 0x9000, 0x877, 0x9, 0x8, 0x8, 0x80000000, 0xfff, 0x5, 0x7, 0x8, 0x5, 0x75da, 0x2, 0x5, 0xe8, 0x3, 0x9, 0x5, 0x7, 0xb99c, 0x2, 0x1000001, 0x4, 0x4, 0x1, 0x1, 0x9, 0x2, 0xc406], [0x80004001, 0x2, 0x9, 0x9, 0x0, 0xb9, 0x897, 0x5, 0x3, 0x4, 0x2, 0x5, 0x3, 0x9, 0x9, 0x7, 0x9, 0x61, 0x9, 0x5, 0x9, 0x8, 0x2, 0x6, 0x8001, 0x4, 0xc, 0x80000000, 0x7fffffff, 0x1, 0x1, 0x6, 0x8, 0x3, 0x2, 0x5, 0x3, 0x2, 0x1, 0x24, 0x9, 0x2000000, 0x4, 0xff, 0x7, 0x3eef6cc9, 0x1, 0x7, 0x7, 0x8bd, 0x9, 0xfffffff9, 0x80000001, 0x5, 0xffffff1d, 0x6, 0x0, 0xa, 0xfff, 0xfff, 0x1, 0x1, 0x19ee, 0xfffffff9], [0x0, 0x10, 0x101, 0x2, 0x4, 0x9c500, 0x8ef, 0x8, 0xc61, 0x7, 0x1d, 0x358, 0xd567, 0x1d5, 0xc8b, 0x658, 0xcbfd, 0x101, 0x6, 0x5, 0xb, 0x5, 0x6, 0x3, 0x75d6, 0xb26, 0x3ff, 0x6, 0x9, 0x0, 0x1, 0xf412, 0x2, 0x2, 0x2000002, 0x3, 0x3, 0x9, 0x3, 0x5, 0x3, 0x3, 0xfffffff3, 0x8000, 0x6, 0x6, 0xffff, 0x80, 0xf, 0xfff, 0xfff, 0xffff, 0xfffffffe, 0x80, 0xb975, 0x5, 0x5e1, 0xa, 0xffff58ee, 0x2, 0x2530, 0x4, 0x26da282, 0xc]}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) write$uinput_user_dev(r0, &(0x7f0000000d80)={'syz0\x00', {0xb, 0x3, 0x4, 0x9}, 0x3, [0xfffff47e, 0x0, 0x0, 0x3, 0xf, 0x0, 0x7ff, 0xa, 0x5, 0x3, 0x5, 0x40, 0x1, 0x1, 0x7, 0x6, 0x0, 0x7, 0x1, 0xdef, 0x9, 0x7, 0x200, 0x5, 0x73c, 0x5, 0x4, 0x7f, 0x4, 0x6, 0xfffffff9, 0x8, 0x6, 0x4, 0x7, 0x7, 0x1939, 0x8, 0x7, 0x2, 0xe12c, 0x8162, 0x4, 0x3, 0x1, 0x41, 0x7, 0x10000, 0x101, 0x8, 0xc000, 0x6, 0x4, 0x4, 0x5, 0x6, 0xfff, 0x0, 0x104, 0xf8ad, 0x2, 0x3, 0x7fffdfff], [0xfffffff8, 0xff, 0x4, 0x8, 0x1e0f, 0xfffffff7, 0x5, 0x7, 0xffffffff, 0x0, 0x6, 0x100, 0x8, 0xe63, 0x1, 0xa3a5, 0x2, 0x2, 0xb9, 0x6, 0x3, 0x43d, 0x6, 0xe, 0x4, 0x3, 0x6, 0x9, 0x1, 0x11, 0x5, 0x4, 0x8, 0x30000, 0x81, 0xfffffe00, 0x0, 0x10001, 0x7ff, 0x9, 0x8, 0xffffa467, 0x5, 0xfffffffb, 0x0, 0xff, 0x9, 0x6aac, 0x0, 0x3, 0x4, 0xfff, 0x200, 0xc1a, 0xe456, 0x100, 0x2, 0x0, 0x1c00000, 0x6, 0x3, 0xfffffff6, 0xffff1068, 0xffff9241], [0x9, 0x611, 0x6, 0xff, 0x101, 0x5, 0x0, 0x2, 0x80000001, 0x96, 0x7, 0x1, 0xfffffffa, 0x1, 0x4, 0xfb, 0x10001, 0x8, 0x8, 0x3, 0x1, 0x100001, 0x1, 0x7, 0x3, 0x40000000, 0x8, 0x3, 0x5, 0x3, 0xb89, 0xf, 0x0, 0x9, 0x3, 0xff, 0x0, 0x2, 0x1ff, 0x4501, 0x9, 0x0, 0x9, 0x7, 0x966, 0x6, 0x10000, 0xf, 0xffffffff, 0x9, 0xe2, 0x1, 0x8, 0x1, 0x8, 0x3ff, 0x5, 0xfffeffff, 0x3, 0x0, 0x80, 0x6, 0x7, 0xc], [0x5, 0x7f, 0x7, 0x9, 0x2, 0x6, 0x45c, 0x5, 0xab73, 0x5, 0x7, 0x0, 0x5, 0xed5a, 0x9, 0x4, 0x9, 0x8, 0x8, 0x3, 0xeb, 0x6, 0x5, 0xff, 0xffffffff, 0x7fff, 0x4, 0xcb7, 0xa3, 0xffff, 0x8, 0x80000000, 0x3, 0x1ff, 0xfffff26e, 0xf81e, 0x6, 0x9, 0x3, 0x8, 0x5, 0xe5, 0x2, 0x4, 0x4, 0x3, 0x0, 0xfffffff9, 0x7, 0x1ff, 0x204000, 0x5, 0x80, 0x9, 0x7, 0x5078, 0xd, 0x8001, 0x8000, 0x3000000, 0x200, 0x45, 0x0, 0x3]}, 0x45c) 2m45.946449182s ago: executing program 6 (id=1040): r0 = openat$binfmt_register(0xffffff9c, &(0x7f0000000040), 0x1, 0x0) pwrite64(r0, &(0x7f0000000600)="e67ab1415f2ce290f4681ef5c755f60473b17b7887d68440dd9005bc69f6c3c5238bebfbce42365029d64c6bdf5fc2251eda45a465e645e685865063ff5f776983521685b3a3206ce46af9d586dd02dda5defa42c86b8c26de340e02c25f5801ca2e4fe456d3c9dc8599f9a3fc2b5152b9d2f123697defb2c35e08007706", 0x7e, 0x800) 2m44.880237709s ago: executing program 6 (id=1043): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x1390, 0x0, 0xc8, 0x8, 0x0, 0x5803, 0x12c0, 0x2e8, 0x2e8, 0x12c0, 0x2e8, 0x3, 0x0, {[{{@ipv6={@remote, @local, [0xffffff00, 0xff, 0xff, 0xffffff], [0xff, 0xff], 'geneve0\x00', 'batadv_slave_1\x00', {}, {}, 0x3b, 0x8, 0x1, 0x73}, 0x0, 0x1198, 0x11b8, 0x0, {0x0, 0x2000000000000}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'fsm\x00', "cfcaf80c672f61cd17ae5119b5135c2aee68d23a465cd431e1ecef50c3234e082555f67222476147864fa03182f5df11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac07a602061c96baebc989f1f35a214e67262c1fe4b124e0f7323a587d2a1fcfe36bbf12eca0a7b66c60c527bac2b5", 0x2, 0x3}}, @common=@unspec=@cgroup1={{0x1030}, {0x0, 0x0, 0x0, 0x0, './cgroup.cpu/syz1\x00'}}]}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0xa8, 0x108}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@private2, [0x0, 0x0, 0xffffffff, 0xffffff00], 0x4e21, 0x4e21, 0x4e21, 0x4e24, 0xa0be, 0x0, 0x2a4, 0x4, 0x7}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x13f0) 2m43.831396535s ago: executing program 6 (id=1046): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) ptrace$pokeuser(0x6, r2, 0x358, 0x800000000000) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) syz_clone(0x2020000, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="e8000000000000000b210000ff3f7c081e0f315b91fcaec7bf495d5c618332756cbb1bb9ce6d12b9d976d1f33aca41e50a3342bcd67c311f7885a05c3fcf2ae21f1498ec481e7ca2c3ca4c7b3bf94448f62e111e5a79929b9182cc977ba6ae766ce37bdaac6da997fbc15f0c79f42155b99a280667b51fdc7902d7be5ef41f953fedb32aceeada13250626957e2013d5b12cc916541ccbeb0d4060a4dd89664eaba2f6b4ede0c9e3dc1c9446d9284ebe0e46eee7bc145ff0a2779c025553298812978ea53a8c60f254f23344a80a0aac7b141787bad6b0ba090000005f2f3158f0d200000000000070000000000000000701000040000000afbb30c2946e41ef3167d1f6ed47aa1f52bad114a89dbed741f74a23cd8d915e2dcc74a4932646b90f90a9d3956d5cadb642ac79fcb0aae3654482188263abd27e9d57cc28032453dc75f333e1f367ab38b7e7719805a454e79802d07ec60c00b000"], 0x208}, 0x0) socketpair(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg(r3, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[], 0x208}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) close_range(r5, 0xffffffffffffffff, 0x2) recvmmsg(r4, &(0x7f0000001dc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=""/188, 0xbc, 0xdf0e}}], 0x1800, 0x2002, 0x0) 2m40.197815364s ago: executing program 6 (id=1049): bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[@ANYRES32=0x0, @ANYRES32=0x0], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x20000008b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x8) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc)=0x1, 0x1, 0x800001, 0x0, 0x0, 0x0) mlock2(&(0x7f0000ff5000/0x9000)=nil, 0x9000, 0x0) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) munlock(&(0x7f0000ffc000/0x1000)=nil, 0x1000) mincore(&(0x7f0000ff5000/0x4000)=nil, 0x4000, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) 2m23.160212259s ago: executing program 40 (id=1049): bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[@ANYRES32=0x0, @ANYRES32=0x0], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x20000008b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x8) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc)=0x1, 0x1, 0x800001, 0x0, 0x0, 0x0) mlock2(&(0x7f0000ff5000/0x9000)=nil, 0x9000, 0x0) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) munlock(&(0x7f0000ffc000/0x1000)=nil, 0x1000) mincore(&(0x7f0000ff5000/0x4000)=nil, 0x4000, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) 2m2.353198797s ago: executing program 3 (id=1084): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) ptrace$pokeuser(0x6, r2, 0x358, 0x800000000000) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) syz_clone(0x2020000, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"], 0x208}, 0x0) socketpair(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg(r3, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[], 0x208}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)) recvmmsg(0xffffffffffffffff, &(0x7f0000001f40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000a80)=""/4096, 0x1000}}], 0x1, 0x0, 0x0) recvmmsg(r4, &(0x7f0000001dc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=""/188, 0xbc, 0xdf0e}}], 0x1800, 0x2002, 0x0) 1m58.769831515s ago: executing program 3 (id=1085): r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x3091c0, 0x0) fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) 1m57.470213326s ago: executing program 3 (id=1088): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000002c0)='cpuset.sched_relax_domain_level\x00', 0x2, 0x0) sendfile(r1, r1, 0x0, 0x7ffff002) 1m53.862103688s ago: executing program 3 (id=1090): socket$inet(0x2, 0x4000000000000001, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000100)) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = dup3(r4, r3, 0x0) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r5, 0x20000000000b5c) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}, @flat=@binder={0x73622a85, 0x0, 0x3}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r3, 0x10000000000) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x3c, 0x0, &(0x7f0000000580)="b3185d7bb56f70f003360fa8bf71ac3086aedebf6fff904f92849a7a07395ee7f0e4cb1d78001c08a0ab73ffcf5ad07693727980eea946e6cba1723e"}) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x9b, 0x0, &(0x7f0000000600)="878b7cdfd4455cf49da7ba6f280ae012ce80389a2aefe4fd04084554d7015aba5330d1b817d6c08af29938b8a9bc2b83462ddadaad3a3a5c0181a0203e49b12c99ac8757fc317fe672938a06f89c133d615cf8c6e94b3ac320fa50046f5c18ac35b49243870e4e6b90c76177feda5469369b2b5a4739cc0b68c1772f1c9b9320d88426bc8f139429054c85b62f2a1dfc705453bea4cabf1f5eee5a"}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000480)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ptrace(0x10, r2) ptrace$pokeuser(0x6, r2, 0x358, 0x800000000000) 1m50.038809433s ago: executing program 3 (id=1093): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000025c0)=@newqdisc={0x64, 0x24, 0xd0f, 0x200000, 0x0, {0x60, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x34, 0x2, {{0x2, 0x4, 0x799b, 0x4, 0x290, 0x68}, [@TCA_NETEM_LATENCY64={0xc, 0xa, 0x8}, @TCA_NETEM_JITTER64={0xc, 0xb, 0xfffffffffffffffc}]}}}]}, 0x64}, 0x1, 0x0, 0x0, 0x240400d0}, 0x24008004) 1m48.563831083s ago: executing program 3 (id=1095): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x410a4400, 0x0, 0xfffffffffffffd56, 0x0, 0x0, 0xffffffffffffffff) syz_clone(0x1022000, 0x0, 0xfffffffffffffc76, 0x0, 0x0, 0x0) syz_clone(0x8000000, 0x0, 0x0, 0x0, &(0x7f0000000140), 0x0) syz_clone(0x6a02f080, 0x0, 0xfffffffffffffd7b, 0x0, 0x0, 0x0) 1m37.813334246s ago: executing program 2 (id=1108): rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) r0 = gettid() r1 = socket(0xa, 0x3, 0xff) recvmmsg(r1, &(0x7f0000000700)=[{{0x0, 0x0, 0x0}, 0x9}], 0x1, 0x4020, 0x0) tkill(r0, 0x12) tkill(r0, 0x14) 1m33.892590593s ago: executing program 2 (id=1112): socket$inet(0x2, 0x4000000000000001, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000100)) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = dup3(r4, r3, 0x0) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r5, 0x20000000000b5c) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}, @flat=@binder={0x73622a85, 0x0, 0x3}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r3, 0x10000000000) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x3c, 0x0, &(0x7f0000000580)="b3185d7bb56f70f003360fa8bf71ac3086aedebf6fff904f92849a7a07395ee7f0e4cb1d78001c08a0ab73ffcf5ad07693727980eea946e6cba1723e"}) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x9b, 0x0, &(0x7f0000000600)="878b7cdfd4455cf49da7ba6f280ae012ce80389a2aefe4fd04084554d7015aba5330d1b817d6c08af29938b8a9bc2b83462ddadaad3a3a5c0181a0203e49b12c99ac8757fc317fe672938a06f89c133d615cf8c6e94b3ac320fa50046f5c18ac35b49243870e4e6b90c76177feda5469369b2b5a4739cc0b68c1772f1c9b9320d88426bc8f139429054c85b62f2a1dfc705453bea4cabf1f5eee5a"}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000480)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ptrace(0x10, r2) ptrace$pokeuser(0x6, r2, 0x358, 0x800000000000) 1m33.000154659s ago: executing program 2 (id=1114): syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="043e0b06c90006"], 0xe) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102400, 0x19000) socket(0x10, 0x3, 0x0) ptrace$ARCH_SET_GS(0x1e, 0x0, 0x0, 0x1001) chmod(0x0, 0x29d) 1m31.614027624s ago: executing program 41 (id=1095): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x410a4400, 0x0, 0xfffffffffffffd56, 0x0, 0x0, 0xffffffffffffffff) syz_clone(0x1022000, 0x0, 0xfffffffffffffc76, 0x0, 0x0, 0x0) syz_clone(0x8000000, 0x0, 0x0, 0x0, &(0x7f0000000140), 0x0) syz_clone(0x6a02f080, 0x0, 0xfffffffffffffd7b, 0x0, 0x0, 0x0) 1m25.738701233s ago: executing program 2 (id=1122): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'veth1_to_team\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@newqdisc={0x48, 0x24, 0xf0b, 0x70bd29, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0x10}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xfec0, 0x2, [@TCA_FQ_CODEL_TARGET={0x8, 0x1, 0x7b}, @TCA_FQ_CODEL_CE_THRESHOLD={0x8, 0x7, 0x2c}]}}]}, 0x48}}, 0x0) 1m18.864823581s ago: executing program 2 (id=1127): socket$nl_route(0x10, 0x3, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000680)=@raw={'raw\x00', 0x3c1, 0x3, 0x2d8, 0x0, 0x268, 0x311, 0x130, 0x268, 0x268, 0x460, 0x460, 0x268, 0x460, 0x9, 0x0, {[{{@uncond, 0x160, 0xa8, 0xd0, 0x0, {0x9401}}, @common=@unspec=@NFQUEUE2={0x28}}, {{@ipv6={@mcast1, @mcast2, [0x0, 0xff, 0xffffff, 0xff], [0xff, 0xffffff00, 0xff000000], 'wg0\x00', 'veth1_to_batadv\x00', {}, {0xff}, 0x2e, 0x2, 0x7, 0x8}, 0x0, 0xd0, 0x138, 0xe4030000, {}, [@common=@ipv6header={{0x28}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00', {0x3}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x338) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x10000005) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) unshare(0x20000400) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r3, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xb, 0x2}, 0xe) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2042, 0x0) ioctl$AUTOFS_IOC_FAIL(r5, 0x4c80, 0x7000000) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000001c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) close_range(r6, 0xffffffffffffffff, 0x0) io_uring_setup(0x299, &(0x7f0000000300)={0x0, 0xf76b, 0x2, 0xfffffffd, 0x0, 0x0, r6}) r7 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_PKEY_VERIFY(0x1c, &(0x7f00000001c0)={r7}, &(0x7f0000000200)={'enc=', 'oaep', ' hash=', {'sha512_mb\x00'}}, 0x0, 0x0) add_key$user(0x0, &(0x7f0000000200)={'syz', 0x2}, &(0x7f0000000240)="db3f3e06c6bf0c912c9a2267fada81803605cd602c83519af3630510baff41098f70b6eb26f2b2961374e05eeadd9c25d1c06a705e8972fcf722ef9f84b6479a1620350b0e581d64f5f6bd503d1e662a13ea7d93a28feeb006d1a585f545ac0ee2d5e5036328b42c8c2ad16d8728967f7f7016f6c7298abe08b3bacd984938d605f6c4c3f4f4ed438f34e87cd536", 0x8e, r7) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f000056c000/0x3000)=nil, &(0x7f000083d000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000dbd000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0x0, r6}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r8 = io_uring_setup(0x9, &(0x7f0000000040)={0x0, 0x65cf, 0x1c881, 0x8, 0xd1}) io_uring_enter(r8, 0x2219, 0x7721, 0x16, 0x0, 0x0) 1m11.301252219s ago: executing program 2 (id=1128): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x2a08086, &(0x7f00000007c0)={[{@quota}]}, 0xfc, 0x49f, &(0x7f0000000ec0)="$eJzs3MtrHVUYAPDvTt59xkfVPtT4wuKjadOHXbhQUXChIOiiuotpUmJTK00EW4qpInUpBffiUvAvcKUbUVeCW125kUKRgLRawZGZO5NXb25zb29y297fD244Z+Zk5nxz5tx75szcG0DHGsr+VCI2RcSvWTrJs/PSolBW7src2bG/586OVSJNX/+zkq+7PHd2rCxb/t+mIrM7iUg+qcTOGvudPn3m+OjU1PipIj88c+K94enTZ56ePDF6bPzY+Lsjhw8f2L/vmUMjB1sS5+asrjs+PLlr+8tvXnh17MiFt3/8urus67I4WmUohpYcy8Uea/XO2mzzonSlu40VoSFdEZE1V0/e/7dGVyw03tZ46eO2Vg5YU2mapltWXn0uBW5jlWh3DYD2KD/oL88NRP8aXQffzC49X70AyuK+Uryqa7ojKcr0LLu+baX+Yt7kyLl/voj8+Pd11PEHANbft9n456nq+Kd8VdcMxj2Lyj2XzwdnSyPuiIg7I+KuiLg7IrZF5GXvjYj7Gtz/0LL8tePP5GJTga1SNv57tri3tXT8V4z+/ksHu4rc5hiIweipTExOje+NiC0RsTt6+iYmpwbq7eO7F3/5bMmCucvzA++hYuxXvrL9l2PBoh4Xu/uWbu/o6MxoK2LPXPoonwOcvTb+hTtXWWp7ROxoYvvZuHnyia92rbT++vHX0YL7TOmXEY9X2/9c1Il/+f3JssEPjRwc7o+p8b3DEz35hUINP/18/rWV9n9D8bdA1v4bap7/8/EPVhbfr51e6Bqrdf63T1e8pmng/H+rXJKd/72VN/J0b7Hsg9GZmVP7Inorr1y7fGRha2W+LH9p07aIR2r3/+w9LjvHsvh3RkR2Et8fEQ9ExINF3R+KiIcj30Qts1ci4ocXHn2nmfgbPMxNydr/6JL2j+u0f+OJruPff9NM/FVZ+x/IU7uLJat5/1ttBW/k2AEAAMCtIsmfga8ke+bTSbJnT8TGfG53QzJ1cnrmyYmT7189Wn1WfjB6knL+szofXJ0P3VfMDZf5kWX5/cW88eddA3l+Q3HvG2ifjYv7fz7hWO3/mT+62lw5YO35vhZ0rib6f90HHoBbh89/6FwN9H9vFXCbme/UffXLpetQF2B91fpQn21DPYD1Z1APnUv/h86l/0Pn0v+hI93I9/qbSVRW/c382yAxW/vw/r7yf/VHvQ323iRx5YlI8kQ628Zq/Fs8hraqwleLn7xcg/qUv5ZRLPlr5cLlT8TcDC1YP9G+9yQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIBW+j8AAP//HRbixA==") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040), 0x208e24b) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f00000003c0)={0x0, 0x2904c, 0x0, 0x10003, '\x00', [{0x0, 0x0, 0x2000000000700}, {0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x40000000000000}]}) 54.126249971s ago: executing program 42 (id=1128): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x2a08086, &(0x7f00000007c0)={[{@quota}]}, 0xfc, 0x49f, &(0x7f0000000ec0)="$eJzs3MtrHVUYAPDvTt59xkfVPtT4wuKjadOHXbhQUXChIOiiuotpUmJTK00EW4qpInUpBffiUvAvcKUbUVeCW125kUKRgLRawZGZO5NXb25zb29y297fD244Z+Zk5nxz5tx75szcG0DHGsr+VCI2RcSvWTrJs/PSolBW7src2bG/586OVSJNX/+zkq+7PHd2rCxb/t+mIrM7iUg+qcTOGvudPn3m+OjU1PipIj88c+K94enTZ56ePDF6bPzY+Lsjhw8f2L/vmUMjB1sS5+asrjs+PLlr+8tvXnh17MiFt3/8urus67I4WmUohpYcy8Uea/XO2mzzonSlu40VoSFdEZE1V0/e/7dGVyw03tZ46eO2Vg5YU2mapltWXn0uBW5jlWh3DYD2KD/oL88NRP8aXQffzC49X70AyuK+Uryqa7ojKcr0LLu+baX+Yt7kyLl/voj8+Pd11PEHANbft9n456nq+Kd8VdcMxj2Lyj2XzwdnSyPuiIg7I+KuiLg7IrZF5GXvjYj7Gtz/0LL8tePP5GJTga1SNv57tri3tXT8V4z+/ksHu4rc5hiIweipTExOje+NiC0RsTt6+iYmpwbq7eO7F3/5bMmCucvzA++hYuxXvrL9l2PBoh4Xu/uWbu/o6MxoK2LPXPoonwOcvTb+hTtXWWp7ROxoYvvZuHnyia92rbT++vHX0YL7TOmXEY9X2/9c1Il/+f3JssEPjRwc7o+p8b3DEz35hUINP/18/rWV9n9D8bdA1v4bap7/8/EPVhbfr51e6Bqrdf63T1e8pmng/H+rXJKd/72VN/J0b7Hsg9GZmVP7Inorr1y7fGRha2W+LH9p07aIR2r3/+w9LjvHsvh3RkR2Et8fEQ9ExINF3R+KiIcj30Qts1ci4ocXHn2nmfgbPMxNydr/6JL2j+u0f+OJruPff9NM/FVZ+x/IU7uLJat5/1ttBW/k2AEAAMCtIsmfga8ke+bTSbJnT8TGfG53QzJ1cnrmyYmT7189Wn1WfjB6knL+szofXJ0P3VfMDZf5kWX5/cW88eddA3l+Q3HvG2ifjYv7fz7hWO3/mT+62lw5YO35vhZ0rib6f90HHoBbh89/6FwN9H9vFXCbme/UffXLpetQF2B91fpQn21DPYD1Z1APnUv/h86l/0Pn0v+hI93I9/qbSVRW/c382yAxW/vw/r7yf/VHvQ323iRx5YlI8kQ628Zq/Fs8hraqwleLn7xcg/qUv5ZRLPlr5cLlT8TcDC1YP9G+9yQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIBW+j8AAP//HRbixA==") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040), 0x208e24b) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f00000003c0)={0x0, 0x2904c, 0x0, 0x10003, '\x00', [{0x0, 0x0, 0x2000000000700}, {0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x40000000000000}]}) 14.740029986s ago: executing program 1 (id=1178): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r0, &(0x7f00000001c0)=[{0x0, 0x3f, 0x0, 0x0, @tick, {}, {}, @result={0x2, 0x1}}], 0x1c) write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick=0xfe, {}, {}, @raw32}], 0xffc8) 14.340016052s ago: executing program 8 (id=1179): fanotify_init(0x0, 0x0) creat(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() r1 = socket$inet6(0xa, 0x3, 0x8) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x4e24, 0x2, @empty, 0x1}, 0x1c) sendmmsg(r1, &(0x7f00000015c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001600)=ANY=[], 0x218}}], 0x1, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102400, 0x19000) bpf$MAP_CREATE(0x0, 0x0, 0x50) socketpair$unix(0x1, 0x5, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) socket(0x10, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x2, &(0x7f0000000680)={0x3, 0x3, &(0x7f0000000740)=ANY=[], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc4c85513, &(0x7f0000000540)={{0xb, 0x6, 0x0, 0x2, 'syz0\x00', 0x281d}, 0x0, [0x1, 0x4ea3, 0x9, 0x56cd, 0x5, 0x6, 0x0, 0x80000001, 0x201, 0x1, 0x3fb, 0x1, 0x9, 0x7, 0x4, 0x10000, 0x8, 0x49b5e351, 0x80, 0xe8de, 0xfffffffffffffff9, 0x9, 0x201, 0x9, 0x1, 0x8, 0x1, 0x4, 0x0, 0x8000, 0x8, 0xa36, 0x57bf4b04, 0x4, 0x40000000000001, 0x6, 0x8, 0x100000000, 0x8, 0x7ff, 0x6, 0x401, 0x5, 0x10001, 0x1ff, 0x2, 0x2, 0xb7, 0x0, 0x5, 0xbe5, 0xa0000000000, 0x0, 0x1, 0x8, 0x7fffffffffffffff, 0xd3d, 0xbbeb, 0x1, 0x6, 0x4, 0x6, 0x8001, 0x3, 0x1, 0xec7, 0x646, 0xc58e, 0x5, 0x11ad, 0x0, 0x6, 0x8000, 0x100080, 0x7f, 0x9, 0x1, 0x5, 0x8000000000000000, 0x2, 0x7, 0xa5, 0x1b13, 0x4, 0x85, 0x8, 0x3, 0xf75, 0x9, 0xb, 0xffffffffffff66e3, 0xfffffffffffffff9, 0x851a, 0x5e997b8e, 0x0, 0x7, 0x6, 0x4, 0x100, 0x1000000004, 0x3ff, 0x6, 0x0, 0xffffffffffffff95, 0xa, 0x108000001, 0xcc7e, 0x8, 0x0, 0x6, 0x800000000006, 0xfffffffffffffd96, 0x3f3, 0x1, 0x4, 0x0, 0x7, 0x5, 0x6, 0x1, 0xe1, 0xec2, 0x1, 0x5, 0xfff, 0x0, 0x80]}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x4000, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) syz_kvm_setup_syzos_vm$x86(r5, &(0x7f0000a1e000/0x400000)=nil) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2) ioctl$KVM_SET_MSRS(r6, 0x4008ae89, &(0x7f00000000c0)={0x1, 0x0, [{0x4b564d01, 0x2000000, 0x7}]}) munmap(&(0x7f0000def000/0x4000)=nil, 0x4000) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@ipv4_newrule={0x34, 0x20, 0x1, 0x70bd2b, 0x25ffdbff, {0x2, 0x20, 0x20, 0x0, 0xb8, 0x0, 0x0, 0x8, 0x10007}, [@FRA_GENERIC_POLICY=@FRA_DPORT_RANGE={0x8, 0x18, {0x4e20, 0x4e23}}, @FRA_DST={0x8, 0x1, @multicast2}, @FRA_SRC={0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}]}, 0x34}}, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x8040, 0x0) 13.505306115s ago: executing program 1 (id=1180): r0 = syz_open_dev$evdev(&(0x7f0000000100), 0x2, 0x862b01) ioctl$EVIOCGREP(r0, 0x80084503, &(0x7f00000002c0)=""/115) 12.891657646s ago: executing program 1 (id=1181): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080), 0x802, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000380)={{0x0, 0x400, 0x4b, 0x9}, 'syz0\x00', 0x45}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x1, 0x800000c1}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) 12.594551552s ago: executing program 8 (id=1182): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000002680)=ANY=[@ANYBLOB="00220f000000540b8a50f82095017584839e3ce0795cd18f47711c3639b62b71f122c30e"], 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) ioctl$HIDIOCGCOLLECTIONINDEX(r1, 0x40184810, &(0x7f0000000040)={0x2003, 0xffffffff, 0x1, 0x1, 0x3, 0x2}) 11.113519739s ago: executing program 1 (id=1183): r0 = inotify_init() inotify_add_watch(r0, &(0x7f0000000340)='.\x00', 0xa50003d1) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffed3) 9.067826036s ago: executing program 1 (id=1184): syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000240)='./file2\x00', 0x2000410, &(0x7f0000000000)={[{@bsdgroups}, {@jqfmt_vfsv1}]}, 0xc1, 0x7da, &(0x7f0000000fc0)="$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") r0 = creat(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) r1 = fanotify_init(0xf00, 0x0) fanotify_mark(r1, 0x105, 0x40009975, r0, 0x0) quotactl$Q_QUOTAON(0xffffffff80000200, &(0x7f0000000100)=@filename='./file1\x00', 0x0, &(0x7f00000001c0)='./file2\x00') 7.779256826s ago: executing program 8 (id=1185): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x200000b, 0x204031, 0xffffffffffffffff, 0xffffd000) prctl$PR_SET_MM(0x23, 0x8, &(0x7f0000001000/0x4000)=nil) prctl$PR_SET_MM(0x23, 0x9, &(0x7f0000004000/0x3000)=nil) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000006100)='cmdline\x00') read$FUSE(r0, &(0x7f00000102c0)={0x2020}, 0x2020) 5.952031408s ago: executing program 8 (id=1186): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mount$binder(0x0, 0x0, 0x0, 0x80000, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) lsetxattr$security_ima(0x0, &(0x7f0000000100), &(0x7f0000000380)=@v2={0x3, 0x2, 0xfe, 0xe79f}, 0x9, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000180)=ANY=[@ANYBLOB="611230000000000061134c0000000000bf2000000000000015000200071b1750bd030100000000009500000000000000bc26080000000000bf67000000000000070300000fff0700670200000300000016060a000ee600f0bf050000000000000f650000000000006507f4ff02000000070700004c0040001f75000000000000bf54000000000000070500000300f9ffad430100000000009500000000000000050000000000000095000000000000004d9bd591d568253e9988431ec068e3a82983d58719d72183f2cb7f43dd55788be820b236dcb695dbfd737cbf719506d2d6b05fe7030586"], &(0x7f0000000100)='GPL\x00'}, 0x48) 5.736012855s ago: executing program 1 (id=1187): munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x840, &(0x7f0000000340)={[{@test_dummy_encryption_v1}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x2}}, {@errors_continue}, {@inlinecrypt}]}, 0x1, 0x241, &(0x7f0000000540)="$eJzs3U9oFFccB/DfzO42TbKUtL0UCm2hlNIGQnor9JJeWgiUEEoptIUUES9KIsQEb4knLx70rJKTlyDejB4ll+BFETxFzSFeBA0eDB70sDI7iUSz/oGJO+J8PjC7M7vvze8Ns983exkmgMoaiIiRiKhFxGBENCIi2dngm3wZ2Npc6F2ZiGi1/nyYtNvl27ntfv0RMR8RP0fEcprEwXrE7NK/649Xf//+xEzju3NL//R29SC3bKyv/bF5duz4xdGfZq/fvD+WxEg0XziuvZd0+KyeRHz2Loq9J5J62SPgbYwfvXAry/3nEfFtO/+NSCM/eSenP1puxI9nXtX31IMbX3ZzrMDea7Ua2TVwvgVUThoRzUjSoYjI19N0aCj/D3+71pcempo+MnhgamZyf9kzFbBXmhFrv13uudT/Uv7v1fL8Ax+uLP9/jS/eydY3a2WPBuimLP+D/8/9EPIPlSP/UF3yD9Ul/1Bdr8t/WtKYgO5w/Yfqkn+oLvmH6pJ/qC75h+ramX8AoFpaPWXfgQyUpez5BwAAAAAAAAAAAAAAAAAA2G2hd2Vie+lWzaunIzZ+jYh6p/q1recQfNx+7XuUZM2eS/Juhfz3dcEdFHS+5LuvP7lbbv1rX5Vbf24yYv5YRAzX67t/f0nh52B8+obvG/sKFijol7/Lrf90sdz6o6sRV7L5Z7jT/JPGF+33zvNPMzt/BesfflJwBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHTNswAAAP//ceptKw==") io_setup(0x5, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r0, 0x0, 0x0, 0x8000c61) ftruncate(0xffffffffffffffff, 0x81fd) r1 = creat(&(0x7f0000000080)='./file1\x00', 0x182) fallocate(r1, 0x0, 0x1, 0x2000402) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x183042, 0x8) pwrite64(r2, &(0x7f0000000140)='2', 0xfdef, 0xe7c) 962.044536ms ago: executing program 8 (id=1188): r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_pktinfo(r0, 0x0, 0x8, 0x0, &(0x7f0000000240)) 0s ago: executing program 8 (id=1189): r0 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r0, 0xc1205531, &(0x7f0000000340)={0x1000000, 0x4, 0x0, 0x8002, '\x00', '\x00', '\x00', 0x4, 0xfffffffe, 0x100, 0x0, "abd206a1ebd7cedfd17ebd65400ed41b"}) kernel console output (not intermixed with test programs): rt 1(bridge_slave_0) entered disabled state [ 1482.198300][T11743] bridge_slave_0: entered allmulticast mode [ 1482.216725][T11743] bridge_slave_0: entered promiscuous mode [ 1482.263874][T11719] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1482.271170][T11719] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1482.301047][T11719] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1482.492045][T11743] bridge0: port 2(bridge_slave_1) entered blocking state [ 1482.507324][T11743] bridge0: port 2(bridge_slave_1) entered disabled state [ 1482.516904][T11743] bridge_slave_1: entered allmulticast mode [ 1482.530243][T11743] bridge_slave_1: entered promiscuous mode [ 1482.635781][T11719] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1482.659803][T11719] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1482.727560][T11719] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1483.085682][T11743] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1483.373967][T11743] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1484.052779][T11743] team0: Port device team_slave_0 added [ 1484.162433][T11719] hsr_slave_0: entered promiscuous mode [ 1484.192686][T11719] hsr_slave_1: entered promiscuous mode [ 1484.288726][T11743] team0: Port device team_slave_1 added [ 1484.786571][T11743] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1484.814767][T11743] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1484.908927][T11743] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1485.075069][T11743] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1485.113462][T11743] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1485.220006][T11743] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1485.324725][T11506] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1485.931707][ T5575] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1485.944733][ T5575] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1485.957173][ T5575] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1485.984694][ T5575] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1486.002916][ T5575] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1487.250219][T10885] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1487.261180][T10885] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1487.271402][T10885] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1487.289547][T10885] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1487.319153][T10885] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1487.585131][T11743] hsr_slave_0: entered promiscuous mode [ 1487.636846][T11743] hsr_slave_1: entered promiscuous mode [ 1487.684645][T11743] debugfs: 'hsr0' already exists in 'hsr' [ 1487.711483][T11743] Cannot create hsr debugfs directory [ 1488.199580][ T5575] Bluetooth: hci1: command tx timeout [ 1489.491298][ T5575] Bluetooth: hci4: command tx timeout [ 1490.438346][ T5575] Bluetooth: hci1: command tx timeout [ 1490.476378][T11921] fuse: fd is not a fuse device [ 1491.720535][ T5575] Bluetooth: hci4: command tx timeout [ 1492.118485][ T5988] bridge_slave_1: left allmulticast mode [ 1492.141076][ T5988] bridge_slave_1: left promiscuous mode [ 1492.164831][ T5988] bridge0: port 2(bridge_slave_1) entered disabled state [ 1492.219362][ T5988] bridge_slave_0: left allmulticast mode [ 1492.226956][ T5988] bridge_slave_0: left promiscuous mode [ 1492.234903][ T5988] bridge0: port 1(bridge_slave_0) entered disabled state [ 1492.649925][ T5575] Bluetooth: hci1: command tx timeout [ 1493.101146][ T5988] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1493.169757][ T5988] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1493.206909][ T5988] bond0 (unregistering): Released all slaves [ 1493.512710][T11719] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1493.620785][T11719] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1493.933365][ T5575] Bluetooth: hci4: command tx timeout [ 1494.049842][ T5988] hsr_slave_0: left promiscuous mode [ 1494.059732][ T5988] hsr_slave_1: left promiscuous mode [ 1494.080749][ T5988] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1494.098977][ T5988] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1494.769575][ T5988] team0 (unregistering): Port device team_slave_1 removed [ 1494.823625][ T5988] team0 (unregistering): Port device team_slave_0 removed [ 1494.883967][ T5575] Bluetooth: hci1: command tx timeout [ 1495.080528][T11719] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1495.103235][T11719] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1495.291264][T11719] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1495.355899][T11719] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1495.517753][T11719] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1495.577532][T11719] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1496.162473][ T5575] Bluetooth: hci4: command tx timeout [ 1498.198365][T11743] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1498.286969][T11743] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1498.323473][T11743] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1498.417386][T11743] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1498.481727][T11743] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1498.590163][T11743] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1498.879106][T11743] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1498.930451][T11743] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1499.593792][ T5988] bridge_slave_1: left allmulticast mode [ 1499.618964][ T5988] bridge_slave_1: left promiscuous mode [ 1499.646352][ T5988] bridge0: port 2(bridge_slave_1) entered disabled state [ 1499.681635][ T5988] bridge_slave_0: left allmulticast mode [ 1499.696977][ T5988] bridge_slave_0: left promiscuous mode [ 1499.712616][ T5988] bridge0: port 1(bridge_slave_0) entered disabled state [ 1500.526791][ T5988] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1500.589197][ T5988] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1500.624984][ T5988] bond0 (unregistering): Released all slaves [ 1500.897657][T11884] bridge0: port 1(bridge_slave_0) entered blocking state [ 1500.911594][T11884] bridge0: port 1(bridge_slave_0) entered disabled state [ 1500.926069][T11884] bridge_slave_0: entered allmulticast mode [ 1500.955818][T11884] bridge_slave_0: entered promiscuous mode [ 1501.049853][ T5988] hsr_slave_0: left promiscuous mode [ 1501.068319][ T5988] hsr_slave_1: left promiscuous mode [ 1501.086160][ T5988] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1501.114343][ T5988] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1502.694405][ T5988] team0 (unregistering): Port device team_slave_1 removed [ 1502.884536][ T5988] team0 (unregistering): Port device team_slave_0 removed [ 1504.619939][T11884] bridge0: port 2(bridge_slave_1) entered blocking state [ 1504.727860][T11884] bridge0: port 2(bridge_slave_1) entered disabled state [ 1504.762240][T11884] bridge_slave_1: entered allmulticast mode [ 1504.808203][T11884] bridge_slave_1: entered promiscuous mode [ 1505.287757][T11884] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1505.444573][T11884] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1505.662707][T11894] bridge0: port 1(bridge_slave_0) entered blocking state [ 1505.671058][T11894] bridge0: port 1(bridge_slave_0) entered disabled state [ 1505.682401][T11894] bridge_slave_0: entered allmulticast mode [ 1505.693413][T11894] bridge_slave_0: entered promiscuous mode [ 1505.723912][T11884] team0: Port device team_slave_0 added [ 1505.756287][T11894] bridge0: port 2(bridge_slave_1) entered blocking state [ 1505.783968][T11894] bridge0: port 2(bridge_slave_1) entered disabled state [ 1505.795932][T11894] bridge_slave_1: entered allmulticast mode [ 1505.805815][T11894] bridge_slave_1: entered promiscuous mode [ 1505.826306][T11884] team0: Port device team_slave_1 added [ 1506.045624][T11894] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1506.078978][T11894] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1506.091687][T11884] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1506.099618][T11884] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1506.128013][T11884] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1506.377235][T11884] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1506.403800][T11884] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1506.454241][T11884] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1506.504457][T11719] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1506.533239][T11894] team0: Port device team_slave_0 added [ 1506.632971][T11894] team0: Port device team_slave_1 added [ 1506.930104][T11894] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1506.938346][T11894] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1506.966003][T11894] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1507.011734][T11884] hsr_slave_0: entered promiscuous mode [ 1507.021575][T11884] hsr_slave_1: entered promiscuous mode [ 1507.030778][T11884] debugfs: 'hsr0' already exists in 'hsr' [ 1507.037338][T11884] Cannot create hsr debugfs directory [ 1507.063283][T11894] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1507.071267][T11894] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1507.101122][T11894] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1507.206710][T11719] 8021q: adding VLAN 0 to HW filter on device team0 [ 1507.502535][ T9156] bridge0: port 1(bridge_slave_0) entered blocking state [ 1507.510275][ T9156] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1507.625414][T11894] hsr_slave_0: entered promiscuous mode [ 1507.637899][T11894] hsr_slave_1: entered promiscuous mode [ 1507.647489][T11894] debugfs: 'hsr0' already exists in 'hsr' [ 1507.658258][T11894] Cannot create hsr debugfs directory [ 1507.759966][ T3300] bridge0: port 2(bridge_slave_1) entered blocking state [ 1507.767737][ T3300] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1508.776404][T11743] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1509.296442][T11743] 8021q: adding VLAN 0 to HW filter on device team0 [ 1509.520337][ T9156] bridge0: port 1(bridge_slave_0) entered blocking state [ 1509.528365][ T9156] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1509.785523][ T1327] bridge0: port 2(bridge_slave_1) entered blocking state [ 1509.793299][ T1327] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1510.625144][T11884] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1510.672204][T11884] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1510.700434][T11884] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1510.763105][T11884] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1510.837857][T11884] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1510.867459][T11884] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1510.930492][T11884] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1510.966887][T11884] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1511.519648][T11894] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1511.653345][T11894] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1511.679502][T11894] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1511.768216][T11894] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1511.835897][T11894] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1511.888623][T11894] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1511.959821][T11894] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1512.047419][T11894] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1513.556328][ T29] audit: type=1326 audit(1777915599.238:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12086 comm="syz.2.720" exe="/root/ci-upstream-kmsan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa51799cdd9 code=0x7ffc0000 [ 1513.649499][ T29] audit: type=1326 audit(1777915599.266:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12086 comm="syz.2.720" exe="/root/ci-upstream-kmsan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa51799cdd9 code=0x7ffc0000 [ 1513.725966][T11884] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1513.750759][ T29] audit: type=1326 audit(1777915599.285:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12086 comm="syz.2.720" exe="/root/ci-upstream-kmsan-gce-root/syz-executor" sig=0 arch=c000003e syscall=196 compat=0 ip=0x7fa51799cdd9 code=0x7ffc0000 [ 1513.778786][ T29] audit: type=1326 audit(1777915599.285:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12086 comm="syz.2.720" exe="/root/ci-upstream-kmsan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa51799cdd9 code=0x7ffc0000 [ 1513.817020][ T29] audit: type=1326 audit(1777915599.285:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12086 comm="syz.2.720" exe="/root/ci-upstream-kmsan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa51799cdd9 code=0x7ffc0000 [ 1513.819862][T11719] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1514.278145][T11884] 8021q: adding VLAN 0 to HW filter on device team0 [ 1514.455023][ T55] bridge0: port 1(bridge_slave_0) entered blocking state [ 1514.462793][ T55] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1514.633572][T11894] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1514.700167][ T56] bridge0: port 2(bridge_slave_1) entered blocking state [ 1514.707940][ T56] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1515.366714][T11894] 8021q: adding VLAN 0 to HW filter on device team0 [ 1515.629364][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 1515.637118][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1516.215545][ T9156] bridge0: port 2(bridge_slave_1) entered blocking state [ 1516.223386][ T9156] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1516.481667][T11894] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1516.506031][T11894] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1517.733099][T11743] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1521.899470][T10885] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1521.922579][T10885] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1521.933597][T10885] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1521.954202][T10885] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1521.966633][T10885] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1524.136391][T10885] Bluetooth: hci2: command tx timeout [ 1524.570246][ T5575] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1524.581165][ T5575] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1524.592710][ T5575] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1524.609546][ T5575] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1524.631053][ T5575] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1524.704492][T11894] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1525.156072][T11884] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1526.375207][ T5575] Bluetooth: hci2: command tx timeout [ 1526.876418][ T5575] Bluetooth: hci5: command tx timeout [ 1527.338219][T11894] veth0_vlan: entered promiscuous mode [ 1527.692357][ T753] bridge_slave_1: left allmulticast mode [ 1527.710321][ T753] bridge_slave_1: left promiscuous mode [ 1527.734486][ T753] bridge0: port 2(bridge_slave_1) entered disabled state [ 1527.774269][ T753] bridge_slave_0: left allmulticast mode [ 1527.780201][ T753] bridge_slave_0: left promiscuous mode [ 1527.820456][ T753] bridge0: port 1(bridge_slave_0) entered disabled state [ 1528.585211][ T5575] Bluetooth: hci2: command tx timeout [ 1528.818521][ T753] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1528.890187][ T753] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1528.945778][ T753] bond0 (unregistering): Released all slaves [ 1529.099988][ T5575] Bluetooth: hci5: command tx timeout [ 1529.142478][T11884] veth0_vlan: entered promiscuous mode [ 1529.182892][T11894] veth1_vlan: entered promiscuous mode [ 1529.408614][ T753] hsr_slave_0: left promiscuous mode [ 1529.425413][ T753] hsr_slave_1: left promiscuous mode [ 1529.470558][ T753] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1529.489431][ T753] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1530.749480][T12224] fuse: fd is not a fuse device [ 1530.811048][ T5575] Bluetooth: hci2: command tx timeout [ 1530.852141][ T753] team0 (unregistering): Port device team_slave_1 removed [ 1530.950882][ T753] team0 (unregistering): Port device team_slave_0 removed [ 1531.324686][ T5575] Bluetooth: hci5: command tx timeout [ 1532.043282][T11884] veth1_vlan: entered promiscuous mode [ 1532.060341][T12234] IPv6: addrconf: prefix option has invalid lifetime [ 1533.439965][T11894] veth0_macvtap: entered promiscuous mode [ 1533.547202][ T5575] Bluetooth: hci5: command tx timeout [ 1533.810676][T11894] veth1_macvtap: entered promiscuous mode [ 1534.588138][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 1534.598998][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 1534.676871][T11884] veth0_macvtap: entered promiscuous mode [ 1534.972530][ T5575] Bluetooth: hci6: unexpected cc 0x2039 length: 9 > 1 [ 1534.979729][ T5575] Bluetooth: hci6: unexpected event for opcode 0x2039 [ 1535.078825][T11884] veth1_macvtap: entered promiscuous mode [ 1535.229493][T11894] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1535.364641][ T753] bridge_slave_1: left allmulticast mode [ 1535.371366][ T753] bridge_slave_1: left promiscuous mode [ 1535.378943][ T753] bridge0: port 2(bridge_slave_1) entered disabled state [ 1535.393206][ T753] bridge_slave_0: left allmulticast mode [ 1535.399209][ T753] bridge_slave_0: left promiscuous mode [ 1535.405702][ T753] bridge0: port 1(bridge_slave_0) entered disabled state [ 1535.839573][ T5575] Bluetooth: min 6 > max 0 [ 1535.885943][ T753] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1535.923376][ T753] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1535.977822][ T753] bond0 (unregistering): Released all slaves [ 1536.324959][T11894] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1536.608978][ T753] hsr_slave_0: left promiscuous mode [ 1536.654838][ T753] hsr_slave_1: left promiscuous mode [ 1536.666126][ T753] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1536.688939][ T753] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1537.679536][ T753] team0 (unregistering): Port device team_slave_1 removed [ 1537.786240][ T753] team0 (unregistering): Port device team_slave_0 removed [ 1537.996326][ T5575] Bluetooth: hci6: command 0x0406 tx timeout [ 1538.827531][T12140] bridge0: port 1(bridge_slave_0) entered blocking state [ 1538.838399][T12140] bridge0: port 1(bridge_slave_0) entered disabled state [ 1538.860784][T12140] bridge_slave_0: entered allmulticast mode [ 1538.908294][T12140] bridge_slave_0: entered promiscuous mode [ 1539.023774][T12140] bridge0: port 2(bridge_slave_1) entered blocking state [ 1539.052496][T12140] bridge0: port 2(bridge_slave_1) entered disabled state [ 1539.088369][T12140] bridge_slave_1: entered allmulticast mode [ 1539.130700][T12140] bridge_slave_1: entered promiscuous mode [ 1539.180855][ T8557] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1539.222179][ T8557] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1539.279947][ T5575] Bluetooth: hci6: Controller not accepting commands anymore: ncmd = 0 [ 1539.288838][ T5575] Bluetooth: hci6: Injecting HCI hardware error event [ 1539.296828][T10885] Bluetooth: hci6: hardware error 0x00 [ 1539.544597][ T8557] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1539.585382][T11884] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1539.926679][ T8557] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1540.062475][T12140] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1540.170276][T12140] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1540.192265][T11884] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1540.210978][T12167] bridge0: port 1(bridge_slave_0) entered blocking state [ 1540.235850][T12167] bridge0: port 1(bridge_slave_0) entered disabled state [ 1540.274413][T12167] bridge_slave_0: entered allmulticast mode [ 1540.284610][T12167] bridge_slave_0: entered promiscuous mode [ 1540.502425][T12167] bridge0: port 2(bridge_slave_1) entered blocking state [ 1540.550395][T12167] bridge0: port 2(bridge_slave_1) entered disabled state [ 1540.568488][T12167] bridge_slave_1: entered allmulticast mode [ 1540.596478][T12167] bridge_slave_1: entered promiscuous mode [ 1541.125427][T12140] team0: Port device team_slave_0 added [ 1541.220180][T12167] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1541.267997][T12140] team0: Port device team_slave_1 added [ 1541.312222][ T3300] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1541.336041][ T3300] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1541.368767][ T1037] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1541.438616][T12167] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1541.509875][T10885] Bluetooth: hci6: Opcode 0x0c03 failed: -110 [ 1541.690234][ T1037] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1542.041294][T12167] team0: Port device team_slave_0 added [ 1542.083204][T12140] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1542.117197][T12140] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1542.214879][T12140] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1542.299338][T12167] team0: Port device team_slave_1 added [ 1542.322974][T12140] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1542.356602][T12140] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1542.466956][T12140] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1542.974310][T12167] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1542.991603][T12167] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1543.078830][T12167] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1543.166822][T12167] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1543.203621][T12167] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1543.304678][T12167] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1543.859577][T12140] hsr_slave_0: entered promiscuous mode [ 1543.894160][T12140] hsr_slave_1: entered promiscuous mode [ 1545.223252][T12167] hsr_slave_0: entered promiscuous mode [ 1545.264348][T12167] hsr_slave_1: entered promiscuous mode [ 1545.301351][T12167] debugfs: 'hsr0' already exists in 'hsr' [ 1545.321547][T12167] Cannot create hsr debugfs directory [ 1548.441277][ T753] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1548.476276][ T753] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1548.986803][ T5988] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1549.024800][ T5988] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1549.673001][T12140] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1549.869248][T12140] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1550.109883][T12140] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1550.229565][T12140] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1550.423464][T12140] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1550.578922][T12140] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1550.816335][T12140] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1550.945041][T12140] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1550.979776][T12381] IPv6: addrconf: prefix option has invalid lifetime [ 1551.700111][ T5575] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1551.712642][ T5575] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1551.730056][ T5575] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1551.764369][ T5575] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1551.778693][ T5575] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1551.951549][T12167] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1552.087809][T12167] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1552.214033][T12167] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1552.366052][T12167] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1552.435445][T12167] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1552.590989][T12167] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1552.768586][ T5575] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1552.781686][ T5575] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1552.794066][ T5575] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1552.814949][ T5575] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1552.827521][ T5575] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1552.839964][T12167] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1553.023694][T12167] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1554.007056][T10885] Bluetooth: hci0: command tx timeout [ 1555.037421][T10885] Bluetooth: hci3: command tx timeout [ 1555.265358][ T753] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1555.519813][ T753] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1555.844179][ T753] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1556.140603][ T753] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1556.220983][T10885] Bluetooth: hci0: command tx timeout [ 1556.664623][T12140] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1557.173191][T12140] 8021q: adding VLAN 0 to HW filter on device team0 [ 1557.249085][T10885] Bluetooth: hci3: command tx timeout [ 1557.694682][ T3300] bridge0: port 1(bridge_slave_0) entered blocking state [ 1557.702511][ T3300] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1557.836314][ T753] bridge_slave_1: left allmulticast mode [ 1557.867022][ T753] bridge_slave_1: left promiscuous mode [ 1557.886897][ T753] bridge0: port 2(bridge_slave_1) entered disabled state [ 1557.950236][ T753] bridge_slave_0: left allmulticast mode [ 1557.976711][ T753] bridge_slave_0: left promiscuous mode [ 1558.001860][ T753] bridge0: port 1(bridge_slave_0) entered disabled state [ 1558.457487][T10885] Bluetooth: hci0: command tx timeout [ 1559.153597][ T753] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1559.224720][ T753] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1559.264677][ T753] bond0 (unregistering): Released all slaves [ 1559.473663][T10885] Bluetooth: hci3: command tx timeout [ 1559.482048][ T5988] bridge0: port 2(bridge_slave_1) entered blocking state [ 1559.489882][ T5988] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1559.721538][ T753] hsr_slave_0: left promiscuous mode [ 1559.755697][ T753] hsr_slave_1: left promiscuous mode [ 1559.773342][ T753] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1559.795177][ T753] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1559.822596][ T753] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1559.836306][ T753] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1559.900868][ T753] veth1_macvtap: left promiscuous mode [ 1559.926301][ T753] veth0_macvtap: left promiscuous mode [ 1559.932834][ T753] veth1_vlan: left promiscuous mode [ 1559.945220][ T753] veth0_vlan: left promiscuous mode [ 1560.676539][T10885] Bluetooth: hci0: command tx timeout [ 1561.566140][ T753] team0 (unregistering): Port device team_slave_1 removed [ 1561.624588][ T753] team0 (unregistering): Port device team_slave_0 removed [ 1561.703715][T10885] Bluetooth: hci3: command tx timeout [ 1562.364456][T12446] tc_dump_action: action bad kind [ 1563.456182][T12167] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1563.809055][ T1037] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1564.142490][ T1037] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1564.420582][ T1037] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1564.738599][ T1037] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1564.947399][T12167] 8021q: adding VLAN 0 to HW filter on device team0 [ 1565.491851][ T65] bridge0: port 1(bridge_slave_0) entered blocking state [ 1565.499603][ T65] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1565.829468][ T753] bridge0: port 2(bridge_slave_1) entered blocking state [ 1565.837405][ T753] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1567.138148][ T1037] bridge_slave_1: left allmulticast mode [ 1567.161149][ T1037] bridge_slave_1: left promiscuous mode [ 1567.202122][ T1037] bridge0: port 2(bridge_slave_1) entered disabled state [ 1567.291874][ T1037] bridge_slave_0: left allmulticast mode [ 1567.314352][ T1037] bridge_slave_0: left promiscuous mode [ 1567.346735][ T1037] bridge0: port 1(bridge_slave_0) entered disabled state [ 1567.377010][T12504] af_packet: tpacket_rcv: packet too big, clamped from 65442 to 3956. macoff=92 [ 1568.541050][ T1037] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1568.612232][ T1037] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1568.655610][ T1037] bond0 (unregistering): Released all slaves [ 1569.850180][T12393] bridge0: port 1(bridge_slave_0) entered blocking state [ 1569.868748][T12393] bridge0: port 1(bridge_slave_0) entered disabled state [ 1569.892672][T12393] bridge_slave_0: entered allmulticast mode [ 1569.918996][T12393] bridge_slave_0: entered promiscuous mode [ 1570.239265][T12393] bridge0: port 2(bridge_slave_1) entered blocking state [ 1570.248344][T12393] bridge0: port 2(bridge_slave_1) entered disabled state [ 1570.266910][T12393] bridge_slave_1: entered allmulticast mode [ 1570.314469][T12393] bridge_slave_1: entered promiscuous mode [ 1570.411731][T12385] bridge0: port 1(bridge_slave_0) entered blocking state [ 1570.451262][T12385] bridge0: port 1(bridge_slave_0) entered disabled state [ 1570.481047][T12385] bridge_slave_0: entered allmulticast mode [ 1570.503173][T12385] bridge_slave_0: entered promiscuous mode [ 1570.665772][ T1037] hsr_slave_0: left promiscuous mode [ 1570.676754][ T1037] hsr_slave_1: left promiscuous mode [ 1570.688101][ T1037] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1570.701402][ T1037] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1570.740202][ T1037] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1570.749272][ T1037] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1570.815154][ T1037] veth1_macvtap: left promiscuous mode [ 1570.832599][ T1037] veth0_macvtap: left promiscuous mode [ 1570.840454][ T1037] veth1_vlan: left promiscuous mode [ 1570.866449][ T1037] veth0_vlan: left promiscuous mode [ 1571.953370][ T1037] team0 (unregistering): Port device team_slave_1 removed [ 1571.996526][ T1037] team0 (unregistering): Port device team_slave_0 removed [ 1572.315265][T12385] bridge0: port 2(bridge_slave_1) entered blocking state [ 1572.338030][T12385] bridge0: port 2(bridge_slave_1) entered disabled state [ 1572.354229][T12385] bridge_slave_1: entered allmulticast mode [ 1572.368191][T12385] bridge_slave_1: entered promiscuous mode [ 1572.550196][T12393] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1572.763462][T12393] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1572.988665][T12385] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1573.058906][T12385] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1573.383327][T12393] team0: Port device team_slave_0 added [ 1573.562228][T12393] team0: Port device team_slave_1 added [ 1573.758524][T12385] team0: Port device team_slave_0 added [ 1573.983310][T12140] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1574.059542][T12385] team0: Port device team_slave_1 added [ 1574.233037][T12393] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1574.263604][T12393] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1574.342792][T12393] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1574.535941][T12393] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1574.562002][T12393] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1574.634485][T12393] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1574.743625][T12385] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1574.767728][T12385] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1574.819293][T12385] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1574.870958][T12385] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1574.884486][T12385] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1574.935807][T12385] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1575.519267][T12393] hsr_slave_0: entered promiscuous mode [ 1575.541687][T12393] hsr_slave_1: entered promiscuous mode [ 1575.573721][T12393] debugfs: 'hsr0' already exists in 'hsr' [ 1575.592713][T12393] Cannot create hsr debugfs directory [ 1575.815371][T12385] hsr_slave_0: entered promiscuous mode [ 1575.863874][T12385] hsr_slave_1: entered promiscuous mode [ 1575.886772][T12385] debugfs: 'hsr0' already exists in 'hsr' [ 1575.895979][T12385] Cannot create hsr debugfs directory [ 1575.982143][T12588] syz_tun: entered allmulticast mode [ 1579.088022][T12167] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1580.457291][T12140] veth0_vlan: entered promiscuous mode [ 1581.095245][T12140] veth1_vlan: entered promiscuous mode [ 1581.944526][T12140] veth0_macvtap: entered promiscuous mode [ 1582.187873][T12140] veth1_macvtap: entered promiscuous mode [ 1582.423234][T12393] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1582.473702][T12393] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1582.512909][T12393] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1582.572498][T12393] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1582.609356][T12393] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1582.657324][T12393] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1582.686665][T12393] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1582.730424][T12393] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1582.882293][T12140] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1583.188373][T12140] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1583.505305][T12385] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1583.605249][T12385] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1583.648495][ T1327] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1583.671845][ T1327] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1583.728037][T12385] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1583.764054][T12385] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1583.803229][T12642] netlink: 8 bytes leftover after parsing attributes in process `syz.2.793'. [ 1583.822253][T12642] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1583.843978][ T1327] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1583.879574][ T65] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1583.915608][T12385] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1583.999875][T12385] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1584.162147][T12385] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1584.296424][T12385] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1584.997306][T12167] veth0_vlan: entered promiscuous mode [ 1585.324853][T12167] veth1_vlan: entered promiscuous mode [ 1586.035635][T12393] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1586.318234][T12167] veth0_macvtap: entered promiscuous mode [ 1586.383668][T12393] 8021q: adding VLAN 0 to HW filter on device team0 [ 1586.491458][T12167] veth1_macvtap: entered promiscuous mode [ 1586.721660][ T753] bridge0: port 1(bridge_slave_0) entered blocking state [ 1586.729439][ T753] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1587.147300][ T1327] bridge0: port 2(bridge_slave_1) entered blocking state [ 1587.155135][ T1327] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1587.462958][T12385] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1587.957331][ T1037] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1588.023811][ T5575] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1588.047274][ T5575] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1588.069429][ T5575] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1588.097430][ T5575] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1588.115378][ T5575] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1588.280754][ T1037] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1588.482166][ T1037] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1588.655548][T12385] 8021q: adding VLAN 0 to HW filter on device team0 [ 1588.744222][ T1037] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1588.912967][ T8557] bridge0: port 1(bridge_slave_0) entered blocking state [ 1588.920670][ T8557] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1589.222615][ T5988] bridge0: port 2(bridge_slave_1) entered blocking state [ 1589.230329][ T5988] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1590.141594][ T1037] bridge_slave_1: left allmulticast mode [ 1590.185121][ T1037] bridge_slave_1: left promiscuous mode [ 1590.237631][ T1037] bridge0: port 2(bridge_slave_1) entered disabled state [ 1590.348394][ T1037] bridge_slave_0: left allmulticast mode [ 1590.363127][ T5575] Bluetooth: hci1: command tx timeout [ 1590.410104][ T1037] bridge_slave_0: left promiscuous mode [ 1590.438320][ T1037] bridge0: port 1(bridge_slave_0) entered disabled state [ 1590.931809][T10885] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1590.943680][T10885] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1590.955181][T10885] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1590.974352][T10885] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1590.991049][T10885] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1591.330190][ T29] audit: type=1326 audit(1777915671.953:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12695 comm="syz.2.798" exe="/root/ci-upstream-kmsan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa51799cdd9 code=0x7ffc0000 [ 1591.431790][ T29] audit: type=1326 audit(1777915671.953:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12695 comm="syz.2.798" exe="/root/ci-upstream-kmsan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa51799cdd9 code=0x7ffc0000 [ 1591.491028][ T29] audit: type=1326 audit(1777915671.972:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12695 comm="syz.2.798" exe="/root/ci-upstream-kmsan-gce-root/syz-executor" sig=0 arch=c000003e syscall=90 compat=0 ip=0x7fa51799cdd9 code=0x7ffc0000 [ 1591.568783][ T29] audit: type=1326 audit(1777915671.972:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12695 comm="syz.2.798" exe="/root/ci-upstream-kmsan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa51799cdd9 code=0x7ffc0000 [ 1591.675716][ T29] audit: type=1326 audit(1777915671.990:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12695 comm="syz.2.798" exe="/root/ci-upstream-kmsan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa51799cdd9 code=0x7ffc0000 [ 1591.946402][ T1037] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1591.973001][T12701] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1591.980623][T12701] IPv6: NLM_F_CREATE should be set when creating new route [ 1591.988306][T12701] IPv6: NLM_F_CREATE should be set when creating new route [ 1592.001005][ T1037] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1592.024494][ T1037] bond0 (unregistering): Released all slaves [ 1592.446823][ T1037] hsr_slave_0: left promiscuous mode [ 1592.508740][ T1037] hsr_slave_1: left promiscuous mode [ 1592.542915][ T1037] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1592.566032][ T1037] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1592.584715][ T5575] Bluetooth: hci1: command tx timeout [ 1592.614346][ T1037] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1592.634925][ T1037] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1592.731146][ T1037] veth1_macvtap: left promiscuous mode [ 1592.746002][ T1037] veth0_macvtap: left promiscuous mode [ 1592.774297][ T1037] veth1_vlan: left promiscuous mode [ 1592.798659][ T1037] veth0_vlan: left promiscuous mode [ 1593.269672][ T5575] Bluetooth: hci2: command tx timeout [ 1594.327414][ T1037] team0 (unregistering): Port device team_slave_1 removed [ 1594.435106][ T1037] team0 (unregistering): Port device team_slave_0 removed [ 1594.823221][T10885] Bluetooth: hci1: command tx timeout [ 1595.495363][T10885] Bluetooth: hci2: command tx timeout [ 1597.035073][T10885] Bluetooth: hci1: command tx timeout [ 1597.718430][T10885] Bluetooth: hci2: command tx timeout [ 1598.220116][T12393] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1599.086603][ T1037] bridge_slave_1: left allmulticast mode [ 1599.108652][ T1037] bridge_slave_1: left promiscuous mode [ 1599.139961][ T1037] bridge0: port 2(bridge_slave_1) entered disabled state [ 1599.198233][ T1037] bridge_slave_0: left allmulticast mode [ 1599.230986][ T1037] bridge_slave_0: left promiscuous mode [ 1599.276298][ T1037] bridge0: port 1(bridge_slave_0) entered disabled state [ 1599.951389][T10885] Bluetooth: hci2: command tx timeout [ 1600.307094][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 1600.315959][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 1600.483035][ T1037] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1600.551320][ T1037] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1600.578797][ T1037] bond0 (unregistering): Released all slaves [ 1601.021770][ T1037] hsr_slave_0: left promiscuous mode [ 1601.040683][ T1037] hsr_slave_1: left promiscuous mode [ 1601.067809][ T1037] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1601.118818][ T1037] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1601.200172][ T1037] veth1_macvtap: left promiscuous mode [ 1601.226696][ T1037] veth0_macvtap: left promiscuous mode [ 1601.246386][ T1037] veth1_vlan: left promiscuous mode [ 1601.267239][ T1037] veth0_vlan: left promiscuous mode [ 1602.551180][ T1037] team0 (unregistering): Port device team_slave_1 removed [ 1602.639170][ T1037] team0 (unregistering): Port device team_slave_0 removed [ 1603.929892][T12668] bridge0: port 1(bridge_slave_0) entered blocking state [ 1603.951467][T12668] bridge0: port 1(bridge_slave_0) entered disabled state [ 1603.970926][T12668] bridge_slave_0: entered allmulticast mode [ 1604.000023][T12668] bridge_slave_0: entered promiscuous mode [ 1604.069438][T12668] bridge0: port 2(bridge_slave_1) entered blocking state [ 1604.095594][T12668] bridge0: port 2(bridge_slave_1) entered disabled state [ 1604.119309][T12668] bridge_slave_1: entered allmulticast mode [ 1604.131296][T12668] bridge_slave_1: entered promiscuous mode [ 1604.658740][T12385] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1604.777522][T12668] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1604.874306][T12668] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1605.415920][T12668] team0: Port device team_slave_0 added [ 1605.542495][T12668] team0: Port device team_slave_1 added [ 1605.857345][T12393] veth0_vlan: entered promiscuous mode [ 1605.891250][T12668] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1605.912113][T12668] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1605.976799][T12668] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1606.032497][T12668] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1606.049851][T12668] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1606.078997][T12668] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1606.506531][T12393] veth1_vlan: entered promiscuous mode [ 1606.742750][T12668] hsr_slave_0: entered promiscuous mode [ 1606.764938][T12668] hsr_slave_1: entered promiscuous mode [ 1607.112988][T12691] bridge0: port 1(bridge_slave_0) entered blocking state [ 1607.121117][T12691] bridge0: port 1(bridge_slave_0) entered disabled state [ 1607.128999][T12691] bridge_slave_0: entered allmulticast mode [ 1607.167082][T12691] bridge_slave_0: entered promiscuous mode [ 1607.389892][T12691] bridge0: port 2(bridge_slave_1) entered blocking state [ 1607.399543][T12691] bridge0: port 2(bridge_slave_1) entered disabled state [ 1607.407515][T12691] bridge_slave_1: entered allmulticast mode [ 1607.421147][T12691] bridge_slave_1: entered promiscuous mode [ 1607.766503][T12691] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1607.840086][T12691] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1608.034468][T12385] veth0_vlan: entered promiscuous mode [ 1608.062244][T12691] team0: Port device team_slave_0 added [ 1608.128353][T12691] team0: Port device team_slave_1 added [ 1608.325423][T12691] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1608.333626][T12691] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1608.360763][T12691] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1608.421216][T12691] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1608.429118][T12691] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1608.459966][T12691] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1608.561593][T12385] veth1_vlan: entered promiscuous mode [ 1608.699208][T12393] veth0_macvtap: entered promiscuous mode [ 1609.005512][T12393] veth1_macvtap: entered promiscuous mode [ 1609.178116][T12691] hsr_slave_0: entered promiscuous mode [ 1609.201056][T12691] hsr_slave_1: entered promiscuous mode [ 1609.215018][T12691] debugfs: 'hsr0' already exists in 'hsr' [ 1609.230016][T12691] Cannot create hsr debugfs directory [ 1609.653368][T12393] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1610.026344][T12393] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1610.331813][T12385] veth0_macvtap: entered promiscuous mode [ 1610.372028][ T1327] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1610.394055][ T1327] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1610.497534][T12668] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1610.576172][T12668] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1610.602708][ T1327] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1610.627574][ T1327] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1610.745527][T12668] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1610.813789][T12668] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1610.917849][T12385] veth1_macvtap: entered promiscuous mode [ 1610.978918][T12668] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1611.012566][T12668] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1611.033295][T12668] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1611.077543][T12668] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1611.780423][T12385] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1612.019193][T12385] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1612.422504][ T1335] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1612.435918][ T1335] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1612.452843][T12691] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1612.512578][T12691] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1612.631498][ T56] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1612.643609][ T56] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1612.658706][T12691] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1612.686441][T12691] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1612.771092][T12691] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1612.834767][T12691] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1613.209834][T12691] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1613.245526][T12691] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1614.280135][T12668] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1614.813301][T12668] 8021q: adding VLAN 0 to HW filter on device team0 [ 1615.033061][ T55] bridge0: port 1(bridge_slave_0) entered blocking state [ 1615.040806][ T55] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1615.282319][ T55] bridge0: port 2(bridge_slave_1) entered blocking state [ 1615.290227][ T55] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1616.361282][T12691] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1617.246486][T12691] 8021q: adding VLAN 0 to HW filter on device team0 [ 1617.503822][ T5575] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1617.525153][ T5575] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1617.540976][ T5575] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1617.573363][ T5575] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1617.596712][ T5575] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1617.755239][ T9156] bridge0: port 1(bridge_slave_0) entered blocking state [ 1617.763042][ T9156] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1618.117480][ T9156] bridge0: port 2(bridge_slave_1) entered blocking state [ 1618.125423][ T9156] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1618.284572][T10885] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1618.306439][T10885] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1618.321148][T10885] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1618.348768][T10885] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1618.394170][T10885] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1619.631139][ T1327] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1619.793163][T10885] Bluetooth: hci4: command tx timeout [ 1619.917379][ T1327] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1620.271405][ T1327] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1620.648819][T10885] Bluetooth: hci5: command tx timeout [ 1620.651006][ T1327] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1621.097334][ T5226] 8021q: adding VLAN 0 to HW filter on device eth21 [ 1622.018728][T10885] Bluetooth: hci4: command tx timeout [ 1622.124202][ T1327] bridge_slave_1: left allmulticast mode [ 1622.160603][ T1327] bridge_slave_1: left promiscuous mode [ 1622.208134][ T1327] bridge0: port 2(bridge_slave_1) entered disabled state [ 1622.293127][ T1327] bridge_slave_0: left allmulticast mode [ 1622.324381][ T1327] bridge_slave_0: left promiscuous mode [ 1622.354894][ T1327] bridge0: port 1(bridge_slave_0) entered disabled state [ 1622.874697][T10885] Bluetooth: hci5: command tx timeout [ 1623.494549][ T1327] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1623.528820][ T1327] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1623.545309][ T1327] bond0 (unregistering): Released all slaves [ 1624.089828][ T1327] hsr_slave_0: left promiscuous mode [ 1624.118526][ T1327] hsr_slave_1: left promiscuous mode [ 1624.134514][ T1327] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1624.171884][ T1327] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1624.207571][ T1327] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1624.227330][ T1327] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1624.250345][T10885] Bluetooth: hci4: command tx timeout [ 1624.348306][ T1327] veth1_macvtap: left promiscuous mode [ 1624.358339][ T1327] veth0_macvtap: left promiscuous mode [ 1624.372784][ T1327] veth1_vlan: left promiscuous mode [ 1624.378508][ T1327] veth0_vlan: left promiscuous mode [ 1625.112414][T10885] Bluetooth: hci5: command tx timeout [ 1625.520900][ T1327] team0 (unregistering): Port device team_slave_1 removed [ 1625.559061][ T1327] team0 (unregistering): Port device team_slave_0 removed [ 1626.143261][T12668] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1626.477943][T10885] Bluetooth: hci4: command tx timeout [ 1627.254827][T12691] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1627.322540][T10885] Bluetooth: hci5: command tx timeout [ 1627.415295][ T1327] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1627.825423][ T1327] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1628.422980][ T1327] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1628.849657][ T1327] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1630.238483][ T1327] bridge_slave_1: left allmulticast mode [ 1630.254075][ T1327] bridge_slave_1: left promiscuous mode [ 1630.261343][ T1327] bridge0: port 2(bridge_slave_1) entered disabled state [ 1630.290869][ T1327] bridge_slave_0: left allmulticast mode [ 1630.310112][ T1327] bridge_slave_0: left promiscuous mode [ 1630.338103][ T1327] bridge0: port 1(bridge_slave_0) entered disabled state [ 1631.069895][ T1327] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1631.096829][ T1327] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1631.124822][ T1327] bond0 (unregistering): Released all slaves [ 1631.329667][T13019] bridge0: port 1(bridge_slave_0) entered disabled state [ 1631.446468][ T1327] hsr_slave_0: left promiscuous mode [ 1631.455967][ T1327] hsr_slave_1: left promiscuous mode [ 1631.470041][ T1327] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1631.481830][ T1327] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1631.492839][ T1327] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1631.500974][ T1327] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1631.530398][ T1327] veth1_macvtap: left promiscuous mode [ 1631.536645][ T1327] veth0_macvtap: left promiscuous mode [ 1631.542677][ T1327] veth1_vlan: left promiscuous mode [ 1631.550785][ T1327] veth0_vlan: left promiscuous mode [ 1632.531213][ T1327] team0 (unregistering): Port device team_slave_1 removed [ 1632.601837][ T1327] team0 (unregistering): Port device team_slave_0 removed [ 1632.800038][T13027] fuse: fd is not a fuse device [ 1633.323630][T12668] veth0_vlan: entered promiscuous mode [ 1633.750596][T12668] veth1_vlan: entered promiscuous mode [ 1633.986910][T12913] bridge0: port 1(bridge_slave_0) entered blocking state [ 1633.995183][T12913] bridge0: port 1(bridge_slave_0) entered disabled state [ 1634.006175][T12913] bridge_slave_0: entered allmulticast mode [ 1634.009002][T13035] fuse: fd is not a fuse device [ 1634.030045][T12913] bridge_slave_0: entered promiscuous mode [ 1634.115679][T12919] bridge0: port 1(bridge_slave_0) entered blocking state [ 1634.128762][T12919] bridge0: port 1(bridge_slave_0) entered disabled state [ 1634.137260][T12919] bridge_slave_0: entered allmulticast mode [ 1634.148329][T12919] bridge_slave_0: entered promiscuous mode [ 1634.175853][T12913] bridge0: port 2(bridge_slave_1) entered blocking state [ 1634.212255][T12913] bridge0: port 2(bridge_slave_1) entered disabled state [ 1634.220157][T12913] bridge_slave_1: entered allmulticast mode [ 1634.236013][T12913] bridge_slave_1: entered promiscuous mode [ 1634.295050][T12919] bridge0: port 2(bridge_slave_1) entered blocking state [ 1634.309050][T12919] bridge0: port 2(bridge_slave_1) entered disabled state [ 1634.319075][T12919] bridge_slave_1: entered allmulticast mode [ 1634.336436][T12919] bridge_slave_1: entered promiscuous mode [ 1634.613759][T12913] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1634.630293][T12691] veth0_vlan: entered promiscuous mode [ 1634.679447][T12919] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1634.718748][T12913] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1634.780053][T12919] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1634.919421][T12919] team0: Port device team_slave_0 added [ 1634.985514][T12913] team0: Port device team_slave_0 added [ 1635.018793][T12919] team0: Port device team_slave_1 added [ 1635.037370][T12913] team0: Port device team_slave_1 added [ 1635.059180][T12691] veth1_vlan: entered promiscuous mode [ 1635.266791][T12919] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1635.274268][T12919] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1635.304681][T12919] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1635.320762][T12913] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1635.328761][T12913] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1635.356967][T12913] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1635.423051][T12919] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1635.434499][T12919] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1635.471496][T12919] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1635.560004][T12913] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1635.567276][T12913] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1635.610343][T12913] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1635.776177][T12668] veth0_macvtap: entered promiscuous mode [ 1636.014254][T12913] hsr_slave_0: entered promiscuous mode [ 1636.034696][T12913] hsr_slave_1: entered promiscuous mode [ 1636.043392][T12913] debugfs: 'hsr0' already exists in 'hsr' [ 1636.049272][T12913] Cannot create hsr debugfs directory [ 1636.129237][T12668] veth1_macvtap: entered promiscuous mode [ 1636.177580][T12919] hsr_slave_0: entered promiscuous mode [ 1636.187512][T12919] hsr_slave_1: entered promiscuous mode [ 1636.196895][T12919] debugfs: 'hsr0' already exists in 'hsr' [ 1636.202920][T12919] Cannot create hsr debugfs directory [ 1636.750996][T12668] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1636.846521][T12691] veth0_macvtap: entered promiscuous mode [ 1637.025470][T12668] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1637.216459][T13052] netlink: 'syz.2.854': attribute type 4 has an invalid length. [ 1637.261432][T13052] netlink: 'syz.2.854': attribute type 4 has an invalid length. [ 1637.288732][T12691] veth1_macvtap: entered promiscuous mode [ 1637.568560][ T753] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1637.589020][ T753] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1637.619479][ T5988] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1637.703949][ T5988] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1637.962239][T12691] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1638.118601][T12691] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1638.551583][ T9156] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1638.594393][ T9156] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1638.736587][ T9156] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1638.758854][ T9156] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1639.160391][T13064] netlink: 64 bytes leftover after parsing attributes in process `syz.2.857'. [ 1639.864252][T12919] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1639.940879][T12919] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1639.960894][T12919] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1640.023500][T12919] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1640.056988][T12919] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1640.105043][T12919] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1640.259058][T12919] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1640.334774][T12919] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1640.749361][T12913] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1640.850302][T12913] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1640.881269][T12913] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1640.952568][T12913] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1640.985363][T12913] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1641.048749][T12913] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1641.127732][T12913] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1641.229018][T12913] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1642.806331][T12919] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1643.253860][T12919] 8021q: adding VLAN 0 to HW filter on device team0 [ 1643.554220][ T5988] bridge0: port 1(bridge_slave_0) entered blocking state [ 1643.562033][ T5988] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1643.764205][ T5988] bridge0: port 2(bridge_slave_1) entered blocking state [ 1643.771948][ T5988] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1644.360862][T12913] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1644.821411][T12913] 8021q: adding VLAN 0 to HW filter on device team0 [ 1645.021352][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 1645.029116][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1645.321395][ T753] bridge0: port 2(bridge_slave_1) entered blocking state [ 1645.329129][ T753] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1645.775909][ T3300] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1645.823442][ T3300] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1646.442217][ T55] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1646.479450][ T55] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1646.742306][ T3300] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1646.793229][ T3300] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1647.338579][ T753] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1647.374837][ T753] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1648.567542][ T29] audit: type=1326 audit(1777915725.472:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13142 comm="syz.8.110" exe="/root/ci-upstream-kmsan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3b259cdd9 code=0x7ffc0000 [ 1648.742524][ T29] audit: type=1326 audit(1777915725.519:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13142 comm="syz.8.110" exe="/root/ci-upstream-kmsan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3b259cdd9 code=0x7ffc0000 [ 1648.900419][ T29] audit: type=1326 audit(1777915725.547:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13142 comm="syz.8.110" exe="/root/ci-upstream-kmsan-gce-root/syz-executor" sig=0 arch=c000003e syscall=268 compat=0 ip=0x7fc3b259cdd9 code=0x7ffc0000 [ 1648.942640][T13149] loop6: detected capacity change from 0 to 8 [ 1649.095328][ T29] audit: type=1326 audit(1777915725.566:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13142 comm="syz.8.110" exe="/root/ci-upstream-kmsan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3b259cdd9 code=0x7ffc0000 [ 1649.277392][ T29] audit: type=1326 audit(1777915725.566:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13142 comm="syz.8.110" exe="/root/ci-upstream-kmsan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3b259cdd9 code=0x7ffc0000 [ 1649.896427][T13154] loop8: detected capacity change from 0 to 512 [ 1650.163007][T13154] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1650.211540][T13154] ext4 filesystem being mounted at /1/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1650.915118][T12691] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1651.353852][T12919] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1653.877407][ T753] bridge0: port 1(bridge_slave_0) entered blocking state [ 1653.885272][ T753] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1654.182101][T12919] veth0_vlan: entered promiscuous mode [ 1654.289074][T12913] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1654.560556][T12919] veth1_vlan: entered promiscuous mode [ 1654.913160][ T29] audit: type=1326 audit(1777915731.410:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13200 comm="syz.6.883" exe="/root/ci-upstream-kmsan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f031b59cdd9 code=0x7ffc0000 [ 1655.037369][ T29] audit: type=1326 audit(1777915731.410:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13200 comm="syz.6.883" exe="/root/ci-upstream-kmsan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f031b59cdd9 code=0x7ffc0000 [ 1655.197506][ T29] audit: type=1326 audit(1777915731.438:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13200 comm="syz.6.883" exe="/root/ci-upstream-kmsan-gce-root/syz-executor" sig=0 arch=c000003e syscall=130 compat=0 ip=0x7f031b59cdd9 code=0x7ffc0000 [ 1655.318410][ T29] audit: type=1326 audit(1777915731.438:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13200 comm="syz.6.883" exe="/root/ci-upstream-kmsan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f031b59cdd9 code=0x7ffc0000 [ 1655.660097][T12913] veth0_vlan: entered promiscuous mode [ 1655.864233][T13210] netlink: 8 bytes leftover after parsing attributes in process `syz.6.885'. [ 1656.016385][T13211] mac80211_hwsim hwsim31 wlan0: entered promiscuous mode [ 1656.059268][T13211] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 1656.151147][T12919] veth0_macvtap: entered promiscuous mode [ 1656.304919][T12919] veth1_macvtap: entered promiscuous mode [ 1656.392384][T12913] veth1_vlan: entered promiscuous mode [ 1657.024184][T12919] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1657.157591][T13221] netlink: 12 bytes leftover after parsing attributes in process `syz.2.890'. [ 1657.227864][T12919] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1657.229771][T13220] loop6: detected capacity change from 0 to 1024 [ 1657.260551][T13220] EXT4-fs: inline encryption not supported [ 1657.332417][T13220] EXT4-fs (loop6): ext4_check_descriptors: Inode table for group 0 overlaps block group descriptors [ 1657.368272][T13220] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (6416!=35945) [ 1657.383864][T13220] EXT4-fs (loop6): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 1657.468034][T13220] EXT4-fs (loop6): can't mount with journal_async_commit, fs mounted w/o journal [ 1657.936065][ T9156] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1657.978942][ T9156] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1658.008131][T13225] netlink: 8 bytes leftover after parsing attributes in process `syz.8.891'. [ 1658.014987][ T9156] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1658.100977][ T9156] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1658.529375][T12913] veth0_macvtap: entered promiscuous mode [ 1659.543164][T13239] 9p: Bad value for 'rfdno' [ 1661.474811][T12913] veth1_macvtap: entered promiscuous mode [ 1662.256941][T12913] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1662.442388][T12913] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1662.689952][ T1327] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1662.765739][ T1327] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1662.834981][ T1327] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1662.925880][ T1327] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1664.318405][T13257] loop8: detected capacity change from 0 to 2048 [ 1664.514632][T13257] UDF-fs: error (device loop8): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 1664.626151][T13257] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1665.816655][ T10] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 1666.012282][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 1666.026105][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 1666.049931][ T10] usb 7-1: Using ep0 maxpacket: 8 [ 1666.090457][ T10] usb 7-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1666.145177][ T10] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1666.160630][ T10] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1666.172175][ T10] usb 7-1: Product: syz [ 1666.177029][ T10] usb 7-1: Manufacturer: syz [ 1666.184275][ T10] usb 7-1: SerialNumber: syz [ 1666.621397][ T10] usb 7-1: USB disconnect, device number 2 [ 1669.157499][T13306] loop6: detected capacity change from 0 to 512 [ 1669.366826][T13306] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1669.472911][T13306] ext4 filesystem being mounted at /13/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1671.011912][T12668] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1674.484684][ T5846] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1674.538591][ T5846] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1675.075785][ T9156] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1675.124121][ T9156] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1677.551166][ T3300] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1677.607000][ T3300] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1678.132096][ T8557] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1678.196097][ T8557] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1680.612524][T13399] netlink: 8 bytes leftover after parsing attributes in process `syz.1.927'. [ 1685.383953][T13414] ------------[ cut here ]------------ [ 1685.389622][T13414] WARNING: kernel/signal.c:2174 at do_notify_parent+0x1d9/0xf30, CPU#0: syz.1.932/13414 [ 1685.399617][T13414] Modules linked in: [ 1685.403833][T13414] CPU: 0 UID: 0 PID: 13414 Comm: syz.1.932 Tainted: G W syzkaller #0 PREEMPT(full) [ 1685.415010][T13414] Tainted: [W]=WARN [ 1685.418930][T13414] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1685.429151][T13414] RIP: 0010:do_notify_parent+0x1d9/0xf30 [ 1685.435251][T13414] Code: e9 4c 31 f1 48 f7 d0 48 21 c8 0f 84 3b 0d 00 00 4d 39 f5 4c 8b 7d b8 0f 85 58 0d 00 00 e8 cf 37 5f 00 eb 60 e8 c8 37 5f 00 90 <0f> 0b 90 31 c0 45 31 ed 45 31 ff e9 56 0c 00 00 44 89 ef e8 9f 5b [ 1685.455029][T13414] RSP: 0018:ffff8880b7833cf8 EFLAGS: 00010093 [ 1685.461280][T13414] RAX: ffffffff81a174b8 RBX: ffff88809e24acf8 RCX: ffff88809e24a140 [ 1685.469393][T13414] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 0000000000000040 [ 1685.477521][T13414] RBP: ffff8880b7833dc0 R08: ffffea000000000f R09: 0000000000000000 [ 1685.485641][T13414] R10: ffff8880b7033d08 R11: ffffffff81badd10 R12: 0000000000000000 [ 1685.493831][T13414] R13: ffff88809e24a140 R14: 0000000000000080 R15: ffff88809e24a140 [ 1685.501939][T13414] FS: 0000000000000000(0000) GS:ffff8881aa60c000(0000) knlGS:0000000000000000 [ 1685.511132][T13414] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1685.517919][T13414] CR2: 00007fcee2a17dac CR3: 0000000054bb4000 CR4: 00000000003526f0 [ 1685.526036][T13414] Call Trace: [ 1685.529501][T13414] [ 1685.532529][T13414] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1685.538561][T13414] ? kill_orphaned_pgrp+0x273/0xa70 [ 1685.543936][T13414] ? kmsan_get_metadata+0xf1/0x160 [ 1685.549246][T13414] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1685.555260][T13414] do_exit+0x2430/0x3c30 [ 1685.559705][T13414] __x64_sys_exit+0x35/0x40 [ 1685.564368][T13414] x64_sys_call+0x3e96/0x3ea0 [ 1685.569229][T13414] do_syscall_64+0x134/0xf80 [ 1685.574034][T13414] ? clear_bhb_loop+0x50/0xa0 [ 1685.578937][T13414] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1685.585014][T13414] RIP: 0033:0x7fcee279cdd9 [ 1685.589594][T13414] Code: Unable to access opcode bytes at 0x7fcee279cdaf. [ 1685.596754][T13414] RSP: 002b:00007fcee36befd8 EFLAGS: 00000246 ORIG_RAX: 000000000000003c [ 1685.605377][T13414] RAX: ffffffffffffffda RBX: 00007fcee2a15fa0 RCX: 00007fcee279cdd9 [ 1685.613539][T13414] RDX: 00007fcee36bf9c8 RSI: 0000000000000000 RDI: 0000000000000000 [ 1685.621789][T13414] RBP: 00007fcee2832d69 R08: 0000000000000000 R09: 0000000000000000 [ 1685.630000][T13414] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1685.638103][T13414] R13: 00007fcee2a16038 R14: 00007fcee2a15fa0 R15: 00007fff3ccb8358 [ 1685.646429][T13414] [ 1685.649599][T13414] ---[ end trace 0000000000000000 ]--- [ 1687.855848][T13434] binder: 13430:13434 ioctl c0306201 0 returned -14 [ 1692.143091][T13443] loop6: detected capacity change from 0 to 1024 [ 1696.108295][T13484] loop1: detected capacity change from 0 to 1024 [ 1696.273354][T13484] hfsplus: failed to load extents file [ 1698.050509][ T29] audit: type=1326 audit(1777915771.736:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13496 comm="syz.3.956" exe="/root/ci-upstream-kmsan-gce-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f441f99cdd9 code=0x0 [ 1703.640974][T13523] loop1: detected capacity change from 0 to 16 [ 1703.916479][T13523] erofs (device loop1): mounted with root inode @ nid 36. [ 1705.848113][T13523] erofs (device loop1): compressed inode (nid 83) is invalid in a plain filesystem [ 1707.715586][T13537] loop3: detected capacity change from 0 to 16 [ 1707.863635][T13537] erofs (device loop3): mounted with root inode @ nid 36. [ 1709.278251][T13542] loop1: detected capacity change from 0 to 128 [ 1714.363104][T11457] usb 7-1: new full-speed USB device number 3 using dummy_hcd [ 1714.599901][T11457] usb 7-1: config 0 has an invalid interface number: 8 but max is 0 [ 1714.600062][T11457] usb 7-1: config 0 has no interface number 0 [ 1714.600209][T11457] usb 7-1: config 0 interface 8 altsetting 0 has an endpoint descriptor with address 0x9F, changing to 0x8F [ 1714.600385][T11457] usb 7-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1714.600563][T11457] usb 7-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1714.637934][T11457] usb 7-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 1714.638051][T11457] usb 7-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 1714.638143][T11457] usb 7-1: Product: syz [ 1714.638218][T11457] usb 7-1: SerialNumber: syz [ 1714.673759][T11457] usb 7-1: config 0 descriptor?? [ 1714.756199][T11457] cm109 7-1:0.8: invalid payload size 0, expected 4 [ 1714.792904][T11457] input: CM109 USB driver as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.8/input/input20 [ 1715.727177][ T7161] usb 4-1: new low-speed USB device number 2 using dummy_hcd [ 1715.981860][ T7161] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1716.010716][ T7161] usb 4-1: config 5 has an invalid descriptor of length 0, skipping remainder of the config [ 1716.010880][ T7161] usb 4-1: config 5 has 0 interfaces, different from the descriptor's value: 1 [ 1716.021352][ T7161] usb 4-1: language id specifier not provided by device, defaulting to English [ 1716.167388][ T7161] usb 4-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice= 7.b9 [ 1716.167568][ T7161] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1716.167716][ T7161] usb 4-1: Manufacturer: 掻㪋ꀸ鏩枑쥂⤦㋠㹅伐쐐㣫奔揕䕏塬૵ [ 1716.167865][ T7161] usb 4-1: SerialNumber: ఓ [ 1716.612173][ T7161] usb 4-1: USB disconnect, device number 2 [ 1717.888888][ C0] cm109 7-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1717.891328][ C0] cm109 7-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1717.891712][ C0] cm109 7-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1717.892163][ C0] cm109 7-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1717.892549][ C0] cm109 7-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1717.892921][ C0] cm109 7-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1717.893375][ C0] cm109 7-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1717.893893][ C0] cm109 7-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1717.894410][ C0] cm109 7-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1717.894938][ C0] cm109 7-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1717.937862][ C0] cm109 7-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 1717.942071][T11457] usb 7-1: USB disconnect, device number 3 [ 1718.044849][T11457] cm109 7-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 1718.976994][T13591] loop6: detected capacity change from 0 to 512 [ 1719.050680][T13591] EXT4-fs: Ignoring removed bh option [ 1719.091551][T13591] EXT4-fs: Ignoring removed oldalloc option [ 1719.186485][T13591] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 1719.410179][T13591] EXT4-fs (loop6): 1 truncate cleaned up [ 1719.526219][T13591] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1720.427413][T13599] nfs: Unknown parameter 'f' [ 1721.160392][T12668] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1721.859984][T13606] loop3: detected capacity change from 0 to 1024 [ 1721.924709][T13606] EXT4-fs: Ignoring removed nobh option [ 1721.970753][T13606] EXT4-fs (loop3): bad geometry: bigalloc file system with non-zero first_data_block [ 1721.970753][T13606] [ 1722.232692][T13616] netlink: 20 bytes leftover after parsing attributes in process `syz.6.985'. [ 1722.434009][T13615] loop8: detected capacity change from 0 to 1024 [ 1722.558474][T13615] EXT4-fs: inline encryption not supported [ 1722.648660][T13615] EXT4-fs (loop8): bad geometry: bigalloc file system with non-zero first_data_block [ 1722.648660][T13615] [ 1723.248434][T10885] Bluetooth: hci1: command 0x0406 tx timeout [ 1723.254958][ T5575] Bluetooth: hci2: command 0x0406 tx timeout [ 1725.228463][T13644] loop8: detected capacity change from 0 to 512 [ 1725.474672][T13644] EXT4-fs error (device loop8): ext4_do_update_inode:5690: inode #3: comm syz.8.994: corrupted inode contents [ 1725.541058][T13644] loop8: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 1725.546960][ C1] EXT4-fs (loop8): error count since last fsck: 1 [ 1725.563242][ C1] EXT4-fs (loop8): initial error at time 1777915797: ext4_do_update_inode:5690: inode 3 [ 1725.573581][ C1] EXT4-fs (loop8): last error at time 1777915797: ext4_do_update_inode:5690: inode 3 [ 1725.590353][T13644] EXT4-fs error (device loop8): ext4_dirty_inode:6587: inode #3: comm syz.8.994: mark_inode_dirty error [ 1725.647643][T13644] loop8: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 1725.677930][T13644] EXT4-fs error (device loop8): ext4_do_update_inode:5690: inode #3: comm syz.8.994: corrupted inode contents [ 1725.800837][T13644] loop8: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 1725.806810][T13644] EXT4-fs error (device loop8): __ext4_ext_dirty:207: inode #3: comm syz.8.994: mark_inode_dirty error [ 1725.946437][T13644] loop8: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 1725.957714][T13644] Quota error (device loop8): write_blk: dquota write failed [ 1726.072011][T13644] Quota error (device loop8): qtree_write_dquot: Error -117 occurred while creating quota [ 1726.179320][T13644] EXT4-fs error (device loop8): ext4_acquire_dquot:7034: comm syz.8.994: Failed to acquire dquot type 0 [ 1726.264536][T13644] loop8: lost filesystem error report for type 5 error -117 [ 1726.286477][T13644] EXT4-fs error (device loop8): ext4_do_update_inode:5690: inode #16: comm syz.8.994: corrupted inode contents [ 1726.392176][T13644] loop8: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 1726.395355][T13644] EXT4-fs error (device loop8): ext4_dirty_inode:6587: inode #16: comm syz.8.994: mark_inode_dirty error [ 1726.524667][T13644] loop8: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 1726.528223][T13644] EXT4-fs error (device loop8): ext4_do_update_inode:5690: inode #16: comm syz.8.994: corrupted inode contents [ 1726.622603][T13644] loop8: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 1726.625360][T13644] EXT4-fs error (device loop8): __ext4_ext_dirty:207: inode #16: comm syz.8.994: mark_inode_dirty error [ 1726.721425][T13644] loop8: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 1726.724158][T13644] EXT4-fs error (device loop8): ext4_do_update_inode:5690: inode #16: comm syz.8.994: corrupted inode contents [ 1726.849391][T13644] loop8: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 1726.851115][T13644] EXT4-fs error (device loop8) in ext4_orphan_del:303: Corrupt filesystem [ 1726.951356][T13644] loop8: lost filesystem error report for type 5 error -117 [ 1726.953607][T13644] EXT4-fs error (device loop8): ext4_do_update_inode:5690: inode #16: comm syz.8.994: corrupted inode contents [ 1727.064914][T13644] loop8: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 1727.074606][T13644] EXT4-fs error (device loop8): ext4_truncate:4690: inode #16: comm syz.8.994: mark_inode_dirty error [ 1727.179017][T13644] EXT4-fs error (device loop8) in ext4_process_orphan:345: Corrupt filesystem [ 1727.247441][T13644] loop8: lost filesystem error report for type 5 error -117 [ 1727.274984][T13644] EXT4-fs (loop8): 1 truncate cleaned up [ 1727.374963][T13644] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1727.441337][T13644] ext4 filesystem being mounted at /37/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1728.207526][T12691] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1728.995141][ T7161] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 1729.248044][ T7161] usb 7-1: Using ep0 maxpacket: 32 [ 1729.337159][ T7161] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 32 [ 1729.424023][ T7161] usb 7-1: New USB device found, idVendor=0499, idProduct=1010, bcdDevice= a.f5 [ 1729.461414][ T7161] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1729.507136][ T7161] usb 7-1: Product: syz [ 1729.521715][ T7161] usb 7-1: Manufacturer: syz [ 1729.546947][ T7161] usb 7-1: SerialNumber: syz [ 1729.608446][ T7161] usb 7-1: config 0 descriptor?? [ 1729.677203][T13673] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 1729.821258][ T7161] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 1731.719960][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 1731.740059][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 1733.912899][ T7161] usb 7-1: USB disconnect, device number 4 [ 1734.610186][T13277] udevd[13277]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1734.862578][ T7161] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 1735.131281][ T7161] usb 9-1: Using ep0 maxpacket: 16 [ 1735.203757][ T7161] usb 9-1: config 1 has an invalid descriptor of length 112, skipping remainder of the config [ 1735.257708][ T7161] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1735.317107][ T7161] usb 9-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1735.372668][ T7161] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1735.400795][ T7161] usb 9-1: Product: syz [ 1735.427923][ T7161] usb 9-1: Manufacturer: syz [ 1735.453064][ T7161] usb 9-1: SerialNumber: syz [ 1735.606410][ T7161] usb 9-1: unknown interface protocol 0x40, assuming v1 [ 1735.644961][ T7161] usb 9-1: 0:2 : does not exist [ 1735.692573][ T7161] usb 9-1: unit 9 not found! [ 1735.961068][ T7161] usb 9-1: 4:0: cannot get min/max values for control 1 (id 4) [ 1736.018768][T13714] dvmrp0: entered allmulticast mode [ 1736.368273][T13719] loop3: detected capacity change from 0 to 128 [ 1736.515681][T13719] FAT-fs (loop3): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 1736.728752][T13719] FAT-fs (loop3): error, invalid FAT chain (i_pos 548, last_block 8) [ 1736.773644][T13719] FAT-fs (loop3): Filesystem has been set read-only [ 1736.829104][T13719] FAT-fs (loop3): error, corrupted file size (i_pos 548, 522) [ 1737.119208][ T7161] usb 9-1: USB disconnect, device number 2 [ 1737.715663][T13155] udevd[13155]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1738.458325][T13732] fuse: fd is not a fuse device [ 1739.638590][T13745] loop8: detected capacity change from 0 to 256 [ 1740.579882][T13754] loop6: detected capacity change from 0 to 256 [ 1740.859451][T13754] exFAT-fs (loop6): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 1740.946513][T13754] exFAT-fs (loop6): failed to load alloc-bitmap [ 1740.982363][T13754] exFAT-fs (loop6): failed to recognize exfat type [ 1741.094827][T13750] loop1: detected capacity change from 0 to 1024 [ 1741.169256][T13759] batadv_slave_1: entered promiscuous mode [ 1741.547621][T13750] hfsplus: small dir entry [ 1741.718826][T13758] batadv_slave_1: left promiscuous mode [ 1741.993716][T13763] input: syz0 as /devices/virtual/input/input22 [ 1746.437472][T13783] input: syz0 as /devices/virtual/input/input23 [ 1749.569421][T13812] binder: BINDER_SET_CONTEXT_MGR already set [ 1749.608843][T13812] binder: 13810:13812 ioctl 4018620d 200000004a80 returned -16 [ 1749.742229][T13811] loop1: detected capacity change from 0 to 512 [ 1750.364405][T13601] Bluetooth: hci4: command 0x0406 tx timeout [ 1750.374866][T13601] Bluetooth: hci5: command 0x0406 tx timeout [ 1752.696525][T13811] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1753.162951][T13811] ext4 filesystem being mounted at /24/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1759.969703][ T5575] Bluetooth: min 6 > max 0 [ 1760.442162][T12919] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1762.167579][ T5575] Bluetooth: hci4: command 0x0406 tx timeout [ 1764.394022][T13854] loop8: detected capacity change from 0 to 2048 [ 1764.617832][T13854] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1765.544628][ T29] audit: type=1326 audit(1777915834.811:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13857 comm="syz.1.1056" exe="/root/ci-upstream-kmsan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcee279cdd9 code=0x7ffc0000 [ 1765.655872][T13863] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1057'. [ 1765.701646][ T29] audit: type=1326 audit(1777915834.839:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13857 comm="syz.1.1056" exe="/root/ci-upstream-kmsan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcee279cdd9 code=0x7ffc0000 [ 1765.843870][ T29] audit: type=1326 audit(1777915835.073:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13857 comm="syz.1.1056" exe="/root/ci-upstream-kmsan-gce-root/syz-executor" sig=0 arch=c000003e syscall=303 compat=0 ip=0x7fcee279cdd9 code=0x7ffc0000 [ 1765.978761][ T29] audit: type=1326 audit(1777915835.073:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13857 comm="syz.1.1056" exe="/root/ci-upstream-kmsan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcee279cdd9 code=0x7ffc0000 [ 1766.128089][ T29] audit: type=1326 audit(1777915835.082:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13857 comm="syz.1.1056" exe="/root/ci-upstream-kmsan-gce-root/syz-executor" sig=0 arch=c000003e syscall=304 compat=0 ip=0x7fcee279cdd9 code=0x7ffc0000 [ 1766.293193][ T29] audit: type=1326 audit(1777915835.110:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13857 comm="syz.1.1056" exe="/root/ci-upstream-kmsan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcee279cdd9 code=0x7ffc0000 [ 1772.953546][T10885] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1772.965078][T10885] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1772.975429][T10885] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1773.000617][T10885] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1773.019620][T10885] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1773.438321][T10885] Bluetooth: min 6 > max 0 [ 1773.560655][T13893] bridge_slave_0: left allmulticast mode [ 1773.603022][T13893] bridge0: port 1(bridge_slave_0) entered disabled state [ 1775.323513][T10885] Bluetooth: hci0: command tx timeout [ 1775.602182][T10885] Bluetooth: hci2: command 0x0406 tx timeout [ 1777.483167][T10885] Bluetooth: hci0: command tx timeout [ 1779.838359][T10885] Bluetooth: hci0: command tx timeout [ 1782.028969][T10885] Bluetooth: hci0: command tx timeout [ 1788.390958][T10885] Bluetooth: min 6 > max 0 [ 1789.126737][T13961] netlink: 27 bytes leftover after parsing attributes in process `syz.2.1080'. [ 1790.573798][T10885] Bluetooth: hci5: command 0x0406 tx timeout [ 1797.432642][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 1797.690046][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 1800.423903][T14009] binder: 14005:14009 ioctl c0306201 0 returned -14 [ 1800.425356][T14006] loop8: detected capacity change from 0 to 512 [ 1803.292313][T14006] EXT4-fs warning (device loop8): ext4_multi_mount_protect:394: Unable to create kmmpd thread for loop8. [ 1804.005240][T14020] loop1: detected capacity change from 0 to 8 [ 1804.173889][T14022] netem: change failed [ 1804.355641][T14020] SQUASHFS error: lzo decompression failed, data probably corrupt [ 1804.458345][T14020] SQUASHFS error: Failed to read block 0x91: -5 [ 1804.539068][T14020] SQUASHFS error: Unable to read metadata cache entry [8f] [ 1804.689686][T14020] SQUASHFS error: Unable to read inode 0x11f [ 1804.975844][T14025] loop8: detected capacity change from 0 to 256 [ 1807.532439][T13901] bridge0: port 1(bridge_slave_0) entered blocking state [ 1807.558734][T13901] bridge0: port 1(bridge_slave_0) entered disabled state [ 1807.589354][T14025] exFAT-fs (loop8): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 1807.620887][T13901] bridge_slave_0: entered allmulticast mode [ 1807.721354][T13901] bridge_slave_0: entered promiscuous mode [ 1807.866691][ T29] audit: type=1800 audit(1777915874.418:54): pid=14025 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.1094" name="file2" dev="loop8" ino=1048672 res=0 errno=0 [ 1808.319536][T13901] bridge0: port 2(bridge_slave_1) entered blocking state [ 1808.383071][T13901] bridge0: port 2(bridge_slave_1) entered disabled state [ 1808.451358][T13901] bridge_slave_1: entered allmulticast mode [ 1808.547803][T13901] bridge_slave_1: entered promiscuous mode [ 1809.032865][ T56] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1809.646081][ T56] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1809.811663][T13901] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1810.107799][T14048] fuse: fd is not a fuse device [ 1810.122426][ T56] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1810.359272][T13901] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1810.825910][T10885] Bluetooth: min 6 > max 0 [ 1810.847532][ T56] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1812.060749][T13901] team0: Port device team_slave_0 added [ 1812.380391][T13901] team0: Port device team_slave_1 added [ 1812.992257][T10885] Bluetooth: hci2: command 0x0406 tx timeout [ 1813.481011][T13901] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1813.532679][T13901] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1813.688662][T13901] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1814.061159][T13901] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1814.109931][T13901] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1814.214354][T13901] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1815.233206][ T56] bridge_slave_1: left allmulticast mode [ 1815.261106][ T56] bridge_slave_1: left promiscuous mode [ 1815.297368][ T56] bridge0: port 2(bridge_slave_1) entered disabled state [ 1815.417560][ T56] bridge_slave_0: left allmulticast mode [ 1815.476667][ T56] bridge_slave_0: left promiscuous mode [ 1815.519646][ T56] bridge0: port 1(bridge_slave_0) entered disabled state [ 1817.281227][T14089] xt_CT: No such helper "snmp_trap" [ 1819.302119][T14092] netlink: 32 bytes leftover after parsing attributes in process `syz.8.1110'. [ 1819.925786][ T56] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1820.030928][ T56] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1820.138528][ T56] bond0 (unregistering): Released all slaves [ 1820.860790][T13901] hsr_slave_0: entered promiscuous mode [ 1820.903431][T13901] hsr_slave_1: entered promiscuous mode [ 1820.912943][T13901] debugfs: 'hsr0' already exists in 'hsr' [ 1820.920869][T13901] Cannot create hsr debugfs directory [ 1821.889054][T14105] loop8: detected capacity change from 0 to 1024 [ 1821.984100][T14105] hfsplus: failed to load extents file [ 1824.110354][ T56] hsr_slave_0: left promiscuous mode [ 1824.220173][ T56] hsr_slave_1: left promiscuous mode [ 1824.273406][ T56] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1824.310064][ T56] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1824.369978][ T56] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1824.421266][ T56] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1824.540369][ T5575] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1824.577452][ T5575] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1824.594227][ T5575] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1824.638733][ T5575] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1824.651947][ T5575] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1824.694917][ T56] veth1_macvtap: left promiscuous mode [ 1824.758897][ T56] veth0_macvtap: left promiscuous mode [ 1824.824860][ T56] veth1_vlan: left promiscuous mode [ 1824.882743][ T56] veth0_vlan: left promiscuous mode [ 1825.387631][T14124] cgroup: Unknown subsys name 'cpuset' [ 1826.863768][ T5575] Bluetooth: hci1: command tx timeout [ 1828.612871][ T56] team0 (unregistering): Port device team_slave_1 removed [ 1828.842472][T14141] binder: 14138:14141 ioctl c0306201 0 returned -14 [ 1829.077259][ T5575] Bluetooth: hci1: command tx timeout [ 1831.351647][ T5575] Bluetooth: hci1: command tx timeout [ 1831.924064][ T56] team0 (unregistering): Port device team_slave_0 removed [ 1833.496676][T14133] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1121'. [ 1833.535852][T14139] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1122'. [ 1833.615262][ T5575] Bluetooth: hci1: command tx timeout [ 1835.303191][ T56] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1835.754445][ T56] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1842.169771][ T56] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1842.593079][ T56] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1843.076476][T11456] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 1843.337052][T11456] usb 9-1: Using ep0 maxpacket: 16 [ 1843.383596][T11456] usb 9-1: too many configurations: 65, using maximum allowed: 8 [ 1843.746652][T11456] usb 9-1: New USB device found, idVendor=05ac, idProduct=0291, bcdDevice=43.25 [ 1843.802101][T11456] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1843.891894][T11456] usb 9-1: Product: syz [ 1843.919259][T11456] usb 9-1: Manufacturer: syz [ 1843.952018][ T56] bridge_slave_1: left allmulticast mode [ 1843.958949][T11456] usb 9-1: SerialNumber: syz [ 1844.007046][ T56] bridge_slave_1: left promiscuous mode [ 1844.056964][ T56] bridge0: port 2(bridge_slave_1) entered disabled state [ 1844.068682][T11456] usb 9-1: config 0 descriptor?? [ 1844.091787][T14177] loop1: detected capacity change from 0 to 2048 [ 1844.118982][T10885] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1844.138192][T10885] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1844.150078][T10885] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1844.184532][T10885] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1844.196845][T10885] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1844.244229][ T56] bridge_slave_0: left allmulticast mode [ 1844.281941][T11456] hub 9-1:0.0: Invalid hub with more than one config or interface [ 1844.294063][T11456] hub 9-1:0.0: probe with driver hub failed with error -22 [ 1844.300834][ T56] bridge_slave_0: left promiscuous mode [ 1844.335679][T14177] UDF-fs: error (device loop1): udf_process_sequence: Primary Volume Descriptor not found! [ 1844.379920][ T56] bridge0: port 1(bridge_slave_0) entered disabled state [ 1844.461975][T11456] usb 9-1: USB disconnect, device number 3 [ 1846.445761][T10885] Bluetooth: hci3: command tx timeout [ 1847.178641][ T56] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1847.273700][ T56] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1847.329363][ T56] bond0 (unregistering): Released all slaves [ 1847.580168][T14198] loop1: detected capacity change from 0 to 512 [ 1847.663436][T14198] EXT4-fs: Ignoring removed nobh option [ 1848.083982][T14198] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1848.178194][T14198] ext4 filesystem being mounted at /45/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1848.522337][T14198] netlink: 1752 bytes leftover after parsing attributes in process `syz.1.1132'. [ 1848.671231][T10885] Bluetooth: hci3: command tx timeout [ 1848.751712][T14207] loop8: detected capacity change from 0 to 512 [ 1848.860847][T14207] EXT4-fs (loop8): Test dummy encryption mode enabled [ 1848.909325][T14207] EXT4-fs (loop8): can't mount with data_err=abort, fs mounted w/o journal [ 1849.606691][ T56] hsr_slave_0: left promiscuous mode [ 1849.673899][ T56] hsr_slave_1: left promiscuous mode [ 1849.725141][ T56] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1849.767887][ T56] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1849.835924][ T56] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1849.886027][ T56] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1849.908488][T12919] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1850.059906][ T56] veth1_macvtap: left promiscuous mode [ 1850.092459][ T56] veth0_macvtap: left promiscuous mode [ 1850.137888][ T56] veth1_vlan: left promiscuous mode [ 1850.171203][ T56] veth0_vlan: left promiscuous mode [ 1850.927044][T10885] Bluetooth: hci3: command tx timeout [ 1853.119385][T10885] Bluetooth: hci3: command tx timeout [ 1853.323252][T14223] loop1: detected capacity change from 0 to 1024 [ 1853.445477][T14223] EXT4-fs: Ignoring removed mblk_io_submit option [ 1853.689121][T14223] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 1853.806702][T14223] ext4 filesystem being mounted at /46/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1854.529753][ T56] team0 (unregistering): Port device team_slave_1 removed [ 1854.636384][ T56] team0 (unregistering): Port device team_slave_0 removed [ 1854.663815][ T5846] EXT4-fs error (device loop1): ext4_map_blocks:833: inode #15: comm kworker/u8:15: lblock 0 mapped to illegal pblock 0 (length 1) [ 1854.740967][ T5846] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 1854.808975][ T5846] EXT4-fs (loop1): This should not happen!! Data will be lost [ 1854.808975][ T5846] [ 1854.849599][T12919] EXT4-fs warning (device loop1): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 1855.009026][T12919] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 1856.096447][T14239] loop8: detected capacity change from 0 to 256 [ 1857.732315][T14169] bridge_slave_1: left allmulticast mode [ 1857.768523][T14169] bridge_slave_1: left promiscuous mode [ 1857.807939][T14169] bridge0: port 2(bridge_slave_1) entered disabled state [ 1857.929221][T14169] bridge_slave_0: left allmulticast mode [ 1857.985490][T14169] bridge_slave_0: left promiscuous mode [ 1858.007841][T14169] bridge0: port 1(bridge_slave_0) entered disabled state [ 1858.414064][T14257] input input24: cannot allocate more than FF_MAX_EFFECTS effects [ 1858.667672][T14169] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1858.774812][T14169] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1858.835844][T14169] bond0 (unregistering): Released all slaves [ 1859.294434][T14169] hsr_slave_0: left promiscuous mode [ 1859.369579][T14169] hsr_slave_1: left promiscuous mode [ 1859.413124][T14169] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1859.488061][T14169] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1859.943967][T14264] loop8: detected capacity change from 0 to 512 [ 1860.012641][T14264] EXT4-fs: Ignoring removed nobh option [ 1860.279033][T14264] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1860.409052][T14264] ext4 filesystem being mounted at /81/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1860.605793][T14264] netlink: 1752 bytes leftover after parsing attributes in process `syz.8.1143'. [ 1860.816618][T14169] team0 (unregistering): Port device team_slave_1 removed [ 1861.000788][T14169] team0 (unregistering): Port device team_slave_0 removed [ 1861.003728][ T5575] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1861.018359][ T5575] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1861.031129][ T5575] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1861.054582][ T5575] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1861.071591][ T5575] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1862.381271][ T7639] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 1862.668841][ T7639] usb 2-1: config 0 has an invalid interface number: 20 but max is 0 [ 1862.698194][T12691] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1862.714879][ T7639] usb 2-1: config 0 has no interface number 0 [ 1862.745900][ T7639] usb 2-1: config 0 interface 20 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 1862.859586][ T7639] usb 2-1: New USB device found, idVendor=04e6, idProduct=000b, bcdDevice= 1.00 [ 1862.919879][ T7639] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1862.957635][ T7639] usb 2-1: Product: syz [ 1862.982393][ T7639] usb 2-1: Manufacturer: syz [ 1863.009875][ T7639] usb 2-1: SerialNumber: syz [ 1863.085654][ T7639] usb 2-1: config 0 descriptor?? [ 1863.165568][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 1863.177280][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 1863.203360][T14282] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1863.301069][ T5575] Bluetooth: hci0: command tx timeout [ 1863.757677][ T7639] usb-storage 2-1:0.20: USB Mass Storage device detected [ 1863.870024][ T7639] usb-storage 2-1:0.20: Quirks match for vid 04e6 pid 000b: 4 [ 1863.902098][ T7639] scsi host1: usb-storage 2-1:0.20 [ 1863.973160][ T7639] usb 2-1: USB disconnect, device number 2 [ 1865.526206][ T5575] Bluetooth: hci0: command tx timeout [ 1865.652055][T14102] syz_tun (unregistering): left allmulticast mode [ 1865.909904][T14306] loop8: detected capacity change from 0 to 128 [ 1866.008350][T14119] bridge0: port 1(bridge_slave_0) entered blocking state [ 1866.041771][T14119] bridge0: port 1(bridge_slave_0) entered disabled state [ 1866.084303][T14119] bridge_slave_0: entered allmulticast mode [ 1866.151909][T14119] bridge_slave_0: entered promiscuous mode [ 1866.377803][ T3300] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1866.458979][ T3300] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1866.519183][T14119] bridge0: port 2(bridge_slave_1) entered blocking state [ 1866.567736][T14119] bridge0: port 2(bridge_slave_1) entered disabled state [ 1866.621619][T14119] bridge_slave_1: entered allmulticast mode [ 1866.657389][T14313] loop1: detected capacity change from 0 to 512 [ 1866.663974][T14119] bridge_slave_1: entered promiscuous mode [ 1866.801567][T14313] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1866.823715][T14313] ext4 filesystem being mounted at /51/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1867.045749][ T3300] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1867.095360][ T3300] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1867.308945][ T29] audit: type=1800 audit(1777915929.985:55): pid=14324 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1148" name="file2" dev="loop1" ino=16 res=0 errno=0 [ 1867.406532][T14313] EXT4-fs (loop1): Online defrag not supported for non-extent files [ 1867.751813][ T5575] Bluetooth: hci0: command tx timeout [ 1867.796520][ T3300] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1867.824987][ T3300] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1867.946385][T14119] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1868.071819][T12919] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1868.088539][T14119] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1868.212844][ T3300] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1868.261200][ T3300] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1868.867432][T14119] team0: Port device team_slave_0 added [ 1869.126123][T14119] team0: Port device team_slave_1 added [ 1869.210026][ T7639] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 1869.397424][ T7639] usb 2-1: Using ep0 maxpacket: 8 [ 1869.460472][ T7639] usb 2-1: config 179 has an invalid interface number: 65 but max is 0 [ 1869.509254][ T7639] usb 2-1: config 179 has no interface number 0 [ 1869.538652][ T7639] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 1869.583030][ T7639] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 1869.655500][ T7639] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1869.695060][ T7639] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid wMaxPacketSize 0 [ 1869.753537][ T7639] usb 2-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 1869.847871][ T7639] usb 2-1: config 179 interface 65 has no altsetting 0 [ 1869.888201][T14119] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1869.889797][ T7639] usb 2-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 1869.919834][T14119] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1869.927192][ T7639] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1869.977330][ T5575] Bluetooth: hci0: command tx timeout [ 1870.009077][T14119] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1870.284019][ T7639] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:179.65/input/input25 [ 1870.530828][T14119] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1870.575935][T14119] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1870.638279][T14345] loop8: detected capacity change from 0 to 256 [ 1870.651253][T14119] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1870.682677][ C0] xpad 2-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 1870.728082][ T7639] usb 2-1: USB disconnect, device number 3 [ 1871.474490][T14185] bridge0: port 1(bridge_slave_0) entered blocking state [ 1871.504543][T14185] bridge0: port 1(bridge_slave_0) entered disabled state [ 1871.512759][T14185] bridge_slave_0: entered allmulticast mode [ 1871.548584][T14185] bridge_slave_0: entered promiscuous mode [ 1871.797257][T14185] bridge0: port 2(bridge_slave_1) entered blocking state [ 1871.825372][T14185] bridge0: port 2(bridge_slave_1) entered disabled state [ 1871.847233][T14185] bridge_slave_1: entered allmulticast mode [ 1871.892709][T14185] bridge_slave_1: entered promiscuous mode [ 1872.512054][T14119] hsr_slave_0: entered promiscuous mode [ 1872.541171][T14119] hsr_slave_1: entered promiscuous mode [ 1872.768246][ T3300] bridge_slave_1: left allmulticast mode [ 1872.797553][ T3300] bridge_slave_1: left promiscuous mode [ 1872.825324][ T3300] bridge0: port 2(bridge_slave_1) entered disabled state [ 1875.066053][ T3300] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1875.172645][ T3300] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1875.262522][ T3300] bond0 (unregistering): Released all slaves [ 1875.553289][T14185] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1876.160557][T14185] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1876.754605][T14376] loop8: detected capacity change from 0 to 512 [ 1877.096698][T14376] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1877.246392][T14377] loop1: detected capacity change from 0 to 2048 [ 1877.767369][T14377] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1877.884344][T14185] team0: Port device team_slave_0 added [ 1878.101122][T12691] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1878.623714][T14185] team0: Port device team_slave_1 added [ 1880.336646][ T3300] hsr_slave_0: left promiscuous mode [ 1880.408614][ T3300] hsr_slave_1: left promiscuous mode [ 1880.496778][ T3300] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1880.574243][ T3300] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1880.685041][ T3300] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1880.766880][ T3300] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1881.026791][ T3300] veth1_macvtap: left promiscuous mode [ 1881.032597][ T3300] veth0_macvtap: left promiscuous mode [ 1882.056212][ T3300] veth1_vlan: left promiscuous mode [ 1882.062604][ T3300] veth0_vlan: left promiscuous mode [ 1882.291853][T14395] loop1: detected capacity change from 0 to 128 [ 1882.684360][T14395] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1882.769228][T14395] ext4 filesystem being mounted at /57/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1883.015157][T14395] fscrypt (loop1, inode 12): Mutually exclusive encryption flags (0x0c) [ 1883.676025][T12919] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1885.453434][ T3300] team0 (unregistering): Port device team_slave_1 removed [ 1885.565741][ T3300] team0 (unregistering): Port device team_slave_0 removed [ 1886.833086][T14185] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1886.877391][T14185] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1887.043351][T14185] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1887.454890][T14185] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1887.500143][T14185] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1887.646022][T14185] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1888.942182][T14185] hsr_slave_0: entered promiscuous mode [ 1889.012462][T14185] hsr_slave_1: entered promiscuous mode [ 1889.060428][T14185] debugfs: 'hsr0' already exists in 'hsr' [ 1889.102424][T14185] Cannot create hsr debugfs directory [ 1889.118352][T10885] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1889.130298][T10885] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1889.139944][T10885] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1889.165839][T10885] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1889.188236][T10885] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1891.450922][T10885] Bluetooth: hci4: command tx timeout [ 1891.628133][T14274] bridge0: port 1(bridge_slave_0) entered blocking state [ 1891.670586][T14274] bridge0: port 1(bridge_slave_0) entered disabled state [ 1891.721516][T14274] bridge_slave_0: entered allmulticast mode [ 1891.769725][T14274] bridge_slave_0: entered promiscuous mode [ 1891.997098][T14274] bridge0: port 2(bridge_slave_1) entered blocking state [ 1892.034378][T14274] bridge0: port 2(bridge_slave_1) entered disabled state [ 1892.081755][T14274] bridge_slave_1: entered allmulticast mode [ 1892.166625][T14274] bridge_slave_1: entered promiscuous mode [ 1892.865692][ T1327] bridge_slave_1: left allmulticast mode [ 1892.888901][ T1327] bridge_slave_1: left promiscuous mode [ 1892.918832][ T1327] bridge0: port 2(bridge_slave_1) entered disabled state [ 1892.975470][ T1327] bridge_slave_0: left allmulticast mode [ 1892.997933][ T1327] bridge_slave_0: left promiscuous mode [ 1893.022869][ T1327] bridge0: port 1(bridge_slave_0) entered disabled state [ 1893.662252][T14456] loop8: detected capacity change from 0 to 1024 [ 1893.675475][T10885] Bluetooth: hci4: command tx timeout [ 1893.728174][ T1327] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1893.771917][ T1327] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1893.803055][ T1327] bond0 (unregistering): Released all slaves [ 1894.468478][ T1327] hsr_slave_0: left promiscuous mode [ 1894.560981][ T1327] hsr_slave_1: left promiscuous mode [ 1894.607694][ T1327] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1894.660706][ T1327] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1895.726307][ T1327] team0 (unregistering): Port device team_slave_1 removed [ 1895.839561][ T1327] team0 (unregistering): Port device team_slave_0 removed [ 1895.902805][T10885] Bluetooth: hci4: command tx timeout [ 1896.573113][T14274] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1896.847829][T14274] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1897.499401][T14274] team0: Port device team_slave_0 added [ 1897.620438][T14274] team0: Port device team_slave_1 added [ 1898.124531][T10885] Bluetooth: hci4: command tx timeout [ 1898.393992][T14274] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1898.416751][T14274] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1898.515726][T14274] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1898.688878][T14274] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1898.713590][T14274] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1898.787991][T14274] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1900.978676][T14274] hsr_slave_0: entered promiscuous mode [ 1901.112121][T14274] hsr_slave_1: entered promiscuous mode [ 1901.265632][T14496] input: syz0 as /devices/virtual/input/input26 [ 1903.537687][ T5575] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1903.547022][T11456] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 1903.550708][ T5575] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1903.622444][ T5575] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1903.646918][ T5575] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1903.664881][ T5575] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1905.513053][T14516] loop1: detected capacity change from 0 to 2048 [ 1905.771536][T11456] usb 9-1: device not accepting address 4, error -71 [ 1905.855249][T14516] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 1905.913016][T10885] Bluetooth: hci1: command tx timeout [ 1906.413120][T14516] EXT4-fs error (device loop1): ext4_lookup:1785: inode #16: comm syz.1.1184: iget: bad i_size value: 8796093031208 [ 1908.135241][T10885] Bluetooth: hci1: command tx timeout [ 1908.679936][T12919] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000900. [ 1910.415865][T10885] Bluetooth: hci1: command tx timeout [ 1912.604024][T14531] loop1: detected capacity change from 0 to 128 [ 1912.658129][T14531] EXT4-fs: inline encryption not supported [ 1912.670068][T10885] Bluetooth: hci1: command tx timeout [ 1912.753594][T14531] EXT4-fs (loop1): Test dummy encryption mode enabled [ 1912.875197][T14531] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1913.017208][T14531] ext4 filesystem being mounted at /67/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1913.142048][T14531] fscrypt: AES-256-XTS using implementation "xts(ecb(aes-lib))" [ 1913.574207][T14531] ===================================================== [ 1913.581924][T14531] BUG: KMSAN: uninit-value in aes_encrypt+0x92d/0x11b0 [ 1913.589077][T14531] aes_encrypt+0x92d/0x11b0 [ 1913.594068][T14531] crypto_aes_encrypt+0x3f/0x50 [ 1913.599258][T14531] crypto_ecb_encrypt2+0x142/0x300 [ 1913.604842][T14531] crypto_lskcipher_crypt_sg+0x3ad/0x960 [ 1913.610988][T14531] crypto_lskcipher_encrypt_sg+0x8b/0xc0 [ 1913.616930][T14531] crypto_skcipher_encrypt+0x111/0x1e0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1913.622963][T14531] xts_encrypt+0x2e1/0x570 [ 1913.627612][T14531] crypto_skcipher_encrypt+0x18a/0x1e0 [ 1913.633809][T14531] fscrypt_crypt_data_unit+0x38e/0x590 [ 1913.642393][T14531] fscrypt_encrypt_pagecache_blocks+0x430/0x900 [ 1913.650023][T14531] ext4_bio_write_folio+0x139f/0x3110 [ 1913.655931][T14531] mpage_submit_folio+0x399/0x3d0 [ 1913.661243][T14531] ext4_do_writepages+0x3c54/0x7850 [ 1913.667054][T14531] ext4_writepages+0x337/0x870 [ 1913.672074][T14531] do_writepages+0x3f2/0x860 [ 1913.677125][T14531] file_write_and_wait_range+0x6f0/0x7d0 [ 1913.683078][T14531] mmb_fsync_noflush+0x82/0x3a0 [ 1913.688355][T14531] ext4_sync_file+0x619/0x1490 [ 1913.693490][T14531] vfs_fsync_range+0x135/0x1c0 [ 1913.698636][T14531] ext4_buffered_write_iter+0x5b3/0x7b0 [ 1913.704422][T14531] ext4_file_write_iter+0x104c/0x3880 [ 1913.710199][T14531] vfs_write+0xbe1/0x15c0 [ 1913.714770][T14531] __x64_sys_pwrite64+0x2ab/0x3b0 [ 1913.720169][T14531] x64_sys_call+0xbef/0x3ea0 [ 1913.725088][T14531] do_syscall_64+0x134/0xf80 [ 1913.730333][T14531] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1913.736563][T14531] [ 1913.739020][T14531] Uninit was stored to memory at: [ 1913.744448][T14531] xts_xor_tweak+0x576/0xa90 [ 1913.752204][T14531] xts_encrypt+0x278/0x570 [ 1913.756867][T14531] crypto_skcipher_encrypt+0x18a/0x1e0 [ 1913.763531][T14531] fscrypt_crypt_data_unit+0x38e/0x590 [ 1913.769210][T14531] fscrypt_encrypt_pagecache_blocks+0x430/0x900 [ 1913.775820][T14531] ext4_bio_write_folio+0x139f/0x3110 [ 1913.781435][T14531] mpage_submit_folio+0x399/0x3d0 [ 1913.786942][T14531] ext4_do_writepages+0x3c54/0x7850 [ 1913.792403][T14531] ext4_writepages+0x337/0x870 [ 1913.797874][T14531] do_writepages+0x3f2/0x860 [ 1913.802654][T14531] file_write_and_wait_range+0x6f0/0x7d0 [ 1913.808790][T14531] mmb_fsync_noflush+0x82/0x3a0 [ 1913.813939][T14531] ext4_sync_file+0x619/0x1490 [ 1913.819065][T14531] vfs_fsync_range+0x135/0x1c0 [ 1913.824154][T14531] ext4_buffered_write_iter+0x5b3/0x7b0 [ 1913.830126][T14531] ext4_file_write_iter+0x104c/0x3880 [ 1913.835896][T14531] vfs_write+0xbe1/0x15c0 [ 1913.840475][T14531] __x64_sys_pwrite64+0x2ab/0x3b0 [ 1913.845767][T14531] x64_sys_call+0xbef/0x3ea0 [ 1913.850803][T14531] do_syscall_64+0x134/0xf80 [ 1913.858624][T14531] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1913.864763][T14531] [ 1913.868127][T14531] Uninit was created at: [ 1913.872780][T14531] __alloc_frozen_pages_noprof+0x6fa/0x1000 [ 1913.879091][T14531] alloc_pages_mpol+0x328/0x860 [ 1913.884190][T14531] folio_alloc_noprof+0x108/0x370 [ 1913.889723][T14531] filemap_alloc_folio_noprof+0xd9/0x480 [ 1913.895615][T14531] __filemap_get_folio_mpol+0xb43/0x1960 [ 1913.901722][T14531] ext4_write_begin+0x6e3/0x2d80 [ 1913.906921][T14531] ext4_da_write_begin+0x75e/0x1450 [ 1913.912550][T14531] generic_perform_write+0x364/0x1050 [ 1913.918218][T14531] ext4_buffered_write_iter+0x178/0x7b0 [ 1913.924176][T14531] ext4_file_write_iter+0x104c/0x3880 [ 1913.929768][T14531] vfs_write+0xbe1/0x15c0 [ 1913.934510][T14531] __x64_sys_pwrite64+0x2ab/0x3b0 [ 1913.939789][T14531] x64_sys_call+0xbef/0x3ea0 [ 1913.944751][T14531] do_syscall_64+0x134/0xf80 [ 1913.949658][T14531] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1913.956172][T14531] [ 1913.958716][T14531] CPU: 1 UID: 0 PID: 14531 Comm: syz.1.1187 Tainted: G W L syzkaller #0 PREEMPT(full) [ 1913.972833][T14531] Tainted: [W]=WARN, [L]=SOFTLOCKUP [ 1913.979100][T14531] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1913.989527][T14531] ===================================================== [ 1913.996752][T14531] Disabling lock debugging due to kernel taint [ 1914.154176][T14531] Kernel panic - not syncing: kmsan.panic set ... [ 1914.160808][T14531] CPU: 1 UID: 0 PID: 14531 Comm: syz.1.1187 Tainted: G B W L syzkaller #0 PREEMPT(full) [ 1914.172053][T14531] Tainted: [B]=BAD_PAGE, [W]=WARN, [L]=SOFTLOCKUP [ 1914.178627][T14531] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1914.188955][T14531] Call Trace: [ 1914.192371][T14531] [ 1914.195431][T14531] __dump_stack+0x26/0x30 [ 1914.200005][T14531] dump_stack_lvl+0x50/0x1c0 [ 1914.204832][T14531] ? dump_stack+0x12/0x25 [ 1914.209382][T14531] dump_stack+0x1e/0x25 [ 1914.213763][T14531] vpanic+0x7b4/0x1430 [ 1914.218095][T14531] panic+0x15d/0x160 [ 1914.222293][T14531] kmsan_report+0x31a/0x320 [ 1914.227050][T14531] ? __msan_warning+0x1b/0x30 [ 1914.231941][T14531] ? aes_encrypt+0x92d/0x11b0 [ 1914.236852][T14531] ? crypto_aes_encrypt+0x3f/0x50 [ 1914.242119][T14531] ? crypto_ecb_encrypt2+0x142/0x300 [ 1914.247604][T14531] ? crypto_lskcipher_crypt_sg+0x3ad/0x960 [ 1914.253630][T14531] ? crypto_lskcipher_encrypt_sg+0x8b/0xc0 [ 1914.259651][T14531] ? crypto_skcipher_encrypt+0x111/0x1e0 [ 1914.265517][T14531] ? xts_encrypt+0x2e1/0x570 [ 1914.270314][T14531] ? crypto_skcipher_encrypt+0x18a/0x1e0 [ 1914.276184][T14531] ? fscrypt_crypt_data_unit+0x38e/0x590 [ 1914.282009][T14531] ? fscrypt_encrypt_pagecache_blocks+0x430/0x900 [ 1914.288624][T14531] ? ext4_bio_write_folio+0x139f/0x3110 [ 1914.294370][T14531] ? mpage_submit_folio+0x399/0x3d0 [ 1914.299809][T14531] ? ext4_do_writepages+0x3c54/0x7850 [ 1914.305402][T14531] ? ext4_writepages+0x337/0x870 [ 1914.310571][T14531] ? do_writepages+0x3f2/0x860 [ 1914.315513][T14531] ? file_write_and_wait_range+0x6f0/0x7d0 [ 1914.321541][T14531] ? mmb_fsync_noflush+0x82/0x3a0 [ 1914.326787][T14531] ? ext4_sync_file+0x619/0x1490 [ 1914.331939][T14531] ? vfs_fsync_range+0x135/0x1c0 [ 1914.337102][T14531] ? ext4_buffered_write_iter+0x5b3/0x7b0 [ 1914.343033][T14531] ? ext4_file_write_iter+0x104c/0x3880 [ 1914.348786][T14531] ? vfs_write+0xbe1/0x15c0 [ 1914.353521][T14531] ? __x64_sys_pwrite64+0x2ab/0x3b0 [ 1914.358963][T14531] ? x64_sys_call+0xbef/0x3ea0 [ 1914.363963][T14531] ? do_syscall_64+0x134/0xf80 [ 1914.368947][T14531] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1914.375226][T14531] ? kmsan_get_metadata+0xf1/0x160 [ 1914.380759][T14531] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1914.386835][T14531] ? filter_irq_stacks+0x49/0x190 [ 1914.392059][T14531] ? stack_depot_save_flags+0x35/0x790 [ 1914.397862][T14531] ? kmsan_get_metadata+0xf1/0x160 [ 1914.403240][T14531] ? kmsan_get_metadata+0xf1/0x160 [ 1914.408663][T14531] __msan_warning+0x1b/0x30 [ 1914.413423][T14531] aes_encrypt+0x92d/0x11b0 [ 1914.418168][T14531] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1914.424265][T14531] ? skcipher_walk_next+0xaee/0x10f0 [ 1914.429806][T14531] ? rmd160_transform+0x138d/0x68d0 [ 1914.435298][T14531] crypto_aes_encrypt+0x3f/0x50 [ 1914.440493][T14531] crypto_ecb_encrypt2+0x142/0x300 [ 1914.445819][T14531] ? __pfx_crypto_aes_encrypt+0x10/0x10 [ 1914.451652][T14531] crypto_lskcipher_crypt_sg+0x3ad/0x960 [ 1914.457544][T14531] ? __pfx_crypto_ecb_encrypt2+0x10/0x10 [ 1914.463437][T14531] ? __pfx_crypto_ecb_encrypt2+0x10/0x10 [ 1914.469565][T14531] crypto_lskcipher_encrypt_sg+0x8b/0xc0 [ 1914.475567][T14531] crypto_skcipher_encrypt+0x111/0x1e0 [ 1914.481396][T14531] xts_encrypt+0x2e1/0x570 [ 1914.486051][T14531] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1914.492127][T14531] ? __pfx_xts_encrypt+0x10/0x10 [ 1914.497278][T14531] crypto_skcipher_encrypt+0x18a/0x1e0 [ 1914.503081][T14531] fscrypt_crypt_data_unit+0x38e/0x590 [ 1914.508763][T14531] ? __alloc_frozen_pages_noprof+0x6fa/0x1000 [ 1914.515083][T14531] ? kmsan_get_metadata+0xf1/0x160 [ 1914.520431][T14531] ? __pfx_xts_encrypt_done+0x10/0x10 [ 1914.526050][T14531] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1914.532209][T14531] ? alloc_pages_mpol+0x52c/0x860 [ 1914.537477][T14531] ? kmsan_get_metadata+0xf1/0x160 [ 1914.542841][T14531] ? kmsan_get_shadow_origin_ptr+0x35/0xb0 [ 1914.548909][T14531] ? kmsan_get_metadata+0xf1/0x160 [ 1914.554264][T14531] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1914.560361][T14531] fscrypt_encrypt_pagecache_blocks+0x430/0x900 [ 1914.566860][T14531] ext4_bio_write_folio+0x139f/0x3110 [ 1914.572502][T14531] mpage_submit_folio+0x399/0x3d0 [ 1914.577799][T14531] ext4_do_writepages+0x3c54/0x7850 [ 1914.583210][T14531] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 1914.589786][T14531] ? kmsan_get_metadata+0xf1/0x160 [ 1914.595143][T14531] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1914.601211][T14531] ? kmsan_get_metadata+0xf1/0x160 [ 1914.606568][T14531] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1914.612840][T14531] ext4_writepages+0x337/0x870 [ 1914.617860][T14531] ? kmsan_get_metadata+0xf1/0x160 [ 1914.623224][T14531] ? __pfx_ext4_writepages+0x10/0x10 [ 1914.628742][T14531] do_writepages+0x3f2/0x860 [ 1914.633526][T14531] ? _raw_spin_unlock+0x30/0x50 [ 1914.638681][T14531] ? wbc_attach_and_unlock_inode+0x131/0x660 [ 1914.644930][T14531] file_write_and_wait_range+0x6f0/0x7d0 [ 1914.650879][T14531] ? kmsan_get_metadata+0xf1/0x160 [ 1914.656311][T14531] mmb_fsync_noflush+0x82/0x3a0 [ 1914.661492][T14531] ext4_sync_file+0x619/0x1490 [ 1914.666629][T14531] ? __pfx_ext4_sync_file+0x10/0x10 [ 1914.672076][T14531] vfs_fsync_range+0x135/0x1c0 [ 1914.677090][T14531] ext4_buffered_write_iter+0x5b3/0x7b0 [ 1914.682869][T14531] ? futex_unqueue+0x22d/0x2c0 [ 1914.687917][T14531] ext4_file_write_iter+0x104c/0x3880 [ 1914.693503][T14531] ? __x64_sys_pwrite64+0x2ab/0x3b0 [ 1914.698963][T14531] ? __msan_warning+0x1b/0x30 [ 1914.703864][T14531] ? filter_irq_stacks+0x13f/0x190 [ 1914.709176][T14531] ? stack_depot_save_flags+0x35/0x790 [ 1914.714892][T14531] ? kmsan_get_metadata+0xf1/0x160 [ 1914.720257][T14531] ? kmsan_get_metadata+0xf1/0x160 [ 1914.725635][T14531] ? kmsan_get_metadata+0xf1/0x160 [ 1914.731024][T14531] vfs_write+0xbe1/0x15c0 [ 1914.735609][T14531] ? __pfx_ext4_file_write_iter+0x10/0x10 [ 1914.741581][T14531] __x64_sys_pwrite64+0x2ab/0x3b0 [ 1914.746880][T14531] x64_sys_call+0xbef/0x3ea0 [ 1914.751701][T14531] do_syscall_64+0x134/0xf80 [ 1914.756526][T14531] ? clear_bhb_loop+0x50/0xa0 [ 1914.761419][T14531] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1914.767599][T14531] RIP: 0033:0x7fcee279cdd9 [ 1914.772176][T14531] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1914.792010][T14531] RSP: 002b:00007fcee36bf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000012 [ 1914.800658][T14531] RAX: ffffffffffffffda RBX: 00007fcee2a15fa0 RCX: 00007fcee279cdd9 [ 1914.808803][T14531] RDX: 000000000000fdef RSI: 0000200000000140 RDI: 0000000000000006 [ 1914.816935][T14531] RBP: 00007fcee2832d69 R08: 0000000000000000 R09: 0000000000000000 [ 1914.825053][T14531] R10: 0000000000000e7c R11: 0000000000000246 R12: 0000000000000000 [ 1914.833182][T14531] R13: 00007fcee2a16038 R14: 00007fcee2a15fa0 R15: 00007fff3ccb8358 [ 1914.841359][T14531] [ 1914.844890][T14531] Kernel Offset: disabled [ 1914.849282][T14531] Rebooting in 86400 seconds..