last executing test programs: 3m28.458715693s ago: executing program 1 (id=444): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) socket(0x1, 0x80000, 0x2) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) bind$inet6(0xffffffffffffffff, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x2000000000000022, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f000fcf652", 0x3e, 0x20000845, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r1, &(0x7f0000000480)={0x2, 0x4e24, @loopback}, 0x10) sendmmsg(r1, &(0x7f00000057c0)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000004c0)='k', 0x1}], 0x1}}], 0x1, 0x0) recvmmsg(r1, &(0x7f00000048c0)=[{{0x0, 0x0, &(0x7f0000004a00)=[{&(0x7f0000001a00)=""/4099, 0x1003}], 0x1}}], 0x1003, 0x10122, 0x0) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYBLOB], 0x34}}, 0x0) sendmsg$sock(r1, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000500)="c4", 0x1}], 0x1}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000bc0)=[{{0x0, 0x48, &(0x7f0000000400)=[{&(0x7f0000000c00)=""/4111, 0xd80}], 0x1}}], 0x5d, 0x122, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x2000001) 2m46.716336014s ago: executing program 1 (id=444): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) socket(0x1, 0x80000, 0x2) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) bind$inet6(0xffffffffffffffff, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x2000000000000022, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f000fcf652", 0x3e, 0x20000845, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r1, &(0x7f0000000480)={0x2, 0x4e24, @loopback}, 0x10) sendmmsg(r1, &(0x7f00000057c0)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000004c0)='k', 0x1}], 0x1}}], 0x1, 0x0) recvmmsg(r1, &(0x7f00000048c0)=[{{0x0, 0x0, &(0x7f0000004a00)=[{&(0x7f0000001a00)=""/4099, 0x1003}], 0x1}}], 0x1003, 0x10122, 0x0) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYBLOB], 0x34}}, 0x0) sendmsg$sock(r1, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000500)="c4", 0x1}], 0x1}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000bc0)=[{{0x0, 0x48, &(0x7f0000000400)=[{&(0x7f0000000c00)=""/4111, 0xd80}], 0x1}}], 0x5d, 0x122, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x2000001) 2m6.984730362s ago: executing program 1 (id=444): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) socket(0x1, 0x80000, 0x2) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) bind$inet6(0xffffffffffffffff, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x2000000000000022, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f000fcf652", 0x3e, 0x20000845, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r1, &(0x7f0000000480)={0x2, 0x4e24, @loopback}, 0x10) sendmmsg(r1, &(0x7f00000057c0)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000004c0)='k', 0x1}], 0x1}}], 0x1, 0x0) recvmmsg(r1, &(0x7f00000048c0)=[{{0x0, 0x0, &(0x7f0000004a00)=[{&(0x7f0000001a00)=""/4099, 0x1003}], 0x1}}], 0x1003, 0x10122, 0x0) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYBLOB], 0x34}}, 0x0) sendmsg$sock(r1, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000500)="c4", 0x1}], 0x1}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000bc0)=[{{0x0, 0x48, &(0x7f0000000400)=[{&(0x7f0000000c00)=""/4111, 0xd80}], 0x1}}], 0x5d, 0x122, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x2000001) 1m31.314688871s ago: executing program 1 (id=444): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) socket(0x1, 0x80000, 0x2) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) bind$inet6(0xffffffffffffffff, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x2000000000000022, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f000fcf652", 0x3e, 0x20000845, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r1, &(0x7f0000000480)={0x2, 0x4e24, @loopback}, 0x10) sendmmsg(r1, &(0x7f00000057c0)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000004c0)='k', 0x1}], 0x1}}], 0x1, 0x0) recvmmsg(r1, &(0x7f00000048c0)=[{{0x0, 0x0, &(0x7f0000004a00)=[{&(0x7f0000001a00)=""/4099, 0x1003}], 0x1}}], 0x1003, 0x10122, 0x0) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYBLOB], 0x34}}, 0x0) sendmsg$sock(r1, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000500)="c4", 0x1}], 0x1}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000bc0)=[{{0x0, 0x48, &(0x7f0000000400)=[{&(0x7f0000000c00)=""/4111, 0xd80}], 0x1}}], 0x5d, 0x122, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x2000001) 59.138660523s ago: executing program 1 (id=444): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) socket(0x1, 0x80000, 0x2) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) bind$inet6(0xffffffffffffffff, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x2000000000000022, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f000fcf652", 0x3e, 0x20000845, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r1, &(0x7f0000000480)={0x2, 0x4e24, @loopback}, 0x10) sendmmsg(r1, &(0x7f00000057c0)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000004c0)='k', 0x1}], 0x1}}], 0x1, 0x0) recvmmsg(r1, &(0x7f00000048c0)=[{{0x0, 0x0, &(0x7f0000004a00)=[{&(0x7f0000001a00)=""/4099, 0x1003}], 0x1}}], 0x1003, 0x10122, 0x0) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYBLOB], 0x34}}, 0x0) sendmsg$sock(r1, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000500)="c4", 0x1}], 0x1}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000bc0)=[{{0x0, 0x48, &(0x7f0000000400)=[{&(0x7f0000000c00)=""/4111, 0xd80}], 0x1}}], 0x5d, 0x122, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x2000001) 47.7396116s ago: executing program 2 (id=804): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008031, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) 43.163668294s ago: executing program 2 (id=812): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x2006}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000001000207b8af8ff00000000bfa200000000000007020000f8ffffffb703000008180000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1b, '\x00', 0x0, 0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) getresuid(0x0, 0x0, &(0x7f00000004c0)) 41.868354896s ago: executing program 2 (id=813): bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000220000000f7ff003d6009db9691573600000000009502901956000000"], &(0x7f00000000c0)='GPL\x00', 0x4, 0xac, &(0x7f0000000200)=""/4096, 0x0, 0x0, '\x00', 0x0, 0xe}, 0x70) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000001600)={'veth1\x00', 0x1000}) ioctl$TUNSETOFFLOAD(r0, 0x400454c9, 0x3) socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1d, 0x4, 0x3, 0xa}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x0, 0x27, &(0x7f0000001600)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x50, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe44, 0x0, 0x0, 0x0, 0x40}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) io_setup(0xfffffffe, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)) syz_mount_image$exfat(&(0x7f0000000040), &(0x7f0000000180)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0xa1000a, &(0x7f00000003c0)=ANY=[], 0x21, 0x1507, &(0x7f0000001b00)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001200)={0x11, 0x5, &(0x7f0000001300)=ANY=[@ANYBLOB="5de06a86d5255f56b85427f4486f882e04f61e4dd63b91806589bb95603fffcee2bbbf2f905dc7847a2a2604e8f817ffc0c182728986ee4d0845c044065aa33793e65e57680d40947281fa1cf64a4e6daa5d7334462da613f55608001f42a8e12136fc4ad4a368b2b7c8de1e10b6f93f482303eefc748ca629db6d890ba393bf7d2e71ccfde37828510b88ebf9aa1672469d3959789082aada5d243fae772bfdb425ba2ad3c5303c2140fa39469d146aa4932f8e29f586ee24f1eaebeb8a70d8706c3af03074ff979d87718dd21f6bc0b5bc7ca398a2b82d42fb94e6"], &(0x7f00000012c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, 0x2, r0}, 0x90) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) write$cgroup_int(r5, &(0x7f0000000000), 0xffffff6a) bpf$PROG_LOAD(0x5, &(0x7f0000001740)={0x7, 0x3, 0x0, 0x0, 0x0, 0x95, &(0x7f0000000180)=""/149, 0x0, 0x25}, 0x90) socket$netlink(0x10, 0x3, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setscheduler(0x0, 0x0, 0x0) 36.143506547s ago: executing program 2 (id=820): pipe(0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c0000001000"/20, @ANYRES32=0x0], 0x3c}}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = getpid() madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) 32.825705915s ago: executing program 2 (id=826): r0 = openat$autofs(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000080), 0x0, 0x0) mount_setattr(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0, &(0x7f0000000280)={0x0, 0x0, 0x100000}, 0x20) syz_open_procfs(0x0, &(0x7f0000000000)='net/sctp\x00') ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0xc0189374, &(0x7f0000000240)={{0x1, 0x1, 0x1018, 0xffffffffffffffff, {0x2}}, './file0\x00'}) 32.290802518s ago: executing program 2 (id=831): socket$inet_sctp(0x2, 0x1, 0x84) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'netdevsim0\x00', &(0x7f0000000600)=@ethtool_wolinfo={0x5, 0x8, 0x3, "22a7c45055be"}}) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r1, &(0x7f0000000200)=ANY=[@ANYBLOB='\'\x00\x00\x00\a'], 0xd) getsockopt$bt_hci(r1, 0x0, 0x2, &(0x7f0000000100)=""/75, &(0x7f0000000040)=0x4b) socket$alg(0x26, 0x5, 0x0) syz_mount_image$minix(&(0x7f0000000180), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000240)=ANY=[], 0x1, 0x154, &(0x7f0000000440)="$eJzs281KAmEUxvFn/M6+LGsTLYQWtclJpQ93dSmik0hjSbZRAulSur+CuoEMB51wFAJD33T+v9V5PLx4ZvHq2YwAhFZOOVmyFB+Ew1Sml7VMjwRgQfqSvvoAwin6YXoCAGa830gtSW+fz1VF4xP7waB/PepHEpP9F+kgNuxbSaWC+8WrdDw6b61NPZ/2++mp/ZOj0feva0Ob2tK2MtrR7rBf88/v/3EbAsLFUj6Yxz6I6LbhOmd+jnu54OeEl4uBXPJz0sv56oNbm9cjAJhR5Jf7Hw3c/1jg/gNYXu1O967ius4jxUoU/d6/GINi6QvTv0wA5s1+arbsdqd72mhW6k7duS9eFcsXpfPCZdn2Nn97fP8HsDp+/vRNTwIAAAAAAAAAAAAAAGaV1Z7pEQAAAAAsyCJeJzL9jAAAAAAAAAAAAAAAAAAAAMCq+A4AAP//OSgl1g==") rename(&(0x7f0000000000)='./file1\x00', &(0x7f0000000080)='./file2\x00') r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000040)={0x4101}, 0x10) sendmsg$nl_route(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[], 0x24}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000900)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x403}}]}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r3, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000000)=0x1, 0x4) sendmsg$IPVS_CMD_GET_CONFIG(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[], 0x14}}, 0x0) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x2, &(0x7f0000000380)=@gcm_256={{0x304}, "5ef40e7ab852acb6", "582f7cccfda6a677c372678ca6f023d0bca3a88ac5a438b0e48fdb55bdc85053", "52c227d6", "c6425ec4f2e476d5"}, 0x38) iopl(0x7) 26.462882734s ago: executing program 1 (id=444): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) socket(0x1, 0x80000, 0x2) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) bind$inet6(0xffffffffffffffff, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x2000000000000022, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f000fcf652", 0x3e, 0x20000845, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r1, &(0x7f0000000480)={0x2, 0x4e24, @loopback}, 0x10) sendmmsg(r1, &(0x7f00000057c0)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000004c0)='k', 0x1}], 0x1}}], 0x1, 0x0) recvmmsg(r1, &(0x7f00000048c0)=[{{0x0, 0x0, &(0x7f0000004a00)=[{&(0x7f0000001a00)=""/4099, 0x1003}], 0x1}}], 0x1003, 0x10122, 0x0) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYBLOB], 0x34}}, 0x0) sendmsg$sock(r1, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000500)="c4", 0x1}], 0x1}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000bc0)=[{{0x0, 0x48, &(0x7f0000000400)=[{&(0x7f0000000c00)=""/4111, 0xd80}], 0x1}}], 0x5d, 0x122, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x2000001) 16.395881702s ago: executing program 0 (id=859): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x0, "004fba7d820000050000f7ffffff00040100"}) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000000)=0x1a) r2 = msgget$private(0x0, 0x0) msgrcv(0x0, 0x0, 0x0, 0x3, 0x3000) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000000)={{{@in=@broadcast, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in=@loopback}}, &(0x7f0000000100)=0xe8) newfstatat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) r5 = socket$unix(0x1, 0x2, 0x0) bind$unix(r5, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r6 = socket$unix(0x1, 0x2, 0x0) connect$unix(r6, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r6, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x3ec0) connect$unix(r5, &(0x7f0000000000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r7, 0xc0502100, &(0x7f0000000440)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r7, 0xc0182101, &(0x7f0000000200)={r8}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r7, 0xc0502100, &(0x7f00000003c0)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r7, 0x40182103, &(0x7f0000000240)={r9, 0x0, r7}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r7, 0xc0182101, &(0x7f0000000280)={r9}) connect$unix(r5, &(0x7f0000000100)=@abs, 0x6e) syz_open_dev$loop(&(0x7f0000000200), 0x6710, 0x113302) r10 = getpid() msgctl$IPC_SET(r2, 0x1, &(0x7f0000000300)={{0x0, r3, 0x0, r4, 0xffffffffffffffff, 0xfb35c01cab445d2e}, 0x0, 0x0, 0x8, 0x1, 0x1, 0x0, 0x2, 0x3, 0x200, 0xa, 0x0, r10}) msgsnd(r2, &(0x7f0000000240)=ANY=[@ANYBLOB="eb"], 0x8, 0x0) msgrcv(r2, &(0x7f0000000140)={0x0, ""/37}, 0x2d, 0x3, 0x1000) inotify_init() bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@bloom_filter={0x1e, 0x0, 0x0, 0x0, 0x14}, 0x48) 14.731531826s ago: executing program 0 (id=861): memfd_create(&(0x7f0000000000)='prodM\xb0\xea\a\x06\xbe\xaen/\xce4\xb7\xc1\xef\xba!\x9d\rSt\xa24\t\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1dz\xd05\xe2e,\xb1\x84\xea\x91^%A\xe5\x9e\x13TdT\xc6^p\xb0#R\x04\x06\xae\xebA;Y\xeb\x8f\xec\xb4\xf9\x17\xb7\x04\xc2\xc0\xc6\xb4\v\xff\xfc\x88\x90\xabC\x02\x00\xf04\x03\x88\xae9\'>R^P{Vr!\xe2W\xc72\xea\xb7Wp\xc36\x96\xffZ\\A@\x00\x00\x00\xc9\xf3Y\xb8\x89#\xa1\xb1)Dk\xeb\xa1\t\x00{u[\xbd\x9d\xf4\xbf\\\xce\x02P\xf2MY\x05^\xffj\x9c\x14\xb7\xb6v\x1d*1>\x00 \x00\x00\x00\x00\x14C?]\x8c\xb4Y\xcf\x80\x85\xd6\x036\xc8~\xa8\f\x00\x00\xb5M\x9a\x9dc\xaaAU\xec\xe06\xed\xe4\xfb\xdf\a\xd0lg\x13\xf9\x8b:s>\xd7s\xef\xb3\x9f#\x15)\xf9\xe10\xc7\xb262\x00\x00\x00\x00\x00\x00\x00\x00Nz\x0eu\x8f\x01\x00\x00\x00\x00\x00\x00\xdd\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x00\xc3\xa7/\x0f\x9b`\xa5\x98\x81a\xeev\x00\x00\x00\x00\a\x10\x00m2\xf2\xd8,\x17\xf8\x8e\xae\xc8\xad\xed<\"\x8e\n\x9d\xb13\x8d\xef\x96\xd2I\"8=tg\xdfU\xd0q\x95/f\xec\xdc\xa3\xe1[\xc0\xaa\xefz\xc9\xf4[\x00\x00\x00Q\xff}5\x94\x88\xa1\xdc\xa1g\xe0q\xc5:\xe4\xdf\x80\xb3,\xb9\xb2\xdc\x81\x9f6\x0f\x84WY\xbfSY`\xb8\a\x19\xb1\x058\xa4\xc3\xbb\xf8aB:\x84\x02?\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf3o-GU\xb0\x00F\xb3o(aI[\xd6\x9fG\xaeI\x83\x93\x8cC\xc0#\xe0q\xd0Ex|\xdb\xa8\x16\xfe>:\t0\xfd\x8a\xc7\x84\xb5\xc7M-0A\xf0\x94\xf3\xcc\x8d\xbb3\\\"\x882\xb3\xa84\xac\x00\xdd}Ft\xc6\xcc\f}1X#\xe4\xe1\x94i\xce\xa1\xff\x95\x80\xb4T\x9c\x01\xf3\x1cLB\x94m(m\f\xbc\xebY\xa0\xf7\xf0\x9d\x10\xbd\x86\x1by\xe6\xdf\xc0\xc5\xb9\xb9\xbf\xdf~9\nC\xe9\xc5\x0e\xda\x9c(\x9b\"\xc7\x97\xfc\b\xd9\xc2T\xa7*}]\xc8\xb3 .\x9b\x89\x0f\xf8$\xdd>lU\x13EG\xbb1] \xda\x19\xc5\x9b\x15\x95\xc4\xfcw\xbb\x92\x91\xc4\xa6\x907XK\xfc\x17]\xfa\xff\'\xef\x92\x1c\xb8\x1fK\xb2o \xd1\xbd\xb2\x11+\xa3R\xefQ\xc2\xbdW\x05\xec\xb3=@\x03\xc6^\xa2\x15%\xb0\'D#\xb6Q\x8f\x82?S>\x0fP\x9cE\x92{d\xe6\x9cj1\x87\xb3\x01\xde\xe8\x89\xc4s\xb7\x14~}\xaa\x8c\xc3\x95BAE\xf2.\x8f#;a\x94\"\xd1U\xff\xe8v\xd3\x84d\xf4\x134\xa6XI\xe5h\xaa\x15\x9a\xf7Z\xe3%\x88p\x90\xbb\x9dt\xa3\xe1\r\x8d\x94\"\x19\x8b\x17)\xea\xd5\x17\xeb\xe4\x1b\x0fBZ1\xbe\xee\xfa\x1c\xf9\xa6\x11\x94\x06\\P:\xaf\xcex\xc2\x82\x9a\x16\xfc\xa1\xf9q\x12\xe3\x1a\xdc\xb7\x12\xbba\b\xbb\xed\xb2\xd1W\xe2\x8b\x8d8}\x10W\xbd\xa60A\xc3\x03\xfa\x890\x86#\bQ\xcb)\x00]\x9e\x14\xd2\xea\x82\xa8\xb7ZG\x15r\xf1\t\x00\x00\x00 \xc1\xaf\x19?\x00\\\x91\x13\x1b8\xe1\xc3\xa4\v\x94\xbfJ\xb5\xde\x95\x82\x00]B|\xe2[%\xe3\xf0\x04\xba\xed\xdb\xf5\x7f\x9d\xfe>\xf6m$M&\x7fq]\xe4\xf6\x82\xc3\x00\xb1zg}\x99E\xa4\x19\xe9\x1a4a\xd75D-k\x84\xa6\x12+\xebk\xa1\xfek\x89\xef\x18\xc1)6\xa65\xe2D\xbe\xe1\xdfq\xdd68\xf37g\xab9m\xe7\xddO\v?\xe0\xbe}\xa9U\xc7{\xd3\x16W\xbb\xe5\xd2\x93\xfe\xa4\x9d\r$\xe91c8`\x86\xbc)\xe29\xc3}\xb9P\xd5F\xc6\x12\x8c_x\xa8\xfa\xb5K\x03\x85\x93k\xe1\x8e\x1f)\".\xcc\'\v\xa6\x1bj\\\n\xe98yA\xd8T\x85\x80A\xcbo\x99\x99\xeb)r\x1a\xce\x18(\x185LL\xbcOeO\'\xe2\x86&\xe4\xe2\xe7~\x92\xa2\xb2\x1b\xc3\x00\x85\xce\xad7\x87\xa0\xfcc\xf5\xf8\xaf\v,q\xd4\x18\xbdM\x1a\xde\xba*L\x05m6\xecH\xd0T\xb8m\xdb\b\xa6\x02\xfb\x13\xac\x91\x8a\x8d\x94\x93\x8d=\xb1\x84\x9c\x9b\xe5\xc7\xa6\xc9Q\xc1eUc\xcc\x180^\x00\x00\x00\x00\x00\x00\x00\x00\xe7]6+\\\x00\x00\x00\x00?#C.\x1dj\xd9\xc3\xdd&\x80g:N\xec\x06[\x8f\x92\xe2\xb01\xb0\xef\x10,\xde\xf3\x86D\x8b\xf7\xf1>AH\xef\\\xf9\x8b\a\xe0\xb2\xcb\xf0\x97\b\r\xd5`\xb9\xd6\xa4\x1e\xbe\x12-}\xc5\x84\xde@\x18\x87\f\x01O\xedS\x8f\x9en,\xbce\xb2\xe4\x82v\x1c\xed\x84-s\xab\x06b\x9c\xba\xec\xa5\xc9A\x84\xd0\xe0 S\xc8\xa2\xaf\x85\v\xad\xa5\x88\xcf\xb6}`\x14\'\xea\xbfN\xac)\xa1\xe8\xb2\x9f\x112TJ\x16\x8c9\xe9\xf5\x18\x15Dd\x8a%>\x91\x93\x88\xe9\x18\x82]\x9e&\xfa\xaa\xfa8Z2\x00'/1301, 0x7) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, &(0x7f0000000080)) 14.519777019s ago: executing program 0 (id=862): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x0, 0x0) r4 = io_uring_setup(0x336b, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f0000000180)={@private0, 0x8000000, 0x0, 0xff, 0x1}, 0x20) close_range(r4, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) 13.453847711s ago: executing program 0 (id=863): ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="4400000010000104a5270b7357000000925e4a44", @ANYRES32, @ANYBLOB="0dfa130016000000240012000c00010000000000"], 0x44}}, 0x0) r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32=r1], 0x48}}, 0x0) 12.674272605s ago: executing program 0 (id=866): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x2006}, 0x48) ptrace(0x4208, r0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000001000207b8af8ff00000000bfa200000000000007020000f8ffffffb703000008180000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1b, '\x00', 0x0, 0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r4}, 0x10) write$FUSE_BMAP(0xffffffffffffffff, 0x0, 0x0) getresuid(0x0, 0x0, &(0x7f00000004c0)) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_TID_CONFIG(r6, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000006c0)={0x28, r5, 0x10ada85e65c25349, 0x0, 0x0, {{0x67}, {@val={0x8}, @val={0xc, 0x99, {0x8}}}}}, 0x28}}, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="560a0000000000006111800000000000180000000000000000000000000000009500000000000000"], &(0x7f0000000000)='GPL\x00'}, 0x80) add_key$fscrypt_v1(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r7, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r7, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) write$binfmt_script(0xffffffffffffffff, &(0x7f000000e0c0), 0x10010) sendfile(r7, 0xffffffffffffffff, &(0x7f0000000100), 0x8001) 11.040876027s ago: executing program 0 (id=870): socket$inet_sctp(0x2, 0x1, 0x84) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'netdevsim0\x00', &(0x7f0000000600)=@ethtool_wolinfo={0x5, 0x8, 0x3, "22a7c45055be"}}) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r1, &(0x7f0000000200)=ANY=[@ANYBLOB='\'\x00\x00\x00\a'], 0xd) getsockopt$bt_hci(r1, 0x0, 0x2, &(0x7f0000000100)=""/75, &(0x7f0000000040)=0x4b) socket$alg(0x26, 0x5, 0x0) syz_mount_image$minix(&(0x7f0000000180), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000240)=ANY=[], 0x1, 0x154, &(0x7f0000000440)="$eJzs281KAmEUxvFn/M6+LGsTLYQWtclJpQ93dSmik0hjSbZRAulSur+CuoEMB51wFAJD33T+v9V5PLx4ZvHq2YwAhFZOOVmyFB+Ew1Sml7VMjwRgQfqSvvoAwin6YXoCAGa830gtSW+fz1VF4xP7waB/PepHEpP9F+kgNuxbSaWC+8WrdDw6b61NPZ/2++mp/ZOj0feva0Ob2tK2MtrR7rBf88/v/3EbAsLFUj6Yxz6I6LbhOmd+jnu54OeEl4uBXPJz0sv56oNbm9cjAJhR5Jf7Hw3c/1jg/gNYXu1O967ius4jxUoU/d6/GINi6QvTv0wA5s1+arbsdqd72mhW6k7duS9eFcsXpfPCZdn2Nn97fP8HsDp+/vRNTwIAAAAAAAAAAAAAAGaV1Z7pEQAAAAAsyCJeJzL9jAAAAAAAAAAAAAAAAAAAAMCq+A4AAP//OSgl1g==") rename(&(0x7f0000000000)='./file1\x00', &(0x7f0000000080)='./file2\x00') r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000040)={0x4101}, 0x10) sendmsg$nl_route(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[], 0x24}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000900)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x403}}]}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r3, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, 0x0, 0x0) fcntl$dupfd(r3, 0x0, r3) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000000)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x2, &(0x7f0000000380)=@gcm_256={{0x304}, "5ef40e7ab852acb6", "582f7cccfda6a677c372678ca6f023d0bca3a88ac5a438b0e48fdb55bdc85053", "52c227d6", "c6425ec4f2e476d5"}, 0x38) iopl(0x7) 6.427350919s ago: executing program 3 (id=879): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x2006}, 0x48) ptrace(0x4208, r0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000001000207b8af8ff00000000bfa200000000000007020000f8ffffffb703000008180000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1b, '\x00', 0x0, 0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r4}, 0x10) write$FUSE_BMAP(0xffffffffffffffff, 0x0, 0x0) getresuid(0x0, 0x0, &(0x7f00000004c0)) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_TID_CONFIG(r6, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000006c0)={0x28, r5, 0x10ada85e65c25349, 0x0, 0x0, {{0x67}, {@val={0x8}, @val={0xc, 0x99, {0x8}}}}}, 0x28}}, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="560a0000000000006111800000000000180000000000000000000000000000009500000000000000"], &(0x7f0000000000)='GPL\x00'}, 0x80) add_key$fscrypt_v1(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r7, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r7, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) write$binfmt_script(0xffffffffffffffff, &(0x7f000000e0c0), 0x10010) sendfile(r7, 0xffffffffffffffff, &(0x7f0000000100), 0x8001) 4.928116482s ago: executing program 3 (id=884): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'geneve1\x00'}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001140)=ANY=[@ANYBLOB="2800000010000100"/20, @ANYBLOB="00000000e3"], 0x28}}, 0x0) 4.334730372s ago: executing program 3 (id=886): r0 = socket(0x1e, 0x1, 0x0) connect$tipc(r0, 0x0, 0x0) creat(&(0x7f0000000100)='./bus\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) syz_mount_image$btrfs(&(0x7f0000005100), &(0x7f0000005140)='./file0\x00', 0x16, &(0x7f0000000080), 0x1, 0x514c, &(0x7f000000f400)="$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") setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x45, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) open(&(0x7f0000000540)='./file2\x00', 0x181042, 0x200000) prlimit64(r1, 0xb, 0x0, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$team(&(0x7f00000001c0), r3) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_NODES(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, r5, 0x1, 0x0, 0x0, {{}, {0x0, 0x6}}}, 0xfd53}}, 0x0) 3.278143262s ago: executing program 4 (id=887): r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) close(r0) 2.656694941s ago: executing program 4 (id=888): syz_emit_ethernet(0x1ec, &(0x7f0000000800)={@local, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "cedd00", 0x1b6, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0xa, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af2502"}, {0x0, 0x1, "000000050000000026000400"}, {0x1f}, {0x0, 0x1d, "06aa85616177c41bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0dea07c9a1f643c822a18b79f7c5eba31fb68b2d734a6671e27182aee96f24a4a5cf390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a141123f5ac010000000000000090aa235a670670ffc5dc49dfb58d00000000000000"}, {0x19, 0xb, "17dcea46805d4809c20547406b18901b0aeff04c0300f3c75dc2d227a83b89483b1084743475671545e65eb2e9ac946a3f0e2bc4619f91394c02bcfbbb7d71138537d68e2d2c6393a9f3becd1a9f51a948b5b303f4f019"}]}}}}}}, 0x0) 2.539245567s ago: executing program 4 (id=889): r0 = creat(&(0x7f00000003c0)='./bus\x00', 0x60) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) setsockopt$inet_dccp_buf(r0, 0x21, 0xf, &(0x7f0000000740), 0x0) io_setup(0x1fe, &(0x7f00000002c0)=0x0) io_submit(r1, 0x3, &(0x7f00000004c0)=[&(0x7f00000000c0)={0x25, 0x0, 0x4, 0x1, 0x0, 0xffffffffffffffff, 0x0}, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x7, 0x0, 0xffffffffffffffff, 0x0}, 0x0]) 2.322766737s ago: executing program 4 (id=890): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000001000207b8af8ff00000000bfa200000000000007020000f8ffffffb703000008180000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1b, '\x00', 0x0, 0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r3}, 0x10) getresuid(0x0, 0x0, &(0x7f00000004c0)) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_TID_CONFIG(r5, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000006c0)={0x28, r4, 0x10ada85e65c25349, 0x0, 0x0, {{0x67}, {@val={0x8}, @val={0xc, 0x99, {0x8}}}}}, 0x28}}, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="560a0000000000006111800000000000180000000000000000000000000000009500000000000000"], &(0x7f0000000000)='GPL\x00'}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x19, 0xf, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x5}, {}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0x2, 0xc1, &(0x7f000000cf3d)=""/193}, 0x90) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r6, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) 2.251127307s ago: executing program 3 (id=891): r0 = syz_open_dev$I2C(&(0x7f0000000000), 0x0, 0x101042) writev(r0, &(0x7f0000003600)=[{0x0}], 0x1) 2.002832621s ago: executing program 3 (id=892): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0xfff, 0x7}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r0, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000800)={'sit0\x00', &(0x7f0000000700)={'gretap0\x00', 0x0, 0x1, 0x4cf5b525d5039f7e, 0xa, 0x4, {{0x17, 0x4, 0x1, 0x5, 0x5c, 0x0, 0x0, 0x0, 0x4, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, {[@generic={0x0, 0x2}, @ra={0x94, 0x4}, @timestamp_prespec={0x44, 0x24, 0xb9, 0x3, 0xb, [{@multicast1, 0x3}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x3}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4}, {@broadcast, 0x4}]}, @timestamp_addr={0x44, 0x1c, 0x86, 0x1, 0x1, [{@multicast2, 0x5}, {@multicast2, 0xb6eb}, {@remote, 0x5}]}]}}}}}) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x24}}, 0x0) getsockname$packet(r7, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r8, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x0) getsockname$packet(r7, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route_sched(r5, 0x0, 0x0) 159.793503ms ago: executing program 3 (id=894): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000000), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mknodat(r0, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0) chdir(&(0x7f00000000c0)='./bus\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) mkdir(&(0x7f0000000240)='./bus\x00', 0x2) renameat2(r1, 0x0, r1, &(0x7f0000000200)='./bus/file0\x00', 0x0) r2 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r2, &(0x7f0000001fc0)=""/184, 0xb8) 159.133585ms ago: executing program 4 (id=895): r0 = msgget$private(0x0, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000000)={{{@in=@broadcast, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in=@loopback}}, &(0x7f0000000100)=0xe8) newfstatat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) r3 = getpid() msgctl$IPC_SET(r0, 0x1, &(0x7f0000000300)={{0x0, r1, 0x0, r2, 0xffffffffffffffff, 0xfb35c01cab445d2e}, 0x0, 0x0, 0x8, 0x1, 0x1, 0x0, 0x2, 0x3, 0x200, 0xa, 0x0, r3}) 0s ago: executing program 4 (id=896): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r0, 0x0, 0x880) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f00000000c0)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000ddffffff850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000003680)='sched_switch\x00', r4}, 0x10) syz_open_dev$usbmon(0x0, 0x0, 0x0) gettid() r5 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) read$hiddev(r5, 0x0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, 0x0) sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1c17}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8}, @IFLA_MTU={0x8, 0x4, 0x4c5}]}, 0x44}}, 0x0) syz_kvm_setup_cpu$x86(r0, r0, &(0x7f0000001000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000000)="0f01def3c1dc67642e650f01c5f3aebaf80c66b8581df58466efbafc0c66ed0f01fb0f30f20f1ef2360f300fc75e00", 0x2f}], 0x1, 0x0, &(0x7f0000000100), 0x0) kernel console output (not intermixed with test programs): 8] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci5/hci5:201' [ 214.100828][ T4618] CPU: 1 UID: 0 PID: 4618 Comm: kworker/u9:1 Not tainted 6.11.0-rc3-next-20240812-syzkaller #0 [ 214.111234][ T4618] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 214.121337][ T4618] Workqueue: hci5 hci_rx_work [ 214.126083][ T4618] Call Trace: [ 214.129411][ T4618] [ 214.132383][ T4618] dump_stack_lvl+0x241/0x360 [ 214.137122][ T4618] ? __pfx_dump_stack_lvl+0x10/0x10 [ 214.142375][ T4618] ? __pfx__printk+0x10/0x10 [ 214.147036][ T4618] ? sysfs_create_dir_ns+0x28a/0x3a0 [ 214.152397][ T4618] ? __kmalloc_cache_noprof+0x19c/0x2c0 [ 214.152657][ T6535] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 214.157978][ T4618] sysfs_create_dir_ns+0x2ce/0x3a0 [ 214.189049][ T4618] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 214.194768][ T4618] kobject_add_internal+0x435/0x8d0 [ 214.200130][ T4618] kobject_add+0x152/0x220 [ 214.204599][ T4618] ? do_raw_spin_unlock+0x13c/0x8b0 [ 214.209888][ T4618] ? device_add+0x3e7/0xbf0 [ 214.214458][ T4618] ? __pfx_kobject_add+0x10/0x10 [ 214.219447][ T4618] ? _raw_spin_unlock+0x28/0x50 [ 214.224365][ T4618] ? get_device_parent+0x165/0x410 [ 214.229527][ T4618] device_add+0x4e5/0xbf0 [ 214.233943][ T4618] hci_conn_add_sysfs+0xe8/0x200 [ 214.239061][ T4618] le_conn_complete_evt+0xc9f/0x12e0 [ 214.244514][ T4618] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 214.250299][ T4618] ? __mutex_unlock_slowpath+0x21d/0x750 [ 214.255981][ T4618] ? __copy_skb_header+0x437/0x5b0 [ 214.261134][ T4618] ? skb_pull_data+0x112/0x230 [ 214.266048][ T4618] hci_le_enh_conn_complete_evt+0x185/0x420 [ 214.271992][ T4618] hci_event_packet+0xa55/0x1540 [ 214.276996][ T4618] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 214.282313][ T4618] ? __pfx_hci_event_packet+0x10/0x10 [ 214.287700][ T4618] ? do_raw_spin_unlock+0x13c/0x8b0 [ 214.292956][ T4618] ? hci_send_to_monitor+0xd8/0x7f0 [ 214.298189][ T4618] ? kcov_remote_start+0x97/0x7d0 [ 214.303237][ T4618] hci_rx_work+0x3e8/0xca0 [ 214.307682][ T4618] ? process_scheduled_works+0x945/0x1830 [ 214.313421][ T4618] process_scheduled_works+0xa2c/0x1830 [ 214.319040][ T4618] ? __pfx_process_scheduled_works+0x10/0x10 [ 214.325139][ T4618] ? assign_work+0x364/0x3d0 [ 214.329756][ T4618] worker_thread+0x86d/0xd10 [ 214.334374][ T4618] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 214.340297][ T4618] ? __kthread_parkme+0x169/0x1d0 [ 214.345353][ T4618] ? __pfx_worker_thread+0x10/0x10 [ 214.350491][ T4618] kthread+0x2f0/0x390 [ 214.354677][ T4618] ? __pfx_worker_thread+0x10/0x10 [ 214.359814][ T4618] ? __pfx_kthread+0x10/0x10 [ 214.364418][ T4618] ret_from_fork+0x4b/0x80 [ 214.368855][ T4618] ? __pfx_kthread+0x10/0x10 [ 214.373462][ T4618] ret_from_fork_asm+0x1a/0x30 [ 214.378263][ T4618] [ 214.478440][ T4618] kobject: kobject_add_internal failed for hci5:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 214.492716][ T4618] Bluetooth: hci5: failed to register connection device [ 214.572064][ T6535] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 214.966647][ T6535] hsr_slave_0: entered promiscuous mode [ 215.004851][ T6535] hsr_slave_1: entered promiscuous mode [ 215.041573][ T6535] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 215.055166][ T6535] Cannot create hsr debugfs directory [ 215.102565][ T6270] hsr_slave_0: left promiscuous mode [ 215.138032][ T6270] hsr_slave_1: left promiscuous mode [ 215.168834][ T6270] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 215.190328][ T6270] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 215.206693][ T6270] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 215.215164][ T6270] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 215.299734][ T6270] veth1_macvtap: left promiscuous mode [ 215.305739][ T6270] veth0_macvtap: left promiscuous mode [ 215.313481][ T6270] veth1_vlan: left promiscuous mode [ 215.320646][ T6270] veth0_vlan: left promiscuous mode [ 217.277654][ T6270] team0 (unregistering): Port device team_slave_1 removed [ 217.488426][ T6270] team0 (unregistering): Port device team_slave_0 removed [ 219.187199][ T6743] netlink: 4 bytes leftover after parsing attributes in process `syz.2.384'. [ 219.424040][ T6772] loop2: detected capacity change from 0 to 128 [ 219.734815][ T6776] loop1: detected capacity change from 0 to 512 [ 219.749480][ T6776] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 220.098157][ T6776] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2240: inode #15: comm syz.1.397: corrupted in-inode xattr: e_value out of bounds [ 220.140672][ T6772] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 220.489381][ T6776] EXT4-fs error (device loop1): ext4_orphan_get:1396: comm syz.1.397: couldn't read orphan inode 15 (err -117) [ 220.506110][ T6772] ext4 filesystem being mounted at /100/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 220.645685][ T6776] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 220.804093][ T30] kauditd_printk_skb: 38 callbacks suppressed [ 220.804113][ T30] audit: type=1804 audit(1723477470.508:50): pid=6772 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.396" name="/newroot/100/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/bus" dev="loop2" ino=14 res=1 errno=0 [ 220.987447][ T5225] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 221.108433][ T6793] EXT4-fs error (device loop1): ext4_find_dest_de:2067: inode #2: block 13: comm syz.1.397: bad entry in directory: inode out of bounds - offset=44, inode=75, rec_len=16, size=1024 fake=0 [ 222.081813][ T6087] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 222.236465][ T6807] loop3: detected capacity change from 0 to 16 [ 222.267459][ T6807] erofs: (device loop3): mounted with root inode @ nid 36. [ 222.749570][ T5306] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 222.850071][ T30] audit: type=1326 audit(1723477472.548:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6820 comm="syz.1.407" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ae83779f9 code=0x7ffc0000 [ 222.976090][ T30] audit: type=1326 audit(1723477472.548:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6820 comm="syz.1.407" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ae83779f9 code=0x7ffc0000 [ 222.998390][ C0] vkms_vblank_simulate: vblank timer overrun [ 223.016582][ T5306] usb 1-1: Using ep0 maxpacket: 8 [ 223.023973][ T6535] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 223.031956][ T30] audit: type=1326 audit(1723477472.598:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6820 comm="syz.1.407" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f7ae83779f9 code=0x7ffc0000 [ 223.061718][ T5306] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 223.062591][ T6535] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 223.086061][ T30] audit: type=1326 audit(1723477472.598:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6820 comm="syz.1.407" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ae83779f9 code=0x7ffc0000 [ 223.097175][ T5306] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 223.130705][ T6535] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 223.151341][ T6535] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 223.155330][ T5306] usb 1-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 223.186759][ T51] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 223.189979][ T30] audit: type=1326 audit(1723477472.598:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6820 comm="syz.1.407" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f7ae8376390 code=0x7ffc0000 [ 223.202728][ T5306] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 223.216460][ C0] vkms_vblank_simulate: vblank timer overrun [ 223.294087][ T30] audit: type=1326 audit(1723477472.598:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6820 comm="syz.1.407" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f7ae83775fb code=0x7ffc0000 [ 223.318143][ T5306] usb 1-1: config 0 descriptor?? [ 223.324873][ T30] audit: type=1326 audit(1723477472.598:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6820 comm="syz.1.407" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f7ae83775fb code=0x7ffc0000 [ 223.350393][ T30] audit: type=1326 audit(1723477472.598:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6820 comm="syz.1.407" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f7ae83775fb code=0x7ffc0000 [ 223.395256][ T51] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 223.407514][ T51] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 223.430205][ T30] audit: type=1326 audit(1723477472.598:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6820 comm="syz.1.407" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f7ae83775fb code=0x7ffc0000 [ 223.452690][ T51] usb 2-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 223.470196][ T51] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 223.490622][ T51] usb 2-1: config 0 descriptor?? [ 223.575464][ T6535] 8021q: adding VLAN 0 to HW filter on device bond0 [ 223.662963][ T6535] 8021q: adding VLAN 0 to HW filter on device team0 [ 223.695112][ T6270] bridge0: port 1(bridge_slave_0) entered blocking state [ 223.702389][ T6270] bridge0: port 1(bridge_slave_0) entered forwarding state [ 223.759765][ T5275] usb 2-1: USB disconnect, device number 5 [ 223.807289][ T6270] bridge0: port 2(bridge_slave_1) entered blocking state [ 223.814626][ T6270] bridge0: port 2(bridge_slave_1) entered forwarding state [ 223.987223][ T6535] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 224.163781][ T6855] netlink: 24 bytes leftover after parsing attributes in process `syz.2.413'. [ 225.966385][ T6868] netlink: 4 bytes leftover after parsing attributes in process `syz.1.414'. [ 225.988887][ T5275] usb 1-1: USB disconnect, device number 13 [ 226.155704][ T6535] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 228.009696][ T5306] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 228.974556][ T5306] usb 4-1: Using ep0 maxpacket: 8 [ 228.983198][ T5306] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 228.995886][ T5306] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 229.756642][ T6535] veth0_vlan: entered promiscuous mode [ 229.979522][ T5306] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 229.988736][ T5306] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 230.013295][ T5306] usb 4-1: config 0 descriptor?? [ 230.078784][ T6535] veth1_vlan: entered promiscuous mode [ 230.232876][ T6535] veth0_macvtap: entered promiscuous mode [ 230.261023][ T6535] veth1_macvtap: entered promiscuous mode [ 230.679975][ T6535] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 230.693218][ T6535] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 230.704572][ T6535] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 230.722482][ T6535] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 230.736839][ T6535] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 231.719507][ T6535] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 231.742391][ T6535] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 232.732990][ T6535] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 232.922282][ T5275] usb 4-1: USB disconnect, device number 8 [ 232.933682][ T6535] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 233.050432][ T6535] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 233.111343][ T6535] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 233.199574][ T6535] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 233.210600][ T6535] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 233.221129][ T6535] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 233.232865][ T6535] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 233.274301][ T6535] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 233.299536][ T6535] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 233.318270][ T6535] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 235.770434][ T6937] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 236.671659][ T6937] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 236.693973][ T6937] bond0 (unregistering): Released all slaves [ 236.978660][ T6535] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 237.021522][ T6535] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 237.076522][ T6535] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 237.093734][ T6535] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 238.123662][ T2978] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 238.390181][ T2978] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 238.507931][ T5828] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 238.669712][ T5828] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 239.186111][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 239.316189][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 239.479897][ T2978] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 239.758527][ T2978] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 240.736976][ T6991] loop3: detected capacity change from 0 to 16 [ 240.763690][ T2978] bridge_slave_1: left allmulticast mode [ 240.769396][ T2978] bridge_slave_1: left promiscuous mode [ 240.805595][ T6991] erofs: (device loop3): mounted with root inode @ nid 36. [ 240.818931][ T2978] bridge0: port 2(bridge_slave_1) entered disabled state [ 240.885882][ T2978] bridge_slave_0: left allmulticast mode [ 240.895187][ T2978] bridge_slave_0: left promiscuous mode [ 240.910284][ T2978] bridge0: port 1(bridge_slave_0) entered disabled state [ 240.948479][ T4618] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 240.969025][ T4618] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 240.979075][ T4618] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 240.996383][ T4618] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 241.006763][ T4618] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 241.014974][ T4618] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 241.501892][ T2978] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 241.515448][ T2978] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 241.529194][ T2978] bond0 (unregistering): Released all slaves [ 241.548121][ T6995] dvmrp0: entered allmulticast mode [ 241.764564][ T7006] loop2: detected capacity change from 0 to 128 [ 241.780468][ T7006] befs: (loop2): No write support. Marking filesystem read-only [ 241.814790][ T7006] befs: (loop2): invalid magic header [ 242.810622][ T7013] loop2: detected capacity change from 0 to 256 [ 242.856679][ T7013] exfat: Unknown parameter '' [ 243.121750][ T4618] Bluetooth: hci2: command tx timeout [ 244.095215][ T2978] hsr_slave_0: left promiscuous mode [ 244.163344][ T2978] hsr_slave_1: left promiscuous mode [ 244.198035][ T2978] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 244.224767][ T2978] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 244.373597][ T2978] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 244.466870][ T2978] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 245.014195][ T2978] veth1_macvtap: left promiscuous mode [ 245.934951][ T4618] Bluetooth: hci2: command tx timeout [ 246.180768][ T2978] veth0_macvtap: left promiscuous mode [ 246.215563][ T2978] veth1_vlan: left promiscuous mode [ 246.245019][ T30] kauditd_printk_skb: 26 callbacks suppressed [ 246.245037][ T30] audit: type=1326 audit(1723477495.948:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7053 comm="syz.3.466" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad7e1779f9 code=0x7ffc0000 [ 246.252922][ T2978] veth0_vlan: left promiscuous mode [ 246.288596][ T7054] loop3: detected capacity change from 0 to 1024 [ 246.296927][ T30] audit: type=1326 audit(1723477495.978:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7053 comm="syz.3.466" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad7e1779f9 code=0x7ffc0000 [ 246.330486][ T30] audit: type=1326 audit(1723477495.978:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7053 comm="syz.3.466" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fad7e1779f9 code=0x7ffc0000 [ 246.355750][ T30] audit: type=1326 audit(1723477495.978:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7053 comm="syz.3.466" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad7e1779f9 code=0x7ffc0000 [ 246.435958][ T30] audit: type=1326 audit(1723477495.978:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7053 comm="syz.3.466" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fad7e1779f9 code=0x7ffc0000 [ 246.506936][ T7054] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 246.548363][ T30] audit: type=1326 audit(1723477495.978:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7053 comm="syz.3.466" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fad7e177a33 code=0x7ffc0000 [ 246.570575][ T30] audit: type=1326 audit(1723477495.988:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7053 comm="syz.3.466" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fad7e1764df code=0x7ffc0000 [ 246.596412][ T30] audit: type=1326 audit(1723477495.988:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7053 comm="syz.3.466" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7fad7e177a87 code=0x7ffc0000 [ 246.628279][ T30] audit: type=1326 audit(1723477495.988:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7053 comm="syz.3.466" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fad7e176390 code=0x7ffc0000 [ 247.390019][ T30] audit: type=1326 audit(1723477495.988:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7053 comm="syz.3.466" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fad7e1775fb code=0x7ffc0000 [ 247.780742][ T5231] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 247.969652][ T4618] Bluetooth: hci2: command tx timeout [ 249.408571][ T2978] team0 (unregistering): Port device team_slave_1 removed [ 249.449688][ T2978] team0 (unregistering): Port device team_slave_0 removed [ 250.041847][ T4618] Bluetooth: hci2: command tx timeout [ 250.904186][ T7082] loop4: detected capacity change from 0 to 128 [ 250.952263][ T7082] befs: (loop4): No write support. Marking filesystem read-only [ 250.983416][ T7082] befs: (loop4): invalid magic header [ 251.110545][ T6996] chnl_net:caif_netlink_parms(): no params data found [ 251.124531][ T7085] loop2: detected capacity change from 0 to 512 [ 251.167620][ T7085] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 251.171940][ T7090] loop4: detected capacity change from 0 to 256 [ 251.184655][ T7090] exfat: Unknown parameter '' [ 251.277556][ T7085] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2240: inode #15: comm syz.2.472: corrupted in-inode xattr: e_value out of bounds [ 251.403534][ T7085] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.472: couldn't read orphan inode 15 (err -117) [ 252.343896][ T7085] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 252.591393][ T7116] EXT4-fs error (device loop2): ext4_search_dir:1505: inode #2: block 13: comm syz.2.472: bad entry in directory: inode out of bounds - offset=44, inode=75, rec_len=16, size=1024 fake=0 [ 252.606907][ T6996] bridge0: port 1(bridge_slave_0) entered blocking state [ 252.606981][ T6996] bridge0: port 1(bridge_slave_0) entered disabled state [ 252.607134][ T6996] bridge_slave_0: entered allmulticast mode [ 252.608292][ T6996] bridge_slave_0: entered promiscuous mode [ 252.616624][ T7116] EXT4-fs error (device loop2): ext4_find_dest_de:2067: inode #2: block 13: comm syz.2.472: bad entry in directory: inode out of bounds - offset=44, inode=75, rec_len=16, size=1024 fake=0 [ 252.629776][ T6996] bridge0: port 2(bridge_slave_1) entered blocking state [ 252.629858][ T6996] bridge0: port 2(bridge_slave_1) entered disabled state [ 252.630048][ T6996] bridge_slave_1: entered allmulticast mode [ 252.631358][ T6996] bridge_slave_1: entered promiscuous mode [ 253.864919][ T6996] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 253.871083][ T6996] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 254.002142][ T6996] team0: Port device team_slave_0 added [ 254.046085][ T5225] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 254.055223][ T6996] team0: Port device team_slave_1 added [ 254.146256][ T6996] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 254.205072][ T6996] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 254.240163][ T6996] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 254.284585][ T6996] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 254.317357][ T6996] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 254.385074][ T5278] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 254.401434][ T6996] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 254.450617][ T6996] hsr_slave_0: entered promiscuous mode [ 254.462114][ T6996] hsr_slave_1: entered promiscuous mode [ 254.476528][ T6996] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 254.487516][ T6996] Cannot create hsr debugfs directory [ 254.884097][ T5278] usb 4-1: Using ep0 maxpacket: 8 [ 254.916941][ T5278] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 255.540442][ T5278] usb 4-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 256.458515][ T1270] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.506524][ T1270] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.545274][ T5278] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 256.693260][ T5278] usb 4-1: config 0 descriptor?? [ 256.732095][ T5278] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 256.936379][ T5278] gspca_vc032x: reg_r err -71 [ 256.975346][ T5278] vc032x 4-1:0.0: probe with driver vc032x failed with error -71 [ 257.245437][ T5278] usb 4-1: USB disconnect, device number 9 [ 257.537411][ T7157] netlink: 4 bytes leftover after parsing attributes in process `syz.2.487'. [ 257.863554][ T7152] 8021q: adding VLAN 0 to HW filter on device team1 [ 258.040808][ T7152] bond0: (slave team1): Enslaving as an active interface with an up link [ 261.176312][ T7202] loop4: detected capacity change from 0 to 128 [ 261.191741][ T7202] befs: (loop4): No write support. Marking filesystem read-only [ 261.226324][ T7202] befs: (loop4): invalid magic header [ 261.448495][ T7209] loop4: detected capacity change from 0 to 256 [ 261.455823][ T5278] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 261.473116][ T7209] exfat: Unknown parameter '' [ 261.769533][ T5278] usb 3-1: Using ep0 maxpacket: 8 [ 262.491949][ T5278] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 262.539195][ T5278] usb 3-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 262.571956][ T5278] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 262.618821][ T5278] usb 3-1: config 0 descriptor?? [ 262.656788][ T5278] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 262.824286][ T6996] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 262.899671][ T5278] gspca_vc032x: reg_r err -32 [ 262.902725][ T6996] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 262.905346][ T5278] vc032x 3-1:0.0: probe with driver vc032x failed with error -32 [ 263.922036][ T6996] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 264.003788][ T6996] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 265.201836][ T5307] usb 3-1: USB disconnect, device number 8 [ 265.436102][ T6996] 8021q: adding VLAN 0 to HW filter on device bond0 [ 265.611170][ T6996] 8021q: adding VLAN 0 to HW filter on device team0 [ 266.101306][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 266.108535][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 266.626970][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 266.634241][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 269.224242][ T6996] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 269.277590][ T7259] loop0: detected capacity change from 0 to 128 [ 269.329733][ T7259] befs: (loop0): No write support. Marking filesystem read-only [ 269.368459][ T7259] befs: (loop0): invalid magic header [ 271.382587][ T7259] loop0: detected capacity change from 0 to 256 [ 271.438398][ T7259] exfat: Unknown parameter '' [ 271.715008][ T6996] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 271.752619][ T51] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 271.904643][ T6996] veth0_vlan: entered promiscuous mode [ 271.947185][ T6996] veth1_vlan: entered promiscuous mode [ 271.962166][ T51] usb 4-1: Using ep0 maxpacket: 8 [ 271.974358][ T51] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 272.249553][ T51] usb 4-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 272.263866][ T51] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 272.278514][ T6996] veth0_macvtap: entered promiscuous mode [ 274.520057][ T6996] veth1_macvtap: entered promiscuous mode [ 274.700799][ T51] usb 4-1: config 0 descriptor?? [ 274.850496][ T6996] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 274.889737][ T51] usb 4-1: can't set config #0, error -71 [ 274.950018][ T51] usb 4-1: USB disconnect, device number 10 [ 274.956126][ T6996] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 275.026409][ T6996] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 275.059561][ T6996] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 275.096465][ T6996] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 275.111633][ T6996] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 275.121741][ T6996] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 275.132709][ T6996] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 275.144320][ T6996] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 275.162457][ T6996] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 275.201016][ T7320] loop3: detected capacity change from 0 to 128 [ 275.219630][ T6996] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 275.235973][ T7320] befs: (loop3): No write support. Marking filesystem read-only [ 275.245622][ T6996] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 275.274387][ T7320] befs: (loop3): invalid magic header [ 275.281395][ T6996] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 275.320078][ T6996] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 275.338651][ T6996] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 275.361477][ T6996] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 275.377819][ T6996] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 275.394983][ T6996] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 275.465984][ T6996] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 275.504385][ T7320] loop3: detected capacity change from 0 to 256 [ 275.511052][ T6996] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 275.521986][ T7320] exfat: Unknown parameter '' [ 275.553911][ T6996] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 275.590973][ T6996] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 275.813473][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 275.840073][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 275.926865][ T5643] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 275.946731][ T5643] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 280.740077][ T4680] udevd[4680]: worker [5228] terminated by signal 33 (Unknown signal 33) [ 281.102616][ T2978] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 282.572674][ T7425] loop0: detected capacity change from 0 to 128 [ 282.921184][ T2978] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 283.651105][ T5227] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 283.883900][ T5227] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 283.892681][ T5227] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 283.900785][ T5227] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 283.908770][ T5227] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 283.916875][ T5227] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 284.255632][ T2978] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 284.379288][ T2978] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 286.307709][ T5227] Bluetooth: hci2: command tx timeout [ 286.325703][ T2978] bridge_slave_1: left allmulticast mode [ 287.274920][ T2978] bridge_slave_1: left promiscuous mode [ 287.300288][ T2978] bridge0: port 2(bridge_slave_1) entered disabled state [ 287.411240][ T2978] bridge_slave_0: left allmulticast mode [ 287.416952][ T2978] bridge_slave_0: left promiscuous mode [ 287.445078][ T2978] bridge0: port 1(bridge_slave_0) entered disabled state [ 287.478627][ T7462] loop2: detected capacity change from 0 to 128 [ 287.503638][ T7462] ======================================================= [ 287.503638][ T7462] WARNING: The mand mount option has been deprecated and [ 287.503638][ T7462] and is ignored by this kernel. Remove the mand [ 287.503638][ T7462] option from the mount to silence this warning. [ 287.503638][ T7462] ======================================================= [ 287.673937][ T7462] syz.2.558: attempt to access beyond end of device [ 287.673937][ T7462] loop2: rw=0, sector=6491536, nr_sectors = 2 limit=128 [ 287.708688][ T7462] Buffer I/O error on dev loop2, logical block 3245768, async page read [ 287.740460][ T7462] syz.2.558: attempt to access beyond end of device [ 287.740460][ T7462] loop2: rw=0, sector=17666806, nr_sectors = 2 limit=128 [ 287.754213][ T7462] Buffer I/O error on dev loop2, logical block 8833403, async page read [ 287.766097][ T7462] syz.2.558: attempt to access beyond end of device [ 287.766097][ T7462] loop2: rw=0, sector=26539618, nr_sectors = 2 limit=128 [ 287.781924][ T7462] Buffer I/O error on dev loop2, logical block 13269809, async page read [ 287.790818][ T7462] syz.2.558: attempt to access beyond end of device [ 287.790818][ T7462] loop2: rw=0, sector=16147212, nr_sectors = 2 limit=128 [ 287.804688][ T7462] Buffer I/O error on dev loop2, logical block 8073606, async page read [ 287.845279][ T7462] syz.2.558: attempt to access beyond end of device [ 287.845279][ T7462] loop2: rw=0, sector=6491542, nr_sectors = 2 limit=128 [ 287.872663][ T7462] Buffer I/O error on dev loop2, logical block 3245771, async page read [ 287.895076][ T7462] syz.2.558: attempt to access beyond end of device [ 287.895076][ T7462] loop2: rw=0, sector=17668342, nr_sectors = 2 limit=128 [ 287.919534][ T7462] Buffer I/O error on dev loop2, logical block 8834171, async page read [ 287.928013][ T7462] syz.2.558: attempt to access beyond end of device [ 287.928013][ T7462] loop2: rw=0, sector=26932834, nr_sectors = 2 limit=128 [ 287.978350][ T7462] Buffer I/O error on dev loop2, logical block 13466417, async page read [ 287.988149][ T7462] syz.2.558: attempt to access beyond end of device [ 287.988149][ T7462] loop2: rw=0, sector=16147212, nr_sectors = 2 limit=128 [ 288.003011][ T7462] Buffer I/O error on dev loop2, logical block 8073606, async page read [ 288.012512][ T7462] syz.2.558: attempt to access beyond end of device [ 288.012512][ T7462] loop2: rw=0, sector=6491548, nr_sectors = 2 limit=128 [ 288.026226][ T7462] Buffer I/O error on dev loop2, logical block 3245774, async page read [ 288.035268][ T7462] syz.2.558: attempt to access beyond end of device [ 288.035268][ T7462] loop2: rw=0, sector=17669878, nr_sectors = 2 limit=128 [ 288.057494][ T7462] Buffer I/O error on dev loop2, logical block 8834939, async page read [ 288.386137][ T5227] Bluetooth: hci2: command tx timeout [ 289.794661][ T2978] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 290.154196][ T2978] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 290.373042][ T2978] bond0 (unregistering): Released all slaves [ 290.439568][ T5227] Bluetooth: hci2: command tx timeout [ 290.636655][ T7489] loop3: detected capacity change from 0 to 128 [ 292.370435][ T7501] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 292.400212][ T7501] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 292.447239][ T7501] bond0 (unregistering): Released all slaves [ 292.497125][ T7429] chnl_net:caif_netlink_parms(): no params data found [ 292.509800][ T5361] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 292.518941][ T5227] Bluetooth: hci2: command tx timeout [ 292.606515][ T2978] hsr_slave_0: left promiscuous mode [ 292.626527][ T2978] hsr_slave_1: left promiscuous mode [ 292.640466][ T2978] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 292.658363][ T2978] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 292.669198][ T2978] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 292.687345][ T2978] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 292.719485][ T5361] usb 4-1: Using ep0 maxpacket: 8 [ 292.732194][ T5361] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 292.746140][ T2978] veth1_macvtap: left promiscuous mode [ 292.751894][ T5361] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 292.761953][ T2978] veth0_macvtap: left promiscuous mode [ 292.767601][ T2978] veth1_vlan: left promiscuous mode [ 292.773088][ T5361] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 292.783395][ T2978] veth0_vlan: left promiscuous mode [ 292.789492][ T5361] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 292.804655][ T5361] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 292.836537][ T5361] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 293.081917][ T5361] usb 4-1: usb_control_msg returned -32 [ 293.105984][ T5361] usbtmc 4-1:16.0: can't read capabilities [ 293.960187][ T2978] team0 (unregistering): Port device team_slave_1 removed [ 294.034703][ T2978] team0 (unregistering): Port device team_slave_0 removed [ 295.369925][ T5307] usb 4-1: USB disconnect, device number 11 [ 295.899554][ T5307] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 296.080183][ T5307] usb 4-1: Using ep0 maxpacket: 8 [ 296.139740][ T5307] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 296.164475][ T5307] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 296.177928][ T5307] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 296.196047][ T5307] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 296.207633][ T5307] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 296.228078][ T5307] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 296.239167][ T5307] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 296.310832][ T7429] bridge0: port 1(bridge_slave_0) entered blocking state [ 296.382122][ T7429] bridge0: port 1(bridge_slave_0) entered disabled state [ 296.412870][ T7429] bridge_slave_0: entered allmulticast mode [ 296.447697][ T7429] bridge_slave_0: entered promiscuous mode [ 296.460412][ T7429] bridge0: port 2(bridge_slave_1) entered blocking state [ 296.467901][ T7429] bridge0: port 2(bridge_slave_1) entered disabled state [ 296.475786][ T7429] bridge_slave_1: entered allmulticast mode [ 296.483064][ T7429] bridge_slave_1: entered promiscuous mode [ 296.567188][ T5307] usb 4-1: usb_control_msg returned -32 [ 296.581593][ T5307] usbtmc 4-1:16.0: can't read capabilities [ 296.917369][ T7429] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 297.856273][ T7429] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 298.045919][ T7429] team0: Port device team_slave_0 added [ 298.086371][ T7429] team0: Port device team_slave_1 added [ 298.243135][ T7429] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 298.265351][ T7429] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 298.336033][ T7429] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 298.354605][ T4618] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 298.364982][ T4618] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 298.374594][ T4618] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 298.385818][ T4618] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 298.395445][ T4618] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 298.404348][ T4618] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 298.412414][ T7429] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 298.449207][ T7429] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 298.509851][ T7429] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 298.604722][ T7429] hsr_slave_0: entered promiscuous mode [ 298.612455][ T7429] hsr_slave_1: entered promiscuous mode [ 298.619067][ T7429] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 298.627709][ T7429] Cannot create hsr debugfs directory [ 298.895158][ T5361] usb 4-1: USB disconnect, device number 12 [ 299.290744][ T7541] chnl_net:caif_netlink_parms(): no params data found [ 300.196868][ T7566] netlink: 8 bytes leftover after parsing attributes in process `syz.3.586'. [ 300.256431][ T7541] bridge0: port 1(bridge_slave_0) entered blocking state [ 300.277321][ T7541] bridge0: port 1(bridge_slave_0) entered disabled state [ 300.323543][ T7541] bridge_slave_0: entered allmulticast mode [ 300.347744][ T7541] bridge_slave_0: entered promiscuous mode [ 300.372589][ T7541] bridge0: port 2(bridge_slave_1) entered blocking state [ 300.404122][ T7541] bridge0: port 2(bridge_slave_1) entered disabled state [ 300.427765][ T7541] bridge_slave_1: entered allmulticast mode [ 300.454045][ T7541] bridge_slave_1: entered promiscuous mode [ 300.512019][ T4618] Bluetooth: hci5: command tx timeout [ 300.814058][ T7541] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 300.899205][ T7541] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 301.910202][ T7541] team0: Port device team_slave_0 added [ 301.945742][ T7541] team0: Port device team_slave_1 added [ 302.353671][ T7541] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 302.389583][ T7541] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 302.415637][ C0] vkms_vblank_simulate: vblank timer overrun [ 302.726566][ T4618] Bluetooth: hci5: command tx timeout [ 303.209602][ T7541] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 303.337811][ T7541] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 303.369634][ T7541] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 303.449579][ T7541] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 304.428034][ T7541] hsr_slave_0: entered promiscuous mode [ 304.631999][ T7541] hsr_slave_1: entered promiscuous mode [ 304.650311][ T7541] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 305.161719][ T4618] Bluetooth: hci5: command tx timeout [ 305.629266][ T7541] Cannot create hsr debugfs directory [ 306.226163][ T7429] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 306.762562][ T7429] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 307.031939][ T7429] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 307.104561][ T7429] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 307.229695][ T5227] Bluetooth: hci5: command tx timeout [ 307.241855][ T7621] loop0: detected capacity change from 0 to 128 [ 307.341499][ T7621] syz.0.600: attempt to access beyond end of device [ 307.341499][ T7621] loop0: rw=0, sector=6491536, nr_sectors = 2 limit=128 [ 307.361297][ T7621] Buffer I/O error on dev loop0, logical block 3245768, async page read [ 307.389261][ T7621] syz.0.600: attempt to access beyond end of device [ 307.389261][ T7621] loop0: rw=0, sector=17666806, nr_sectors = 2 limit=128 [ 308.266774][ T7621] Buffer I/O error on dev loop0, logical block 8833403, async page read [ 308.278640][ T7621] syz.0.600: attempt to access beyond end of device [ 308.278640][ T7621] loop0: rw=0, sector=26539618, nr_sectors = 2 limit=128 [ 308.299617][ T7621] Buffer I/O error on dev loop0, logical block 13269809, async page read [ 308.314931][ T7621] syz.0.600: attempt to access beyond end of device [ 308.314931][ T7621] loop0: rw=0, sector=16147212, nr_sectors = 2 limit=128 [ 308.376860][ T7621] Buffer I/O error on dev loop0, logical block 8073606, async page read [ 308.568590][ T7621] syz.0.600: attempt to access beyond end of device [ 308.568590][ T7621] loop0: rw=0, sector=6491542, nr_sectors = 2 limit=128 [ 308.589371][ T7541] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 308.758192][ T7621] Buffer I/O error on dev loop0, logical block 3245771, async page read [ 309.346247][ T7621] syz.0.600: attempt to access beyond end of device [ 309.346247][ T7621] loop0: rw=0, sector=17668342, nr_sectors = 2 limit=128 [ 309.360228][ T7621] Buffer I/O error on dev loop0, logical block 8834171, async page read [ 309.389912][ T7621] syz.0.600: attempt to access beyond end of device [ 309.389912][ T7621] loop0: rw=0, sector=26932834, nr_sectors = 2 limit=128 [ 309.466685][ T7621] Buffer I/O error on dev loop0, logical block 13466417, async page read [ 309.476759][ T7621] syz.0.600: attempt to access beyond end of device [ 309.476759][ T7621] loop0: rw=0, sector=16147212, nr_sectors = 2 limit=128 [ 309.491180][ T7621] Buffer I/O error on dev loop0, logical block 8073606, async page read [ 309.500087][ T7621] syz.0.600: attempt to access beyond end of device [ 309.500087][ T7621] loop0: rw=0, sector=6491548, nr_sectors = 2 limit=128 [ 309.513717][ T7621] Buffer I/O error on dev loop0, logical block 3245774, async page read [ 309.522245][ T7621] syz.0.600: attempt to access beyond end of device [ 309.522245][ T7621] loop0: rw=0, sector=17669878, nr_sectors = 2 limit=128 [ 309.559852][ T7621] Buffer I/O error on dev loop0, logical block 8834939, async page read [ 309.611864][ T7541] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 309.869846][ T7541] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 309.967394][ T7429] 8021q: adding VLAN 0 to HW filter on device bond0 [ 310.092407][ T7541] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 310.152085][ T7429] 8021q: adding VLAN 0 to HW filter on device team0 [ 310.210897][ T6269] bridge0: port 1(bridge_slave_0) entered blocking state [ 310.218168][ T6269] bridge0: port 1(bridge_slave_0) entered forwarding state [ 310.294942][ T2978] bridge0: port 2(bridge_slave_1) entered blocking state [ 310.302202][ T2978] bridge0: port 2(bridge_slave_1) entered forwarding state [ 310.641705][ T7541] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 310.710784][ T7541] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 310.736168][ T7541] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 310.792641][ T7541] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 312.098946][ T7429] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 312.157202][ T7541] 8021q: adding VLAN 0 to HW filter on device bond0 [ 312.253589][ T7541] 8021q: adding VLAN 0 to HW filter on device team0 [ 312.434667][ T6270] bridge0: port 1(bridge_slave_0) entered blocking state [ 312.442021][ T6270] bridge0: port 1(bridge_slave_0) entered forwarding state [ 312.520898][ T29] bridge0: port 2(bridge_slave_1) entered blocking state [ 312.528104][ T29] bridge0: port 2(bridge_slave_1) entered forwarding state [ 313.465577][ T7429] veth0_vlan: entered promiscuous mode [ 313.599763][ T7429] veth1_vlan: entered promiscuous mode [ 313.766195][ T7429] veth0_macvtap: entered promiscuous mode [ 313.846349][ T7429] veth1_macvtap: entered promiscuous mode [ 314.554096][ T7429] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 314.629553][ T7429] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 314.674785][ T7429] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 314.686382][ T30] kauditd_printk_skb: 23 callbacks suppressed [ 314.686403][ T30] audit: type=1326 audit(1723477564.398:119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7662 comm="syz.4.608" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c395779f9 code=0x7ffc0000 [ 314.715504][ T7429] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 314.726080][ T7429] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 314.736776][ T7429] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 314.747440][ T7429] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 314.758329][ T7429] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 314.777158][ T7429] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 314.782374][ T30] audit: type=1326 audit(1723477564.438:120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7662 comm="syz.4.608" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c395779f9 code=0x7ffc0000 [ 314.831949][ T7429] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 314.872234][ T7429] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 314.907737][ T30] audit: type=1326 audit(1723477564.448:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7662 comm="syz.4.608" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f4c395779f9 code=0x7ffc0000 [ 314.912817][ T7429] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 314.991338][ T30] audit: type=1326 audit(1723477564.448:122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7662 comm="syz.4.608" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c395779f9 code=0x7ffc0000 [ 314.999694][ T7429] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 315.051860][ T30] audit: type=1326 audit(1723477564.448:123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7662 comm="syz.4.608" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c395779f9 code=0x7ffc0000 [ 315.057411][ T7429] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 315.100514][ T30] audit: type=1326 audit(1723477564.448:124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7662 comm="syz.4.608" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f4c395779f9 code=0x7ffc0000 [ 315.137291][ T7429] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 315.145145][ T30] audit: type=1326 audit(1723477564.448:125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7662 comm="syz.4.608" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c395779f9 code=0x7ffc0000 [ 315.166936][ T7429] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 315.197306][ T30] audit: type=1326 audit(1723477564.448:126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7662 comm="syz.4.608" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c395779f9 code=0x7ffc0000 [ 315.229505][ T7429] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 315.251042][ T7429] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 315.282360][ T7541] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 315.304518][ T7429] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 315.310306][ T30] audit: type=1326 audit(1723477564.448:127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7662 comm="syz.4.608" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f4c395779f9 code=0x7ffc0000 [ 315.331811][ T7429] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 315.355177][ T7429] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 315.379514][ T7429] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 315.399711][ T30] audit: type=1326 audit(1723477564.448:128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7662 comm="syz.4.608" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c395779f9 code=0x7ffc0000 [ 315.744211][ T2978] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 315.769583][ T2978] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 315.841310][ T7541] veth0_vlan: entered promiscuous mode [ 315.895209][ T5696] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 315.911249][ T5696] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 315.914868][ T7541] veth1_vlan: entered promiscuous mode [ 316.053426][ T7541] veth0_macvtap: entered promiscuous mode [ 316.115198][ T7541] veth1_macvtap: entered promiscuous mode [ 316.435632][ T7541] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 316.448706][ T7541] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 316.466689][ T7541] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 316.477694][ T7541] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 316.497531][ T7541] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 316.630279][ T7541] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 316.954977][ T7541] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 317.312368][ T1270] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.318766][ T1270] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.349283][ T7541] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 317.379470][ T7541] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 317.438895][ T7541] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 317.481182][ T7541] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 317.572536][ T7541] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 317.610253][ T7541] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 317.622270][ T7541] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 317.632944][ T7541] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 317.643120][ T7541] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 317.654204][ T7541] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 317.855245][ T7541] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 318.031624][ T7541] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 318.079534][ T7541] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 318.136005][ T7541] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 318.191315][ T7541] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 318.253069][ T7541] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 318.319467][ T7541] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 318.371233][ T7688] loop4: detected capacity change from 0 to 16 [ 318.390035][ T7688] erofs: (device loop4): mounted with root inode @ nid 36. [ 318.397666][ T7541] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 318.432882][ T7541] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 318.864518][ T7694] syz.4.616: attempt to access beyond end of device [ 318.864518][ T7694] loop4: rw=0, sector=14552337256, nr_sectors = 8 limit=16 [ 318.879293][ T7694] syz.4.616: attempt to access beyond end of device [ 318.879293][ T7694] loop4: rw=0, sector=14546590680, nr_sectors = 8 limit=16 [ 319.508588][ T29] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 319.624543][ T4618] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 319.636995][ T4618] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 319.653742][ T4618] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 319.749638][ T4618] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 319.781860][ T4618] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 319.810513][ T4618] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 319.923145][ T4618] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 319.932270][ T7699] loop3: detected capacity change from 0 to 128 [ 319.940314][ T4618] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 319.948774][ T4618] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 319.949613][ T7699] befs: (loop3): No write support. Marking filesystem read-only [ 319.996494][ T4618] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 320.001807][ T7699] befs: (loop3): invalid magic header [ 320.009751][ T4618] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 320.019916][ T29] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 320.029758][ T4618] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 321.126869][ T29] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 321.151412][ T7708] loop3: detected capacity change from 0 to 256 [ 321.159891][ T7708] exfat: Unknown parameter '' [ 321.231100][ T5643] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 321.257818][ T5643] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 321.405786][ T29] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 321.541211][ T5696] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 321.579757][ T5696] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 321.929775][ T5227] Bluetooth: hci2: command tx timeout [ 322.114369][ T5227] Bluetooth: hci6: command tx timeout [ 322.159629][ T5274] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 322.987456][ T29] bridge_slave_1: left allmulticast mode [ 323.007820][ T29] bridge_slave_1: left promiscuous mode [ 323.038674][ T29] bridge0: port 2(bridge_slave_1) entered disabled state [ 323.154256][ T29] bridge_slave_0: left allmulticast mode [ 323.169580][ T5274] usb 3-1: Using ep0 maxpacket: 8 [ 323.181084][ T29] bridge_slave_0: left promiscuous mode [ 323.187122][ T5274] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 323.207522][ T29] bridge0: port 1(bridge_slave_0) entered disabled state [ 323.223233][ T5274] usb 3-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 323.276242][ T5274] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 323.300840][ T5274] usb 3-1: config 0 descriptor?? [ 323.323244][ T5274] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 323.477766][ T7729] loop4: detected capacity change from 0 to 8192 [ 323.558770][ T5274] gspca_vc032x: reg_r err -32 [ 323.563931][ T5274] vc032x 3-1:0.0: probe with driver vc032x failed with error -32 [ 323.855626][ T7735] loop4: p2 p3 p4 [ 323.871126][ T7735] loop4: p2 start 452985600 is beyond EOD, truncated [ 323.949531][ T5227] Bluetooth: hci2: command tx timeout [ 323.969938][ T7735] loop4: p3 start 4177527808 is beyond EOD, truncated [ 324.059591][ T7735] loop4: p4 size 3599499392 extends beyond EOD, truncated [ 324.126447][ T7729] loop4: p2 p3 p4 [ 324.159655][ T7729] loop4: p2 start 452985600 is beyond EOD, truncated [ 324.166431][ T7729] loop4: p3 start 4177527808 is beyond EOD, truncated [ 324.189709][ T5227] Bluetooth: hci6: command tx timeout [ 324.211371][ T7729] loop4: p4 size 3599499392 extends beyond EOD, truncated [ 325.007660][ T5307] usb 3-1: USB disconnect, device number 9 [ 325.225007][ T29] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 325.270863][ T29] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 325.496638][ T29] bond0 (unregistering): Released all slaves [ 326.051480][ T5227] Bluetooth: hci2: command tx timeout [ 326.269712][ T5227] Bluetooth: hci6: command tx timeout [ 326.277935][ T7696] chnl_net:caif_netlink_parms(): no params data found [ 327.038134][ T7700] chnl_net:caif_netlink_parms(): no params data found [ 327.249603][ T29] hsr_slave_0: left promiscuous mode [ 327.284181][ T29] hsr_slave_1: left promiscuous mode [ 327.349762][ T29] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 327.364935][ T29] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 327.540255][ T29] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 327.592168][ T29] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 327.717068][ T29] veth1_macvtap: left promiscuous mode [ 328.159723][ T4618] Bluetooth: hci2: command tx timeout [ 328.196070][ T29] veth0_macvtap: left promiscuous mode [ 328.482124][ T4618] Bluetooth: hci6: command tx timeout [ 328.493643][ T29] veth1_vlan: left promiscuous mode [ 328.499057][ T29] veth0_vlan: left promiscuous mode [ 329.200633][ T5277] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 329.402971][ T5277] usb 5-1: Using ep0 maxpacket: 8 [ 329.431338][ T5277] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 329.464186][ T5277] usb 5-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 329.505336][ T5277] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 329.547798][ T5277] usb 5-1: config 0 descriptor?? [ 329.576281][ T5277] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 329.629822][ T4618] Bluetooth: hci0: command 0x0406 tx timeout [ 330.739012][ T5277] gspca_vc032x: reg_r err -32 [ 330.743926][ T5277] vc032x 5-1:0.0: probe with driver vc032x failed with error -32 [ 330.819750][ T29] team0 (unregistering): Port device team_slave_1 removed [ 330.980122][ T29] team0 (unregistering): Port device team_slave_0 removed [ 332.092201][ T5277] usb 5-1: USB disconnect, device number 7 [ 332.106413][ T7696] bridge0: port 1(bridge_slave_0) entered blocking state [ 332.139535][ T7696] bridge0: port 1(bridge_slave_0) entered disabled state [ 332.147101][ T7696] bridge_slave_0: entered allmulticast mode [ 332.201936][ T7696] bridge_slave_0: entered promiscuous mode [ 332.383880][ T7696] bridge0: port 2(bridge_slave_1) entered blocking state [ 332.409643][ T7696] bridge0: port 2(bridge_slave_1) entered disabled state [ 332.417229][ T7696] bridge_slave_1: entered allmulticast mode [ 332.480864][ T7696] bridge_slave_1: entered promiscuous mode [ 332.591566][ T7796] netlink: 40 bytes leftover after parsing attributes in process `syz.4.641'. [ 332.653838][ T7696] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 332.816825][ T7696] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 332.941802][ T7807] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 332.951247][ T7807] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 332.961238][ T7807] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 332.987879][ T7807] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 333.021203][ T7807] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 333.035710][ T7798] loop3: detected capacity change from 0 to 32768 [ 333.059319][ T7700] bridge0: port 1(bridge_slave_0) entered blocking state [ 333.061204][ T7807] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 333.069634][ T7798] XFS: ikeep mount option is deprecated. [ 333.083250][ T7807] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 333.089625][ T7700] bridge0: port 1(bridge_slave_0) entered disabled state [ 333.104788][ T7807] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 333.111243][ T7807] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 333.121237][ T7807] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 333.148943][ T7700] bridge_slave_0: entered allmulticast mode [ 333.165060][ T7807] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 333.171223][ T7807] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 333.186620][ T7798] XFS (loop3): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 333.212890][ T7807] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 333.221271][ T7807] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 333.222393][ T7700] bridge_slave_0: entered promiscuous mode [ 333.246773][ T7807] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 333.251265][ T7807] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 333.310594][ T7807] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 333.390161][ T7807] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 333.428440][ T7798] XFS (loop3): Ending clean mount [ 333.441213][ T7807] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 333.444572][ T7696] team0: Port device team_slave_0 added [ 333.451488][ T7807] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 333.474603][ T7807] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 333.483187][ T7696] team0: Port device team_slave_1 added [ 333.491204][ T7807] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 333.509645][ T7807] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 333.521878][ T7798] XFS (loop3): Quotacheck needed: Please wait. [ 333.541314][ T7807] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 333.551274][ T7807] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 333.571213][ T7807] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 333.604328][ T7807] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 333.617220][ T7798] XFS (loop3): Quotacheck: Done. [ 333.661323][ T7807] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 333.671200][ T7807] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 333.674527][ T7700] bridge0: port 2(bridge_slave_1) entered blocking state [ 333.691204][ T7807] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 333.701259][ T7807] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 333.742031][ T7807] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 333.761631][ T7700] bridge0: port 2(bridge_slave_1) entered disabled state [ 333.801219][ T7700] bridge_slave_1: entered allmulticast mode [ 333.808589][ T7700] bridge_slave_1: entered promiscuous mode [ 333.831221][ T7807] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 334.001934][ T5231] XFS (loop3): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 335.002110][ T7696] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 335.016737][ T7696] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 335.057701][ T7696] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 335.078789][ T7696] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 335.119541][ T7696] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 335.207730][ T7696] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 335.373815][ T7700] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 335.543361][ T7696] hsr_slave_0: entered promiscuous mode [ 335.570372][ T7696] hsr_slave_1: entered promiscuous mode [ 335.669581][ T7696] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 335.687444][ T7696] Cannot create hsr debugfs directory [ 336.544383][ T7829] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 336.573122][ T7700] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 336.620873][ T7831] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 336.785748][ T7700] team0: Port device team_slave_0 added [ 337.050343][ T7700] team0: Port device team_slave_1 added [ 338.083979][ T7700] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 338.109495][ T7700] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 338.166456][ T7700] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 338.191117][ T7700] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 338.198505][ T7700] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 338.270047][ T7700] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 338.308492][ T7847] netlink: 40 bytes leftover after parsing attributes in process `syz.3.654'. [ 338.504902][ T7700] hsr_slave_0: entered promiscuous mode [ 338.545646][ T7700] hsr_slave_1: entered promiscuous mode [ 338.554202][ T7700] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 338.569594][ T7700] Cannot create hsr debugfs directory [ 338.738264][ T7696] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 339.925836][ T7696] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 340.350371][ T7696] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 340.564629][ T7696] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 341.852375][ T7696] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 341.972438][ T7696] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 341.992900][ T7874] kvm: kvm [7873]: vcpu0, guest rIP: 0x191 Unhandled WRMSR(0xc2) = 0x1ae [ 342.011429][ T7874] kvm: kvm [7873]: vcpu0, guest rIP: 0x191 Unhandled WRMSR(0xc2) = 0x1c7 [ 342.017952][ T7696] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 342.045885][ T7874] kvm: kvm [7873]: vcpu0, guest rIP: 0x191 Unhandled WRMSR(0xc2) = 0x21a [ 342.065234][ T7874] kvm: kvm [7873]: vcpu0, guest rIP: 0x191 Unhandled WRMSR(0xc2) = 0x222 [ 342.120553][ T7874] kvm: kvm [7873]: vcpu0, guest rIP: 0x191 Unhandled WRMSR(0xc2) = 0x231 [ 342.129196][ T7874] kvm: kvm [7873]: vcpu0, guest rIP: 0x191 Unhandled WRMSR(0xc2) = 0x232 [ 342.138525][ T7696] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 342.159186][ T7874] kvm: kvm [7873]: vcpu0, guest rIP: 0x191 Unhandled WRMSR(0xc2) = 0x265 [ 342.186408][ T7874] kvm: kvm [7873]: vcpu0, guest rIP: 0x191 Unhandled WRMSR(0xc2) = 0x29a [ 342.258402][ T7874] kvm: kvm [7873]: vcpu0, guest rIP: 0x191 Unhandled WRMSR(0xc2) = 0x44a [ 342.318588][ T7874] kvm: kvm [7873]: vcpu0, guest rIP: 0x191 Unhandled WRMSR(0xc2) = 0x5ba [ 342.709615][ T7700] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 342.780658][ T7700] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 343.403898][ T7696] 8021q: adding VLAN 0 to HW filter on device bond0 [ 343.505353][ T7700] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 343.751095][ T7700] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 343.803818][ T7696] 8021q: adding VLAN 0 to HW filter on device team0 [ 343.898693][ T7889] process 'syz.4.664' launched '/dev/fd/8' with NULL argv: empty string added [ 344.038522][ T7887] netlink: 8 bytes leftover after parsing attributes in process `syz.2.666'. [ 344.664804][ T5828] bridge0: port 1(bridge_slave_0) entered blocking state [ 344.672056][ T5828] bridge0: port 1(bridge_slave_0) entered forwarding state [ 344.749008][ T5828] bridge0: port 2(bridge_slave_1) entered blocking state [ 344.756251][ T5828] bridge0: port 2(bridge_slave_1) entered forwarding state [ 344.828967][ T7696] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 345.939312][ T7700] 8021q: adding VLAN 0 to HW filter on device bond0 [ 346.059011][ T7700] 8021q: adding VLAN 0 to HW filter on device team0 [ 346.138643][ T7249] bridge0: port 1(bridge_slave_0) entered blocking state [ 346.145897][ T7249] bridge0: port 1(bridge_slave_0) entered forwarding state [ 347.044116][ T5828] bridge0: port 2(bridge_slave_1) entered blocking state [ 347.051344][ T5828] bridge0: port 2(bridge_slave_1) entered forwarding state [ 347.387804][ T7696] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 348.070796][ T7700] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 348.331682][ T7696] veth0_vlan: entered promiscuous mode [ 348.362640][ T7927] loop3: detected capacity change from 0 to 128 [ 348.395175][ T7696] veth1_vlan: entered promiscuous mode [ 348.414117][ T7927] befs: (loop3): No write support. Marking filesystem read-only [ 348.441571][ T7927] befs: (loop3): invalid magic header [ 348.503624][ T7696] veth0_macvtap: entered promiscuous mode [ 348.525000][ T7696] veth1_macvtap: entered promiscuous mode [ 348.609659][ T7696] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 348.648794][ T7696] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 348.674647][ T7933] loop3: detected capacity change from 0 to 256 [ 348.682237][ T7933] exfat: Unknown parameter '' [ 348.698876][ T7696] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 348.719588][ T7696] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 348.750720][ T7696] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 348.762257][ T7928] kvm_pr_unimpl_wrmsr: 8 callbacks suppressed [ 348.762281][ T7928] kvm: kvm [7925]: vcpu0, guest rIP: 0x191 Unhandled WRMSR(0xc2) = 0x1ae [ 348.777204][ T7696] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 348.791197][ T7928] kvm: kvm [7925]: vcpu0, guest rIP: 0x191 Unhandled WRMSR(0xc2) = 0x1c7 [ 348.807801][ T7696] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 348.824125][ T7696] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 348.836461][ T7928] kvm: kvm [7925]: vcpu0, guest rIP: 0x191 Unhandled WRMSR(0xc2) = 0x21a [ 348.848577][ T7696] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 348.873275][ T7928] kvm: kvm [7925]: vcpu0, guest rIP: 0x191 Unhandled WRMSR(0xc2) = 0x222 [ 348.883836][ T7696] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 348.899339][ T7928] kvm: kvm [7925]: vcpu0, guest rIP: 0x191 Unhandled WRMSR(0xc2) = 0x231 [ 348.933750][ T7696] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 348.945570][ T7928] kvm: kvm [7925]: vcpu0, guest rIP: 0x191 Unhandled WRMSR(0xc2) = 0x232 [ 348.975787][ T7696] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 348.992510][ T7928] kvm: kvm [7925]: vcpu0, guest rIP: 0x191 Unhandled WRMSR(0xc2) = 0x265 [ 349.010907][ T7696] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 349.029828][ T7928] kvm: kvm [7925]: vcpu0, guest rIP: 0x191 Unhandled WRMSR(0xc2) = 0x29a [ 349.040810][ T7696] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 349.082283][ T7696] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 349.105254][ T7696] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 349.120257][ T7928] kvm: kvm [7925]: vcpu0, guest rIP: 0x191 Unhandled WRMSR(0xc2) = 0x44a [ 349.136140][ T7696] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 349.179526][ T7696] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 349.206285][ T7696] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 349.226651][ T7696] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 349.257751][ T7696] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 349.290829][ T7696] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 349.344269][ T7696] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 349.398661][ T7696] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 349.429475][ T7696] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 349.438256][ T7696] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 349.517076][ T7700] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 349.763857][ T7700] veth0_vlan: entered promiscuous mode [ 349.796153][ T7700] veth1_vlan: entered promiscuous mode [ 350.770288][ T2978] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 350.778182][ T2978] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 350.788556][ T7700] veth0_macvtap: entered promiscuous mode [ 350.812575][ T7942] netlink: 8 bytes leftover after parsing attributes in process `syz.3.678'. [ 350.873390][ T7700] veth1_macvtap: entered promiscuous mode [ 350.913789][ T2978] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 350.925014][ T7700] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 350.953704][ T2978] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 350.967084][ T7700] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 350.982740][ T7700] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 351.001052][ T7700] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 351.017660][ T7700] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 351.037110][ T7700] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 351.070443][ T7700] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 351.106258][ T7700] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 351.126800][ T7700] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 351.146346][ T7700] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 351.158251][ T7700] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 351.169178][ T7700] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 351.193018][ T7700] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 351.228521][ T7700] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 351.269469][ T7700] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 351.287751][ T7700] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 351.318841][ T7700] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 351.338239][ T7700] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 351.369280][ T7700] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 351.398515][ T7700] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 351.411682][ T7700] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 351.429438][ T7700] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 351.448002][ T7700] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 351.457963][ T7700] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 351.481556][ T7700] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 351.503410][ T7700] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 351.557708][ T7700] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 351.579731][ T7700] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 351.590392][ T7700] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 351.611469][ T7957] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 351.628263][ T7700] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 351.679579][ T7957] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 352.989984][ T5643] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 353.017857][ T5643] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 353.023389][ T7966] loop4: detected capacity change from 0 to 128 [ 353.041898][ T7966] befs: (loop4): No write support. Marking filesystem read-only [ 353.089289][ T7966] befs: (loop4): invalid magic header [ 353.134107][ T5643] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 353.162531][ T5643] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 353.229595][ T5275] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 353.300449][ T7967] loop4: detected capacity change from 0 to 256 [ 353.309083][ T7967] exfat: Unknown parameter '' [ 353.453703][ T5275] usb 1-1: New USB device found, idVendor=093a, idProduct=2601, bcdDevice= 8.8f [ 353.488651][ T5275] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 353.537150][ T5275] usb 1-1: config 0 descriptor?? [ 353.983938][ T5275] usb 1-1: string descriptor 0 read error: -71 [ 354.041465][ T5275] gspca_main: pac7311-2.14.0 probing 093a:2601 [ 354.060828][ T5275] gspca_pac7311: reg_w() failed index 0xff, value 0x01, error -71 [ 354.068875][ T5275] pac7311 1-1:0.0: probe with driver pac7311 failed with error -71 [ 354.097331][ T5275] usb 1-1: USB disconnect, device number 14 [ 354.262806][ T7980] netlink: 8 bytes leftover after parsing attributes in process `syz.4.689'. [ 355.195576][ T80] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 355.824526][ T80] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 356.080883][ T80] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 356.982133][ T80] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 357.566794][ T80] bridge_slave_1: left allmulticast mode [ 357.604479][ T80] bridge_slave_1: left promiscuous mode [ 357.765336][ T80] bridge0: port 2(bridge_slave_1) entered disabled state [ 358.221212][ T80] bridge_slave_0: left allmulticast mode [ 358.261734][ T80] bridge_slave_0: left promiscuous mode [ 358.314776][ T80] bridge0: port 1(bridge_slave_0) entered disabled state [ 358.410027][ T4618] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 358.419488][ T4618] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 358.449184][ T4618] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 358.479775][ T4618] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 358.489126][ T4618] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 358.497366][ T4618] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 360.631107][ T4618] Bluetooth: hci6: command tx timeout [ 361.529891][ T80] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 361.560401][ T80] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 361.603968][ T80] bond0 (unregistering): Released all slaves [ 361.629714][ T5275] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 361.643148][ T8014] netlink: 8 bytes leftover after parsing attributes in process `syz.3.701'. [ 362.235493][ T5275] usb 3-1: New USB device found, idVendor=093a, idProduct=2601, bcdDevice= 8.8f [ 362.265145][ T5275] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 362.605535][ T5275] usb 3-1: config 0 descriptor?? [ 362.679732][ T4618] Bluetooth: hci6: command tx timeout [ 363.209885][ T5275] usb 3-1: string descriptor 0 read error: -71 [ 363.239054][ T5275] gspca_main: pac7311-2.14.0 probing 093a:2601 [ 363.267452][ T5275] gspca_pac7311: reg_w() failed index 0xff, value 0x01, error -71 [ 363.279609][ T5275] pac7311 3-1:0.0: probe with driver pac7311 failed with error -71 [ 363.322726][ T5275] usb 3-1: USB disconnect, device number 10 [ 363.476841][ T80] hsr_slave_0: left promiscuous mode [ 363.484390][ T80] hsr_slave_1: left promiscuous mode [ 363.506447][ T80] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 363.516077][ T80] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 363.529829][ T80] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 363.537559][ T80] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 363.562310][ T80] veth1_macvtap: left promiscuous mode [ 363.568054][ T80] veth0_macvtap: left promiscuous mode [ 363.573975][ T80] veth1_vlan: left promiscuous mode [ 363.579570][ T80] veth0_vlan: left promiscuous mode [ 364.754011][ T4618] Bluetooth: hci6: command tx timeout [ 366.171642][ T80] team0 (unregistering): Port device team_slave_1 removed [ 366.451657][ T80] team0 (unregistering): Port device team_slave_0 removed [ 366.829524][ T4618] Bluetooth: hci6: command tx timeout [ 367.618082][ T8085] netlink: 24 bytes leftover after parsing attributes in process `syz.0.720'. [ 368.299338][ T8091] loop3: detected capacity change from 0 to 32768 [ 369.028230][ T8085] tipc: Started in network mode [ 369.050700][ T8085] tipc: Node identity 3e238def15a5, cluster identity 4711 [ 369.089601][ T8085] tipc: Enabled bearer , priority 10 [ 369.279010][ T8007] chnl_net:caif_netlink_parms(): no params data found [ 369.470263][ T8007] bridge0: port 1(bridge_slave_0) entered blocking state [ 369.478291][ T8007] bridge0: port 1(bridge_slave_0) entered disabled state [ 369.485877][ T8007] bridge_slave_0: entered allmulticast mode [ 369.496016][ T8007] bridge_slave_0: entered promiscuous mode [ 369.527564][ T8007] bridge0: port 2(bridge_slave_1) entered blocking state [ 369.540851][ T8007] bridge0: port 2(bridge_slave_1) entered disabled state [ 369.583700][ T8007] bridge_slave_1: entered allmulticast mode [ 369.610965][ T8007] bridge_slave_1: entered promiscuous mode [ 369.942053][ T8007] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 370.005876][ T8007] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 370.081399][ T5274] tipc: Node number set to 730238447 [ 370.440465][ T8118] netlink: 24 bytes leftover after parsing attributes in process `syz.4.727'. [ 371.016097][ T8007] team0: Port device team_slave_0 added [ 371.102297][ T8007] team0: Port device team_slave_1 added [ 371.435377][ T8132] netlink: 24 bytes leftover after parsing attributes in process `syz.3.733'. [ 372.111094][ T8007] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 372.149893][ T8007] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 372.211165][ T8007] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 372.231886][ T8007] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 372.249292][ T8007] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 372.350363][ T8007] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 372.519948][ T8143] syzkaller0: entered promiscuous mode [ 372.525517][ T8143] syzkaller0: entered allmulticast mode [ 372.536264][ T8140] loop3: detected capacity change from 0 to 8192 [ 372.549951][ T8138] PF_CAN: dropped non conform CAN FD skbuff: dev type 65534, len 65487 [ 372.605752][ T8007] hsr_slave_0: entered promiscuous mode [ 372.662826][ T8147] loop3: p2 p3 p4 [ 372.666827][ T8147] loop3: p2 start 452985600 is beyond EOD, truncated [ 372.674365][ T8007] hsr_slave_1: entered promiscuous mode [ 372.699496][ T8147] loop3: p3 start 4177527808 is beyond EOD, truncated [ 372.729046][ T8007] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 372.766723][ T8007] Cannot create hsr debugfs directory [ 372.773508][ T8147] loop3: p4 size 3599499392 extends beyond EOD, truncated [ 372.866867][ T8140] loop3: p2 p3 p4 [ 372.871110][ T8140] loop3: p2 start 452985600 is beyond EOD, truncated [ 372.877860][ T8140] loop3: p3 start 4177527808 is beyond EOD, truncated [ 372.889567][ T8140] loop3: p4 size 3599499392 extends beyond EOD, truncated [ 373.609518][ T5361] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 373.833733][ T5361] usb 3-1: Using ep0 maxpacket: 32 [ 373.900709][ T5361] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 139, changing to 11 [ 373.990528][ T5361] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 374.034863][ T5361] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 374.081532][ T5361] usb 3-1: config 0 descriptor?? [ 374.130818][ T5361] hub 3-1:0.0: USB hub found [ 374.345265][ T8170] loop3: detected capacity change from 0 to 128 [ 374.389595][ T5361] hub 3-1:0.0: 2 ports detected [ 375.845557][ T8007] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 375.954347][ T8007] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 376.032779][ T8007] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 376.083359][ T8007] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 377.408808][ T5306] hub 3-1:0.0: hub_ext_port_status failed (err = -32) [ 377.438655][ T8007] 8021q: adding VLAN 0 to HW filter on device bond0 [ 377.657768][ T8007] 8021q: adding VLAN 0 to HW filter on device team0 [ 377.670057][ T5275] usb 3-1: USB disconnect, device number 11 [ 377.716876][ T2978] bridge0: port 1(bridge_slave_0) entered blocking state [ 377.724105][ T2978] bridge0: port 1(bridge_slave_0) entered forwarding state [ 377.767941][ T5643] bridge0: port 2(bridge_slave_1) entered blocking state [ 377.775163][ T5643] bridge0: port 2(bridge_slave_1) entered forwarding state [ 378.761298][ T1270] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.767750][ T1270] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.803042][ T8007] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 380.286891][ T8214] xt_CT: You must specify a L4 protocol and not use inversions on it [ 380.373912][ T8007] veth0_vlan: entered promiscuous mode [ 380.433479][ T8007] veth1_vlan: entered promiscuous mode [ 380.627604][ T8007] veth0_macvtap: entered promiscuous mode [ 380.646024][ T8007] veth1_macvtap: entered promiscuous mode [ 380.662896][ T8007] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 380.764270][ T8007] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 381.563446][ T8007] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 381.633894][ T8007] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 381.657776][ T8007] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 381.691580][ T8007] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 381.730828][ T8007] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 381.753191][ T8007] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 381.766818][ T8007] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 381.786460][ T8007] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 381.799911][ T8007] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 381.817090][ T8007] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 381.844279][ T8007] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 381.926729][ T8007] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 381.958102][ T8007] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 382.009500][ T8007] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 382.087586][ T8007] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 382.114360][ T8007] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 382.120974][ T8204] syz.3.757 (8204): drop_caches: 2 [ 382.142649][ T8007] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 382.177663][ T8007] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 382.205944][ T8007] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 382.236795][ T8007] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 382.275317][ T8007] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 382.329791][ T8007] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 382.365318][ T8007] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 382.402415][ T8007] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 382.438625][ T8007] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 382.475671][ T8007] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 382.504524][ T8007] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 382.527943][ T8007] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 382.922364][ T4218] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 382.952364][ T4218] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 383.011106][ T4218] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 383.050269][ T4218] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 384.182826][ T8255] loop4: detected capacity change from 0 to 128 [ 384.516719][ T5278] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 386.817384][ T5278] usb 4-1: device not accepting address 13, error -71 [ 386.993807][ T4218] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 387.881865][ T8274] loop3: detected capacity change from 0 to 32768 [ 387.898956][ T8274] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.779 (8274) [ 387.932093][ T8274] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 387.942925][ T8274] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 387.953206][ T8274] BTRFS info (device loop3): using free-space-tree [ 388.131026][ T11] BTRFS warning (device loop3): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0x68892996 level 0 [ 388.178910][ T8274] BTRFS error (device loop3): failed to load root extent [ 388.191151][ T4218] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 388.252486][ T8274] BTRFS error (device loop3): open_ctree failed [ 388.293139][ T5227] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 388.379918][ T5227] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 388.402049][ T5227] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 388.550975][ T5227] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 388.561850][ T5227] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 388.569299][ T5227] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 389.655533][ T4218] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 390.232452][ T4218] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 390.671415][ T4618] Bluetooth: hci6: command tx timeout [ 391.624334][ T4218] bridge_slave_1: left allmulticast mode [ 391.632880][ T4218] bridge_slave_1: left promiscuous mode [ 391.638716][ T4218] bridge0: port 2(bridge_slave_1) entered disabled state [ 391.732275][ T4218] bridge_slave_0: left allmulticast mode [ 391.738000][ T4218] bridge_slave_0: left promiscuous mode [ 391.779729][ T4218] bridge0: port 1(bridge_slave_0) entered disabled state [ 392.779293][ T4618] Bluetooth: hci6: command tx timeout [ 394.829549][ T4618] Bluetooth: hci6: command tx timeout [ 395.398089][ T8345] loop4: detected capacity change from 0 to 32768 [ 395.417129][ T8345] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.796 (8345) [ 395.433190][ T8345] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 395.443635][ T8345] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 395.452634][ T8345] BTRFS info (device loop4): using free-space-tree [ 395.719595][ T11] BTRFS warning (device loop4): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0x68892996 level 0 [ 395.769555][ T8345] BTRFS error (device loop4): failed to load root extent [ 395.790760][ T8345] BTRFS error (device loop4): open_ctree failed [ 395.994147][ T4218] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 396.027116][ T4218] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 396.148617][ T4218] bond0 (unregistering): Released all slaves [ 396.188063][ T8330] netlink: 24 bytes leftover after parsing attributes in process `syz.2.790'. [ 396.288193][ T8333] netlink: 8 bytes leftover after parsing attributes in process `syz.0.793'. [ 396.723695][ T8292] chnl_net:caif_netlink_parms(): no params data found [ 396.784190][ T8366] loop3: detected capacity change from 0 to 4096 [ 396.949603][ T4618] Bluetooth: hci6: command tx timeout [ 398.161301][ T8292] bridge0: port 1(bridge_slave_0) entered blocking state [ 398.171533][ T8292] bridge0: port 1(bridge_slave_0) entered disabled state [ 398.193900][ T8292] bridge_slave_0: entered allmulticast mode [ 398.217888][ T8292] bridge_slave_0: entered promiscuous mode [ 398.292493][ T8292] bridge0: port 2(bridge_slave_1) entered blocking state [ 398.326530][ T8292] bridge0: port 2(bridge_slave_1) entered disabled state [ 398.359751][ T8292] bridge_slave_1: entered allmulticast mode [ 398.429838][ T8292] bridge_slave_1: entered promiscuous mode [ 398.966877][ T4218] hsr_slave_0: left promiscuous mode [ 399.269747][ T4218] hsr_slave_1: left promiscuous mode [ 399.369593][ T4218] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 399.399583][ T4218] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 399.445338][ T4218] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 399.463263][ T4218] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 399.551894][ T4218] veth1_macvtap: left promiscuous mode [ 399.557508][ T4218] veth0_macvtap: left promiscuous mode [ 399.569553][ T4218] veth1_vlan: left promiscuous mode [ 399.574954][ T4218] veth0_vlan: left promiscuous mode [ 404.572734][ T4218] team0 (unregistering): Port device team_slave_1 removed [ 405.679624][ T4218] team0 (unregistering): Port device team_slave_0 removed [ 407.059229][ T8292] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 407.247911][ T8292] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 407.444461][ T8432] loop3: detected capacity change from 0 to 256 [ 407.446182][ T8292] team0: Port device team_slave_0 added [ 407.491444][ T8292] team0: Port device team_slave_1 added [ 407.941757][ T5274] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 409.519683][ T5274] usb 5-1: Using ep0 maxpacket: 8 [ 409.560953][ T5274] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 409.770145][ T8292] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 409.777199][ T8292] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 409.834099][ T5274] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 409.845617][ T5274] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 409.868255][ T5274] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 409.881438][ T8292] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 409.892494][ T5274] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 409.911594][ T8292] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 409.918922][ T5274] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 409.927821][ T8292] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 410.134753][ T8292] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 410.236997][ T5274] usb 5-1: usb_control_msg returned -32 [ 410.895048][ T8292] hsr_slave_0: entered promiscuous mode [ 410.959735][ T8292] hsr_slave_1: entered promiscuous mode [ 410.979249][ T8292] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 411.010165][ T8292] Cannot create hsr debugfs directory [ 411.031935][ T5274] usbtmc 5-1:16.0: can't read capabilities [ 411.692581][ T8263] usb 5-1: USB disconnect, device number 8 [ 411.941175][ T8459] Bluetooth: MGMT ver 1.23 [ 412.004664][ T8292] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 412.102340][ T8292] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 412.273077][ T8459] loop4: detected capacity change from 0 to 64 [ 412.307549][ T8459] minix: Unknown parameter '/dev/cpu/#/msr' [ 412.323582][ T8292] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 412.471071][ T8292] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 413.160348][ T8292] 8021q: adding VLAN 0 to HW filter on device bond0 [ 413.245095][ T8292] 8021q: adding VLAN 0 to HW filter on device team0 [ 413.291842][ T6265] bridge0: port 1(bridge_slave_0) entered blocking state [ 413.299009][ T6265] bridge0: port 1(bridge_slave_0) entered forwarding state [ 413.389051][ T2978] bridge0: port 2(bridge_slave_1) entered blocking state [ 413.396347][ T2978] bridge0: port 2(bridge_slave_1) entered forwarding state [ 415.133011][ T8292] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 415.223017][ T8292] veth0_vlan: entered promiscuous mode [ 415.262335][ T8292] veth1_vlan: entered promiscuous mode [ 415.374772][ T8292] veth0_macvtap: entered promiscuous mode [ 415.442108][ T8292] veth1_macvtap: entered promiscuous mode [ 415.536098][ T8487] loop4: detected capacity change from 0 to 16 [ 415.556873][ T8292] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 415.579281][ T8487] erofs: (device loop4): mounted with root inode @ nid 36. [ 415.586766][ T8292] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 415.600106][ T8292] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 415.819581][ T8292] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 416.001949][ T8490] syz.4.835: attempt to access beyond end of device [ 416.001949][ T8490] loop4: rw=0, sector=14552337256, nr_sectors = 8 limit=16 [ 416.016377][ T8490] syz.4.835: attempt to access beyond end of device [ 416.016377][ T8490] loop4: rw=0, sector=14546590680, nr_sectors = 8 limit=16 [ 416.619325][ T8292] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 416.688122][ T8292] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 416.748452][ T8292] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 416.780331][ T8292] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 416.817479][ T8292] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 416.849845][ T8292] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 416.879537][ T8292] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 416.915058][ T8292] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 416.960471][ T8292] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 417.066933][ T8292] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 417.171346][ T8292] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 417.199096][ T8292] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 417.244270][ T8292] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 417.283408][ T8292] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 417.325983][ T8292] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 417.404504][ T8292] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 417.443129][ T8292] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 417.505446][ T8292] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 417.589695][ T8292] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 417.624503][ T8292] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 417.664270][ T8292] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 417.702735][ T8292] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 417.798829][ T8292] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 417.852186][ T8292] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 417.879745][ T8292] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 417.901298][ T8292] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 418.096321][ T4218] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 418.120665][ T4218] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 418.183716][ T4218] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 418.239827][ T4218] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 418.256457][ T8492] loop4: detected capacity change from 0 to 32768 [ 418.349009][ T8492] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 418.811755][ T8492] XFS (loop4): Ending clean mount [ 419.172274][ T8512] loop3: detected capacity change from 0 to 32768 [ 419.182993][ T8512] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.841 (8512) [ 419.210184][ T8512] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 419.220451][ T8512] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 419.229809][ T8512] BTRFS info (device loop3): using free-space-tree [ 419.285582][ T6535] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 419.449101][ T29] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 419.494185][ T11] BTRFS warning (device loop3): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0x68892996 level 0 [ 419.570677][ T8512] BTRFS error (device loop3): failed to load root extent [ 419.619590][ T8512] BTRFS error (device loop3): open_ctree failed [ 420.526836][ T29] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 421.188602][ T29] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 421.795958][ T5227] Bluetooth: hci5: command 0x0406 tx timeout [ 421.881194][ T29] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 423.326314][ T8544] loop4: detected capacity change from 0 to 4096 [ 423.413706][ T5227] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 423.429864][ T5227] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 423.438804][ T5227] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 423.454992][ T5227] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 423.470542][ T5227] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 423.477980][ T5227] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 423.609269][ T29] bridge_slave_1: left allmulticast mode [ 423.631546][ T29] bridge_slave_1: left promiscuous mode [ 423.640262][ T29] bridge0: port 2(bridge_slave_1) entered disabled state [ 423.741800][ T29] bridge_slave_0: left allmulticast mode [ 423.747529][ T29] bridge_slave_0: left promiscuous mode [ 423.769554][ T29] bridge0: port 1(bridge_slave_0) entered disabled state [ 423.950544][ T4618] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 423.961001][ T4618] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 423.999457][ T4618] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 424.007565][ T4618] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 424.018649][ T4618] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 424.026134][ T4618] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 424.084679][ T8564] loop4: detected capacity change from 0 to 16 [ 424.093756][ T8564] erofs: (device loop4): mounted with root inode @ nid 36. [ 424.604133][ T8570] syz.4.853: attempt to access beyond end of device [ 424.604133][ T8570] loop4: rw=0, sector=14552337256, nr_sectors = 8 limit=16 [ 424.729864][ T8570] syz.4.853: attempt to access beyond end of device [ 424.729864][ T8570] loop4: rw=0, sector=14546590680, nr_sectors = 8 limit=16 [ 425.363318][ T8572] overlayfs: failed to resolve './file0': -2 [ 425.550476][ T5227] Bluetooth: hci6: command tx timeout [ 425.588903][ T29] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 425.734848][ T29] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 425.803722][ T29] bond0 (unregistering): Released all slaves [ 426.109899][ T5227] Bluetooth: hci7: command tx timeout [ 427.009504][ T29] hsr_slave_0: left promiscuous mode [ 427.017189][ T29] hsr_slave_1: left promiscuous mode [ 427.037754][ T29] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 427.049624][ T29] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 427.103075][ T29] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 427.121531][ T29] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 427.196886][ T29] veth1_macvtap: left promiscuous mode [ 427.214821][ T29] veth0_macvtap: left promiscuous mode [ 427.234299][ T29] veth1_vlan: left promiscuous mode [ 427.257681][ T29] veth0_vlan: left promiscuous mode [ 427.543472][ T8576] loop3: detected capacity change from 0 to 32768 [ 427.601125][ T8576] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 427.631258][ T5227] Bluetooth: hci6: command tx timeout [ 428.083058][ T8576] XFS (loop3): Ending clean mount [ 428.233880][ T5227] Bluetooth: hci7: command tx timeout [ 428.966014][ T5231] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 429.402087][ T29] team0 (unregistering): Port device team_slave_1 removed [ 429.588446][ T29] team0 (unregistering): Port device team_slave_0 removed [ 429.669539][ T30] kauditd_printk_skb: 10 callbacks suppressed [ 429.669564][ T30] audit: type=1326 audit(1723477679.328:139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8591 comm="syz.0.859" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4872b779f9 code=0x7fc00000 [ 429.749565][ T5227] Bluetooth: hci6: command tx timeout [ 429.790777][ T30] audit: type=1326 audit(1723477679.338:140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8591 comm="syz.0.859" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f4872b779f9 code=0x7fc00000 [ 430.270054][ T5227] Bluetooth: hci7: command tx timeout [ 430.292581][ T30] audit: type=1326 audit(1723477679.988:141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8591 comm="syz.0.859" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4872b779f9 code=0x7fc00000 [ 430.655388][ T30] audit: type=1326 audit(1723477679.988:142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8591 comm="syz.0.859" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f4872b779f9 code=0x7fc00000 [ 430.678636][ T30] audit: type=1326 audit(1723477680.028:143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8591 comm="syz.0.859" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4872b779f9 code=0x7fc00000 [ 430.701004][ T30] audit: type=1326 audit(1723477680.028:144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8591 comm="syz.0.859" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4872b779f9 code=0x7fc00000 [ 430.724367][ T30] audit: type=1326 audit(1723477680.028:145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8591 comm="syz.0.859" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4872b779f9 code=0x7fc00000 [ 430.746739][ T30] audit: type=1326 audit(1723477680.028:146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8591 comm="syz.0.859" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4872b779f9 code=0x7fc00000 [ 430.770938][ T30] audit: type=1326 audit(1723477680.028:147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8591 comm="syz.0.859" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4872b779f9 code=0x7fc00000 [ 430.793630][ T30] audit: type=1326 audit(1723477680.028:148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8591 comm="syz.0.859" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4872b779f9 code=0x7fc00000 [ 431.791131][ T5227] Bluetooth: hci6: command tx timeout [ 432.356447][ T5227] Bluetooth: hci7: command tx timeout [ 432.799843][ T8609] netlink: 4 bytes leftover after parsing attributes in process `syz.0.863'. [ 432.808952][ T8609] netlink: 20 bytes leftover after parsing attributes in process `syz.0.863'. [ 434.063249][ T8560] chnl_net:caif_netlink_parms(): no params data found [ 434.660231][ T8552] chnl_net:caif_netlink_parms(): no params data found [ 435.460353][ T8560] bridge0: port 1(bridge_slave_0) entered blocking state [ 435.502831][ T8560] bridge0: port 1(bridge_slave_0) entered disabled state [ 435.533034][ T8560] bridge_slave_0: entered allmulticast mode [ 435.568954][ T8560] bridge_slave_0: entered promiscuous mode [ 436.294437][ T8560] bridge0: port 2(bridge_slave_1) entered blocking state [ 436.507100][ T8560] bridge0: port 2(bridge_slave_1) entered disabled state [ 436.539838][ T8560] bridge_slave_1: entered allmulticast mode [ 436.570712][ T8560] bridge_slave_1: entered promiscuous mode [ 436.655724][ T8649] netlink: 8 bytes leftover after parsing attributes in process `syz.4.873'. [ 436.917187][ T8656] overlayfs: failed to resolve './file0': -2 [ 437.647721][ T8560] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 437.673669][ T8560] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 437.683520][ T8655] netlink: 4 bytes leftover after parsing attributes in process `syz.4.875'. [ 437.693845][ T8655] netlink: 20 bytes leftover after parsing attributes in process `syz.4.875'. [ 439.051693][ T8552] bridge0: port 1(bridge_slave_0) entered blocking state [ 439.079702][ T8552] bridge0: port 1(bridge_slave_0) entered disabled state [ 439.097804][ T8552] bridge_slave_0: entered allmulticast mode [ 439.129766][ T8552] bridge_slave_0: entered promiscuous mode [ 439.167516][ T8552] bridge0: port 2(bridge_slave_1) entered blocking state [ 439.193135][ T8552] bridge0: port 2(bridge_slave_1) entered disabled state [ 439.216031][ T8552] bridge_slave_1: entered allmulticast mode [ 439.240891][ T8552] bridge_slave_1: entered promiscuous mode [ 439.268274][ T8560] team0: Port device team_slave_0 added [ 439.312734][ T8560] team0: Port device team_slave_1 added [ 440.193024][ T1270] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.372075][ T8560] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 440.379089][ T8560] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 440.469538][ T8560] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 440.612088][ T8552] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 440.839964][ T29] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 440.882628][ T8560] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 440.905452][ T8560] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 440.989595][ T8560] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 441.106684][ T8552] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 441.179737][ T8682] netlink: 8 bytes leftover after parsing attributes in process `syz.3.884'. [ 441.419208][ T29] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 441.674465][ T30] kauditd_printk_skb: 61 callbacks suppressed [ 441.674488][ T30] audit: type=1326 audit(1723477691.378:210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8686 comm="syz.4.885" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c395779f9 code=0x7fc00000 [ 441.735799][ T8688] loop3: detected capacity change from 0 to 32768 [ 441.745525][ T8688] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.886 (8688) [ 441.771704][ T8688] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 441.782790][ T8688] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 441.792435][ T8688] BTRFS info (device loop3): using free-space-tree [ 441.840089][ T30] audit: type=1326 audit(1723477691.418:211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8686 comm="syz.4.885" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f4c395779f9 code=0x7fc00000 [ 441.870337][ T29] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 441.936171][ T6267] BTRFS warning (device loop3): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0x68892996 level 0 [ 441.977977][ T8552] team0: Port device team_slave_0 added [ 442.005150][ T8688] BTRFS error (device loop3): failed to load root extent [ 442.027229][ T8688] BTRFS error (device loop3): open_ctree failed [ 442.243036][ T30] audit: type=1326 audit(1723477691.918:212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8686 comm="syz.4.885" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c395779f9 code=0x7fc00000 [ 442.366107][ T5227] Bluetooth: hci2: command 0x0406 tx timeout [ 442.551194][ T8560] hsr_slave_0: entered promiscuous mode [ 442.617754][ T8560] hsr_slave_1: entered promiscuous mode [ 442.659955][ T30] audit: type=1326 audit(1723477691.918:213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8686 comm="syz.4.885" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f4c395779f9 code=0x7fc00000 [ 442.811025][ T8560] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 442.852713][ T8560] Cannot create hsr debugfs directory [ 442.889606][ T30] audit: type=1326 audit(1723477691.928:214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8686 comm="syz.4.885" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c395779f9 code=0x7fc00000 [ 442.943745][ T30] audit: type=1326 audit(1723477691.928:215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8686 comm="syz.4.885" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c395779f9 code=0x7fc00000 [ 443.025920][ T30] audit: type=1326 audit(1723477691.928:216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8686 comm="syz.4.885" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c395779f9 code=0x7fc00000 [ 443.071042][ T29] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 443.109706][ T30] audit: type=1326 audit(1723477691.938:217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8686 comm="syz.4.885" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c395779f9 code=0x7fc00000 [ 443.195011][ T30] audit: type=1326 audit(1723477691.938:218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8686 comm="syz.4.885" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c395779f9 code=0x7fc00000 [ 443.311967][ T8552] team0: Port device team_slave_1 added [ 443.539792][ T8552] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 443.567628][ T8552] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 443.700360][ T8552] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 445.004363][ T8722] netlink: 24 bytes leftover after parsing attributes in process `syz.3.892'. [ 445.173981][ T8552] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 445.183094][ T8552] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 445.213672][ T8552] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 445.363049][ T29] bridge_slave_1: left allmulticast mode [ 445.376305][ T29] bridge_slave_1: left promiscuous mode [ 445.405598][ T29] bridge0: port 2(bridge_slave_1) entered disabled state [ 445.460135][ T29] bridge_slave_0: left allmulticast mode [ 445.465856][ T29] bridge_slave_0: left promiscuous mode [ 445.529774][ T29] bridge0: port 1(bridge_slave_0) entered disabled state [ 446.592327][ T31] INFO: task syz.2.558:7464 blocked for more than 143 seconds. [ 446.644990][ T31] Not tainted 6.11.0-rc3-next-20240812-syzkaller #0 [ 446.732939][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 446.759423][ T31] task:syz.2.558 state:D stack:27392 pid:7464 tgid:7461 ppid:5225 flags:0x00000004 [ 446.776476][ T31] Call Trace: [ 446.783629][ T31] [ 446.786635][ T31] __schedule+0x17ff/0x4ad0 [ 446.868014][ T31] ? __pfx___schedule+0x10/0x10 [ 446.899492][ T31] ? __pfx_lock_release+0x10/0x10 [ 446.905785][ T31] ? __mutex_trylock_common+0x92/0x2e0 [ 446.949474][ T31] ? schedule+0x90/0x320 [ 446.953821][ T31] schedule+0x14b/0x320 [ 446.958035][ T31] schedule_preempt_disabled+0x13/0x30 [ 447.006594][ T31] __mutex_lock+0x6a4/0xd70 [ 447.029489][ T31] ? __mutex_lock+0x527/0xd70 [ 447.034357][ T31] ? __fdget_pos+0x24e/0x310 [ 447.039001][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 447.089462][ T31] ? do_futex+0x33b/0x560 [ 447.093933][ T31] ? __fget_files+0x29/0x470 [ 447.098666][ T31] ? __fget_files+0x3f6/0x470 [ 447.129401][ T31] __fdget_pos+0x24e/0x310 [ 447.133920][ T31] ksys_read+0x82/0x2c0 [ 447.138118][ T31] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 447.169408][ T31] ? __pfx_ksys_read+0x10/0x10 [ 447.174258][ T31] ? do_syscall_64+0x100/0x230 [ 447.199434][ T31] ? do_syscall_64+0xb6/0x230 [ 447.204202][ T31] do_syscall_64+0xf3/0x230 [ 447.231020][ T5227] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 447.241376][ T5227] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 447.253017][ T5227] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 447.277960][ T5227] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 447.291188][ T31] ? clear_bhb_loop+0x35/0x90 [ 447.291437][ T5227] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 447.295941][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 447.295991][ T31] RIP: 0033:0x7f29127779f9 [ 447.316870][ T5227] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 447.341657][ T31] RSP: 002b:00007f29121de038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 447.359556][ T31] RAX: ffffffffffffffda RBX: 00007f2912906058 RCX: 00007f29127779f9 [ 447.386876][ T31] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 447.415052][ T31] RBP: 00007f29127e58ee R08: 0000000000000000 R09: 0000000000000000 [ 447.444301][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 447.452854][ T31] R13: 0000000000000000 R14: 00007f2912906058 R15: 00007ffda6fe0208 [ 447.461033][ T31] [ 447.464305][ T31] [ 447.464305][ T31] Showing all locks held in the system: [ 447.472943][ T31] 3 locks held by kworker/u8:0/11: [ 447.478277][ T31] 5 locks held by kworker/u8:2/29: [ 447.483562][ T31] #0: ffff8880166e5948 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 447.494615][ T31] #1: ffffc90000a57d00 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 447.506184][ T31] #2: ffffffff8fc7e3d0 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0x16a/0xcc0 [ 447.521723][ T31] #3: ffffffff8fc8ae88 (rtnl_mutex){+.+.}-{3:3}, at: cleanup_net+0x6af/0xcc0 [ 447.535999][ T31] #4: ffffffff8e93cc78 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x381/0x830 [ 447.547214][ T31] 1 lock held by khungtaskd/31: [ 447.553873][ T31] #0: ffffffff8e9376e0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x2a0 [ 447.564068][ T31] 3 locks held by kworker/u8:7/4218: [ 447.575467][ T31] #0: ffff888015889148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 447.603987][ T31] #1: ffffc9000c647d00 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 447.631927][ T31] #2: ffffffff8fc8ae88 (rtnl_mutex){+.+.}-{3:3}, at: linkwatch_event+0xe/0x60 [ 447.652766][ T31] 2 locks held by getty/4979: [ 447.661974][ T31] #0: ffff88802f8d90a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 447.696644][ T31] #1: ffffc90002f062f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6ac/0x1e00 [ 447.707031][ T31] 3 locks held by kworker/0:7/5307: [ 447.715083][ T31] #0: ffff888015880948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 447.739166][ T31] #1: ffffc9000463fd00 (deferred_process_work){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 447.759529][ T31] #2: ffffffff8fc8ae88 (rtnl_mutex){+.+.}-{3:3}, at: switchdev_deferred_process_work+0xe/0x20 [ 447.775041][ T31] 3 locks held by kworker/u8:13/6267: [ 447.784091][ T31] 2 locks held by syz.2.558/7462: [ 447.792633][ T31] 1 lock held by syz.2.558/7464: [ 447.799418][ T31] #0: ffff88802a00d9c8 (&f->f_pos_lock){+.+.}-{3:3}, at: __fdget_pos+0x24e/0x310 [ 447.814493][ T31] 3 locks held by syz.0.600/7621: [ 447.825968][ T31] 1 lock held by syz.0.600/7624: [ 447.836510][ T31] #0: ffff888025f225c8 (&f->f_pos_lock){+.+.}-{3:3}, at: __fdget_pos+0x24e/0x310 [ 447.852891][ T31] 3 locks held by kworker/1:0/8263: [ 447.861649][ T31] #0: ffff888015880948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 447.897846][ T31] #1: ffffc9000330fd00 (free_ipc_work){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 447.922004][ T31] #2: ffffffff8e93cc78 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x451/0x830 [ 447.956024][ T31] 1 lock held by syz-executor/8552: [ 447.967087][ T31] #0: ffffffff8fc8ae88 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 447.986914][ T31] 1 lock held by syz-executor/8560: [ 448.002672][ T31] #0: ffffffff8fc8ae88 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 448.024755][ T31] 3 locks held by syz.0.870/8638: [ 448.037713][ T31] #0: ffff88806a584d80 (&hdev->req_lock){+.+.}-{3:3}, at: hci_unregister_dev+0x203/0x510 [ 448.059423][ T31] #1: ffff88806a584078 (&hdev->lock){+.+.}-{3:3}, at: hci_dev_close_sync+0x572/0x11a0 [ 448.069216][ T31] #2: ffffffff8fdf6d28 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_conn_hash_flush+0xa6/0x240 [ 448.101018][ T31] 1 lock held by syz.4.896/8733: [ 448.106036][ T31] #0: ffffffff8fc8ae88 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 448.131366][ T31] 1 lock held by syz-executor/8736: [ 448.136646][ T31] #0: ffffffff8fc8ae88 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 448.169466][ T31] [ 448.171865][ T31] ============================================= [ 448.171865][ T31] [ 448.207411][ T31] NMI backtrace for cpu 0 [ 448.211829][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.11.0-rc3-next-20240812-syzkaller #0 [ 448.222036][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 448.232252][ T31] Call Trace: [ 448.235576][ T31] [ 448.238738][ T31] dump_stack_lvl+0x241/0x360 [ 448.243490][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 448.248922][ T31] ? __pfx__printk+0x10/0x10 [ 448.253571][ T31] ? vprintk_emit+0x631/0x770 [ 448.258293][ T31] ? __pfx_vprintk_emit+0x10/0x10 [ 448.263374][ T31] nmi_cpu_backtrace+0x49c/0x4d0 [ 448.268381][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 448.273904][ T31] ? _printk+0xd5/0x120 [ 448.278117][ T31] ? __pfx__printk+0x10/0x10 [ 448.282764][ T31] ? __wake_up_klogd+0xcc/0x110 [ 448.287667][ T31] ? __pfx__printk+0x10/0x10 [ 448.292325][ T31] ? __rcu_read_unlock+0xa1/0x110 [ 448.297420][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 448.303469][ T31] nmi_trigger_cpumask_backtrace+0x198/0x320 [ 448.309517][ T31] watchdog+0xff4/0x1040 [ 448.313927][ T31] ? watchdog+0x1ea/0x1040 [ 448.318414][ T31] ? __pfx_watchdog+0x10/0x10 [ 448.323137][ T31] kthread+0x2f0/0x390 [ 448.327227][ T31] ? __pfx_watchdog+0x10/0x10 [ 448.331925][ T31] ? __pfx_kthread+0x10/0x10 [ 448.336563][ T31] ret_from_fork+0x4b/0x80 [ 448.341004][ T31] ? __pfx_kthread+0x10/0x10 [ 448.345774][ T31] ret_from_fork_asm+0x1a/0x30 [ 448.350755][ T31] [ 448.354959][ T31] Sending NMI from CPU 0 to CPUs 1: [ 448.360904][ C1] NMI backtrace for cpu 1 [ 448.360920][ C1] CPU: 1 UID: 0 PID: 29 Comm: kworker/u8:2 Not tainted 6.11.0-rc3-next-20240812-syzkaller #0 [ 448.360941][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 448.360953][ C1] Workqueue: netns cleanup_net [ 448.360979][ C1] RIP: 0010:unwind_next_frame+0x315/0x22d0 [ 448.361010][ C1] Code: 64 48 01 d2 48 01 f2 0f 84 42 01 00 00 48 8d 5a 04 4c 8d 72 05 48 89 d8 48 c1 e8 03 48 bd 00 00 00 00 00 fc ff df 0f b6 04 28 <84> c0 0f 85 58 18 00 00 4c 89 f0 48 c1 e8 03 0f b6 04 28 84 c0 0f [ 448.361026][ C1] RSP: 0018:ffffc90000a56d30 EFLAGS: 00000a06 [ 448.361039][ C1] RAX: 0000000000000000 RBX: ffffffff909f0138 RCX: ffffffff9029c354 [ 448.361053][ C1] RDX: ffffffff909f0134 RSI: ffffffff909f0134 RDI: ffffffff814126e0 [ 448.361066][ C1] RBP: dffffc0000000000 R08: 0000000000000001 R09: ffffc90000a56ef0 [ 448.361079][ C1] R10: ffffc90000a56e50 R11: ffffffff817f1fb0 R12: 0000000000000000 [ 448.361091][ C1] R13: ffffc90000a56e00 R14: ffffffff909f0139 R15: ffffffff815e6b3b [ 448.361105][ C1] FS: 0000000000000000(0000) GS:ffff8880b9100000(0000) knlGS:0000000000000000 [ 448.361121][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 448.361133][ C1] CR2: 00007ff54a835000 CR3: 00000000763e2000 CR4: 00000000003506f0 [ 448.361148][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 448.361158][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 448.361169][ C1] Call Trace: [ 448.361176][ C1] [ 448.361183][ C1] ? nmi_cpu_backtrace+0x3c2/0x4d0 [ 448.361206][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 448.361233][ C1] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 448.361255][ C1] ? nmi_handle+0x2a/0x5a0 [ 448.361287][ C1] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 448.361311][ C1] ? nmi_handle+0x14f/0x5a0 [ 448.361328][ C1] ? nmi_handle+0x2a/0x5a0 [ 448.361347][ C1] ? unwind_next_frame+0x315/0x22d0 [ 448.361373][ C1] ? default_do_nmi+0x63/0x160 [ 448.361396][ C1] ? exc_nmi+0x123/0x1f0 [ 448.361418][ C1] ? end_repeat_nmi+0xf/0x53 [ 448.361439][ C1] ? process_scheduled_works+0xa2b/0x1830 [ 448.361464][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 448.361491][ C1] ? unwind_next_frame+0xb0/0x22d0 [ 448.361518][ C1] ? unwind_next_frame+0x315/0x22d0 [ 448.361545][ C1] ? unwind_next_frame+0x315/0x22d0 [ 448.361573][ C1] ? unwind_next_frame+0x315/0x22d0 [ 448.361601][ C1] [ 448.361606][ C1] [ 448.361617][ C1] ? process_scheduled_works+0xa2c/0x1830 [ 448.361642][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 448.361667][ C1] arch_stack_walk+0x11c/0x150 [ 448.361688][ C1] ? process_scheduled_works+0xa2c/0x1830 [ 448.361714][ C1] stack_trace_save+0x118/0x1d0 [ 448.361735][ C1] ? __lock_acquire+0x137a/0x2040 [ 448.361761][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 448.361791][ C1] kasan_save_track+0x3f/0x80 [ 448.361808][ C1] ? kasan_save_track+0x3f/0x80 [ 448.361822][ C1] ? __kasan_slab_alloc+0x66/0x80 [ 448.361840][ C1] ? kmem_cache_alloc_node_noprof+0x16b/0x320 [ 448.361863][ C1] ? __alloc_skb+0x1c3/0x440 [ 448.361882][ C1] ? __ipv6_ifa_notify+0x2e9/0x1230 [ 448.361908][ C1] ? addrconf_ifdown+0xef0/0x1bd0 [ 448.361930][ C1] ? addrconf_notify+0x3cb/0x1020 [ 448.361946][ C1] ? notifier_call_chain+0x19f/0x3e0 [ 448.361969][ C1] ? dev_close_many+0x33c/0x4c0 [ 448.361985][ C1] ? unregister_netdevice_many_notify+0x50b/0x1c40 [ 448.362009][ C1] ? cleanup_net+0x75d/0xcc0 [ 448.362026][ C1] ? process_scheduled_works+0xa2c/0x1830 [ 448.362071][ C1] __kasan_slab_alloc+0x66/0x80 [ 448.362088][ C1] ? __alloc_skb+0x1c3/0x440 [ 448.362107][ C1] kmem_cache_alloc_node_noprof+0x16b/0x320 [ 448.362133][ C1] __alloc_skb+0x1c3/0x440 [ 448.362152][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 448.362180][ C1] ? __pfx___alloc_skb+0x10/0x10 [ 448.362205][ C1] __ipv6_ifa_notify+0x2e9/0x1230 [ 448.362234][ C1] ? __pfx___ipv6_ifa_notify+0x10/0x10 [ 448.362262][ C1] ? mark_lock+0x9a/0x350 [ 448.362284][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 448.362311][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 448.362339][ C1] ? __local_bh_enable_ip+0x168/0x200 [ 448.362361][ C1] ? lockdep_hardirqs_on+0x99/0x150 [ 448.362388][ C1] ? __local_bh_enable_ip+0x168/0x200 [ 448.362412][ C1] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 448.362436][ C1] ? addrconf_ifdown+0xde0/0x1bd0 [ 448.362462][ C1] addrconf_ifdown+0xef0/0x1bd0 [ 448.362490][ C1] ? __pfx_addrconf_ifdown+0x10/0x10 [ 448.362513][ C1] ? tls_dev_event+0x8f6/0x10c0 [ 448.362545][ C1] addrconf_notify+0x3cb/0x1020 [ 448.362564][ C1] notifier_call_chain+0x19f/0x3e0 [ 448.362591][ C1] dev_close_many+0x33c/0x4c0 [ 448.362611][ C1] ? __pfx_dev_close_many+0x10/0x10 [ 448.362627][ C1] ? unregister_netdevice_many_notify+0x209/0x1c40 [ 448.362656][ C1] unregister_netdevice_many_notify+0x50b/0x1c40 [ 448.362681][ C1] ? mark_lock+0x9a/0x350 [ 448.362699][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 448.362726][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 448.362752][ C1] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 448.362779][ C1] ? irqentry_exit+0x63/0x90 [ 448.362794][ C1] ? lockdep_hardirqs_on+0x99/0x150 [ 448.362825][ C1] ? nexthop_net_exit_batch_rtnl+0x26/0x150 [ 448.362853][ C1] ? nexthop_net_exit_batch_rtnl+0x100/0x150 [ 448.362878][ C1] cleanup_net+0x75d/0xcc0 [ 448.362899][ C1] ? __pfx_cleanup_net+0x10/0x10 [ 448.362924][ C1] ? process_scheduled_works+0x945/0x1830 [ 448.362947][ C1] process_scheduled_works+0xa2c/0x1830 [ 448.362983][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 448.363010][ C1] ? assign_work+0x364/0x3d0 [ 448.363035][ C1] worker_thread+0x86d/0xd10 [ 448.363066][ C1] ? __kthread_parkme+0x169/0x1d0 [ 448.363092][ C1] ? __pfx_worker_thread+0x10/0x10 [ 448.363115][ C1] kthread+0x2f0/0x390 [ 448.363130][ C1] ? __pfx_worker_thread+0x10/0x10 [ 448.363153][ C1] ? __pfx_kthread+0x10/0x10 [ 448.363169][ C1] ret_from_fork+0x4b/0x80 [ 448.363193][ C1] ? __pfx_kthread+0x10/0x10 [ 448.363209][ C1] ret_from_fork_asm+0x1a/0x30 [ 448.363242][ C1] [ 448.989680][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 448.996597][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.11.0-rc3-next-20240812-syzkaller #0 [ 449.006710][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 449.016826][ T31] Call Trace: [ 449.020144][ T31] [ 449.023103][ T31] dump_stack_lvl+0x241/0x360 [ 449.027823][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 449.033148][ T31] ? __pfx__printk+0x10/0x10 [ 449.037974][ T31] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 449.044018][ T31] ? vscnprintf+0x5d/0x90 [ 449.048393][ T31] panic+0x349/0x870 [ 449.052359][ T31] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 449.058564][ T31] ? __pfx_panic+0x10/0x10 [ 449.063032][ T31] ? tick_nohz_tick_stopped+0x82/0xb0 [ 449.068446][ T31] ? __irq_work_queue_local+0x137/0x410 [ 449.074052][ T31] ? preempt_schedule_thunk+0x1a/0x30 [ 449.079459][ T31] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 449.085658][ T31] ? nmi_trigger_cpumask_backtrace+0x2d4/0x320 [ 449.091857][ T31] ? nmi_trigger_cpumask_backtrace+0x2d9/0x320 [ 449.098060][ T31] watchdog+0x1033/0x1040 [ 449.102445][ T31] ? watchdog+0x1ea/0x1040 [ 449.106922][ T31] ? __pfx_watchdog+0x10/0x10 [ 449.111823][ T31] kthread+0x2f0/0x390 [ 449.116016][ T31] ? __pfx_watchdog+0x10/0x10 [ 449.120736][ T31] ? __pfx_kthread+0x10/0x10 [ 449.125358][ T31] ret_from_fork+0x4b/0x80 [ 449.129819][ T31] ? __pfx_kthread+0x10/0x10 [ 449.134444][ T31] ret_from_fork_asm+0x1a/0x30 [ 449.139273][ T31] [ 449.142667][ T31] Kernel Offset: disabled [ 449.147014][ T31] Rebooting in 86400 seconds..