last executing test programs: 3m13.522007803s ago: executing program 0 (id=92): r0 = landlock_create_ruleset(&(0x7f00000001c0)={0xa019, 0x1, 0x3}, 0x18, 0x0) landlock_restrict_self(r0, 0x1) r1 = socket$unix(0x1, 0x2, 0x0) r2 = socket$unix(0x1, 0x2, 0x0) bind$unix(r2, &(0x7f0000003000)=@file={0x1}, 0x6e) connect$unix(r1, &(0x7f0000000640)=@file={0x1}, 0x6e) 3m12.514808726s ago: executing program 0 (id=97): r0 = syz_io_uring_setup(0x72, &(0x7f0000000140)={0x0, 0x7479, 0x10000, 0x1, 0x1fc}, &(0x7f0000000280)=0x0, &(0x7f0000000380)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) io_uring_enter(r0, 0x15cb, 0xfe3, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x7ef9, 0xec40, 0x40, 0x0, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fdinfo/3\x00') preadv(r2, &(0x7f00000000c0)=[{&(0x7f0000000040)=""/24, 0x18}], 0x1, 0x6, 0x0) 3m11.275508568s ago: executing program 0 (id=103): r0 = socket(0x15, 0x5, 0x0) setsockopt$sock_int(r0, 0x1, 0x2e, &(0x7f0000000040)=0x3, 0x4) r1 = syz_io_uring_setup(0x10a, &(0x7f0000000140)={0x0, 0x5883, 0x0, 0x0, 0xfffffdfc}, &(0x7f0000000040)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x4004, @fd_index=0x3, 0x0, 0x0}) io_uring_enter(r1, 0x3516, 0x0, 0x0, 0x0, 0x0) 3m2.904953664s ago: executing program 0 (id=133): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) chroot(&(0x7f0000000100)='./file0\x00') mount(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000180)='ramfs\x00', 0x2014050, 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000240)='./file0/../file0\x00') 3m2.171817526s ago: executing program 0 (id=138): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_int(r0, 0x0, 0x7, &(0x7f00000002c0)=0x803, 0x4) syz_emit_ethernet(0x2e, &(0x7f0000000100)={@local, @random="facfff00716e", @void, {@ipv4={0x800, @udp={{0x6, 0x4, 0x0, 0x0, 0x20, 0x2, 0x0, 0x0, 0x11, 0x0, @empty, @empty, {[@rr={0x7, 0x3, 0xab}]}}, {0x0, 0x4e20, 0x8}}}}}, 0x0) setsockopt$inet_int(r0, 0x0, 0x17, &(0x7f0000003540)=0x5, 0x4) recvmmsg(r0, &(0x7f0000001cc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001c80)}, 0x5}], 0x1, 0x2, 0x0) 3m1.14555539s ago: executing program 0 (id=140): r0 = syz_io_uring_setup(0x24fd, &(0x7f0000000180)={0x0, 0x0, 0x10100, 0xfffffffe}, &(0x7f0000000400)=0x0, &(0x7f0000000100)=0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f0000000040)=ANY=[@ANYBLOB='1'], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}) io_uring_enter(r0, 0x2d3e, 0x0, 0x0, 0x0, 0x0) 2m58.096409774s ago: executing program 32 (id=140): r0 = syz_io_uring_setup(0x24fd, &(0x7f0000000180)={0x0, 0x0, 0x10100, 0xfffffffe}, &(0x7f0000000400)=0x0, &(0x7f0000000100)=0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f0000000040)=ANY=[@ANYBLOB='1'], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}) io_uring_enter(r0, 0x2d3e, 0x0, 0x0, 0x0, 0x0) 11.796386886s ago: executing program 4 (id=649): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) syz_mount_image$hfsplus(&(0x7f00000000c0), &(0x7f0000000080)='./file1\x00', 0x4800, &(0x7f0000000180)=ANY=[@ANYRES8=0x0, @ANYRES64, @ANYRES64=r0], 0x1, 0x6c5, &(0x7f0000001380)="$eJzs3c1vHGcZAPBn1uuPTdPETZM2oIpajQQIi8QfcsEcICCEjFQhVA6crcRJrGzSYrvIrRB1+Lz20D+gF18QJyROXCIVDlzg1hvysRISl14wp0EzO7O72e982GvD7xfNvu+878w7zzzzsbsTWRvA/621+ag+jCTW5t/YzeYP9pfrB/vL98p6RExHxF5ENSIqEZH8O03TjyOuRyTNYZKOssuHm6tvfvLZwaeNuWox5ctXBq3XoVhur6N5r2ybi4iJonwKj4x346nHS5qRX4+IK0UJYzcZEWk6GWnTT/56ttmTdZ5vlLVea88cX6DAkUka75vZm3GlvX024kxxoWefA8p33spYghzB9IjLdX6CAAAAgNOm+ztwd8v5wziM3eTcMYUEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAp95e6/f/k2KqlPW5SMrf/58q2uJqo36yvPp4iz88qjgAAAAAAAAA4Bi9ehiHsRvnyvk0yf/P/7V85mL++ly8E9uxEVtxNXZjPXZiJ7ZiMSJm2waa2l3f2dlaHGHNpZ5rLg0JdLooa89mvwEAAAAAAADgf8wvYq31//8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHASJBETjSKSB23Ns1GpRsRMRExlDXsRfy/rp9nDcQcAAAAAx+D8YRzGbpwr59MkLkbES/kzgJl4J+7HTmzGTtRjI27mzwUa3/orB/vL9YP95XvZ1D3ut//1yOzMkDDyEaPx7KH3li/nS9TiVmzmLVfjRrwV9bgZlXzNzOUinj7be5DFlHyrMGKCbhZltucfFGWX90ccbLDOhym1wQ9YZvOMTDYzslDElmXjhfLI9D5CHUdnmM4tLUalGdjFji11BPxEOT9TlNn+/KZfzseiMxNLbWffS4NzHvGlP/7+xwtF/eTs0mgmijLNX2vdmVhuy8TLo2TiTv3+3Tu3tudPWya6LOSZuNScX4vvxY9iPubih7EVm/HTWI+d2Ii5+G5eWy8OftJ2effJ1PVGMdlrs2utxJV5nyrO0Imi9XFiei1f91xsxg/irbgZG/F6/m8pFuNrsRIrsdp2hC8NPsL5VV955Kpv3ZHT53um8cqXi0p22/ttUfbUt+OoZHl9IeJsmdf2e+5s3tfe0srShVaGvnC7e9gsS1laHrk3/mlwKNXPF5VsG79sO/bj15mJxbZMvDjofClP5O36/btbd9bfHm1zFz5oW/3XJ+qWmp0vF7KDFeUBap0dWd+LZV9HvrK+i82+SlffpWZf40rd63ulThWf4bpHWsr7Xu7Zt5z3XW7r6/V5a/inOQDG7MxXzkzV/ln7W+2j2q9qd2pvzHxn+uvTr0zF5J8nv1FdmPhi5ZXkD/FR/Lz1/R8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHhy2+++d3e9Xt/Y6qikafp+n656ej6iT9eTVSp9w8gq1SGhdlVi7h/PZSuULWk0u8qfM3uGwQ+rfO5sxOhrFb/AE42W6rPN8xgr/0nTdOub+e4kfZb53V+6E/X8SKmbGv3cGFKZKc7wwolIXVGpHvNGx3RDAo7NtZ17b1/bfve9r27eW7+9cXvj/urKyurC6srry9dubdY3Fhqv444SOAqtN/1xRwIAAAAAAAAAAACMarS/B4in+nOCce8jAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAcLqtzUf1YSSxuHB1IZs/2F+uZ1NZby1ZjYhKRCQ/i0g+jrgejSlm24ZL+m3nw83VNz/57ODT1ljZFN+/MWS90ewVU8xFxESjfPCsxrtRlAMlg3Yhae5hlrArZeJg3P4bAAD//wOe+hQ=") r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r1, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) 10.320961152s ago: executing program 4 (id=652): r0 = fsopen(&(0x7f0000001140)='hugetlbfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x143142, 0x40) pwritev2(r2, 0x0, 0x0, 0x5405, 0x0, 0x0) 9.217386978s ago: executing program 2 (id=657): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x100, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000006100)=@delchain={0x24, 0x64, 0x1, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff3}, {}, {0xb}}}, 0x24}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) 8.980560584s ago: executing program 4 (id=658): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = memfd_secret(0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r1, 0x0) ptrace(0x10, r0) ptrace$setregs(0xf, r0, 0xfb2, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) 7.750964384s ago: executing program 4 (id=663): syz_mount_image$nilfs2(&(0x7f0000000a40), &(0x7f0000000200)='./file0\x00', 0x10, &(0x7f0000000480)=ANY=[], 0x5, 0xa5a, &(0x7f0000001b40)="$eJzs3U1sHFcBAOA3a6/z22ZTHGrS0CYU2vJTu3FM+ImAVM2FqKm4Vaq4RElaIpyASCVI1UOSEzdaVeHK76mX8qNK5IKinrhUopG49FQ4cCAKUiUO0JC48vq99e7zbmbt2J6s9/uk2bdv3tt9b3ZnZmdn5r0XgKFVaz7OzEwUIVy+8saRfz32zy0hXBlfzNFoPo62xeohhCLGR7P3+2BkIbz14asnuoVFmG4+pnh47kbrtdtCCBfC3nA1NMLuy9def3f62WMXj17a996bh66vzdIDAMBw+c7VQzO7/v7Xh3Z+9NbDh8Om1vx0fN6I8e3xuP9wPPBPx/+10Bkv2qZ2Y1m+0TjVsnwjXfK1l1PP8o32KH8se996j3ybSsofaZvXbblhkKX1uBGK2mRHvFabnFz4Tx6a/+vHismzp2dfPFdRRYFV959HQgh7Taahny42N4jq67Gu09yOqvdAAAvy64VLXMjPLNyd1ruN9lf+jadr3V8Pq2C913/lD1b5v71oj8Pq2ahrU1qutB1tj/G26whnQpf7l/Ltby5/42z7T++XX4+o91nPXtcRBuX6Qq96jqxzPVaqV/3z9WKj+kYM0+fwzSy9ffvJv9NB+Y6B7v7r/L/JNLTTkuPbO8jvlQE2tvy+ubkopef39eXpm0rSN5ekbylJ39qRa2n6tpLXwzD748s/C68Vi//z8//0yz0fns6z3RfD+5dZn/x85HLLH7tDbD3Kd4zEIPnT8edPffXkC9cW7v8vWuv/7bi+743xRtyarsYM6Xxhfl69de9/o7OcWo98D2T1ua9L/ubz8c58xfji+4S2/cySekx0vm5Hr3x7OvM1snxb4rQ5q29+fLI1e106/kj71fR5jWbLW8+WYyyrR9qv7IxhXg9YibQ+9rr/P62fE6FevHh69tRTMZ7W07+M1DfNz99fXtTvVrvuwN3pt/3PROhs/7O9Nb9ea98v7FicX7TvFxrZ/Oke8w/EePqd+97Ilub8yRM/mD252gsPQ+7c+Ve+f3x29tSPPPHEE09aT6reMwFrberlMz+cOnf+lSdPnzn+0qmXTp09cPDggenpg187MDPVPK6faj+6BzaSxR/9qmsCAAAAAAAAAAAA9OvHR49c+9s7X3l/of3/Yvu/1P4/3fmb2v//tFho615rmx+6jAOY2gHu7JLezJN1sDqW5avH6RNZfcezcnZlr/tkDFvj+MX2/6m4vF/XVJ8Hs/l5/70pX9adwJL+UsayXkfy8QI/E8NLMfx1gAoVW7rPjmFZ/9ZpXU/9UyyjX4ruBVOJ9L2lLyX1Y5Laf/fq1ynt/3euQx1ZfevRnLDqZQS6+/cQ9//dPHZZw/f/zf3VL+Pm3mmbqq6bqfppbs4oHsC9oerxP9N5zxSe/fO3N89PKduNpzv3l3n/pXA37vXxJ5W/scb/bI1/19f+7+bS0RMaKyv3f7+4/n5bsWF3v/vffPlTP9DjeQl3PhP90Xz5NxcX5fHQX/lzv8rKzy8I9elmXP70+W/ts/wly7+nrKTzb3eb+/9YfvrYnni03/IXalzUOuuRnzdO1//y88bJrWz5T650+Vc4UOPtWD4Ms0EZZ3a5+hj/t6ls/N8lVnn8317y+zC+HONpR5juc8hHOFlm/VuR9DuwK3v/ouT3zfi/g+3rMSzbHtL4v2l9bHSJ19ri9S6f7Ubd18Cg+uDevf63+ENVfV1M/X5f1dfDtIxpbm5ubU9olai0cCr//Kv+n1B1+VV//mXy8X/zY/h8/N88PR//N0/Px//N0/Px9fL0rVl6/nnm4//m6Q9m75uPDzyR/cHO0z9V8vrdJekPlaTvKUn/dEn6vpL0h0vSHylJf6Ak/dGS9M+WpH+uJP2xkvQnStI/X5K+0aX2KMO6/DDM8vZ5tn8YHql9ba/tf7wkHRhcP39r/zMv/OG7jYX2/2Ot8yHpOt7hGK/H/84/ifH8undoi8+nvRPj/8jS7/XzHTBM8v4z8t/3x0vSgcGV7vOyfcMQKrq3k+i336pex/kMli/E8Isx/FIMn4zhZAynYrg/htPrVD/WxjO/f/vQa8Xi//0dWXq/95Pn7YHyfqIO9Fmf/PzAcu/Hz/vxW667LX+FzcEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAqU2s+zsxMFCFcvvLGkeePnZ6an/OtVo5G83G0LVZvvS6Ep2I4EsNfxie3Pnz1RHt4O4ZFmA5FKFrzw3M3WiVtCyFcCHvD1dAIuy9fe/3d6WePXTx6ad97bx66vnafAAAAAGx8HwcAAP//V88c0Q==") bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1f, 0x3, 0x0, 0x0, 0x81, 0x0, 0x0, 0x41000, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x400}, 0x94) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) syz_io_uring_setup(0x8da, &(0x7f0000000480)={0x0, 0x40450, 0x100, 0x0, 0x335}, &(0x7f0000000080), 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0x80186e84, &(0x7f0000000080)={@desc={0x40002, 0x0, @desc1}}) 7.346186555s ago: executing program 2 (id=666): r0 = syz_usb_connect$cdc_ncm(0x2, 0x6e, &(0x7f0000000240)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x3, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x400000}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x3ff, 0xf, 0x2}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200, 0xfd}}, {{0x9, 0x5, 0x3, 0x2, 0x200, 0x3}}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x2010, 0x10, 0x10, 0x10, 0x32, 0xe, 0x10, 0x10, 0x1, 0x10, 0x10, 0x10}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f00000003c0)={0x14, 0x0, &(0x7f00000001c0)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) 6.625077589s ago: executing program 5 (id=668): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$kcm(0x11, 0x200000000000002, 0x300) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x8, &(0x7f0000000300)=@framed={{0x18, 0x8, 0x0, 0x0, 0x8}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r2}, {}, {0x85, 0x0, 0x0, 0x2f}, {0x7, 0x0, 0xb, 0x9}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000d00)=r3, 0x4) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="d8", 0x1}], 0x1, 0x0, 0x0, 0x7400}, 0x0) 6.300657525s ago: executing program 3 (id=669): unshare(0x22020600) r0 = gettid() timer_create(0x0, &(0x7f00000002c0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) timer_settime(r1, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0) readv(r2, &(0x7f0000001400)=[{&(0x7f0000001440)=""/4096, 0x1000}], 0x1) 6.090883259s ago: executing program 4 (id=670): r0 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x20000}}, {{0xa, 0x0, 0x40000, @dev={0xfe, 0x80, '\x00', 0x26}}}}, 0x108) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @loopback}}}, 0x108) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000080)={0x0, {{0xa, 0x4, 0x0, @mcast1={0xff, 0x7}, 0x8a0}}, {{0xa, 0x4e20, 0x100, @remote}}}, 0x108) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001d40)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="2c00000010008100000000000080000000000000", @ANYRES32=0x0, @ANYBLOB="0a043cbf", @ANYRES32, @ANYBLOB="0a001b"], 0x2c}], 0x1}, 0x0) 5.830620956s ago: executing program 1 (id=671): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x22}}, 0x6}, 0x1c) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0xd}, 0x1c) connect(0xffffffffffffffff, &(0x7f00000002c0)=@nfc_llcp={0x25, 0x0, 0x1, 0x0, 0x8, 0x1, "aeadc233a20573f54110b96dc87683a424a5e4d81b7da7682cd74ab71687086a5f45f7c0511960fdce705f69ab3351a1f1dc10c10d8360ec7ad46a07bc3319", 0x25}, 0x80) r1 = fcntl$dupfd(r0, 0x0, r0) sendmmsg$inet6(r1, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000002c0)="cd", 0x1}], 0x1}}], 0x4000000000000ec, 0x8001) 5.399426454s ago: executing program 5 (id=672): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060"], 0xb8}}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000020000000000fc0000000000000000"], 0xb8}, 0x1, 0x0, 0x0, 0x80c0}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x1, 0x0, {{@in6=@private0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x30, 0x20, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x9, 0x0, 0x80, 0x0, 0xfffffffffffffffe}, {}, 0x0, 0x0, 0x0, 0x1}}, 0xb8}}, 0x4000) 4.691904599s ago: executing program 1 (id=673): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'sha384\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmsg$NFT_MSG_GETSETELEM(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000680)=ANY=[], 0x834}, 0x1, 0x0, 0x0, 0x4000080}, 0xc004) r2 = accept4$ax25(r1, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f0000001840)=[{{0x0, 0x0, 0x0}, 0x69}], 0x1, 0x2001, 0x0) 4.233830365s ago: executing program 5 (id=674): r0 = socket(0x1, 0x5, 0x0) close(0x3) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000500)={0xe000200c}) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f00000001c0)={0x80000002}) 4.204026753s ago: executing program 3 (id=675): r0 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) r1 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r1, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @loopback}, 0x4}}, 0x2e) ioctl$PPPIOCGCHAN(r1, 0x80047437, &(0x7f0000000080)) syz_emit_ethernet(0x4c, &(0x7f0000000140)={@link_local, @random="ece65fbcee55", @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0x16, 0x11, 0x0, @remote, @local, {[], {0x3, 0xe22, 0x16, 0x0, @gue={{0x2, 0x0, 0x0, 0x3}, "e77000002000"}}}}}}}, 0x0) 3.900401265s ago: executing program 1 (id=676): r0 = socket(0x28, 0x5, 0x0) r1 = socket(0x28, 0x805, 0x0) bind$vsock_stream(r1, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) listen(r1, 0x7) connect$vsock_stream(r0, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) accept4$packet(r1, 0x0, 0x0, 0x800) 3.545065317s ago: executing program 2 (id=677): r0 = socket(0x2a, 0x2, 0x0) r1 = socket$nl_rdma(0x10, 0x3, 0x14) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r3, 0x0, 0x2, 0x0) splice(r2, 0x0, r0, 0x0, 0x1c, 0xe) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="00010000031401"], 0x100}, 0x1, 0x0, 0x0, 0x4040024}, 0x0) 3.371627905s ago: executing program 3 (id=678): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'chacha20\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd301e5a47b2f3caa73dcd2a6a370554375a", 0x20) r1 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000061c0)=[{{0x0, 0x0, &(0x7f0000003f80)=[{&(0x7f0000001b80)=""/4096, 0x1000}], 0x1}, 0xfffffffc}], 0x1, 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000b40), 0x2328}}, 0x0) 3.294866501s ago: executing program 5 (id=679): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) r1 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$VHOST_SET_FEATURES(r2, 0x4008af00, &(0x7f0000000200)=0x8001100) 3.102993085s ago: executing program 1 (id=680): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1f, 0x2, &(0x7f0000001c40)=ANY=[@ANYBLOB="85000000a800000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x13}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x2, 0xc, 0x1400}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0c000000040000000400000009"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000024c0), &(0x7f0000001280), 0xffffffff, r1}, 0x38) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0xfffffc01, r1}, 0x38) 2.60392612s ago: executing program 2 (id=681): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x100, 0x0) ioctl$TCXONC(r0, 0x540a, 0x2) ioctl$TIOCSPTLCK(r0, 0x40045431, &(0x7f0000000000)) r1 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x3) ppoll(&(0x7f0000000180)=[{r1, 0x128c}, {r1, 0xfae83c30bf5f62e}], 0x2, 0x0, 0x0, 0x0) ioctl$TCSETS2(r1, 0x402c542b, &(0x7f0000000080)={0x0, 0x10000, 0x6, 0x3, 0x8, "b28addfdcd23bab0e01819a41c3bcac5543f5c", 0x5}) 2.126731894s ago: executing program 1 (id=682): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x20}}, 0x2}}, 0x2e) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x50, r2, 0x1, 0x1070bd2c, 0x4, {0x5}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa8}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'ip6gre0\x00'}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0xb}]}, 0x50}, 0x1, 0x0, 0x0, 0x20008000}, 0x30) 2.068854577s ago: executing program 3 (id=683): fcntl$lock(0xffffffffffffffff, 0x24, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x1, 0x3, &(0x7f0000000000)=@framed={{0x18, 0x2}}, &(0x7f00000005c0)='GPL\x00', 0x5, 0xd1, &(0x7f00000002c0)=""/209}, 0x94) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000604000000002e"], 0x0, 0x37}, 0x20) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000300)={r0, 0x20, &(0x7f00000002c0)={0x0, 0x0, 0x0, &(0x7f0000002b00)=""/171, 0xab}}, 0x10) 1.804086295s ago: executing program 5 (id=684): r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000040)={'vxcan1\x00', 0x0}) connect$can_bcm(r0, &(0x7f0000000140)={0x1d, r1}, 0x10) sendmsg$can_bcm(r0, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000200)=ANY=[@ANYBLOB="050000003008"], 0x80}, 0x1, 0x0, 0x0, 0x40084}, 0x20000000) sendmsg$can_bcm(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)=ANY=[@ANYBLOB="05"], 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x4004844) close(r0) 1.520266052s ago: executing program 2 (id=685): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x5d032, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000100)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x5}) ioctl$UFFDIO_CONTINUE(r0, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) 1.15234676s ago: executing program 3 (id=686): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "268435", 0x14, 0x6, 0x1, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2, 0xf3d8}}}}}}}, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000180)={@local, @local, @val={@void, {0x8100, 0x0, 0x0, 0x3}}, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2, 0x11}}}}}}}, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @dev, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "ab0001", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x5, 0x0, 0xa388}}}}}}}, 0x0) 730.780418ms ago: executing program 4 (id=687): r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = mq_open(&(0x7f0000000080)='$@\x00', 0x40, 0xb4, 0x0) fcntl$setlease(r1, 0x400, 0x0) mq_open(&(0x7f0000000140)='$@\x005gM\xfb\xa3\xabt\xb8\x97\xa2`\xcc\xfb&\r.\x97TM&\x93\xd3\xd2\x17[\x89}\xd2j\xd6\xee\xf4\'@\xff\x00\x00\x00\x00\x00\x00\x00\x00\xcd.,\xfb\xab\xb9\x00r\voG\x9d\xaa\x86\xe9\xff\x1b\xa20\x16\t\x05\xa4\x97\xfah\xe9u\xbb\xad~\xb3\x83\xb9\xa3\xe7\xa4\xea\xe6x\xd8H\xa9\xa89\x1a\xfeZ0+\x18\xe9\xc7\x87\\\x05\xbf`!Q\xf2\xcc\xbc4\xbc|s\xbdZY1\x02r\xac\x805\x06\x18\xb5\x88gx\xac\xd6\xc7.\xa6Z\x84X:{II>~<\xa4x\'\xd0\xdc\xf5`\x1a\x1dI:\x8b\xc6v/;U\xac\x12\xed\xed\x86W\xf4\xcb\xf4\xdd\x89w<\xd2d\xc0\x17\xf3\x9f\xdf\xd2', 0x1, 0x0, 0x0) mq_unlink(&(0x7f0000000000)='$@\x00') close_range(r0, 0xffffffffffffffff, 0x0) 587.822106ms ago: executing program 2 (id=688): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) write$tun(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="000086dd0001110004000000a60c6eec00be00442ffffe8000000000000000000000000000aaff020000000000000000000000000001042088be"], 0xfdef) 556.473767ms ago: executing program 1 (id=689): open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x24c01, 0x0) r0 = syz_io_uring_setup(0x497, &(0x7f00000000c0)={0x0, 0x707c, 0x1, 0x3, 0x287}, &(0x7f0000000340)=0x0, &(0x7f00000003c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r0, 0x12a8f, 0xf264, 0x40, 0x0, 0x0) 320.283184ms ago: executing program 5 (id=690): r0 = socket$unix(0x1, 0x5, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r1, &(0x7f00000000c0)={0x1d, r2}, 0x10) sendmsg$can_bcm(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="0100000003ece1e40ad8871461ab0800", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r0, @ANYBLOB="3bf81bb9f9"], 0x20000600}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$can_bcm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[], 0x4640}, 0x2}, 0x0) 0s ago: executing program 3 (id=691): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'ip6gretap0\x00', 0x0}) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="8000000000010104000000000000000002000000240001801400018008001700e000000108e8cd0dc73594e925042b4ab9fa000200000000000c0002800500010000000000240002800c00028005000100000000001400018008000300c500000108000200ac1e000108000740000000001c001080080003"], 0x80}}, 0x0) sendto$packet(r1, &(0x7f0000000180)="0b036c00e0ff64000200475400f6a13bb10000000800894f4803", 0x100a6, 0x0, &(0x7f0000000140)={0x11, 0x0, r2}, 0x14) kernel console output (not intermixed with test programs): no interfaces have a carrier [ 189.458617][ T5433] 8021q: adding VLAN 0 to HW filter on device bond0 [ 189.476553][ T5433] eql: remember to turn off Van-Jacobson compression on your slave devices Starting crond: OK Starting sshd: OK syzkaller Warning: Permanently added '10.128.1.221' (ED25519) to the list of known hosts. syzkaller login: [ 239.270573][ T5760] cgroup: Unknown subsys name 'net' [ 239.449869][ T5760] cgroup: Unknown subsys name 'cpuset' [ 239.465728][ T5760] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 245.162330][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 245.169237][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 246.605666][ T5760] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 252.657920][ T5782] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 252.666413][ T5782] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 252.676099][ T5782] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 252.686046][ T5782] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 252.707553][ T5782] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 252.711582][ T5783] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 252.719354][ T5782] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 252.724160][ T5783] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 252.764204][ T5782] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 252.809996][ T5782] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 252.974362][ T5078] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 252.984943][ T5078] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 252.994871][ T5078] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 253.010225][ T5078] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 253.022264][ T5078] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 253.120435][ T5782] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 253.132095][ T5782] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 253.144367][ T5783] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 253.160815][ T5783] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 253.172342][ T5783] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 253.190099][ T5783] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 253.198506][ T51] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 253.210244][ T51] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 253.227630][ T51] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 253.241938][ T51] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 254.792410][ T5788] chnl_net:caif_netlink_parms(): no params data found [ 254.818783][ T51] Bluetooth: hci1: command tx timeout [ 254.881164][ T5778] chnl_net:caif_netlink_parms(): no params data found [ 254.908620][ T51] Bluetooth: hci0: command tx timeout [ 254.942392][ T5779] chnl_net:caif_netlink_parms(): no params data found [ 255.138525][ T51] Bluetooth: hci2: command tx timeout [ 255.308972][ T51] Bluetooth: hci4: command tx timeout [ 255.309093][ T5782] Bluetooth: hci3: command tx timeout [ 255.552840][ T5790] chnl_net:caif_netlink_parms(): no params data found [ 255.766440][ T5791] chnl_net:caif_netlink_parms(): no params data found [ 256.337859][ T5778] bridge0: port 1(bridge_slave_0) entered blocking state [ 256.345864][ T5778] bridge0: port 1(bridge_slave_0) entered disabled state [ 256.359411][ T5778] bridge_slave_0: entered allmulticast mode [ 256.371313][ T5778] bridge_slave_0: entered promiscuous mode [ 256.389966][ T5779] bridge0: port 1(bridge_slave_0) entered blocking state [ 256.397668][ T5779] bridge0: port 1(bridge_slave_0) entered disabled state [ 256.410362][ T5779] bridge_slave_0: entered allmulticast mode [ 256.421873][ T5779] bridge_slave_0: entered promiscuous mode [ 256.442317][ T5779] bridge0: port 2(bridge_slave_1) entered blocking state [ 256.450570][ T5779] bridge0: port 2(bridge_slave_1) entered disabled state [ 256.458818][ T5779] bridge_slave_1: entered allmulticast mode [ 256.469126][ T5779] bridge_slave_1: entered promiscuous mode [ 256.481339][ T5788] bridge0: port 1(bridge_slave_0) entered blocking state [ 256.491565][ T5788] bridge0: port 1(bridge_slave_0) entered disabled state [ 256.502079][ T5788] bridge_slave_0: entered allmulticast mode [ 256.513521][ T5788] bridge_slave_0: entered promiscuous mode [ 256.528596][ T5778] bridge0: port 2(bridge_slave_1) entered blocking state [ 256.536161][ T5778] bridge0: port 2(bridge_slave_1) entered disabled state [ 256.544149][ T5778] bridge_slave_1: entered allmulticast mode [ 256.560641][ T5778] bridge_slave_1: entered promiscuous mode [ 256.792030][ T5788] bridge0: port 2(bridge_slave_1) entered blocking state [ 256.799601][ T5788] bridge0: port 2(bridge_slave_1) entered disabled state [ 256.807505][ T5788] bridge_slave_1: entered allmulticast mode [ 256.817011][ T5788] bridge_slave_1: entered promiscuous mode [ 256.884945][ T5778] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 256.898727][ T5782] Bluetooth: hci1: command tx timeout [ 256.951868][ T5790] bridge0: port 1(bridge_slave_0) entered blocking state [ 256.959537][ T5790] bridge0: port 1(bridge_slave_0) entered disabled state [ 256.967650][ T5790] bridge_slave_0: entered allmulticast mode [ 256.977813][ T5790] bridge_slave_0: entered promiscuous mode [ 256.984311][ T5782] Bluetooth: hci0: command tx timeout [ 257.005781][ T5779] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 257.092116][ T5778] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 257.103003][ T5790] bridge0: port 2(bridge_slave_1) entered blocking state [ 257.110866][ T5790] bridge0: port 2(bridge_slave_1) entered disabled state [ 257.120229][ T5790] bridge_slave_1: entered allmulticast mode [ 257.129428][ T5790] bridge_slave_1: entered promiscuous mode [ 257.149701][ T5779] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 257.218600][ T5782] Bluetooth: hci2: command tx timeout [ 257.326781][ T5791] bridge0: port 1(bridge_slave_0) entered blocking state [ 257.334716][ T5791] bridge0: port 1(bridge_slave_0) entered disabled state [ 257.343905][ T5791] bridge_slave_0: entered allmulticast mode [ 257.352721][ T5791] bridge_slave_0: entered promiscuous mode [ 257.374222][ T5788] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 257.383937][ T5782] Bluetooth: hci4: command tx timeout [ 257.389894][ T51] Bluetooth: hci3: command tx timeout [ 257.456858][ T5779] team0: Port device team_slave_0 added [ 257.463875][ T5791] bridge0: port 2(bridge_slave_1) entered blocking state [ 257.471730][ T5791] bridge0: port 2(bridge_slave_1) entered disabled state [ 257.480123][ T5791] bridge_slave_1: entered allmulticast mode [ 257.489139][ T5791] bridge_slave_1: entered promiscuous mode [ 257.532676][ T5788] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 257.552351][ T5778] team0: Port device team_slave_0 added [ 257.570056][ T5790] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 257.593747][ T5779] team0: Port device team_slave_1 added [ 257.663099][ T5778] team0: Port device team_slave_1 added [ 257.676934][ T5790] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 257.725651][ T5791] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 257.859903][ T5791] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 257.876679][ T5788] team0: Port device team_slave_0 added [ 257.960399][ T5779] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 257.967562][ T5779] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 257.994417][ T5779] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 258.043627][ T5788] team0: Port device team_slave_1 added [ 258.052214][ T5778] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 258.059687][ T5778] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 258.086039][ T5778] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 258.107897][ T5790] team0: Port device team_slave_0 added [ 258.116760][ T5778] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 258.124014][ T5778] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 258.150528][ T5778] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 258.165146][ T5779] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 258.172501][ T5779] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 258.199047][ T5779] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 258.247481][ T5791] team0: Port device team_slave_0 added [ 258.290063][ T5790] team0: Port device team_slave_1 added [ 258.339695][ T5791] team0: Port device team_slave_1 added [ 258.441880][ T5788] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 258.449225][ T5788] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 258.476076][ T5788] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 258.524729][ T5790] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 258.532183][ T5790] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 258.558781][ T5790] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 258.632834][ T5788] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 258.640023][ T5788] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 258.666376][ T5788] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 258.707266][ T5790] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 258.714496][ T5790] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 258.740954][ T5790] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 258.782128][ T5791] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 258.789359][ T5791] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 258.815616][ T5791] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 258.916007][ T5778] hsr_slave_0: entered promiscuous mode [ 258.925071][ T5778] hsr_slave_1: entered promiscuous mode [ 258.937358][ T5791] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 258.944758][ T5791] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 258.971033][ T5791] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 258.978647][ T51] Bluetooth: hci1: command tx timeout [ 259.024270][ T5779] hsr_slave_0: entered promiscuous mode [ 259.033353][ T5779] hsr_slave_1: entered promiscuous mode [ 259.041895][ T5779] debugfs: 'hsr0' already exists in 'hsr' [ 259.047782][ T5779] Cannot create hsr debugfs directory [ 259.058548][ T51] Bluetooth: hci0: command tx timeout [ 259.183577][ T5791] hsr_slave_0: entered promiscuous mode [ 259.193449][ T5791] hsr_slave_1: entered promiscuous mode [ 259.202030][ T5791] debugfs: 'hsr0' already exists in 'hsr' [ 259.207902][ T5791] Cannot create hsr debugfs directory [ 259.298711][ T51] Bluetooth: hci2: command tx timeout [ 259.443824][ T5788] hsr_slave_0: entered promiscuous mode [ 259.454757][ T5788] hsr_slave_1: entered promiscuous mode [ 259.461963][ T51] Bluetooth: hci3: command tx timeout [ 259.468559][ T51] Bluetooth: hci4: command tx timeout [ 259.471899][ T5788] debugfs: 'hsr0' already exists in 'hsr' [ 259.480195][ T5788] Cannot create hsr debugfs directory [ 259.527045][ T5790] hsr_slave_0: entered promiscuous mode [ 259.536221][ T5790] hsr_slave_1: entered promiscuous mode [ 259.545060][ T5790] debugfs: 'hsr0' already exists in 'hsr' [ 259.551165][ T5790] Cannot create hsr debugfs directory [ 260.962994][ T5779] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 260.997444][ T5779] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 261.030525][ T5779] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 261.056771][ T5779] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 261.069094][ T51] Bluetooth: hci1: command tx timeout [ 261.138717][ T51] Bluetooth: hci0: command tx timeout [ 261.231207][ T5778] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 261.254353][ T5778] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 261.285163][ T5778] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 261.310734][ T5778] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 261.389612][ T51] Bluetooth: hci2: command tx timeout [ 261.545173][ T5791] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 261.546660][ T51] Bluetooth: hci4: command tx timeout [ 261.557746][ T5782] Bluetooth: hci3: command tx timeout [ 261.596594][ T5791] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 261.636734][ T5791] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 261.690581][ T5791] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 262.026089][ T5790] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 262.048073][ T5790] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 262.072053][ T5790] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 262.113424][ T5790] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 262.454151][ T5788] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 262.504291][ T5788] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 262.560621][ T5788] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 262.596119][ T5788] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 262.656346][ T5779] 8021q: adding VLAN 0 to HW filter on device bond0 [ 262.939537][ T5779] 8021q: adding VLAN 0 to HW filter on device team0 [ 262.956954][ T5778] 8021q: adding VLAN 0 to HW filter on device bond0 [ 263.077612][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 263.085286][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 263.192973][ T3439] bridge0: port 2(bridge_slave_1) entered blocking state [ 263.200500][ T3439] bridge0: port 2(bridge_slave_1) entered forwarding state [ 263.243514][ T5791] 8021q: adding VLAN 0 to HW filter on device bond0 [ 263.344333][ T5778] 8021q: adding VLAN 0 to HW filter on device team0 [ 263.456589][ T3439] bridge0: port 1(bridge_slave_0) entered blocking state [ 263.464254][ T3439] bridge0: port 1(bridge_slave_0) entered forwarding state [ 263.493055][ T3439] bridge0: port 2(bridge_slave_1) entered blocking state [ 263.500555][ T3439] bridge0: port 2(bridge_slave_1) entered forwarding state [ 263.532084][ T5791] 8021q: adding VLAN 0 to HW filter on device team0 [ 263.619210][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 263.626578][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 263.671688][ T5790] 8021q: adding VLAN 0 to HW filter on device bond0 [ 263.790690][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 263.798122][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 263.980182][ T5790] 8021q: adding VLAN 0 to HW filter on device team0 [ 264.170328][ T3439] bridge0: port 1(bridge_slave_0) entered blocking state [ 264.177908][ T3439] bridge0: port 1(bridge_slave_0) entered forwarding state [ 264.292151][ T3439] bridge0: port 2(bridge_slave_1) entered blocking state [ 264.299836][ T3439] bridge0: port 2(bridge_slave_1) entered forwarding state [ 264.345663][ T5788] 8021q: adding VLAN 0 to HW filter on device bond0 [ 264.773066][ T5788] 8021q: adding VLAN 0 to HW filter on device team0 [ 264.895565][ T64] bridge0: port 1(bridge_slave_0) entered blocking state [ 264.903254][ T64] bridge0: port 1(bridge_slave_0) entered forwarding state [ 265.074157][ T64] bridge0: port 2(bridge_slave_1) entered blocking state [ 265.081800][ T64] bridge0: port 2(bridge_slave_1) entered forwarding state [ 265.390261][ T5779] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 265.920107][ T5778] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 266.551165][ T5779] veth0_vlan: entered promiscuous mode [ 266.673019][ T5791] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 266.768772][ T5778] veth0_vlan: entered promiscuous mode [ 266.782429][ T5779] veth1_vlan: entered promiscuous mode [ 266.942616][ T5790] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 266.990678][ T5778] veth1_vlan: entered promiscuous mode [ 267.222000][ T5788] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 267.404712][ T5779] veth0_macvtap: entered promiscuous mode [ 267.526849][ T5779] veth1_macvtap: entered promiscuous mode [ 267.673271][ T5778] veth0_macvtap: entered promiscuous mode [ 267.832336][ T5778] veth1_macvtap: entered promiscuous mode [ 267.857638][ T5790] veth0_vlan: entered promiscuous mode [ 267.993784][ T5779] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 268.091155][ T5779] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 268.108398][ T5790] veth1_vlan: entered promiscuous mode [ 268.155961][ T5778] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 268.249669][ T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 268.261204][ T5788] veth0_vlan: entered promiscuous mode [ 268.291529][ T5778] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 268.314761][ T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 268.355879][ T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 268.429096][ T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 268.495984][ T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 268.511727][ T5788] veth1_vlan: entered promiscuous mode [ 268.549560][ T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 268.605169][ T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 268.671025][ T64] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 268.749552][ T5790] veth0_macvtap: entered promiscuous mode [ 268.858060][ T5790] veth1_macvtap: entered promiscuous mode [ 268.896933][ T5791] veth0_vlan: entered promiscuous mode [ 269.095138][ T5788] veth0_macvtap: entered promiscuous mode [ 269.121182][ T5791] veth1_vlan: entered promiscuous mode [ 269.232456][ T5790] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 269.297445][ T5788] veth1_macvtap: entered promiscuous mode [ 269.392692][ T5790] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 269.544942][ T13] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 269.580345][ T13] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 269.605820][ T5788] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 269.701389][ T64] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 269.758565][ T64] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 269.805623][ T5788] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 269.862490][ T5791] veth0_macvtap: entered promiscuous mode [ 269.956624][ T64] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 270.004882][ T5791] veth1_macvtap: entered promiscuous mode [ 270.049781][ T64] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 270.126004][ T64] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 270.204972][ T64] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 270.322064][ T5791] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 270.421373][ T5791] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 270.570691][ T64] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 270.651919][ T64] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 270.671736][ T3439] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 270.761699][ T35] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 274.762811][ T2209] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 274.771084][ T2209] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 275.097106][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 275.105400][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 275.526161][ T64] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 275.535338][ T64] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 275.657513][ T5778] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 275.893159][ T54] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 275.903627][ T54] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 277.704656][ T2973] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 277.713119][ T2973] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 278.109970][ T2209] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 278.118163][ T2209] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 278.574432][ T64] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 278.583389][ T64] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 278.976029][ T64] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 278.986025][ T64] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 279.343642][ T64] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 279.351906][ T64] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 279.769688][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 279.777905][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 280.710779][ T5986] loop3: detected capacity change from 0 to 764 [ 280.825883][ T5986] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 281.739264][ T10] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 282.030657][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 282.042698][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 282.053380][ T10] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 282.067659][ T10] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 282.077938][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 282.232864][ T5999] netlink: 204 bytes leftover after parsing attributes in process `syz.0.15'. [ 282.316108][ T10] usb 2-1: config 0 descriptor?? [ 282.931090][ T5907] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 282.959551][ T10] plantronics 0003:047F:FFFF.0001: reserved main item tag 0xd [ 283.152651][ T5907] usb 4-1: Using ep0 maxpacket: 32 [ 283.191783][ T5907] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 1023 [ 283.244735][ T5996] loop1: detected capacity change from 0 to 512 [ 283.383391][ T5907] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 283.393221][ T5907] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 283.401675][ T5907] usb 4-1: Product: syz [ 283.406060][ T5907] usb 4-1: Manufacturer: syz [ 283.411000][ T5907] usb 4-1: SerialNumber: syz [ 283.527761][ T10] plantronics 0003:047F:FFFF.0001: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 283.655500][ T5996] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 283.709985][ T5996] ext4 filesystem being mounted at /1/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 283.843233][ T6001] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 284.240542][ T795] usb 2-1: USB disconnect, device number 2 [ 284.659858][ T6011] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 284.803107][ T6001] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 285.311030][ T5907] cdc_ncm 4-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 285.317745][ T5907] cdc_ncm 4-1:1.0: setting rx_max = 16384 [ 285.854411][ T5907] cdc_ncm 4-1:1.0: setting tx_max = 16384 [ 285.951814][ T5907] cdc_ncm 4-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.3-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 286.125680][ T5907] usb 4-1: USB disconnect, device number 2 [ 286.251470][ T5907] cdc_ncm 4-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.3-1, CDC NCM (NO ZLP) [ 286.276732][ T5788] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 286.494690][ T6014] fido_id[6014]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 286.597316][ T6024] process 'syz.0.21' launched './file1' with NULL argv: empty string added [ 288.460926][ C0] IPv4: Oversized IP packet from 172.20.20.24 [ 289.794282][ T6034] loop4: detected capacity change from 0 to 128 [ 289.902026][ T6034] FAT-fs (loop4): Directory bread(block 414) failed [ 290.074889][ T6034] FAT-fs (loop4): Directory bread(block 415) failed [ 290.096403][ T6034] FAT-fs (loop4): Directory bread(block 416) failed [ 290.103535][ T6034] FAT-fs (loop4): Directory bread(block 417) failed [ 290.111055][ T6034] FAT-fs (loop4): Directory bread(block 418) failed [ 290.123683][ T6034] FAT-fs (loop4): Directory bread(block 419) failed [ 290.130908][ T6034] FAT-fs (loop4): Directory bread(block 420) failed [ 290.138112][ T6034] FAT-fs (loop4): Directory bread(block 421) failed [ 291.274991][ T6003] Set syz1 is full, maxelem 65536 reached [ 291.670470][ T6041] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 293.899070][ T795] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 294.092378][ T795] usb 4-1: Using ep0 maxpacket: 32 [ 294.176914][ T795] usb 4-1: New USB device found, idVendor=1039, idProduct=2120, bcdDevice= 2.a7 [ 294.188626][ T795] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 294.197362][ T795] usb 4-1: Product: syz [ 294.201981][ T795] usb 4-1: Manufacturer: syz [ 294.206776][ T795] usb 4-1: SerialNumber: syz [ 294.386656][ T795] usb 4-1: config 0 descriptor?? [ 294.717483][ T795] usb 4-1: [ueagle-atm] ADSL device founded vid (0X1039) pid (0X2120) Rev (0X2A7): Eagle II [ 294.898765][ T795] usb 4-1: reset high-speed USB device number 3 using dummy_hcd [ 295.247169][ T6079] team0: entered promiscuous mode [ 295.253088][ T6079] team_slave_0: entered promiscuous mode [ 295.260501][ T6079] team_slave_1: entered promiscuous mode [ 295.351083][ T6079] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 295.455085][ T6079] bond0: (slave macvlan2): Enslaving as an active interface with an up link [ 295.608687][ T795] usb 4-1: device descriptor read/64, error -71 [ 295.869281][ T795] usb 4-1: reset high-speed USB device number 3 using dummy_hcd [ 296.260103][ T6090] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 296.335266][ T795] usb 4-1: [UEAGLE-ATM] interface 1 not found [ 296.342884][ T795] ueagle-atm 4-1:0.0: usbatm_usb_probe: bind failed: -19! [ 296.400849][ T795] usb 4-1: USB disconnect, device number 3 [ 296.956009][ T6097] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 297.672404][ T6106] netlink: 20 bytes leftover after parsing attributes in process `syz.1.54'. [ 298.429259][ T6114] loop8: detected capacity change from 0 to 8 [ 298.453271][ T6114] Dev loop8: unable to read RDB block 8 [ 298.459632][ T6114] loop8: unable to read partition table [ 298.490698][ T6114] loop8: partition table beyond EOD, truncated [ 298.497491][ T6114] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 298.663124][ C0] vcan0: j1939_tp_rxtimer: 0xffff88804f488400: rx timeout, send abort [ 298.673476][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88804f488400: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 299.483689][ T6123] netlink: 'syz.0.62': attribute type 3 has an invalid length. [ 300.390465][ T6133] loop0: detected capacity change from 0 to 256 [ 300.443395][ T6134] loop2: detected capacity change from 0 to 128 [ 300.484885][ T6134] ======================================================= [ 300.484885][ T6134] WARNING: The mand mount option has been deprecated and [ 300.484885][ T6134] and is ignored by this kernel. Remove the mand [ 300.484885][ T6134] option from the mount to silence this warning. [ 300.484885][ T6134] ======================================================= [ 300.692529][ T6134] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 300.846653][ T6138] netlink: 4 bytes leftover after parsing attributes in process `syz.1.69'. [ 300.875333][ T6134] ext4 filesystem being mounted at /13/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 300.916138][ T6133] syz.0.67: attempt to access beyond end of device [ 300.916138][ T6133] loop0: rw=2049, sector=256, nr_sectors = 40 limit=256 [ 301.058081][ T30] audit: type=1800 audit(1769706292.957:2): pid=6134 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.68" name="file1" dev="loop2" ino=12 res=0 errno=0 [ 301.104761][ T6134] EXT4-fs (loop2): shut down requested (0) [ 301.253522][ T6145] loop4: detected capacity change from 0 to 256 [ 301.563761][ T2973] kworker/u8:7: attempt to access beyond end of device [ 301.563761][ T2973] loop0: rw=1, sector=296, nr_sectors = 28 limit=256 [ 301.737330][ T5778] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 301.876821][ T6145] FAT-fs (loop4): Directory bread(block 64) failed [ 301.908817][ T6145] FAT-fs (loop4): Directory bread(block 65) failed [ 301.915813][ T6145] FAT-fs (loop4): Directory bread(block 66) failed [ 302.000904][ T6145] FAT-fs (loop4): Directory bread(block 67) failed [ 302.030769][ T6145] FAT-fs (loop4): Directory bread(block 68) failed [ 302.069506][ T6145] FAT-fs (loop4): Directory bread(block 69) failed [ 302.104887][ T6148] netlink: 'syz.1.73': attribute type 12 has an invalid length. [ 302.113227][ T6148] netlink: 'syz.1.73': attribute type 29 has an invalid length. [ 302.121413][ T6148] netlink: 148 bytes leftover after parsing attributes in process `syz.1.73'. [ 302.130698][ T6148] netlink: 'syz.1.73': attribute type 2 has an invalid length. [ 302.141562][ T6148] netlink: 'syz.1.73': attribute type 1 has an invalid length. [ 302.150920][ T6145] FAT-fs (loop4): Directory bread(block 70) failed [ 302.189195][ T6145] FAT-fs (loop4): Directory bread(block 71) failed [ 302.211477][ T6145] FAT-fs (loop4): Directory bread(block 72) failed [ 302.239936][ T6145] FAT-fs (loop4): Directory bread(block 73) failed [ 304.368541][ T795] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 304.599890][ T795] usb 2-1: Using ep0 maxpacket: 8 [ 304.629168][ T795] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 304.637650][ T795] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 304.647923][ T795] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 304.658067][ T795] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 304.673378][ T795] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 304.689343][ T795] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 304.698710][ T795] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 305.065290][ T6169] loop2: detected capacity change from 0 to 2048 [ 305.212673][ T6169] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 305.257116][ T795] usb 2-1: usb_control_msg returned -32 [ 305.263827][ T795] usbtmc 2-1:16.0: can't read capabilities [ 305.491629][ T30] audit: type=1800 audit(1769706297.397:3): pid=6169 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.81" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 305.655185][ T30] audit: type=1800 audit(1769706297.547:4): pid=6181 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.81" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 305.844105][ T6182] loop0: detected capacity change from 0 to 1024 [ 306.256974][ T5778] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 306.609453][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 306.616395][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 307.302097][ T5907] usb 2-1: USB disconnect, device number 3 [ 308.776125][ T6204] loop4: detected capacity change from 0 to 512 [ 308.858102][ T6204] EXT4-fs: Ignoring removed orlov option [ 308.864518][ T6204] EXT4-fs: Ignoring removed mblk_io_submit option [ 309.045673][ T6204] EXT4-fs error (device loop4): ext4_iget_extra_inode:5073: inode #15: comm syz.4.93: corrupted in-inode xattr: e_value size too large [ 309.166585][ T6204] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.93: couldn't read orphan inode 15 (err -117) [ 309.184961][ T6204] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 309.382317][ T6204] EXT4-fs error (device loop4): ext4_iget_extra_inode:5073: inode #15: comm syz.4.93: corrupted in-inode xattr: e_value size too large [ 309.852156][ T5791] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 310.393572][ T6222] netlink: 8 bytes leftover after parsing attributes in process `syz.4.100'. [ 310.461865][ T6222] netlink: 8 bytes leftover after parsing attributes in process `syz.4.100'. [ 312.306050][ T6245] netlink: 4 bytes leftover after parsing attributes in process `syz.3.109'. [ 312.437148][ T6245] netlink: 4 bytes leftover after parsing attributes in process `syz.3.109'. [ 312.485386][ T6245] netlink: 4 bytes leftover after parsing attributes in process `syz.3.109'. [ 313.574702][ T6256] loop3: detected capacity change from 0 to 1024 [ 313.659114][ T6256] EXT4-fs: Ignoring removed bh option [ 313.772845][ T6256] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 314.385058][ T5790] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 314.745694][ T6263] loop4: detected capacity change from 0 to 4096 [ 315.112013][ T6263] ntfs3(loop4): Mark volume as dirty due to NTFS errors [ 315.139724][ T6263] ntfs3(loop4): ino=1a, mi_enum_attr [ 315.165411][ T6263] ntfs3(loop4): ino=1a, mi_enum_attr [ 315.171254][ T6263] ntfs3(loop4): Failed to initialize $Extend/$Reparse. [ 315.390915][ T6263] ntfs3(loop4): ino=5, "/" mi_enum_attr [ 315.396762][ T6263] ntfs3(loop4): ino=5, "/" mi_enum_attr [ 315.448865][ T6263] ntfs3(loop4): ino=5, "/" mi_enum_attr [ 315.454885][ T6263] ntfs3(loop4): ino=5, "/" mi_enum_attr [ 315.608605][ T6263] ntfs3(loop4): ino=5, "/" mi_enum_attr [ 315.614483][ T6263] ntfs3(loop4): ino=5, "/" attr_set_size [ 318.156445][ T6294] 9pnet: p9_errstr2errno: server reported unknown error ./file0 [ 318.628843][ T6300] syz.1.131 uses obsolete (PF_INET,SOCK_PACKET) [ 318.673841][ T6301] vcan0: tx drop: invalid sa for name 0x0000000000000001 [ 319.532003][ T6308] lo: entered allmulticast mode [ 319.617178][ T6308] team0: entered promiscuous mode [ 319.623064][ T6308] team_slave_0: entered promiscuous mode [ 319.630247][ T6308] team_slave_1: entered promiscuous mode [ 319.673887][ T6312] lo: entered promiscuous mode [ 319.819398][ T6306] lo: left promiscuous mode [ 319.825334][ T6306] team0: left promiscuous mode [ 319.830764][ T6306] team_slave_0: left promiscuous mode [ 319.837387][ T6306] team_slave_1: left promiscuous mode [ 319.845201][ T6306] lo: left allmulticast mode [ 319.888919][ T6314] netlink: 4 bytes leftover after parsing attributes in process `syz.2.136'. [ 320.364473][ T2209] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 320.666501][ T2209] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 320.874779][ T2209] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 321.127822][ T2209] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 321.263611][ T6328] loop3: detected capacity change from 0 to 128 [ 321.532728][ T6328] syz.3.142: attempt to access beyond end of device [ 321.532728][ T6328] loop3: rw=2049, sector=138, nr_sectors = 2 limit=128 [ 321.611899][ T6328] syz.3.142: attempt to access beyond end of device [ 321.611899][ T6328] loop3: rw=8390657, sector=138, nr_sectors = 2 limit=128 [ 321.628371][ T6328] Buffer I/O error on dev loop3, logical block 69, lost async page write [ 321.961287][ T2209] bridge_slave_1: left allmulticast mode [ 321.967202][ T2209] bridge_slave_1: left promiscuous mode [ 321.974564][ T2209] bridge0: port 2(bridge_slave_1) entered disabled state [ 322.179548][ T2209] bridge_slave_0: left allmulticast mode [ 322.185465][ T2209] bridge_slave_0: left promiscuous mode [ 322.192750][ T2209] bridge0: port 1(bridge_slave_0) entered disabled state [ 323.263476][ T2209] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 323.292725][ T2209] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 323.320001][ T2209] bond0 (unregistering): (slave macvlan2): Releasing backup interface [ 323.332758][ T2209] team0: left promiscuous mode [ 323.337757][ T2209] team_slave_0: left promiscuous mode [ 323.344870][ T2209] team_slave_1: left promiscuous mode [ 323.381418][ T2209] bond0 (unregistering): Released all slaves [ 324.551025][ T2209] hsr_slave_0: left promiscuous mode [ 324.632452][ T2209] hsr_slave_1: left promiscuous mode [ 324.653573][ T2209] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 324.663408][ T2209] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 324.798992][ T2209] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 324.807053][ T2209] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 324.950347][ T2209] veth1_macvtap: left promiscuous mode [ 325.004176][ T2209] veth0_macvtap: left promiscuous mode [ 325.035762][ T51] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 325.046763][ T2209] veth1_vlan: left promiscuous mode [ 325.056683][ T51] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 325.066751][ T51] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 325.074338][ T2209] veth0_vlan: left promiscuous mode [ 325.080879][ T51] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 325.186716][ T51] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 327.298798][ T51] Bluetooth: hci1: command tx timeout [ 327.450056][ T2209] team0 (unregistering): Port device team_slave_1 removed [ 327.583973][ T2209] team0 (unregistering): Port device team_slave_0 removed [ 327.744735][ T6385] loop4: detected capacity change from 0 to 16 [ 327.851590][ T6385] erofs (device loop4): mounted with root inode @ nid 36. [ 327.964661][ T6389] netlink: 8 bytes leftover after parsing attributes in process `syz.2.159'. [ 327.980941][ T6385] erofs (device loop4): bogus lookback distance 1388 @ lcn 42 of nid 36 [ 328.020162][ T6385] erofs (device loop4): failed to decompress (lz4) -117 @ pa 4096 size 4096 => 1851 [ 328.030387][ T6385] erofs (device loop4): read error -117 @ 43 of nid 36 [ 328.107055][ T6385] erofs (device loop4): bogus lookback distance 1388 @ lcn 42 of nid 36 [ 328.173416][ T6385] erofs (device loop4): failed to decompress (lz4) -117 @ pa 4096 size 4096 => 1851 [ 328.210549][ T6385] erofs (device loop4): read error -117 @ 43 of nid 36 [ 329.388846][ T51] Bluetooth: hci1: command tx timeout [ 330.126414][ T6405] netlink: 8 bytes leftover after parsing attributes in process `syz.4.164'. [ 330.227981][ T6407] mmap: syz.3.165 (6407) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 331.027281][ T6354] chnl_net:caif_netlink_parms(): no params data found [ 331.460146][ T51] Bluetooth: hci1: command tx timeout [ 332.718647][ T5907] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 332.948726][ T5907] usb 3-1: Using ep0 maxpacket: 32 [ 332.968006][ T5907] usb 3-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 332.984410][ T5907] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 333.096037][ T5907] usb 3-1: config 0 descriptor?? [ 333.168130][ T5907] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 333.372035][ T6354] bridge0: port 1(bridge_slave_0) entered blocking state [ 333.379929][ T6354] bridge0: port 1(bridge_slave_0) entered disabled state [ 333.445641][ T6354] bridge_slave_0: entered allmulticast mode [ 333.482363][ T6354] bridge_slave_0: entered promiscuous mode [ 333.539116][ T51] Bluetooth: hci1: command tx timeout [ 333.552226][ T6444] Bluetooth: MGMT ver 1.23 [ 333.586135][ T6354] bridge0: port 2(bridge_slave_1) entered blocking state [ 333.598889][ T6354] bridge0: port 2(bridge_slave_1) entered disabled state [ 333.683544][ T6354] bridge_slave_1: entered allmulticast mode [ 333.754273][ T6354] bridge_slave_1: entered promiscuous mode [ 334.293749][ T6451] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 334.427396][ T6354] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 334.449596][ T5907] gspca_vc032x: reg_w err -71 [ 334.454603][ T5907] gspca_vc032x: I2c Bus Busy Wait 00 [ 334.460764][ T5907] gspca_vc032x: I2c Bus Busy Wait 00 [ 334.466227][ T5907] gspca_vc032x: I2c Bus Busy Wait 00 [ 334.471783][ T5907] gspca_vc032x: I2c Bus Busy Wait 00 [ 334.477235][ T5907] gspca_vc032x: I2c Bus Busy Wait 00 [ 334.482847][ T5907] gspca_vc032x: I2c Bus Busy Wait 00 [ 334.488644][ T5907] gspca_vc032x: I2c Bus Busy Wait 00 [ 334.494093][ T5907] gspca_vc032x: I2c Bus Busy Wait 00 [ 334.499720][ T5907] gspca_vc032x: I2c Bus Busy Wait 00 [ 334.505171][ T5907] gspca_vc032x: I2c Bus Busy Wait 00 [ 334.520065][ T5907] gspca_vc032x: I2c Bus Busy Wait 00 [ 334.525720][ T5907] gspca_vc032x: I2c Bus Busy Wait 00 [ 334.531390][ T5907] gspca_vc032x: I2c Bus Busy Wait 00 [ 334.536860][ T5907] gspca_vc032x: I2c Bus Busy Wait 00 [ 334.542481][ T5907] gspca_vc032x: I2c Bus Busy Wait 00 [ 334.548015][ T5907] gspca_vc032x: I2c Bus Busy Wait 00 [ 334.553699][ T5907] gspca_vc032x: I2c Bus Busy Wait 00 [ 334.559412][ T5907] gspca_vc032x: I2c Bus Busy Wait 00 [ 334.564854][ T5907] gspca_vc032x: Unknown sensor... [ 334.570449][ T5907] vc032x 3-1:0.0: probe with driver vc032x failed with error -22 [ 334.619452][ T6354] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 334.968089][ T6457] netlink: 'syz.3.179': attribute type 12 has an invalid length. [ 334.976415][ T6457] netlink: 'syz.3.179': attribute type 29 has an invalid length. [ 334.984654][ T6457] netlink: 148 bytes leftover after parsing attributes in process `syz.3.179'. [ 334.994093][ T6457] netlink: 'syz.3.179': attribute type 2 has an invalid length. [ 335.002180][ T6457] netlink: 'syz.3.179': attribute type 2 has an invalid length. [ 335.055810][ T6354] team0: Port device team_slave_0 added [ 335.108602][ T5907] usb 3-1: USB disconnect, device number 2 [ 335.181954][ T6354] team0: Port device team_slave_1 added [ 335.682773][ T6354] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 335.690279][ T6354] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 335.719322][ T6354] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 335.925028][ T6354] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 335.932555][ T6354] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 335.964573][ T6354] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 336.815681][ T6354] hsr_slave_0: entered promiscuous mode [ 336.839184][ T6354] hsr_slave_1: entered promiscuous mode [ 336.909096][ T6354] debugfs: 'hsr0' already exists in 'hsr' [ 336.915384][ T6354] Cannot create hsr debugfs directory [ 336.995822][ T6470] loop4: detected capacity change from 0 to 4096 [ 337.082798][ T6470] EXT4-fs (loop4): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 337.183558][ T6470] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 337.421072][ T6470] EXT4-fs warning (device loop4): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 337.509615][ T6475] EXT4-fs (loop4): warning: mounting unchecked fs, running e2fsck is recommended [ 337.618564][ T6475] EXT4-fs warning (device loop4): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 338.098896][ T0] NOHZ tick-stop error: local softirq work is pending, handler #2c2!!! [ 338.195284][ T5791] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 338.350203][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 339.120350][ T0] NOHZ tick-stop error: local softirq work is pending, handler #240!!! [ 339.788541][ T6354] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 339.916829][ T6354] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 340.046101][ T6354] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 340.170893][ T6354] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 342.269561][ T6354] 8021q: adding VLAN 0 to HW filter on device bond0 [ 342.551253][ T6354] 8021q: adding VLAN 0 to HW filter on device team0 [ 342.886463][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 342.894131][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 343.102524][ T64] bridge0: port 2(bridge_slave_1) entered blocking state [ 343.110339][ T64] bridge0: port 2(bridge_slave_1) entered forwarding state [ 344.071159][ T6543] netlink: 52 bytes leftover after parsing attributes in process `syz.1.204'. [ 345.804856][ T6562] loop2: detected capacity change from 0 to 512 [ 345.849434][ T6562] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 346.230586][ T6562] EXT4-fs (loop2): 1 orphan inode deleted [ 346.251599][ T6562] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 346.277902][ T2973] Quota error (device loop2): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 346.292223][ T2973] EXT4-fs error (device loop2): ext4_release_dquot:7022: comm kworker/u8:7: Failed to release dquot type 1 [ 346.374990][ T6562] ext4 filesystem being mounted at /48/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 346.747978][ T6354] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 346.983632][ T5778] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 347.608770][ T24] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 347.899195][ T24] usb 2-1: config 0 has no interfaces? [ 347.973292][ T24] usb 2-1: New USB device found, idVendor=0424, idProduct=012c, bcdDevice=22.7e [ 347.984374][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 347.992889][ T24] usb 2-1: Product: syz [ 347.997336][ T24] usb 2-1: Manufacturer: syz [ 348.002233][ T24] usb 2-1: SerialNumber: syz [ 348.077972][ T24] usb 2-1: config 0 descriptor?? [ 348.473228][ T10] usb 2-1: USB disconnect, device number 4 [ 350.530452][ T6354] veth0_vlan: entered promiscuous mode [ 350.759370][ T6354] veth1_vlan: entered promiscuous mode [ 351.224030][ T6354] veth0_macvtap: entered promiscuous mode [ 351.367548][ T6354] veth1_macvtap: entered promiscuous mode [ 351.773245][ T6354] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 351.966134][ T6354] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 352.163048][ T2973] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 352.278567][ T2973] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 352.322433][ T2973] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 352.377480][ T2973] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 355.726484][ T6663] netlink: 4 bytes leftover after parsing attributes in process `syz.2.236'. [ 358.521252][ T6696] netlink: 56 bytes leftover after parsing attributes in process `syz.3.246'. [ 360.375721][ T3439] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 360.383980][ T3439] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 360.809595][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 360.817732][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 362.177944][ T6734] input: syz1 as /devices/virtual/input/input6 [ 362.735899][ T6738] loop1: detected capacity change from 0 to 512 [ 363.049970][ T6738] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 363.126363][ T6738] ext4 filesystem being mounted at /56/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 363.728394][ T6751] netlink: 12 bytes leftover after parsing attributes in process `syz.4.264'. [ 363.853569][ T5788] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 364.504737][ T6751] Zero length message leads to an empty skb [ 365.161079][ T6766] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 365.173197][ T6764] netlink: 28 bytes leftover after parsing attributes in process `syz.2.268'. [ 365.331692][ T6766] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 365.408111][ T6766] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 365.661396][ T6766] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 365.821620][ T6766] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 365.836080][ T6766] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 365.860719][ T6766] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 366.058758][ T6766] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 366.182468][ T6766] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 366.293707][ T6766] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 366.508095][ T6777] loop2: detected capacity change from 0 to 512 [ 366.802499][ T6777] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 366.850283][ T6777] ext4 filesystem being mounted at /66/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 367.714807][ T5778] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 368.052642][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 368.060664][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 368.640806][ T6790] 8021q: adding VLAN 0 to HW filter on device bond1 [ 368.757474][ T6790] bond0: (slave bond1): Enslaving as an active interface with an up link [ 368.968961][ T795] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 369.158759][ T795] usb 5-1: Using ep0 maxpacket: 16 [ 369.199400][ T795] usb 5-1: config 0 interface 0 altsetting 64 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 369.210980][ T795] usb 5-1: config 0 interface 0 has no altsetting 0 [ 369.217886][ T795] usb 5-1: New USB device found, idVendor=0079, idProduct=1844, bcdDevice= 0.00 [ 369.231495][ T795] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 369.296571][ T795] usb 5-1: config 0 descriptor?? [ 369.790218][ T795] usbhid 5-1:0.0: can't add hid device: -71 [ 369.797161][ T795] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 369.908804][ T795] usb 5-1: USB disconnect, device number 2 [ 372.407371][ T30] audit: type=1326 audit(1769706364.307:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6825 comm="syz.5.283" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73cd539 code=0x7ffc0000 [ 372.432973][ T30] audit: type=1326 audit(1769706364.307:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6825 comm="syz.5.283" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73cd539 code=0x7ffc0000 [ 372.571909][ T30] audit: type=1326 audit(1769706364.447:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6825 comm="syz.5.283" exe="/root/syz-executor" sig=0 arch=40000003 syscall=399 compat=1 ip=0xf73cd539 code=0x7ffc0000 [ 372.594628][ T30] audit: type=1326 audit(1769706364.447:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6825 comm="syz.5.283" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73cd539 code=0x7ffc0000 [ 372.621545][ T30] audit: type=1326 audit(1769706364.447:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6825 comm="syz.5.283" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73cd539 code=0x7ffc0000 [ 372.647270][ T30] audit: type=1326 audit(1769706364.487:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6825 comm="syz.5.283" exe="/root/syz-executor" sig=0 arch=40000003 syscall=400 compat=1 ip=0xf73cd539 code=0x7ffc0000 [ 372.700620][ T5907] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 372.830596][ T5907] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz1] on syz0 [ 372.899937][ T6832] loop1: detected capacity change from 0 to 1024 [ 373.105164][ T6836] loop4: detected capacity change from 0 to 128 [ 373.294551][ T6836] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 373.406611][ T6836] ext4 filesystem being mounted at /61/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 373.518407][ T35] hfsplus: b-tree write err: -5, ino 4 [ 373.946883][ T6837] fido_id[6837]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 374.747096][ T6844] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 375.219326][ T5783] Bluetooth: hci0: command 0x0406 tx timeout [ 375.225986][ T5783] Bluetooth: hci2: command 0x0406 tx timeout [ 375.245185][ T5791] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 378.615199][ T6887] cgroup: fork rejected by pids controller in /syz2 [ 380.340898][ T5783] Bluetooth: hci4: command 0x0406 tx timeout [ 380.344543][ T5782] Bluetooth: hci3: command 0x0406 tx timeout [ 380.757942][ T5975] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 380.975622][ T5975] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 381.224470][ T5975] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 381.489000][ T5975] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 382.117939][ T5975] bridge_slave_1: left allmulticast mode [ 382.124166][ T5975] bridge_slave_1: left promiscuous mode [ 382.138483][ T5975] bridge0: port 2(bridge_slave_1) entered disabled state [ 382.253372][ T5975] bridge_slave_0: left allmulticast mode [ 382.262008][ T5975] bridge_slave_0: left promiscuous mode [ 382.268993][ T5975] bridge0: port 1(bridge_slave_0) entered disabled state [ 383.227317][ T5975] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 383.288851][ T5975] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 383.315805][ T5975] bond0 (unregistering): Released all slaves [ 383.881600][ T6934] netlink: 4 bytes leftover after parsing attributes in process `syz.1.314'. [ 383.891204][ T6934] netlink: 'syz.1.314': attribute type 13 has an invalid length. [ 384.141050][ T6934] vxlan0: entered promiscuous mode [ 384.285091][ T3439] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 384.418944][ T5975] hsr_slave_0: left promiscuous mode [ 384.448797][ T5975] hsr_slave_1: left promiscuous mode [ 384.503707][ T5975] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 384.511683][ T5975] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 384.638776][ T5975] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 384.646415][ T5975] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 384.829090][ T5975] veth1_macvtap: left promiscuous mode [ 384.834969][ T5975] veth0_macvtap: left promiscuous mode [ 384.889460][ T5975] veth1_vlan: left promiscuous mode [ 384.918750][ T5975] veth0_vlan: left promiscuous mode [ 385.160860][ T5782] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 385.178938][ T5782] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 385.188955][ T5782] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 385.230645][ T5782] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 385.249907][ T5782] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 385.632154][ T6949] netlink: 4 bytes leftover after parsing attributes in process `syz.1.320'. [ 386.875141][ T6957] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 386.911111][ T6957] overlayfs: failed to set xattr on upper [ 386.918595][ T6957] overlayfs: ...falling back to redirect_dir=nofollow. [ 386.925731][ T6957] overlayfs: ...falling back to index=off. [ 386.933124][ T6957] overlayfs: ...falling back to xino=off. [ 386.940342][ T6957] overlayfs: maximum fs stacking depth exceeded [ 387.154778][ T5975] team0 (unregistering): Port device team_slave_1 removed [ 387.273606][ T5975] team0 (unregistering): Port device team_slave_0 removed [ 387.379943][ T5782] Bluetooth: hci0: command tx timeout [ 388.363645][ T3439] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 388.389593][ T6963] loop4: detected capacity change from 0 to 512 [ 388.429720][ T35] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 388.469269][ T35] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 388.607487][ T6963] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 388.842799][ T6963] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 388.980177][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 389.270534][ T5791] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 389.458549][ T5782] Bluetooth: hci0: command tx timeout [ 390.814054][ T6978] loop5: detected capacity change from 0 to 512 [ 391.194506][ T6978] EXT4-fs error (device loop5): ext4_orphan_get:1391: inode #15: comm syz.5.330: inode has both inline data and extents flags [ 391.277623][ T6942] chnl_net:caif_netlink_parms(): no params data found [ 391.363934][ T6978] EXT4-fs error (device loop5): ext4_orphan_get:1396: comm syz.5.330: couldn't read orphan inode 15 (err -117) [ 391.512685][ T6978] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 391.557911][ T5782] Bluetooth: hci0: command tx timeout [ 392.342279][ T6354] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 393.652892][ T5782] Bluetooth: hci0: command tx timeout [ 393.887905][ T6942] bridge0: port 1(bridge_slave_0) entered blocking state [ 393.895868][ T6942] bridge0: port 1(bridge_slave_0) entered disabled state [ 393.967854][ T6942] bridge_slave_0: entered allmulticast mode [ 394.041378][ T6942] bridge_slave_0: entered promiscuous mode [ 394.124754][ T6942] bridge0: port 2(bridge_slave_1) entered blocking state [ 394.132784][ T6942] bridge0: port 2(bridge_slave_1) entered disabled state [ 394.213279][ T6942] bridge_slave_1: entered allmulticast mode [ 394.236115][ T6942] bridge_slave_1: entered promiscuous mode [ 394.754779][ T7022] netlink: 'syz.1.343': attribute type 12 has an invalid length. [ 394.763020][ T7022] netlink: 'syz.1.343': attribute type 29 has an invalid length. [ 394.771415][ T7022] netlink: 148 bytes leftover after parsing attributes in process `syz.1.343'. [ 394.783495][ T7022] netlink: 'syz.1.343': attribute type 1 has an invalid length. [ 394.835409][ T6942] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 394.850632][ T7023] loop3: detected capacity change from 0 to 256 [ 394.885351][ T7023] vfat: Bad value for 'nonumtail' [ 395.023589][ T6942] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 395.651549][ T6942] team0: Port device team_slave_0 added [ 395.743929][ T6942] team0: Port device team_slave_1 added [ 396.163359][ T7036] netlink: 4 bytes leftover after parsing attributes in process `syz.3.348'. [ 396.235469][ T6942] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 396.239777][ T7036] netlink: 190 bytes leftover after parsing attributes in process `syz.3.348'. [ 396.242939][ T6942] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 396.281874][ T6942] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 396.436017][ T6942] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 396.443414][ T6942] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 396.473505][ T6942] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 397.093752][ T6942] hsr_slave_0: entered promiscuous mode [ 397.155430][ T6942] hsr_slave_1: entered promiscuous mode [ 399.779052][ T5782] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 400.592727][ T6942] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 400.684438][ T6942] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 400.689626][ T7083] netlink: 4 bytes leftover after parsing attributes in process `syz.5.362'. [ 400.807751][ T6942] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 401.393035][ T6942] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 401.803612][ T7099] netlink: 4 bytes leftover after parsing attributes in process `syz.4.367'. [ 403.345123][ T6942] 8021q: adding VLAN 0 to HW filter on device bond0 [ 403.675636][ T6942] 8021q: adding VLAN 0 to HW filter on device team0 [ 403.785314][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 403.793118][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 404.035837][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 404.043487][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 404.925365][ T6942] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 404.937518][ T6942] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 406.509256][ T7140] netlink: 16 bytes leftover after parsing attributes in process `syz.3.381'. [ 406.518979][ T7140] netlink: 56 bytes leftover after parsing attributes in process `syz.3.381'. [ 406.553663][ T7140] macvlan0: entered allmulticast mode [ 406.560321][ T7140] veth1_vlan: entered allmulticast mode [ 406.768735][ T7144] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 407.732434][ T6942] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 408.944554][ T6942] veth0_vlan: entered promiscuous mode [ 409.565265][ T6942] veth1_vlan: entered promiscuous mode [ 410.194458][ T7204] loop1: detected capacity change from 0 to 512 [ 411.201759][ T7204] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 411.404390][ T6942] veth0_macvtap: entered promiscuous mode [ 411.837273][ T7204] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 411.915128][ T6942] veth1_macvtap: entered promiscuous mode [ 412.037131][ T7204] ext4 filesystem being mounted at /85/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 412.404813][ T6942] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 412.634158][ T6942] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 412.831896][ T5788] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 412.859810][ T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 412.934360][ T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 413.026417][ T54] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 413.091778][ T54] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 418.962727][ T7329] netlink: 28 bytes leftover after parsing attributes in process `syz.4.409'. [ 419.934496][ T7337] loop3: detected capacity change from 0 to 256 [ 420.070003][ T7337] FAT-fs (loop3): Directory bread(block 517) failed [ 420.088026][ T7337] FAT-fs (loop3): Directory bread(block 518) failed [ 420.114567][ T7337] FAT-fs (loop3): Directory bread(block 519) failed [ 420.182029][ T7337] FAT-fs (loop3): Directory bread(block 520) failed [ 420.216555][ T7337] FAT-fs (loop3): Directory bread(block 521) failed [ 420.263492][ T7337] FAT-fs (loop3): Directory bread(block 522) failed [ 420.285868][ T7337] FAT-fs (loop3): Directory bread(block 523) failed [ 420.305561][ T7337] FAT-fs (loop3): Directory bread(block 524) failed [ 420.342168][ T7337] FAT-fs (loop3): Directory bread(block 525) failed [ 420.399617][ T7337] FAT-fs (loop3): Directory bread(block 526) failed [ 420.860195][ T7348] netlink: 4 bytes leftover after parsing attributes in process `syz.1.417'. [ 420.933711][ T7348] netlink: 4 bytes leftover after parsing attributes in process `syz.1.417'. [ 421.046242][ T7348] netlink: 4 bytes leftover after parsing attributes in process `syz.1.417'. [ 422.056107][ T54] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 422.067667][ T54] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 422.365416][ T7364] loop4: detected capacity change from 0 to 1024 [ 422.465160][ T54] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 422.477964][ T54] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 422.505652][ T7364] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 422.749883][ T7364] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:483: comm syz.4.420: Invalid block bitmap block 0 in block_group 0 [ 422.809495][ T7364] EXT4-fs (loop4): Remounting filesystem read-only [ 422.862914][ T7364] Quota error (device loop4): write_blk: dquota write failed [ 422.871103][ T7364] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 422.962841][ T7364] EXT4-fs (loop4): 1 orphan inode deleted [ 423.073622][ T7364] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 423.308881][ T7364] syz.4.420 (7364) used greatest stack depth: 3080 bytes left [ 423.726021][ T5791] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 424.067502][ T7382] loop3: detected capacity change from 0 to 128 [ 424.356206][ T7387] syz.3.425: attempt to access beyond end of device [ 424.356206][ T7387] loop3: rw=2049, sector=145, nr_sectors = 8 limit=128 [ 425.453060][ T7397] netlink: 4 bytes leftover after parsing attributes in process `syz.3.432'. [ 425.520065][ T7399] netlink: 4 bytes leftover after parsing attributes in process `syz.3.432'. [ 425.633761][ T7397] netlink: 4 bytes leftover after parsing attributes in process `syz.3.432'. [ 425.896238][ T7394] loop1: detected capacity change from 0 to 4096 [ 425.971503][ T7394] EXT4-fs: Ignoring removed mblk_io_submit option [ 426.101545][ T7394] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 426.110865][ T7394] EXT4-fs (loop1): Test dummy encryption mode enabled [ 426.319053][ T7394] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 426.713811][ T5788] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 429.327183][ T7439] loop1: detected capacity change from 0 to 128 [ 429.450171][ T7439] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 429.501787][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 429.508941][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 430.397677][ T7220] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 430.871868][ T7455] evm: overlay not supported [ 431.186158][ T7452] loop2: detected capacity change from 0 to 4096 [ 431.244761][ T7452] EXT4-fs (loop2): Test dummy encryption mode enabled [ 431.437563][ T7452] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 431.667231][ T7452] netlink: 4 bytes leftover after parsing attributes in process `syz.2.452'. [ 432.297470][ T6942] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 432.992845][ T30] audit: type=1326 audit(1769706425.892:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7475 comm="syz.2.461" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf73ad539 code=0x0 [ 434.175510][ T7484] loop1: detected capacity change from 0 to 2048 [ 434.281376][ T10] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 434.368209][ C0] hrtimer: interrupt took 328115 ns [ 434.381189][ T7484] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 434.424838][ T7489] loop3: detected capacity change from 0 to 2048 [ 434.506025][ T10] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 434.515948][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 434.524435][ T10] usb 5-1: Product: syz [ 434.528980][ T10] usb 5-1: Manufacturer: syz [ 434.533808][ T10] usb 5-1: SerialNumber: syz [ 434.600562][ T5997] Alternate GPT is invalid, using primary GPT. [ 434.607938][ T5997] loop3: p1 p2 p3 [ 434.612333][ T5997] loop3: partition table partially beyond EOD, truncated [ 434.983585][ T7489] Alternate GPT is invalid, using primary GPT. [ 434.993030][ T7489] loop3: p1 p2 p3 [ 434.996998][ T7489] loop3: partition table partially beyond EOD, truncated [ 435.629545][ T5788] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 435.812630][ T10] cdc_ncm 5-1:1.0: failed to get mac address [ 436.028440][ T10] cdc_ncm 5-1:1.0: bind() failure [ 436.040705][ T6335] udevd[6335]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 436.063971][ T6005] udevd[6005]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 436.121837][ T6334] udevd[6334]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 436.163775][ T10] cdc_ncm 5-1:1.1: probe with driver cdc_ncm failed with error -71 [ 436.206615][ T10] cdc_mbim 5-1:1.1: probe with driver cdc_mbim failed with error -71 [ 436.286744][ T10] usbtest 5-1:1.1: probe with driver usbtest failed with error -71 [ 436.381266][ T10] usb 5-1: USB disconnect, device number 3 [ 436.554939][ T6005] udevd[6005]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 436.565390][ T5997] udevd[5997]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 436.598943][ T6334] udevd[6334]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 437.814329][ T7512] netlink: 'syz.1.477': attribute type 12 has an invalid length. [ 437.822614][ T7512] netlink: 'syz.1.477': attribute type 29 has an invalid length. [ 437.830831][ T7512] netlink: 148 bytes leftover after parsing attributes in process `syz.1.477'. [ 437.848297][ T7512] netlink: 'syz.1.477': attribute type 1 has an invalid length. [ 437.857345][ T7512] netlink: 'syz.1.477': attribute type 2 has an invalid length. [ 437.865783][ T7512] netlink: 39 bytes leftover after parsing attributes in process `syz.1.477'. [ 438.247121][ T7517] loop3: detected capacity change from 0 to 128 [ 438.281679][ C0] Unknown status report in ack skb [ 438.328641][ T7517] FAT-fs (loop3): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 438.530560][ T30] audit: type=1800 audit(1769706431.432:12): pid=7517 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.479" name="file1" dev="loop3" ino=1048622 res=0 errno=0 [ 439.670230][ T7528] netlink: 4 bytes leftover after parsing attributes in process `syz.3.484'. [ 440.190348][ T7528] hsr_slave_1 (unregistering): left promiscuous mode [ 441.002884][ T7545] af_packet: tpacket_rcv: packet too big, clamped from 26 to 4294967272. macoff=96 [ 441.013354][ T7545] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1303 [ 441.058108][ T10] libceph: connect (1)[c::]:6789 error -101 [ 441.123987][ T10] libceph: mon0 (1)[c::]:6789 connect error [ 441.140111][ T10] libceph: connect (1)[c::]:6789 error -101 [ 441.159590][ T10] libceph: mon0 (1)[c::]:6789 connect error [ 441.193144][ T795] libceph: connect (1)[c::]:6789 error -101 [ 441.238834][ T795] libceph: mon0 (1)[c::]:6789 connect error [ 441.251094][ T795] libceph: connect (1)[c::]:6789 error -101 [ 441.257687][ T795] libceph: mon0 (1)[c::]:6789 connect error [ 441.422119][ T10] libceph: connect (1)[c::]:6789 error -101 [ 441.487679][ T10] libceph: mon0 (1)[c::]:6789 connect error [ 441.530455][ T795] libceph: connect (1)[c::]:6789 error -101 [ 441.536933][ T795] libceph: mon0 (1)[c::]:6789 connect error [ 441.636340][ T7543] ceph: No mds server is up or the cluster is laggy [ 441.638858][ T7540] ceph: No mds server is up or the cluster is laggy [ 441.954814][ T7553] loop4: detected capacity change from 0 to 2048 [ 442.137825][ T7553] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 442.679049][ T7563] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 442.799976][ T5791] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 443.584930][ T7576] netlink: 4 bytes leftover after parsing attributes in process `syz.4.499'. [ 443.722187][ T7576] netlink: 4 bytes leftover after parsing attributes in process `syz.4.499'. [ 444.176337][ T7578] netlink: 4 bytes leftover after parsing attributes in process `syz.5.501'. [ 444.300217][ T7578] netlink: 4 bytes leftover after parsing attributes in process `syz.5.501'. [ 444.517747][ T10] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 444.735967][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 444.753006][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 444.763724][ T10] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 444.777372][ T10] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 444.786959][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 444.808442][ T795] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 444.946182][ T10] usb 2-1: config 0 descriptor?? [ 445.013730][ T795] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 445.106564][ T795] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 445.116139][ T795] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 445.124771][ T795] usb 5-1: Product: syz [ 445.131394][ T795] usb 5-1: Manufacturer: syz [ 445.136212][ T795] usb 5-1: SerialNumber: syz [ 445.424448][ T7588] netlink: 4 bytes leftover after parsing attributes in process `syz.3.506'. [ 445.528650][ T7588] netlink: 4 bytes leftover after parsing attributes in process `syz.3.506'. [ 445.539409][ T10] plantronics 0003:047F:FFFF.0003: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 445.583133][ T7589] netlink: 4 bytes leftover after parsing attributes in process `syz.3.506'. [ 445.601964][ T7588] netlink: 4 bytes leftover after parsing attributes in process `syz.3.506'. [ 446.060010][ T10] usb 2-1: USB disconnect, device number 5 [ 446.511952][ T795] cdc_ncm 5-1:1.0: failed to get mac address [ 446.612224][ T7593] fido_id[7593]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 446.725130][ T795] cdc_ncm 5-1:1.0: bind() failure [ 446.957716][ T795] cdc_ncm 5-1:1.1: probe with driver cdc_ncm failed with error -71 [ 447.006185][ T795] cdc_mbim 5-1:1.1: probe with driver cdc_mbim failed with error -71 [ 447.065220][ T795] usbtest 5-1:1.1: probe with driver usbtest failed with error -71 [ 447.137803][ T795] usb 5-1: USB disconnect, device number 4 [ 447.621223][ T7606] netlink: 8 bytes leftover after parsing attributes in process `syz.1.513'. [ 448.748558][ T10] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 448.968845][ T10] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 448.979415][ T10] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 448.991481][ T10] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121 [ 449.177939][ T10] usb 3-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 449.187723][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 449.196327][ T10] usb 3-1: Product: syz [ 449.205516][ T10] usb 3-1: Manufacturer: syz [ 449.212113][ T10] usb 3-1: SerialNumber: syz [ 449.343369][ T10] usb 3-1: config 0 descriptor?? [ 449.390314][ T7616] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 449.443183][ T7616] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 449.486799][ T10] usb 3-1: ucan: probing device on interface #0 [ 449.539244][ T51] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 449.548082][ T51] Bluetooth: hci0: Injecting HCI hardware error event [ 449.556706][ T51] Bluetooth: hci0: hardware error 0x00 [ 449.871845][ T7628] netlink: 12 bytes leftover after parsing attributes in process `syz.5.522'. [ 449.882820][ T7628] bridge_slave_0: default FDB implementation only supports local addresses [ 449.997249][ T7628] netlink: 12 bytes leftover after parsing attributes in process `syz.5.522'. [ 450.009580][ T7628] bridge_slave_0: default FDB implementation only supports local addresses [ 450.319175][ T10] ucan 3-1:0.0 can0: registered device [ 450.488717][ T10] ucan 3-1:0.0 can0: firmware string: unknown [ 450.535445][ T10] usb 3-1: USB disconnect, device number 3 [ 451.091835][ T7637] netlink: 52 bytes leftover after parsing attributes in process `syz.1.525'. [ 451.240215][ T7639] netlink: 4 bytes leftover after parsing attributes in process `syz.1.525'. [ 451.649486][ T51] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 452.018559][ T51] Bluetooth: hci1: command 0x0406 tx timeout [ 454.540188][ T7655] netlink: 32 bytes leftover after parsing attributes in process `syz.2.530'. [ 456.496116][ T7676] loop3: detected capacity change from 0 to 128 [ 456.681938][ T7676] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 456.766365][ T7676] ext4 filesystem being mounted at /116/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 457.437867][ T5790] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 457.541937][ T7685] netlink: 4 bytes leftover after parsing attributes in process `syz.5.542'. [ 457.625213][ T7685] netlink: 4 bytes leftover after parsing attributes in process `syz.5.542'. [ 457.793026][ T7687] netlink: 'syz.2.543': attribute type 8 has an invalid length. [ 457.806833][ T7687] netlink: 4 bytes leftover after parsing attributes in process `syz.2.543'. [ 458.089556][ T7687] bond0: entered promiscuous mode [ 458.095105][ T7687] bond_slave_0: entered promiscuous mode [ 458.103097][ T7687] bond_slave_1: entered promiscuous mode [ 458.271950][ T7687] gretap0: entered promiscuous mode [ 458.345061][ T7687] ip6gretap0: entered promiscuous mode [ 458.398889][ T7687] hsr1: entered promiscuous mode [ 458.575719][ T7689] IPVS: Scheduler module ip_vs_ not found [ 458.601651][ T7693] IPVS: length: 24 != 12792 [ 460.804730][ T7712] loop3: detected capacity change from 0 to 164 [ 462.707819][ T7724] overlayfs: lowerdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 469.522063][ T7787] loop5: detected capacity change from 0 to 1024 [ 469.727958][ T7787] hfsplus: xattr searching failed [ 469.822643][ T7787] hfsplus: xattr searching failed [ 470.138926][ T7795] capability: warning: `syz.1.581' uses deprecated v2 capabilities in a way that may be insecure [ 471.370318][ T7805] Bluetooth: MGMT ver 1.23 [ 471.432777][ T7806] loop2: detected capacity change from 0 to 1024 [ 471.598080][ T7806] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 471.674956][ T7806] ext4 filesystem being mounted at /30/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 471.970074][ T7806] EXT4-fs error (device loop2): ext4_map_blocks:825: inode #15: comm syz.2.585: lblock 0 mapped to illegal pblock 0 (length 1) [ 472.060983][ T7806] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 472.074691][ T7806] EXT4-fs (loop2): This should not happen!! Data will be lost [ 472.074691][ T7806] [ 472.474668][ T7806] EXT4-fs error (device loop2): ext4_map_blocks:783: inode #15: comm syz.2.585: lblock 0 mapped to illegal pblock 0 (length 1) [ 472.519897][ T7819] loop1: detected capacity change from 0 to 512 [ 472.558612][ T30] audit: type=1800 audit(1769706465.462:13): pid=7806 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.585" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 472.562805][ T7806] EXT4-fs error (device loop2): ext4_map_blocks:783: inode #15: comm syz.2.585: lblock 0 mapped to illegal pblock 0 (length 1) [ 472.619028][ T7819] EXT4-fs: Ignoring removed orlov option [ 472.736280][ T7819] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 473.209195][ T6942] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 473.451991][ T5788] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 473.582504][ T5907] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 473.799468][ T5907] usb 4-1: Using ep0 maxpacket: 8 [ 473.807422][ T7828] bond0: up delay (5) is not a multiple of miimon (4), value rounded to 4 ms [ 473.819964][ T5907] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 473.830783][ T5907] usb 4-1: config 0 has no interfaces? [ 473.836521][ T5907] usb 4-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 473.846468][ T5907] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 473.891657][ T7215] bond0: (slave bond1): link status definitely down, disabling slave [ 473.904142][ T7828] netlink: 'syz.5.593': attribute type 10 has an invalid length. [ 473.950403][ T7828] bridge0: port 2(bridge_slave_1) entered disabled state [ 473.960864][ T7828] bridge0: port 1(bridge_slave_0) entered disabled state [ 473.962986][ T5907] usb 4-1: config 0 descriptor?? [ 474.147814][ T7828] bridge0: port 2(bridge_slave_1) entered blocking state [ 474.155918][ T7828] bridge0: port 2(bridge_slave_1) entered forwarding state [ 474.165278][ T7828] bridge0: port 1(bridge_slave_0) entered blocking state [ 474.173078][ T7828] bridge0: port 1(bridge_slave_0) entered forwarding state [ 474.365571][ T7828] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 474.384186][ T13] bond0: (slave bridge0): link status definitely up, 0 Mbps full duplex [ 474.395114][ T5348] usb 4-1: USB disconnect, device number 4 [ 475.460037][ T7846] vcan0: tx drop: invalid da for name 0x00000000000000c7 [ 476.222939][ T7852] loop2: detected capacity change from 0 to 256 [ 477.031685][ T7852] FAT-fs (loop2): Directory bread(block 64) failed [ 477.050041][ T7852] FAT-fs (loop2): Directory bread(block 65) failed [ 477.116420][ T7852] FAT-fs (loop2): Directory bread(block 66) failed [ 477.137772][ T7852] FAT-fs (loop2): Directory bread(block 67) failed [ 477.145222][ T7852] FAT-fs (loop2): Directory bread(block 68) failed [ 477.168924][ T7852] FAT-fs (loop2): Directory bread(block 69) failed [ 477.184214][ T7852] FAT-fs (loop2): Directory bread(block 70) failed [ 477.263972][ T7852] FAT-fs (loop2): Directory bread(block 71) failed [ 477.280986][ T7865] netlink: 'syz.5.604': attribute type 6 has an invalid length. [ 477.302811][ T7852] FAT-fs (loop2): Directory bread(block 72) failed [ 477.338690][ T7852] FAT-fs (loop2): Directory bread(block 73) failed [ 479.301758][ T5348] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 479.562786][ T5348] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 479.573462][ T5348] usb 4-1: config 0 has no interfaces? [ 479.579491][ T5348] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 479.589014][ T5348] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 479.684392][ T5348] usb 4-1: config 0 descriptor?? [ 479.698450][ T5907] libceph: connect (1)[c::]:6789 error -101 [ 479.720662][ T5907] libceph: mon0 (1)[c::]:6789 connect error [ 479.747702][ T5907] libceph: connect (1)[c::]:6789 error -101 [ 479.762831][ T5907] libceph: mon0 (1)[c::]:6789 connect error [ 479.969658][ T5907] usb 4-1: USB disconnect, device number 5 [ 480.039970][ T5837] libceph: connect (1)[c::]:6789 error -101 [ 480.061429][ T5837] libceph: mon0 (1)[c::]:6789 connect error [ 480.108713][ T5348] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 480.383006][ T7883] ceph: No mds server is up or the cluster is laggy [ 480.618494][ T5348] usb 3-1: Using ep0 maxpacket: 32 [ 480.632488][ T5348] usb 3-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 7 [ 480.648031][ T5348] usb 3-1: config 0 interface 0 has no altsetting 0 [ 480.655679][ T5348] usb 3-1: New USB device found, idVendor=054c, idProduct=03d5, bcdDevice= 0.00 [ 480.667903][ T5348] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 480.830757][ T5348] usb 3-1: config 0 descriptor?? [ 481.205555][ T5348] usbhid 3-1:0.0: can't add hid device: -71 [ 481.212899][ T5348] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 481.428726][ T5348] usb 3-1: USB disconnect, device number 4 [ 481.848923][ T5348] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 482.049463][ T5348] usb 3-1: Using ep0 maxpacket: 32 [ 482.099562][ T5348] usb 3-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 7 [ 482.113019][ T5348] usb 3-1: config 0 interface 0 has no altsetting 0 [ 482.120087][ T5348] usb 3-1: New USB device found, idVendor=054c, idProduct=03d5, bcdDevice= 0.00 [ 482.129443][ T5348] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 482.280855][ T5348] usb 3-1: config 0 descriptor?? [ 482.972945][ T5348] input: HID 054c:03d5 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:054C:03D5.0004/input/input7 [ 483.167270][ T5348] sony 0003:054C:03D5.0004: input,hidraw0: USB HID v0.00 Joystick [HID 054c:03d5] on usb-dummy_hcd.2-1/input0 [ 483.291424][ T5348] usb 3-1: USB disconnect, device number 5 [ 484.246648][ T7915] fido_id[7915]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 485.896574][ T7933] loop5: detected capacity change from 0 to 1024 [ 486.241026][ T7938] loop2: detected capacity change from 0 to 2048 [ 486.334092][ T7933] hfsplus: request for non-existent node 33554434 in B*Tree [ 486.341988][ T7933] hfsplus: request for non-existent node 33554434 in B*Tree [ 486.359314][ T7938] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024) [ 486.469871][ T7933] hfsplus: request for non-existent node 33554434 in B*Tree [ 486.480146][ T7933] hfsplus: request for non-existent node 33554434 in B*Tree [ 486.554826][ T7938] syz.2.635: attempt to access beyond end of device [ 486.554826][ T7938] loop2: rw=8912896, sector=33554430, nr_sectors = 2 limit=2048 [ 486.555317][ T7940] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 486.768600][ T7938] NILFS error (device loop2): nilfs_check_folio: bad entry in directory #2: directory entry across blocks - offset=104, inode=16, rec_len=1816, name_len=0 [ 486.910288][ T7938] Remounting filesystem read-only [ 486.970775][ T7943] NILFS error (device loop2): nilfs_check_folio: bad entry in directory #2: directory entry across blocks - offset=104, inode=16, rec_len=1816, name_len=0 [ 487.074520][ T7220] hfsplus: request for non-existent node 33554434 in B*Tree [ 487.082557][ T7220] hfsplus: request for non-existent node 33554434 in B*Tree [ 487.093871][ T7944] NILFS error (device loop2): nilfs_check_folio: bad entry in directory #2: directory entry across blocks - offset=104, inode=16, rec_len=1816, name_len=0 [ 487.126022][ T7938] NILFS error (device loop2): nilfs_check_folio: bad entry in directory #2: directory entry across blocks - offset=104, inode=16, rec_len=1816, name_len=0 [ 487.260912][ T7938] NILFS error (device loop2): nilfs_check_folio: bad entry in directory #2: directory entry across blocks - offset=104, inode=16, rec_len=1816, name_len=0 [ 488.438552][ T5348] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 488.666226][ T5348] usb 4-1: Using ep0 maxpacket: 32 [ 488.721521][ T5348] usb 4-1: config 0 has an invalid interface number: 67 but max is 0 [ 488.732244][ T5348] usb 4-1: config 0 has no interface number 0 [ 488.810211][ T5348] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 488.822342][ T5348] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 488.833819][ T5348] usb 4-1: Product: syz [ 488.838909][ T5348] usb 4-1: Manufacturer: syz [ 488.843706][ T5348] usb 4-1: SerialNumber: syz [ 488.853766][ T7964] Invalid ELF header magic: != ELF [ 488.916702][ T5348] usb 4-1: config 0 descriptor?? [ 488.986326][ T5348] smsc95xx v2.0.0 [ 489.501513][ T5348] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 489.513031][ T5348] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 490.197912][ T5348] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000108: -71 [ 490.232809][ T5348] smsc95xx 4-1:0.67: probe with driver smsc95xx failed with error -71 [ 490.342011][ T5348] usb 4-1: USB disconnect, device number 6 [ 490.440999][ T7976] loop4: detected capacity change from 0 to 1024 [ 490.637951][ T7976] hfsplus: request for non-existent node 33554434 in B*Tree [ 490.645711][ T7976] hfsplus: request for non-existent node 33554434 in B*Tree [ 490.685637][ T7976] hfsplus: request for non-existent node 33554434 in B*Tree [ 490.695380][ T7976] hfsplus: request for non-existent node 33554434 in B*Tree [ 490.932444][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 490.939568][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 491.280734][ T7215] hfsplus: request for non-existent node 33554434 in B*Tree [ 491.294424][ T7215] hfsplus: request for non-existent node 33554434 in B*Tree [ 491.807587][ T7986] tipc: Started in network mode [ 491.813324][ T7986] tipc: Node identity ac14142f, cluster identity 4711 [ 491.827309][ T7986] tipc: New replicast peer: 0.0.0.0 [ 491.837220][ T7986] tipc: Enabled bearer , priority 10 [ 491.976721][ T7986] tipc: New replicast peer: ff02:0000:0000:0000:0000:0000:0000:0001 [ 492.958687][ T5348] tipc: Node number set to 2886997039 [ 494.399308][ T8015] loop5: detected capacity change from 0 to 256 [ 494.565015][ T8015] exFAT-fs (loop5): failed to load upcase table (idx : 0x00002e7f, chksum : 0x03279930, utbl_chksum : 0xe619d30d) [ 494.671161][ T8017] loop4: detected capacity change from 0 to 2048 [ 494.715605][ T8017] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024) [ 494.732979][ T8020] warning: `syz.3.665' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 494.850971][ T8022] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 494.955072][ T5907] usb 3-1: new full-speed USB device number 6 using dummy_hcd [ 495.194197][ T8024] Invalid ELF header magic: != ELF [ 495.218866][ T5907] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 495.281815][ T5907] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 495.293174][ T5907] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 495.393977][ T5907] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 495.404190][ T5907] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 495.413581][ T5907] usb 3-1: Product: syz [ 495.418043][ T5907] usb 3-1: Manufacturer: syz [ 495.423329][ T5907] usb 3-1: SerialNumber: syz [ 495.599035][ T8021] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 495.935981][ T8021] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 495.987860][ T8021] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 496.372809][ T8031] netlink: 'syz.4.670': attribute type 27 has an invalid length. [ 496.701315][ T8021] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 496.730008][ T8035] netlink: 4 bytes leftover after parsing attributes in process `syz.5.672'. [ 496.765998][ T8021] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 496.833374][ T8035] netlink: 4 bytes leftover after parsing attributes in process `syz.5.672'. [ 496.909768][ T8035] netlink: 4 bytes leftover after parsing attributes in process `syz.5.672'. [ 497.059610][ T5907] cdc_ncm 3-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 497.066414][ T5907] cdc_ncm 3-1:1.0: dwNtbInMaxSize=16 is too small. Using 2048 [ 497.074607][ T5907] cdc_ncm 3-1:1.0: setting rx_max = 2048 [ 497.274014][ T5907] cdc_ncm 3-1:1.0: setting tx_max = 88 [ 497.368289][ T8031] bridge0: port 2(bridge_slave_1) entered disabled state [ 497.378685][ T8031] bridge0: port 1(bridge_slave_0) entered disabled state [ 498.638982][ T8049] netlink: 240 bytes leftover after parsing attributes in process `syz.2.677'. [ 498.773279][ T8031] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 498.852928][ T8031] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 500.522091][ T5907] cdc_ncm 3-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.2-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 500.547337][ T54] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 500.571864][ T54] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 500.638653][ T54] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 500.673104][ T5907] usb 3-1: USB disconnect, device number 6 [ 500.682449][ T54] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 500.714288][ T5907] cdc_ncm 3-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.2-1, CDC NCM (NO ZLP) [ 501.911971][ C0] ===================================================== [ 501.919772][ C0] BUG: KMSAN: uninit-value in netif_skb_features+0x1153/0x2160 [ 501.927588][ C0] netif_skb_features+0x1153/0x2160 [ 501.933235][ C0] validate_xmit_skb+0xb6/0x2400 [ 501.938573][ C0] __dev_queue_xmit+0x16e1/0x5890 [ 501.944033][ C0] hsr_forward_skb+0x2193/0x3c30 [ 501.949420][ C0] hsr_handle_frame+0xcee/0x1110 [ 501.954570][ C0] __netif_receive_skb_core+0xeb0/0x4c70 [ 501.960524][ C0] __netif_receive_skb_list_core+0x2f9/0x1650 [ 501.966823][ C0] netif_receive_skb_list_internal+0xe9c/0x14e0 [ 501.973351][ C0] napi_complete_done+0x401/0x7b0 [ 501.978826][ C0] gro_cell_poll+0x2c8/0x310 [ 501.983717][ C0] __napi_poll+0xdc/0x8f0 [ 501.988313][ C0] net_rx_action+0xa5b/0x1c70 [ 501.993169][ C0] handle_softirqs+0x168/0x6f0 [ 501.998368][ C0] __do_softirq+0x14/0x1b [ 502.002966][ C0] do_softirq+0x58/0x90 [ 502.007283][ C0] __local_bh_enable_ip+0xa1/0xb0 [ 502.012589][ C0] tun_rx_batched+0x887/0x980 [ 502.017596][ C0] tun_get_user+0x6002/0x7830 [ 502.022607][ C0] tun_chr_write_iter+0x3e9/0x5c0 [ 502.027845][ C0] vfs_write+0xbe1/0x15c0 [ 502.032537][ C0] ksys_write+0x1d9/0x470 [ 502.037201][ C0] __ia32_sys_write+0x9a/0xf0 [ 502.042185][ C0] ia32_sys_call+0x3d5e/0x4340 [ 502.047219][ C0] __do_fast_syscall_32+0x14a/0x310 [ 502.052819][ C0] do_fast_syscall_32+0x37/0x80 [ 502.057881][ C0] do_SYSENTER_32+0x1f/0x30 [ 502.062711][ C0] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 502.069377][ C0] [ 502.071786][ C0] Uninit was created at: [ 502.076365][ C0] kmem_cache_alloc_node_noprof+0x9de/0x1780 [ 502.082632][ C0] kmalloc_reserve+0x13c/0x4b0 [ 502.087673][ C0] __alloc_skb+0x805/0x1030 [ 502.092491][ C0] __pskb_copy_fclone+0xcc/0x14c0 [ 502.097682][ C0] hsr_create_tagged_frame+0x30b/0x1330 [ 502.103556][ C0] hsr_forward_skb+0x16ca/0x3c30 [ 502.108818][ C0] hsr_handle_frame+0xcee/0x1110 [ 502.113968][ C0] __netif_receive_skb_core+0xeb0/0x4c70 [ 502.119886][ C0] __netif_receive_skb_list_core+0x2f9/0x1650 [ 502.126143][ C0] netif_receive_skb_list_internal+0xe9c/0x14e0 [ 502.132707][ C0] napi_complete_done+0x401/0x7b0 [ 502.137944][ C0] gro_cell_poll+0x2c8/0x310 [ 502.142866][ C0] __napi_poll+0xdc/0x8f0 [ 502.147382][ C0] net_rx_action+0xa5b/0x1c70 [ 502.152370][ C0] handle_softirqs+0x168/0x6f0 [ 502.157315][ C0] __do_softirq+0x14/0x1b [ 502.161945][ C0] [ 502.164395][ C0] CPU: 0 UID: 0 PID: 8076 Comm: syz.2.688 Tainted: G L syzkaller #0 PREEMPT(voluntary) [ 502.175946][ C0] Tainted: [L]=SOFTLOCKUP [ 502.180466][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 502.190878][ C0] ===================================================== [ 502.197910][ C0] Disabling lock debugging due to kernel taint [ 502.204257][ C0] Kernel panic - not syncing: kmsan.panic set ... [ 502.210914][ C0] CPU: 0 UID: 0 PID: 8076 Comm: syz.2.688 Tainted: G B L syzkaller #0 PREEMPT(voluntary) [ 502.222343][ C0] Tainted: [B]=BAD_PAGE, [L]=SOFTLOCKUP [ 502.227996][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 502.238187][ C0] Call Trace: [ 502.241567][ C0] [ 502.244516][ C0] __dump_stack+0x26/0x30 [ 502.249055][ C0] dump_stack_lvl+0x50/0x1c0 [ 502.253885][ C0] ? dump_stack+0x12/0x25 [ 502.258426][ C0] dump_stack+0x1e/0x25 [ 502.262779][ C0] vpanic+0x435/0xd40 [ 502.267002][ C0] panic+0x15d/0x160 [ 502.271161][ C0] kmsan_report+0x31a/0x320 [ 502.275914][ C0] ? kmsan_internal_poison_memory+0x78/0x90 [ 502.282033][ C0] ? __msan_warning+0x1b/0x30 [ 502.286933][ C0] ? netif_skb_features+0x1153/0x2160 [ 502.292543][ C0] ? validate_xmit_skb+0xb6/0x2400 [ 502.297893][ C0] ? __dev_queue_xmit+0x16e1/0x5890 [ 502.303328][ C0] ? hsr_forward_skb+0x2193/0x3c30 [ 502.308672][ C0] ? hsr_handle_frame+0xcee/0x1110 [ 502.314006][ C0] ? __netif_receive_skb_core+0xeb0/0x4c70 [ 502.320011][ C0] ? __netif_receive_skb_list_core+0x2f9/0x1650 [ 502.326452][ C0] ? netif_receive_skb_list_internal+0xe9c/0x14e0 [ 502.333069][ C0] ? napi_complete_done+0x401/0x7b0 [ 502.338446][ C0] ? gro_cell_poll+0x2c8/0x310 [ 502.343517][ C0] ? __napi_poll+0xdc/0x8f0 [ 502.348186][ C0] ? net_rx_action+0xa5b/0x1c70 [ 502.353224][ C0] ? handle_softirqs+0x168/0x6f0 [ 502.358436][ C0] ? __do_softirq+0x14/0x1b [ 502.363136][ C0] ? do_softirq+0x58/0x90 [ 502.367639][ C0] ? __local_bh_enable_ip+0xa1/0xb0 [ 502.373034][ C0] ? tun_rx_batched+0x887/0x980 [ 502.378111][ C0] ? tun_get_user+0x6002/0x7830 [ 502.383175][ C0] ? tun_chr_write_iter+0x3e9/0x5c0 [ 502.388593][ C0] ? vfs_write+0xbe1/0x15c0 [ 502.393323][ C0] ? ksys_write+0x1d9/0x470 [ 502.398041][ C0] ? __ia32_sys_write+0x9a/0xf0 [ 502.403104][ C0] ? ia32_sys_call+0x3d5e/0x4340 [ 502.408291][ C0] ? __do_fast_syscall_32+0x14a/0x310 [ 502.413899][ C0] ? do_fast_syscall_32+0x37/0x80 [ 502.419154][ C0] ? do_SYSENTER_32+0x1f/0x30 [ 502.424050][ C0] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 502.430802][ C0] ? ia32_sys_call+0x3d5e/0x4340 [ 502.436082][ C0] ? __do_fast_syscall_32+0x14a/0x310 [ 502.441691][ C0] ? do_fast_syscall_32+0x37/0x80 [ 502.446961][ C0] ? do_SYSENTER_32+0x1f/0x30 [ 502.451861][ C0] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 502.458689][ C0] ? kmsan_get_metadata+0xf1/0x160 [ 502.464066][ C0] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 502.470159][ C0] ? should_fail_ex+0x45/0x8c0 [ 502.475230][ C0] ? stack_depot_save_flags+0x35/0x790 [ 502.480959][ C0] ? kmsan_get_metadata+0xf1/0x160 [ 502.486320][ C0] ? kmsan_get_metadata+0xf1/0x160 [ 502.491692][ C0] ? kmsan_get_metadata+0xf1/0x160 [ 502.497076][ C0] ? kmsan_get_metadata+0xf1/0x160 [ 502.502443][ C0] ? __pfx_passthru_features_check+0x10/0x10 [ 502.508683][ C0] __msan_warning+0x1b/0x30 [ 502.513427][ C0] netif_skb_features+0x1153/0x2160 [ 502.518931][ C0] validate_xmit_skb+0xb6/0x2400 [ 502.524110][ C0] ? kmsan_get_metadata+0xf1/0x160 [ 502.529471][ C0] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 502.535548][ C0] ? netdev_core_pick_tx+0x341/0x4f0 [ 502.541075][ C0] ? kmsan_get_metadata+0xf1/0x160 [ 502.546525][ C0] __dev_queue_xmit+0x16e1/0x5890 [ 502.551781][ C0] ? kmsan_get_metadata+0xf1/0x160 [ 502.557133][ C0] ? kmsan_internal_memmove_metadata+0x91/0x230 [ 502.563632][ C0] ? kmsan_get_metadata+0xf1/0x160 [ 502.568988][ C0] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 502.575052][ C0] ? __dev_queue_xmit+0x27d/0x5890 [ 502.580431][ C0] hsr_forward_skb+0x2193/0x3c30 [ 502.585648][ C0] hsr_handle_frame+0xcee/0x1110 [ 502.590866][ C0] ? __pfx_hsr_handle_frame+0x10/0x10 [ 502.596454][ C0] __netif_receive_skb_core+0xeb0/0x4c70 [ 502.602278][ C0] ? __rb_insert_augmented+0x80/0x11b0 [ 502.608008][ C0] ? kmsan_get_metadata+0xf1/0x160 [ 502.613362][ C0] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 502.619429][ C0] ? filter_irq_stacks+0x49/0x190 [ 502.624764][ C0] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 502.631379][ C0] __netif_receive_skb_list_core+0x2f9/0x1650 [ 502.637695][ C0] netif_receive_skb_list_internal+0xe9c/0x14e0 [ 502.644188][ C0] napi_complete_done+0x401/0x7b0 [ 502.649412][ C0] gro_cell_poll+0x2c8/0x310 [ 502.654216][ C0] ? kmsan_get_metadata+0x146/0x160 [ 502.659666][ C0] ? __pfx_gro_cell_poll+0x10/0x10 [ 502.665014][ C0] __napi_poll+0xdc/0x8f0 [ 502.669526][ C0] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 502.675736][ C0] net_rx_action+0xa5b/0x1c70 [ 502.680613][ C0] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 502.686683][ C0] ? sched_clock_cpu+0x59/0xa70 [ 502.691784][ C0] ? kmsan_get_metadata+0xf1/0x160 [ 502.697195][ C0] ? __pfx_net_rx_action+0x10/0x10 [ 502.702489][ C0] handle_softirqs+0x168/0x6f0 [ 502.707463][ C0] __do_softirq+0x14/0x1b [ 502.711984][ C0] do_softirq+0x58/0x90 [ 502.716313][ C0] [ 502.719508][ C0] [ 502.722536][ C0] __local_bh_enable_ip+0xa1/0xb0 [ 502.727736][ C0] ? tun_rx_batched+0x167/0x980 [ 502.732808][ C0] tun_rx_batched+0x887/0x980 [ 502.737690][ C0] ? kmsan_get_metadata+0xf1/0x160 [ 502.743132][ C0] ? kmsan_get_metadata+0xf1/0x160 [ 502.748474][ C0] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 502.754532][ C0] tun_get_user+0x6002/0x7830 [ 502.759437][ C0] ? stack_depot_save_flags+0x35/0x790 [ 502.765086][ C0] ? kmsan_get_metadata+0xf1/0x160 [ 502.770428][ C0] ? kmsan_get_metadata+0xf1/0x160 [ 502.775771][ C0] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 502.782359][ C0] ? kmsan_get_metadata+0x80/0x160 [ 502.787770][ C0] tun_chr_write_iter+0x3e9/0x5c0 [ 502.793040][ C0] vfs_write+0xbe1/0x15c0 [ 502.797611][ C0] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 502.803397][ C0] ksys_write+0x1d9/0x470 [ 502.807945][ C0] __ia32_sys_write+0x9a/0xf0 [ 502.812848][ C0] ia32_sys_call+0x3d5e/0x4340 [ 502.817845][ C0] __do_fast_syscall_32+0x14a/0x310 [ 502.823279][ C0] do_fast_syscall_32+0x37/0x80 [ 502.828428][ C0] do_SYSENTER_32+0x1f/0x30 [ 502.833137][ C0] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 502.839769][ C0] RIP: 0023:0xf73ad539 [ 502.843970][ C0] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 502.863852][ C0] RSP: 002b:00000000f53d650c EFLAGS: 00000206 ORIG_RAX: 0000000000000004 [ 502.872444][ C0] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000040 [ 502.880556][ C0] RDX: 000000000000fdef RSI: 0000000000000000 RDI: 0000000000000000 [ 502.888666][ C0] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 502.896773][ C0] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 502.904881][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 502.913019][ C0] [ 502.916528][ C0] Kernel Offset: disabled [ 502.920907][ C0] Rebooting in 86400 seconds..