last executing test programs: 14m25.141151527s ago: executing program 1 (id=37): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB], &(0x7f0000000140)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r0, 0x10, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 14m24.48843671s ago: executing program 1 (id=41): syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) syz_emit_vhci(0x0, 0x0) r0 = socket(0x2b, 0x1, 0x1) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) symlinkat(0x0, 0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2505000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r5 = memfd_create(&(0x7f0000000140)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xcda\x9b\x11X\x0e\xa1\xcf\x1a\x98S7\xc9\x00'/47, 0x2) ftruncate(r5, 0xffff) fcntl$addseals(r5, 0x409, 0x7) r6 = ioctl$UDMABUF_CREATE(r4, 0x40187542, &(0x7f0000000000)={r5, 0x0, 0x0, 0x8000}) ioctl$DMA_BUF_IOCTL_SYNC(r6, 0x40086200, &(0x7f00000001c0)=0x1) ioctl$DMA_BUF_IOCTL_SYNC(r6, 0x40086200, &(0x7f00000000c0)=0x7) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000004c0)={'wlan1\x00'}) setxattr$security_capability(0x0, &(0x7f0000000180), &(0x7f0000000380)=@v3={0x3000000, [{0x3, 0xb51}, {0x2, 0x3000}]}, 0x18, 0x1) write$tcp_mem(0xffffffffffffffff, &(0x7f00000005c0)={0x5, 0x20, 0x1, 0x20, 0x8000000000000000}, 0x48) 14m21.355890781s ago: executing program 1 (id=48): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffffe8}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r0, 0x18000000000002a0, 0x1f, 0x0, &(0x7f00000006c0)="b9ff03006043778cff9e14f086dd070000000000000069e3a12aa6791a69b5", 0x0, 0x1000009, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 14m20.527093519s ago: executing program 1 (id=51): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x4000000000091}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r3, &(0x7f0000000000)={0x1f, 0x3, @fixed}, 0xe) getsockopt$bt_l2cap_L2CAP_LM(r3, 0x6, 0x3, &(0x7f0000000080), &(0x7f00000000c0)=0x4) syz_usbip_server_init(0x1) socketpair$unix(0x1, 0x5, 0x0, 0x0) r4 = syz_clone(0xe1fa14e69f75bcc4, 0x0, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x80040, 0x1b3) syz_mount_image$squashfs(&(0x7f0000000040), &(0x7f00000001c0)='./file1\x00', 0x1, &(0x7f00000000c0)=ANY=[], 0x1e, 0x1b3, &(0x7f00000007c0)="$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") renameat2(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000000440)='./file2\x00', 0x0) prlimit64(r4, 0xe, 0x0, 0x0) syz_mount_image$hfsplus(&(0x7f0000000100), &(0x7f0000000080)='./file0\x00', 0x80, &(0x7f0000000d00)=ANY=[@ANYBLOB='nobarrier,nls=ascii,part=0x0000000000000000,force,gid=', @ANYRESHEX=0x0, @ANYBLOB=',nobarrier,gid=', @ANYRESHEX=0x0, @ANYBLOB="000065065c2c02cb7bcb357d17e2cc8a0aec433b5bae96a1a082d7f7ddaa8ca4a14bc1cc76e0cc76921188f1c9b18a8e3f8500e43b32b26ba6d4446e31f345208f875eed32685a606e4cb67bca3fe0643920420dc97a02c30bd6b8e51b69a186b2b925724a316eeb6c9c95a5f8c6ceb159c2b272de3c1c137f60b8f828b70af989f64803370f598de2e4dd5bb493752cda80106885c423084694d9326e2423ff23d04a06005828082622818edc7ebadf3d0b63975f3ec2eb8e64070050dc73c9f7caafc2b439fc9ce0d6"], 0x44, 0x739, &(0x7f0000001840)="$eJzs3U1sHGf5APBndtdrbyq52yZp+/8LKVYjImggsbOUBAkJU1XIhwoicenVJE5jZe0G20VOhIgDFI5wQjn0UITMoSfUA1IRh4pyRkLiinyP1HvVQwfN7Oxmd23vruP4g/D7SbPzzsz78czjmXfX40QbwP+suTdjbCOSmDv/xnq2vbXZaG5tNpba5YgYj4hSRKW1imQ5IvkkYjZaS/xftrPoLtltnFcffvTeuQcfNFpblWLJ65cGtXskHTDCRrHEVESUi3VM7CkTld36uxavtfrrcm9PXSeduLOEnW0nDo5a2pEU5Y29NB/hvgWOu3sR5bEd9tcjThRvpdnngChmh9Ihh/fE7WmWAwAAgOOpPKzCsxFJrMfk4YQDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAT4ek9Z2BSbGU2uWpSNrf/18t9mWq1SOOd7CvDTn+7o1DCgQAAAAAAAAADsSHxR/uz3wWn8V6TLb3p0n+N/+X841T+esz8U6sxkKsxIVYj/lYi7VYiZmIscmuDqvr82trKzPbW/4uspZpmt4rWl6KiPq2lpd2CbT0hE8cAAAAAAAAAJ4a6b2ujZ/HXEweYTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALBNElFurfLlVLtcj1IlIiYioprV24j4a7t8XPzgMdp8fABxAAAAwDFTK9aTyRetQprkv/O/kP/ePxHvxHKsxWKsRTMW4nr+LKD1W3/pnxuN5tZmYylbtnf83U/3FEfeY0SU4/4uI0/nNU53WszF9+KHcT6m4mqsxGL8JOZjLRZiKmrZScR8JFGvtZ5e1Ntx7hzvbM/W1U4pbZ3tmb5YX8ojqcWNWMxjuxDXqtF6bJKfQzbmS12j/bka0Tfi/Sw7yXcKI+boetfP67fFc5l2pM+O2MfBqOdnPtbJyHSW+yIbzw3O/cDr5MdDR5qJUucZ1KlihI+3NrPN/pHaOf/RXnJ+orWayF5+1ZvzJ23Ao7SxHfb1Z+JSlIqrL+KF3pzf/vKD53sbf/Vff7t6s7QcX6Tp+QM8pf2YGlahk5T+TDS6MvHi4KuvyERz+dbNGxsjZWI2dvp5TIzQ8hBUi2zkU9GIs+XreWk+Xu66BN+O67EQl2M6ZuJKTMe34lI0OldYtpzuyWulsdSbk/xeK22f32oDgj/7la5Kvx5S+XBleXmuK6/dM109P1bsmf1NTHddfc8Pvvruf/p68ch6xBkpG///i3I2xi867zjHQU8mirm5Hd3JwZn4fZq9rjaXb63cnL894njninV2277bOzf/YfSo+9/d96MdQXa9ZDNuJd/Kc1JuXy/ZsZOdur35qhZ/cWm1K66zk4+One4cq8dkLMb3d71Tq8VnuJ6eiveJ7NiL3cf+/WjmrBafb9rHej7lxNvRzD+F9Bk6VQNwyE68cqJae1j7R+392i9rN2tvTLw2fmX8S9UY+3vlL+U/lf5Y+nbySrwfP4vJo44UAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACeBqt37t6abzYXVjqFmOjf01Uo7X5o90J117EGF6I0tM7mM6N1GPWIwWMlRaH6GCf4lBVq0ben/f1G++35w4jIC+V2oadOdd/BJ0OvsVLsc4gsD08kz2naSmq+Jy3voXml3WrnOpVYnYhb80ml7477PE3T8c5dMJH/CD5P0+46tei6ZfqMH96kBByKi2tLty+u3rn79cWl+bcW3lpYvnTl8pXLjW/OfOPijcXmwnTr9aijBA7C6p275R127/TNwwAAAAAAAAAAAMAxUfzr/7XH/s8MlSF1qiurO4985rBPFQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPgvNfdmjG1EEjPTF6az7a3NRjNbIurd1UqPVslPI5JPImajtfRUTHYb59WHH7137sEHjdZWpVjy+qVB7UazUSwxFRHlYj3c+A7dbO/vWld/G48VXtI5wyxhZ9uJg6P2nwAAAP//8wz0vQ==") ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000005c0)='./file1\x00', 0x8205, &(0x7f00000004c0)={[{@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x8}}, {@data_err_abort}, {@grpid}, {@errors_remount}, {@abort}, {@stripe={'stripe', 0x3d, 0x7}}, {@test_dummy_encryption}, {@min_batch_time={'min_batch_time', 0x3d, 0x57b}}]}, 0x1, 0x618, &(0x7f0000000640)="$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") mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) mkdirat(0xffffffffffffff9c, 0x0, 0x110) memfd_create(&(0x7f0000000180)='\b\x9dF\xd8\b\xb3~u\xa5\"\xdc\xfdq\xf6c\r;\xfcO\x8c=\x81\xb1\xfa\x8b\x8aWpA\xd4\x98\x85K\x89>N\x8ar\x17O\x0fKR\xe2{mn\xcc\xbf2\xc0\xa7\x14\xd0\xd4\xfe/m\xdf\xb6]\xc2\xaa\x86\xec(\xf7\xcd\xa6\xd9n^.\x13*\xd4\xb8\xe8\xc4\xefb\x14Vx\xc6\xfe\x9e\xee\xe7\xd7E\xe9\t\x83\xdeNX\xec\xe66\x1b\x97$\xee\x845n,B\xd5?\xe5E:+Pm\x1d\xb4\xb8\xeb\xe8Op2\x82\xc7\x0e\x97\x03\xef\x1a\xa5\x00.\x89\b!m\f\xd9\x8b$}\x9f\fX\x81\xa8\xf6\x94\xbc\xed\x80|l]\xe9\xca\xd3\xc9\xa3\x9e\x9cJI\xf1\xa2\xa0\xc4:\x00\x00\x00\x00\x00\x00\b\xfey\bJ\x86\x8d\xdf\x16\xbb3\x85\xf5\xe0zYe\xc2\n\x0f\x87\xc4\x8f\x8e\xec\xee\xcd\f\xe9\xc8\xbc\x97,\xb7!\xf2\x93\xd3\t\xd9=\x93\x1d\x945\x97\x1e\x9d\xa6\xe9\xa6\xf9p,\xf7v>\xcd\xd9\xc4\x1b\x9c(\xb8\x90\xdeg\xbf[n\x82\x96\xaev\xd4\xac \x14\xf0\x18@\xc3\xf1\xe2\x14\x1c\x0f\xa4-\xde\xae\xfa;\xaf\xae\x06\x9ag\x02\x98\xd0C2\xe7?\xfb\xb01\x9d\xf8\xd3Q\xb3\xb2\x18V\xe8\x8c\x87\xf4\t\x1c\x85\xa4\xc1\xb1\xf4k!G\xf5\xbb\xbbs&\xeac\xb3\xafW\x846\v\xb3\xca\xeb\xb7\x9e\x9e#]\x10lj\xaf\xaf\xd1\'{\x11\xaa,\x0f\xc5OY\"\x82\x84\xb6:J\x8c\xf37\x1d\xca\xf1\xef\x9f\xcf\a\xcf\xcb', 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) 14m16.333756588s ago: executing program 1 (id=56): readv(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @remote}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000001580)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x84}, @in=@local, 0x0, 0x0, 0x4e22, 0x0, 0x2, 0x0, 0x20, 0x11}, {0x0, 0x0, 0x8, 0x0, 0x1, 0x0, 0x10, 0x9}, {}, 0x1, 0x0, 0x1}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x4d2, 0x33}, 0x0, @in=@private=0xa010100, 0x3506, 0x0, 0x2, 0xb7, 0x1, 0x6, 0x7}}, 0xe8) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x1c) 14m11.525373267s ago: executing program 1 (id=68): fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x1, 0x0) syz_mount_image$hfsplus(&(0x7f0000000100), &(0x7f0000000280)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000010, &(0x7f0000000000)=ANY=[], 0x1, 0x6eb, &(0x7f0000001240)="$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") prlimit64(0x0, 0xe, 0x0, 0x0) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) socket$igmp6(0xa, 0x3, 0x2) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = syz_open_dev$sndctrl(&(0x7f00000003c0), 0x33f, 0x180) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r1, 0xc1105511, &(0x7f00000006c0)={{0x5, 0x4, 0xfffffffb, 0x2, 'syz1\x00'}, 0x3, 0x400, 0x2, 0x0, 0x0, 0xa8e, 'syz1\x00', 0x0}) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x140, 0x82) r3 = fanotify_init(0x81, 0x40000) fanotify_mark(r3, 0x105, 0x40001032, r2, 0x0) read$FUSE(r3, 0x0, 0x0) r4 = creat(&(0x7f00000000c0)='./file0\x00', 0xdafbe5d6891b7ec) write$binfmt_elf32(r4, &(0x7f0000000200)=ANY=[@ANYBLOB="7f454c46800c0d00012000000100000041df02003e00fb0d0000dd0000003800000045030000080000000100200001000400090000000000000003000070f00500000f0000008900000002000000050000000400000004000000"], 0x58) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000005e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$F2FS_IOC_MOVE_RANGE(r6, 0x541b, &(0x7f0000000000)={0xffffffffffffffff, 0x8e59, 0x0, 0x3}) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) r7 = open$dir(&(0x7f0000000140)='./file0\x00', 0x1, 0x27) r8 = inotify_init1(0x800) inotify_add_watch(r8, &(0x7f0000000380)='./file0\x00', 0x10000040) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) ftruncate(r9, 0x2000009) sendfile(r7, r9, 0x0, 0x20000000000006) 13m55.491852621s ago: executing program 32 (id=68): fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x1, 0x0) syz_mount_image$hfsplus(&(0x7f0000000100), &(0x7f0000000280)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000010, &(0x7f0000000000)=ANY=[], 0x1, 0x6eb, &(0x7f0000001240)="$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") prlimit64(0x0, 0xe, 0x0, 0x0) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) socket$igmp6(0xa, 0x3, 0x2) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = syz_open_dev$sndctrl(&(0x7f00000003c0), 0x33f, 0x180) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r1, 0xc1105511, &(0x7f00000006c0)={{0x5, 0x4, 0xfffffffb, 0x2, 'syz1\x00'}, 0x3, 0x400, 0x2, 0x0, 0x0, 0xa8e, 'syz1\x00', 0x0}) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x140, 0x82) r3 = fanotify_init(0x81, 0x40000) fanotify_mark(r3, 0x105, 0x40001032, r2, 0x0) read$FUSE(r3, 0x0, 0x0) r4 = creat(&(0x7f00000000c0)='./file0\x00', 0xdafbe5d6891b7ec) write$binfmt_elf32(r4, &(0x7f0000000200)=ANY=[@ANYBLOB="7f454c46800c0d00012000000100000041df02003e00fb0d0000dd0000003800000045030000080000000100200001000400090000000000000003000070f00500000f0000008900000002000000050000000400000004000000"], 0x58) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000005e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$F2FS_IOC_MOVE_RANGE(r6, 0x541b, &(0x7f0000000000)={0xffffffffffffffff, 0x8e59, 0x0, 0x3}) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) r7 = open$dir(&(0x7f0000000140)='./file0\x00', 0x1, 0x27) r8 = inotify_init1(0x800) inotify_add_watch(r8, &(0x7f0000000380)='./file0\x00', 0x10000040) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) ftruncate(r9, 0x2000009) sendfile(r7, r9, 0x0, 0x20000000000006) 12m52.362237654s ago: executing program 4 (id=192): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340), 0x48) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x2, r0, 0x4}, 0x38) 12m51.743384933s ago: executing program 4 (id=193): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x800, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x770, 0x0, 0xbabd}, 0x1c) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$sock_int(r1, 0x1, 0x28, &(0x7f0000000340)=0xa, 0x4) syz_emit_ethernet(0x0, 0x0, 0x0) 12m51.297799093s ago: executing program 4 (id=195): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000003c0)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f00000004c0)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101}) write$cgroup_devices(r2, &(0x7f0000000280)=ANY=[@ANYBLOB="1e030600bc5cb60128876360864666702c1ffe80000000000000", @ANYRESDEC], 0xffdd) 12m49.256621304s ago: executing program 4 (id=200): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendto$inet6(r1, &(0x7f0000000400)="2ae0e710", 0x4, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1}, 0x1c) setsockopt$inet6_int(r1, 0x29, 0x31, &(0x7f00000000c0)=0x6, 0x4) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsopen(0x0, 0x0) recvmmsg(r1, &(0x7f0000006700)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/31, 0x1f}, 0x11}], 0x621, 0x10162, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) 12m45.885038995s ago: executing program 4 (id=205): prctl$PR_GET_PDEATHSIG(0x2, &(0x7f0000000080)) syz_mount_image$udf(&(0x7f0000000100), &(0x7f0000000f00)='./file0\x00', 0x0, &(0x7f0000001000)=ANY=[@ANYBLOB='dmode=00000000000000000007777,noadinicb,gid=', @ANYRESDEC=0x0, @ANYBLOB="2c7569643d666f726765742c6e6f7374726963742c756d61736b3d30303030303030303030303030303030303030303030322c6c6f6e6761642c62733d30303030303030303030303030303030313030302c00006f727461642c746e686964652c00324c44fb627b4dc1c315e407c4"], 0xfc, 0xc44, &(0x7f0000000200)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x80, 0x0) syz_mount_image$udf(&(0x7f0000000100), &(0x7f0000000f00)='./file0\x00', 0x0, &(0x7f0000001000)=ANY=[@ANYBLOB='dmode=00000000000000000007777,noadinicb,gid=', @ANYRESDEC=0x0, @ANYBLOB="2c7569643d666f726765742c6e6f7374726963742c756d61736b3d30303030303030303030303030303030303030303030322c6c6f6e6761642c62733d30303030303030303030303030303030313030302c00006f727461642c746e686964652c00324c44fb627b4dc1c315e407c4"], 0xfc, 0xc44, &(0x7f0000000200)="$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") socket$inet(0x2, 0x4000000000000001, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$alg(r3, &(0x7f0000008dc0)={0x0, 0x0, &(0x7f0000008cc0)=[{&(0x7f0000008a40)}], 0x1}, 0x0) symlink(&(0x7f0000004500)='./file1/file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x84022, &(0x7f0000000240)={[{@nr_inodes={'nr_inodes', 0x3d, [0x6b]}}]}) mkdir(&(0x7f0000000000)='./control\x00', 0x85) rmdir(&(0x7f0000000040)='./control\x00') 12m41.672046563s ago: executing program 4 (id=213): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r0, &(0x7f0000000080)=ANY=[], 0x12) 12m21.770172864s ago: executing program 33 (id=213): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r0, &(0x7f0000000080)=ANY=[], 0x12) 9m45.029626621s ago: executing program 0 (id=405): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x82402, 0x0) pwrite64(r1, &(0x7f0000000080)="3d8b54d3cd64a56ed6c98e51902eb0b9858df0781153cf9ac7d6117d149b5ef1326eee1992657871336845d33e947fdafb3fef42f28d1974830b05c149ccc4e580387a02fa3b77b08b03c8de51bdc7ebd6fb53ab9a2c2abff287036044e3b7eedc0120f4614675f8021a0e6e88e6253fa74d708d2847cc38b3f4911365a3f0593a87106bd6117fe5d1b8d72f07d261f42e38865b7060e16c", 0x98, 0xc) r2 = socket$netlink(0x10, 0x3, 0x10) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f0000000180)=0x10000800, 0x4) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r2) sendmsg$NL80211_CMD_SET_COALESCE(r3, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="14004bd6", @ANYRES16=r4, @ANYBLOB="000428bd7000fedbdf2565000000"], 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x800) 9m44.06293623s ago: executing program 0 (id=407): r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) ioctl$EVIOCGMASK(r0, 0x80104592, &(0x7f0000000300)={0x0, 0x8, &(0x7f0000000200)="952bb3e006ae9a4c"}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x2, &(0x7f00000003c0)=[{0x74, 0x0, 0x0, 0x1}, {0x6}]}) ftruncate(0xffffffffffffffff, 0x6000000) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'dummy0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000100)=ANY=[@ANYBLOB="400000001000030400000000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="15020000000000002000128008000100687372001400028008000100", @ANYRES32=r3, @ANYBLOB="08000200", @ANYRES32=r1], 0x40}, 0x1, 0xba01, 0x0, 0x4000044}, 0x6010) ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(r1, 0x4008941a, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x4c}}, 0x884) copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f00000004c0)=0x100, 0x9, 0x0) ioctl$EVIOCGMASK(r0, 0x80104592, 0x0) 9m42.70394131s ago: executing program 0 (id=410): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f0000000440)=[{0x20, 0x2, 0x81, 0xfffff034}, {0x20, 0x0, 0x0, 0xfbfff010}, {0x6, 0x0, 0x0, 0x3}]}, 0x10) syz_emit_ethernet(0x7a, &(0x7f0000000280)={@local, @local, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "92c01f", 0x44, 0x2f, 0x0, @remote, @ipv4={'\x00', '\xff\xff', @private}, {[], {{0x0, 0x0, 0x1, 0x0, 0x2, 0x1}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x57}}}}}}}, 0x0) 9m41.831517713s ago: executing program 0 (id=411): syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='mnt\x00', 0x4, &(0x7f0000000000), 0x0, 0x236, &(0x7f0000000300)="$eJzs3TFoM2UcBvDnLomf/b4gVRdBUEFEtFDqJrjURaEgpYgIKlREXJRWqC1urZOLg84qnVyKuFkdpUtxUQSnqh3qImhxsDjoELlcK9VGFFNz8t3vB5fcJe97//e4e95kOS5Aa00nmU/SSTKTpJekON/grnqZPt3cntpfTgaDx38shu3q7dpZv2tJtpI8mGSvLPJiN9nYffro54NH731jvXfPe7tPTU30IE8dHx0+dvLu4usfLjyw8fmX3y8WmU//D8d1+YoRn3WL5Jb/otj/RNFtegT8E0uvfvBVlftbk9w9zH8vZeqT9+baDXu93P/OX/V964cvbp/kWIHLNxj0qt/ArQHQOmWSfopyNkm9Xpazs/V/+K87V8uXVtdemXlhdX3l+aZnKuCy9JPDRz6+8tG1P+X/u06df+D6VeX/iaWdb6r1k07TowEmqcr/zLOb90X+oXXkH9pL/qG95B/aS/6hveQf2kv+ob3kH9pL/qG95B/a63z+AYB2GVxp+g5koClNzz8AAAAAAAAAAAAAAAAAAMBF21P7y2fLpGp++nZy/HCS7qj6neHziJMbh69XfyqqZr8r6m5jeebOMXcwpvcbvvv6pm+brf/ZHc3W31xJtl5LMtftXrz+itPr79+7+W++7z03ZoExPfRks/V/3Wm2/sJB8kk1/8yNmn/K3DZ8Hz3/9KvzN2b9l38ZcwcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABMzG8BAAD//8n0bSk=") r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="b800000010000100"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000008001b0000000000900016806c0001800c000300"], 0xb8}}, 0x0) 9m34.584897113s ago: executing program 0 (id=414): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c0000001000010400c600"/20, @ANYRES32=r2, @ANYBLOB="46060900000000001c00128009000100626f6e64000000000c0002800800040088"], 0x3c}, 0x1, 0x0, 0x0, 0x690}, 0x20048040) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x24004045) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$nl_route(r4, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) 9m32.993698765s ago: executing program 0 (id=418): prlimit64(0x0, 0x6, &(0x7f0000000140), 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000580)=0x2) r0 = getpgrp(0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0xc, 0xfff}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x1, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket$netlink(0x10, 0x3, 0x5) sendmsg$nl_route(r3, 0x0, 0x40811) socket$inet6(0xa, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x3, 0x18, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018030000", @ANYRES32, @ANYBLOB="0000000000000d00b70500000800000085000000730000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000800000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r4, 0x0, 0x10, 0x38, &(0x7f00000006c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000700)=""/8, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 9m16.455900865s ago: executing program 34 (id=418): prlimit64(0x0, 0x6, &(0x7f0000000140), 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000580)=0x2) r0 = getpgrp(0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0xc, 0xfff}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x1, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket$netlink(0x10, 0x3, 0x5) sendmsg$nl_route(r3, 0x0, 0x40811) socket$inet6(0xa, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x3, 0x18, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018030000", @ANYRES32, @ANYBLOB="0000000000000d00b70500000800000085000000730000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000800000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r4, 0x0, 0x10, 0x38, &(0x7f00000006c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000700)=""/8, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 7m33.949921673s ago: executing program 5 (id=91): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) syz_emit_ethernet(0x32, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x10, 0x0, @gue={{0x2, 0x0, 0x2, 0x9c, 0x0, @val=0x80}}}}}}}, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x5, &(0x7f00000000c0)=@framed={{0x18, 0x2}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x7}]}, &(0x7f0000000000)='GPL\x00'}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000280)=ANY=[@ANYRES32=r1, @ANYRES32=r2, @ANYBLOB="05"], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000440)={r1, &(0x7f0000000440), &(0x7f0000000040)=@udp=r0}, 0x20) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x21) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) 2m49.451028798s ago: executing program 2 (id=835): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) pipe2(&(0x7f0000001440)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) splice(r2, 0x0, r1, 0x0, 0x6, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='trans=fd', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) sendmsg$NFNL_MSG_CTHELPER_GET(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000010901"], 0x14}}, 0x800) 2m48.276885538s ago: executing program 2 (id=839): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) syz_emit_ethernet(0x32, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x10, 0x0, @gue={{0x2, 0x0, 0x2, 0x9c, 0x0, @val=0x80}}}}}}}, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x5, &(0x7f00000000c0)=@framed={{0x18, 0x2}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x7}]}, &(0x7f0000000000)='GPL\x00'}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000280)=ANY=[@ANYRES32=r1, @ANYRES32=r2, @ANYBLOB="05"], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000440)={r1, &(0x7f0000000440), &(0x7f0000000040)=@udp=r0}, 0x20) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x21) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) recvmmsg(r0, &(0x7f0000000080)=[{{0x0, 0x0, &(0x7f0000000200)=[{0x0}], 0x1}, 0x1ff}], 0x1, 0x4, 0x0) 2m46.867197645s ago: executing program 2 (id=842): syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB], 0x34}}, 0x40) r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x3d, &(0x7f0000000040)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7ffffdbd}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000100)={0x3, &(0x7f00000000c0)=[{0x113, 0x4, 0x20, 0x3}, {0x9, 0xff, 0x2b}, {0x7, 0x8, 0x9, 0x46d}]}) r1 = socket(0x20000000000000a, 0x2, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) r2 = shmget$private(0x0, 0x800000, 0x1, &(0x7f0000173000/0x800000)=nil) shmat(r2, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff) shmctl$SHM_LOCK(r2, 0xb) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x17) shmctl$SHM_UNLOCK(r2, 0xc) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x48, &(0x7f00000000c0)={0x0, 0x0}, 0x10) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) tkill(r3, 0x2e) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="64100000", @ANYRES16=r0, @ANYBLOB="07000000000000000000050000003800038028000380faff0180080001000700000008000100060000000800010003000000080001004d330000080002000900000004000100180001801400020073797a5f74756e0000000000000000000000020004000000"], 0x64}}, 0x0) 2m45.231269734s ago: executing program 2 (id=844): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x380000c, &(0x7f0000000340)={[{@max_batch_time={'max_batch_time', 0x3d, 0x4}}, {@max_batch_time={'max_batch_time', 0x3d, 0x2}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@debug}, {@data_journal}]}, 0x1, 0x437, &(0x7f0000000900)="$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") open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f00000003c0)='./bus\x00', 0x0, 0x5000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x8000, 0xa0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x8005, 0x0, 0x0, 0x14, 0xd, "ef359f413bb9386ff7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e7376b7a5ff537ed73ac58818d78c660e677df8dc905b90242b7c528a076d2f6a00400", "036c5bc6780820d1cbf7966d61fdcf335263bd9b0abdc2542ded71038259ca171ce1a311ef545032d71e14ef3dc177e9b48b001d00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x8]}) lsetxattr$trusted_overlay_upper(&(0x7f00000000c0)='./file1\x00', &(0x7f0000000100), 0x0, 0x0, 0x2) 2m43.827583943s ago: executing program 2 (id=847): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r0, 0x0, 0xe, 0x9, &(0x7f0000000100)="c89bd049f0000000000000001002", 0x0, 0x9fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) 2m36.377952498s ago: executing program 2 (id=859): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000001480)=[{{0x0, 0x0, &(0x7f0000000040)}}, {{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000001500)="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", 0x6da}], 0x1}}], 0x2, 0x2090) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 2m32.034820561s ago: executing program 35 (id=859): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000001480)=[{{0x0, 0x0, &(0x7f0000000040)}}, {{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000001500)="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", 0x6da}], 0x1}}], 0x2, 0x2090) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 18.81879684s ago: executing program 3 (id=960): syz_mount_image$ext4(&(0x7f00000005c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f0000000740)={[{@nojournal_checksum}, {@orlov}]}, 0x1, 0x5bc, &(0x7f0000001440)="$eJzs3V2IXGcdB+D/md1N87E1H7Zqa2xWQ20gdGez2YREvLDEj1qTWlG8CIWwZKe7IbM7a3YD3algizeiIII3IggVe2FFNJCbSqntRYs3Ckr9oKIxoIIIRSsFEdSRdz620+akCe7uHJrzPHBm3/Oe2X3f2eE355w57zkngNIaSw9ZxGhEXIyI7Z3Z1z9hrPOjefDCXJqyaLU+/bes/byZgxfmek/t/d629DAcsTkidh3LYu/Ile0urTTPTtfrtXPd+ery/GJ1aaV595n56dnabG3h0JGpo5OHp45Mrd9rnfjZ1lv/fOf9l594/p///tZvDv8g9Xe0u6z/dayXsRjr/k9GYmdf/XAWcd96N1aQoc5bHXf21WXDBXaI69Zq7fp+ev/eHhF72/nfHkPRefNeevrBf2yPX91bdB+BjdPqyV/8Sgu4YVXa28BZZTwiOuVKZXy8sw1/S2yt1BtLy/sfapxfmOlsK++IkcpDZ+q1ie6+wo4YydL8gXb5tfnJN8wfjGhvA39paEt7fvx0oz4z6A87oG004tLFz53etO0N+f/LUCf/wI0r5f+XLzz1bCq/OlR0b4BBSvn/3qvznwj5h9KRfygv+Yfykn8oL/mH8pJ/KC/5h/KSfygv+Yfykn8or17+HzhxIh44caLV7J7/vtCYPXN2bvHo5MT4/PnT46cb5xbHZxuN2fYZO/PX/rv1RmPxwGScf7i6XFtari6tNE/NN84vLJ9qn9d/qpZzKQCgACcvb75v557nXsoi4tEPbGlPyabuclmFG1urlUXR5yADxbDrD+XlUm1QXvbxgewayzdfbUF9/fsCDEal6A4AhbnrNsf/oKx8/w/l5ft/KC/b+IDv/6F8fP8P5TV6lft/3dx3766JiHhbRPx0aOSm3r2+gLeU1+3qj0ZcuvSdz1ZX78OtoKCgsFoo7oMKGIzXQl90T4CizBy8MNebBtXmM7ODagnI8/I9nUFAKffN7tRZMrx6bGBkg8YJ7bwjPf7o94/vmxtKU3Q/hzagKSDHo49FxLvy1v9Z+9jAju7zdnWeFrdExK0R8Y6IeOca2/7GpyLG4oVaf538w+Bcb/5vi4i0ur49It4dEbsj4j1rbPsXF1P+f72lv07+oRw+/3zRPQCK8vGniu4BUJSTxhhAaX33kaJ7ABTl6R8W3QOgKF99segeQLk9d09ETOQd/6u0j/f3jHSvC3hT91oAWyJia0Rs655DeHP3HMHtfccMr+XUJyPG4o4f99c5/geD0xv/17xi/F9ldfzfUETsWUMbz3xw9Ct59dO7U/6feKQ3/i9Nqf3eWEBgY738WMTtufnPVsf8ZpFyGvHe/7ONsS9cfjKv/sX7098d+bn8QzFa3454f+TnvyeVqsvzi9Wllebd7ft4z9YWDh2ZOjp5eOrIVLV9iZBq70IhOY7//ZX9efW/m0z5/+Yh+YdipPX/1qvkv3/7/31raOPY1798Mq9+9I8p/7ufffP8V/66KftMe753X4KHp5eXzx2I2JQdv7J+cg0dhRtcLyO9DKX879ubv/+/q/s7af1/LCI+nLYXIuI/EfHfiPhIRHw0Ij4WEfe+SZtfu2v2cl79H55M+X/8rPU/FCPlf+Ya6//0819raGP/vp98Ma/+Q3tS/sd/+6fjDw6nSf4BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA1t/SSvPsdL1eO7eBhaJfIwAAAAAAAJTF/wIAAP//d8Uzog==") quotactl$Q_QUOTAON(0xffffffff80000201, &(0x7f0000000180)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r0, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000ac0)={0x0, 0x0, 0x0, 0x8, 0x200, 0x0, 0x0, 0x20, 0x11, "79820fde98abdd00b771eecbbba14da08fe8cfcf2d39005755e339df6e3474ee07e13a269fce2bb3dc5ed34394903821e81be586d9ee749d76a7285644943ebe", "ba646f857993f0c5787944d335671e614090022d722436df22213419a5999377aead1d59f9928abd899cc24fbe73d652739fc43c0e45ac5209ccdc91ae82cb81", "e461519b104962775f9527ad4d3ff4ad351f4bd845ffcfba9be710877453dd32", [0x1ce, 0x1]}) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x200000c, 0x3032, 0xffffffffffffffff, 0x4000) mkdir(&(0x7f0000000300)='./file0\x00', 0x20) chown(&(0x7f0000000000)='./file0\x00', 0xee00, 0x0) 16.716766967s ago: executing program 3 (id=963): syz_mount_image$hfsplus(&(0x7f00000000c0), &(0x7f00000001c0)='./file1\x00', 0x10, &(0x7f0000000240)=ANY=[], 0x1, 0x6c6, &(0x7f0000002e40)="$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") llistxattr(&(0x7f0000000040)='./file1\x00', 0x0, 0x0) 8.475179784s ago: executing program 6 (id=965): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c40)={0x8, 0x3, &(0x7f0000001300)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000001200)='syzkaller\x00'}, 0x80) r1 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x80) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000003c0)={r0, r2}, 0x10) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c40)={0x8, 0x3, &(0x7f0000001300)=ANY=[], &(0x7f0000001200)='syzkaller\x00'}, 0x94) unshare(0x2040400) r4 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x80) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000003c0)={r3, r5}, 0x10) r6 = fsopen(&(0x7f0000000080)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) r7 = fsmount(r6, 0x0, 0x8) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000340)={r3, r7, 0x0, 0x0, @val=@netfilter={0x0, 0x1, 0x6}}, 0x20) 8.429089643s ago: executing program 3 (id=966): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r0, 0x0, 0x7, 0x0, &(0x7f0000000100)="c89bd049f00000", 0x0, 0x9fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) 7.666744997s ago: executing program 6 (id=967): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) setsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f0000000040)=0x21, 0x4) 7.506501404s ago: executing program 3 (id=968): mmap(&(0x7f00001f1000/0x4000)=nil, 0x4000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000000)={{0x0, 0x0, 0xffffffffffffffff, 0x0, 0x140, 0x1}, 0x1, 0x4}) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x2) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x2, 0x0, &(0x7f0000000300)=0xffffffffffffffa3) r3 = accept4(r2, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000040), r3) recvmmsg(r3, &(0x7f000000a400), 0x6fe, 0x10163, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x80000000) setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000000180)=0x4, 0x4) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='sit0\x00', 0x10) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) ftruncate(r4, 0x2000009) sendfile(r0, r4, 0x0, 0x7ffff004) 7.132904304s ago: executing program 6 (id=969): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) keyctl$set_reqkey_keyring(0xe, 0x3) utime(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x100000001, 0xa08b}) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/time\x00') syz_open_dev$usbfs(&(0x7f0000000040), 0x20000007d, 0x0) ioctl$NS_GET_USERNS(r4, 0xb701, 0x0) r5 = fsmount(0xffffffffffffffff, 0x0, 0x5) fchdir(r5) ioctl$BINDER_GET_FROZEN_INFO(r5, 0xc00c620f, &(0x7f0000000200)={r1}) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000000c0)={'wlan0\x00', &(0x7f0000000300)=@ethtool_regs={0x4, 0x1d29, 0xd1, "82c63687cfda3552604bfd7d2e70eeca98de142db8a2f6b1c39e4fdda0800d072c6f5c168167444f079b0e405526790b4b34d27a16b4ebb6577b395ebc19d368996ff4f28adec3383d7b63b2119349dcac1e4e3f4c964c06e755732a18cd33cc50215682e8cbf4583ccd397bcd8dff8f1e24ef565f31a4edf4f3f2989e2461c58d2b3b036bb16fab4973b75ae7cb2d337ea93d5a576556f90b7166ee29cf8986a175d072b095b520cde6c03adeee4f955666c6673560bc4fb36479cae13f49d5764d0d7e2cc44597a2539635a1a952cae3"}}) 3.571007942s ago: executing program 6 (id=970): add_key(&(0x7f0000000140)='encrypted\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) r0 = request_key(&(0x7f00000008c0)='user\x00', &(0x7f00000000c0)={'syz', 0x0}, &(0x7f00000004c0)='\xfep\xb1\xabK-\x03\x00\xe5\x81\xb8}\xe6^\xab:B3\x00\x00\x00\x1e\x9a&rs\xcf\xd9\xde(\xdet|\xd7\x14\xe7\xe7%6\xc5\xf9\xe5\x1cx\xdf\x85\xbe7\x9e*U\x8d \xa8\'\xff\x0fl7-8Jn\x0e\x86:v\xcc9K\xc18\xd7\xc9\xc3F\xef\xd5F\xd6~k:\xf8\xc6E$\x0f\xb3Q\rI\xeb(\r$\x1aP\xaf\x8a\xdcx%j_\xe5\xa1\xb1\xf6Q\xb8\x88\x93c\a\\\xd3\x03\xfc\xba[b~f\xf3\x88', 0x0) add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)="e6", 0x1, 0xfffffffffffffffd) request_key(&(0x7f00000005c0)='user\x00', 0x0, 0x0, r0) 3.570629627s ago: executing program 3 (id=971): openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x181942, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000180)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@allow_other}]}}) read$FUSE(r0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000540)='mounts\x00') read$FUSE(r1, &(0x7f0000000840)={0x2020}, 0x2020) 3.056171139s ago: executing program 6 (id=972): utimensat(0xffffffffffffffff, &(0x7f00000003c0)='.\x00', &(0x7f00000002c0)={{0x0, 0x3fffffff}}, 0x0) syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000140)='./file1\x00', 0x1005072, &(0x7f0000000b00)=ANY=[], 0xff, 0x1f0, &(0x7f0000000900)="$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") syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x47ad00) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000040)=0x3) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ptrace$ARCH_SHSTK_UNLOCK(0x1e, r3, 0x0, 0x5004) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(0xffffffffffffffff, &(0x7f0000000f80)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000f40)={0x0}, 0x1, 0x0, 0x0, 0x2000c001}, 0x4000) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r1, 0x80045301, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x3c1, 0x3, 0x338, 0x130, 0x268, 0x311, 0x0, 0x268, 0x268, 0x460, 0x460, 0x268, 0x460, 0x9, 0x0, {[{{@uncond, 0x160, 0x108, 0x130, 0x0, {0x9401}, [@inet=@rpfilter={{0x28}, {0x1}}, @common=@unspec=@time={{0x38}, {0x0, 0xffffffff, 0x40000, 0xfffffffc}}]}, @common=@unspec=@NFQUEUE2={0x28}}, {{@ipv6={@mcast1, @mcast2, [0x0, 0xff, 0xffffff, 0xff], [0xff, 0xffffff00, 0xff000000], 'wg0\x00', 'veth1_to_batadv\x00', {}, {}, 0x2e, 0x2, 0x7, 0x8}, 0x0, 0xd0, 0x138, 0xe4030000, {}, [@common=@ipv6header={{0x28}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00', {0x3}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x398) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000180)="10797fcd6cd957d2b903c6bf46b4abf3629ff075475e4bd6e43be1712bf8b4", 0x1f) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000005ec0), 0xffffffffffffffff) socket$inet6_udp(0xa, 0x2, 0x0) syz_io_uring_setup(0x49a, &(0x7f0000000400)={0x0, 0x79af, 0x3180, 0x8000, 0x3c0}, &(0x7f0000000340), &(0x7f0000000040), &(0x7f0000000000)) 3.05589079s ago: executing program 3 (id=973): syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x0, &(0x7f0000000080)={[{@nolazytime}, {@noload}, {@acl}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x1, 0x78f, &(0x7f00000007c0)="$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") socket$nl_route(0x10, 0x3, 0x0) io_setup(0x202, &(0x7f0000000200)=0x0) io_submit(r0, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000000), 0x4000, 0xa00}]) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mknodat$loop(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x1004, 0x1) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001180), 0x42, 0x0) r2 = socket$inet6(0xa, 0x80002, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r3 = getpid() setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000100)='veth1_to_team\x00', 0x10) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf8afb000) r4 = syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r5 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNDETACHFILTER(r5, 0x401054d6, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000032680)=""/102400, 0x19000) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) write$FUSE_STATX(0xffffffffffffffff, 0x0, 0x0) 0s ago: executing program 6 (id=974): socket(0x400000000010, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000100), 0x237}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x1f00, 0x18, 0x19, &(0x7f00000007c0)="9f44948721919580684010a40566", 0x0, 0x7ff, 0x0, 0xb1, 0x0, &(0x7f0000000700)="389ceff69d08b0af1cc71b6262d50660bbaf31a7f8cd6a6f911beb65d5fe6b54bf21a66489121f24fefd198059288c9b735e1898e77a7469489a249292c02a72bc193a3008ebdbf4e9dd4ee8fcceef55402c913c8dd0ebece1330aaa93ece835c5044a246a5967e3acd7c950b3b19f351830e545eb9bc3a9c6dd22ce97f1f857cfe8b68a2370b69ea336006b589368f92deb68f3dfc6f2bfee09f8342da437fce5dcdf658e453e3132bb42067575318c39", &(0x7f0000000380)="8c5911c525f5cf4c4ecf207ad2ec", 0x0, 0x0, 0xffffffff}, 0x23) kernel console output (not intermixed with test programs): parsing attributes in process `syz.3.690'. [ 758.534609][ T9324] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 758.842212][ T5684] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 759.036640][ T5684] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 759.064088][ T5684] usb 4-1: config 1 interface 0 altsetting 13 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 759.095424][ T5684] usb 4-1: config 1 interface 0 has no altsetting 0 [ 759.100162][ T35] team0 (unregistering): Port device team_slave_1 removed [ 759.112092][ T5684] usb 4-1: New USB device found, idVendor=05ac, idProduct=0223, bcdDevice= 0.40 [ 759.128294][ T5684] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 759.133435][ T35] team0 (unregistering): Port device team_slave_0 removed [ 759.139215][ T5684] usb 4-1: Product: syz [ 759.149012][ T5684] usb 4-1: Manufacturer: syz [ 759.156728][ T5684] usb 4-1: SerialNumber: syz [ 759.858644][ T5684] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/input/input13 [ 759.870378][ T5583] Bluetooth: hci5: command tx timeout [ 759.907996][ T4917] bcm5974 4-1:1.0: could not read from device [ 759.979569][ T4917] bcm5974 4-1:1.0: could not read from device [ 760.014927][ T5684] usb 4-1: USB disconnect, device number 15 [ 760.195221][ T5583] Bluetooth: hci6: command tx timeout [ 761.950469][ T5583] Bluetooth: hci5: command tx timeout [ 762.260790][ T5669] vhci_hcd vhci_hcd.3: vhci_device speed not set [ 762.272309][ T5583] Bluetooth: hci6: command tx timeout [ 762.743621][ T35] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 763.528686][ T35] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 765.496501][ T9366] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 767.074548][ T9254] bridge0: port 1(bridge_slave_0) entered blocking state [ 767.092678][ T9254] bridge0: port 1(bridge_slave_0) entered disabled state [ 767.107579][ T9254] bridge_slave_0: entered allmulticast mode [ 767.118628][ T9254] bridge_slave_0: entered promiscuous mode [ 767.159626][ T9254] bridge0: port 2(bridge_slave_1) entered blocking state [ 767.170747][ T9254] bridge0: port 2(bridge_slave_1) entered disabled state [ 767.178579][ T9254] bridge_slave_1: entered allmulticast mode [ 767.191732][ T9254] bridge_slave_1: entered promiscuous mode [ 767.377317][ T9254] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 767.466930][ T9254] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 767.785267][ T9254] team0: Port device team_slave_0 added [ 768.299155][ T35] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 768.460447][ T9379] netlink: 44 bytes leftover after parsing attributes in process `syz.2.697'. [ 768.483226][ T9254] team0: Port device team_slave_1 added [ 768.816927][ T35] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 769.082027][ T9254] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 769.089428][ T9254] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 769.118006][ T9254] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 769.283222][ T9254] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 769.424028][ T9389] loop3: detected capacity change from 0 to 8 [ 769.442191][ T9389] squashfs: Unknown parameter '' [ 769.609027][ T9389] loop3: detected capacity change from 0 to 1024 [ 769.689063][ T9254] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 769.777791][ T9387] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 769.784531][ T9387] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 769.794603][ T9387] vhci_hcd vhci_hcd.0: Device attached [ 769.947832][ T9389] hfsplus: failed to load extents file [ 770.123514][ T9254] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 770.221338][ T9388] vhci_hcd: connection closed [ 770.223549][ T3297] vhci_hcd vhci_hcd.3: stop threads [ 770.242691][ T5684] usb 39-1: new low-speed USB device number 6 using vhci_hcd [ 770.267298][ T3297] vhci_hcd vhci_hcd.3: release socket [ 770.294545][ T3297] vhci_hcd vhci_hcd.3: disconnect device [ 770.562652][ T9254] hsr_slave_0: entered promiscuous mode [ 770.595762][ T9395] netlink: 8 bytes leftover after parsing attributes in process `syz.2.699'. [ 770.607799][ T9254] hsr_slave_1: entered promiscuous mode [ 770.627761][ T9395] netlink: 8 bytes leftover after parsing attributes in process `syz.2.699'. [ 770.639687][ T9254] debugfs: 'hsr0' already exists in 'hsr' [ 770.659536][ T9254] Cannot create hsr debugfs directory [ 770.700539][ T9396] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 771.022666][ T10] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 771.211114][ T10] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 771.250088][ T10] usb 3-1: config 1 interface 0 altsetting 13 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 771.275533][ T10] usb 3-1: config 1 interface 0 has no altsetting 0 [ 771.296374][ T10] usb 3-1: New USB device found, idVendor=05ac, idProduct=0223, bcdDevice= 0.40 [ 771.317180][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 771.339454][ T10] usb 3-1: Product: syz [ 771.357345][ T10] usb 3-1: Manufacturer: syz [ 771.382727][ T10] usb 3-1: SerialNumber: syz [ 771.664538][ T10] input: bcm5974 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/input/input14 [ 771.696759][ T4917] bcm5974 3-1:1.0: could not read from device [ 771.726113][ T4917] bcm5974 3-1:1.0: could not read from device [ 771.765966][ T4917] bcm5974 3-1:1.0: could not read from device [ 771.808830][ T10] usb 3-1: USB disconnect, device number 13 [ 771.814023][ T4917] bcm5974 3-1:1.0: could not read from device [ 772.681140][ T35] bridge_slave_1: left allmulticast mode [ 772.708249][ T35] bridge_slave_1: left promiscuous mode [ 772.732673][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 772.789244][ T35] bridge_slave_0: left allmulticast mode [ 772.824685][ T35] bridge_slave_0: left promiscuous mode [ 772.853905][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 772.897750][ T35] bridge_slave_1: left allmulticast mode [ 772.901342][ T9421] loop3: detected capacity change from 0 to 1024 [ 772.905766][ T35] bridge_slave_1: left promiscuous mode [ 772.916829][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 772.948432][ T35] bridge_slave_0: left allmulticast mode [ 772.973490][ T35] bridge_slave_0: left promiscuous mode [ 772.988546][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 773.009737][ T9421] syz.3.704: attempt to access beyond end of device [ 773.009737][ T9421] loop3: rw=2057, sector=262, nr_sectors = 65274 limit=1024 [ 773.960735][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 773.979440][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 773.996870][ T35] bond0 (unregistering): Released all slaves [ 774.306316][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 774.329095][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 774.355299][ T35] bond0 (unregistering): Released all slaves [ 774.499679][ T5227] 8021q: adding VLAN 0 to HW filter on device eth7 [ 774.957803][ T9431] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 775.113507][ T35] hsr_slave_0: left promiscuous mode [ 775.149719][ T35] hsr_slave_1: left promiscuous mode [ 775.166252][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 775.199077][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 775.384321][ T35] hsr_slave_0: left promiscuous mode [ 775.390377][ T5684] vhci_hcd vhci_hcd.3: vhci_device speed not set [ 775.503339][ T35] hsr_slave_1: left promiscuous mode [ 775.543762][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 775.575955][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 775.632851][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 775.643320][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 775.720953][ T35] veth0_macvtap: left promiscuous mode [ 775.757946][ T35] veth1_vlan: left promiscuous mode [ 775.776497][ T35] veth0_vlan: left promiscuous mode [ 775.794653][ T35] veth1_macvtap: left promiscuous mode [ 775.809102][ T35] veth0_macvtap: left promiscuous mode [ 775.830648][ T35] veth1_vlan: left promiscuous mode [ 775.847890][ T35] veth0_vlan: left promiscuous mode [ 777.916675][ T35] team0 (unregistering): Port device team_slave_1 removed [ 777.983949][ T35] team0 (unregistering): Port device team_slave_0 removed [ 778.885479][ T35] team0 (unregistering): Port device team_slave_1 removed [ 778.958598][ T35] team0 (unregistering): Port device team_slave_0 removed [ 779.550520][ T9305] bridge0: port 1(bridge_slave_0) entered blocking state [ 779.572454][ T9305] bridge0: port 1(bridge_slave_0) entered disabled state [ 779.593766][ T9305] bridge_slave_0: entered allmulticast mode [ 780.528862][ T9305] bridge_slave_0: entered promiscuous mode [ 782.719304][ T9302] bridge0: port 1(bridge_slave_0) entered blocking state [ 782.772499][ T9302] bridge0: port 1(bridge_slave_0) entered disabled state [ 782.800572][ T9302] bridge_slave_0: entered allmulticast mode [ 782.836154][ T9302] bridge_slave_0: entered promiscuous mode [ 782.892373][ T9305] bridge0: port 2(bridge_slave_1) entered blocking state [ 782.892618][ T9440] netlink: 44 bytes leftover after parsing attributes in process `syz.3.707'. [ 782.903496][ T9305] bridge0: port 2(bridge_slave_1) entered disabled state [ 782.975453][ T9305] bridge_slave_1: entered allmulticast mode [ 783.019665][ T9305] bridge_slave_1: entered promiscuous mode [ 783.107481][ T9302] bridge0: port 2(bridge_slave_1) entered blocking state [ 783.126738][ T9302] bridge0: port 2(bridge_slave_1) entered disabled state [ 783.136678][ T9302] bridge_slave_1: entered allmulticast mode [ 783.158518][ T9302] bridge_slave_1: entered promiscuous mode [ 783.628994][ T9305] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 783.797415][ T9302] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 784.036825][ T9451] loop2: detected capacity change from 0 to 8 [ 784.054128][ T9451] squashfs: Unknown parameter '' [ 784.219117][ T9451] loop2: detected capacity change from 0 to 1024 [ 784.250062][ T9449] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 784.256810][ T9449] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 784.265380][ T9449] vhci_hcd vhci_hcd.0: Device attached [ 784.560590][ T5681] usb 37-1: new low-speed USB device number 9 using vhci_hcd [ 784.779508][ T9451] hfsplus: failed to load extents file [ 784.926317][ T9305] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 784.992559][ T9450] vhci_hcd: connection reset by peer [ 785.012645][ T3297] vhci_hcd vhci_hcd.2: stop threads [ 785.030565][ T3297] vhci_hcd vhci_hcd.2: release socket [ 785.036477][ T3297] vhci_hcd vhci_hcd.2: disconnect device [ 785.077570][ T9302] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 785.208866][ T9305] team0: Port device team_slave_0 added [ 785.374009][ T9456] netlink: 8 bytes leftover after parsing attributes in process `syz.3.711'. [ 785.383856][ T9456] netlink: 8 bytes leftover after parsing attributes in process `syz.3.711'. [ 785.423415][ T9305] team0: Port device team_slave_1 added [ 785.460125][ T9302] team0: Port device team_slave_0 added [ 785.477927][ T9456] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 785.601355][ T9305] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 785.608813][ T9305] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 785.647039][ T9305] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 785.694077][ T9302] team0: Port device team_slave_1 added [ 785.749346][ T9305] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 785.767493][ T9305] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 785.806481][ T9305] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 785.925916][ T9302] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 785.933293][ T9302] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 785.971505][ T9302] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 785.998612][ T9302] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 786.007062][ T9302] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 786.035035][ T9302] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 786.190059][ T30] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 786.287887][ T9305] hsr_slave_0: entered promiscuous mode [ 786.313975][ T9305] hsr_slave_1: entered promiscuous mode [ 786.327327][ T9305] debugfs: 'hsr0' already exists in 'hsr' [ 786.333637][ T9305] Cannot create hsr debugfs directory [ 786.366285][ T30] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 786.379187][ T30] usb 4-1: config 1 interface 0 altsetting 13 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 786.401570][ T30] usb 4-1: config 1 interface 0 has no altsetting 0 [ 786.435318][ T30] usb 4-1: New USB device found, idVendor=05ac, idProduct=0223, bcdDevice= 0.40 [ 786.457783][ T30] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 786.477584][ T30] usb 4-1: Product: syz [ 786.490232][ T30] usb 4-1: Manufacturer: syz [ 786.496959][ T30] usb 4-1: SerialNumber: syz [ 786.646365][ T9465] loop2: detected capacity change from 0 to 1024 [ 786.685271][ T9465] syz.2.714: attempt to access beyond end of device [ 786.685271][ T9465] loop2: rw=2057, sector=262, nr_sectors = 65274 limit=1024 [ 786.687869][ T9302] hsr_slave_0: entered promiscuous mode [ 786.735284][ T9302] hsr_slave_1: entered promiscuous mode [ 786.763413][ T9302] debugfs: 'hsr0' already exists in 'hsr' [ 786.769321][ T9302] Cannot create hsr debugfs directory [ 786.783654][ T30] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/input/input15 [ 786.810492][ T4917] bcm5974 4-1:1.0: could not read from device [ 786.832710][ T4917] bcm5974 4-1:1.0: could not read from device [ 786.857802][ T4917] bcm5974 4-1:1.0: could not read from device [ 786.876906][ T30] usb 4-1: USB disconnect, device number 16 [ 786.903159][ T4917] bcm5974 4-1:1.0: could not read from device [ 788.211153][ T9254] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 788.264457][ T9254] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 788.288019][ T9254] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 788.346977][ T9254] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 788.371035][ T9254] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 788.427338][ T9254] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 788.458138][ T9254] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 788.506678][ T9254] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 789.701172][ T5681] vhci_hcd vhci_hcd.2: vhci_device speed not set [ 790.337366][ T9302] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 790.392313][ T9302] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 790.413638][ T9302] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 790.474646][ T9302] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 790.496448][ T9302] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 790.558596][ T9302] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 791.531339][ T9302] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 791.665178][ T9302] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 793.074051][ T9490] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 794.923697][ T9494] netlink: 8 bytes leftover after parsing attributes in process `syz.3.717'. [ 795.697336][ T9302] 8021q: adding VLAN 0 to HW filter on device bond0 [ 795.720213][ T9305] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 795.794763][ T9305] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 795.900246][ T9305] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 796.002151][ T9305] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 796.062703][ T9305] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 796.154582][ T9305] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 796.178194][ T9305] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 796.238046][ T9305] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 796.305965][ T9254] 8021q: adding VLAN 0 to HW filter on device bond0 [ 796.511882][ T9254] 8021q: adding VLAN 0 to HW filter on device team0 [ 796.715696][ T9302] 8021q: adding VLAN 0 to HW filter on device team0 [ 796.791579][ T6158] bridge0: port 1(bridge_slave_0) entered blocking state [ 796.799270][ T6158] bridge0: port 1(bridge_slave_0) entered forwarding state [ 797.232674][ T9514] loop2: detected capacity change from 0 to 8 [ 797.250331][ T9514] squashfs: Unknown parameter '' [ 797.420869][ T9514] loop2: detected capacity change from 0 to 1024 [ 797.488973][ T9511] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 797.495724][ T9511] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 797.504610][ T9511] vhci_hcd vhci_hcd.0: Device attached [ 797.537646][ T9514] hfsplus: failed to load extents file [ 797.816271][ T9511] loop2: detected capacity change from 0 to 1024 [ 797.863291][ T9511] EXT4-fs: test_dummy_encryption requires encrypt feature [ 798.032744][ T3292] bridge0: port 2(bridge_slave_1) entered blocking state [ 798.040415][ T3292] bridge0: port 2(bridge_slave_1) entered forwarding state [ 798.132666][ T9512] vhci_hcd: connection closed [ 798.135450][ T56] vhci_hcd vhci_hcd.2: stop threads [ 798.191934][ T56] vhci_hcd vhci_hcd.2: release socket [ 798.225194][ T56] vhci_hcd vhci_hcd.2: disconnect device [ 798.233053][ T30] usb 37-1: new low-speed USB device number 10 using vhci_hcd [ 798.242730][ T9243] bridge0: port 1(bridge_slave_0) entered blocking state [ 798.250437][ T9243] bridge0: port 1(bridge_slave_0) entered forwarding state [ 798.267597][ T30] usb 37-1: enqueue for inactive port 0 [ 798.363843][ T30] vhci_hcd vhci_hcd.2: vhci_device speed not set [ 798.383940][ T9243] bridge0: port 2(bridge_slave_1) entered blocking state [ 798.391701][ T9243] bridge0: port 2(bridge_slave_1) entered forwarding state [ 798.688575][ T9522] netlink: 8 bytes leftover after parsing attributes in process `syz.3.723'. [ 798.729107][ T9522] netlink: 8 bytes leftover after parsing attributes in process `syz.3.723'. [ 798.824982][ T9525] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 799.130201][ T5669] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 799.292189][ T9527] loop2: detected capacity change from 0 to 1024 [ 799.327265][ T5669] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 799.366875][ T5669] usb 4-1: config 1 interface 0 altsetting 13 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 799.405383][ T9527] syz.2.724: attempt to access beyond end of device [ 799.405383][ T9527] loop2: rw=2057, sector=262, nr_sectors = 65274 limit=1024 [ 799.422860][ T5669] usb 4-1: config 1 interface 0 has no altsetting 0 [ 799.482926][ T5669] usb 4-1: New USB device found, idVendor=05ac, idProduct=0223, bcdDevice= 0.40 [ 799.513563][ T5669] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 800.150036][ T5669] usb 4-1: Product: syz [ 800.154481][ T5669] usb 4-1: Manufacturer: syz [ 800.159247][ T5669] usb 4-1: SerialNumber: syz [ 800.553561][ T5669] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/input/input16 [ 800.640530][ T4917] bcm5974 4-1:1.0: could not read from device [ 800.663373][ T9305] 8021q: adding VLAN 0 to HW filter on device bond0 [ 800.705458][ T4917] bcm5974 4-1:1.0: could not read from device [ 800.750131][ T5669] usb 4-1: USB disconnect, device number 17 [ 800.768702][ T4917] bcm5974 4-1:1.0: could not read from device [ 800.822540][ T4917] bcm5974 4-1:1.0: could not read from device [ 800.950214][ T9305] 8021q: adding VLAN 0 to HW filter on device team0 [ 801.122742][ T6026] bridge0: port 1(bridge_slave_0) entered blocking state [ 801.130286][ T6026] bridge0: port 1(bridge_slave_0) entered forwarding state [ 801.349194][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 801.356753][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 803.004205][ T29] kauditd_printk_skb: 4 callbacks suppressed [ 803.004280][ T29] audit: type=1326 audit(1779339830.328:536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9557 comm="syz.3.725" exe="/root/ci-upstream-kmsan-gce-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f700399ce59 code=0x0 [ 804.075974][ T5582] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 804.085508][ T5582] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 804.098782][ T5582] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 804.119050][ T5582] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 804.130494][ T5582] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 804.479127][ T9576] netlink: 8 bytes leftover after parsing attributes in process `syz.3.726'. [ 804.684138][ T9302] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 805.844105][ T9593] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 806.168903][ T9243] bridge_slave_1: left allmulticast mode [ 806.208237][ T5582] Bluetooth: hci3: command tx timeout [ 806.245235][ T9243] bridge_slave_1: left promiscuous mode [ 806.289499][ T9243] bridge0: port 2(bridge_slave_1) entered disabled state [ 806.372120][ T9243] bridge_slave_0: left allmulticast mode [ 806.385741][ T9243] bridge_slave_0: left promiscuous mode [ 806.404102][ T9243] bridge0: port 1(bridge_slave_0) entered disabled state [ 807.303789][ T9243] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 807.344319][ T9243] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 807.382484][ T9243] bond0 (unregistering): Released all slaves [ 807.543281][ T9305] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 807.776859][ T9243] hsr_slave_0: left promiscuous mode [ 807.819357][ T9243] hsr_slave_1: left promiscuous mode [ 807.857278][ T9243] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 807.917924][ T9243] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 808.272066][ T5582] Bluetooth: hci3: command tx timeout [ 809.485269][ T9243] team0 (unregistering): Port device team_slave_1 removed [ 809.597940][ T9243] team0 (unregistering): Port device team_slave_0 removed [ 809.972493][ T9632] loop3: detected capacity change from 0 to 8 [ 809.990699][ T9632] squashfs: Unknown parameter '' [ 810.151866][ T9632] loop3: detected capacity change from 0 to 1024 [ 810.183421][ T9629] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 810.190162][ T9629] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 810.198784][ T9629] vhci_hcd vhci_hcd.0: Device attached [ 810.381150][ T5582] Bluetooth: hci3: command tx timeout [ 810.654032][ T9] usb 39-1: new low-speed USB device number 7 using vhci_hcd [ 810.764783][ T9632] hfsplus: failed to load extents file [ 811.051994][ T9630] vhci_hcd: connection reset by peer [ 811.095177][ T1343] vhci_hcd vhci_hcd.3: stop threads [ 811.109731][ T1343] vhci_hcd vhci_hcd.3: release socket [ 811.126312][ T1343] vhci_hcd vhci_hcd.3: disconnect device [ 812.231301][ T9640] netlink: 8 bytes leftover after parsing attributes in process `syz.2.733'. [ 812.266393][ T9640] netlink: 8 bytes leftover after parsing attributes in process `syz.2.733'. [ 812.383228][ T9640] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 812.430368][ T5582] Bluetooth: hci3: command tx timeout [ 812.680370][ T10] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 812.896415][ T10] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 812.975101][ T10] usb 3-1: config 1 interface 0 altsetting 13 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 813.057282][ T10] usb 3-1: config 1 interface 0 has no altsetting 0 [ 813.120034][ T10] usb 3-1: New USB device found, idVendor=05ac, idProduct=0223, bcdDevice= 0.40 [ 813.166384][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 813.210072][ T10] usb 3-1: Product: syz [ 813.214552][ T10] usb 3-1: Manufacturer: syz [ 813.219340][ T10] usb 3-1: SerialNumber: syz [ 813.531909][ T10] input: bcm5974 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/input/input17 [ 813.542034][ T9655] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 813.553038][ T9655] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 813.564547][ T9655] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 813.587417][ T9655] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 813.604905][ T4917] bcm5974 3-1:1.0: could not read from device [ 813.613975][ T9655] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 813.654948][ T4917] bcm5974 3-1:1.0: could not read from device [ 813.673817][ T10] usb 3-1: USB disconnect, device number 14 [ 814.642728][ T9666] netlink: 8 bytes leftover after parsing attributes in process `syz.3.735'. [ 815.614933][ T9680] loop2: detected capacity change from 0 to 1024 [ 815.711413][ T9655] Bluetooth: hci0: command tx timeout [ 815.740126][ T9680] syz.2.738: attempt to access beyond end of device [ 815.740126][ T9680] loop2: rw=2057, sector=262, nr_sectors = 65274 limit=1024 [ 815.862353][ T9] vhci_hcd vhci_hcd.3: vhci_device speed not set [ 816.151025][ T9569] bridge0: port 1(bridge_slave_0) entered blocking state [ 816.189654][ T9569] bridge0: port 1(bridge_slave_0) entered disabled state [ 816.233392][ T9569] bridge_slave_0: entered allmulticast mode [ 816.273622][ T9569] bridge_slave_0: entered promiscuous mode [ 816.323812][ T9569] bridge0: port 2(bridge_slave_1) entered blocking state [ 816.348371][ T9569] bridge0: port 2(bridge_slave_1) entered disabled state [ 816.398716][ T9569] bridge_slave_1: entered allmulticast mode [ 816.456330][ T9569] bridge_slave_1: entered promiscuous mode [ 816.695011][ T5582] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 816.705332][ T5582] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 816.715838][ T5582] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 816.743999][ T5582] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 816.765330][ T5582] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 817.274502][ T9569] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 817.362875][ T9569] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 817.790127][ T5582] Bluetooth: hci0: command tx timeout [ 817.804201][ T9569] team0: Port device team_slave_0 added [ 817.919503][ T9569] team0: Port device team_slave_1 added [ 818.221719][ T9569] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 818.252645][ T9569] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 818.296265][ T9569] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 818.362679][ T1306] ieee802154 phy0 wpan0: encryption failed: -22 [ 818.372727][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 818.398475][ T9569] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 818.416420][ T9569] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 818.474592][ T9569] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 818.920390][ T5582] Bluetooth: hci4: command tx timeout [ 819.097694][ T9569] hsr_slave_0: entered promiscuous mode [ 819.135819][ T9569] hsr_slave_1: entered promiscuous mode [ 819.169387][ T9569] debugfs: 'hsr0' already exists in 'hsr' [ 819.201696][ T9569] Cannot create hsr debugfs directory [ 819.407176][ T9711] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 819.413921][ T9711] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 819.423284][ T9711] vhci_hcd vhci_hcd.0: Device attached [ 819.436543][ T9711] loop3: detected capacity change from 0 to 8 [ 819.445631][ T9711] squashfs: Unknown parameter '' [ 819.485266][ T9711] loop3: detected capacity change from 0 to 1024 [ 819.507131][ T9711] hfsplus: failed to load extents file [ 819.669152][ T9714] vhci_hcd: connection closed [ 819.681610][ T56] vhci_hcd vhci_hcd.3: stop threads [ 819.742352][ T10] usb 39-1: new low-speed USB device number 8 using vhci_hcd [ 819.757055][ T56] vhci_hcd vhci_hcd.3: release socket [ 819.785011][ T56] vhci_hcd vhci_hcd.3: disconnect device [ 819.872181][ T5582] Bluetooth: hci0: command tx timeout [ 819.987985][ T9243] bridge_slave_1: left allmulticast mode [ 820.000008][ T9243] bridge_slave_1: left promiscuous mode [ 820.017531][ T9243] bridge0: port 2(bridge_slave_1) entered disabled state [ 820.054737][ T9243] bridge_slave_0: left allmulticast mode [ 820.073683][ T9243] bridge_slave_0: left promiscuous mode [ 820.104508][ T9243] bridge0: port 1(bridge_slave_0) entered disabled state [ 820.991266][ T5582] Bluetooth: hci4: command tx timeout [ 821.022898][ T9243] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 821.064801][ T9243] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 821.123176][ T9243] bond0 (unregistering): Released all slaves [ 821.709063][ T9733] netlink: 8 bytes leftover after parsing attributes in process `syz.3.744'. [ 821.734231][ T9733] netlink: 8 bytes leftover after parsing attributes in process `syz.3.744'. [ 821.801313][ T9734] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 821.915901][ T9243] hsr_slave_0: left promiscuous mode [ 821.949481][ T9243] hsr_slave_1: left promiscuous mode [ 821.955942][ T5582] Bluetooth: hci0: command tx timeout [ 821.988184][ T9243] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 822.012650][ T9243] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 822.092175][ T7974] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 822.281084][ T7974] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 822.305207][ T7974] usb 4-1: config 1 interface 0 altsetting 13 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 822.319641][ T7974] usb 4-1: config 1 interface 0 has no altsetting 0 [ 822.346848][ T7974] usb 4-1: New USB device found, idVendor=05ac, idProduct=0223, bcdDevice= 0.40 [ 822.362230][ T7974] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 822.388636][ T7974] usb 4-1: Product: syz [ 822.406480][ T7974] usb 4-1: Manufacturer: syz [ 822.412718][ T7974] usb 4-1: SerialNumber: syz [ 822.508813][ T9738] netlink: 8 bytes leftover after parsing attributes in process `syz.2.745'. [ 822.740254][ T9243] team0 (unregistering): Port device team_slave_1 removed [ 822.791636][ T9243] team0 (unregistering): Port device team_slave_0 removed [ 823.070248][ T5582] Bluetooth: hci4: command tx timeout [ 823.146618][ T7974] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/input/input18 [ 823.201213][ T4917] bcm5974 4-1:1.0: could not read from device [ 823.217690][ T5227] 8021q: adding VLAN 0 to HW filter on device eth6 [ 823.225617][ T7974] usb 4-1: USB disconnect, device number 18 [ 823.249377][ T4917] bcm5974 4-1:1.0: could not read from device [ 824.906253][ T10] vhci_hcd vhci_hcd.3: vhci_device speed not set [ 825.160400][ T5582] Bluetooth: hci4: command tx timeout [ 825.342644][ T9654] bridge0: port 1(bridge_slave_0) entered blocking state [ 825.357368][ T9654] bridge0: port 1(bridge_slave_0) entered disabled state [ 825.367554][ T9654] bridge_slave_0: entered allmulticast mode [ 825.379384][ T9654] bridge_slave_0: entered promiscuous mode [ 825.452282][ T9654] bridge0: port 2(bridge_slave_1) entered blocking state [ 825.460837][ T9654] bridge0: port 2(bridge_slave_1) entered disabled state [ 825.468856][ T9654] bridge_slave_1: entered allmulticast mode [ 825.482491][ T9654] bridge_slave_1: entered promiscuous mode [ 825.736350][ T9764] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 825.743096][ T9764] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 825.751393][ T9764] vhci_hcd vhci_hcd.0: Device attached [ 825.764365][ T9764] loop3: detected capacity change from 0 to 8 [ 825.773620][ T9764] squashfs: Unknown parameter '' [ 825.819275][ T9764] loop3: detected capacity change from 0 to 1024 [ 825.844997][ T9764] hfsplus: failed to load extents file [ 826.007030][ T9768] vhci_hcd: connection closed [ 826.013553][ T6158] vhci_hcd vhci_hcd.3: stop threads [ 826.038154][ T9654] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 826.068426][ T6158] vhci_hcd vhci_hcd.3: release socket [ 826.079665][ T6158] vhci_hcd vhci_hcd.3: disconnect device [ 826.110709][ T10] vhci_hcd vhci_hcd.3: vhci_device speed not set [ 826.201660][ T9654] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 826.234023][ T9771] loop2: detected capacity change from 0 to 1024 [ 826.266201][ T9771] syz.2.753: attempt to access beyond end of device [ 826.266201][ T9771] loop2: rw=2057, sector=262, nr_sectors = 65274 limit=1024 [ 826.939682][ T9569] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 827.009755][ T9569] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 827.073009][ T9654] team0: Port device team_slave_0 added [ 827.098870][ T9243] bridge_slave_1: left allmulticast mode [ 827.118922][ T9243] bridge_slave_1: left promiscuous mode [ 827.144502][ T9243] bridge0: port 2(bridge_slave_1) entered disabled state [ 827.196872][ T9243] bridge_slave_0: left allmulticast mode [ 827.222362][ T9243] bridge_slave_0: left promiscuous mode [ 827.245633][ T9243] bridge0: port 1(bridge_slave_0) entered disabled state [ 827.269056][ T9776] netlink: 8 bytes leftover after parsing attributes in process `syz.3.754'. [ 827.795412][ T9243] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 827.816433][ T9243] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 827.845032][ T9243] bond0 (unregistering): Released all slaves [ 827.875626][ T9569] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 827.922636][ T9569] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 827.949520][ T9569] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 827.996603][ T9569] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 828.021935][ T9654] team0: Port device team_slave_1 added [ 828.066304][ T9569] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 828.111202][ T9569] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 828.167403][ T9243] hsr_slave_0: left promiscuous mode [ 828.191904][ T9243] hsr_slave_1: left promiscuous mode [ 828.213592][ T9243] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 828.245339][ T9243] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 828.683801][ T9782] netlink: 8 bytes leftover after parsing attributes in process `syz.3.756'. [ 828.710617][ T9782] netlink: 8 bytes leftover after parsing attributes in process `syz.3.756'. [ 828.759262][ T9783] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 829.050315][ T10] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 829.162018][ T9243] team0 (unregistering): Port device team_slave_1 removed [ 829.225857][ T10] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 829.248581][ T9243] team0 (unregistering): Port device team_slave_0 removed [ 829.256323][ T10] usb 4-1: config 1 interface 0 altsetting 13 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 829.293955][ T10] usb 4-1: config 1 interface 0 has no altsetting 0 [ 829.330222][ T10] usb 4-1: New USB device found, idVendor=05ac, idProduct=0223, bcdDevice= 0.40 [ 829.361738][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 829.381402][ T10] usb 4-1: Product: syz [ 829.394458][ T10] usb 4-1: Manufacturer: syz [ 829.418322][ T10] usb 4-1: SerialNumber: syz [ 830.089433][ T10] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/input/input19 [ 830.133211][ T4917] bcm5974 4-1:1.0: could not read from device [ 830.149007][ T9654] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 830.174843][ T9654] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 830.174966][ T4917] bcm5974 4-1:1.0: could not read from device [ 830.213528][ T10] usb 4-1: USB disconnect, device number 19 [ 830.239245][ T9654] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 830.279697][ T9654] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 830.292114][ T9654] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 830.330928][ T9654] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 831.004265][ T9654] hsr_slave_0: entered promiscuous mode [ 831.025036][ T9654] hsr_slave_1: entered promiscuous mode [ 831.052176][ T9654] debugfs: 'hsr0' already exists in 'hsr' [ 831.066617][ T9654] Cannot create hsr debugfs directory [ 831.235879][ T9688] bridge0: port 1(bridge_slave_0) entered blocking state [ 831.266105][ T9688] bridge0: port 1(bridge_slave_0) entered disabled state [ 831.288884][ T9688] bridge_slave_0: entered allmulticast mode [ 831.313803][ T9688] bridge_slave_0: entered promiscuous mode [ 831.414762][ T9688] bridge0: port 2(bridge_slave_1) entered blocking state [ 831.423808][ T9688] bridge0: port 2(bridge_slave_1) entered disabled state [ 831.432780][ T9688] bridge_slave_1: entered allmulticast mode [ 831.447309][ T9688] bridge_slave_1: entered promiscuous mode [ 831.830726][ T9688] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 831.903548][ T9805] netlink: 4 bytes leftover after parsing attributes in process `syz.3.762'. [ 831.952972][ T9688] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 832.436524][ T9811] netlink: 8 bytes leftover after parsing attributes in process `syz.2.763'. [ 832.700687][ T9688] team0: Port device team_slave_0 added [ 832.757288][ T9688] team0: Port device team_slave_1 added [ 833.305419][ T9688] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 833.333028][ T9688] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 833.354126][ T9819] netlink: 28 bytes leftover after parsing attributes in process `syz.2.765'. [ 833.409966][ T9688] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 833.459453][ T9688] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 833.471268][ T9688] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 833.509176][ T9688] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 833.850045][ T9825] netlink: 8 bytes leftover after parsing attributes in process `syz.2.766'. [ 833.874856][ T9825] netlink: 8 bytes leftover after parsing attributes in process `syz.2.766'. [ 833.931993][ T9826] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 834.004815][ T9688] hsr_slave_0: entered promiscuous mode [ 834.027692][ T9688] hsr_slave_1: entered promiscuous mode [ 834.039264][ T9688] debugfs: 'hsr0' already exists in 'hsr' [ 834.045571][ T9688] Cannot create hsr debugfs directory [ 834.212014][ T5681] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 834.406815][ T5227] 8021q: adding VLAN 0 to HW filter on device eth7 [ 834.453434][ T5681] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 834.470326][ T9569] 8021q: adding VLAN 0 to HW filter on device bond0 [ 834.497827][ T5681] usb 3-1: config 1 interface 0 altsetting 13 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 834.541858][ T5681] usb 3-1: config 1 interface 0 has no altsetting 0 [ 834.569283][ T5681] usb 3-1: New USB device found, idVendor=05ac, idProduct=0223, bcdDevice= 0.40 [ 834.594173][ T5681] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 834.613914][ T5681] usb 3-1: Product: syz [ 834.624946][ T5681] usb 3-1: Manufacturer: syz [ 834.653910][ T5681] usb 3-1: SerialNumber: syz [ 834.824652][ T9569] 8021q: adding VLAN 0 to HW filter on device team0 [ 834.936577][ T5681] input: bcm5974 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/input/input20 [ 834.979334][ T4917] bcm5974 3-1:1.0: could not read from device [ 835.014981][ T4917] bcm5974 3-1:1.0: could not read from device [ 835.038633][ T5681] usb 3-1: USB disconnect, device number 15 [ 835.050410][ T4917] bcm5974 3-1:1.0: could not read from device [ 835.068662][ T4917] bcm5974 3-1:1.0: could not read from device [ 835.391354][ T9243] bridge0: port 1(bridge_slave_0) entered blocking state [ 835.398950][ T9243] bridge0: port 1(bridge_slave_0) entered forwarding state [ 835.486751][ T9243] bridge0: port 2(bridge_slave_1) entered blocking state [ 835.494452][ T9243] bridge0: port 2(bridge_slave_1) entered forwarding state [ 835.679494][ T9654] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 835.727148][ T9842] netlink: 8 bytes leftover after parsing attributes in process `syz.2.772'. [ 835.766334][ T9654] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 835.846917][ T9654] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 835.905508][ T9654] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 835.982555][ T9654] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 836.037769][ T9654] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 836.075427][ T9654] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 836.129514][ T9654] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 836.654942][ T9855] netlink: 12 bytes leftover after parsing attributes in process `syz.2.774'. [ 845.819642][ T9688] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 845.939108][ T9688] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 845.954347][ T9871] loop2: detected capacity change from 0 to 512 [ 846.039303][ T9688] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 846.153794][ T9688] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 846.210972][ T9688] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 846.306997][ T9688] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 846.402464][ T9688] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 846.479215][ T9688] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 846.933327][ T9887] netlink: 8 bytes leftover after parsing attributes in process `syz.2.780'. [ 846.960641][ T9887] netlink: 8 bytes leftover after parsing attributes in process `syz.2.780'. [ 847.017494][ T9888] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 847.253325][ T9654] 8021q: adding VLAN 0 to HW filter on device bond0 [ 847.290364][ T5681] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 847.454376][ T9896] netlink: 8 bytes leftover after parsing attributes in process `syz.3.781'. [ 847.511139][ T5681] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 847.541728][ T5681] usb 3-1: config 1 interface 0 altsetting 13 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 847.562131][ T9654] 8021q: adding VLAN 0 to HW filter on device team0 [ 847.577189][ T5681] usb 3-1: config 1 interface 0 has no altsetting 0 [ 847.619148][ T5681] usb 3-1: New USB device found, idVendor=05ac, idProduct=0223, bcdDevice= 0.40 [ 847.655918][ T5681] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 847.688133][ T5681] usb 3-1: Product: syz [ 847.702126][ T5681] usb 3-1: Manufacturer: syz [ 847.720513][ T5681] usb 3-1: SerialNumber: syz [ 847.732069][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 847.739684][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 847.929086][ T3292] bridge0: port 2(bridge_slave_1) entered blocking state [ 847.936779][ T3292] bridge0: port 2(bridge_slave_1) entered forwarding state [ 848.074965][ T5681] input: bcm5974 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/input/input21 [ 848.123028][ T4917] bcm5974 3-1:1.0: could not read from device [ 848.165563][ T4917] bcm5974 3-1:1.0: could not read from device [ 848.204677][ T5681] usb 3-1: USB disconnect, device number 16 [ 848.225217][ T4917] bcm5974 3-1:1.0: could not read from device [ 848.926360][ T9688] 8021q: adding VLAN 0 to HW filter on device bond0 [ 849.316163][ T9569] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 849.382348][ T9688] 8021q: adding VLAN 0 to HW filter on device team0 [ 849.528954][ T56] bridge0: port 1(bridge_slave_0) entered blocking state [ 849.536722][ T56] bridge0: port 1(bridge_slave_0) entered forwarding state [ 849.716918][ T56] bridge0: port 2(bridge_slave_1) entered blocking state [ 849.724927][ T56] bridge0: port 2(bridge_slave_1) entered forwarding state [ 851.282160][ T9943] netlink: 28 bytes leftover after parsing attributes in process `syz.2.787'. [ 851.538951][ T9945] veth3: entered allmulticast mode [ 852.333641][ T9951] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 852.340398][ T9951] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 852.360284][ T9951] vhci_hcd vhci_hcd.0: Device attached [ 852.375478][ T9951] loop3: detected capacity change from 0 to 8 [ 852.384018][ T9951] squashfs: Unknown parameter '' [ 852.426603][ T9951] loop3: detected capacity change from 0 to 1024 [ 852.452354][ T9951] hfsplus: failed to load extents file [ 852.505781][ T9951] loop3: detected capacity change from 0 to 1024 [ 852.520571][ T9951] EXT4-fs: test_dummy_encryption requires encrypt feature [ 852.673717][ T9952] vhci_hcd: connection closed [ 852.681093][ T3297] vhci_hcd vhci_hcd.3: stop threads [ 852.701558][ T7974] usb 39-1: new low-speed USB device number 9 using vhci_hcd [ 852.727468][ T3297] vhci_hcd vhci_hcd.3: release socket [ 852.770006][ T3297] vhci_hcd vhci_hcd.3: disconnect device [ 852.834076][ T9569] veth0_vlan: entered promiscuous mode [ 853.025769][ T9569] veth1_vlan: entered promiscuous mode [ 853.531092][ T9569] veth0_macvtap: entered promiscuous mode [ 853.672867][ T9569] veth1_macvtap: entered promiscuous mode [ 853.784419][ T9654] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 853.876419][ T9970] netlink: 8 bytes leftover after parsing attributes in process `syz.3.790'. [ 853.962540][ T9569] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 854.043653][ T9569] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 854.188020][ T35] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 854.221699][ T35] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 854.255137][ T35] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 854.284027][ T35] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 854.963211][ T9988] netlink: 8 bytes leftover after parsing attributes in process `syz.2.792'. [ 854.994769][ T9988] netlink: 8 bytes leftover after parsing attributes in process `syz.2.792'. [ 855.088541][ T9988] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 855.376874][ T9688] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 855.394955][ T30] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 855.595983][ T30] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 855.636047][ T30] usb 3-1: config 1 interface 0 altsetting 13 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 855.695875][ T30] usb 3-1: config 1 interface 0 has no altsetting 0 [ 855.757306][ T30] usb 3-1: New USB device found, idVendor=05ac, idProduct=0223, bcdDevice= 0.40 [ 855.789392][ T30] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 855.830860][ T30] usb 3-1: Product: syz [ 855.847745][ T30] usb 3-1: Manufacturer: syz [ 855.866784][ T30] usb 3-1: SerialNumber: syz [ 856.216011][ T30] input: bcm5974 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/input/input22 [ 856.262754][ T4917] bcm5974 3-1:1.0: could not read from device [ 856.292134][ T4917] bcm5974 3-1:1.0: could not read from device [ 856.315173][ T30] usb 3-1: USB disconnect, device number 17 [ 856.341715][ T4917] bcm5974 3-1:1.0: could not read from device [ 856.404112][ T9654] veth0_vlan: entered promiscuous mode [ 856.567021][ T9654] veth1_vlan: entered promiscuous mode [ 857.103073][ T9654] veth0_macvtap: entered promiscuous mode [ 857.243929][ T9654] veth1_macvtap: entered promiscuous mode [ 857.556394][ T9654] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 857.765346][ T9654] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 857.861299][ T7974] vhci_hcd vhci_hcd.3: vhci_device speed not set [ 858.035996][ T5985] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 858.106623][ T5985] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 858.200501][ T5985] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 858.224461][ T5985] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 859.305263][T10042] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 859.312012][T10042] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 859.321404][T10042] vhci_hcd vhci_hcd.0: Device attached [ 859.356731][T10042] loop3: detected capacity change from 0 to 8 [ 859.365576][T10042] squashfs: Unknown parameter '' [ 859.413351][T10042] loop3: detected capacity change from 0 to 1024 [ 859.442290][T10042] hfsplus: failed to load extents file [ 859.508578][ T9688] veth0_vlan: entered promiscuous mode [ 859.606755][T10043] vhci_hcd: connection closed [ 859.615715][ T6026] vhci_hcd vhci_hcd.3: stop threads [ 859.674330][ T6026] vhci_hcd vhci_hcd.3: release socket [ 859.680130][ T7974] usb 39-1: new low-speed USB device number 10 using vhci_hcd [ 859.735567][ T6026] vhci_hcd vhci_hcd.3: disconnect device [ 859.745496][ T9688] veth1_vlan: entered promiscuous mode [ 859.931139][T10052] netlink: 8 bytes leftover after parsing attributes in process `syz.2.799'. [ 860.215711][ T9688] veth0_macvtap: entered promiscuous mode [ 860.367536][ T9688] veth1_macvtap: entered promiscuous mode [ 860.762917][ T9688] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 860.959501][ T9688] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 861.126847][ T1343] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 861.167416][ T1343] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 861.206242][ T1343] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 861.252412][ T1343] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 861.796375][T10077] netlink: 8 bytes leftover after parsing attributes in process `syz.3.803'. [ 861.827801][T10077] netlink: 8 bytes leftover after parsing attributes in process `syz.3.803'. [ 861.956784][T10077] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 862.144890][ T6416] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 862.179454][ T6416] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 862.230333][ T5684] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 862.378553][ T6158] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 862.406400][ T6158] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 862.424271][ T5684] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 862.501642][ T5684] usb 4-1: config 1 interface 0 altsetting 13 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 862.577346][ T5684] usb 4-1: config 1 interface 0 has no altsetting 0 [ 862.635112][ T5684] usb 4-1: New USB device found, idVendor=05ac, idProduct=0223, bcdDevice= 0.40 [ 862.684733][ T5684] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 862.724334][ T5684] usb 4-1: Product: syz [ 862.747606][ T5684] usb 4-1: Manufacturer: syz [ 862.772067][ T5684] usb 4-1: SerialNumber: syz [ 862.834035][T10087] Bluetooth: MGMT ver 1.23 [ 863.140656][ T5684] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/input/input23 [ 863.208291][ T4917] bcm5974 4-1:1.0: could not read from device [ 863.282573][ T4917] bcm5974 4-1:1.0: could not read from device [ 863.324120][ T5684] usb 4-1: USB disconnect, device number 20 [ 863.343687][ T4917] bcm5974 4-1:1.0: could not read from device [ 864.820222][ T7974] vhci_hcd vhci_hcd.3: vhci_device speed not set [ 865.849634][ T9655] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 865.880856][ T9655] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 865.891648][ T9655] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 865.906617][ T9655] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 865.934667][ T9655] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 865.990466][T10114] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 865.997322][T10114] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 866.005983][T10114] vhci_hcd vhci_hcd.0: Device attached [ 866.018939][T10114] loop2: detected capacity change from 0 to 8 [ 866.030124][T10114] squashfs: Unknown parameter '' [ 866.078120][T10114] loop2: detected capacity change from 0 to 1024 [ 866.168594][ T1343] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 866.177606][T10114] hfsplus: failed to load extents file [ 866.261149][ T1343] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 866.340274][T10115] vhci_hcd: connection closed [ 866.346365][ T35] vhci_hcd vhci_hcd.2: stop threads [ 866.384347][ T9] usb 37-1: new low-speed USB device number 11 using vhci_hcd [ 866.419046][ T35] vhci_hcd vhci_hcd.2: release socket [ 866.459231][ T35] vhci_hcd vhci_hcd.2: disconnect device [ 866.694507][ T6026] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 866.740984][ T6026] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 867.017431][T10122] loop3: detected capacity change from 0 to 128 [ 867.138747][T10122] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 867.280398][T10122] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 869.360273][ T5582] Bluetooth: hci5: command tx timeout [ 871.551168][ T5582] Bluetooth: hci5: command tx timeout [ 871.630184][ T9] vhci_hcd vhci_hcd.2: vhci_device speed not set [ 874.122155][ T5582] Bluetooth: hci5: command tx timeout [ 876.190235][ T5582] Bluetooth: hci5: command tx timeout [ 876.256199][T10134] netlink: 24 bytes leftover after parsing attributes in process `syz.6.237'. [ 876.534671][ T3297] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 876.856410][ T3297] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 877.113193][ T3297] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 877.454072][ T3297] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 877.497683][T10147] netlink: 8 bytes leftover after parsing attributes in process `syz.6.814'. [ 877.526911][T10147] netlink: 8 bytes leftover after parsing attributes in process `syz.6.814'. [ 877.647758][T10149] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 877.960821][ T7974] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 878.156219][ T7974] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 878.221800][ T7974] usb 7-1: config 1 interface 0 altsetting 13 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 878.289910][ T7974] usb 7-1: config 1 interface 0 has no altsetting 0 [ 878.339091][ T3297] bridge_slave_1: left allmulticast mode [ 878.358997][ T7974] usb 7-1: New USB device found, idVendor=05ac, idProduct=0223, bcdDevice= 0.40 [ 878.374432][ T3297] bridge_slave_1: left promiscuous mode [ 878.392729][ T9655] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 878.405410][ T9655] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 878.417418][ T9655] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 878.422139][ T7974] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 878.434186][ T3297] bridge0: port 2(bridge_slave_1) entered disabled state [ 878.446753][ T9655] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 878.458759][ T9655] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 878.503020][ T7974] usb 7-1: Product: syz [ 878.523938][ T3297] bridge_slave_0: left allmulticast mode [ 878.540287][ T3297] bridge_slave_0: left promiscuous mode [ 878.551980][ T3297] bridge0: port 1(bridge_slave_0) entered disabled state [ 878.558678][ T7974] usb 7-1: Manufacturer: syz [ 878.628440][ T7974] usb 7-1: SerialNumber: syz [ 879.003758][ T7974] input: bcm5974 as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/input/input24 [ 879.079562][ T4917] bcm5974 7-1:1.0: could not read from device [ 879.136657][ T4917] bcm5974 7-1:1.0: could not read from device [ 879.767535][T10169] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 879.805636][ T1306] ieee802154 phy0 wpan0: encryption failed: -22 [ 879.816640][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 879.906823][ T4917] bcm5974 7-1:1.0: could not read from device [ 879.947976][ T4917] bcm5974 7-1:1.0: could not read from device [ 879.985978][T10168] hub 8-0:1.0: USB hub found [ 879.992062][T10168] hub 8-0:1.0: 1 port detected [ 880.031314][T10174] loop2: detected capacity change from 0 to 8 [ 880.041484][T10174] squashfs: Unknown parameter '' [ 880.083594][T10174] loop2: detected capacity change from 0 to 1024 [ 880.123906][T10173] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 880.130677][T10173] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 880.139642][T10173] vhci_hcd vhci_hcd.0: Device attached [ 880.160493][T10174] hfsplus: failed to load extents file [ 880.211858][T10173] loop2: detected capacity change from 0 to 1024 [ 880.224568][T10173] EXT4-fs: test_dummy_encryption requires encrypt feature [ 880.280076][ T7974] usb 7-1: USB disconnect, device number 2 [ 880.394307][T10175] vhci_hcd: connection closed [ 880.395631][ T1343] vhci_hcd vhci_hcd.2: stop threads [ 880.427354][ T1343] vhci_hcd vhci_hcd.2: release socket [ 880.441512][ T1343] vhci_hcd vhci_hcd.2: disconnect device [ 880.480178][ T9] vhci_hcd vhci_hcd.2: vhci_device speed not set [ 880.510378][ T9655] Bluetooth: hci3: command tx timeout [ 883.052624][ T9655] Bluetooth: hci3: command tx timeout [ 885.071305][ T9655] Bluetooth: hci3: command tx timeout [ 887.200143][ T9655] Bluetooth: hci3: command tx timeout [ 889.375282][T10182] netlink: 24 bytes leftover after parsing attributes in process `syz.6.822'. [ 889.401412][ T3297] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 889.491626][ T3297] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 889.538133][T10185] loop2: detected capacity change from 0 to 128 [ 889.548266][ T3297] bond0 (unregistering): Released all slaves [ 889.560838][T10185] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 889.583805][T10185] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 890.323119][ T30] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 890.570271][ T30] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 890.612529][ T30] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 890.647634][ T30] usb 4-1: Product: syz [ 890.672557][ T30] usb 4-1: Manufacturer: syz [ 890.688911][ T30] usb 4-1: SerialNumber: syz [ 890.841092][T10196] 9p: Could not find request transport: fd0x0000000000000003 [ 890.990316][ T3297] hsr_slave_0: left promiscuous mode [ 891.028627][ T3297] hsr_slave_1: left promiscuous mode [ 891.055398][ T3297] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 891.065750][ T3297] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 891.091948][ T3297] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 891.113712][ T3297] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 891.186851][ T3297] veth1_macvtap: left promiscuous mode [ 891.196162][ T3297] veth0_macvtap: left promiscuous mode [ 891.208467][ T3297] veth1_vlan: left promiscuous mode [ 891.216203][ T30] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 891.234144][ T30] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 891.240871][ T3297] veth0_vlan: left promiscuous mode [ 892.294820][T10189] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 892.307467][T10189] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 892.315253][T10210] netlink: 8 bytes leftover after parsing attributes in process `syz.2.829'. [ 892.327768][T10210] netlink: 8 bytes leftover after parsing attributes in process `syz.2.829'. [ 892.411489][T10211] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 892.712932][ T5681] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 892.909285][ T5681] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 892.978366][ T5681] usb 3-1: config 1 interface 0 altsetting 13 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 893.070471][ T5681] usb 3-1: config 1 interface 0 has no altsetting 0 [ 893.103435][ T5681] usb 3-1: New USB device found, idVendor=05ac, idProduct=0223, bcdDevice= 0.40 [ 893.132467][ T5681] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 893.141792][ T5681] usb 3-1: Product: syz [ 893.146315][ T5681] usb 3-1: Manufacturer: syz [ 893.151792][ T5681] usb 3-1: SerialNumber: syz [ 893.527505][ T3297] team0 (unregistering): Port device team_slave_1 removed [ 893.562313][ T3297] team0 (unregistering): Port device team_slave_0 removed [ 893.750477][ T9] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 893.926992][ T9] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x9 has an invalid bInterval 0, changing to 7 [ 893.950930][ T9] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 893.970281][ T9] usb 7-1: New USB device found, idVendor=05ac, idProduct=030a, bcdDevice=65.8c [ 893.986144][ T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 894.009099][ T9] usb 7-1: config 0 descriptor?? [ 894.086382][T10189] bond0: entered promiscuous mode [ 894.127801][ T9] appletouch 7-1:0.0: Could not find int-in endpoint [ 894.144885][T10189] bond_slave_0: entered promiscuous mode [ 894.145814][ T5681] input: bcm5974 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/input/input25 [ 894.173504][T10189] bond_slave_1: entered promiscuous mode [ 894.196567][ T4917] bcm5974 3-1:1.0: could not read from device [ 894.198970][ T9] appletouch 7-1:0.0: probe with driver appletouch failed with error -5 [ 894.242476][ T4917] bcm5974 3-1:1.0: could not read from device [ 894.256609][ T9] usbhid 7-1:0.0: couldn't find an input interrupt endpoint [ 894.334597][ T4917] bcm5974 3-1:1.0: could not read from device [ 894.384523][ T5681] usb 3-1: USB disconnect, device number 18 [ 894.388419][ T9] usb 7-1: USB disconnect, device number 3 [ 894.439383][ T4917] bcm5974 3-1:1.0: could not read from device [ 894.684675][ T30] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPROTO [ 894.816342][ T30] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 894.865474][ T30] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 894.965093][ T30] lan78xx 4-1:1.0: probe with driver lan78xx failed with error -71 [ 895.072644][ T30] usb 4-1: USB disconnect, device number 21 [ 895.253563][T10221] loop2: detected capacity change from 0 to 8 [ 895.580773][T10226] netlink: 24 bytes leftover after parsing attributes in process `syz.3.834'. [ 895.708618][T10227] loop6: detected capacity change from 0 to 128 [ 895.748980][T10227] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 895.789057][T10227] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 895.806456][ T6416] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 896.250844][ T6416] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 896.355990][T10230] 9p: Could not find request transport: fd0x0000000000000003 [ 896.717168][ T6416] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 896.941540][T10244] netlink: 8 bytes leftover after parsing attributes in process `syz.6.841'. [ 896.970833][T10244] netlink: 8 bytes leftover after parsing attributes in process `syz.6.841'. [ 897.062057][T10247] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 897.350252][ T9] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 897.353532][ T30] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 897.529178][ T9] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 897.547148][ T9] usb 7-1: config 1 interface 0 altsetting 13 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 897.568838][ T9] usb 7-1: config 1 interface 0 has no altsetting 0 [ 897.588499][ T9] usb 7-1: New USB device found, idVendor=05ac, idProduct=0223, bcdDevice= 0.40 [ 897.599088][ T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 897.610758][ T9] usb 7-1: Product: syz [ 897.615386][ T9] usb 7-1: Manufacturer: syz [ 897.622375][ T9] usb 7-1: SerialNumber: syz [ 897.692928][ T30] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 897.702499][ T30] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 897.710907][ T30] usb 4-1: Product: syz [ 897.734691][ T30] usb 4-1: Manufacturer: syz [ 897.739578][ T30] usb 4-1: SerialNumber: syz [ 897.923757][ T6416] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 898.224915][ T9] input: bcm5974 as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/input/input26 [ 898.314958][ T4917] bcm5974 7-1:1.0: could not read from device [ 898.323486][ T30] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 898.350233][ T4917] bcm5974 7-1:1.0: could not read from device [ 898.361595][ T30] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 898.390248][ T4917] bcm5974 7-1:1.0: could not read from device [ 898.409579][ T9] usb 7-1: USB disconnect, device number 4 [ 898.429500][ T4917] bcm5974 7-1:1.0: could not read from device [ 898.564682][ T29] audit: type=1800 audit(1779339925.888:537): pid=10254 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.842" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0 [ 899.495560][T10249] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 899.553947][T10249] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 899.994003][T10112] bridge0: port 1(bridge_slave_0) entered blocking state [ 900.020183][ T30] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPROTO [ 900.055213][T10112] bridge0: port 1(bridge_slave_0) entered disabled state [ 900.074818][ T30] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 900.099286][T10112] bridge_slave_0: entered allmulticast mode [ 900.138634][ T30] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 900.154607][T10266] loop2: detected capacity change from 0 to 512 [ 900.158595][T10112] bridge_slave_0: entered promiscuous mode [ 900.213642][T10266] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 900.238777][ T30] lan78xx 4-1:1.0: probe with driver lan78xx failed with error -71 [ 900.306866][ T6416] bridge_slave_1: left allmulticast mode [ 900.307879][T10266] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c018, mo2=0082] [ 900.315595][ T6416] bridge_slave_1: left promiscuous mode [ 900.351259][ T6416] bridge0: port 2(bridge_slave_1) entered disabled state [ 900.379418][ T30] usb 4-1: USB disconnect, device number 22 [ 900.387375][ T6416] bridge_slave_0: left allmulticast mode [ 900.395429][ T6416] bridge_slave_0: left promiscuous mode [ 900.414886][ T6416] bridge0: port 1(bridge_slave_0) entered disabled state [ 900.427156][T10266] System zones: 1-12 [ 900.497999][T10266] EXT4-fs (loop2): 1 truncate cleaned up [ 900.593543][T10266] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 900.880668][T10266] loop2: detected capacity change from 512 to 64 [ 901.178991][T10276] netlink: 24 bytes leftover after parsing attributes in process `syz.3.846'. [ 901.246935][ T5581] EXT4-fs warning (device loop2): ext4_empty_dir:3114: inode #11: lblock 5: comm syz-executor: error -12 reading directory block [ 901.322942][ T5581] EXT4-fs warning (device loop2): ext4_empty_dir:3114: inode #11: lblock 5: comm syz-executor: error -12 reading directory block [ 901.377127][ T5581] EXT4-fs warning (device loop2): ext4_empty_dir:3114: inode #11: lblock 5: comm syz-executor: error -12 reading directory block [ 901.421975][ T5581] EXT4-fs warning (device loop2): ext4_empty_dir:3114: inode #11: lblock 5: comm syz-executor: error -12 reading directory block [ 901.464176][ T5581] EXT4-fs warning (device loop2): ext4_empty_dir:3114: inode #11: lblock 5: comm syz-executor: error -12 reading directory block [ 901.507854][ T5581] EXT4-fs warning (device loop2): ext4_empty_dir:3114: inode #11: lblock 5: comm syz-executor: error -12 reading directory block [ 901.524636][ T5581] EXT4-fs warning (device loop2): ext4_empty_dir:3114: inode #11: lblock 5: comm syz-executor: error -12 reading directory block [ 901.567492][ T5581] EXT4-fs warning (device loop2): ext4_empty_dir:3114: inode #11: lblock 5: comm syz-executor: error -12 reading directory block [ 901.620604][ T5581] EXT4-fs warning (device loop2): ext4_empty_dir:3114: inode #11: lblock 5: comm syz-executor: error -12 reading directory block [ 901.637610][ T5581] EXT4-fs warning (device loop2): ext4_empty_dir:3114: inode #11: lblock 5: comm syz-executor: error -12 reading directory block [ 901.708702][ T6416] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 901.760517][ T6416] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 901.786634][ T6416] bond0 (unregistering): Released all slaves [ 901.824894][T10112] bridge0: port 2(bridge_slave_1) entered blocking state [ 901.846824][T10112] bridge0: port 2(bridge_slave_1) entered disabled state [ 901.871023][T10112] bridge_slave_1: entered allmulticast mode [ 901.900713][T10112] bridge_slave_1: entered promiscuous mode [ 902.381441][T10259] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 902.463514][ T6416] hsr_slave_0: left promiscuous mode [ 902.501255][ T6416] hsr_slave_1: left promiscuous mode [ 902.545379][ T6416] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 902.589440][ T6416] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 902.626526][ T6416] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 902.655823][ T6416] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 902.708135][ T6416] veth1_macvtap: left promiscuous mode [ 902.724605][T10282] 9p: Could not find request transport: fd0x0000000000000003 [ 902.725614][ T6416] veth0_macvtap: left promiscuous mode [ 902.750185][ T6416] veth1_vlan: left promiscuous mode [ 902.760142][ T6416] veth0_vlan: left promiscuous mode [ 903.718277][T10297] loop6: detected capacity change from 0 to 128 [ 903.975038][T10297] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 904.049615][T10297] ext4 filesystem being mounted at /17/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 905.040594][ T6416] team0 (unregistering): Port device team_slave_1 removed [ 905.850908][ T6416] team0 (unregistering): Port device team_slave_0 removed [ 906.169319][T10307] loop3: detected capacity change from 0 to 8 [ 906.278438][T10307] SQUASHFS error: Failed to read block 0x4de: -5 [ 906.336525][T10307] SQUASHFS error: Failed to read block 0x4de: -5 [ 906.390257][ T29] audit: type=1800 audit(1779339933.708:538): pid=10307 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.856" name="file1" dev="loop3" ino=5 res=0 errno=0 [ 906.997491][T10112] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 907.422057][ T9654] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 907.448474][T10112] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 907.924292][T10112] team0: Port device team_slave_0 added [ 907.979264][T10112] team0: Port device team_slave_1 added [ 908.130052][ T9] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 908.237482][T10112] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 908.260263][T10112] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 908.304085][T10112] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 908.306464][ T9] usb 4-1: config 0 has an invalid interface number: 51 but max is 0 [ 908.324151][T10112] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 908.324224][T10112] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 908.324355][T10112] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 908.389241][ T9] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 908.401958][ T9] usb 4-1: config 0 has no interface number 0 [ 908.420120][ T9] usb 4-1: New USB device found, idVendor=061c, idProduct=c084, bcdDevice=f5.fc [ 908.434228][ T5684] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 908.470190][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 908.499287][ T9] usb 4-1: Product: syz [ 908.510220][ T9] usb 4-1: Manufacturer: syz [ 908.530136][ T9] usb 4-1: SerialNumber: syz [ 908.545067][ T9] usb 4-1: config 0 descriptor?? [ 908.614472][ T5684] usb 7-1: unable to get BOS descriptor or descriptor too short [ 908.641186][ T5684] usb 7-1: New USB device found, idVendor=200c, idProduct=100b, bcdDevice= 0.40 [ 908.654589][ T5684] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 908.670483][ T5684] usb 7-1: Product: syz [ 908.677345][ T5684] usb 7-1: Manufacturer: syz [ 908.685688][ T5684] usb 7-1: SerialNumber: syz [ 908.753046][T10153] bridge0: port 1(bridge_slave_0) entered blocking state [ 908.770830][T10153] bridge0: port 1(bridge_slave_0) entered disabled state [ 909.730079][T10153] bridge_slave_0: entered allmulticast mode [ 909.838235][T10153] bridge_slave_0: entered promiscuous mode [ 910.212895][T10112] hsr_slave_0: entered promiscuous mode [ 910.283152][T10112] hsr_slave_1: entered promiscuous mode [ 910.295555][T10318] netlink: 180 bytes leftover after parsing attributes in process `syz.6.858'. [ 910.312179][T10112] debugfs: 'hsr0' already exists in 'hsr' [ 910.341268][T10112] Cannot create hsr debugfs directory [ 910.793277][ T6416] veth0_to_team: left allmulticast mode [ 910.822040][ T6416] veth0_to_team: left promiscuous mode [ 910.837421][ T6416] bridge0: port 3(veth0_to_team) entered disabled state [ 910.882832][ T6416] bridge_slave_1: left allmulticast mode [ 910.901509][ T6416] bridge_slave_1: left promiscuous mode [ 910.916658][ T6416] bridge0: port 2(bridge_slave_1) entered disabled state [ 910.949693][ T6416] bridge_slave_0: left allmulticast mode [ 910.964165][ T6416] bridge_slave_0: left promiscuous mode [ 910.982025][ T6416] bridge0: port 1(bridge_slave_0) entered disabled state [ 911.147613][ T6416] bond3 (unregistering): (slave ip6gretap1): Releasing active interface [ 911.838112][ T5684] usb 7-1: 1:1: cannot get freq at ep 0x1 [ 911.845203][ T7974] usb 4-1: USB disconnect, device number 23 [ 911.948400][ T6416] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 912.057083][ T6416] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 912.105215][ T6416] bond0 (unregistering): (slave team0): Releasing backup interface [ 912.146273][ T6416] bond0 (unregistering): Released all slaves [ 912.183991][ T6416] bond1 (unregistering): Released all slaves [ 912.288652][ T5684] usb 7-1: USB disconnect, device number 5 [ 912.312374][ T6416] bond2 (unregistering): Released all slaves [ 912.374562][ T6416] bond3 (unregistering): Released all slaves [ 912.466002][ T6416] bond4 (unregistering): Released all slaves [ 912.550275][ T9868] udevd[9868]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 912.584233][ T6416] bond5 (unregistering): Released all slaves [ 912.615214][ T6416] bond6 (unregistering): Released all slaves [ 912.738823][ T6416] bond7 (unregistering): Released all slaves [ 912.789580][ T6416] bond8 (unregistering): Released all slaves [ 912.849077][ T6416] bond9 (unregistering): Released all slaves [ 912.877343][T10153] bridge0: port 2(bridge_slave_1) entered blocking state [ 912.885198][T10153] bridge0: port 2(bridge_slave_1) entered disabled state [ 912.893159][T10153] bridge_slave_1: entered allmulticast mode [ 912.902832][T10153] bridge_slave_1: entered promiscuous mode [ 913.038134][T10153] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 913.097332][T10153] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 915.040281][T10324] xt_TPROXY: Can be used only with -p tcp or -p udp [ 920.212077][ T6416] tipc: Left network mode [ 925.342766][T10153] team0: Port device team_slave_0 added [ 925.681732][T10153] team0: Port device team_slave_1 added [ 925.717591][ T5582] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 925.728715][ T5582] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 925.738302][ T5582] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 925.771691][ T5582] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 925.785909][ T5582] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 926.107034][T10153] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 926.117865][T10153] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 926.147247][T10153] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 926.178505][T10153] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 926.198433][T10153] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 926.240750][T10153] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 926.276769][ T6416] hsr_slave_0: left promiscuous mode [ 926.285209][ T6416] hsr_slave_1: left promiscuous mode [ 926.296273][ T6416] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 926.317939][ T6416] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 926.823233][ T6416] team0 (unregistering): Port device team_slave_1 removed [ 926.861512][ T6416] team0 (unregistering): Port device team_slave_0 removed [ 927.870119][ T9655] Bluetooth: hci1: command tx timeout [ 928.103759][T10153] hsr_slave_0: entered promiscuous mode [ 928.147912][T10153] hsr_slave_1: entered promiscuous mode [ 928.189418][T10153] debugfs: 'hsr0' already exists in 'hsr' [ 928.217315][T10153] Cannot create hsr debugfs directory [ 930.038020][ T9655] Bluetooth: hci1: command tx timeout [ 931.835368][ T5582] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 931.845491][ T5582] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 931.856137][ T5582] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 931.878390][ T5582] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 931.891040][ T5582] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 932.281556][ T9655] Bluetooth: hci1: command tx timeout [ 932.496556][ T6416] bridge_slave_1: left allmulticast mode [ 932.529922][ T6416] bridge_slave_1: left promiscuous mode [ 932.544295][ T6416] bridge0: port 2(bridge_slave_1) entered disabled state [ 932.608544][ T6416] bridge_slave_0: left allmulticast mode [ 932.629976][ T6416] bridge_slave_0: left promiscuous mode [ 933.230628][T10380] input: syz1 as /devices/virtual/input/input27 [ 933.980380][ T9655] Bluetooth: hci4: command tx timeout [ 935.010809][ T9655] Bluetooth: hci1: command tx timeout [ 936.030103][ T9655] Bluetooth: hci4: command tx timeout [ 936.073104][ T6416] bridge0: port 1(bridge_slave_0) entered disabled state [ 936.537660][ T6416] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 936.588535][ T6416] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 936.630333][ T6416] bond0 (unregistering): Released all slaves [ 936.749519][T10388] loop3: detected capacity change from 0 to 1024 [ 936.776429][T10388] ext4: Unknown parameter 'smackfsfloor' [ 937.437328][T10378] netlink: 12 bytes leftover after parsing attributes in process `syz.6.870'. [ 938.450495][ T9655] Bluetooth: hci4: command tx timeout [ 938.456221][ T9655] Bluetooth: hci0: command 0x0406 tx timeout [ 941.156935][T10397] Bluetooth: hci4: command tx timeout [ 941.255550][ T1306] ieee802154 phy0 wpan0: encryption failed: -22 [ 941.272044][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 941.372436][ T6416] hsr_slave_0: left promiscuous mode [ 941.402860][ T6416] hsr_slave_1: left promiscuous mode [ 941.435527][ T6416] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 941.474561][ T6416] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 942.209135][ T6416] team0 (unregistering): Port device team_slave_1 removed [ 942.315495][ T6416] team0 (unregistering): Port device team_slave_0 removed [ 942.498165][T10397] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 942.523494][T10397] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 942.533528][T10397] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 942.546677][T10397] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 942.559092][T10397] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 943.078412][ T5227] 8021q: adding VLAN 0 to HW filter on device eth24 [ 944.546439][T10429] hub 8-0:1.0: USB hub found [ 944.554680][T10429] hub 8-0:1.0: 1 port detected [ 944.615086][T10429] No such timeout policy "syz1" [ 944.638193][T10429] loop6: detected capacity change from 0 to 16 [ 944.649604][ T5582] Bluetooth: hci5: command tx timeout [ 945.082202][T10429] erofs (device loop6): mounted with root inode @ nid 36. [ 945.122170][T10429] syz.6.874: attempt to access beyond end of device [ 945.122170][T10429] loop6: rw=524288, sector=8, nr_sectors = 24 limit=16 [ 945.152549][T10429] erofs (device loop6): failed to decompress (lz4) corrupted compressed data @ pa 4096 size 4096 => 4096 [ 945.164570][T10429] erofs (device loop6): read error -117 @ 0 of nid 89 [ 945.196159][ T29] audit: type=1800 audit(1779339972.498:539): pid=10429 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.874" name="file2" dev="loop6" ino=89 res=0 errno=0 [ 945.197907][T10429] erofs (device loop6): failed to decompress (lz4) corrupted compressed data @ pa 4096 size 4096 => 4096 [ 945.228055][T10429] erofs (device loop6): read error -117 @ 0 of nid 89 [ 946.670966][ T5582] Bluetooth: hci5: command tx timeout [ 948.346982][ T13] bridge_slave_1: left allmulticast mode [ 948.373502][ T13] bridge_slave_1: left promiscuous mode [ 948.416811][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 948.490528][ T13] bridge_slave_0: left allmulticast mode [ 948.512006][ T13] bridge_slave_0: left promiscuous mode [ 948.543489][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 948.700942][ T5681] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 948.750039][ T5582] Bluetooth: hci5: command tx timeout [ 948.880690][ T5681] usb 7-1: Using ep0 maxpacket: 16 [ 948.914058][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 948.924689][ T5681] usb 7-1: config 0 has no interfaces? [ 948.959164][ T5681] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 948.980801][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 948.996834][ T13] bond0 (unregistering): Released all slaves [ 949.005409][ T5681] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 949.029960][ T5681] usb 7-1: Product: syz [ 949.036291][ T5681] usb 7-1: Manufacturer: syz [ 949.050612][ T5681] usb 7-1: SerialNumber: syz [ 949.081386][ T5681] usb 7-1: config 0 descriptor?? [ 949.326522][ T30] usb 7-1: USB disconnect, device number 6 [ 949.431809][T10461] 8021q: adding VLAN 0 to HW filter on device bond13 [ 949.444879][T10338] bridge0: port 1(bridge_slave_0) entered blocking state [ 949.452699][T10338] bridge0: port 1(bridge_slave_0) entered disabled state [ 949.462093][T10338] bridge_slave_0: entered allmulticast mode [ 949.471167][T10338] bridge_slave_0: entered promiscuous mode [ 949.502351][T10462] vlan2: entered allmulticast mode [ 949.517795][T10462] bond13: (slave vlan2): Enslaving as an active interface with an up link [ 949.553788][ T13] hsr_slave_0: left promiscuous mode [ 949.564276][ T13] hsr_slave_1: left promiscuous mode [ 949.572100][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 949.582582][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 949.776229][ T13] team0 (unregistering): Port device team_slave_1 removed [ 949.820442][ T13] team0 (unregistering): Port device team_slave_0 removed [ 950.230522][T10338] bridge0: port 2(bridge_slave_1) entered blocking state [ 950.253462][T10338] bridge0: port 2(bridge_slave_1) entered disabled state [ 950.283985][T10338] bridge_slave_1: entered allmulticast mode [ 950.323327][T10338] bridge_slave_1: entered promiscuous mode [ 950.501093][T10471] loop3: detected capacity change from 0 to 512 [ 950.523325][T10471] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 950.539284][T10471] EXT4-fs error (device loop3): ext4_init_orphan_info:618: comm syz.3.883: orphan file block 0: bad magic [ 950.551188][T10471] loop3: lost filesystem error report for type 5 error -117 [ 950.553407][T10471] EXT4-fs (loop3): mount failed [ 950.561027][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 950.561124][ C1] EXT4-fs (loop3): initial error at time 1779339977: ext4_init_orphan_info:618 [ 950.561241][ C1] EXT4-fs (loop3): last error at time 1779339977: ext4_init_orphan_info:618 [ 950.642548][T10338] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 950.673339][T10338] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 950.830921][ T5582] Bluetooth: hci5: command tx timeout [ 951.735747][T10338] team0: Port device team_slave_0 added [ 951.762160][T10338] team0: Port device team_slave_1 added [ 952.056711][T10338] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 952.093164][T10338] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 952.207268][T10338] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 952.428527][T10481] loop6: detected capacity change from 0 to 16 [ 952.493011][T10481] erofs (device loop6): mounted with root inode @ nid 36. [ 952.537519][T10338] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 952.579145][T10338] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 952.712690][T10338] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 953.909411][T10366] bridge0: port 1(bridge_slave_0) entered blocking state [ 953.955578][T10366] bridge0: port 1(bridge_slave_0) entered disabled state [ 953.974803][T10366] bridge_slave_0: entered allmulticast mode [ 954.006493][T10366] bridge_slave_0: entered promiscuous mode [ 954.054221][T10338] hsr_slave_0: entered promiscuous mode [ 954.064999][T10338] hsr_slave_1: entered promiscuous mode [ 954.079563][T10338] debugfs: 'hsr0' already exists in 'hsr' [ 954.088473][T10338] Cannot create hsr debugfs directory [ 954.134654][T10366] bridge0: port 2(bridge_slave_1) entered blocking state [ 954.140398][ T5684] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 954.143394][T10366] bridge0: port 2(bridge_slave_1) entered disabled state [ 954.166914][T10366] bridge_slave_1: entered allmulticast mode [ 954.177533][T10366] bridge_slave_1: entered promiscuous mode [ 954.381126][ T5684] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 954.417360][ T5684] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 954.449224][ T5684] usb 4-1: New USB device found, idVendor=0489, idProduct=e057, bcdDevice= 0.00 [ 954.474340][ T5684] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 954.521106][ T5684] usb 4-1: config 0 descriptor?? [ 954.703071][T10508] loop6: detected capacity change from 0 to 512 [ 954.719020][T10508] EXT4-fs (loop6): Test dummy encryption mode enabled [ 954.726525][T10508] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 954.790950][T10508] EXT4-fs error (device loop6): ext4_orphan_get:1423: comm syz.6.890: bad orphan inode 131083 [ 954.844220][T10508] loop6: lost filesystem error report for type 5 error -117 [ 954.856882][T10508] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 954.963081][T10366] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 955.057133][ T5684] usb 4-1: Direct firmware load for ar3k/AthrBT_0x00000000.dfu failed with error -2 [ 955.082362][ T5684] usb 4-1: Falling back to sysfs fallback for: ar3k/AthrBT_0x00000000.dfu [ 955.160925][T10366] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 955.304095][ T9654] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 955.551958][T10520] netlink: 'syz.6.891': attribute type 1 has an invalid length. [ 955.585317][T10366] team0: Port device team_slave_0 added [ 955.698548][T10520] 8021q: adding VLAN 0 to HW filter on device bond1 [ 955.758872][T10366] team0: Port device team_slave_1 added [ 955.865438][T10521] vlan2: entered allmulticast mode [ 955.886487][T10521] veth0_to_bond: entered allmulticast mode [ 955.953743][T10521] bond1: (slave vlan2): Enslaving as an active interface with an up link [ 956.205222][ T5227] 8021q: adding VLAN 0 to HW filter on device eth5 [ 956.227864][T10402] bridge0: port 1(bridge_slave_0) entered blocking state [ 956.242256][T10528] loop6: detected capacity change from 0 to 16 [ 956.252157][T10402] bridge0: port 1(bridge_slave_0) entered disabled state [ 956.274295][T10528] erofs (device loop6): mounted with root inode @ nid 36. [ 956.288215][T10402] bridge_slave_0: entered allmulticast mode [ 956.315318][T10402] bridge_slave_0: entered promiscuous mode [ 956.375408][T10366] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 956.399981][T10366] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 956.443814][T10366] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 956.606192][T10402] bridge0: port 2(bridge_slave_1) entered blocking state [ 956.622101][T10402] bridge0: port 2(bridge_slave_1) entered disabled state [ 956.632016][T10402] bridge_slave_1: entered allmulticast mode [ 956.644155][T10402] bridge_slave_1: entered promiscuous mode [ 956.694485][T10531] loop6: detected capacity change from 0 to 1024 [ 956.752630][T10366] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 956.770128][T10366] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 956.806754][T10366] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 957.152899][T10402] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 957.714174][T10402] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 960.759681][T10402] team0: Port device team_slave_0 added [ 960.927469][T10402] team0: Port device team_slave_1 added [ 961.137252][T10366] hsr_slave_0: entered promiscuous mode [ 961.184003][T10366] hsr_slave_1: entered promiscuous mode [ 961.224521][T10366] debugfs: 'hsr0' already exists in 'hsr' [ 961.255461][T10366] Cannot create hsr debugfs directory [ 961.639700][T10402] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 961.664787][T10402] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 961.723025][T10545] loop3: detected capacity change from 0 to 1024 [ 961.755472][T10402] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 962.057692][T10402] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 962.097472][T10402] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 962.213869][T10402] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 963.429171][T10552] netlink: 36 bytes leftover after parsing attributes in process `syz.3.900'. [ 970.898023][T10338] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 970.982884][T10556] loop3: detected capacity change from 0 to 1024 [ 970.987726][T10338] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 971.012948][T10338] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 971.112872][T10338] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 971.219877][T10338] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 971.346807][T10338] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 978.477226][T10338] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 979.795651][T10338] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 980.374335][T10575] loop6: detected capacity change from 0 to 256 [ 980.463259][T10575] FAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 982.853060][T10402] hsr_slave_0: entered promiscuous mode [ 982.953030][T10402] hsr_slave_1: entered promiscuous mode [ 983.024323][T10402] debugfs: 'hsr0' already exists in 'hsr' [ 983.091162][T10402] Cannot create hsr debugfs directory [ 984.110637][T10397] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 984.121125][T10397] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 984.136130][T10397] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 984.159577][T10397] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 984.182217][T10397] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 985.545960][T10589] netlink: 'syz.3.908': attribute type 1 has an invalid length. [ 985.582859][ T5227] 8021q: adding VLAN 0 to HW filter on device eth6 [ 986.271537][T10397] Bluetooth: hci3: command tx timeout [ 987.298455][T10589] bond14: entered promiscuous mode [ 987.400477][T10589] bond14: entered allmulticast mode [ 987.538352][T10589] 8021q: adding VLAN 0 to HW filter on device bond14 [ 988.350125][T10397] Bluetooth: hci3: command tx timeout [ 988.868476][T10590] veth3: entered allmulticast mode [ 990.430294][T10397] Bluetooth: hci3: command tx timeout [ 991.254640][T10611] loop3: detected capacity change from 0 to 128 [ 992.510570][T10397] Bluetooth: hci3: command tx timeout [ 992.668528][ T5582] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 992.678455][ T5582] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 992.693444][ T5582] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 992.717369][ T5582] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 992.736394][ T5582] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 992.884126][ T6416] bridge_slave_1: left allmulticast mode [ 992.918825][ T6416] bridge_slave_1: left promiscuous mode [ 992.951209][ T6416] bridge0: port 2(bridge_slave_1) entered disabled state [ 993.014500][ T6416] bridge_slave_0: left allmulticast mode [ 993.041268][ T6416] bridge_slave_0: left promiscuous mode [ 993.062612][ T6416] bridge0: port 1(bridge_slave_0) entered disabled state [ 993.674447][ T5582] Bluetooth: hci0: hcon ffff888055768000 sent 1 < count 1025 [ 993.975609][T10619] loop3: detected capacity change from 0 to 2048 [ 994.009681][ T6416] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 994.030283][T10619] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 994.047526][ T6416] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 994.065859][ T6416] bond0 (unregistering): Released all slaves [ 994.210157][ T7974] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 994.403883][ T7974] usb 7-1: Using ep0 maxpacket: 16 [ 994.471279][ T7974] usb 7-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 994.514772][ T7974] usb 7-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 994.525383][ T6416] hsr_slave_0: left promiscuous mode [ 994.543619][ T7974] usb 7-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28 [ 994.558744][ T7974] usb 7-1: config 0 interface 0 has no altsetting 0 [ 994.569176][ T6416] hsr_slave_1: left promiscuous mode [ 994.572089][ T7974] usb 7-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 994.608522][ T7974] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 994.613463][ T6416] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 994.657333][ T7974] usb 7-1: config 0 descriptor?? [ 994.658569][ T6416] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 994.830110][ T5582] Bluetooth: hci1: command tx timeout [ 995.102663][ T7974] hid (null): unknown global tag 0xc [ 995.134584][ T7974] hid (null): unknown global tag 0xc [ 995.179096][ T7974] hid (null): invalid report_count -1158374471 [ 995.196948][ T7974] hid (null): unknown global tag 0xd [ 995.210191][ T7974] hid (null): usage index exceeded [ 995.220795][ T7974] hid (null): usage index exceeded [ 995.244194][ T7974] hid (null): invalid report_count -2063577644 [ 995.373099][ T6416] team0 (unregistering): Port device team_slave_1 removed [ 995.487069][ T6416] team0 (unregistering): Port device team_slave_0 removed [ 995.492026][T10631] loop3: detected capacity change from 0 to 128 [ 995.508091][ T7974] usb 7-1: USB disconnect, device number 7 [ 995.576171][T10631] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 995.603090][T10631] ext4 filesystem being mounted at /365/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 996.291158][T10635] netlink: 'syz.6.918': attribute type 1 has an invalid length. [ 996.802837][T10635] bond2: entered promiscuous mode [ 996.808454][T10635] bond2: entered allmulticast mode [ 996.816816][T10635] 8021q: adding VLAN 0 to HW filter on device bond2 [ 996.901381][T10636] veth3: entered allmulticast mode [ 996.920245][ T5582] Bluetooth: hci1: command tx timeout [ 997.344330][T10402] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 997.462604][T10402] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 997.509178][ T6416] bridge_slave_1: left allmulticast mode [ 997.534409][ T6416] bridge_slave_1: left promiscuous mode [ 997.563686][ T6416] bridge0: port 2(bridge_slave_1) entered disabled state [ 997.615688][ T6416] bridge_slave_0: left allmulticast mode [ 997.655907][ T6416] bridge_slave_0: left promiscuous mode [ 997.702287][ T6416] bridge0: port 1(bridge_slave_0) entered disabled state [ 998.455852][ T5580] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 998.828088][ T6416] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 998.945832][ T6416] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 998.990781][ T5582] Bluetooth: hci1: command tx timeout [ 999.049398][ T6416] bond0 (unregistering): Released all slaves [ 999.122455][T10654] loop3: detected capacity change from 0 to 512 [ 999.165338][T10402] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 999.235300][T10654] EXT4-fs (loop3): 1 truncate cleaned up [ 999.289057][T10654] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 999.343237][T10402] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 999.408017][ T29] audit: type=1800 audit(1779340026.728:540): pid=10654 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.920" name="file1" dev="loop3" ino=13 res=0 errno=0 [ 999.651965][ T6416] hsr_slave_0: left promiscuous mode [ 999.710061][ T6416] hsr_slave_1: left promiscuous mode [ 999.759681][ T6416] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 999.803405][ T29] audit: type=1800 audit(1779340027.128:541): pid=10654 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.920" name="file1" dev="loop3" ino=13 res=0 errno=0 [ 999.914372][T10654] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.920: bg 0: block 465: padding at end of block bitmap is not set [ 999.935975][ T6416] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1000.009219][T10662] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #13: comm syz.3.920: invalid indirect mapped block 234881024 (level 0) [ 1000.025564][T10654] EXT4-fs (loop3): Delayed block allocation failed for inode 13 at logical offset 3 with max blocks 9 with error 28 [ 1000.073568][T10654] EXT4-fs (loop3): This should not happen!! Data will be lost [ 1000.073568][T10654] [ 1000.133691][T10654] EXT4-fs (loop3): Total free blocks count 0 [ 1000.180319][T10654] EXT4-fs (loop3): Free/Dirty block details [ 1000.214242][T10654] EXT4-fs (loop3): free_blocks=0 [ 1000.253455][T10654] EXT4-fs (loop3): dirty_blocks=9 [ 1000.275931][T10654] EXT4-fs (loop3): Block reservation details [ 1000.306025][T10654] EXT4-fs (loop3): i_reserved_data_blocks=9 [ 1000.791462][ T5580] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1001.080071][ T5582] Bluetooth: hci1: command tx timeout [ 1001.332161][ T6416] team0 (unregistering): Port device team_slave_1 removed [ 1001.493347][ T6416] team0 (unregistering): Port device team_slave_0 removed [ 1001.548401][T10397] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1001.559122][T10397] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1001.575753][T10397] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1001.593366][T10397] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1001.615742][T10397] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1002.682176][ T1306] ieee802154 phy0 wpan0: encryption failed: -22 [ 1002.688794][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 1003.710262][ T5582] Bluetooth: hci4: command tx timeout [ 1004.693524][ T5227] 8021q: adding VLAN 0 to HW filter on device eth7 [ 1005.800295][ T5582] Bluetooth: hci4: command tx timeout [ 1007.015020][T10705] netlink: 24 bytes leftover after parsing attributes in process `syz.6.926'. [ 1007.175287][T10581] bridge0: port 1(bridge_slave_0) entered blocking state [ 1007.206515][T10581] bridge0: port 1(bridge_slave_0) entered disabled state [ 1007.228157][T10581] bridge_slave_0: entered allmulticast mode [ 1007.279290][T10581] bridge_slave_0: entered promiscuous mode [ 1007.392726][T10711] netlink: 'syz.3.927': attribute type 1 has an invalid length. [ 1007.517728][T10581] bridge0: port 2(bridge_slave_1) entered blocking state [ 1007.561212][T10581] bridge0: port 2(bridge_slave_1) entered disabled state [ 1007.587746][T10581] bridge_slave_1: entered allmulticast mode [ 1007.624139][T10581] bridge_slave_1: entered promiscuous mode [ 1007.752281][T10711] bond15: entered promiscuous mode [ 1007.757964][T10711] bond15: entered allmulticast mode [ 1007.765540][T10711] 8021q: adding VLAN 0 to HW filter on device bond15 [ 1007.870201][ T5582] Bluetooth: hci4: command tx timeout [ 1007.975561][T10712] veth5: entered allmulticast mode [ 1008.499358][T10730] loop3: detected capacity change from 0 to 512 [ 1008.576287][T10730] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1008.607217][T10730] ext4 filesystem being mounted at /371/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1008.970961][T10581] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1010.805096][ T5582] Bluetooth: hci4: command tx timeout [ 1010.811296][T10735] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 1014.011973][T10581] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1017.285206][T10581] team0: Port device team_slave_0 added [ 1017.326106][ T5227] 8021q: adding VLAN 0 to HW filter on device eth8 [ 1017.378140][T10581] team0: Port device team_slave_1 added [ 1017.688544][T10581] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1017.727845][T10581] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1017.833192][ T5580] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1017.835240][T10581] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1017.966977][T10581] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1017.996822][T10581] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1018.028975][T10581] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1018.059541][ T5684] Bluetooth: Patch file not found ar3k/AthrBT_0x00000000.dfu [ 1018.100838][ T5684] Bluetooth: Loading patch file failed [ 1018.138645][ T5684] ath3k 4-1:0.0: probe with driver ath3k failed with error -110 [ 1018.197072][ T5684] usb 4-1: USB disconnect, device number 24 [ 1018.302262][ T56] bridge_slave_1: left allmulticast mode [ 1018.322817][ T56] bridge_slave_1: left promiscuous mode [ 1018.342528][ T56] bridge0: port 2(bridge_slave_1) entered disabled state [ 1018.376551][ T56] bridge_slave_0: left allmulticast mode [ 1018.387381][ T56] bridge_slave_0: left promiscuous mode [ 1018.399139][ T56] bridge0: port 1(bridge_slave_0) entered disabled state [ 1019.122248][ T56] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1019.739611][ T56] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1020.105350][ T56] bond0 (unregistering): Released all slaves [ 1021.528306][ T56] hsr_slave_0: left promiscuous mode [ 1021.544704][ T56] hsr_slave_1: left promiscuous mode [ 1021.553476][ T56] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1021.574197][ T56] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1022.058990][ T56] team0 (unregistering): Port device team_slave_1 removed [ 1022.134493][ T56] team0 (unregistering): Port device team_slave_0 removed [ 1022.953107][T10581] hsr_slave_0: entered promiscuous mode [ 1022.964704][T10581] hsr_slave_1: entered promiscuous mode [ 1022.974016][T10581] debugfs: 'hsr0' already exists in 'hsr' [ 1022.982124][T10581] Cannot create hsr debugfs directory [ 1022.994759][T10612] bridge0: port 1(bridge_slave_0) entered blocking state [ 1023.006284][T10612] bridge0: port 1(bridge_slave_0) entered disabled state [ 1023.020407][T10612] bridge_slave_0: entered allmulticast mode [ 1023.043935][T10612] bridge_slave_0: entered promiscuous mode [ 1024.370552][T10612] bridge0: port 2(bridge_slave_1) entered blocking state [ 1024.388053][T10612] bridge0: port 2(bridge_slave_1) entered disabled state [ 1024.414147][T10612] bridge_slave_1: entered allmulticast mode [ 1024.459509][T10612] bridge_slave_1: entered promiscuous mode [ 1024.546982][T10771] netlink: 'syz.3.939': attribute type 1 has an invalid length. [ 1024.927130][T10771] bond16: entered promiscuous mode [ 1024.938416][T10771] bond16: entered allmulticast mode [ 1024.975068][T10771] 8021q: adding VLAN 0 to HW filter on device bond16 [ 1025.062110][T10773] veth7: entered allmulticast mode [ 1025.394955][T10612] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1025.582043][T10612] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1025.728020][T10612] team0: Port device team_slave_0 added [ 1025.866742][T10612] team0: Port device team_slave_1 added [ 1026.758870][T10612] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1026.767019][T10612] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1026.798343][T10612] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1027.024500][T10612] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1027.045338][T10612] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1027.123481][T10612] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1028.064824][T10612] hsr_slave_0: entered promiscuous mode [ 1028.106545][T10612] hsr_slave_1: entered promiscuous mode [ 1028.155767][T10612] debugfs: 'hsr0' already exists in 'hsr' [ 1028.162204][T10612] Cannot create hsr debugfs directory [ 1028.251465][T10799] loop6: detected capacity change from 0 to 256 [ 1028.345716][T10799] exFAT-fs (loop6): failed to load upcase table (idx : 0x0000fe7f, chksum : 0x5955b8de, utbl_chksum : 0xe619d30d) [ 1028.967404][T10810] loop6: detected capacity change from 0 to 128 [ 1029.006485][T10671] bridge0: port 1(bridge_slave_0) entered blocking state [ 1029.045446][T10671] bridge0: port 1(bridge_slave_0) entered disabled state [ 1029.046244][T10812] loop3: detected capacity change from 0 to 1024 [ 1029.061013][T10810] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1029.088737][T10671] bridge_slave_0: entered allmulticast mode [ 1029.099256][T10671] bridge_slave_0: entered promiscuous mode [ 1029.116112][T10671] bridge0: port 2(bridge_slave_1) entered blocking state [ 1029.116181][T10812] hfsplus: failed to load extents file [ 1029.130688][T10671] bridge0: port 2(bridge_slave_1) entered disabled state [ 1029.138463][T10671] bridge_slave_1: entered allmulticast mode [ 1029.149555][T10671] bridge_slave_1: entered promiscuous mode [ 1029.169114][T10810] ext4 filesystem being mounted at /66/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1029.537111][ T9654] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1029.873188][T10671] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1029.879571][T10824] netlink: 'syz.6.950': attribute type 1 has an invalid length. [ 1030.243789][T10824] bond3: entered promiscuous mode [ 1030.249304][T10824] bond3: entered allmulticast mode [ 1030.257387][T10824] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1030.292069][T10671] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1030.452057][T10830] loop3: detected capacity change from 0 to 4096 [ 1030.463008][T10826] veth5: entered allmulticast mode [ 1030.466537][T10830] EXT4-fs: Ignoring removed mblk_io_submit option [ 1030.548518][T10830] EXT4-fs (loop3): Test dummy encryption mode enabled [ 1030.611106][T10830] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1031.023755][T10837] loop6: detected capacity change from 0 to 256 [ 1031.070652][ T5227] 8021q: adding VLAN 0 to HW filter on device eth13 [ 1031.109428][T10837] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0x9059ffb0, utbl_chksum : 0xe619d30d) [ 1031.144501][T10830] fscrypt (loop3): Missing crypto API support for AES-256-XTS (API name: "xts(aes)") [ 1031.174006][T10671] team0: Port device team_slave_0 added [ 1031.406162][ T5580] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1031.410557][T10671] team0: Port device team_slave_1 added [ 1031.853095][T10671] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1031.870563][T10671] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1031.956353][T10671] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1031.995334][T10671] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1032.003338][T10671] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1032.041730][ T5672] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 1032.044144][T10671] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1032.128569][T10846] loop3: detected capacity change from 0 to 128 [ 1032.171081][T10846] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1032.196727][T10846] ext4 filesystem being mounted at /381/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 1032.260141][ T5672] usb 7-1: Using ep0 maxpacket: 8 [ 1032.334327][ T5672] usb 7-1: unable to get BOS descriptor or descriptor too short [ 1032.388140][ T5672] usb 7-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 128, changing to 7 [ 1032.401163][ T5672] usb 7-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1032.842372][T10849] syz.3.955 (pid 10849) is setting deprecated v1 encryption policy; recommend upgrading to v2. [ 1033.123959][ T5672] usb 7-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 1033.146060][ T5672] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1033.261752][ T5672] usb 7-1: Product: syz [ 1033.266794][ T5672] usb 7-1: Manufacturer: syz [ 1033.281582][ T5672] usb 7-1: SerialNumber: syz [ 1033.803370][T10671] hsr_slave_0: entered promiscuous mode [ 1033.876553][T10671] hsr_slave_1: entered promiscuous mode [ 1034.088439][T10671] debugfs: 'hsr0' already exists in 'hsr' [ 1034.182461][T10671] Cannot create hsr debugfs directory [ 1035.967903][ T5580] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1036.002000][T10581] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1036.067390][T10581] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1036.491151][T10581] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1036.590509][T10581] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1036.699483][T10581] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1036.883456][T10581] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1036.967059][ T5672] usb 7-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 1037.020471][ T5672] usb 7-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 1037.038650][ T5672] usb 7-1: unit 3 not found! [ 1037.059919][ T5672] usb 7-1: unit 64 not found! [ 1037.088665][T10581] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1037.145278][T10581] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1037.629976][ T5672] usb 7-1: USB disconnect, device number 8 [ 1037.862385][T10612] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1037.869461][T10775] udevd[10775]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1044.617103][T10612] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1045.990882][T10612] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1046.120202][T10612] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1046.140359][T10612] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1046.173455][T10612] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1046.346068][T10612] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1046.465234][T10612] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1046.490498][T10876] loop6: detected capacity change from 0 to 512 [ 1046.494436][T10875] loop3: detected capacity change from 0 to 512 [ 1046.546282][T10876] EXT4-fs: Ignoring removed i_version option [ 1046.568386][T10875] EXT4-fs: Ignoring removed orlov option [ 1046.572031][T10876] EXT4-fs: Ignoring removed oldalloc option [ 1046.667244][T10876] EXT4-fs (loop6): Test dummy encryption mode enabled [ 1046.762812][T10875] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1046.835224][T10876] EXT4-fs (loop6): 1 truncate cleaned up [ 1046.885437][T10876] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1047.424588][ T9654] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1047.865144][T10397] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1047.874645][T10397] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1047.887140][T10397] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1047.908005][T10397] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1047.919427][T10397] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1048.324454][ T5580] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1048.586039][T10671] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1048.679103][T10899] loop6: detected capacity change from 0 to 256 [ 1048.699374][T10671] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1048.753080][T10671] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1048.850830][T10671] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1050.248760][T10397] Bluetooth: hci5: command tx timeout [ 1050.286022][T10671] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1050.298213][T10902] loop3: detected capacity change from 0 to 1024 [ 1052.310456][T10397] Bluetooth: hci5: command tx timeout [ 1052.317094][T10902] hfsplus: failed to load extents file [ 1054.293578][T10671] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1054.303597][T10671] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1055.302388][T10397] Bluetooth: hci5: command tx timeout [ 1056.348489][T10671] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1057.310498][T10397] Bluetooth: hci5: command tx timeout [ 1058.564636][ T5582] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1058.676361][ T5582] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1058.751013][ T5582] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1059.028505][ T5582] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1059.234423][ T5582] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1060.992597][T10129] bridge_slave_1: left allmulticast mode [ 1061.016930][T10129] bridge_slave_1: left promiscuous mode [ 1061.032624][T10129] bridge0: port 2(bridge_slave_1) entered disabled state [ 1061.075441][T10129] bridge_slave_0: left allmulticast mode [ 1061.090082][T10129] bridge_slave_0: left promiscuous mode [ 1061.115266][T10129] bridge0: port 1(bridge_slave_0) entered disabled state [ 1061.471348][ T5582] Bluetooth: hci3: command tx timeout [ 1061.622406][T10129] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1061.718330][T10129] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1061.787939][T10129] bond0 (unregistering): Released all slaves [ 1062.254558][T10954] loop6: detected capacity change from 0 to 16 [ 1062.533945][T10129] hsr_slave_0: left promiscuous mode [ 1062.787335][T10958] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 1062.807230][T10129] hsr_slave_1: left promiscuous mode [ 1063.337961][T10129] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1063.509657][T10957] loop3: detected capacity change from 0 to 2048 [ 1063.550222][ T5582] Bluetooth: hci3: command tx timeout [ 1063.766478][T10129] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1064.139148][ T1306] ieee802154 phy0 wpan0: encryption failed: -22 [ 1064.177012][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 1065.131820][T10957] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1065.632907][ T5582] Bluetooth: hci3: command tx timeout [ 1065.782601][T10969] ===================================================== [ 1065.790049][T10969] BUG: KMSAN: uninit-value in eth_type_trans+0x68f/0xae0 [ 1065.797407][T10969] eth_type_trans+0x68f/0xae0 [ 1065.802719][T10969] __dev_forward_skb2+0x4b1/0x940 [ 1065.808016][T10969] dev_forward_skb_nomtu+0x3b/0xe0 [ 1065.813950][T10969] __bpf_redirect+0x14d7/0x1760 [ 1065.818981][T10969] bpf_clone_redirect+0x4a6/0x6c0 [ 1065.824301][T10969] ___bpf_prog_run+0x13e8/0xea90 [ 1065.829417][T10969] __bpf_prog_run512+0xc5/0x100 [ 1065.834564][T10969] bpf_test_run+0x846/0xdf0 [ 1065.839247][T10969] bpf_prog_test_run_skb+0x2988/0x35f0 [ 1065.845042][T10969] bpf_prog_test_run+0x5bb/0x9f0 [ 1065.850287][T10969] __sys_bpf+0x925/0xee0 [ 1065.854723][T10969] __x64_sys_bpf+0xa4/0xf0 [ 1065.859299][T10969] x64_sys_call+0x13d0/0x3ea0 [ 1065.864301][T10969] do_syscall_64+0x134/0xf80 [ 1065.869068][T10969] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1065.875313][T10969] [ 1065.877722][T10969] Uninit was created at: [ 1065.882303][T10969] kmem_cache_alloc_node_noprof+0x3cd/0x12c0 [ 1065.888580][T10969] pskb_expand_head+0x2f3/0x1a40 [ 1065.893817][T10969] skb_ensure_writable+0x44e/0x510 [ 1065.899195][T10969] bpf_clone_redirect+0x301/0x6c0 [ 1065.904523][T10969] ___bpf_prog_run+0x13e8/0xea90 [ 1065.909651][T10969] __bpf_prog_run512+0xc5/0x100 [ 1065.915196][T10969] bpf_test_run+0x846/0xdf0 [ 1065.920082][T10969] bpf_prog_test_run_skb+0x2988/0x35f0 [ 1065.925920][T10969] bpf_prog_test_run+0x5bb/0x9f0 [ 1065.931428][T10969] __sys_bpf+0x925/0xee0 [ 1065.935846][T10969] __x64_sys_bpf+0xa4/0xf0 [ 1065.940612][T10969] x64_sys_call+0x13d0/0x3ea0 [ 1065.945464][T10969] do_syscall_64+0x134/0xf80 [ 1065.950503][T10969] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1065.956568][T10969] [ 1065.959017][T10969] CPU: 1 UID: 0 PID: 10969 Comm: syz.6.974 Tainted: G L syzkaller #0 PREEMPT(full) [ 1065.970511][T10969] Tainted: [L]=SOFTLOCKUP [ 1065.975019][T10969] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1065.985457][T10969] ===================================================== [ 1065.992619][T10969] Disabling lock debugging due to kernel taint [ 1065.998978][T10969] Kernel panic - not syncing: kmsan.panic set ... [ 1066.005519][T10969] CPU: 1 UID: 0 PID: 10969 Comm: syz.6.974 Tainted: G B L syzkaller #0 PREEMPT(full) [ 1066.016580][T10969] Tainted: [B]=BAD_PAGE, [L]=SOFTLOCKUP [ 1066.022226][T10969] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1066.032418][T10969] Call Trace: [ 1066.035800][T10969] [ 1066.038829][T10969] __dump_stack+0x26/0x30 [ 1066.043408][T10969] dump_stack_lvl+0x50/0x1c0 [ 1066.048161][T10969] ? dump_stack+0x12/0x25 [ 1066.052656][T10969] dump_stack+0x1e/0x25 [ 1066.056973][T10969] vpanic+0x7b4/0x1430 [ 1066.061252][T10969] panic+0x15d/0x160 [ 1066.065366][T10969] kmsan_report+0x31a/0x320 [ 1066.070152][T10969] ? __hrtimer_rearm_deferred+0xde2/0x10c0 [ 1066.076166][T10969] ? __msan_warning+0x1b/0x30 [ 1066.081010][T10969] ? eth_type_trans+0x68f/0xae0 [ 1066.086064][T10969] ? __dev_forward_skb2+0x4b1/0x940 [ 1066.091412][T10969] ? dev_forward_skb_nomtu+0x3b/0xe0 [ 1066.096851][T10969] ? __bpf_redirect+0x14d7/0x1760 [ 1066.102054][T10969] ? bpf_clone_redirect+0x4a6/0x6c0 [ 1066.107540][T10969] ? ___bpf_prog_run+0x13e8/0xea90 [ 1066.112935][T10969] ? __bpf_prog_run512+0xc5/0x100 [ 1066.118334][T10969] ? bpf_test_run+0x846/0xdf0 [ 1066.123289][T10969] ? bpf_prog_test_run_skb+0x2988/0x35f0 [ 1066.129124][T10969] ? bpf_prog_test_run+0x5bb/0x9f0 [ 1066.134429][T10969] ? __sys_bpf+0x925/0xee0 [ 1066.139123][T10969] ? __x64_sys_bpf+0xa4/0xf0 [ 1066.143878][T10969] ? x64_sys_call+0x13d0/0x3ea0 [ 1066.148910][T10969] ? do_syscall_64+0x134/0xf80 [ 1066.153855][T10969] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1066.160085][T10969] ? raw_irqentry_exit_cond_resched+0xe/0x80 [ 1066.166261][T10969] ? irqentry_exit+0x738/0x820 [ 1066.171212][T10969] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 1066.177748][T10969] ? kmsan_internal_unpoison_memory+0x14/0x20 [ 1066.184025][T10969] ? kmsan_get_metadata+0xf1/0x160 [ 1066.189352][T10969] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 1066.195872][T10969] ? kmsan_get_metadata+0xf1/0x160 [ 1066.201187][T10969] ? kmsan_get_metadata+0xf1/0x160 [ 1066.206607][T10969] ? kmsan_get_metadata+0xf1/0x160 [ 1066.211931][T10969] __msan_warning+0x1b/0x30 [ 1066.216628][T10969] eth_type_trans+0x68f/0xae0 [ 1066.221512][T10969] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1066.227551][T10969] __dev_forward_skb2+0x4b1/0x940 [ 1066.232749][T10969] dev_forward_skb_nomtu+0x3b/0xe0 [ 1066.238021][T10969] __bpf_redirect+0x14d7/0x1760 [ 1066.243243][T10969] ? kmsan_get_metadata+0xf1/0x160 [ 1066.248576][T10969] bpf_clone_redirect+0x4a6/0x6c0 [ 1066.253825][T10969] ___bpf_prog_run+0x13e8/0xea90 [ 1066.259003][T10969] __bpf_prog_run512+0xc5/0x100 [ 1066.264074][T10969] ? kmsan_internal_poison_memory+0x78/0x90 [ 1066.270166][T10969] ? kmsan_internal_poison_memory+0x4a/0x90 [ 1066.276233][T10969] ? kmsan_slab_alloc+0xdc/0x160 [ 1066.281361][T10969] ? kmem_cache_alloc_noprof+0x373/0x1250 [ 1066.287373][T10969] ? slab_build_skb+0x5c/0x5b0 [ 1066.292289][T10969] ? bpf_prog_test_run_skb+0x818/0x35f0 [ 1066.298025][T10969] ? bpf_prog_test_run+0x5bb/0x9f0 [ 1066.303535][T10969] ? __sys_bpf+0x925/0xee0 [ 1066.308307][T10969] ? kmsan_get_metadata+0xf1/0x160 [ 1066.313622][T10969] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1066.319638][T10969] ? bpf_test_run+0x1/0xdf0 [ 1066.324423][T10969] ? filter_irq_stacks+0x49/0x190 [ 1066.329603][T10969] ? kmsan_get_metadata+0xf1/0x160 [ 1066.334909][T10969] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 1066.341444][T10969] ? kmsan_internal_unpoison_memory+0x14/0x20 [ 1066.347711][T10969] ? kmsan_get_metadata+0x146/0x160 [ 1066.353280][T10969] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1066.359296][T10969] ? __pfx___bpf_prog_run512+0x10/0x10 [ 1066.364957][T10969] ? __pfx___bpf_prog_run512+0x10/0x10 [ 1066.370640][T10969] bpf_test_run+0x846/0xdf0 [ 1066.375329][T10969] ? kmsan_get_metadata+0xf1/0x160 [ 1066.380632][T10969] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1066.386849][T10969] ? bpf_test_run+0x2f4/0xdf0 [ 1066.391772][T10969] bpf_prog_test_run_skb+0x2988/0x35f0 [ 1066.397432][T10969] ? futex_unqueue+0x22d/0x2c0 [ 1066.402420][T10969] ? kmsan_get_metadata+0xf1/0x160 [ 1066.407737][T10969] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1066.413845][T10969] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 1066.420390][T10969] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 1066.426486][T10969] bpf_prog_test_run+0x5bb/0x9f0 [ 1066.431642][T10969] __sys_bpf+0x925/0xee0 [ 1066.436131][T10969] __x64_sys_bpf+0xa4/0xf0 [ 1066.440737][T10969] x64_sys_call+0x13d0/0x3ea0 [ 1066.445596][T10969] do_syscall_64+0x134/0xf80 [ 1066.450459][T10969] ? clear_bhb_loop+0x50/0xa0 [ 1066.455315][T10969] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1066.461397][T10969] RIP: 0033:0x7fb35a39ce59 [ 1066.465948][T10969] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1066.485995][T10969] RSP: 002b:00007fb35b2ca028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1066.494583][T10969] RAX: ffffffffffffffda RBX: 00007fb35a616090 RCX: 00007fb35a39ce59 [ 1066.502699][T10969] RDX: 0000000000000023 RSI: 0000200000000240 RDI: 000000000000000a [ 1066.510803][T10969] RBP: 00007fb35a432d6f R08: 0000000000000000 R09: 0000000000000000 [ 1066.518907][T10969] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1066.527090][T10969] R13: 00007fb35a616128 R14: 00007fb35a616090 R15: 00007fffa0d014b8 [ 1066.535283][T10969] [ 1066.538907][T10969] Kernel Offset: disabled [ 1066.543322][T10969] Rebooting in 86400 seconds..