last executing test programs: 9m54.9675358s ago: executing program 3 (id=35): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x40, &(0x7f00000001c0)={0x11, 0x8100, 0x0, 0x1, 0xd8, 0x6, @multicast}, 0x14) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'geneve0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000180)="0b0312002e0064000200475400f6a13bb1000000086086dd4803", 0x100a6, 0x88a8ffff, &(0x7f0000000140)={0x11, 0x88a8, r1}, 0x14) 9m51.625135476s ago: executing program 3 (id=40): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e23, 0xa, @empty, 0x9}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000480)=[{{&(0x7f0000000040)={0xa, 0x4e23, 0xb, @loopback, 0x1}, 0x1c, &(0x7f0000000380)=[{&(0x7f0000000140)='2', 0x1}], 0x1}}], 0x1, 0x8000) sendto$inet6(r0, &(0x7f0000000940)="3a35925730", 0x5, 0x20008004, &(0x7f0000000200)={0xa, 0x4e24, 0x8, @private1, 0xe4}, 0x1c) 9m49.759725452s ago: executing program 3 (id=45): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @none, 0x4}, 0xe) setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000180)={0x4, 0x7c, 0x2, 0x0, 0x4, 0x7, 0x9}, 0xc) 9m48.892770065s ago: executing program 3 (id=46): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x5, 0x4, 0x4, 0x5}, 0x50) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000280)=r3, 0x4) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000900)=ANY=[@ANYBLOB="5c00000010001f"], 0x5c}}, 0x40) 9m48.344281458s ago: executing program 3 (id=47): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="12000000050000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @flow_dissector=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 9m47.041458438s ago: executing program 4 (id=50): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_connect(0x6, 0x187, &(0x7f0000000440)=ANY=[@ANYBLOB="12015002c0ba47107d0710049604090203010902750101000380f60904e600039a0c4a141b08d7b056a97e21ede18036f583d0d76d0342ac3e697d53d7c3bc090502040002080102dc0a7fe2be0ef34d6853f61956dcbd64b29ddde732c528504ccee5caee55c8b04c419609ae352a2b7419bcae75a5fe4fc09ac49fd9e5b4e808ec5e235af3ad3be215b15470b2a8a3b201a4e4d140913a986fbdb8b2a6bfb8a0bfbfdbaba5472a7ee5779dd60699876629e7ab8e77d4150650b2a20a7fa6d83c352d676e0c02874b9ed545c76c54cb37834b26760c9b0a0909c7989891f9407aa30f383094cb027ed674d89f7e7b368181de58"], 0x0) syz_usb_control_io(r0, &(0x7f0000000080)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="000002"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_ep_write(r0, 0x81, 0xffffff75, &(0x7f00000002c0)="b9425b44651dd23241963599000000110000004a16941ff5f4b4f1f0add7fcf2b877fceafffffffffff1ffdf4cd9f5d3969890522c77157d88010000003a5bd5531d459dffff03000000000091ff000000e8f5b3371da3635b8b4fa637135800001f65e4b436aa9e50bc0f19b7d3372ff9ebcede1fb5e9428f54d5d1f0cc752cf246a5d2da34a5aa97dc14a469c3dd3e26b41c356484e46fd66e3f2c7807e8773eed7b94fa099ab84feadec2ea95f65bba452eae5b0900f98a979a88c517a2dc360a00237723e2f467af706ea17226296b3a10a351cb47aba2c6b836c90679b4dd859ddc9e4800448aab0000000000000d75f34bb50d8d7084") 9m46.946260917s ago: executing program 3 (id=52): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_BINDTODEVICE_wg(r0, 0x1, 0x19, &(0x7f0000000140)='wg0\x00', 0x4) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000001c0)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$PPPIOCSMRU(0xffffffffffffffff, 0x40047452, &(0x7f0000000040)=0x1) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x0, 0x0, 0x200000, 0x0, 0xb49, 0x6, 0xc, 0x0, 0x1}, 0x0) syz_open_dev$dri(0x0, 0x1, 0x0) read$dsp(0xffffffffffffffff, 0x0, 0x1a9898f726f01cee) r3 = shmget(0x0, 0x1000, 0x100, &(0x7f0000ffe000/0x1000)=nil) shmat(r3, &(0x7f0000ffc000/0x4000)=nil, 0x2000) ioctl$PPPIOCSFLAGS1(0xffffffffffffffff, 0x40047459, 0x0) syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x0) 9m42.821825356s ago: executing program 4 (id=56): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) syz_open_procfs$namespace(0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) landlock_restrict_self(0xffffffffffffffff, 0x0) landlock_restrict_self(0xffffffffffffffff, 0x0) landlock_restrict_self(0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_GET(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="1400000001090103"], 0x14}}, 0x40000010) 9m40.202427535s ago: executing program 4 (id=59): r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7"], 0x0) syz_usb_disconnect(r0) r1 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x200) syz_usb_disconnect(r1) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[], 0x0) ioctl$EVIOCRMFF(r1, 0x4004550d, 0x0) 9m34.196934945s ago: executing program 4 (id=64): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0xb8, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}, @NFTA_SET_EXPRESSIONS={0x74, 0x12, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0x1000}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x8b}]}}}, {0x34, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0xd236}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x7}, @NFTA_LIMIT_TYPE={0x8, 0x4, 0x1, 0x0, 0x1}]}}}, {0x10, 0x1, 0x0, 0x1, @payload={{0xc}, @void}}]}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x110}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x5, 0x84}}}, 0x100}, 0x1, 0x0, 0x0, 0x4010}, 0x20050800) 9m31.626852273s ago: executing program 32 (id=52): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_BINDTODEVICE_wg(r0, 0x1, 0x19, &(0x7f0000000140)='wg0\x00', 0x4) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000001c0)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$PPPIOCSMRU(0xffffffffffffffff, 0x40047452, &(0x7f0000000040)=0x1) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x0, 0x0, 0x200000, 0x0, 0xb49, 0x6, 0xc, 0x0, 0x1}, 0x0) syz_open_dev$dri(0x0, 0x1, 0x0) read$dsp(0xffffffffffffffff, 0x0, 0x1a9898f726f01cee) r3 = shmget(0x0, 0x1000, 0x100, &(0x7f0000ffe000/0x1000)=nil) shmat(r3, &(0x7f0000ffc000/0x4000)=nil, 0x2000) ioctl$PPPIOCSFLAGS1(0xffffffffffffffff, 0x40047459, 0x0) syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x0) 9m31.607129397s ago: executing program 4 (id=66): r0 = socket(0x1e, 0x4, 0x0) sendmsg$tipc(r0, &(0x7f0000000100)={&(0x7f0000000140)=@nameseq={0x1e, 0x1, 0x3, {0x1, 0x1}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x204c0c0}, 0x4800) 9m29.288739273s ago: executing program 4 (id=70): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e25}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x400c404) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8007ffd, 0x0, 0x9, 0xbe, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='fd/4\x00') getdents(r2, &(0x7f0000000000)=""/43, 0x2b) socket$tipc(0x1e, 0x2, 0x0) getdents64(r2, 0x0, 0x0) memfd_create(&(0x7f00000000c0)='\xe9`\x10\x98[\x82?O3#\xfa\x02\xdc\x96\xa1\xbc\x80\x00+\xb6O', 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) socket$kcm(0xa, 0x2, 0x0) socket(0x2, 0x80805, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r3 = syz_open_dev$radio(&(0x7f00000000c0), 0xffffffffffffffff, 0x2) pread64(r3, 0x0, 0x3, 0x0) close(r3) syz_open_procfs(0x0, 0x0) 9m13.48689862s ago: executing program 33 (id=70): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e25}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x400c404) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8007ffd, 0x0, 0x9, 0xbe, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='fd/4\x00') getdents(r2, &(0x7f0000000000)=""/43, 0x2b) socket$tipc(0x1e, 0x2, 0x0) getdents64(r2, 0x0, 0x0) memfd_create(&(0x7f00000000c0)='\xe9`\x10\x98[\x82?O3#\xfa\x02\xdc\x96\xa1\xbc\x80\x00+\xb6O', 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) socket$kcm(0xa, 0x2, 0x0) socket(0x2, 0x80805, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r3 = syz_open_dev$radio(&(0x7f00000000c0), 0xffffffffffffffff, 0x2) pread64(r3, 0x0, 0x3, 0x0) close(r3) syz_open_procfs(0x0, 0x0) 8m49.713359979s ago: executing program 2 (id=114): ioctl$F2FS_IOC_SET_PIN_FILE(0xffffffffffffffff, 0x4004f50d, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) 8m48.482065627s ago: executing program 2 (id=116): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x18, &(0x7f00000003c0), 0x4) 8m48.008078393s ago: executing program 2 (id=119): socket$netlink(0x10, 0x3, 0x0) r0 = socket(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = add_key(0x0, &(0x7f0000000180), &(0x7f0000000100), 0x0, 0xfffffffffffffffe) keyctl$read(0xb, r4, &(0x7f0000000240)=""/112, 0x349b7f55) syz_init_net_socket$ax25(0x3, 0x3, 0x8) getsockname$packet(r0, 0x0, &(0x7f0000000080)) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f0000000400)={0x0, &(0x7f0000000140)=[0x0], &(0x7f0000000180)=[0x0], 0x0, 0x0, 0x1, 0x4000000000000291}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r5, 0xc01864c6, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r5, 0xc05064a7, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r6}) ioctl$DRM_IOCTL_MODE_GETENCODER(r7, 0xc01464a6, &(0x7f0000002300)={r8}) bind$inet(0xffffffffffffffff, 0x0, 0x0) 8m44.875871577s ago: executing program 2 (id=124): r0 = syz_open_procfs(0x0, &(0x7f0000000000)='ns\x00') openat2(r0, &(0x7f0000000100)='./cgroup/../file0\x00', &(0x7f0000000080)={0x40242, 0x22, 0x2}, 0x18) 8m44.454753057s ago: executing program 2 (id=126): r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x98, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x2}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x70, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x38, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x28, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DATA={0xc, 0x7, 0x0, 0x1, [@NFTA_DATA_VALUE={0x8, 0x1, "1f000000"}]}, @NFTA_BITWISE_OP={0x8, 0x6, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x10c}}, 0x0) 8m43.839494397s ago: executing program 2 (id=128): syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f00000000c0)={[{@noload}, {@stripe={'stripe', 0x3d, 0xdc}}, {@nomblk_io_submit}, {@noload}, {@abort}, {@auto_da_alloc}]}, 0xff, 0x459, &(0x7f00000004c0)="$eJzs3MtvVNUfAPDvvTMtlMev/Sk+QNAqGomPlpbnwg1GExeamOgC46q2hSADVVoTIUTRBS4NiXvj0sS/wJVujLoycat7Q0IMG9DEZMy9c28ZhpnSoQODzOeTXDhn7pne873nnplzz5mZAAbWePZPErEpIn6LiNFG9voC443/rl4+O/vX5bOzSdTrb/yZ5OWuXD47WxYtn7exkanXi/y6Nsc9/3bETK02f6rITy6deG9y8fSZ54+dmDk6f3T+5PTBg3v37BjeP72vJ3FmcV3Z9tHC9q2vvHXhtdnDF9756ZusvpuK/c1x9MjIeOPstvVUjw/Wb5ub0km1jxWhK5WIyJprKO//o1GJkeV9o/Hyp32tHHBb1ev1erv358K5OnAPS6LfNQD6o3yjz+5/y+0ODT3uCpcORbx/oBH/1WJr7KlGWpQZarm/7aXxiDh87u8vsy1uzzwEAMB1vjsUEc+1G/+l8WBTuf8VayhjEfH/iLgvIu6PiC0R8UBEXvahiHi4y+O3rpDcOP5JL95SYKuUjf9eKNa2lsd//9Tz+AtjlSK3OY9/KDlyrDa/uzgnu2JoXZafWuEY37/06+ed9jWP/7ItO345FmxIL1ZbJujmZpZm1hj2skufRGyrtsSfS6JcxkkiYmtEbOvqL1+7wzj2zNfbO5W6efwr6ME6U/2riKcb7X8uWuIvJR3XJ6cO7J/eN7k+avO7J8ur4kY//3L+9U7HX1P8PZC1/4bW6z+3HP9Ysj5i8fSZ4/l67WK0rhDf1PnfP+t4T3Or1/9w8maeHi4e+3BmaenUVMRw8uqNj09fe26RrzbHv2tnu/jT/DWujPaRiMgu4h0R8WhEPFbU/fGIeCIidq4Q/48vPvlu9/GvMCvfQ1n8czdr/2hu/+4TleM/fNt9/KWs/ffmqV3FI6t5/VttBddy7gAAAOC/Is0/A5+kE8vpNJ2YaHyGf0tsSGsLi0vPHln44ORc47PyYzGUljNdo03zoVPF3HCZn27J7ynmjb+ojOT5idmF2ly/g4cBt7FD/8/8Uel37YDbzve1YHDp/zC49H8YXPo/DC79HwZXu/7/cR/qAdx53v9hcOn/MLj0fxhc+j8MpI7fjU/X9JV/iXs+EWn3z6pGX+ucrPTDECN3xVltk6iu+scsbjGxru2ufr8yAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA9Ma/AQAA//+nZunQ") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x40001e0, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000400)={{0x2, 0x0, 0x0, 0x0, 0x0, 0x12, 0x4}, 0x9, 0xfffffffffffffffe, 0x80, 0x290761e6, 0x0, 0x0, 0x4}) syz_init_net_socket$x25(0x9, 0x5, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x242, 0x11) truncate(&(0x7f0000000940)='./file1\x00', 0x2fffffd) sendfile(r2, r2, 0x0, 0xe3aa6ea) getpid() r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r3, 0x0, 0x0) close(r3) openat(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/pids.max\x00', 0x2, 0x0) openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.cpu/cpuset.cpus\x00', 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup.net/devices.allow\x00', 0x1, 0x0) 8m28.363969149s ago: executing program 34 (id=128): syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f00000000c0)={[{@noload}, {@stripe={'stripe', 0x3d, 0xdc}}, {@nomblk_io_submit}, {@noload}, {@abort}, {@auto_da_alloc}]}, 0xff, 0x459, &(0x7f00000004c0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x40001e0, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000400)={{0x2, 0x0, 0x0, 0x0, 0x0, 0x12, 0x4}, 0x9, 0xfffffffffffffffe, 0x80, 0x290761e6, 0x0, 0x0, 0x4}) syz_init_net_socket$x25(0x9, 0x5, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x242, 0x11) truncate(&(0x7f0000000940)='./file1\x00', 0x2fffffd) sendfile(r2, r2, 0x0, 0xe3aa6ea) getpid() r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r3, 0x0, 0x0) close(r3) openat(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/pids.max\x00', 0x2, 0x0) openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.cpu/cpuset.cpus\x00', 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup.net/devices.allow\x00', 0x1, 0x0) 6m53.939368516s ago: executing program 1 (id=231): r0 = syz_clone(0xc30e3400, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = getpgid(r0) r2 = syz_pidfd_open(r1, 0x0) pidfd_send_signal(r2, 0x11, 0x0, 0x4) 6m49.149477733s ago: executing program 1 (id=238): r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x80, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x2}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x58, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x4}}}, {0x40, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x30, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_DATA={0xc, 0x7, 0x0, 0x1, [@NFTA_DATA_VALUE={0x8, 0x1, "1f000000"}]}, @NFTA_BITWISE_OP={0x8, 0x6, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0xf4}}, 0x0) 6m48.549431258s ago: executing program 1 (id=239): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0xffffffffffffffff}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) semget$private(0x0, 0x6, 0x0) semop(0x0, &(0x7f00000000c0)=[{0x2, 0x0, 0x2000}, {0x3, 0x1, 0x1800}], 0x2) 6m44.336582171s ago: executing program 1 (id=242): r0 = memfd_create(&(0x7f0000000780)='\x01\xfd\xae.+\xa6\x8c\xb6?2\x199\x94S,|x?Ue[\xbd\xe1!\x033\xbc\'#\xff\x17\x9b%\xf3[d \x06\x00\x00\x00\x97A\xc2\xd8\xf0Uq!\xe4\xc4\xb1\xa2\x1c\xffC;\x94Q\r\xb6}\x9c\xecC\v\xcf\xeb\xe4\x9aR\xe5,\x82\x03\x00\x19\x8d\xe8\xc6\xb9\xe4\xb4\x99\x8a\x19\xe5\xb8\x8cx\b\x99\x04R\x05\xaf\xa2\xea5\f\xcc\x1a\x9b\x00Uf\xa5\xf7\x80Tgiz\nX\b\x91\xfd0\x8e\xb6\xa3\v#\x16\xdf\xb4\xc0\xe6\xb4\xef\xa8i\xd8\xa2\xd2(\x98\x9bA\x8f\x13\xeb\xf4b/\xef!\x8f\xf6]-\xf1k\xb62\x89gEv\x13\xf4\xc7\xb2\xf5\\\x17\x90\xb5\xa6\xa8\xb8o\x0f\xe2 \xe7\x9c$\xd7\xf2@\xf7cdv[\t\x00\x8d\xf3\xcc1\r$\x1e\xff\xf0P\xb2\x97\xb8\xbc\xeb\x91\x87\x8bu\xbf\xd4\'\xff\x1f\f\x016\x9dQ\xeeT\xe8\bY\x00\xb2\x06\xa6\xbel\x9b.o\xbe\x80\x9dx\xd5O\xd6h\\I\xc9\x8d\a\x1d\xc9k\x83\xfc\xa4\xad4\x03\xa2X\x0f\x82\xdbs\xc7\x83L\x9e\xa2\xd1\xb3\xac\x8d\xd8\xb4\xb4\xea\x90Q\xd8\xc7\xeb%\x8bOp\x1ab\x96\xcf\xbb\x15\xcf\xfcN\xed\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00s\xaf\xa2\x14]p+\x96\x1ei|n\xda\xee\\\xae\x96*\x82*\xb8j\xda\xaa\x14\x1f\x1d\xf8\xf8\xae\xfcH\xc4\xb3j\xe8\xcfO\xef\x0e\xafe\xb5*\x89\x18\xb2w\x96\b\x1by\xeaT\xdd\xb3g6\xbc\x85\xb2Y\xccv\x06\x00\x00\x00\xc5e\x90\xc51\x9f\v_# \b\xa5\xbcP,|\xe9\xd6s\x1f\x1f\xbe\xd3\x80\xb1\xa8 \xce|df\x903\v\x02\xea.\x03X\xb5\xe4,8\xb7\xadEI\xdcA\xa7\xcc\xd7\xf9n\x1b\x95\xf8\x11Z\xe6:\x03\xce\xfe\x02\x8ctdy~_oC\x9e\xef\xf0\xa2K\xe9;\x8e:\x01\x03C\x92\xeb\x16\x1c\xbf\xbe\xef\xccUxhg\xdfY\xe6\x83\xa6z\xff\x01\x9d o_{!O\xaajU\x84 \xe9\xb59r\x9cw\x18Z\xd3\xcd\x0e\xba\\\xdb\xf0\xe1\x86\t\xaf\vi\xdc\xbf?\xf5\n\xbd^\x05\xc0\xceuC}\xa8\xc7\xad\x86\xd7\x15&\xb9]1\x05J\x96\xf0\x84\xc1\f\xa6p\x96?\x00\x00\x00\x00\x00\x00\x00\x12\x88\xc8\x9c\xc9Cn\xd4\xa47V\'+\xcc\xbf\r\xa9\x10\x1d\xcf\xebKl\xcc\xa4:\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00G\xdf\xbb\xc0_\x99F\xf4n]\x14\xbc\xcd\xd3\x9f\x9fe\xc5\xe6\xe8Mb\xc6\x82\x82\xcb\xcaXe\xe1\xa2\xaa\x02\x86\xb8\x18\xe2C\xeb\xa9\x17&\x01&\'w\xa1t0\x80\xf0\x93\x80\x9f\x9b\xe0\x9f\xea\xb9\x9eD]#V\xda\x92\xca\xc6\xfa.\xd6\xe31\xfe\xe8\x02\xebX\xbd\nz\x01O\xd3r\xa2\xa9u\x93>m\xd7q\'\xdf\xfajo\xd8n\xa7\xecJi\xde\xdf\x7f\xe3\xc4*Z 4\xe8S$\xa1H=\xdf\x05\xf3\xc3T\xd1\xdd\xc6f\xa4\xb4\x96\\\xa0\xf9\x0f\x17\x11{\xb6\x9d\xd21\xc1\x90Vj\x13r\x00\x00\xde\x03\xab\xff\x8as0\xc6E\xca\"\xd9*\x9a\x15\xb95r\x8f\xaaj\x82\xd6\xd2%\xed\xa2WQ\xec2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xccX\xfdRB\xffU\xe9\xfa\x1f\xf6\xce\b\xde@\x061\xc6z\xe4\xe0\xc9?\xa7\x94>\x9c\xd1\xa5o\x04\xaaim\xae\xfe\xc7f\xa3\x96\xd7\xb4c)r{\r#\xddI&\n\xf2\xec\xd4\xff\x9f\x136zZ-2\x80\xfbH+\x9b8\xf3\xed\xdf\xa2my\xb28c[\xc3\xfe\xb5M\x84\x97\xa5\'s\xe9\xdc=)I\xabLt2\x9c\v\xd9S', 0x6) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x300000a, 0x12, r0, 0x0) syz_mount_image$vfat(&(0x7f00000005c0), &(0x7f0000000140)='./file1\x00', 0x804800, &(0x7f0000000000)=ANY=[@ANYRES8=0x0, @ANYBLOB="6092034e5823f645654f6e8edfc3b8e1a948efb0d4b9a9d4c30f5dacb3c1a7ea2587d59165777f070017c2921e793ec5a1384e143b57bb832f14bb43afdef6cb4ed4960b6c732be46a927cdd8c57f93ee6c15401df91ebcbe4f9989843313ea9f243d4dc3d276b966b898100a620b69b543033b9b7bcd9069b9248fbdff46c4a49f094a61938776ce1a1d0f0c84cb7a84bf0b1e2ce5f38f95e11d5b1977ead80625337f66dc391089ab8573d008a4bd03f6f9f01406db632558ed25be4beecd844ac00e52f95c5dc96a1e4a25c80d56aebf6cb33914d6bc72a40bf2fc94efed2f941cf3e"], 0xf9, 0x1213, &(0x7f0000000600)="$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") creat(&(0x7f00000004c0)='./bus\x00', 0x20) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r1 = open(&(0x7f0000000540)='./bus\x00', 0x4000, 0x0) preadv2(r1, &(0x7f00000000c0)=[{&(0x7f0000001200)=""/4083, 0xffffffdf}], 0x1, 0x0, 0x0, 0x1) 6m42.158971199s ago: executing program 1 (id=246): r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x98, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x2}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x70, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}]}}}, {0x40, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x30, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_DATA={0xc, 0x7, 0x0, 0x1, [@NFTA_DATA_VALUE={0x8, 0x1, "1f000000"}]}, @NFTA_BITWISE_OP={0x8, 0x6, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x10c}}, 0x0) 6m40.542082616s ago: executing program 1 (id=248): socket$nl_generic(0x10, 0x3, 0x10) socket$can_bcm(0x1d, 0x2, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)) socket$inet_mptcp(0x2, 0x1, 0x106) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000100)) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) pipe(&(0x7f0000000000)) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_tcp(0x2, 0x1, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) socket$igmp(0x2, 0x3, 0x2) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000540)={0x0, 0x1f, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000001400000008000200fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000900fc000000080011000700000008000e00800000000800", @ANYRES32=r0], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 6m37.295627201s ago: executing program 35 (id=248): socket$nl_generic(0x10, 0x3, 0x10) socket$can_bcm(0x1d, 0x2, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)) socket$inet_mptcp(0x2, 0x1, 0x106) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000100)) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) pipe(&(0x7f0000000000)) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_tcp(0x2, 0x1, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) socket$igmp(0x2, 0x3, 0x2) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000540)={0x0, 0x1f, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000001400000008000200fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000900fc000000080011000700000008000e00800000000800", @ANYRES32=r0], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 7.841934231s ago: executing program 7 (id=1064): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmsg$802154_dgram(r0, &(0x7f00000078c0)={&(0x7f00000077c0)={0x24, @short={0x2, 0x3, 0xffff}}, 0x14, &(0x7f0000007880)={&(0x7f0000007800)="378ffe92d978a8b4a607c75a72d4ced5d3969ea4bb18b070ee6a76ae56e449005b41001d7a591b786bcbc4783c5f2bedbfdd04e3043f5abcec86bbbd100ec618f3f558dab607daf4d67c230c71898c7617c022696ad2abb8e005902fada449f0", 0x60}}, 0x0) 7.079993417s ago: executing program 6 (id=1068): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000100900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[], 0x60}}, 0x0) 6.778151069s ago: executing program 7 (id=1069): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f00000008c0)='./file1\x00', 0x1008490, &(0x7f0000000a40)={[{@grpid}, {@grpquota}]}, 0x4, 0x4eb, &(0x7f0000001500)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000140)='2', 0x1, 0x8000c61) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) pwrite64(r1, &(0x7f0000000140)='2', 0xfdef, 0xe7c) 6.410453069s ago: executing program 8 (id=1071): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000100)={'wpan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)={0x3c, r2, 0x1, 0x70bd28, 0x25dfdbfd, {}, [@NL802154_ATTR_SEC_DEVKEY={0x20, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0x200}}, @NL802154_DEVKEY_ATTR_ID={0x10, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x4}, @NL802154_KEY_ID_ATTR_MODE={0x8}]}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x20000084) 6.352352229s ago: executing program 6 (id=1072): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'lo\x00'}) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1d4}, 0x8840) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000740)={0x0, 0x0, 0x0}, 0x0) 5.539653772s ago: executing program 5 (id=1074): io_setup(0x7e, &(0x7f0000000040)=0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.net/devices.allow\x00', 0x2, 0x8) io_submit(r0, 0x1, &(0x7f0000000000)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x1, r1, 0x0, 0x0, 0x200}]) 5.385538449s ago: executing program 7 (id=1075): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000240)={0x2, &(0x7f0000000280)=[{0x20, 0x2, 0x81, 0xfffff034}, {0x6, 0xb8, 0x2, 0xffff}]}, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@multicast, @local, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x4, 0x3e, 0x66, 0x0, 0x7, 0x2, 0x0, @private=0xa010102, @local}, {0x11, 0xff, 0x0, @empty}}}}}, 0x0) 5.291805896s ago: executing program 6 (id=1076): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x48, 0x10, 0x44b, 0x0, 0x0, {0x7a, 0x0, 0x0, 0x0, 0x0, 0x21018}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GENEVE_REMOTE6={0x14, 0x7, @mcast1}]}}}]}, 0x48}}, 0x404c080) 5.038262143s ago: executing program 8 (id=1077): r0 = socket(0x400000000010, 0x3, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000500)=@newtfilter={0x90, 0x2c, 0xd3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0xb, 0xfff3}, {}, {0x8, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x58, 0x2, [@TCA_BASIC_ACT={0x54, 0x3, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x8, 0xffff4f21, 0x1, 0x0, 0xfffffffc}, 0x8}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0x3}}]}, 0x90}, 0x1, 0x0, 0x0, 0x10}, 0x0) 4.790006223s ago: executing program 0 (id=1078): mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @remote, 0x5}, 0x9) 4.702769425s ago: executing program 6 (id=1079): socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) getsockopt$inet6_tcp_buf(r0, 0x6, 0x1a, 0x0, &(0x7f00000001c0)) 4.678982667s ago: executing program 5 (id=1080): r0 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f00000002c0)=[{{&(0x7f0000000100)={0xa, 0x4e20, 0x1, @local}, 0x1c, 0x0}}, {{&(0x7f0000000000)={0xa, 0x4e23, 0x16f, @private2={0xfc, 0x2, '\x00', 0x1}, 0x536f}, 0x1c, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="b800000000000000290000003200000004"], 0xb8}}], 0x2, 0x20000000) 4.340772385s ago: executing program 7 (id=1081): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x400c84, &(0x7f0000000080), 0x1, 0x789, &(0x7f0000000fc0)="$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") r0 = creat(&(0x7f0000000200)='./file0\x00', 0x1) r1 = eventfd2(0x7, 0x800) r2 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x0, 0x0) io_submit(0x0, 0x2, &(0x7f0000000240)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0xfff, r2, 0x0, 0x0, 0x10, 0x0, 0x1, r1}, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x5, r0, 0x0, 0x24, 0x0, 0x0, 0x1, r1}]) 4.099719431s ago: executing program 0 (id=1082): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000100900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[], 0x60}}, 0x0) 3.835244246s ago: executing program 5 (id=1083): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xd, 0xfffffffb, 0x7ffeffff}}}}]}, 0x44}}, 0x20040084) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000005380)=@newqdisc={0x30, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x400dc}, 0x24000080) 3.06532695s ago: executing program 8 (id=1084): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_ethernet(0x34, &(0x7f0000000340)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @void, {@generic={0x8906, "f9eb9a28bd69ff3b832a89738d2ef406f3493cf44aa60364bc45cc592e90ade84219a5d85d65"}}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, 0x3, 0x2, 0x301, 0x0, 0x0, {0x5, 0x0, 0x9}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) gettid() syz_open_procfs(0x0, &(0x7f0000000300)='sched\x00') r1 = socket$kcm(0xa, 0x2, 0x0) r2 = socket(0x2, 0x80805, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010101, 0x4f29, 0x3, 'nq\x00', 0x5, 0xc, 0x6c}, {@loopback, 0x4e23, 0x2, 0xcd, 0x1}}, 0x44) sendmsg$sock(r1, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e20, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) 2.624115512s ago: executing program 0 (id=1085): r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r0, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) sendmmsg$unix(r1, &(0x7f0000002640)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000640)="b2", 0x1}], 0x1, &(0x7f0000000240)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18, 0x20040801}}], 0x1, 0x4000000) 1.858664591s ago: executing program 8 (id=1086): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'lo\x00'}) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1d4}, 0x8840) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000740)={0x0, 0x0, 0x0}, 0x0) 1.854200516s ago: executing program 5 (id=1087): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newtaction={0x64, 0x30, 0x1, 0x0, 0xfffffffd, {}, [{0x50, 0x1, [@m_vlan={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0x5, 0x0, 0x0, 0x80000008}, 0x4}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x9}, 0x0) 1.788232475s ago: executing program 7 (id=1088): r0 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r0, &(0x7f00000008c0)=[{{&(0x7f0000000300)={0x2, 0x4e23, @private=0xa010102}, 0x10, &(0x7f0000001740)=[{&(0x7f0000000200)='\f', 0x1}], 0x1}}, {{&(0x7f0000000540)={0x2, 0x4e23, @private=0xa010101}, 0x10, &(0x7f0000001c80)=[{&(0x7f0000000980)='\x00', 0x1}], 0x1}}], 0x2, 0x4000800) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000ac0)=[{{&(0x7f0000000000)={0x2, 0x0, @initdev={0xac, 0x1e, 0x4, 0x0}}, 0x10, 0x0}}], 0x1, 0x4000000) socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f00000000c0)={0x10, 0x9c, 0x204, 0x8, 0x6, 0x3, 0x3, 0x4}, 0x20) 1.604857652s ago: executing program 0 (id=1089): r0 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r0, &(0x7f0000000380)={&(0x7f0000000140)=@nameseq={0x1e, 0x1, 0x2, {0x42, 0x3, 0x4}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4000884}, 0x4) 1.336775665s ago: executing program 6 (id=1090): io_setup(0x7e, &(0x7f0000000040)=0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.net/devices.allow\x00', 0x2, 0x8) io_submit(r0, 0x1, &(0x7f0000000000)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x1, r1, 0x0, 0x0, 0x200}]) 923.10008ms ago: executing program 8 (id=1091): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0xfffffffc, 0x10, {{@in=@broadcast, @in=@remote, 0x0, 0x0, 0xf7fb, 0x2000, 0xa, 0x80, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x0, 0x0, 0x9, 0x8, 0x0, 0x0, 0x20000000000000}, {0x1, 0x9, 0x83}, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3}, [@tmpl={0x44, 0x5, [{{@in=@rand_addr=0x64010102, 0x4d4, 0x32}, 0x0, @in6=@rand_addr=' \x01\x00', 0x3506, 0x0, 0x0, 0x2}]}]}, 0xfc}}, 0x4080) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0200001900010000000000000000000a0101000000000000000000000000000a01010100000000000000000000000000000003000000000200000008000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x23c}}, 0x8000000) 908.466776ms ago: executing program 5 (id=1092): r0 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_INIT(r0, 0x29, 0xc8, &(0x7f00000001c0), 0x4) syz_emit_ethernet(0x9a, &(0x7f0000000040)=ANY=[@ANYBLOB="0180c2000000ffffffffffff86dd6000008000641100fc000000000000000000000000000001ff0200"], 0x0) 698.163617ms ago: executing program 0 (id=1093): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000c00)='sit0\x00', 0x10) unshare(0x24020400) bind$xdp(r0, &(0x7f0000000d40)={0x2c, 0x3, 0x0, 0x2f}, 0x10) 507.144503ms ago: executing program 6 (id=1094): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x11}}, 0x1e) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='bbr', 0x3) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r0, &(0x7f0000000100)="fd517b", 0x3, 0xb, 0x0, 0x0) 353.097318ms ago: executing program 7 (id=1095): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000100900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[], 0x60}}, 0x0) 294.702117ms ago: executing program 8 (id=1096): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_ethernet(0x34, &(0x7f0000000340)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @void, {@generic={0x8906, "f9eb9a28bd69ff3b832a89738d2ef406f3493cf44aa60364bc45cc592e90ade84219a5d85d65"}}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a00000709000100"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, 0x3, 0x2, 0x301, 0x0, 0x0, {0x5, 0x0, 0x9}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) gettid() syz_open_procfs(0x0, &(0x7f0000000300)='sched\x00') r1 = socket$kcm(0xa, 0x2, 0x0) r2 = socket(0x2, 0x80805, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010101, 0x4f29, 0x3, 'nq\x00', 0x5, 0xc, 0x6c}, {@loopback, 0x4e23, 0x2, 0xcd, 0x1}}, 0x44) sendmsg$sock(r1, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e20, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) 237.929061ms ago: executing program 5 (id=1097): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000a80)=ANY=[@ANYBLOB="b702000014000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d640500000000006504040001001f000404000001007d60b7030000000000006a0a00fe00000100850000000d000000b7000000000000009500000000000000c74396c8e3ebbadc20e5a7ef8c9ac1465cbf188ef10871b81ac7553358380b3a1f59916ffc9bf0bdf81524f07fb2819bf5774fedda52e39c90af27db5b56024df96b4673b4e8d5467e114604ea09b290a248a120c9c6cd87cef9000000a39c15a7ef365cc27dfeac7b9b0e9048517354b0ca4f9cf8b59ee6fa003fe1f2c4c15f20a07db4583a462d8be6602186fd68ee14a19ea2eb42122b8635a66ce6b5b92356081bc0f18a0ca83dbc089a9813c1efa26001b3f486ebfaae85c4d0b96778478ae5355e6f923b11056969f486f80a35f7f2339704fa93fa915ab8e1e0d7f31ebd19455e6827cd493907bf9d0000000000000000000000004e1fa60acabcf0553910ca2e5ea499fd5889dde9261f0848a5b8af657bfc96049308e8953431b269053627a1523551c160c813969925a892d266792352ec0204596a37ce8d6d260b32239bddbce2e79f93cb5a0ad897adb53b397d07c50f84b74f2605a565ee149016aa75ea31c0087dcd821b47c8b36efc6da4fb2ea7f1f36c85856b73ac9872babc62149699b6b8c796a79d833eb4b5ca668d430db5653a2b3c5b87e17ca1"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x2ca}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xf, 0x0, &(0x7f00000002c0)="b90103616908068c3c27004e86ddff", 0x0, 0x8104, 0x6000000000000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 0s ago: executing program 0 (id=1098): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xd, 0xfffffffb, 0x7ffeffff}}}}]}, 0x44}}, 0x20040084) sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000005380)=@newqdisc={0x30, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x400dc}, 0x24000080) kernel console output (not intermixed with test programs): ed [ 439.096240][ T7152] chnl_net:caif_netlink_parms(): no params data found [ 440.247982][ T1139] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 440.550125][ T1139] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 440.799599][ T7218] vivid-000: ================= START STATUS ================= [ 440.808269][ T7218] vivid-000: Generate PTS: true [ 440.814427][ T7218] vivid-000: Generate SCR: true [ 440.820020][ T7218] tpg source WxH: 320x240 (Y'CbCr) [ 440.825548][ T7218] tpg field: 1 [ 440.829061][ T7218] tpg crop: (0,0)/320x240 [ 440.833881][ T7218] tpg compose: (0,0)/320x240 [ 440.838979][ T7218] tpg colorspace: 8 [ 440.843097][ T7218] tpg transfer function: 0/0 [ 440.848303][ T7218] tpg Y'CbCr encoding: 0/0 [ 440.853526][ T7218] tpg quantization: 0/0 [ 440.857843][ T7218] tpg RGB range: 0/2 [ 440.865431][ T7218] vivid-000: ================== END STATUS ================== [ 441.035489][ T5785] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 441.083359][ T5785] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 441.098204][ T5785] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 441.113064][ T7071] 8021q: adding VLAN 0 to HW filter on device bond0 [ 441.137563][ T5785] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 441.152616][ T5785] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 441.367665][ T1139] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 441.668377][ T1139] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 441.996945][ T7071] 8021q: adding VLAN 0 to HW filter on device team0 [ 442.048692][ T7138] bridge0: port 1(bridge_slave_0) entered blocking state [ 442.090809][ T7138] bridge0: port 1(bridge_slave_0) entered disabled state [ 442.130451][ T7138] bridge_slave_0: entered allmulticast mode [ 442.160721][ T7138] bridge_slave_0: entered promiscuous mode [ 442.200212][ T7138] bridge0: port 2(bridge_slave_1) entered blocking state [ 442.208063][ T7138] bridge0: port 2(bridge_slave_1) entered disabled state [ 442.250580][ T7138] bridge_slave_1: entered allmulticast mode [ 442.290080][ T7138] bridge_slave_1: entered promiscuous mode [ 442.675876][ T1151] bridge0: port 1(bridge_slave_0) entered blocking state [ 442.683875][ T1151] bridge0: port 1(bridge_slave_0) entered forwarding state [ 442.925375][ T7241] loop0: detected capacity change from 0 to 128 [ 442.990738][ T7152] bridge0: port 1(bridge_slave_0) entered blocking state [ 443.000654][ T7152] bridge0: port 1(bridge_slave_0) entered disabled state [ 443.008780][ T7152] bridge_slave_0: entered allmulticast mode [ 443.026956][ T7152] bridge_slave_0: entered promiscuous mode [ 443.083852][ T1151] bridge0: port 2(bridge_slave_1) entered blocking state [ 443.092774][ T1151] bridge0: port 2(bridge_slave_1) entered forwarding state [ 443.202262][ T5779] Bluetooth: hci3: command tx timeout [ 443.296573][ T7138] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 443.367628][ T7152] bridge0: port 2(bridge_slave_1) entered blocking state [ 443.392744][ T7152] bridge0: port 2(bridge_slave_1) entered disabled state [ 443.407123][ T7152] bridge_slave_1: entered allmulticast mode [ 443.459079][ T7152] bridge_slave_1: entered promiscuous mode [ 443.585543][ T7138] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 443.790405][ T7152] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 443.814096][ T7152] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 443.945612][ T7138] team0: Port device team_slave_0 added [ 444.075834][ T7138] team0: Port device team_slave_1 added [ 444.154570][ T1139] bridge_slave_1: left allmulticast mode [ 444.168642][ T1139] bridge_slave_1: left promiscuous mode [ 444.177062][ T1139] bridge0: port 2(bridge_slave_1) entered disabled state [ 444.193083][ T1139] bridge_slave_0: left allmulticast mode [ 444.199281][ T1139] bridge_slave_0: left promiscuous mode [ 444.207423][ T1139] bridge0: port 1(bridge_slave_0) entered disabled state [ 445.077880][ T1139] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 445.104683][ T1139] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 445.125764][ T1139] bond0 (unregistering): Released all slaves [ 445.245034][ T7152] team0: Port device team_slave_0 added [ 445.281622][ T5779] Bluetooth: hci3: command tx timeout [ 445.442496][ T7152] team0: Port device team_slave_1 added [ 445.550254][ T1139] hsr_slave_0: left promiscuous mode [ 445.639629][ T1139] hsr_slave_1: left promiscuous mode [ 445.648703][ T1139] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 445.681317][ T1139] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 445.706741][ T7270] netlink: 'syz.0.273': attribute type 1 has an invalid length. [ 445.712851][ T1139] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 445.737356][ T1139] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 445.765047][ T1139] veth1_macvtap: left promiscuous mode [ 445.772883][ T1139] veth0_macvtap: left promiscuous mode [ 445.782463][ T1139] veth1_vlan: left promiscuous mode [ 445.790069][ T1139] veth0_vlan: left promiscuous mode [ 446.378576][ T1139] team0 (unregistering): Port device team_slave_1 removed [ 446.412551][ T1139] team0 (unregistering): Port device team_slave_0 removed [ 446.643149][ T7138] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 446.656624][ T7138] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 446.688403][ T7138] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 446.718608][ T7138] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 446.729247][ T7138] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 446.756463][ T7138] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 446.930383][ T7270] 8021q: adding VLAN 0 to HW filter on device bond1 [ 447.093729][ T7152] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 447.102636][ T7152] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 447.170896][ T7152] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 447.207412][ T7152] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 447.221028][ T7152] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 447.256110][ T7152] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 447.361245][ T5779] Bluetooth: hci3: command tx timeout [ 447.612662][ T7138] hsr_slave_0: entered promiscuous mode [ 447.624574][ T7138] hsr_slave_1: entered promiscuous mode [ 447.633277][ T7138] debugfs: 'hsr0' already exists in 'hsr' [ 447.640367][ T7138] Cannot create hsr debugfs directory [ 448.636305][ T1139] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 449.183544][ T7152] hsr_slave_0: entered promiscuous mode [ 449.195947][ T7152] hsr_slave_1: entered promiscuous mode [ 449.207503][ T7152] debugfs: 'hsr0' already exists in 'hsr' [ 449.216460][ T7152] Cannot create hsr debugfs directory [ 449.242462][ T1139] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 449.328180][ T7222] chnl_net:caif_netlink_parms(): no params data found [ 449.440795][ T5779] Bluetooth: hci3: command tx timeout [ 449.558442][ T1139] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 449.732869][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 449.741724][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 449.926419][ T1139] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 450.831642][ T7222] bridge0: port 1(bridge_slave_0) entered blocking state [ 450.841976][ T7222] bridge0: port 1(bridge_slave_0) entered disabled state [ 450.859098][ T7222] bridge_slave_0: entered allmulticast mode [ 450.873472][ T7222] bridge_slave_0: entered promiscuous mode [ 450.985595][ T7222] bridge0: port 2(bridge_slave_1) entered blocking state [ 450.996592][ T7222] bridge0: port 2(bridge_slave_1) entered disabled state [ 451.008821][ T7222] bridge_slave_1: entered allmulticast mode [ 451.019608][ T7222] bridge_slave_1: entered promiscuous mode [ 451.477978][ T7222] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 451.672492][ T7222] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 451.836142][ T7071] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 452.036307][ T7222] team0: Port device team_slave_0 added [ 452.259604][ T7222] team0: Port device team_slave_1 added [ 452.306624][ T1139] bridge_slave_1: left allmulticast mode [ 452.320226][ T1139] bridge_slave_1: left promiscuous mode [ 452.327832][ T1139] bridge0: port 2(bridge_slave_1) entered disabled state [ 452.361401][ T1139] bridge_slave_0: left allmulticast mode [ 452.368078][ T1139] bridge_slave_0: left promiscuous mode [ 452.385048][ T1139] bridge0: port 1(bridge_slave_0) entered disabled state [ 452.410778][ T7304] netlink: 'syz.0.280': attribute type 1 has an invalid length. [ 452.899526][ T1139] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 452.935398][ T1139] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 452.954714][ T1139] bond0 (unregistering): Released all slaves [ 453.230231][ T7304] 8021q: adding VLAN 0 to HW filter on device bond2 [ 453.386410][ T1139] hsr_slave_0: left promiscuous mode [ 453.410497][ T1139] hsr_slave_1: left promiscuous mode [ 453.419194][ T1139] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 453.440323][ T1139] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 453.460836][ T1139] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 453.468515][ T1139] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 453.515349][ T1139] veth1_macvtap: left promiscuous mode [ 453.524525][ T1139] veth0_macvtap: left promiscuous mode [ 453.532721][ T1139] veth1_vlan: left promiscuous mode [ 453.539720][ T1139] veth0_vlan: left promiscuous mode [ 454.427260][ T1139] team0 (unregistering): Port device team_slave_1 removed [ 454.454184][ T1139] team0 (unregistering): Port device team_slave_0 removed [ 454.924004][ T7222] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 454.954075][ T7222] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 455.052328][ T7222] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 455.096725][ T7222] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 455.150758][ T7222] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 455.309704][ T7222] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 456.310770][ T7222] hsr_slave_0: entered promiscuous mode [ 456.329482][ T7222] hsr_slave_1: entered promiscuous mode [ 456.338462][ T7222] debugfs: 'hsr0' already exists in 'hsr' [ 456.345702][ T7222] Cannot create hsr debugfs directory [ 457.050209][ T7071] veth0_vlan: entered promiscuous mode [ 457.112939][ T7138] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 457.227133][ T7138] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 457.305641][ T7138] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 457.356135][ T7071] veth1_vlan: entered promiscuous mode [ 457.389309][ T7138] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 457.573437][ T7152] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 457.700735][ T7152] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 457.814730][ T7152] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 457.879270][ T7152] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 458.298975][ T7071] veth0_macvtap: entered promiscuous mode [ 458.491469][ T7071] veth1_macvtap: entered promiscuous mode [ 458.873747][ T7222] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 458.959054][ T7222] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 459.026894][ T7071] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 459.045031][ T7330] netlink: 'syz.0.287': attribute type 1 has an invalid length. [ 459.075761][ T7222] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 459.178835][ T7330] 8021q: adding VLAN 0 to HW filter on device bond3 [ 459.227879][ T7222] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 459.279014][ T7071] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 459.461400][ T6305] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 459.476781][ T6305] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 459.543597][ T6305] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 459.570238][ T6305] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 459.812824][ T7138] 8021q: adding VLAN 0 to HW filter on device bond0 [ 460.120557][ T7138] 8021q: adding VLAN 0 to HW filter on device team0 [ 460.221771][ T7152] 8021q: adding VLAN 0 to HW filter on device bond0 [ 460.407300][ T207] bridge0: port 1(bridge_slave_0) entered blocking state [ 460.415772][ T207] bridge0: port 1(bridge_slave_0) entered forwarding state [ 460.688304][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 460.700467][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 460.936816][ T7152] 8021q: adding VLAN 0 to HW filter on device team0 [ 461.234609][ T57] bridge0: port 1(bridge_slave_0) entered blocking state [ 461.244102][ T57] bridge0: port 1(bridge_slave_0) entered forwarding state [ 461.425591][ T57] bridge0: port 2(bridge_slave_1) entered blocking state [ 461.435103][ T57] bridge0: port 2(bridge_slave_1) entered forwarding state [ 461.694392][ T7222] 8021q: adding VLAN 0 to HW filter on device bond0 [ 462.115357][ T7222] 8021q: adding VLAN 0 to HW filter on device team0 [ 462.194605][ T7355] netlink: 11 bytes leftover after parsing attributes in process `syz.0.291'. [ 462.230092][ T7355] netlink: 28 bytes leftover after parsing attributes in process `syz.0.291'. [ 462.270736][ T7355] netlink: 28 bytes leftover after parsing attributes in process `syz.0.291'. [ 462.343115][ T6305] bridge0: port 1(bridge_slave_0) entered blocking state [ 462.351155][ T6305] bridge0: port 1(bridge_slave_0) entered forwarding state [ 462.601564][ T207] bridge0: port 2(bridge_slave_1) entered blocking state [ 462.610983][ T207] bridge0: port 2(bridge_slave_1) entered forwarding state [ 464.655833][ T7138] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 464.891775][ T7152] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 465.078863][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 465.117888][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 465.431792][ T7222] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 465.594115][ T6305] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 465.635562][ T6305] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 465.757930][ T7391] netlink: 'syz.0.294': attribute type 1 has an invalid length. [ 466.097506][ T7391] 8021q: adding VLAN 0 to HW filter on device bond4 [ 467.291745][ T7411] netlink: 4 bytes leftover after parsing attributes in process `syz.0.297'. [ 467.354803][ T7412] vivid-000: ================= START STATUS ================= [ 467.365582][ T7412] vivid-000: Generate PTS: true [ 467.371088][ T7412] vivid-000: Generate SCR: true [ 467.376198][ T7412] tpg source WxH: 320x240 (Y'CbCr) [ 467.381632][ T7412] tpg field: 1 [ 467.390067][ T7412] tpg crop: (0,0)/320x240 [ 467.394680][ T7412] tpg compose: (0,0)/320x240 [ 467.400020][ T7412] tpg colorspace: 8 [ 467.404756][ T7412] tpg transfer function: 0/0 [ 467.410783][ T7412] tpg Y'CbCr encoding: 0/0 [ 467.415356][ T7412] tpg quantization: 0/0 [ 467.419884][ T7412] tpg RGB range: 0/2 [ 467.423922][ T7412] vivid-000: ================== END STATUS ================== [ 467.513912][ T7411] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 467.571687][ T7411] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 467.627890][ T7411] bond0 (unregistering): Released all slaves [ 468.669167][ T7138] veth0_vlan: entered promiscuous mode [ 469.137199][ T7138] veth1_vlan: entered promiscuous mode [ 469.170727][ T7152] veth0_vlan: entered promiscuous mode [ 469.444265][ T7152] veth1_vlan: entered promiscuous mode [ 469.823074][ T7222] veth0_vlan: entered promiscuous mode [ 470.094965][ T7422] netlink: 'syz.0.301': attribute type 1 has an invalid length. [ 470.130093][ T7422] netlink: 16146 bytes leftover after parsing attributes in process `syz.0.301'. [ 470.246130][ T7222] veth1_vlan: entered promiscuous mode [ 470.361696][ T7152] veth0_macvtap: entered promiscuous mode [ 470.379329][ T7138] veth0_macvtap: entered promiscuous mode [ 470.499699][ T7138] veth1_macvtap: entered promiscuous mode [ 470.587466][ T7152] veth1_macvtap: entered promiscuous mode [ 470.749298][ T7426] netlink: 'syz.0.302': attribute type 1 has an invalid length. [ 470.991610][ T7426] 8021q: adding VLAN 0 to HW filter on device bond0 [ 471.345037][ T7138] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 471.550655][ T7138] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 471.706123][ T7152] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 471.777959][ T7152] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 471.932973][ T12] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 471.960191][ T12] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 471.998494][ T7222] veth0_macvtap: entered promiscuous mode [ 472.405611][ T12] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 472.439348][ T12] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 472.618588][ T12] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 472.697416][ T12] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 472.996033][ T7222] veth1_macvtap: entered promiscuous mode [ 473.374582][ T12] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 473.460075][ T12] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 475.059381][ T7222] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 475.399535][ T7222] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 475.782473][ T53] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 475.896459][ T53] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 476.038215][ T6026] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 476.098696][ T6026] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 477.494128][ T7480] netlink: 'syz.0.311': attribute type 1 has an invalid length. [ 477.790808][ T7480] 8021q: adding VLAN 0 to HW filter on device bond5 [ 485.191216][ T7562] netlink: 'syz.0.320': attribute type 1 has an invalid length. [ 486.790650][ T5785] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 486.833607][ T5785] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 486.849387][ T5785] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 486.869699][ T5785] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 486.890470][ T5785] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 487.464150][ T5779] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 487.480233][ T5779] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 487.493052][ T5779] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 487.515494][ T5779] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 487.531855][ T5779] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 489.481231][ T5785] Bluetooth: hci4: command tx timeout [ 490.149971][ T5779] Bluetooth: hci5: command tx timeout [ 491.610332][ T5779] Bluetooth: hci4: command tx timeout [ 492.160454][ T5779] Bluetooth: hci5: command tx timeout [ 492.296795][ T7604] loop8: detected capacity change from 0 to 512 [ 492.402211][ T7604] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 492.448255][ T7604] ext4 filesystem being mounted at /17/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 492.498852][ T7604] EXT4-fs error (device loop8): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 492.524634][ T7604] EXT4-fs (loop8): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 33 with error 28 [ 492.585316][ T7604] EXT4-fs (loop8): This should not happen!! Data will be lost [ 492.585316][ T7604] [ 492.600915][ T7604] EXT4-fs (loop8): Total free blocks count 0 [ 492.607447][ T7604] EXT4-fs (loop8): Free/Dirty block details [ 492.615025][ T7604] EXT4-fs (loop8): free_blocks=65280 [ 492.626490][ T7604] EXT4-fs (loop8): dirty_blocks=33 [ 492.638005][ T7604] EXT4-fs (loop8): Block reservation details [ 492.648578][ T7604] EXT4-fs (loop8): i_reserved_data_blocks=33 [ 492.957939][ T7071] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 493.661393][ T75] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 493.675382][ T7613] netlink: 'syz.8.330': attribute type 1 has an invalid length. [ 493.702666][ T5779] Bluetooth: hci4: command tx timeout [ 493.719973][ T75] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 493.849648][ T12] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 494.241062][ T5779] Bluetooth: hci5: command tx timeout [ 494.375316][ T12] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 494.480153][ T75] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 494.488180][ T75] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 494.497488][ T7578] chnl_net:caif_netlink_parms(): no params data found [ 494.750625][ T12] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 495.774771][ T5785] Bluetooth: hci4: command tx timeout [ 496.320419][ T5779] Bluetooth: hci5: command tx timeout [ 496.718585][ T12] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 500.811961][ T7667] netlink: 'syz.6.340': attribute type 1 has an invalid length. [ 502.055914][ T12] bridge_slave_1: left allmulticast mode [ 502.135818][ T12] bridge_slave_1: left promiscuous mode [ 502.267499][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 502.575215][ T12] bridge_slave_0: left allmulticast mode [ 502.649012][ T12] bridge_slave_0: left promiscuous mode [ 502.687421][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 504.706659][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 504.835718][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 504.980800][ T12] bond0 (unregistering): Released all slaves [ 505.298977][ T7586] chnl_net:caif_netlink_parms(): no params data found [ 506.112085][ T7705] netlink: 'syz.6.351': attribute type 1 has an invalid length. [ 506.784491][ T12] hsr_slave_0: left promiscuous mode [ 506.820223][ T12] hsr_slave_1: left promiscuous mode [ 506.829250][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 506.870002][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 506.902919][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 506.965718][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 507.988922][ T12] veth1_macvtap: left promiscuous mode [ 507.994815][ T12] veth0_macvtap: left promiscuous mode [ 508.002501][ T12] veth1_vlan: left promiscuous mode [ 508.008310][ T12] veth0_vlan: left promiscuous mode [ 510.563896][ T12] team0 (unregistering): Port device team_slave_1 removed [ 510.649615][ T12] team0 (unregistering): Port device team_slave_0 removed [ 510.684370][ T7732] netlink: 'syz.0.361': attribute type 1 has an invalid length. [ 511.148926][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 511.157309][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 511.572825][ T7578] bridge0: port 1(bridge_slave_0) entered blocking state [ 511.603895][ T7578] bridge0: port 1(bridge_slave_0) entered disabled state [ 511.637894][ T7578] bridge_slave_0: entered allmulticast mode [ 511.658563][ T7578] bridge_slave_0: entered promiscuous mode [ 511.696305][ T7578] bridge0: port 2(bridge_slave_1) entered blocking state [ 511.727716][ T7578] bridge0: port 2(bridge_slave_1) entered disabled state [ 511.760442][ T7578] bridge_slave_1: entered allmulticast mode [ 511.792282][ T7578] bridge_slave_1: entered promiscuous mode [ 512.246283][ T7578] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 512.356952][ T7578] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 512.811874][ T7578] team0: Port device team_slave_0 added [ 512.933964][ T7578] team0: Port device team_slave_1 added [ 513.266696][ T12] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 514.674803][ T12] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 515.811537][ T12] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 515.949401][ T7578] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 515.985856][ T7578] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 516.052292][ T7578] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 516.108991][ T12] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 516.413670][ T7578] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 516.427436][ T7578] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 516.476410][ T7578] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 517.306812][ T7777] netlink: 'syz.0.372': attribute type 1 has an invalid length. [ 517.412067][ T7586] bridge0: port 1(bridge_slave_0) entered blocking state [ 517.450526][ T7586] bridge0: port 1(bridge_slave_0) entered disabled state [ 517.493574][ T7586] bridge_slave_0: entered allmulticast mode [ 517.528447][ T7586] bridge_slave_0: entered promiscuous mode [ 517.900564][ T7586] bridge0: port 2(bridge_slave_1) entered blocking state [ 517.908809][ T7586] bridge0: port 2(bridge_slave_1) entered disabled state [ 517.997209][ T7586] bridge_slave_1: entered allmulticast mode [ 518.052342][ T7586] bridge_slave_1: entered promiscuous mode [ 518.493532][ T7578] hsr_slave_0: entered promiscuous mode [ 518.554504][ T7578] hsr_slave_1: entered promiscuous mode [ 518.605970][ T7578] debugfs: 'hsr0' already exists in 'hsr' [ 518.629983][ T7578] Cannot create hsr debugfs directory [ 518.984055][ T7586] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 520.164842][ T7586] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 521.404974][ T7586] team0: Port device team_slave_0 added [ 521.446499][ T12] bridge_slave_1: left allmulticast mode [ 521.471041][ T7803] netlink: 4 bytes leftover after parsing attributes in process `syz.0.379'. [ 521.482146][ T12] bridge_slave_1: left promiscuous mode [ 521.489899][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 521.520896][ T12] bridge_slave_0: left allmulticast mode [ 521.528686][ T7803] netlink: 4 bytes leftover after parsing attributes in process `syz.0.379'. [ 521.570103][ T12] bridge_slave_0: left promiscuous mode [ 521.577485][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 522.435912][ T9] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 522.607002][ T9] usb 7-1: Using ep0 maxpacket: 8 [ 522.628417][ T9] usb 7-1: config 135 has an invalid interface number: 230 but max is 0 [ 522.671354][ T9] usb 7-1: config 135 has an invalid descriptor of length 0, skipping remainder of the config [ 522.742352][ T9] usb 7-1: config 135 has no interface number 0 [ 522.760140][ T9] usb 7-1: too many endpoints for config 135 interface 230 altsetting 126: 53, using maximum allowed: 30 [ 522.805309][ T9] usb 7-1: config 135 interface 230 altsetting 126 has 0 endpoint descriptors, different from the interface descriptor's value: 53 [ 522.824144][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 522.832116][ T9] usb 7-1: config 135 interface 230 has no altsetting 0 [ 522.861114][ T9] usb 7-1: New USB device found, idVendor=18ec, idProduct=3288, bcdDevice=3f.3a [ 522.879594][ T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 522.894642][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 522.907376][ T9] usb 7-1: Product: syz [ 522.922901][ T12] bond0 (unregistering): Released all slaves [ 522.931489][ T9] usb 7-1: Manufacturer: syz [ 522.937305][ T9] usb 7-1: SerialNumber: syz [ 522.992576][ T9] uvcvideo 7-1:135.230: Found Unit with invalid ID 0 [ 523.051025][ T9] uvcvideo 7-1:135.230: Found UVC 0.00 device syz (18ec:3288) [ 523.087180][ T9] uvcvideo 7-1:135.230: No valid video chain found. [ 523.094869][ T7586] team0: Port device team_slave_1 added [ 523.178510][ T795] usb 7-1: USB disconnect, device number 2 [ 523.458602][ T12] hsr_slave_0: left promiscuous mode [ 523.484806][ T12] hsr_slave_1: left promiscuous mode [ 523.512534][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 523.540395][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 523.558922][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 523.579619][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 523.617432][ T12] veth1_macvtap: left promiscuous mode [ 523.625432][ T12] veth0_macvtap: left promiscuous mode [ 523.632167][ T12] veth1_vlan: left promiscuous mode [ 523.639528][ T12] veth0_vlan: left promiscuous mode [ 525.358908][ T12] team0 (unregistering): Port device team_slave_1 removed [ 526.227080][ T12] team0 (unregistering): Port device team_slave_0 removed [ 527.528442][ T7586] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 527.537902][ T7586] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 527.580000][ T7586] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 527.766628][ T7586] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 527.802303][ T7586] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 527.889638][ T7586] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 527.966912][ T7829] loop8: detected capacity change from 0 to 1024 [ 528.101377][ T7829] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 528.472686][ T7071] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 528.813052][ T7586] hsr_slave_0: entered promiscuous mode [ 528.863447][ T7586] hsr_slave_1: entered promiscuous mode [ 528.894150][ T7586] debugfs: 'hsr0' already exists in 'hsr' [ 529.052099][ T7586] Cannot create hsr debugfs directory [ 534.127074][ T7578] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 534.634937][ T7578] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 534.910443][ T7578] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 535.212568][ T7578] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 535.414711][ T7878] netlink: 'syz.6.402': attribute type 4 has an invalid length. [ 535.660786][ T7878] xt_hashlimit: size too large, truncated to 1048576 [ 535.667931][ T7878] xt_hashlimit: max too large, truncated to 1048576 [ 536.316395][ T7586] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 536.414062][ T7586] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 536.571531][ T7586] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 536.662425][ T7586] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 536.770033][ T2143] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 536.960996][ T2143] usb 9-1: Using ep0 maxpacket: 8 [ 537.025403][ T2143] usb 9-1: config 135 has an invalid interface number: 230 but max is 0 [ 537.073913][ T2143] usb 9-1: config 135 has an invalid descriptor of length 0, skipping remainder of the config [ 537.150216][ T2143] usb 9-1: config 135 has no interface number 0 [ 537.156719][ T2143] usb 9-1: too many endpoints for config 135 interface 230 altsetting 126: 53, using maximum allowed: 30 [ 537.190293][ T2143] usb 9-1: config 135 interface 230 altsetting 126 has 0 endpoint descriptors, different from the interface descriptor's value: 53 [ 537.250672][ T2143] usb 9-1: config 135 interface 230 has no altsetting 0 [ 537.286689][ T2143] usb 9-1: New USB device found, idVendor=18ec, idProduct=3288, bcdDevice=3f.3a [ 537.346736][ T2143] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 537.414439][ T2143] usb 9-1: Product: syz [ 537.418822][ T2143] usb 9-1: Manufacturer: syz [ 537.467995][ T2143] usb 9-1: SerialNumber: syz [ 537.544946][ T2143] uvcvideo 9-1:135.230: Found Unit with invalid ID 0 [ 537.617424][ T7578] 8021q: adding VLAN 0 to HW filter on device bond0 [ 537.689400][ T2143] uvcvideo 9-1:135.230: Found UVC 0.00 device syz (18ec:3288) [ 537.699654][ T2143] uvcvideo 9-1:135.230: No valid video chain found. [ 537.988808][ T7578] 8021q: adding VLAN 0 to HW filter on device team0 [ 538.165711][ T2143] usb 9-1: USB disconnect, device number 2 [ 538.232461][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 538.240811][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 538.429167][ T6564] bridge0: port 2(bridge_slave_1) entered blocking state [ 538.439396][ T6564] bridge0: port 2(bridge_slave_1) entered forwarding state [ 538.801140][ T5785] Bluetooth: hci1: command 0x0406 tx timeout [ 538.867811][ T7586] 8021q: adding VLAN 0 to HW filter on device bond0 [ 539.366324][ T7586] 8021q: adding VLAN 0 to HW filter on device team0 [ 539.566387][ T6305] bridge0: port 1(bridge_slave_0) entered blocking state [ 539.576275][ T6305] bridge0: port 1(bridge_slave_0) entered forwarding state [ 539.755712][ T6305] bridge0: port 2(bridge_slave_1) entered blocking state [ 539.765178][ T6305] bridge0: port 2(bridge_slave_1) entered forwarding state [ 540.171481][ T7910] Process accounting resumed [ 540.202679][ T7910] evm: overlay not supported [ 550.478991][ T5785] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 550.520982][ T5785] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 550.551605][ T5785] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 550.616014][ T5785] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 550.627780][ T5785] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 551.148113][ T5785] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 551.171698][ T5785] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 551.188504][ T5785] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 551.223770][ T5785] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 551.257677][ T5785] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 551.860736][ T7498] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 552.082933][ T7498] usb 7-1: device descriptor read/64, error -71 [ 552.361057][ T7498] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 552.520152][ T7498] usb 7-1: device descriptor read/64, error -71 [ 552.644499][ T7498] usb usb7-port1: attempt power cycle [ 552.724334][ T5785] Bluetooth: hci2: command tx timeout [ 553.071016][ T7498] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 553.145465][ T7498] usb 7-1: device descriptor read/8, error -71 [ 553.175973][ T7971] loop8: detected capacity change from 0 to 128 [ 553.447882][ T5785] Bluetooth: hci6: command tx timeout [ 553.863812][ T7976] syz.8.421: attempt to access beyond end of device [ 553.863812][ T7976] loop8: rw=2049, sector=145, nr_sectors = 16 limit=128 [ 554.007271][ T7976] syz.8.421: attempt to access beyond end of device [ 554.007271][ T7976] loop8: rw=2049, sector=169, nr_sectors = 8 limit=128 [ 554.998171][ T5785] Bluetooth: hci2: command tx timeout [ 555.018804][ T7498] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 555.996878][ T5779] Bluetooth: hci6: command tx timeout [ 556.003820][ T7976] syz.8.421: attempt to access beyond end of device [ 556.003820][ T7976] loop8: rw=2049, sector=185, nr_sectors = 8 limit=128 [ 556.238395][ T7976] syz.8.421: attempt to access beyond end of device [ 556.238395][ T7976] loop8: rw=2049, sector=201, nr_sectors = 8 limit=128 [ 556.776710][ T7498] usb 7-1: device descriptor read/8, error -71 [ 556.995525][ T7498] usb usb7-port1: unable to enumerate USB device [ 557.040015][ T5779] Bluetooth: hci2: command tx timeout [ 558.150749][ T5779] Bluetooth: hci6: command tx timeout [ 558.457178][ T7946] chnl_net:caif_netlink_parms(): no params data found [ 559.161408][ T5779] Bluetooth: hci2: command tx timeout [ 560.161983][ T5779] Bluetooth: hci6: command tx timeout [ 560.695902][ T7951] chnl_net:caif_netlink_parms(): no params data found [ 563.319341][ T75] bridge_slave_1: left allmulticast mode [ 563.379941][ T75] bridge_slave_1: left promiscuous mode [ 563.459398][ T75] bridge0: port 2(bridge_slave_1) entered disabled state [ 563.613788][ T75] bridge_slave_0: left allmulticast mode [ 563.719485][ T75] bridge_slave_0: left promiscuous mode [ 563.812100][ T75] bridge0: port 1(bridge_slave_0) entered disabled state [ 564.403431][ T5785] Bluetooth: hci3: command 0x0406 tx timeout [ 564.429951][ T30] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 564.655841][ T30] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 564.710156][ T30] usb 7-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 564.792635][ T30] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 564.823101][ T30] usb 7-1: config 0 descriptor?? [ 564.982493][ T75] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 565.048898][ T75] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 565.107108][ T75] bond0 (unregistering): Released all slaves [ 565.148763][ T30] usbhid 7-1:0.0: can't add hid device: -71 [ 565.180451][ T30] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 565.245376][ T30] usb 7-1: USB disconnect, device number 7 [ 565.586809][ T75] hsr_slave_0: left promiscuous mode [ 565.618466][ T75] hsr_slave_1: left promiscuous mode [ 565.634838][ T75] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 565.668727][ T75] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 565.669997][ T30] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 565.882944][ T30] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 565.918190][ T30] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 565.954610][ T30] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 565.985127][ T30] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 566.052721][ T30] usb 7-1: config 0 descriptor?? [ 566.630080][ T30] plantronics 0003:047F:FFFF.0002: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.6-1/input0 [ 567.063102][ T5835] usb 7-1: USB disconnect, device number 8 [ 567.259036][ T75] team0 (unregistering): Port device team_slave_1 removed [ 567.362490][ T8025] fido_id[8025]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/report_descriptor': No such file or directory [ 567.371255][ T75] team0 (unregistering): Port device team_slave_0 removed [ 568.115386][ T8035] loop6: detected capacity change from 0 to 512 [ 568.431679][ T8035] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 568.526896][ T7946] bridge0: port 1(bridge_slave_0) entered blocking state [ 568.538556][ T8035] ext4 filesystem being mounted at /33/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 568.590522][ T7946] bridge0: port 1(bridge_slave_0) entered disabled state [ 568.638809][ T7946] bridge_slave_0: entered allmulticast mode [ 568.693781][ T7946] bridge_slave_0: entered promiscuous mode [ 568.900695][ T7946] bridge0: port 2(bridge_slave_1) entered blocking state [ 568.913725][ T7946] bridge0: port 2(bridge_slave_1) entered disabled state [ 568.937362][ T7946] bridge_slave_1: entered allmulticast mode [ 568.978538][ T7222] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 568.999235][ T7946] bridge_slave_1: entered promiscuous mode [ 569.887951][ T7946] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 570.166310][ T7951] bridge0: port 1(bridge_slave_0) entered blocking state [ 570.200371][ T7951] bridge0: port 1(bridge_slave_0) entered disabled state [ 570.239358][ T7951] bridge_slave_0: entered allmulticast mode [ 570.262860][ T7951] bridge_slave_0: entered promiscuous mode [ 570.291398][ T8049] netlink: 'syz.6.435': attribute type 13 has an invalid length. [ 570.329349][ T7951] bridge0: port 2(bridge_slave_1) entered blocking state [ 570.348673][ T7951] bridge0: port 2(bridge_slave_1) entered disabled state [ 570.369486][ T7951] bridge_slave_1: entered allmulticast mode [ 570.383416][ T7951] bridge_slave_1: entered promiscuous mode [ 570.497710][ T7946] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 572.896255][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 572.904804][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 573.666046][ T8049] A link change request failed with some changes committed already. Interface teql0 may have been left with an inconsistent configuration, please check. [ 575.144432][ T7946] team0: Port device team_slave_0 added [ 575.453279][ T7951] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 575.655259][ T7951] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 575.846878][ T7946] team0: Port device team_slave_1 added [ 577.639352][ T7951] team0: Port device team_slave_0 added [ 577.864500][ T7951] team0: Port device team_slave_1 added [ 578.026139][ T7946] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 578.119982][ T7946] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 578.398828][ T7946] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 578.598108][ T7946] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 578.678261][ T7946] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 578.985398][ T7946] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 579.400223][ T5833] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 579.445799][ T7951] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 579.479243][ T7951] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 579.550314][ T7951] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 579.578674][ T7951] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 579.587532][ T7951] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 579.649378][ T5833] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 579.661223][ T8088] loop8: detected capacity change from 0 to 512 [ 579.687548][ T5833] usb 7-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 579.710128][ T5833] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 579.764271][ T7951] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 579.843169][ T5833] usb 7-1: config 0 descriptor?? [ 579.884894][ T8088] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 579.951166][ T8088] ext4 filesystem being mounted at /53/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 580.218543][ T5833] usbhid 7-1:0.0: can't add hid device: -71 [ 580.250433][ T5833] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 580.341808][ T5833] usb 7-1: USB disconnect, device number 9 [ 580.381977][ T7071] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 580.781114][ T5833] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 581.073950][ T5833] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 581.143757][ T5833] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 581.192682][ T7951] hsr_slave_0: entered promiscuous mode [ 581.233053][ T5833] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 581.274327][ T7951] hsr_slave_1: entered promiscuous mode [ 581.290576][ T5833] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 581.316637][ T7951] debugfs: 'hsr0' already exists in 'hsr' [ 581.349402][ T5833] usb 7-1: config 0 descriptor?? [ 581.365465][ T7951] Cannot create hsr debugfs directory [ 581.705544][ T7946] hsr_slave_0: entered promiscuous mode [ 581.752502][ T7946] hsr_slave_1: entered promiscuous mode [ 581.775987][ T7946] debugfs: 'hsr0' already exists in 'hsr' [ 581.794850][ T7946] Cannot create hsr debugfs directory [ 581.836888][ T75] bridge_slave_1: left allmulticast mode [ 581.870100][ T75] bridge_slave_1: left promiscuous mode [ 581.889433][ T5833] plantronics 0003:047F:FFFF.0003: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.6-1/input0 [ 581.891900][ T75] bridge0: port 2(bridge_slave_1) entered disabled state [ 581.971547][ T75] bridge_slave_0: left allmulticast mode [ 581.990011][ T75] bridge_slave_0: left promiscuous mode [ 582.001136][ T75] bridge0: port 1(bridge_slave_0) entered disabled state [ 582.348314][ T5833] usb 7-1: USB disconnect, device number 10 [ 582.529284][ T8110] fido_id[8110]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/report_descriptor': No such file or directory [ 583.123804][ T75] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 583.232736][ T75] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 583.311995][ T75] bond0 (unregistering): Released all slaves [ 583.426879][ T8123] netlink: 24 bytes leftover after parsing attributes in process `syz.0.449'. [ 584.135552][ T75] hsr_slave_0: left promiscuous mode [ 584.163844][ T75] hsr_slave_1: left promiscuous mode [ 584.182774][ T75] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 584.224472][ T75] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 584.990312][ T75] team0 (unregistering): Port device team_slave_1 removed [ 585.030008][ T75] team0 (unregistering): Port device team_slave_0 removed [ 586.199364][ T8139] netlink: 'syz.6.453': attribute type 4 has an invalid length. [ 586.529552][ T8139] xt_hashlimit: size too large, truncated to 1048576 [ 586.570947][ T8139] xt_hashlimit: max too large, truncated to 1048576 [ 587.160022][ T8092] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 587.380384][ T8092] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 587.430022][ T8092] usb 9-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 587.475417][ T8092] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 587.516429][ T8092] usb 9-1: config 0 descriptor?? [ 587.821756][ T8092] usbhid 9-1:0.0: can't add hid device: -71 [ 587.871363][ T8092] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 587.960828][ T8092] usb 9-1: USB disconnect, device number 3 [ 588.371292][ T8092] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 588.411994][ T7946] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 588.556428][ T8092] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 588.561075][ T7946] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 588.613300][ T8092] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 588.703655][ T8092] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 588.736345][ T7946] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 588.749936][ T8092] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 588.807364][ T8092] usb 9-1: config 0 descriptor?? [ 589.011407][ T7946] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 589.490232][ T8092] usbhid 9-1:0.0: can't add hid device: -71 [ 589.497067][ T8092] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 589.630774][ T8092] usb 9-1: USB disconnect, device number 4 [ 590.183487][ T7951] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 590.279097][ T7951] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 590.375351][ T7951] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 590.549349][ T7951] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 590.756041][ T8178] netlink: 84 bytes leftover after parsing attributes in process `syz.0.461'. [ 591.714124][ T7946] 8021q: adding VLAN 0 to HW filter on device bond0 [ 592.127846][ T7946] 8021q: adding VLAN 0 to HW filter on device team0 [ 592.196901][ T8195] netlink: 'syz.8.467': attribute type 4 has an invalid length. [ 592.295447][ T7675] bridge0: port 1(bridge_slave_0) entered blocking state [ 592.305562][ T7675] bridge0: port 1(bridge_slave_0) entered forwarding state [ 592.628981][ T7675] bridge0: port 2(bridge_slave_1) entered blocking state [ 592.636796][ T7675] bridge0: port 2(bridge_slave_1) entered forwarding state [ 592.674039][ T8194] xt_hashlimit: size too large, truncated to 1048576 [ 592.700860][ T8194] xt_hashlimit: max too large, truncated to 1048576 [ 593.482253][ T8207] bridge0: port 2(bridge_slave_1) entered disabled state [ 593.490877][ T8207] bridge0: port 1(bridge_slave_0) entered disabled state [ 593.980218][ T5835] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 594.192222][ T5835] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 594.230436][ T5835] usb 7-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 594.253002][ T8207] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 594.288182][ T5835] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 594.328243][ T5835] usb 7-1: config 0 descriptor?? [ 594.357463][ T8207] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 594.574744][ T5835] usbhid 7-1:0.0: can't add hid device: -71 [ 594.593075][ T5835] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 594.643158][ T5835] usb 7-1: USB disconnect, device number 11 [ 595.095911][ T7675] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 595.100131][ T5835] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 595.191871][ T6564] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 595.219416][ T6564] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 595.299089][ T6564] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 595.351466][ T5835] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 595.411876][ T5835] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 595.445130][ T5835] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 595.479312][ T5835] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 595.482739][ T7951] 8021q: adding VLAN 0 to HW filter on device bond0 [ 595.550008][ T5835] usb 7-1: config 0 descriptor?? [ 595.984870][ T7951] 8021q: adding VLAN 0 to HW filter on device team0 [ 596.117194][ T7662] bridge0: port 1(bridge_slave_0) entered blocking state [ 596.127760][ T7662] bridge0: port 1(bridge_slave_0) entered forwarding state [ 596.268254][ T7662] bridge0: port 2(bridge_slave_1) entered blocking state [ 596.276004][ T7662] bridge0: port 2(bridge_slave_1) entered forwarding state [ 596.346189][ T5835] usbhid 7-1:0.0: can't add hid device: -71 [ 596.369281][ T5835] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 596.443938][ T5835] usb 7-1: USB disconnect, device number 12 [ 596.553738][ T795] IPVS: starting estimator thread 0... [ 596.700338][ T8232] IPVS: using max 240 ests per chain, 12000 per kthread [ 598.096758][ T7946] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 598.868291][ T8250] netlink: 'syz.0.477': attribute type 13 has an invalid length. [ 598.948412][ T8257] loop6: detected capacity change from 0 to 512 [ 599.017253][ T8257] EXT4-fs: Ignoring removed i_version option [ 599.114907][ T8257] EXT4-fs: Ignoring removed bh option [ 599.361546][ T8257] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 599.466641][ T8257] ext4 filesystem being mounted at /49/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 599.827060][ T8250] 8021q: adding VLAN 0 to HW filter on device team0 [ 599.857542][ T7222] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 599.997311][ T8250] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 600.673071][ T8276] netlink: 'syz.8.480': attribute type 4 has an invalid length. [ 600.690969][ T8270] bridge0: port 2(bridge_slave_1) entered disabled state [ 600.702091][ T8270] bridge0: port 1(bridge_slave_0) entered disabled state [ 601.065581][ T8280] xt_hashlimit: size too large, truncated to 1048576 [ 601.077895][ T8270] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 601.111313][ T8280] xt_hashlimit: max too large, truncated to 1048576 [ 601.177397][ T8270] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 601.836760][ T207] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 601.874126][ T207] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 601.952134][ T207] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 602.028058][ T7951] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 602.101910][ T207] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 602.596988][ T7946] veth0_vlan: entered promiscuous mode [ 602.708737][ T7946] veth1_vlan: entered promiscuous mode [ 603.048798][ T7946] veth0_macvtap: entered promiscuous mode [ 603.128858][ T7946] veth1_macvtap: entered promiscuous mode [ 603.319474][ T7946] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 603.466177][ T7946] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 603.604625][ T29] audit: type=1326 audit(1773762083.944:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8301 comm="syz.8.485" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff05eb9c799 code=0x0 [ 603.667189][ T75] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 603.751075][ T53] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 603.872522][ T53] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 603.993387][ T53] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 604.045315][ T8315] netlink: 16186 bytes leftover after parsing attributes in process `syz.6.487'. [ 604.247140][ T8305] xt_hashlimit: max too large, truncated to 1048576 [ 604.295492][ T8305] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT [ 604.782509][ T7951] veth0_vlan: entered promiscuous mode [ 604.947887][ T7951] veth1_vlan: entered promiscuous mode [ 605.548574][ T8326] netlink: 'syz.6.489': attribute type 13 has an invalid length. [ 605.560145][ T7951] veth0_macvtap: entered promiscuous mode [ 605.664395][ T8326] A link change request failed with some changes committed already. Interface teql0 may have been left with an inconsistent configuration, please check. [ 605.818280][ T7951] veth1_macvtap: entered promiscuous mode [ 606.578729][ T8339] bridge0: port 2(bridge_slave_1) entered disabled state [ 606.589032][ T8339] bridge0: port 1(bridge_slave_0) entered disabled state [ 607.063514][ T8351] netlink: 'syz.6.492': attribute type 4 has an invalid length. [ 607.184859][ T8339] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 607.251254][ T8339] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 607.453760][ T8355] xt_hashlimit: size too large, truncated to 1048576 [ 607.510239][ T8355] xt_hashlimit: max too large, truncated to 1048576 [ 607.867330][ T6026] netdevsim netdevsim8 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 607.923086][ T6026] netdevsim netdevsim8 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 607.969561][ T6026] netdevsim netdevsim8 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 608.062307][ T6026] netdevsim netdevsim8 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 608.112256][ T7951] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 608.267413][ T7951] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 608.432069][ T7662] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 608.443879][ T8365] netlink: 104 bytes leftover after parsing attributes in process `syz.8.495'. [ 608.469654][ T7662] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 608.479310][ T7662] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 608.578121][ T7662] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 611.160361][ T8392] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 611.191145][ T8392] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 611.210408][ T8392] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 611.283371][ T8392] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 611.295765][ T8392] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 612.107366][ T5779] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 612.123129][ T5779] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 612.133447][ T5779] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 612.170337][ T5779] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 612.187877][ T5779] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 612.567744][ T8391] chnl_net:caif_netlink_parms(): no params data found [ 613.166879][ T8402] loop6: detected capacity change from 0 to 512 [ 613.217805][ T8402] EXT4-fs: Ignoring removed oldalloc option [ 613.294683][ T207] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 613.373838][ T8392] Bluetooth: hci4: command tx timeout [ 613.540437][ T8402] EXT4-fs error (device loop6): ext4_get_branch:178: inode #11: block 4294967295: comm syz.6.502: invalid block [ 613.553743][ T8402] loop6: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 613.559875][ C0] EXT4-fs (loop6): error count since last fsck: 1 [ 613.575980][ C0] EXT4-fs (loop6): initial error at time 1773762093: ext4_get_branch:178: inode 11: block 4294967295 [ 613.587345][ C0] EXT4-fs (loop6): last error at time 1773762093: ext4_get_branch:178: inode 11: block 4294967295 [ 613.662280][ T8402] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #11: comm syz.6.502: invalid indirect mapped block 4294967295 (level 1) [ 613.753513][ T207] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 613.780190][ T8402] loop6: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 613.801265][ T8402] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #11: comm syz.6.502: invalid indirect mapped block 4294967295 (level 1) [ 613.867477][ T8402] loop6: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 613.882260][ T8402] EXT4-fs (loop6): 2 truncates cleaned up [ 613.985087][ T8402] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 613.995001][ T207] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 614.240359][ T8392] Bluetooth: hci5: command tx timeout [ 614.365641][ T207] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 614.854900][ T8391] bridge0: port 1(bridge_slave_0) entered blocking state [ 614.864907][ T8414] netlink: 'syz.8.504': attribute type 4 has an invalid length. [ 614.873397][ T8391] bridge0: port 1(bridge_slave_0) entered disabled state [ 614.885901][ T8391] bridge_slave_0: entered allmulticast mode [ 614.898851][ T7222] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 614.950379][ T8391] bridge_slave_0: entered promiscuous mode [ 615.007256][ T8391] bridge0: port 2(bridge_slave_1) entered blocking state [ 615.025628][ T8391] bridge0: port 2(bridge_slave_1) entered disabled state [ 615.074780][ T8391] bridge_slave_1: entered allmulticast mode [ 615.087079][ T8391] bridge_slave_1: entered promiscuous mode [ 615.143011][ T8415] xt_hashlimit: size too large, truncated to 1048576 [ 615.156935][ T8415] xt_hashlimit: max too large, truncated to 1048576 [ 615.440576][ T8392] Bluetooth: hci4: command tx timeout [ 615.504790][ T8391] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 615.587590][ T8391] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 616.125775][ T8391] team0: Port device team_slave_0 added [ 616.167380][ T8391] team0: Port device team_slave_1 added [ 616.338616][ T8392] Bluetooth: hci5: command tx timeout [ 616.422844][ T8395] chnl_net:caif_netlink_parms(): no params data found [ 616.526892][ T207] bridge_slave_1: left allmulticast mode [ 616.561718][ T207] bridge_slave_1: left promiscuous mode [ 616.590996][ T207] bridge0: port 2(bridge_slave_1) entered disabled state [ 616.624979][ T207] bridge_slave_0: left allmulticast mode [ 616.631203][ T207] bridge_slave_0: left promiscuous mode [ 616.645607][ T207] bridge0: port 1(bridge_slave_0) entered disabled state [ 617.523726][ T8392] Bluetooth: hci4: command tx timeout [ 617.726484][ T207] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 617.786342][ T207] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 617.817527][ T207] bond0 (unregistering): Released all slaves [ 617.965888][ T8391] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 617.992051][ T8391] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 618.094296][ T8391] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 618.198966][ T8391] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 618.222285][ T8391] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 618.280017][ T8391] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 618.410437][ T8392] Bluetooth: hci5: command tx timeout [ 618.580623][ T207] hsr_slave_0: left promiscuous mode [ 618.630379][ T207] hsr_slave_1: left promiscuous mode [ 618.662226][ T207] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 618.722614][ T207] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 618.750327][ T207] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 618.774842][ T207] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 618.851373][ T207] veth1_macvtap: left promiscuous mode [ 618.857289][ T207] veth0_macvtap: left promiscuous mode [ 618.880623][ T207] veth1_vlan: left promiscuous mode [ 618.886504][ T207] veth0_vlan: left promiscuous mode [ 619.349181][ T8450] netlink: 'syz.0.515': attribute type 4 has an invalid length. [ 619.600003][ T8392] Bluetooth: hci4: command tx timeout [ 619.775277][ T8454] xt_hashlimit: size too large, truncated to 1048576 [ 619.790218][ T8454] xt_hashlimit: max too large, truncated to 1048576 [ 619.983323][ T207] team0 (unregistering): Port device team_slave_1 removed [ 620.021498][ T207] team0 (unregistering): Port device team_slave_0 removed [ 620.485518][ T8392] Bluetooth: hci5: command tx timeout [ 620.756116][ T8391] hsr_slave_0: entered promiscuous mode [ 620.786153][ T8391] hsr_slave_1: entered promiscuous mode [ 620.822446][ T8391] debugfs: 'hsr0' already exists in 'hsr' [ 620.839529][ T8391] Cannot create hsr debugfs directory [ 621.170260][ T30] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 621.352704][ T30] usb 7-1: Using ep0 maxpacket: 8 [ 621.370515][ T30] usb 7-1: config index 0 descriptor too short (expected 30768, got 252) [ 621.379528][ T8395] bridge0: port 1(bridge_slave_0) entered blocking state [ 621.387418][ T8395] bridge0: port 1(bridge_slave_0) entered disabled state [ 621.400558][ T30] usb 7-1: config 102 has too many interfaces: 102, using maximum allowed: 32 [ 621.417078][ T30] usb 7-1: config 102 has an invalid descriptor of length 0, skipping remainder of the config [ 621.428610][ T8395] bridge_slave_0: entered allmulticast mode [ 621.445479][ T30] usb 7-1: config 102 has 0 interfaces, different from the descriptor's value: 102 [ 621.459955][ T8395] bridge_slave_0: entered promiscuous mode [ 621.479292][ T30] usb 7-1: New USB device found, idVendor=18ec, idProduct=3288, bcdDevice=3f.3a [ 621.491779][ T8395] bridge0: port 2(bridge_slave_1) entered blocking state [ 621.502021][ T30] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 621.510826][ T8395] bridge0: port 2(bridge_slave_1) entered disabled state [ 621.518636][ T8395] bridge_slave_1: entered allmulticast mode [ 621.526682][ T30] usb 7-1: Product: syz [ 621.531939][ T30] usb 7-1: Manufacturer: syz [ 621.536718][ T30] usb 7-1: SerialNumber: syz [ 621.546137][ T8395] bridge_slave_1: entered promiscuous mode [ 621.737391][ T6564] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 621.829226][ T30] usb 7-1: USB disconnect, device number 13 [ 622.004611][ T6564] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 622.042131][ T8395] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 622.122898][ T8395] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 622.220060][ T8466] netlink: 28 bytes leftover after parsing attributes in process `syz.8.520'. [ 622.241772][ T6564] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 622.395707][ T8395] team0: Port device team_slave_0 added [ 622.455333][ T6564] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 622.598234][ T8395] team0: Port device team_slave_1 added [ 623.001471][ T8395] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 623.008720][ T8395] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 623.111446][ T8395] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 623.234078][ T8395] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 623.248856][ T8395] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 623.282956][ T8395] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 623.550866][ T8485] netlink: 'syz.6.525': attribute type 4 has an invalid length. [ 623.803982][ T8485] xt_hashlimit: size too large, truncated to 1048576 [ 623.815927][ T8485] xt_hashlimit: max too large, truncated to 1048576 [ 624.282300][ T8491] netlink: 4 bytes leftover after parsing attributes in process `syz.6.527'. [ 624.336629][ T8395] hsr_slave_0: entered promiscuous mode [ 624.351823][ T8395] hsr_slave_1: entered promiscuous mode [ 624.365110][ T8395] debugfs: 'hsr0' already exists in 'hsr' [ 624.372584][ T8395] Cannot create hsr debugfs directory [ 624.701418][ T6564] bridge_slave_1: left allmulticast mode [ 624.707308][ T6564] bridge_slave_1: left promiscuous mode [ 624.726823][ T6564] bridge0: port 2(bridge_slave_1) entered disabled state [ 624.747800][ T6564] bridge_slave_0: left allmulticast mode [ 624.754492][ T6564] bridge_slave_0: left promiscuous mode [ 624.761733][ T6564] bridge0: port 1(bridge_slave_0) entered disabled state [ 624.840675][ T8497] netlink: 68 bytes leftover after parsing attributes in process `syz.8.528'. [ 625.310161][ T6564] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 625.331009][ T6564] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 625.367896][ T6564] bond0 (unregistering): Released all slaves [ 625.814896][ T6564] hsr_slave_0: left promiscuous mode [ 625.824528][ T6564] hsr_slave_1: left promiscuous mode [ 625.844360][ T6564] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 625.858147][ T6564] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 625.877953][ T6564] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 625.887745][ T6564] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 625.915924][ T6564] veth1_macvtap: left promiscuous mode [ 625.926972][ T6564] veth0_macvtap: left promiscuous mode [ 625.933606][ T6564] veth1_vlan: left promiscuous mode [ 625.939581][ T6564] veth0_vlan: left promiscuous mode [ 626.014611][ T8092] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 626.190974][ T8092] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 626.222905][ T8092] usb 7-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 626.234356][ T8092] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 626.271297][ T8092] usb 7-1: config 0 descriptor?? [ 626.517758][ T8092] usbhid 7-1:0.0: can't add hid device: -71 [ 626.525098][ T8092] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 626.580145][ T8092] usb 7-1: USB disconnect, device number 14 [ 626.984258][ T6564] team0 (unregistering): Port device team_slave_1 removed [ 627.032736][ T6564] team0 (unregistering): Port device team_slave_0 removed [ 627.890266][ T795] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 628.003502][ T8503] netlink: 28 bytes leftover after parsing attributes in process `syz.8.531'. [ 628.071946][ T795] usb 7-1: Using ep0 maxpacket: 8 [ 628.118920][ T795] usb 7-1: config index 0 descriptor too short (expected 30768, got 252) [ 628.143736][ T795] usb 7-1: config 102 has too many interfaces: 102, using maximum allowed: 32 [ 628.171384][ T795] usb 7-1: config 102 has an invalid descriptor of length 0, skipping remainder of the config [ 628.205869][ T795] usb 7-1: config 102 has 0 interfaces, different from the descriptor's value: 102 [ 628.208147][ T8391] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 628.226014][ T795] usb 7-1: New USB device found, idVendor=18ec, idProduct=3288, bcdDevice=3f.3a [ 628.226167][ T795] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 628.226291][ T795] usb 7-1: Product: syz [ 628.226386][ T795] usb 7-1: Manufacturer: syz [ 628.226485][ T795] usb 7-1: SerialNumber: syz [ 628.308690][ T8391] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 628.411282][ T8391] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 628.471853][ T8391] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 628.546758][ T795] usb 7-1: USB disconnect, device number 15 [ 630.068121][ T8517] netlink: 'syz.8.535': attribute type 4 has an invalid length. [ 630.285851][ T8516] xt_hashlimit: size too large, truncated to 1048576 [ 630.424357][ T8516] xt_hashlimit: max too large, truncated to 1048576 [ 631.298059][ T8395] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 631.539651][ T8395] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 631.684301][ T8395] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 631.773735][ T8395] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 631.990613][ T8537] netlink: 4 bytes leftover after parsing attributes in process `syz.0.541'. [ 632.174774][ T8391] 8021q: adding VLAN 0 to HW filter on device bond0 [ 632.757341][ T8391] 8021q: adding VLAN 0 to HW filter on device team0 [ 632.762748][ T8092] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 632.983054][ T8092] usb 9-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 633.028531][ T53] bridge0: port 1(bridge_slave_0) entered blocking state [ 633.038191][ T53] bridge0: port 1(bridge_slave_0) entered forwarding state [ 633.069949][ T8092] usb 9-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 633.092693][ T8092] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 633.130011][ T8092] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 633.165025][ T8092] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 633.200277][ T8092] usb 9-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 633.243923][ T8092] usb 9-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 633.254318][ T8092] usb 9-1: Product: syz [ 633.258768][ T8092] usb 9-1: Manufacturer: syz [ 633.311337][ T8092] cdc_wdm 9-1:1.0: skipping garbage [ 633.316772][ T8092] cdc_wdm 9-1:1.0: skipping garbage [ 633.344514][ T53] bridge0: port 2(bridge_slave_1) entered blocking state [ 633.350648][ T8092] cdc_wdm 9-1:1.0: cdc-wdm0: USB WDM device [ 633.352352][ T53] bridge0: port 2(bridge_slave_1) entered forwarding state [ 633.358685][ T8092] cdc_wdm 9-1:1.0: Unknown control protocol [ 633.541600][ T8092] usb 9-1: USB disconnect, device number 5 [ 634.032894][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 634.040689][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 634.233501][ T5831] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 634.428192][ T5831] usb 9-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 634.460775][ T5831] usb 9-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 634.478034][ T8558] netlink: 'syz.0.546': attribute type 4 has an invalid length. [ 634.489595][ T5831] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 634.537331][ T5831] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 634.592603][ T5831] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 634.615624][ T8558] xt_hashlimit: size too large, truncated to 1048576 [ 634.637824][ T8395] 8021q: adding VLAN 0 to HW filter on device bond0 [ 634.673959][ T5831] usb 9-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 634.693147][ T8558] xt_hashlimit: max too large, truncated to 1048576 [ 634.729433][ T5831] usb 9-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 634.770487][ T5831] usb 9-1: Product: syz [ 634.775133][ T5831] usb 9-1: Manufacturer: syz [ 634.862019][ T5831] cdc_wdm 9-1:1.0: skipping garbage [ 634.867451][ T5831] cdc_wdm 9-1:1.0: skipping garbage [ 634.917862][ T5831] cdc_wdm 9-1:1.0: cdc-wdm0: USB WDM device [ 634.952633][ T5831] cdc_wdm 9-1:1.0: Unknown control protocol [ 635.599435][ T8395] 8021q: adding VLAN 0 to HW filter on device team0 [ 635.936125][ T5831] usb 9-1: USB disconnect, device number 6 [ 635.955346][ T207] bridge0: port 1(bridge_slave_0) entered blocking state [ 635.963083][ T207] bridge0: port 1(bridge_slave_0) entered forwarding state [ 636.300942][ T207] bridge0: port 2(bridge_slave_1) entered blocking state [ 636.308982][ T207] bridge0: port 2(bridge_slave_1) entered forwarding state [ 637.968273][ T8391] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 641.354124][ T8395] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 642.269529][ T8633] loop6: detected capacity change from 0 to 128 [ 642.306080][ T8391] veth0_vlan: entered promiscuous mode [ 642.462004][ T8391] veth1_vlan: entered promiscuous mode [ 642.968183][ T8391] veth0_macvtap: entered promiscuous mode [ 643.096873][ T8391] veth1_macvtap: entered promiscuous mode [ 643.498930][ T8391] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 643.744712][ T8648] loop6: detected capacity change from 0 to 512 [ 643.886420][ T8648] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 643.974660][ T8391] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 644.528741][ T8648] EXT4-fs (loop6): 1 orphan inode deleted [ 644.565209][ T1132] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 644.600462][ T8648] EXT4-fs (loop6): 1 truncate cleaned up [ 644.655277][ T53] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 644.708172][ T53] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 644.764054][ T53] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 645.042118][ T8648] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 645.308023][ T8648] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 645.391830][ T8648] EXT4-fs (loop6): Remounting filesystem read-only [ 645.750072][ T30] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 645.854233][ T7222] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 645.988431][ T30] usb 9-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 646.086499][ T30] usb 9-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 646.251244][ T30] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 646.350943][ T30] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 646.447094][ T30] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 646.628410][ T30] usb 9-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 646.742247][ T30] usb 9-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 646.816373][ T30] usb 9-1: Product: syz [ 646.892911][ T30] usb 9-1: Manufacturer: syz [ 647.033682][ T30] cdc_wdm 9-1:1.0: skipping garbage [ 647.039205][ T30] cdc_wdm 9-1:1.0: skipping garbage [ 647.176018][ T30] cdc_wdm 9-1:1.0: cdc-wdm0: USB WDM device [ 647.279031][ T30] cdc_wdm 9-1:1.0: Unknown control protocol [ 647.426460][ T30] usb 9-1: USB disconnect, device number 7 [ 647.670959][ T8395] veth0_vlan: entered promiscuous mode [ 648.049594][ T8395] veth1_vlan: entered promiscuous mode [ 651.204632][ T8395] veth0_macvtap: entered promiscuous mode [ 651.277541][ T8395] veth1_macvtap: entered promiscuous mode [ 651.974973][ T8395] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 652.203072][ T8395] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 652.642049][ T1132] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 652.684824][ T53] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 652.812941][ T53] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 652.861957][ T53] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 653.705874][ T8707] netlink: 'syz.0.578': attribute type 4 has an invalid length. [ 653.720476][ T8706] netlink: 4 bytes leftover after parsing attributes in process `syz.6.577'. [ 654.035417][ T8709] xt_hashlimit: size too large, truncated to 1048576 [ 654.075543][ T8709] xt_hashlimit: max too large, truncated to 1048576 [ 656.666394][ T7675] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 656.685864][ T29] audit: type=1326 audit(1773762137.044:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8743 comm="syz.8.586" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ff05eb9c799 code=0x0 [ 656.724853][ T7675] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 656.736909][ T8752] netlink: 'syz.0.587': attribute type 4 has an invalid length. [ 656.967118][ T8752] xt_hashlimit: size too large, truncated to 1048576 [ 656.998860][ T8752] xt_hashlimit: max too large, truncated to 1048576 [ 657.109609][ T1139] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 657.140124][ T1139] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 658.088186][ T8772] batadv_slave_0: entered promiscuous mode [ 658.113077][ T8772] netlink: 4 bytes leftover after parsing attributes in process `syz.6.591'. [ 658.187265][ T8772] batadv_slave_0 (unregistering): left promiscuous mode [ 658.240488][ T8772] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 659.626214][ T8795] netlink: 'syz.7.597': attribute type 4 has an invalid length. [ 659.778603][ T1151] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 659.836937][ T1151] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 659.921980][ T8793] xt_hashlimit: size too large, truncated to 1048576 [ 659.941170][ T8793] xt_hashlimit: max too large, truncated to 1048576 [ 660.090761][ T75] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 660.143943][ T75] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 661.108980][ T8812] syz.0.600 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 661.460712][ T8815] loop8: detected capacity change from 0 to 1024 [ 661.585132][ T8815] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 661.626045][ T8815] System zones: 0-1, 3-36 [ 661.668953][ T8815] EXT4-fs error (device loop8): ext4_orphan_get:1417: comm syz.8.602: bad orphan inode 134217728 [ 661.776757][ T8815] loop8: lost filesystem error report for type 5 error -117 [ 661.779840][ C1] EXT4-fs (loop8): error count since last fsck: 1 [ 661.796708][ C1] EXT4-fs (loop8): initial error at time 1773762142: ext4_orphan_get:1417 [ 661.807734][ C1] EXT4-fs (loop8): last error at time 1773762142: ext4_orphan_get:1417 [ 661.820365][ T8815] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 662.309461][ T7071] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 664.922547][ T8843] loop7: detected capacity change from 0 to 2048 [ 665.849338][ T8097] loop7: p1 p3 [ 665.849338][ T8097] p1: [ 665.934188][ T8097] loop7: p3 start 3036741376 is beyond EOD, truncated [ 666.090851][ T8843] loop7: p1 p3 [ 666.090851][ T8843] p1: [ 666.099484][ T8843] loop7: p1 could not be added: -ENOMEM [ 666.170212][ T8843] loop7: p3 start 3036741376 is beyond EOD, truncated [ 666.477260][ T8855] tipc: Started in network mode [ 666.534653][ T8855] tipc: Node identity 4, cluster identity 4711 [ 666.554487][ T8097] udevd[8097]: inotify_add_watch(7, /dev/loop7p1, 10) failed: No such file or directory [ 666.622435][ T8855] tipc: Node number set to 4 [ 666.663583][ T8859] netlink: 'syz.8.615': attribute type 4 has an invalid length. [ 666.802228][ T8858] xt_hashlimit: size too large, truncated to 1048576 [ 666.809200][ T8858] xt_hashlimit: max too large, truncated to 1048576 [ 668.400127][ T8875] loop6: detected capacity change from 0 to 512 [ 668.423675][ T8875] EXT4-fs: Ignoring removed orlov option [ 668.795942][ T8875] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=204dc018, mo2=0002] [ 668.812984][ T8875] System zones: 0-2, 18-18, 34-35 [ 668.919555][ T8875] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 668.936017][ T8875] ext4 filesystem being mounted at /94/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 671.903106][ T8891] netlink: 4 bytes leftover after parsing attributes in process `syz.5.625'. [ 671.995903][ T8893] loop8: detected capacity change from 0 to 512 [ 672.098026][ T8893] FAT-fs (loop8): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 673.023720][ T8893] FAT-fs (loop8): error, fat_free_clusters: deleting FAT entry beyond EOF [ 674.811996][ T8905] netlink: 'syz.7.630': attribute type 4 has an invalid length. [ 675.109143][ T8905] xt_hashlimit: size too large, truncated to 1048576 [ 675.215807][ T8905] xt_hashlimit: max too large, truncated to 1048576 [ 675.329502][ T8908] loop8: detected capacity change from 0 to 1024 [ 675.351286][ T8901] netlink: 4 bytes leftover after parsing attributes in process `syz.5.629'. [ 675.550927][ T8908] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 675.647490][ T8908] System zones: 0-1, 3-36 [ 675.782074][ T8908] EXT4-fs error (device loop8): ext4_orphan_get:1417: comm syz.8.631: bad orphan inode 134217728 [ 675.896411][ T8908] loop8: lost filesystem error report for type 5 error -117 [ 675.899881][ C1] EXT4-fs (loop8): error count since last fsck: 1 [ 675.914824][ C1] EXT4-fs (loop8): initial error at time 1773762156: ext4_orphan_get:1417 [ 675.924042][ C1] EXT4-fs (loop8): last error at time 1773762156: ext4_orphan_get:1417 [ 675.958636][ T8908] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 676.108255][ T7222] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 676.512450][ T7071] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 679.405367][ T8937] loop6: detected capacity change from 0 to 16 [ 679.732164][ T8937] erofs (device loop6): mounted with root inode @ nid 36. [ 679.747836][ T8937] erofs (device loop6): readahead error at folio 2 @ nid 89 [ 680.000311][ T8392] erofs (device loop6): failed to decompress (lz4) corrupted compressed data @ pa 4096 size 4096 => 4868 [ 680.110690][ T29] audit: type=1800 audit(1773762160.264:35): pid=8937 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.642" name="file2" dev="loop6" ino=89 res=0 errno=0 [ 681.070889][ T8953] loop8: detected capacity change from 0 to 512 [ 681.111778][ T8953] EXT4-fs: Ignoring removed i_version option [ 681.118106][ T8953] EXT4-fs: Ignoring removed bh option [ 681.330873][ T8953] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 681.450300][ T8953] ext4 filesystem being mounted at /107/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 681.545838][ T8959] syzkaller0: entered promiscuous mode [ 681.580292][ T8959] syzkaller0: entered allmulticast mode [ 681.619131][ T8964] netlink: 'syz.0.651': attribute type 4 has an invalid length. [ 681.765675][ T8964] xt_hashlimit: size too large, truncated to 1048576 [ 681.803551][ T8964] xt_hashlimit: max too large, truncated to 1048576 [ 681.841718][ T7071] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 681.974506][ T8967] netlink: 20 bytes leftover after parsing attributes in process `syz.7.652'. [ 683.041656][ T8984] loop5: detected capacity change from 0 to 16 [ 683.137422][ T8984] erofs (device loop5): mounted with root inode @ nid 36. [ 683.154980][ T8984] erofs (device loop5): readahead error at folio 2 @ nid 89 [ 683.193983][ T8392] erofs (device loop5): failed to decompress (lz4) corrupted compressed data @ pa 4096 size 4096 => 4868 [ 683.215276][ T8984] erofs (device loop5): failed to decompress (lz4) corrupted compressed data @ pa 4096 size 4096 => 4096 [ 683.227379][ T8984] erofs (device loop5): read error -117 @ 0 of nid 89 [ 683.237537][ T29] audit: type=1800 audit(1773762163.604:36): pid=8984 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.657" name="file2" dev="loop5" ino=89 res=0 errno=0 [ 684.821341][ T8992] loop7: detected capacity change from 0 to 1024 [ 685.140206][ T8992] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 685.238649][ T8992] System zones: 0-1, 3-36 [ 685.275992][ T8999] netlink: 'syz.8.664': attribute type 4 has an invalid length. [ 685.390434][ T8992] EXT4-fs error (device loop7): ext4_orphan_get:1417: comm syz.7.661: bad orphan inode 134217728 [ 685.621631][ T8992] loop7: lost filesystem error report for type 5 error -117 [ 685.629823][ C0] EXT4-fs (loop7): error count since last fsck: 1 [ 685.645999][ C0] EXT4-fs (loop7): initial error at time 1773762165: ext4_orphan_get:1417 [ 685.655313][ C0] EXT4-fs (loop7): last error at time 1773762165: ext4_orphan_get:1417 [ 686.005031][ T8992] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 687.061543][ T9002] xt_hashlimit: size too large, truncated to 1048576 [ 687.623003][ T9002] xt_hashlimit: max too large, truncated to 1048576 [ 689.319518][ T9006] netlink: 'syz.0.665': attribute type 1 has an invalid length. [ 689.365337][ T8391] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 689.813110][ T9006] 8021q: adding VLAN 0 to HW filter on device bond6 [ 691.351769][ T9019] loop8: detected capacity change from 0 to 1024 [ 691.506869][ T9019] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 691.573745][ T9019] EXT4-fs (loop8): ext4_check_descriptors: Checksum for group 0 failed (7780!=20869) [ 691.675226][ T9019] EXT4-fs (loop8): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 691.819954][ T9019] EXT4-fs (loop8): external journal device major/minor numbers have changed [ 691.900483][ T9019] EXT4-fs (loop8): filesystem has both journal inode and journal device! [ 693.271914][ T9033] netlink: 'syz.7.676': attribute type 4 has an invalid length. [ 693.488844][ T9033] xt_hashlimit: size too large, truncated to 1048576 [ 693.530549][ T9033] xt_hashlimit: max too large, truncated to 1048576 [ 694.005069][ T9041] loop8: detected capacity change from 0 to 1024 [ 694.056924][ T9041] EXT4-fs: inline encryption not supported [ 694.243063][ T9041] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 694.779407][ T7071] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 695.213395][ T9063] loop6: detected capacity change from 0 to 16 [ 695.252078][ T9063] erofs (device loop6): mounted with root inode @ nid 36. [ 695.264926][ T9063] erofs (device loop6): readahead error at folio 2 @ nid 89 [ 695.285308][ T8392] erofs (device loop6): failed to decompress (lz4) corrupted compressed data @ pa 4096 size 4096 => 4868 [ 695.309089][ T9063] erofs (device loop6): failed to decompress (lz4) corrupted compressed data @ pa 4096 size 4096 => 4096 [ 695.322424][ T9063] erofs (device loop6): read error -117 @ 0 of nid 89 [ 695.350648][ T29] audit: type=1800 audit(1773762175.694:37): pid=9063 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.688" name="file2" dev="loop6" ino=89 res=0 errno=0 [ 695.493783][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 695.500882][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 696.807233][ T9076] netlink: 'syz.5.693': attribute type 4 has an invalid length. [ 697.452253][ T9081] xt_hashlimit: size too large, truncated to 1048576 [ 697.615634][ T9081] xt_hashlimit: max too large, truncated to 1048576 [ 703.089204][ T9121] lo: Caught tx_queue_len zero misconfig [ 703.811616][ T9132] netlink: 'syz.5.714': attribute type 4 has an invalid length. [ 703.840318][ T9132] xt_hashlimit: size too large, truncated to 1048576 [ 703.840393][ T9132] xt_hashlimit: max too large, truncated to 1048576 [ 708.198159][ T9179] netlink: 'syz.0.730': attribute type 4 has an invalid length. [ 708.402172][ T9179] xt_hashlimit: size too large, truncated to 1048576 [ 708.520790][ T9179] xt_hashlimit: max too large, truncated to 1048576 [ 714.254955][ T9221] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 714.302944][ T9228] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 715.271175][ T9241] netlink: 28 bytes leftover after parsing attributes in process `syz.8.748'. [ 715.441642][ T9243] loop5: detected capacity change from 0 to 512 [ 715.486126][ T9243] EXT4-fs (loop5): mounting ext2 file system using the ext4 subsystem [ 715.590030][ T9243] EXT4-fs error (device loop5): ext4_validate_block_bitmap:432: comm syz.5.749: bg 0: block 104: invalid block bitmap [ 715.590178][ T9243] loop5: lost filesystem error report for type 5 error -117 [ 715.602586][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 715.602695][ C1] EXT4-fs (loop5): initial error at time 1773762195: ext4_validate_block_bitmap:432 [ 715.602814][ C1] EXT4-fs (loop5): last error at time 1773762195: ext4_validate_block_bitmap:432 [ 715.613152][ T9243] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6685: Corrupt filesystem [ 715.613226][ T9243] loop5: lost filesystem error report for type 5 error -117 [ 715.627628][ T9243] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #11: comm syz.5.749: invalid indirect mapped block 1 (level 1) [ 715.627742][ T9243] loop5: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 715.643006][ T9243] EXT4-fs (loop5): 1 truncate cleaned up [ 715.644330][ T9243] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 716.141432][ T8395] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 716.610069][ T9249] loop6: detected capacity change from 0 to 512 [ 716.922002][ T9249] EXT4-fs (loop6): revision level too high, forcing read-only mode [ 716.923126][ T9249] EXT4-fs (loop6): orphan cleanup on readonly fs [ 716.996702][ T9249] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.752: bg 0: block 305: padding at end of block bitmap is not set [ 716.996853][ T9249] loop6: lost filesystem error report for type 5 error -117 [ 716.998130][ T9249] EXT4-fs (loop6): Remounting filesystem read-only [ 717.000028][ C1] EXT4-fs (loop6): error count since last fsck: 1 [ 717.000194][ C1] EXT4-fs (loop6): initial error at time 1773762197: ext4_validate_block_bitmap:441 [ 717.000322][ C1] EXT4-fs (loop6): last error at time 1773762197: ext4_validate_block_bitmap:441 [ 717.003271][ T9249] EXT4-fs (loop6): 1 truncate cleaned up [ 717.054526][ T1139] EXT4-fs (loop6): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 717.054663][ T1139] Quota error (device loop6): write_blk: dquota write failed [ 717.054746][ T1139] Quota error (device loop6): remove_free_dqentry: Can't write block (5) with free entries [ 717.054846][ T1139] EXT4-fs (loop6): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 717.055014][ T1139] Quota error (device loop6): write_blk: dquota write failed [ 717.055121][ T1139] Quota error (device loop6): free_dqentry: Can't move quota data block (5) to free list [ 717.055497][ T1139] EXT4-fs (loop6): Quota write (off=8, len=24) cancelled because transaction is not started [ 717.055614][ T1139] Quota error (device loop6): v2_write_file_info: Can't write info structure [ 717.056141][ T1139] Quota error (device loop6): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 717.065737][ T9249] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 717.450976][ T7222] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 717.914564][ T9262] sch_tbf: burst 4 is lower than device syzkaller0 mtu (1500) ! [ 717.923313][ T9262] syzkaller0: entered promiscuous mode [ 717.923409][ T9262] syzkaller0: entered allmulticast mode [ 717.949931][ T8092] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 718.080297][ T8092] usb 9-1: device descriptor read/64, error -71 [ 719.976594][ T9272] netlink: 28 bytes leftover after parsing attributes in process `syz.7.760'. [ 720.200880][ T8092] usb 9-1: new high-speed USB device number 9 using dummy_hcd [ 720.349986][ T8092] usb 9-1: device descriptor read/64, error -71 [ 720.461264][ T8092] usb usb9-port1: attempt power cycle [ 720.694944][ T9268] loop6: detected capacity change from 0 to 8192 [ 720.759562][ T9277] loop5: detected capacity change from 0 to 512 [ 720.840219][ T8092] usb 9-1: new high-speed USB device number 10 using dummy_hcd [ 720.863289][ T9277] EXT4-fs (loop5): mounting ext2 file system using the ext4 subsystem [ 720.892849][ T29] audit: type=1800 audit(1773762201.234:38): pid=9268 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.758" name="file1" dev="loop6" ino=1048643 res=0 errno=0 [ 720.947483][ T8092] usb 9-1: device descriptor read/8, error -71 [ 721.087623][ T9277] EXT4-fs error (device loop5): ext4_validate_block_bitmap:432: comm syz.5.761: bg 0: block 104: invalid block bitmap [ 721.197112][ T9277] loop5: lost filesystem error report for type 5 error -117 [ 721.199795][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 721.217548][ C0] EXT4-fs (loop5): initial error at time 1773762201: ext4_validate_block_bitmap:432 [ 721.227623][ C0] EXT4-fs (loop5): last error at time 1773762201: ext4_validate_block_bitmap:432 [ 721.315377][ T9277] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6685: Corrupt filesystem [ 721.343800][ T9277] loop5: lost filesystem error report for type 5 error -117 [ 721.354017][ T9277] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #11: comm syz.5.761: invalid indirect mapped block 1 (level 1) [ 721.503040][ T9277] loop5: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 721.513609][ T9277] EXT4-fs (loop5): 1 truncate cleaned up [ 721.612221][ T9277] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 722.184258][ T8395] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 722.474341][ T9298] sch_tbf: burst 4 is lower than device syzkaller0 mtu (1500) ! [ 722.552539][ T9294] syzkaller0: entered promiscuous mode [ 722.586775][ T9294] syzkaller0: entered allmulticast mode [ 723.220797][ T9307] netlink: 28 bytes leftover after parsing attributes in process `syz.0.772'. [ 725.242097][ T9319] tmpfs: Bad value for 'nr_inodes' [ 726.082467][ T9327] netlink: 12 bytes leftover after parsing attributes in process `syz.5.780'. [ 726.098585][ T9328] loop8: detected capacity change from 0 to 128 [ 726.184763][ T9328] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 726.190887][ T9328] ext4 filesystem being mounted at /134/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 727.490732][ T9340] sch_tbf: burst 4 is lower than device syzkaller0 mtu (1500) ! [ 727.588089][ T9337] syzkaller0: entered promiscuous mode [ 727.648722][ T9337] syzkaller0: entered allmulticast mode [ 728.075600][ T9344] loop7: detected capacity change from 0 to 764 [ 728.575148][ T9344] rock: directory entry would overflow storage [ 728.684387][ T9344] rock: sig=0x4f50, size=4, remaining=3 [ 728.720922][ T9344] iso9660: Corrupted directory entry in block 6 of inode 1792 [ 729.598783][ T7071] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 729.827255][ T9355] loop7: detected capacity change from 0 to 128 [ 729.884156][ T9354] loop5: detected capacity change from 0 to 512 [ 729.924817][ T9354] EXT4-fs (loop5): mounting ext2 file system using the ext4 subsystem [ 729.931777][ T9355] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 730.080048][ T9355] ext4 filesystem being mounted at /44/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 730.080526][ T9354] EXT4-fs error (device loop5): ext4_validate_block_bitmap:432: comm syz.5.793: bg 0: block 104: invalid block bitmap [ 730.161934][ T9354] loop5: lost filesystem error report for type 5 error -117 [ 730.169755][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 730.184278][ C0] EXT4-fs (loop5): initial error at time 1773762210: ext4_validate_block_bitmap:432 [ 730.194160][ C0] EXT4-fs (loop5): last error at time 1773762210: ext4_validate_block_bitmap:432 [ 730.780648][ T9354] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6685: Corrupt filesystem [ 731.140117][ T9354] loop5: lost filesystem error report for type 5 error -117 [ 731.141869][ T9354] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #11: comm syz.5.793: invalid indirect mapped block 1 (level 1) [ 731.194331][ T9365] loop6: detected capacity change from 0 to 128 [ 731.342013][ T9354] loop5: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 731.345144][ T9354] EXT4-fs (loop5): 1 truncate cleaned up [ 731.483805][ T9354] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 732.196748][ T8395] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 732.568878][ T9374] bridge_slave_0: left allmulticast mode [ 732.577192][ T9374] bridge_slave_0: left promiscuous mode [ 732.586115][ T9374] bridge0: port 1(bridge_slave_0) entered disabled state [ 732.680279][ T8391] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 732.723974][ T9374] bridge_slave_1: left allmulticast mode [ 732.800085][ T9374] bridge_slave_1: left promiscuous mode [ 732.884886][ T9374] bridge0: port 2(bridge_slave_1) entered disabled state [ 733.105658][ T9374] team0: Port device team_slave_0 removed [ 733.165070][ T9383] loop8: detected capacity change from 0 to 1024 [ 733.278964][ T9374] team0: Port device team_slave_1 removed [ 733.312573][ T9374] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 733.396202][ T9383] EXT4-fs (loop8): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: writeback. [ 733.413802][ T9374] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 733.481401][ T9383] ext4 filesystem being mounted at /136/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 733.498889][ T9374] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 733.886401][ T9394] tmpfs: Bad value for 'nr_inodes' [ 734.005878][ T7071] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 734.249749][ T9398] netlink: 132 bytes leftover after parsing attributes in process `syz.0.808'. [ 734.660084][ T7498] usb 9-1: new high-speed USB device number 12 using dummy_hcd [ 734.825542][ T9409] netlink: 'syz.5.811': attribute type 1 has an invalid length. [ 734.917713][ T7498] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 735.003606][ T7498] usb 9-1: config 0 has no interfaces? [ 735.038635][ T7498] usb 9-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 735.067231][ T9409] 8021q: adding VLAN 0 to HW filter on device bond1 [ 735.098687][ T7498] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 735.138529][ T7498] usb 9-1: Product: syz [ 735.147630][ T7498] usb 9-1: Manufacturer: syz [ 735.173971][ T7498] usb 9-1: SerialNumber: syz [ 735.194955][ T9415] bond1: entered promiscuous mode [ 735.208042][ T7498] usb 9-1: config 0 descriptor?? [ 735.336387][ T9416] dummy0: entered promiscuous mode [ 735.370037][ T9416] bond1: (slave dummy0): Enslaving as an active interface with an up link [ 735.430560][ T9408] bond1: left promiscuous mode [ 735.435717][ T9408] dummy0: left promiscuous mode [ 735.613935][ T9425] netlink: 4 bytes leftover after parsing attributes in process `syz.6.815'. [ 737.671319][ T7498] usb 9-1: USB disconnect, device number 12 [ 737.829041][ T9450] loop6: detected capacity change from 0 to 512 [ 737.906133][ T9450] EXT4-fs: old and new quota format mixing [ 738.521251][ T9457] netlink: 'syz.6.827': attribute type 1 has an invalid length. [ 738.560065][ T5779] Bluetooth: hci5: command 0x0406 tx timeout [ 738.566968][ T8392] Bluetooth: hci4: command 0x0406 tx timeout [ 738.617042][ T9457] 8021q: adding VLAN 0 to HW filter on device bond1 [ 738.682360][ T9457] bond1: entered promiscuous mode [ 738.706781][ T9457] dummy0: entered promiscuous mode [ 738.715928][ T9457] bond1: (slave dummy0): Enslaving as an active interface with an up link [ 738.727029][ T9456] bond1: left promiscuous mode [ 738.732924][ T9456] dummy0: left promiscuous mode [ 739.281726][ T9468] loop8: detected capacity change from 0 to 128 [ 740.122199][ T9474] syzkaller0: entered promiscuous mode [ 740.241315][ T9474] syzkaller0: entered allmulticast mode [ 741.920267][ T7498] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 742.115055][ T7498] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 742.171289][ T7498] usb 6-1: config 0 has no interfaces? [ 742.242628][ T7498] usb 6-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 742.266606][ T7498] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 742.285186][ T7498] usb 6-1: Product: syz [ 742.290724][ T7498] usb 6-1: Manufacturer: syz [ 742.295915][ T7498] usb 6-1: SerialNumber: syz [ 742.315305][ T7498] usb 6-1: config 0 descriptor?? [ 742.620841][ T9496] netlink: 4 bytes leftover after parsing attributes in process `syz.7.842'. [ 743.604169][ T9519] loop7: detected capacity change from 0 to 512 [ 743.706280][ T9519] EXT4-fs (loop7): revision level too high, forcing read-only mode [ 743.721520][ T9519] EXT4-fs (loop7): orphan cleanup on readonly fs [ 743.848991][ T9519] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm syz.7.848: bg 0: block 305: padding at end of block bitmap is not set [ 743.911078][ T9519] loop7: lost filesystem error report for type 5 error -117 [ 743.919036][ T9519] EXT4-fs (loop7): Remounting filesystem read-only [ 743.927083][ C0] EXT4-fs (loop7): error count since last fsck: 1 [ 743.927177][ C0] EXT4-fs (loop7): initial error at time 1773762224: ext4_validate_block_bitmap:441 [ 743.927292][ C0] EXT4-fs (loop7): last error at time 1773762224: ext4_validate_block_bitmap:441 [ 743.981453][ T9519] EXT4-fs (loop7): 1 truncate cleaned up [ 744.030644][ T7675] EXT4-fs (loop7): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 744.052248][ T7675] Quota error (device loop7): write_blk: dquota write failed [ 744.085154][ T7675] Quota error (device loop7): remove_free_dqentry: Can't write block (5) with free entries [ 744.106075][ T7675] EXT4-fs (loop7): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 744.124038][ T7675] Quota error (device loop7): write_blk: dquota write failed [ 744.137061][ T7675] Quota error (device loop7): free_dqentry: Can't move quota data block (5) to free list [ 744.148977][ T7675] EXT4-fs (loop7): Quota write (off=8, len=24) cancelled because transaction is not started [ 744.160834][ T7675] Quota error (device loop7): v2_write_file_info: Can't write info structure [ 744.178387][ T7675] Quota error (device loop7): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 744.197113][ T9519] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 744.571742][ T8391] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 744.824512][ T7498] usb 6-1: USB disconnect, device number 2 [ 745.063507][ T9539] netlink: 4 bytes leftover after parsing attributes in process `syz.7.856'. [ 745.775963][ T9556] netlink: 84 bytes leftover after parsing attributes in process `syz.7.861'. [ 745.846897][ T9550] 9p: Could not find request transport: fd0x0000000000000003 [ 746.535793][ T7498] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 746.591040][ T5831] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 746.753090][ T7498] usb 8-1: Using ep0 maxpacket: 32 [ 746.814931][ T7498] usb 8-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 746.845391][ T5831] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 746.856020][ T7498] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 746.861096][ T7498] usb 8-1: config 0 descriptor?? [ 746.926237][ T5831] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 746.952002][ T9573] netlink: 4 bytes leftover after parsing attributes in process `syz.0.871'. [ 747.005930][ T5831] usb 6-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 747.043730][ T5831] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 747.058341][ T5831] usb 6-1: Product: syz [ 747.064237][ T5831] usb 6-1: Manufacturer: syz [ 747.094800][ T5831] usb 6-1: SerialNumber: syz [ 747.126515][ T5831] usb 6-1: config 0 descriptor?? [ 747.157439][ T7498] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 747.193930][ T7498] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 747.253408][ T7498] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 747.291008][ T7498] usb 8-1: media controller created [ 747.399325][ T7498] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 747.842923][ T9582] 9p: Could not find request transport: fd0x0000000000000003 [ 748.015172][ T9595] netlink: 84 bytes leftover after parsing attributes in process `syz.0.876'. [ 748.350039][ T7498] stb0899_attach: Driver disabled by Kconfig [ 748.356668][ T7498] az6027: no front-end attached [ 748.356668][ T7498] [ 748.407316][ T7498] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 748.424481][ T7498] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.7/usb8/8-1/input/input8 [ 748.450023][ T9601] netlink: 12 bytes leftover after parsing attributes in process `syz.8.877'. [ 748.491625][ T7498] dvb-usb: schedule remote query interval to 400 msecs. [ 748.498782][ T7498] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 748.617255][ T7498] usb 8-1: USB disconnect, device number 2 [ 749.055198][ T7498] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 749.595773][ T5831] usb 6-1: USB disconnect, device number 3 [ 749.994668][ T9622] 9pnet_fd: Insufficient options for proto=fd [ 750.140692][ T9627] netlink: 84 bytes leftover after parsing attributes in process `syz.7.888'. [ 750.177230][ T9629] syzkaller0: entered promiscuous mode [ 750.197849][ T9629] syzkaller0: entered allmulticast mode [ 750.633699][ T9634] netlink: 12 bytes leftover after parsing attributes in process `syz.6.891'. [ 751.479601][ T7498] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 751.672699][ T7498] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 751.719917][ T7498] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 751.759292][ T7498] usb 7-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 751.830129][ T7498] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 751.871040][ T7498] usb 7-1: Product: syz [ 751.878812][ T7498] usb 7-1: Manufacturer: syz [ 751.890062][ T7498] usb 7-1: SerialNumber: syz [ 751.919266][ T7498] usb 7-1: config 0 descriptor?? [ 752.012662][ T9662] netlink: 84 bytes leftover after parsing attributes in process `syz.0.903'. [ 752.546082][ T9673] syzkaller0: entered promiscuous mode [ 752.597771][ T9673] syzkaller0: entered allmulticast mode [ 752.634884][ T9658] netlink: 'syz.5.901': attribute type 13 has an invalid length. [ 752.687373][ T9680] netlink: 12 bytes leftover after parsing attributes in process `syz.7.906'. [ 753.477111][ T8092] usb 9-1: new high-speed USB device number 13 using dummy_hcd [ 753.660054][ T8092] usb 9-1: Using ep0 maxpacket: 32 [ 753.691802][ T8092] usb 9-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 753.718830][ T8092] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 753.747190][ T8092] usb 9-1: config 0 descriptor?? [ 753.924535][ T9699] netlink: 84 bytes leftover after parsing attributes in process `syz.0.914'. [ 754.030214][ T8092] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 754.053664][ T8092] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 754.095564][ T8092] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 754.136990][ T8092] usb 9-1: media controller created [ 754.275158][ T8092] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 754.556646][ T7498] usb 7-1: USB disconnect, device number 16 [ 755.232384][ T8092] stb0899_attach: Driver disabled by Kconfig [ 755.238553][ T8092] az6027: no front-end attached [ 755.238553][ T8092] [ 755.282983][ T8092] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 755.330220][ T8092] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.8/usb9/9-1/input/input9 [ 755.422205][ T8092] dvb-usb: schedule remote query interval to 400 msecs. [ 755.505578][ T8092] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 755.601132][ T8092] usb 9-1: USB disconnect, device number 13 [ 756.096907][ T9719] netlink: 'syz.5.923': attribute type 13 has an invalid length. [ 756.124907][ T9719] netlink: 'syz.5.923': attribute type 27 has an invalid length. [ 756.138022][ T8092] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 756.268085][ T9733] netlink: 84 bytes leftover after parsing attributes in process `syz.6.927'. [ 756.729489][ T9738] loop6: detected capacity change from 0 to 512 [ 756.779098][ T9738] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 756.850036][ T8092] usb 9-1: new high-speed USB device number 14 using dummy_hcd [ 756.906190][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 756.913493][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 756.922967][ T9738] EXT4-fs (loop6): 1 orphan inode deleted [ 756.954819][ T9738] EXT4-fs (loop6): 1 truncate cleaned up [ 756.979430][ T9738] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 757.055328][ T8092] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 757.097472][ T8092] usb 9-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 757.146349][ T8092] usb 9-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 757.188532][ T8092] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 757.240294][ T8092] usb 9-1: Product: syz [ 757.255797][ T8092] usb 9-1: Manufacturer: syz [ 757.268356][ T8092] usb 9-1: SerialNumber: syz [ 757.300996][ T8092] usb 9-1: config 0 descriptor?? [ 757.466920][ T7222] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 758.955995][ T9776] netlink: 12 bytes leftover after parsing attributes in process `syz.5.944'. [ 762.662128][ T8092] usb 9-1: USB disconnect, device number 14 [ 762.721886][ T9792] bond1: (slave dummy0): Releasing backup interface [ 762.943194][ T9798] loop8: detected capacity change from 0 to 128 [ 762.988704][ T9798] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 763.083858][ T9798] ext4 filesystem being mounted at /158/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 763.719889][ T8092] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 763.964518][ T8092] usb 7-1: Using ep0 maxpacket: 32 [ 763.983541][ T7071] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 764.014993][ T8092] usb 7-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 764.084048][ T8092] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 764.117929][ T8092] usb 7-1: config 0 descriptor?? [ 764.356101][ T8092] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 764.390327][ T8092] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 764.422159][ T8092] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 764.462804][ T8092] usb 7-1: media controller created [ 764.714934][ T8092] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 765.122113][ T9828] loop7: detected capacity change from 0 to 1024 [ 768.924668][ T9828] EXT4-fs: error -4 creating inode table initialization thread [ 769.024057][ T9828] EXT4-fs (loop7): mount failed [ 769.236576][ T8092] az6027: usb out operation failed. (-110) [ 769.244184][ T8092] stb0899_attach: Driver disabled by Kconfig [ 769.250553][ T8092] az6027: no front-end attached [ 769.250553][ T8092] [ 769.264702][ T8092] az6027: usb out operation failed. (-32) [ 769.270744][ T8092] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 769.301451][ T8092] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.6/usb7/7-1/input/input10 [ 770.240993][ T8092] dvb-usb: schedule remote query interval to 400 msecs. [ 770.248623][ T8092] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 770.262243][ T8092] usb 7-1: USB disconnect, device number 17 [ 770.612358][ T9845] 9pnet_fd: Insufficient options for proto=fd [ 770.877057][ T8085] udevd[8085]: setting mode of /dev/input/event4 to 020660 failed: No such file or directory [ 770.931806][ T8085] udevd[8085]: setting owner of /dev/input/event4 to uid=0, gid=104 failed: No such file or directory [ 771.342219][ T8092] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 774.577885][ T9872] netlink: 20 bytes leftover after parsing attributes in process `syz.8.977'. [ 774.942634][ T9878] netlink: 20 bytes leftover after parsing attributes in process `syz.8.977'. [ 775.104666][ T5831] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 775.324218][ T5831] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 775.358107][ T5831] usb 7-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 775.388867][ T5831] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 775.420115][ T5831] usb 7-1: Product: syz [ 775.430975][ T5831] usb 7-1: Manufacturer: syz [ 775.446696][ T5831] usb 7-1: SerialNumber: syz [ 775.512784][ T5831] usb 7-1: config 0 descriptor?? [ 778.331780][ T9913] syzkaller0: entered promiscuous mode [ 778.405413][ T9913] syzkaller0: entered allmulticast mode [ 778.412270][ T5831] usb 7-1: USB disconnect, device number 18 [ 778.910353][ T9912] sch_tbf: burst 3 is lower than device syzkaller0 mtu (1514) ! [ 778.971429][ T9912] tipc: Started in network mode [ 779.020514][ T9912] tipc: Node identity d6188245d959, cluster identity 4711 [ 779.028515][ T9912] tipc: Enabled bearer , priority 0 [ 779.159563][ T9910] tipc: Resetting bearer [ 779.269379][ T9910] tipc: Disabling bearer [ 780.090970][ T9934] loop6: detected capacity change from 0 to 128 [ 781.104183][ T9946] syzkaller0: entered promiscuous mode [ 781.210585][ T9946] syzkaller0: entered allmulticast mode [ 781.749462][ T9949] netlink: 'syz.8.1005': attribute type 13 has an invalid length. [ 782.561319][ T9949] A link change request failed with some changes committed already. Interface teql0 may have been left with an inconsistent configuration, please check. [ 785.721919][ T9991] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1019'. [ 787.544709][T10005] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1024'. [ 789.517806][T10035] loop5: detected capacity change from 0 to 128 [ 790.088610][T10035] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 790.164495][T10035] ext4 filesystem being mounted at /79/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 790.232599][T10025] netlink: 'syz.8.1032': attribute type 13 has an invalid length. [ 790.502685][T10025] A link change request failed with some changes committed already. Interface teql0 may have been left with an inconsistent configuration, please check. [ 790.838283][ T8395] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 793.489262][T10050] syzkaller0: entered promiscuous mode [ 793.575606][T10050] syzkaller0: entered allmulticast mode [ 794.644973][T10059] syzkaller0: entered promiscuous mode [ 794.692081][T10059] syzkaller0: entered allmulticast mode [ 798.380397][T10097] Illegal XDP return value 158298112 on prog (id 38) dev syz_tun, expect packet loss! [ 799.126414][T10105] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1054'. [ 799.321544][T10106] loop7: detected capacity change from 0 to 128 [ 799.555839][T10106] syz_tun: entered allmulticast mode [ 802.110088][T10123] netlink: 144 bytes leftover after parsing attributes in process `syz.7.1060'. [ 803.180715][T10126] loop8: detected capacity change from 0 to 2048 [ 803.402019][T10126] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 803.636528][ T29] audit: type=1804 audit(1773762283.974:39): pid=10126 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.8.1062" name=2F6E6577726F6F742F3137382F66696C65302F02 dev="loop8" ino=18 res=1 errno=0 [ 804.138967][T10147] loop7: detected capacity change from 0 to 512 [ 804.211478][ T7071] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 804.323532][T10147] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 804.360685][T10147] ext4 filesystem being mounted at /100/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 805.281971][ T8391] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 807.366629][T10186] loop7: detected capacity change from 0 to 2048 [ 807.777406][T10186] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 808.123436][ T29] audit: type=1804 audit(1773762288.484:40): pid=10186 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.7.1081" name=2F6E6577726F6F742F3130322F66696C65302F02 dev="loop7" ino=18 res=1 errno=0 [ 808.943091][ T8391] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 810.608330][T10231] ===================================================== [ 810.619952][T10231] BUG: KMSAN: uninit-value in batadv_get_vid+0x2ce/0x3b0 [ 810.628288][T10231] batadv_get_vid+0x2ce/0x3b0 [ 810.634895][T10231] batadv_interface_tx+0x2e8/0x1dd0 [ 810.642515][T10231] dev_hard_start_xmit+0x24e/0xad0 [ 810.648957][T10231] __dev_queue_xmit+0x3412/0x5980 [ 810.655505][T10231] __bpf_redirect+0x162e/0x1760 [ 810.662356][T10231] bpf_clone_redirect+0x4a6/0x6c0 [ 810.668766][T10231] ___bpf_prog_run+0x12af/0xeb60 [ 810.678817][T10231] __bpf_prog_run512+0xc5/0x100 [ 810.685957][T10231] bpf_test_run+0x493/0xdf0 [ 810.693256][T10231] bpf_prog_test_run_skb+0x22a5/0x3050 [ 810.700914][T10231] bpf_prog_test_run+0x5bb/0x9f0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 810.706815][T10231] __sys_bpf+0x925/0xee0 [ 810.711934][T10231] __x64_sys_bpf+0xa4/0xf0 [ 810.717788][T10231] x64_sys_call+0x13d0/0x3ea0 [ 810.724032][T10231] do_syscall_64+0x134/0xf80 [ 810.729754][T10231] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 810.736700][T10231] [ 810.739113][T10231] Uninit was created at: [ 810.745048][T10231] kmem_cache_alloc_node_noprof+0x3cd/0x12d0 [ 810.752456][T10231] pskb_expand_head+0x2ef/0x1fb0 [ 810.758456][T10231] skb_ensure_writable+0x44e/0x510 [ 810.764619][T10231] bpf_clone_redirect+0x301/0x6c0 [ 810.771780][T10231] ___bpf_prog_run+0x12af/0xeb60 [ 810.778726][T10231] __bpf_prog_run512+0xc5/0x100 [ 810.784259][T10231] bpf_test_run+0x493/0xdf0 [ 810.790251][T10231] bpf_prog_test_run_skb+0x22a5/0x3050 [ 810.796793][T10231] bpf_prog_test_run+0x5bb/0x9f0 [ 810.803269][T10231] __sys_bpf+0x925/0xee0 [ 810.810227][T10231] __x64_sys_bpf+0xa4/0xf0 [ 810.815415][T10231] x64_sys_call+0x13d0/0x3ea0 [ 810.820570][T10231] do_syscall_64+0x134/0xf80 [ 810.826049][T10231] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 810.834068][T10231] [ 810.837940][T10231] CPU: 0 UID: 0 PID: 10231 Comm: syz.5.1097 Not tainted syzkaller #0 PREEMPT(full) [ 810.848609][T10231] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 810.860715][T10231] ===================================================== [ 810.868194][T10231] Disabling lock debugging due to kernel taint [ 810.875019][T10231] Kernel panic - not syncing: kmsan.panic set ... [ 810.882559][T10231] CPU: 0 UID: 0 PID: 10231 Comm: syz.5.1097 Tainted: G B syzkaller #0 PREEMPT(full) [ 810.894599][T10231] Tainted: [B]=BAD_PAGE [ 810.900945][T10231] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 810.913865][T10231] Call Trace: [ 810.917243][T10231] [ 810.921521][T10231] __dump_stack+0x26/0x30 [ 810.926846][T10231] dump_stack_lvl+0x50/0x1c0 [ 810.934163][T10231] ? dump_stack+0x12/0x25 [ 810.939427][T10231] dump_stack+0x1e/0x25 [ 810.944550][T10231] vpanic+0x7b4/0x1430 [ 810.950952][T10231] panic+0x15d/0x160 [ 810.955871][T10231] kmsan_report+0x31a/0x320 [ 810.961365][T10231] ? __msan_warning+0x1b/0x30 [ 810.967153][T10231] ? batadv_get_vid+0x2ce/0x3b0 [ 810.972971][T10231] ? batadv_interface_tx+0x2e8/0x1dd0 [ 810.979734][T10231] ? dev_hard_start_xmit+0x24e/0xad0 [ 810.985885][T10231] ? __dev_queue_xmit+0x3412/0x5980 [ 810.992436][T10231] ? __bpf_redirect+0x162e/0x1760 [ 810.998966][T10231] ? bpf_clone_redirect+0x4a6/0x6c0 [ 811.005917][T10231] ? ___bpf_prog_run+0x12af/0xeb60 [ 811.012092][T10231] ? __bpf_prog_run512+0xc5/0x100 [ 811.019431][T10231] ? bpf_test_run+0x493/0xdf0 [ 811.025945][T10231] ? bpf_prog_test_run_skb+0x22a5/0x3050 [ 811.033596][T10231] ? bpf_prog_test_run+0x5bb/0x9f0 [ 811.039695][T10231] ? __sys_bpf+0x925/0xee0 [ 811.045104][T10231] ? __x64_sys_bpf+0xa4/0xf0 [ 811.053554][T10231] ? x64_sys_call+0x13d0/0x3ea0 [ 811.060198][T10231] ? do_syscall_64+0x134/0xf80 [ 811.066034][T10231] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 811.073767][T10231] ? kernel_text_address+0x10e/0x1a0 [ 811.084307][T10231] ? kmsan_get_metadata+0xf1/0x160 [ 811.090538][T10231] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 811.097982][T10231] ? kmsan_get_metadata+0xf1/0x160 [ 811.103515][T10231] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 811.110165][T10231] ? batadv_interface_tx+0x11/0x1dd0 [ 811.115808][T10231] ? filter_irq_stacks+0x49/0x190 [ 811.122269][T10231] ? kmsan_get_metadata+0xf1/0x160 [ 811.128624][T10231] __msan_warning+0x1b/0x30 [ 811.134422][T10231] batadv_get_vid+0x2ce/0x3b0 [ 811.139525][T10231] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 811.146287][T10231] batadv_interface_tx+0x2e8/0x1dd0 [ 811.152914][T10231] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 811.160541][T10231] ? __pfx_batadv_interface_tx+0x10/0x10 [ 811.166909][T10231] dev_hard_start_xmit+0x24e/0xad0 [ 811.175053][T10231] __dev_queue_xmit+0x3412/0x5980 [ 811.180881][T10231] ? skb_release_data+0x107c/0x11b0 [ 811.186519][T10231] ? kmsan_internal_memmove_metadata+0x91/0x230 [ 811.194932][T10231] ? kmsan_get_metadata+0xf1/0x160 [ 811.200304][T10231] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 811.207890][T10231] ? __dev_queue_xmit+0x27a/0x5980 [ 811.213607][T10231] ? pskb_expand_head+0x1c0e/0x1fb0 [ 811.221255][T10231] ? kmsan_get_metadata+0xf1/0x160 [ 811.227523][T10231] __bpf_redirect+0x162e/0x1760 [ 811.233152][T10231] ? kmsan_get_metadata+0xf1/0x160 [ 811.238921][T10231] bpf_clone_redirect+0x4a6/0x6c0 [ 811.244453][T10231] ___bpf_prog_run+0x12af/0xeb60 [ 811.250746][T10231] __bpf_prog_run512+0xc5/0x100 [ 811.257287][T10231] ? kmsan_internal_poison_memory+0x78/0x90 [ 811.263818][T10231] ? kmsan_internal_poison_memory+0x4a/0x90 [ 811.271677][T10231] ? kmsan_slab_alloc+0xdc/0x160 [ 811.278151][T10231] ? kmem_cache_alloc_noprof+0x37b/0x1270 [ 811.284407][T10231] ? slab_build_skb+0x5c/0x5b0 [ 811.289908][T10231] ? bpf_prog_test_run_skb+0x74d/0x3050 [ 811.296858][T10231] ? bpf_prog_test_run+0x5bb/0x9f0 [ 811.303111][T10231] ? __sys_bpf+0x925/0xee0 [ 811.307880][T10231] ? kmsan_get_metadata+0xf1/0x160 [ 811.313281][T10231] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 811.319407][T10231] ? bpf_test_run+0xf1/0xdf0 [ 811.324265][T10231] ? filter_irq_stacks+0x49/0x190 [ 811.330448][T10231] ? kmsan_get_metadata+0xf1/0x160 [ 811.336387][T10231] ? kmsan_get_metadata+0xf1/0x160 [ 811.342554][T10231] ? kmsan_get_metadata+0xf1/0x160 [ 811.350434][T10231] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 811.361126][T10231] ? kmsan_get_metadata+0x146/0x160 [ 811.367447][T10231] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 811.373836][T10231] ? __pfx___bpf_prog_run512+0x10/0x10 [ 811.381273][T10231] ? __pfx___bpf_prog_run512+0x10/0x10 [ 811.387442][T10231] bpf_test_run+0x493/0xdf0 [ 811.392469][T10231] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 811.400192][T10231] ? kmsan_get_metadata+0xf1/0x160 [ 811.405949][T10231] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 811.416671][T10231] ? bpf_test_run+0x2f4/0xdf0 [ 811.422678][T10231] ? kmsan_get_metadata+0xf1/0x160 [ 811.428705][T10231] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 811.435597][T10231] bpf_prog_test_run_skb+0x22a5/0x3050 [ 811.442808][T10231] ? kmsan_get_metadata+0xf1/0x160 [ 811.448720][T10231] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 811.456177][T10231] bpf_prog_test_run+0x5bb/0x9f0 [ 811.462013][T10231] __sys_bpf+0x925/0xee0 [ 811.467001][T10231] __x64_sys_bpf+0xa4/0xf0 [ 811.472735][T10231] x64_sys_call+0x13d0/0x3ea0 [ 811.477695][T10231] do_syscall_64+0x134/0xf80 [ 811.482481][T10231] ? clear_bhb_loop+0x50/0xa0 [ 811.487334][T10231] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 811.495587][T10231] RIP: 0033:0x7f718359c799 [ 811.500837][T10231] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 811.522357][T10231] RSP: 002b:00007f7184445028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 811.531476][T10231] RAX: ffffffffffffffda RBX: 00007f7183815fa0 RCX: 00007f718359c799 [ 811.541874][T10231] RDX: 0000000000000050 RSI: 0000200000000080 RDI: 000000000000000a [ 811.552374][T10231] RBP: 00007f7183632c99 R08: 0000000000000000 R09: 0000000000000000 [ 811.562275][T10231] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 811.570676][T10231] R13: 00007f7183816038 R14: 00007f7183815fa0 R15: 00007ffd5fd9a428 [ 811.579117][T10231] [ 811.583039][T10231] Kernel Offset: disabled [ 811.588701][T10231] Rebooting in 86400 seconds..