last executing test programs: 12.018195002s ago: executing program 3 (id=1907): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000000), 0x10) sendmsg$can_bcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)={0x5, 0x0, 0x0, {}, {0x77359400}, {}, 0x2, @can={{}, 0x0, 0x3, 0x0, 0x0, "3fd31340e92c4bb8"}}, 0x48}, 0x300}, 0x0) 10.561187489s ago: executing program 3 (id=1914): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000080"], 0x0}, 0x90) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) write$cgroup_subtree(r0, &(0x7f0000000380)=ANY=[@ANYBLOB="8fedcb5d07081196f37538e486dd6372ce22667f2c00dbf6e97158b33d4fec877f1b6d76745b686158bbcfe8875afdef00010000000029"], 0x280) 8.987323227s ago: executing program 2 (id=1924): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f00000039c0)={0x0, 0x0, &(0x7f0000003980)={&(0x7f0000003940)={0x24, 0x1, 0x4, 0x101, 0x0, 0x0, {0x7, 0x0, 0x4}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}, @NFULA_CFG_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x8}]}, 0x24}}, 0x2010000) 8.784123474s ago: executing program 2 (id=1926): bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x40, 0x40, 0x2, [@union={0x5, 0x3, 0x0, 0x5, 0x0, 0x8, [{0x7, 0x0, 0x1}, {0x3, 0x0, 0xcfe6}, {0xb, 0x1, 0x9}]}, @int={0x9, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x38, 0x4}]}}, 0x0, 0x5a, 0x0, 0x1, 0x10000}, 0x20) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)={0x44, 0x0, 0x1, 0x0, 0x0, 0x0, {}, [@CTA_TUPLE_ORIG={0x18, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @remote={0xac, 0x3}}}}]}, @CTA_TUPLE_REPLY={0x18, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @dev}}}]}]}, 0x44}}, 0x0) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB='$\x00 \x00', @ANYRES16=r0, @ANYBLOB="01"], 0x24}}, 0x0) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=ANY=[@ANYBLOB="d824000028000100020000080000000001"], 0x24d8}], 0x1}, 0x0) 8.036298449s ago: executing program 1 (id=1930): syz_mount_image$btrfs(&(0x7f00000055c0), &(0x7f0000000140)='./file0\x00', 0x0, &(0x7f00000000c0)={[{@usebackuproot}, {@enospc_debug}, {@flushoncommit}]}, 0x2, 0x559d, &(0x7f0000005680)="$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") syz_emit_vhci(&(0x7f00000000c0)=ANY=[@ANYBLOB="043e0c0440"], 0xf) 5.667658929s ago: executing program 1 (id=1936): socketpair(0x1, 0x80001, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000005c0)={'ip_vti0\x00', &(0x7f0000000500)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x4, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote}}}}) r1 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000}, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x8, 0x8}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x15, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000180)={'syztnl0\x00', &(0x7f0000000100)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @dev}}) 5.384446386s ago: executing program 0 (id=1938): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r1 = openat$cgroup_devices(r0, &(0x7f0000000540)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r1, &(0x7f0000000280)=ANY=[], 0xa) 4.246082125s ago: executing program 4 (id=1939): r0 = socket$can_bcm(0x1d, 0x2, 0x2) sendmsg$can_bcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x5, 0x0, 0x0, {}, {0x77359400}, {}, 0x2, @can={{}, 0x0, 0x0, 0x0, 0x0, "3fd31340e92c4bb8"}}, 0x48}, 0x300}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)={0x5, 0x0, 0x0, {}, {0x77359400}, {}, 0x2, @can={{}, 0x0, 0x3, 0x0, 0x0, "3fd31340e92c4bb8"}}, 0x48}, 0x300}, 0x0) 4.105351053s ago: executing program 2 (id=1941): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r0, 0x0, 0x19, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f00000001c0), &(0x7f0000000200)=0xc) r4 = semget$private(0x0, 0x5, 0x2c4) semop(r4, &(0x7f0000001080)=[{0x4, 0x0, 0x1000}], 0x1) semctl$GETZCNT(r4, 0x4, 0x7, 0x0) 4.079347155s ago: executing program 4 (id=1942): r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) connect$unix(r0, &(0x7f0000000100)=@abs={0x27, 0x0, 0x2}, 0x6e) 3.992378489s ago: executing program 0 (id=1943): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x1e, 0x0, 0x3, 0xfe, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r1, 0xf, 0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 3.99223268s ago: executing program 3 (id=1944): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000003000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x5}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 3.885692699s ago: executing program 4 (id=1946): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r1 = openat$cgroup_devices(r0, &(0x7f0000000540)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r1, &(0x7f0000000280)=ANY=[@ANYBLOB='b *:4\tw'], 0xa) 3.700336684s ago: executing program 0 (id=1947): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000003000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x5}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) r2 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r2, &(0x7f0000000040)={&(0x7f0000000000)={0x64, 0x0, @broadcast}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000080)="08001ebbb07d586e", 0x8}], 0x1, 0x0, 0x0, 0xe0000000}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_int(r3, 0x0, 0x1, &(0x7f00000009c0)=0x1234, 0x4) r4 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r4, 0x28, 0x1, &(0x7f00000000c0)=0xffffffffffffff9c, 0x8) connect$vsock_stream(r4, &(0x7f0000000380)={0x28, 0x0, 0x0, @hyper}, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)={0x14, 0x5a, 0x4, 0x0, 0x0, {0x9}}, 0x33}}, 0x24044014) 3.614361281s ago: executing program 1 (id=1948): bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x0, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000631011000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0), 0x34) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r0, &(0x7f0000000000), &(0x7f0000000040)=""/73, 0x2}, 0x70) 3.61312276s ago: executing program 5 (id=1949): mkdir(0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) mkdir(&(0x7f0000002340)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) 3.559394005s ago: executing program 3 (id=1950): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0x0, 0x0, 0x0, 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 3.558911333s ago: executing program 4 (id=1951): syz_mount_image$hfs(&(0x7f0000000040), &(0x7f0000000000)='./bus\x00', 0x800000, &(0x7f0000000100)={[{@type={'type', 0x3d, "0a521470"}}, {@part={'part', 0x3d, 0x80}}, {@part={'part', 0x3d, 0x3}}, {@umask={'umask', 0x3d, 0x6}}, {@codepage={'codepage', 0x3d, 'cp869'}}, {@iocharset={'iocharset', 0x3d, 'cp869'}}, {@umask={'umask', 0x3d, 0x540c}}]}, 0x3, 0x2a3, &(0x7f00000005c0)="$eJzs3c1qE1EYxvHnTNI2/aBOP6TgslpwJbZuxI0ivQgXImoToRgqaAV1Ja5F3Anu3bkWb8CNK/EGdOXKCyi4GDlnZpJJOl+JSSat/x80TDPnPfOezCRz3oFkBOC/dXP3x4crv+yfkWqqSbomeZIaUl3SWW00nh4c7h+2W00XsTCT2lHNRdg/ozDSHGuzd9BKC7VxLiLi2//qWko+h/EIgiD4WXUSqJx796fwpLno3enWNyae2Xi8rDqBipkjHemZlqvOAwBQrej870Xn+aVo/u550lZ02j9V5/+jqhOoWOL876qswNj9e8at6tZ7roSz6724SszpMXPNrMIjq2eCaXqryuNcLt78g/1269Leo3bT0ytdjySarbvHZnjoxgqy3cxJNkXx2LMsujHM2DHsZOS/NswW3w2eSof5ar6ZO8bXezU78796YOxucnvKd3vK7wSE+V/O7jGMCltljHLFbeRc1FafP5YYZSO9IulscUW9Fwj8OM+3szlRq31R4ei2C0a3lhq1UxC13h/VPZqzI4eXMew+5o25ZTb1W5+0m5j/e/bV3lKZd6Zt41pGR0bueOqupV8iMa9U+igr/Tpd7LXu66qWnzx/8fBeu916PLUL8YzDPlObgnxyFmyaY+m5rkmMIj5gpuPFnIKF+MN79D3rn/upaU5u4U8QGvWLkPfhMT+CjydMg+5O18btqpNBFey8y4T1X6JeueHW2TrJd/P0GaXN04OizhM9bmfUBqvucWGgCm4xu4IrW3OdvyhdyNnil95u/SjPU8Ls6rvucv0fAAAAAAAAAAAAAAAAAADgpCn3fYC5qPVwXyeoeIgAAAAAAAAAAAAAAAAAAAAAAJx4g9//N0Pm/X8Tv+pdfP9f9yvd3P8XmIy/AQAA//9VdncK") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.sectors\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000580), 0x1517460) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x800001, 0x28011, r0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) 2.790614605s ago: executing program 5 (id=1952): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x2, [@func_proto={0x0, 0x0, 0x0, 0xd, 0x5f5e0ff}, @func_proto={0x0, 0x2, 0x0, 0xd, 0x0, [{0xc, 0x4}, {0x7, 0x2}]}]}}, &(0x7f0000000f40)=""/4096, 0x42, 0x1000, 0xa}, 0x20) 2.736403481s ago: executing program 1 (id=1953): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000900)={0x2, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="18f8ffff"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x61e5cc96}, 0x90) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_mptcp_buf(r0, 0x11c, 0x3, &(0x7f00000000c0)=""/113, &(0x7f0000000080)=0x71) 2.721010801s ago: executing program 2 (id=1954): r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000080)={@loopback={0x2}, 0x0, 0x0, 0xff, 0x1}, 0x20) 2.569492046s ago: executing program 2 (id=1955): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r3, &(0x7f0000000300)=[{&(0x7f0000000200)="580000001500add427323b472545b4560a117fff0b0082001b59000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) 2.495775733s ago: executing program 5 (id=1956): r0 = socket(0x10, 0x802, 0x0) syz_genetlink_get_family_id$team(&(0x7f0000000000), r0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r1 = socket(0x1, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x29081}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x40}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x44}}, 0x0) 2.448360638s ago: executing program 1 (id=1957): r0 = socket$can_bcm(0x1d, 0x2, 0x2) sendmsg$can_bcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x5, 0x0, 0x0, {}, {0x77359400}, {}, 0x2, @can={{}, 0x0, 0x0, 0x0, 0x0, "3fd31340e92c4bb8"}}, 0x48}, 0x300}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)={0x5, 0x0, 0x0, {}, {0x77359400}, {}, 0x2, @can={{}, 0x0, 0x3, 0x0, 0x0, "3fd31340e92c4bb8"}}, 0x48}, 0x300}, 0x0) 2.376413135s ago: executing program 0 (id=1958): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000000), 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000100)=@abs={0x27, 0x0, 0x2}, 0x6e) 1.495850084s ago: executing program 2 (id=1959): r0 = getpid() prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) getcwd(0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000100)) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) dup3(r2, r1, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f00000001c0)) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000480)={0x4c, 0x0, &(0x7f0000000200)=[@acquire, @transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 1.493470889s ago: executing program 4 (id=1960): r0 = socket(0x1e, 0x4, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) r1 = socket(0x1e, 0x4, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x5) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r2 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00'}, 0x10) write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x15) close(0xffffffffffffffff) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) recvmmsg$unix(r0, &(0x7f00000027c0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000100)=""/104, 0x68}], 0x1}}], 0x1, 0x0, 0x0) 1.445531528s ago: executing program 5 (id=1961): r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240), &(0x7f0000000280)=0x5) ioctl$VT_RESIZEX(r0, 0x560f, 0x0) 1.406009486s ago: executing program 1 (id=1962): setsockopt$IP_VS_SO_SET_DEL(0xffffffffffffffff, 0x0, 0x484, 0x0, 0x0) r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00'}, 0x10) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000280)={0xffffffff}, 0x10) bind$netlink(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x8, 0x0, 0x0) syz_80211_inject_frame(&(0x7f0000000180), &(0x7f00000003c0)=@data_frame={@a_msdu=@type01={{0x0, 0x2, 0x3}, {0x2}, @device_a, @initial, @random="397fbc6dc496", {0xf, 0x4}}, @a_msdu}, 0x18) sendmsg$WG_CMD_GET_DEVICE(0xffffffffffffffff, 0x0, 0x0) sendmsg$WG_CMD_GET_DEVICE(0xffffffffffffffff, 0x0, 0x80) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) ioctl$BTRFS_IOC_RESIZE(r0, 0x50009403, 0x0) 1.32566525s ago: executing program 3 (id=1963): syz_emit_vhci(&(0x7f0000002180)=ANY=[@ANYBLOB="02c90000"], 0x17) 1.226365424s ago: executing program 0 (id=1964): unshare(0x20040600) r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f00000000c0)=@abs={0x1}, 0x6e) bind$unix(r0, &(0x7f00000003c0)=@abs={0x1}, 0x2) 1.225809294s ago: executing program 5 (id=1965): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x20, 0x20, 0x2, [@func_proto={0x0, 0x0, 0x0, 0xd, 0x5f5e0ff}, @func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0xc, 0x4}]}]}}, &(0x7f0000000f40)=""/4096, 0x3a, 0x1000, 0xa}, 0x20) 1.144609576s ago: executing program 5 (id=1966): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={0x0}, 0x10) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) read$FUSE(r0, &(0x7f0000000a40)={0x2020}, 0x2) syz_usb_connect$uac1(0x0, 0x71, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x3, 0x1, 0x0, 0x0, 0x0, {{}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) r1 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) sendfile(r1, r0, 0x0, 0x3a) 24.40979ms ago: executing program 3 (id=1967): setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000080)={@loopback={0x2}, 0x0, 0x0, 0xff, 0x1}, 0x20) 24.174951ms ago: executing program 4 (id=1968): r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000001100), 0x2) ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000001180)={0xffffffffffffffff, 0x3, 0x0, 0x100000000}) 0s ago: executing program 0 (id=1969): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000900)={0x2, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="18f8ffff"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x61e5cc96}, 0x90) getsockopt$inet_mptcp_buf(0xffffffffffffffff, 0x11c, 0x3, &(0x7f00000000c0)=""/113, &(0x7f0000000080)=0x71) kernel console output (not intermixed with test programs): 641715][T10775] bond_slave_1: left promiscuous mode [ 627.845948][T10792] IPVS: set_ctl: invalid protocol: 0 172.20.20.170:20001 [ 627.853168][T10269] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 628.204690][T10799] loop5: detected capacity change from 0 to 128 [ 628.508618][T10807] loop4: detected capacity change from 0 to 164 [ 629.438660][T10804] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1442'. [ 629.810345][ T29] audit: type=1326 audit(1723363188.315:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10800 comm="syz.2.1442" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7e9c7779f9 code=0x0 [ 629.865163][ T12] hsr_slave_0: left promiscuous mode [ 630.852096][ T12] hsr_slave_1: left promiscuous mode [ 631.022844][ T5238] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 631.028023][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 631.041247][ T5238] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 631.049352][ T5238] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 631.059561][ T5238] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 631.071089][ T5238] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 631.079771][ T5238] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 631.087770][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 631.164431][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 631.221063][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 631.248185][ T9497] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 631.257956][ T9497] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 631.266184][ T9497] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 631.276236][ T9497] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 631.295624][ T9497] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 631.303932][ T9497] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 631.312786][ T12] veth1_macvtap: left promiscuous mode [ 631.322860][ T12] veth0_macvtap: left promiscuous mode [ 631.328571][ T12] veth1_vlan: left promiscuous mode [ 631.362406][ T12] veth0_vlan: left promiscuous mode [ 631.441856][T10827] netlink: 209844 bytes leftover after parsing attributes in process `syz.4.1448'. [ 632.365206][ T12] pimreg (unregistering): left allmulticast mode [ 632.851905][ T12] team0 (unregistering): Port device team_slave_1 removed [ 632.933325][ T12] team0 (unregistering): Port device team_slave_0 removed [ 633.162499][ T5238] Bluetooth: hci2: command tx timeout [ 633.405205][ T5238] Bluetooth: hci6: command tx timeout [ 635.242569][ T5238] Bluetooth: hci2: command tx timeout [ 635.643243][ T5238] Bluetooth: hci6: command tx timeout [ 635.989576][T10852] vlan2: entered promiscuous mode [ 636.005922][T10852] vlan2: entered allmulticast mode [ 636.013559][T10852] bond0: entered allmulticast mode [ 636.018915][T10852] bond_slave_0: entered allmulticast mode [ 636.033638][T10852] bond_slave_1: entered allmulticast mode [ 636.039648][T10852] bond0: entered promiscuous mode [ 636.045497][T10852] bond_slave_0: entered promiscuous mode [ 636.051976][T10852] bond_slave_1: entered promiscuous mode [ 636.091248][T10852] bond0: left allmulticast mode [ 636.097493][T10852] bond_slave_0: left allmulticast mode [ 636.105086][T10852] bond_slave_1: left allmulticast mode [ 636.110678][T10852] bond0: left promiscuous mode [ 636.118639][T10852] bond_slave_0: left promiscuous mode [ 636.127421][T10852] bond_slave_1: left promiscuous mode [ 636.249250][T10858] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.1454'. [ 637.242252][ T5238] Bluetooth: hci1: command 0x0406 tx timeout [ 637.432272][ T5238] Bluetooth: hci2: command tx timeout [ 637.740942][ T5238] Bluetooth: hci6: command tx timeout [ 637.763205][T10876] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1455'. [ 638.037209][ T29] audit: type=1326 audit(1723363196.545:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10866 comm="syz.2.1455" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7e9c7779f9 code=0x0 [ 638.700481][T10904] loop4: detected capacity change from 0 to 164 [ 639.482556][ T9497] Bluetooth: hci2: command tx timeout [ 639.580953][T10908] loop5: detected capacity change from 0 to 128 [ 639.647424][T10822] chnl_net:caif_netlink_parms(): no params data found [ 639.730800][T10817] chnl_net:caif_netlink_parms(): no params data found [ 639.934337][T10914] loop2: detected capacity change from 0 to 164 [ 640.058555][ T9497] Bluetooth: hci6: command tx timeout [ 642.071937][T10936] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1473'. [ 642.160922][T10936] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1473'. [ 642.200221][T10936] gtp0: entered promiscuous mode [ 642.208703][T10936] gtp0: entered allmulticast mode [ 642.365124][T10948] loop4: detected capacity change from 0 to 128 [ 646.397837][T10822] bridge0: port 1(bridge_slave_0) entered blocking state [ 646.813382][T10822] bridge0: port 1(bridge_slave_0) entered disabled state [ 646.820712][T10822] bridge_slave_0: entered allmulticast mode [ 646.965626][T10822] bridge_slave_0: entered promiscuous mode [ 647.034707][T10822] bridge0: port 2(bridge_slave_1) entered blocking state [ 647.109723][T10822] bridge0: port 2(bridge_slave_1) entered disabled state [ 647.372681][T10822] bridge_slave_1: entered allmulticast mode [ 647.479192][T10822] bridge_slave_1: entered promiscuous mode [ 649.373344][T10817] bridge0: port 1(bridge_slave_0) entered blocking state [ 649.380630][T10817] bridge0: port 1(bridge_slave_0) entered disabled state [ 649.442409][T10817] bridge_slave_0: entered allmulticast mode [ 649.450268][T10817] bridge_slave_0: entered promiscuous mode [ 649.528972][T10999] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1486'. [ 649.546586][T10999] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1486'. [ 649.571195][T10999] gtp1: entered promiscuous mode [ 649.576845][T10999] gtp1: entered allmulticast mode [ 649.586284][T10817] bridge0: port 2(bridge_slave_1) entered blocking state [ 649.616856][T10817] bridge0: port 2(bridge_slave_1) entered disabled state [ 649.631131][T10817] bridge_slave_1: entered allmulticast mode [ 649.649691][T10817] bridge_slave_1: entered promiscuous mode [ 649.688613][T10822] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 651.194678][T10822] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 651.529483][T10817] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 651.558029][T10817] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 651.747876][ T5327] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 651.803842][T10822] team0: Port device team_slave_0 added [ 651.950945][T11043] vlan2: entered promiscuous mode [ 651.975094][T11043] vlan2: entered allmulticast mode [ 651.975231][ T5327] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 652.015269][T11043] bond0: entered allmulticast mode [ 652.020627][ T5327] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 652.033645][T11043] bond_slave_0: entered allmulticast mode [ 652.039541][T11043] bond_slave_1: entered allmulticast mode [ 652.045754][T11043] bond0: entered promiscuous mode [ 652.053783][T11043] bond_slave_0: entered promiscuous mode [ 652.060134][T11043] bond_slave_1: entered promiscuous mode [ 652.077160][ T5327] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 652.104810][ T5327] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 652.127718][T11043] bond0: left allmulticast mode [ 652.132191][ T5327] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 652.145364][T11043] bond_slave_0: left allmulticast mode [ 652.151073][T11043] bond_slave_1: left allmulticast mode [ 652.158368][T11043] bond0: left promiscuous mode [ 652.165086][T11043] bond_slave_0: left promiscuous mode [ 652.171197][T11043] bond_slave_1: left promiscuous mode [ 652.211520][ T5327] usb 4-1: config 0 descriptor?? [ 652.345835][T10822] team0: Port device team_slave_1 added [ 652.386546][T11047] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1497'. [ 652.401071][T11047] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1497'. [ 652.481536][T11047] gtp2: entered promiscuous mode [ 652.497451][T11047] gtp2: entered allmulticast mode [ 652.603044][T10817] team0: Port device team_slave_0 added [ 652.674584][T10817] team0: Port device team_slave_1 added [ 652.715959][ T5327] plantronics 0003:047F:FFFF.001E: No inputs registered, leaving [ 652.810247][T11061] loop2: detected capacity change from 0 to 1024 [ 652.825305][ T5327] plantronics 0003:047F:FFFF.001E: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 653.034807][T11037] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 653.050577][T11060] netlink: 'syz.4.1499': attribute type 1 has an invalid length. [ 653.065920][T11037] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 653.074212][T11060] netlink: 9 bytes leftover after parsing attributes in process `syz.4.1499'. [ 653.093222][T10822] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 653.114608][T10822] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 653.172711][T11061] EXT4-fs: Ignoring removed orlov option [ 653.202849][T10822] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 653.214052][T11061] EXT4-fs (loop2): Test dummy encryption mode enabled [ 653.232332][T11061] EXT4-fs (loop2): stripe (7) is not aligned with cluster size (16), stripe is disabled [ 653.234575][T11037] binder: BINDER_SET_CONTEXT_MGR already set [ 653.254835][T10822] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 653.272339][T11037] binder: 11035:11037 ioctl 4018620d 200001c0 returned -16 [ 653.293466][T10822] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 653.343647][T10822] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 653.368731][T11061] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 653.432665][ T5327] usb 4-1: USB disconnect, device number 29 [ 653.589402][T11076] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1501'. [ 653.607671][T11076] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1501'. [ 653.633990][T11076] gtp2: entered promiscuous mode [ 653.639128][T11076] gtp2: entered allmulticast mode [ 653.787115][T11061] fscrypt: AES-256-CBC-CTS using implementation "cts-cbc-aes-aesni" [ 653.842841][T10817] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 653.880519][T11086] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1502'. [ 653.893797][T10817] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 653.940646][T10817] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 653.991365][ T29] audit: type=1326 audit(1723363212.495:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11080 comm="syz.4.1502" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f54e2b779f9 code=0x0 [ 654.188450][T10817] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 654.212833][T10817] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 654.213292][T11061] fscrypt (loop2): Error allocating 'xts(aes)' transform: -4 [ 654.274088][T11061] overlayfs: upper fs does not support tmpfile. [ 654.297501][T11061] fscrypt: AES-256-XTS using implementation "xts-aes-vaes-avx2" [ 654.353297][T10817] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 654.362253][ T25] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 654.438922][T10822] hsr_slave_0: entered promiscuous mode [ 654.439284][T11061] overlayfs: failed index dir cleanup (-512) [ 654.461806][T10822] hsr_slave_1: entered promiscuous mode [ 654.469117][T11104] loop5: detected capacity change from 0 to 1024 [ 654.476696][T10822] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 654.483430][T11104] EXT4-fs: Ignoring removed orlov option [ 654.517352][T11061] overlayfs: try deleting index dir or mounting with '-o index=off' to disable inodes index. [ 654.534356][T11104] EXT4-fs (loop5): Test dummy encryption mode enabled [ 654.536292][T10822] Cannot create hsr debugfs directory [ 654.562317][T11104] EXT4-fs (loop5): stripe (7) is not aligned with cluster size (16), stripe is disabled [ 654.607762][ T25] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 654.629323][ T25] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 654.649123][T11104] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 654.662649][ T25] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 654.679308][ T25] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 654.688517][ T25] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 654.710948][ T25] usb 4-1: config 0 descriptor?? [ 654.805557][ T9165] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 656.115528][ T25] plantronics 0003:047F:FFFF.001F: No inputs registered, leaving [ 656.592428][ T25] plantronics 0003:047F:FFFF.001F: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 656.614547][T11096] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 656.705439][T11096] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 656.877027][T10817] hsr_slave_0: entered promiscuous mode [ 657.064918][T10817] hsr_slave_1: entered promiscuous mode [ 657.134972][T10817] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 657.189706][T10817] Cannot create hsr debugfs directory [ 657.448902][T11096] binder: BINDER_SET_CONTEXT_MGR already set [ 657.473122][ T5241] EXT4-fs error (device loop5): ext4_xattr_ibody_find:2240: inode #15: comm syz-executor: corrupted in-inode xattr: ea_inode specified without ea_inode feature enabled [ 657.477315][T11096] binder: 11095:11096 ioctl 4018620d 200001c0 returned -16 [ 657.549548][T11134] capability: warning: `syz.4.1509' uses deprecated v2 capabilities in a way that may be insecure [ 658.172594][ T5241] EXT4-fs error (device loop5): ext4_xattr_ibody_find:2240: inode #15: comm syz-executor: corrupted in-inode xattr: ea_inode specified without ea_inode feature enabled [ 658.502716][T11127] vlan2: entered promiscuous mode [ 658.507916][T11127] vlan2: entered allmulticast mode [ 658.516895][T11127] bond0: entered allmulticast mode [ 658.522536][T11127] bond_slave_0: entered allmulticast mode [ 658.528443][T11127] bond_slave_1: entered allmulticast mode [ 658.534738][T11127] bond0: entered promiscuous mode [ 658.544439][T11127] bond_slave_0: entered promiscuous mode [ 658.567222][T11127] bond_slave_1: entered promiscuous mode [ 658.592465][T11127] bond0: left allmulticast mode [ 658.611708][T11127] bond_slave_0: left allmulticast mode [ 658.628455][T11127] bond_slave_1: left allmulticast mode [ 658.646814][T11127] bond0: left promiscuous mode [ 658.651734][T11127] bond_slave_0: left promiscuous mode [ 658.663912][T11139] loop4: detected capacity change from 0 to 1024 [ 658.676829][T11127] bond_slave_1: left promiscuous mode [ 658.699042][T11139] EXT4-fs: Ignoring removed orlov option [ 658.729419][T11139] EXT4-fs (loop4): Test dummy encryption mode enabled [ 658.752796][T11139] EXT4-fs (loop4): stripe (7) is not aligned with cluster size (16), stripe is disabled [ 658.852384][T11139] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 659.006592][ T5245] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 659.257205][ T5241] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 659.276843][T11153] netlink: 209844 bytes leftover after parsing attributes in process `syz.4.1513'. [ 659.415738][ T25] usb 4-1: USB disconnect, device number 30 [ 661.064583][ T35] bridge_slave_1: left allmulticast mode [ 661.082268][ T35] bridge_slave_1: left promiscuous mode [ 661.088081][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 661.130990][T11171] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1518'. [ 661.142951][ T35] bridge_slave_0: left allmulticast mode [ 661.149673][ T35] bridge_slave_0: left promiscuous mode [ 661.165374][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 661.201772][ T35] bridge_slave_1: left allmulticast mode [ 661.209444][ T35] bridge_slave_1: left promiscuous mode [ 661.238095][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 661.273629][ T35] bridge_slave_0: left allmulticast mode [ 661.279298][ T35] bridge_slave_0: left promiscuous mode [ 661.312783][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 661.329289][ T29] audit: type=1326 audit(1723363219.835:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11168 comm="syz.3.1518" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7c73d779f9 code=0x0 [ 661.724262][ T5238] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 661.745393][ T5238] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 661.761218][ T5238] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 661.784160][ T5238] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 661.792997][ T5238] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 661.800408][ T5238] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 662.318507][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 662.367901][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 662.393611][ T35] bond0 (unregistering): Released all slaves [ 662.732805][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 662.749614][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 662.761954][ T35] bond0 (unregistering): Released all slaves [ 663.170282][ T35] hsr_slave_0: left promiscuous mode [ 663.192939][ T35] hsr_slave_1: left promiscuous mode [ 663.208965][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 663.229717][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 663.258139][ T35] hsr_slave_0: left promiscuous mode [ 663.273397][ T35] hsr_slave_1: left promiscuous mode [ 663.303516][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 663.348760][ T29] audit: type=1326 audit(1723363221.855:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11205 comm="syz.4.1520" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f54e2b779f9 code=0x0 [ 663.372962][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 663.890446][ T9497] Bluetooth: hci0: command tx timeout [ 664.054451][ T35] team0 (unregistering): Port device team_slave_1 removed [ 664.118798][ T35] team0 (unregistering): Port device team_slave_0 removed [ 664.803807][ T35] team0 (unregistering): Port device team_slave_1 removed [ 664.881907][ T35] team0 (unregistering): Port device team_slave_0 removed [ 665.972718][ T9497] Bluetooth: hci0: command tx timeout [ 666.003900][T11224] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1523'. [ 666.031318][T11222] vlan2: entered promiscuous mode [ 666.037484][T11222] vlan2: entered allmulticast mode [ 666.048457][T11222] bond0: entered allmulticast mode [ 666.060072][T11222] bond_slave_0: entered allmulticast mode [ 666.067091][T11222] bond_slave_1: entered allmulticast mode [ 666.073267][T11222] bond0: entered promiscuous mode [ 666.078408][T11222] bond_slave_0: entered promiscuous mode [ 666.088659][T11222] bond_slave_1: entered promiscuous mode [ 666.176753][T11222] bond0: left allmulticast mode [ 666.182586][T11222] bond_slave_0: left allmulticast mode [ 666.190781][T11222] bond_slave_1: left allmulticast mode [ 666.200770][T11222] bond0: left promiscuous mode [ 666.206821][ T29] audit: type=1326 audit(1723363224.695:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11219 comm="syz.3.1523" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7c73d779f9 code=0x0 [ 666.212474][T11222] bond_slave_0: left promiscuous mode [ 666.237218][T11222] bond_slave_1: left promiscuous mode [ 666.961924][T11185] chnl_net:caif_netlink_parms(): no params data found [ 667.257112][T10822] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 667.531778][T10822] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 667.906054][T10822] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 668.043781][ T9497] Bluetooth: hci0: command tx timeout [ 668.518558][T10822] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 668.676608][T11185] bridge0: port 1(bridge_slave_0) entered blocking state [ 668.702242][T11185] bridge0: port 1(bridge_slave_0) entered disabled state [ 668.709535][T11185] bridge_slave_0: entered allmulticast mode [ 668.744005][T11185] bridge_slave_0: entered promiscuous mode [ 668.805200][T11185] bridge0: port 2(bridge_slave_1) entered blocking state [ 668.832833][T11185] bridge0: port 2(bridge_slave_1) entered disabled state [ 668.859036][T11185] bridge_slave_1: entered allmulticast mode [ 668.881752][T11185] bridge_slave_1: entered promiscuous mode [ 669.047101][T11185] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 669.080780][T11185] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 670.122264][ T9497] Bluetooth: hci0: command tx timeout [ 670.261063][ T35] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 670.518574][T11185] team0: Port device team_slave_0 added [ 670.586950][T11185] team0: Port device team_slave_1 added [ 670.703222][ T35] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 670.914069][ T35] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 671.005389][T11185] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 671.071147][T11185] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 671.244363][T11185] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 671.286023][T11185] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 671.297856][T11185] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 671.722264][T11185] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 671.920206][ T35] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 672.811879][T10817] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 673.096537][T11283] vlan2: entered promiscuous mode [ 673.110358][T11283] vlan2: entered allmulticast mode [ 673.139369][T11283] bond0: entered allmulticast mode [ 673.165101][T11283] bond_slave_0: entered allmulticast mode [ 673.187141][T11283] bond_slave_1: entered allmulticast mode [ 673.242274][T11283] bond0: entered promiscuous mode [ 673.243850][ T5238] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 673.255907][T11283] bond_slave_0: entered promiscuous mode [ 673.263712][T11283] bond_slave_1: entered promiscuous mode [ 673.272434][ T5238] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 673.293594][ T5238] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 673.311304][T11283] bond0: left allmulticast mode [ 673.316452][ T5238] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 673.333087][T11283] bond_slave_0: left allmulticast mode [ 673.342443][ T5238] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 673.349942][ T5238] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 673.378880][T11283] bond_slave_1: left allmulticast mode [ 673.397946][T11283] bond0: left promiscuous mode [ 673.409128][T11283] bond_slave_0: left promiscuous mode [ 673.420580][T11283] bond_slave_1: left promiscuous mode [ 673.478794][T10817] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 673.632136][T10817] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 673.671095][T10817] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 673.681367][T11290] loop4: detected capacity change from 0 to 128 [ 673.950070][T11185] hsr_slave_0: entered promiscuous mode [ 673.995228][T11185] hsr_slave_1: entered promiscuous mode [ 674.012498][T11185] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 674.025135][T11185] Cannot create hsr debugfs directory [ 675.098338][T11304] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1539'. [ 675.178175][T11307] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1540'. [ 675.209270][T11307] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1540'. [ 675.242613][T11307] gtp3: entered promiscuous mode [ 675.251935][T11307] gtp3: entered allmulticast mode [ 675.267766][ T29] audit: type=1326 audit(1723363233.775:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11301 comm="syz.3.1539" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7c73d779f9 code=0x0 [ 675.402375][ T9497] Bluetooth: hci4: command tx timeout [ 675.459520][ T35] bridge_slave_1: left allmulticast mode [ 675.482480][ T35] bridge_slave_1: left promiscuous mode [ 675.490416][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 675.523837][ T35] bridge_slave_0: left allmulticast mode [ 675.537497][ T35] bridge_slave_0: left promiscuous mode [ 675.552940][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 676.320047][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 676.346680][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 676.359149][ T35] bond0 (unregistering): Released all slaves [ 676.743310][T10822] 8021q: adding VLAN 0 to HW filter on device bond0 [ 676.785324][T10822] 8021q: adding VLAN 0 to HW filter on device team0 [ 676.909195][T10822] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 676.958419][T10822] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 677.193294][ T69] bridge0: port 1(bridge_slave_0) entered blocking state [ 677.200535][ T69] bridge0: port 1(bridge_slave_0) entered forwarding state [ 677.252697][ T69] bridge0: port 2(bridge_slave_1) entered blocking state [ 677.259915][ T69] bridge0: port 2(bridge_slave_1) entered forwarding state [ 677.542416][ T9497] Bluetooth: hci4: command tx timeout [ 678.124636][T10817] 8021q: adding VLAN 0 to HW filter on device bond0 [ 678.136440][T11286] chnl_net:caif_netlink_parms(): no params data found [ 678.338367][T11337] vlan2: entered promiscuous mode [ 678.344970][T11337] vlan2: entered allmulticast mode [ 678.355538][T11337] bond0: entered allmulticast mode [ 678.364327][T11337] bond_slave_0: entered allmulticast mode [ 678.370121][T11337] bond_slave_1: entered allmulticast mode [ 678.377291][T11337] bond0: entered promiscuous mode [ 678.382883][T11337] bond_slave_0: entered promiscuous mode [ 678.390769][T11337] bond_slave_1: entered promiscuous mode [ 678.404131][T11337] bond0: left allmulticast mode [ 678.409231][T11337] bond_slave_0: left allmulticast mode [ 678.417115][T11337] bond_slave_1: left allmulticast mode [ 678.426469][T11337] bond0: left promiscuous mode [ 678.431325][T11337] bond_slave_0: left promiscuous mode [ 678.438053][T11337] bond_slave_1: left promiscuous mode [ 678.877512][T10817] 8021q: adding VLAN 0 to HW filter on device team0 [ 678.944934][ T35] hsr_slave_0: left promiscuous mode [ 678.990413][ T35] hsr_slave_1: left promiscuous mode [ 679.009558][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 679.032548][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 679.069035][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 679.097037][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 679.164927][ T35] veth1_macvtap: left promiscuous mode [ 679.171877][ T35] veth0_macvtap: left promiscuous mode [ 679.183048][ T35] veth1_vlan: left promiscuous mode [ 679.189042][ T35] veth0_vlan: left promiscuous mode [ 679.222296][ T29] audit: type=1326 audit(1723363237.725:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11354 comm="syz.3.1545" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7c73d779f9 code=0x0 [ 679.406674][ T35] pimreg (unregistering): left allmulticast mode [ 679.568691][ T9497] Bluetooth: hci4: command tx timeout [ 679.973940][ T35] team0 (unregistering): Port device team_slave_1 removed [ 680.013440][ T35] team0 (unregistering): Port device team_slave_0 removed [ 680.571842][T10822] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 680.626723][ T5530] bridge0: port 1(bridge_slave_0) entered blocking state [ 680.633907][ T5530] bridge0: port 1(bridge_slave_0) entered forwarding state [ 680.653805][T11286] bridge0: port 1(bridge_slave_0) entered blocking state [ 680.663606][T11286] bridge0: port 1(bridge_slave_0) entered disabled state [ 680.676987][T11286] bridge_slave_0: entered allmulticast mode [ 680.685856][T11286] bridge_slave_0: entered promiscuous mode [ 680.720561][T11286] bridge0: port 2(bridge_slave_1) entered blocking state [ 680.738612][T11286] bridge0: port 2(bridge_slave_1) entered disabled state [ 680.746143][T11286] bridge_slave_1: entered allmulticast mode [ 680.771971][T11286] bridge_slave_1: entered promiscuous mode [ 680.840289][T11286] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 680.961962][T11286] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 681.365528][T11185] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 681.722343][ T9497] Bluetooth: hci4: command tx timeout [ 681.766120][ T5530] bridge0: port 2(bridge_slave_1) entered blocking state [ 681.773364][ T5530] bridge0: port 2(bridge_slave_1) entered forwarding state [ 682.322350][T11185] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 682.403880][T11185] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 682.459744][T11286] team0: Port device team_slave_0 added [ 682.501167][T11286] team0: Port device team_slave_1 added [ 682.598107][T11185] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 682.649521][T10817] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 682.687067][T10817] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 682.690560][T11388] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1551'. [ 682.773120][T11286] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 682.791223][T11286] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 682.829579][T11286] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 682.931303][T10822] veth0_vlan: entered promiscuous mode [ 683.033017][ T29] audit: type=1326 audit(1723363241.515:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11383 comm="syz.3.1551" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7c73d779f9 code=0x0 [ 683.095648][T11286] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 683.132246][T11286] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 683.368185][T11286] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 684.068906][T11286] hsr_slave_0: entered promiscuous mode [ 684.113926][T11286] hsr_slave_1: entered promiscuous mode [ 684.147588][T11286] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 684.161001][T11286] Cannot create hsr debugfs directory [ 684.238565][T10822] veth1_vlan: entered promiscuous mode [ 684.598570][T11408] vlan2: entered promiscuous mode [ 684.607393][T11408] vlan2: entered allmulticast mode [ 684.617556][T11408] bond0: entered allmulticast mode [ 685.490008][T11408] bond_slave_0: entered allmulticast mode [ 685.502126][T11408] bond_slave_1: entered allmulticast mode [ 685.508089][T11408] bond0: entered promiscuous mode [ 685.515456][ T1255] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.521814][ T1255] ieee802154 phy1 wpan1: encryption failed: -22 [ 685.553168][T11408] bond_slave_0: entered promiscuous mode [ 685.559328][T11408] bond_slave_1: entered promiscuous mode [ 685.618042][T11408] bond0: left allmulticast mode [ 685.630029][T11408] bond_slave_0: left allmulticast mode [ 685.640267][T11408] bond_slave_1: left allmulticast mode [ 685.652293][T11408] bond0: left promiscuous mode [ 685.663382][T11408] bond_slave_0: left promiscuous mode [ 685.675501][T11408] bond_slave_1: left promiscuous mode [ 685.845414][ T5530] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 686.031499][ T5530] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 686.067228][T10817] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 686.184715][ T5530] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 686.318327][ T5530] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 686.378210][T10822] veth0_macvtap: entered promiscuous mode [ 686.419892][T10822] veth1_macvtap: entered promiscuous mode [ 686.520180][T10822] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 686.533069][T10822] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 686.548582][T10822] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 686.559384][T10822] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 686.569752][T10822] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 686.580658][T10822] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 686.593267][T10822] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 686.680154][T10822] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 686.691432][T10822] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 686.703229][T10822] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 686.714528][T10822] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 686.726189][T10822] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 686.737328][T10822] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 686.759239][T10822] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 686.816131][T10817] veth0_vlan: entered promiscuous mode [ 686.861025][T10822] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 686.880010][T10822] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 686.889510][T10822] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 686.902096][T10822] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 686.940869][ T5530] bridge_slave_1: left allmulticast mode [ 686.950684][ T5530] bridge_slave_1: left promiscuous mode [ 686.958000][ T5530] bridge0: port 2(bridge_slave_1) entered disabled state [ 686.969763][ T5530] bridge_slave_0: left allmulticast mode [ 686.976993][ T5530] bridge_slave_0: left promiscuous mode [ 686.983167][ T5530] bridge0: port 1(bridge_slave_0) entered disabled state [ 687.504290][ T5530] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 687.523950][ T5530] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 687.545657][ T5530] bond0 (unregistering): Released all slaves [ 687.628054][T11185] 8021q: adding VLAN 0 to HW filter on device bond0 [ 687.698179][T10817] veth1_vlan: entered promiscuous mode [ 687.846326][T11185] 8021q: adding VLAN 0 to HW filter on device team0 [ 688.018795][ T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 688.049447][ T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 688.109880][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 688.117112][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 688.267148][ T1118] bridge0: port 2(bridge_slave_1) entered blocking state [ 688.274583][ T1118] bridge0: port 2(bridge_slave_1) entered forwarding state [ 689.030857][ T5530] hsr_slave_0: left promiscuous mode [ 689.088725][ T5530] hsr_slave_1: left promiscuous mode [ 689.101434][ T5238] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 689.117300][ T5238] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 689.132565][ T5530] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 689.140026][ T5530] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 689.201349][ T5530] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 689.227272][ T5530] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 689.314953][ T5238] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 689.325949][ T5238] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 689.338414][ T5238] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 689.349420][ T5238] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 689.414316][ T5530] veth1_macvtap: left promiscuous mode [ 689.419909][ T5530] veth0_macvtap: left promiscuous mode [ 689.425213][ T9497] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 689.435407][ T5530] veth1_vlan: left promiscuous mode [ 689.440779][ T5530] veth0_vlan: left promiscuous mode [ 689.450764][ T9497] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 689.461817][ T9497] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 689.552885][ T9497] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 689.565197][ T9497] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 689.572736][ T9497] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 690.412532][T11435] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1560'. [ 690.636329][ T29] audit: type=1326 audit(1723363249.145:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11433 comm="syz.4.1560" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f54e2b779f9 code=0x0 [ 691.049486][ T5530] team0 (unregistering): Port device team_slave_1 removed [ 691.130397][ T5530] team0 (unregistering): Port device team_slave_0 removed [ 691.402490][ T9497] Bluetooth: hci1: command tx timeout [ 691.642266][ T9497] Bluetooth: hci2: command tx timeout [ 691.932877][T11286] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 691.998529][T11286] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 692.381114][T11286] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 692.443695][T11286] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 693.127212][ T5530] IPVS: stop unused estimator thread 0... [ 693.455813][T11455] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1563'. [ 693.483663][ T9497] Bluetooth: hci1: command tx timeout [ 693.572564][ T5530] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 693.651168][ T29] audit: type=1326 audit(1723363252.155:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11452 comm="syz.3.1563" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7c73d779f9 code=0x0 [ 693.681302][T11459] loop4: detected capacity change from 0 to 128 [ 693.722974][ T9497] Bluetooth: hci2: command tx timeout [ 694.882454][ T5530] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 695.118999][T11185] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 695.129541][T11425] chnl_net:caif_netlink_parms(): no params data found [ 695.284040][ T5530] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 695.371416][T11469] vlan2: entered promiscuous mode [ 695.377938][T11469] vlan2: entered allmulticast mode [ 695.391118][T11469] bond0: entered allmulticast mode [ 695.562623][ T9497] Bluetooth: hci1: command tx timeout [ 695.802148][ T9497] Bluetooth: hci2: command tx timeout [ 696.643340][T11469] bond_slave_0: entered allmulticast mode [ 696.652426][T11469] bond_slave_1: entered allmulticast mode [ 696.658356][T11469] bond0: entered promiscuous mode [ 696.663870][T11469] bond_slave_0: entered promiscuous mode [ 696.671798][T11469] bond_slave_1: entered promiscuous mode [ 696.771454][T11469] bond0: left allmulticast mode [ 696.790387][T11469] bond_slave_0: left allmulticast mode [ 696.805336][T11469] bond_slave_1: left allmulticast mode [ 696.821398][T11469] bond0: left promiscuous mode [ 696.831479][T11469] bond_slave_0: left promiscuous mode [ 696.842471][T11469] bond_slave_1: left promiscuous mode [ 697.171820][ T5530] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 697.541338][T11286] 8021q: adding VLAN 0 to HW filter on device bond0 [ 697.573027][T11429] chnl_net:caif_netlink_parms(): no params data found [ 697.642350][ T9497] Bluetooth: hci1: command tx timeout [ 697.721138][T11425] bridge0: port 1(bridge_slave_0) entered blocking state [ 697.752341][T11425] bridge0: port 1(bridge_slave_0) entered disabled state [ 697.759612][T11425] bridge_slave_0: entered allmulticast mode [ 697.774233][T11425] bridge_slave_0: entered promiscuous mode [ 697.882233][ T9497] Bluetooth: hci2: command tx timeout [ 697.966677][T11425] bridge0: port 2(bridge_slave_1) entered blocking state [ 697.987078][T11425] bridge0: port 2(bridge_slave_1) entered disabled state [ 697.999023][T11425] bridge_slave_1: entered allmulticast mode [ 697.999025][T11484] loop4: detected capacity change from 0 to 32768 [ 698.024292][T11425] bridge_slave_1: entered promiscuous mode [ 698.286070][T11286] 8021q: adding VLAN 0 to HW filter on device team0 [ 698.301480][T11425] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 698.338736][T11425] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 698.650028][T11425] team0: Port device team_slave_0 added [ 698.705265][T11503] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1573'. [ 698.731645][ T62] bridge0: port 1(bridge_slave_0) entered blocking state [ 698.738828][ T62] bridge0: port 1(bridge_slave_0) entered forwarding state [ 698.752810][T11185] veth0_vlan: entered promiscuous mode [ 698.778078][T11425] team0: Port device team_slave_1 added [ 698.792925][T11504] warning: `syz.4.1573' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 698.816230][T11429] bridge0: port 1(bridge_slave_0) entered blocking state [ 698.830868][T11429] bridge0: port 1(bridge_slave_0) entered disabled state [ 698.846787][T11429] bridge_slave_0: entered allmulticast mode [ 698.864943][T11429] bridge_slave_0: entered promiscuous mode [ 698.880782][T11429] bridge0: port 2(bridge_slave_1) entered blocking state [ 698.910579][T11429] bridge0: port 2(bridge_slave_1) entered disabled state [ 698.927812][T11429] bridge_slave_1: entered allmulticast mode [ 698.954340][T11429] bridge_slave_1: entered promiscuous mode [ 698.988723][T11510] loop4: detected capacity change from 0 to 256 [ 699.031857][T11510] exfat: Deprecated parameter 'utf8' [ 699.040152][T11510] exfat: Deprecated parameter 'namecase' [ 699.049421][T11510] exfat: Deprecated parameter 'utf8' [ 699.138996][T11510] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d) [ 699.181121][T11185] veth1_vlan: entered promiscuous mode [ 699.266694][T11510] exFAT-fs (loop4): error, tried to truncate zeroed cluster. [ 699.310160][ T29] audit: type=1800 audit(1723363257.795:50): pid=11510 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1574" name="file1" dev="loop4" ino=1048859 res=0 errno=0 [ 699.378698][T11429] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 699.403728][T11425] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 699.410788][T11425] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 699.474872][T11425] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 699.519420][T11425] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 699.541797][T11425] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 699.640296][T11425] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 699.690172][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 699.697413][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 699.766086][T11429] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 699.883588][T11532] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1579'. [ 699.979126][T11429] team0: Port device team_slave_0 added [ 700.055575][T11533] vlan2: entered promiscuous mode [ 700.061277][T11533] vlan2: entered allmulticast mode [ 700.069639][ T29] audit: type=1326 audit(1723363258.585:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11528 comm="syz.3.1579" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7c73d779f9 code=0x0 [ 700.070542][T11533] bond0: entered allmulticast mode [ 700.097261][T11533] bond_slave_0: entered allmulticast mode [ 700.103591][T11533] bond_slave_1: entered allmulticast mode [ 700.109643][T11533] bond0: entered promiscuous mode [ 700.116087][T11533] bond_slave_0: entered promiscuous mode [ 700.123180][T11533] bond_slave_1: entered promiscuous mode [ 700.167185][T11533] bond0: left allmulticast mode [ 700.173448][T11533] bond_slave_0: left allmulticast mode [ 700.182743][T11533] bond_slave_1: left allmulticast mode [ 700.190312][T11533] bond0: left promiscuous mode [ 700.196116][T11533] bond_slave_0: left promiscuous mode [ 700.202289][T11533] bond_slave_1: left promiscuous mode [ 700.313262][T11429] team0: Port device team_slave_1 added [ 700.535912][T11425] hsr_slave_0: entered promiscuous mode [ 700.551540][T11425] hsr_slave_1: entered promiscuous mode [ 700.560792][T11425] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 700.610337][T11425] Cannot create hsr debugfs directory [ 700.662918][T11185] veth0_macvtap: entered promiscuous mode [ 700.813438][T11429] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 700.825197][T11429] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 700.836157][T11541] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1581'. [ 700.855084][T11429] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 700.961950][T11185] veth1_macvtap: entered promiscuous mode [ 700.976231][ T5530] bridge_slave_1: left allmulticast mode [ 700.981905][ T5530] bridge_slave_1: left promiscuous mode [ 700.999698][ T5530] bridge0: port 2(bridge_slave_1) entered disabled state [ 701.026293][ T5530] bridge_slave_0: left allmulticast mode [ 701.031971][ T5530] bridge_slave_0: left promiscuous mode [ 701.048005][ T5530] bridge0: port 1(bridge_slave_0) entered disabled state [ 701.056271][ T29] audit: type=1326 audit(1723363259.565:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11543 comm="syz.3.1582" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7c73d779f9 code=0x0 [ 701.086163][ T5530] bridge_slave_1: left allmulticast mode [ 701.098345][ T5530] bridge_slave_1: left promiscuous mode [ 701.104775][ T5530] bridge0: port 2(bridge_slave_1) entered disabled state [ 701.123622][ T5530] bridge_slave_0: left allmulticast mode [ 701.141341][ T5530] bridge_slave_0: left promiscuous mode [ 701.149948][ T5530] bridge0: port 1(bridge_slave_0) entered disabled state [ 701.849041][ T5530] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 701.861562][ T5530] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 701.873702][ T5530] bond0 (unregistering): Released all slaves [ 701.978602][ T5530] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 701.991167][ T5530] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 702.003713][ T5530] bond0 (unregistering): Released all slaves [ 702.018005][T11539] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1580'. [ 702.028383][T11429] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 702.036070][T11429] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 702.070195][T11429] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 702.456468][T11429] hsr_slave_0: entered promiscuous mode [ 702.466070][T11429] hsr_slave_1: entered promiscuous mode [ 702.473520][T11429] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 702.481101][T11429] Cannot create hsr debugfs directory [ 702.749226][ T5530] hsr_slave_0: left promiscuous mode [ 702.763467][ T5530] hsr_slave_1: left promiscuous mode [ 702.777007][ T5530] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 702.789642][ T5530] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 702.808404][ T5530] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 702.820784][ T5530] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 702.848686][ T5530] hsr_slave_0: left promiscuous mode [ 702.863299][ T5530] hsr_slave_1: left promiscuous mode [ 702.869869][ T5530] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 702.880004][ T5530] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 702.932386][ T5327] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 702.979742][ T5530] veth1_macvtap: left promiscuous mode [ 702.990113][ T5530] veth0_macvtap: left promiscuous mode [ 703.000800][ T5530] veth1_vlan: left promiscuous mode [ 703.012433][ T5530] veth0_vlan: left promiscuous mode [ 703.030977][ T5530] veth1_vlan: left promiscuous mode [ 703.040600][ T5530] veth0_vlan: left promiscuous mode [ 703.167389][ T5327] usb 4-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 703.192089][ T5327] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 703.200112][ T5327] usb 4-1: Product: syz [ 703.222644][ T5327] usb 4-1: Manufacturer: syz [ 703.227275][ T5327] usb 4-1: SerialNumber: syz [ 703.247210][ T5327] usb 4-1: config 0 descriptor?? [ 703.686680][ T5327] usb 4-1: Firmware: major: 15, minor: 97, hardware type: UNKNOWN (121) [ 703.890957][ T5327] usb 4-1: failed to fetch extended address, random address set [ 703.919229][ T5327] usb 4-1: atusb_probe: initialization failed, error = -524 [ 703.932800][ T5327] atusb 4-1:0.0: probe with driver atusb failed with error -524 [ 704.112344][ T9560] usb 4-1: USB disconnect, device number 31 [ 704.271070][ T5530] team0 (unregistering): Port device team_slave_1 removed [ 704.313993][ T5530] team0 (unregistering): Port device team_slave_0 removed [ 706.090570][ T5530] team0 (unregistering): Port device team_slave_1 removed [ 706.192713][ T5530] team0 (unregistering): Port device team_slave_0 removed [ 706.741099][T11185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 706.754177][T11185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 706.764136][T11185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 706.776835][T11185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 706.789606][T11185] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 706.801295][T11185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 706.813597][T11185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 706.824339][T11185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 706.834887][T11185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 706.849112][T11185] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 706.880803][T11580] vlan2: entered promiscuous mode [ 706.888381][T11580] vlan2: entered allmulticast mode [ 706.894652][T11580] bond0: entered allmulticast mode [ 706.899887][T11580] bond_slave_0: entered allmulticast mode [ 706.906575][T11580] bond_slave_1: entered allmulticast mode [ 706.912646][T11580] bond0: entered promiscuous mode [ 706.919123][T11580] bond_slave_0: entered promiscuous mode [ 706.925767][T11580] bond_slave_1: entered promiscuous mode [ 706.946507][T11580] bond0: left allmulticast mode [ 706.956100][T11580] bond_slave_0: left allmulticast mode [ 706.969548][T11580] bond_slave_1: left allmulticast mode [ 706.980774][T11580] bond0: left promiscuous mode [ 706.990678][T11580] bond_slave_0: left promiscuous mode [ 707.008422][T11580] bond_slave_1: left promiscuous mode [ 707.115398][T11185] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 707.128873][T11185] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 707.138308][T11185] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 707.147344][T11185] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 708.401367][T11286] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 708.854037][ T69] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 708.895839][ T69] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 709.005872][T11286] veth0_vlan: entered promiscuous mode [ 709.761065][T11286] veth1_vlan: entered promiscuous mode [ 709.846274][ T62] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 709.872449][ T62] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 710.103069][T11286] veth0_macvtap: entered promiscuous mode [ 710.232691][ T5290] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 710.248698][T11631] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1517'. [ 710.349535][T11286] veth1_macvtap: entered promiscuous mode [ 710.444076][ T5290] usb 4-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 710.478807][ T5290] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 710.513637][ T5290] usb 4-1: Product: syz [ 710.517855][ T5290] usb 4-1: Manufacturer: syz [ 710.532768][ T5290] usb 4-1: SerialNumber: syz [ 710.546760][T11286] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 710.567297][ T5290] usb 4-1: config 0 descriptor?? [ 710.593008][T11286] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 710.615404][T11286] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 710.643630][T11286] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 710.672299][T11286] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 710.714373][T11286] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 710.717808][T11640] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1601'. [ 710.743104][T11286] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 711.013581][ T5290] usb 4-1: Firmware: major: 15, minor: 97, hardware type: UNKNOWN (121) [ 711.474959][ T5290] usb 4-1: failed to fetch extended address, random address set [ 711.484272][ T5290] usb 4-1: atusb_probe: initialization failed, error = -524 [ 711.484433][T11286] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 711.492896][ T5290] atusb 4-1:0.0: probe with driver atusb failed with error -524 [ 711.529111][T11286] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 711.540566][T11286] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 711.552089][T11286] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 711.563708][T11286] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 711.607401][T11286] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 711.628662][T11286] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 711.730676][ T5290] usb 4-1: USB disconnect, device number 32 [ 711.758139][ T29] audit: type=1326 audit(1723363270.255:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11636 comm="syz.5.1601" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8c5d5779f9 code=0x0 [ 711.827337][T11286] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 711.862901][T11286] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 711.872749][T11286] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 711.888209][T11286] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 712.024252][T11649] vlan2: entered promiscuous mode [ 712.029332][T11649] vlan2: entered allmulticast mode [ 712.078202][T11649] bond0: entered allmulticast mode [ 712.092123][T11649] bond_slave_0: entered allmulticast mode [ 712.108602][T11649] bond_slave_1: entered allmulticast mode [ 712.114802][T11649] bond0: entered promiscuous mode [ 712.119841][T11649] bond_slave_0: entered promiscuous mode [ 712.127065][T11649] bond_slave_1: entered promiscuous mode [ 712.151536][T11649] bond0: left allmulticast mode [ 712.158809][T11649] bond_slave_0: left allmulticast mode [ 712.164498][T11649] bond_slave_1: left allmulticast mode [ 712.170008][T11649] bond0: left promiscuous mode [ 712.179058][T11649] bond_slave_0: left promiscuous mode [ 712.185779][T11649] bond_slave_1: left promiscuous mode [ 713.598638][T11658] loop3: detected capacity change from 0 to 512 [ 713.686924][T11658] EXT4-fs warning (device loop3): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 713.710166][T11658] EXT4-fs warning (device loop3): dx_probe:881: Enable large directory feature to access it [ 713.721954][T11658] EXT4-fs warning (device loop3): dx_probe:966: inode #2: comm syz.3.1606: Corrupt directory, running e2fsck is recommended [ 713.741364][T11658] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -117 [ 713.770245][T11658] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2240: inode #15: comm syz.3.1606: corrupted in-inode xattr: invalid ea_ino [ 713.808536][T11668] IPVS: set_ctl: invalid protocol: 0 172.20.20.170:20001 [ 713.827350][T11429] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 713.856146][T11658] EXT4-fs (loop3): Remounting filesystem read-only [ 713.906426][T11658] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 714.050483][T11429] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 714.126655][T11429] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 714.217971][T11429] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 714.301604][ T9202] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 714.434437][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 714.445158][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 714.926056][T11679] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1610'. [ 715.076608][T11425] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 715.149235][T11425] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 715.159121][T11682] loop4: detected capacity change from 0 to 512 [ 715.166033][ T5530] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 715.174654][ T5530] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 715.188931][T11425] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 715.220414][T11682] EXT4-fs warning (device loop4): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 715.258203][T11425] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 715.289257][T11682] EXT4-fs warning (device loop4): dx_probe:881: Enable large directory feature to access it [ 715.361323][T11682] EXT4-fs warning (device loop4): dx_probe:966: inode #2: comm syz.4.1611: Corrupt directory, running e2fsck is recommended [ 715.438453][T11682] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -117 [ 715.699370][T11682] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2240: inode #15: comm syz.4.1611: corrupted in-inode xattr: invalid ea_ino [ 716.238627][T11682] EXT4-fs (loop4): Remounting filesystem read-only [ 716.401738][T11682] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 716.635873][T11429] 8021q: adding VLAN 0 to HW filter on device bond0 [ 716.879941][ T5245] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 716.999962][T11429] 8021q: adding VLAN 0 to HW filter on device team0 [ 717.068332][ T5530] bridge0: port 1(bridge_slave_0) entered blocking state [ 717.075579][ T5530] bridge0: port 1(bridge_slave_0) entered forwarding state [ 717.161556][T11425] 8021q: adding VLAN 0 to HW filter on device bond0 [ 717.417981][ T5530] bridge0: port 2(bridge_slave_1) entered blocking state [ 717.425264][ T5530] bridge0: port 2(bridge_slave_1) entered forwarding state [ 720.320264][T11425] 8021q: adding VLAN 0 to HW filter on device team0 [ 720.464964][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 720.472220][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 720.538188][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 720.545425][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 720.576582][T11723] loop4: detected capacity change from 0 to 8 [ 720.671392][T11724] vlan2: entered promiscuous mode [ 720.677176][T11724] vlan2: entered allmulticast mode [ 720.710511][T11724] bond0: entered allmulticast mode [ 720.720589][T11724] bond_slave_0: entered allmulticast mode [ 720.729789][T11724] bond_slave_1: entered allmulticast mode [ 720.739596][T11724] bond0: entered promiscuous mode [ 720.751185][T11724] bond_slave_0: entered promiscuous mode [ 720.781391][T11724] bond_slave_1: entered promiscuous mode [ 720.895905][T11724] bond0: left allmulticast mode [ 720.915917][T11724] bond_slave_0: left allmulticast mode [ 720.940817][T11724] bond_slave_1: left allmulticast mode [ 720.950493][T11724] bond0: left promiscuous mode [ 720.972403][T11724] bond_slave_0: left promiscuous mode [ 721.001096][T11724] bond_slave_1: left promiscuous mode [ 721.174454][ T29] audit: type=1326 audit(1723363279.675:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11731 comm="syz.2.1619" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f69ecb779f9 code=0x0 [ 722.648304][T11746] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1621'. [ 722.992828][ T5290] usb 6-1: new high-speed USB device number 30 using dummy_hcd [ 723.217461][ T5290] usb 6-1: Using ep0 maxpacket: 32 [ 723.225311][T11429] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 723.323062][ T5290] usb 6-1: string descriptor 0 read error: -22 [ 723.329568][ T5290] usb 6-1: New USB device found, idVendor=16c0, idProduct=05df, bcdDevice=b2.bf [ 724.241650][ T5290] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 724.256706][ T5290] usb 6-1: config 0 descriptor?? [ 724.325543][T11429] veth0_vlan: entered promiscuous mode [ 724.417680][T11429] veth1_vlan: entered promiscuous mode [ 724.654018][ T8] usb 6-1: USB disconnect, device number 30 [ 724.774402][T11425] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 725.218477][T11429] veth0_macvtap: entered promiscuous mode [ 725.516328][T11429] veth1_macvtap: entered promiscuous mode [ 725.834908][T11429] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 725.877819][T11760] loop3: detected capacity change from 0 to 32768 [ 725.899663][T11429] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 725.953603][T11429] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 726.032279][T11429] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 726.078003][T11429] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 726.089903][T11429] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 726.106305][T11429] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 726.125306][T11429] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 726.947544][T11429] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 727.021214][T11429] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 727.072105][T11429] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 727.138972][T11429] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 727.155633][T11800] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1635'. [ 727.185773][T11429] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 727.217247][T11429] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 727.255940][T11429] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 727.292719][T11429] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 727.322171][T11429] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 727.346705][T11429] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 727.404363][T11797] vlan2: entered promiscuous mode [ 727.416319][T11797] vlan2: entered allmulticast mode [ 727.435534][T11797] bond0: entered allmulticast mode [ 727.451866][T11797] bond_slave_0: entered allmulticast mode [ 727.477850][T11797] bond_slave_1: entered allmulticast mode [ 727.493086][T11797] bond0: entered promiscuous mode [ 727.508855][T11797] bond_slave_0: entered promiscuous mode [ 727.522604][T11797] bond_slave_1: entered promiscuous mode [ 727.647174][T11797] bond0: left allmulticast mode [ 727.661147][T11797] bond_slave_0: left allmulticast mode [ 727.678752][T11797] bond_slave_1: left allmulticast mode [ 727.693843][T11797] bond0: left promiscuous mode [ 727.705024][T11797] bond_slave_0: left promiscuous mode [ 727.920974][T11797] bond_slave_1: left promiscuous mode [ 729.141680][T11429] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 729.611315][T11429] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 729.655239][T11429] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 729.695768][T11429] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 729.965576][T11425] veth0_vlan: entered promiscuous mode [ 730.269118][T11425] veth1_vlan: entered promiscuous mode [ 730.622844][ T5288] usb 6-1: new high-speed USB device number 31 using dummy_hcd [ 731.019079][ T29] audit: type=1326 audit(1723363289.525:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11836 comm="syz.2.1645" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f69ecb779f9 code=0x0 [ 731.066966][ T5288] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 731.142128][ T5288] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 731.222197][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 731.250460][ T5288] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 731.286690][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 731.380927][ T5288] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 731.461143][ T5288] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 731.475142][T11425] veth0_macvtap: entered promiscuous mode [ 731.718892][ T5288] usb 6-1: config 0 descriptor?? [ 731.740430][T11425] veth1_macvtap: entered promiscuous mode [ 732.583240][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 732.711687][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 732.815488][T11425] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 732.887376][T11425] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 732.915638][ T5288] plantronics 0003:047F:FFFF.0020: No inputs registered, leaving [ 732.946098][T11425] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 732.971324][ T5288] plantronics 0003:047F:FFFF.0020: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 732.997541][T11425] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 733.043359][T11425] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 733.090905][T11425] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 733.317786][T11425] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 733.331586][T11425] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 733.356886][T11425] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 734.292409][T11425] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 734.324310][T11425] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 734.420562][ T9560] usb 6-1: USB disconnect, device number 31 [ 735.055520][T11871] vlan2: entered promiscuous mode [ 735.940825][T11894] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1655'. [ 735.955888][T11871] vlan2: entered allmulticast mode [ 735.987050][T11871] bond0: entered allmulticast mode [ 736.012224][T11871] bond_slave_0: entered allmulticast mode [ 736.074894][T11871] bond_slave_1: entered allmulticast mode [ 736.123900][T11871] bond0: entered promiscuous mode [ 736.180787][T11871] bond_slave_0: entered promiscuous mode [ 736.426717][T11871] bond_slave_1: entered promiscuous mode [ 736.462184][ T29] audit: type=1326 audit(1723363294.955:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11889 comm="syz.5.1655" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8c5d5779f9 code=0x0 [ 737.497260][T11871] bond0: left allmulticast mode [ 737.532083][T11871] bond_slave_0: left allmulticast mode [ 737.546564][T11871] bond_slave_1: left allmulticast mode [ 737.562627][T11871] bond0: left promiscuous mode [ 737.577777][T11871] bond_slave_0: left promiscuous mode [ 737.592959][T11871] bond_slave_1: left promiscuous mode [ 739.024058][T11425] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 739.082067][T11425] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 739.116757][T11425] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 739.158154][T11425] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 739.198932][T11425] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 739.231082][T11425] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 739.258208][ T1845] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 739.268817][T11425] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 739.290715][T11425] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 739.302501][T11927] loop3: detected capacity change from 0 to 8 [ 739.322246][T11425] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 739.353101][T11425] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 739.378689][T11425] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 739.411106][T11927] SQUASHFS error: Unable to read directory block [631:72] [ 739.419692][T11927] SQUASHFS error: Unable to read directory block [631:72] [ 739.434401][T11923] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1660'. [ 739.472217][ T1845] usb 3-1: Using ep0 maxpacket: 8 [ 739.489179][ T1845] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 739.523744][T11425] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 739.542414][ T1845] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 739.577568][T11425] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 739.597145][ T1845] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 739.635219][T11425] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 739.644499][ T1845] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 739.671824][T11425] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 739.689395][ T1845] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 739.717147][ T1845] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 741.367455][ T1845] usb 3-1: GET_CAPABILITIES returned 0 [ 741.417722][ T1845] usbtmc 3-1:16.0: can't read capabilities [ 741.585568][ T1845] usb 3-1: USB disconnect, device number 36 [ 741.864304][T11947] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1664'. [ 741.930248][ T29] audit: type=1326 audit(1723363300.435:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11938 comm="syz.3.1664" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7c73d779f9 code=0x0 [ 741.971830][ T5530] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 741.989063][T11949] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1668'. [ 742.051112][ T5530] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 742.162724][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 742.170881][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 742.230651][ T29] audit: type=1326 audit(1723363300.725:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11945 comm="syz.4.1668" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f54e2b779f9 code=0x0 [ 744.244962][T11967] vlan2: entered promiscuous mode [ 744.250988][T11967] vlan2: entered allmulticast mode [ 744.409164][T11967] bond0: entered allmulticast mode [ 744.415523][T11967] bond_slave_0: entered allmulticast mode [ 744.425010][T11967] bond_slave_1: entered allmulticast mode [ 744.438749][T11967] bond0: entered promiscuous mode [ 744.445504][T11967] bond_slave_0: entered promiscuous mode [ 744.488898][T11967] bond_slave_1: entered promiscuous mode [ 744.602858][T11967] bond0: left allmulticast mode [ 744.616919][T11967] bond_slave_0: left allmulticast mode [ 744.624788][T11967] bond_slave_1: left allmulticast mode [ 744.639295][T11967] bond0: left promiscuous mode [ 744.644736][T11967] bond_slave_0: left promiscuous mode [ 744.658207][T11967] bond_slave_1: left promiscuous mode [ 745.011796][T11975] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1676'. [ 745.553143][T11964] loop3: detected capacity change from 0 to 32768 [ 745.561475][T11982] input: syz0 as /devices/virtual/input/input6 [ 745.684009][T11964] XFS (loop3): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 745.691323][T11970] loop4: detected capacity change from 0 to 32768 [ 745.767007][T11970] XFS: ikeep mount option is deprecated. [ 745.780414][T11964] XFS (loop3): Ending clean mount [ 746.139468][T11970] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 747.047476][ T1255] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.056770][ T1255] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.256734][ T9202] XFS (loop3): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 747.403170][T11970] XFS (loop4): Ending clean mount [ 747.443547][T11970] XFS (loop4): Quotacheck needed: Please wait. [ 747.489972][T12010] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1680'. [ 747.628414][T11970] XFS (loop4): Quotacheck: Done. [ 747.798191][ T5245] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 747.835423][ T29] audit: type=1326 audit(1723363306.335:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12006 comm="syz.0.1680" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1810d779f9 code=0x0 [ 747.893571][T11979] loop5: detected capacity change from 0 to 32768 [ 747.913887][T11979] XFS: ikeep mount option is deprecated. [ 748.071163][T11979] XFS (loop5): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 748.376181][T11979] XFS (loop5): Ending clean mount [ 748.404575][T11979] XFS (loop5): Quotacheck needed: Please wait. [ 748.509357][T11979] XFS (loop5): Quotacheck: Done. [ 748.564196][T11185] XFS (loop5): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 749.383334][T12038] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1690'. [ 751.665815][T12056] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1693'. [ 751.780319][ T29] audit: type=1326 audit(1723363310.285:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12048 comm="syz.0.1693" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1810d779f9 code=0x0 [ 752.247334][T12068] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1698'. [ 752.501266][ T29] audit: type=1326 audit(1723363311.005:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12062 comm="syz.4.1698" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f54e2b779f9 code=0x0 [ 752.505206][T12073] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1700'. [ 752.856981][ T29] audit: type=1326 audit(1723363311.365:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12070 comm="syz.0.1700" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1810d779f9 code=0x0 [ 753.644979][T12082] program syz.4.1705 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 753.854466][ T5238] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 753.872131][ T5238] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 753.886229][ T5238] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 753.912368][ T5238] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 753.923893][ T5238] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 753.931364][ T5238] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 753.961404][T12088] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1706'. [ 755.522347][ T29] audit: type=1326 audit(1723363313.995:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12083 comm="syz.0.1706" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1810d779f9 code=0x0 [ 755.962309][ T5238] Bluetooth: hci6: command tx timeout [ 756.599427][T12084] chnl_net:caif_netlink_parms(): no params data found [ 756.802253][T12111] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1712'. [ 757.042255][ T29] audit: type=1326 audit(1723363315.535:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12108 comm="syz.1.1712" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4b0a1779f9 code=0x0 [ 757.483698][T12102] loop4: detected capacity change from 0 to 32768 [ 757.490994][T12102] XFS: ikeep mount option is deprecated. [ 757.524666][T12084] bridge0: port 1(bridge_slave_0) entered blocking state [ 757.531873][T12084] bridge0: port 1(bridge_slave_0) entered disabled state [ 757.583383][T12084] bridge_slave_0: entered allmulticast mode [ 757.604004][T12084] bridge_slave_0: entered promiscuous mode [ 757.738529][T12084] bridge0: port 2(bridge_slave_1) entered blocking state [ 757.745961][T12102] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 757.832282][T12084] bridge0: port 2(bridge_slave_1) entered disabled state [ 757.842333][T12084] bridge_slave_1: entered allmulticast mode [ 757.850089][T12084] bridge_slave_1: entered promiscuous mode [ 758.043134][ T5238] Bluetooth: hci6: command tx timeout [ 758.314186][T12102] XFS (loop4): Ending clean mount [ 758.343531][T12102] XFS (loop4): Quotacheck needed: Please wait. [ 758.348620][T12084] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 758.436241][T12084] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 758.462804][T12102] XFS (loop4): Quotacheck: Done. [ 758.786448][T12119] loop0: detected capacity change from 0 to 32768 [ 758.826444][T12119] XFS: ikeep mount option is deprecated. [ 758.930911][T12084] team0: Port device team_slave_0 added [ 758.996237][T12119] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 759.051403][T12084] team0: Port device team_slave_1 added [ 759.360539][T12084] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 759.432205][T12084] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 759.438248][T12119] XFS (loop0): Ending clean mount [ 759.517809][ T5245] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 759.528247][ T9497] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 759.546832][T12119] XFS (loop0): Quotacheck needed: Please wait. [ 759.557620][ T9497] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 759.566527][T12084] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 759.582917][ T9497] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 759.617540][ T9497] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 759.631296][ T9497] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 759.641338][ T9497] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 759.672312][T12084] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 759.675611][T12119] XFS (loop0): Quotacheck: Done. [ 759.753802][T12084] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 759.835755][T12084] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 760.132453][ T5238] Bluetooth: hci6: command tx timeout [ 760.173971][T12084] hsr_slave_0: entered promiscuous mode [ 760.204231][T12084] hsr_slave_1: entered promiscuous mode [ 760.281217][T12084] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 760.322150][T12084] Cannot create hsr debugfs directory [ 760.599254][T12163] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1727'. [ 760.629635][T12143] loop1: detected capacity change from 0 to 32768 [ 760.643952][T12143] XFS: ikeep mount option is deprecated. [ 760.748178][T11425] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 760.791117][T12143] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 761.098280][T12143] XFS (loop1): Ending clean mount [ 761.158610][T12143] XFS (loop1): Quotacheck needed: Please wait. [ 761.440038][T12143] XFS (loop1): Quotacheck: Done. [ 761.737109][ T5238] Bluetooth: hci7: command tx timeout [ 762.202442][ T5238] Bluetooth: hci6: command tx timeout [ 762.224761][T11429] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 762.522998][T12179] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1728'. [ 762.779338][ T29] audit: type=1326 audit(1723363321.285:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12176 comm="syz.0.1728" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1810d779f9 code=0x0 [ 763.516431][T12084] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 763.651794][T12190] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1733'. [ 763.802370][ T5238] Bluetooth: hci7: command tx timeout [ 763.881053][ T29] audit: type=1326 audit(1723363322.385:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12186 comm="syz.4.1733" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f54e2b779f9 code=0x0 [ 763.906701][T12084] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 764.185367][T12084] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 764.266592][T12156] chnl_net:caif_netlink_parms(): no params data found [ 764.455027][T12201] loop1: detected capacity change from 0 to 8 [ 764.579501][T12084] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 765.963067][ T5238] Bluetooth: hci7: command tx timeout [ 766.735179][T12221] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1741'. [ 766.963033][T12156] bridge0: port 1(bridge_slave_0) entered blocking state [ 767.011376][T12156] bridge0: port 1(bridge_slave_0) entered disabled state [ 767.049214][T12156] bridge_slave_0: entered allmulticast mode [ 767.075755][T12156] bridge_slave_0: entered promiscuous mode [ 767.342636][ T29] audit: type=1326 audit(1723363325.855:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12215 comm="syz.5.1741" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8c5d5779f9 code=0x0 [ 768.308883][ T5238] Bluetooth: hci7: command tx timeout [ 768.352892][T12156] bridge0: port 2(bridge_slave_1) entered blocking state [ 768.419246][T12156] bridge0: port 2(bridge_slave_1) entered disabled state [ 768.492428][T12156] bridge_slave_1: entered allmulticast mode [ 768.532238][T12156] bridge_slave_1: entered promiscuous mode [ 769.046764][T12156] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 769.168808][T12156] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 769.306117][T12246] loop4: detected capacity change from 0 to 128 [ 769.391690][ T5531] bridge_slave_1: left allmulticast mode [ 769.646265][ T5531] bridge_slave_1: left promiscuous mode [ 770.040795][ T5531] bridge0: port 2(bridge_slave_1) entered disabled state [ 770.802953][T12253] loop1: detected capacity change from 0 to 8 [ 770.804261][ T5531] bridge_slave_0: left allmulticast mode [ 770.844227][ T5531] bridge_slave_0: left promiscuous mode [ 770.850044][ T5531] bridge0: port 1(bridge_slave_0) entered disabled state [ 771.566736][T12270] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1756'. [ 771.837362][ T29] audit: type=1326 audit(1723363330.345:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12266 comm="syz.5.1756" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8c5d5779f9 code=0x0 [ 772.702722][ T5531] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 772.781312][ T5531] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 772.799386][T12285] program syz.1.1761 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 772.822980][ T5531] bond0 (unregistering): Released all slaves [ 772.906858][T12084] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 772.965498][T12084] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 773.154347][T12084] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 773.179386][T12084] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 773.275273][T12156] team0: Port device team_slave_0 added [ 773.334715][T12156] team0: Port device team_slave_1 added [ 773.676232][T12290] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1763'. [ 773.908479][T12156] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 773.996198][T12156] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 774.062216][ T29] audit: type=1326 audit(1723363332.565:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12288 comm="syz.5.1763" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8c5d5779f9 code=0x0 [ 774.077310][T12156] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 774.309164][T12156] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 774.388612][T12156] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 774.523475][T12156] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 774.695608][ T5531] hsr_slave_0: left promiscuous mode [ 774.739131][ T5531] hsr_slave_1: left promiscuous mode [ 774.760977][ T5531] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 774.792276][ T5531] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 774.825126][ T5531] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 774.844463][ T5531] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 774.906855][ T5531] veth1_macvtap: left promiscuous mode [ 774.939793][ T5531] veth0_macvtap: left promiscuous mode [ 774.961263][ T5531] veth1_vlan: left promiscuous mode [ 774.973029][ T5531] veth0_vlan: left promiscuous mode [ 775.320306][T12306] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1769'. [ 775.588297][ T29] audit: type=1326 audit(1723363334.085:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12302 comm="syz.4.1769" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f54e2b779f9 code=0x0 [ 775.848437][T12317] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1772'. [ 776.030402][ T29] audit: type=1326 audit(1723363334.535:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12314 comm="syz.5.1772" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8c5d5779f9 code=0x0 [ 776.425759][T12322] loop1: detected capacity change from 0 to 8 [ 776.824822][ T5531] team0 (unregistering): Port device team_slave_1 removed [ 776.875979][ T5531] team0 (unregistering): Port device team_slave_0 removed [ 777.867488][T12156] hsr_slave_0: entered promiscuous mode [ 777.954155][T12156] hsr_slave_1: entered promiscuous mode [ 777.971626][T12156] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 777.999422][T12156] Cannot create hsr debugfs directory [ 778.282324][ T1845] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 778.297798][T12326] loop1: detected capacity change from 0 to 32768 [ 778.333443][T12326] XFS: ikeep mount option is deprecated. [ 778.452655][T12326] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 778.515513][ T1845] usb 5-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 778.527879][ T1845] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 778.536065][ T1845] usb 5-1: Product: syz [ 778.540247][ T1845] usb 5-1: Manufacturer: syz [ 778.544898][ T1845] usb 5-1: SerialNumber: syz [ 778.554896][T12084] 8021q: adding VLAN 0 to HW filter on device bond0 [ 778.555542][ T1845] usb 5-1: config 0 descriptor?? [ 778.737691][T12326] XFS (loop1): Ending clean mount [ 778.759484][T12326] XFS (loop1): Quotacheck needed: Please wait. [ 778.807364][T12156] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 778.863720][T12326] XFS (loop1): Quotacheck: Done. [ 778.864970][T12084] 8021q: adding VLAN 0 to HW filter on device team0 [ 778.904488][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 778.911702][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 778.964738][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 778.971949][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 779.065758][ T1845] usb 5-1: Firmware: major: 0, minor: 248, hardware type: ATUSB (0) [ 779.118684][T12156] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 779.299430][T12156] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 779.326944][ T1845] usb 5-1: failed to fetch extended address, random address set [ 779.417814][ T1845] usb 5-1: USB disconnect, device number 42 [ 779.475330][T12156] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 779.596808][T12332] loop5: detected capacity change from 0 to 32768 [ 779.668445][ T5531] bridge_slave_1: left allmulticast mode [ 779.671170][T11429] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 779.686008][T12332] XFS: ikeep mount option is deprecated. [ 779.692151][ T5531] bridge_slave_1: left promiscuous mode [ 779.709103][ T5531] bridge0: port 2(bridge_slave_1) entered disabled state [ 779.734278][ T5531] bridge_slave_0: left allmulticast mode [ 779.739498][T12332] XFS (loop5): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 779.739949][ T5531] bridge_slave_0: left promiscuous mode [ 779.780795][ T5531] bridge0: port 1(bridge_slave_0) entered disabled state [ 780.025280][T12332] XFS (loop5): Ending clean mount [ 780.054014][T12332] XFS (loop5): Quotacheck needed: Please wait. [ 780.107332][T12332] XFS (loop5): Quotacheck: Done. [ 780.454005][T11185] XFS (loop5): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 781.176206][T12366] loop4: detected capacity change from 0 to 2048 [ 781.221064][T12366] EXT4-fs: Ignoring removed orlov option [ 781.299910][ T5531] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 781.340146][T12366] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 781.388566][ T5531] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 781.423335][ T5531] bond0 (unregistering): Released all slaves [ 781.444434][T12366] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 781.467216][T12366] EXT4-fs (loop4): Remounting filesystem read-only [ 781.657056][ T5245] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 782.068631][T12379] loop5: detected capacity change from 0 to 512 [ 782.112634][T12156] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 782.123799][T12379] EXT4-fs (loop5): blocks per group (255) and clusters per group (8192) inconsistent [ 782.166019][T12156] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 782.198812][ T9497] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 782.215347][T12156] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 782.231115][ T9497] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 782.242807][ T9497] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 782.265856][ T9497] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 782.276816][ T9497] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 782.282547][T12156] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 782.290804][ T9497] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 782.516897][T12084] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 782.526852][T12383] loop4: detected capacity change from 0 to 1024 [ 782.666424][T12383] EXT4-fs error (device loop4): __ext4_fill_super:5435: inode #2: comm syz.4.1789: casefold flag without casefold feature [ 782.775834][T12383] EXT4-fs (loop4): get root inode failed [ 782.802956][T12383] EXT4-fs (loop4): mount failed [ 783.765614][ T5531] hsr_slave_0: left promiscuous mode [ 783.790620][ T5531] hsr_slave_1: left promiscuous mode [ 783.806652][ T5531] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 783.814804][ T5531] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 783.826545][ T5531] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 783.834401][ T5531] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 783.950217][ T5531] veth1_macvtap: left promiscuous mode [ 783.975378][ T5531] veth0_macvtap: left promiscuous mode [ 783.996475][ T5531] veth1_vlan: left promiscuous mode [ 784.015430][ T5531] veth0_vlan: left promiscuous mode [ 784.985075][ T5238] Bluetooth: hci3: command tx timeout [ 784.991693][ T5238] Bluetooth: hci0: command 0x0406 tx timeout [ 785.380109][T12418] loop5: detected capacity change from 0 to 2048 [ 785.435653][T12418] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 785.472948][T12418] EXT4-fs error (device loop5): ext4_find_extent:936: inode #2: comm syz.5.1799: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 785.503294][T12418] EXT4-fs error (device loop5): ext4_find_extent:936: inode #2: comm syz.5.1799: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 785.540724][T12418] EXT4-fs error (device loop5): ext4_find_extent:936: inode #2: comm syz.5.1799: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 785.647237][T11185] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 785.774961][T12425] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1801'. [ 785.927405][ T5531] team0 (unregistering): Port device team_slave_1 removed [ 785.980791][ T5531] team0 (unregistering): Port device team_slave_0 removed [ 786.554482][T12420] bridge0: port 3(vlan2) entered blocking state [ 786.560940][T12420] bridge0: port 3(vlan2) entered disabled state [ 786.574950][T12420] vlan2: entered allmulticast mode [ 786.580086][T12420] xfrm0: entered allmulticast mode [ 786.595354][T12420] vlan2: entered promiscuous mode [ 786.609243][T12420] xfrm0: entered promiscuous mode [ 786.616997][T12420] bridge0: port 3(vlan2) entered blocking state [ 786.623545][T12420] bridge0: port 3(vlan2) entered forwarding state [ 786.690054][T12084] veth0_vlan: entered promiscuous mode [ 787.087576][ T9497] Bluetooth: hci3: command tx timeout [ 787.329965][T12084] veth1_vlan: entered promiscuous mode [ 787.850352][T12156] 8021q: adding VLAN 0 to HW filter on device bond0 [ 787.984160][T12380] chnl_net:caif_netlink_parms(): no params data found [ 788.230649][T12156] 8021q: adding VLAN 0 to HW filter on device team0 [ 788.261989][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 788.269248][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 788.375192][T11121] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 788.377224][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 788.389983][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 788.499194][T12380] bridge0: port 1(bridge_slave_0) entered blocking state [ 788.509907][T12380] bridge0: port 1(bridge_slave_0) entered disabled state [ 788.521849][T12380] bridge_slave_0: entered allmulticast mode [ 788.536182][T12380] bridge_slave_0: entered promiscuous mode [ 788.549062][T12380] bridge0: port 2(bridge_slave_1) entered blocking state [ 788.556933][T12380] bridge0: port 2(bridge_slave_1) entered disabled state [ 788.564443][T12380] bridge_slave_1: entered allmulticast mode [ 788.572653][T11121] usb 2-1: Using ep0 maxpacket: 8 [ 788.578196][T12380] bridge_slave_1: entered promiscuous mode [ 788.591226][T11121] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 788.603030][T12084] veth0_macvtap: entered promiscuous mode [ 788.619305][T11121] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=38.22 [ 788.645680][T11121] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 788.664471][T12465] pimreg: entered allmulticast mode [ 788.675914][T11121] usb 2-1: config 0 descriptor?? [ 788.795572][ T5531] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 788.852994][T12460] pimreg: left allmulticast mode [ 788.888747][T11121] iowarrior 2-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 788.986143][T12476] Bluetooth: MGMT ver 1.23 [ 789.083734][T12380] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 789.131426][T12084] veth1_macvtap: entered promiscuous mode [ 789.162894][ T9497] Bluetooth: hci3: command tx timeout [ 789.209994][ T5531] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 789.255742][T12380] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 789.471035][T12484] loop5: detected capacity change from 0 to 128 [ 789.489239][ T5531] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 789.502398][T12484] vfat: Unknown parameter '' [ 789.606619][T12380] team0: Port device team_slave_0 added [ 789.725685][ T5531] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 789.753894][T12380] team0: Port device team_slave_1 added [ 789.797614][T12084] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 789.833911][T12084] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 789.862898][T12084] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 789.873651][T12084] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 789.883744][T12084] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 789.895891][T12084] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 789.905947][T12084] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 789.919247][T12084] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 789.937097][T12084] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 790.106067][T12084] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 790.152082][T12084] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 790.172121][T12084] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 790.202252][T12084] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 790.225658][T12084] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 790.248601][T12084] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 790.259622][T12084] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 790.273413][T12084] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 790.288429][T12084] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 790.327511][T12380] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 790.352263][T12380] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 790.422411][T12380] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 790.459783][T12084] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 790.475191][T12084] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 790.484873][T12084] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 790.494353][T12084] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 790.523332][T12380] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 790.530322][T12380] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 790.627313][T12380] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 790.835547][T12380] hsr_slave_0: entered promiscuous mode [ 790.850972][T12380] hsr_slave_1: entered promiscuous mode [ 791.116366][ T5288] usb 2-1: USB disconnect, device number 34 [ 791.175951][ T5288] iowarrior 2-1:0.0: I/O-Warror #0 now disconnected [ 791.243961][ T9497] Bluetooth: hci3: command tx timeout [ 791.305966][ T5531] bridge_slave_1: left allmulticast mode [ 791.311657][ T5531] bridge_slave_1: left promiscuous mode [ 791.323646][ T5531] bridge0: port 2(bridge_slave_1) entered disabled state [ 791.382558][ T5531] bridge_slave_0: left allmulticast mode [ 791.388948][ T5531] bridge_slave_0: left promiscuous mode [ 791.412385][ T5531] bridge0: port 1(bridge_slave_0) entered disabled state [ 791.662889][T12498] loop5: detected capacity change from 0 to 32768 [ 791.752517][T12498] XFS (loop5): Mounting V5 Filesystem ed37bf6e-74ea-4e01-afba-5fee274b0f3a [ 791.866539][T12498] XFS (loop5): Ending clean mount [ 791.883916][T12498] XFS (loop5): Quotacheck needed: Please wait. [ 791.950787][T12498] XFS (loop5): Quotacheck: Done. [ 792.064621][T11185] XFS (loop5): Unmounting Filesystem ed37bf6e-74ea-4e01-afba-5fee274b0f3a [ 792.126882][ T5531] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 792.136701][T11121] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 792.169228][ T5531] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 792.197468][ T5531] bond0 (unregistering): Released all slaves [ 792.339772][T11121] usb 2-1: Using ep0 maxpacket: 8 [ 792.365268][T11121] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 13 [ 792.394913][T11121] usb 2-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 792.422177][T11121] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 792.430192][T11121] usb 2-1: Product: syz [ 792.476127][T11121] usb 2-1: Manufacturer: syz [ 792.481467][T11121] usb 2-1: SerialNumber: syz [ 792.526329][T11121] usb 2-1: config 0 descriptor?? [ 792.536881][T11121] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae [ 792.711937][T10295] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 792.740842][T10295] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 792.973971][ T1845] usb 6-1: new high-speed USB device number 32 using dummy_hcd [ 793.100844][ T5531] hsr_slave_0: left promiscuous mode [ 793.115813][ T5531] hsr_slave_1: left promiscuous mode [ 793.132382][ T5531] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 793.149555][ T5531] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 793.158204][T11121] gspca_zc3xx: reg_w_i err -71 [ 793.159142][ T5531] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 793.163645][ T1845] usb 6-1: Using ep0 maxpacket: 16 [ 793.165809][ T1845] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 793.180626][ T5531] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 793.221969][ T1845] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 793.238661][ T5531] veth1_macvtap: left promiscuous mode [ 793.242097][ T1845] usb 6-1: New USB device found, idVendor=05ac, idProduct=026c, bcdDevice= 0.00 [ 793.251247][ T5531] veth0_macvtap: left promiscuous mode [ 793.259633][ T5531] veth1_vlan: left promiscuous mode [ 793.259976][ T1845] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 793.265632][ T5531] veth0_vlan: left promiscuous mode [ 793.295136][ T1845] usb 6-1: config 0 descriptor?? [ 793.822472][T11121] gspca_zc3xx: Unknown sensor - set to TAS5130C [ 793.828837][T11121] gspca_zc3xx 2-1:0.0: probe with driver gspca_zc3xx failed with error -71 [ 793.869287][T11121] usb 2-1: USB disconnect, device number 35 [ 794.616397][ T5531] team0 (unregistering): Port device team_slave_1 removed [ 794.728357][ T5531] team0 (unregistering): Port device team_slave_0 removed [ 796.004939][T12563] netlink: 'syz.4.1839': attribute type 3 has an invalid length. [ 796.013059][T12563] netlink: 130984 bytes leftover after parsing attributes in process `syz.4.1839'. [ 796.795358][ T1845] usbhid 6-1:0.0: can't add hid device: -71 [ 796.801375][ T1845] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 796.846553][ T1845] usb 6-1: USB disconnect, device number 32 [ 796.984543][T12569] EXT4-fs (sda1): resizing filesystem from 262144 to 262144 blocks [ 796.997578][T10295] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 797.025040][T10295] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 797.040336][T12156] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 797.566812][T12574] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.1843'. [ 797.650929][T12156] veth0_vlan: entered promiscuous mode [ 797.719317][T12574] openvswitch: netlink: Tunnel attr 0 has unexpected len 1 expected 8 [ 798.653232][T12156] veth1_vlan: entered promiscuous mode [ 798.784941][T12380] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 798.984231][ C0] IPv4: Oversized IP packet from 127.0.0.1 [ 799.032280][T12380] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 799.134116][ C0] IPv4: Oversized IP packet from 127.0.0.1 [ 799.303000][ C0] IPv4: Oversized IP packet from 127.0.0.1 [ 799.386093][ C0] IPv4: Oversized IP packet from 127.0.0.1 [ 799.503290][T12380] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 799.514650][ C0] IPv4: Oversized IP packet from 127.0.0.1 [ 799.558054][ C0] IPv4: Oversized IP packet from 127.0.0.1 [ 799.593829][ C0] IPv4: Oversized IP packet from 127.0.0.1 [ 799.600933][ C0] IPv4: Oversized IP packet from 127.0.0.1 [ 799.619756][T12380] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 799.623305][ C0] IPv4: Oversized IP packet from 127.0.0.1 [ 799.886334][T12156] veth0_macvtap: entered promiscuous mode [ 800.126439][T12156] veth1_macvtap: entered promiscuous mode [ 800.963963][T12156] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 801.032176][T12156] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 801.044683][T12156] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 801.059858][T12156] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 801.084463][T12156] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 801.108931][T12156] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 801.142167][T12156] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 801.170292][T12156] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 801.213665][T12156] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 801.221460][T12618] loop4: detected capacity change from 0 to 512 [ 801.247521][T12156] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 801.312602][T12618] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2240: inode #12: comm syz.4.1853: corrupted in-inode xattr: invalid ea_ino [ 801.338322][T12156] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 801.375370][T12156] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 801.386027][T12618] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.1853: couldn't read orphan inode 12 (err -117) [ 801.398144][T12156] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 801.408405][T12156] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 801.419238][T12156] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 801.430880][T12156] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 801.502451][T12156] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 801.522449][T12618] EXT4-fs (loop4): mounted filesystem 00000005-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 801.764023][T12156] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 802.010719][T12380] 8021q: adding VLAN 0 to HW filter on device bond0 [ 802.100646][T12156] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 802.172244][T12156] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 802.222377][T12156] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 802.231138][T12156] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 802.459006][T12380] 8021q: adding VLAN 0 to HW filter on device team0 [ 802.549930][ T62] bridge0: port 1(bridge_slave_0) entered blocking state [ 802.557240][ T62] bridge0: port 1(bridge_slave_0) entered forwarding state [ 802.611015][ T5238] Bluetooth: hci1: sending frame failed (-49) [ 802.618590][ T9497] Bluetooth: hci1: Opcode 0x1003 failed: -49 [ 802.681442][ T1118] bridge0: port 2(bridge_slave_1) entered blocking state [ 802.688666][ T1118] bridge0: port 2(bridge_slave_1) entered forwarding state [ 803.034313][ T2893] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 803.066378][ T2893] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 803.289259][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 803.339965][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 803.401229][T12654] EXT4-fs error (device loop4): ext4_add_entry:2435: inode #2: comm syz.4.1853: Directory hole found for htree leaf block 0 [ 803.463626][T12657] loop2: detected capacity change from 0 to 256 [ 803.508515][T12654] EXT4-fs error (device loop4): ext4_add_entry:2435: inode #2: comm syz.4.1853: Directory hole found for htree leaf block 0 [ 804.935678][T12664] x_tables: ip6_tables: sctp match: only valid for protocol 132 [ 805.468634][T12380] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 805.698451][T12689] net_ratelimit: 18 callbacks suppressed [ 805.698471][T12689] A link change request failed with some changes committed already. Interface veth0_to_bond may have been left with an inconsistent configuration, please check. [ 805.743767][T12690] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 805.793681][T12380] veth0_vlan: entered promiscuous mode [ 805.871915][T12380] veth1_vlan: entered promiscuous mode [ 806.035246][T12380] veth0_macvtap: entered promiscuous mode [ 806.080514][T12380] veth1_macvtap: entered promiscuous mode [ 806.170091][T12380] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 806.196826][T12380] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 806.247368][T12380] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 806.289238][T12380] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 806.312628][T12380] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 806.359272][T12380] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 806.382801][T12380] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 806.400017][T12380] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 806.410549][T12380] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 806.427431][T12380] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 806.461528][T12380] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 806.514279][T12380] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 806.531015][T12380] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 806.572554][T12380] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 806.591193][T12380] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 806.617670][T12380] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 806.639775][T12380] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 806.671592][T12380] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 806.697102][T12380] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 806.711244][T12380] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 806.729163][T12380] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 806.741544][T12380] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 806.787149][T12380] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 806.811914][T12380] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 806.878948][T12709] loop3: detected capacity change from 0 to 4096 [ 806.918230][T12380] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 806.952439][T12709] ntfs3: loop3: Different NTFS sector size (1024) and media sector size (512). [ 807.016735][T12380] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 807.161872][T12709] ntfs3: loop3: Failed to load $Extend (-22). [ 807.234805][T12709] ntfs3: loop3: Failed to initialize $Extend. [ 807.372544][ T5245] EXT4-fs (loop4): unmounting filesystem 00000005-0000-0000-0000-000000000000. [ 807.519393][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 807.551526][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 807.698861][ T2893] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 807.732397][ T2893] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 808.228195][ T1255] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.237301][ T1255] ieee802154 phy1 wpan1: encryption failed: -22 [ 808.420621][ C0] IPv4: Oversized IP packet from 127.0.0.1 [ 808.429694][ C0] IPv4: Oversized IP packet from 127.0.0.1 [ 808.437531][ C0] IPv4: Oversized IP packet from 127.0.0.1 [ 808.460703][ C0] IPv4: Oversized IP packet from 127.0.0.1 [ 808.489958][ C0] IPv4: Oversized IP packet from 127.0.0.1 [ 808.501474][ C0] IPv4: Oversized IP packet from 127.0.0.1 [ 808.513667][ C0] IPv4: Oversized IP packet from 127.0.0.1 [ 808.521192][ C0] IPv4: Oversized IP packet from 127.0.0.1 [ 808.526123][ C0] IPv4: Oversized IP packet from 127.0.0.1 [ 811.382272][T12783] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 813.362113][T12821] net_ratelimit: 23 callbacks suppressed [ 813.362137][T12821] dccp_invalid_packet: P.type (CLOSE) not Data || [Data]Ack, while P.X == 0 [ 813.580812][T12825] syz.2.1919: attempt to access beyond end of device [ 813.580812][T12825] nbd2: rw=0, sector=64, nr_sectors = 8 limit=0 [ 813.645369][T12825] syz.2.1919: attempt to access beyond end of device [ 813.645369][T12825] nbd2: rw=0, sector=120, nr_sectors = 8 limit=0 [ 813.671162][T12825] Mount JFS Failure: -5 [ 813.676705][T12825] jfs_mount failed w/return code = -5 [ 814.762628][T11121] usb 1-1: new full-speed USB device number 23 using dummy_hcd [ 814.930266][T12838] netlink: 'syz.2.1926': attribute type 1 has an invalid length. [ 814.941026][T12838] netlink: 'syz.2.1926': attribute type 1 has an invalid length. [ 814.965974][T12838] netlink: 9328 bytes leftover after parsing attributes in process `syz.2.1926'. [ 814.983799][T12838] netlink: 'syz.2.1926': attribute type 1 has an invalid length. [ 815.000419][T11121] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 815.014345][T11121] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 204, setting to 64 [ 815.031461][T11121] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 815.047853][T11121] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 815.067938][T11121] usb 1-1: config 0 descriptor?? [ 815.084569][T12830] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 815.321601][T11121] ath6kl: Failed to submit usb control message: -71 [ 815.345922][T11121] ath6kl: unable to send the bmi data to the device: -71 [ 815.363467][T11121] ath6kl: Unable to send get target info: -71 [ 815.412820][ T5238] Bluetooth: hci2: command 0x0406 tx timeout [ 815.654152][T11121] ath6kl: Failed to init ath6kl core: -71 [ 815.668647][T11121] ath6kl_usb 1-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 815.710621][T11121] usb 1-1: USB disconnect, device number 23 [ 817.027424][T12847] loop1: detected capacity change from 0 to 32768 [ 817.057434][T12847] btrfs: Deprecated parameter 'usebackuproot' [ 817.111833][T12847] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 817.128993][T12855] loop0: detected capacity change from 0 to 4096 [ 817.155903][T12847] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.1930 (12847) [ 817.172767][T12855] ntfs3: loop0: Different NTFS sector size (1024) and media sector size (512). [ 817.234884][T12855] ntfs3: loop0: Failed to load $Extend (-22). [ 817.235559][T12847] BTRFS info (device loop1): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 817.241141][T12855] ntfs3: loop0: Failed to initialize $Extend. [ 817.286638][T12847] BTRFS info (device loop1): using blake2b (blake2b-256-generic) checksum algorithm [ 817.308129][T12847] BTRFS info (device loop1): using free-space-tree [ 817.524743][T12847] BTRFS info (device loop1): rebuilding free space tree [ 817.894032][T11429] BTRFS info (device loop1): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 820.710719][T12918] loop4: detected capacity change from 0 to 64 [ 822.256296][T12940] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 822.329764][ T9497] Bluetooth: Frame is too long (len 18, expected len 4) [ 823.434858][ T8] usb 6-1: new high-speed USB device number 33 using dummy_hcd [ 823.576091][T12951] ------------[ cut here ]------------ [ 823.582120][T12951] kernel BUG at drivers/android/binder.c:1173! [ 823.588302][T12951] Oops: invalid opcode: 0000 [#1] PREEMPT SMP KASAN NOPTI [ 823.595429][T12951] CPU: 1 UID: 0 PID: 12951 Comm: syz.2.1959 Not tainted 6.11.0-rc2-syzkaller-00257-g5189dafa4cf9 #0 [ 823.606197][T12951] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 823.616254][T12951] RIP: 0010:binder_inc_ref_for_node+0xdf7/0xe00 [ 823.622524][T12951] Code: c8 f8 e9 4e fd ff ff 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c 59 fd ff ff 48 89 df e8 e4 c1 c8 f8 e9 4c fd ff ff e8 9a 7b 61 f8 90 <0f> 0b 0f 1f 80 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 823.642140][T12951] RSP: 0018:ffffc900049ff5e8 EFLAGS: 00010287 [ 823.648216][T12951] RAX: ffffffff8931fc46 RBX: 0000000000000000 RCX: 0000000000040000 [ 823.656190][T12951] RDX: ffffc9000a12a000 RSI: 0000000000001740 RDI: 0000000000001741 [ 823.664160][T12951] RBP: ffff88802db9a820 R08: ffffffff8931f77b R09: ffff8880187f8d30 [ 823.672132][T12951] R10: dffffc0000000000 R11: ffffed10030ff1a8 R12: 0000000000000000 [ 823.680109][T12951] R13: dffffc0000000000 R14: ffff88802ca11828 R15: ffff88802ca11810 [ 823.688092][T12951] FS: 00007f6c0b9526c0(0000) GS:ffff8880b9300000(0000) knlGS:0000000000000000 [ 823.697033][T12951] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 823.703622][T12951] CR2: 000000110c3397e5 CR3: 00000000709ae000 CR4: 0000000000350ef0 [ 823.711595][T12951] Call Trace: [ 823.714868][T12951] [ 823.717800][T12951] ? __die_body+0x88/0xe0 [ 823.722256][T12951] ? die+0xcf/0x110 [ 823.726092][T12951] ? do_trap+0x15a/0x3a0 [ 823.730342][T12951] ? binder_inc_ref_for_node+0xdf7/0xe00 [ 823.735992][T12951] ? do_error_trap+0x1dc/0x2c0 [ 823.740763][T12951] ? binder_inc_ref_for_node+0xdf7/0xe00 [ 823.746521][T12951] ? binder_inc_ref_for_node+0xdf7/0xe00 [ 823.752164][T12951] ? uapi_merge_def+0x1700/0x1830 [ 823.757203][T12951] ? __pfx_do_error_trap+0x10/0x10 [ 823.762334][T12951] ? srso_alias_return_thunk+0x5/0xfbef5 [ 823.767989][T12951] ? handle_invalid_op+0x34/0x40 [ 823.772932][T12951] ? binder_inc_ref_for_node+0xdf7/0xe00 [ 823.778575][T12951] ? exc_invalid_op+0x38/0x50 [ 823.783364][T12951] ? asm_exc_invalid_op+0x1a/0x20 [ 823.788392][T12951] ? binder_inc_ref_for_node+0x92b/0xe00 [ 823.794036][T12951] ? binder_inc_ref_for_node+0xdf6/0xe00 [ 823.799684][T12951] ? binder_inc_ref_for_node+0xdf7/0xe00 [ 823.805327][T12951] ? binder_inc_ref_for_node+0xdf6/0xe00 [ 823.810981][T12951] binder_ioctl_write_read+0xc7b/0x8d00 [ 823.816538][T12951] ? 0xffffffffa0003b00 [ 823.820698][T12951] ? srso_alias_return_thunk+0x5/0xfbef5 [ 823.826349][T12951] ? __pfx_stack_trace_save+0x10/0x10 [ 823.831837][T12951] ? srso_alias_return_thunk+0x5/0xfbef5 [ 823.837481][T12951] ? __pfx_binder_ioctl_write_read+0x10/0x10 [ 823.843475][T12951] ? srso_alias_return_thunk+0x5/0xfbef5 [ 823.849110][T12951] ? __lock_acquire+0x137a/0x2040 [ 823.854154][T12951] ? srso_alias_return_thunk+0x5/0xfbef5 [ 823.859796][T12951] ? srso_alias_return_thunk+0x5/0xfbef5 [ 823.865442][T12951] ? binder_get_thread+0x16e/0x6c0 [ 823.870563][T12951] ? __pfx_lock_release+0x10/0x10 [ 823.875601][T12951] ? srso_alias_return_thunk+0x5/0xfbef5 [ 823.881238][T12951] ? do_raw_spin_unlock+0x13c/0x8b0 [ 823.886445][T12951] ? srso_alias_return_thunk+0x5/0xfbef5 [ 823.892086][T12951] ? _raw_spin_unlock+0x28/0x50 [ 823.896940][T12951] ? binder_get_thread+0x178/0x6c0 [ 823.902065][T12951] binder_ioctl+0x43d/0x1c70 [ 823.906672][T12951] ? srso_alias_return_thunk+0x5/0xfbef5 [ 823.912329][T12951] ? tomoyo_path_number_perm+0x71a/0x880 [ 823.917968][T12951] ? tomoyo_path_number_perm+0x208/0x880 [ 823.923604][T12951] ? __pfx_binder_ioctl+0x10/0x10 [ 823.928662][T12951] ? __fget_files+0x29/0x470 [ 823.933289][T12951] ? __fget_files+0x3f6/0x470 [ 823.937977][T12951] ? __fget_files+0x29/0x470 [ 823.942579][T12951] ? srso_alias_return_thunk+0x5/0xfbef5 [ 823.948212][T12951] ? srso_alias_return_thunk+0x5/0xfbef5 [ 823.953849][T12951] ? security_file_ioctl+0x87/0xb0 [ 823.958960][T12951] ? __pfx_binder_ioctl+0x10/0x10 [ 823.963998][T12951] __se_sys_ioctl+0xfe/0x170 [ 823.968598][T12951] do_syscall_64+0xf3/0x230 [ 823.973113][T12951] ? srso_alias_return_thunk+0x5/0xfbef5 [ 823.978752][T12951] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 823.984645][T12951] RIP: 0033:0x7f6c0ab779f9 [ 823.989059][T12951] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 824.008666][T12951] RSP: 002b:00007f6c0b952038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 824.017085][T12951] RAX: ffffffffffffffda RBX: 00007f6c0ad06058 RCX: 00007f6c0ab779f9 [ 824.025056][T12951] RDX: 0000000020000480 RSI: 00000000c0306201 RDI: 0000000000000004 [ 824.033043][T12951] RBP: 00007f6c0abe58ee R08: 0000000000000000 R09: 0000000000000000 [ 824.041038][T12951] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 824.049029][T12951] R13: 0000000000000000 R14: 00007f6c0ad06058 R15: 00007ffcb2b9cee8 [ 824.057010][T12951] [ 824.060027][T12951] Modules linked in: [ 824.065875][T12951] ---[ end trace 0000000000000000 ]--- [ 824.071347][T12951] RIP: 0010:binder_inc_ref_for_node+0xdf7/0xe00 [ 824.078790][T12951] Code: c8 f8 e9 4e fd ff ff 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c 59 fd ff ff 48 89 df e8 e4 c1 c8 f8 e9 4c fd ff ff e8 9a 7b 61 f8 90 <0f> 0b 0f 1f 80 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 824.098486][T12951] RSP: 0018:ffffc900049ff5e8 EFLAGS: 00010287 [ 824.104614][T12951] RAX: ffffffff8931fc46 RBX: 0000000000000000 RCX: 0000000000040000 [ 824.112647][T12951] RDX: ffffc9000a12a000 RSI: 0000000000001740 RDI: 0000000000001741 [ 824.120635][T12951] RBP: ffff88802db9a820 R08: ffffffff8931f77b R09: ffff8880187f8d30 [ 824.128675][T12951] R10: dffffc0000000000 R11: ffffed10030ff1a8 R12: 0000000000000000 [ 824.136707][T12951] R13: dffffc0000000000 R14: ffff88802ca11828 R15: ffff88802ca11810 [ 824.144994][T12951] FS: 00007f6c0b9526c0(0000) GS:ffff8880b9300000(0000) knlGS:0000000000000000 [ 824.154062][T12951] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 824.160670][T12951] CR2: 000000110c3397e5 CR3: 00000000709ae000 CR4: 0000000000350ef0 [ 824.168669][ T8] usb 6-1: Using ep0 maxpacket: 8 [ 824.174897][ T8] usb 6-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 824.174925][ T8] usb 6-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 824.174949][ T8] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 824.185683][ T8] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 824.194575][T12951] Kernel panic - not syncing: Fatal exception [ 824.194829][T12951] Kernel Offset: disabled