last executing test programs: 34.609904402s ago: executing program 1 (id=170): syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xfffffffffffffe54}) r0 = syz_io_uring_setup(0x16d2, &(0x7f0000000240)={0x0, 0x0, 0x10100, 0x0, 0x198}, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_service_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f00000001c0)=ANY=[@ANYBLOB='6'], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_MKDIRAT={0x25, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r0, 0x2d3e, 0x0, 0x0, 0x0, 0x0) 33.988955745s ago: executing program 1 (id=174): syz_mount_image$hfs(&(0x7f0000000180), &(0x7f0000000000)='./file2\x00', 0x3000812, &(0x7f00000001c0)=ANY=[@ANYBLOB="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", @ANYRESOCT, @ANYRESDEC, @ANYRES64, @ANYRES8, @ANYRESOCT=0x0], 0x11, 0x2f0, &(0x7f00000019c0)="$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") r0 = open(&(0x7f0000000100)='./bus\x00', 0x143142, 0xa2) open(&(0x7f0000000080)='./file1\x00', 0x1cf542, 0x60) write$FUSE_INIT(r0, &(0x7f0000000140)={0x50}, 0xffd3) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000d40)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x800008, 0x0, 0xfc, 0x0, &(0x7f00000000c0)) 32.702382023s ago: executing program 1 (id=181): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000004c0)=ANY=[@ANYRES32=r0, @ANYRES32=r1, @ANYBLOB="02"], 0x10) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000004c0)=ANY=[], 0x10) 31.88802989s ago: executing program 1 (id=185): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$TCFLSH(r1, 0x400455c8, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000080)=0x4) ioctl$TIOCSTI(r1, 0x5412, &(0x7f00000001c0)) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000140)) 31.180557158s ago: executing program 1 (id=188): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000140)=[@acquire], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r2, 0xc018620c, &(0x7f0000000000)) 12.694012217s ago: executing program 4 (id=238): syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000000)='./file0\x00', 0x400, &(0x7f0000000180)=ANY=[@ANYBLOB="6572726f72733d72656d6f756e742d726f2c757466383d302c757365667265652c646973636172642c757466383d312c756e695f786c6174653d302c73686f72746e616d653d77696e39352c756e695f786c6174653d302c756e695f786c6174653d302c0008442895b66131b4e4d54b2ba6ae54da0e13047e9f62fbb85ccc774b3ec4c81a1a985232d16d0d934460e920a59172e764c68194b9d9d0be76c595bac1fc5a0a8256a7b77e071e9bdd6100f9ae"], 0xfd, 0x274, &(0x7f0000000500)="$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") r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r2 = open(&(0x7f0000000180)='./bus\x00', 0x4047e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r2, 0x0) ftruncate(r0, 0x1f) write$cgroup_type(r1, &(0x7f0000000200), 0x175d9003) 10.431495633s ago: executing program 4 (id=244): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xbd, 0x16, 0xf, 0x40, 0x8086, 0x110, 0xbfad, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xa0, 0x12, 0x24}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 8.496295036s ago: executing program 0 (id=246): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x20001400) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='smaps_rollup\x00') r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x13000)=nil, 0x13000, 0x0, 0x12, r2, 0x0) preadv(r1, &(0x7f0000000080)=[{&(0x7f0000000000)=""/92, 0x5c}], 0x1, 0x0, 0x0) 8.488163079s ago: executing program 2 (id=247): r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r1, 0xc02064b6, &(0x7f00000001c0)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f0000000200)={r2, r3, r4, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000000400)={0x0, 0x25, r5, r4, 0x6, 0x0, 0x82, 0x800, {0xb3, 0x5, 0x3, 0x1ff, 0x203, 0xf66a, 0x6, 0x3, 0xd710, 0x2, 0xfff, 0x5, 0xff, 0xf9, "00000000000000fd000000001c000035c068b400"}}) 7.69433528s ago: executing program 4 (id=249): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f00000003c0)={'#! ', './file0', [], 0xa, "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"}, 0x4f7) write$binfmt_aout(r0, &(0x7f00000002c0)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x0, "00629a7d82000000000000000000f7ffffff00"}) r1 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x0) r2 = dup3(r1, r0, 0x0) readv(r2, &(0x7f0000000980)=[{&(0x7f00000006c0)=""/9, 0x9}, {0x0, 0xff0f}], 0x2) 7.112875598s ago: executing program 0 (id=251): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r1, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000001c0)={&(0x7f00000002c0)={0x2c, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x98f}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x2c}}, 0x0) 7.107001218s ago: executing program 2 (id=252): unshare(0x8000000) r0 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setregid(0x0, r1) setgroups(0x0, 0x0) capset(&(0x7f0000000300)={0x19980330}, &(0x7f0000000340)) shmget$private(0x0, 0xfffffffffeffffff, 0x4800, &(0x7f0000ffc000/0x3000)=nil) 7.077912544s ago: executing program 3 (id=261): r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @rand_addr=0x64010102}]}, &(0x7f0000000180)=0x10) r2 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) sendmsg$inet_sctp(r0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[@sndrcv={0x2c, 0x84, 0x1, {0x4, 0x3, 0x200, 0x2, 0x42d, 0x5, 0x3ff, 0x0, r3}}], 0x2c, 0x4040000}, 0x801) 6.817023982s ago: executing program 0 (id=253): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x8) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r0, &(0x7f0000000cc0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000001040)="f5e022a4d2ed0cf5f8b2e9857cb9af98da7aa60f7a1582aadeaef336f9139f6768452f868624c7e6ce0948f33f1a63e0fcf0f2df283b3ca3f1f4de26a8b575ccb465985e48f65b9a7fcc93c0a5be8b16774f7c7ca9848a182d6ee7c0f2b9c0e7030ed93ee34214c25cb51279b18c8e5bfbc52152be37f5e2b783e2149be25180430ac63ee1bb8c00bb6125e65839ae5b02d542a97d1bfb1ca420b5405baaaf5ec6ad96af2814dbbea5a064f2ab6fc0904c07f02cbfadfb96866d962e6e21d3a0a0276a36e0", 0xc5}], 0x1}}, {{0x0, 0x0, &(0x7f0000000c80)=[{&(0x7f0000000f00)="63c3b174ab06077f6ee67ac1310d86586b13d2c9e203a9da866b81e20e9fe5c432193989489c1459ce9cd14fa3b43a0b9b6004118a35444790d70af5c873561ac1ad55af7f9f8551103f694e2a22346ca675898ce02a665ecc07e153e3949b954c1d74b105c14411925a8ae24778d4", 0x6f}], 0x1}}, {{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000640)="755ca9bd3fd87456466cd4ab09930a7972d7df968a6a6114f3db5548c265a1c0eadf9dc81f4de7a659bf2fd963b62ab6a3291b994ce3e68d29974cbd144ef4803bb11e49afd9e9f6c69e23d94b880d424a56af70b7b3f69ca07b85cd6fa37d39078bf235b355d36147cab8073e1818c615ae34fb38d8c92049fbd2d371eb493d8162d8836b8f9295d17e445e49134b4f94932984566c6d1d7b479a1d292cd39caf50ba08e39a6ac5b4d565b0f4eea211688dfcffad93d9c534ad1c8b2517dcf778797a45b32b88b7880c5122eff57a20ac7211b96753987c85f18d86103e0eb0d2266bd6e51695e6", 0xe8}, {&(0x7f0000000a40)="a874f71022111112ec5e2602f419e493ea5b4acf974d9283ee3375a461bb9065c90429ee1e99af0ae05a2cdf6095f3c3bcaf502fe5bc586d74a09a829064afeb21d6a37184cba31f9a404f96368db3439c616b32ca53867d1287a26ea498e4f743acd6252d1590999bc24f950e04e6a96c8637d150e4dca23239ce0412d084932196a057d6486b668c61dd5a01bb22529c0ae2eb008dea68a0770dc99559a527dd152975cbe3751d76d934cafa51e2d9c8cdea4d85e9d6f230d18ad14fdbd9b91a23af1d5d1342d6", 0xc8}, {&(0x7f0000001340)="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", 0x31c}], 0x3, &(0x7f0000001200)=ANY=[@ANYBLOB="800000000000000007000000070b450a010101ac1e000183073cac1e0101071b7dac1414bb64010101ac1414aaac1414bb00000000ac1414bb860916ba75d2956527442c2833ac1414bb00000003e000000100000004e0000002ffffff5dac1414bb0000cf107f000001000001ff8310bbded4a7067d627ba07946ab21900000100000000000000001000000000100000d0000000000000001000000000000000d"], 0xb0}}], 0x3, 0x4004880) 6.768088491s ago: executing program 2 (id=254): r0 = socket(0x10, 0x80002, 0x0) r1 = socket(0x200000000000011, 0x2, 0x400) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="380000005400e500000000000000000007000000", @ANYRES32=r2, @ANYBLOB="20000100", @ANYRES32=r4, @ANYBLOB="01000300b5"], 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x10) sendmmsg$alg(r0, &(0x7f00000000c0), 0x492492492492627, 0x0) 6.419898778s ago: executing program 0 (id=255): syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000000000010ac0544020000000000010902240001000000000904000000030002"], 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f0000000180)={{0xfffc, 0x0, 0x0, 0x1}, 'syz0\x00', 0x57}) ioctl$UI_DEV_CREATE(r1, 0x5501) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) 6.404941287s ago: executing program 3 (id=256): r0 = socket(0x80000000000000a, 0x1, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2a, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @private1}}}, 0x108) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x0, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r1, 0x8922, &(0x7f0000000440)={'syz_tun\x00', 0x100}) setsockopt$inet6_group_source_req(r0, 0x29, 0x2d, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @private2}}}, 0x108) 6.122114814s ago: executing program 2 (id=257): r0 = syz_clone(0x8080, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r1) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r2 = syz_open_procfs(r0, &(0x7f0000000000)='map_files\x00') syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000090003206d0414c34000000000010902"], 0x0) getdents(r2, 0x0, 0x0) 5.691614082s ago: executing program 3 (id=258): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="280000000203010400000000ffffffff000000000800010001"], 0x28}}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x2, 0x3, 0x201, 0x0, 0x0, {0x0, 0x0, 0x10}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="200000001100010100"/20, @ANYRES32=r1], 0x20}, 0x1, 0x0, 0x0, 0x80d5}, 0x0) 5.537783859s ago: executing program 4 (id=259): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r2, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) 4.217661422s ago: executing program 3 (id=260): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f00000001c0)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000004c0)="464e564879dc7c677e30ba7dc20c3e6659ee061fd63a83f0506d117ae1948d5bed675cd5f529741b914c1f22c66cc0795829a7faaf609a13752d6bce3e428e208e81154d3c237bf97d718f04159f6a007af430b56a80d3c6795dfbc181e0", 0x5e}], 0x1}}], 0x1, 0x20004000) writev(r1, &(0x7f0000000000)=[{&(0x7f00000000c0)="14", 0x1f68}], 0x2) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r0, 0x0, 0x30, 0xe1515f8735398fb, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000002c0)=[0x45c], 0x0, 0x0, 0x1, 0x1}}, 0x3c) r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000001, 0x12, r2, 0x0) 3.435225079s ago: executing program 2 (id=262): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000180)=[{0x40, 0x0, 0x67, 0x400}, {0x6, 0x86, 0x0, 0x9ef}]}, 0x8) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000900)=[@in={0x2, 0x4e23, @loopback}, @in6={0xa, 0x0, 0x0, @loopback}], 0x2c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000500)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 3.100303855s ago: executing program 0 (id=263): r0 = syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x1008002, &(0x7f0000000280)={[{@grpquota}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x88}}, {@resuid}, {@max_batch_time={'max_batch_time', 0x3d, 0x3}}, {@lazytime}, {@usrquota}, {@data_err_abort}, {@dax_never}]}, 0x1, 0x5d8, &(0x7f0000001200)="$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") quotactl$Q_SETQUOTA(0xffffffff80000801, &(0x7f0000000040)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x9d}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0x0) syz_mount_image$msdos(&(0x7f0000000180), &(0x7f0000001080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f0000000b40)=ANY=[@ANYRESDEC, @ANYRES8, @ANYRES16, @ANYRES8, @ANYRES64, @ANYRES64=r0, @ANYRES64, @ANYRES16=r1, @ANYRES8], 0xde, 0x0, &(0x7f0000000000)) r2 = openat$dir(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0) mkdirat(r2, &(0x7f0000000000)='./bus\x00', 0x0) unlinkat(r1, &(0x7f0000000340)='./bus\x00', 0x200) 2.958640056s ago: executing program 3 (id=264): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x2, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000010000000000000000001851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000106608000000000000180000000000000000000000000000009500000000000000360a020000001000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f0000000340)=""/222, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r1, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r2, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 2.707308621s ago: executing program 4 (id=265): r0 = socket$inet_smc(0x2b, 0x1, 0x0) ppoll(&(0x7f0000000500)=[{r0}], 0x1, 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f0000000040)="5766b1b827f600333b09d3748ee7d700", 0x10) listen(r0, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f0000000200)=0x2, 0x43) ioctl$int_in(r0, 0x5452, &(0x7f00000000c0)=0x1) shutdown(r0, 0x0) 2.515468439s ago: executing program 1 (id=188): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000140)=[@acquire], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r2, 0xc018620c, &(0x7f0000000000)) 145.882993ms ago: executing program 0 (id=266): r0 = syz_io_uring_setup(0x112, &(0x7f0000000a00)={0x0, 0x0, 0x400}, &(0x7f0000000580)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x2, 0x0, 0x5, 0x0, 0x0}) io_uring_enter(r0, 0x47f6, 0x9197, 0xa, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff}) tee(r4, r3, 0x80000001, 0x0) 103.061225ms ago: executing program 2 (id=267): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) connect$inet6(r1, &(0x7f0000000380)={0xa, 0x4e31, 0x4, @empty, 0x3}, 0x1c) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002cbd70000400000005000000080009000200000008000c00a80a0000060001000500000008000b"], 0x34}}, 0x0) 71.685548ms ago: executing program 3 (id=268): ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000200)={0x0, 'pimreg0\x00', {0x3}, 0x46}) r0 = syz_io_uring_setup(0x24fa, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f00000001c0)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r0, 0x2d3e, 0x0, 0x0, 0x0, 0x0) 0s ago: executing program 4 (id=269): syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x4ac, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x13, r2, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000080)=ANY=[@ANYBLOB="0108000000000000fd50367d78b8cf03000001000000c0eb27c0f21b186c05010000000000000009cb8e00090000"]) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.190' (ED25519) to the list of known hosts. [ 171.180262][ T5790] cgroup: Unknown subsys name 'net' [ 171.325541][ T5790] cgroup: Unknown subsys name 'cpuset' [ 171.340127][ T5790] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 216.426897][ T5790] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 219.086609][ T1275] ieee802154 phy0 wpan0: encryption failed: -22 [ 219.093307][ T1275] ieee802154 phy1 wpan1: encryption failed: -22 [ 220.364042][ T5813] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 220.391282][ T5816] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 220.399872][ T5816] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 220.418161][ T5820] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 220.426750][ T5820] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 220.435084][ T5820] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 220.444467][ T5820] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 220.453957][ T5822] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 220.462962][ T5822] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 220.479176][ T5820] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 220.487908][ T5822] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 220.491736][ T5820] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 220.502109][ T5822] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 220.509003][ T5820] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 220.515527][ T5822] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 220.520375][ T5820] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 220.527552][ T5825] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 220.532580][ T5820] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 220.539596][ T5825] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 220.555094][ T5825] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 220.580939][ T5825] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 220.593750][ T5825] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 220.603045][ T5825] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 220.606693][ T5820] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 220.613942][ T5825] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 220.618624][ T5820] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 220.627323][ T5825] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 220.633614][ T5103] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 220.650355][ T5103] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 220.664340][ T5825] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 221.589163][ T5807] chnl_net:caif_netlink_parms(): no params data found [ 222.407368][ T5807] bridge0: port 1(bridge_slave_0) entered blocking state [ 222.415409][ T5807] bridge0: port 1(bridge_slave_0) entered disabled state [ 222.423093][ T5807] bridge_slave_0: entered allmulticast mode [ 222.432355][ T5807] bridge_slave_0: entered promiscuous mode [ 222.455502][ T5807] bridge0: port 2(bridge_slave_1) entered blocking state [ 222.463196][ T5807] bridge0: port 2(bridge_slave_1) entered disabled state [ 222.471139][ T5807] bridge_slave_1: entered allmulticast mode [ 222.480272][ T5807] bridge_slave_1: entered promiscuous mode [ 222.553788][ T5808] chnl_net:caif_netlink_parms(): no params data found [ 222.573809][ T5806] chnl_net:caif_netlink_parms(): no params data found [ 222.585690][ T5825] Bluetooth: hci0: command tx timeout [ 222.762664][ T5825] Bluetooth: hci4: command tx timeout [ 222.770482][ T5825] Bluetooth: hci1: command tx timeout [ 222.776391][ T5825] Bluetooth: hci2: command tx timeout [ 222.838743][ T5816] Bluetooth: hci3: command tx timeout [ 222.854317][ T5817] chnl_net:caif_netlink_parms(): no params data found [ 222.889647][ T5807] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 222.918882][ T5814] chnl_net:caif_netlink_parms(): no params data found [ 222.958363][ T5807] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 223.253442][ T5807] team0: Port device team_slave_0 added [ 223.304243][ T5807] team0: Port device team_slave_1 added [ 223.561476][ T5807] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 223.568991][ T5807] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 223.595647][ T5807] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 223.754394][ T5807] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 223.762089][ T5807] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 223.788551][ T5807] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 223.801444][ T5808] bridge0: port 1(bridge_slave_0) entered blocking state [ 223.810058][ T5808] bridge0: port 1(bridge_slave_0) entered disabled state [ 223.818009][ T5808] bridge_slave_0: entered allmulticast mode [ 223.827042][ T5808] bridge_slave_0: entered promiscuous mode [ 223.839190][ T5806] bridge0: port 1(bridge_slave_0) entered blocking state [ 223.849136][ T5806] bridge0: port 1(bridge_slave_0) entered disabled state [ 223.857152][ T5806] bridge_slave_0: entered allmulticast mode [ 223.866293][ T5806] bridge_slave_0: entered promiscuous mode [ 223.936466][ T5808] bridge0: port 2(bridge_slave_1) entered blocking state [ 223.944193][ T5808] bridge0: port 2(bridge_slave_1) entered disabled state [ 223.952172][ T5808] bridge_slave_1: entered allmulticast mode [ 223.961304][ T5808] bridge_slave_1: entered promiscuous mode [ 223.995186][ T5806] bridge0: port 2(bridge_slave_1) entered blocking state [ 224.002926][ T5806] bridge0: port 2(bridge_slave_1) entered disabled state [ 224.010924][ T5806] bridge_slave_1: entered allmulticast mode [ 224.020082][ T5806] bridge_slave_1: entered promiscuous mode [ 224.287517][ T5814] bridge0: port 1(bridge_slave_0) entered blocking state [ 224.295458][ T5814] bridge0: port 1(bridge_slave_0) entered disabled state [ 224.303151][ T5814] bridge_slave_0: entered allmulticast mode [ 224.312231][ T5814] bridge_slave_0: entered promiscuous mode [ 224.324085][ T5817] bridge0: port 1(bridge_slave_0) entered blocking state [ 224.334507][ T5817] bridge0: port 1(bridge_slave_0) entered disabled state [ 224.342321][ T5817] bridge_slave_0: entered allmulticast mode [ 224.353617][ T5817] bridge_slave_0: entered promiscuous mode [ 224.373597][ T5808] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 224.383442][ T5817] bridge0: port 2(bridge_slave_1) entered blocking state [ 224.391496][ T5817] bridge0: port 2(bridge_slave_1) entered disabled state [ 224.399267][ T5817] bridge_slave_1: entered allmulticast mode [ 224.408380][ T5817] bridge_slave_1: entered promiscuous mode [ 224.510517][ T5814] bridge0: port 2(bridge_slave_1) entered blocking state [ 224.518466][ T5814] bridge0: port 2(bridge_slave_1) entered disabled state [ 224.526376][ T5814] bridge_slave_1: entered allmulticast mode [ 224.534446][ T5814] bridge_slave_1: entered promiscuous mode [ 224.551375][ T5808] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 224.629580][ T5806] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 224.651433][ T5807] hsr_slave_0: entered promiscuous mode [ 224.662551][ T5807] hsr_slave_1: entered promiscuous mode [ 224.671407][ T5816] Bluetooth: hci0: command tx timeout [ 224.741642][ T5817] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 224.794376][ T5806] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 224.833104][ T5816] Bluetooth: hci2: command tx timeout [ 224.838844][ T5825] Bluetooth: hci1: command tx timeout [ 224.838949][ T5825] Bluetooth: hci4: command tx timeout [ 224.894079][ T5814] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 224.905375][ T5816] Bluetooth: hci3: command tx timeout [ 224.912236][ T5817] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 224.930204][ T5814] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 224.947230][ T5808] team0: Port device team_slave_0 added [ 225.139830][ T5808] team0: Port device team_slave_1 added [ 225.151884][ T5806] team0: Port device team_slave_0 added [ 225.199995][ T5814] team0: Port device team_slave_0 added [ 225.215121][ T5817] team0: Port device team_slave_0 added [ 225.258089][ T5806] team0: Port device team_slave_1 added [ 225.286289][ T5814] team0: Port device team_slave_1 added [ 225.299833][ T5817] team0: Port device team_slave_1 added [ 225.450780][ T5808] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 225.458166][ T5808] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 225.485123][ T5808] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 225.499874][ T5808] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 225.507425][ T5808] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 225.534142][ T5808] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 225.663925][ T5806] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 225.671979][ T5806] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 225.698491][ T5806] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 225.737384][ T5814] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 225.744574][ T5814] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 225.771322][ T5814] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 225.785320][ T5817] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 225.792494][ T5817] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 225.819059][ T5817] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 225.866452][ T5806] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 225.873636][ T5806] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 225.900040][ T5806] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 225.945592][ T5814] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 225.952737][ T5814] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 225.978999][ T5814] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 225.993535][ T5817] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 226.001088][ T5817] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 226.027546][ T5817] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 226.077764][ T5808] hsr_slave_0: entered promiscuous mode [ 226.088740][ T5808] hsr_slave_1: entered promiscuous mode [ 226.097374][ T5808] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 226.106716][ T5808] Cannot create hsr debugfs directory [ 226.331176][ T5806] hsr_slave_0: entered promiscuous mode [ 226.342640][ T5806] hsr_slave_1: entered promiscuous mode [ 226.351081][ T5806] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 226.361639][ T5806] Cannot create hsr debugfs directory [ 226.619900][ T5817] hsr_slave_0: entered promiscuous mode [ 226.631000][ T5817] hsr_slave_1: entered promiscuous mode [ 226.640081][ T5817] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 226.648089][ T5817] Cannot create hsr debugfs directory [ 226.755594][ T5816] Bluetooth: hci0: command tx timeout [ 226.807396][ T5814] hsr_slave_0: entered promiscuous mode [ 226.816863][ T5814] hsr_slave_1: entered promiscuous mode [ 226.825592][ T5814] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 226.833391][ T5814] Cannot create hsr debugfs directory [ 226.925624][ T5816] Bluetooth: hci4: command tx timeout [ 226.931293][ T5816] Bluetooth: hci2: command tx timeout [ 226.936235][ T51] Bluetooth: hci1: command tx timeout [ 226.985331][ T5825] Bluetooth: hci3: command tx timeout [ 227.236898][ T5807] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 227.359637][ T5807] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 227.380957][ T5807] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 227.414376][ T5807] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 227.917766][ T5808] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 227.950159][ T5808] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 228.014511][ T5808] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 228.041090][ T5808] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 228.301163][ T5806] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 228.342686][ T5806] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 228.398856][ T5817] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 228.418739][ T5806] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 228.466154][ T5817] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 228.500174][ T5806] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 228.578421][ T5817] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 228.644369][ T5817] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 228.694231][ T5814] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 228.788435][ T5814] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 228.825673][ T5825] Bluetooth: hci0: command tx timeout [ 228.846027][ T5814] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 228.897757][ T5814] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 229.002580][ T5825] Bluetooth: hci2: command tx timeout [ 229.008859][ T5825] Bluetooth: hci1: command tx timeout [ 229.014482][ T5825] Bluetooth: hci4: command tx timeout [ 229.078592][ T5816] Bluetooth: hci3: command tx timeout [ 229.254368][ T5807] 8021q: adding VLAN 0 to HW filter on device bond0 [ 229.517026][ T5807] 8021q: adding VLAN 0 to HW filter on device team0 [ 229.574495][ T4639] bridge0: port 1(bridge_slave_0) entered blocking state [ 229.582295][ T4639] bridge0: port 1(bridge_slave_0) entered forwarding state [ 229.718387][ T4639] bridge0: port 2(bridge_slave_1) entered blocking state [ 229.726199][ T4639] bridge0: port 2(bridge_slave_1) entered forwarding state [ 229.758854][ T5808] 8021q: adding VLAN 0 to HW filter on device bond0 [ 229.972028][ T5806] 8021q: adding VLAN 0 to HW filter on device bond0 [ 230.068904][ T5817] 8021q: adding VLAN 0 to HW filter on device bond0 [ 230.143152][ T5808] 8021q: adding VLAN 0 to HW filter on device team0 [ 230.199218][ T5806] 8021q: adding VLAN 0 to HW filter on device team0 [ 230.240827][ T1768] bridge0: port 1(bridge_slave_0) entered blocking state [ 230.248627][ T1768] bridge0: port 1(bridge_slave_0) entered forwarding state [ 230.353203][ T5814] 8021q: adding VLAN 0 to HW filter on device bond0 [ 230.387570][ T5817] 8021q: adding VLAN 0 to HW filter on device team0 [ 230.417581][ T1768] bridge0: port 2(bridge_slave_1) entered blocking state [ 230.425330][ T1768] bridge0: port 2(bridge_slave_1) entered forwarding state [ 230.442007][ T1768] bridge0: port 1(bridge_slave_0) entered blocking state [ 230.449759][ T1768] bridge0: port 1(bridge_slave_0) entered forwarding state [ 230.634315][ T1768] bridge0: port 1(bridge_slave_0) entered blocking state [ 230.642101][ T1768] bridge0: port 1(bridge_slave_0) entered forwarding state [ 230.657496][ T1768] bridge0: port 2(bridge_slave_1) entered blocking state [ 230.665332][ T1768] bridge0: port 2(bridge_slave_1) entered forwarding state [ 230.705531][ T1768] bridge0: port 2(bridge_slave_1) entered blocking state [ 230.713210][ T1768] bridge0: port 2(bridge_slave_1) entered forwarding state [ 230.890229][ T5814] 8021q: adding VLAN 0 to HW filter on device team0 [ 230.911144][ T5808] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 230.923053][ T5808] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 230.984575][ T5806] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 230.995472][ T5806] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 231.361369][ T1768] bridge0: port 1(bridge_slave_0) entered blocking state [ 231.369164][ T1768] bridge0: port 1(bridge_slave_0) entered forwarding state [ 231.384544][ T1768] bridge0: port 2(bridge_slave_1) entered blocking state [ 231.392362][ T1768] bridge0: port 2(bridge_slave_1) entered forwarding state [ 231.931087][ T5807] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 232.450711][ T5807] veth0_vlan: entered promiscuous mode [ 232.605660][ T5807] veth1_vlan: entered promiscuous mode [ 232.962565][ T5807] veth0_macvtap: entered promiscuous mode [ 233.053946][ T5807] veth1_macvtap: entered promiscuous mode [ 233.110544][ T5806] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 233.184095][ T5808] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 233.244324][ T5817] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 233.275617][ T5807] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 233.371208][ T5807] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 233.442098][ T5807] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 233.451471][ T5807] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 233.460787][ T5807] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 233.470023][ T5807] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 233.706084][ T5806] veth0_vlan: entered promiscuous mode [ 233.732235][ T5814] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 233.832128][ T5806] veth1_vlan: entered promiscuous mode [ 233.951581][ T5808] veth0_vlan: entered promiscuous mode [ 234.083348][ T5808] veth1_vlan: entered promiscuous mode [ 234.207210][ T5806] veth0_macvtap: entered promiscuous mode [ 234.304265][ T5806] veth1_macvtap: entered promiscuous mode [ 234.327309][ T5814] veth0_vlan: entered promiscuous mode [ 234.484186][ T5814] veth1_vlan: entered promiscuous mode [ 234.510154][ T5808] veth0_macvtap: entered promiscuous mode [ 234.587917][ T5806] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 234.598892][ T5806] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 234.613698][ T5806] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 234.664681][ T5808] veth1_macvtap: entered promiscuous mode [ 234.725917][ T5806] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 234.736778][ T5806] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 234.751475][ T5806] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 234.957959][ T5808] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 234.969909][ T5808] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 234.981124][ T5808] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 234.994320][ T5808] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 235.009505][ T5808] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 235.032665][ T5814] veth0_macvtap: entered promiscuous mode [ 235.080549][ T5806] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 235.089816][ T5806] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 235.099118][ T5806] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 235.108324][ T5806] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 235.186370][ T5808] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 235.198268][ T5808] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 235.209211][ T5808] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 235.219959][ T5808] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 235.235622][ T5808] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 235.251932][ T5814] veth1_macvtap: entered promiscuous mode [ 235.446155][ T5814] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 235.458053][ T5814] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 235.468381][ T5814] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 235.479209][ T5814] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 235.489366][ T5814] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 235.500271][ T5814] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 235.514968][ T5814] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 235.544232][ T5808] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 235.553623][ T5808] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 235.562926][ T5808] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 235.572110][ T5808] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 235.776543][ T5814] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 235.791091][ T5814] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 235.802495][ T5814] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 235.813313][ T5814] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 235.823495][ T5814] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 235.834362][ T5814] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 235.849062][ T5814] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 236.158214][ T5814] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 236.167542][ T5814] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 236.176836][ T5814] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 236.186817][ T5814] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 236.326008][ T5817] veth0_vlan: entered promiscuous mode [ 236.479775][ T5817] veth1_vlan: entered promiscuous mode [ 236.843566][ T5817] veth0_macvtap: entered promiscuous mode [ 236.934276][ T5817] veth1_macvtap: entered promiscuous mode [ 237.062333][ T5817] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 237.075590][ T5817] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 237.086911][ T5817] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 237.098835][ T5817] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 237.108970][ T5817] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 237.119728][ T5817] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 237.129893][ T5817] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 237.140700][ T5817] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 237.157406][ T5817] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 237.422256][ T5817] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 237.433166][ T5817] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 237.443433][ T5817] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 237.454248][ T5817] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 237.464438][ T5817] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 237.477924][ T5817] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 237.489852][ T5817] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 237.501166][ T5817] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 237.515995][ T5817] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 237.801926][ T5817] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 237.812738][ T5817] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 237.823725][ T5817] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 237.833085][ T5817] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 240.545464][ T1792] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 240.553574][ T1792] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 240.760282][ T4639] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 240.769483][ T4639] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 241.188490][ T5807] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 242.360729][ T34] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 242.368627][ T4585] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 242.368719][ T4585] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 242.369222][ T4585] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 242.376955][ T34] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 242.401243][ T4585] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 242.625522][ T4732] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 242.633609][ T4732] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 242.954620][ T4585] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 242.962817][ T4585] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 243.240063][ T4585] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 243.248366][ T4585] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 243.584315][ T5999] mmap: syz.1.2 (5999) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 243.952511][ T3932] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 243.961182][ T3932] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 244.179076][ T6003] loop3: detected capacity change from 0 to 256 [ 244.224948][ T4732] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 244.233029][ T4732] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 244.280955][ T6003] MINIX-fs: mounting file system with errors, running fsck is recommended [ 244.370265][ T44] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 244.447098][ T6003] Trying to free block not in datazone [ 244.603048][ T6005] loop2: detected capacity change from 0 to 2048 [ 244.611234][ T44] usb 1-1: Using ep0 maxpacket: 16 [ 244.655790][ T44] usb 1-1: config 0 has an invalid interface number: 41 but max is 0 [ 244.664202][ T44] usb 1-1: config 0 has no interface number 0 [ 244.674254][ T44] usb 1-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 244.687889][ T44] usb 1-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 244.698378][ T44] usb 1-1: config 0 interface 41 has no altsetting 0 [ 244.803370][ T6005] UDF-fs: error (device loop2): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 244.883453][ T44] usb 1-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 244.893473][ T44] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 244.901953][ T44] usb 1-1: Product: syz [ 244.906784][ T44] usb 1-1: Manufacturer: syz [ 244.912559][ T44] usb 1-1: SerialNumber: syz [ 244.931287][ T6005] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 245.084262][ T44] usb 1-1: config 0 descriptor?? [ 245.094210][ T6001] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 245.117002][ T6001] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 245.298440][ T6007] syz.1.10 (6007): drop_caches: 2 [ 245.405045][ T6001] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 245.464837][ T6001] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 245.484459][ T6013] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 245.523075][ T6013] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 246.105961][ T44] CoreChips 1-1:0.41 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffe0 [ 246.152495][ T6017] loop2: detected capacity change from 0 to 1024 [ 246.557252][ T44] CoreChips 1-1:0.41 (unnamed net_device) (uninitialized): Failed to send software reset:ffffffb9 [ 246.568608][ T44] CoreChips 1-1:0.41 (unnamed net_device) (uninitialized): Failed to reset PHY: -71 [ 246.579007][ T44] CoreChips 1-1:0.41: probe with driver CoreChips failed with error -71 [ 246.667358][ T6017] hfsplus: xattr searching failed [ 246.698639][ T6017] hfsplus: xattr searching failed [ 246.706469][ T44] usb 1-1: USB disconnect, device number 2 [ 247.332333][ T4585] hfsplus: b-tree write err: -5, ino 3 [ 248.286516][ T6043] tipc: Failed to remove unknown binding: 66,1,1/0:494305819/494305821 [ 248.301893][ T6043] tipc: Failed to remove unknown binding: 66,1,1/0:494305819/494305821 [ 248.705630][ T6049] netlink: 132 bytes leftover after parsing attributes in process `syz.1.26'. [ 248.766978][ T6049] netlink: 'syz.1.26': attribute type 10 has an invalid length. [ 248.824666][ T6049] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 249.075867][ T6052] capability: warning: `syz.3.28' uses deprecated v2 capabilities in a way that may be insecure [ 249.229297][ T6056] ip6gretap1: entered allmulticast mode [ 249.367270][ T6062] syz.2.30 uses obsolete (PF_INET,SOCK_PACKET) [ 250.047366][ T6066] loop1: detected capacity change from 0 to 256 [ 250.109799][ T6066] ======================================================= [ 250.109799][ T6066] WARNING: The mand mount option has been deprecated and [ 250.109799][ T6066] and is ignored by this kernel. Remove the mand [ 250.109799][ T6066] option from the mount to silence this warning. [ 250.109799][ T6066] ======================================================= [ 250.555757][ T6066] FAT-fs (loop1): Directory bread(block 64) failed [ 250.562586][ T6066] FAT-fs (loop1): Directory bread(block 65) failed [ 250.569777][ T6066] FAT-fs (loop1): Directory bread(block 66) failed [ 250.576765][ T6066] FAT-fs (loop1): Directory bread(block 67) failed [ 250.583678][ T6066] FAT-fs (loop1): Directory bread(block 68) failed [ 250.590700][ T6066] FAT-fs (loop1): Directory bread(block 69) failed [ 250.597804][ T6066] FAT-fs (loop1): Directory bread(block 70) failed [ 250.604590][ T6066] FAT-fs (loop1): Directory bread(block 71) failed [ 250.611705][ T6066] FAT-fs (loop1): Directory bread(block 72) failed [ 250.618705][ T6066] FAT-fs (loop1): Directory bread(block 73) failed [ 250.900121][ T6073] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 250.951541][ T6073] loop2: detected capacity change from 0 to 512 [ 250.961956][ T6073] EXT4-fs: user quota file already specified [ 251.374498][ T6081] can0: slcan on pts0. [ 251.561165][ T6079] can0 (unregistered): slcan off pts0. [ 252.827009][ T6096] netlink: 8 bytes leftover after parsing attributes in process `syz.3.44'. [ 253.057036][ T6102] loop2: detected capacity change from 0 to 1024 [ 253.113785][ T6106] Illegal XDP return value 4294967274 on prog (id 6) dev N/A, expect packet loss! [ 253.700146][ T6102] hfsplus: xattr searching failed [ 253.745205][ T6114] hfsplus: xattr searching failed [ 253.818808][ T6114] hfsplus: xattr searching failed [ 253.898057][ T6102] hfsplus: catalog searching failed [ 254.190095][ T4732] hfsplus: b-tree write err: -5, ino 3 [ 254.674047][ T6122] Bluetooth: (null): Too short H5 packet [ 254.958658][ T6127] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(5) [ 254.965492][ T6127] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 254.973588][ T6127] vhci_hcd vhci_hcd.0: Device attached [ 255.136417][ T6128] vhci_hcd: connection closed [ 255.138406][ T1811] vhci_hcd: stop threads [ 255.148533][ T1811] vhci_hcd: release socket [ 255.159841][ T1811] vhci_hcd: disconnect device [ 255.205625][ T5868] vhci_hcd: vhci_device speed not set [ 255.347356][ T6131] netlink: 4 bytes leftover after parsing attributes in process `syz.2.58'. [ 257.239301][ T5868] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 257.270554][ T6155] loop2: detected capacity change from 0 to 512 [ 257.331660][ T6155] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 257.345488][ T6155] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 257.457814][ T5868] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 257.471389][ T5868] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 257.481641][ T5868] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 257.491111][ T5868] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 257.519235][ T6155] EXT4-fs (loop2): 1 truncate cleaned up [ 257.527053][ T6155] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 257.567795][ T5868] usb 1-1: config 0 descriptor?? [ 258.279019][ T5806] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 258.456796][ T5868] uclogic 0003:256C:006D.0001: failed retrieving Huion firmware version: -71 [ 258.466470][ T5868] uclogic 0003:256C:006D.0001: failed probing parameters: -71 [ 258.474568][ T5868] uclogic 0003:256C:006D.0001: probe with driver uclogic failed with error -71 [ 258.593597][ T5868] usb 1-1: USB disconnect, device number 3 [ 259.836849][ T6179] process 'syz.2.76' launched './file2' with NULL argv: empty string added [ 259.837138][ T6182] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 260.329437][ T29] audit: type=1326 audit(1732852073.785:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6187 comm="syz.0.79" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73dd579 code=0x7ffc0000 [ 260.351622][ T29] audit: type=1326 audit(1732852073.785:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6187 comm="syz.0.79" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73dd579 code=0x7ffc0000 [ 260.373372][ C0] vkms_vblank_simulate: vblank timer overrun [ 260.388977][ T29] audit: type=1326 audit(1732852073.795:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6187 comm="syz.0.79" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf73dd579 code=0x7ffc0000 [ 260.411230][ T29] audit: type=1326 audit(1732852073.795:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6187 comm="syz.0.79" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73dd579 code=0x7ffc0000 [ 260.433427][ T29] audit: type=1326 audit(1732852073.815:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6187 comm="syz.0.79" exe="/root/syz-executor" sig=0 arch=40000003 syscall=296 compat=1 ip=0xf73dd579 code=0x7ffc0000 [ 260.455250][ C0] vkms_vblank_simulate: vblank timer overrun [ 260.726265][ T6192] loop3: detected capacity change from 0 to 2048 [ 260.847664][ T6192] NILFS (loop3): invalid segment: Sequence number mismatch [ 260.855787][ T6192] NILFS (loop3): trying rollback from an earlier position [ 260.973446][ T29] audit: type=1326 audit(1732852074.345:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6187 comm="syz.0.79" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73dd579 code=0x7ffc0000 [ 260.996922][ T29] audit: type=1326 audit(1732852074.345:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6187 comm="syz.0.79" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73dd579 code=0x7ffc0000 [ 261.019364][ T29] audit: type=1326 audit(1732852074.425:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6187 comm="syz.0.79" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf73dd579 code=0x7ffc0000 [ 261.041523][ T29] audit: type=1326 audit(1732852074.425:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6187 comm="syz.0.79" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73dd579 code=0x7ffc0000 [ 261.063684][ T29] audit: type=1326 audit(1732852074.425:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6187 comm="syz.0.79" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73dd579 code=0x7ffc0000 [ 261.077909][ T6196] bond0: (slave macvlan2): Error -98 calling set_mac_address [ 261.148495][ T6192] NILFS (loop3): recovery complete [ 261.166228][ T6200] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 261.941714][ T6209] capability: warning: `syz.2.86' uses 32-bit capabilities (legacy support in use) [ 262.100219][ T6211] loop8: detected capacity change from 0 to 7 [ 262.327738][ T6211] Dev loop8: unable to read RDB block 7 [ 262.333754][ T6211] loop8: AHDI p1 p3 p4 [ 262.338365][ T6211] loop8: partition table partially beyond EOD, truncated [ 262.346899][ T6211] loop8: p1 start 975770946 is beyond EOD, truncated [ 262.353862][ T6211] loop8: p3 start 6514546 is beyond EOD, truncated [ 263.216747][ T6218] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 263.223288][ T6218] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 263.402589][ T6218] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 263.561018][ T6224] netlink: 48 bytes leftover after parsing attributes in process `syz.2.91'. [ 263.708690][ T6218] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 263.715622][ T6218] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 263.848801][ T6218] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 263.926742][ T6218] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 263.933129][ T6218] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 263.946008][ T6218] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 264.008649][ T6218] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 264.015548][ T6218] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 264.050674][ T6218] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 264.077750][ T6218] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 264.084447][ T6218] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 264.137832][ T6218] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 264.439609][ T5868] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 264.899688][ T6239] loop4: detected capacity change from 0 to 512 [ 264.970284][ T5868] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 264.982875][ T5868] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 265.024118][ T5868] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 265.034080][ T5868] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 265.043202][ T5868] usb 3-1: Product: syz [ 265.047733][ T5868] usb 3-1: Manufacturer: syz [ 265.052588][ T5868] usb 3-1: SerialNumber: syz [ 265.202862][ T5816] Bluetooth: hci0: command 0x0c1a tx timeout [ 265.516304][ T6239] __quota_error: 9 callbacks suppressed [ 265.516389][ T6239] Quota error (device loop4): v2_read_file_info: Number of blocks too big for quota file size (2103296 > 6144). [ 265.535389][ T6239] EXT4-fs warning (device loop4): ext4_enable_quotas:7156: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 265.551963][ T6239] EXT4-fs (loop4): mount failed [ 265.640014][ T6229] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 265.812332][ T5816] Bluetooth: hci1: command 0x0c1a tx timeout [ 265.954671][ T5816] Bluetooth: hci2: command 0x0c1a tx timeout [ 266.035992][ T5816] Bluetooth: hci3: command 0x0c1a tx timeout [ 266.122309][ T5816] Bluetooth: hci4: command 0x0c1a tx timeout [ 266.759092][ T6256] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 266.861203][ T6260] loop4: detected capacity change from 0 to 512 [ 266.969955][ T5868] cdc_ncm 3-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 266.977259][ T5868] cdc_ncm 3-1:1.0: setting tx_max = 184 [ 267.185829][ T6260] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 267.275456][ T5816] Bluetooth: hci0: command 0x0c1a tx timeout [ 267.521791][ T6264] loop1: detected capacity change from 0 to 2048 [ 267.542976][ T5868] cdc_ncm 3-1:1.0 eth1: register 'cdc_ncm' at usb-dummy_hcd.2-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 267.603195][ T5868] usb 3-1: USB disconnect, device number 2 [ 267.636655][ T6264] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 267.865454][ T5816] Bluetooth: hci1: command 0x0c1a tx timeout [ 268.025242][ T5816] Bluetooth: hci2: command 0x0c1a tx timeout [ 268.038968][ T5817] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 268.050212][ T5868] cdc_ncm 3-1:1.0 eth1: unregister 'cdc_ncm' usb-dummy_hcd.2-1, CDC NCM (NO ZLP) [ 268.109778][ T5816] Bluetooth: hci3: command 0x0c1a tx timeout [ 268.185369][ T5816] Bluetooth: hci4: command 0x0c1a tx timeout [ 268.423123][ T5808] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 268.962807][ T6281] loop0: detected capacity change from 0 to 512 [ 269.018331][ T6281] EXT4-fs: Ignoring removed mblk_io_submit option [ 269.196014][ T6290] warning: `syz.4.114' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 269.304739][ T6281] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 269.318391][ T5816] Bluetooth: hci0: command 0x0c1a tx timeout [ 269.504703][ T6281] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=b042c118, mo2=0002] [ 269.513530][ T6281] System zones: 1-12 [ 269.563704][ T6281] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2240: inode #15: comm syz.0.113: corrupted in-inode xattr: e_value size too large [ 269.786061][ T6281] EXT4-fs error (device loop0): ext4_orphan_get:1394: comm syz.0.113: couldn't read orphan inode 15 (err -117) [ 269.821929][ T6294] loop3: detected capacity change from 0 to 2048 [ 269.839083][ T6294] EXT4-fs: Ignoring removed mblk_io_submit option [ 269.923823][ T6281] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 269.946197][ T5816] Bluetooth: hci1: command 0x0c1a tx timeout [ 270.108840][ T5816] Bluetooth: hci2: command 0x0c1a tx timeout [ 270.214112][ T5816] Bluetooth: hci3: command 0x0c1a tx timeout [ 270.268731][ T5816] Bluetooth: hci4: command 0x0c1a tx timeout [ 270.402590][ T6294] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 270.685203][ T5864] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 270.731369][ T5807] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 270.861114][ T5814] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 270.897449][ T5864] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 270.912846][ T5864] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 270.932033][ T5864] usb 5-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.00 [ 270.944018][ T5864] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 271.069914][ T5864] usb 5-1: config 0 descriptor?? [ 271.692557][ T5864] holtek_kbd 0003:04D9:A055.0002: collection stack underflow [ 271.702135][ T5864] holtek_kbd 0003:04D9:A055.0002: item 0 0 0 12 parsing failed [ 271.718897][ T5864] holtek_kbd 0003:04D9:A055.0002: probe with driver holtek_kbd failed with error -22 [ 271.886837][ T5864] usb 5-1: USB disconnect, device number 2 [ 272.396330][ T6322] loop0: detected capacity change from 0 to 1024 [ 272.609512][ T6322] hfsplus: extend alloc file! (8192,65536,366) [ 273.845207][ T5868] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 274.089679][ T5868] usb 4-1: config index 0 descriptor too short (expected 45, got 36) [ 274.099340][ T5868] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 274.111839][ T5868] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 274.123219][ T5868] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 274.134787][ T5868] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 274.148398][ T5868] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 274.157790][ T5868] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 274.196053][ T5868] usb 4-1: config 0 descriptor?? [ 274.244647][ T6348] loop0: detected capacity change from 0 to 8 [ 274.318852][ T6348] SQUASHFS error: zlib decompression failed, data probably corrupt [ 274.327294][ T6348] SQUASHFS error: Failed to read block 0x9b: -5 [ 274.333766][ T6348] SQUASHFS error: Unable to read metadata cache entry [99] [ 274.341498][ T6348] SQUASHFS error: Unable to read inode 0x127 [ 274.395126][ T6339] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 274.860598][ T5868] plantronics 0003:047F:FFFF.0003: unknown main item tag 0xd [ 274.963709][ T5868] plantronics 0003:047F:FFFF.0003: No inputs registered, leaving [ 275.038037][ T5868] plantronics 0003:047F:FFFF.0003: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 275.219342][ T5868] usb 4-1: USB disconnect, device number 2 [ 275.671568][ T6364] block nbd4: NBD_DISCONNECT [ 275.798615][ T6363] block nbd4: Disconnected due to user request. [ 275.805638][ T6363] block nbd4: shutting down sockets [ 277.240011][ T6387] loop1: detected capacity change from 0 to 8 [ 277.463193][ T6387] evm: overlay not supported [ 277.471571][ T6389] 9pnet: p9_errstr2errno: server reported unknown error ™^Pœ [ 278.173029][ T6397] loop1: detected capacity change from 0 to 256 [ 278.364684][ T6397] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fd4f, chksum : 0xff6f124c, utbl_chksum : 0xe619d30d) [ 278.569848][ T6397] exFAT-fs (loop1): start_clu is invalid cluster(0xffffffff) [ 278.945178][ T5868] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 279.126562][ T5868] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 279.138119][ T5868] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 279.148419][ T5868] usb 3-1: New USB device found, idVendor=0419, idProduct=0600, bcdDevice= 0.00 [ 279.157877][ T5868] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 279.189611][ T6412] netlink: 16 bytes leftover after parsing attributes in process `syz.1.160'. [ 279.228758][ T5868] usb 3-1: config 0 descriptor?? [ 279.780080][ T6415] netlink: 'syz.1.161': attribute type 10 has an invalid length. [ 279.891863][ T6416] netlink: 'syz.1.161': attribute type 10 has an invalid length. [ 280.001651][ T5868] samsung 0003:0419:0600.0004: unknown main item tag 0x0 [ 280.009268][ T5868] samsung 0003:0419:0600.0004: unknown main item tag 0x0 [ 280.017234][ T5868] samsung 0003:0419:0600.0004: unknown main item tag 0x0 [ 280.024609][ T5868] samsung 0003:0419:0600.0004: unknown main item tag 0x0 [ 280.032293][ T5868] samsung 0003:0419:0600.0004: unknown main item tag 0x0 [ 280.062918][ T6415] team0: Port device netdevsim3 added [ 280.084102][ T5868] samsung 0003:0419:0600.0004: hidraw0: USB HID v0.00 Device [HID 0419:0600] on usb-dummy_hcd.2-1/input0 [ 280.140546][ T5868] usb 3-1: USB disconnect, device number 3 [ 280.195767][ T6416] team0: Port device netdevsim3 removed [ 280.237570][ T6416] bond0: (slave netdevsim3): Enslaving as an active interface with an up link [ 280.574213][ T6410] loop4: detected capacity change from 0 to 16 [ 280.579154][ T1275] ieee802154 phy0 wpan0: encryption failed: -22 [ 280.587758][ T1275] ieee802154 phy1 wpan1: encryption failed: -22 [ 280.637564][ T6410] erofs (device loop4): mounted with root inode @ nid 36. [ 280.655529][ T6410] erofs (device loop4): invalid tail-packing pclustersize 0 [ 280.663278][ T6410] erofs (device loop4): invalid tail-packing pclustersize 0 [ 280.671512][ T6410] erofs (device loop4): read error -117 @ 8200 of nid 36 [ 282.870907][ T6446] loop1: detected capacity change from 0 to 64 [ 283.184207][ T6448] loop2: detected capacity change from 0 to 8 [ 283.306654][ T6453] syz.1.174: attempt to access beyond end of device [ 283.306654][ T6453] loop1: rw=0, sector=163, nr_sectors = 1 limit=64 [ 283.322155][ T6453] Buffer I/O error on dev loop1, logical block 163, async page read [ 283.331025][ T6453] syz.1.174: attempt to access beyond end of device [ 283.331025][ T6453] loop1: rw=0, sector=167, nr_sectors = 1 limit=64 [ 283.344378][ T6453] Buffer I/O error on dev loop1, logical block 167, async page read [ 283.352774][ T6453] syz.1.174: attempt to access beyond end of device [ 283.352774][ T6453] loop1: rw=0, sector=169, nr_sectors = 1 limit=64 [ 283.366248][ T6453] Buffer I/O error on dev loop1, logical block 169, async page read [ 283.383141][ T6448] SQUASHFS error: Unable to read inode 0xe3 [ 284.783703][ T6469] loop2: detected capacity change from 0 to 1024 [ 284.940807][ T6469] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 285.135759][ T6479] program syz.4.186 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 285.286986][ T4732] bond0: (slave netdevsim3): Releasing backup interface [ 285.313193][ T4732] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 285.377246][ T5806] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 285.411603][ T4732] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 285.661757][ T4732] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 285.899912][ T4732] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 286.254549][ T4732] bridge_slave_1: left allmulticast mode [ 286.260574][ T4732] bridge_slave_1: left promiscuous mode [ 286.268276][ T4732] bridge0: port 2(bridge_slave_1) entered disabled state [ 286.350657][ T4732] bridge_slave_0: left allmulticast mode [ 286.356723][ T4732] bridge_slave_0: left promiscuous mode [ 286.363342][ T4732] bridge0: port 1(bridge_slave_0) entered disabled state [ 286.756595][ T5825] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 286.768468][ T5825] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 286.778077][ T5825] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 286.791545][ T5825] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 286.811015][ T5825] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 286.826497][ T5825] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 287.381877][ T4732] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 287.456001][ T4732] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 287.475145][ T6498] loop0: detected capacity change from 0 to 128 [ 287.508116][ T4732] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 287.570608][ T4732] bond0 (unregistering): Released all slaves [ 288.324412][ T6501] sctp: failed to load transform for md5: -2 [ 288.373059][ T3932] kworker/u8:19: attempt to access beyond end of device [ 288.373059][ T3932] loop0: rw=1, sector=145, nr_sectors = 352 limit=128 [ 288.833885][ T6517] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 289.024628][ T5816] Bluetooth: hci2: command tx timeout [ 289.037811][ T6517] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 289.765266][ T4732] hsr_slave_0: left promiscuous mode [ 289.825496][ T4732] hsr_slave_1: left promiscuous mode [ 289.893126][ T4732] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 289.900978][ T4732] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 290.097583][ T4732] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 290.116382][ T4732] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 290.145940][ T4732] veth1_macvtap: left promiscuous mode [ 290.151730][ T4732] veth0_macvtap: left promiscuous mode [ 290.157712][ T4732] veth1_vlan: left promiscuous mode [ 290.163291][ T4732] veth0_vlan: left promiscuous mode [ 291.027822][ T4732] team0 (unregistering): Port device team_slave_1 removed [ 291.065675][ T5816] Bluetooth: hci2: command 0x041b tx timeout [ 291.230076][ T4732] team0 (unregistering): Port device team_slave_0 removed [ 291.873840][ T6555] syz.2.208: attempt to access beyond end of device [ 291.873840][ T6555] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 292.235979][ T6487] chnl_net:caif_netlink_parms(): no params data found [ 293.195760][ T5825] Bluetooth: hci2: command 0x041b tx timeout [ 293.445133][ T5864] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 294.025715][ T6587] loop3: detected capacity change from 0 to 2048 [ 294.101422][ T6587] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 294.102949][ T5864] usb 3-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 294.123827][ T5864] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 294.210101][ T5864] usb 3-1: config 0 descriptor?? [ 294.266402][ T6586] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 294.381266][ T6589] bond1: entered promiscuous mode [ 294.386819][ T6589] bond1: entered allmulticast mode [ 294.393268][ T6586] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 33 with error 28 [ 294.393619][ T6589] 8021q: adding VLAN 0 to HW filter on device bond1 [ 294.406604][ T6586] EXT4-fs (loop3): This should not happen!! Data will be lost [ 294.406604][ T6586] [ 294.424500][ T6586] EXT4-fs (loop3): Total free blocks count 0 [ 294.431053][ T6586] EXT4-fs (loop3): Free/Dirty block details [ 294.437687][ T6586] EXT4-fs (loop3): free_blocks=2415919104 [ 294.443828][ T6586] EXT4-fs (loop3): dirty_blocks=48 [ 294.449501][ T6586] EXT4-fs (loop3): Block reservation details [ 294.455975][ T6586] EXT4-fs (loop3): i_reserved_data_blocks=3 [ 294.546264][ T6589] bond1 (unregistering): Released all slaves [ 294.688789][ T6487] bridge0: port 1(bridge_slave_0) entered blocking state [ 294.696807][ T6487] bridge0: port 1(bridge_slave_0) entered disabled state [ 294.704560][ T6487] bridge_slave_0: entered allmulticast mode [ 294.718918][ T6487] bridge_slave_0: entered promiscuous mode [ 294.836859][ T6487] bridge0: port 2(bridge_slave_1) entered blocking state [ 294.847473][ T6487] bridge0: port 2(bridge_slave_1) entered disabled state [ 294.855459][ T6487] bridge_slave_1: entered allmulticast mode [ 294.864439][ T6487] bridge_slave_1: entered promiscuous mode [ 294.921406][ T5807] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 295.082348][ T6487] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 295.162916][ T6487] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 295.387448][ T5825] Bluetooth: hci2: command 0x041b tx timeout [ 295.880514][ T6487] team0: Port device team_slave_0 added [ 295.932487][ T6487] team0: Port device team_slave_1 added [ 296.087477][ T5864] usb 3-1: Cannot set autoneg [ 296.092999][ T5864] MOSCHIP usb-ethernet driver 3-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 296.250533][ T5864] usb 3-1: USB disconnect, device number 4 [ 296.406611][ T6487] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 296.413819][ T6487] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 296.446309][ T6487] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 296.592200][ T6487] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 296.599894][ T6487] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 296.628752][ T6487] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 297.478321][ T5825] Bluetooth: hci2: command 0x041b tx timeout [ 297.650027][ T6487] hsr_slave_0: entered promiscuous mode [ 297.762375][ T6487] hsr_slave_1: entered promiscuous mode [ 298.145187][ T6487] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 298.152994][ T6487] Cannot create hsr debugfs directory [ 300.467582][ T6487] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 300.523441][ T6487] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 300.568953][ T6487] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 300.643308][ T6487] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 300.677960][ T44] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 300.762555][ T6652] batadv_slave_1: entered promiscuous mode [ 300.792605][ T6652] team0: Device macvlan2 is up. Set it down before adding it as a team port [ 300.975254][ T44] usb 3-1: Using ep0 maxpacket: 16 [ 301.013795][ T44] usb 3-1: config 0 has an invalid interface number: 2 but max is 0 [ 301.022724][ T44] usb 3-1: config 0 has no interface number 0 [ 301.030420][ T44] usb 3-1: config 0 interface 2 altsetting 0 endpoint 0xB has an invalid bInterval 0, changing to 7 [ 301.052133][ T6651] batadv_slave_1: left promiscuous mode [ 301.121038][ T44] usb 3-1: New USB device found, idVendor=0582, idProduct=0005, bcdDevice= 0.88 [ 301.131778][ T44] usb 3-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 301.140541][ T44] usb 3-1: Product: syz [ 301.145849][ T44] usb 3-1: SerialNumber: syz [ 301.160889][ T44] usb 3-1: config 0 descriptor?? [ 301.450052][ T44] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 301.460808][ T44] usb 3-1: invalid MIDI in EP 0 [ 301.653644][ T6487] 8021q: adding VLAN 0 to HW filter on device bond0 [ 301.700365][ T6487] 8021q: adding VLAN 0 to HW filter on device team0 [ 301.763271][ T1811] bridge0: port 1(bridge_slave_0) entered blocking state [ 301.771067][ T1811] bridge0: port 1(bridge_slave_0) entered forwarding state [ 301.786608][ T1811] bridge0: port 2(bridge_slave_1) entered blocking state [ 301.794291][ T1811] bridge0: port 2(bridge_slave_1) entered forwarding state [ 302.061982][ T44] snd-usb-audio 3-1:0.2: probe with driver snd-usb-audio failed with error -22 [ 302.201920][ T44] usb 3-1: USB disconnect, device number 5 [ 302.498177][ T5988] udevd[5988]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 302.958230][ T44] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 303.145103][ T44] usb 4-1: Using ep0 maxpacket: 8 [ 303.183940][ T44] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ee [ 303.193420][ T44] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 303.202199][ T44] usb 4-1: Product: syz [ 303.206695][ T44] usb 4-1: Manufacturer: syz [ 303.211557][ T44] usb 4-1: SerialNumber: syz [ 303.326940][ T44] usb 4-1: config 0 descriptor?? [ 303.548231][ T44] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 303.886994][ T44] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 304.016032][ T44] usb 4-1: USB disconnect, device number 3 [ 304.171764][ T6487] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 304.592748][ T6487] veth0_vlan: entered promiscuous mode [ 304.626107][ T6487] veth1_vlan: entered promiscuous mode [ 304.788972][ T6487] veth0_macvtap: entered promiscuous mode [ 304.813550][ T6487] veth1_macvtap: entered promiscuous mode [ 304.950403][ T6685] loop4: detected capacity change from 0 to 128 [ 305.005619][ T6487] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 305.016549][ T6487] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 305.032250][ T6487] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 305.045820][ T6487] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 305.056666][ T6487] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 305.068156][ T6487] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 305.078441][ T6487] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 305.089309][ T6487] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 305.104153][ T6487] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 305.142580][ T6487] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 305.153937][ T6487] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 305.164114][ T6487] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 305.175033][ T6487] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 305.185245][ T6487] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 305.196025][ T6487] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 305.206567][ T6487] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 305.217378][ T6487] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 305.238984][ T6487] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 305.318961][ T6487] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 305.335841][ T6487] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 305.345353][ T6487] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 305.354381][ T6487] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 306.025239][ T5864] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 306.059369][ T6694] loop2: detected capacity change from 0 to 512 [ 306.119333][ T6694] EXT4-fs: journaled quota format not specified [ 306.217062][ T5864] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 306.228927][ T5864] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 306.239215][ T5864] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 306.252745][ T5864] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 306.446836][ T5864] usb 4-1: config 0 descriptor?? [ 306.840159][ T5867] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 306.920898][ T5864] hid (null): bogus close delimiter [ 307.096136][ T5867] usb 5-1: New USB device found, idVendor=8086, idProduct=0110, bcdDevice=bf.ad [ 307.105614][ T5867] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 307.228712][ T5867] usb 5-1: config 0 descriptor?? [ 307.259255][ T5867] gspca_main: spca508-2.14.0 probing 8086:0110 [ 307.518841][ T5867] gspca_spca508: reg_read err -32 [ 307.547466][ T5867] gspca_spca508: reg_read err -32 [ 307.583390][ T5867] gspca_spca508: reg_read err -32 [ 307.593521][ T5864] uclogic 0003:256C:006D.0005: interface is invalid, ignoring [ 307.619915][ T5867] gspca_spca508: reg_read err -32 [ 307.675743][ T5867] gspca_spca508: reg_read err -32 [ 307.848145][ T5864] usb 4-1: USB disconnect, device number 4 [ 307.901165][ T5867] gspca_spca508: reg write: error -71 [ 307.907891][ T5867] spca508 5-1:0.0: probe with driver spca508 failed with error -71 [ 307.994526][ T5867] usb 5-1: USB disconnect, device number 3 [ 309.788583][ T6737] Zero length message leads to an empty skb [ 310.956842][ T6758] netlink: 12 bytes leftover after parsing attributes in process `syz.3.258'. [ 311.117080][ T44] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 311.186437][ T6758] team0 (unregistering): Port device team_slave_0 removed [ 311.211815][ T6758] team0 (unregistering): Port device team_slave_1 removed [ 311.312266][ T44] usb 3-1: Using ep0 maxpacket: 32 [ 311.352648][ T44] usb 3-1: config 0 has no interfaces? [ 311.358633][ T44] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 311.369153][ T44] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 311.437937][ T44] usb 3-1: config 0 descriptor?? [ 311.706989][ T44] usb 3-1: USB disconnect, device number 6 [ 312.944724][ T1792] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 312.953343][ T1792] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 313.150833][ T4732] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 313.159168][ T4732] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 313.465299][ T6782] loop0: detected capacity change from 0 to 1024 [ 313.585919][ T6782] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 314.041348][ T4732] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 314.259965][ T4732] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 314.358856][ T5814] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 314.512297][ T4732] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 314.706841][ T4732] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 315.164610][ T4732] bridge_slave_1: left allmulticast mode [ 315.170731][ T4732] bridge_slave_1: left promiscuous mode [ 315.177524][ T4732] bridge0: port 2(bridge_slave_1) entered disabled state [ 315.218223][ T4732] bridge_slave_0: left allmulticast mode [ 315.224150][ T4732] bridge_slave_0: left promiscuous mode [ 315.231121][ T4732] bridge0: port 1(bridge_slave_0) entered disabled state [ 315.737545][ T4732] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 315.786855][ T4732] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 315.829377][ T4732] bond0 (unregistering): Released all slaves [ 316.370490][ T4732] hsr_slave_0: left promiscuous mode [ 316.406988][ T4732] hsr_slave_1: left promiscuous mode [ 316.456044][ T4732] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 316.463814][ T4732] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 316.504643][ T4732] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 316.513121][ T4732] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 316.648430][ T4732] veth1_macvtap: left promiscuous mode [ 316.654346][ T4732] veth0_macvtap: left promiscuous mode [ 316.660600][ T4732] veth1_vlan: left promiscuous mode [ 316.666295][ T4732] veth0_vlan: left promiscuous mode [ 316.805012][ T5816] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 316.856543][ T5816] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 316.940558][ T5816] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 316.955223][ T5816] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 316.966870][ T5816] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 316.976350][ T5816] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 317.151407][ T6813] ===================================================== [ 317.159178][ T6813] BUG: KMSAN: uninit-value in io_nop+0x549/0x8a0 [ 317.166243][ T6813] io_nop+0x549/0x8a0 [ 317.170408][ T6813] io_issue_sqe+0x420/0x2130 [ 317.175464][ T6813] io_submit_sqes+0x11bc/0x2f80 [ 317.180517][ T6813] __se_sys_io_uring_enter+0x423/0x4aa0 [ 317.186403][ T6813] __ia32_sys_io_uring_enter+0x11d/0x1a0 [ 317.192249][ T6813] ia32_sys_call+0xd59/0x4180 [ 317.197399][ T6813] __do_fast_syscall_32+0xb0/0x110 [ 317.202701][ T6813] do_fast_syscall_32+0x38/0x80 [ 317.208796][ T6813] do_SYSENTER_32+0x1f/0x30 [ 317.213480][ T6813] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 317.221028][ T6813] [ 317.223466][ T6813] Uninit was created at: [ 317.228107][ T6813] __alloc_pages_noprof+0x9a7/0xe00 [ 317.233492][ T6813] alloc_pages_mpol_noprof+0x299/0x990 [ 317.239441][ T6813] alloc_pages_noprof+0x1bf/0x1e0 [ 317.244647][ T6813] allocate_slab+0x320/0x12e0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 317.249709][ T6813] ___slab_alloc+0x12ef/0x35e0 [ 317.254695][ T6813] kmem_cache_alloc_bulk_noprof+0x486/0x1330 [ 317.261201][ T6813] __io_alloc_req_refill+0x84/0x5b0 [ 317.268801][ T6813] io_submit_sqes+0x9a2/0x2f80 [ 317.273785][ T6813] __se_sys_io_uring_enter+0x423/0x4aa0 [ 317.279785][ T6813] __ia32_sys_io_uring_enter+0x11d/0x1a0 [ 317.285803][ T6813] ia32_sys_call+0xd59/0x4180 [ 317.290724][ T6813] __do_fast_syscall_32+0xb0/0x110 [ 317.296249][ T6813] do_fast_syscall_32+0x38/0x80 [ 317.301286][ T6813] do_SYSENTER_32+0x1f/0x30 [ 317.306122][ T6813] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 317.313613][ T6813] [ 317.316637][ T6813] CPU: 1 UID: 0 PID: 6813 Comm: syz.3.268 Not tainted 6.12.0-syzkaller-10689-g7af08b57bcb9 #0 [ 317.327364][ T6813] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 317.337783][ T6813] ===================================================== [ 317.344973][ T6813] Disabling lock debugging due to kernel taint [ 317.351256][ T6813] Kernel panic - not syncing: kmsan.panic set ... [ 317.357841][ T6813] CPU: 1 UID: 0 PID: 6813 Comm: syz.3.268 Tainted: G B 6.12.0-syzkaller-10689-g7af08b57bcb9 #0 [ 317.369806][ T6813] Tainted: [B]=BAD_PAGE [ 317.374090][ T6813] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 317.384329][ T6813] Call Trace: [ 317.387759][ T6813] [ 317.390822][ T6813] dump_stack_lvl+0x216/0x2d0 [ 317.395712][ T6813] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 317.401797][ T6813] dump_stack+0x1e/0x30 [ 317.406151][ T6813] panic+0x4e2/0xcf0 [ 317.410287][ T6813] ? kmsan_get_metadata+0x91/0x1c0 [ 317.415655][ T6813] kmsan_report+0x2c7/0x2d0 [ 317.420374][ T6813] ? kmsan_get_metadata+0x13e/0x1c0 [ 317.425798][ T6813] ? kmsan_get_metadata+0x13e/0x1c0 [ 317.431216][ T6813] ? __msan_warning+0x95/0x120 [ 317.436172][ T6813] ? io_nop+0x549/0x8a0 [ 317.440489][ T6813] ? io_issue_sqe+0x420/0x2130 [ 317.445448][ T6813] ? io_submit_sqes+0x11bc/0x2f80 [ 317.450674][ T6813] ? __se_sys_io_uring_enter+0x423/0x4aa0 [ 317.456596][ T6813] ? __ia32_sys_io_uring_enter+0x11d/0x1a0 [ 317.462599][ T6813] ? ia32_sys_call+0xd59/0x4180 [ 317.467664][ T6813] ? __do_fast_syscall_32+0xb0/0x110 [ 317.473149][ T6813] ? do_fast_syscall_32+0x38/0x80 [ 317.478361][ T6813] ? do_SYSENTER_32+0x1f/0x30 [ 317.483207][ T6813] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 317.489948][ T6813] ? mod_objcg_state+0x6ee/0xe00 [ 317.495075][ T6813] ? kmsan_get_metadata+0x13e/0x1c0 [ 317.500488][ T6813] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 317.506519][ T6813] ? __memcg_slab_post_alloc_hook+0xbdd/0x1540 [ 317.512879][ T6813] ? kmsan_get_metadata+0x13e/0x1c0 [ 317.518300][ T6813] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 317.524328][ T6813] __msan_warning+0x95/0x120 [ 317.529126][ T6813] io_nop+0x549/0x8a0 [ 317.533285][ T6813] ? __pfx_io_nop+0x10/0x10 [ 317.537949][ T6813] io_issue_sqe+0x420/0x2130 [ 317.542718][ T6813] ? kmsan_get_metadata+0x13e/0x1c0 [ 317.548139][ T6813] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 317.554194][ T6813] io_submit_sqes+0x11bc/0x2f80 [ 317.559251][ T6813] ? kmsan_internal_set_shadow_origin+0x69/0x100 [ 317.565838][ T6813] __se_sys_io_uring_enter+0x423/0x4aa0 [ 317.571591][ T6813] ? futex_wait+0x2bf/0x360 [ 317.576273][ T6813] ? kmsan_internal_set_shadow_origin+0x69/0x100 [ 317.582811][ T6813] ? kmsan_get_metadata+0x13e/0x1c0 [ 317.588231][ T6813] ? do_futex+0x341/0x4a0 [ 317.592709][ T6813] ? kmsan_get_metadata+0x13e/0x1c0 [ 317.598147][ T6813] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 317.604228][ T6813] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 317.610284][ T6813] __ia32_sys_io_uring_enter+0x11d/0x1a0 [ 317.616143][ T6813] ia32_sys_call+0xd59/0x4180 [ 317.621053][ T6813] __do_fast_syscall_32+0xb0/0x110 [ 317.626345][ T6813] ? irqentry_exit+0x16/0x60 [ 317.631145][ T6813] do_fast_syscall_32+0x38/0x80 [ 317.636173][ T6813] do_SYSENTER_32+0x1f/0x30 [ 317.640836][ T6813] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 317.647412][ T6813] RIP: 0023:0xf73cd579 [ 317.651618][ T6813] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 317.671428][ T6813] RSP: 002b:00000000f50b657c EFLAGS: 00000206 ORIG_RAX: 00000000000001aa [ 317.680027][ T6813] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000002d3e [ 317.688140][ T6813] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 317.696246][ T6813] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 317.704355][ T6813] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 317.712459][ T6813] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 317.720677][ T6813] [ 317.724113][ T6813] Kernel Offset: disabled [ 317.728517][ T6813] Rebooting in 86400 seconds..