last executing test programs: 1m18.922019641s ago: executing program 1 (id=106): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000180)={0x24, &(0x7f0000000040)={0x40, 0x24, 0x9, {0x9, 0x5, "c1d3a7b8df0f22"}}, 0x0, 0x0, 0x0}, 0x0) 1m16.498039752s ago: executing program 1 (id=120): syz_mount_image$fuse(0x0, &(0x7f0000000140)='./file0\x00', 0x2c28001, 0x0, 0x0, 0x0, 0x0) setxattr$trusted_overlay_origin(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140), 0x0, 0x0, 0x0) capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x40}) llistxattr(&(0x7f0000002300)='./file0\x00', 0x0, 0xfffffdf3) 1m15.852109786s ago: executing program 1 (id=125): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000940)=@newlink={0x20, 0x10, 0x200, 0xfffffffc, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x45902, 0x44}}, 0x20}, 0x1, 0x0, 0x0, 0x4001}, 0x404c004) syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f0000000280)='./file0\x00', 0x180c8, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x1, 0x242, &(0x7f0000000300)="$eJzs3bFqFFEUBuBjskmWNKYWiwEbq0WtbBeJIA4IK1No5UC0SUSYNKPVPIbP4CP5GKnSjZhZsklcbczm7s58Hyz3wM/Cuc3eLc6d+fDw8/HRl9NP7c/vMR5nMYpo2jbiILZiOzr35uvWRb0bVzUBAGya2aycpu6B1aqqabkTEXt/JMWPJA0BAAAAAAAAAADw35bN/8e5+X8A6DPz//1XVdNyf/7/7Trz/wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEA65217v/3HJ3V/AMDtc/4DwPA4/wFgeJz/ADA8b9+9fz3N88NZlo0jzpq6qItu7fKXr/LDJ9mFg8W3zuq62L7Mn3Z5dj3fif15/mxpvhuPH3X57+zFm/xGvhdHq98+AAAAAAAAAAAAAAAAAAAArIVJdmnp/f7J5G95V115PsCN+/ujeDC6s20AAAAAAAAAAAAAAAAAAADARjv9+u24PDn5WCl6U8TztWjjrouItWijL0XqXyYAAAAAAAAAAAAAAAAAABiexaXf1J0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQDqL9/+vroiIpu2k3i4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADQY78CAAD//139ms4=") mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.kill\x00', 0x275a, 0x0) 1m14.909890689s ago: executing program 1 (id=130): mkdirat(0xffffffffffffff9c, &(0x7f0000000ac0)='./file0\x00', 0x81) r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0)=0x10) linkat(r0, &(0x7f0000000340)='./file0\x00', r0, &(0x7f0000000380)='./file1\x00', 0x1000) 1m14.03610767s ago: executing program 1 (id=135): r0 = syz_usb_connect(0x3, 0x64, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000cb8be7406d04230848390102030109025200010000000009044000000e0100000a240608000b020102000600040007000300390c2402050302", @ANYRES16], 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000300)={0x2c, 0x0, &(0x7f0000000b80)={0x0, 0x3, 0x30, @string={0x30, 0x3, "7e576c5166b223f7d68d47bdbb1d7bd63d21ae9631048747fbaec9704d43941ea72b20cea9a5e02b6eabe30ac6ba"}}, 0x0, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0x9e, 0x2, 0x4, 0x36, "daf0b7ae", "eb753ee4"}}, 0x0}, &(0x7f0000001080)={0x84, &(0x7f0000000c80)={0x20, 0x9}, &(0x7f0000000340)={0x0, 0xa, 0x1, 0x5}, &(0x7f0000000940)={0x0, 0x8, 0x1, 0x2}, &(0x7f0000000d40)={0x20, 0x0, 0x4, {0x0, 0x3}}, &(0x7f0000000d80)={0x20, 0x0, 0x8, {0x120, 0x20, [0x0]}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 1m12.948072323s ago: executing program 1 (id=140): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000e00)={0x30, r2, 0x1, 0x72b52d, 0x27dfdbfa, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x14, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_GATE_ANNOUNCEMENTS={0x5, 0x11, 0x1}, @NL80211_MESHCONF_HWMP_RANN_INTERVAL={0x6, 0x10, 0x5}]}]}, 0x30}}, 0x4004890) 1m10.778816179s ago: executing program 32 (id=140): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000e00)={0x30, r2, 0x1, 0x72b52d, 0x27dfdbfa, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x14, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_GATE_ANNOUNCEMENTS={0x5, 0x11, 0x1}, @NL80211_MESHCONF_HWMP_RANN_INTERVAL={0x6, 0x10, 0x5}]}]}, 0x30}}, 0x4004890) 10.284518987s ago: executing program 2 (id=403): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000540)='./bus\x00', 0x8800, &(0x7f0000000280)={[{@errors_remount}, {@usrquota}, {@minixdf}, {@nombcache}]}, 0x1, 0x51a, &(0x7f0000000f00)="$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") r0 = creat(&(0x7f00000000c0)='./bus\x00', 0x182) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x1c5442, 0xb2) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000040)={0xc, r0, 0x0, 0x0, 0x2, 0xfffffffffdffffff}) 9.09005671s ago: executing program 2 (id=412): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="380000005500e50226bd70000100000007000000", @ANYRES32=r2, @ANYBLOB="20000100", @ANYRES32=r0], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x20000100) 8.253125964s ago: executing program 2 (id=417): r0 = open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=r0]) file_getattr(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', &(0x7f00000001c0), 0x18, 0x1100) 7.952456819s ago: executing program 4 (id=419): creat(&(0x7f00000002c0)='./file0\x00', 0x0) fchownat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xee01, 0x0, 0x1000) setxattr$system_posix_acl(&(0x7f00000000c0)='./file0\x00', &(0x7f0000002b80)='system.posix_acl_access\x00', &(0x7f0000000140)={{}, {0x1, 0x7}, [{}], {0x4, 0x2}, [], {0x10, 0x6}, {0x20, 0x4}}, 0x2c, 0x3) creat(&(0x7f0000000000)='./file0\x00', 0x0) 7.583963099s ago: executing program 2 (id=421): syz_mount_image$udf(&(0x7f0000000c40), &(0x7f00000000c0)='./file0\x00', 0x10, &(0x7f0000000100)=ANY=[@ANYBLOB='noadinicb,nostrict,mode=00000000000000000000004,uid=forget,noadinicb,umask=00000000000000040002000,lastblock=00000000000000000013,undelete,partition=00000000000000000005,\x00'], 0x43, 0xc18, &(0x7f0000001e40)="$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") syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f00000000c0)='./bus\x00', 0x2c600, 0x0, 0xbe, 0x0, &(0x7f00000007c0)) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000780)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) renameat2(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x0) 7.417329232s ago: executing program 4 (id=424): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000300)={0x26, 'hash\x00', 0x0, 0x0, 'streebog512\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmsg$ETHTOOL_MSG_COALESCE_SET(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000002c0)={0x14, 0x0, 0x20, 0x70bd2b, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x44) 6.853892024s ago: executing program 4 (id=426): ioprio_set$pid(0x3, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x4000000000000, 0xffffffffffbffffe, 0x7f, 0xfffffffd}, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x14bb42, 0x8c) pwritev2(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="ff", 0x1}], 0x1, 0x5412, 0x2000a, 0x18) 5.849002903s ago: executing program 2 (id=431): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000001c0)={0x44, r2, 0x1, 0x0, 0x25dfdbff, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_FRAME={0x25, 0x33, @action={{{}, {}, @device_b, @device_a, @initial, {0x0, 0x2}}, @addba_resp={0x3, 0x1, {0x7, 0x65, {0x1, 0x0, 0x9, 0x1}, 0x7}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20028805}, 0x24000846) 5.727278977s ago: executing program 4 (id=432): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/vmallocinfo\x00', 0x0, 0x0) r1 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)={0xa0002001}) ppoll(&(0x7f0000000080)=[{r1, 0x5442}], 0x1, 0x0, 0x0, 0x0) 4.864357145s ago: executing program 2 (id=438): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001300a7cc4a372eaf541d002007000000", @ANYRES32=r1, @ANYBLOB="00000000100000001c000c80080003"], 0x44}}, 0x2404000c) 4.842967201s ago: executing program 0 (id=439): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CT_DIRECTION={0x5, 0x3, 0x1}, @NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x17}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x80}}, 0x0) syz_emit_ethernet(0x32, &(0x7f0000000640)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x19}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x65, 0x0, 0x0, 0x3a, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x8000, 0x4e21, 0x10, 0x0, @gue={{0x2, 0x0, 0x3, 0x0, 0x100}}}}}}}, 0x0) 4.543957341s ago: executing program 5 (id=441): syz_open_dev$dri(&(0x7f00000001c0), 0xce6, 0x80) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="4400000010000304000000000000000000007400", @ANYRES32=r1, @ANYBLOB="0000000000000000240012800b000100627269646765000014000280060027000000000005002d"], 0x44}, 0x1, 0x0, 0x0, 0x40800}, 0x4000) 3.08963779s ago: executing program 33 (id=438): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001300a7cc4a372eaf541d002007000000", @ANYRES32=r1, @ANYBLOB="00000000100000001c000c80080003"], 0x44}}, 0x2404000c) 3.054909384s ago: executing program 0 (id=443): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010029bd7200000000003900000008000300", @ANYRES32=r2, @ANYBLOB="18005a80140001800500010030000000050002"], 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 3.048598057s ago: executing program 5 (id=444): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000000), 0x4) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x4, @loopback, 0x8}, 0x1c) sendto$inet6(r0, &(0x7f0000000180)="1a", 0x34000, 0x0, &(0x7f0000000480)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 3.041646871s ago: executing program 3 (id=445): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendto$packet(r0, &(0x7f00000002c0)="05031600d3fc142e00004788031c09102c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r1, 0x1, 0x0, 0x6, @multicast}, 0x14) 3.041321673s ago: executing program 4 (id=446): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x18, 0x2, 0x0, 0x1, [@NFTA_MATCH_NAME={0x8, 0x1, 'ecn\x00'}, @NFTA_MATCH_INFO={0x4}, @NFTA_MATCH_REV={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xc8}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETCHAIN(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x14, 0x4, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x9}}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x4000800) 2.626202063s ago: executing program 0 (id=447): socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000400)={0xffffffffffffffff}) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x4) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) connect$tipc(r0, &(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x1}}, 0x10) 2.520015888s ago: executing program 3 (id=448): r0 = socket$inet(0x2, 0x3, 0x4) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'team_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=@newqdisc={0x54, 0x24, 0xf0b, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x5}, {0xffff, 0xffff}, {0xc}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x4}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x8, 0x4, 0x7, 0x2, 0x2, 0x7, 0xfff}}, {0x4}}]}]}, 0x54}}, 0x40000) 2.343193185s ago: executing program 5 (id=449): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d032, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x1) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000100)={0xaa, 0x8}) ioctl$UFFDIO_CONTINUE(r0, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) 2.160782505s ago: executing program 4 (id=450): r0 = socket(0x10, 0x80002, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a58000000060a010400000000000000000a0000080900020073797a32000000002c000480280001800d00010073796e70726f78790000000014000280050002000100000008"], 0x80}, 0x1, 0x0, 0x0, 0x80008c1}, 0x24000840) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000140)=ANY=[@ANYBLOB="7000000014007b00000000610baf80102d"], 0x70}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmmsg$alg(r0, &(0x7f00000000c0), 0x492492492492627, 0x0) 1.911990821s ago: executing program 0 (id=451): r0 = open(&(0x7f00000001c0)='./bus\x00', 0x4c27e, 0x2) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='ns\x00') 1.826454447s ago: executing program 3 (id=452): r0 = socket$inet6(0xa, 0x3, 0x2f) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000003c0)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@loopback, 0x0, 0x4, 0xffff, 0xa, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x6c}, 0x0, @in6=@empty, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x2}}, 0xe8) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x10, 0x0, 0x0) 1.505860764s ago: executing program 5 (id=453): mknod$loop(&(0x7f0000000080)='./file0\x00', 0x10, 0x0) r0 = inotify_init() inotify_add_watch(r0, &(0x7f0000000000)='./file0\x00', 0x600050c) setxattr$system_posix_acl(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='system.posix_acl_access\x00', 0x0, 0x0, 0x3) 1.253044114s ago: executing program 3 (id=454): r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000180)={@loopback={0x200000000000000}, 0x800, 0x0, 0x3, 0x1}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x380000, @loopback}, 0x1c) 1.070245917s ago: executing program 0 (id=455): timer_create(0x3, 0x0, &(0x7f0000044000)) pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) vmsplice(r0, &(0x7f0000000140)=[{&(0x7f0000000100)="eb", 0x20000101}], 0x1, 0x0) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) 789.510559ms ago: executing program 5 (id=456): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010028bd7040010000000f00000008000300", @ANYRES32=r2, @ANYBLOB="08003200050000000500330005"], 0x2c}}, 0x18) 572.951402ms ago: executing program 3 (id=457): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f00000002c0)={0x0, 0x6, 0x1, '%'}, 0x9) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f0000000140)={0x0, 0x0, 0x1, "c8"}, 0x9) 360.824525ms ago: executing program 0 (id=458): r0 = socket$inet6(0xa, 0x5, 0x0) listen(r0, 0x10000) r1 = socket$netlink(0x10, 0x3, 0x4) writev(r1, &(0x7f0000000080)=[{&(0x7f00000000c0)="480000001400190d09004beafc0d8c560a84696080040000000000000000bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed51000000000000000000", 0x48}], 0x1) 155.057579ms ago: executing program 5 (id=459): openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0) r0 = syz_io_uring_setup(0x231, &(0x7f0000000140)={0x0, 0x0, 0x10100, 0x200}, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, 0x13}) io_uring_enter(r0, 0x7a98, 0x0, 0x0, 0x0, 0x0) 0s ago: executing program 3 (id=460): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a74000000060a0904000000000000f3770200000048000480300001800e000100696d6d6564696174650000001c000280100002800c00028008000180fffffffb0800014000000000140001800d00010073796e70726f7879000000000900010073797a30000000000900020073797a320000000014000000110001"], 0x9c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000002000000000f40600000a14000000020a01"], 0x3c}, 0x1, 0x0, 0x0, 0x4011}, 0x4000094) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.97' (ED25519) to the list of known hosts. [ 155.747529][ T5756] cgroup: Unknown subsys name 'net' [ 155.882520][ T5756] cgroup: Unknown subsys name 'cpuset' [ 155.896595][ T5756] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 161.560382][ T5756] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 165.657528][ T5779] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 165.665700][ T5779] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 165.676180][ T5779] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 165.684274][ T5779] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 165.692078][ T5779] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 165.702332][ T5779] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 165.710337][ T5779] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 165.719329][ T5779] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 165.736840][ T5779] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 165.747439][ T5779] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 165.759510][ T5779] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 165.761699][ T5783] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 165.774806][ T5779] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 165.779790][ T5783] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 165.801054][ T5783] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 165.815230][ T5780] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 165.826582][ T5779] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 165.844761][ T5780] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 165.867631][ T5779] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 165.878788][ T5779] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 165.941412][ T5779] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 165.952142][ T5779] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 165.967012][ T5779] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 165.980627][ T5779] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 165.992621][ T5779] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 167.161308][ T5790] chnl_net:caif_netlink_parms(): no params data found [ 167.344723][ T5776] chnl_net:caif_netlink_parms(): no params data found [ 167.576617][ T5785] chnl_net:caif_netlink_parms(): no params data found [ 167.642909][ T5774] chnl_net:caif_netlink_parms(): no params data found [ 167.849640][ T5775] chnl_net:caif_netlink_parms(): no params data found [ 167.863673][ T5787] Bluetooth: hci1: command tx timeout [ 167.863757][ T5779] Bluetooth: hci2: command tx timeout [ 167.869259][ T5780] Bluetooth: hci0: command tx timeout [ 167.943621][ T5780] Bluetooth: hci3: command tx timeout [ 168.023336][ T5780] Bluetooth: hci4: command tx timeout [ 168.244788][ T5790] bridge0: port 1(bridge_slave_0) entered blocking state [ 168.283426][ T5790] bridge0: port 1(bridge_slave_0) entered disabled state [ 168.291036][ T5790] bridge_slave_0: entered allmulticast mode [ 168.318293][ T5790] bridge_slave_0: entered promiscuous mode [ 168.400844][ T5790] bridge0: port 2(bridge_slave_1) entered blocking state [ 168.423735][ T5790] bridge0: port 2(bridge_slave_1) entered disabled state [ 168.431348][ T5790] bridge_slave_1: entered allmulticast mode [ 168.443760][ T5790] bridge_slave_1: entered promiscuous mode [ 168.624542][ T5785] bridge0: port 1(bridge_slave_0) entered blocking state [ 168.632146][ T5785] bridge0: port 1(bridge_slave_0) entered disabled state [ 168.639707][ T5785] bridge_slave_0: entered allmulticast mode [ 168.648104][ T5785] bridge_slave_0: entered promiscuous mode [ 168.723284][ T5776] bridge0: port 1(bridge_slave_0) entered blocking state [ 168.730857][ T5776] bridge0: port 1(bridge_slave_0) entered disabled state [ 168.740499][ T5776] bridge_slave_0: entered allmulticast mode [ 168.749239][ T5776] bridge_slave_0: entered promiscuous mode [ 168.759531][ T5785] bridge0: port 2(bridge_slave_1) entered blocking state [ 168.767753][ T5785] bridge0: port 2(bridge_slave_1) entered disabled state [ 168.775477][ T5785] bridge_slave_1: entered allmulticast mode [ 168.784089][ T5785] bridge_slave_1: entered promiscuous mode [ 168.802688][ T5790] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 168.821723][ T5790] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 168.876660][ T5776] bridge0: port 2(bridge_slave_1) entered blocking state [ 168.884195][ T5776] bridge0: port 2(bridge_slave_1) entered disabled state [ 168.891548][ T5776] bridge_slave_1: entered allmulticast mode [ 168.900344][ T5776] bridge_slave_1: entered promiscuous mode [ 168.954641][ T5775] bridge0: port 1(bridge_slave_0) entered blocking state [ 168.962113][ T5775] bridge0: port 1(bridge_slave_0) entered disabled state [ 168.970063][ T5775] bridge_slave_0: entered allmulticast mode [ 168.978213][ T5775] bridge_slave_0: entered promiscuous mode [ 168.989521][ T5774] bridge0: port 1(bridge_slave_0) entered blocking state [ 168.997520][ T5774] bridge0: port 1(bridge_slave_0) entered disabled state [ 169.005129][ T5774] bridge_slave_0: entered allmulticast mode [ 169.013662][ T5774] bridge_slave_0: entered promiscuous mode [ 169.101551][ T5775] bridge0: port 2(bridge_slave_1) entered blocking state [ 169.109213][ T5775] bridge0: port 2(bridge_slave_1) entered disabled state [ 169.117199][ T5775] bridge_slave_1: entered allmulticast mode [ 169.125384][ T5775] bridge_slave_1: entered promiscuous mode [ 169.135695][ T5774] bridge0: port 2(bridge_slave_1) entered blocking state [ 169.143366][ T5774] bridge0: port 2(bridge_slave_1) entered disabled state [ 169.150785][ T5774] bridge_slave_1: entered allmulticast mode [ 169.159263][ T5774] bridge_slave_1: entered promiscuous mode [ 169.202694][ T5776] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 169.270008][ T5785] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 169.287829][ T5790] team0: Port device team_slave_0 added [ 169.346576][ T5776] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 169.364684][ T5785] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 169.381025][ T5790] team0: Port device team_slave_1 added [ 169.528214][ T5775] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 169.548086][ T5775] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 169.565057][ T5774] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 169.620971][ T5790] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 169.628505][ T5790] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 169.654823][ T5790] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 169.696576][ T5774] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 169.714572][ T5776] team0: Port device team_slave_0 added [ 169.727318][ T5785] team0: Port device team_slave_0 added [ 169.737206][ T5790] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 169.744397][ T5790] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 169.770906][ T5790] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 169.835685][ T5776] team0: Port device team_slave_1 added [ 169.847924][ T5785] team0: Port device team_slave_1 added [ 169.877536][ T5775] team0: Port device team_slave_0 added [ 169.943613][ T5780] Bluetooth: hci0: command tx timeout [ 169.943746][ T5787] Bluetooth: hci1: command tx timeout [ 169.954749][ T5779] Bluetooth: hci2: command tx timeout [ 169.972835][ T5775] team0: Port device team_slave_1 added [ 169.986290][ T5774] team0: Port device team_slave_0 added [ 170.023360][ T5787] Bluetooth: hci3: command tx timeout [ 170.077576][ T5774] team0: Port device team_slave_1 added [ 170.085777][ T5776] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 170.092835][ T5776] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 170.119916][ T5787] Bluetooth: hci4: command tx timeout [ 170.126170][ T5776] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 170.162385][ T5785] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 170.169697][ T5785] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 170.196205][ T5785] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 170.254037][ T5776] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 170.261093][ T5776] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 170.287639][ T5776] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 170.322646][ T5785] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 170.330089][ T5785] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 170.357067][ T5785] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 170.370600][ T5775] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 170.378105][ T5775] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 170.404315][ T5775] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 170.481342][ T5790] hsr_slave_0: entered promiscuous mode [ 170.489711][ T5790] hsr_slave_1: entered promiscuous mode [ 170.516649][ T5775] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 170.523868][ T5775] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 170.550096][ T5775] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 170.564145][ T5774] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 170.571166][ T5774] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 170.597643][ T5774] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 170.614067][ T5774] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 170.621101][ T5774] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 170.647903][ T5774] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 170.871505][ T5776] hsr_slave_0: entered promiscuous mode [ 170.879836][ T5776] hsr_slave_1: entered promiscuous mode [ 170.888155][ T5776] debugfs: 'hsr0' already exists in 'hsr' [ 170.894140][ T5776] Cannot create hsr debugfs directory [ 170.917557][ T5785] hsr_slave_0: entered promiscuous mode [ 170.926064][ T5785] hsr_slave_1: entered promiscuous mode [ 170.933620][ T5785] debugfs: 'hsr0' already exists in 'hsr' [ 170.939488][ T5785] Cannot create hsr debugfs directory [ 171.076447][ T5775] hsr_slave_0: entered promiscuous mode [ 171.085256][ T5775] hsr_slave_1: entered promiscuous mode [ 171.092962][ T5775] debugfs: 'hsr0' already exists in 'hsr' [ 171.098917][ T5775] Cannot create hsr debugfs directory [ 171.160147][ T5774] hsr_slave_0: entered promiscuous mode [ 171.168887][ T5774] hsr_slave_1: entered promiscuous mode [ 171.176783][ T5774] debugfs: 'hsr0' already exists in 'hsr' [ 171.182606][ T5774] Cannot create hsr debugfs directory [ 172.023551][ T5787] Bluetooth: hci0: command tx timeout [ 172.033625][ T5787] Bluetooth: hci1: command tx timeout [ 172.033669][ T5779] Bluetooth: hci2: command tx timeout [ 172.103360][ T5787] Bluetooth: hci3: command tx timeout [ 172.183334][ T5787] Bluetooth: hci4: command tx timeout [ 172.327818][ T5790] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 172.362428][ T5790] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 172.395427][ T5790] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 172.414320][ T5790] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 172.518654][ T5776] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 172.548959][ T5776] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 172.570065][ T5776] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 172.592011][ T5776] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 172.799679][ T5785] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 172.818623][ T5785] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 172.840202][ T5785] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 172.860016][ T5785] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 173.137589][ T5774] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 173.184762][ T5774] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 173.205545][ T5774] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 173.228539][ T5774] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 173.501043][ T5775] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 173.522397][ T5775] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 173.551164][ T5775] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 173.574798][ T5775] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 173.629934][ T5790] 8021q: adding VLAN 0 to HW filter on device bond0 [ 173.811329][ T5790] 8021q: adding VLAN 0 to HW filter on device team0 [ 173.905936][ T5776] 8021q: adding VLAN 0 to HW filter on device bond0 [ 173.922676][ T4296] bridge0: port 1(bridge_slave_0) entered blocking state [ 173.930071][ T4296] bridge0: port 1(bridge_slave_0) entered forwarding state [ 174.002030][ T4296] bridge0: port 2(bridge_slave_1) entered blocking state [ 174.009405][ T4296] bridge0: port 2(bridge_slave_1) entered forwarding state [ 174.071043][ T5785] 8021q: adding VLAN 0 to HW filter on device bond0 [ 174.104401][ T5787] Bluetooth: hci2: command tx timeout [ 174.108493][ T5779] Bluetooth: hci1: command tx timeout [ 174.110100][ T5787] Bluetooth: hci0: command tx timeout [ 174.182540][ T5776] 8021q: adding VLAN 0 to HW filter on device team0 [ 174.190334][ T5780] Bluetooth: hci3: command tx timeout [ 174.266140][ T5780] Bluetooth: hci4: command tx timeout [ 174.302595][ T4296] bridge0: port 1(bridge_slave_0) entered blocking state [ 174.310086][ T4296] bridge0: port 1(bridge_slave_0) entered forwarding state [ 174.340873][ T5785] 8021q: adding VLAN 0 to HW filter on device team0 [ 174.368106][ T5774] 8021q: adding VLAN 0 to HW filter on device bond0 [ 174.408047][ T34] bridge0: port 2(bridge_slave_1) entered blocking state [ 174.415431][ T34] bridge0: port 2(bridge_slave_1) entered forwarding state [ 174.478412][ T34] bridge0: port 1(bridge_slave_0) entered blocking state [ 174.485793][ T34] bridge0: port 1(bridge_slave_0) entered forwarding state [ 174.564785][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 174.572128][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 174.626308][ T5774] 8021q: adding VLAN 0 to HW filter on device team0 [ 174.800280][ T4296] bridge0: port 1(bridge_slave_0) entered blocking state [ 174.807837][ T4296] bridge0: port 1(bridge_slave_0) entered forwarding state [ 174.870850][ T69] bridge0: port 2(bridge_slave_1) entered blocking state [ 174.878410][ T69] bridge0: port 2(bridge_slave_1) entered forwarding state [ 175.101897][ T5775] 8021q: adding VLAN 0 to HW filter on device bond0 [ 175.286928][ T5775] 8021q: adding VLAN 0 to HW filter on device team0 [ 175.388261][ T4296] bridge0: port 1(bridge_slave_0) entered blocking state [ 175.395833][ T4296] bridge0: port 1(bridge_slave_0) entered forwarding state [ 175.439501][ T5790] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 175.548204][ T69] bridge0: port 2(bridge_slave_1) entered blocking state [ 175.555733][ T69] bridge0: port 2(bridge_slave_1) entered forwarding state [ 176.311600][ T5790] veth0_vlan: entered promiscuous mode [ 176.367192][ T5776] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 176.508967][ T5785] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 176.669419][ T5790] veth1_vlan: entered promiscuous mode [ 177.028077][ T5776] veth0_vlan: entered promiscuous mode [ 177.071425][ T5774] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 177.119213][ T5776] veth1_vlan: entered promiscuous mode [ 177.228964][ T5790] veth0_macvtap: entered promiscuous mode [ 177.275048][ T5790] veth1_macvtap: entered promiscuous mode [ 177.316061][ T5785] veth0_vlan: entered promiscuous mode [ 177.378838][ T5775] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 177.432565][ T5785] veth1_vlan: entered promiscuous mode [ 177.476577][ T5790] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 177.565848][ T5790] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 177.620548][ T5776] veth0_macvtap: entered promiscuous mode [ 177.692333][ T5776] veth1_macvtap: entered promiscuous mode [ 177.722013][ T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 177.775659][ T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 177.790239][ T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 177.819418][ T5774] veth0_vlan: entered promiscuous mode [ 177.858201][ T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.006464][ T5774] veth1_vlan: entered promiscuous mode [ 178.045266][ T5776] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 178.060877][ T5785] veth0_macvtap: entered promiscuous mode [ 178.161217][ T5776] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 178.200725][ T5785] veth1_macvtap: entered promiscuous mode [ 178.331397][ T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.363523][ T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.404459][ T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.429541][ T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.569038][ T5785] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 178.678203][ T5774] veth0_macvtap: entered promiscuous mode [ 178.758694][ T5785] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 178.804894][ T5774] veth1_macvtap: entered promiscuous mode [ 178.883319][ T53] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.949908][ T53] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.977221][ T13] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 179.110297][ T13] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 179.289681][ T5774] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 179.357872][ T5775] veth0_vlan: entered promiscuous mode [ 179.436131][ T5774] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 179.585185][ T5775] veth1_vlan: entered promiscuous mode [ 179.630230][ T34] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 179.653511][ T69] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 179.696361][ T69] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 179.756542][ T69] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.182087][ T5775] veth0_macvtap: entered promiscuous mode [ 180.294890][ T5775] veth1_macvtap: entered promiscuous mode [ 180.568544][ T5775] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 180.701541][ T5775] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 180.800975][ T164] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.858706][ T164] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.928652][ T164] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.974585][ T164] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.127815][ T4296] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 182.177937][ T4296] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 182.461510][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 182.498486][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 182.882675][ T5790] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 183.887209][ T4296] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 183.947281][ T4296] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 184.145222][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 184.187838][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 184.232711][ T5943] loop2: detected capacity change from 0 to 8192 [ 184.291807][ T5943] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 184.650451][ T53] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 184.681634][ T53] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 185.059929][ T132] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 185.123278][ T132] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 186.158500][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 186.177907][ T5967] Zero length message leads to an empty skb [ 186.256521][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 186.466293][ T5970] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4'. [ 186.499171][ T57] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 186.519715][ T57] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 187.517194][ T5982] process 'syz.3.10' launched './file2' with NULL argv: empty string added [ 187.751465][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 187.781787][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 187.794050][ T5834] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 187.989769][ T5834] usb 4-1: Using ep0 maxpacket: 32 [ 188.015745][ T5834] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 188.039789][ T5834] usb 4-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 188.063409][ T5834] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 188.101760][ T5834] usb 4-1: config 0 descriptor?? [ 188.119787][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 188.166872][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 188.188024][ T5834] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 188.205537][ T5986] netlink: 428 bytes leftover after parsing attributes in process `syz.0.12'. [ 188.253511][ T5986] netlink: 32 bytes leftover after parsing attributes in process `syz.0.12'. [ 188.384612][ T5834] usb 4-1: USB disconnect, device number 2 [ 189.173007][ T5997] loop0: detected capacity change from 0 to 1024 [ 189.185004][ T5997] EXT4-fs: Ignoring removed orlov option [ 189.226342][ T5997] EXT4-fs (loop0): stripe (9) is not aligned with cluster size (16), stripe is disabled [ 189.348789][ T5997] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 189.895768][ T5774] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 191.247001][ T6027] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 191.411246][ T6032] loop3: detected capacity change from 0 to 1024 [ 191.460384][ T6032] EXT4-fs: Ignoring removed orlov option [ 191.644666][ T6032] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 192.181332][ T5785] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 193.428295][ T6058] overlayfs: upper fs does not support tmpfile. [ 193.477914][ T6060] loop1: detected capacity change from 0 to 16 [ 193.827693][ T5920] udevd[5920]: incorrect cramfs checksum on /dev/loop1 [ 194.038439][ T5920] udevd[5920]: incorrect cramfs checksum on /dev/loop1 [ 194.587534][ T6075] netlink: 440 bytes leftover after parsing attributes in process `syz.3.50'. [ 194.620926][ T6077] netlink: 'syz.0.49': attribute type 15 has an invalid length. [ 195.102738][ T6082] overlayfs: invalid origin (00000079000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000) [ 195.394599][ T6086] netlink: 4 bytes leftover after parsing attributes in process `syz.4.54'. [ 195.435259][ T6087] Illegal XDP return value 4294967274 on prog (id 6) dev N/A, expect packet loss! [ 195.478511][ T6086] netlink: 452 bytes leftover after parsing attributes in process `syz.4.54'. [ 195.535993][ T6086] netlink: 452 bytes leftover after parsing attributes in process `syz.4.54'. [ 196.156527][ T6099] gretap0: entered promiscuous mode [ 196.206029][ T6099] netlink: 8 bytes leftover after parsing attributes in process `syz.4.61'. [ 196.280468][ T6099] gretap0: left promiscuous mode [ 198.406712][ T6129] tap0: tun_chr_ioctl cmd 2148553947 [ 199.482181][ T6147] netlink: 8 bytes leftover after parsing attributes in process `syz.0.82'. [ 200.142048][ T6158] loop1: detected capacity change from 0 to 1024 [ 200.367609][ T6158] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 200.413603][ T6158] ext4 filesystem being mounted at /19/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 200.481862][ T6158] EXT4-fs error (device loop1): ext4_map_blocks:818: inode #15: block 8: comm syz.1.87: lblock 8 mapped to illegal pblock 8 (length 8) [ 200.489569][ T29] audit: type=1800 audit(1773368713.596:2): pid=6158 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.87" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 200.574369][ T6158] EXT4-fs error (device loop1): ext4_ext_remove_space:2954: inode #15: comm syz.1.87: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 200.669658][ T6168] EXT4-fs error (device loop1): ext4_map_blocks:818: inode #15: comm syz.1.87: lblock 0 mapped to illegal pblock 0 (length 1) [ 200.750252][ T6168] EXT4-fs error (device loop1): ext4_ext_remove_space:2954: inode #15: comm syz.1.87: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 3, max 4(4), depth 0(0) [ 201.075921][ T5776] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 201.846625][ T6185] syz_tun: entered promiscuous mode [ 201.869380][ T6185] macvtap1: entered promiscuous mode [ 201.991324][ T6189] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 202.216043][ T29] audit: type=1800 audit(1773368715.326:3): pid=6191 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.101" name="nullb0" dev="tmpfs" ino=109 res=0 errno=0 [ 202.382826][ T6193] loop2: detected capacity change from 0 to 764 [ 203.363429][ T9] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 203.560160][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 203.629108][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 203.693463][ T9] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 203.702748][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 203.747503][ T9] usb 2-1: config 0 descriptor?? [ 203.815881][ T9] hub 2-1:0.0: USB hub found [ 203.852487][ T6216] netlink: 12 bytes leftover after parsing attributes in process `syz.0.112'. [ 203.902693][ T6216] netlink: 24 bytes leftover after parsing attributes in process `syz.0.112'. [ 203.969780][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 203.976920][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 204.048000][ T9] hub 2-1:0.0: config failed, can't read hub descriptor (err -90) [ 204.268660][ T9] usbhid 2-1:0.0: can't add hid device: -71 [ 204.291735][ T9] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 204.354686][ T9] usb 2-1: USB disconnect, device number 2 [ 204.362290][ T6218] cgroup: fork rejected by pids controller in /syz2 [ 205.497992][ T6429] capability: warning: `syz.1.120' uses deprecated v2 capabilities in a way that may be insecure [ 206.016663][ T6435] netlink: 'syz.3.123': attribute type 1 has an invalid length. [ 206.053894][ T6435] netlink: 60387 bytes leftover after parsing attributes in process `syz.3.123'. [ 206.228043][ T6437] loop1: detected capacity change from 0 to 512 [ 206.276065][ T6437] ======================================================= [ 206.276065][ T6437] WARNING: The mand mount option has been deprecated and [ 206.276065][ T6437] and is ignored by this kernel. Remove the mand [ 206.276065][ T6437] option from the mount to silence this warning. [ 206.276065][ T6437] ======================================================= [ 208.567168][ T10] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 208.684098][ T13] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 208.764229][ T10] usb 3-1: Using ep0 maxpacket: 16 [ 208.820128][ T10] usb 3-1: config 0 has an invalid interface number: 251 but max is 0 [ 208.857950][ T10] usb 3-1: config 0 has no interface number 0 [ 208.873489][ T10] usb 3-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 208.913530][ T10] usb 3-1: config 0 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 208.976998][ T10] usb 3-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 209.023520][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 209.031762][ T10] usb 3-1: Product: syz [ 209.038512][ T13] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 209.083393][ T10] usb 3-1: Manufacturer: syz [ 209.088197][ T10] usb 3-1: SerialNumber: syz [ 209.135791][ T10] usb 3-1: config 0 descriptor?? [ 209.155212][ T6462] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 209.227389][ T6462] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 209.432497][ T13] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 209.515649][ T6462] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 209.564062][ T6462] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 209.645375][ T13] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 210.199512][ T10] asix 3-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 210.251264][ T10] asix 3-1:0.251 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9 [ 210.299341][ T10] asix 3-1:0.251: probe with driver asix failed with error -71 [ 210.381971][ T10] usb 3-1: USB disconnect, device number 2 [ 210.473527][ T13] bridge_slave_1: left allmulticast mode [ 210.479375][ T13] bridge_slave_1: left promiscuous mode [ 210.501600][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 210.533945][ T13] bridge_slave_0: left allmulticast mode [ 210.564141][ T13] bridge_slave_0: left promiscuous mode [ 210.570627][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 211.552126][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 211.616650][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 211.711249][ T13] bond0 (unregistering): Released all slaves [ 211.880826][ T5787] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 211.897010][ T5787] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 211.907652][ T5787] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 211.921366][ T5787] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 211.932710][ T5787] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 213.131701][ T13] hsr_slave_0: left promiscuous mode [ 213.156666][ T13] hsr_slave_1: left promiscuous mode [ 213.186550][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 213.216262][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 213.252993][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 213.272508][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 213.406940][ T13] veth1_macvtap: left promiscuous mode [ 213.423610][ T13] veth0_macvtap: left promiscuous mode [ 213.429481][ T13] veth1_vlan: left promiscuous mode [ 213.503417][ T13] veth0_vlan: left promiscuous mode [ 213.872989][ T6502] loop0: detected capacity change from 0 to 8 [ 214.011023][ T6502] SQUASHFS error: Failed to read block 0x260685: -5 [ 214.025156][ T5787] Bluetooth: hci2: command tx timeout [ 214.084590][ T6502] SQUASHFS error: Unable to read metadata cache entry [260685] [ 214.097889][ T6502] SQUASHFS error: Unable to read directory block [260685:0] [ 214.207320][ T6506] 9p: Bad value for 'rfdno' [ 214.603026][ T6510] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 215.201039][ T13] team0 (unregistering): Port device team_slave_1 removed [ 215.235608][ T13] team0 (unregistering): Port device team_slave_0 removed [ 215.674907][ T6510] bridge0: port 1(bridge_slave_0) entered disabled state [ 216.108043][ T5787] Bluetooth: hci2: command tx timeout [ 216.434444][ T6526] netlink: 12 bytes leftover after parsing attributes in process `syz.2.159'. [ 217.153538][ T6479] chnl_net:caif_netlink_parms(): no params data found [ 217.215535][ T6539] Invalid ELF header magic: != ELF [ 218.027351][ T5404] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 218.085576][ T6556] loop0: detected capacity change from 0 to 512 [ 218.185166][ T5787] Bluetooth: hci2: command tx timeout [ 218.233418][ T5404] usb 4-1: Using ep0 maxpacket: 32 [ 218.288024][ T5404] usb 4-1: config 0 has an invalid interface number: 85 but max is 0 [ 218.323310][ T5404] usb 4-1: config 0 has no interface number 0 [ 218.329622][ T5404] usb 4-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 218.393397][ T5404] usb 4-1: config 0 interface 85 has no altsetting 0 [ 218.427703][ T5404] usb 4-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 218.456303][ T5404] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 218.490577][ T5404] usb 4-1: Product: syz [ 218.526232][ T5404] usb 4-1: Manufacturer: syz [ 218.531049][ T5404] usb 4-1: SerialNumber: syz [ 218.568539][ T5404] usb 4-1: config 0 descriptor?? [ 218.936762][ T6479] bridge0: port 1(bridge_slave_0) entered blocking state [ 218.972301][ T6479] bridge0: port 1(bridge_slave_0) entered disabled state [ 219.024148][ T6479] bridge_slave_0: entered allmulticast mode [ 219.049622][ T6479] bridge_slave_0: entered promiscuous mode [ 219.123808][ T6479] bridge0: port 2(bridge_slave_1) entered blocking state [ 219.154028][ T6479] bridge0: port 2(bridge_slave_1) entered disabled state [ 219.162049][ T6479] bridge_slave_1: entered allmulticast mode [ 219.214881][ T6479] bridge_slave_1: entered promiscuous mode [ 219.329577][ T5404] appletouch 4-1:0.85: Geyser mode initialized. [ 219.363786][ T5404] input: appletouch as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.85/input/input5 [ 219.576626][ C1] appletouch 4-1:0.85: atp_complete: usb_submit_urb failed with result -19 [ 219.585686][ T5404] usb 4-1: USB disconnect, device number 3 [ 219.607466][ T6479] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 219.711169][ T6479] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 219.799689][ T5404] appletouch 4-1:0.85: input: appletouch disconnected [ 220.112459][ T6479] team0: Port device team_slave_0 added [ 220.180052][ T6479] team0: Port device team_slave_1 added [ 220.271240][ T5787] Bluetooth: hci2: command tx timeout [ 220.597162][ T6479] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 220.634540][ T6479] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 220.725143][ T6582] netlink: 32 bytes leftover after parsing attributes in process `syz.0.175'. [ 220.773932][ T6479] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 220.815901][ T6584] loop3: detected capacity change from 0 to 512 [ 220.865662][ T6479] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 220.872782][ T6479] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 220.879895][ T6584] EXT4-fs: Ignoring removed orlov option [ 220.963440][ T6479] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 220.990545][ T6584] EXT4-fs: Ignoring removed mblk_io_submit option [ 221.116329][ T6584] EXT4-fs error (device loop3): ext4_iget_extra_inode:5025: inode #15: comm syz.3.176: corrupted in-inode xattr: e_value size too large [ 221.226060][ T6584] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 221.227353][ T6584] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.176: couldn't read orphan inode 15 (err -117) [ 221.237013][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 221.237100][ C0] EXT4-fs (loop3): initial error at time 1773368734: ext4_iget_extra_inode:5025: inode 15 [ 221.237258][ C0] EXT4-fs (loop3): last error at time 1773368734: ext4_iget_extra_inode:5025: inode 15 [ 221.332083][ T6593] input: syz0 as /devices/virtual/input/input6 [ 221.356148][ T6479] hsr_slave_0: entered promiscuous mode [ 221.406595][ T6479] hsr_slave_1: entered promiscuous mode [ 221.421990][ T6584] loop3: lost filesystem error report for type 5 error -117 [ 221.442026][ T6584] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 221.504456][ T6479] debugfs: 'hsr0' already exists in 'hsr' [ 221.531759][ T6479] Cannot create hsr debugfs directory [ 221.642610][ T6596] netlink: 'syz.2.180': attribute type 10 has an invalid length. [ 221.822992][ T5785] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 221.918326][ T6596] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 222.651535][ T6598] loop0: detected capacity change from 0 to 8192 [ 222.862188][ T29] audit: type=1800 audit(1773368735.976:4): pid=6598 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.181" name="file2" dev="loop0" ino=1048606 res=0 errno=0 [ 222.946666][ T6598] syz.0.181: attempt to access beyond end of device [ 222.946666][ T6598] loop0: rw=8388608, sector=57847, nr_sectors = 1 limit=8192 [ 223.008732][ T6598] Buffer I/O error on dev loop0, logical block 57847, async page read [ 223.054433][ T6598] syz.0.181: attempt to access beyond end of device [ 223.054433][ T6598] loop0: rw=8388608, sector=57847, nr_sectors = 1 limit=8192 [ 223.089876][ T6598] Buffer I/O error on dev loop0, logical block 57847, async page read [ 223.101148][ T6614] capability: warning: `syz.2.186' uses 32-bit capabilities (legacy support in use) [ 223.245045][ T6614] program syz.2.186 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 223.502509][ T6613] macvtap2: entered promiscuous mode [ 223.553314][ T6613] macvtap2: entered allmulticast mode [ 223.561212][ T6613] dummy0: entered promiscuous mode [ 223.641172][ T6613] dummy0: entered allmulticast mode [ 223.709652][ T6613] team0: Device macvtap2 failed to register rx_handler [ 223.802056][ T6613] dummy0: left allmulticast mode [ 223.837983][ T6613] dummy0: left promiscuous mode [ 224.011405][ T6479] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 224.107115][ T6479] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 224.191248][ T6479] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 224.316505][ T6479] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 224.717520][ T6632] loop0: detected capacity change from 0 to 256 [ 225.420133][ T6638] usb usb9: usbfs: process 6638 (syz.2.193) did not claim interface 37 before use [ 226.005162][ T6643] loop0: detected capacity change from 0 to 2048 [ 226.075922][ T6479] 8021q: adding VLAN 0 to HW filter on device bond0 [ 226.228597][ T6643] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 226.231981][ T6479] 8021q: adding VLAN 0 to HW filter on device team0 [ 226.396484][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 226.403989][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 226.564805][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 226.572448][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 226.740915][ T6652] loop3: detected capacity change from 0 to 1024 [ 226.917365][ T6652] hfsplus: b-tree write err: -5, ino 2 [ 226.940572][ T6652] hfsplus: bad catalog entry type [ 227.308536][ T53] hfsplus: b-tree write err: -5, ino 25 [ 227.320270][ T53] hfsplus: b-tree write err: -5, ino 4 [ 227.366114][ T53] hfsplus: b-tree write err: -5, ino 2 [ 227.381769][ T6656] loop2: detected capacity change from 0 to 2048 [ 227.391257][ T53] hfsplus: b-tree write err: -5, ino 26 [ 227.502786][ T6656] UDF-fs: error (device loop2): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 227.565848][ T6656] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found [ 227.601461][ T6656] UDF-fs: Scanning with blocksize 512 failed [ 227.773601][ T6656] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 229.174855][ T6479] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 230.201209][ T6699] netlink: 12 bytes leftover after parsing attributes in process `syz.2.211'. [ 230.213792][ T6699] netlink: 28 bytes leftover after parsing attributes in process `syz.2.211'. [ 230.222837][ T6699] netlink: 12 bytes leftover after parsing attributes in process `syz.2.211'. [ 230.366285][ T6699] netlink: 28 bytes leftover after parsing attributes in process `syz.2.211'. [ 230.399399][ T6699] netlink: 'syz.2.211': attribute type 6 has an invalid length. [ 232.202626][ T6720] loop2: detected capacity change from 0 to 256 [ 232.384562][ T6720] FAT-fs (loop2): Directory bread(block 64) failed [ 232.403430][ T6720] FAT-fs (loop2): Directory bread(block 65) failed [ 232.410323][ T6720] FAT-fs (loop2): Directory bread(block 66) failed [ 232.440646][ T6720] FAT-fs (loop2): Directory bread(block 67) failed [ 232.481140][ T6720] FAT-fs (loop2): Directory bread(block 68) failed [ 232.501755][ T6720] FAT-fs (loop2): Directory bread(block 69) failed [ 232.523527][ T6720] FAT-fs (loop2): Directory bread(block 70) failed [ 232.530263][ T6720] FAT-fs (loop2): Directory bread(block 71) failed [ 232.566663][ T6720] FAT-fs (loop2): Directory bread(block 72) failed [ 232.573893][ T6720] FAT-fs (loop2): Directory bread(block 73) failed [ 236.359067][ T6736] netlink: 'syz.2.225': attribute type 13 has an invalid length. [ 236.404358][ T6736] netlink: 152 bytes leftover after parsing attributes in process `syz.2.225'. [ 236.517344][ T6736] syz_tun: refused to change device tx_queue_len [ 236.562111][ T6736] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 236.636314][ T6479] veth0_vlan: entered promiscuous mode [ 236.825987][ T6479] veth1_vlan: entered promiscuous mode [ 236.949381][ T6742] macvlan1: entered promiscuous mode [ 236.952610][ T6743] loop0: detected capacity change from 0 to 256 [ 237.052913][ T6744] macvlan1: entered allmulticast mode [ 237.118676][ T6743] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010076, chksum : 0x23d3c8ff, utbl_chksum : 0xe619d30d) [ 237.119838][ T6744] veth1_vlan: entered allmulticast mode [ 237.573695][ T6479] veth0_macvtap: entered promiscuous mode [ 237.716094][ T6479] veth1_macvtap: entered promiscuous mode [ 238.121142][ T6479] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 238.201502][ T6479] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 238.251252][ T6758] netlink: 48 bytes leftover after parsing attributes in process `syz.4.234'. [ 238.280193][ T6758] netem: unknown loss type 4 [ 238.301794][ T6758] netem: change failed [ 238.393599][ T13] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 238.437382][ T13] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 238.488459][ T13] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 238.550107][ T13] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 238.959731][ T6767] fuse: Bad value for 'fd' [ 239.642942][ T6778] netlink: 28 bytes leftover after parsing attributes in process `syz.3.240'. [ 240.060709][ T6784] loop2: detected capacity change from 0 to 512 [ 240.111689][ T6784] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 240.208558][ T6784] EXT4-fs error (device loop2): ext4_read_inode_bitmap:139: comm syz.2.242: Invalid inode bitmap blk 4 in block_group 0 [ 240.323511][ T6784] loop2: lost filesystem error report for type 5 error -117 [ 240.335582][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 240.349785][ C0] EXT4-fs (loop2): initial error at time 2000000014: ext4_read_inode_bitmap:139 [ 240.359151][ C0] EXT4-fs (loop2): last error at time 2000000014: ext4_read_inode_bitmap:139 [ 240.371230][ T6784] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 240.829568][ T5790] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 241.727643][ T5787] Bluetooth: hci0: link tx timeout [ 241.732951][ T5787] Bluetooth: hci0: killing stalled connection 11:aa:aa:aa:aa:aa [ 241.783517][ T6812] mmap: syz.0.253 (6812) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 242.765452][ T6828] netlink: 4 bytes leftover after parsing attributes in process `syz.2.257'. [ 242.816396][ T6828] netlink: 4 bytes leftover after parsing attributes in process `syz.2.257'. [ 243.788241][ T5787] Bluetooth: hci0: command 0x0406 tx timeout [ 244.468747][ T6849] program syz.3.263 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 244.799766][ T6833] kexec: Could not allocate control_code_buffer [ 244.974733][ T57] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 244.982748][ T57] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 245.318198][ T1140] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 245.353670][ T1140] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 247.079069][ T6885] loop3: detected capacity change from 0 to 512 [ 247.305523][ T6885] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 247.434924][ T6885] ext4 filesystem being mounted at /57/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 248.011001][ T5785] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 248.048106][ T29] audit: type=1804 audit(2000000022.219:5): pid=6896 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.278" name="/newroot/71/file0" dev="tmpfs" ino=384 res=1 errno=0 [ 250.210001][ T9] usb 3-1: new full-speed USB device number 3 using dummy_hcd [ 250.442903][ T9] usb 3-1: config 0 has no interfaces? [ 250.473867][ T9] usb 3-1: New USB device found, idVendor=0eef, idProduct=72c4, bcdDevice= 0.00 [ 250.518884][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 250.604115][ T9] usb 3-1: config 0 descriptor?? [ 250.974538][ T9] usb 3-1: USB disconnect, device number 3 [ 251.403512][ T24] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 251.538399][ T5829] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 251.587827][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 251.633279][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 251.667553][ T24] usb 1-1: New USB device found, idVendor=1038, idProduct=12b6, bcdDevice= 0.00 [ 251.688197][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 251.721763][ T24] usb 1-1: config 0 descriptor?? [ 251.764569][ T5829] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 251.807217][ T5829] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 251.880991][ T5829] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 251.950503][ T5829] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 251.993300][ T5829] usb 4-1: Product: syz [ 251.997772][ T5829] usb 4-1: Manufacturer: syz [ 252.002642][ T5829] usb 4-1: SerialNumber: syz [ 252.269342][ T24] steelseries 0003:1038:12B6.0001: report_id 0 is invalid [ 252.373908][ T24] steelseries 0003:1038:12B6.0001: item 0 4 1 8 parsing failed [ 252.385256][ T6947] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 252.410219][ T24] steelseries 0003:1038:12B6.0001: probe with driver steelseries failed with error -22 [ 252.467683][ T6947] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 252.490297][ T6960] netlink: 4 bytes leftover after parsing attributes in process `syz.2.298'. [ 252.529138][ T24] usb 1-1: USB disconnect, device number 2 [ 252.555407][ T6960] netlink: 4 bytes leftover after parsing attributes in process `syz.2.298'. [ 252.569765][ T5829] cdc_ether 4-1:1.0: probe with driver cdc_ether failed with error -22 [ 252.648506][ T6962] netlink: 4 bytes leftover after parsing attributes in process `syz.4.299'. [ 252.674611][ T5829] usb 4-1: USB disconnect, device number 4 [ 252.790442][ T6964] netlink: 4 bytes leftover after parsing attributes in process `syz.4.299'. [ 253.128638][ T5829] usb 4-1: new full-speed USB device number 5 using dummy_hcd [ 253.330524][ T5829] usb 4-1: config index 0 descriptor too short (expected 301, got 72) [ 253.368066][ T5829] usb 4-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 253.401141][ T5829] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 253.449862][ T5829] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 1024, setting to 64 [ 253.487462][ T5829] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 253.527870][ T5829] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 253.576606][ T5829] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 253.836856][ T5829] usb 4-1: usb_control_msg returned -71 [ 253.893913][ T5829] usbtmc 4-1:16.0: can't read capabilities [ 254.012045][ T5829] usb 4-1: USB disconnect, device number 5 [ 257.272439][ T7036] netem: change failed [ 257.935515][ T7044] netlink: 40 bytes leftover after parsing attributes in process `syz.0.328'. [ 259.313796][ T7063] netlink: 4 bytes leftover after parsing attributes in process `syz.4.336'. [ 260.697022][ T7085] loop3: detected capacity change from 0 to 512 [ 260.933784][ T7085] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 261.057983][ T7085] ext4 filesystem being mounted at /70/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 261.372297][ T7101] loop0: detected capacity change from 0 to 64 [ 261.525786][ T5785] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 262.178394][ T7112] netlink: 16 bytes leftover after parsing attributes in process `syz.3.350'. [ 263.506580][ T7133] loop8: detected capacity change from 0 to 7 [ 263.553857][ T7133] Dev loop8: unable to read RDB block 7 [ 263.573577][ T7133] loop8: unable to read partition table [ 263.624258][ T7133] loop8: partition table beyond EOD, truncated [ 263.642250][ T7133] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 264.693342][ T9] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 264.918615][ T9] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 264.933487][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 264.963591][ T9] usb 3-1: Product: syz [ 264.973359][ T9] usb 3-1: Manufacturer: syz [ 264.989027][ T9] usb 3-1: SerialNumber: syz [ 265.288509][ T9] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO [ 265.356727][ T9] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -71 [ 265.405817][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 265.412410][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 265.430332][ T9] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 265.526677][ T9] lan78xx 3-1:1.0: probe with driver lan78xx failed with error -71 [ 265.604671][ T9] usb 3-1: USB disconnect, device number 4 [ 267.213656][ T9] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 267.402223][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 267.431399][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 267.463613][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 267.493342][ T9] usb 3-1: New USB device found, idVendor=0458, idProduct=5016, bcdDevice= 0.00 [ 267.519778][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 267.536020][ T9] usb 3-1: config 0 descriptor?? [ 268.149460][ T9] kye 0003:0458:5016.0002: control desc unexpectedly large [ 268.255755][ T9] input: HID 0458:5016 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0458:5016.0002/input/input7 [ 268.409394][ T9] input: HID 0458:5016 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0458:5016.0002/input/input8 [ 268.501922][ T9] kye 0003:0458:5016.0002: input,hiddev0,hidraw0: USB HID v0.09 Device [HID 0458:5016] on usb-dummy_hcd.2-1/input0 [ 268.843510][ T24] usb 3-1: USB disconnect, device number 5 [ 269.135245][ T7212] overlayfs: failed to clone upperpath [ 269.347741][ T7216] netlink: 4 bytes leftover after parsing attributes in process `syz.5.393'. [ 269.728421][ T7207] fido_id[7207]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 270.032128][ T7218] loop0: detected capacity change from 0 to 128 [ 270.164079][ T7218] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 270.204167][ T7218] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 270.242798][ T7218] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 270.294082][ T7218] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 270.334147][ T7218] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 270.390357][ T7218] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 270.423660][ T7218] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 270.464131][ T7218] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 270.484166][ T7218] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 270.526868][ T7218] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 270.604055][ T7218] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 270.631758][ T7218] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 270.649967][ T7218] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 270.693721][ T7218] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 270.713593][ T7218] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 270.724173][ T7218] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 270.741825][ T7218] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 270.754965][ T7227] loop2: detected capacity change from 0 to 512 [ 270.759556][ T7218] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 270.770817][ T7218] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 270.782496][ T7218] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 270.805732][ T7218] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 270.832250][ T7218] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 270.867940][ T7218] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 270.881909][ T7227] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 270.890905][ T7218] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 270.932994][ T7227] ext4 filesystem being mounted at /92/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 270.944102][ T29] audit: type=1800 audit(2000000045.109:6): pid=7218 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.394" name="/" dev="loop0" ino=1048620 res=0 errno=0 [ 271.394946][ T5790] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 271.836951][ T7240] loop2: detected capacity change from 0 to 512 [ 272.039384][ T7240] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 272.103980][ T7240] ext4 filesystem being mounted at /93/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 272.228981][ T29] audit: type=1800 audit(2000000046.399:7): pid=7240 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.403" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 272.641675][ T5790] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 273.475201][ T7268] loop5: detected capacity change from 0 to 256 [ 273.618532][ T7268] exFAT-fs (loop5): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x32e3664b, utbl_chksum : 0xe619d30d) [ 274.207718][ T7277] netlink: 28 bytes leftover after parsing attributes in process `syz.3.420'. [ 274.453760][ T7279] netlink: 32 bytes leftover after parsing attributes in process `syz.0.422'. [ 274.507911][ T7279] netlink: 'syz.0.422': attribute type 1 has an invalid length. [ 274.531322][ T7283] loop5: detected capacity change from 0 to 128 [ 274.542369][ T7279] bond0: option mode: unable to set because the bond device has slaves [ 274.555119][ T7283] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 274.648093][ T7283] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 274.858451][ T7282] loop2: detected capacity change from 0 to 2048 [ 274.992914][ T7282] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 275.104424][ T132] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 275.146201][ T7282] overlayfs: upper fs needs to support d_type. [ 275.203290][ T7282] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 275.246001][ T7282] overlayfs: failed to set xattr on upper [ 275.305632][ T7282] overlayfs: ...falling back to redirect_dir=nofollow. [ 275.323929][ T7282] overlayfs: ...falling back to index=off. [ 275.341000][ T7282] overlayfs: ...falling back to uuid=null. [ 275.841679][ T5790] UDF-fs: error (device loop2): udf_read_inode: (ino 1415) failed !bh [ 275.878116][ T5790] UDF-fs: error (device loop2): udf_read_inode: (ino 1415) failed !bh [ 276.452023][ T6854] bond0: (slave syz_tun): Releasing backup interface [ 276.758488][ T13] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 277.051926][ T13] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 277.269355][ T13] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 277.488389][ T13] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 277.921133][ T13] bridge_slave_1: left allmulticast mode [ 277.927713][ T13] bridge_slave_1: left promiscuous mode [ 277.935189][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 277.977728][ T13] bridge_slave_0: left allmulticast mode [ 277.987932][ T13] bridge_slave_0: left promiscuous mode [ 277.995807][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 278.553706][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 278.571814][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 278.658603][ T13] bond0 (unregistering): Released all slaves [ 278.760909][ T7327] sctp: [Deprecated]: syz.5.444 (pid 7327) Use of int in max_burst socket option deprecated. [ 278.760909][ T7327] Use struct sctp_assoc_value instead [ 279.803341][ T13] hsr_slave_0: left promiscuous mode [ 279.882029][ T13] hsr_slave_1: left promiscuous mode [ 279.898624][ T5787] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 279.911234][ T5787] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 279.926440][ T5787] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 279.937474][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 279.954687][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 279.964964][ T5787] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 279.984372][ T5787] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 280.036216][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 280.058873][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 280.200182][ T13] veth1_macvtap: left promiscuous mode [ 280.211016][ T13] veth0_macvtap: left promiscuous mode [ 280.220156][ T29] audit: type=1800 audit(2000000054.379:8): pid=7347 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.451" name="bus" dev="tmpfs" ino=535 res=0 errno=0 [ 280.251530][ T13] veth1_vlan: left promiscuous mode [ 280.268239][ T13] veth0_vlan: left promiscuous mode [ 281.883209][ T5131] ===================================================== [ 281.890554][ T5131] BUG: KMSAN: uninit-value in from_kuid_munged+0xb74/0xc90 [ 281.898348][ T5131] from_kuid_munged+0xb74/0xc90 [ 281.903529][ T5131] __scm_recv_common+0x233/0x910 [ 281.910353][ T5131] scm_recv_unix+0x5e/0x580 [ 281.915763][ T5131] __unix_dgram_recvmsg+0x14d6/0x1730 [ 281.921306][ T5131] unix_dgram_recvmsg+0x115/0x180 [ 281.926798][ T5131] sock_recvmsg+0x27b/0x310 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 281.931466][ T5131] ____sys_recvmsg+0x193/0x620 [ 281.937739][ T5131] ___sys_recvmsg+0x20b/0x850 [ 281.942834][ T5131] __x64_sys_recvmsg+0x20e/0x3d0 [ 281.948088][ T5131] x64_sys_call+0x35cc/0x3ea0 [ 281.952941][ T5131] do_syscall_64+0x134/0xf80 [ 281.957870][ T5131] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 281.964021][ T5131] [ 281.966406][ T5131] Local variable scm created at: [ 281.971406][ T5131] __unix_dgram_recvmsg+0x4d/0x1730 [ 281.976983][ T5131] unix_dgram_recvmsg+0x115/0x180 [ 281.982174][ T5131] [ 281.984830][ T5131] CPU: 0 UID: 0 PID: 5131 Comm: udevd Tainted: G L syzkaller #0 PREEMPT(full) [ 281.995688][ T5131] Tainted: [L]=SOFTLOCKUP [ 282.000099][ T5131] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 282.012043][ T5131] ===================================================== [ 282.019683][ T5131] Disabling lock debugging due to kernel taint [ 282.104632][ T5787] Bluetooth: hci4: command tx timeout [ 282.221260][ T5131] Kernel panic - not syncing: kmsan.panic set ... [ 282.227849][ T5131] CPU: 0 UID: 0 PID: 5131 Comm: udevd Tainted: G B L syzkaller #0 PREEMPT(full) [ 282.238456][ T5131] Tainted: [B]=BAD_PAGE, [L]=SOFTLOCKUP [ 282.244095][ T5131] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 282.254283][ T5131] Call Trace: [ 282.257648][ T5131] [ 282.260657][ T5131] __dump_stack+0x26/0x30 [ 282.265154][ T5131] dump_stack_lvl+0x50/0x1c0 [ 282.269904][ T5131] ? dump_stack+0x12/0x25 [ 282.274377][ T5131] dump_stack+0x1e/0x25 [ 282.278664][ T5131] vpanic+0x7b4/0x1430 [ 282.282908][ T5131] panic+0x15d/0x160 [ 282.286992][ T5131] kmsan_report+0x31a/0x320 [ 282.291664][ T5131] ? __msan_warning+0x1b/0x30 [ 282.296493][ T5131] ? from_kuid_munged+0xb74/0xc90 [ 282.301675][ T5131] ? __scm_recv_common+0x233/0x910 [ 282.306928][ T5131] ? scm_recv_unix+0x5e/0x580 [ 282.311734][ T5131] ? __unix_dgram_recvmsg+0x14d6/0x1730 [ 282.317441][ T5131] ? unix_dgram_recvmsg+0x115/0x180 [ 282.322807][ T5131] ? sock_recvmsg+0x27b/0x310 [ 282.327653][ T5131] ? ____sys_recvmsg+0x193/0x620 [ 282.332726][ T5131] ? ___sys_recvmsg+0x20b/0x850 [ 282.337705][ T5131] ? __x64_sys_recvmsg+0x20e/0x3d0 [ 282.342953][ T5131] ? x64_sys_call+0x35cc/0x3ea0 [ 282.347964][ T5131] ? do_syscall_64+0x134/0xf80 [ 282.352861][ T5131] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 282.359063][ T5131] ? update_load_avg+0x14eb/0x25d0 [ 282.364354][ T5131] ? kmsan_get_metadata+0xf1/0x160 [ 282.369640][ T5131] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 282.376136][ T5131] ? kmsan_get_metadata+0xf1/0x160 [ 282.381421][ T5131] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 282.387412][ T5131] ? preempt_schedule_irq+0x79/0xa0 [ 282.392738][ T5131] ? raw_irqentry_exit_cond_resched+0x5d/0x80 [ 282.398982][ T5131] ? irqentry_exit+0x8f/0x6c0 [ 282.403790][ T5131] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 282.410305][ T5131] ? kmsan_internal_unpoison_memory+0x14/0x20 [ 282.416527][ T5131] ? kmsan_get_metadata+0xf1/0x160 [ 282.421835][ T5131] __msan_warning+0x1b/0x30 [ 282.426504][ T5131] from_kuid_munged+0xb74/0xc90 [ 282.431535][ T5131] __scm_recv_common+0x233/0x910 [ 282.436619][ T5131] ? kmsan_get_metadata+0xf1/0x160 [ 282.441936][ T5131] scm_recv_unix+0x5e/0x580 [ 282.446580][ T5131] ? kmsan_get_metadata+0xf1/0x160 [ 282.451867][ T5131] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 282.457856][ T5131] __unix_dgram_recvmsg+0x14d6/0x1730 [ 282.463425][ T5131] unix_dgram_recvmsg+0x115/0x180 [ 282.468618][ T5131] ? __pfx_unix_dgram_recvmsg+0x10/0x10 [ 282.474327][ T5131] sock_recvmsg+0x27b/0x310 [ 282.479002][ T5131] ____sys_recvmsg+0x193/0x620 [ 282.483898][ T5131] ? should_fail_ex+0x45/0x8c0 [ 282.488851][ T5131] ___sys_recvmsg+0x20b/0x850 [ 282.493695][ T5131] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 282.499683][ T5131] ? kmsan_get_metadata+0xf1/0x160 [ 282.504964][ T5131] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 282.510969][ T5131] __x64_sys_recvmsg+0x20e/0x3d0 [ 282.516062][ T5131] ? kmsan_get_metadata+0xf1/0x160 [ 282.521365][ T5131] x64_sys_call+0x35cc/0x3ea0 [ 282.526215][ T5131] do_syscall_64+0x134/0xf80 [ 282.530941][ T5131] ? clear_bhb_loop+0x50/0xa0 [ 282.535754][ T5131] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 282.541795][ T5131] RIP: 0033:0x7fc4f78a7407 [ 282.546311][ T5131] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 282.566054][ T5131] RSP: 002b:00007ffc2752ecc0 EFLAGS: 00000202 ORIG_RAX: 000000000000002f [ 282.574611][ T5131] RAX: ffffffffffffffda RBX: 00007fc4f8062880 RCX: 00007fc4f78a7407 [ 282.582690][ T5131] RDX: 0000000000000040 RSI: 00007ffc2752ede0 RDI: 0000000000000009 [ 282.590755][ T5131] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 282.598811][ T5131] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 282.606898][ T5131] R13: 000055c90a47c100 R14: 0000000000000000 R15: 0000000000000000 [ 282.614999][ T5131] [ 282.618372][ T5131] Kernel Offset: disabled [ 282.622749][ T5131] Rebooting in 86400 seconds..