last executing test programs: 6m57.491234298s ago: executing program 4 (id=218): bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x9, 0x42, 0x8}, 0x48) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x62141) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32={[0x2600]}}], 0xffc8) mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000400)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r0}}) 6m56.475694573s ago: executing program 4 (id=222): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r3, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, 0x0, &(0x7f00000002c0)) sendmsg$nl_route(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="540000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800e0001006970366772657461700000001800028014000700fc00000000000000000000000000000008000a00", @ANYRES32], 0x54}}, 0x0) socket$igmp6(0xa, 0x3, 0x2) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="200000001000250800170000000000000a000000", @ANYRES32=r8, @ANYBLOB="0174dfdb"], 0x20}}, 0x0) r9 = socket(0x1, 0x803, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000780)=@newlink={0x50, 0x10, 0xf11, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x104, 0x780}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x20, 0xa0}}}}}}, @IFLA_MASTER={0x8, 0xa, r10}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 6m56.443471534s ago: executing program 3 (id=223): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x3, &(0x7f0000000940)=@framed={{0x18, 0x9}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$tipc(0x1e, 0x5, 0x0) socket$tipc(0x1e, 0x2, 0x0) r5 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r5, &(0x7f0000000380)={&(0x7f0000000140)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x3, 0x4}}, 0x10, 0x0}, 0x0) add_key(&(0x7f0000000040)='pkcs7_test\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'wlan1\x00', 0x0}) openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(0xffffffffffffffff, 0xc0a85320, &(0x7f0000000180)={0x1080, 0xfffffffe, 0x0, 0x0, 0x0, 0x1002000}) openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/asound/seq/clients\x00', 0x0, 0x0) 6m54.874278096s ago: executing program 4 (id=227): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$unix(0x1, 0x2, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010028bd7000fddbdf250700000008000300", @ANYRES32=r3, @ANYBLOB="0c009900ff070000700000001400040073797a6b616c6c6572300000000000000800050006"], 0x44}, 0x1, 0x0, 0x0, 0x81}, 0x24044884) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r4) socket$inet_sctp(0x2, 0x1, 0x84) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) r5 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a3200000000140000001100"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x14, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}}], {0x14}}, 0x3c}}, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001600)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r7, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="2000000010000100760100000475000000000000", @ANYRES32, @ANYBLOB="9a"], 0x20}}, 0x0) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.events\x00', 0x26e1, 0x0) close(r10) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r10, 0x8b06, &(0x7f0000000000)={'wlan1\x00', @random="060000000010"}) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="300000001000010000003a194618", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) r11 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r11, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f0000000280000012", 0x2d}], 0x1}, 0x0) write$rfkill(r5, &(0x7f0000000080)={0xff, 0x1, 0x3, 0x1, 0x4}, 0x8) 6m53.54252717s ago: executing program 4 (id=231): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r1, 0xfffffffc) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x14, r4, 0x1}, 0x14}, 0x1, 0x0, 0x0, 0xaa34a4cfdf933201}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)={0x20, r6, 0x1, 0x0, 0x0, {0x7}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}]}]}, 0x20}}, 0x0) 6m52.451533365s ago: executing program 4 (id=235): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000000808000400", @ANYRES32=r1, @ANYBLOB="06001500070000000c00168008000100", @ANYRES64=r0], 0x38}}, 0x10) 6m51.763837904s ago: executing program 4 (id=238): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x409c884, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000002000)=""/102400, 0x19000) creat(0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x4, [@var={0x2, 0x0, 0x0, 0x11, 0x3, 0xffffffff}, @const={0x0, 0x0, 0x0, 0x2}, @func_proto={0x2, 0x0, 0x0, 0x8, 0x2}]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x44}, 0x20) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000001c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r4, {0x10, 0xffe0}, {}, {0xd, 0xfff3}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_CT_ZONE={0x6, 0x5d, 0xfb25}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x220400b9}, 0x40040) 6m51.34252887s ago: executing program 3 (id=240): r0 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r0, 0x84, 0x85, &(0x7f0000000ac0), 0x90) sendmsg$inet(r0, &(0x7f00000006c0)={&(0x7f0000000080)={0x2, 0x4e23, @loopback}, 0x10, &(0x7f0000000300)=[{&(0x7f0000000000)="83d5", 0x2}], 0x1}, 0x4c0e0) 6m50.789512077s ago: executing program 3 (id=242): r0 = syz_io_uring_setup(0x308, &(0x7f0000000240)={0x0, 0x2, 0x10100, 0x2, 0x47}, &(0x7f0000000800)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(0x0, r2, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x1, 0x7}) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, 0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r0, 0x2d3e, 0x0, 0x0, 0x0, 0x0) 6m49.978953775s ago: executing program 3 (id=244): r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000020000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000001"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000340)='kmem_cache_free\x00', r1}, 0x18) bind$inet6(r0, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty, 0x2}, 0x1c) r2 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r2, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4, 0x0, 0x3}}, 0x2e) ioctl$PPPIOCGCHAN(r2, 0x80047437, &(0x7f0000000080)) syz_emit_ethernet(0x4c, &(0x7f0000000140)={@random="99177fa54f29", @random="ece65fbcee55", @void, {@ipv6={0x86dd, @udp={0x0, 0x6, '\x00', 0x16, 0x11, 0xff, @private0={0xfc, 0x0, '\x00', 0x1}, @local, {[], {0x0, 0xe22, 0x16, 0x0, @gue={{0x2, 0x0, 0x0, 0x3}, "30b00afe4e70"}}}}}}}, 0x0) 6m48.860772696s ago: executing program 3 (id=247): openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x80080, 0x0) syz_io_uring_setup(0x186, &(0x7f0000000080)={0x0, 0x0, 0x13100}, 0x0, &(0x7f0000000000)) r0 = syz_io_uring_setup(0x239, &(0x7f0000000300)={0x0, 0x0, 0x10100}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r0, 0x2def, 0x0, 0x0, 0x0, 0x0) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000700)=@base={0x7, 0x4, 0x20, 0x1}, 0x50) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(r4, &(0x7f0000002080)={0xfc, {"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", 0x1000}}, 0x1006) 6m47.106804472s ago: executing program 3 (id=252): ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)=0x0) timer_settime(r2, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) readv(r0, &(0x7f0000000300)=[{&(0x7f0000000340)=""/113, 0x71}], 0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000002000)=""/102400, 0x19000) 6m36.106949907s ago: executing program 32 (id=238): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x409c884, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000002000)=""/102400, 0x19000) creat(0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x4, [@var={0x2, 0x0, 0x0, 0x11, 0x3, 0xffffffff}, @const={0x0, 0x0, 0x0, 0x2}, @func_proto={0x2, 0x0, 0x0, 0x8, 0x2}]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x44}, 0x20) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000001c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r4, {0x10, 0xffe0}, {}, {0xd, 0xfff3}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_CT_ZONE={0x6, 0x5d, 0xfb25}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x220400b9}, 0x40040) 6m31.744431476s ago: executing program 33 (id=252): ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)=0x0) timer_settime(r2, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) readv(r0, &(0x7f0000000300)=[{&(0x7f0000000340)=""/113, 0x71}], 0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000002000)=""/102400, 0x19000) 46.074380646s ago: executing program 5 (id=1277): bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x3, 0x0, 0x4, 0xff, 0x142e, 0x1}, 0x48) 45.59226663s ago: executing program 5 (id=1279): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x5000002, 0x11, r0, 0x3552e000) 45.10239225s ago: executing program 5 (id=1282): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/mem_sleep', 0x101a02, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100), 0x400, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x20001, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) 44.799939334s ago: executing program 5 (id=1284): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) syz_emit_vhci(0x0, 0x7) syz_open_dev$cec(0x0, 0x0, 0x0) r3 = openat$sw_sync(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0x201, 0x40, 0x40}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000180), 0x1003, r6}, 0x38) r7 = openat$sw_sync(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r7, 0xc0285700, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4040000}, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x20000090) ioctl$SW_SYNC_IOC_INC(r3, 0x40045701, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) syz_io_uring_setup(0x497, 0x0, 0x0, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x20, 0x68, 0x5fb9a818fb7378e9, 0xfffffffe, 0x25dfdbff, {}, [@NHA_OIF={0x8, 0x5, r10}]}, 0x20}}, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newnexthop={0x38, 0x68, 0x1, 0x100003, 0x7ffffffd, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x15}]}, @NHA_RES_GROUP={0xc, 0xc, 0x0, 0x1, [@NHA_RES_GROUP_BUCKETS={0x6, 0x1, 0x3fd7}]}, @NHA_GROUP_TYPE={0x6, 0x3, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x4008018}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=@newlink={0x20, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, r10, 0x192}}, 0x20}}, 0x0) 36.001767412s ago: executing program 5 (id=1313): openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0xa0003, 0x0) openat$sequencer(0xffffffffffffff9c, 0x0, 0x400, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x20001, 0x0) 34.83268832s ago: executing program 5 (id=1316): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000100)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$clear(0x7, r3) 19.290430514s ago: executing program 34 (id=1316): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000100)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$clear(0x7, r3) 19.017529225s ago: executing program 1 (id=1352): r0 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') r1 = openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff) close(r1) execveat$binfmt(0xffffffffffffff9c, r0, 0x0, &(0x7f0000000600)={[&(0x7f0000000240)='\xff\xff\xff\xff\xff\xff', &(0x7f0000000340)='\\\x00']}, 0x1000) 18.36403352s ago: executing program 1 (id=1356): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) syz_emit_vhci(0x0, 0x7) syz_open_dev$cec(0x0, 0x0, 0x0) r2 = openat$sw_sync(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0x201, 0x40, 0x40}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000180), 0x1003, r5}, 0x38) r6 = openat$sw_sync(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r6, 0xc0285700, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TEST(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="640000000906010800000000000000000600000505000100070000003c0007801800148014000240fc0000000000000000000000000000011800018014000240ff01000000000000000000000000000105000300"], 0x64}}, 0x4800) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x20000090) ioctl$SW_SYNC_IOC_INC(r2, 0x40045701, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) syz_io_uring_setup(0x497, 0x0, 0x0, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x20, 0x68, 0x5fb9a818fb7378e9, 0xfffffffe, 0x25dfdbff, {}, [@NHA_OIF={0x8, 0x5, r9}]}, 0x20}}, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newnexthop={0x38, 0x68, 0x1, 0x100003, 0x7ffffffd, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x15}]}, @NHA_RES_GROUP={0xc, 0xc, 0x0, 0x1, [@NHA_RES_GROUP_BUCKETS={0x6, 0x1, 0x3fd7}]}, @NHA_GROUP_TYPE={0x6, 0x3, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x4008018}, 0x0) 9.170767615s ago: executing program 6 (id=1374): sendmsg$inet(0xffffffffffffffff, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001080)=[{&(0x7f0000000040)="a72d11a15c048c0a7d63aebc5cea1f815108f6091475aeec600831aa9d3944e60bc2ad06a619c560aa0118b28f68f1eb14549d633b4b23f179fb680716faa4", 0x3f}], 0x1}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x1f, 0x18, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa1000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x19}, 0x94) r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f0000001ff0)={0x1d, r1}, 0x10) sendmsg$can_raw(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000ff0)={&(0x7f0000000580)=@canfd={{0x1}, 0xf6, 0x0, 0x0, 0x0, "0327e1b22b5fcef7739c699f5ff986ca08990039576a7d5cb2bdac3fa80acf584ecb5fee496e6866856b76b5ee00000000000000004e2f9663a918fa1efd9b0b"}, 0x48}, 0xee, 0x0, 0x0, 0x40041}, 0x0) 8.480959903s ago: executing program 6 (id=1375): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0xff}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r0, &(0x7f0000000140), &(0x7f0000000080)=@udp6, 0xff00}, 0x20) 7.638730929s ago: executing program 6 (id=1377): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0xe, 0x4, 0x8, 0x6}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000040)={r4, r1, 0x25, 0x0, @val=@tcx={@void, @value=r4}}, 0x1c) syz_emit_ethernet(0x82, &(0x7f0000000640)={@random='\x00\a\x00', @multicast, @val={@val={0x88a8, 0x1, 0x1, 0x2}, {0x8100, 0x2, 0x0, 0x4}}, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "2f23aa", 0x44, 0x2f, 0x0, @empty, @mcast2, {[], {{0x0, 0x0, 0x1, 0x1}, {0x0, 0x0, 0x1, 0x1}, {0x1, 0x0, 0x1}, {0x8, 0x88be, 0x0, {{0x1, 0x1, 0x10, 0x0, 0x0, 0x1, 0x0, 0x5}, 0x1, {0x6}}}, {0x8, 0x22eb, 0x1, {{0x8, 0x2, 0x3, 0x3, 0x1, 0x1, 0x6, 0x3}, 0x2, {0x7, 0x6, 0x1, 0x7, 0x0, 0x0, 0x2, 0x0, 0x1}}}, {0x8, 0x6558, 0x2}}}}}}}, 0x0) 6.923516947s ago: executing program 6 (id=1379): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000fd"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r2, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r3, 0x8, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, 0x32) writev(r2, &(0x7f0000000180)=[{&(0x7f0000000080)='v', 0x34000}], 0x1) 6.863424978s ago: executing program 1 (id=1380): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) ppoll(&(0x7f0000000140)=[{r0, 0xa0}], 0x1, &(0x7f0000000300), 0x0, 0x0) 6.175315644s ago: executing program 6 (id=1382): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f00000003c0)=ANY=[@ANYBLOB="660a0100000000006111380000000000180000000000000000000000000000009500000000000000b6b0486c97c43a041d3859386c703f034caf6cb7a037b7a90e680138959564e67cb00eb1ca7379736507c0b19d3af90c2eeec8a1e143fe588cb3cd9bb54e0a7d3fb1e0e84f5d42cddfa44f50fce565b6951fd64e5269bb033a6391956ba42dfe99a296b34ac5b96b6ab21cf61ea0eb4e0d5db8a62dfe91267fdb4f26760a410740696ae67cd36e0ff914b4571a3aeb7b46b071340628c09989ba6b04b37dd3bad355f05ddc550e22ceaefe8aece68d38c0b550a205d9"], &(0x7f0000000000)='GPL\x00'}, 0x80) 6.175074892s ago: executing program 1 (id=1383): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x3, &(0x7f0000000000)=@framed={{0x4e, 0xa, 0xa, 0x0, 0x0, 0x71, 0x10, 0x1e}}, &(0x7f0000000480)='syzkaller\x00'}, 0x80) 5.56637881s ago: executing program 1 (id=1386): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x79, 0x10, 0x85}, [@ldst={0x5, 0x2}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x22e, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) 5.56580903s ago: executing program 6 (id=1387): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) syz_emit_vhci(0x0, 0x7) syz_open_dev$cec(0x0, 0x0, 0x0) r3 = openat$sw_sync(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0x201, 0x40, 0x40}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000180), 0x1003, r6}, 0x38) r7 = openat$sw_sync(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r7, 0xc0285700, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TEST(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="640000000906010800000000000000000600000505000100070000003c0007801800148014000240fc0000000000000000000000000000011800018014000240ff01000000000000000000000000000105000300"], 0x64}}, 0x4800) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x20000090) ioctl$SW_SYNC_IOC_INC(r3, 0x40045701, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) syz_io_uring_setup(0x497, 0x0, 0x0, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x20, 0x68, 0x5fb9a818fb7378e9, 0xfffffffe, 0x25dfdbff, {}, [@NHA_OIF={0x8, 0x5, r10}]}, 0x20}}, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newnexthop={0x38, 0x68, 0x1, 0x100003, 0x7ffffffd, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x15}]}, @NHA_RES_GROUP={0xc, 0xc, 0x0, 0x1, [@NHA_RES_GROUP_BUCKETS={0x6, 0x1, 0x3fd7}]}, @NHA_GROUP_TYPE={0x6, 0x3, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x4008018}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=@newlink={0x20, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, r10, 0x192}}, 0x20}}, 0x0) 4.388410238s ago: executing program 1 (id=1389): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) syz_emit_vhci(0x0, 0x7) syz_open_dev$cec(0x0, 0x0, 0x0) r2 = openat$sw_sync(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0x201, 0x40, 0x40}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000180), 0x1003, r5}, 0x38) r6 = openat$sw_sync(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r6, 0xc0285700, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4040000}, 0x0) sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="640000000906010800000000000000000600000505000100070000003c0007801800148014000240fc0000000000000000000000000000011800018014000240ff01000000000000000000000000000105000300"], 0x64}}, 0x4800) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x20000090) ioctl$SW_SYNC_IOC_INC(r2, 0x40045701, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) syz_io_uring_setup(0x497, 0x0, 0x0, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x20, 0x68, 0x5fb9a818fb7378e9, 0xfffffffe, 0x25dfdbff, {}, [@NHA_OIF={0x8, 0x5, r8}]}, 0x20}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newnexthop={0x38, 0x68, 0x1, 0x100003, 0x7ffffffd, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x15}]}, @NHA_RES_GROUP={0xc, 0xc, 0x0, 0x1, [@NHA_RES_GROUP_BUCKETS={0x6, 0x1, 0x3fd7}]}, @NHA_GROUP_TYPE={0x6, 0x3, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x4008018}, 0x0) 4.280853858s ago: executing program 2 (id=1390): socket$nl_xfrm(0x10, 0x3, 0x6) syz_usb_connect$printer(0x2, 0x0, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0x2, 0x0, 0x25dfdbfc, {{@in6=@private0, @in=@remote, 0x0, 0x400, 0x0, 0x0, 0xa, 0x60, 0x80, 0x3b, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {}, 0x9, 0x0, 0x0, 0x0, 0x1}}, 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9"], 0xb8}}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={0x0, 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in6=@private0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x40, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x9}, {0x0, 0x5}}}, 0xb8}}, 0x4000) 4.111930674s ago: executing program 0 (id=1391): close(0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00'}, 0x48) 3.227988948s ago: executing program 0 (id=1392): capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) 2.724831832s ago: executing program 2 (id=1393): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00'}, 0x48) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYRES32=r1, @ANYBLOB="06001500070000000c00168008000100", @ANYRES64=r0], 0x38}}, 0x10) 2.672018246s ago: executing program 0 (id=1394): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="09000000060000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x11, 0xd, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000002a00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r1}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@func_proto]}}, 0x0, 0xfffffffffffffef1, 0x0, 0xa}, 0x28) 2.270548104s ago: executing program 2 (id=1395): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x12, 0x8e, 0x4, 0x2}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000780)={{r1}, &(0x7f0000000700), &(0x7f0000000740)=r0}, 0x20) ppoll(&(0x7f0000000380)=[{r0, 0x28}], 0x1, &(0x7f00000003c0), 0x0, 0x0) 1.756188723s ago: executing program 0 (id=1396): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x94) sendmsg$nl_route(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000700)=ANY=[@ANYBLOB="3c00000012000100"], 0x3c}, 0x1, 0x0, 0x0, 0x4c080}, 0x4080) 1.566394496s ago: executing program 2 (id=1397): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={0x0, &(0x7f00000002c0)=""/185, 0x0, 0xb9, 0x1, 0x3}, 0x28) socket$netlink(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) r0 = socket$packet(0x11, 0x3, 0x300) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r0, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x0, r2}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x36}], 0x1}}], 0x1, 0x0) 977.634859ms ago: executing program 0 (id=1398): r0 = socket(0x2b, 0x80801, 0x1) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000fc0)=@raw={'raw\x00', 0x3c1, 0x3, 0x2d0, 0x140, 0x5c, 0x160, 0x140, 0x3e0, 0x250, 0x228, 0x25a, 0x250, 0x228, 0x4, 0x0, {[{{@ipv6={@remote, @dev, [], [], 'veth0_to_batadv\x00', 'wg1\x00', {}, {0x222cecdb0fb5a62a}, 0x3a}, 0x5002, 0xa8, 0xf0, 0x52020000, {0x0, 0x6802000000000000}}, @unspec=@CT0={0x48}}, {{@ipv6={@local, @private2, [], [0xff], 'veth1_to_hsr\x00', 'dummy0\x00', {}, {}, 0x88}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x330) 943.282061ms ago: executing program 2 (id=1399): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x14, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xa7, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ffc}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[], 0xa8}}, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f00000004c0)={0x3, &(0x7f0000000040)=[{0x20, 0x0, 0x1, 0xfffff00c}, {0x20, 0x0, 0x0, 0xdffff010}, {0x6}]}, 0x10) sendmmsg$unix(r0, &(0x7f00000000c0), 0x3f, 0x0) 7.508668ms ago: executing program 2 (id=1400): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'lo\x00'}) syz_open_procfs$namespace(0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x5, 0x0, 0x0, &(0x7f0000000240)='GPL\x00', 0x80040005, 0x0, 0x0, 0x40f00, 0x18}, 0x94) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl(r1, 0x8b1a, &(0x7f0000000040)) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8b04, &(0x7f0000000000)={'wlan1\x00'}) 0s ago: executing program 0 (id=1401): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x10, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000071101000000000009503000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x9}, 0x80) kernel console output (not intermixed with test programs): ragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 262.102722][ T5807] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 262.766889][ T5807] hsr_slave_0: entered promiscuous mode [ 262.775880][ T5807] hsr_slave_1: entered promiscuous mode [ 262.785007][ T5807] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 262.792857][ T5807] Cannot create hsr debugfs directory [ 263.014825][ T5803] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 263.124083][ T5803] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 263.196566][ T5803] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 263.271989][ T5803] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 263.449043][ T5805] Bluetooth: hci1: command tx timeout [ 263.454740][ T5805] Bluetooth: hci0: command tx timeout [ 263.462017][ T5812] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 263.463329][ T5805] Bluetooth: hci2: command tx timeout [ 263.509787][ T5812] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 263.529662][ T5805] Bluetooth: hci4: command tx timeout [ 263.581554][ T5799] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 263.621942][ T5799] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 263.622394][ T5805] Bluetooth: hci3: command tx timeout [ 263.653352][ T5799] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 263.676366][ T5812] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 263.782455][ T5799] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 263.802515][ T5812] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 264.115896][ T5806] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 264.213516][ T5806] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 264.240845][ T5806] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 264.324671][ T5806] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 264.613078][ T5807] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 264.698016][ T5807] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 264.725832][ T5807] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 264.756955][ T5807] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 265.080811][ T5803] 8021q: adding VLAN 0 to HW filter on device bond0 [ 265.377728][ T5799] 8021q: adding VLAN 0 to HW filter on device bond0 [ 265.404293][ T5812] 8021q: adding VLAN 0 to HW filter on device bond0 [ 265.420844][ T5803] 8021q: adding VLAN 0 to HW filter on device team0 [ 265.495355][ T3584] bridge0: port 1(bridge_slave_0) entered blocking state [ 265.503115][ T3584] bridge0: port 1(bridge_slave_0) entered forwarding state [ 265.617223][ T3584] bridge0: port 2(bridge_slave_1) entered blocking state [ 265.624896][ T3584] bridge0: port 2(bridge_slave_1) entered forwarding state [ 265.738339][ T5812] 8021q: adding VLAN 0 to HW filter on device team0 [ 265.762728][ T5799] 8021q: adding VLAN 0 to HW filter on device team0 [ 265.794082][ T5806] 8021q: adding VLAN 0 to HW filter on device bond0 [ 265.911888][ T3584] bridge0: port 1(bridge_slave_0) entered blocking state [ 265.919560][ T3584] bridge0: port 1(bridge_slave_0) entered forwarding state [ 265.935080][ T3584] bridge0: port 2(bridge_slave_1) entered blocking state [ 265.942740][ T3584] bridge0: port 2(bridge_slave_1) entered forwarding state [ 265.969205][ T3584] bridge0: port 1(bridge_slave_0) entered blocking state [ 265.977039][ T3584] bridge0: port 1(bridge_slave_0) entered forwarding state [ 266.096019][ T3669] bridge0: port 2(bridge_slave_1) entered blocking state [ 266.103773][ T3669] bridge0: port 2(bridge_slave_1) entered forwarding state [ 266.284337][ T5806] 8021q: adding VLAN 0 to HW filter on device team0 [ 266.476581][ T3669] bridge0: port 1(bridge_slave_0) entered blocking state [ 266.484327][ T3669] bridge0: port 1(bridge_slave_0) entered forwarding state [ 266.536439][ T5807] 8021q: adding VLAN 0 to HW filter on device bond0 [ 266.638948][ T5812] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 266.675702][ T5799] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 266.686659][ T5799] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 266.729786][ T3669] bridge0: port 2(bridge_slave_1) entered blocking state [ 266.737599][ T3669] bridge0: port 2(bridge_slave_1) entered forwarding state [ 267.018692][ T5807] 8021q: adding VLAN 0 to HW filter on device team0 [ 267.179654][ T3669] bridge0: port 1(bridge_slave_0) entered blocking state [ 267.187320][ T3669] bridge0: port 1(bridge_slave_0) entered forwarding state [ 267.318092][ T3669] bridge0: port 2(bridge_slave_1) entered blocking state [ 267.325690][ T3669] bridge0: port 2(bridge_slave_1) entered forwarding state [ 268.221477][ T5803] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 268.701728][ T5799] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 268.726994][ T5812] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 268.836273][ T5803] veth0_vlan: entered promiscuous mode [ 268.969495][ T5803] veth1_vlan: entered promiscuous mode [ 269.114791][ T5806] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 269.435635][ T5799] veth0_vlan: entered promiscuous mode [ 269.452943][ T5812] veth0_vlan: entered promiscuous mode [ 269.538195][ T5803] veth0_macvtap: entered promiscuous mode [ 269.604916][ T5799] veth1_vlan: entered promiscuous mode [ 269.623029][ T5812] veth1_vlan: entered promiscuous mode [ 269.645604][ T5803] veth1_macvtap: entered promiscuous mode [ 269.683481][ T5807] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 269.844617][ T5803] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 269.992216][ T5803] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 270.114208][ T5803] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 270.124626][ T5803] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 270.135040][ T5803] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 270.144771][ T5803] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 270.253778][ T5799] veth0_macvtap: entered promiscuous mode [ 270.276176][ T5812] veth0_macvtap: entered promiscuous mode [ 270.304765][ T5807] veth0_vlan: entered promiscuous mode [ 270.326355][ T5799] veth1_macvtap: entered promiscuous mode [ 270.375224][ T5812] veth1_macvtap: entered promiscuous mode [ 270.439149][ T5807] veth1_vlan: entered promiscuous mode [ 270.559031][ T5799] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 270.660395][ T5799] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 270.704291][ T5812] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 270.767136][ T5799] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 270.776525][ T5799] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 270.785729][ T5799] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 270.794815][ T5799] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 270.834025][ T5812] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 270.988343][ T5812] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 270.997545][ T5812] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 271.006578][ T5812] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 271.015847][ T5812] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 271.037272][ T5807] veth0_macvtap: entered promiscuous mode [ 271.116599][ T5807] veth1_macvtap: entered promiscuous mode [ 271.406575][ T5807] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 271.503987][ T5807] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 271.626019][ T5807] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 271.635404][ T5807] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 271.644866][ T5807] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 271.654165][ T5807] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 272.140082][ T5806] veth0_vlan: entered promiscuous mode [ 272.308303][ T5806] veth1_vlan: entered promiscuous mode [ 272.698190][ T5806] veth0_macvtap: entered promiscuous mode [ 272.782768][ T5806] veth1_macvtap: entered promiscuous mode [ 272.953771][ T5806] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 273.068409][ T5806] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 273.169710][ T5806] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 273.179083][ T5806] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 273.188335][ T5806] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 273.197513][ T5806] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 277.291893][ T4496] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 277.301433][ T4496] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 277.558285][ T3555] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 277.566464][ T3555] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 278.002834][ T5803] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 278.278063][ T3584] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 278.286186][ T3584] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 278.432419][ T1135] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 278.440698][ T1135] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 278.475575][ T3952] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 278.483806][ T3952] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 278.624791][ T1135] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 278.633391][ T1135] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 279.046870][ T4496] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 279.055788][ T4496] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 279.342661][ T3739] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 279.351086][ T3739] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 280.440904][ T5990] loop1: detected capacity change from 0 to 512 [ 280.573383][ T3952] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 280.581726][ T3952] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 280.670643][ T5990] EXT4-fs error (device loop1): ext4_orphan_get:1393: inode #15: comm syz.1.6: iget: bad i_size value: 38620345925642 [ 280.738500][ T5990] EXT4-fs error (device loop1): ext4_orphan_get:1398: comm syz.1.6: couldn't read orphan inode 15 (err -117) [ 280.820696][ T5990] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 280.877063][ T3952] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 280.885424][ T3952] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 281.042332][ T5998] netlink: 'syz.2.8': attribute type 16 has an invalid length. [ 281.050528][ T5998] netlink: 'syz.2.8': attribute type 17 has an invalid length. [ 281.363280][ T6000] EXT4-fs error (device loop1): ext4_validate_block_bitmap:432: comm syz.1.6: bg 0: block 5: invalid block bitmap [ 281.611405][ T6000] EXT4-fs (loop1): Delayed block allocation failed for inode 16 at logical offset 9 with max blocks 55 with error 28 [ 281.624141][ T6000] EXT4-fs (loop1): This should not happen!! Data will be lost [ 281.624141][ T6000] [ 281.637678][ T6000] EXT4-fs (loop1): Total free blocks count 0 [ 281.643843][ T6000] EXT4-fs (loop1): Free/Dirty block details [ 281.651349][ T6000] EXT4-fs (loop1): free_blocks=0 [ 281.656445][ T6000] EXT4-fs (loop1): dirty_blocks=55 [ 281.661820][ T6000] EXT4-fs (loop1): Block reservation details [ 281.668070][ T6000] EXT4-fs (loop1): i_reserved_data_blocks=55 [ 282.165899][ T5803] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 283.003340][ T6015] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 283.054733][ T6013] netlink: 'syz.0.12': attribute type 10 has an invalid length. [ 283.089574][ T6013] syz_tun: entered promiscuous mode [ 283.119302][ T6013] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 283.717799][ T6018] fuse: Bad value for 'user_id' [ 283.722947][ T6018] fuse: Bad value for 'user_id' [ 284.336806][ T6024] loop2: detected capacity change from 0 to 128 [ 285.623644][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 285.816421][ T6031] netlink: 12 bytes leftover after parsing attributes in process `syz.0.18'. [ 285.849407][ T6037] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 285.987183][ T6039] Zero length message leads to an empty skb [ 286.100975][ T6042] netlink: 24 bytes leftover after parsing attributes in process `syz.1.20'. [ 286.741274][ T6044] loop2: detected capacity change from 0 to 512 [ 286.818364][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 286.859949][ T6044] ======================================================= [ 286.859949][ T6044] WARNING: The mand mount option has been deprecated and [ 286.859949][ T6044] and is ignored by this kernel. Remove the mand [ 286.859949][ T6044] option from the mount to silence this warning. [ 286.859949][ T6044] ======================================================= [ 286.966283][ T6031] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 286.974922][ T6031] batadv_slave_0: entered promiscuous mode [ 287.091140][ T6044] EXT4-fs (loop2): couldn't mount as ext2 due to feature incompatibilities [ 287.569815][ T0] NOHZ tick-stop error: local softirq work is pending, handler #242!!! [ 287.587977][ T11] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 287.858141][ T11] usb 5-1: Using ep0 maxpacket: 16 [ 287.881988][ T11] usb 5-1: config index 0 descriptor too short (expected 16456, got 72) [ 287.891839][ T11] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 287.902951][ T11] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 2 [ 288.040414][ T11] usb 5-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 288.050014][ T11] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 288.059739][ T11] usb 5-1: Product: syz [ 288.064186][ T11] usb 5-1: Manufacturer: syz [ 288.069166][ T11] usb 5-1: SerialNumber: syz [ 288.356201][ T11] usb 5-1: config 0 descriptor?? [ 288.625336][ T6054] fuse: Bad value for 'user_id' [ 288.631037][ T6054] fuse: Bad value for 'user_id' [ 288.639596][ T11] usb 5-1: USB disconnect, device number 2 [ 288.648492][ T5805] Bluetooth: hci3: Malformed LE Event: 0x0d [ 289.311000][ T0] NOHZ tick-stop error: local softirq work is pending, handler #242!!! [ 290.182503][ T6063] loop3: detected capacity change from 0 to 512 [ 290.224688][ T6063] EXT4-fs: Ignoring removed oldalloc option [ 290.337876][ T6063] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 290.351628][ T6063] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 290.487772][ T6063] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #16: comm syz.3.28: invalid indirect mapped block 4294967295 (level 0) [ 290.635964][ T6063] EXT4-fs (loop3): Remounting filesystem read-only [ 290.688294][ T6063] EXT4-fs (loop3): 1 orphan inode deleted [ 290.694482][ T6063] EXT4-fs (loop3): 1 truncate cleaned up [ 290.703033][ T6063] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 291.158005][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 291.164749][ T1286] ieee802154 phy1 wpan1: encryption failed: -22 [ 291.379205][ T5807] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 291.791315][ T6069] loop1: detected capacity change from 0 to 512 [ 291.879670][ T6069] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 292.016827][ T6069] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00ee018, mo2=0002] [ 292.026073][ T6069] System zones: 1-12 [ 292.128764][ T6069] EXT4-fs (loop1): 1 truncate cleaned up [ 292.137256][ T6069] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 292.588630][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 292.689253][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 292.996915][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 293.101164][ T0] NOHZ tick-stop error: local softirq work is pending, handler #4a!!! [ 293.201841][ T0] NOHZ tick-stop error: local softirq work is pending, handler #c2!!! [ 294.020778][ T0] NOHZ tick-stop error: local softirq work is pending, handler #c2!!! [ 295.025469][ T5803] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 296.430550][ T6085] fuse: Bad value for 'fd' [ 297.161877][ T6089] loop2: detected capacity change from 0 to 2048 [ 297.386949][ T6004] loop2: p1 < > p3 [ 297.473238][ T6004] loop2: p3 size 134217728 extends beyond EOD, truncated [ 297.647100][ T6089] loop2: p1 < > p3 [ 297.710523][ T6089] loop2: p3 size 134217728 extends beyond EOD, truncated [ 298.353474][ T6004] udevd[6004]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 298.366888][ T5977] udevd[5977]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 298.764325][ T5977] udevd[5977]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 298.791783][ T6004] udevd[6004]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 301.139968][ T6120] fuse: Bad value for 'fd' [ 301.531970][ T6122] netlink: 16 bytes leftover after parsing attributes in process `syz.1.54'. [ 304.776035][ T6147] fuse: Bad value for 'fd' [ 306.791231][ T6165] loop2: detected capacity change from 0 to 256 [ 308.032155][ T11] kernel write not supported for file /snd/seq (pid: 11 comm: kworker/0:1) [ 310.769491][ T6181] fuse: Bad value for 'fd' [ 311.408447][ T6188] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 311.859843][ T24] kernel write not supported for file /snd/seq (pid: 24 comm: kworker/1:0) [ 313.638243][ T6213] loop0: detected capacity change from 0 to 512 [ 313.788720][ T6213] EXT4-fs error (device loop0): ext4_orphan_get:1393: inode #15: comm syz.0.92: iget: bad i_size value: 38620345925642 [ 313.868561][ T6213] EXT4-fs error (device loop0): ext4_orphan_get:1398: comm syz.0.92: couldn't read orphan inode 15 (err -117) [ 313.956894][ T6213] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 314.113072][ T6225] ptrace attach of "./syz-executor exec"[5807] was attempted by "./syz-executor exec"[6225] [ 314.621271][ T6229] fuse: Bad value for 'fd' [ 314.720301][ T5799] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 315.362037][ T11] kernel write not supported for file /snd/seq (pid: 11 comm: kworker/0:1) [ 316.080115][ T6241] netlink: 8 bytes leftover after parsing attributes in process `syz.4.101'. [ 318.450422][ T6261] fuse: Bad value for 'fd' [ 319.463022][ T11] kernel write not supported for file /snd/seq (pid: 11 comm: kworker/0:1) [ 323.951191][ T6288] fuse: Invalid rootmode [ 325.381135][ T24] kernel write not supported for file /snd/seq (pid: 24 comm: kworker/1:0) [ 325.399111][ T6295] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 325.779841][ T6300] loop1: detected capacity change from 0 to 256 [ 325.880862][ T6300] exFAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 325.893027][ T6300] exFAT-fs (loop1): Medium has reported failures. Some data may be lost. [ 326.120645][ T6300] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc64c1d22, utbl_chksum : 0xe619d30d) [ 326.709301][ T6306] warning: `syz.0.131' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 326.754270][ T6306] netlink: 16 bytes leftover after parsing attributes in process `syz.0.131'. [ 328.284730][ T6324] fuse: Invalid rootmode [ 329.193010][ T9] kernel write not supported for file /snd/seq (pid: 9 comm: kworker/0:0) [ 330.173855][ T5095] Bluetooth: hci4: command 0x0405 tx timeout [ 330.814892][ T6346] netlink: 8 bytes leftover after parsing attributes in process `syz.4.144'. [ 331.218326][ T6353] netlink: 'syz.1.145': attribute type 10 has an invalid length. [ 331.277308][ T6349] veth3: entered promiscuous mode [ 331.374049][ T6353] syz_tun: entered promiscuous mode [ 331.401271][ T6353] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 331.541007][ T6357] loop3: detected capacity change from 0 to 512 [ 331.649385][ T6357] EXT4-fs error (device loop3): ext4_orphan_get:1393: inode #15: comm syz.3.147: iget: bad i_size value: 38620345925642 [ 331.769070][ T6357] EXT4-fs error (device loop3): ext4_orphan_get:1398: comm syz.3.147: couldn't read orphan inode 15 (err -117) [ 331.820525][ T6357] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 332.368724][ T6364] netlink: 16 bytes leftover after parsing attributes in process `syz.4.150'. [ 332.380386][ T5807] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 333.097777][ T6377] 9pnet_fd: Insufficient options for proto=fd [ 334.801073][ T6396] netlink: 8 bytes leftover after parsing attributes in process `syz.4.160'. [ 335.409611][ T6399] veth3: entered promiscuous mode [ 335.670072][ T6403] netlink: 'syz.1.161': attribute type 10 has an invalid length. [ 335.934939][ T6406] loop3: detected capacity change from 0 to 1024 [ 336.024799][ T6406] EXT4-fs: Ignoring removed nobh option [ 336.031260][ T6406] EXT4-fs: Ignoring removed oldalloc option [ 336.037839][ T6406] EXT4-fs: Ignoring removed bh option [ 336.188622][ T6406] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-001000000000 r/w without journal. Quota mode: none. [ 336.335502][ T6415] 9pnet_fd: Insufficient options for proto=fd [ 336.608146][ T42] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 336.813703][ T42] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 336.825443][ T42] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 336.909483][ T6419] netlink: 16 bytes leftover after parsing attributes in process `syz.1.165'. [ 336.922729][ T42] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 336.932597][ T42] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 336.941023][ T42] usb 4-1: SerialNumber: syz [ 337.290797][ T42] usb 4-1: 0:2 : does not exist [ 337.424966][ T42] usb 4-1: USB disconnect, device number 2 [ 337.703721][ T6004] udevd[6004]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 338.262097][ T5807] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-001000000000. [ 339.340420][ T6444] netlink: 'syz.4.175': attribute type 10 has an invalid length. [ 339.385296][ T6444] syz_tun: entered promiscuous mode [ 339.413164][ T6444] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 339.646901][ T6449] netlink: 28 bytes leftover after parsing attributes in process `syz.1.176'. [ 340.078939][ T6449] veth3: entered promiscuous mode [ 340.315842][ T6455] 9pnet_fd: Insufficient options for proto=fd [ 341.333111][ T6461] netlink: 16 bytes leftover after parsing attributes in process `syz.4.180'. [ 342.045120][ T6470] loop1: detected capacity change from 0 to 1024 [ 342.100185][ T6470] EXT4-fs: Ignoring removed nobh option [ 342.106400][ T6470] EXT4-fs: Ignoring removed oldalloc option [ 342.113230][ T6470] EXT4-fs: Ignoring removed bh option [ 342.341973][ T6470] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-001000000000 r/w without journal. Quota mode: none. [ 342.828155][ T24] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 343.054794][ T24] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 343.065960][ T24] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 343.156514][ T6485] netlink: 'syz.4.188': attribute type 10 has an invalid length. [ 343.175674][ T24] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 343.185324][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 343.194291][ T24] usb 2-1: SerialNumber: syz [ 343.540294][ T24] usb 2-1: 0:2 : does not exist [ 343.720947][ T24] usb 2-1: USB disconnect, device number 2 [ 343.804814][ T6493] netlink: 28 bytes leftover after parsing attributes in process `syz.2.191'. [ 343.971432][ T6491] 9pnet_fd: Insufficient options for proto=fd [ 344.039288][ T6004] udevd[6004]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 344.254080][ T6497] veth3: entered promiscuous mode [ 344.585177][ T5803] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-001000000000. [ 345.642340][ T6513] netlink: 16 bytes leftover after parsing attributes in process `syz.1.195'. [ 346.430260][ T6524] netlink: 'syz.1.202': attribute type 10 has an invalid length. [ 347.182409][ T6534] 9pnet_fd: Insufficient options for proto=fd [ 347.506163][ T6538] loop1: detected capacity change from 0 to 1024 [ 347.565360][ T6538] EXT4-fs: Ignoring removed nobh option [ 347.572936][ T6538] EXT4-fs: Ignoring removed oldalloc option [ 347.579608][ T6538] EXT4-fs: Ignoring removed bh option [ 347.819885][ T6538] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-001000000000 r/w without journal. Quota mode: none. [ 348.070889][ T6544] netlink: 28 bytes leftover after parsing attributes in process `syz.2.207'. [ 348.189487][ T9] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 348.407553][ T9] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 348.418275][ T9] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 348.471821][ T6544] veth3: entered promiscuous mode [ 348.528476][ T9] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 348.538205][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 348.546467][ T9] usb 2-1: SerialNumber: syz [ 348.930297][ T9] usb 2-1: 0:2 : does not exist [ 349.141150][ T9] usb 2-1: USB disconnect, device number 3 [ 349.552350][ T6004] udevd[6004]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 349.844081][ T5803] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-001000000000. [ 350.085141][ T6564] netlink: 16 bytes leftover after parsing attributes in process `syz.2.212'. [ 350.529846][ T6573] netlink: 'syz.1.215': attribute type 10 has an invalid length. [ 351.330041][ T6584] 9pnet_fd: Insufficient options for proto=fd [ 352.270241][ T6593] netlink: 'syz.4.222': attribute type 1 has an invalid length. [ 352.574770][ T6593] 8021q: adding VLAN 0 to HW filter on device bond1 [ 352.609425][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 352.616282][ T1286] ieee802154 phy1 wpan1: encryption failed: -22 [ 352.791113][ T6593] veth3: entered promiscuous mode [ 352.816700][ T6593] bond1: (slave veth3): Enslaving as a backup interface with a down link [ 352.975422][ T6601] loop2: detected capacity change from 0 to 1024 [ 353.092022][ T6601] EXT4-fs: Ignoring removed nobh option [ 353.098475][ T6601] EXT4-fs: Ignoring removed oldalloc option [ 353.104966][ T6601] EXT4-fs: Ignoring removed bh option [ 353.310565][ T6601] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-001000000000 r/w without journal. Quota mode: none. [ 353.728271][ T11] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 353.930839][ T11] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 353.941739][ T11] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 354.015728][ T11] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 354.025402][ T11] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 354.034989][ T11] usb 3-1: SerialNumber: syz [ 354.148835][ T6614] netlink: 16 bytes leftover after parsing attributes in process `syz.4.227'. [ 354.399536][ T11] usb 3-1: 0:2 : does not exist [ 354.568951][ T11] usb 3-1: USB disconnect, device number 2 [ 354.970320][ T6624] netlink: 'syz.0.230': attribute type 10 has an invalid length. [ 355.069321][ T6004] udevd[6004]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 355.264824][ T5812] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-001000000000. [ 355.443947][ T9] kernel write not supported for file /snd/seq (pid: 9 comm: kworker/0:0) [ 356.084795][ T6637] netlink: 'syz.0.234': attribute type 10 has an invalid length. [ 356.110715][ T6637] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 356.126780][ T6637] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 356.912720][ T6646] netlink: 'syz.2.237': attribute type 1 has an invalid length. [ 357.590396][ T6655] 8021q: adding VLAN 0 to HW filter on device bond1 [ 357.882044][ T6646] veth3: entered promiscuous mode [ 357.884033][ T6663] netlink: 16 bytes leftover after parsing attributes in process `syz.0.241'. [ 358.268485][ T6668] loop1: detected capacity change from 0 to 1024 [ 358.331798][ T6668] EXT4-fs: Ignoring removed nobh option [ 358.341570][ T6668] EXT4-fs: Ignoring removed oldalloc option [ 358.348584][ T6668] EXT4-fs: Ignoring removed bh option [ 358.501002][ T6668] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-001000000000 r/w without journal. Quota mode: none. [ 359.068179][ T24] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 359.209106][ T9] kernel write not supported for file /snd/seq (pid: 9 comm: kworker/0:0) [ 359.300855][ T24] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 359.311582][ T24] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 359.394478][ T24] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 359.404209][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 359.412912][ T24] usb 2-1: SerialNumber: syz [ 359.771199][ T24] usb 2-1: 0:2 : does not exist [ 359.909107][ T24] usb 2-1: USB disconnect, device number 4 [ 360.166891][ T6004] udevd[6004]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 361.237815][ T30] audit: type=1800 audit(1750839257.692:2): pid=6686 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.249" name="bus" dev="overlay" ino=279 res=0 errno=0 [ 361.291357][ T5803] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-001000000000. [ 362.212541][ T6696] netlink: 'syz.1.251': attribute type 10 has an invalid length. [ 362.239687][ T6696] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 362.269353][ T6696] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 363.412822][ T6705] netlink: 16 bytes leftover after parsing attributes in process `syz.1.256'. [ 363.970305][ T6711] netlink: 8 bytes leftover after parsing attributes in process `syz.2.257'. [ 365.232343][ T6717] loop1: detected capacity change from 0 to 1024 [ 365.290322][ T6717] EXT4-fs: Ignoring removed nobh option [ 365.296377][ T6717] EXT4-fs: Ignoring removed oldalloc option [ 365.303155][ T6717] EXT4-fs: Ignoring removed bh option [ 365.472123][ T6717] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-001000000000 r/w without journal. Quota mode: none. [ 366.087701][ T24] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 366.475030][ T24] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 366.485766][ T24] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 366.529857][ T11] kernel write not supported for file /snd/seq (pid: 11 comm: kworker/0:1) [ 366.569387][ T24] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 366.569577][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 366.569710][ T24] usb 2-1: SerialNumber: syz [ 366.597240][ T6730] loop0: detected capacity change from 0 to 512 [ 366.625452][ T6730] EXT4-fs: Ignoring removed oldalloc option [ 366.665744][ T6730] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 366.712711][ T6730] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #16: comm syz.0.265: invalid indirect mapped block 4294967295 (level 0) [ 366.714125][ T6730] EXT4-fs (loop0): Remounting filesystem read-only [ 366.728333][ T6730] EXT4-fs (loop0): 1 orphan inode deleted [ 366.728526][ T6730] EXT4-fs (loop0): 1 truncate cleaned up [ 366.731281][ T6730] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 366.875530][ T24] usb 2-1: 0:2 : does not exist [ 367.154770][ T5799] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 367.242552][ T24] usb 2-1: USB disconnect, device number 5 [ 367.482465][ T6004] udevd[6004]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 367.783837][ T5803] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-001000000000. [ 368.879303][ T6739] netlink: 16 bytes leftover after parsing attributes in process `syz.2.269'. [ 371.476886][ T11] kernel write not supported for file /snd/seq (pid: 11 comm: kworker/0:1) [ 371.637854][ T6758] loop1: detected capacity change from 0 to 512 [ 371.720164][ T6758] EXT4-fs: Ignoring removed oldalloc option [ 371.810508][ T6758] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 371.895439][ T6760] loop0: detected capacity change from 0 to 1024 [ 371.972125][ T6760] EXT4-fs: Ignoring removed nobh option [ 371.978536][ T6760] EXT4-fs: Ignoring removed oldalloc option [ 371.984679][ T6760] EXT4-fs: Ignoring removed bh option [ 372.049173][ T6758] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #16: comm syz.1.277: invalid indirect mapped block 4294967295 (level 0) [ 372.114955][ T6758] EXT4-fs (loop1): Remounting filesystem read-only [ 372.137200][ T6758] EXT4-fs (loop1): 1 orphan inode deleted [ 372.143767][ T6758] EXT4-fs (loop1): 1 truncate cleaned up [ 372.151436][ T6758] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 372.252390][ T6760] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-001000000000 r/w without journal. Quota mode: none. [ 372.645086][ T5803] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 372.797759][ T11] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 373.050295][ T11] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 373.060824][ T11] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 373.126962][ T11] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 373.136515][ T11] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 373.145153][ T11] usb 1-1: SerialNumber: syz [ 373.390265][ T11] usb 1-1: 0:2 : does not exist [ 373.523157][ T11] usb 1-1: USB disconnect, device number 2 [ 373.726008][ T6004] udevd[6004]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 373.744018][ T5095] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 373.759719][ T5095] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 373.790076][ T5095] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 373.806092][ T5095] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 373.819224][ T5095] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 374.419820][ T5799] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-001000000000. [ 375.553498][ T6777] netlink: 16 bytes leftover after parsing attributes in process `syz.2.283'. [ 375.847993][ T5805] Bluetooth: hci5: command tx timeout [ 376.506082][ T6768] chnl_net:caif_netlink_parms(): no params data found [ 377.033385][ T6792] netlink: 184 bytes leftover after parsing attributes in process `syz.2.289'. [ 377.043144][ T6792] ip6_vti0: entered allmulticast mode [ 377.927722][ T5805] Bluetooth: hci5: command tx timeout [ 378.131790][ T6798] netlink: 4 bytes leftover after parsing attributes in process `syz.0.290'. [ 378.428020][ T5810] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 378.468474][ T6800] loop1: detected capacity change from 0 to 1024 [ 378.489109][ T5810] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 378.511106][ T5810] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 378.532180][ T6800] EXT4-fs: Ignoring removed nobh option [ 378.538671][ T6800] EXT4-fs: Ignoring removed oldalloc option [ 378.544996][ T6800] EXT4-fs: Ignoring removed bh option [ 378.570921][ T5810] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 378.593454][ T5810] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 378.731537][ T6768] bridge0: port 1(bridge_slave_0) entered blocking state [ 378.739407][ T6768] bridge0: port 1(bridge_slave_0) entered disabled state [ 378.747014][ T6768] bridge_slave_0: entered allmulticast mode [ 378.755911][ T6768] bridge_slave_0: entered promiscuous mode [ 378.770703][ T6768] bridge0: port 2(bridge_slave_1) entered blocking state [ 378.778585][ T6768] bridge0: port 2(bridge_slave_1) entered disabled state [ 378.786398][ T6768] bridge_slave_1: entered allmulticast mode [ 378.798348][ T6768] bridge_slave_1: entered promiscuous mode [ 378.959931][ T6800] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-001000000000 r/w without journal. Quota mode: none. [ 379.049629][ T6768] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 379.438977][ T11] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 379.630914][ T6768] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 379.671924][ T11] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 379.682454][ T11] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 379.823081][ T11] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 379.832897][ T11] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 379.841221][ T11] usb 2-1: SerialNumber: syz [ 380.008516][ T5810] Bluetooth: hci5: command tx timeout [ 380.211809][ T11] usb 2-1: 0:2 : does not exist [ 380.248494][ T5810] Bluetooth: hci2: command 0x0406 tx timeout [ 380.255462][ T6801] Bluetooth: hci0: command 0x0406 tx timeout [ 380.262967][ T5800] Bluetooth: hci1: command 0x0406 tx timeout [ 380.270123][ T6801] Bluetooth: hci4: command 0x0405 tx timeout [ 380.276295][ T6801] Bluetooth: hci3: command 0x0406 tx timeout [ 380.324409][ T11] usb 2-1: USB disconnect, device number 6 [ 380.389199][ T6768] team0: Port device team_slave_0 added [ 380.410020][ T6768] team0: Port device team_slave_1 added [ 380.624702][ T6768] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 380.632280][ T6768] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 380.660226][ T6768] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 380.784505][ T5804] Bluetooth: hci6: command tx timeout [ 380.841291][ T6768] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 380.848584][ T6768] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 380.877149][ T6768] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 381.070527][ T5803] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-001000000000. [ 381.115186][ T6004] udevd[6004]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 381.806771][ T6768] hsr_slave_0: entered promiscuous mode [ 381.816307][ T6768] hsr_slave_1: entered promiscuous mode [ 381.825391][ T6768] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 381.833223][ T6768] Cannot create hsr debugfs directory [ 382.119139][ T5804] Bluetooth: hci5: command tx timeout [ 382.306274][ T6818] netlink: 16 bytes leftover after parsing attributes in process `syz.1.295'. [ 382.811918][ T5804] Bluetooth: hci6: command tx timeout [ 383.453286][ T6802] chnl_net:caif_netlink_parms(): no params data found [ 383.484563][ T6832] netlink: 8 bytes leftover after parsing attributes in process `syz.2.300'. [ 383.494052][ T6832] netlink: 8 bytes leftover after parsing attributes in process `syz.2.300'. [ 384.095114][ T6768] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 384.249011][ T6768] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 384.359375][ T6768] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 384.511137][ T6768] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 384.784723][ T6838] loop0: detected capacity change from 0 to 1024 [ 384.858485][ T6838] EXT4-fs: Ignoring removed nobh option [ 384.864572][ T6838] EXT4-fs: Ignoring removed oldalloc option [ 384.871738][ T6838] EXT4-fs: Ignoring removed bh option [ 384.897636][ T5804] Bluetooth: hci6: command tx timeout [ 385.193760][ T6844] 9pnet_fd: Insufficient options for proto=fd [ 385.218732][ T6838] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-001000000000 r/w without journal. Quota mode: none. [ 385.436649][ T6802] bridge0: port 1(bridge_slave_0) entered blocking state [ 385.445539][ T6802] bridge0: port 1(bridge_slave_0) entered disabled state [ 385.453543][ T6802] bridge_slave_0: entered allmulticast mode [ 385.463083][ T6844] loop1: detected capacity change from 0 to 512 [ 385.463470][ T6802] bridge_slave_0: entered promiscuous mode [ 385.510344][ T6844] EXT4-fs: Ignoring removed oldalloc option [ 385.558405][ T6844] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 385.748205][ T6844] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #16: comm syz.1.304: invalid indirect mapped block 4294967295 (level 0) [ 385.779897][ T6802] bridge0: port 2(bridge_slave_1) entered blocking state [ 385.787926][ T6802] bridge0: port 2(bridge_slave_1) entered disabled state [ 385.795597][ T6802] bridge_slave_1: entered allmulticast mode [ 385.804396][ T6802] bridge_slave_1: entered promiscuous mode [ 385.813498][ T11] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 385.878414][ T6844] EXT4-fs (loop1): Remounting filesystem read-only [ 385.886113][ T6844] EXT4-fs (loop1): 1 orphan inode deleted [ 385.892718][ T6844] EXT4-fs (loop1): 1 truncate cleaned up [ 385.901054][ T6844] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 386.021555][ T11] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 386.032787][ T11] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 386.160398][ T11] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 386.170439][ T11] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 386.179876][ T11] usb 1-1: SerialNumber: syz [ 386.280833][ T6802] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 386.418454][ T6802] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 386.486341][ T11] usb 1-1: 0:2 : does not exist [ 386.686059][ T11] usb 1-1: USB disconnect, device number 3 [ 386.938438][ T6802] team0: Port device team_slave_0 added [ 386.968735][ T5804] Bluetooth: hci6: command tx timeout [ 387.050008][ T6802] team0: Port device team_slave_1 added [ 387.202114][ T6004] udevd[6004]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 387.291385][ T5803] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 387.689562][ T5799] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-001000000000. [ 388.188164][ T6802] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 388.195399][ T6802] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 388.222072][ T6802] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 388.458705][ T6855] netlink: 16 bytes leftover after parsing attributes in process `syz.1.306'. [ 388.516090][ T6768] 8021q: adding VLAN 0 to HW filter on device bond0 [ 388.832686][ T6768] 8021q: adding VLAN 0 to HW filter on device team0 [ 388.941193][ T4387] bridge0: port 1(bridge_slave_0) entered blocking state [ 388.949065][ T4387] bridge0: port 1(bridge_slave_0) entered forwarding state [ 388.996889][ T6802] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 389.005765][ T6802] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 389.035431][ T6802] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 389.228974][ T4387] bridge0: port 2(bridge_slave_1) entered blocking state [ 389.236558][ T4387] bridge0: port 2(bridge_slave_1) entered forwarding state [ 389.727033][ T6859] loop1: detected capacity change from 0 to 128 [ 390.044602][ T6859] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 390.107965][ T6802] hsr_slave_0: entered promiscuous mode [ 390.120254][ T6802] hsr_slave_1: entered promiscuous mode [ 390.131064][ T6802] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 390.140187][ T6802] Cannot create hsr debugfs directory [ 390.292707][ T6859] ext4 filesystem being mounted at /78/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 391.364096][ T5803] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 392.521557][ T6877] 9pnet_fd: Insufficient options for proto=fd [ 392.714700][ T6877] loop0: detected capacity change from 0 to 512 [ 392.899327][ T6877] EXT4-fs: Ignoring removed oldalloc option [ 392.992015][ T6877] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 393.115734][ T6880] loop2: detected capacity change from 0 to 1024 [ 393.243028][ T6880] EXT4-fs: Ignoring removed nobh option [ 393.250154][ T6880] EXT4-fs: Ignoring removed oldalloc option [ 393.256616][ T6880] EXT4-fs: Ignoring removed bh option [ 393.450571][ T6877] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #16: comm syz.0.314: invalid indirect mapped block 4294967295 (level 0) [ 393.517824][ T6877] EXT4-fs (loop0): Remounting filesystem read-only [ 393.527028][ T6877] EXT4-fs (loop0): 1 orphan inode deleted [ 393.552230][ T6877] EXT4-fs (loop0): 1 truncate cleaned up [ 393.567105][ T6877] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 393.578906][ T6802] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 393.586873][ T6880] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-001000000000 r/w without journal. Quota mode: none. [ 393.725944][ T6802] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 393.839516][ T6802] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 393.938937][ T6768] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 393.984166][ T6802] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 394.068458][ T9] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 394.288542][ T9] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 394.299470][ T9] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 394.434939][ T9] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 394.445049][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 394.453713][ T9] usb 3-1: SerialNumber: syz [ 394.516762][ T5799] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 394.844801][ T9] usb 3-1: 0:2 : does not exist [ 394.911578][ T6889] netlink: 16 bytes leftover after parsing attributes in process `syz.1.316'. [ 395.136284][ T6647] bond0: (slave syz_tun): Releasing backup interface [ 395.228330][ T9] usb 3-1: USB disconnect, device number 3 [ 395.443335][ T3739] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 395.539299][ T5977] udevd[5977]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 395.643251][ T3739] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 395.836038][ T3739] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 395.899497][ T5812] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-001000000000. [ 396.025130][ T3739] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 396.686567][ T6802] 8021q: adding VLAN 0 to HW filter on device bond0 [ 396.995864][ T3739] bridge_slave_1: left allmulticast mode [ 397.004075][ T3739] bridge_slave_1: left promiscuous mode [ 397.011040][ T3739] bridge0: port 2(bridge_slave_1) entered disabled state [ 397.170045][ T3739] bridge_slave_0: left allmulticast mode [ 397.176000][ T3739] bridge_slave_0: left promiscuous mode [ 397.183112][ T3739] bridge0: port 1(bridge_slave_0) entered disabled state [ 397.495941][ T30] audit: type=1326 audit(1750839293.982:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6908 comm="syz.1.321" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf711e539 code=0x7ffc0000 [ 397.718187][ T30] audit: type=1326 audit(1750839294.062:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6908 comm="syz.1.321" exe="/root/syz-executor" sig=0 arch=40000003 syscall=343 compat=1 ip=0xf711e539 code=0x7ffc0000 [ 397.740515][ T30] audit: type=1326 audit(1750839294.062:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6908 comm="syz.1.321" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf711e539 code=0x7ffc0000 [ 397.762546][ T30] audit: type=1326 audit(1750839294.092:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6908 comm="syz.1.321" exe="/root/syz-executor" sig=0 arch=40000003 syscall=4 compat=1 ip=0xf711e539 code=0x7ffc0000 [ 397.784510][ T30] audit: type=1326 audit(1750839294.092:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6908 comm="syz.1.321" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf711e539 code=0x7ffc0000 [ 397.806542][ T30] audit: type=1326 audit(1750839294.102:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6908 comm="syz.1.321" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf711e539 code=0x7ffc0000 [ 397.828547][ T30] audit: type=1326 audit(1750839294.102:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6908 comm="syz.1.321" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf711e539 code=0x7ffc0000 [ 397.850585][ T30] audit: type=1326 audit(1750839294.112:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6908 comm="syz.1.321" exe="/root/syz-executor" sig=0 arch=40000003 syscall=366 compat=1 ip=0xf711e539 code=0x7ffc0000 [ 397.872729][ T30] audit: type=1326 audit(1750839294.112:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6908 comm="syz.1.321" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf711e539 code=0x7ffc0000 [ 397.894847][ T30] audit: type=1326 audit(1750839294.122:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6908 comm="syz.1.321" exe="/root/syz-executor" sig=0 arch=40000003 syscall=362 compat=1 ip=0xf711e539 code=0x7ffc0000 [ 398.532615][ T3739] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 398.739736][ T3739] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 398.804639][ T3739] bond0 (unregistering): Released all slaves [ 398.903135][ T3739] bond1 (unregistering): (slave veth3): Releasing backup interface [ 398.935579][ T3739] bond1 (unregistering): Released all slaves [ 399.176754][ T6802] 8021q: adding VLAN 0 to HW filter on device team0 [ 399.508884][ T3669] bridge0: port 1(bridge_slave_0) entered blocking state [ 399.516504][ T3669] bridge0: port 1(bridge_slave_0) entered forwarding state [ 399.797439][ T3669] bridge0: port 2(bridge_slave_1) entered blocking state [ 399.805095][ T3669] bridge0: port 2(bridge_slave_1) entered forwarding state [ 400.039202][ T3739] hsr_slave_0: left promiscuous mode [ 400.078175][ T3739] hsr_slave_1: left promiscuous mode [ 400.086591][ T3739] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 400.095848][ T3739] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 400.160956][ T3739] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 400.170449][ T3739] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 400.276527][ T3739] veth1_macvtap: left promiscuous mode [ 400.283567][ T3739] veth0_macvtap: left promiscuous mode [ 400.289783][ T3739] veth1_vlan: left promiscuous mode [ 400.295413][ T3739] veth0_vlan: left promiscuous mode [ 400.751553][ T6924] loop2: detected capacity change from 0 to 1024 [ 400.892493][ T6924] EXT4-fs: Ignoring removed nobh option [ 400.899070][ T6924] EXT4-fs: Ignoring removed oldalloc option [ 400.905522][ T6924] EXT4-fs: Ignoring removed bh option [ 401.000052][ T6926] syz.0.328 uses obsolete (PF_INET,SOCK_PACKET) [ 401.142085][ T6924] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-001000000000 r/w without journal. Quota mode: none. [ 401.567266][ T9] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 401.629698][ T3739] team0 (unregistering): Port device team_slave_1 removed [ 401.729555][ T3739] team0 (unregistering): Port device team_slave_0 removed [ 401.803165][ T9] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 401.813877][ T9] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 401.895090][ T9] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 401.905018][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 401.914619][ T9] usb 3-1: SerialNumber: syz [ 402.272891][ T9] usb 3-1: 0:2 : does not exist [ 402.485829][ T6768] veth0_vlan: entered promiscuous mode [ 402.670213][ T9] usb 3-1: USB disconnect, device number 4 [ 402.888841][ T6768] veth1_vlan: entered promiscuous mode [ 403.056372][ T6230] udevd[6230]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 403.476050][ T5812] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-001000000000. [ 403.574066][ T3739] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 403.876063][ T3739] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 404.001604][ T6768] veth0_macvtap: entered promiscuous mode [ 404.064060][ T6768] veth1_macvtap: entered promiscuous mode [ 404.192641][ T3739] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 404.408476][ T3739] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 404.434656][ T6952] netlink: 4 bytes leftover after parsing attributes in process `syz.2.331'. [ 404.643307][ T6768] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 404.746053][ T6768] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 404.885492][ T6768] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 404.894876][ T6768] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 404.904134][ T6768] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 404.913429][ T6768] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 405.129369][ T3739] bridge_slave_1: left allmulticast mode [ 405.135367][ T3739] bridge_slave_1: left promiscuous mode [ 405.142491][ T3739] bridge0: port 2(bridge_slave_1) entered disabled state [ 405.272464][ T3739] bridge_slave_0: left allmulticast mode [ 405.278776][ T3739] bridge_slave_0: left promiscuous mode [ 405.285542][ T3739] bridge0: port 1(bridge_slave_0) entered disabled state [ 406.109663][ T3739] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 406.201406][ T3739] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 406.253378][ T3739] bond0 (unregistering): Released all slaves [ 406.705428][ T6802] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 407.217671][ T3739] hsr_slave_0: left promiscuous mode [ 407.257740][ T3739] hsr_slave_1: left promiscuous mode [ 407.266165][ T3739] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 407.276060][ T3739] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 407.386113][ T3739] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 407.395598][ T3739] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 407.588604][ T3739] veth1_macvtap: left promiscuous mode [ 407.594477][ T3739] veth0_macvtap: left promiscuous mode [ 407.600972][ T3739] veth1_vlan: left promiscuous mode [ 407.606607][ T3739] veth0_vlan: left promiscuous mode [ 407.662078][ T6978] loop1: detected capacity change from 0 to 1024 [ 407.803101][ T6978] EXT4-fs: Ignoring removed nobh option [ 407.810076][ T6978] EXT4-fs: Ignoring removed oldalloc option [ 407.816464][ T6978] EXT4-fs: Ignoring removed bh option [ 408.321797][ T6978] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-001000000000 r/w without journal. Quota mode: none. [ 408.719476][ T3739] team0 (unregistering): Port device team_slave_1 removed [ 408.840256][ T3739] team0 (unregistering): Port device team_slave_0 removed [ 408.908810][ T11] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 409.122755][ T11] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 409.133426][ T11] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 409.180787][ T11] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 409.190367][ T11] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 409.199912][ T11] usb 2-1: SerialNumber: syz [ 409.580105][ T11] usb 2-1: 0:2 : does not exist [ 409.644959][ T11] usb 2-1: USB disconnect, device number 7 [ 410.091314][ T6230] udevd[6230]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 410.769411][ T5803] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-001000000000. [ 411.957194][ T6802] veth0_vlan: entered promiscuous mode [ 412.130641][ T6802] veth1_vlan: entered promiscuous mode [ 412.548829][ T6802] veth0_macvtap: entered promiscuous mode [ 412.697266][ T6802] veth1_macvtap: entered promiscuous mode [ 412.829811][ T6802] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 412.948769][ T6802] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 413.068383][ T6802] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 413.077720][ T6802] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 413.086877][ T6802] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 413.099014][ T6802] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 414.056989][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 414.064048][ T1286] ieee802154 phy1 wpan1: encryption failed: -22 [ 414.094312][ T7047] netlink: 12 bytes leftover after parsing attributes in process `syz.0.353'. [ 414.618611][ T7052] loop1: detected capacity change from 0 to 1024 [ 414.700838][ T7052] EXT4-fs: Ignoring removed nobh option [ 414.707093][ T7052] EXT4-fs: Ignoring removed oldalloc option [ 414.714946][ T7052] EXT4-fs: Ignoring removed bh option [ 414.951147][ T7052] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-001000000000 r/w without journal. Quota mode: none. [ 415.411103][ T11] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 415.646368][ T11] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 415.657054][ T11] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 415.755352][ T11] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 415.765764][ T11] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 415.774946][ T11] usb 2-1: SerialNumber: syz [ 416.162069][ T11] usb 2-1: 0:2 : does not exist [ 416.357058][ T11] usb 2-1: USB disconnect, device number 8 [ 416.793279][ T6230] udevd[6230]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 417.019485][ T4226] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 417.027834][ T4226] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 417.251072][ T5803] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-001000000000. [ 417.538054][ T3739] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 417.546174][ T3739] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 419.096091][ T7089] loop2: detected capacity change from 0 to 4096 [ 419.416968][ T7089] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 420.502635][ T5812] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 422.406773][ T3555] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 422.415689][ T3555] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 422.873866][ T3584] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 422.882176][ T3584] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 424.464676][ T7142] netlink: 176 bytes leftover after parsing attributes in process `syz.6.287'. [ 427.703137][ T7189] netlink: 12 bytes leftover after parsing attributes in process `syz.6.383'. [ 440.090909][ T7315] loop1: detected capacity change from 0 to 8192 [ 440.149558][ T7315] loop1: p1 p2[DM] p4 [ 440.154631][ T7315] loop1: p1 size 196608 extends beyond EOD, truncated [ 440.185773][ T7315] loop1: p2 start 4292936063 is beyond EOD, truncated [ 440.193310][ T7315] loop1: p4 size 50331648 extends beyond EOD, truncated [ 441.725790][ T7339] netlink: 12 bytes leftover after parsing attributes in process `syz.1.432'. [ 442.257861][ T6230] udevd[6230]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 442.285465][ T5977] udevd[5977]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 442.319722][ T7339] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 442.328882][ T7339] batadv_slave_0: entered promiscuous mode [ 442.660727][ T6004] udevd[6004]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 442.686596][ T6230] udevd[6230]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 446.666032][ T7392] netlink: 4 bytes leftover after parsing attributes in process `syz.6.449'. [ 446.770001][ T7392] netlink: 4 bytes leftover after parsing attributes in process `syz.6.449'. [ 446.839605][ T7397] netlink: 4 bytes leftover after parsing attributes in process `syz.6.449'. [ 446.889653][ T7392] netlink: 4 bytes leftover after parsing attributes in process `syz.6.449'. [ 448.739514][ T7415] loop5: detected capacity change from 0 to 512 [ 448.829259][ T7415] ext4: Unknown parameter 'smackfsfloor' [ 451.398281][ T7436] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 451.469401][ T7436] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 455.842195][ T7489] netlink: 12 bytes leftover after parsing attributes in process `syz.2.479'. [ 456.153867][ T7489] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 456.162205][ T7489] batadv_slave_0: entered promiscuous mode [ 459.844902][ T7523] netlink: 16 bytes leftover after parsing attributes in process `syz.0.490'. [ 461.631743][ T7541] netlink: 4 bytes leftover after parsing attributes in process `syz.0.495'. [ 463.669465][ T7561] capability: warning: `syz.0.503' uses deprecated v2 capabilities in a way that may be insecure [ 464.575341][ T7568] netlink: 16 bytes leftover after parsing attributes in process `syz.1.505'. [ 465.439004][ T7580] netlink: 4 bytes leftover after parsing attributes in process `syz.1.509'. [ 467.053206][ T7604] netlink: 32 bytes leftover after parsing attributes in process `syz.1.517'. [ 468.091862][ T7610] netlink: 16 bytes leftover after parsing attributes in process `syz.5.519'. [ 468.639810][ T7621] netlink: 12 bytes leftover after parsing attributes in process `syz.6.521'. [ 468.755343][ T7623] netlink: 4 bytes leftover after parsing attributes in process `syz.2.523'. [ 472.739658][ T7662] netlink: 16 bytes leftover after parsing attributes in process `syz.1.534'. [ 473.659426][ T7669] netlink: 4 bytes leftover after parsing attributes in process `syz.0.537'. [ 475.510779][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 475.517840][ T1286] ieee802154 phy1 wpan1: encryption failed: -22 [ 477.550904][ T7708] loop2: detected capacity change from 0 to 1024 [ 477.625953][ T7708] EXT4-fs: Ignoring removed nobh option [ 477.632578][ T7708] EXT4-fs: Ignoring removed oldalloc option [ 477.640018][ T7708] EXT4-fs: Ignoring removed bh option [ 477.717484][ T7708] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-001000000000 r/w without journal. Quota mode: none. [ 478.282376][ T1972] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 478.508269][ T1972] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 478.518876][ T1972] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 478.607237][ T1972] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 478.617624][ T1972] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 478.625926][ T1972] usb 3-1: SerialNumber: syz [ 478.989215][ T1972] usb 3-1: 0:2 : does not exist [ 479.209714][ T1972] usb 3-1: USB disconnect, device number 5 [ 479.864373][ T6230] udevd[6230]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 479.948241][ T5812] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-001000000000. [ 482.516428][ T7768] netlink: 4 bytes leftover after parsing attributes in process `syz.2.568'. [ 483.157632][ T7773] loop6: detected capacity change from 0 to 1024 [ 483.210210][ T7773] EXT4-fs: Ignoring removed nobh option [ 483.216403][ T7773] EXT4-fs: Ignoring removed oldalloc option [ 483.223100][ T7773] EXT4-fs: Ignoring removed bh option [ 483.368738][ T7773] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-001000000000 r/w without journal. Quota mode: none. [ 483.788159][ T1972] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 484.011121][ T1972] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 484.022121][ T1972] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 484.105470][ T1972] usb 7-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 484.115123][ T1972] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 484.123881][ T1972] usb 7-1: SerialNumber: syz [ 484.494807][ T1972] usb 7-1: 0:2 : does not exist [ 484.619597][ T1972] usb 7-1: USB disconnect, device number 2 [ 485.029588][ T6230] udevd[6230]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 485.360396][ T6802] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-001000000000. [ 487.389219][ T7819] netlink: 4 bytes leftover after parsing attributes in process `syz.6.583'. [ 488.498501][ T7832] loop6: detected capacity change from 0 to 1024 [ 488.531161][ T7832] EXT4-fs: Ignoring removed nobh option [ 488.537547][ T7832] EXT4-fs: Ignoring removed oldalloc option [ 488.543845][ T7832] EXT4-fs: Ignoring removed bh option [ 488.737775][ T7832] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-001000000000 r/w without journal. Quota mode: none. [ 489.248306][ T1972] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 489.469823][ T1972] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 489.480795][ T1972] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 489.547096][ T1972] usb 7-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 489.557522][ T1972] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 489.565813][ T1972] usb 7-1: SerialNumber: syz [ 489.910153][ T1972] usb 7-1: 0:2 : does not exist [ 490.111949][ T1972] usb 7-1: USB disconnect, device number 3 [ 490.409186][ T6230] udevd[6230]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 490.861607][ T6802] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-001000000000. [ 491.700259][ T7869] netlink: 4 bytes leftover after parsing attributes in process `syz.6.599'. [ 492.771462][ T7875] netlink: 'syz.0.601': attribute type 5 has an invalid length. [ 494.325395][ T7901] loop2: detected capacity change from 0 to 1024 [ 494.397143][ T7901] EXT4-fs: Ignoring removed nobh option [ 494.403703][ T7901] EXT4-fs: Ignoring removed oldalloc option [ 494.410373][ T7901] EXT4-fs: Ignoring removed bh option [ 494.580684][ T7901] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-001000000000 r/w without journal. Quota mode: none. [ 494.655338][ T7914] netlink: 4 bytes leftover after parsing attributes in process `syz.0.613'. [ 495.038166][ T5855] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 495.273835][ T5855] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 495.284434][ T5855] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 495.350864][ T5855] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 495.361571][ T5855] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 495.370523][ T5855] usb 3-1: SerialNumber: syz [ 495.699871][ T5855] usb 3-1: 0:2 : does not exist [ 495.893816][ T5855] usb 3-1: USB disconnect, device number 6 [ 496.126687][ T6230] udevd[6230]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 496.742638][ T5812] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-001000000000. [ 498.008078][ T5095] Bluetooth: hci5: command 0x0406 tx timeout [ 498.494489][ T7956] netlink: 4 bytes leftover after parsing attributes in process `syz.5.626'. [ 499.524122][ T7969] loop5: detected capacity change from 0 to 1024 [ 499.529835][ T7972] netlink: 40 bytes leftover after parsing attributes in process `syz.1.632'. [ 499.629745][ T7969] EXT4-fs: Ignoring removed nobh option [ 499.635876][ T7969] EXT4-fs: Ignoring removed oldalloc option [ 499.642464][ T7969] EXT4-fs: Ignoring removed bh option [ 499.792282][ T7969] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-001000000000 r/w without journal. Quota mode: none. [ 500.280280][ T5855] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 500.495059][ T5855] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 500.511786][ T5855] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 500.643133][ T5855] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 500.652645][ T5855] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 500.661121][ T5855] usb 6-1: SerialNumber: syz [ 501.061962][ T5855] usb 6-1: 0:2 : does not exist [ 501.292924][ T5855] usb 6-1: USB disconnect, device number 2 [ 501.531872][ T6230] udevd[6230]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 502.010931][ T6768] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-001000000000. [ 502.339654][ T8006] netlink: 4 bytes leftover after parsing attributes in process `syz.1.641'. [ 503.137997][ T5095] Bluetooth: hci6: command 0x0406 tx timeout [ 503.141613][ T8013] netlink: 44 bytes leftover after parsing attributes in process `syz.0.645'. [ 503.320820][ T8021] netlink: 40 bytes leftover after parsing attributes in process `syz.1.647'. [ 504.281695][ T8033] netlink: 4 bytes leftover after parsing attributes in process `syz.6.651'. [ 504.354559][ T8033] netlink: 4 bytes leftover after parsing attributes in process `syz.6.651'. [ 504.393355][ T8033] netlink: 4 bytes leftover after parsing attributes in process `syz.6.651'. [ 504.499170][ T8035] netlink: 4 bytes leftover after parsing attributes in process `syz.6.651'. [ 505.174456][ T8041] loop1: detected capacity change from 0 to 1024 [ 505.266460][ T8041] EXT4-fs: Ignoring removed nobh option [ 505.274842][ T8041] EXT4-fs: Ignoring removed oldalloc option [ 505.281635][ T8041] EXT4-fs: Ignoring removed bh option [ 505.545577][ T8041] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-001000000000 r/w without journal. Quota mode: none. [ 505.625655][ T8055] netlink: 4 bytes leftover after parsing attributes in process `syz.6.657'. [ 506.108049][ T5855] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 506.350385][ T5855] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 506.361126][ T5855] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 506.400737][ T5855] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 506.410299][ T5855] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 506.419287][ T5855] usb 2-1: SerialNumber: syz [ 506.764131][ T5855] usb 2-1: 0:2 : does not exist [ 506.995975][ T5855] usb 2-1: USB disconnect, device number 9 [ 507.398477][ T8074] netlink: 40 bytes leftover after parsing attributes in process `syz.6.663'. [ 507.424301][ T6230] udevd[6230]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 507.730970][ T5803] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-001000000000. [ 509.292148][ T8092] netlink: 4 bytes leftover after parsing attributes in process `syz.2.670'. [ 511.047934][ T8113] loop2: detected capacity change from 0 to 1024 [ 511.117958][ T8113] EXT4-fs: Ignoring removed nobh option [ 511.124106][ T8113] EXT4-fs: Ignoring removed oldalloc option [ 511.130783][ T8113] EXT4-fs: Ignoring removed bh option [ 511.385679][ T8113] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-001000000000 r/w without journal. Quota mode: none. [ 511.480306][ T8125] netlink: 40 bytes leftover after parsing attributes in process `syz.1.679'. [ 511.818271][ T42] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 512.036151][ T42] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 512.047553][ T42] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 512.086056][ T42] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 512.096049][ T42] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 512.104547][ T42] usb 3-1: SerialNumber: syz [ 512.420791][ T42] usb 3-1: 0:2 : does not exist [ 512.632423][ T42] usb 3-1: USB disconnect, device number 7 [ 513.104054][ T6230] udevd[6230]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 513.228345][ T8139] netlink: 4 bytes leftover after parsing attributes in process `syz.5.684'. [ 513.454998][ T5812] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-001000000000. [ 516.675071][ T8171] netlink: 40 bytes leftover after parsing attributes in process `syz.5.693'. [ 518.320788][ T8187] netlink: 12 bytes leftover after parsing attributes in process `syz.0.697'. [ 519.489536][ T8201] loop5: detected capacity change from 0 to 1024 [ 519.543454][ T8201] EXT4-fs: Ignoring removed nobh option [ 519.550122][ T8201] EXT4-fs: Ignoring removed oldalloc option [ 519.556585][ T8201] EXT4-fs: Ignoring removed bh option [ 519.655889][ T8203] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 519.665992][ T8203] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 519.749896][ T8201] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-001000000000 r/w without journal. Quota mode: none. [ 520.337183][ T1972] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 520.594440][ T1972] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 520.605197][ T1972] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 520.716290][ T1972] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 520.726051][ T1972] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 520.734634][ T1972] usb 6-1: SerialNumber: syz [ 521.060059][ T1972] usb 6-1: 0:2 : does not exist [ 521.303986][ T1972] usb 6-1: USB disconnect, device number 3 [ 523.772947][ T6230] udevd[6230]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 524.010443][ T8228] netlink: 40 bytes leftover after parsing attributes in process `syz.6.710'. [ 524.159590][ T6768] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-001000000000. [ 527.968343][ T8264] loop5: detected capacity change from 0 to 1024 [ 528.040479][ T8264] EXT4-fs: Ignoring removed nobh option [ 528.046762][ T8264] EXT4-fs: Ignoring removed oldalloc option [ 528.053366][ T8264] EXT4-fs: Ignoring removed bh option [ 528.254513][ T8264] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-001000000000 r/w without journal. Quota mode: none. [ 528.687840][ T1972] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 528.770711][ T8277] netlink: 40 bytes leftover after parsing attributes in process `syz.1.725'. [ 528.906868][ T1972] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 528.917457][ T1972] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 528.962013][ T1972] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 528.971760][ T1972] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 528.980982][ T1972] usb 6-1: SerialNumber: syz [ 529.318019][ T1972] usb 6-1: 0:2 : does not exist [ 529.541225][ T1972] usb 6-1: USB disconnect, device number 4 [ 529.864955][ T6230] udevd[6230]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 530.431376][ T6768] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-001000000000. [ 531.024326][ T8294] netlink: 4 bytes leftover after parsing attributes in process `syz.6.731'. [ 531.101950][ T8300] netlink: 4 bytes leftover after parsing attributes in process `syz.6.731'. [ 531.296210][ T8294] netlink: 4 bytes leftover after parsing attributes in process `syz.6.731'. [ 532.765105][ T8319] netlink: 40 bytes leftover after parsing attributes in process `syz.6.738'. [ 532.990038][ T8323] netlink: 4 bytes leftover after parsing attributes in process `syz.1.740'. [ 533.631206][ T8329] netlink: 12 bytes leftover after parsing attributes in process `syz.0.739'. [ 535.211053][ T8348] netlink: 4 bytes leftover after parsing attributes in process `syz.5.748'. [ 535.300014][ T8353] netlink: 4 bytes leftover after parsing attributes in process `syz.5.748'. [ 535.412853][ T8348] netlink: 4 bytes leftover after parsing attributes in process `syz.5.748'. [ 536.790699][ T8367] netlink: 4 bytes leftover after parsing attributes in process `syz.1.753'. [ 536.918954][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 536.925692][ T1286] ieee802154 phy1 wpan1: encryption failed: -22 [ 539.796290][ T8400] netlink: 4 bytes leftover after parsing attributes in process `syz.1.764'. [ 539.956901][ T8404] netlink: 4 bytes leftover after parsing attributes in process `syz.6.766'. [ 539.980986][ T8400] netlink: 4 bytes leftover after parsing attributes in process `syz.1.764'. [ 540.040093][ T8406] netlink: 4 bytes leftover after parsing attributes in process `syz.1.764'. [ 540.174333][ T8400] netlink: 4 bytes leftover after parsing attributes in process `syz.1.764'. [ 542.601644][ T8432] netlink: 12 bytes leftover after parsing attributes in process `syz.6.773'. [ 543.169232][ T8432] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 543.177519][ T8432] batadv_slave_0: entered promiscuous mode [ 543.587093][ T8445] netlink: 4 bytes leftover after parsing attributes in process `syz.1.779'. [ 544.050170][ T8451] netlink: 4 bytes leftover after parsing attributes in process `syz.0.780'. [ 544.112632][ T8454] netlink: 4 bytes leftover after parsing attributes in process `syz.0.780'. [ 544.189355][ T8451] netlink: 4 bytes leftover after parsing attributes in process `syz.0.780'. [ 544.236669][ T8451] netlink: 4 bytes leftover after parsing attributes in process `syz.0.780'. [ 544.489892][ T8457] netlink: 20 bytes leftover after parsing attributes in process `syz.2.782'. [ 546.089369][ T8475] netlink: 12 bytes leftover after parsing attributes in process `syz.0.786'. [ 547.988144][ T8493] netlink: 4 bytes leftover after parsing attributes in process `syz.2.793'. [ 548.049479][ T42] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 548.297660][ T42] usb 6-1: Using ep0 maxpacket: 32 [ 548.359228][ T8491] loop2: detected capacity change from 0 to 3 [ 548.408546][ T8491] ldm_validate_privheads(): Disk read failed. [ 548.415298][ T8491] Dev loop2: unable to read RDB block 3 [ 548.422730][ T8491] loop2: unable to read partition table [ 548.529054][ T8491] loop2: partition table beyond EOD, truncated [ 548.535724][ T8491] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 548.711707][ T42] usb 6-1: unable to get BOS descriptor or descriptor too short [ 548.720843][ T42] usb 6-1: too many configurations: 105, using maximum allowed: 8 [ 548.857429][ T42] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 548.865276][ T42] usb 6-1: can't read configurations, error -71 [ 549.147875][ T8499] netlink: 20 bytes leftover after parsing attributes in process `syz.2.795'. [ 550.055903][ T8504] netlink: 4 bytes leftover after parsing attributes in process `syz.1.796'. [ 550.139485][ T8508] netlink: 4 bytes leftover after parsing attributes in process `syz.1.796'. [ 550.214483][ T8509] loop5: detected capacity change from 0 to 256 [ 550.268590][ T8504] netlink: 4 bytes leftover after parsing attributes in process `syz.1.796'. [ 550.281081][ T8509] exfat: Deprecated parameter 'utf8' [ 550.286888][ T8509] exfat: Deprecated parameter 'namecase' [ 550.293509][ T8509] exfat: Deprecated parameter 'namecase' [ 550.299615][ T8509] exfat: Deprecated parameter 'utf8' [ 550.329598][ T8508] netlink: 4 bytes leftover after parsing attributes in process `syz.1.796'. [ 550.644010][ T8509] exFAT-fs (loop5): failed to load upcase table (idx : 0x00012153, chksum : 0xc3dffc2e, utbl_chksum : 0xe619d30d) [ 551.623914][ T30] kauditd_printk_skb: 8 callbacks suppressed [ 551.623993][ T30] audit: type=1107 audit(1750839448.122:21): pid=8515 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 556.209554][ T8537] netlink: 20 bytes leftover after parsing attributes in process `syz.2.807'. [ 557.211338][ T8549] netlink: 4 bytes leftover after parsing attributes in process `syz.2.811'. [ 557.316974][ T8549] netlink: 4 bytes leftover after parsing attributes in process `syz.2.811'. [ 557.344749][ T8549] netlink: 4 bytes leftover after parsing attributes in process `syz.2.811'. [ 560.919715][ T8589] netlink: 12 bytes leftover after parsing attributes in process `syz.0.824'. [ 561.095747][ T8594] netlink: 4 bytes leftover after parsing attributes in process `syz.6.826'. [ 561.149763][ T8594] netlink: 4 bytes leftover after parsing attributes in process `syz.6.826'. [ 561.211885][ T8594] netlink: 4 bytes leftover after parsing attributes in process `syz.6.826'. [ 561.997674][ T8601] loop5: detected capacity change from 0 to 512 [ 562.188004][ T8601] EXT4-fs (loop5): Cannot turn on journaled quota: type 1: error -13 [ 562.196549][ T8601] EXT4-fs error (device loop5): ext4_orphan_get:1393: inode #13: comm syz.5.828: iget: bad i_size value: 12154757448730 [ 562.310323][ T8601] EXT4-fs error (device loop5): ext4_orphan_get:1398: comm syz.5.828: couldn't read orphan inode 13 (err -117) [ 562.399858][ T8601] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 563.060000][ T6768] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 565.518413][ T8646] netlink: 4 bytes leftover after parsing attributes in process `syz.5.841'. [ 565.577960][ T8646] netlink: 4 bytes leftover after parsing attributes in process `syz.5.841'. [ 565.638982][ T8648] netlink: 4 bytes leftover after parsing attributes in process `syz.5.841'. [ 566.772714][ T8657] Driver unsupported XDP return value 0 on prog (id 244) dev N/A, expect packet loss! [ 568.807698][ T8676] netlink: 12 bytes leftover after parsing attributes in process `syz.5.851'. [ 569.998541][ T8688] netlink: 4 bytes leftover after parsing attributes in process `syz.2.855'. [ 570.122068][ T8688] netlink: 4 bytes leftover after parsing attributes in process `syz.2.855'. [ 570.215089][ T8694] netlink: 4 bytes leftover after parsing attributes in process `syz.2.855'. [ 572.070550][ T8715] netlink: 12 bytes leftover after parsing attributes in process `syz.6.867'. [ 572.416520][ T8727] netlink: 12 bytes leftover after parsing attributes in process `syz.2.866'. [ 573.531378][ T8734] netlink: 8 bytes leftover after parsing attributes in process `syz.1.870'. [ 573.626107][ T8737] netlink: 4 bytes leftover after parsing attributes in process `syz.1.870'. [ 573.699257][ T8738] netlink: 4 bytes leftover after parsing attributes in process `syz.5.872'. [ 573.772303][ T8738] netlink: 4 bytes leftover after parsing attributes in process `syz.5.872'. [ 573.839742][ T8740] netlink: 4 bytes leftover after parsing attributes in process `syz.5.872'. [ 576.423695][ T8770] netlink: 12 bytes leftover after parsing attributes in process `syz.1.881'. [ 577.509290][ T8782] netlink: 4 bytes leftover after parsing attributes in process `syz.0.886'. [ 577.561197][ T8782] netlink: 4 bytes leftover after parsing attributes in process `syz.0.886'. [ 577.634073][ T8785] netlink: 4 bytes leftover after parsing attributes in process `syz.0.886'. [ 579.135269][ T8805] netlink: 12 bytes leftover after parsing attributes in process `syz.0.890'. [ 579.162438][ T8804] netlink: 'syz.6.893': attribute type 1 has an invalid length. [ 579.680044][ T8808] netlink: 52 bytes leftover after parsing attributes in process `syz.6.893'. [ 579.798916][ T8804] 8021q: adding VLAN 0 to HW filter on device bond1 [ 579.999925][ T8804] veth3: entered promiscuous mode [ 580.017217][ T8804] bond1: (slave veth3): Enslaving as a backup interface with a down link [ 581.079404][ T8824] netlink: 12 bytes leftover after parsing attributes in process `syz.1.897'. [ 581.852195][ T8832] netlink: 4 bytes leftover after parsing attributes in process `syz.5.900'. [ 582.015257][ T8832] netlink: 4 bytes leftover after parsing attributes in process `syz.5.900'. [ 582.089967][ T8832] netlink: 4 bytes leftover after parsing attributes in process `syz.5.900'. [ 583.159392][ T8844] netlink: 12 bytes leftover after parsing attributes in process `syz.6.904'. [ 584.278904][ T8858] netlink: 'syz.6.908': attribute type 1 has an invalid length. [ 584.452515][ T8864] netlink: 52 bytes leftover after parsing attributes in process `syz.6.908'. [ 584.566706][ T8858] 8021q: adding VLAN 0 to HW filter on device bond2 [ 584.631652][ T8866] netlink: 12 bytes leftover after parsing attributes in process `syz.1.909'. [ 584.781030][ T8858] veth5: entered promiscuous mode [ 584.803865][ T8858] bond2: (slave veth5): Enslaving as a backup interface with a down link [ 587.975316][ T8883] netlink: 12 bytes leftover after parsing attributes in process `syz.2.913'. [ 590.718628][ T8914] netlink: 'syz.2.921': attribute type 1 has an invalid length. [ 590.767806][ T8916] netlink: 52 bytes leftover after parsing attributes in process `syz.2.921'. [ 591.171811][ T8917] 8021q: adding VLAN 0 to HW filter on device bond2 [ 591.358884][ T8916] veth5: entered promiscuous mode [ 591.375851][ T8916] bond2: (slave veth5): Enslaving as a backup interface with a down link [ 591.991780][ T8930] netlink: 12 bytes leftover after parsing attributes in process `syz.6.924'. [ 593.452736][ T8948] netlink: 'syz.2.928': attribute type 13 has an invalid length. [ 594.516274][ T8948] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 596.538967][ T8974] netlink: 4 bytes leftover after parsing attributes in process `syz.5.937'. [ 596.642981][ T8974] netlink: 4 bytes leftover after parsing attributes in process `syz.5.937'. [ 596.713802][ T8977] netlink: 4 bytes leftover after parsing attributes in process `syz.5.937'. [ 598.386028][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 598.392994][ T1286] ieee802154 phy1 wpan1: encryption failed: -22 [ 598.990623][ T8996] netlink: 12 bytes leftover after parsing attributes in process `syz.5.942'. [ 603.028350][ T9023] loop6: detected capacity change from 0 to 256 [ 604.025241][ T9038] netlink: 4 bytes leftover after parsing attributes in process `syz.1.953'. [ 604.098619][ T9039] netlink: 4 bytes leftover after parsing attributes in process `syz.1.953'. [ 604.160418][ T9038] netlink: 4 bytes leftover after parsing attributes in process `syz.1.953'. [ 604.844808][ T9044] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 605.001149][ T9044] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 605.246358][ T9044] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 605.454640][ T9044] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 605.884611][ T9044] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 605.913087][ T9044] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 605.938058][ T9044] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 605.963422][ T9044] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 606.540701][ T9063] netlink: 12 bytes leftover after parsing attributes in process `syz.2.959'. [ 608.520279][ T9081] loop6: detected capacity change from 0 to 764 [ 608.909426][ T9083] mac80211_hwsim hwsim13 syzkaller0: entered promiscuous mode [ 608.917508][ T9083] mac80211_hwsim hwsim13 syzkaller0: entered allmulticast mode [ 609.848251][ T9092] netlink: 4 bytes leftover after parsing attributes in process `syz.6.968'. [ 609.932220][ T9092] netlink: 4 bytes leftover after parsing attributes in process `syz.6.968'. [ 610.048997][ T9096] netlink: 4 bytes leftover after parsing attributes in process `syz.6.968'. [ 613.549505][ T9127] netlink: 12 bytes leftover after parsing attributes in process `syz.1.976'. [ 615.518574][ T9145] netlink: 4 bytes leftover after parsing attributes in process `syz.5.983'. [ 615.582978][ T9145] netlink: 4 bytes leftover after parsing attributes in process `syz.5.983'. [ 615.659186][ T9148] netlink: 4 bytes leftover after parsing attributes in process `syz.5.983'. [ 616.947122][ T9154] loop5: detected capacity change from 0 to 128 [ 617.009978][ T9154] EXT4-fs: Ignoring removed nobh option [ 617.157607][ T9154] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 617.250361][ T9154] ext4 filesystem being mounted at /142/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 617.887702][ T6768] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 618.201117][ T9164] loop2: detected capacity change from 0 to 1024 [ 618.251200][ T9164] EXT4-fs: Ignoring removed oldalloc option [ 618.257773][ T9164] EXT4-fs: Ignoring removed bh option [ 618.463966][ T9164] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 618.657709][ T9164] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000. [ 619.314103][ T5812] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 620.632738][ T9193] netlink: 4 bytes leftover after parsing attributes in process `syz.5.996'. [ 620.670885][ T9193] netlink: 4 bytes leftover after parsing attributes in process `syz.5.996'. [ 620.702686][ T9190] netlink: 12 bytes leftover after parsing attributes in process `syz.0.994'. [ 620.805164][ T9193] netlink: 4 bytes leftover after parsing attributes in process `syz.5.996'. [ 621.038072][ T9199] loop2: detected capacity change from 0 to 512 [ 621.064478][ T9199] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 621.926752][ T9199] EXT4-fs (loop2): failed to open journal device unknown-block(0,0) -6 [ 629.154503][ T9263] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1012'. [ 630.923491][ T9275] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1018'. [ 630.984984][ T9275] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1018'. [ 631.009662][ T9275] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1018'. [ 635.823847][ T9309] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1028'. [ 636.438833][ T9315] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1032'. [ 636.497128][ T9315] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1032'. [ 636.572157][ T9317] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1032'. [ 636.840120][ T9319] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1034'. [ 640.532871][ T9354] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1046'. [ 640.702680][ T9359] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1048'. [ 640.782053][ T9359] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1048'. [ 640.888887][ T9363] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1048'. [ 644.640956][ T9386] pim6reg: entered allmulticast mode [ 644.684939][ T9388] pim6reg: left allmulticast mode [ 646.709308][ T9397] loop2: detected capacity change from 0 to 1024 [ 646.749731][ T9397] EXT4-fs: Ignoring removed nobh option [ 646.755939][ T9397] EXT4-fs: Ignoring removed oldalloc option [ 646.762526][ T9397] EXT4-fs: Ignoring removed bh option [ 646.960877][ T9397] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-001000000000 r/w without journal. Quota mode: none. [ 647.407584][ T42] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 647.685523][ T42] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 647.696939][ T42] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 647.734761][ T42] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 647.747545][ T42] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 647.755855][ T42] usb 3-1: SerialNumber: syz [ 648.149379][ T42] usb 3-1: 0:2 : does not exist [ 648.312805][ T42] usb 3-1: USB disconnect, device number 8 [ 648.560354][ T6230] udevd[6230]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 648.909990][ T5812] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-001000000000. [ 649.438935][ T9431] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1071'. [ 650.255268][ T9437] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1076'. [ 651.615342][ T9450] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1080'. [ 654.166869][ T9464] loop0: detected capacity change from 0 to 1024 [ 654.240157][ T9464] EXT4-fs: Ignoring removed nobh option [ 654.246501][ T9464] EXT4-fs: Ignoring removed oldalloc option [ 654.253312][ T9464] EXT4-fs: Ignoring removed bh option [ 654.450664][ T9464] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-001000000000 r/w without journal. Quota mode: none. [ 654.868531][ T42] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 655.097750][ T42] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 655.108821][ T42] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 655.144864][ T42] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 655.154855][ T42] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 655.163279][ T42] usb 1-1: SerialNumber: syz [ 655.419604][ T42] usb 1-1: 0:2 : does not exist [ 655.626298][ T42] usb 1-1: USB disconnect, device number 4 [ 655.954439][ T6230] udevd[6230]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 656.320881][ T5799] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-001000000000. [ 659.799195][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 659.805984][ T1286] ieee802154 phy1 wpan1: encryption failed: -22 [ 660.196565][ T9505] loop6: detected capacity change from 0 to 1024 [ 660.249363][ T9505] EXT4-fs: Ignoring removed nobh option [ 660.255725][ T9505] EXT4-fs: Ignoring removed oldalloc option [ 660.262432][ T9505] EXT4-fs: Ignoring removed bh option [ 660.449242][ T9505] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-001000000000 r/w without journal. Quota mode: none. [ 660.859393][ T11] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 661.085278][ T11] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 661.095918][ T11] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 661.220055][ T11] usb 7-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 661.229749][ T11] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 661.238254][ T11] usb 7-1: SerialNumber: syz [ 661.540560][ T11] usb 7-1: 0:2 : does not exist [ 661.712028][ T11] usb 7-1: USB disconnect, device number 4 [ 662.076585][ T6230] udevd[6230]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 662.480868][ T9531] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1109'. [ 662.551253][ T6802] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-001000000000. [ 663.319706][ T9541] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1114'. [ 663.510553][ T9541] loop5: detected capacity change from 0 to 1024 [ 663.850939][ T9541] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 664.073353][ T9541] smc: net device bond0 applied user defined pnetid SYZ0 [ 664.118804][ T9541] smc: net device bond0 erased user defined pnetid SYZ0 [ 664.403032][ T6768] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 664.865518][ T9560] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1118'. [ 668.340451][ T9585] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1130'. [ 668.367618][ T9585] ipvlan2: entered promiscuous mode [ 671.050479][ T9599] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 671.060046][ T9599] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 671.253862][ T9606] loop0: detected capacity change from 0 to 512 [ 671.426892][ T9606] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 671.440301][ T9606] ext4 filesystem being mounted at /234/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 671.968729][ T5799] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 673.569040][ T9627] bridge0: port 1(bridge_slave_0) entered blocking state [ 673.576931][ T9627] bridge0: port 1(bridge_slave_0) entered forwarding state [ 674.560466][ T9640] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1148'. [ 675.172232][ T9643] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1151'. [ 675.435909][ T9643] loop2: detected capacity change from 0 to 1024 [ 675.447674][ T9645] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 675.456997][ T9645] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 675.607968][ T9643] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 675.829191][ T9643] smc: net device bond0 applied user defined pnetid SYZ0 [ 675.879486][ T9643] smc: net device bond0 erased user defined pnetid SYZ0 [ 676.330057][ T5812] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 677.557719][ T9658] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1155'. [ 680.608637][ T9678] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1163'. [ 682.505470][ T9687] tipc: Enabling of bearer rejected, failed to enable media [ 682.544076][ T9689] loop2: detected capacity change from 0 to 1024 [ 682.620043][ T9689] EXT4-fs: Ignoring removed nobh option [ 682.626088][ T9689] EXT4-fs: Ignoring removed oldalloc option [ 682.632490][ T9689] EXT4-fs: Ignoring removed bh option [ 682.741136][ T9689] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-001000000000 r/w without journal. Quota mode: none. [ 683.267584][ T1972] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 683.493803][ T1972] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 683.504663][ T1972] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 683.570143][ T1972] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 683.580178][ T1972] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 683.588942][ T1972] usb 3-1: SerialNumber: syz [ 683.857747][ T1972] usb 3-1: 0:2 : does not exist [ 684.017779][ T1972] usb 3-1: USB disconnect, device number 9 [ 684.231414][ T6230] udevd[6230]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 684.278710][ T9702] loop0: detected capacity change from 0 to 128 [ 684.919988][ T5812] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-001000000000. [ 688.380021][ T9723] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1180'. [ 697.816615][ T9787] loop2: detected capacity change from 0 to 1024 [ 697.841029][ T9787] EXT4-fs: Ignoring removed nobh option [ 697.847613][ T9787] EXT4-fs: Ignoring removed oldalloc option [ 697.853739][ T9787] EXT4-fs: Ignoring removed bh option [ 698.026640][ T9787] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-001000000000 r/w without journal. Quota mode: none. [ 698.405358][ T9793] loop0: detected capacity change from 0 to 164 [ 698.417709][ T11] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 698.644063][ T11] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 698.655838][ T11] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 698.735663][ T11] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 698.745319][ T11] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 698.754320][ T11] usb 3-1: SerialNumber: syz [ 698.808055][ T1972] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 699.017673][ T1972] usb 1-1: Using ep0 maxpacket: 16 [ 699.029646][ T11] usb 3-1: 0:2 : does not exist [ 699.034835][ T11] usb 3-1: unit 5: unexpected type 0x09 [ 699.055599][ T1972] usb 1-1: config 0 interface 0 has no altsetting 0 [ 699.062930][ T1972] usb 1-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 699.072965][ T1972] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 699.160722][ T1972] usb 1-1: config 0 descriptor?? [ 699.261680][ T11] usb 3-1: USB disconnect, device number 10 [ 699.455595][ T6230] udevd[6230]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 699.628250][ T1972] hid (null): global environment stack underflow [ 699.634908][ T1972] hid (null): bogus close delimiter [ 699.654092][ T1972] hid (null): invalid report_size 34966 [ 699.660105][ T1972] hid (null): unknown global tag 0xe [ 699.666083][ T1972] hid (null): invalid report_size 927784958 [ 699.673061][ T1972] hid (null): unknown global tag 0xc [ 699.679585][ T1972] hid (null): invalid report_size 1360121330 [ 699.686183][ T1972] hid (null): global environment stack underflow [ 699.693935][ T1972] hid (null): unknown global tag 0x84 [ 699.904267][ T5812] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-001000000000. [ 699.996291][ T1972] usb 1-1: USB disconnect, device number 5 [ 700.108968][ T9809] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1215'. [ 701.232730][ T9821] loop0: detected capacity change from 0 to 16 [ 701.322963][ T9821] erofs (device loop0): unsupported chunk format ffff of nid 36 [ 702.303919][ T9832] vlan2: entered allmulticast mode [ 702.309757][ T9832] ip6gretap0: entered allmulticast mode [ 706.919460][ T9861] loop0: detected capacity change from 0 to 128 [ 707.027630][ T9861] omfs: sysblock size (-58445445) is out of range [ 714.096068][ T9975] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 714.105675][ T9975] batadv_slave_0: entered promiscuous mode [ 714.782400][ T9984] loop0: detected capacity change from 0 to 1024 [ 714.831655][ T9984] EXT4-fs: Ignoring removed nobh option [ 714.838374][ T9984] EXT4-fs: Ignoring removed oldalloc option [ 714.844673][ T9984] EXT4-fs: Ignoring removed bh option [ 714.916451][ T9984] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-001000000000 r/w without journal. Quota mode: none. [ 715.388082][ T11] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 715.585931][ T11] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 715.596778][ T11] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 715.710717][ T11] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 715.720286][ T11] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 715.728527][ T11] usb 1-1: SerialNumber: syz [ 716.006337][ T11] usb 1-1: 0:2 : does not exist [ 716.011951][ T11] usb 1-1: unit 5: unexpected type 0x09 [ 716.178878][ T11] usb 1-1: USB disconnect, device number 6 [ 716.524731][ T9996] netlink: 'syz.2.1261': attribute type 4 has an invalid length. [ 716.689469][ T9996] netlink: 'syz.2.1261': attribute type 4 has an invalid length. [ 716.932649][ T5799] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-001000000000. [ 718.530447][T10004] loop2: detected capacity change from 0 to 256 [ 718.640430][T10004] vfat: Bad value for 'uni_xlate' [ 718.849793][T10004] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1265'. [ 718.874010][T10006] bridge0: port 2(bridge_slave_1) entered disabled state [ 718.878604][T10007] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 718.882949][T10006] bridge0: port 1(bridge_slave_0) entered disabled state [ 718.900142][T10006] bridge0: entered allmulticast mode [ 721.113146][ T9907] Bluetooth: hci2: Frame reassembly failed (-84) [ 721.148755][T10020] Bluetooth: hci2: Frame reassembly failed (-90) [ 721.231384][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 721.238856][ T1286] ieee802154 phy1 wpan1: encryption failed: -22 [ 722.546669][T10033] IPv6: Can't replace route, no match found [ 723.127762][ T5804] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 723.134151][T10021] Bluetooth: hci2: command 0x1003 tx timeout [ 723.860707][T10045] loop2: detected capacity change from 0 to 1024 [ 723.920391][T10045] EXT4-fs: Ignoring removed nobh option [ 723.926740][T10045] EXT4-fs: Ignoring removed oldalloc option [ 723.933471][T10045] EXT4-fs: Ignoring removed bh option [ 724.284811][T10045] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-001000000000 r/w without journal. Quota mode: none. [ 724.605778][T10061] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1286'. [ 724.757632][ T1972] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 725.015519][ T1972] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 725.026240][ T1972] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 725.115524][ T1972] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 725.125557][ T1972] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 725.133807][ T1972] usb 3-1: SerialNumber: syz [ 725.476069][ T1972] usb 3-1: 0:2 : does not exist [ 725.481509][ T1972] usb 3-1: unit 5: unexpected type 0x09 [ 725.565286][ T1972] usb 3-1: USB disconnect, device number 11 [ 726.407944][ T5812] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-001000000000. [ 727.741095][T10082] loop2: detected capacity change from 0 to 47 [ 727.908306][T10084] netlink: 'syz.6.1298': attribute type 4 has an invalid length. [ 728.059244][T10086] netlink: 'syz.6.1298': attribute type 4 has an invalid length. [ 728.148669][T10082] syz.2.1297: attempt to access beyond end of device [ 728.148669][T10082] loop2: rw=2049, sector=48, nr_sectors = 2 limit=47 [ 728.162740][T10082] Buffer I/O error on dev loop2, logical block 24, lost async page write [ 728.171741][T10082] syz.2.1297: attempt to access beyond end of device [ 728.171741][T10082] loop2: rw=2049, sector=50, nr_sectors = 2 limit=47 [ 728.185296][T10082] Buffer I/O error on dev loop2, logical block 25, lost async page write [ 728.194103][T10082] syz.2.1297: attempt to access beyond end of device [ 728.194103][T10082] loop2: rw=2049, sector=52, nr_sectors = 2 limit=47 [ 728.207653][T10082] Buffer I/O error on dev loop2, logical block 26, lost async page write [ 729.265202][ T30] audit: type=1326 audit(1750839625.732:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10094 comm="syz.2.1300" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f68539 code=0x7ffc0000 [ 729.287791][ T30] audit: type=1326 audit(1750839625.752:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10094 comm="syz.2.1300" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7f68539 code=0x7ffc0000 [ 729.310402][ T30] audit: type=1326 audit(1750839625.752:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10094 comm="syz.2.1300" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f68539 code=0x7ffc0000 [ 729.332911][ T30] audit: type=1326 audit(1750839625.752:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10094 comm="syz.2.1300" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7f68539 code=0x7ffc0000 [ 729.355459][ T30] audit: type=1326 audit(1750839625.752:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10094 comm="syz.2.1300" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f68539 code=0x7ffc0000 [ 729.378197][ T30] audit: type=1326 audit(1750839625.762:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10094 comm="syz.2.1300" exe="/root/syz-executor" sig=0 arch=40000003 syscall=21 compat=1 ip=0xf7f68539 code=0x7ffc0000 [ 729.400652][ T30] audit: type=1326 audit(1750839625.772:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10094 comm="syz.2.1300" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f68539 code=0x7ffc0000 [ 729.423302][ T30] audit: type=1326 audit(1750839625.772:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10094 comm="syz.2.1300" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f68539 code=0x7ffc0000 [ 729.445795][ T30] audit: type=1326 audit(1750839625.772:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10094 comm="syz.2.1300" exe="/root/syz-executor" sig=0 arch=40000003 syscall=217 compat=1 ip=0xf7f68539 code=0x7ffc0000 [ 729.468440][ T30] audit: type=1326 audit(1750839625.782:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10094 comm="syz.2.1300" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f68539 code=0x7ffc0000 [ 730.229932][T10101] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1305'. [ 730.315855][T10101] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1305'. [ 732.298481][T10113] netlink: 'syz.0.1311': attribute type 4 has an invalid length. [ 732.384218][T10114] netlink: 'syz.0.1311': attribute type 4 has an invalid length. [ 734.296952][T10131] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1318'. [ 734.339285][T10131] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1318'. [ 734.403077][T10130] loop2: detected capacity change from 0 to 1024 [ 734.423629][T10130] EXT4-fs: Ignoring removed nobh option [ 734.430073][T10130] EXT4-fs: Ignoring removed oldalloc option [ 734.436504][T10130] EXT4-fs: Ignoring removed bh option [ 734.537387][T10130] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-001000000000 r/w without journal. Quota mode: none. [ 734.937806][ T42] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 735.156298][ T42] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 735.167309][ T42] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 735.213724][ T42] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 735.223548][ T42] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 735.232206][ T42] usb 3-1: SerialNumber: syz [ 735.584696][ T42] usb 3-1: 0:2 : does not exist [ 735.590279][ T42] usb 3-1: unit 5: unexpected type 0x09 [ 735.844634][ T42] usb 3-1: USB disconnect, device number 12 [ 735.945368][T10150] netlink: 'syz.0.1325': attribute type 4 has an invalid length. [ 736.061363][T10150] netlink: 'syz.0.1325': attribute type 4 has an invalid length. [ 736.376890][ T5812] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-001000000000. [ 739.240568][T10162] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1328'. [ 741.478301][T10175] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1334'. [ 741.568151][T10178] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1334'. [ 743.017392][T10185] netlink: 'syz.1.1338': attribute type 4 has an invalid length. [ 743.111827][T10183] loop2: detected capacity change from 0 to 1024 [ 743.139477][T10186] netlink: 'syz.1.1338': attribute type 4 has an invalid length. [ 743.191719][T10183] EXT4-fs: Ignoring removed nobh option [ 743.198341][T10183] EXT4-fs: Ignoring removed oldalloc option [ 743.204637][T10183] EXT4-fs: Ignoring removed bh option [ 743.401801][T10183] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-001000000000 r/w without journal. Quota mode: none. [ 743.706242][ T42] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 743.951840][ T42] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 743.962283][ T42] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 744.020041][ T42] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 744.029653][ T42] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 744.038343][ T42] usb 3-1: SerialNumber: syz [ 744.373845][ T42] usb 3-1: 0:2 : does not exist [ 744.379170][ T42] usb 3-1: unit 5: unexpected type 0x09 [ 744.570941][ T42] usb 3-1: USB disconnect, device number 13 [ 747.221039][ T5812] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-001000000000. [ 748.670847][T10209] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1347'. [ 748.733484][T10209] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1347'. [ 749.010166][T10213] netlink: 'syz.6.1349': attribute type 4 has an invalid length. [ 749.115225][T10213] netlink: 'syz.6.1349': attribute type 4 has an invalid length. [ 749.509303][T10219] process 'syz.1.1352' launched './file1' with NULL argv: empty string added [ 750.188843][T10021] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 750.220287][T10021] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 750.245783][T10021] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 750.263302][T10021] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 750.290520][T10021] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 750.327327][T10232] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1353'. [ 750.995463][T10241] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1356'. [ 751.799375][T10244] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1359'. [ 752.258832][T10228] chnl_net:caif_netlink_parms(): no params data found [ 752.408367][T10021] Bluetooth: hci2: command tx timeout [ 753.741552][ T9935] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 753.808222][T10259] netlink: 'syz.6.1363': attribute type 4 has an invalid length. [ 753.838673][T10260] netlink: 'syz.6.1363': attribute type 4 has an invalid length. [ 754.006422][ T9935] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 754.252727][ T9935] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 754.269481][T10263] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1364'. [ 754.342019][T10263] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1364'. [ 754.488891][T10021] Bluetooth: hci2: command tx timeout [ 754.526583][ T9935] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 755.181270][T10228] bridge0: port 1(bridge_slave_0) entered blocking state [ 755.188939][T10228] bridge0: port 1(bridge_slave_0) entered disabled state [ 755.196519][T10228] bridge_slave_0: entered allmulticast mode [ 755.204949][T10228] bridge_slave_0: entered promiscuous mode [ 755.400386][T10228] bridge0: port 2(bridge_slave_1) entered blocking state [ 755.408024][T10228] bridge0: port 2(bridge_slave_1) entered disabled state [ 755.415573][T10228] bridge_slave_1: entered allmulticast mode [ 755.424314][T10228] bridge_slave_1: entered promiscuous mode [ 756.189565][ T9935] bridge_slave_1: left allmulticast mode [ 756.195463][ T9935] bridge_slave_1: left promiscuous mode [ 756.202189][ T9935] bridge0: port 2(bridge_slave_1) entered disabled state [ 756.318620][ T9935] bridge_slave_0: left allmulticast mode [ 756.324572][ T9935] bridge_slave_0: left promiscuous mode [ 756.331541][ T9935] bridge0: port 1(bridge_slave_0) entered disabled state [ 756.569983][T10021] Bluetooth: hci2: command tx timeout [ 757.039644][ T9935] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 757.099559][ T9935] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 757.163807][ T9935] bond0 (unregistering): Released all slaves [ 757.270187][T10228] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 757.398582][T10278] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1370'. [ 757.462798][T10228] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 758.032701][T10228] team0: Port device team_slave_0 added [ 758.137606][ T9935] hsr_slave_0: left promiscuous mode [ 758.188932][ T9935] hsr_slave_1: left promiscuous mode [ 758.198742][ T9935] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 758.260688][ T9935] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 758.268543][ T9935] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 758.395079][ T9935] veth1_macvtap: left promiscuous mode [ 758.402041][ T9935] veth0_macvtap: left promiscuous mode [ 758.408268][ T9935] veth1_vlan: left promiscuous mode [ 758.413870][ T9935] veth0_vlan: left promiscuous mode [ 758.647700][T10021] Bluetooth: hci2: command tx timeout [ 760.060397][ T9935] team0 (unregistering): Port device team_slave_1 removed [ 760.100607][ T9935] team0 (unregistering): Port device team_slave_0 removed [ 760.413433][T10228] team0: Port device team_slave_1 added [ 760.612721][T10291] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1376'. [ 760.710554][T10291] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1376'. [ 760.798202][T10228] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 760.805529][T10228] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 760.832454][T10228] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 761.031846][T10228] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 761.039462][T10228] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 761.067024][T10228] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 761.354986][T10228] hsr_slave_0: entered promiscuous mode [ 761.365726][T10228] hsr_slave_1: entered promiscuous mode [ 761.374767][T10228] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 761.382797][T10228] Cannot create hsr debugfs directory [ 761.871890][T10303] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1381'. [ 761.963286][T10296] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 762.298474][T10228] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 762.409410][T10228] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 762.479567][T10228] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 762.542780][T10309] loop2: detected capacity change from 0 to 128 [ 762.568785][T10228] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 762.607779][T10309] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 762.676609][T10309] ext4 filesystem being mounted at /295/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 763.268147][T10324] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1387'. [ 763.419729][T10309] fscrypt: Error allocating hmac(sha512): -2 [ 763.867965][ T5812] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 764.128707][T10228] 8021q: adding VLAN 0 to HW filter on device bond0 [ 764.279309][T10228] 8021q: adding VLAN 0 to HW filter on device team0 [ 764.328657][ T3555] bridge0: port 1(bridge_slave_0) entered blocking state [ 764.336374][ T3555] bridge0: port 1(bridge_slave_0) entered forwarding state [ 764.351044][ T3555] bridge0: port 2(bridge_slave_1) entered blocking state [ 764.358528][ T3555] bridge0: port 2(bridge_slave_1) entered forwarding state [ 764.652414][T10335] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1390'. [ 764.683210][T10335] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1390'. [ 766.799482][T10228] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 766.858268][T10350] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1396'. [ 768.639630][ T5448] ===================================================== [ 768.647344][ T5448] BUG: KMSAN: kernel-infoleak in _copy_to_iter+0xf0e/0x33f0 [ 768.654879][ T5448] _copy_to_iter+0xf0e/0x33f0 [ 768.660114][ T5448] __skb_datagram_iter+0x196/0x12c0 [ 768.665531][ T5448] skb_copy_datagram_iter+0x5b/0x1e0 [ 768.671271][ T5448] netlink_recvmsg+0x4bb/0xfe0 [ 768.676262][ T5448] sock_recvmsg+0x2df/0x390 [ 768.681152][ T5448] ____sys_recvmsg+0x193/0x610 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 768.686145][ T5448] ___sys_recvmsg+0x20b/0x850 [ 768.691288][ T5448] __x64_sys_recvmsg+0x20e/0x3d0 [ 768.696982][ T5448] x64_sys_call+0x11ff/0x3db0 [ 768.702072][ T5448] do_syscall_64+0xd9/0x210 [ 768.706872][ T5448] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 768.713788][ T5448] [ 768.716193][ T5448] Uninit was stored to memory at: [ 768.721623][ T5448] pskb_expand_head+0x310/0x1610 [ 768.726698][ T5448] netlink_trim+0x496/0x500 [ 768.732112][ T5448] netlink_broadcast_filtered+0x80/0x2370 [ 768.739146][ T5448] nlmsg_notify+0x15b/0x2f0 [ 768.743809][ T5448] rtnl_notify+0xba/0x100 [ 768.748535][ T5448] wireless_nlevent_process+0xfe/0x290 [ 768.754229][ T5448] process_scheduled_works+0xb91/0x1d80 [ 768.760050][ T5448] worker_thread+0xedf/0x1590 [ 768.764932][ T5448] kthread+0xd5c/0xf00 [ 768.769195][ T5448] ret_from_fork+0x1e3/0x310 [ 768.773961][ T5448] ret_from_fork_asm+0x1a/0x30 [ 768.779041][ T5448] [ 768.781438][ T5448] Uninit was stored to memory at: [ 768.786689][ T5448] wireless_send_event+0x67f/0x1530 [ 768.792198][ T5448] ioctl_standard_iw_point+0x12b0/0x13f0 [ 768.798204][ T5448] compat_standard_call+0x188/0x4c0 [ 768.803681][ T5448] wext_ioctl_dispatch+0x18f/0x7a0 [ 768.809154][ T5448] compat_wext_handle_ioctl+0x1a1/0x300 [ 768.815060][ T5448] compat_sock_ioctl+0x20c/0xff0 [ 768.820323][ T5448] __ia32_compat_sys_ioctl+0x7f6/0x1270 [ 768.826112][ T5448] ia32_sys_call+0x2d07/0x42c0 [ 768.831163][ T5448] __do_fast_syscall_32+0xb0/0x150 [ 768.836515][ T5448] do_fast_syscall_32+0x38/0x80 [ 768.842068][ T5448] do_SYSENTER_32+0x1f/0x30 [ 768.846799][ T5448] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 768.853565][ T5448] [ 768.856021][ T5448] Local variable iwp created at: [ 768.861186][ T5448] compat_standard_call+0x4a/0x4c0 [ 768.866559][ T5448] wext_ioctl_dispatch+0x18f/0x7a0 [ 768.872144][ T5448] [ 768.874621][ T5448] Bytes 60-63 of 64 are uninitialized [ 768.880229][ T5448] Memory access of size 64 starts at ffff88804a21fc80 [ 768.887279][ T5448] Data copied to user address 00007fffcccc17a0 [ 768.893587][ T5448] [ 768.896080][ T5448] CPU: 0 UID: 101 PID: 5448 Comm: dhcpcd Not tainted 6.16.0-rc3-syzkaller-00044-g7595b66ae9de #0 PREEMPT(undef) [ 768.908362][ T5448] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 768.918731][ T5448] ===================================================== [ 768.925805][ T5448] Disabling lock debugging due to kernel taint [ 768.932410][ T5448] Kernel panic - not syncing: kmsan.panic set ... [ 768.939015][ T5448] CPU: 0 UID: 101 PID: 5448 Comm: dhcpcd Tainted: G B 6.16.0-rc3-syzkaller-00044-g7595b66ae9de #0 PREEMPT(undef) [ 768.952744][ T5448] Tainted: [B]=BAD_PAGE [ 768.957032][ T5448] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 768.967266][ T5448] Call Trace: [ 768.970687][ T5448] [ 768.973744][ T5448] __dump_stack+0x26/0x30 [ 768.978311][ T5448] dump_stack_lvl+0x53/0x270 [ 768.983067][ T5448] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 768.989058][ T5448] dump_stack+0x1e/0x25 [ 768.993359][ T5448] panic+0x4bd/0xd50 [ 768.997503][ T5448] kmsan_report+0x31c/0x320 [ 769.002213][ T5448] ? kmsan_internal_check_memory+0x1e1/0x230 [ 769.008352][ T5448] ? kmsan_copy_to_user+0xf1/0x190 [ 769.013652][ T5448] ? _copy_to_iter+0xf0e/0x33f0 [ 769.018647][ T5448] ? __skb_datagram_iter+0x196/0x12c0 [ 769.024159][ T5448] ? skb_copy_datagram_iter+0x5b/0x1e0 [ 769.029764][ T5448] ? netlink_recvmsg+0x4bb/0xfe0 [ 769.034850][ T5448] ? sock_recvmsg+0x2df/0x390 [ 769.039683][ T5448] ? ____sys_recvmsg+0x193/0x610 [ 769.044761][ T5448] ? ___sys_recvmsg+0x20b/0x850 [ 769.049747][ T5448] ? __x64_sys_recvmsg+0x20e/0x3d0 [ 769.054999][ T5448] ? x64_sys_call+0x11ff/0x3db0 [ 769.060013][ T5448] ? do_syscall_64+0xd9/0x210 [ 769.064845][ T5448] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 769.071123][ T5448] ? kmsan_internal_unpoison_memory+0x14/0x20 [ 769.077422][ T5448] ? kmsan_get_metadata+0xfb/0x160 [ 769.082876][ T5448] ? kmsan_get_metadata+0xfb/0x160 [ 769.088165][ T5448] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 769.094172][ T5448] ? kmsan_get_metadata+0xfb/0x160 [ 769.099460][ T5448] ? remove_wait_queue+0x36/0x270 [ 769.104655][ T5448] ? __msan_warning+0x1b/0x30 [ 769.109493][ T5448] ? filter_irq_stacks+0x13f/0x190 [ 769.114737][ T5448] ? kmsan_get_metadata+0xfb/0x160 [ 769.120019][ T5448] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 769.126009][ T5448] kmsan_internal_check_memory+0x1e1/0x230 [ 769.132000][ T5448] kmsan_copy_to_user+0xf1/0x190 [ 769.137117][ T5448] _copy_to_iter+0xf0e/0x33f0 [ 769.141991][ T5448] ? kmsan_internal_set_shadow_origin+0x79/0x110 [ 769.148494][ T5448] ? kmsan_get_metadata+0xfb/0x160 [ 769.153771][ T5448] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 769.159836][ T5448] ? kmsan_get_metadata+0xfb/0x160 [ 769.165119][ T5448] ? kmsan_save_stack_with_flags+0x11/0x60 [ 769.171089][ T5448] ? kmsan_get_metadata+0xfb/0x160 [ 769.176380][ T5448] __skb_datagram_iter+0x196/0x12c0 [ 769.181729][ T5448] ? __pfx_simple_copy_to_iter+0x10/0x10 [ 769.187579][ T5448] skb_copy_datagram_iter+0x5b/0x1e0 [ 769.193080][ T5448] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 769.199066][ T5448] netlink_recvmsg+0x4bb/0xfe0 [ 769.204020][ T5448] ? __pfx_netlink_recvmsg+0x10/0x10 [ 769.209542][ T5448] sock_recvmsg+0x2df/0x390 [ 769.214404][ T5448] ____sys_recvmsg+0x193/0x610 [ 769.219333][ T5448] ? setup_fault_attr+0x2f0/0x300 [ 769.224513][ T5448] ? stack_depot_save_flags+0x35/0x7b0 [ 769.230175][ T5448] ___sys_recvmsg+0x20b/0x850 [ 769.235024][ T5448] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 769.241014][ T5448] ? kmsan_get_metadata+0xfb/0x160 [ 769.246296][ T5448] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 769.252292][ T5448] __x64_sys_recvmsg+0x20e/0x3d0 [ 769.257448][ T5448] ? kmsan_get_metadata+0xfb/0x160 [ 769.262767][ T5448] x64_sys_call+0x11ff/0x3db0 [ 769.267637][ T5448] do_syscall_64+0xd9/0x210 [ 769.272288][ T5448] ? irqentry_exit+0x16/0x60 [ 769.277010][ T5448] ? clear_bhb_loop+0x40/0x90 [ 769.281846][ T5448] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 769.287931][ T5448] RIP: 0033:0x7f7ebcd95407 [ 769.292520][ T5448] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 769.312302][ T5448] RSP: 002b:00007fffcccc1690 EFLAGS: 00000202 ORIG_RAX: 000000000000002f [ 769.320866][ T5448] RAX: ffffffffffffffda RBX: 00007f7ebcd0b740 RCX: 00007f7ebcd95407 [ 769.328959][ T5448] RDX: 0000000000000040 RSI: 00007fffcccc1710 RDI: 0000000000000009 [ 769.337041][ T5448] RBP: 000055efeed4caa0 R08: 0000000000000000 R09: 0000000000000000 [ 769.345120][ T5448] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000009 [ 769.353207][ T5448] R13: 00007fffcccc5870 R14: 0000000000000000 R15: 00007fffcccc5860 [ 769.361328][ T5448] [ 769.364829][ T5448] Kernel Offset: disabled [ 769.369249][ T5448] Rebooting in 86400 seconds..