last executing test programs: 5m29.285268718s ago: executing program 0 (id=782): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a40000000160a03020000000000000000020000000900020073797a32000000000900010073797a3000000000140003800800024000000000080001400000000014000000110001"], 0x68}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000040000000000a40000000160a01080000000000000000020000000900020073797a30000000000900010073797a3000000000140003800800024000000000080001400000000014000000110001"], 0x68}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETFLOWTABLE(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f00000010c0)=ANY=[@ANYBLOB="20000000170a0152"], 0x20}}, 0x8044) 4m56.751696099s ago: executing program 0 (id=782): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a40000000160a03020000000000000000020000000900020073797a32000000000900010073797a3000000000140003800800024000000000080001400000000014000000110001"], 0x68}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000040000000000a40000000160a01080000000000000000020000000900020073797a30000000000900010073797a3000000000140003800800024000000000080001400000000014000000110001"], 0x68}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETFLOWTABLE(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f00000010c0)=ANY=[@ANYBLOB="20000000170a0152"], 0x20}}, 0x8044) 3m10.540498936s ago: executing program 0 (id=782): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a40000000160a03020000000000000000020000000900020073797a32000000000900010073797a3000000000140003800800024000000000080001400000000014000000110001"], 0x68}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000040000000000a40000000160a01080000000000000000020000000900020073797a30000000000900010073797a3000000000140003800800024000000000080001400000000014000000110001"], 0x68}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETFLOWTABLE(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f00000010c0)=ANY=[@ANYBLOB="20000000170a0152"], 0x20}}, 0x8044) 2m53.460852338s ago: executing program 0 (id=782): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a40000000160a03020000000000000000020000000900020073797a32000000000900010073797a3000000000140003800800024000000000080001400000000014000000110001"], 0x68}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000040000000000a40000000160a01080000000000000000020000000900020073797a30000000000900010073797a3000000000140003800800024000000000080001400000000014000000110001"], 0x68}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETFLOWTABLE(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f00000010c0)=ANY=[@ANYBLOB="20000000170a0152"], 0x20}}, 0x8044) 2m38.003502774s ago: executing program 5 (id=1268): syz_mount_image$btrfs(&(0x7f0000000000), &(0x7f00000015c0)='./file0\x00', 0x0, &(0x7f0000001600), 0x0, 0x559e, &(0x7f000000ac40)="$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") mkdir(&(0x7f00000020c0)='./file1\x00', 0x28c) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000100)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@userxattr}]}) chdir(&(0x7f0000000140)='./bus\x00') llistxattr(&(0x7f0000000040)='./file1\x00', &(0x7f0000000180)=""/74, 0x4a) 2m34.866115158s ago: executing program 0 (id=782): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a40000000160a03020000000000000000020000000900020073797a32000000000900010073797a3000000000140003800800024000000000080001400000000014000000110001"], 0x68}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000040000000000a40000000160a01080000000000000000020000000900020073797a30000000000900010073797a3000000000140003800800024000000000080001400000000014000000110001"], 0x68}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETFLOWTABLE(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f00000010c0)=ANY=[@ANYBLOB="20000000170a0152"], 0x20}}, 0x8044) 2m33.864447931s ago: executing program 5 (id=1289): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000002c0)='mmap_lock_acquire_returned\x00', r0}, 0x10) prctl$PR_SET_MM(0x23, 0x6, &(0x7f0000ffc000/0x4000)=nil) prctl$PR_SET_MM(0x23, 0x7, &(0x7f0000ffc000/0x4000)=nil) prlimit64(0x0, 0x2, &(0x7f0000000040), 0x0) brk(0x20ffc000) 2m33.160322118s ago: executing program 5 (id=1296): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) close(0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000001d00)=ANY=[@ANYBLOB="18020000fde2ffff00000000000000008500000036000000850000000700000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0x0, 0x0, 0x0, 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 2m31.956231515s ago: executing program 5 (id=1299): syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000140)='./file0\x00', 0x1000801, &(0x7f0000000080)=ANY=[@ANYRES16=0x0], 0x0, 0x1ca, &(0x7f00000008c0)="$eJzsmb+uEkEUxr+Z3QvcG2NiY2GjiTfxmlyW3UUNjQU+gQn4r5PIStAFDGwBJBbExsbH8BUsqCzs7Gy1UBMTCymt18xw2B35J8QQSTy/hNlvZs7MnDnAVwAYhvlv+frl5+dXt0rVUwBncIwsjX+30hhpxH/Kkfj4+l377PPx/H4CQBxvfr4N4G3ZQkT9OP599TE9q5CJvgOJq6TvQcAh/RASd0kHEHhA+omhO4ckwsB51Anrj5th4KrGU42vmuJ8fpORQB1AjvITxnxvMHxaC8OgOy8O4tk5C1Pbij/Uz56UJW4a9VPv1/2XL0aqP6uNa9TPg4RHugiBCukSsnAcJy2Jcf8Ldrq/tcn990Gcy6+LOd2DDFn8AyGMkUMl1Bc6GTk/Gb9fXPVtl4ld2u2VQZ69MPXh6O92zpAJLI1J/VNZ7hXDn2zYiX8UotazQm8wzDdbtUbQCNq+X7zhXnPd635BG9G0XeN/Oe1PR8b+BytiMyKDfi2Kul4fiLpe0venreG4lTedH3qN1P4ncXJ5uof6qOhrZ5efIegl9VOpE2tl8gzDMAzDMAzDMAzDMAzDMFtxEUL/Ckp/VMUr8G/r6F8BAAD///ckZMc=") mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f00000000c0)='./bus\x00') mount$overlay(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) 2m31.40828608s ago: executing program 5 (id=1300): syz_mount_image$udf(&(0x7f0000000f00), &(0x7f0000000f40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xa00010, &(0x7f0000001040)=ANY=[@ANYBLOB="696f636861727365743d69736f383835392d312c6e6f7374726963742c6c617374626c6f636b3d30303030303030303030303030303030303534362c6769643d666f726765742c6c6f6e6761642c6c6f6e6761642c756e64656c6574652c6d6f64653d30303030303030303030303030303030303030303030352c66696c657365743d30303030303030303030303030303030303030352c00dec7384d8361a83b0c62d0234b0736200709c52d3e3f9a6b8c5dc6bb7c76b4915fba54683d202192d9190f2b60a16fc088c41f1a3eb4a78b4ac61f8bee04ae1cf7901c792b3a8eff396e2065bc6c5f90f860a13e0bd7a8f1ff"], 0x1, 0xc43, &(0x7f00000001c0)="$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") openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0, 0x0) fcntl$setlease(r0, 0x400, 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='.\x00', 0x0, 0x0) unlinkat(r1, &(0x7f0000000280)='./file1\x00', 0x0) 2m28.793210915s ago: executing program 5 (id=1316): r0 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000200)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000100), 0x80002, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0xa2c65) ioctl$SNDCTL_DSP_CHANNELS(r1, 0xc0045006, &(0x7f0000000700)=0x7) writev(r2, &(0x7f0000000040)=[{&(0x7f0000000400)="bc", 0x1}], 0x1) 1m10.609176424s ago: executing program 1 (id=1507): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x8, &(0x7f0000000480)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f00000002c0)='./file1\x00', 0x1210086, &(0x7f0000001240)={[{@errors_continue}, {@errors_continue}, {@utf8}, {@gid}, {@iocharset={'iocharset', 0x3d, 'euc-jp'}}, {@gid}, {}, {@fmask={'fmask', 0x3d, 0x7}}]}, 0x5, 0x152f, &(0x7f0000002f80)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_sys\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000e00), 0x10f) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2000005, 0x10012, r0, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) 1m10.343559864s ago: executing program 1 (id=1510): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='fd', @ANYRESHEX, @ANYBLOB=',rootmode=0000000000000000004', @ANYRESDEC=0x0, @ANYBLOB=',group_']) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000280)={@val={0x1c, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x3d}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x2, 0xb, 0xfe, 0x700, 0x0, 0x1c, {[@window={0xe, 0x3, 0x2}, @timestamp={0x5, 0x2}, @generic={0x0, 0x2, "d58838068b91"}]}}}}}}, 0x4e) 37.372180382s ago: executing program 0 (id=782): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a40000000160a03020000000000000000020000000900020073797a32000000000900010073797a3000000000140003800800024000000000080001400000000014000000110001"], 0x68}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000040000000000a40000000160a01080000000000000000020000000900020073797a30000000000900010073797a3000000000140003800800024000000000080001400000000014000000110001"], 0x68}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETFLOWTABLE(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f00000010c0)=ANY=[@ANYBLOB="20000000170a0152"], 0x20}}, 0x8044) 6.205816829s ago: executing program 2 (id=1554): r0 = socket$kcm(0x29, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r2 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r2, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f00000006c0)={r2, r1}) recvmsg(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000380)=""/189, 0xbd}], 0x1}, 0x2) 5.531830382s ago: executing program 3 (id=1556): r0 = syz_io_uring_setup(0x24fa, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f00000001c0)=ANY=[@ANYBLOB='-'], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r0, 0x2d3e, 0x0, 0x0, 0x0, 0x0) 5.232854724s ago: executing program 1 (id=1517): socket$can_bcm(0x1d, 0x2, 0x2) socket$can_bcm(0x1d, 0x2, 0x2) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001900)=@newtfilter={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x74, r2, {}, {}, {0x7, 0x7ff9}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) 4.798076128s ago: executing program 3 (id=1558): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000000)='./file0\x00', 0x101c08a, &(0x7f0000000440)={[{@shortname_mixed}, {@iocharset={'iocharset', 0x3d, 'iso8859-15'}}, {@uni_xlateno}, {@uni_xlate}, {@uni_xlateno}, {@utf8no}, {@utf8no}, {@shortname_mixed}, {@utf8}, {@fat=@check_strict}, {@shortname_mixed}, {@utf8no}, {@nonumtail}, {@rodir}, {@fat=@umask={'umask', 0x3d, 0x7}}, {@rodir}, {@fat=@dmask={'dmask', 0x3d, 0x8000}}]}, 0x6, 0x2c6, &(0x7f0000000a40)="$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") madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_pktinfo(r0, 0x84, 0xd, &(0x7f0000000000)={0x0, @local, @private}, &(0x7f0000003040)=0x4) 4.600243223s ago: executing program 2 (id=1559): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) r1 = eventfd2(0x8, 0x80001) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000100)={0x0, r1}) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) write$eventfd(r1, &(0x7f00000000c0), 0x8) 4.538187378s ago: executing program 1 (id=1560): r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) close(r0) socket$can_j1939(0x1d, 0x2, 0x7) r1 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000000)={0x43}, 0x10) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000001540)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 4.244804987s ago: executing program 2 (id=1561): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xf, @void, @value}, 0x90) r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2) r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000040), 0x8002) write$binfmt_aout(r1, &(0x7f0000000380)=ANY=[@ANYBLOB="03070000b5"], 0xc8) write$binfmt_aout(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="03040000b500000001008aea0000feff"], 0xc8) close_range(r0, 0xffffffffffffffff, 0x0) 3.963483397s ago: executing program 1 (id=1562): r0 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(0xffffffffffffffff, 0xc2604110, &(0x7f0000000140)={0x1, [[0xcd, 0x0, 0xd, 0x2, 0x2, 0x4, 0x9, 0x9586], [0x1, 0x9, 0x3, 0x6, 0x33e1, 0x6, 0x6], [0xc92, 0xe3, 0xffffffff, 0x1, 0x0, 0x40, 0x4, 0xee5f]], '\x00', [{0xa9800000, 0x3ff, 0x0, 0x1}, {0x0, 0x7fffffff, 0x1}, {0xdf, 0x7f, 0x0, 0x1}, {0x3ff, 0x8, 0x0, 0x0, 0x0, 0x1}, {0x6, 0x3, 0x1, 0x1, 0x1}, {0x3, 0xa, 0x1, 0x0, 0x0, 0x1}, {0x4a, 0x8, 0x1, 0x1, 0x1, 0x1}, {0x400, 0x7f, 0x1, 0x1, 0x1}, {0x8, 0x5, 0x1, 0x1, 0x1, 0x1}, {0x1, 0x7, 0x1, 0x1, 0x1, 0x1}, {0xff, 0x9406, 0x1, 0x1}, {0xc, 0x6, 0x0, 0x0, 0x1, 0x1}]}) setsockopt$inet_tcp_int(r0, 0x6, 0x22, &(0x7f0000000080)=0xc0a8, 0x4) syz_usb_connect(0x0, 0x36, &(0x7f0000000100)={{0x12, 0x1, 0x0, 0x18, 0x3b, 0x92, 0x20, 0x13b1, 0x42, 0x5816, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0xe6, 0x9, 0xe, 0x0, [], [{{0x9, 0x5, 0x7}}, {{0x9, 0x5, 0xb}}]}}]}}]}}, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r1, &(0x7f00000004c0)={&(0x7f0000000180)={0xa, 0x4e21, 0x0, @mcast1={0xff, 0x9}}, 0x1c, 0x0}, 0x0) 3.889652649s ago: executing program 3 (id=1563): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) ioperm(0x0, 0x4, 0x2) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000ffd000/0x2000)=nil, 0x3) 3.611309079s ago: executing program 2 (id=1565): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0xc0a85320, &(0x7f00000003c0)={{0x80}, 'port1\x00', 0xe3, 0x1b1c07}) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r2 = dup3(r0, r1, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) read$FUSE(r2, &(0x7f00000024c0)={0x2020}, 0x2020) 3.353671736s ago: executing program 3 (id=1566): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000240)={'pimreg0\x00', 0x400}) close(0x3) 3.320261896s ago: executing program 4 (id=1567): syz_open_dev$sndctrl(&(0x7f0000000080), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r0, 0x1, 0x2e, &(0x7f0000000040)=0x5, 0x4) openat$sysfs(0xffffff9c, &(0x7f00000037c0)='/sys/kernel/notes', 0x0, 0x0) pselect6(0x40, &(0x7f00000007c0), &(0x7f0000000800)={0x7f}, 0x0, 0x0, 0x0) 3.140685872s ago: executing program 2 (id=1568): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x2000c10, &(0x7f0000000040)={[{@nobh}, {@abort}]}, 0xff, 0x23f, &(0x7f0000000540)="$eJzs3T1oLFUYBuB3Zne95t5FrtoI4g+IiAbCtRNsYqMQkBBEBBUiIjZKIsQEu8TKxkJrlVQ2QeyMlpIm2CiCVdQUsRE0WBgstFiZnURisuLPxh1xngdmZ2b3nPnOMPOe3WbYAK11Nclskk6S6SS9JMXpBnfWy9Xj3c2p3cVkMHjsh2LYrt6vnfS7kmQjyQNJdsoiL3STte2nDn7ae+Se11d7d7+7/eTURE/y2OHB/qNH78y/9sHc/WufffHdfJHZ9H93XhevGPFet0hu+jeK/UcU3aZHwF+x8Mr7X1a5vznJXcP891KmvnhvrFy308t9b/9R3ze///zWSY4VuHiDQa/6DtwYAK1TJumnKGeS1NtlOTNT/4b/qnO5fHF55eXp55dXl55reqYCLko/2X/4o0sfXjmT/287df6B/68q/48vbH1dbR91mh4NMBG31asq/9PPrN8b+YfWkX9oL/mH9pJ/aC/5h/aSf2gv+Yf2kn9oL/mH9pJ/aK/T+QcA2mVwqeknkIGmND3/AAAAAAAAAAAAAAAAAAAA521O7S6eLJOq+clbyeFDSbqj6neG/0ecXD98vfxjUTX7TVF3G8vTd4x5gDG91/DT1zd802z9T29vtv76UrLxapJr3e75+684vv/+uRv/5PPes2MW+JuKM/sPPjHZ+mf9stVs/bm95ONq/rk2av4pc8twPXr+6VfXb8z6L/085gEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACYmF8DAAD//xFQbUc=") syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x18808, 0x0, 0xf7, 0x0, 0x0) r0 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', &(0x7f0000000080), 0x18) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x800c6613, &(0x7f0000000100)=@v1={0x2, @adiantum, 0x4, @auto='\t\x00'}) r1 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x20000, 0x0) getdents64(r1, &(0x7f00000000c0)=""/101, 0x18) 2.611878925s ago: executing program 4 (id=1569): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r0, &(0x7f0000001a80)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r0, 0x0) r1 = socket$inet6(0xa, 0x3, 0x3a) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback={0xfec0ffff00000000}}, 0x1c) 2.109873034s ago: executing program 4 (id=1570): socket$inet6_sctp(0xa, 0x1, 0x84) accept(0xffffffffffffffff, 0x0, 0x0) setresuid(0xee00, 0x0, 0xee01) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) rt_sigqueueinfo(r0, 0x0, &(0x7f0000000340)={0x0, 0x0, 0xffffffbe}) pread64(0xffffffffffffffff, &(0x7f0000001880)=""/4096, 0x1000, 0x7) 2.063712632s ago: executing program 3 (id=1571): syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000040)='./file2\x00', 0x18502, &(0x7f0000001b80)=ANY=[], 0x1, 0x11f3, &(0x7f0000000980)="$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") mkdir(&(0x7f0000000000)='./control\x00', 0x0) r0 = open(&(0x7f0000022ff6)='./control\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000000100)='./control\x00', 0x0) unlinkat(r0, &(0x7f0000000140)='./control\x00', 0x200) rmdir(&(0x7f0000000040)='./control\x00') 1.71925485s ago: executing program 1 (id=1572): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x77, 0x29, 0x4, 0x20, 0x424, 0x9901, 0xc257, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x43, 0x0, 0x2, 0x31, 0x7d, 0x55, 0x0, [], [{{0x9, 0x5, 0x2, 0x2, 0x200, 0x2}}, {{0x9, 0x5, 0x82, 0x2, 0x200}}]}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000280)={0x1c, &(0x7f0000000180)={0x40, 0x5, 0x4, "df9e5fd4"}, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000400)={0x44, &(0x7f00000002c0)=ANY=[@ANYBLOB="401504"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 1.707720462s ago: executing program 2 (id=1573): syz_mount_image$vfat(&(0x7f0000003880), &(0x7f00000001c0)='./file1\x00', 0x2000800, &(0x7f00000007c0)={[{@numtail}, {@fat=@check_strict}, {@shortname_mixed}, {@uni_xlate}, {@uni_xlateno}, {@fat=@check_normal}, {@utf8no}, {@numtail}, {@shortname_win95}, {@fat=@sys_immutable}, {@shortname_winnt}, {@uni_xlate}, {@rodir}, {@fat=@flush}, {@utf8}, {@shortname_win95}]}, 0x6, 0x2a6, &(0x7f0000000440)="$eJzs3T9rW1cUAPDzbFlS20EaOpVCH7RDJ2N77SJTbDDV1KKh7dCa2oZiiYINhv6hqqeuXTr2ExQC2fIlsmTIHsgayBYPhhee9F4kO7JsBcvOn99v8fV999x77vXFxoPO+/Hj3v5OGnvHfzyKej2JhVa04iSJZixE6a84o/VPAABvspMsi6fZ0CxxSUTU55cWADBHM//9vzv3lACAOfvm2+++Wm+3N75O03ps9v4+6uT/2edfh8/X9+Ln6MZurEQjTiOyF4btzSzL+pU014zPev2jTh7Z++F+Mf/6k4hB/Go0ojnoOhu/1d5YTYfG4vt5Hu8X67fy+LVoxIcT1t9qb6xNiI9ONT7/dCz/5WjEg5/il+jGziCJUfyfq2n6Zfbvs9+/z9PL45P+Uac2GDeSLd7wjwYAAAAAAAAAAAAAAAAAAAAAgLfYclE7pxaD+j15V1F/Z/E0/2Yp0lLzbH2eYXxSTnSuPlA/i//K+joraZpmxcBRfCU+qkTldnYNAAAAAAAAAAAAAAAAAAAAr5fDX3/b3+52dw+upVFWAyg/1v+q87TGej6J6YNro7UWiuaUmWOxHJNETE0j38Q1Hctljfcuyvn/O7NOWL98zNK087meRnm79reTyWdYi7KnXl6Se+NjqnHFtaoXPcpmun7ViY8aM++9+sGg0Z8yJpJpiX3xeHhyRU9yfhfVwalODF8qGmPh5+7GTPf55d8ViWodAAAAAAAAAAAAAAAAAAAwV6MP/U54eHxB0MOt4Uv+a3NODgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABuyOj9/zM0+kXwFQZX4+DwlrcIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAO+B5AAAA///S9mga") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.stat\x00', 0x275a, 0x0) r1 = socket$unix(0x1, 0x2, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r2, 0x0) utimensat(r0, 0x0, &(0x7f0000000080)={{}, {0x77359400}}, 0x0) 1.281622492s ago: executing program 4 (id=1574): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x20) syz_mount_image$fuse(0x0, &(0x7f0000001040)='./file2\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file2\x00', &(0x7f0000000000), 0x0, &(0x7f00000002c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) chdir(&(0x7f00000000c0)='./file2\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) write$binfmt_script(r0, 0x0, 0x0) 677.692096ms ago: executing program 3 (id=1575): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_CMAP(r0, 0x4bfa, &(0x7f00000000c0)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000010001fff0000056842bb002552da15f6", @ANYRES32=0x0, @ANYBLOB="000000293c000000280012800a00010076786c616e00000018000280140013"], 0x48}}, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r1, &(0x7f0000000140), 0x4924b68, 0x0) 671.788696ms ago: executing program 4 (id=1576): socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_open_dev$media(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r0, 0x80047c05, 0x0) r1 = syz_io_uring_setup(0x4076, &(0x7f0000000240)={0x0, 0x0, 0x10100}, &(0x7f00000012c0)=0x0, &(0x7f0000000200)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x5, 0x0, 0x0}) io_uring_enter(r1, 0x567, 0x0, 0x0, 0x0, 0x0) 0s ago: executing program 4 (id=1577): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f00000003c0)=[@increfs], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x10, 0x0, &(0x7f00000002c0)=[@request_death={0x400c6313}], 0x0, 0x0, 0x0}) kernel console output (not intermixed with test programs): [ T9489] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1306'. [ 359.863268][ T4617] Bluetooth: hci0: command tx timeout [ 359.898132][ T9488] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 359.953848][ T9483] EXT4-fs (loop4): 1 truncate cleaned up [ 359.961401][ T9483] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 360.276636][ T8686] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 360.633127][ T4617] Bluetooth: hci2: command tx timeout [ 361.116095][ T1088] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 361.171277][ T1088] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 361.197865][ T1088] bond0 (unregistering): Released all slaves [ 361.573223][ T9514] syz.2.1315: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 361.663211][ T9514] CPU: 0 UID: 0 PID: 9514 Comm: syz.2.1315 Not tainted 6.12.0-rc1-syzkaller-00125-g0c559323bbaa #0 [ 361.674342][ T9514] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 361.684437][ T9514] Call Trace: [ 361.687735][ T9514] [ 361.690686][ T9514] dump_stack_lvl+0x241/0x360 [ 361.695446][ T9514] ? __pfx_dump_stack_lvl+0x10/0x10 [ 361.700680][ T9514] ? __pfx__printk+0x10/0x10 [ 361.705324][ T9514] ? cpuset_print_current_mems_allowed+0x1f/0x350 [ 361.711777][ T9514] ? srso_alias_return_thunk+0x5/0xfbef5 [ 361.717451][ T9514] ? cpuset_print_current_mems_allowed+0x31e/0x350 [ 361.723993][ T9514] warn_alloc+0x278/0x410 [ 361.728478][ T9514] ? srso_alias_return_thunk+0x5/0xfbef5 [ 361.734340][ T9514] ? stack_depot_save_flags+0x6e4/0x830 [ 361.739962][ T9514] ? __vmalloc_node_range_noprof+0x106/0x13f0 [ 361.746069][ T9514] ? __pfx_warn_alloc+0x10/0x10 [ 361.750989][ T9514] ? kasan_save_track+0x3f/0x80 [ 361.755870][ T9514] ? __kasan_kmalloc+0x98/0xb0 [ 361.760754][ T9514] ? xsk_setsockopt+0x4ea/0x950 [ 361.765687][ T9514] ? do_sock_setsockopt+0x3b1/0x720 [ 361.770970][ T9514] ? __sys_setsockopt+0x1a2/0x250 [ 361.776049][ T9514] ? __x64_sys_setsockopt+0xb5/0xd0 [ 361.781287][ T9514] ? do_syscall_64+0xf3/0x230 [ 361.785998][ T9514] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 361.792143][ T9514] __vmalloc_node_range_noprof+0x126/0x13f0 [ 361.798179][ T9514] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 361.804570][ T9514] ? srso_alias_return_thunk+0x5/0xfbef5 [ 361.810243][ T9514] ? __kasan_kmalloc+0x98/0xb0 [ 361.815050][ T9514] ? xskq_create+0x54/0x170 [ 361.819608][ T9514] vmalloc_user_noprof+0x74/0x80 [ 361.824578][ T9514] ? xskq_create+0xb6/0x170 [ 361.829156][ T9514] xskq_create+0xb6/0x170 [ 361.833552][ T9514] xsk_init_queue+0xa1/0x100 [ 361.838219][ T9514] xsk_setsockopt+0x4ea/0x950 [ 361.842959][ T9514] ? __pfx_xsk_setsockopt+0x10/0x10 [ 361.848473][ T9514] ? __pfx_aa_sk_perm+0x10/0x10 [ 361.853482][ T9514] ? __pfx_lock_acquire+0x10/0x10 [ 361.858565][ T9514] ? aa_sock_opt_perm+0x79/0x120 [ 361.863626][ T9514] ? srso_alias_return_thunk+0x5/0xfbef5 [ 361.869286][ T9514] ? __pfx_xsk_setsockopt+0x10/0x10 [ 361.874719][ T9514] do_sock_setsockopt+0x3b1/0x720 [ 361.879808][ T9514] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 361.885386][ T9514] ? __fget_files+0x29/0x470 [ 361.890013][ T9514] ? __fget_files+0x3f3/0x470 [ 361.895001][ T9514] ? __fget_files+0x29/0x470 [ 361.899670][ T9514] __sys_setsockopt+0x1a2/0x250 [ 361.904575][ T9514] __x64_sys_setsockopt+0xb5/0xd0 [ 361.909642][ T9514] do_syscall_64+0xf3/0x230 [ 361.914219][ T9514] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 361.920161][ T9514] RIP: 0033:0x7fcd4377dff9 [ 361.924618][ T9514] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 361.944864][ T9514] RSP: 002b:00007fcd431ff038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 361.954003][ T9514] RAX: ffffffffffffffda RBX: 00007fcd43935f80 RCX: 00007fcd4377dff9 [ 361.961990][ T9514] RDX: 0000000000000005 RSI: 000000000000011b RDI: 0000000000000003 [ 361.969969][ T9514] RBP: 00007fcd437f0296 R08: 0000000000000004 R09: 0000000000000000 [ 361.978414][ T9514] R10: 0000000020000840 R11: 0000000000000246 R12: 0000000000000000 [ 361.986407][ T9514] R13: 0000000000000000 R14: 00007fcd43935f80 R15: 00007ffcd04d2538 [ 361.994423][ T9514] [ 362.182399][ T4617] Bluetooth: hci0: command tx timeout [ 362.206311][ T9442] bridge0: port 1(bridge_slave_0) entered blocking state [ 362.229432][ T9442] bridge0: port 1(bridge_slave_0) entered disabled state [ 362.283404][ T9442] bridge_slave_0: entered allmulticast mode [ 362.303116][ T9514] Mem-Info: [ 362.306647][ T9514] active_anon:3733 inactive_anon:0 isolated_anon:0 [ 362.306647][ T9514] active_file:1281 inactive_file:39621 isolated_file:0 [ 362.306647][ T9514] unevictable:768 dirty:307 writeback:0 [ 362.306647][ T9514] slab_reclaimable:9856 slab_unreclaimable:102706 [ 362.306647][ T9514] mapped:26529 shmem:1421 pagetables:641 [ 362.306647][ T9514] sec_pagetables:0 bounce:0 [ 362.306647][ T9514] kernel_misc_reclaimable:0 [ 362.306647][ T9514] free:1340941 free_pcp:3357 free_cma:0 [ 362.313249][ T9442] bridge_slave_0: entered promiscuous mode [ 362.351818][ C1] vkms_vblank_simulate: vblank timer overrun [ 362.409745][ T9514] Node 0 active_anon:14932kB inactive_anon:0kB active_file:5124kB inactive_file:158408kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:106116kB dirty:1224kB writeback:0kB shmem:4148kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:10396kB pagetables:2664kB sec_pagetables:0kB all_unreclaimable? no [ 362.483644][ T9514] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:76kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 362.510786][ T9442] bridge0: port 2(bridge_slave_1) entered blocking state [ 362.549887][ T9442] bridge0: port 2(bridge_slave_1) entered disabled state [ 362.557647][ T9514] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 362.581672][ T54] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 362.584895][ C1] vkms_vblank_simulate: vblank timer overrun [ 362.601538][ T9442] bridge_slave_1: entered allmulticast mode [ 362.606210][ T54] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 362.610422][ T9514] lowmem_reserve[]: [ 362.617920][ T54] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 362.620894][ T9442] bridge_slave_1: entered promiscuous mode [ 362.624800][ T54] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 362.640683][ T9514] 0 [ 362.644629][ T54] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 362.654882][ T54] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 362.663150][ T9514] 2465 2466 0 0 [ 362.679085][ T9514] Node 0 DMA32 free:1401208kB boost:0kB min:34200kB low:42748kB high:51296kB reserved_highatomic:0KB active_anon:15044kB inactive_anon:0kB active_file:5124kB inactive_file:157572kB unevictable:1536kB writepending:1236kB present:3129332kB managed:2552504kB mlocked:0kB bounce:0kB free_pcp:13936kB local_pcp:9608kB free_cma:0kB [ 362.704235][ T5290] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 362.709637][ C1] vkms_vblank_simulate: vblank timer overrun [ 362.723419][ T4617] Bluetooth: hci2: command tx timeout [ 362.788587][ T9514] lowmem_reserve[]: 0 0 0 0 0 [ 362.830311][ T9514] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:36kB inactive_anon:0kB active_file:0kB inactive_file:840kB unevictable:0kB writepending:4kB present:1048580kB managed:876kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 362.863099][ T5290] usb 2-1: Using ep0 maxpacket: 8 [ 362.872182][ T5290] usb 2-1: config 0 has no interfaces? [ 362.883181][ T5290] usb 2-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 362.902603][ T5290] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 362.926774][ T5290] usb 2-1: config 0 descriptor?? [ 362.952120][ T9442] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 362.971756][ T9514] lowmem_reserve[]: 0 0 0 0 0 [ 362.979798][ T9514] Node 1 Normal free:3923468kB boost:0kB min:55688kB low:69608kB high:83528kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:76kB unevictable:1536kB writepending:4kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 363.006218][ T9524] loop4: detected capacity change from 0 to 4096 [ 363.032407][ T9524] ntfs3: loop4: Different NTFS sector size (2048) and media sector size (512). [ 363.043086][ T9514] lowmem_reserve[]: 0 0 0 0 0 [ 363.057256][ T1088] hsr_slave_0: left promiscuous mode [ 363.058166][ T9514] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB [ 363.064034][ T1088] hsr_slave_1: left promiscuous mode [ 363.093713][ T9514] (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 363.110246][ T9514] Node 0 DMA32: 159*4kB (UME) 65*8kB (UME) 101*16kB (UME) 267*32kB (UME) 102*64kB (ME) 77*128kB (ME) 127*256kB (UME) 69*512kB (UM) 31*1024kB (UME) 15*2048kB (UE) 304*4096kB (UM) = 1403188kB [ 363.136470][ T1088] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 363.163204][ T9514] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB [ 363.163453][ T1088] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 363.165760][ T9514] 0*256kB 0*512kB [ 363.184061][ T5292] usb 2-1: USB disconnect, device number 15 [ 363.195272][ T9514] 0*1024kB 0*2048kB 0*4096kB = 0kB [ 363.195570][ T1088] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 363.200562][ T9514] Node 1 [ 363.210806][ T1088] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 363.258700][ T1088] veth1_macvtap: left promiscuous mode [ 363.267080][ T1088] veth0_macvtap: left promiscuous mode [ 363.272708][ T1088] veth1_vlan: left promiscuous mode [ 363.273206][ T9514] Normal: 165*4kB (UE) 43*8kB (UME) 36*16kB (UME) 197*32kB (UME) 91*64kB (UME) 33*128kB (UME) 18*256kB (UME) 5*512kB (UM) 5*1024kB (UME) 3*2048kB (UE) 949*4096kB (M) = 3923468kB [ 363.307679][ T1088] veth0_vlan: left promiscuous mode [ 363.345449][ T9514] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 363.373349][ T9514] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 363.403075][ T9514] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 363.443218][ T9514] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 363.463337][ T9514] 42202 total pagecache pages [ 363.468123][ T9514] 0 pages in swap cache [ 363.472297][ T9514] Free swap = 124300kB [ 363.493084][ T9514] Total swap = 124996kB [ 363.497411][ T9514] 2097051 pages RAM [ 363.501239][ T9514] 0 pages HighMem/MovableOnly [ 363.521277][ T9514] 427075 pages reserved [ 363.532106][ T9514] 0 pages cma reserved [ 363.709286][ T9530] loop2: detected capacity change from 0 to 2048 [ 363.767269][ T9530] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 364.054206][ T8717] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 364.234630][ T4617] Bluetooth: hci0: command tx timeout [ 364.251639][ T9543] Process accounting resumed [ 364.552133][ T9528] loop4: detected capacity change from 0 to 32768 [ 364.595491][ T9528] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.1322 (9528) [ 364.713766][ T4617] Bluetooth: hci4: command tx timeout [ 364.726052][ T9528] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 364.793706][ T4617] Bluetooth: hci2: command tx timeout [ 364.843321][ T9528] BTRFS info (device loop4): using sha256 (sha256-ni) checksum algorithm [ 364.863173][ T9528] BTRFS info (device loop4): using free-space-tree [ 364.987468][ T9555] loop2: detected capacity change from 0 to 512 [ 365.006904][ T9555] EXT4-fs warning (device loop2): read_mmp_block:115: Error -117 while reading MMP block 0 [ 366.247641][ T8686] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 366.314892][ T4617] Bluetooth: hci0: command tx timeout [ 366.680012][ T1088] team0 (unregistering): Port device team_slave_1 removed [ 366.817423][ T4617] Bluetooth: hci4: command tx timeout [ 366.883136][ T4617] Bluetooth: hci2: command tx timeout [ 367.283692][ T5247] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 367.471085][ T5247] usb 5-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=e2.3d [ 367.493345][ T5247] usb 5-1: New USB device strings: Mfr=13, Product=2, SerialNumber=3 [ 367.511727][ T5247] usb 5-1: Product: syz [ 367.531177][ T5247] usb 5-1: Manufacturer: syz [ 367.559321][ T5247] usb 5-1: SerialNumber: syz [ 367.568465][ T1088] team0 (unregistering): Port device team_slave_0 removed [ 367.624414][ T5247] r8152-cfgselector 5-1: Unknown version 0x0000 [ 367.630759][ T5247] r8152-cfgselector 5-1: config 0 descriptor?? [ 367.931631][ T9602] loop2: detected capacity change from 0 to 256 [ 368.033224][ T9602] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fe7f, chksum : 0x39626d3b, utbl_chksum : 0xe619d30d) [ 368.688210][ T9606] loop2: detected capacity change from 0 to 1024 [ 368.734733][ T9606] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 368.833609][ T9606] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [ 368.873422][ T54] Bluetooth: hci4: command tx timeout [ 368.894905][ T9609] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [ 369.045865][ T8717] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 369.505156][ T9442] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 369.847692][ T5247] r8152-cfgselector 5-1: USB disconnect, device number 18 [ 369.893526][ T9442] team0: Port device team_slave_0 added [ 369.938465][ T9442] team0: Port device team_slave_1 added [ 369.993233][ T4617] Bluetooth: hci7: Opcode 0x1003 failed: -110 [ 370.242531][ T9621] loop4: detected capacity change from 0 to 4096 [ 370.262411][ T9621] ntfs3: loop4: Different NTFS sector size (4096) and media sector size (512). [ 370.292670][ T9616] loop2: detected capacity change from 0 to 32768 [ 370.537478][ T9621] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 370.790761][ T9450] chnl_net:caif_netlink_parms(): no params data found [ 370.808847][ T9442] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 370.819027][ T9442] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 370.845121][ T9442] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 370.958181][ T4617] Bluetooth: hci4: command tx timeout [ 371.202535][ T9616] XFS (loop2): Mounting V5 Filesystem ca7e2101-b8f1-4838-8e2d-7637b90620e6 [ 371.471359][ T9442] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 371.479430][ T9442] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 371.505783][ C1] vkms_vblank_simulate: vblank timer overrun [ 371.587749][ T9442] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 371.640185][ T9521] chnl_net:caif_netlink_parms(): no params data found [ 372.135413][ T9616] XFS (loop2): Ending clean mount [ 372.172072][ T9640] loop4: detected capacity change from 0 to 32768 [ 372.186946][ T9640] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.1353 (9640) [ 372.205654][ T9640] BTRFS info (device loop4): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 372.217321][ T9640] BTRFS info (device loop4): using sha256 (sha256-ni) checksum algorithm [ 372.226157][ T9640] BTRFS info (device loop4): using free-space-tree [ 372.314342][ T8717] XFS (loop2): Unmounting Filesystem ca7e2101-b8f1-4838-8e2d-7637b90620e6 [ 372.863863][ T9442] hsr_slave_0: entered promiscuous mode [ 372.884408][ T9640] BTRFS info (device loop4): balance: start -s [ 372.905962][ T9442] hsr_slave_1: entered promiscuous mode [ 372.937807][ T9640] BTRFS info (device loop4): 1 enospc errors during balance [ 373.048000][ T9640] BTRFS info (device loop4): balance: ended with status: -28 [ 373.297258][ T1088] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 373.330107][ T9450] bridge0: port 1(bridge_slave_0) entered blocking state [ 373.338111][ T9450] bridge0: port 1(bridge_slave_0) entered disabled state [ 373.346618][ T9450] bridge_slave_0: entered allmulticast mode [ 373.354366][ T9450] bridge_slave_0: entered promiscuous mode [ 373.827117][ T9678] loop2: detected capacity change from 0 to 256 [ 373.852918][ T9678] FAT-fs (loop2): Directory bread(block 1285) failed [ 373.905543][ T9678] FAT-fs (loop2): Directory bread(block 1285) failed [ 373.953229][ T9678] FAT-fs (loop2): Directory bread(block 1285) failed [ 373.960214][ T9678] FAT-fs (loop2): Directory bread(block 1285) failed [ 373.974416][ T9450] bridge0: port 2(bridge_slave_1) entered blocking state [ 374.005153][ T9450] bridge0: port 2(bridge_slave_1) entered disabled state [ 374.012565][ T9450] bridge_slave_1: entered allmulticast mode [ 374.038826][ T9450] bridge_slave_1: entered promiscuous mode [ 374.075740][ T9678] FAT-fs (loop2): Directory bread(block 1285) failed [ 374.103276][ T9678] FAT-fs (loop2): Directory bread(block 1285) failed [ 374.110052][ T9678] FAT-fs (loop2): Directory bread(block 1285) failed [ 374.172356][ T9683] FAT-fs (loop2): Directory bread(block 1285) failed [ 374.187264][ T8686] BTRFS info (device loop4): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 374.198862][ T9683] FAT-fs (loop2): Directory bread(block 1285) failed [ 374.242643][ T9678] FAT-fs (loop2): FAT read failed (blocknr 1281) [ 374.459072][ T1088] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 374.636702][ T5288] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 374.669620][ T9521] bridge0: port 1(bridge_slave_0) entered blocking state [ 374.704956][ T9521] bridge0: port 1(bridge_slave_0) entered disabled state [ 374.753407][ T9521] bridge_slave_0: entered allmulticast mode [ 374.774387][ T9521] bridge_slave_0: entered promiscuous mode [ 374.807302][ T5288] usb 2-1: New USB device found, idVendor=05f3, idProduct=0240, bcdDevice=1b.24 [ 374.821517][ T5288] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 374.876176][ T5288] usb 2-1: Product: syz [ 374.880480][ T5288] usb 2-1: Manufacturer: syz [ 374.900992][ T5288] usb 2-1: SerialNumber: syz [ 374.927281][ T5288] usb 2-1: config 0 descriptor?? [ 374.977925][ T5288] powermate 2-1:0.0: probe with driver powermate failed with error -22 [ 375.211745][ T1088] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 375.349618][ T9450] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 375.405788][ T9521] bridge0: port 2(bridge_slave_1) entered blocking state [ 375.433545][ T9521] bridge0: port 2(bridge_slave_1) entered disabled state [ 375.455066][ T9521] bridge_slave_1: entered allmulticast mode [ 375.478048][ T9521] bridge_slave_1: entered promiscuous mode [ 375.504210][ T5228] usb 2-1: USB disconnect, device number 16 [ 375.614073][ T1088] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 375.697753][ T9450] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 375.990941][ T9696] loop4: detected capacity change from 0 to 512 [ 376.034065][ T9450] team0: Port device team_slave_0 added [ 376.044820][ T9696] EXT4-fs (loop4): Test dummy encryption mode enabled [ 376.071343][ T9696] EXT4-fs (loop4): can't mount with both data=journal and dax [ 376.098597][ T9521] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 376.148817][ T9521] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 376.259482][ T9450] team0: Port device team_slave_1 added [ 376.547309][ T9521] team0: Port device team_slave_0 added [ 376.644318][ T9521] team0: Port device team_slave_1 added [ 376.685405][ T9450] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 376.715529][ T9450] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 376.809196][ T9450] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 377.146765][ T9711] loop2: detected capacity change from 0 to 1024 [ 377.281125][ T9707] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1370'. [ 377.383902][ T9707] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 377.420313][ T9450] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 377.428004][ T9450] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 377.454837][ T9450] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 377.752433][ T9521] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 377.808779][ T9521] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 377.908416][ T9521] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 377.977773][ T9521] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 378.034413][ T9521] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 378.171253][ T9521] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 378.185930][ T1260] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.203078][ T1260] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.335918][ T9729] loop2: detected capacity change from 0 to 64 [ 378.618387][ T8717] VFS: Lookup of '.¨' in minix loop2 would have caused loop [ 378.665160][ T8717] VFS: Lookup of '.¨' in minix loop2 would have caused loop [ 379.022174][ T9450] hsr_slave_0: entered promiscuous mode [ 379.030626][ T9450] hsr_slave_1: entered promiscuous mode [ 379.063341][ T9450] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 379.091444][ T9450] Cannot create hsr debugfs directory [ 379.316397][ T1088] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 379.642439][ T9521] hsr_slave_0: entered promiscuous mode [ 379.685779][ T9521] hsr_slave_1: entered promiscuous mode [ 379.739066][ T9521] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 379.757519][ T9521] Cannot create hsr debugfs directory [ 379.779950][ T9731] loop4: detected capacity change from 0 to 32768 [ 379.849415][ T1088] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 379.950221][ T9731] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 380.316771][ T8686] ocfs2: Unmounting device (7,4) on (node local) [ 380.359956][ T1088] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 381.137722][ T1088] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 381.267651][ T54] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 381.280025][ T54] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 381.290775][ T54] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 381.301949][ T54] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 381.313022][ T54] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 381.322212][ T54] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 382.512856][ T9754] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 382.539445][ T1088] bridge_slave_1: left allmulticast mode [ 382.563759][ T1088] bridge_slave_1: left promiscuous mode [ 382.585041][ T1088] bridge0: port 2(bridge_slave_1) entered disabled state [ 382.659213][ T1088] bridge_slave_0: left allmulticast mode [ 382.673524][ T1088] bridge_slave_0: left promiscuous mode [ 382.707795][ T1088] bridge0: port 1(bridge_slave_0) entered disabled state [ 382.896787][ T1088] bridge_slave_1: left allmulticast mode [ 382.913411][ T1088] bridge_slave_1: left promiscuous mode [ 382.919238][ T1088] bridge0: port 2(bridge_slave_1) entered disabled state [ 382.975498][ T1088] bridge_slave_0: left allmulticast mode [ 382.981272][ T1088] bridge_slave_0: left promiscuous mode [ 383.033178][ T1088] bridge0: port 1(bridge_slave_0) entered disabled state [ 384.844787][ T4617] Bluetooth: hci1: command tx timeout [ 385.363877][ T5239] Bluetooth: hci6: command 0x0406 tx timeout [ 386.882598][ T54] Bluetooth: hci1: command tx timeout [ 388.145862][ T1088] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 388.160695][ T1088] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 388.177788][ T1088] bond0 (unregistering): Released all slaves [ 388.483759][ T1088] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 388.507785][ T1088] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 388.521930][ T1088] bond0 (unregistering): Released all slaves [ 388.549779][ T9442] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 388.805866][ T9442] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 388.844816][ T9442] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 388.918912][ T9780] loop4: detected capacity change from 0 to 512 [ 388.958690][ T54] Bluetooth: hci1: command tx timeout [ 388.965981][ T9780] EXT4-fs: Ignoring removed nomblk_io_submit option [ 389.027967][ T9780] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 389.073659][ T9780] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=842c01c, mo2=0002] [ 389.082274][ T9780] EXT4-fs (loop4): couldn't mount RDWR because of unsupported optional features (80) [ 389.124110][ T9780] EXT4-fs (loop4): Skipping orphan cleanup due to unknown ROCOMPAT features [ 389.162639][ T9442] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 389.214660][ T9780] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 389.302166][ T9780] EXT4-fs (loop4): couldn't mount RDWR because of unsupported optional features (80) [ 389.385075][ T8686] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 389.412706][ T9789] overlayfs: failed to verify upper (127/file2, ino=704, err=-116) [ 389.422146][ T9789] overlayfs: failed to verify index dir 'upper' xattr [ 389.429636][ T9789] overlayfs: try deleting index dir or mounting with '-o index=off' to disable inodes index. [ 390.951753][ T1088] hsr_slave_0: left promiscuous mode [ 391.033249][ T54] Bluetooth: hci1: command tx timeout [ 391.043285][ T1088] hsr_slave_1: left promiscuous mode [ 391.094938][ T1088] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 391.102598][ T1088] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 391.193909][ T1088] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 391.202234][ T1088] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 391.303056][ T1088] hsr_slave_0: left promiscuous mode [ 391.309264][ T1088] hsr_slave_1: left promiscuous mode [ 391.353707][ T1088] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 391.361232][ T1088] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 391.434690][ T1088] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 391.442234][ T1088] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 391.753337][ T1088] veth1_macvtap: left promiscuous mode [ 391.758957][ T1088] veth0_macvtap: left promiscuous mode [ 391.813230][ T1088] veth1_vlan: left promiscuous mode [ 391.818626][ T1088] veth0_vlan: left promiscuous mode [ 391.914259][ T1088] veth1_macvtap: left promiscuous mode [ 391.920033][ T1088] veth0_macvtap: left promiscuous mode [ 391.953504][ T1088] veth1_vlan: left promiscuous mode [ 391.959304][ T1088] veth0_vlan: left promiscuous mode [ 397.391121][ T9803] loop4: detected capacity change from 0 to 1024 [ 397.434159][ T9803] EXT4-fs: Ignoring removed nomblk_io_submit option [ 397.463609][ T9803] EXT4-fs (loop4): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 397.504694][ T9803] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 397.857372][ T8686] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 398.189157][ T1088] team0 (unregistering): Port device team_slave_1 removed [ 398.464448][ T1088] team0 (unregistering): Port device team_slave_0 removed [ 399.364917][ T9814] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 399.372410][ T9814] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 401.790325][ T1088] team0 (unregistering): Port device team_slave_1 removed [ 401.887372][ T1088] team0 (unregistering): Port device team_slave_0 removed [ 403.160401][ T9814] hsr_slave_0: left promiscuous mode [ 403.171173][ T9814] hsr_slave_1: left promiscuous mode [ 403.368417][ T9442] 8021q: adding VLAN 0 to HW filter on device bond0 [ 403.387049][ T9442] 8021q: adding VLAN 0 to HW filter on device team0 [ 403.412665][ T9741] chnl_net:caif_netlink_parms(): no params data found [ 403.478454][ T54] Bluetooth: hci3: ISO packet for unknown connection handle 0 [ 403.629703][ T2546] bridge0: port 1(bridge_slave_0) entered blocking state [ 403.636913][ T2546] bridge0: port 1(bridge_slave_0) entered forwarding state [ 405.840512][ T1088] IPVS: stop unused estimator thread 0... [ 405.937675][ T1088] IPVS: stop unused estimator thread 0... [ 406.899405][ T1088] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 407.746745][ T1088] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 408.265981][ T1088] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 408.816941][ T1088] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 409.597217][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 409.604469][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 409.662896][ T1088] bridge_slave_1: left allmulticast mode [ 409.686976][ T1088] bridge_slave_1: left promiscuous mode [ 409.692820][ T1088] bridge0: port 2(bridge_slave_1) entered disabled state [ 409.770235][ T1088] bridge_slave_0: left allmulticast mode [ 409.776277][ T1088] bridge_slave_0: left promiscuous mode [ 409.781989][ T1088] bridge0: port 1(bridge_slave_0) entered disabled state [ 410.289433][ T9836] loop4: detected capacity change from 0 to 4096 [ 410.346851][ T9836] ntfs3: loop4: Different NTFS sector size (4096) and media sector size (512). [ 410.965166][ T5239] Bluetooth: hci3: command 0x0406 tx timeout [ 411.360973][ T1088] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 411.387310][ T1088] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 411.411375][ T1088] bond0 (unregistering): Released all slaves [ 411.431627][ T9450] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 411.474279][ T9450] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 411.541701][ T9450] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 411.587181][ T9450] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 411.791570][ T9741] bridge0: port 1(bridge_slave_0) entered blocking state [ 411.806426][ T9741] bridge0: port 1(bridge_slave_0) entered disabled state [ 411.825381][ T9741] bridge_slave_0: entered allmulticast mode [ 411.832578][ T9741] bridge_slave_0: entered promiscuous mode [ 411.893360][ T9741] bridge0: port 2(bridge_slave_1) entered blocking state [ 411.900498][ T9741] bridge0: port 2(bridge_slave_1) entered disabled state [ 411.938275][ T9741] bridge_slave_1: entered allmulticast mode [ 411.951885][ T9741] bridge_slave_1: entered promiscuous mode [ 412.149472][ T9741] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 412.180084][ T9521] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 412.198239][ T9521] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 412.229711][ T9836] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 412.262458][ T1088] hsr_slave_0: left promiscuous mode [ 412.291902][ T1088] hsr_slave_1: left promiscuous mode [ 412.317074][ T1088] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 412.344867][ T1088] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 412.383991][ T1088] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 412.413655][ T1088] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 412.471166][ T1088] veth1_macvtap: left promiscuous mode [ 412.512612][ T1088] veth0_macvtap: left promiscuous mode [ 412.523333][ T1088] veth1_vlan: left promiscuous mode [ 412.528693][ T1088] veth0_vlan: left promiscuous mode [ 413.629663][ C1] vkms_vblank_simulate: vblank timer overrun [ 413.978980][ C1] vkms_vblank_simulate: vblank timer overrun [ 414.183570][ T9862] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 414.813187][ T5247] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 414.934063][ T9859] loop4: detected capacity change from 0 to 32768 [ 415.041027][ T5247] usb 2-1: Using ep0 maxpacket: 8 [ 415.049286][ T5247] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 415.070031][ T5247] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 415.121508][ T5247] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 255 [ 415.142189][ T5247] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 415.193203][ T5247] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 415.229035][ T5247] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 415.368102][ T9859] XFS (loop4): Mounting V5 Filesystem bc2378ed-6193-40d5-9d59-7ebcb787b415 [ 415.483807][ T5247] usb 2-1: GET_CAPABILITIES returned 0 [ 415.499903][ T5247] usbtmc 2-1:16.0: can't read capabilities [ 415.564937][ T9859] XFS (loop4): Ending clean mount [ 415.687898][ T5247] usb 2-1: USB disconnect, device number 17 [ 415.715217][ T1088] team0 (unregistering): Port device team_slave_1 removed [ 415.857975][ T1088] team0 (unregistering): Port device team_slave_0 removed [ 415.947234][ C1] vkms_vblank_simulate: vblank timer overrun [ 416.083729][ T5239] Bluetooth: hci0: command 0x0c1a tx timeout [ 416.129099][ C1] vkms_vblank_simulate: vblank timer overrun [ 418.094065][ T54] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 418.136338][ T54] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 418.151369][ T54] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 418.160642][ T54] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 418.169272][ T54] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 418.180519][ T54] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 418.715926][ T9741] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 418.746439][ T9521] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 418.842663][ T5239] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 418.847438][ T9521] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 418.856027][ T5239] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 418.865635][ T5239] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 418.903380][ T5239] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 418.918967][ T5239] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 418.952952][ T5239] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 419.619354][ T9741] team0: Port device team_slave_0 added [ 419.636058][ T9741] team0: Port device team_slave_1 added [ 419.927578][ T9741] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 419.943146][ T9741] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 419.988461][ T9741] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 420.053175][ T9902] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1444'. [ 420.076046][ T9902] (unnamed net_device) (uninitialized): Invalid ad_actor_system MAC address. [ 420.093177][ T9902] (unnamed net_device) (uninitialized): option ad_actor_system: invalid value (1) [ 420.195310][ T9741] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 420.202421][ T9741] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 420.237813][ T54] Bluetooth: hci7: command tx timeout [ 420.248485][ T9741] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 420.305632][ T9741] hsr_slave_0: entered promiscuous mode [ 420.312527][ T9741] hsr_slave_1: entered promiscuous mode [ 420.320596][ T9741] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 420.329132][ T9741] Cannot create hsr debugfs directory [ 421.029733][ T8686] XFS (loop4): Unmounting Filesystem bc2378ed-6193-40d5-9d59-7ebcb787b415 [ 421.199618][ T54] Bluetooth: hci8: command tx timeout [ 421.411135][ T9886] chnl_net:caif_netlink_parms(): no params data found [ 421.567012][ T9894] chnl_net:caif_netlink_parms(): no params data found [ 421.663319][ T5291] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 421.895043][ T5291] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 421.917384][ T9521] 8021q: adding VLAN 0 to HW filter on device bond0 [ 421.926133][ T5291] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 421.978439][ T5291] usb 2-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 422.007351][ T5291] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 422.062799][ T5291] usb 2-1: config 0 descriptor?? [ 422.313286][ T54] Bluetooth: hci7: command tx timeout [ 422.479171][ T5291] cm6533_jd 0003:0D8C:0022.0010: unknown main item tag 0x0 [ 422.498284][ T5291] cm6533_jd 0003:0D8C:0022.0010: unknown main item tag 0x0 [ 422.535167][ T5291] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0D8C:0022.0010/input/input15 [ 422.602872][ T5291] cm6533_jd 0003:0D8C:0022.0010: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.1-1/input0 [ 422.693804][ T5291] usb 2-1: USB disconnect, device number 18 [ 422.923904][ T5239] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 422.975773][ T5239] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 423.032737][ T5239] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 423.041682][ T9886] bridge0: port 1(bridge_slave_0) entered blocking state [ 423.049819][ T9886] bridge0: port 1(bridge_slave_0) entered disabled state [ 423.057290][ T9886] bridge_slave_0: entered allmulticast mode [ 423.067540][ T9886] bridge_slave_0: entered promiscuous mode [ 423.080174][ T9886] bridge0: port 2(bridge_slave_1) entered blocking state [ 423.087487][ T9886] bridge0: port 2(bridge_slave_1) entered disabled state [ 423.095023][ T9886] bridge_slave_1: entered allmulticast mode [ 423.102181][ T9886] bridge_slave_1: entered promiscuous mode [ 423.110246][ T5239] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 423.125158][ T5239] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 423.134130][ T5239] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 423.142798][ T9894] bridge0: port 1(bridge_slave_0) entered blocking state [ 423.174297][ T9894] bridge0: port 1(bridge_slave_0) entered disabled state [ 423.181708][ T9894] bridge_slave_0: entered allmulticast mode [ 423.199401][ T9894] bridge_slave_0: entered promiscuous mode [ 423.290430][ T54] Bluetooth: hci8: command tx timeout [ 423.354940][ T9934] loop4: detected capacity change from 0 to 16 [ 423.362785][ T9934] MTD: Attempt to mount non-MTD device "/dev/loop4" [ 423.546736][ T9886] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 423.558624][ T9894] bridge0: port 2(bridge_slave_1) entered blocking state [ 423.568362][ T9894] bridge0: port 2(bridge_slave_1) entered disabled state [ 423.576250][ T9894] bridge_slave_1: entered allmulticast mode [ 423.594788][ T9894] bridge_slave_1: entered promiscuous mode [ 423.835875][ T9886] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 424.190095][ T9886] team0: Port device team_slave_0 added [ 424.212289][ T9894] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 424.267283][ T9886] team0: Port device team_slave_1 added [ 424.372021][ T9894] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 424.393286][ T5239] Bluetooth: hci7: command tx timeout [ 424.580295][ T9886] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 424.598951][ T9886] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 424.651919][ T9886] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 424.871114][ T9894] team0: Port device team_slave_0 added [ 424.934433][ T9894] team0: Port device team_slave_1 added [ 425.033583][ T9886] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 425.061306][ T9886] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 425.149600][ T9886] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 425.317963][ T9894] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 425.333088][ T9894] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 425.371655][ T5239] Bluetooth: hci8: command tx timeout [ 425.371757][ T54] Bluetooth: hci0: command tx timeout [ 425.398099][ T9894] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 425.456884][ T9741] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 425.589615][ T9894] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 425.623160][ T9894] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 425.703091][ T9894] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 425.773883][ T9741] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 425.792032][ T9967] loop4: detected capacity change from 0 to 32768 [ 425.875410][ T9886] hsr_slave_0: entered promiscuous mode [ 425.896441][ T9886] hsr_slave_1: entered promiscuous mode [ 425.904631][ T9886] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 425.933351][ T9967] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 425.953299][ T9886] Cannot create hsr debugfs directory [ 426.102575][ T9894] hsr_slave_0: entered promiscuous mode [ 426.111563][ T9894] hsr_slave_1: entered promiscuous mode [ 426.187605][ T9967] XFS (loop4): Ending clean mount [ 426.219562][ T9967] XFS (loop4): Metadata CRC error detected at xfs_rmapbt_read_verify+0x41/0xd0, xfs_rmapbt block 0x14 [ 426.232578][ T9967] XFS (loop4): Unmount and run xfs_repair [ 426.238973][ T9967] XFS (loop4): First 128 bytes of corrupted metadata buffer: [ 426.247027][ T9967] 00000000: 52 4d 42 33 00 00 00 0c ff ff ff ff ff ff ff ff RMB3............ [ 426.257235][ T9967] 00000010: 00 a7 50 00 00 00 00 14 00 00 00 01 00 00 00 80 ..P............. [ 426.267787][ T9967] 00000020: bf dc 47 fc 10 d8 4e ed a5 62 11 a8 31 b3 f7 91 ..G...N..b..1... [ 426.277995][ T9967] 00000030: 00 00 00 00 5b af 3b 1d 00 00 00 00 00 00 00 01 ....[.;......... [ 426.292727][ T9967] 00000040: ff ff ff ff ff ff ff fd 00 00 00 00 00 00 00 00 ................ [ 426.308934][ T9967] 00000050: 00 00 00 01 00 00 00 02 ff ff ff ff ff ff ff fb ................ [ 426.320785][ T9967] 00000060: 00 00 00 00 00 00 00 00 00 00 00 03 00 00 00 02 ................ [ 426.330537][ T9967] 00000070: ff ff ff ff ff ff ff fa 00 00 00 00 00 00 00 00 ................ [ 426.340416][ T9967] XFS (loop4): metadata I/O error in "xfs_btree_read_buf_block+0x36f/0x5b0" at daddr 0x14 len 4 error 74 [ 426.361166][ T9967] XFS (loop4): Metadata I/O Error (0x1) detected at xfs_trans_read_buf_map+0x663/0xad0 (fs/xfs/xfs_trans_buf.c:296). Shutting down filesystem. [ 426.378415][ T9894] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 426.388100][ T9894] Cannot create hsr debugfs directory [ 426.432283][ T9741] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 426.458116][ T9967] XFS (loop4): Please unmount the filesystem and rectify the problem(s) [ 426.473155][ T54] Bluetooth: hci7: command tx timeout [ 426.485754][ T5228] loop4: writeback error on inode 9286, offset 0, sector 18692 [ 426.540206][ T9741] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 426.713349][ T8686] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 426.775283][ T9741] 8021q: adding VLAN 0 to HW filter on device bond0 [ 427.228951][ T9741] 8021q: adding VLAN 0 to HW filter on device team0 [ 427.428817][ T2546] bridge0: port 1(bridge_slave_0) entered blocking state [ 427.436075][ T2546] bridge0: port 1(bridge_slave_0) entered forwarding state [ 427.451625][ T54] Bluetooth: hci0: command tx timeout [ 427.459315][ T5239] Bluetooth: hci8: command tx timeout [ 427.504697][ T2546] bridge0: port 2(bridge_slave_1) entered blocking state [ 427.511920][ T2546] bridge0: port 2(bridge_slave_1) entered forwarding state [ 427.651184][ T9741] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 427.667580][ T9741] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 427.799420][ T9929] chnl_net:caif_netlink_parms(): no params data found [ 427.917418][ T1088] bridge_slave_1: left allmulticast mode [ 427.924370][ T1088] bridge_slave_1: left promiscuous mode [ 427.948414][ T1088] bridge0: port 2(bridge_slave_1) entered disabled state [ 427.977624][ T1088] bridge_slave_0: left allmulticast mode [ 427.993404][ T1088] bridge_slave_0: left promiscuous mode [ 428.015696][ T1088] bridge0: port 1(bridge_slave_0) entered disabled state [ 428.061181][ T1088] bridge_slave_1: left allmulticast mode [ 428.084480][ T1088] bridge_slave_1: left promiscuous mode [ 428.102504][ T1088] bridge0: port 2(bridge_slave_1) entered disabled state [ 428.161187][ T1088] bridge_slave_0: left allmulticast mode [ 428.190624][ T1088] bridge_slave_0: left promiscuous mode [ 428.234037][ T1088] bridge0: port 1(bridge_slave_0) entered disabled state [ 429.594986][ T54] Bluetooth: hci0: command tx timeout [ 429.627014][T10010] loop4: detected capacity change from 0 to 32768 [ 429.650315][T10010] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.1479 (10010) [ 429.779621][T10010] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 429.804152][T10010] BTRFS info (device loop4): using sha256 (sha256-ni) checksum algorithm [ 429.812721][T10010] BTRFS info (device loop4): using free-space-tree [ 430.229987][ T1088] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 430.296606][ T1088] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 430.334919][ T1088] bond0 (unregistering): Released all slaves [ 430.355189][ T1088] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 430.458845][ T1088] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 430.489625][ T1088] bond0 (unregistering): Released all slaves [ 430.702124][ T8686] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 430.803609][T10005] macvlan0: entered allmulticast mode [ 430.809059][T10005] veth1_vlan: entered allmulticast mode [ 430.908856][T10008] veth1_vlan: left allmulticast mode [ 430.989609][T10008] macvlan0 (unregistering): left allmulticast mode [ 431.077163][T10033] loop4: detected capacity change from 0 to 512 [ 431.084505][T10033] EXT4-fs: Ignoring removed mblk_io_submit option [ 431.114646][T10033] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 431.181654][T10033] EXT4-fs (loop4): warning: maximal mount count reached, running e2fsck is recommended [ 431.194150][ T1088] hsr_slave_0: left promiscuous mode [ 431.218633][T10033] EXT4-fs error (device loop4): ext4_orphan_get:1388: comm syz.4.1480: inode #15: comm syz.4.1480: iget: illegal inode # [ 431.236074][ T1088] hsr_slave_1: left promiscuous mode [ 431.241991][T10033] EXT4-fs (loop4): Remounting filesystem read-only [ 431.254149][T10033] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 431.346431][ T1088] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 431.380862][T10039] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 431.393818][ T1088] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 431.443454][ T1088] hsr_slave_0: left promiscuous mode [ 431.473977][ T1088] hsr_slave_1: left promiscuous mode [ 431.503438][ T1088] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 431.520688][ T1088] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 431.674174][ T54] Bluetooth: hci0: command tx timeout [ 431.931711][ T8686] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 432.264916][ T1088] team0 (unregistering): Port device team_slave_1 removed [ 432.404458][ T1088] team0 (unregistering): Port device team_slave_0 removed [ 433.473415][T10065] loop4: detected capacity change from 0 to 4096 [ 433.488943][T10065] ntfs3: loop4: Different NTFS sector size (4096) and media sector size (512). [ 434.842087][ T1088] team0 (unregistering): Port device team_slave_1 removed [ 434.966470][ T1088] team0 (unregistering): Port device team_slave_0 removed [ 435.607647][ T9741] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 435.661920][T10081] netlink: 'syz.4.1499': attribute type 4 has an invalid length. [ 435.737141][ T9929] bridge0: port 1(bridge_slave_0) entered blocking state [ 435.759872][ T9929] bridge0: port 1(bridge_slave_0) entered disabled state [ 435.779338][ T9929] bridge_slave_0: entered allmulticast mode [ 435.790498][ T9929] bridge_slave_0: entered promiscuous mode [ 435.852021][ T9929] bridge0: port 2(bridge_slave_1) entered blocking state [ 435.864108][ T9929] bridge0: port 2(bridge_slave_1) entered disabled state [ 435.912814][ T9929] bridge_slave_1: entered allmulticast mode [ 435.922218][ T9929] bridge_slave_1: entered promiscuous mode [ 436.010719][ T9929] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 436.145303][ T9929] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 436.248402][T10094] ptrace attach of "./syz-executor exec"[8686] was attempted by " [ 436.305599][ T9741] veth0_vlan: entered promiscuous mode [ 436.601508][ T9929] team0: Port device team_slave_0 added [ 436.611613][ T9929] team0: Port device team_slave_1 added [ 436.645768][ T9741] veth1_vlan: entered promiscuous mode [ 436.697846][ T9929] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 436.737329][ T9929] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 436.779409][ T9929] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 436.849318][ T9929] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 436.864254][ T9929] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 436.892919][ T9929] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 436.972416][ T9741] veth0_macvtap: entered promiscuous mode [ 437.118948][ T9929] hsr_slave_0: entered promiscuous mode [ 437.135223][ T9929] hsr_slave_1: entered promiscuous mode [ 437.152848][ T9741] veth1_macvtap: entered promiscuous mode [ 437.284629][ T9741] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 437.309196][ T9741] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 437.330590][ T9741] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 437.350904][ T9741] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 437.378707][ T9741] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 437.399168][ T9741] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 437.458039][ T9741] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 437.680467][ T9886] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 437.705775][ T9741] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 437.720262][ T9741] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 437.740593][ T9741] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 437.754697][ T9741] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 437.823208][ T9741] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 437.834645][ T9741] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 437.854924][ T9741] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 438.046340][ T9886] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 438.060104][ T9741] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 438.078865][ T9741] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 438.104741][ T9741] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 438.122632][ T9741] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 438.162216][ T9886] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 438.197760][ T9886] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 438.407473][ T9894] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 438.431923][ T9894] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 438.564597][ T9894] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 438.585597][ T9894] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 438.882904][ T2902] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 438.912328][ T2902] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 438.976026][ T2902] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 438.993963][ T2902] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 439.006605][ T9886] 8021q: adding VLAN 0 to HW filter on device bond0 [ 439.096369][ T9894] 8021q: adding VLAN 0 to HW filter on device bond0 [ 439.153630][ T9886] 8021q: adding VLAN 0 to HW filter on device team0 [ 439.208138][ T2902] bridge0: port 1(bridge_slave_0) entered blocking state [ 439.215356][ T2902] bridge0: port 1(bridge_slave_0) entered forwarding state [ 439.372259][ T9894] 8021q: adding VLAN 0 to HW filter on device team0 [ 439.466116][ T2546] bridge0: port 2(bridge_slave_1) entered blocking state [ 439.473430][ T2546] bridge0: port 2(bridge_slave_1) entered forwarding state [ 439.550323][ T1088] bridge_slave_1: left allmulticast mode [ 439.573232][ T1088] bridge_slave_1: left promiscuous mode [ 439.579021][ T1088] bridge0: port 2(bridge_slave_1) entered disabled state [ 439.626084][ T1260] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.632874][ T1260] ieee802154 phy1 wpan1: encryption failed: -22 [ 439.713632][ T1088] bridge_slave_0: left allmulticast mode [ 439.719570][ T1088] bridge_slave_0: left promiscuous mode [ 439.725820][ T1088] bridge0: port 1(bridge_slave_0) entered disabled state [ 439.813863][T10105] loop2: detected capacity change from 0 to 1024 [ 439.939454][T10108] loop4: detected capacity change from 0 to 256 [ 440.065164][ T12] hfsplus: b-tree write err: -5, ino 4 [ 441.258541][T10129] loop2: detected capacity change from 0 to 256 [ 441.316458][T10129] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x1a9973fb, utbl_chksum : 0xe619d30d) [ 442.414697][ T1088] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 442.463510][ T1088] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 442.507641][ T1088] bond0 (unregistering): Released all slaves [ 442.625984][ T2546] bridge0: port 1(bridge_slave_0) entered blocking state [ 442.633284][ T2546] bridge0: port 1(bridge_slave_0) entered forwarding state [ 457.163160][ T1088] hsr_slave_0: left promiscuous mode [ 457.442900][ T1088] hsr_slave_1: left promiscuous mode [ 457.623853][ T1088] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 457.714104][ T1088] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 459.359603][ T1088] team0 (unregistering): Port device team_slave_1 removed [ 459.695753][ T1088] team0 (unregistering): Port device team_slave_0 removed [ 461.064140][ T5239] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 461.079444][ T5239] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 461.095882][ T5239] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 461.123273][ T5239] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 461.142710][ T4617] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 461.149702][ T5236] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 461.152869][ T5236] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 461.158041][ T4617] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 461.196562][ T54] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 461.223847][ T54] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 461.232574][ T54] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 461.241041][ T54] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 461.294311][ T54] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 461.317331][ T54] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 461.335830][ T54] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 461.347213][ T54] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 461.364051][ T54] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 461.373285][ T54] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 461.618546][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 461.625742][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 461.918940][ T9894] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 462.054464][ T9929] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 462.177668][ T9929] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 462.222315][ T9929] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 462.333881][ T9929] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 462.613896][ T9886] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 462.729117][ T1088] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 462.817119][T10139] chnl_net:caif_netlink_parms(): no params data found [ 462.847350][T10137] chnl_net:caif_netlink_parms(): no params data found [ 462.950711][ T1088] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 462.999343][T10135] chnl_net:caif_netlink_parms(): no params data found [ 463.062045][ T9929] 8021q: adding VLAN 0 to HW filter on device bond0 [ 463.084052][ T9929] 8021q: adding VLAN 0 to HW filter on device team0 [ 463.130974][ T9894] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 463.202425][ T1088] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 463.237863][ T8658] bridge0: port 1(bridge_slave_0) entered blocking state [ 463.245060][ T8658] bridge0: port 1(bridge_slave_0) entered forwarding state [ 463.277368][ T54] Bluetooth: hci2: command tx timeout [ 463.358327][ T54] Bluetooth: hci1: command tx timeout [ 463.416443][ T1088] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 463.436729][ T54] Bluetooth: hci3: command tx timeout [ 463.526329][T10137] bridge0: port 1(bridge_slave_0) entered blocking state [ 463.534265][T10137] bridge0: port 1(bridge_slave_0) entered disabled state [ 463.541666][T10137] bridge_slave_0: entered allmulticast mode [ 463.574853][T10137] bridge_slave_0: entered promiscuous mode [ 463.605329][T10137] bridge0: port 2(bridge_slave_1) entered blocking state [ 463.612625][T10137] bridge0: port 2(bridge_slave_1) entered disabled state [ 463.633421][T10137] bridge_slave_1: entered allmulticast mode [ 463.644099][T10137] bridge_slave_1: entered promiscuous mode [ 463.724192][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 463.731356][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 463.891046][T10137] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 464.009900][T10137] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 464.031603][T10135] bridge0: port 1(bridge_slave_0) entered blocking state [ 464.047030][T10135] bridge0: port 1(bridge_slave_0) entered disabled state [ 464.061594][T10135] bridge_slave_0: entered allmulticast mode [ 464.074577][T10135] bridge_slave_0: entered promiscuous mode [ 464.106088][T10135] bridge0: port 2(bridge_slave_1) entered blocking state [ 464.123960][T10135] bridge0: port 2(bridge_slave_1) entered disabled state [ 464.131310][T10135] bridge_slave_1: entered allmulticast mode [ 464.150481][T10135] bridge_slave_1: entered promiscuous mode [ 464.159272][T10139] bridge0: port 1(bridge_slave_0) entered blocking state [ 464.172435][T10139] bridge0: port 1(bridge_slave_0) entered disabled state [ 464.180174][T10139] bridge_slave_0: entered allmulticast mode [ 464.187706][T10139] bridge_slave_0: entered promiscuous mode [ 464.196888][T10139] bridge0: port 2(bridge_slave_1) entered blocking state [ 464.204373][T10139] bridge0: port 2(bridge_slave_1) entered disabled state [ 464.212553][T10139] bridge_slave_1: entered allmulticast mode [ 464.219846][T10139] bridge_slave_1: entered promiscuous mode [ 464.291713][T10139] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 464.305009][T10139] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 464.351358][ T9886] veth0_vlan: entered promiscuous mode [ 464.474716][T10137] team0: Port device team_slave_0 added [ 464.530420][T10139] team0: Port device team_slave_0 added [ 464.540177][T10139] team0: Port device team_slave_1 added [ 464.572938][T10137] team0: Port device team_slave_1 added [ 464.597628][T10135] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 464.627238][T10135] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 464.695314][ T9886] veth1_vlan: entered promiscuous mode [ 464.776255][T10139] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 464.793982][T10139] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 464.843291][T10139] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 464.868753][T10139] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 464.888886][T10139] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 464.933072][T10139] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 465.108113][ T1088] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 465.196435][T10137] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 465.204462][T10137] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 465.239282][T10137] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 465.298385][T10135] team0: Port device team_slave_0 added [ 465.315869][T10135] team0: Port device team_slave_1 added [ 465.357846][ T54] Bluetooth: hci2: command tx timeout [ 465.433570][ T54] Bluetooth: hci1: command tx timeout [ 465.444422][ T1088] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 465.461372][T10137] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 465.470419][T10137] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 465.498739][T10137] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 465.516106][ T54] Bluetooth: hci3: command tx timeout [ 465.564386][T10135] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 465.571482][T10135] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 465.599217][T10135] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 465.618162][ T9894] veth0_vlan: entered promiscuous mode [ 465.686752][ T1088] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 465.746204][ T9894] veth1_vlan: entered promiscuous mode [ 465.755505][T10135] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 465.762669][T10135] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 465.791243][T10135] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 465.849206][ T1088] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 465.995248][T10137] hsr_slave_0: entered promiscuous mode [ 466.013618][T10137] hsr_slave_1: entered promiscuous mode [ 466.023227][T10137] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 466.033087][T10137] Cannot create hsr debugfs directory [ 466.046170][ T9886] veth0_macvtap: entered promiscuous mode [ 466.111205][T10139] hsr_slave_0: entered promiscuous mode [ 466.118175][T10139] hsr_slave_1: entered promiscuous mode [ 466.125675][T10139] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 466.134591][T10139] Cannot create hsr debugfs directory [ 466.160839][T10135] hsr_slave_0: entered promiscuous mode [ 466.167606][T10135] hsr_slave_1: entered promiscuous mode [ 466.174593][T10135] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 466.182188][T10135] Cannot create hsr debugfs directory [ 466.271278][ T9894] veth0_macvtap: entered promiscuous mode [ 466.326069][ T9886] veth1_macvtap: entered promiscuous mode [ 466.401623][ T9894] veth1_macvtap: entered promiscuous mode [ 466.429722][ T9886] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 466.440618][ T9886] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 466.451159][ T9886] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 466.464573][ T9886] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 466.476084][ T9886] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 466.487088][ T9886] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 466.504459][ T9886] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 466.523382][ T9886] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 466.535358][ T9886] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 466.545445][ T9886] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 466.556381][ T9886] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 466.567025][ T9886] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 466.578206][ T9886] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 466.588399][ T9886] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 466.599064][ T9886] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 466.608983][ T9886] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 466.619778][ T9886] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 466.634506][ T9886] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 466.780590][ T9886] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 466.792436][ T9886] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 466.819074][ T9886] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 466.833347][ T9886] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 466.983460][ T9894] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 467.009339][ T9894] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 467.033524][ T9894] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 467.053033][ T9894] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 467.073047][ T9894] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 467.093069][ T9894] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 467.102942][ T9894] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 467.118621][ T9894] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 467.129155][ T9894] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 467.139911][ T9894] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 467.152445][ T9894] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 467.222238][ T1088] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 467.410148][ T1088] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 467.433547][ T54] Bluetooth: hci2: command tx timeout [ 467.463097][ T9894] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 467.483036][ T9894] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 467.503417][ T9894] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 467.513651][ T54] Bluetooth: hci1: command tx timeout [ 467.533136][ T9894] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 467.553043][ T9894] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 467.577803][ T9894] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 467.593739][ T54] Bluetooth: hci3: command tx timeout [ 467.613182][ T9894] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 467.633011][ T9894] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 467.642933][ T9894] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 467.673630][ T9894] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 467.696168][ T9894] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 467.947108][ T1088] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 468.073810][ T1088] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 468.205174][ T9894] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 468.214661][ T9894] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 468.224013][ T9894] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 468.232733][ T9894] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 468.249448][ T9929] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 468.524383][ T8658] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 468.532251][ T8658] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 468.689873][ T8658] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 468.705372][ T8658] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 468.834011][ T2902] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 468.841938][ T2902] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 468.893822][ T1088] bridge_slave_1: left allmulticast mode [ 468.899558][ T1088] bridge_slave_1: left promiscuous mode [ 468.914006][ T1088] bridge0: port 2(bridge_slave_1) entered disabled state [ 468.962181][ T1088] bridge_slave_0: left allmulticast mode [ 468.973501][ T1088] bridge_slave_0: left promiscuous mode [ 468.983565][ T1088] bridge0: port 1(bridge_slave_0) entered disabled state [ 469.039151][ T1088] bridge_slave_1: left allmulticast mode [ 469.053051][ T1088] bridge_slave_1: left promiscuous mode [ 469.058936][ T1088] bridge0: port 2(bridge_slave_1) entered disabled state [ 469.082293][ T1088] bridge_slave_0: left allmulticast mode [ 469.093573][ T1088] bridge_slave_0: left promiscuous mode [ 469.099340][ T1088] bridge0: port 1(bridge_slave_0) entered disabled state [ 469.132134][ T1088] bridge_slave_1: left allmulticast mode [ 469.150684][ T1088] bridge_slave_1: left promiscuous mode [ 469.161567][ T1088] bridge0: port 2(bridge_slave_1) entered disabled state [ 469.194775][ T1088] bridge_slave_0: left allmulticast mode [ 469.200533][ T1088] bridge_slave_0: left promiscuous mode [ 469.213198][ T1088] bridge0: port 1(bridge_slave_0) entered disabled state [ 469.514333][ T54] Bluetooth: hci2: command tx timeout [ 469.600864][ T54] Bluetooth: hci1: command tx timeout [ 469.675803][ T54] Bluetooth: hci3: command tx timeout [ 471.713996][ T1088] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 471.763768][ T1088] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 471.787393][ T1088] bond0 (unregistering): Released all slaves [ 472.199829][ T1088] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 472.229759][ T1088] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 472.252838][ T1088] bond0 (unregistering): Released all slaves [ 472.547266][ T1088] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 472.580647][ T1088] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 472.630559][ T1088] bond0 (unregistering): Released all slaves [ 473.037482][ T2902] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 473.045631][ T2902] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 473.134231][T10139] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 473.402563][T10139] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 473.455066][ T9929] veth0_vlan: entered promiscuous mode [ 473.523603][T10139] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 473.666688][T10139] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 473.700726][ T9929] veth1_vlan: entered promiscuous mode [ 474.294582][ T9929] veth0_macvtap: entered promiscuous mode [ 474.345909][ T9929] veth1_macvtap: entered promiscuous mode [ 474.445465][T10137] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 474.453995][ T933] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 474.583444][T10137] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 474.620683][ T933] usb 4-1: Using ep0 maxpacket: 16 [ 474.634153][T10137] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 474.636883][ T933] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 474.661814][ T5239] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 474.681227][ T5239] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 474.692659][ T5239] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 474.704257][ T5239] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 474.712322][ T5239] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 474.723507][ T5239] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 474.732515][ T933] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 474.741606][ T9929] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 474.753627][ T933] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 474.783208][ T9929] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 474.843437][ T9929] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 474.857562][ T933] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 474.884143][ T933] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 474.892270][ T933] usb 4-1: Product: syz [ 474.893131][ T9929] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 474.903184][ T933] usb 4-1: Manufacturer: syz [ 474.923177][ T933] usb 4-1: SerialNumber: syz [ 474.928413][ T9929] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 474.959953][ T9929] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 474.970047][ T9929] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 475.000472][ T9929] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 475.023204][ T9929] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 475.045290][ T9929] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 475.073181][ T9929] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 475.093174][ T9929] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 475.115909][ T9929] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 475.215814][T10137] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 475.296601][ T9929] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 475.317698][ T9929] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 475.343209][ T9929] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 475.371307][ T9929] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 475.393112][ T9929] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 475.414185][ T9929] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 475.426202][ T933] usb 4-1: 2:1 : format type 0 is detected, processed as PCM [ 475.442750][ T9929] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 475.454214][ T9929] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 475.464626][ T9929] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 475.476466][ T9929] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 475.487982][ T9929] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 475.500195][ T9929] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 475.514725][ T9929] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 475.615483][T10139] 8021q: adding VLAN 0 to HW filter on device bond0 [ 475.649506][ T1088] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 475.659147][ T1088] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 475.667940][ T1088] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 475.690388][ T1088] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 475.723350][ T1088] hsr_slave_0: left promiscuous mode [ 475.743325][ T1088] hsr_slave_1: left promiscuous mode [ 475.749862][ T1088] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 475.758576][ T1088] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 475.768461][ T1088] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 475.777193][ T1088] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 475.805324][ T1088] hsr_slave_0: left promiscuous mode [ 475.811675][ T1088] hsr_slave_1: left promiscuous mode [ 475.819910][ T1088] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 475.829415][ T1088] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 475.840276][ T1088] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 475.848514][ T1088] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 475.922859][ T1088] veth1_macvtap: left promiscuous mode [ 475.929780][ T1088] veth0_macvtap: left promiscuous mode [ 475.937671][ T1088] veth1_vlan: left promiscuous mode [ 475.943501][ T1088] veth0_vlan: left promiscuous mode [ 475.950579][ T1088] veth1_macvtap: left promiscuous mode [ 475.957370][ T1088] veth0_macvtap: left promiscuous mode [ 475.963256][ T1088] veth1_vlan: left promiscuous mode [ 475.968612][ T1088] veth0_vlan: left promiscuous mode [ 475.976548][ T1088] veth1_macvtap: left promiscuous mode [ 475.982129][ T1088] veth0_macvtap: left promiscuous mode [ 476.003193][ T1088] veth1_vlan: left promiscuous mode [ 476.008710][ T1088] veth0_vlan: left promiscuous mode [ 476.240858][ T933] usb 4-1: 2:1: cannot get freq at ep 0x82 [ 476.335536][ T933] usb 4-1: USB disconnect, device number 14 [ 476.883373][ T5239] Bluetooth: hci4: command tx timeout [ 477.526669][T10192] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 478.070824][ T1088] team0 (unregistering): Port device team_slave_1 removed [ 478.454538][ T1088] team0 (unregistering): Port device team_slave_0 removed [ 478.963084][ T5239] Bluetooth: hci4: command tx timeout [ 481.044112][ T5239] Bluetooth: hci4: command tx timeout [ 481.312505][ T1088] team0 (unregistering): Port device team_slave_1 removed [ 481.488860][ T1088] team0 (unregistering): Port device team_slave_0 removed [ 483.051634][ T54] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 483.068564][ T54] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 483.076301][ T54] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 483.113407][ T54] Bluetooth: hci4: command tx timeout [ 483.123403][ T54] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 483.131111][ T54] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 483.141961][ T54] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 483.695642][ T1088] team0 (unregistering): Port device team_slave_1 removed [ 483.810092][ T1088] team0 (unregistering): Port device team_slave_0 removed [ 485.193424][ T5239] Bluetooth: hci6: command tx timeout [ 485.368163][T10139] 8021q: adding VLAN 0 to HW filter on device team0 [ 485.510756][ T8658] bridge0: port 1(bridge_slave_0) entered blocking state [ 485.518027][ T8658] bridge0: port 1(bridge_slave_0) entered forwarding state [ 485.544790][ T8658] bridge0: port 2(bridge_slave_1) entered blocking state [ 485.551943][ T8658] bridge0: port 2(bridge_slave_1) entered forwarding state [ 486.021943][T10137] 8021q: adding VLAN 0 to HW filter on device bond0 [ 486.044467][T10137] 8021q: adding VLAN 0 to HW filter on device team0 [ 486.081758][T10137] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 486.092505][T10137] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 486.169046][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 486.176319][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 486.204823][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 486.212029][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 486.320192][T10180] chnl_net:caif_netlink_parms(): no params data found [ 486.706145][T10224] loop3: detected capacity change from 0 to 16 [ 486.725525][T10224] erofs: (device loop3): mounted with root inode @ nid 36. [ 486.745474][T10224] erofs: (device loop3): z_erofs_fill_inode_lazy: invalid tail-packing pclustersize 0 [ 486.767338][T10224] erofs: (device loop3): z_erofs_fill_inode_lazy: invalid tail-packing pclustersize 0 [ 486.790517][T10224] erofs: (device loop3): z_erofs_read_folio: read error -117 @ 8200 of nid 36 [ 487.071716][T10135] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 487.177099][T10204] chnl_net:caif_netlink_parms(): no params data found [ 487.231931][T10137] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 487.267277][T10227] loop3: detected capacity change from 0 to 256 [ 487.274372][ T5239] Bluetooth: hci6: command tx timeout [ 487.564674][T10230] syz.3.1534[10230] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 487.564829][T10230] syz.3.1534[10230] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 487.588417][T10230] syz.3.1534[10230] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 487.692063][T10234] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.1535'. [ 487.866863][T10135] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 487.887465][T10135] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 488.289316][T10180] bridge0: port 1(bridge_slave_0) entered blocking state [ 488.313732][T10180] bridge0: port 1(bridge_slave_0) entered disabled state [ 488.321076][T10180] bridge_slave_0: entered allmulticast mode [ 488.364609][T10180] bridge_slave_0: entered promiscuous mode [ 488.409154][T10180] bridge0: port 2(bridge_slave_1) entered blocking state [ 488.454068][T10180] bridge0: port 2(bridge_slave_1) entered disabled state [ 488.461410][T10180] bridge_slave_1: entered allmulticast mode [ 488.505653][T10180] bridge_slave_1: entered promiscuous mode [ 488.535472][T10135] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 488.725638][T10137] veth0_vlan: entered promiscuous mode [ 488.796082][T10180] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 488.809789][T10180] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 488.876035][T10204] bridge0: port 1(bridge_slave_0) entered blocking state [ 488.903688][T10204] bridge0: port 1(bridge_slave_0) entered disabled state [ 488.911267][T10204] bridge_slave_0: entered allmulticast mode [ 488.928858][T10204] bridge_slave_0: entered promiscuous mode [ 488.969977][T10180] team0: Port device team_slave_0 added [ 489.000867][T10180] team0: Port device team_slave_1 added [ 489.010432][T10204] bridge0: port 2(bridge_slave_1) entered blocking state [ 489.018144][T10204] bridge0: port 2(bridge_slave_1) entered disabled state [ 489.026340][T10204] bridge_slave_1: entered allmulticast mode [ 489.034050][T10204] bridge_slave_1: entered promiscuous mode [ 489.066884][T10139] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 489.076323][T10137] veth1_vlan: entered promiscuous mode [ 489.251563][T10204] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 489.296845][T10204] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 489.321829][T10180] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 489.353773][ T5239] Bluetooth: hci6: command tx timeout [ 489.366444][T10240] loop3: detected capacity change from 0 to 32768 [ 489.376880][T10240] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.1536 (10240) [ 489.378058][T10180] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 489.426150][T10240] BTRFS info (device loop3): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 489.437403][T10240] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 489.449037][T10240] BTRFS info (device loop3): disk space caching is enabled [ 489.481870][T10240] BTRFS warning (device loop3): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 489.483106][T10180] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 489.592046][T10240] BTRFS info (device loop3): rebuilding free space tree [ 489.606964][T10180] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 489.633120][T10180] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 489.674273][T10240] BTRFS info (device loop3): disabling free space tree [ 489.681248][T10240] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 489.813391][T10240] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 489.885435][ T29] audit: type=1800 audit(1728011375.460:45): pid=10240 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1536" name="bus" dev="loop3" ino=263 res=0 errno=0 [ 489.962758][ T29] audit: type=1800 audit(1728011375.530:46): pid=10240 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1536" name="bus" dev="loop3" ino=263 res=0 errno=0 [ 490.051377][ T9894] BTRFS info (device loop3): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 490.083327][T10180] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 490.305583][T10204] team0: Port device team_slave_0 added [ 490.386161][T10180] hsr_slave_0: entered promiscuous mode [ 490.404233][T10180] hsr_slave_1: entered promiscuous mode [ 490.434095][T10180] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 490.441706][T10180] Cannot create hsr debugfs directory [ 490.717836][T10204] team0: Port device team_slave_1 added [ 490.786416][T10137] veth0_macvtap: entered promiscuous mode [ 490.909886][T10135] 8021q: adding VLAN 0 to HW filter on device bond0 [ 491.109708][T10139] veth0_vlan: entered promiscuous mode [ 491.125355][T10204] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 491.132366][T10204] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 491.175747][T10204] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 491.262618][T10137] veth1_macvtap: entered promiscuous mode [ 491.310821][T10204] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 491.323392][T10204] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 491.362908][T10204] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 491.479295][T10139] veth1_vlan: entered promiscuous mode [ 491.489919][T10135] 8021q: adding VLAN 0 to HW filter on device team0 [ 491.512742][ T5239] Bluetooth: hci6: command tx timeout [ 491.748102][T10204] hsr_slave_0: entered promiscuous mode [ 491.764189][T10204] hsr_slave_1: entered promiscuous mode [ 491.770404][T10204] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 491.788731][T10204] Cannot create hsr debugfs directory [ 491.827230][ T2902] bridge0: port 1(bridge_slave_0) entered blocking state [ 491.834416][ T2902] bridge0: port 1(bridge_slave_0) entered forwarding state [ 491.861500][ T2902] bridge0: port 2(bridge_slave_1) entered blocking state [ 491.868644][ T2902] bridge0: port 2(bridge_slave_1) entered forwarding state [ 491.990248][T10137] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 492.018878][T10137] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 492.037782][T10137] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 492.055066][T10137] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 492.075782][T10137] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 492.103374][T10137] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 492.124051][T10137] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 492.143125][T10137] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 492.167485][T10137] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 492.479734][T10180] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 492.530470][T10137] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 492.563171][T10137] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 492.584682][T10137] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 492.603988][T10137] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 492.623015][T10137] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 492.653175][T10137] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 492.663259][ T5290] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 492.672032][T10137] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 492.683613][T10137] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 492.695788][T10137] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 492.797145][T10180] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 492.828575][T10139] veth0_macvtap: entered promiscuous mode [ 492.837592][ T5290] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 492.869134][ T5290] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 492.880456][ T5290] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 492.894098][ T5290] usb 4-1: New USB device found, idVendor=056a, idProduct=0325, bcdDevice= 0.00 [ 492.915230][T10137] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 492.925597][T10137] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 492.934960][ T5290] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 492.944739][T10137] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 492.954916][ T5290] usb 4-1: config 0 descriptor?? [ 492.960154][T10137] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 492.999736][T10139] veth1_macvtap: entered promiscuous mode [ 493.042626][T10180] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 493.201733][T10180] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 493.375073][T10139] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 493.417219][ T5290] wacom 0003:056A:0325.0011: unknown main item tag 0xe [ 493.433366][T10139] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 493.446064][ T5290] wacom 0003:056A:0325.0011: hidraw0: USB HID v0.00 Device [HID 056a:0325] on usb-dummy_hcd.3-1/input0 [ 493.455446][T10139] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 493.483169][T10139] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 493.503143][T10139] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 493.523049][T10139] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 493.533530][T10139] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 493.544133][T10139] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 493.554346][T10139] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 493.567149][T10139] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 493.579242][T10139] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 493.589142][ T1088] bridge_slave_1: left allmulticast mode [ 493.596084][ T1088] bridge_slave_1: left promiscuous mode [ 493.601913][ T1088] bridge0: port 2(bridge_slave_1) entered disabled state [ 493.629595][ T5288] usb 4-1: USB disconnect, device number 15 [ 493.641757][ T1088] bridge_slave_0: left allmulticast mode [ 493.649125][ T1088] bridge_slave_0: left promiscuous mode [ 493.655198][ T1088] bridge0: port 1(bridge_slave_0) entered disabled state [ 493.666887][ T1088] bridge_slave_1: left allmulticast mode [ 493.672559][ T1088] bridge_slave_1: left promiscuous mode [ 493.683306][ T1088] bridge0: port 2(bridge_slave_1) entered disabled state [ 493.692608][ T1088] bridge_slave_0: left allmulticast mode [ 493.700098][ T1088] bridge_slave_0: left promiscuous mode [ 493.706031][ T1088] bridge0: port 1(bridge_slave_0) entered disabled state [ 494.282870][T10273] binder: 10272:10273 ioctl c0306201 20000180 returned -22 [ 495.078816][ T1088] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 495.102941][ T1088] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 495.130135][ T1088] bond0 (unregistering): Released all slaves [ 495.215478][T10278] loop3: detected capacity change from 0 to 32768 [ 495.245583][T10278] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.1540 (10278) [ 495.277164][T10278] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 495.299840][T10278] BTRFS info (device loop3): using sha256 (sha256-ni) checksum algorithm [ 495.333169][T10278] BTRFS info (device loop3): using free-space-tree [ 495.389789][ T1088] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 495.405298][ T1088] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 495.419789][ T1088] bond0 (unregistering): Released all slaves [ 495.735071][T10139] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 495.767299][T10139] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 495.782351][T10139] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 495.795380][T10139] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 495.805727][T10139] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 495.816466][T10139] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 495.826719][T10139] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 495.837490][T10139] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 495.847531][T10139] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 495.863058][T10139] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 495.874891][T10139] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 495.952032][T10135] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 495.972389][T10139] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 496.011395][T10139] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 496.024879][T10139] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 496.034475][T10139] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 496.044569][ T9894] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 496.123304][ T8658] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 496.131169][ T8658] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 496.429062][ T1090] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 496.447839][ T1090] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 496.506852][ T1088] hsr_slave_0: left promiscuous mode [ 496.520092][ T1088] hsr_slave_1: left promiscuous mode [ 496.541065][ T1088] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 496.549163][ T1088] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 496.580278][ T1088] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 496.587891][ T1088] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 496.600910][ T5288] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 496.627452][ T1088] hsr_slave_0: left promiscuous mode [ 496.640710][ T1088] hsr_slave_1: left promiscuous mode [ 496.651416][ T1088] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 496.665600][ T1088] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 496.686378][ T1088] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 496.701897][ T1088] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 496.764805][ T5288] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 496.774781][ T5288] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 496.784793][ T5288] usb 4-1: config 0 descriptor?? [ 496.789612][ T1088] veth1_macvtap: left promiscuous mode [ 496.804270][ T5288] cp210x 4-1:0.0: cp210x converter detected [ 496.807848][ T1088] veth0_macvtap: left promiscuous mode [ 496.823217][ T1088] veth1_vlan: left promiscuous mode [ 496.830735][ T1088] veth0_vlan: left promiscuous mode [ 496.839639][ T1088] veth1_macvtap: left promiscuous mode [ 496.852777][ T1088] veth0_macvtap: left promiscuous mode [ 496.861889][ T1088] veth1_vlan: left promiscuous mode [ 496.879296][ T1088] veth0_vlan: left promiscuous mode [ 497.202811][ T5288] cp210x 4-1:0.0: failed to get vendor val 0x0010 size 3: -32 [ 497.226242][ T5288] usb 4-1: cp210x converter now attached to ttyUSB0 [ 497.440213][ T5247] usb 4-1: USB disconnect, device number 16 [ 497.448926][ T5247] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 497.490164][ T5247] cp210x 4-1:0.0: device disconnected [ 497.888464][ T1088] team0 (unregistering): Port device team_slave_1 removed [ 498.010726][ T1088] team0 (unregistering): Port device team_slave_0 removed [ 498.257798][T10300] loop3: detected capacity change from 0 to 512 [ 498.341495][T10300] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 498.363136][T10300] ext4 filesystem being mounted at /24/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 498.449977][T10300] EXT4-fs error (device loop3): ext4_get_first_dir_block:3552: inode #12: block 31: comm syz.3.1543: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=1, rec_len=6, size=1024 fake=1 [ 498.543272][T10300] EXT4-fs (loop3): Remounting filesystem read-only [ 498.624413][ T9894] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 499.977360][T10309] loop3: detected capacity change from 0 to 32768 [ 500.520275][T10309] XFS (loop3): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 500.561429][ T1088] team0 (unregistering): Port device team_slave_1 removed [ 500.618816][ T1088] team0 (unregistering): Port device team_slave_0 removed [ 501.043183][ T1260] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.049528][ T1260] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.242504][T10309] XFS (loop3): Ending clean mount [ 501.251752][T10309] XFS (loop3): Quotacheck needed: Please wait. [ 501.327762][T10309] XFS (loop3): Quotacheck: Done. [ 501.634218][ T9894] XFS (loop3): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 502.833457][T10135] veth0_vlan: entered promiscuous mode [ 502.855852][T10135] veth1_vlan: entered promiscuous mode [ 502.872680][T10327] loop3: detected capacity change from 0 to 256 [ 502.892859][T10135] veth0_macvtap: entered promiscuous mode [ 502.966761][T10135] veth1_macvtap: entered promiscuous mode [ 502.976162][ T1090] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 502.982860][T10135] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 502.995041][ T1090] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 503.016746][T10135] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 503.033838][T10135] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 503.037974][T10327] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x726052d3, utbl_chksum : 0xe619d30d) [ 503.053032][T10135] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 503.066643][T10135] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 503.077198][T10135] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 503.087105][T10135] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 503.097618][T10135] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 503.114869][T10135] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 503.208717][T10180] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 503.233302][ T29] audit: type=1800 audit(1728011388.780:47): pid=10327 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1550" name="bus" dev="loop3" ino=1048736 res=0 errno=0 [ 503.345590][T10135] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 503.363182][T10135] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 503.374472][T10135] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 503.412288][T10135] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 503.473385][T10135] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 503.484042][T10135] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 503.493974][T10135] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 503.505073][T10135] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 503.516607][T10135] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 503.525803][T10204] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 503.532239][T10325] loop2: detected capacity change from 0 to 40427 [ 503.561505][T10204] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 503.586053][T10325] F2FS-fs (loop2): build fault injection attr: rate: 690, type: 0x1fffff [ 503.607350][T10180] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 503.616100][T10325] F2FS-fs (loop2): Image doesn't support compression [ 503.622940][T10325] F2FS-fs (loop2): Image doesn't support compression [ 503.655389][T10325] F2FS-fs (loop2): invalid crc value [ 503.666641][T10180] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 503.678691][T10325] F2FS-fs (loop2): Found nat_bits in checkpoint [ 503.761132][T10180] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 503.798103][T10135] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 503.808898][T10135] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 503.813199][T10325] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 503.817797][T10135] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 503.834625][T10135] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 503.885439][T10204] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 503.896728][T10204] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 503.966826][ T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 503.974849][ T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 503.994956][T10325] F2FS-fs (loop2): inject too big dir depth in f2fs_add_regular_entry of f2fs_add_dentry+0xf7/0x1e0 [ 504.128786][T10137] syz-executor: attempt to access beyond end of device [ 504.128786][T10137] loop2: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 504.177780][T10137] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 504.206519][T10137] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 504.515639][ T2902] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 504.523646][ T2902] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 504.625034][ T8658] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 504.652665][T10180] 8021q: adding VLAN 0 to HW filter on device bond0 [ 504.670257][ T8658] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 505.011248][T10204] 8021q: adding VLAN 0 to HW filter on device bond0 [ 505.037624][T10204] 8021q: adding VLAN 0 to HW filter on device team0 [ 505.074484][T10204] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 505.084886][T10204] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 505.133154][T10348] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1517'. [ 505.449507][ T8658] bridge0: port 1(bridge_slave_0) entered blocking state [ 505.456716][ T8658] bridge0: port 1(bridge_slave_0) entered forwarding state [ 505.481884][ T8658] bridge0: port 2(bridge_slave_1) entered blocking state [ 505.489134][ T8658] bridge0: port 2(bridge_slave_1) entered forwarding state [ 505.605369][T10180] 8021q: adding VLAN 0 to HW filter on device team0 [ 505.654317][ T2546] bridge0: port 1(bridge_slave_0) entered blocking state [ 505.661554][ T2546] bridge0: port 1(bridge_slave_0) entered forwarding state [ 505.738258][ T1090] bridge0: port 2(bridge_slave_1) entered blocking state [ 505.745473][ T1090] bridge0: port 2(bridge_slave_1) entered forwarding state [ 505.800318][T10358] loop3: detected capacity change from 0 to 256 [ 505.847477][T10357] loop4: detected capacity change from 0 to 256 [ 505.866658][T10357] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x46ae1815, utbl_chksum : 0xe619d30d) [ 505.902234][T10357] exFAT-fs (loop4): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 505.916332][T10358] vfat: Unknown parameter 'nnonumtail' [ 506.015579][T10357] exFAT-fs (loop4): error, invalid access to FAT free cluster (entry 0x00000006) [ 506.042025][T10355] sctp: [Deprecated]: syz.3.1558 (pid 10355) Use of int in maxseg socket option. [ 506.042025][T10355] Use struct sctp_assoc_value instead [ 506.076829][T10357] exFAT-fs (loop4): Filesystem has been set read-only [ 506.125001][T10365] exFAT-fs (loop4): error, invalid access to FAT free cluster (entry 0x00000006) [ 506.272896][T10180] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 506.317747][T10180] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 506.576978][T10204] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 506.679473][ T29] audit: type=1326 audit(1728011392.270:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10372 comm="syz.3.1563" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f018c77dff9 code=0x7ffc0000 [ 506.786614][ T29] audit: type=1326 audit(1728011392.290:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10372 comm="syz.3.1563" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f018c77dff9 code=0x7ffc0000 [ 506.923502][ T5293] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 506.955860][ T29] audit: type=1326 audit(1728011392.330:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10372 comm="syz.3.1563" exe="/root/syz-executor" sig=0 arch=c000003e syscall=173 compat=0 ip=0x7f018c77dff9 code=0x7ffc0000 [ 507.109689][ T29] audit: type=1326 audit(1728011392.330:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10372 comm="syz.3.1563" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f018c77dff9 code=0x7ffc0000 [ 507.163251][ T5293] usb 2-1: Using ep0 maxpacket: 32 [ 507.193616][ T5293] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 507.223043][ T5293] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 507.263207][ T29] audit: type=1326 audit(1728011392.330:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10372 comm="syz.3.1563" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f018c77dff9 code=0x7ffc0000 [ 507.329718][ T5293] usb 2-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=58.16 [ 507.359446][ T5293] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 507.413141][ T5293] usb 2-1: Product: syz [ 507.417357][ T5293] usb 2-1: Manufacturer: syz [ 507.442272][ T29] audit: type=1326 audit(1728011392.330:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10372 comm="syz.3.1563" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f018c77dff9 code=0x7ffc0000 [ 507.455868][T10391] loop2: detected capacity change from 0 to 128 [ 507.491853][ T5293] usb 2-1: SerialNumber: syz [ 507.533619][ T5293] usb 2-1: config 0 descriptor?? [ 507.710681][T10391] EXT4-fs: Ignoring removed nobh option [ 507.763091][ T29] audit: type=1326 audit(1728011392.330:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10372 comm="syz.3.1563" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f018c77dff9 code=0x7ffc0000 [ 507.817306][ T29] audit: type=1326 audit(1728011392.330:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10372 comm="syz.3.1563" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f018c77dff9 code=0x7ffc0000 [ 507.871327][ T5293] usb 2-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 507.885029][ T1088] usb 2-1: Failed to submit usb control message: -71 [ 507.940119][ T1088] usb 2-1: unable to send the bmi data to the device: -71 [ 507.958047][T10391] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 507.981936][ T5293] usb 2-1: USB disconnect, device number 19 [ 507.995330][ T1088] usb 2-1: unable to get target info from device [ 508.001691][ T1088] usb 2-1: could not get target info (-71) [ 508.044364][ T29] audit: type=1326 audit(1728011392.360:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10372 comm="syz.3.1563" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f018c77dff9 code=0x7ffc0000 [ 508.113736][T10391] ext4 filesystem being mounted at /6/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 508.173022][ T1088] usb 2-1: could not probe fw (-71) [ 508.196606][T10180] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 508.287981][ T29] audit: type=1326 audit(1728011392.360:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10372 comm="syz.3.1563" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f018c77dff9 code=0x7ffc0000 [ 508.547052][ T29] audit: type=1326 audit(1728011392.360:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10372 comm="syz.3.1563" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f018c77dff9 code=0x7ffc0000 [ 508.700566][T10204] veth0_vlan: entered promiscuous mode [ 508.733094][ T29] audit: type=1326 audit(1728011392.360:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10372 comm="syz.3.1563" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f018c77dff9 code=0x7ffc0000 [ 508.769210][T10137] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 508.827053][T10180] veth0_vlan: entered promiscuous mode [ 508.939927][T10180] veth1_vlan: entered promiscuous mode [ 508.946009][ T29] audit: type=1326 audit(1728011392.360:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10372 comm="syz.3.1563" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f018c77dff9 code=0x7ffc0000 [ 509.005182][T10204] veth1_vlan: entered promiscuous mode [ 509.152603][ T29] audit: type=1326 audit(1728011392.360:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10372 comm="syz.3.1563" exe="/root/syz-executor" sig=0 arch=c000003e syscall=239 compat=0 ip=0x7f018c77dff9 code=0x7ffc0000 [ 509.198701][T10406] loop3: detected capacity change from 0 to 8192 [ 509.233137][T10370] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 509.241111][T10180] veth0_macvtap: entered promiscuous mode [ 509.270445][T10406] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 509.322451][ T29] audit: type=1326 audit(1728011392.360:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10372 comm="syz.3.1563" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f018c77dff9 code=0x7ffc0000 [ 509.404188][T10204] veth0_macvtap: entered promiscuous mode [ 509.431798][T10180] veth1_macvtap: entered promiscuous mode [ 509.445069][T10370] usb 2-1: Using ep0 maxpacket: 32 [ 509.481977][T10370] usb 2-1: config 0 has an invalid interface number: 67 but max is 0 [ 509.502691][T10204] veth1_macvtap: entered promiscuous mode [ 509.524109][T10370] usb 2-1: config 0 has no interface number 0 [ 509.573413][T10370] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 509.582526][T10370] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 509.619974][T10180] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 509.675193][T10370] usb 2-1: Product: syz [ 509.679424][T10370] usb 2-1: Manufacturer: syz [ 509.693613][T10180] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 509.713075][T10370] usb 2-1: SerialNumber: syz [ 509.725459][T10370] usb 2-1: config 0 descriptor?? [ 509.741021][T10180] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 509.761480][T10180] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 509.794632][T10370] smsc95xx v2.0.0 [ 509.804213][T10180] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 509.828513][T10180] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 509.843650][T10180] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 509.863443][T10180] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 509.885652][T10180] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 509.904535][T10180] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 509.959132][T10180] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 510.069495][T10204] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 510.131614][T10204] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 510.175393][T10204] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 510.227808][T10370] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 510.248402][T10204] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 510.291797][T10370] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 510.303113][T10204] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 510.338945][T10204] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 510.362578][T10204] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 510.400132][T10204] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 510.435667][T10204] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 510.456994][ T5293] ================================================================== [ 510.465118][ T5293] BUG: KASAN: slab-use-after-free in __list_del_entry_valid_or_report+0x2f/0x140 [ 510.474275][ T5293] Read of size 8 at addr ffff88802c8e2908 by task kworker/0:6/5293 [ 510.482181][ T5293] [ 510.484525][ T5293] CPU: 0 UID: 0 PID: 5293 Comm: kworker/0:6 Not tainted 6.12.0-rc1-syzkaller-00125-g0c559323bbaa #0 [ 510.495306][ T5293] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 510.505381][ T5293] Workqueue: events binder_deferred_func [ 510.511048][ T5293] Call Trace: [ 510.514341][ T5293] [ 510.517375][ T5293] dump_stack_lvl+0x241/0x360 [ 510.522075][ T5293] ? __pfx_dump_stack_lvl+0x10/0x10 [ 510.527292][ T5293] ? __pfx__printk+0x10/0x10 [ 510.531915][ T5293] ? _printk+0xd5/0x120 [ 510.536102][ T5293] ? __virt_addr_valid+0x183/0x530 [ 510.541247][ T5293] ? srso_alias_return_thunk+0x5/0xfbef5 [ 510.546902][ T5293] print_report+0x169/0x550 [ 510.551431][ T5293] ? __virt_addr_valid+0x183/0x530 [ 510.556652][ T5293] ? srso_alias_return_thunk+0x5/0xfbef5 [ 510.562307][ T5293] ? __virt_addr_valid+0x45f/0x530 [ 510.567439][ T5293] ? srso_alias_return_thunk+0x5/0xfbef5 [ 510.573092][ T5293] ? __phys_addr+0xba/0x170 [ 510.577616][ T5293] ? __list_del_entry_valid_or_report+0x2f/0x140 [ 510.583977][ T5293] kasan_report+0x143/0x180 [ 510.588508][ T5293] ? __list_del_entry_valid_or_report+0x2f/0x140 [ 510.594876][ T5293] __list_del_entry_valid_or_report+0x2f/0x140 [ 510.601060][ T5293] binder_release_work+0xc7/0x480 [ 510.606109][ T5293] binder_deferred_func+0x1275/0x1460 [ 510.611505][ T5293] ? process_scheduled_works+0x976/0x1850 [ 510.617256][ T5293] process_scheduled_works+0xa65/0x1850 [ 510.622843][ T5293] ? __pfx_process_scheduled_works+0x10/0x10 [ 510.628851][ T5293] ? assign_work+0x364/0x3d0 [ 510.633469][ T5293] worker_thread+0x870/0xd30 [ 510.638096][ T5293] ? srso_alias_return_thunk+0x5/0xfbef5 [ 510.643747][ T5293] ? srso_alias_return_thunk+0x5/0xfbef5 [ 510.649393][ T5293] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 510.655398][ T5293] ? __kthread_parkme+0x169/0x1d0 [ 510.660448][ T5293] ? __pfx_worker_thread+0x10/0x10 [ 510.665586][ T5293] kthread+0x2f2/0x390 [ 510.669666][ T5293] ? __pfx_worker_thread+0x10/0x10 [ 510.674804][ T5293] ? __pfx_kthread+0x10/0x10 [ 510.679412][ T5293] ret_from_fork+0x4d/0x80 [ 510.683855][ T5293] ? __pfx_kthread+0x10/0x10 [ 510.688459][ T5293] ret_from_fork_asm+0x1a/0x30 [ 510.693267][ T5293] [ 510.696290][ T5293] [ 510.698618][ T5293] Allocated by task 10420: [ 510.703031][ T5293] kasan_save_track+0x3f/0x80 [ 510.707722][ T5293] __kasan_kmalloc+0x98/0xb0 [ 510.712321][ T5293] __kmalloc_cache_noprof+0x19c/0x2c0 [ 510.717719][ T5293] binder_ioctl_write_read+0xe7f/0xb560 [ 510.723297][ T5293] binder_ioctl+0x436/0x1cc0 [ 510.727995][ T5293] __se_sys_ioctl+0xfb/0x170 [ 510.732607][ T5293] do_syscall_64+0xf3/0x230 [ 510.737384][ T5293] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 510.743308][ T5293] [ 510.745631][ T5293] Freed by task 5293: [ 510.749609][ T5293] kasan_save_track+0x3f/0x80 [ 510.754304][ T5293] kasan_save_free_info+0x40/0x50 [ 510.759358][ T5293] __kasan_slab_free+0x59/0x70 [ 510.764134][ T5293] kfree+0x1a0/0x440 [ 510.768048][ T5293] binder_deferred_func+0x11df/0x1460 [ 510.773437][ T5293] process_scheduled_works+0xa65/0x1850 [ 510.779004][ T5293] worker_thread+0x870/0xd30 [ 510.783620][ T5293] kthread+0x2f2/0x390 [ 510.787696][ T5293] ret_from_fork+0x4d/0x80 [ 510.792137][ T5293] ret_from_fork_asm+0x1a/0x30 [ 510.796982][ T5293] [ 510.799325][ T5293] The buggy address belongs to the object at ffff88802c8e2900 [ 510.799325][ T5293] which belongs to the cache kmalloc-64 of size 64 [ 510.813344][ T5293] The buggy address is located 8 bytes inside of [ 510.813344][ T5293] freed 64-byte region [ffff88802c8e2900, ffff88802c8e2940) [ 510.826900][ T5293] [ 510.829231][ T5293] The buggy address belongs to the physical page: [ 510.835641][ T5293] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x2c8e2 [ 510.844413][ T5293] ksm flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 510.851884][ T5293] page_type: f5(slab) [ 510.855881][ T5293] raw: 00fff00000000000 ffff88801ac418c0 ffffea00008bcb80 dead000000000003 [ 510.864475][ T5293] raw: 0000000000000000 0000000080200020 00000001f5000000 0000000000000000 [ 510.873062][ T5293] page dumped because: kasan: bad access detected [ 510.879477][ T5293] page_owner tracks the page as allocated [ 510.885193][ T5293] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x52cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 1090, tgid 1090 (kworker/u8:6), ts 14348468055, free_ts 0 [ 510.903639][ T5293] post_alloc_hook+0x1f3/0x230 [ 510.908442][ T5293] get_page_from_freelist+0x3045/0x3190 [ 510.914005][ T5293] __alloc_pages_noprof+0x256/0x6c0 [ 510.919306][ T5293] alloc_pages_mpol_noprof+0x3e8/0x680 [ 510.924787][ T5293] alloc_slab_page+0x6a/0x120 [ 510.929475][ T5293] allocate_slab+0x5a/0x2f0 [ 510.933995][ T5293] ___slab_alloc+0xcd1/0x14b0 [ 510.938699][ T5293] __slab_alloc+0x58/0xa0 [ 510.943055][ T5293] __kmalloc_noprof+0x25a/0x400 [ 510.947924][ T5293] security_task_alloc+0x4a/0x340 [ 510.952962][ T5293] copy_process+0x166c/0x3d50 [ 510.957682][ T5293] kernel_clone+0x226/0x8f0 [ 510.962323][ T5293] user_mode_thread+0x132/0x1a0 [ 510.967310][ T5293] call_usermodehelper_exec_work+0x5c/0x230 [ 510.973241][ T5293] process_scheduled_works+0xa65/0x1850 [ 510.978810][ T5293] worker_thread+0x870/0xd30 [ 510.983428][ T5293] page_owner free stack trace missing [ 510.988799][ T5293] [ 510.991127][ T5293] Memory state around the buggy address: [ 510.996759][ T5293] ffff88802c8e2800: fa fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 511.004951][ T5293] ffff88802c8e2880: fa fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 511.013553][ T5293] >ffff88802c8e2900: fa fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 511.021792][ T5293] ^ [ 511.026135][ T5293] ffff88802c8e2980: fa fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 511.034216][ T5293] ffff88802c8e2a00: 00 00 00 00 00 00 00 00 fc fc fc fc fc fc fc fc [ 511.042289][ T5293] ================================================================== [ 511.055139][ T5293] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 511.062382][ T5293] CPU: 0 UID: 0 PID: 5293 Comm: kworker/0:6 Not tainted 6.12.0-rc1-syzkaller-00125-g0c559323bbaa #0 [ 511.073167][ T5293] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 511.083241][ T5293] Workqueue: events binder_deferred_func [ 511.088919][ T5293] Call Trace: [ 511.092209][ T5293] [ 511.095178][ T5293] dump_stack_lvl+0x241/0x360 [ 511.099899][ T5293] ? __pfx_dump_stack_lvl+0x10/0x10 [ 511.105126][ T5293] ? __pfx__printk+0x10/0x10 [ 511.109801][ T5293] ? srso_alias_return_thunk+0x5/0xfbef5 [ 511.115752][ T5293] ? vscnprintf+0x5d/0x90 [ 511.120137][ T5293] panic+0x349/0x880 [ 511.124082][ T5293] ? check_panic_on_warn+0x21/0xb0 [ 511.129477][ T5293] ? __pfx_panic+0x10/0x10 [ 511.133955][ T5293] ? mark_lock+0x9a/0x360 [ 511.138313][ T5293] ? _raw_spin_unlock_irqrestore+0xd8/0x140 [ 511.144263][ T5293] ? srso_alias_return_thunk+0x5/0xfbef5 [ 511.149930][ T5293] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 511.155847][ T5293] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 511.162200][ T5293] ? print_report+0x502/0x550 [ 511.166901][ T5293] check_panic_on_warn+0x86/0xb0 [ 511.171859][ T5293] ? __list_del_entry_valid_or_report+0x2f/0x140 [ 511.178216][ T5293] end_report+0x77/0x160 [ 511.182475][ T5293] kasan_report+0x154/0x180 [ 511.186999][ T5293] ? __list_del_entry_valid_or_report+0x2f/0x140 [ 511.193393][ T5293] __list_del_entry_valid_or_report+0x2f/0x140 [ 511.199752][ T5293] binder_release_work+0xc7/0x480 [ 511.204800][ T5293] binder_deferred_func+0x1275/0x1460 [ 511.210209][ T5293] ? process_scheduled_works+0x976/0x1850 [ 511.216041][ T5293] process_scheduled_works+0xa65/0x1850 [ 511.221630][ T5293] ? __pfx_process_scheduled_works+0x10/0x10 [ 511.227643][ T5293] ? assign_work+0x364/0x3d0 [ 511.232289][ T5293] worker_thread+0x870/0xd30 [ 511.236931][ T5293] ? srso_alias_return_thunk+0x5/0xfbef5 [ 511.242586][ T5293] ? srso_alias_return_thunk+0x5/0xfbef5 [ 511.248242][ T5293] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 511.254176][ T5293] ? __kthread_parkme+0x169/0x1d0 [ 511.259323][ T5293] ? __pfx_worker_thread+0x10/0x10 [ 511.264473][ T5293] kthread+0x2f2/0x390 [ 511.268566][ T5293] ? __pfx_worker_thread+0x10/0x10 [ 511.273722][ T5293] ? __pfx_kthread+0x10/0x10 [ 511.278335][ T5293] ret_from_fork+0x4d/0x80 [ 511.282777][ T5293] ? __pfx_kthread+0x10/0x10 [ 511.287425][ T5293] ret_from_fork_asm+0x1a/0x30 [ 511.292230][ T5293] [ 511.295535][ T5293] Kernel Offset: disabled [ 511.299856][ T5293] Rebooting in 86400 seconds..