last executing test programs: 7m3.639007734s ago: executing program 2 (id=1590): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f00000000c0)={0x1, 0x0, [{0x3, 0x1, 0x0, 0x0, @msi={0xfffffffe, 0x10000, 0x1, 0x3}}]}) 7m2.646299712s ago: executing program 2 (id=1592): syz_usb_connect$cdc_ecm(0x2, 0x77, &(0x7f00000006c0)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x65, 0x1, 0x1, 0x9, 0x20, 0x9, "", [{{0x9, 0x4, 0x0, 0x9, 0x2, 0x2, 0x6, 0x0, 0x3, {{0x5}, {0x5, 0x24, 0x0, 0x1}, {0xd, 0x24, 0xf, 0x1, 0xfffffffd, 0x9, 0x9, 0x9b}, [@mdlm={0x15, 0x24, 0x12, 0x5}, @mdlm={0x15, 0x24, 0x12, 0x1}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x40, 0x9, 0x2, 0x9}}, {{0x9, 0x5, 0x3, 0x2, 0x86d4d4f2afe0f03d, 0x24, 0x8, 0x3}}}}}]}}]}}, &(0x7f0000000ac0)={0x0, 0x0, 0x0, 0x0}) 7m0.287143652s ago: executing program 2 (id=1602): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r0, 0xffffffffffffffff, 0x0) socket$inet_udp(0x2, 0x2, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='net/dev\x00') r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x723080, 0x0) syz_usb_connect$uac1(0x5, 0xdc, &(0x7f00000017c0)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c240208000103000000ff000924060506020100000924030003030005490c240206", @ANYRES8=r1, @ANYBLOB='\a'], 0x0) 6m58.166098101s ago: executing program 2 (id=1606): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xc0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000000)='devtmpfs\x00', 0x1214040, 0x0) mount$bind(&(0x7f0000000280)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) chroot(&(0x7f0000000580)='./file0/../file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000008c0)='./file0\x00', 0x0, 0x2a05004, 0x0) pivot_root(&(0x7f0000000600)='./file0\x00', &(0x7f00000001c0)='./file0/../file0\x00') 6m57.423630422s ago: executing program 2 (id=1610): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000040de28421100000000000109022400010000000009040000010300000009210000000122050009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000100)={0x2c, &(0x7f0000000640)=ANY=[@ANYBLOB="000085000000b3"], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) r2 = syz_open_dev$hidraw(&(0x7f00000004c0), 0x0, 0x14a042) r3 = dup3(r2, r1, 0x80000) write$UHID_CREATE(r3, 0x0, 0x24) 6m56.75990106s ago: executing program 2 (id=1613): r0 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_elf64(r0, &(0x7f0000000b40)=ANY=[@ANYBLOB="7f454c4605100702000000000000000003003e00f9ffffffda0300000000000040000000000000008b000000000000002c0d0000050038000800"], 0xb0) close(r0) execve(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) 6m53.768428512s ago: executing program 32 (id=1613): r0 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_elf64(r0, &(0x7f0000000b40)=ANY=[@ANYBLOB="7f454c4605100702000000000000000003003e00f9ffffffda0300000000000040000000000000008b000000000000002c0d0000050038000800"], 0xb0) close(r0) execve(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) 3m2.858476642s ago: executing program 0 (id=2812): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000800)=ANY=[@ANYBLOB="84010000", @ANYRES16=r1, @ANYBLOB="0100d8000000000000000100000004000480080002000100000008000100000000000400088058010c8054000b800800090000000000080009000000000008000a000000000008000a00000000000800"], 0x184}, 0x1, 0x0, 0x0, 0x4}, 0x0) 3m0.45848682s ago: executing program 0 (id=2827): io_setup(0x7, &(0x7f0000000140)) openat(0xffffffffffffffff, 0x0, 0x2, 0xebb6aa903c95c931) r0 = getpid() io_setup(0x27c, 0x0) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0) r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x2a05404, 0x0) syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) umount2(&(0x7f0000000040)='.\x00', 0x2) unlinkat(r2, &(0x7f0000000080)='./file0\x00', 0x200) 2m51.273036043s ago: executing program 0 (id=2877): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x10, 0x16, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x101100, 0x0) socket$kcm(0x2, 0xa, 0x2) socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x3, 0x100) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$can_bcm(0x1d, 0x2, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) socket$inet_mptcp(0x2, 0x1, 0x106) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_route(0x10, 0x3, 0x0) socket(0x2b, 0x1, 0x0) socket$packet(0x11, 0x2, 0x300) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000580)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000001400000008000200fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000900fc000000080011000700000008000e00800000000800", @ANYRES32=r0], 0x5c}, 0x1, 0x0, 0x0, 0x40800}, 0x4000000) 2m48.9569229s ago: executing program 0 (id=2886): io_setup(0x7, &(0x7f0000000140)) openat(0xffffffffffffffff, 0x0, 0x2, 0xebb6aa903c95c931) r0 = getpid() io_setup(0x27c, 0x0) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0) r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x2a05404, 0x0) syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) umount2(&(0x7f0000000040)='.\x00', 0x2) unlinkat(r2, &(0x7f0000000080)='./file0\x00', 0x200) 2m45.463974489s ago: executing program 0 (id=2898): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) writev(r0, &(0x7f0000000400)=[{&(0x7f0000000140)="2e1221b23bb601c477d3df163e75963d86ddf06712e9000d2f8db0049d90491c3248040000dbb8a10000", 0x2a}, {&(0x7f0000000200)="24f5bbd11cb3", 0x6}, {&(0x7f00000002c0)="a43b2eaab4000000000080006558a492", 0x10}, {0x0}], 0x4) 2m42.551549796s ago: executing program 0 (id=2907): io_setup(0x7, &(0x7f0000000140)) openat(0xffffffffffffffff, 0x0, 0x2, 0xebb6aa903c95c931) r0 = getpid() io_setup(0x27c, 0x0) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x2a05404, 0x0) syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) umount2(&(0x7f0000000040)='.\x00', 0x2) unlinkat(r2, &(0x7f0000000080)='./file0\x00', 0x200) 2m27.366634853s ago: executing program 33 (id=2907): io_setup(0x7, &(0x7f0000000140)) openat(0xffffffffffffffff, 0x0, 0x2, 0xebb6aa903c95c931) r0 = getpid() io_setup(0x27c, 0x0) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x2a05404, 0x0) syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) umount2(&(0x7f0000000040)='.\x00', 0x2) unlinkat(r2, &(0x7f0000000080)='./file0\x00', 0x200) 8.10368611s ago: executing program 1 (id=3561): socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_sctp(0x2, 0x1, 0x84) socket$inet6_udp(0xa, 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet(0x2, 0x2, 0x1) socket(0x10, 0x803, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$packet(0x11, 0x3, 0x300) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket(0x28, 0x5, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c000200060000001f000000060001000000000008000500", @ANYRES32=r0, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x0) 7.435029645s ago: executing program 6 (id=3565): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) socket$can_raw(0x1d, 0x3, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x1fd, 0x1, 0x1}, 0x1c) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x1fd, 0x1, 0x1}, 0x1c) recvmsg$unix(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000280)=""/246, 0xf6}], 0x1}, 0x20) sendmmsg(r2, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) socket(0x2, 0x80805, 0x0) setsockopt$sock_int(r2, 0x1, 0x21, &(0x7f0000000540)=0x5, 0x4) recvmsg$unix(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)=""/254, 0xfe}], 0x1}, 0x20) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x9200000000000000) syz_usb_disconnect(0xffffffffffffffff) syz_open_dev$char_usb(0xc, 0xb4, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, r1) sendmsg$NL80211_CMD_START_NAN(r1, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8400}, 0xd0) close_range(r0, 0xffffffffffffffff, 0x0) r3 = syz_io_uring_setup(0x1f97, &(0x7f0000000080)={0x0, 0x7f97, 0x13581, 0x0, 0x1ff}, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000000)) io_uring_enter(r3, 0x55, 0x84a23, 0xf, 0x0, 0x18) 7.099643881s ago: executing program 1 (id=3567): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) writev(r0, &(0x7f0000000400)=[{&(0x7f0000000140)="2e1221b23bb601c477d3df163e75963d86ddf06712e9000d2f8db0049d90491c3248040000dbb8a10000", 0x2a}, {&(0x7f0000000200)="24f5bb", 0x3}, {&(0x7f00000002c0)="a43b2eaab4000000000080006558a492", 0x10}, {&(0x7f0000000240)="1652", 0x2}], 0x4) 5.922722788s ago: executing program 1 (id=3572): socket$nl_route(0x10, 0x3, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f0000000080), 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000180)={'vcan0\x00', 0x0}) sendmsg$can_bcm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB="05"], 0x48}}, 0x0) sendmsg$can_bcm(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)=ANY=[@ANYBLOB="0500000000e0ffffffffffff", @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="0000008001"], 0x48}}, 0x40000) sendmsg$can_bcm(r1, &(0x7f00000002c0)={&(0x7f0000000000)={0x1d, r2}, 0x10, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYRES32=r1], 0x48}}, 0x0) 5.493462751s ago: executing program 3 (id=3573): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x60280, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000280)={'virt_wifi0\x00', 0xc1eb461a2917d087}) mkdirat(0xffffffffffffffff, 0x0, 0x2) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) shmat(0x0, &(0x7f0000000000/0x4000)=nil, 0x4000) readv(r0, &(0x7f00000006c0)=[{&(0x7f0000000040)=""/10, 0xa}], 0x50) 5.162575065s ago: executing program 1 (id=3575): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x4000000000091}, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) ioctl$TCSETAF(r0, 0x5408, &(0x7f00000000c0)={0xcf50, 0x0, 0xffff, 0x9dff, 0x15}) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0xfffffff9, 0x0, 0xd, "0062007d82000000000000002240f7ffffff00"}) r1 = syz_open_pts(r0, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000200)=0x17) 4.889614591s ago: executing program 5 (id=3577): socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_sctp(0x2, 0x1, 0x84) socket$inet6_udp(0xa, 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet(0x2, 0x2, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) socket$packet(0x11, 0x3, 0x300) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket(0x28, 0x5, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c000200060000001f000000060001000000000008000500", @ANYRES32=r0, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x0) 4.53659782s ago: executing program 3 (id=3578): r0 = creat(&(0x7f0000000180)='./file0\x00', 0xa) close(r0) r1 = epoll_create1(0x80000) r2 = eventfd2(0x0, 0x80801) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000b80)) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r2, &(0x7f0000000180)={0x20000005}) timerfd_create(0x0, 0x80000) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, 0x0) 4.172376331s ago: executing program 4 (id=3579): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000980), r0) sendmsg$NL802154_CMD_DEL_SEC_KEY(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000280)={0x28, r1, 0x221, 0x70bd2d, 0x25dfdbff, {}, [@NL802154_ATTR_SEC_KEY={0x8, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_ID={0x4}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x28}, 0x1, 0x0, 0x0, 0x24008005}, 0x402c004) 4.058799452s ago: executing program 5 (id=3580): bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000500)=ANY=[], 0x0, 0x125, 0x0, 0x0, 0x4}, 0x28) socket$packet(0x11, 0x2, 0x300) r0 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r0, &(0x7f0000000180)='`', 0x500, 0x0, &(0x7f0000000240)={0x2f, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) 3.995506203s ago: executing program 6 (id=3581): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'team_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="800000001000030400000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000005000128009000100766c616e000000004000028006000100000ffe00340003800c0001000ffe0000030000000c00010000217fffff0080030c00010000010000030000000c000100040000000000000008000500", @ANYRES32=r1, @ANYBLOB="080003"], 0x80}, 0x1, 0x0, 0x0, 0x20044081}, 0x0) 3.75217897s ago: executing program 3 (id=3582): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) writev(r0, &(0x7f0000000400)=[{&(0x7f0000000140)="2e1221b23bb601c477d3df163e75963d86ddf06712e9000d2f8db0049d90491c3248040000dbb8a10000", 0x2a}, {&(0x7f0000000200)="24f5bb", 0x3}, {&(0x7f00000002c0)="a43b2eaab4000000000080006558a492", 0x10}, {&(0x7f0000000240)="1652", 0x2}], 0x4) 3.481654958s ago: executing program 1 (id=3583): r0 = inotify_init1(0x0) inotify_add_watch(r0, 0x0, 0xa4000061) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000540)={0x5c, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0x3ff}]}]}, 0x5c}}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, {0x2a00, 0x80010000, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc5e3ed1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "9001001c551265406c7f306003d8a0f4bd0000000300", [0x10, 0x4]}}) file_setattr(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x400) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x2800000, &(0x7f0000000140)={[{@abort}, {@delalloc}, {@inlinecrypt}, {@test_dummy_encryption}, {@mblk_io_submit}, {@errors_continue}, {@noquota}, {@nouser_xattr}]}, 0x1, 0xbc8, &(0x7f0000002380)="$eJzs3M9rHNcdAPDvjH7alrtyKaXuxSql2FC6ll1kalOoXVx66aHQXgsW8soIrX8gqTiSdVgl/0BIcg7kEkhiEnyIz74kkGsuiXONySFggmIlEEKiMPtDWku7+mGtNIr8+cDTvDdvZt73q5F23oPdDeC5NZT9SCOOR8SVJKJQ359GRG+11h9RqR23tDg/9u3i/FgSy8v/+SqJJCKeLM6PNa6V1LdH6o3+iPj470n88qX1407Pzk2OlsulqXr79Mz1W6enZ+f+NHF99FrpWunGmXN/GTk7cm74/EjHcv3u84v3v/ndP7+ofP/2D3e/fvXNJC7GQL2vOY961js2FEMrv5Nm3REx2oHr7wdd9Xya80y6Nzkp3eWgAABoK22aw/06CtEVq5O3QnzwSa7BAQAAAB2x3BWxDAAAABxwifU/AAAAHHCN9wE8WZwfa5R835Gwtx5fiojBWv5L9VLr6Y5KddsfPRFx+EkSzR9rTWqn7dhQRDz67Px7WYkWn0PebZWFiPhNq/ufVPMfrH8Sem3+aUQMd2D8oTXtn1P+Fzswft75A/B8enCp9iBb//xLV+Y/0eL5193i2fUs8n7+NeZ/S+vmf6v5d7WZ//17i2Pceev12+36svz/ev8f7zZKNn623VFS2/B4IeK33a3yT1byT9rkf2WLYxR+vF1q15d3/stvRJyM1vk3JBt/P9Hp8Ylyabj2s+UYCx+NvNNu/Lzzz+7/4Tb5b3D/+7N9t566Uvsv9fnf5cv32vVtnn/6ZW/y32qtt77nhdGZmakzEb3Jv9bvP7txvo1jGtfI8j/1+43//1v9/WevCZX630aW+UJ9m7VfXDPm3+7eeX+j/LO1X573/+r2739138tbHOMPH75yql1f8/o3K9n4j5LaWhgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGtKIGIgkLUZEUq2nabEYcSQifhWH0/LN6Zk/jt/8/42rWV/EYPSk4xPl0nBEFGrtJGufqdZX22fXtP8cEcci4rXCoWq7OHazfDXv5AEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFhxJCIGIkmLEZFGxFIhTYvFvKMCAAAAOm4w7wAAAACAXWf9DwAAAAef9T8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC77NiJBw+TiKhcOFQtmd56X0+ukQG7Lc07ACA3XXkHAOSmO+8AgNxsc41vugAHULJJf3/bnr6OxwIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADA/nXy+IOHSURULhyqlkxvva+n5Rkn9jA6YDeleQcA5KZro87uvYsD2HvP/C9+tLNxAHuv9RofeJ4km/T3rx5Tebqnb9diAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGD/GaiWJC1GRFqtp2mxGHE0IgajJxmfKJeGI+IXEfFpoacva/flHTQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAdNz07NzlaLpemnqWS7Ox0FRWVpkqyP8KoVfJ+ZQIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIA/Ts3OTo+VyaWo670gAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAvE3Pzk2OlsulqS1U7m3n4KZK3jkCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJCfnwIAAP//198NMw==") gettid() timer_create(0x0, 0x0, &(0x7f0000000200)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) rt_sigtimedwait(&(0x7f0000000000)={[0xffffffffffffffff]}, 0x0, 0x0, 0x8) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x25, 0x0, 0x0) 3.391089826s ago: executing program 4 (id=3584): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000c40)={0x6, 0x5, &(0x7f0000000200)=ANY=[@ANYBLOB="4c00000005000e000000000101000000000000000000000085000400c200000095"], 0x0, 0x2, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffc0}, 0x94) 3.340345038s ago: executing program 5 (id=3585): socket$nl_route(0x10, 0x3, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f0000000080), 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000180)={'vcan0\x00', 0x0}) sendmsg$can_bcm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB="05"], 0x48}}, 0x0) sendmsg$can_bcm(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)=ANY=[@ANYBLOB="0500000000e0ffffffffffff", @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="0000008001"], 0x48}}, 0x40000) sendmsg$can_bcm(r1, &(0x7f00000002c0)={&(0x7f0000000000)={0x1d, r2}, 0x10, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYRES32=r1], 0x48}}, 0x0) 3.132603504s ago: executing program 6 (id=3586): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) sendmsg$NL80211_CMD_SET_BSS(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x34, 0x0, 0x800, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_BSS_CTS_PROT={0x5, 0x1c, 0x2}, @NL80211_ATTR_AP_ISOLATE={0x5, 0x60, 0x4}, @NL80211_ATTR_BSS_CTS_PROT={0x5, 0x1c, 0xa}]}, 0x34}, 0x1, 0x0, 0x0, 0x44040}, 0x40) r0 = io_uring_setup(0x524, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 2.708068969s ago: executing program 4 (id=3587): setsockopt$MRT6_PIM(0xffffffffffffffff, 0x29, 0xcf, 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x20040, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14) setsockopt$inet6_mreq(r1, 0x29, 0x1b, 0x0, 0x0) setsockopt$inet6_mreq(r1, 0x29, 0x1c, &(0x7f00000001c0)={@remote}, 0x14) prctl$PR_SET_SECUREBITS(0x1c, 0x1d) setuid(0xee01) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r2 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') openat$binfmt(0xffffffffffffff9c, r2, 0x42, 0x1ff) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$NILFS_IOCTL_DELETE_CHECKPOINT(r0, 0x40086e81, &(0x7f0000000200)=0x1e000000000000) mount$fuse(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000020c0), 0x2300013, &(0x7f0000000300)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000120000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC, @ANYBLOB=',blksize=0x00\x00\x00\x00\x000p00000a00,\x00']) r4 = socket(0x10, 0x3, 0xfffffffe) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r5, &(0x7f0000000080)={0xa, 0x0, 0xfffffffe, @loopback, 0x4}, 0x1c) setsockopt$inet6_opts(r5, 0x29, 0x3b, 0x0, 0x10) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x2, &(0x7f0000000140)=@ccm_128={{0x303, 0x39}, "4526000000927650", '\x00', "c5f58cd9"}, 0x75) symlink(&(0x7f0000000000)='.\x00', &(0x7f0000000100)='./file0\x00') openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup/syz0\x00', 0x200002, 0x0) chmod(&(0x7f0000000180)='./file0\x00', 0x23f) setuid(0xee01) sendmsg$nl_generic(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000009100)=ANY=[@ANYBLOB="140000002ddf000000000000fbdbdf251d010900"], 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x0) execveat$binfmt(0xffffffffffffff9c, r2, 0x0, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) 2.687940428s ago: executing program 3 (id=3588): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000001c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) cachestat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 2.466842985s ago: executing program 6 (id=3589): syz_emit_ethernet(0x22, &(0x7f0000000080)={@local, @broadcast, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x2, 0x13, 0x14, 0x67, 0x0, 0x2, 0x32, 0x0, @empty, @broadcast}}}}}, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$can_raw(0x1d, 0x3, 0x1) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="5c00000002060108000000000000000000000000050005000a000000050001000700000005000400000000000900020073797a310000000015000300686173683a69702c706f72742c6e6574000000000c00078008000640"], 0x5c}}, 0x20084884) fcntl$setownex(0xffffffffffffffff, 0xf, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000140)={'syztnl2\x00', &(0x7f00000000c0)={'ip6_vti0\x00', 0x0, 0x4, 0xc1, 0x2, 0xb, 0x4a, @local, @mcast2, 0x40, 0x40, 0x40, 0xfffffff8}}) mkdir(&(0x7f0000000040)='./file0\x00', 0x3) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=@getstats={0x1c, 0x5e, 0x1, 0x70bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, 0x1}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0xc0840}, 0x40040) 2.466278063s ago: executing program 5 (id=3590): socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_sctp(0x2, 0x1, 0x84) socket$inet6_udp(0xa, 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet(0x2, 0x2, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) socket$packet(0x11, 0x3, 0x300) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket(0x28, 0x5, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c000200060000001f000000060001000000000008000500", @ANYRES32=r0, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x0) 1.913832983s ago: executing program 4 (id=3591): openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000d88000/0x1000)=nil, &(0x7f00007f2000/0x2000)=nil, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000b1f000/0xf000)=nil, &(0x7f0000f4a000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000fbc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f00008f7000/0x1000)=nil, &(0x7f00004d9000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x2405a045) r0 = io_uring_setup(0x2b24, &(0x7f0000000040)={0x0, 0xcaa1, 0xc000, 0x6, 0x2f8}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 1.893849821s ago: executing program 3 (id=3592): r0 = creat(&(0x7f0000000180)='./file0\x00', 0xa) close(r0) r1 = epoll_create1(0x80000) r2 = eventfd2(0x0, 0x80801) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000b80)) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r2, &(0x7f0000000180)={0x20000005}) timerfd_create(0x0, 0x80000) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, 0x0) 1.654678057s ago: executing program 6 (id=3593): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000140)={{r0, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f00000001c0)='%+9llu \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r1, r0}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x16, 0x10, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000341218007b8af0ff0000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.449294295s ago: executing program 1 (id=3594): r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), r1) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000005c0)=0x56) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000600)=ANY=[@ANYBLOB="400000001000390400000000fbdbdf2500000000", @ANYRES32=r2, @ANYBLOB="010f0000419a04002000128008000100736974001400028008000300ac1414bb05000400"], 0x40}}, 0x0) getsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, 0x0, &(0x7f0000000300)) sendto$packet(r0, &(0x7f0000000400)="05d936277c6f5422007f83477ca1b278e3e4018a34e7bfd3de1a00ad6762646c95c716727eb53bcc", 0x28, 0x40880, &(0x7f0000000200)={0x11, 0x86dd, r2, 0x1, 0x4, 0x6, @local}, 0x14) 1.373465918s ago: executing program 5 (id=3595): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x9c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x74, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x3c, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_XOR={0x4}, @NFTA_BITWISE_MASK={0xc, 0x4, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "8a95"}]}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0xe4}}, 0x0) 1.045778558s ago: executing program 3 (id=3596): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'team_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="800000001000030400"/18, @ANYRES32=0x0, @ANYBLOB="00000000000000005000128009000100766c616e000000004000028006000100000ffe00340003800c0001000ffe0000030000000c00010000217fffff0080030c00010000010000030000000c000100040000000000000008000500", @ANYRES32=r1, @ANYBLOB="080003"], 0x80}, 0x1, 0x0, 0x0, 0x20044081}, 0x0) 878.431275ms ago: executing program 4 (id=3597): bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000500)=ANY=[], 0x0, 0x125, 0x0, 0x0, 0x4}, 0x28) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'xfrm0\x00', 0x0}) r1 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r1, &(0x7f0000000180)='`', 0x500, 0x0, &(0x7f0000000240)={0x2f, 0x0, r0, 0x1, 0x0, 0x6, @local}, 0x14) 848.988491ms ago: executing program 6 (id=3598): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) writev(r0, &(0x7f0000000400)=[{&(0x7f0000000140)="2e1221b23bb601c477d3df163e75963d86ddf06712e9000d2f8db0049d90491c3248040000dbb8a10000", 0x2a}, {&(0x7f0000000200)="24f5bbd11c", 0x5}, {&(0x7f00000002c0)="a43b2eaab4000000000080006558a492", 0x10}, {&(0x7f0000000240)="1652", 0x2}], 0x4) 556.596524ms ago: executing program 5 (id=3599): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = socket$nl_generic(0x10, 0x3, 0x10) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c045942824251d7d17b5191584bcd4fbe40a23424d", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1d19cb307b3472ab9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[], 0x0, 0x3, 0x0, 0x0, 0x41000}, 0x94) listen(r0, 0x4) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), r1) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)={0x18, r4, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x48050}, 0x0) 0s ago: executing program 4 (id=3600): syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000480)='./file1\x00', 0x0, &(0x7f00000000c0)={[{@noload}, {@stripe={'stripe', 0x3d, 0xdc}}, {@bsdgroups}, {@noload}, {@abort}, {@auto_da_alloc}]}, 0xff, 0x459, &(0x7f00000004c0)="$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") r0 = open(&(0x7f0000000180)='./file1\x00', 0x24c42, 0x0) pwritev2(r0, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x78c00}], 0x1, 0x2000, 0x0, 0x3) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0xc020662a, &(0x7f0000000bc0)={0x72, 0xfffffffffffffffa, 0x0, 0x5f2, 0x2, 0x0, [{0x8000000000000000, 0x8000000000000000, 0x8, '\x00', 0x3b0e}, {0x41b, 0x7b, 0x19fdec03, '\x00', 0x2808}]}) kernel console output (not intermixed with test programs): Using ep0 maxpacket: 8 [ 976.012997][ T40] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 976.067393][ T40] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 976.068890][ T9236] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 146, changing to 7 [ 976.120968][ T1007] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 976.143148][ T9236] usb 1-1: New USB device found, idVendor=2b53, idProduct=0023, bcdDevice= 0.40 [ 976.144684][ T40] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 976.184041][ T9236] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 976.227455][ T9236] usb 1-1: Product: syz [ 976.229383][ T40] usb 5-1: Product: syz [ 976.265761][ T9236] usb 1-1: Manufacturer: syz [ 976.270988][ T9236] usb 1-1: SerialNumber: syz [ 976.297298][ T40] usb 5-1: Manufacturer: syz [ 976.323642][ T40] usb 5-1: SerialNumber: syz [ 976.429976][ T1007] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 976.489251][ T40] usb 5-1: 0:2 : does not exist [ 976.672121][ T1007] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 976.701626][ T40] usb 5-1: 5:0: failed to get current value for ch 0 (-22) [ 976.842120][ T1007] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 976.931315][T12293] syzkaller1: entered promiscuous mode [ 976.951334][T12293] syzkaller1: entered allmulticast mode [ 977.228304][ T40] usb 5-1: USB disconnect, device number 49 [ 977.715200][ T1007] bridge_slave_1: left allmulticast mode [ 977.740268][ T1007] bridge_slave_1: left promiscuous mode [ 977.767141][ T1007] bridge0: port 2(bridge_slave_1) entered disabled state [ 977.848669][ T9236] usb 1-1: USB disconnect, device number 35 [ 977.857130][ T1007] bridge_slave_0: left allmulticast mode [ 977.886190][ T1007] bridge_slave_0: left promiscuous mode [ 977.910890][ T1007] bridge0: port 1(bridge_slave_0) entered disabled state [ 978.115609][T11706] udevd[11706]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 978.391075][T11756] udevd[11756]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 979.080145][ T1007] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 979.131817][ T1007] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 979.215103][ T1007] bond0 (unregistering): Released all slaves [ 979.284203][ T1007] bond1 (unregistering): Released all slaves [ 979.398204][T12304] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1615'. [ 979.451465][ T1007] bond2 (unregistering): (slave veth3): Releasing active interface [ 979.482330][T12304] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1615'. [ 979.489592][ T1007] bond2 (unregistering): Released all slaves [ 979.700307][ T1007] bond3 (unregistering): (slave veth5): Releasing active interface [ 979.763781][ T1007] bond3 (unregistering): Released all slaves [ 979.925231][ T1007] bond4 (unregistering): (slave veth7): Releasing active interface [ 979.993270][ T1007] bond4 (unregistering): Released all slaves [ 980.127440][ T1007] bond5 (unregistering): Released all slaves [ 980.297891][ T1007] bond6 (unregistering): (slave veth9): Releasing active interface [ 980.391134][ T1007] bond6 (unregistering): Released all slaves [ 980.493029][ T1007] bond7 (unregistering): Released all slaves [ 980.555146][T12268] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 980.565571][T12268] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 980.580735][T12268] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 980.596618][T12268] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 980.608949][T12268] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 980.615317][T12314] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 980.681663][ T1007] bond8 (unregistering): Released all slaves [ 980.723848][ T1007] bond9 (unregistering): Released all slaves [ 980.770794][ T1007] bond10 (unregistering): Released all slaves [ 980.829125][ T1007] bond11 (unregistering): Released all slaves [ 980.891734][ T1007] bond12 (unregistering): Released all slaves [ 980.950485][T12319] : renamed from vlan0 [ 981.545250][ T1007] tipc: Disabling bearer [ 981.596705][ T1007] tipc: Left network mode [ 982.486811][ T1007] hsr_slave_0: left promiscuous mode [ 982.558345][ T1007] hsr_slave_1: left promiscuous mode [ 982.590202][ T1007] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 982.620640][ T1007] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 982.679182][ T1007] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 982.715180][ T1007] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 982.727183][ T6687] Bluetooth: hci4: command tx timeout [ 982.780425][ T1007] batman_adv: batadv0: Interface deactivated: macsec1 [ 982.831121][ T1007] batman_adv: batadv0: Removing interface: macsec1 [ 982.975325][ T1007] veth1_macvtap: left promiscuous mode [ 983.000830][ T1007] veth0_macvtap: left promiscuous mode [ 983.030288][ T1007] veth1_vlan: left promiscuous mode [ 983.056880][ T1007] veth0_vlan: left promiscuous mode [ 984.174834][ T805] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 984.200926][ T29] kauditd_printk_skb: 35 callbacks suppressed [ 984.201000][ T29] audit: type=1326 audit(1777651277.262:6686): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12355 comm="syz.4.1633" exe="/root/ci-upstream-kmsan-gce-386-root/syz-executor" sig=31 arch=40000003 syscall=20 compat=1 ip=0xf701f00c code=0x0 [ 984.394878][ T805] usb 2-1: Using ep0 maxpacket: 32 [ 984.414113][ T805] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 984.434317][ T805] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 984.462772][ T805] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 984.507810][ T805] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 984.569133][ T805] usb 2-1: config 0 descriptor?? [ 984.620694][ T805] hub 2-1:0.0: USB hub found [ 984.808079][ T6687] Bluetooth: hci4: command tx timeout [ 984.845872][ T805] hub 2-1:0.0: config failed, can't read hub descriptor (err -90) [ 985.067536][ T805] usbhid 2-1:0.0: can't add hid device: -71 [ 985.093488][ T805] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 985.156312][ T805] usb 2-1: USB disconnect, device number 42 [ 985.538964][T12370] random: crng reseeded on system resumption [ 985.557312][ T1007] team0 (unregistering): Port device team_slave_1 removed [ 985.607513][ T1007] team0 (unregistering): Port device team_slave_0 removed [ 986.246700][ T5224] 8021q: adding VLAN 0 to HW filter on device eth1 [ 986.301115][ T805] usb 2-1: new full-speed USB device number 43 using dummy_hcd [ 986.520067][ T805] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 986.584756][ T805] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 986.622191][ T805] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 986.680301][ T805] usb 2-1: New USB device found, idVendor=5543, idProduct=0004, bcdDevice= 0.00 [ 986.714613][ T805] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 986.736773][ T805] usb 2-1: config 0 descriptor?? [ 986.887818][ T6687] Bluetooth: hci4: command tx timeout [ 987.251116][ T805] usbhid 2-1:0.0: can't add hid device: -71 [ 987.290888][ T805] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 987.344246][ T805] usb 2-1: USB disconnect, device number 43 [ 988.967357][ T6687] Bluetooth: hci4: command tx timeout [ 989.375859][ T5679] usb 5-1: new high-speed USB device number 50 using dummy_hcd [ 989.487475][T12422] random: crng reseeded on system resumption [ 989.603545][ T5679] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 989.660142][ T5679] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 989.733815][ T5679] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 989.756653][ T5679] usb 5-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 989.795013][ T5679] usb 5-1: Manufacturer: syz [ 989.839201][ T5679] usb 5-1: config 0 descriptor?? [ 990.620431][ T805] usb 2-1: new full-speed USB device number 44 using dummy_hcd [ 990.812767][ T805] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 990.849456][ T805] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 990.866355][T12439] fuse: Bad value for 'fd' [ 990.871732][ T805] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 990.890649][ T805] usb 2-1: New USB device found, idVendor=5543, idProduct=0004, bcdDevice= 0.00 [ 990.907406][ T805] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 990.950411][ T805] usb 2-1: config 0 descriptor?? [ 991.018251][ T5679] uclogic 0003:256C:006D.000D: v1 frame probing failed: -71 [ 991.065816][ T5679] uclogic 0003:256C:006D.000D: failed probing parameters: -71 [ 991.113893][ T5679] uclogic 0003:256C:006D.000D: probe with driver uclogic failed with error -71 [ 991.189993][ T5679] usb 5-1: USB disconnect, device number 50 [ 991.462243][ T805] usbhid 2-1:0.0: can't add hid device: -71 [ 991.490004][ T805] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 991.514638][ T5224] 8021q: adding VLAN 0 to HW filter on device eth2 [ 991.561443][ T805] usb 2-1: USB disconnect, device number 44 [ 992.590230][T12316] bridge0: port 1(bridge_slave_0) entered blocking state [ 992.606356][T12316] bridge0: port 1(bridge_slave_0) entered disabled state [ 992.637779][T12316] bridge_slave_0: entered allmulticast mode [ 992.646058][ T805] usb 5-1: new high-speed USB device number 51 using dummy_hcd [ 992.679907][T12316] bridge_slave_0: entered promiscuous mode [ 992.763315][T12316] bridge0: port 2(bridge_slave_1) entered blocking state [ 992.779015][T12316] bridge0: port 2(bridge_slave_1) entered disabled state [ 992.794278][T12316] bridge_slave_1: entered allmulticast mode [ 992.833363][T12316] bridge_slave_1: entered promiscuous mode [ 992.856991][ T805] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 992.883398][ T805] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 992.899226][ T805] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 992.912504][ T805] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 992.959742][ T805] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 992.996348][ T805] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 993.067598][ T805] usb 5-1: config 0 descriptor?? [ 993.464259][T12316] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 993.520341][T12316] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 993.554801][ T5679] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 993.603577][ T805] hid_parser_main: 65 callbacks suppressed [ 993.603674][ T805] plantronics 0003:047F:FFFF.000E: unknown main item tag 0x0 [ 993.648394][ T805] plantronics 0003:047F:FFFF.000E: unknown main item tag 0x0 [ 993.679279][ T805] plantronics 0003:047F:FFFF.000E: unknown main item tag 0x0 [ 993.696567][ T805] plantronics 0003:047F:FFFF.000E: unknown main item tag 0x0 [ 993.707294][ T805] plantronics 0003:047F:FFFF.000E: unknown main item tag 0x0 [ 993.716815][ T805] plantronics 0003:047F:FFFF.000E: unknown main item tag 0x0 [ 993.733323][ T805] plantronics 0003:047F:FFFF.000E: unknown main item tag 0x0 [ 993.753720][ T805] plantronics 0003:047F:FFFF.000E: unknown main item tag 0x0 [ 993.756256][ T5679] usb 2-1: Using ep0 maxpacket: 16 [ 993.802890][ T805] plantronics 0003:047F:FFFF.000E: unknown main item tag 0x0 [ 993.837105][ T5679] usb 2-1: config 1 has an invalid interface number: 105 but max is 0 [ 993.847956][ T805] plantronics 0003:047F:FFFF.000E: unknown main item tag 0x0 [ 993.873447][ T5679] usb 2-1: config 1 has no interface number 0 [ 993.893143][ T5679] usb 2-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 993.944587][ T5679] usb 2-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 993.976406][T12316] team0: Port device team_slave_0 added [ 993.995006][ T5679] usb 2-1: config 1 interface 105 has no altsetting 0 [ 994.002607][ T805] plantronics 0003:047F:FFFF.000E: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 994.059513][ T5679] usb 2-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 994.093391][T12316] team0: Port device team_slave_1 added [ 994.122292][ T5679] usb 2-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 994.125189][ T805] usb 5-1: USB disconnect, device number 51 [ 994.184624][ T5679] usb 2-1: Product: syz [ 994.195536][ T5679] usb 2-1: Manufacturer: syz [ 994.213888][ T5679] usb 2-1: SerialNumber: syz [ 994.266472][T12466] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 994.339298][T12466] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 994.645531][T12316] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 994.664015][T12316] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 994.726185][T12316] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 994.799157][T12316] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 994.850436][T12316] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 994.893625][T12466] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 994.932386][T12466] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 994.998871][T12316] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 995.059267][T12474] fido_id[12474]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 995.593954][ T5679] aqc111 2-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71 [ 995.646289][ T5679] aqc111 2-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71 [ 995.691085][T12316] hsr_slave_0: entered promiscuous mode [ 995.749765][T12316] hsr_slave_1: entered promiscuous mode [ 995.802231][T12316] debugfs: 'hsr0' already exists in 'hsr' [ 995.828444][T12316] Cannot create hsr debugfs directory [ 995.953294][ T5679] aqc111 2-1:1.105 eth5: register 'aqc111' at usb-dummy_hcd.1-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter, 32:58:b8:d3:48:c8 [ 996.048335][ T5679] usb 2-1: USB disconnect, device number 45 [ 996.090981][ T5679] aqc111 2-1:1.105 eth5: unregister 'aqc111' usb-dummy_hcd.1-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter [ 996.257305][ T5679] aqc111 2-1:1.105 eth5 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 996.316634][ T5679] aqc111 2-1:1.105 eth5 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 996.340357][ T5679] aqc111 2-1:1.105 eth5 (unregistered): Failed to write(0x61) reg index 0x0000: -19 [ 996.510030][T12493] overlayfs: failed to clone upperpath [ 996.573848][ T5224] 8021q: adding VLAN 0 to HW filter on device eth3 [ 997.234788][ T5679] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 997.320307][T12499] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1673'. [ 997.410914][ T5679] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 997.456519][ T5679] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 997.502133][ T5679] usb 2-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 997.573335][ T5679] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 997.617513][ T5679] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 997.663637][ T5679] usb 2-1: Product: syz [ 997.685760][ T5679] usb 2-1: Manufacturer: syz [ 997.708937][ T5679] usb 2-1: SerialNumber: syz [ 997.783305][ T5679] cdc_mbim 2-1:1.0: skipping garbage [ 998.057889][T12316] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 998.148741][T12316] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 998.190965][T12316] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 998.311352][T12316] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 998.353781][T12316] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 998.436163][T12316] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 998.500011][T12316] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 998.637877][T12316] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 998.860838][ T5679] cdc_mbim 2-1:1.0: bind() failure [ 998.951934][ T5679] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 998.987851][ T5679] cdc_ncm 2-1:1.1: bind() failure [ 998.995063][T12520] fuse: fd is not a fuse device [ 999.083606][ T5679] usb 2-1: USB disconnect, device number 46 [ 1000.177257][T12532] kvm: pic: non byte write [ 1000.197817][T12316] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1000.413226][T12316] 8021q: adding VLAN 0 to HW filter on device team0 [ 1000.546275][ T5699] bridge0: port 1(bridge_slave_0) entered blocking state [ 1000.553810][ T5699] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1000.729650][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 1000.737306][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1002.630732][ T5224] 8021q: adding VLAN 0 to HW filter on device eth4 [ 1002.642394][T12387] usb 2-1: new low-speed USB device number 47 using dummy_hcd [ 1002.750457][ T1308] ieee802154 phy0 wpan0: encryption failed: -22 [ 1002.758075][ T1308] ieee802154 phy1 wpan1: encryption failed: -22 [ 1002.857040][T12387] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 8 [ 1002.925803][T12387] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1003.002322][T12387] usb 2-1: New USB device found, idVendor=046d, idProduct=c50c, bcdDevice= 0.00 [ 1003.047227][T12387] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1003.110047][T12387] usb 2-1: config 0 descriptor?? [ 1003.152976][T12561] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1003.417187][ T5679] usb 5-1: new high-speed USB device number 52 using dummy_hcd [ 1003.600860][ T5679] usb 5-1: Using ep0 maxpacket: 16 [ 1003.639220][ T5679] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1003.660136][ T5679] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1003.682923][T12387] hid_parser_main: 5 callbacks suppressed [ 1003.683021][T12387] logitech 0003:046D:C50C.000F: unknown main item tag 0x0 [ 1003.722732][ T5679] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 1003.738515][T12387] logitech 0003:046D:C50C.000F: unknown main item tag 0x0 [ 1003.757750][T12387] logitech 0003:046D:C50C.000F: unknown main item tag 0x0 [ 1003.762747][ T5679] usb 5-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00 [ 1003.787025][T12387] logitech 0003:046D:C50C.000F: unknown main item tag 0x0 [ 1003.808822][ T5679] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1003.814667][T12387] logitech 0003:046D:C50C.000F: unknown main item tag 0x0 [ 1003.852020][T12387] logitech 0003:046D:C50C.000F: unknown main item tag 0x0 [ 1003.858036][ T5679] usb 5-1: config 0 descriptor?? [ 1003.878968][T12387] logitech 0003:046D:C50C.000F: unknown main item tag 0x0 [ 1003.905344][T12387] logitech 0003:046D:C50C.000F: unknown main item tag 0x0 [ 1003.992427][T12387] logitech 0003:046D:C50C.000F: hidraw0: USB HID v0.05 Device [HID 046d:c50c] on usb-dummy_hcd.1-1/input0 [ 1004.142838][T12387] usb 2-1: USB disconnect, device number 47 [ 1004.461480][ T5679] appleir 0003:05AC:8241.0010: unknown main item tag 0x0 [ 1004.524039][ T5679] appleir 0003:05AC:8241.0010: unknown main item tag 0x0 [ 1004.657483][ T5679] appleir 0003:05AC:8241.0010: hiddev0,hidraw0: USB HID v0.00 Device [HID 05ac:8241] on usb-dummy_hcd.4-1/input0 [ 1004.790606][ T5679] usb 5-1: USB disconnect, device number 52 [ 1005.156360][T12585] bridge0: port 2(bridge_slave_1) entered disabled state [ 1005.164959][T12585] bridge0: port 1(bridge_slave_0) entered disabled state [ 1005.187636][T12580] fido_id[12580]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 1005.856439][ T5679] usb 4-1: new full-speed USB device number 47 using dummy_hcd [ 1005.891967][T12316] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1006.089858][ T5679] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 1006.134351][ T5679] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1006.207997][ T5679] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 1006.271476][ T5679] usb 4-1: New USB device found, idVendor=5543, idProduct=0004, bcdDevice= 0.00 [ 1006.330421][ T5679] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1006.397992][ T5679] usb 4-1: config 0 descriptor?? [ 1006.437938][T12594] fido_id[12594]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 1006.908499][ T5679] usbhid 4-1:0.0: can't add hid device: -71 [ 1006.929808][ T5679] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 1006.986120][ T5679] usb 4-1: USB disconnect, device number 47 [ 1007.500260][T12612] fuse: fd is not a fuse device [ 1008.611854][T12316] veth0_vlan: entered promiscuous mode [ 1008.742384][T12316] veth1_vlan: entered promiscuous mode [ 1009.201474][T12316] veth0_macvtap: entered promiscuous mode [ 1009.316087][T12316] veth1_macvtap: entered promiscuous mode [ 1009.617144][T12316] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1009.770711][T12316] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1009.919820][ T6893] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1009.969646][ T6893] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1009.998853][ T6893] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1010.033881][ T6893] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1010.845836][ T9236] usb 5-1: new high-speed USB device number 53 using dummy_hcd [ 1011.074959][ T9236] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1011.117894][ T9236] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1011.160286][ T9236] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1011.210519][ T9236] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 1011.282521][ T9236] usb 5-1: New USB device found, idVendor=0582, idProduct=0010, bcdDevice= 0.40 [ 1011.304038][ T9236] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1011.337216][ T9236] usb 5-1: Product: syz [ 1011.352173][ T9236] usb 5-1: Manufacturer: syz [ 1011.358178][ T9236] usb 5-1: SerialNumber: syz [ 1011.691524][ T9236] usb 5-1: 1:1 : no or invalid class specific endpoint descriptor [ 1011.735819][ T9236] usb 5-1: 1:1 : format type 129 is not supported yet [ 1012.176379][ T9236] usb 5-1: USB disconnect, device number 53 [ 1012.534952][T11695] udevd[11695]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1012.917447][T12682] : renamed from vlan0 (while UP) [ 1015.546055][T12725] overlayfs: failed to clone upperpath [ 1016.512665][ T595] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1016.557076][ T595] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1016.872228][ T6893] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1016.923257][ T6893] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1018.843071][ T5692] Bluetooth: hci5: Frame reassembly failed (-84) [ 1018.894944][T12268] Bluetooth: hci5: unexpected event 0x2f length: 0 < 1 [ 1019.659055][T12779] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1755'. [ 1019.720779][T12387] usb 5-1: new high-speed USB device number 54 using dummy_hcd [ 1019.916600][T12783] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1756'. [ 1019.925334][T12387] usb 5-1: Using ep0 maxpacket: 16 [ 1019.962276][T12387] usb 5-1: config 0 interface 0 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1019.989772][T12783] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1756'. [ 1020.032883][T12387] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1020.052906][T12387] usb 5-1: New USB device found, idVendor=05ac, idProduct=0269, bcdDevice= 0.00 [ 1020.074662][T12387] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1020.129447][T12387] usb 5-1: config 0 descriptor?? [ 1020.255953][ T805] usb 2-1: new full-speed USB device number 48 using dummy_hcd [ 1020.468988][ T805] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 1020.512907][ T805] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1056, setting to 64 [ 1020.544839][ T805] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 1020.575541][ T805] usb 2-1: New USB device found, idVendor=2006, idProduct=0118, bcdDevice= 0.00 [ 1020.585611][ T805] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1020.606662][T12387] hid (null): invalid report_size 26545 [ 1020.615252][ T805] usb 2-1: config 0 descriptor?? [ 1020.633740][T12785] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 1020.668731][T12387] hid_parser_main: 3 callbacks suppressed [ 1020.668828][T12387] magicmouse 0003:05AC:0269.0011: unknown main item tag 0x6 [ 1020.731887][T12387] magicmouse 0003:05AC:0269.0011: invalid report_size 26545 [ 1020.743671][T12793] overlayfs: failed to clone lowerpath [ 1020.764976][T12387] magicmouse 0003:05AC:0269.0011: item 0 2 1 7 parsing failed [ 1020.780805][T12387] magicmouse 0003:05AC:0269.0011: magicmouse hid parse failed [ 1020.828901][T12387] magicmouse 0003:05AC:0269.0011: probe with driver magicmouse failed with error -22 [ 1020.884905][ T6687] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 1020.887718][T12268] Bluetooth: hci5: command 0x1003 tx timeout [ 1020.938382][T12387] usb 5-1: USB disconnect, device number 54 [ 1021.265210][ T805] usbhid 2-1:0.0: can't add hid device: -71 [ 1021.290829][ T805] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 1021.342640][ T805] usb 2-1: USB disconnect, device number 48 [ 1021.681496][T12799] random: crng reseeded on system resumption [ 1022.676313][T12814] input: syz1 as /devices/virtual/input/input6 [ 1022.757269][ T805] usb 2-1: new full-speed USB device number 49 using dummy_hcd [ 1022.960900][ T805] usb 2-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1022.987328][ T805] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1023.017640][ T805] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 1023.042502][ T805] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 1023.072509][ T805] usb 2-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 1023.093640][ T805] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1023.112707][ T805] usb 2-1: Product: syz [ 1023.140743][ T805] usb 2-1: Manufacturer: syz [ 1023.158680][ T805] usb 2-1: SerialNumber: syz [ 1023.185798][ T805] usb 2-1: config 0 descriptor?? [ 1023.213879][T12811] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1023.309717][ T805] input: KB Gear Tablet as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input7 [ 1023.442338][ C1] kbtab 2-1:0.0: kbtab_irq - usb_submit_urb failed with result -1 [ 1023.591504][ T29] audit: type=1326 audit(1777651316.652:6687): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12810 comm="syz.1.1765" exe="/root/ci-upstream-kmsan-gce-386-root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7fe600c code=0x0 [ 1023.776160][ T805] usb 2-1: USB disconnect, device number 49 [ 1028.173025][ T5674] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 1028.366978][ T5674] usb 6-1: Using ep0 maxpacket: 32 [ 1028.405790][ T5674] usb 6-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1028.438911][ T5674] usb 6-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1028.500162][ T5674] usb 6-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 1028.541668][ T5674] usb 6-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 1028.570160][T12888] loop4: detected capacity change from 0 to 2048 [ 1028.581041][ T5674] usb 6-1: Product: syz [ 1028.588240][ T5674] usb 6-1: Manufacturer: syz [ 1028.617087][T12888] EXT4-fs: Ignoring removed i_version option [ 1028.655807][ T5674] hub 6-1:4.0: USB hub found [ 1028.788562][T12888] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1029.037466][ T5674] hub 6-1:4.0: 7 ports detected [ 1029.065032][ T5674] hub 6-1:4.0: insufficient power available to use all downstream ports [ 1029.452043][ T5674] hub 6-1:4.0: set hub depth failed [ 1029.540906][ T5674] usb 6-1: USB disconnect, device number 2 [ 1030.118151][ T5585] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1030.469427][T12910] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1793'. [ 1031.462167][T12919] 9p: Bad value for 'rfdno' [ 1031.668299][T12924] fuse: Bad value for 'fd' [ 1031.978978][T12928] netlink: 168 bytes leftover after parsing attributes in process `syz.1.1799'. [ 1033.151959][T12941] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1804'. [ 1034.607404][T12957] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1812'. [ 1035.676780][T12972] loop4: detected capacity change from 0 to 512 [ 1035.821404][T12972] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1035.885229][T12972] ext4 filesystem being mounted at /376/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1036.233533][ T5585] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1036.948947][T12988] loop1: detected capacity change from 0 to 256 [ 1037.323466][T12992] syzkaller0: entered promiscuous mode [ 1037.349187][T12992] syzkaller0: entered allmulticast mode [ 1038.415027][T13011] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1831'. [ 1039.050044][T13016] netlink: 'syz.4.1833': attribute type 13 has an invalid length. [ 1039.836054][T13025] loop5: detected capacity change from 0 to 512 [ 1039.894877][T13025] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 1039.982802][T13025] EXT4-fs error (device loop5): ext4_ext_check_inode:521: inode #16: comm syz.5.1838: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 2048(2048) [ 1040.002673][T13025] loop5: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 1040.004646][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 1040.020735][ C0] EXT4-fs (loop5): initial error at time 1777651333: ext4_ext_check_inode:521: inode 16 [ 1040.025265][T13025] EXT4-fs error (device loop5): ext4_orphan_get:1402: comm syz.5.1838: couldn't read orphan inode 16 (err -117) [ 1040.030839][ C0] EXT4-fs (loop5): last error at time 1777651333: ext4_ext_check_inode:521: inode 16 [ 1040.157622][T13025] loop5: lost filesystem error report for type 5 error -117 [ 1040.168592][T13025] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1040.212042][T13025] ext4 filesystem being mounted at /16/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1040.388827][T12316] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1041.029789][T13038] netlink: 256 bytes leftover after parsing attributes in process `syz.4.1842'. [ 1041.056473][T13038] netlink: 'syz.4.1842': attribute type 9 has an invalid length. [ 1041.844867][T13048] mmap: syz.5.1847 (13048) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 1042.520132][T13055] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1850'. [ 1043.779728][T13071] fuse: Bad value for 'fd' [ 1043.990565][T13075] loop4: detected capacity change from 0 to 128 [ 1044.156665][ T29] audit: type=1804 audit(1777651337.212:6688): pid=13075 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.1859" name="/newroot/385/file2/file0" dev="loop4" ino=1049053 res=1 errno=0 [ 1044.793413][T13074] syz.4.1859: attempt to access beyond end of device [ 1044.793413][T13074] loop4: rw=2049, sector=154, nr_sectors = 2 limit=128 [ 1045.245826][T13075] syz.4.1859: attempt to access beyond end of device [ 1045.245826][T13075] loop4: rw=2049, sector=138, nr_sectors = 2 limit=128 [ 1045.293135][T13075] buffer_io_error: 11 callbacks suppressed [ 1045.293213][T13075] Buffer I/O error on dev loop4, logical block 69, lost async page write [ 1045.379367][T13089] loop5: detected capacity change from 0 to 8192 [ 1046.749986][T13101] loop5: detected capacity change from 0 to 164 [ 1046.962581][T13105] overlayfs: failed to resolve './bus': -2 [ 1047.572226][T13111] loop4: detected capacity change from 0 to 256 [ 1048.019613][ T5674] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 1048.206894][ T5674] usb 2-1: Using ep0 maxpacket: 16 [ 1048.253218][ T5674] usb 2-1: config 1 has an invalid interface number: 105 but max is 0 [ 1048.287464][ T5674] usb 2-1: config 1 has no interface number 0 [ 1048.321930][ T5674] usb 2-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 1048.376381][ T5674] usb 2-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 1048.413408][ T5674] usb 2-1: config 1 interface 105 has no altsetting 0 [ 1048.462414][ T5674] usb 2-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 1048.501427][ T5674] usb 2-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 1048.539041][ T5674] usb 2-1: Product: syz [ 1048.573716][ T5674] usb 2-1: Manufacturer: syz [ 1048.596246][ T5674] usb 2-1: SerialNumber: syz [ 1048.603414][T13122] loop4: detected capacity change from 0 to 1024 [ 1048.636903][T13116] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1048.665862][T13122] EXT4-fs: Ignoring removed bh option [ 1048.688581][T13116] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1048.787429][T13122] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1049.003661][T13122] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.1881: bg 0: block 248: padding at end of block bitmap is not set [ 1049.076684][T13122] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2860: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 1049.143314][T13116] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1049.151791][T13122] syz.4.1881 (13122) used greatest stack depth: 3400 bytes left [ 1049.198885][T13116] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1049.463499][ T5585] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1049.858317][ T5674] aqc111 2-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -32 [ 1049.905074][ T5674] aqc111 2-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71 [ 1050.018409][ T5674] aqc111 2-1:1.105 eth5: register 'aqc111' at usb-dummy_hcd.1-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter, 6a:4e:46:af:90:ce [ 1050.100572][ T5674] usb 2-1: USB disconnect, device number 50 [ 1050.201698][ T5674] aqc111 2-1:1.105 eth5: unregister 'aqc111' usb-dummy_hcd.1-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter [ 1050.395755][ T5674] aqc111 2-1:1.105 eth5 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 1050.437081][ T5674] aqc111 2-1:1.105 eth5 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 1050.464159][ T5674] aqc111 2-1:1.105 eth5 (unregistered): Failed to write(0x61) reg index 0x0000: -19 [ 1050.517491][T13147] overlayfs: failed to resolve './bus': -2 [ 1052.494286][T13169] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1899'. [ 1052.511291][T13169] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1899'. [ 1052.533986][T13169] loop5: detected capacity change from 0 to 128 [ 1053.017437][T13171] netlink: 256 bytes leftover after parsing attributes in process `syz.4.1900'. [ 1053.277781][T13173] overlayfs: failed to resolve './bus': -2 [ 1055.282477][ T29] audit: type=1326 audit(1777651348.342:6689): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13197 comm="syz.1.1912" exe="/root/ci-upstream-kmsan-gce-386-root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe600c code=0x7ffc0000 [ 1055.412111][ T29] audit: type=1326 audit(1777651348.342:6690): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13197 comm="syz.1.1912" exe="/root/ci-upstream-kmsan-gce-386-root/syz-executor" sig=0 arch=40000003 syscall=370 compat=1 ip=0xf7fe600c code=0x7ffc0000 [ 1055.565044][ T29] audit: type=1326 audit(1777651348.342:6691): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13197 comm="syz.1.1912" exe="/root/ci-upstream-kmsan-gce-386-root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe600c code=0x7ffc0000 [ 1055.681513][ T29] audit: type=1326 audit(1777651348.352:6692): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13197 comm="syz.1.1912" exe="/root/ci-upstream-kmsan-gce-386-root/syz-executor" sig=0 arch=40000003 syscall=289 compat=1 ip=0xf7fe600c code=0x7ffc0000 [ 1055.764968][ T29] audit: type=1326 audit(1777651348.352:6693): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13197 comm="syz.1.1912" exe="/root/ci-upstream-kmsan-gce-386-root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe600c code=0x7ffc0000 [ 1055.973943][T13202] overlayfs: failed to resolve './bus': -2 [ 1056.714915][ T29] audit: type=1326 audit(1777651349.772:6694): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13188 comm="syz.3.1909" exe="/root/ci-upstream-kmsan-gce-386-root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7fe700c code=0x0 [ 1058.317445][T13231] loop4: detected capacity change from 0 to 512 [ 1058.384533][T13231] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 1060.215334][T13255] 9pnet_fd: p9_fd_create_tcp (13255): problem connecting socket to 127.0.0.1 [ 1060.945833][ T5674] usb 2-1: new full-speed USB device number 51 using dummy_hcd [ 1060.978299][T13264] loop4: detected capacity change from 0 to 256 [ 1061.114684][ T5674] usb 2-1: device descriptor read/64, error -71 [ 1061.389099][ T5674] usb 2-1: new full-speed USB device number 52 using dummy_hcd [ 1061.546991][ T5674] usb 2-1: device descriptor read/64, error -71 [ 1061.696024][ T5674] usb usb2-port1: attempt power cycle [ 1062.080948][ T5674] usb 2-1: new full-speed USB device number 53 using dummy_hcd [ 1062.129980][ T5674] usb 2-1: device descriptor read/8, error -71 [ 1062.405052][ T5674] usb 2-1: new full-speed USB device number 54 using dummy_hcd [ 1062.431346][ T5674] usb 2-1: device descriptor read/8, error -71 [ 1062.556044][ T5674] usb usb2-port1: unable to enumerate USB device [ 1064.175312][ T1308] ieee802154 phy0 wpan0: encryption failed: -22 [ 1064.182972][ T1308] ieee802154 phy1 wpan1: encryption failed: -22 [ 1064.600764][T13311] tipc: Failed to remove unknown binding: 66,0,0/0:2306235126/2306235127 [ 1064.630561][T13311] tipc: Failed to remove unknown binding: 66,0,0/0:2306235126/2306235127 [ 1066.125584][T12387] usb 5-1: new full-speed USB device number 55 using dummy_hcd [ 1066.304781][T12387] usb 5-1: device descriptor read/64, error -71 [ 1066.573228][T12387] usb 5-1: new full-speed USB device number 56 using dummy_hcd [ 1066.733518][T12387] usb 5-1: device descriptor read/64, error -71 [ 1066.865844][T12387] usb usb5-port1: attempt power cycle [ 1066.928158][T13344] loop1: detected capacity change from 0 to 164 [ 1066.955840][T13344] iso9660: Bad value for 'check' [ 1067.256178][T12387] usb 5-1: new full-speed USB device number 57 using dummy_hcd [ 1067.317972][T12387] usb 5-1: device descriptor read/8, error -71 [ 1067.584953][T12387] usb 5-1: new full-speed USB device number 58 using dummy_hcd [ 1067.650344][T12387] usb 5-1: device descriptor read/8, error -71 [ 1067.784357][T12387] usb usb5-port1: unable to enumerate USB device [ 1068.533189][T13362] loop1: detected capacity change from 0 to 2048 [ 1068.660577][T13362] loop1: p2 p3 p7 [ 1069.423643][T13370] program syz.5.1987 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1072.678056][T13406] loop4: detected capacity change from 0 to 128 [ 1074.104916][T13418] loop4: detected capacity change from 0 to 512 [ 1074.138856][T13418] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1074.312616][T13418] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.2009: invalid indirect mapped block 4294967295 (level 1) [ 1074.450512][T13418] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 1074.455511][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 1074.471487][ C0] EXT4-fs (loop4): initial error at time 1777651367: ext4_free_branches:1023: inode 11 [ 1074.481557][ C0] EXT4-fs (loop4): last error at time 1777651367: ext4_free_branches:1023: inode 11 [ 1074.504719][T13418] EXT4-fs (loop4): Remounting filesystem read-only [ 1074.529202][T13418] EXT4-fs (loop4): 2 truncates cleaned up [ 1074.592131][T13418] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1075.293024][ T5585] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1076.015015][T13440] syz_tun: entered allmulticast mode [ 1076.024850][T13439] syz_tun: left allmulticast mode [ 1077.532663][T13463] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2027'. [ 1079.921997][T13498] loop4: detected capacity change from 0 to 512 [ 1080.007544][T13498] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1080.027099][T13498] ext4 filesystem being mounted at /429/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1080.112592][T13498] EXT4-fs (loop4): shut down requested (1) [ 1080.266676][ T5585] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1080.692533][T13515] program syz.4.2046 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1080.867798][T13518] loop5: detected capacity change from 0 to 512 [ 1080.942980][T13518] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1081.061965][T13518] ext4 filesystem being mounted at /73/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1081.488062][T12316] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1081.906451][T13530] overlayfs: missing 'lowerdir' [ 1081.998616][T13533] veth0_macvtap: Caught tx_queue_len zero misconfig [ 1083.344901][ T9236] usb 5-1: new full-speed USB device number 59 using dummy_hcd [ 1083.573710][ T9236] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1083.607900][ T9236] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1083.630821][ T9236] usb 5-1: New USB device found, idVendor=5543, idProduct=0004, bcdDevice= 0.00 [ 1083.641549][ T9236] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1083.656399][ T805] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 1083.687187][ T9236] usb 5-1: config 0 descriptor?? [ 1083.795065][T13559] overlayfs: missing 'lowerdir' [ 1083.846033][ T805] usb 2-1: Using ep0 maxpacket: 16 [ 1083.870062][ T805] usb 2-1: config 1 has an invalid interface number: 105 but max is 0 [ 1083.900135][ T805] usb 2-1: config 1 has no interface number 0 [ 1083.914697][ T805] usb 2-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 1083.941145][ T805] usb 2-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 1083.998039][ T805] usb 2-1: config 1 interface 105 has no altsetting 0 [ 1084.025511][ T805] usb 2-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 1084.049251][ T805] usb 2-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 1084.087137][ T805] usb 2-1: Product: syz [ 1084.102705][ T805] usb 2-1: Manufacturer: syz [ 1084.118937][ T805] usb 2-1: SerialNumber: syz [ 1084.149827][T13557] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 1084.173487][T13557] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 1084.656595][T13557] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 1084.675558][T13557] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 1085.117836][ T805] aqc111 2-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -32 [ 1085.371886][ T805] aqc111 2-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71 [ 1085.471473][ T805] aqc111 2-1:1.105 eth5: register 'aqc111' at usb-dummy_hcd.1-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter, 92:2f:0d:69:ef:4f [ 1085.570119][ T805] usb 2-1: USB disconnect, device number 55 [ 1085.618227][ T805] aqc111 2-1:1.105 eth5: unregister 'aqc111' usb-dummy_hcd.1-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter [ 1085.777625][ T805] aqc111 2-1:1.105 eth5 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 1085.803056][ T805] aqc111 2-1:1.105 eth5 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 1085.847452][ T805] aqc111 2-1:1.105 eth5 (unregistered): Failed to write(0x61) reg index 0x0000: -19 [ 1086.345406][ T805] usb 5-1: USB disconnect, device number 59 [ 1086.974683][T13594] netlink: 392 bytes leftover after parsing attributes in process `syz.1.2082'. [ 1088.194704][ T805] usb 5-1: new high-speed USB device number 60 using dummy_hcd [ 1088.254865][ T9236] usb 2-1: new full-speed USB device number 56 using dummy_hcd [ 1088.395695][ T805] usb 5-1: Using ep0 maxpacket: 16 [ 1088.420976][ T9236] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1088.423556][ T805] usb 5-1: config 1 has an invalid interface number: 105 but max is 0 [ 1088.439813][ T9236] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 1088.439972][ T9236] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 1088.475013][ T805] usb 5-1: config 1 has no interface number 0 [ 1088.501727][ T805] usb 5-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 1088.519255][ T805] usb 5-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 1088.521247][ T9236] usb 2-1: New USB device found, idVendor=5543, idProduct=0004, bcdDevice= 0.00 [ 1088.532368][ T805] usb 5-1: config 1 interface 105 has no altsetting 0 [ 1088.566872][ T805] usb 5-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 1088.574992][ T9236] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1088.604133][ T805] usb 5-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 1088.617462][ T805] usb 5-1: Product: syz [ 1088.623082][ T805] usb 5-1: Manufacturer: syz [ 1088.634129][ T805] usb 5-1: SerialNumber: syz [ 1088.646903][ T9236] usb 2-1: config 0 descriptor?? [ 1088.648299][T13609] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1088.700409][T13609] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1088.731513][ T9236] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 1089.214408][T13609] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1089.246250][T13609] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1089.691897][ T805] aqc111 5-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -32 [ 1089.941380][ T805] aqc111 5-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71 [ 1090.003551][ T805] aqc111 5-1:1.105 eth5: register 'aqc111' at usb-dummy_hcd.4-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter, 9a:21:41:bd:20:f9 [ 1090.048111][ T805] usb 5-1: USB disconnect, device number 60 [ 1090.078586][ T805] aqc111 5-1:1.105 eth5: unregister 'aqc111' usb-dummy_hcd.4-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter [ 1090.158475][ T805] aqc111 5-1:1.105 eth5 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 1090.201071][ T805] aqc111 5-1:1.105 eth5 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 1090.232026][ T805] aqc111 5-1:1.105 eth5 (unregistered): Failed to write(0x61) reg index 0x0000: -19 [ 1091.184932][ T805] usb 2-1: USB disconnect, device number 56 [ 1092.253851][T13658] batadv_slave_1: entered promiscuous mode [ 1092.283820][T13656] batadv_slave_1: left promiscuous mode [ 1092.525842][T12387] usb 2-1: new high-speed USB device number 57 using dummy_hcd [ 1092.705190][T12387] usb 2-1: Using ep0 maxpacket: 16 [ 1092.731520][T12387] usb 2-1: config 1 has an invalid interface number: 105 but max is 0 [ 1092.752704][T12387] usb 2-1: config 1 has no interface number 0 [ 1092.763079][T12387] usb 2-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 1092.794713][T12387] usb 2-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 1092.849043][T12387] usb 2-1: config 1 interface 105 has no altsetting 0 [ 1092.901478][T12387] usb 2-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 1092.931170][T12387] usb 2-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 1092.967649][T12387] usb 2-1: Product: syz [ 1092.982944][T12387] usb 2-1: Manufacturer: syz [ 1092.999579][T12387] usb 2-1: SerialNumber: syz [ 1093.036953][T13663] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1093.079421][T13663] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1093.573608][T13663] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1093.611130][T13663] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1094.056264][T12387] aqc111 2-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -32 [ 1094.291936][T12387] aqc111 2-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71 [ 1094.395580][T12387] aqc111 2-1:1.105 eth5: register 'aqc111' at usb-dummy_hcd.1-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter, 22:ad:2e:d1:63:51 [ 1094.482213][T12387] usb 2-1: USB disconnect, device number 57 [ 1094.516238][T12387] aqc111 2-1:1.105 eth5: unregister 'aqc111' usb-dummy_hcd.1-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter [ 1094.575393][T13688] veth1_to_batadv: entered promiscuous mode [ 1094.618408][T13688] macvlan2: entered promiscuous mode [ 1095.053519][T12387] aqc111 2-1:1.105 eth5 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 1095.104215][T12387] aqc111 2-1:1.105 eth5 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 1095.157325][T12387] aqc111 2-1:1.105 eth5 (unregistered): Failed to write(0x61) reg index 0x0000: -19 [ 1095.938140][T13702] loop5: detected capacity change from 0 to 512 [ 1096.026206][T13702] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 1096.341027][T13704] loop1: detected capacity change from 0 to 2048 [ 1096.531585][T13704] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1096.689199][T13704] ext4 filesystem being mounted at /411/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1097.224829][ T9236] usb 6-1: new full-speed USB device number 3 using dummy_hcd [ 1097.422591][ T9236] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1097.484064][ T9236] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 1097.534797][ T9236] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 1097.553216][ T5577] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1097.581873][ T9236] usb 6-1: New USB device found, idVendor=5543, idProduct=0004, bcdDevice= 0.00 [ 1097.593567][ T9236] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1097.648257][ T9236] usb 6-1: config 0 descriptor?? [ 1097.723642][ T9236] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 1100.176424][T12387] usb 6-1: USB disconnect, device number 3 [ 1100.574631][T13756] tipc: Failed to remove unknown binding: 66,0,0/0:844151275/844151276 [ 1101.039598][T13758] sit1: entered allmulticast mode [ 1101.571617][T13770] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2161'. [ 1102.734236][T13786] tipc: Failed to remove unknown binding: 66,0,0/0:2800217268/2800217269 [ 1103.373962][T13795] netlink: 'syz.4.2172': attribute type 25 has an invalid length. [ 1103.673176][T13800] loop5: detected capacity change from 0 to 512 [ 1103.758084][T13800] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1103.812909][T13800] ext4 filesystem being mounted at /110/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1103.847084][T13800] EXT4-fs (loop5): shut down requested (1) [ 1103.997261][T12316] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1104.320266][T13808] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2178'. [ 1105.232110][T13823] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2184'. [ 1105.254690][T13823] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2184'. [ 1107.207263][T12268] Bluetooth: hci4: command 0x0406 tx timeout [ 1112.303425][T13930] loop5: detected capacity change from 0 to 4096 [ 1112.318569][T13930] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1112.361015][T13930] EXT4-fs (loop5): stripe (97) is not aligned with cluster size (16), stripe is disabled [ 1112.422360][T13930] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1112.970269][T12316] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1115.219529][T13974] loop5: detected capacity change from 0 to 512 [ 1115.284917][T13974] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1115.345513][T13974] ext4 filesystem being mounted at /126/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1115.685826][T12316] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1118.141644][T14020] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2265'. [ 1119.512145][ T29] audit: type=1326 audit(1777651412.572:6695): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14037 comm="syz.3.2275" exe="/root/ci-upstream-kmsan-gce-386-root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe700c code=0x7ffc0000 [ 1119.603139][ T29] audit: type=1326 audit(1777651412.572:6696): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14037 comm="syz.3.2275" exe="/root/ci-upstream-kmsan-gce-386-root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe700c code=0x7ffc0000 [ 1119.709001][ T29] audit: type=1326 audit(1777651412.612:6697): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14037 comm="syz.3.2275" exe="/root/ci-upstream-kmsan-gce-386-root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe700c code=0x7ffc0000 [ 1119.812756][ T29] audit: type=1326 audit(1777651412.612:6698): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14037 comm="syz.3.2275" exe="/root/ci-upstream-kmsan-gce-386-root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf71e616b code=0x7ffc0000 [ 1119.902953][ T29] audit: type=1326 audit(1777651412.612:6699): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14037 comm="syz.3.2275" exe="/root/ci-upstream-kmsan-gce-386-root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe700c code=0x7ffc0000 [ 1119.965744][ T29] audit: type=1326 audit(1777651412.612:6700): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14037 comm="syz.3.2275" exe="/root/ci-upstream-kmsan-gce-386-root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe700c code=0x7ffc0000 [ 1119.998099][ T29] audit: type=1326 audit(1777651412.632:6701): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14037 comm="syz.3.2275" exe="/root/ci-upstream-kmsan-gce-386-root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe700c code=0x7ffc0000 [ 1120.101343][ T29] audit: type=1326 audit(1777651412.632:6702): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14037 comm="syz.3.2275" exe="/root/ci-upstream-kmsan-gce-386-root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7fe700c code=0x7ffc0000 [ 1120.173428][ T29] audit: type=1326 audit(1777651412.632:6703): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14037 comm="syz.3.2275" exe="/root/ci-upstream-kmsan-gce-386-root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe700c code=0x7ffc0000 [ 1120.264729][ T29] audit: type=1326 audit(1777651412.632:6704): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14037 comm="syz.3.2275" exe="/root/ci-upstream-kmsan-gce-386-root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe700c code=0x7ffc0000 [ 1123.683600][T14104] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2306'. [ 1124.568652][T14114] program syz.5.2312 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1125.058680][T14121] overlayfs: missing 'lowerdir' [ 1125.462466][T14125] lo: Caught tx_queue_len zero misconfig [ 1125.620060][ T1308] ieee802154 phy0 wpan0: encryption failed: -22 [ 1125.630193][ T1308] ieee802154 phy1 wpan1: encryption failed: -22 [ 1126.015209][T14131] netlink: 152 bytes leftover after parsing attributes in process `syz.3.2319'. [ 1127.734692][T14149] overlayfs: missing 'workdir' [ 1128.581892][T14162] netlink: 152 bytes leftover after parsing attributes in process `syz.3.2332'. [ 1129.947281][T14176] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2338'. [ 1130.139595][T14181] overlayfs: missing 'workdir' [ 1130.530235][T14189] netlink: 140 bytes leftover after parsing attributes in process `syz.4.2343'. [ 1130.933456][T14197] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2348'. [ 1132.191203][T14212] overlayfs: missing 'workdir' [ 1134.100161][T14237] overlayfs: failed to clone upperpath [ 1134.447350][T14242] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2368'. [ 1134.468420][T14242] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2368'. [ 1134.523399][T14242] vlan2: entered promiscuous mode [ 1134.550028][T14242] syz_tun: entered promiscuous mode [ 1134.568176][T14242] vlan2: entered allmulticast mode [ 1134.573581][T14242] syz_tun: entered allmulticast mode [ 1135.753093][T14257] netlink: 140 bytes leftover after parsing attributes in process `syz.5.2377'. [ 1136.140450][T14265] overlayfs: failed to clone upperpath [ 1137.623579][T14296] overlayfs: failed to clone upperpath [ 1139.191492][T14327] overlayfs: failed to clone upperpath [ 1140.732685][T14357] overlayfs: failed to clone upperpath [ 1142.356000][T14381] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2432'. [ 1142.473600][T14383] fuse: fd is not a fuse device [ 1142.677821][T14385] overlayfs: failed to clone upperpath [ 1144.297713][ T29] kauditd_printk_skb: 9 callbacks suppressed [ 1144.297789][ T29] audit: type=1326 audit(1777651437.342:6714): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14406 comm="syz.3.2444" exe="/root/ci-upstream-kmsan-gce-386-root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7fe700c code=0x0 [ 1144.587190][T14412] fuse: fd is not a fuse device [ 1145.201011][T14416] overlayfs: failed to clone upperpath [ 1146.547260][T14437] fuse: fd is not a fuse device [ 1147.254215][T14446] overlayfs: failed to clone upperpath [ 1147.739040][T14458] netlink: 'syz.3.2464': attribute type 4 has an invalid length. [ 1148.337768][T14468] fuse: fd is not a fuse device [ 1148.822905][T14477] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2475'. [ 1149.940540][T14493] fuse: fd is not a fuse device [ 1151.267573][T14520] fuse: fd is not a fuse device [ 1152.820464][T14550] fuse: fd is not a fuse device [ 1153.211623][T14557] netlink: 132 bytes leftover after parsing attributes in process `syz.5.2513'. [ 1153.572027][T14563] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2516'. [ 1156.320334][T14615] fuse: fd is not a fuse device [ 1156.945801][T14626] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2543'. [ 1159.793120][ T29] audit: type=1326 audit(1777651452.852:6715): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14660 comm="syz.5.2557" exe="/root/ci-upstream-kmsan-gce-386-root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f4400c code=0x0 [ 1160.431299][T14668] fuse: fd is not a fuse device [ 1162.529278][T14692] fuse: fd is not a fuse device [ 1164.232989][T14724] fuse: fd is not a fuse device [ 1166.050847][T14753] fuse: fd is not a fuse device [ 1167.915165][T14779] fuse: fd is not a fuse device [ 1169.008701][T14802] tipc: Enabling of bearer rejected, failed to enable media [ 1169.802885][T14817] fuse: fd is not a fuse device [ 1171.313891][T12268] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1171.331349][T12268] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1171.343056][T12268] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1171.362989][T12268] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1171.389344][T12268] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1172.075437][T14849] fuse: fd is not a fuse device [ 1173.445986][T12268] Bluetooth: hci5: command tx timeout [ 1173.710617][ T13] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1173.891396][ T13] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1174.062354][ T13] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1174.471870][ T13] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1174.584017][T14887] fuse: Bad value for 'fd' [ 1174.891306][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 1174.915218][ T13] bridge_slave_0: left allmulticast mode [ 1174.927998][ T13] bridge_slave_0: left promiscuous mode [ 1174.945946][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 1175.527120][T12268] Bluetooth: hci5: command tx timeout [ 1176.705241][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1176.761555][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1176.797790][ T13] bond0 (unregistering): Released all slaves [ 1176.843431][ T13] bond1 (unregistering): (slave veth3): Releasing active interface [ 1176.882920][ T13] bond1 (unregistering): Released all slaves [ 1176.929293][ T13] bond2 (unregistering): (slave veth5): Releasing active interface [ 1176.975727][ T13] bond2 (unregistering): Released all slaves [ 1177.018535][ T13] bond3 (unregistering): Released all slaves [ 1177.088266][ T13] bond4 (unregistering): Released all slaves [ 1177.181585][ T13] bond5 (unregistering): Released all slaves [ 1177.218412][ T13] bond6 (unregistering): Released all slaves [ 1177.292930][ T13] bond7 (unregistering): Released all slaves [ 1177.331808][T14918] fuse: Bad value for 'fd' [ 1177.604789][ T6687] Bluetooth: hci5: command tx timeout [ 1177.858018][ T13] tipc: Disabling bearer [ 1177.870928][ T13] tipc: Left network mode [ 1177.947771][T14925] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2663'. [ 1179.148204][T14837] bridge0: port 1(bridge_slave_0) entered blocking state [ 1179.165925][T14837] bridge0: port 1(bridge_slave_0) entered disabled state [ 1179.182341][T14837] bridge_slave_0: entered allmulticast mode [ 1179.216525][T14837] bridge_slave_0: entered promiscuous mode [ 1179.237126][T14837] bridge0: port 2(bridge_slave_1) entered blocking state [ 1179.248660][T14837] bridge0: port 2(bridge_slave_1) entered disabled state [ 1179.259824][T14837] bridge_slave_1: entered allmulticast mode [ 1179.279147][T14837] bridge_slave_1: entered promiscuous mode [ 1179.685377][ T6687] Bluetooth: hci5: command tx timeout [ 1180.854156][T14837] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1180.959876][T14837] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1181.453084][T14962] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2672'. [ 1181.536341][ T5224] 8021q: adding VLAN 0 to HW filter on device eth5 [ 1181.582724][T14837] team0: Port device team_slave_0 added [ 1181.653631][ T13] hsr_slave_0: left promiscuous mode [ 1181.703573][ T13] hsr_slave_1: left promiscuous mode [ 1181.728715][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1181.740332][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1181.759530][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1181.794619][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1181.821757][ T13] batman_adv: batadv0: Interface deactivated: macsec1 [ 1181.862323][ T13] batman_adv: batadv0: Removing interface: macsec1 [ 1181.901172][ T13] veth1_macvtap: left promiscuous mode [ 1181.917810][ T13] veth0_macvtap: left promiscuous mode [ 1181.933480][ T13] veth1_vlan: left promiscuous mode [ 1182.889410][T14983] fuse: Bad value for 'fd' [ 1183.763216][ T13] team0 (unregistering): Port device team_slave_1 removed [ 1183.814276][ T13] team0 (unregistering): Port device team_slave_0 removed [ 1184.320566][T14837] team0: Port device team_slave_1 added [ 1184.382548][T14989] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2685'. [ 1184.746945][T14837] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1184.767617][T14837] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1184.861437][T14837] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1184.927636][T14837] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1184.948419][T14837] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1185.019147][T14837] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1185.336188][T14837] hsr_slave_0: entered promiscuous mode [ 1185.370345][T14837] hsr_slave_1: entered promiscuous mode [ 1185.397994][T14837] debugfs: 'hsr0' already exists in 'hsr' [ 1185.403928][T14837] Cannot create hsr debugfs directory [ 1185.952400][T15003] bond1: option primary_reselect: invalid value (254) [ 1186.001301][T15003] bond1 (unregistering): Released all slaves [ 1186.140399][T15013] fuse: Bad value for 'fd' [ 1186.909726][T15030] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2697'. [ 1187.054723][ T1308] ieee802154 phy0 wpan0: encryption failed: -22 [ 1187.069760][ T1308] ieee802154 phy1 wpan1: encryption failed: -22 [ 1188.181116][T14837] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1188.237978][T14837] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1188.265788][T14837] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1188.318331][T14837] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1188.360877][T14837] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1188.416995][T14837] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1188.454360][T14837] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1188.553658][T14837] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1188.718343][T15057] fuse: Bad value for 'fd' [ 1189.263723][T15064] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2708'. [ 1190.448951][T14837] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1190.924372][T14837] 8021q: adding VLAN 0 to HW filter on device team0 [ 1190.997085][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 1191.004741][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1191.101598][ T1007] bridge0: port 2(bridge_slave_1) entered blocking state [ 1191.109282][ T1007] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1191.775880][T15099] fuse: Bad value for 'fd' [ 1192.333913][T15107] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2719'. [ 1194.036955][T15139] fuse: fd is not a fuse device [ 1194.581262][T15147] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2730'. [ 1194.714104][T14837] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1195.199601][T14837] veth0_vlan: entered promiscuous mode [ 1195.263719][T14837] veth1_vlan: entered promiscuous mode [ 1195.579262][T14837] veth0_macvtap: entered promiscuous mode [ 1195.663693][T14837] veth1_macvtap: entered promiscuous mode [ 1195.940298][T14837] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1196.079568][T14837] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1196.232039][ T9073] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1196.285393][ T9073] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1196.318260][ T9073] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1196.438763][ T9073] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1196.861489][T15184] fuse: fd is not a fuse device [ 1197.376190][T15192] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2741'. [ 1199.409012][T15225] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2751'. [ 1199.434856][T15225] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2751'. [ 1199.439798][T15227] fuse: fd is not a fuse device [ 1201.778384][ T34] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1201.808707][ T34] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1202.030320][ T9073] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1202.064931][ T9073] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1202.283657][T15262] fuse: fd is not a fuse device [ 1203.327497][T15270] 9p: Bad value for 'wfdno' [ 1210.042055][T15378] loop3: detected capacity change from 0 to 128 [ 1210.151463][T15378] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1210.264268][T15378] ext4 filesystem being mounted at /13/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1210.555283][T14837] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1211.069910][T15389] netlink: 'syz.3.2815': attribute type 24 has an invalid length. [ 1211.389668][T15396] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2818'. [ 1214.709526][T15455] fuse: fd is not a fuse device [ 1215.919665][T15469] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2851'. [ 1216.526672][T15484] fuse: Unknown parameter 'use00000000000000000000' [ 1218.229203][T12268] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1218.239808][T12268] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1218.252948][T12268] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1218.269354][T12268] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1218.281378][T12268] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1218.907828][T15512] loop3: detected capacity change from 0 to 512 [ 1218.936073][T15512] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1219.025430][T15512] EXT4-fs error (device loop3): ext4_orphan_get:1397: inode #15: comm syz.3.2868: iget: bad i_size value: 38620345925642 [ 1219.130736][T15512] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 1219.134637][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 1219.150803][ C0] EXT4-fs (loop3): initial error at time 1777651512: ext4_orphan_get:1397: inode 15 [ 1219.160816][ C0] EXT4-fs (loop3): last error at time 1777651512: ext4_orphan_get:1397: inode 15 [ 1219.183361][T15512] EXT4-fs error (device loop3): ext4_orphan_get:1402: comm syz.3.2868: couldn't read orphan inode 15 (err -117) [ 1219.215224][T15512] loop3: lost filesystem error report for type 5 error -117 [ 1219.220416][T15512] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1219.413640][T15518] EXT4-fs error (device loop3): ext4_validate_block_bitmap:432: comm syz.3.2868: bg 0: block 5: invalid block bitmap [ 1219.488529][T15518] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 100 with error 28 [ 1219.537605][T15518] EXT4-fs (loop3): This should not happen!! Data will be lost [ 1219.537605][T15518] [ 1219.577609][T15518] EXT4-fs (loop3): Total free blocks count 0 [ 1219.598329][T15518] EXT4-fs (loop3): Free/Dirty block details [ 1219.622002][T15518] EXT4-fs (loop3): free_blocks=0 [ 1219.634971][T15522] fuse: fd is not a fuse device [ 1219.643793][T15518] EXT4-fs (loop3): dirty_blocks=104 [ 1219.670722][T15518] EXT4-fs (loop3): Block reservation details [ 1219.693312][T15518] EXT4-fs (loop3): i_reserved_data_blocks=104 [ 1219.721460][T15512] EXT4-fs (loop3): shut down requested (0) [ 1220.345385][ T6687] Bluetooth: hci2: command tx timeout [ 1221.209782][ T5699] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1221.451036][ T5699] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1221.732683][ T5699] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1221.927721][ T5699] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1222.261290][T15553] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2879'. [ 1222.406364][ T6687] Bluetooth: hci2: command tx timeout [ 1222.440215][T15553] vlan2: entered promiscuous mode [ 1222.445610][T15553] batadv0: entered promiscuous mode [ 1222.510718][T15558] fuse: fd is not a fuse device [ 1223.077409][ T5699] bridge_slave_1: left allmulticast mode [ 1223.106724][ T5699] bridge_slave_1: left promiscuous mode [ 1223.131253][ T5699] bridge0: port 2(bridge_slave_1) entered disabled state [ 1223.216887][ T5699] bridge_slave_0: left allmulticast mode [ 1223.230871][ T5699] bridge_slave_0: left promiscuous mode [ 1223.256119][ T5699] bridge0: port 1(bridge_slave_0) entered disabled state [ 1223.533635][T15573] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2885'. [ 1224.330649][ T5699] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1224.348222][ T5699] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1224.379186][ T5699] bond0 (unregistering): Released all slaves [ 1224.397542][ T5699] bond1 (unregistering): (slave veth3): Releasing active interface [ 1224.412718][ T5699] bond1 (unregistering): Released all slaves [ 1224.439701][ T5699] bond2 (unregistering): (slave veth5): Releasing active interface [ 1224.453411][ T5699] bond2 (unregistering): Released all slaves [ 1224.486161][ T6687] Bluetooth: hci2: command tx timeout [ 1224.502994][ T5699] bond3 (unregistering): (slave veth7): Releasing active interface [ 1224.522140][ T5699] bond3 (unregistering): Released all slaves [ 1224.546758][ T5699] bond4 (unregistering): Released all slaves [ 1224.569211][ T5699] bond5 (unregistering): Released all slaves [ 1224.617907][ T5699] bond6 (unregistering): Released all slaves [ 1224.643635][ T5699] bond7 (unregistering): Released all slaves [ 1224.686538][ T5699] bond8 (unregistering): (slave veth11): Releasing active interface [ 1224.702784][ T5699] bond8 (unregistering): Released all slaves [ 1224.728997][ T5699] bond9 (unregistering): Released all slaves [ 1225.196019][ T5699] tipc: Disabling bearer [ 1225.237052][ T5699] tipc: Left network mode [ 1225.952014][T15593] fuse: fd is not a fuse device [ 1226.487809][T15599] usb usb5: usbfs: process 15599 (syz.3.2894) did not claim interface 0 before use [ 1226.554067][ T5699] hsr_slave_0: left promiscuous mode [ 1226.564759][ T6687] Bluetooth: hci2: command tx timeout [ 1226.608864][ T5699] hsr_slave_1: left promiscuous mode [ 1226.667968][ T5699] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1226.701105][ T5699] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1226.765558][ T5699] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1226.818815][ T5699] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1226.911208][ T5699] batman_adv: batadv0: Interface deactivated: macsec1 [ 1226.944598][ T5699] batman_adv: batadv0: Removing interface: macsec1 [ 1227.024153][ T5699] veth1_macvtap: left promiscuous mode [ 1227.032285][ T5699] veth0_macvtap: left promiscuous mode [ 1227.053153][ T5699] veth1_vlan: left promiscuous mode [ 1227.072932][ T5699] veth0_vlan: left promiscuous mode [ 1227.268372][T15614] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2897'. [ 1228.493859][ T5699] team0 (unregistering): Port device team_slave_1 removed [ 1228.546065][ T5699] team0 (unregistering): Port device team_slave_0 removed [ 1228.991996][ T5224] 8021q: adding VLAN 0 to HW filter on device eth5 [ 1229.323041][T15504] bridge0: port 1(bridge_slave_0) entered blocking state [ 1229.346674][T15504] bridge0: port 1(bridge_slave_0) entered disabled state [ 1229.376437][T15504] bridge_slave_0: entered allmulticast mode [ 1229.412716][T15504] bridge_slave_0: entered promiscuous mode [ 1229.459070][T15504] bridge0: port 2(bridge_slave_1) entered blocking state [ 1229.481909][T15504] bridge0: port 2(bridge_slave_1) entered disabled state [ 1229.513362][T15504] bridge_slave_1: entered allmulticast mode [ 1229.551304][T15504] bridge_slave_1: entered promiscuous mode [ 1229.686656][T15632] fuse: fd is not a fuse device [ 1229.859271][T15504] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1229.921454][T15504] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1230.061969][T15636] loop3: detected capacity change from 0 to 2048 [ 1230.181423][T15636] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1230.257547][T15636] ext4 filesystem being mounted at /37/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1230.456445][T15504] team0: Port device team_slave_0 added [ 1230.503216][T15504] team0: Port device team_slave_1 added [ 1230.813026][T15504] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1230.837989][T15504] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1230.868591][T15504] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1230.892132][T15504] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1230.899589][T15504] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1230.936602][T15504] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1231.163331][T14837] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1231.419887][T15504] hsr_slave_0: entered promiscuous mode [ 1231.493806][T15504] hsr_slave_1: entered promiscuous mode [ 1231.532912][T15504] debugfs: 'hsr0' already exists in 'hsr' [ 1231.570028][T15504] Cannot create hsr debugfs directory [ 1232.220120][T15663] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2910'. [ 1232.883761][T15671] fuse: fd is not a fuse device [ 1234.218149][T15689] loop3: detected capacity change from 0 to 1024 [ 1234.261859][T15689] EXT4-fs: test_dummy_encryption requires encrypt feature [ 1234.391218][T15689] Option ';8~[DI4_2EOEm-0S*DuDeeř|7~͞꥿H;q/ q,˵ nfc<{NqaӉ' to dns_resolver key: bad/missing value [ 1234.719440][T15504] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1234.859546][T15504] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1234.872492][T15504] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1234.984369][T15504] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1235.011344][T15504] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1235.103010][T15504] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1235.150556][T15504] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1235.394597][T15504] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1235.455052][T15706] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2924'. [ 1235.542584][T15710] fuse: Unknown parameter 'user_id00000000000000000000' [ 1236.529673][T15504] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1236.931218][T15504] 8021q: adding VLAN 0 to HW filter on device team0 [ 1237.083030][ T595] bridge0: port 1(bridge_slave_0) entered blocking state [ 1237.090655][ T595] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1237.232076][ T595] bridge0: port 2(bridge_slave_1) entered blocking state [ 1237.239700][ T595] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1238.744086][T15755] fuse: Unknown parameter 'user_id00000000000000000000' [ 1239.498779][T15768] Set syz1 is full, maxelem 1023 reached [ 1241.152254][T15796] fuse: Bad value for 'fd' [ 1241.426153][T15504] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1243.855226][T15504] veth0_vlan: entered promiscuous mode [ 1243.978845][T15504] veth1_vlan: entered promiscuous mode [ 1244.613776][T15504] veth0_macvtap: entered promiscuous mode [ 1244.732512][T15504] veth1_macvtap: entered promiscuous mode [ 1244.829066][T15840] fuse: Bad value for 'fd' [ 1245.072645][T15504] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1245.180318][T15504] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1245.287735][ T1007] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1245.318380][ T1007] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1245.369219][ T52] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1245.396843][ T52] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1246.020694][T15852] tipc: Failed to remove unknown binding: 66,0,0/2886997007:1818120174/1818120175 [ 1246.087167][T15852] tipc: Failed to remove unknown binding: 66,0,0/2886997007:1818120174/1818120175 [ 1246.356334][T15855] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2969'. [ 1246.757383][T12268] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1246.771577][T12268] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1246.781086][T12268] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1246.811192][T12268] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1246.832027][T12268] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1246.898838][T15865] loop3: detected capacity change from 0 to 256 [ 1248.133575][T15883] fuse: Bad value for 'fd' [ 1248.497738][ T1308] ieee802154 phy0 wpan0: encryption failed: -22 [ 1248.504356][ T1308] ieee802154 phy1 wpan1: encryption failed: -22 [ 1248.964878][T12268] Bluetooth: hci3: command tx timeout [ 1249.381961][T15903] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2980'. [ 1250.023921][T15910] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2981'. [ 1251.047078][T12268] Bluetooth: hci3: command tx timeout [ 1251.163080][T15916] 8021q: adding VLAN 0 to HW filter on device bond21 [ 1251.432943][T15917] bond21: (slave geneve2): Enslaving as an active interface with an up link [ 1252.573806][ T6893] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1252.601045][ T6893] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1252.766257][T15936] fuse: Unknown parameter '0x0000000000000003' [ 1252.868937][ T34] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1252.904389][ T34] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1253.127311][T12268] Bluetooth: hci3: command tx timeout [ 1253.268228][T15939] netlink: 'syz.1.2987': attribute type 2 has an invalid length. [ 1253.748137][T15863] bridge0: port 1(bridge_slave_0) entered blocking state [ 1253.789661][T15863] bridge0: port 1(bridge_slave_0) entered disabled state [ 1253.810876][T15945] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2989'. [ 1253.821017][T15863] bridge_slave_0: entered allmulticast mode [ 1253.832004][T15863] bridge_slave_0: entered promiscuous mode [ 1253.871299][T15863] bridge0: port 2(bridge_slave_1) entered blocking state [ 1253.903296][T15863] bridge0: port 2(bridge_slave_1) entered disabled state [ 1253.955108][T15863] bridge_slave_1: entered allmulticast mode [ 1254.002810][T15863] bridge_slave_1: entered promiscuous mode [ 1254.491566][T15863] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1254.586426][T15863] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1254.947177][T15962] fuse: Unknown parameter '0x0000000000000003' [ 1255.060825][T15863] team0: Port device team_slave_0 added [ 1255.136452][T15863] team0: Port device team_slave_1 added [ 1255.209650][T12268] Bluetooth: hci3: command tx timeout [ 1255.652647][T15863] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1255.708735][T15863] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1255.799029][T15863] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1255.888124][T15863] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1255.930792][T15863] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1256.066842][T15863] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1256.571810][T15975] loop3: detected capacity change from 0 to 256 [ 1256.662099][T15978] loop4: detected capacity change from 0 to 128 [ 1256.672541][T15979] netlink: 96 bytes leftover after parsing attributes in process `syz.5.3002'. [ 1256.752711][T15978] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1256.852861][T15863] hsr_slave_0: entered promiscuous mode [ 1256.873154][T15978] ext4 filesystem being mounted at /4/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1256.935313][T15863] hsr_slave_1: entered promiscuous mode [ 1256.967556][T15863] debugfs: 'hsr0' already exists in 'hsr' [ 1257.003022][T15863] Cannot create hsr debugfs directory [ 1257.527234][ T29] audit: type=1800 audit(1777651550.592:6716): pid=15984 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.3001" name="file1" dev="loop4" ino=12 res=0 errno=0 [ 1257.893216][T15504] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1258.526895][T15997] fuse: Unknown parameter '0x0000000000000003' [ 1259.413033][T15863] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1259.518820][T15863] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1259.560100][T15863] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1259.660575][T15863] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1259.692764][T15863] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1259.800412][T15863] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1259.850179][T15863] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1259.911278][T16011] netlink: 96 bytes leftover after parsing attributes in process `syz.4.3013'. [ 1259.972401][T15863] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1261.732505][T15863] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1261.986645][T15863] 8021q: adding VLAN 0 to HW filter on device team0 [ 1262.132769][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 1262.140456][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1262.262618][ T9073] bridge0: port 2(bridge_slave_1) entered blocking state [ 1262.270201][ T9073] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1262.288194][T16038] loop4: detected capacity change from 0 to 128 [ 1262.339077][T16039] fuse: Unknown parameter '0x0000000000000003' [ 1262.412542][T16038] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1262.456204][T16038] ext4 filesystem being mounted at /10/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 1262.701673][T15504] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1263.308680][T16053] netlink: 96 bytes leftover after parsing attributes in process `syz.4.3025'. [ 1265.702204][T16080] fuse: Unknown parameter '0x0000000000000003' [ 1267.013538][T16099] netlink: 256 bytes leftover after parsing attributes in process `syz.4.3042'. [ 1267.760772][T16109] fuse: Unknown parameter '0x0000000000000003' [ 1268.256644][T15863] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1271.292732][T15863] veth0_vlan: entered promiscuous mode [ 1271.486112][T15863] veth1_vlan: entered promiscuous mode [ 1271.843156][T16158] netlink: 96 bytes leftover after parsing attributes in process `syz.3.3066'. [ 1271.925872][T15863] veth0_macvtap: entered promiscuous mode [ 1272.059086][T15863] veth1_macvtap: entered promiscuous mode [ 1272.255448][T15863] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1272.427838][T15863] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1272.621117][ T12] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1272.669967][ T12] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1272.755771][ T12] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1272.782279][ T34] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1273.448667][T16173] fuse: Unknown parameter 'fd0x0000000000000003' [ 1273.458891][T16170] loop3: detected capacity change from 0 to 2048 [ 1273.617434][T16170] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1273.668485][T16170] ext4 filesystem being mounted at /76/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1274.609465][T14837] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1274.971301][T16191] Driver unsupported XDP return value 0 on prog (id 46) dev N/A, expect packet loss! [ 1275.221738][T16194] netlink: 96 bytes leftover after parsing attributes in process `syz.3.3077'. [ 1276.542266][T16210] fuse: Unknown parameter 'fd0x0000000000000003' [ 1276.736777][T16212] syzkaller0: entered promiscuous mode [ 1276.782740][T16212] syzkaller0: entered allmulticast mode [ 1277.391604][T16219] loop4: detected capacity change from 0 to 2048 [ 1277.639087][T16219] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1277.736482][T16219] ext4 filesystem being mounted at /22/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1277.753093][T16230] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3089'. [ 1277.813353][T16230] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3089'. [ 1278.737689][T15504] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1280.217978][T16263] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3100'. [ 1280.242505][T16263] netlink: 36 bytes leftover after parsing attributes in process `syz.5.3100'. [ 1280.365660][ T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1280.411093][ T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1280.446924][T16258] loop3: detected capacity change from 0 to 4096 [ 1280.508923][T16258] EXT4-fs: inline encryption not supported [ 1280.534124][T16258] EXT4-fs: Ignoring removed mblk_io_submit option [ 1280.573074][T16258] ext4: Unknown parameter 'nouser_xattr' [ 1280.753866][ T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1280.808796][ T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1283.268657][T16292] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3113'. [ 1283.320039][T16292] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3113'. [ 1284.308955][ T6687] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1284.323709][ T6687] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1284.359202][ T6687] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1284.391310][ T6687] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1284.406804][ T6687] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1286.494819][ T6687] Bluetooth: hci6: command tx timeout [ 1287.616462][T16331] tmpfs: Bad value for 'mpol' [ 1288.360379][T16334] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3126'. [ 1288.394663][T16334] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3126'. [ 1288.564852][ T6687] Bluetooth: hci6: command tx timeout [ 1288.958694][ T1007] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1289.284131][ T1007] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1289.586240][ T1007] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1289.826226][ T1007] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1289.885529][T16349] loop4: detected capacity change from 0 to 2048 [ 1290.069872][T16349] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1290.204965][T16349] ext4 filesystem being mounted at /35/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1290.644906][ T6687] Bluetooth: hci6: command tx timeout [ 1291.278835][T15504] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1291.304036][ T1007] bridge_slave_1: left allmulticast mode [ 1291.329652][ T1007] bridge_slave_1: left promiscuous mode [ 1291.368378][ T1007] bridge0: port 2(bridge_slave_1) entered disabled state [ 1291.480998][ T1007] bridge_slave_0: left allmulticast mode [ 1291.511842][ T1007] bridge_slave_0: left promiscuous mode [ 1291.545836][ T1007] bridge0: port 1(bridge_slave_0) entered disabled state [ 1291.978873][T16372] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3139'. [ 1291.998373][T16372] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3139'. [ 1292.724711][ T6687] Bluetooth: hci6: command tx timeout [ 1293.118214][ T1007] bond21 (unregistering): (slave geneve2): Releasing backup interface [ 1293.404379][ T1007] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1293.424115][ T1007] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1293.466953][ T1007] bond0 (unregistering): Released all slaves [ 1293.483895][ T1007] bond1 (unregistering): (slave veth3): Releasing active interface [ 1293.509930][ T1007] bond1 (unregistering): Released all slaves [ 1293.534652][ T1007] bond2 (unregistering): (slave veth5): Releasing active interface [ 1293.548682][ T1007] bond2 (unregistering): Released all slaves [ 1293.604139][ T1007] bond3 (unregistering): (slave veth7): Releasing active interface [ 1293.619962][ T1007] bond3 (unregistering): Released all slaves [ 1293.653785][ T1007] bond4 (unregistering): (slave veth9): Releasing active interface [ 1293.678005][ T1007] bond4 (unregistering): Released all slaves [ 1293.712891][ T1007] bond5 (unregistering): Released all slaves [ 1293.734320][ T1007] bond6 (unregistering): (slave veth11): Releasing active interface [ 1293.750438][ T1007] bond6 (unregistering): Released all slaves [ 1293.781451][ T1007] bond7 (unregistering): (slave veth13): Releasing active interface [ 1293.821309][ T1007] bond7 (unregistering): Released all slaves [ 1293.841644][ T1007] bond8 (unregistering): Released all slaves [ 1293.867167][ T1007] bond9 (unregistering): Released all slaves [ 1293.911898][ T1007] bond10 (unregistering): Released all slaves [ 1293.952123][ T1007] bond11 (unregistering): Released all slaves [ 1293.972569][ T1007] bond12 (unregistering): Released all slaves [ 1294.032644][ T1007] bond13 (unregistering): Released all slaves [ 1294.053326][ T1007] bond14 (unregistering): (slave veth15): Releasing active interface [ 1294.070605][ T1007] bond14 (unregistering): Released all slaves [ 1294.124921][ T1007] bond15 (unregistering): (slave veth17): Releasing active interface [ 1294.140726][ T1007] bond15 (unregistering): Released all slaves [ 1294.162651][ T1007] bond16 (unregistering): Released all slaves [ 1294.185944][ T1007] bond17 (unregistering): Released all slaves [ 1294.245742][ T1007] bond18 (unregistering): (slave veth23): Releasing active interface [ 1294.263319][ T1007] bond18 (unregistering): Released all slaves [ 1294.283151][ T1007] bond19 (unregistering): Released all slaves [ 1294.322366][ T1007] bond20 (unregistering): Released all slaves [ 1294.343907][ T1007] bond21 (unregistering): Released all slaves [ 1295.353293][ T1007] tipc: Disabling bearer [ 1295.391118][ T1007] tipc: Left network mode [ 1295.645325][T16393] loop6: detected capacity change from 0 to 2048 [ 1295.657566][T16398] syzkaller0: entered promiscuous mode [ 1295.690137][T16398] syzkaller0: entered allmulticast mode [ 1295.780428][T16393] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1295.810198][T16394] loop4: detected capacity change from 0 to 4096 [ 1295.823068][T16394] EXT4-fs: inline encryption not supported [ 1295.830258][T16394] EXT4-fs: Ignoring removed mblk_io_submit option [ 1295.839515][T16394] ext4: Unknown parameter 'nouser_xattr' [ 1295.905430][T16393] ext4 filesystem being mounted at /5/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1296.412383][ T1007] hsr_slave_0: left promiscuous mode [ 1296.474380][ T1007] hsr_slave_1: left promiscuous mode [ 1296.514284][ T1007] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1296.578978][ T1007] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1296.632725][ T1007] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1296.644791][T12268] Bluetooth: hci5: command 0x0406 tx timeout [ 1296.659051][ T1007] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1296.705897][ T1007] batman_adv: batadv0: Interface deactivated: macsec1 [ 1296.749622][ T1007] batman_adv: batadv0: Removing interface: macsec1 [ 1296.836798][ T1007] veth1_macvtap: left promiscuous mode [ 1296.874599][ T1007] veth0_macvtap: left promiscuous mode [ 1296.899998][ T1007] veth1_vlan: left promiscuous mode [ 1296.920692][ T1007] veth0_vlan: left promiscuous mode [ 1296.952297][T15863] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1297.705618][T16418] loop4: detected capacity change from 0 to 512 [ 1297.843159][T16418] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1298.033855][ T29] audit: type=1800 audit(1777651591.092:6717): pid=16418 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.3155" name="bus" dev="loop4" ino=18 res=0 errno=0 [ 1298.067520][T16426] loop6: detected capacity change from 0 to 512 [ 1298.138944][T16426] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 1298.253974][T16426] EXT4-fs (loop6): 1 truncate cleaned up [ 1298.342793][T16426] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1299.617833][T15863] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1301.129942][ T1007] team0 (unregistering): Port device team_slave_1 removed [ 1301.197881][T16449] loop6: detected capacity change from 0 to 4096 [ 1301.199264][ T1007] team0 (unregistering): Port device team_slave_0 removed [ 1301.211689][T16449] EXT4-fs: inline encryption not supported [ 1301.247061][T16449] EXT4-fs: Ignoring removed mblk_io_submit option [ 1301.283571][T16449] ext4: Unknown parameter 'nouser_xattr' [ 1301.358403][T15504] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1302.188245][ T5224] 8021q: adding VLAN 0 to HW filter on device eth5 [ 1302.721827][T16458] fuse: fd is not a fuse device [ 1302.762273][T16455] loop6: detected capacity change from 0 to 2048 [ 1302.764234][T16304] bridge0: port 1(bridge_slave_0) entered blocking state [ 1302.828121][T16304] bridge0: port 1(bridge_slave_0) entered disabled state [ 1302.881650][T16304] bridge_slave_0: entered allmulticast mode [ 1302.895262][T16455] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1302.949155][T16304] bridge_slave_0: entered promiscuous mode [ 1302.988179][T16304] bridge0: port 2(bridge_slave_1) entered blocking state [ 1303.003336][T16304] bridge0: port 2(bridge_slave_1) entered disabled state [ 1303.003463][T16455] ext4 filesystem being mounted at /9/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1303.021017][T16304] bridge_slave_1: entered allmulticast mode [ 1303.094973][T16304] bridge_slave_1: entered promiscuous mode [ 1303.489811][T16304] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1303.591722][T16304] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1304.070414][ T1007] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1304.122686][T15863] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1304.261698][T16304] team0: Port device team_slave_0 added [ 1304.406390][ T1007] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1304.597229][T16304] team0: Port device team_slave_1 added [ 1304.837228][T16480] loop3: detected capacity change from 0 to 1764 [ 1304.943529][ T1007] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1305.388908][ T1007] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1305.543818][T16304] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1305.599736][T16304] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1305.732073][T16304] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1305.897486][T16304] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1305.920426][T16304] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1305.993183][T16304] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1306.812515][T16304] hsr_slave_0: entered promiscuous mode [ 1306.844814][T16304] hsr_slave_1: entered promiscuous mode [ 1307.511608][ T1007] bridge_slave_1: left allmulticast mode [ 1307.559403][ T1007] bridge_slave_1: left promiscuous mode [ 1307.595096][T16513] loop4: detected capacity change from 0 to 2048 [ 1307.597679][ T1007] bridge0: port 2(bridge_slave_1) entered disabled state [ 1307.709927][ T1007] bridge_slave_0: left allmulticast mode [ 1307.754807][ T1007] bridge_slave_0: left promiscuous mode [ 1307.772131][ T1007] bridge0: port 1(bridge_slave_0) entered disabled state [ 1307.798505][T16513] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1307.852962][T16513] ext4 filesystem being mounted at /46/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1308.811479][T15504] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1309.942655][ T1308] ieee802154 phy0 wpan0: encryption failed: -22 [ 1309.949533][ T1308] ieee802154 phy1 wpan1: encryption failed: -22 [ 1310.108463][ T1007] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1310.153746][ T1007] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1310.217748][ T1007] bond0 (unregistering): Released all slaves [ 1310.239718][ T1007] bond1 (unregistering): Released all slaves [ 1310.349741][ T1007] bond2 (unregistering): Released all slaves [ 1310.470473][ T1007] bond3 (unregistering): (slave veth3): Releasing active interface [ 1310.511818][ T1007] bond3 (unregistering): Released all slaves [ 1310.604851][ T1007] bond4 (unregistering): Released all slaves [ 1310.758587][ T1007] bond5 (unregistering): (slave veth5): Releasing active interface [ 1310.821661][ T1007] bond5 (unregistering): Released all slaves [ 1310.906076][ T1007] bond6 (unregistering): (slave veth7): Releasing active interface [ 1310.950670][ T1007] bond6 (unregistering): Released all slaves [ 1311.066104][ T1007] bond7 (unregistering): (slave veth9): Releasing active interface [ 1311.130151][ T1007] bond7 (unregistering): Released all slaves [ 1311.178571][ T1007] bond8 (unregistering): Released all slaves [ 1311.236557][T16555] loop3: detected capacity change from 0 to 2048 [ 1311.269760][T16557] Bluetooth: MGMT ver 1.23 [ 1311.275395][ T1007] bond9 (unregistering): Released all slaves [ 1311.340318][ T29] audit: type=1326 audit(1777651604.402:6718): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16556 comm="syz.4.3198" exe="/root/ci-upstream-kmsan-gce-386-root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb800c code=0x7ffc0000 [ 1311.373062][T16555] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1311.400535][ T29] audit: type=1326 audit(1777651604.432:6719): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16556 comm="syz.4.3198" exe="/root/ci-upstream-kmsan-gce-386-root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb800c code=0x7ffc0000 [ 1311.433532][ T29] audit: type=1326 audit(1777651604.462:6720): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16556 comm="syz.4.3198" exe="/root/ci-upstream-kmsan-gce-386-root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb800c code=0x7ffc0000 [ 1311.459858][ T29] audit: type=1326 audit(1777651604.462:6721): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16556 comm="syz.4.3198" exe="/root/ci-upstream-kmsan-gce-386-root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb800c code=0x7ffc0000 [ 1311.471029][T16555] ext4 filesystem being mounted at /112/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1311.486846][ T29] audit: type=1326 audit(1777651604.472:6722): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16556 comm="syz.4.3198" exe="/root/ci-upstream-kmsan-gce-386-root/syz-executor" sig=0 arch=40000003 syscall=366 compat=1 ip=0xf7fb800c code=0x7ffc0000 [ 1311.536364][ T1007] bond10 (unregistering): Released all slaves [ 1311.550692][ T29] audit: type=1326 audit(1777651604.472:6723): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16556 comm="syz.4.3198" exe="/root/ci-upstream-kmsan-gce-386-root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb800c code=0x7ffc0000 [ 1311.595477][ T29] audit: type=1326 audit(1777651604.482:6724): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16556 comm="syz.4.3198" exe="/root/ci-upstream-kmsan-gce-386-root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb800c code=0x7ffc0000 [ 1311.726409][ T29] audit: type=1326 audit(1777651604.482:6725): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16556 comm="syz.4.3198" exe="/root/ci-upstream-kmsan-gce-386-root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb800c code=0x7ffc0000 [ 1311.773301][ T5224] 8021q: adding VLAN 0 to HW filter on device eth6 [ 1311.787331][ T29] audit: type=1326 audit(1777651604.482:6726): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16556 comm="syz.4.3198" exe="/root/ci-upstream-kmsan-gce-386-root/syz-executor" sig=0 arch=40000003 syscall=426 compat=1 ip=0xf7fb800c code=0x7ffc0000 [ 1311.937367][ T29] audit: type=1326 audit(1777651604.482:6727): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16556 comm="syz.4.3198" exe="/root/ci-upstream-kmsan-gce-386-root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb800c code=0x7ffc0000 [ 1312.018489][ T1007] tipc: Disabling bearer [ 1312.053161][ T1007] tipc: Left network mode [ 1312.509826][T14837] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1313.190523][ T1007] hsr_slave_0: left promiscuous mode [ 1313.267276][ T1007] hsr_slave_1: left promiscuous mode [ 1313.299904][ T1007] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1313.322102][ T1007] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1313.371819][ T1007] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1313.420410][ T1007] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1313.433549][ T1007] batman_adv: batadv0: Interface deactivated: macsec1 [ 1313.476794][ T1007] batman_adv: batadv0: Removing interface: macsec1 [ 1313.523328][ T1007] veth1_macvtap: left promiscuous mode [ 1313.555364][ T1007] veth0_macvtap: left promiscuous mode [ 1313.577474][ T1007] veth1_vlan: left promiscuous mode [ 1313.594955][ T1007] veth0_vlan: left promiscuous mode [ 1315.414955][T16601] loop6: detected capacity change from 0 to 512 [ 1315.457565][T16601] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1315.479479][T16601] ext4 filesystem being mounted at /19/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1315.757402][T15863] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1316.351546][ T1007] team0 (unregistering): Port device team_slave_1 removed [ 1316.402787][ T1007] team0 (unregistering): Port device team_slave_0 removed [ 1319.017809][T16304] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1319.122512][T16304] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1319.163605][T16304] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1319.239834][T16304] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1319.278863][T16304] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1319.359335][T16304] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1319.408364][T16304] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1319.500325][T16304] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1321.059325][T16304] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1321.318913][T16304] 8021q: adding VLAN 0 to HW filter on device team0 [ 1321.469087][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 1321.476721][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1321.692645][ T1007] bridge0: port 2(bridge_slave_1) entered blocking state [ 1321.700289][ T1007] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1324.340896][T16711] loop3: detected capacity change from 0 to 2048 [ 1324.523186][T16711] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1324.628628][T16711] ext4 filesystem being mounted at /129/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1325.674212][T14837] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1326.652036][T16304] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1327.537797][T16304] veth0_vlan: entered promiscuous mode [ 1327.737117][T16304] veth1_vlan: entered promiscuous mode [ 1328.023909][T16771] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3270'. [ 1328.177200][T16771] vlan2: entered promiscuous mode [ 1328.198458][T16771] gretap0: entered promiscuous mode [ 1328.524834][T16304] veth0_macvtap: entered promiscuous mode [ 1328.731576][T16304] veth1_macvtap: entered promiscuous mode [ 1329.030198][T16304] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1329.233780][T16304] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1329.403845][ T52] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1329.473430][ T6893] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1329.542421][ T6893] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1329.610597][ T6893] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1330.051422][ T5224] 8021q: adding VLAN 0 to HW filter on device eth9 [ 1331.467689][T16814] batadv_slave_0: entered promiscuous mode [ 1331.516458][T16812] batadv_slave_0: left promiscuous mode [ 1333.895747][T16852] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3295'. [ 1334.500530][T16861] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3298'. [ 1335.415113][T16875] loop3: detected capacity change from 0 to 128 [ 1335.496865][T16875] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1335.544266][T16875] ext4 filesystem being mounted at /140/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 1336.162962][ T5224] 8021q: adding VLAN 0 to HW filter on device eth10 [ 1336.371134][T14837] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1337.527204][T16906] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3311'. [ 1338.786649][ T56] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1338.845854][ T56] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1339.191304][ T34] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1339.231365][ T34] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1339.820628][T16933] loop3: detected capacity change from 0 to 4096 [ 1339.868550][T16933] EXT4-fs: inline encryption not supported [ 1339.927462][T16933] EXT4-fs: Ignoring removed mblk_io_submit option [ 1339.970650][T16933] ext4: Unknown parameter 'nouser_xattr' [ 1340.052629][T16944] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3324'. [ 1342.541021][T16979] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3337'. [ 1342.724801][T12268] Bluetooth: hci2: command 0x0406 tx timeout [ 1342.756331][ T5224] 8021q: adding VLAN 0 to HW filter on device eth11 [ 1344.350222][T17009] loop4: detected capacity change from 0 to 128 [ 1344.492901][T17009] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1344.536837][T17009] ext4 filesystem being mounted at /86/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 1345.119442][T17019] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3352'. [ 1345.631718][T17023] netlink: 'syz.3.3353': attribute type 10 has an invalid length. [ 1345.688739][T15504] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1345.880250][T17023] bond0: (slave wlan0): Enslaving as an active interface with an up link [ 1346.125112][T17030] loop1: detected capacity change from 0 to 512 [ 1346.259738][T17030] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1346.286038][T17030] ext4 filesystem being mounted at /7/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1346.867292][T16304] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1347.989469][T17059] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3366'. [ 1348.873597][T17074] loop6: detected capacity change from 0 to 512 [ 1348.943584][T17074] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1349.057499][T17074] EXT4-fs error (device loop6): ext4_orphan_get:1397: inode #15: comm syz.6.3372: iget: bad i_size value: 38620345925642 [ 1349.105708][T17074] loop6: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 1349.114695][ C1] EXT4-fs (loop6): error count since last fsck: 1 [ 1349.130751][ C1] EXT4-fs (loop6): initial error at time 1777651642: ext4_orphan_get:1397 [ 1349.130746][T17074] EXT4-fs error (device loop6): ext4_orphan_get:1402: comm syz.6.3372: couldn't read orphan inode 15 (err -117) [ 1349.130901][T17074] loop6: lost filesystem error report for type 5 error -117 [ 1349.139629][ C1] : inode 15 [ 1349.139724][ C1] EXT4-fs (loop6): last error at time 1777651642: ext4_orphan_get:1397: inode 15 [ 1349.358732][T17074] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1349.599961][ T5224] 8021q: adding VLAN 0 to HW filter on device eth12 [ 1349.630875][T17074] EXT4-fs error (device loop6): ext4_validate_block_bitmap:432: comm syz.6.3372: bg 0: block 5: invalid block bitmap [ 1349.717670][T17074] EXT4-fs (loop6): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 40 with error 28 [ 1349.799925][T17074] EXT4-fs (loop6): This should not happen!! Data will be lost [ 1349.799925][T17074] [ 1349.884864][T17074] EXT4-fs (loop6): Total free blocks count 0 [ 1349.932092][T17074] EXT4-fs (loop6): Free/Dirty block details [ 1349.981947][T17074] EXT4-fs (loop6): free_blocks=0 [ 1350.030899][T17074] EXT4-fs (loop6): dirty_blocks=40 [ 1350.073040][T17074] EXT4-fs (loop6): Block reservation details [ 1350.111821][T17074] EXT4-fs (loop6): i_reserved_data_blocks=40 [ 1350.168176][T17084] EXT4-fs (loop6): shut down requested (0) [ 1350.873188][ T6823] Bluetooth: hci0: Frame reassembly failed (-84) [ 1352.884724][T12268] Bluetooth: hci0: command 0x1003 tx timeout [ 1352.884889][ T6687] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 1359.282790][T17228] loop4: detected capacity change from 0 to 164 [ 1360.422858][T17244] loop6: detected capacity change from 0 to 512 [ 1360.518516][T17244] EXT4-fs (loop6): mounting ext3 file system using the ext4 subsystem [ 1360.626243][T17244] EXT4-fs (loop6): 1 truncate cleaned up [ 1360.698792][T17244] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1361.235701][T15863] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1361.565578][T17264] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3438'. [ 1361.625849][T17264] 8021q: VLANs not supported on nlmon0 [ 1364.216110][T17303] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3453'. [ 1364.412906][T17303] 8021q: VLANs not supported on nlmon0 [ 1366.653192][T17330] loop6: detected capacity change from 0 to 4096 [ 1366.699727][T17330] EXT4-fs: inline encryption not supported [ 1366.739469][T17330] EXT4-fs: Ignoring removed mblk_io_submit option [ 1366.774801][T17330] ext4: Unknown parameter 'nouser_xattr' [ 1366.901309][T17335] loop3: detected capacity change from 0 to 4096 [ 1367.051158][T17335] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1367.083711][T17335] EXT4-fs (loop3): shut down requested (1) [ 1367.185737][T17344] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3469'. [ 1367.228508][T14837] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1367.254383][T17344] 8021q: VLANs not supported on nlmon0 [ 1369.966325][T17385] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3483'. [ 1370.015958][T17385] 8021q: VLANs not supported on nlmon0 [ 1370.645131][T17389] loop6: detected capacity change from 0 to 4096 [ 1370.702683][T17389] EXT4-fs: inline encryption not supported [ 1370.753088][T17389] EXT4-fs: Ignoring removed mblk_io_submit option [ 1370.807455][T17389] ext4: Unknown parameter 'nouser_xattr' [ 1371.377077][ T1308] ieee802154 phy0 wpan0: encryption failed: -22 [ 1371.383700][ T1308] ieee802154 phy1 wpan1: encryption failed: -22 [ 1372.971902][T17426] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3499'. [ 1373.012772][T17426] 8021q: VLANs not supported on nlmon0 [ 1373.454920][T12268] Bluetooth: hci3: command 0x0406 tx timeout [ 1373.924196][T17435] batadv0: entered promiscuous mode [ 1373.959292][T17435] vlan3: entered promiscuous mode [ 1375.867403][T17465] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3514'. [ 1375.892727][T17467] netlink: 96 bytes leftover after parsing attributes in process `syz.3.3515'. [ 1375.933476][T17465] 8021q: VLANs not supported on nlmon0 [ 1376.510570][T17475] netlink: 268 bytes leftover after parsing attributes in process `syz.5.3517'. [ 1379.006217][T17501] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3529'. [ 1379.037267][T17505] netlink: 96 bytes leftover after parsing attributes in process `syz.3.3530'. [ 1379.061907][T17501] 8021q: VLANs not supported on nlmon0 [ 1379.082163][ T40] IPVS: starting estimator thread 0... [ 1379.207010][T17508] IPVS: using max 240 ests per chain, 12000 per kthread [ 1381.453937][T17538] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(3) [ 1381.460706][T17538] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1381.517246][T17538] vhci_hcd vhci_hcd.0: Device attached [ 1381.570437][T17539] vhci_hcd: connection closed [ 1381.571455][ T56] vhci_hcd vhci_hcd.4: stop threads [ 1381.618200][ T56] vhci_hcd vhci_hcd.4: release socket [ 1381.645603][ T56] vhci_hcd vhci_hcd.4: disconnect device [ 1381.708038][T17543] netlink: 96 bytes leftover after parsing attributes in process `syz.5.3544'. [ 1382.135784][T17547] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3545'. [ 1382.179764][T17547] 8021q: VLANs not supported on nlmon0 [ 1384.128142][T17577] netlink: 96 bytes leftover after parsing attributes in process `syz.5.3557'. [ 1384.742142][T17582] netlink: 64 bytes leftover after parsing attributes in process `syz.5.3559'. [ 1385.229536][T17591] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3561'. [ 1385.305529][T17591] 8021q: VLANs not supported on nlmon0 [ 1386.355568][T17611] netlink: 96 bytes leftover after parsing attributes in process `syz.4.3569'. [ 1386.589747][T17604] loop3: detected capacity change from 0 to 4096 [ 1386.637742][T17604] EXT4-fs: inline encryption not supported [ 1386.678601][T17604] EXT4-fs: Ignoring removed mblk_io_submit option [ 1386.722744][T17604] ext4: Unknown parameter 'nouser_xattr' [ 1388.397450][T17635] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3577'. [ 1388.435775][T17635] 8021q: VLANs not supported on nlmon0 [ 1389.299579][T17646] netlink: 96 bytes leftover after parsing attributes in process `syz.6.3581'. [ 1390.381224][T17654] loop1: detected capacity change from 0 to 4096 [ 1390.424208][T17654] EXT4-fs: inline encryption not supported [ 1390.453093][T17654] EXT4-fs: Ignoring removed mblk_io_submit option [ 1390.491401][T17654] ext4: Unknown parameter 'nouser_xattr' [ 1390.943406][T17669] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3590'. [ 1391.000788][T17669] 8021q: VLANs not supported on nlmon0 [ 1392.116888][T17684] sit1: entered allmulticast mode [ 1392.261053][T17688] netlink: 96 bytes leftover after parsing attributes in process `syz.3.3596'. [ 1392.833461][T17696] ===================================================== [ 1392.841015][T17696] BUG: KMSAN: uninit-value in mptcp_established_options+0x112f/0x3530 [ 1392.849676][T17696] mptcp_established_options+0x112f/0x3530 [ 1392.855797][T17696] tcp_established_options+0x312/0xcc0 [ 1392.861455][T17696] __tcp_transmit_skb+0x5dc/0x5fe0 [ 1392.866876][T17696] __tcp_send_ack+0x967/0xad0 [ 1392.871750][T17696] tcp_send_ack+0x3d/0x60 [ 1392.876473][T17696] mptcp_subflow_shutdown+0x164/0x690 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1392.882022][T17696] mptcp_check_send_data_fin+0x31b/0x3d0 [ 1392.888136][T17696] __mptcp_close+0x860/0x1360 [ 1392.892978][T17696] mptcp_close+0x42/0x260 [ 1392.898153][T17696] inet_release+0x1ee/0x2a0 [ 1392.902853][T17696] sock_close+0xd6/0x2f0 [ 1392.907452][T17696] __fput+0x60e/0x1010 [ 1392.911688][T17696] ____fput+0x25/0x30 [ 1392.920418][T17696] task_work_run+0x208/0x2b0 [ 1392.926807][T17696] exit_to_user_mode_loop+0x306/0x1b60 [ 1392.932460][T17696] __do_fast_syscall_32+0x2c7/0x460 [ 1392.938063][T17696] do_fast_syscall_32+0x37/0x80 [ 1392.943089][T17696] do_SYSENTER_32+0x1f/0x30 [ 1392.949357][T17696] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1392.956164][T17696] [ 1392.958560][T17696] Local variable opts created at: [ 1392.963666][T17696] __tcp_transmit_skb+0x4d/0x5fe0 [ 1392.969068][T17696] __tcp_send_ack+0x967/0xad0 [ 1392.973931][T17696] [ 1392.976480][T17696] CPU: 0 UID: 0 PID: 17696 Comm: syz.5.3599 Not tainted syzkaller #0 PREEMPT(full) [ 1392.986138][T17696] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1392.996507][T17696] ===================================================== [ 1393.003540][T17696] Disabling lock debugging due to kernel taint [ 1393.468736][T17701] loop4: detected capacity change from 0 to 512 [ 1393.555678][T17701] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 1393.568219][T17696] Kernel panic - not syncing: kmsan.panic set ... [ 1393.574814][T17696] CPU: 0 UID: 0 PID: 17696 Comm: syz.5.3599 Tainted: G B syzkaller #0 PREEMPT(full) [ 1393.585929][T17696] Tainted: [B]=BAD_PAGE [ 1393.590174][T17696] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1393.600357][T17696] Call Trace: [ 1393.603729][T17696] [ 1393.606751][T17696] __dump_stack+0x26/0x30 [ 1393.611247][T17696] dump_stack_lvl+0x50/0x1c0 [ 1393.616001][T17696] ? dump_stack+0x12/0x25 [ 1393.620496][T17696] dump_stack+0x1e/0x25 [ 1393.624813][T17696] vpanic+0x7b4/0x1430 [ 1393.629078][T17696] panic+0x15d/0x160 [ 1393.633204][T17696] kmsan_report+0x31a/0x320 [ 1393.637904][T17696] ? __msan_warning+0x1b/0x30 [ 1393.642754][T17696] ? mptcp_established_options+0x112f/0x3530 [ 1393.648899][T17696] ? tcp_established_options+0x312/0xcc0 [ 1393.654713][T17696] ? __tcp_transmit_skb+0x5dc/0x5fe0 [ 1393.660166][T17696] ? __tcp_send_ack+0x967/0xad0 [ 1393.665187][T17696] ? tcp_send_ack+0x3d/0x60 [ 1393.669838][T17696] ? mptcp_subflow_shutdown+0x164/0x690 [ 1393.675535][T17696] ? mptcp_check_send_data_fin+0x31b/0x3d0 [ 1393.681492][T17696] ? __mptcp_close+0x860/0x1360 [ 1393.686479][T17696] ? mptcp_close+0x42/0x260 [ 1393.691128][T17696] ? inet_release+0x1ee/0x2a0 [ 1393.695953][T17696] ? sock_close+0xd6/0x2f0 [ 1393.700527][T17696] ? __fput+0x60e/0x1010 [ 1393.704900][T17696] ? ____fput+0x25/0x30 [ 1393.709179][T17696] ? task_work_run+0x208/0x2b0 [ 1393.714079][T17696] ? exit_to_user_mode_loop+0x306/0x1b60 [ 1393.719846][T17696] ? __do_fast_syscall_32+0x2c7/0x460 [ 1393.725370][T17696] ? do_fast_syscall_32+0x37/0x80 [ 1393.730549][T17696] ? do_SYSENTER_32+0x1f/0x30 [ 1393.735376][T17696] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1393.742046][T17696] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1393.748712][T17696] ? kmsan_get_metadata+0xf1/0x160 [ 1393.754002][T17696] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1393.759989][T17696] ? mptcp_established_options+0xe1/0x3530 [ 1393.765948][T17696] ? filter_irq_stacks+0x49/0x190 [ 1393.771112][T17696] ? stack_depot_save_flags+0x35/0x790 [ 1393.776750][T17696] ? kmsan_get_metadata+0xf1/0x160 [ 1393.782033][T17696] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 1393.788528][T17696] ? kmsan_get_metadata+0xf1/0x160 [ 1393.793820][T17696] __msan_warning+0x1b/0x30 [ 1393.798471][T17696] mptcp_established_options+0x112f/0x3530 [ 1393.804489][T17696] tcp_established_options+0x312/0xcc0 [ 1393.810152][T17696] __tcp_transmit_skb+0x5dc/0x5fe0 [ 1393.815463][T17696] ? kmem_cache_alloc_node_noprof+0x3f5/0x12c0 [ 1393.821806][T17696] ? kmsan_get_metadata+0xf1/0x160 [ 1393.827093][T17696] ? kmsan_get_metadata+0xf1/0x160 [ 1393.832396][T17696] ? kmsan_get_metadata+0xf1/0x160 [ 1393.837675][T17696] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1393.843678][T17696] ? __alloc_skb+0xb7d/0x1190 [ 1393.848527][T17696] __tcp_send_ack+0x967/0xad0 [ 1393.853407][T17696] tcp_send_ack+0x3d/0x60 [ 1393.857886][T17696] mptcp_subflow_shutdown+0x164/0x690 [ 1393.863415][T17696] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1393.869432][T17696] mptcp_check_send_data_fin+0x31b/0x3d0 [ 1393.875231][T17696] __mptcp_close+0x860/0x1360 [ 1393.880082][T17696] ? __pfx_mptcp_close+0x10/0x10 [ 1393.885184][T17696] mptcp_close+0x42/0x260 [ 1393.889671][T17696] ? __pfx_mptcp_close+0x10/0x10 [ 1393.894772][T17696] inet_release+0x1ee/0x2a0 [ 1393.899431][T17696] ? __pfx_inet_release+0x10/0x10 [ 1393.904607][T17696] sock_close+0xd6/0x2f0 [ 1393.909020][T17696] ? __pfx_sock_close+0x10/0x10 [ 1393.914044][T17696] __fput+0x60e/0x1010 [ 1393.918281][T17696] ? __pfx_____fput+0x10/0x10 [ 1393.923090][T17696] ____fput+0x25/0x30 [ 1393.927209][T17696] task_work_run+0x208/0x2b0 [ 1393.931943][T17696] exit_to_user_mode_loop+0x306/0x1b60 [ 1393.937574][T17696] ? __ia32_sys_close_range+0x96/0xe0 [ 1393.943098][T17696] __do_fast_syscall_32+0x2c7/0x460 [ 1393.948480][T17696] do_fast_syscall_32+0x37/0x80 [ 1393.953494][T17696] do_SYSENTER_32+0x1f/0x30 [ 1393.958149][T17696] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1393.964641][T17696] RIP: 0023:0xf7f4400c [ 1393.968803][T17696] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 1393.988541][T17696] RSP: 002b:00000000ffd17c7c EFLAGS: 00000206 ORIG_RAX: 00000000000001b4 [ 1393.997090][T17696] RAX: 0000000000000000 RBX: 0000000000000003 RCX: 000000000000001e [ 1394.005156][T17696] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1394.013230][T17696] RBP: 000000000000000e R08: 0000000000000000 R09: 0000000000000000 [ 1394.021297][T17696] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1394.029366][T17696] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1394.037470][T17696] [ 1394.040998][T17696] Kernel Offset: disabled [ 1394.045418][T17696] Rebooting in 86400 seconds..