last executing test programs: 22.739646692s ago: executing program 0 (id=361): syz_mount_image$hfsplus(&(0x7f0000000040), &(0x7f0000000080)='./file1\x00', 0x0, &(0x7f0000000bc0)=ANY=[@ANYBLOB="6e6c733d6d61636963656c616e642c6e6f626172726965722c6e6f626172726965722c005f7b8db67a9956eaaa3dfc8e08ae68687aefcbb557d8339ee96abc3e75c2f51851dd80d3623eec4e2860287a38fe460e4280700685a84e7e8dede5e234a02e1f9fdafdac45432d06ced4b9e09e6e80559399d49f047f84834f44603988cebf80356efe00450322b76f99c7f687cf22e6e3226f8bd9ac02a7b4d13f5ad1c43c789857ad907c1acb521cf21a517cff05cac351464fdd5db7882017e7979aa663ed35ccc6f13be23bca3158d6d4c1"], 0x1, 0x601, &(0x7f0000000580)="$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") syz_mount_image$fuse(&(0x7f0000000000), &(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, &(0x7f00000004c0), 0x0, 0x0, 0x0) 19.135671365s ago: executing program 1 (id=388): r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(r0, 0x0, 0x33, &(0x7f0000d10ffc)=0xfffffffa, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000000100)=[@in={0x2, 0x0, @private=0xa010102}], 0x10) 18.26081229s ago: executing program 1 (id=392): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f0000000000), 0x651, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x5) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) ioctl$TCFLSH(r1, 0x8926, 0x20001114) 17.219546043s ago: executing program 1 (id=397): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x0, 0x0, 0x2}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x48, 0x0, &(0x7f0000000000)='\x00', 0x0}, 0x48) 17.107884445s ago: executing program 1 (id=399): r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x4052, r0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x5, &(0x7f0000000000)=@framed={{}, [@cb_func={0x18, 0xb, 0x4, 0x0, 0xfffffffffffffffd}]}, &(0x7f0000000300)='GPL\x00', 0x8, 0xff8, &(0x7f0000001e00)=""/4088}, 0x90) 17.042837387s ago: executing program 1 (id=400): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) syz_mount_image$iso9660(&(0x7f0000000200), &(0x7f0000000240)='./file1\x00', 0x201cc42, &(0x7f00000000c0)=ANY=[@ANYBLOB="fbffffffff70726573732c756e686964652400"], 0x1, 0xab0, &(0x7f00000017c0)="$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") r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f0000000240)='./file0\x00') mkdir(&(0x7f0000000000)='./control\x00', 0x0) open$dir(&(0x7f00000002c0)='./control/file0\x00', 0xc4540, 0x0) r2 = open(&(0x7f0000022ff6)='./control\x00', 0x0, 0x0) getdents64(r2, &(0x7f0000fc4fbe)=""/80, 0x50) unlinkat(r2, &(0x7f0000000140)='./control\x00', 0x200) rmdir(&(0x7f0000000040)='./control\x00') connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2={0xff, 0x5}}, 0x1c) memfd_secret(0x80000) r3 = fsopen(&(0x7f0000000000)='selinuxfs\x00', 0x0) fsconfig$FSCONFIG_SET_FLAG(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x0) fspick(r4, &(0x7f00000001c0)='.\x00', 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000280)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x800700, &(0x7f0000000880)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x5}}, {@nogrpid}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@minixdf}, {@resgid}, {@sysvgroups}, {@usrjquota}]}, 0x3, 0x455, &(0x7f0000001080)="$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") setxattr$trusted_overlay_upper(&(0x7f0000000300)='./file0\x00', &(0x7f0000000240), &(0x7f0000000880)=ANY=[], 0xff27, 0x0) 15.395753412s ago: executing program 4 (id=403): socket(0x40000000015, 0x5, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(0xffffffffffffffff, &(0x7f00004b8fe4)={0xa, 0x4e22, 0x0, @private2}, 0xa) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xe6, '\x00', 0x0, 0x2}, 0x90) pipe2$watch_queue(&(0x7f0000000140), 0x80) openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000340)='devices.allow\x00', 0x2, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x2c}}, 0x0) r2 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r3 = socket(0x840000000002, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39ddd8) write$binfmt_elf32(r4, &(0x7f0000000040)=ANY=[], 0x69) close(0xffffffffffffffff) r5 = syz_init_net_socket$ax25(0x3, 0x0, 0x0) setsockopt$ax25_int(r5, 0x101, 0x8, &(0x7f00000000c0), 0x4) rename(0x0, &(0x7f0000000540)='./file1\x00') execve(&(0x7f00000000c0)='./file1\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x90001, 0x0) connect$inet(r3, 0x0, 0x0) sendmmsg$unix(r2, 0x0, 0x0, 0x0) syz_usb_connect(0x1, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12012000f1048108cd060202d4920000000109021b1901000000d40904150001da40df000905820227"], 0x0) 15.070121875s ago: executing program 1 (id=407): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000340)={'batadv_slave_0\x00', 0x0}) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) process_vm_readv(0x0, &(0x7f0000008400)=[{0x0}], 0x1, &(0x7f0000008640)=[{0x0}], 0x1, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x80000000, 0x0, 0xffffffffffffffff, 0xfffffffb, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x5}, 0x48) sendmsg$nl_route_sched_retired(r0, 0x0, 0x40) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000080005300000000faff0000940000000fad413e550000000f00000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='sched_process_wait\x00', r1}, 0x10) r3 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r2}, 0x8) write$cgroup_int(r3, &(0x7f00000001c0)=0x2, 0xfffffdef) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x16, &(0x7f0000000340)={[{@grpjquota}, {@noblock_validity}, {@nouid32}, {@jqfmt_vfsv0}, {@nogrpid}, {@nouid32}, {@resuid={'resuid', 0x3d, 0xee00}}, {@data_err_abort}, {@grpid}, {@noauto_da_alloc}, {@nolazytime}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0xff}}]}, 0x0, 0x4f0, &(0x7f0000000640)="$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") syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000280)='./file0\x00', 0x18d8086, &(0x7f0000000100)=ANY=[@ANYBLOB="756e695f786c6174653d312c73686f72746e616d653d77696e39352c756e695f786c6174653d312c646f733178666c6f7070792c757466383d312c757466383d302c73686f72746e616d653d77696e6e742c73686f72746e616d653d6c6f7765722c756e695f786c6174653d312c009aaa21b508352ac75af86d4f32151f53248eb7ec539fff0bd244bb2559d414561138c259cecc8dccf4475a9e05a9b714d4939bee6cf0f1e7a889f8100c41c843380270c2e4a4b5ba0d68cc15c5"], 0x0, 0x23d, &(0x7f00000004c0)="$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") 11.602473845s ago: executing program 4 (id=414): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xf, 0x7, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70200000200f100850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'netpci0\x00', 0x0}) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000080)=0xffffffffffffffff, 0xfffffe62) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@bloom_filter={0x1e, 0x200, 0xffffb462, 0xffff, 0x80, r0, 0x3f, '\x00', r1, r2, 0x0, 0x3}, 0x48) close(r3) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000000000000850000001700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r5, 0xfca804a0, 0x0, 0x0, 0x0, 0x0, 0xc00d, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000000000000000000000000000001811000097b8d8887294163acb79abe7148ce069efa9f1a041f75e30f089acf61b15e89333c9e8ba270aa68890a187b2a135bf77e4eb406d2d55318508444b44c94d039056e428d4e39b5bc8b7207b4e533af8e5d2b71f44351d5f212e2e87fd950072cc0f87dcaeff77730931c70149a48bd9e0831345ff0a69786e5b4ce3d4172eb609591b1cb2b516f22412d897172ed28e96cafae51fcf4743c26845947700f0d45c6ddaab43e38dd1fc8be414898565054ab3ad86ab98c177b0bde0cbd4fbe650f2be61434adcf56fb8b1a953fd", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082000000850000007d0000009500000000000000"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000020000008500000082"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="05010000000000107d1e222e00000000000109022400010000000009040000020300020009210000000122"], 0x0) r7 = socket$nl_generic(0x11, 0x3, 0x10) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r8}, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@local, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x2b, 0x0, 0x0, 0x0, 0x2, 0x0, @rand_addr, @multicast1}, @address_request}}}}, 0x0) sendmsg(r7, &(0x7f0000000640)={&(0x7f00000000c0)=@caif=@dgm={0x25, 0xd}, 0x2c, &(0x7f00000005c0)=[{&(0x7f0000000000)="4ba72c4cfd81685544f46c3f0800", 0x3e}], 0x2, 0x0, 0x0, 0x11000000}, 0x0) 10.995062747s ago: executing program 3 (id=417): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) syz_mount_image$iso9660(&(0x7f0000000200), &(0x7f0000000240)='./file1\x00', 0x201cc42, &(0x7f00000000c0)=ANY=[@ANYBLOB="fbffffffff70726573732c756e686964652400"], 0x1, 0xab0, &(0x7f00000017c0)="$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") r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f0000000240)='./file0\x00') mkdir(&(0x7f0000000000)='./control\x00', 0x0) open$dir(&(0x7f00000002c0)='./control/file0\x00', 0xc4540, 0x0) r2 = open(&(0x7f0000022ff6)='./control\x00', 0x0, 0x0) getdents64(r2, &(0x7f0000fc4fbe)=""/80, 0x50) unlinkat(r2, &(0x7f0000000140)='./control\x00', 0x200) rmdir(&(0x7f0000000040)='./control\x00') connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2={0xff, 0x5}}, 0x1c) memfd_secret(0x80000) r3 = fsopen(&(0x7f0000000000)='selinuxfs\x00', 0x0) fsconfig$FSCONFIG_SET_FLAG(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x0) fspick(r4, &(0x7f00000001c0)='.\x00', 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000280)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x800700, &(0x7f0000000880)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x5}}, {@nogrpid}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@minixdf}, {@resgid}, {@sysvgroups}, {@usrjquota}]}, 0x3, 0x455, &(0x7f0000001080)="$eJzs289rHFUcAPDvzCbp7ybWKrRWjRYx+CNp0qo9eFEUPFQU9FCPcZOW0m0jTQRbio0i9SJIQc/iUfAv8OZF1JPgVe9SKBqEVk+R2Z1JN9vd/Gg2u7H7+cAk7+17s++9ffN23sybDaBnDWd/kojdEfFbRAzWosszDNf+3Vq4XP5n4XI5icXFt/5MqvluLlwuF1mL/XblkZE0Iv0kyQuJbfVvO3vx0tnJSmX6Qh4fmzv33tjsxUvPnjk3eXr69PT5iePHjx0df+H5iefW1I5klfSsXTcPfjhz6MBr71x7vXzy2rs/fZvtsztPr29HuwxnDf9rsaox7Yl2F9Zle+rCSV8XK8K6lCIi667+6vgfjFLc7rzBePXjrlYO2FTZuWlb6+T5ReAelsTqef7uREWADitO9Nn1b7F1aOqxJdx4qXYBlLX7Vr7VUvoizfP0N1zfttNwRJyc//erbItNug8BAFDvs/KXJ+KZZvO/NB6sy7c3X0MZioj7ImJfRNwfEfsj4oGILG/jlHJNhhvid85/0ut32bQ1yeZ/L+ZrW8vnf8XsL4ZKeWxPtf39yakzlekj+WcyEv3bsvj4CmV8/8qvn7dKq5//ZVtWfjEXzOtxva/hBt3U5NxkdVLaBjc+ijjY16z9ydJKQBIRByLi4Preem8ROPPUN4d2HGqeafX2r6AN60yLX0c8Wev/+WhofyFZeX1ybHtUpo+MFUfFnX7+5eqbrcrfUPvbIOv/ncuP/8YsQ0n9eu3s+su4+vunLa9p7vb4H0jervbLQP7aB5NzcxfGIwaSE9X4stcnbu9bxIv8WftHDjcf//vyfbJyHoqI7BB+OCIeiYhH87o/FhGPR8ThFdr/48ut07ZC/081/f5bOv4b+n/9gdLZH75rVf7a+v9YNTSSv1L9/lvFWiu4kc8OAAAA/i/S6jPwSTq6FE7T0dHaM/z7Y2damZmde/rUzPvnp2rPyg9Ff1rc6Rqsux86nszn71iLT+T3iov0o/l94y9KO6rx0fJMZarLbYdet6vF+M/8Uep27YBN12wdbWKgCxUBOq5x/KfLo1fe6GRlgI7ye23oXauM/7RT9QA6z/kfelez8X+lIW4tAO5Nzv/Qu4x/6F3GP/Qu4x960kZ+1y/Qy4FIK5Wp7RFbpT4C7Q10+5sJAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACgPf4LAAD//zAd9WE=") setxattr$trusted_overlay_upper(&(0x7f0000000300)='./file0\x00', &(0x7f0000000240), &(0x7f0000000880)=ANY=[], 0xff27, 0x0) 10.308615063s ago: executing program 2 (id=418): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$netlink(0x10, 0x3, 0x4) writev(r3, &(0x7f0000000000)=[{&(0x7f0000000100)="4c00000014009d000000000000008c590288ffffcf3d3474ff00e7e5d3c2c983f9d503753f689dc39062ed7d00002758d60034650c032635c1fb47f6aaaa9560863cdd00005200af44868734", 0x4c}], 0x1) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) sendmmsg$inet6(r4, &(0x7f0000007e40)=[{{&(0x7f0000000340)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1=0xe0000010}}, 0x1c, 0x0}}], 0x6c00, 0x0) r5 = socket(0x1e, 0x4, 0x0) connect$tipc(r5, &(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10) sendmmsg$unix(r5, &(0x7f0000004400), 0x400000000000203, 0x0) getsockopt$TIPC_SRC_DROPPABLE(0xffffffffffffffff, 0x10f, 0x82, &(0x7f0000000000), &(0x7f0000000140)=0x4) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) 8.791134896s ago: executing program 2 (id=419): open(&(0x7f0000000100)='./bus\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = add_key$keyring(&(0x7f0000000740), &(0x7f0000000780)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r3, &(0x7f00000007c0)='asymmetric\x00', &(0x7f0000000800)=@keyring) 8.524356334s ago: executing program 0 (id=362): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x8, 0x8}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r0, @ANYBLOB], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000001c000000000000002300850000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000fc0)={&(0x7f0000001000)='ext4_read_block_bitmap_load\x00'}, 0x10) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000680)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r2, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2, 0x4, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000200de007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000009c0)={r4, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x80, &(0x7f0000000240), 0x1, 0x50d, &(0x7f0000000980)="$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") bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) 7.826884545s ago: executing program 2 (id=420): bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@bloom_filter={0x1e, 0xfff, 0x6, 0x800, 0x14, 0xffffffffffffffff, 0x1e0, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x1, 0x2, 0x3}, 0x48) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x208e24b) timer_create(0x2, &(0x7f00000006c0)={0x0, 0x11, 0x2}, &(0x7f0000000540)=0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) unshare(0x22020000) mkdir(&(0x7f0000000000)='./file0\x00', 0x129) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0)='rpc_pipefs\x00', 0x0, 0x0) unshare(0x40020000) rmdir(&(0x7f0000000740)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x75) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='cgroup2\x00', 0x4002, 0x0) pivot_root(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000440)='./file0\x00') getsockopt$IPT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000280)={0x6589}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000a000/0x18000)=nil, &(0x7f0000000c80)=[@text64={0x40, &(0x7f0000000c00)="c4417e6fe3400f790bb9410800000f32b9801600c00f3235004000000f300f01cf66baf80c450f01cbef66bafc0ced440f0dc666b834000f00d066baa100ed", 0x3f}], 0x1, 0x8, &(0x7f0000000480), 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) getsockopt$IP_VS_SO_GET_VERSION(0xffffffffffffffff, 0x0, 0x480, &(0x7f00000001c0), &(0x7f0000000300)=0x40) timer_gettime(r2, &(0x7f0000000780)={{0x0, 0x0}}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000580)=[@text32={0x20, &(0x7f0000000900)="0f1f00f7bdcb1700000f3566ba2000b051fbfb670f32c4e3857be4070fc7b4a8720000000f080f32b9a40900000f7432d8", 0x31}], 0x1, 0xd, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000500)=[@textreal={0x8, &(0x7f0000000480)="baf80c66b808aacc8466efb00dee6428f0660fc20b6fd84600f30f017a0066b9800100000f320f38f03f0fc77c86660f38825b260f20c06635020000000f22c0", 0x40}], 0x1, 0x20, &(0x7f0000000580), 0x0) mount$9p_fd(0x0, 0xffffffffffffffff, &(0x7f00000003c0), 0x80040, &(0x7f0000001440)=ANY=[@ANYRES8=r1, @ANYRESHEX, @ANYBLOB="4b774c646e6f3de50799c55e1a288d5faa3576267d3a3c15c5c1240f6f72db774648b0335d6b8a7f548215f96a9113d71e292a4187c5c28e626cd7c2c8a381d63d575ce2d1bd576dec4162abd756ddd3b1bf1b060809b09c91cf49fe8a6422420c8e2e070000003ef4e698bba82e62c71550b722b7823a6d65edc69de3d89a4bca12f0b19e3549c765b6049d79da71f8b05eb7d551ae9ce727c10408d56d2feb06014a6c208510ccfebb837e6205463647d3b4d01b17dc3aa83cc1e919f46433262abe7ee8ba3a64ce3555478f253f379550de4bf097507f9b39e40162543718df87cbc37c19372facab32a0d1ec6b4185dde405f7fcb787a3f04cbcb0fbbe42c05fa411721edf835dfb2c744d5704bbc9e972fae8eef990459d7ac821b68687e9e9ae6b9e2df45dc16abccaafaae48517fecefa472f14758e70ee538dcebe0f48a12cbe493d26c37c937f9514c2956c825305e8dc27d93dbf04b9baa92cb78527ac0008724cb817c5d84d9a9672e678b5b24558648e1b9ba2acdcc6b7ba07d7c3d5fc48a981c66cf2aa1b72201f1ab4d6fcbc95956c0312b6ec2690eb0d6ef49f52cd5449c0ab67a56dcec95a972afeab07eef2eef0e087c57940cb818e3a5ad517c09585021b16797da10f9f63c6bd2f6c0af5a6306c5f87f0cc72c596f615d56ef5acd816b3075f7d57adb7d6459aa6e93452f0edbb5f7c6fc474d7f4adaef848b222141da4bdeb216ba9e67314306e49b47b8d37e1fa859d9bcc9e7cb600a6b82f0000000004c9c226b0c49d408aaa44b6541308aef292fbbc1c8d7d51a784cbe30d2520c6efc0624a0318dbc232c0874e43b8bd29268ca83ccccb6ab755aba93aa646a7f39218b5e2e2f70be6e196d273551bc275", @ANYRESHEX=r1, @ANYRESOCT=0x0, @ANYBLOB="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", @ANYRES8=r4]) syz_kvm_setup_cpu$x86(r1, r3, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, &(0x7f0000000040)="650f01c2660f3a62d53a0fc7760066ba210066ed0f019ae534189db9800000c00f3235001000000f30650fc77800652e0ff56b4cb98d0b00000f32c4c2fd222f", 0x40}], 0x1, 0x60, &(0x7f0000000780), 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000180)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x55}]}, &(0x7f0000000000)='syzkaller\x00'}, 0x80) ioctl$KVM_RUN(r3, 0xae80, 0x0) 7.698108292s ago: executing program 3 (id=421): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000006900000000000001000000940000000fad413e850000000700000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./bus\x00', 0x0, &(0x7f0000000240), 0x21, 0x4a6, &(0x7f0000000a40)="$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") r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f00000003c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum]}}, 0x0, 0x26}, 0x20) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)={0x6, 0x4, 0x4, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, r4, 0x0, 0x1}, 0x48) 7.620360551s ago: executing program 0 (id=422): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x74, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000004140)=[{&(0x7f0000000240)=""/212, 0xd4}, {&(0x7f0000000c80)=""/256, 0x100}, {&(0x7f00000006c0)=""/235, 0xeb}, {&(0x7f00000007c0)=""/191, 0xbf}, {&(0x7f0000000940)=""/183, 0xb7}, {&(0x7f0000000c00)=""/110, 0x6e}, {&(0x7f0000000340)=""/36, 0x24}, {&(0x7f0000003140)=""/4089, 0xff9}], 0x8}, 0x0) 7.33052214s ago: executing program 0 (id=423): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f00000002c0)={0x10}) 6.819666783s ago: executing program 0 (id=424): socket(0x40000000015, 0x5, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(0xffffffffffffffff, &(0x7f00004b8fe4)={0xa, 0x4e22, 0x0, @private2}, 0xa) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xe6, '\x00', 0x0, 0x2}, 0x90) pipe2$watch_queue(&(0x7f0000000140), 0x80) openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000340)='devices.allow\x00', 0x2, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="2c000000190001000000000000000000021800000000fd000000000008000100ac14140004000800000000004c1914890191b542336e8317eaa5a36e36e89d31335e45f39502f3b25a0403ffa0bfbaddd6e7f2e344ab07b8f5ad4ea5e29b72b4b38deb3bacfe4c1871ab2813741b653389e7f56b4b7df5e5f97a83856225dfcb4e2edf26141989a9c716b2b73f6c6162917969b01dfcf61fd16d8a17d1c0d512eeb565e0d5db7f196a5ec95bf32e009801de93ee69a14a492d97cc04602f00f2db1e908c3617b85380c5a3207ef697243f5ce5a8412bc7983ba2b9fcd5c4171df1b28ce6e6f32c4f47d4a1f05b7c0623a8c4d9b890909f1bc4df"], 0x2c}}, 0x0) r2 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r3 = socket(0x840000000002, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39ddd8) write$binfmt_elf32(r4, &(0x7f0000000040)=ANY=[], 0x69) close(0xffffffffffffffff) r5 = syz_init_net_socket$ax25(0x3, 0x0, 0x0) setsockopt$ax25_int(r5, 0x101, 0x8, &(0x7f00000000c0), 0x4) rename(0x0, &(0x7f0000000540)='./file1\x00') execve(&(0x7f00000000c0)='./file1\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x90001, 0x0) connect$inet(r3, 0x0, 0x0) sendmmsg$unix(r2, 0x0, 0x0, 0x0) syz_usb_connect(0x1, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12012000f1048108cd060202d4920000000109021b1901000000d40904150001da40df000905820227"], 0x0) 6.777914478s ago: executing program 4 (id=425): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) statx(0xffffffffffffff9c, &(0x7f0000000380)='./file0/file0\x00', 0x0, 0x0, 0x0) syz_fuse_handle_req(r0, &(0x7f0000004280)="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", 0x2000, &(0x7f0000000e80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000009c0)={0x90, 0x0, 0x0, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff}}}, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r0, &(0x7f0000000280)={0x50, 0x0, r1}, 0x50) setxattr$system_posix_acl(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='system.posix_acl_access\x00', 0x0, 0x0, 0x0) 6.669458624s ago: executing program 3 (id=426): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat$audio(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) ioctl$SG_GET_REQUEST_TABLE(r0, 0x2283, &(0x7f00000000c0)) 6.587386189s ago: executing program 2 (id=427): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x0, 0x0, 0x2}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x48, 0x0, &(0x7f0000000000)='\x00', 0x0}, 0x48) 6.512666629s ago: executing program 3 (id=428): socket$nl_netfilter(0x10, 0x3, 0xc) openat$cachefiles(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) connect$l2tp6(0xffffffffffffffff, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/mcfilter\x00') r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000b40), 0x2b842ac, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000000)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x8a}, 0x9c) bind$inet6(r4, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r4, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback}}, 0x0, 0x0, 0x0, 0x0, 0x54}, 0x9c) ioctl$TIOCVHANGUP(r0, 0x5437, 0x2) 6.389870733s ago: executing program 2 (id=429): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$netlink(0x10, 0x3, 0x4) writev(r3, &(0x7f0000000000)=[{&(0x7f0000000100)="4c00000014009d000000000000008c590288ffffcf3d3474ff00e7e5d3c2c983f9d503753f689dc39062ed7d00002758d60034650c032635c1fb47f6aaaa9560863cdd00005200af44868734", 0x4c}], 0x1) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) sendmmsg$inet6(r4, &(0x7f0000007e40)=[{{&(0x7f0000000340)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1=0xe0000010}}, 0x1c, 0x0}}], 0x6c00, 0x0) r5 = socket(0x1e, 0x4, 0x0) connect$tipc(r5, &(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10) sendmmsg$unix(r5, &(0x7f0000004400), 0x400000000000203, 0x0) getsockopt$TIPC_SRC_DROPPABLE(0xffffffffffffffff, 0x10f, 0x82, &(0x7f0000000000), &(0x7f0000000140)=0x4) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) 6.389448374s ago: executing program 4 (id=430): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000030c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, &(0x7f0000000000)={0x2, 0x0, 0x0, 0xfdfdffff}) 6.198468331s ago: executing program 4 (id=431): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="034886dd010000000000000000006000000001002100fe880001000000000000060000007d01ff0200000000000000000000000000010000eca1406bfc6bae"], 0xfdef) 2.902979823s ago: executing program 3 (id=433): pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SNDRV_PCM_IOCTL_WRITEI_FRAMES(0xffffffffffffffff, 0x40184150, &(0x7f0000000080)={0x0, &(0x7f0000000180)}) pipe(0x0) close(0xffffffffffffffff) write$binfmt_misc(r1, &(0x7f00000000c0)=ANY=[@ANYRESDEC], 0xfffffc8f) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x1800, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x20, 0x26, 0x607, 0x0, 0x0, {0x1}, [@nested={0xc, 0x1, 0x0, 0x1, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}]}]}, 0x20}}, 0x0) r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) sendmsg$inet6(r4, &(0x7f0000000080)={&(0x7f0000001100)={0xa, 0x4e21, 0x800000, @local}, 0x1c, 0x0, 0x0, &(0x7f00000005c0)=ANY=[@ANYRES32=r3], 0x28}, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.time\x00', 0x26e1, 0x0) close(r5) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"/686], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x3a, 0x10, &(0x7f0000000340), 0xd58495bc, 0x0, 0xffffffffffffffff, 0xffffffffffffff5b}, 0x42) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000011c0)={r5, 0x18000000000002a0, 0xe40, 0x0, &(0x7f0000001240)="b9ff03076804268c989e14f088a8657986dd", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000800)={r6}, 0xc) getsockname$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000180)=0x30) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'netpci0\x00'}) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x42000) dup(0xffffffffffffffff) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000880)=@bpf_lsm={0x9, 0x4, &(0x7f0000001280)=ANY=[@ANYBLOB="180400000000000000000000000000000400000000000000e700000000000000eaa9812231d03973f6594946126ae4355e61c906d27e5041cf4e630495d1c81411475aae1fb1f1a3c9cf961e3104932d1e0a4d118006e14fb77609d470c203e93dce89378c0faa37752f9099970ddef04864ce7c1d62e42d6463a79706d2b56bb76f1f22221de99643a245578a298bab9b87906ec0376a7b0598b9f39c91b44b6f9ffa7a6c7f742359c8b0"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) open(&(0x7f0000000040)='./bus\x00', 0x46342, 0x0) open(&(0x7f0000000200)='./bus\x00', 0x14507e, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x1000f8) sched_setscheduler(0x0, 0x5, &(0x7f0000000100)) 2.843174844s ago: executing program 4 (id=434): openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/address_bits', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = dup(r2) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000000080000024d564b000000eccd"]) 2.797162702s ago: executing program 0 (id=435): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000711024000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1e}, 0x90) r0 = syz_open_dev$I2C(&(0x7f0000000040), 0x0, 0x0) mount(0x0, &(0x7f0000000140)='./bus\x00', 0x0, 0x0, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) sched_setscheduler(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x96dca55c25fb4027, &(0x7f0000000180)=0x40000000010001) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) close(0xffffffffffffffff) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, &(0x7f0000000040)="5766b1b827f600333b09d3748ee7d700", 0x10) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000080)=0x7) ioctl$TIOCSETD(0xffffffffffffffff, 0x8910, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000040)={0x7ff, 0xef9, 0x1}) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000500)=ANY=[@ANYBLOB="020a040007000000b6f1ffff0000854105001a000000000000d74619edc700000000000000004cbd302b0000000000fa000000000022", @ANYBLOB='$', @ANYRESOCT], 0x38}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="020100090e000000030000000000000405000600000000000a0000000000000400000000000000000000002100000000000100000000000002000100010000000000010200fd0000050005"], 0x70}}, 0x0) r4 = socket$key(0xf, 0x3, 0x2) sendmmsg(r4, &(0x7f0000000180), 0x400008a, 0x0) ioctl$I2C_SMBUS(r0, 0x720, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0}) r5 = syz_open_dev$usbfs(&(0x7f0000000100), 0x203, 0x8401) fcntl$dupfd(r5, 0x0, r5) 2.723475695s ago: executing program 2 (id=436): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004cc311ec8500000075000000a70000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000005c0)='mm_migrate_pages\x00', r0}, 0x10) r1 = memfd_create(&(0x7f00000000c0)='\xfd\x0fm3#/\x00n\xaa\xaa\xe4\x01U\x8b\xc2\f\x03\x19\x9c\x8e\xcb\x90\x00\x00\xaegQ\x0e\x94\\y\x0fU2@\'\x8a\x80\x00$\x12\xfc\xe4.)\x9b\xf2@\xf0\xe0\xdb\x1f\xe6\xb4gc\x13\xda\xf9\xcd7el\xb7\xe6\b\x00\x00\x00\x00\xef\xff\x00vob/~\xc2\x00\b\x00\x00\x00\x00\x00\x00 \xff\xf1\xdem\x9c;%\xb5\"\xe4\xf1x2\x8a\x19p\x04\\\xaa-\x93\xd1\xc4 )\xbfK\xf7E\xf3\x05\xa0\xd0\xe6%\x97\x15\xf0\xab\x86\x90k\x10\xcer\x14\xe0a\xaf\xab\xfe\xd9V\x19\xa5d\x16\x8e]:3\xff\t\xe6\xf7\xb3\xbf\xa3\b[?\xb5\x14t\xd3\x8e\xc0\xe8\xefd\x88\xddz\xa25)\x17\xef\xfb4\xff\xdb\t\x8e\xeb\x1d\\\xf9\x14\xc7\v\xa8\x89\xdb A\xbaBAj\xfe\x18\xc3-+\xd6\xb0K\xee\x1b+\xc7lA\x84\xa6\xfe\x8bU<&\x1a\xe7m\x86\xb7\xa1A\xf9\x02S;C\x99\a.$K\x833\x82\x7f\x1b\'nj\x06\b\xb7\xe8] \x87A[y\xdc\x14\f\xcet\x00\x1f\x0f\xef\xca\xcfz\x7f\an0\xebB\xb8}&\xdd\xc9\xa7\x1dp\t\x9a\xceb \x81\xaaq{H\x88\xdf\xf8\x80\\\x1c8\xfe\xc4\xe3\xb0\x90\xcb\x8b1r\x94\x9f\x00\xce\xc8\xc3\x84\xa0\xc9\b\x00\x81Ks\xba\xbbC6\xd6\x13\xb5\xe086EzD\x18\xd5\x16\x88E\xc6\xf0A9\xf1u\xb3\x85\x02\x12\\Sp\xf4\x9a\xe8\x96^\xe6\xa8K\x12\b}\xff\xcb{\xc6\xf6\xb4\x8b\xb6\xa8Y\xf2\x91\xeeR\v#\xb5)\xb0\x99\x9b-p\xe3\x17\x04\xb0\xdc\x0fk\x11\xe1\x9a\a\x16\xb7\x9b\x88\xfa\x1e`\x84$\xfc\xd7\xf5^X\xd8[}\x032\xd0\x84\xdby\x94Vp\xa5\xcd(\xab\xb6\x95sR\xab\xfc\x8c\'\x9c\x16Q\xad\xbc\xb04%\xb7\xe5\x14\xb1`\x87#X\\W`;\'_4\xc5\xc9\x921<\xd9\xad\x9f\x12@!\xfaI\x88\xab\xef\x86\xe9\a>\xdd7\xb7\x8e\x9c0-o\xc9\xec_|\x02\xc8Ru\x95\xa8#U\xd6J\x87\xf6X\xb6{\x11$\x00\xc8\x14\xcb\xd1nK\xd8\xb9\x0e\x9bA\xed\xbcs\x1fS\r\x12O\x83\x15\xcb(\xdb\xb1S\x1f%\x04\x9a\xa0l\xa3}\xe7r\x02\x00\x00\x00\x8aeh;F[\xe2\x1c\xe26 \x19k&.\x7f\x1d~\xdaI\xd4\x99\a+\xdf]\xbc\xa6\xc3\x0f\x99W\x9c-t\v\xc7J\xfd\x91\x853\xd1j;\x19W\x96V\x8az+\xf9\x82#\xfaC\xa3YN:\xe8\xda\xbc\xb2h\x8f\xe0\xc6d\x96\xccy\xb3\xc2\x98\x1c\xca\xde\"\xaeW\x89\x83\xc2sB\xe7\b\x9b9~}\xc2\xb3\x1d\xcc?\xd1\x89\xef\xca\x00\x00\x00\x00\x00\x00\x00\x00\x00J[\xc4\x04\xc1\xa6\x10\xc2\x9d\x11\t|\xc0\t\xd9(\x80\xe6s\xaa\x88\x8a\xd6\xa2\x01\x10W]Z\x8d\xf7\xd1P\xf9d\x01|\xa3\x03hSq\x95\x8f\xe1J\xd3#/fcCz\xff\x80\xe2M\xa3-r\xf6\x1a\xd74\xdc\xe1\xe4\xc3\x9dU t}\x02\x9a{C|S\xf4\x98\x05\xb9\x15}\xfa\"\xdc\xc2r\xf9\a\xadnD\xb6\x06\xd3\'\x10\x9f|\x17\xd6\x89O\f\x98@\x85\xa5m\x9d\\&\x17o\x11Z=l\xfb\x93\x8exZ', 0x6) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x2000003, 0x97052, r1, 0x0) mbind(&(0x7f0000126000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x2) 0s ago: executing program 3 (id=437): sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16, @ANYBLOB="01edff000000000004003b1c210008"], 0x448}}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b24, &(0x7f0000000040)={'wlan1\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r2, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x68, r3, 0x1, 0x0, 0x0, {{}, {}, {0x4c, 0x18, {0x9d4, @link='broadcast-link\x00'}}}}, 0x68}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000300), 0x7b9c0b) socket$inet_udplite(0x2, 0x2, 0x88) preadv(r0, &(0x7f0000000280)=[{&(0x7f0000000340)=""/107, 0x6b}, {&(0x7f00000003c0)=""/99, 0x63}], 0x2, 0x0, 0x5) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', 0x0}) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = socket(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r9, 0xa00000000000000, 0x80, &(0x7f00000000c0)=@broute={'broute\x00', 0x20, 0x1, 0x990, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000e00], 0x0, 0x0, &(0x7f0000000e00)=ANY=[@ANYBLOB="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"/2448]}, 0xa08) recvmmsg(r9, &(0x7f0000001180)=[{{&(0x7f00000005c0)=@xdp, 0x80, &(0x7f00000004c0)=[{&(0x7f00000006c0)=""/65, 0x41}], 0x1, &(0x7f0000000c80)=""/145, 0x91}, 0xffffffff}, {{&(0x7f0000000740)=@nl=@unspec, 0x80, &(0x7f0000000ec0)=[{&(0x7f0000000d40)=""/24, 0x18}, {&(0x7f0000000e00)=""/189, 0xbd}], 0x2, &(0x7f0000000f00)}, 0x3}, {{0x0, 0x0, &(0x7f0000001140)=[{&(0x7f0000000f40)=""/253, 0xfd}, {&(0x7f0000001040)=""/211, 0xd3}], 0x2, &(0x7f00000012c0)=""/4096, 0x1000}, 0x2}], 0x3, 0x1a1, &(0x7f0000001240)={0x77359400}) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x24, r10, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r11}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x48010}, 0x0) sendmsg$NL80211_CMD_CONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000007c0)=ANY=[@ANYRES8, @ANYRES16=r5, @ANYBLOB="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", @ANYRESDEC, @ANYRESOCT=r4], 0x28}, 0x1, 0x0, 0x0, 0x4014}, 0x8000) sendmsg$NL80211_CMD_LEAVE_MESH(r5, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000100)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="1227055da84a93d3f7509547f8ac7fa5516a47015a5e2af3d13553b23b4a9f91a7a0eacbc9a8007155e84fb6d5a962404e9eb7f633bc53b0f4e093a897d1b924109bc61fa2f0226d8d2a73b3f905bf8927460a9bdd0719959a8e93fe63453ae53205a7644bf4e7e665ca8cd1cfcf4e544fd7f3f5e493fa6b88a3c06ef140d671d0749a5bc17042ce5e5a6c901f25d4501c0c6196362c39746508df97ab5ecf16b9b76e3b84a5b50a5bea8319f02429bce9", @ANYRES16=r5, @ANYRES64, @ANYRES32=r7, @ANYBLOB="ee1ced466b47f0b8664abfb69b1771a0e6c73f809c638b2b7c1e155fc06b2b11207009414e80e99931f940771041ea1fbdb559f73c33577cfc5d45525a6248944f369f4c9748f2abc5fa2894c5d4a36ee3e3f2739c8e2ddc5085633520724c7cd2f0861a44ae560dea692355ac6ab511b77f9e27e62710c6b56bf96825f425fd3a6cb2a9a57e136c9a3f03b755b223d60fbeddd25df6f075698c74c20dd26f6a9741f56fbf51bc294ad05cfa8aa8f25468c4546f237ad316198666f61d6de185e192"], 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x1) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = openat$cgroup(r4, &(0x7f0000000480)='syz1\x00', 0x200002, 0x0) sendmsg$nl_generic(r12, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x2c, 0x38, 0x9, 0x0, 0x0, {0x1}, [@typed={0x4, 0x3a}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @fd=r13}]}, @typed={0x8, 0x2, 0x0, 0x0, @pid=0xffffffffffffffff}]}, 0x2c}}, 0x0) sendmsg$NL80211_CMD_GET_SURVEY(r4, &(0x7f0000000240)={&(0x7f0000000440), 0xc, &(0x7f0000000200)={&(0x7f0000000500)=ANY=[@ANYBLOB="00c97154dab22eab29c77ebbf796000000abd25ad5a23f0148bb1eea9f7be451ec29022c09a3a98804a374625fda8c4bc422ba793f828b3229b541bbf921916003167977ce7253c50cc417d8", @ANYRES64=r1, @ANYRESOCT=r10, @ANYRESDEC=r12, @ANYRES16=r7], 0x1c}, 0x1, 0x0, 0x0, 0x2000c0d0}, 0x8000) sendmsg$NL80211_CMD_FRAME(r12, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000140)={&(0x7f0000000640)={0x7c, 0x0, 0x612, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x8, 0x33}}}}, [@NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x326}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0x16, 0xcd, [0x7fff, 0x40, 0x7fff, 0x0, 0x6, 0x5, 0x1, 0x401, 0x0]}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0x16, 0xcd, [0x3, 0x80, 0x3, 0xfffa, 0xfff, 0x0, 0xadd4, 0x3, 0x20]}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x800}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}]}, 0x7c}, 0x1, 0x0, 0x0, 0x8805}, 0x8000) r14 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r14, 0x80045438, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x2, 0x8, "9812ddc15176e5000300"}) kernel console output (not intermixed with test programs): v0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.099234][ T5096] Bluetooth: hci3: command tx timeout [ 54.099582][ T5100] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 54.104687][ T5113] Bluetooth: hci1: command tx timeout [ 54.125164][ T5102] hsr_slave_0: entered promiscuous mode [ 54.131511][ T5102] hsr_slave_1: entered promiscuous mode [ 54.137527][ T5102] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 54.145447][ T5102] Cannot create hsr debugfs directory [ 54.167901][ T5100] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 54.174928][ T5096] Bluetooth: hci2: command tx timeout [ 54.174967][ T5113] Bluetooth: hci4: command tx timeout [ 54.180350][ T5100] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.212041][ T5100] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 54.286979][ T5100] hsr_slave_0: entered promiscuous mode [ 54.293951][ T5100] hsr_slave_1: entered promiscuous mode [ 54.299947][ T5100] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 54.307548][ T5100] Cannot create hsr debugfs directory [ 54.496228][ T5101] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 54.533573][ T5101] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 54.566799][ T5101] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 54.577628][ T5101] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 54.629632][ T5102] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 54.639573][ T5102] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 54.649405][ T5102] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 54.659714][ T5102] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 54.710541][ T5099] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 54.724807][ T5099] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 54.751780][ T5099] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 54.763919][ T5099] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 54.799931][ T5100] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 54.828259][ T5100] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 54.839006][ T5100] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 54.848891][ T5100] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 54.895692][ T5094] 8021q: adding VLAN 0 to HW filter on device bond0 [ 54.966852][ T5101] 8021q: adding VLAN 0 to HW filter on device bond0 [ 54.997437][ T5094] 8021q: adding VLAN 0 to HW filter on device team0 [ 55.032416][ T5099] 8021q: adding VLAN 0 to HW filter on device bond0 [ 55.040868][ T5144] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.048044][ T5144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.071876][ T5101] 8021q: adding VLAN 0 to HW filter on device team0 [ 55.094246][ T5146] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.101396][ T5146] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.109906][ T5146] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.117069][ T5146] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.144073][ T5099] 8021q: adding VLAN 0 to HW filter on device team0 [ 55.166322][ T5102] 8021q: adding VLAN 0 to HW filter on device bond0 [ 55.178834][ T5146] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.185976][ T5146] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.214262][ T5146] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.221377][ T5146] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.233465][ T5146] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.240584][ T5146] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.254563][ T5100] 8021q: adding VLAN 0 to HW filter on device bond0 [ 55.277627][ T5102] 8021q: adding VLAN 0 to HW filter on device team0 [ 55.309258][ T5094] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 55.336281][ T5100] 8021q: adding VLAN 0 to HW filter on device team0 [ 55.345859][ T5144] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.353009][ T5144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.378227][ T5145] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.385399][ T5145] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.410227][ T5144] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.417431][ T5144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.448207][ T5099] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 55.476297][ T5144] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.483555][ T5144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.596046][ T5102] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 55.704034][ T5099] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 55.730298][ T5094] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 55.766215][ T5101] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 55.844040][ T5113] Bluetooth: hci0: command tx timeout [ 55.866693][ T5094] veth0_vlan: entered promiscuous mode [ 55.914968][ T5094] veth1_vlan: entered promiscuous mode [ 55.946722][ T5102] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 56.003721][ T5101] veth0_vlan: entered promiscuous mode [ 56.019120][ T5094] veth0_macvtap: entered promiscuous mode [ 56.037007][ T5101] veth1_vlan: entered promiscuous mode [ 56.046082][ T5094] veth1_macvtap: entered promiscuous mode [ 56.066439][ T5100] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 56.090466][ T5094] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 56.120581][ T5094] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 56.132170][ T5094] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.140901][ T5094] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.150956][ T5094] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.160164][ T5094] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.168977][ T5113] Bluetooth: hci3: command tx timeout [ 56.174508][ T5096] Bluetooth: hci1: command tx timeout [ 56.186097][ T5102] veth0_vlan: entered promiscuous mode [ 56.229635][ T5102] veth1_vlan: entered promiscuous mode [ 56.241445][ T5096] Bluetooth: hci2: command tx timeout [ 56.241480][ T5113] Bluetooth: hci4: command tx timeout [ 56.254304][ T5101] veth0_macvtap: entered promiscuous mode [ 56.263623][ T5099] veth0_vlan: entered promiscuous mode [ 56.279485][ T5101] veth1_macvtap: entered promiscuous mode [ 56.297738][ T5099] veth1_vlan: entered promiscuous mode [ 56.344995][ T5100] veth0_vlan: entered promiscuous mode [ 56.351356][ T5101] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 56.363322][ T5101] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.374599][ T5101] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 56.387270][ T5102] veth0_macvtap: entered promiscuous mode [ 56.402463][ T5101] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 56.414514][ T5101] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.426201][ T5101] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 56.446457][ T5102] veth1_macvtap: entered promiscuous mode [ 56.456089][ T5101] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.465338][ T5101] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.474456][ T5101] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.483408][ T5101] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.503398][ T2873] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.513786][ T2873] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.525025][ T5100] veth1_vlan: entered promiscuous mode [ 56.555242][ T5099] veth0_macvtap: entered promiscuous mode [ 56.578203][ T5099] veth1_macvtap: entered promiscuous mode [ 56.598960][ T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.617447][ T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.626086][ T5102] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 56.640363][ T5102] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.652058][ T5102] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 56.662785][ T5102] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.673928][ T5102] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 56.686188][ T5102] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 56.696938][ T5102] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.707214][ T5102] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 56.717970][ T5102] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.729496][ T5102] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 56.759532][ T5102] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.768620][ T5102] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.777428][ T5102] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.786541][ T5102] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.797206][ T5100] veth0_macvtap: entered promiscuous mode [ 56.808339][ T5099] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 56.819803][ T5099] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.830148][ T5099] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 56.855637][ T5176] loop0: detected capacity change from 0 to 16 [ 56.857983][ T5099] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.863636][ T5176] erofs: (device loop0): erofs_read_superblock: invalid sb_extslots 3728 (more than a fs block) [ 56.897505][ T5099] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 56.909949][ T5099] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.922309][ T5099] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 56.954996][ T5100] veth1_macvtap: entered promiscuous mode [ 56.968939][ T2820] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.986805][ T2820] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.994972][ T5099] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.006260][ T5099] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.017762][ T5099] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.028388][ T5099] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.039098][ T5099] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.050644][ T5099] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.063702][ T5099] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 57.108280][ T5100] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.118901][ T5100] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.130131][ T5100] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.141436][ T5100] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.151699][ T5100] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.162835][ T5100] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.172864][ T5100] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.184953][ T5100] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.196148][ T5100] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 57.212407][ T5099] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.221555][ T5099] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.230264][ T5099] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.239020][ T5099] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.254323][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.259909][ T5100] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.273928][ T5100] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.284944][ T5100] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.290798][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.297433][ T5100] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.318631][ T5100] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.329480][ T5100] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.339778][ T5100] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.352682][ T5100] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.364300][ T5100] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 57.417581][ T5100] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.435932][ T5100] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.465238][ T5100] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.474299][ T5100] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.558564][ T1087] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.578481][ T1087] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.690886][ T2820] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.719405][ T2820] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.731478][ T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.739990][ T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.829749][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.871255][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.921661][ T5113] Bluetooth: hci0: command tx timeout [ 58.241681][ T5113] Bluetooth: hci3: command tx timeout [ 58.247325][ T5096] Bluetooth: hci1: command tx timeout [ 58.322220][ T5096] Bluetooth: hci2: command tx timeout [ 58.331583][ T5096] Bluetooth: hci4: command tx timeout [ 58.340160][ T2820] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.349689][ T2820] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.374646][ T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.420203][ T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.449840][ T5216] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 58.487725][ T5216] loop4: detected capacity change from 0 to 512 [ 58.516632][ T5216] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 58.585270][ T5216] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 58.707799][ T5216] EXT4-fs (loop4): 1 truncate cleaned up [ 58.715000][ T5216] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 58.752554][ T5222] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4'. [ 58.805543][ T5216] evm: overlay not supported [ 58.858294][ T5233] loop2: detected capacity change from 0 to 1024 [ 58.914320][ T5234] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 59.056212][ T0] NOHZ tick-stop error: local softirq work is pending, handler #10!!! [ 59.071438][ T0] NOHZ tick-stop error: local softirq work is pending, handler #10!!! [ 59.085180][ T0] NOHZ tick-stop error: local softirq work is pending, handler #10!!! [ 59.097908][ T0] NOHZ tick-stop error: local softirq work is pending, handler #10!!! [ 59.110599][ T0] NOHZ tick-stop error: local softirq work is pending, handler #10!!! [ 59.111975][ T5245] netlink: 1304 bytes leftover after parsing attributes in process `syz.1.30'. [ 59.537667][ T5261] loop3: detected capacity change from 0 to 512 [ 59.548088][ T5261] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 59.582506][ T5261] EXT4-fs (loop3): 1 truncate cleaned up [ 59.598640][ T5261] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 60.006017][ T5096] Bluetooth: hci0: command tx timeout [ 60.084858][ T5268] loop0: detected capacity change from 0 to 32768 [ 60.094591][ T5268] ======================================================= [ 60.094591][ T5268] WARNING: The mand mount option has been deprecated and [ 60.094591][ T5268] and is ignored by this kernel. Remove the mand [ 60.094591][ T5268] option from the mount to silence this warning. [ 60.094591][ T5268] ======================================================= [ 60.254521][ T5268] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 60.321233][ T5113] Bluetooth: hci3: command tx timeout [ 60.326768][ T5096] Bluetooth: hci1: command tx timeout [ 60.335295][ T5268] XFS (loop0): Ending clean mount [ 60.772342][ T5100] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 60.781918][ T5099] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 60.792905][ T5099] syz-executor (5099) used greatest stack depth: 19376 bytes left [ 60.937465][ T12] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 60.949467][ T5094] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 60.961680][ T0] NOHZ tick-stop error: local softirq work is pending, handler #208!!! [ 60.971295][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 61.032866][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 61.111571][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 61.123799][ T12] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 61.269143][ T12] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 61.405045][ T12] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 61.424630][ T5317] loop1: detected capacity change from 0 to 512 [ 61.465101][ T5317] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 61.474675][ T5113] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 61.484540][ T5113] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 61.492317][ T5113] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 61.501674][ T5113] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 61.510379][ T5113] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 61.517971][ T5113] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 61.553897][ T5317] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 61.577066][ T5317] ext4 filesystem being mounted at /12/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 61.658753][ T5096] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 61.666671][ T5096] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 61.666942][ T5096] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 61.667689][ T5096] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 61.668201][ T5096] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 61.668450][ T5096] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 61.726614][ T5317] EXT4-fs error (device loop1): __ext4_new_inode:1279: comm syz.1.62: failed to insert inode 16: doubly allocated? [ 61.804235][ T5333] loop2: detected capacity change from 0 to 512 [ 61.813411][ T5333] EXT4-fs: Ignoring removed oldalloc option [ 61.822090][ T5333] EXT4-fs: Ignoring removed nobh option [ 61.863727][ T5333] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 61.900769][ T12] bridge_slave_1: left allmulticast mode [ 61.909868][ T5333] ext4 filesystem being mounted at /16/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 61.912506][ T12] bridge_slave_1: left promiscuous mode [ 61.945792][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.954909][ T5101] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 61.967537][ T12] bridge_slave_0: left allmulticast mode [ 61.974238][ T12] bridge_slave_0: left promiscuous mode [ 61.980092][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.122222][ T25] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 62.291860][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 62.323142][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 62.333793][ T25] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 62.352585][ T25] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 62.353904][ T5343] loop2: detected capacity change from 0 to 32768 [ 62.371563][ T12] bond0 (unregistering): Released all slaves [ 62.380385][ T25] usb 1-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 62.391966][ T25] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 62.398549][ T5343] XFS: attr2 mount option is deprecated. [ 62.413451][ T25] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 62.422883][ T5343] XFS: ikeep mount option is deprecated. [ 62.427342][ T25] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 62.429281][ T5102] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 62.437068][ T25] usb 1-1: SerialNumber: syz [ 62.447362][ T5343] XFS: noikeep mount option is deprecated. [ 62.507315][ T5343] XFS (loop2): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 62.598023][ T5343] XFS (loop2): Ending clean mount [ 62.618588][ T5343] XFS (loop2): Quotacheck needed: Please wait. [ 62.676719][ T5343] XFS (loop2): Quotacheck: Done. [ 62.679418][ T5359] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 62.700857][ T25] usb 1-1: 0:2 : does not exist [ 62.708208][ T25] usb 1-1: unit 5 not found! [ 62.773939][ T25] usb 1-1: USB disconnect, device number 2 [ 62.853915][ T5088] udevd[5088]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 62.894872][ T5101] XFS (loop2): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 63.010396][ T5359] loop1: detected capacity change from 0 to 512 [ 63.025481][ T5321] chnl_net:caif_netlink_parms(): no params data found [ 63.056992][ T5359] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 63.125185][ T12] hsr_slave_0: left promiscuous mode [ 63.162308][ T5359] EXT4-fs (loop1): 1 orphan inode deleted [ 63.168429][ T12] hsr_slave_1: left promiscuous mode [ 63.176445][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 63.198498][ T5359] EXT4-fs (loop1): 1 truncate cleaned up [ 63.206979][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 63.214289][ T5359] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 63.239758][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 63.255900][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 63.285580][ T12] veth1_macvtap: left promiscuous mode [ 63.293363][ T12] veth0_macvtap: left promiscuous mode [ 63.299088][ T12] veth1_vlan: left promiscuous mode [ 63.305107][ T12] veth0_vlan: left promiscuous mode [ 63.430541][ T5383] loop2: detected capacity change from 0 to 512 [ 63.456478][ T5383] EXT4-fs (loop2): 1 orphan inode deleted [ 63.469306][ T5383] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 63.502094][ T5102] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 63.540721][ T5383] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 63.601939][ T5096] Bluetooth: hci2: command tx timeout [ 63.639099][ T12] team0 (unregistering): Port device team_slave_1 removed [ 63.653890][ T12] team0 (unregistering): Port device team_slave_0 removed [ 63.761414][ T5096] Bluetooth: hci4: command tx timeout [ 63.917113][ T5101] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 64.100899][ T5321] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.127612][ T5321] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.154207][ T5321] bridge_slave_0: entered allmulticast mode [ 64.158333][ T5402] netlink: 8 bytes leftover after parsing attributes in process `syz.0.79'. [ 64.175391][ T5321] bridge_slave_0: entered promiscuous mode [ 64.189952][ T5326] chnl_net:caif_netlink_parms(): no params data found [ 64.236347][ T5321] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.258741][ T5321] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.267789][ T5321] bridge_slave_1: entered allmulticast mode [ 64.279134][ T5321] bridge_slave_1: entered promiscuous mode [ 64.386917][ T5321] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 64.428739][ T5412] netlink: 1304 bytes leftover after parsing attributes in process `syz.1.81'. [ 64.445863][ T5321] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 64.603156][ T5321] team0: Port device team_slave_0 added [ 64.694885][ T5321] team0: Port device team_slave_1 added [ 64.736963][ T5406] loop2: detected capacity change from 0 to 32768 [ 64.753824][ T5406] bcachefs (/dev/loop2): error validating superblock: Invalid superblock section crypt: wrong size (got 8 should be 64) [ 64.753824][ T5406] crypt (size 8): [ 64.753824][ T5406] KFD: 12 [ 64.753824][ T5406] scrypt n: 0 [ 64.753824][ T5406] scrypt r: 0 [ 64.753824][ T5406] scrypt p: 0 [ 64.753824][ T5406] [ 64.821727][ T5326] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.833139][ T5326] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.840826][ T5326] bridge_slave_0: entered allmulticast mode [ 64.848175][ T5326] bridge_slave_0: entered promiscuous mode [ 64.866721][ T5326] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.877971][ T5326] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.900282][ T5326] bridge_slave_1: entered allmulticast mode [ 64.932999][ T5326] bridge_slave_1: entered promiscuous mode [ 64.970319][ T12] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 64.990953][ T5321] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 65.004787][ T5321] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 65.030695][ C0] vkms_vblank_simulate: vblank timer overrun [ 65.046017][ T5321] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 65.066634][ T12] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.160654][ T5326] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 65.184876][ T5321] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 65.210367][ T5321] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 65.243053][ T5321] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 65.280427][ T5446] loop0: detected capacity change from 0 to 2048 [ 65.288379][ T12] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.291463][ T5447] fuse: Unknown parameter 'grou00000000000000000000' [ 65.332405][ T5446] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 65.343389][ T5326] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 65.463945][ T12] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.494853][ T5326] team0: Port device team_slave_0 added [ 65.513563][ T5326] team0: Port device team_slave_1 added [ 65.746891][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 65.769332][ T5096] Bluetooth: hci2: command tx timeout [ 65.851585][ T5096] Bluetooth: hci4: command tx timeout [ 66.065495][ T5439] loop2: detected capacity change from 0 to 32768 [ 66.230233][ T5326] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 66.278482][ T5326] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.408545][ T5326] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 66.546875][ T5326] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 66.571154][ T5326] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.631468][ T5326] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 66.908447][ T5457] loop1: detected capacity change from 0 to 32768 [ 66.966368][ T5321] hsr_slave_0: entered promiscuous mode [ 66.967471][ T5465] netlink: 80 bytes leftover after parsing attributes in process `syz.2.94'. [ 66.987105][ T5321] hsr_slave_1: entered promiscuous mode [ 67.007254][ T5457] XFS: attr2 mount option is deprecated. [ 67.041474][ T5321] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 67.061858][ T5321] Cannot create hsr debugfs directory [ 67.082639][ T5457] XFS (loop1): cannot change alignment: superblock does not support data alignment [ 67.127477][ T5326] hsr_slave_0: entered promiscuous mode [ 67.135468][ T5326] hsr_slave_1: entered promiscuous mode [ 67.150200][ T5326] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 67.162614][ T5326] Cannot create hsr debugfs directory [ 67.168491][ T5469] netlink: 6 bytes leftover after parsing attributes in process `syz.2.94'. [ 67.264683][ T5469] IPVS: Error connecting to the multicast addr [ 67.329940][ T5479] loop0: detected capacity change from 0 to 2048 [ 67.381981][ T5479] loop0: p1 < > p4 [ 67.388130][ T5479] loop0: p4 size 8388608 extends beyond EOD, truncated [ 67.437947][ C0] eth0: bad gso: type: 1, size: 1408 [ 67.515628][ T12] bridge_slave_1: left allmulticast mode [ 67.528945][ T12] bridge_slave_1: left promiscuous mode [ 67.541373][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.559064][ T12] bridge_slave_0: left allmulticast mode [ 67.568397][ T12] bridge_slave_0: left promiscuous mode [ 67.574627][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.589136][ T5494] capability: warning: `syz.0.96' uses deprecated v2 capabilities in a way that may be insecure [ 67.709366][ T5500] loop2: detected capacity change from 0 to 2048 [ 67.727736][ T5500] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 67.738203][ T5147] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 67.861377][ T5096] Bluetooth: hci2: command tx timeout [ 67.882086][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 67.893964][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 67.905799][ T12] bond0 (unregistering): Released all slaves [ 67.941786][ T5096] Bluetooth: hci4: command tx timeout [ 68.732267][ T5147] usb 2-1: config 1 has an invalid descriptor of length 116, skipping remainder of the config [ 68.759508][ T5147] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 68.774104][ T5147] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 68.796684][ T5147] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 68.849403][ T5147] usb 2-1: SerialNumber: syz [ 68.965256][ T5510] netlink: 8 bytes leftover after parsing attributes in process `syz.2.103'. [ 69.004609][ C0] eth0: bad gso: type: 1, size: 1408 [ 69.345979][ T5147] usb 2-1: 0:2 : does not exist [ 69.375554][ T5515] loop2: detected capacity change from 0 to 2048 [ 69.436192][ T5147] usb 2-1: USB disconnect, device number 2 [ 69.470479][ T12] hsr_slave_0: left promiscuous mode [ 69.477192][ T5515] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 69.493756][ T12] hsr_slave_1: left promiscuous mode [ 69.513767][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 69.531635][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 69.545081][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 69.546249][ T5515] netlink: 56 bytes leftover after parsing attributes in process `syz.2.106'. [ 69.553083][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 69.571764][ T12] veth1_macvtap: left promiscuous mode [ 69.577315][ T12] veth0_macvtap: left promiscuous mode [ 69.582862][ T5515] netlink: 'syz.2.106': attribute type 1 has an invalid length. [ 69.590651][ T12] veth1_vlan: left promiscuous mode [ 69.596164][ T12] veth0_vlan: left promiscuous mode [ 69.679488][ T5101] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.712304][ T5088] udevd[5088]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 69.921371][ T5096] Bluetooth: hci2: command tx timeout [ 70.013721][ T5096] Bluetooth: hci4: command tx timeout [ 70.177209][ T5539] loop0: detected capacity change from 0 to 2048 [ 70.203600][ T12] team0 (unregistering): Port device team_slave_1 removed [ 70.265365][ T12] team0 (unregistering): Port device team_slave_0 removed [ 70.330727][ T5539] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 70.346162][ T5539] ext4 filesystem being mounted at /36/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 70.384550][ T5539] fs-verity: sha512 using implementation "sha512-avx2" [ 70.394506][ T5539] fs-verity (loop0, inode 13): fs-verity keyring is empty, rejecting signed file! [ 70.423674][ T5094] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.625056][ T5554] loop1: detected capacity change from 0 to 256 [ 70.660454][ T5554] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xb75ad3fb, utbl_chksum : 0xe619d30d) [ 70.743016][ C0] eth0: bad gso: type: 1, size: 1408 [ 70.839135][ T5326] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 70.859676][ T5326] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 70.899033][ T5326] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 70.954343][ T5326] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 71.139337][ T5579] loop1: detected capacity change from 0 to 2048 [ 71.847480][ T5326] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.868807][ T5326] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.899431][ T5147] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.906621][ T5147] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.924195][ T1247] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.930606][ T1247] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.953636][ T5592] loop2: detected capacity change from 0 to 256 [ 71.967265][ T5592] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xb75ad3fb, utbl_chksum : 0xe619d30d) [ 72.047734][ C0] eth0: bad gso: type: 1, size: 1408 [ 72.072553][ T5321] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 72.122480][ T5103] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.129645][ T5103] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.137574][ T5096] Bluetooth: hci1: SCO packet for unknown connection handle 3328 [ 72.179192][ T5602] loop2: detected capacity change from 0 to 2048 [ 72.193803][ T5321] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 72.804981][ T5607] loop1: detected capacity change from 0 to 2048 [ 73.355166][ T5600] sched: RT throttling activated [ 73.362177][ T5321] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 74.369335][ T5607] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 74.936307][ T5321] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 75.354356][ T5618] loop0: detected capacity change from 0 to 128 [ 75.378687][ T5618] FAT-fs (loop0): error, invalid access to FAT (entry 0x0fff0030) [ 75.417325][ T5102] UDF-fs: error (device loop1): udf_read_inode: (ino 1317) failed !bh [ 75.452059][ T5102] UDF-fs: error (device loop1): udf_read_inode: (ino 1317) failed !bh [ 75.532419][ T5321] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.539505][ T5628] loop0: detected capacity change from 0 to 256 [ 75.578970][ T5628] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xb75ad3fb, utbl_chksum : 0xe619d30d) [ 75.636938][ T5326] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.685584][ T5321] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.715819][ T25] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.723001][ T25] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.776619][ T25] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.783810][ T25] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.818475][ T5326] veth0_vlan: entered promiscuous mode [ 75.851440][ T5096] Bluetooth: hci1: SCO packet for unknown connection handle 3328 [ 75.855406][ T5640] loop0: detected capacity change from 0 to 4096 [ 75.885144][ T5326] veth1_vlan: entered promiscuous mode [ 75.918041][ T5643] loop2: detected capacity change from 0 to 2048 [ 75.930847][ T5640] NILFS (loop0): invalid segment: Checksum error in segment payload [ 75.942491][ T5640] NILFS (loop0): trying rollback from an earlier position [ 75.982352][ T5640] NILFS (loop0): recovery complete [ 75.999846][ T52] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.004791][ T5644] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 76.085565][ T52] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.189395][ T5326] veth0_macvtap: entered promiscuous mode [ 76.287234][ T52] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.351856][ T5326] veth1_macvtap: entered promiscuous mode [ 76.432194][ T52] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.508952][ T5321] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.518593][ T5113] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 76.526127][ T5113] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 76.535872][ T5113] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 76.555709][ T5113] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 76.563991][ T5113] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 76.573892][ T5113] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 76.824373][ T5326] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.902388][ T5326] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.077715][ T1151] cfg80211: failed to load regulatory.db [ 77.100013][ T5326] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.526982][ T5326] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.562981][ T5326] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.593944][ T5326] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.637669][ T5326] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.677089][ T5326] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.723981][ T5326] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.861160][ T5326] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.919016][ T5326] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.949475][ T5326] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.992902][ T5326] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.022731][ T5326] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 78.078465][ T5326] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.140215][ T5326] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.158812][ T5326] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.207530][ T5326] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.697173][ T5699] loop0: detected capacity change from 0 to 512 [ 78.730049][ T52] bridge_slave_1: left allmulticast mode [ 78.762200][ T5699] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 78.776858][ T52] bridge_slave_1: left promiscuous mode [ 78.793572][ T52] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.796955][ T5699] EXT4-fs (loop0): 1 orphan inode deleted [ 78.808094][ T5699] EXT4-fs (loop0): 1 truncate cleaned up [ 78.808739][ T52] bridge_slave_0: left allmulticast mode [ 78.819802][ T52] bridge_slave_0: left promiscuous mode [ 78.825726][ T5699] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 78.825847][ T52] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.882125][ T5113] Bluetooth: hci3: command tx timeout [ 78.948039][ T5697] kvm: emulating exchange as write [ 79.188486][ T52] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 79.215257][ T5094] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.250155][ T52] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 79.305678][ T52] bond0 (unregistering): Released all slaves [ 79.369376][ T5740] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 79.567018][ T5749] overlayfs: bad index found (index=index/00fb210001dad187cbc5184ca9a19943261e4be6b05ec42df03801000000000000, ftype=2000, origin ftype=a000). [ 79.671460][ T2853] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.691089][ T2853] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.738375][ T5321] veth0_vlan: entered promiscuous mode [ 79.795641][ T52] hsr_slave_0: left promiscuous mode [ 79.817173][ T52] hsr_slave_1: left promiscuous mode [ 79.823208][ T5113] Bluetooth: hci0: SCO packet for unknown connection handle 3328 [ 79.833508][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 79.868169][ T52] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 79.876827][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 79.884801][ T52] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 79.896510][ T5765] loop0: detected capacity change from 0 to 2048 [ 79.910791][ T52] veth1_macvtap: left promiscuous mode [ 80.269712][ T52] veth0_macvtap: left promiscuous mode [ 80.307842][ T52] veth1_vlan: left promiscuous mode [ 80.313267][ T52] veth0_vlan: left promiscuous mode [ 80.538283][ T52] team0 (unregistering): Port device team_slave_1 removed [ 80.573168][ T52] team0 (unregistering): Port device team_slave_0 removed [ 80.901393][ T5321] veth1_vlan: entered promiscuous mode [ 80.932694][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.947432][ T5775] loop2: detected capacity change from 0 to 512 [ 80.957970][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.971290][ T5113] Bluetooth: hci3: command tx timeout [ 80.977837][ T5321] veth0_macvtap: entered promiscuous mode [ 80.993117][ T5321] veth1_macvtap: entered promiscuous mode [ 81.014822][ T5321] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.026910][ T5321] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.037081][ T5321] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.037355][ T5775] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 81.049149][ T5321] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.067508][ T5321] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.090640][ T5321] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.110107][ T5321] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 81.110436][ T5775] EXT4-fs (loop2): 1 orphan inode deleted [ 81.121912][ T5321] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.134581][ T5321] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.147389][ T5321] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.161103][ T5775] EXT4-fs (loop2): 1 truncate cleaned up [ 81.161152][ T5321] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.173793][ T5775] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 81.176952][ T5321] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.206033][ T5321] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.225190][ T5321] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 81.255373][ T5321] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.294471][ T5321] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.327769][ T5321] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.347418][ T5321] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.390537][ T5668] chnl_net:caif_netlink_parms(): no params data found [ 81.697675][ T5798] loop3: detected capacity change from 0 to 4096 [ 81.713768][ T5101] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.760195][ T5668] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.805684][ T5668] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.812930][ T5798] NILFS (loop3): invalid segment: Checksum error in segment payload [ 81.831660][ T5668] bridge_slave_0: entered allmulticast mode [ 81.843605][ T5798] NILFS (loop3): trying rollback from an earlier position [ 81.846119][ T5805] loop2: detected capacity change from 0 to 128 [ 81.854661][ T5668] bridge_slave_0: entered promiscuous mode [ 81.883010][ T5798] NILFS (loop3): recovery complete [ 81.892809][ T5668] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.903553][ T5810] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 81.914761][ T5668] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.946944][ T5668] bridge_slave_1: entered allmulticast mode [ 81.955056][ T5805] FAT-fs (loop2): error, invalid access to FAT (entry 0x0fff0030) [ 81.970962][ T5668] bridge_slave_1: entered promiscuous mode [ 82.031960][ T2853] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.039817][ T2853] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.245118][ T5668] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.284471][ T5668] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.312293][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.343256][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.400430][ T5668] team0: Port device team_slave_0 added [ 82.434235][ T5668] team0: Port device team_slave_1 added [ 82.673986][ T5832] loop2: detected capacity change from 0 to 40427 [ 82.732232][ T5113] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 82.740538][ T5113] Bluetooth: hci1: Injecting HCI hardware error event [ 82.748103][ T5113] Bluetooth: hci1: hardware error 0x00 [ 82.750074][ T5668] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 82.920794][ T5668] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 83.071265][ T5096] Bluetooth: hci3: command tx timeout [ 83.401368][ T5668] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 83.444836][ T5827] netlink: 48 bytes leftover after parsing attributes in process `syz.3.168'. [ 84.189666][ T5668] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 84.326088][ T5668] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 84.367414][ T5850] loop4: detected capacity change from 0 to 512 [ 84.403498][ T5850] EXT4-fs error (device loop4): ext4_orphan_get:1420: comm syz.4.172: bad orphan inode 15 [ 84.424496][ T5850] ext4_test_bit(bit=14, block=18) = 1 [ 84.430154][ T5668] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 84.439883][ T5850] is_bad_inode(inode)=0 [ 84.463084][ T5850] NEXT_ORPHAN(inode)=1023 [ 84.477745][ T5850] max_ino=32 [ 84.484819][ T5855] netlink: 'syz.2.174': attribute type 10 has an invalid length. [ 84.511228][ T5850] i_nlink=0 [ 84.517672][ T5851] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 84.517917][ T5850] EXT4-fs error (device loop4): ext4_xattr_delete_inode:2972: inode #15: comm syz.4.172: corrupted xattr block 19: e_value size too large [ 84.554881][ T5855] netlink: 210880 bytes leftover after parsing attributes in process `syz.2.174'. [ 84.579238][ T5850] EXT4-fs warning (device loop4): ext4_evict_inode:271: xattr delete (err -117) [ 84.609616][ T5850] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 84.645955][ T5850] ext4 filesystem being mounted at /3/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 84.733203][ T5668] hsr_slave_0: entered promiscuous mode [ 84.752041][ T5668] hsr_slave_1: entered promiscuous mode [ 84.763519][ T5668] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 84.784813][ T5668] Cannot create hsr debugfs directory [ 84.841580][ T5113] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 85.055027][ T5873] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 85.137832][ T5113] Bluetooth: hci3: command tx timeout [ 88.921778][ T5113] Bluetooth: hci3: command 0x0405 tx timeout [ 89.050554][ T5871] sp0: Synchronizing with TNC [ 89.064262][ T5321] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 89.308958][ T5897] loop4: detected capacity change from 0 to 64 [ 89.331982][ T5895] loop3: detected capacity change from 0 to 2048 [ 89.377469][ T5897] hfs: inconsistency in B*Tree (1,0,2,2,3) [ 89.389041][ T5895] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 89.411672][ T5897] netlink: 'syz.4.185': attribute type 10 has an invalid length. [ 89.528547][ T5897] team0: Port device wlan1 added [ 90.538766][ T5923] loop0: detected capacity change from 0 to 512 [ 90.612267][ T5923] EXT4-fs error (device loop0): ext4_orphan_get:1420: comm syz.0.190: bad orphan inode 15 [ 90.628098][ T5923] ext4_test_bit(bit=14, block=18) = 1 [ 90.654752][ T5923] is_bad_inode(inode)=0 [ 90.697761][ T5923] NEXT_ORPHAN(inode)=1023 [ 90.702880][ T5923] max_ino=32 [ 90.713938][ T5923] i_nlink=0 [ 90.725627][ T5923] EXT4-fs error (device loop0): ext4_xattr_delete_inode:2972: inode #15: comm syz.0.190: corrupted xattr block 19: e_value size too large [ 90.763867][ T5923] EXT4-fs warning (device loop0): ext4_evict_inode:271: xattr delete (err -117) [ 90.790750][ T5668] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 91.687043][ T5923] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 91.712241][ T5923] ext4 filesystem being mounted at /56/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 91.713028][ T5668] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 91.750855][ T5668] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 91.774024][ T5943] Falling back ldisc for ptm0. [ 91.796628][ T5668] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 91.989591][ T5923] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 92.054829][ T5668] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.113899][ T5668] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.162223][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.169400][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.252506][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.259693][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.271843][ T5094] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 92.671210][ T5144] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 92.933172][ T5144] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 92.961292][ T5096] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 92.965835][ T5144] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 92.969728][ T5096] Bluetooth: hci4: Injecting HCI hardware error event [ 93.030628][ T6002] syz.3.207[6002] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 93.030765][ T6002] syz.3.207[6002] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 93.325161][ T5668] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.354447][ T4498] Bluetooth: hci4: hardware error 0x00 [ 94.435266][ T5144] usb 3-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 94.484672][ T5668] veth0_vlan: entered promiscuous mode [ 94.509032][ T5144] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 94.538228][ T5668] veth1_vlan: entered promiscuous mode [ 94.587017][ T5668] veth0_macvtap: entered promiscuous mode [ 94.619279][ T5144] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 94.626350][ T5668] veth1_macvtap: entered promiscuous mode [ 94.644921][ T5144] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 94.672422][ T5144] usb 3-1: SerialNumber: syz [ 94.716655][ T5668] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 94.732836][ T5668] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.757069][ T5668] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 94.770669][ T6018] loop4: detected capacity change from 0 to 24 [ 94.781177][ T5668] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.792385][ T6018] MTD: Attempt to mount non-MTD device "/dev/loop4" [ 94.809551][ T5668] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 94.822952][ T6018] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 94.836608][ T5668] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.852723][ T5668] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 94.873457][ T5668] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.877061][ T6027] loop3: detected capacity change from 0 to 512 [ 94.886974][ T5668] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.942272][ T5668] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 94.964925][ T5144] usb 3-1: 0:2 : does not exist [ 94.975944][ T6027] EXT4-fs error (device loop3): ext4_orphan_get:1420: comm syz.3.211: bad orphan inode 15 [ 94.985596][ T5144] usb 3-1: unit 5 not found! [ 95.031178][ T5668] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.031254][ T5144] usb 3-1: USB disconnect, device number 2 [ 95.075436][ T6027] ext4_test_bit(bit=14, block=18) = 1 [ 95.075782][ T5668] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 95.106214][ T5668] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.111091][ T6027] is_bad_inode(inode)=0 [ 95.116379][ T5668] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 95.131289][ T5668] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.142425][ T5668] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 95.167197][ T6034] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.213'. [ 95.167360][ T5668] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.224079][ T6027] NEXT_ORPHAN(inode)=1023 [ 95.228441][ T6027] max_ino=32 [ 95.262449][ T5668] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.279431][ T6027] i_nlink=0 [ 95.292867][ T5891] udevd[5891]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 95.324987][ T6027] EXT4-fs error (device loop3): ext4_xattr_delete_inode:2972: inode #15: comm syz.3.211: corrupted xattr block 19: e_value size too large [ 95.341767][ T5668] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.363904][ T5668] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.391276][ T6027] EXT4-fs warning (device loop3): ext4_evict_inode:271: xattr delete (err -117) [ 95.404761][ T5668] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.427259][ T6027] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 95.439652][ T5668] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.465181][ T6027] ext4 filesystem being mounted at /19/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 95.521288][ T4498] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 95.596448][ T6031] loop4: detected capacity change from 0 to 32768 [ 95.615688][ T6031] XFS: attr2 mount option is deprecated. [ 95.688279][ T6031] XFS (loop4): cannot change alignment: superblock does not support data alignment [ 95.703487][ T6048] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 95.717483][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.734531][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.811718][ T1087] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.837441][ T1087] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.858469][ T6055] netlink: 'syz.0.215': attribute type 6 has an invalid length. [ 95.964343][ T5326] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 96.050575][ T6063] loop1: detected capacity change from 0 to 64 [ 96.207966][ T925] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 96.230596][ T6063] hfs: inconsistency in B*Tree (1,0,2,2,3) [ 96.248090][ T6063] netlink: 'syz.1.218': attribute type 10 has an invalid length. [ 97.029445][ T6075] syz.0.219[6075] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 97.029889][ T6075] syz.0.219[6075] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 97.489939][ T925] usb 5-1: config 1 has an invalid descriptor of length 116, skipping remainder of the config [ 97.513682][ T925] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 97.524893][ T925] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 97.537374][ T925] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 97.547171][ T925] usb 5-1: SerialNumber: syz [ 97.575833][ T6082] loop3: detected capacity change from 0 to 4096 [ 97.581758][ T6063] team0: Port device wlan1 added [ 97.689231][ T6088] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 97.755256][ T5096] Bluetooth: hci0: SCO packet for unknown connection handle 3328 [ 97.771510][ T925] usb 5-1: 0:2 : does not exist [ 97.824627][ T6092] loop0: detected capacity change from 0 to 2048 [ 97.845159][ T6097] loop1: detected capacity change from 0 to 8 [ 97.866379][ T925] usb 5-1: USB disconnect, device number 2 [ 98.143702][ T5891] udevd[5891]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 98.792633][ T5148] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 100.074989][ T6131] loop4: detected capacity change from 0 to 4096 [ 100.329638][ T6131] ntfs3: loop4: Different NTFS sector size (1024) and media sector size (512). [ 100.353359][ T5148] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 100.372808][ T6136] netlink: 'syz.0.235': attribute type 17 has an invalid length. [ 100.377834][ T5148] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 100.389968][ T5148] usb 3-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 100.400951][ T5148] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 100.418124][ T5148] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 100.430730][ T5148] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 100.463184][ T5148] usb 3-1: SerialNumber: syz [ 100.487405][ T29] audit: type=1326 audit(1720533189.747:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6134 comm="syz.0.235" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa7c0f75bd9 code=0x0 [ 100.592263][ T29] audit: type=1800 audit(1720533189.857:3): pid=6131 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.233" name="bus" dev="loop4" ino=33 res=0 errno=0 [ 100.691378][ T6131] loop4: detected capacity change from 4096 to 0 [ 100.701124][ T6159] syz.4.233: attempt to access beyond end of device [ 100.701124][ T6159] loop4: rw=0, sector=2816, nr_sectors = 8 limit=0 [ 100.705666][ T5148] usb 3-1: 0:2 : does not exist [ 100.751097][ T5148] usb 3-1: unit 5 not found! [ 100.776531][ T6162] netlink: 'syz.3.241': attribute type 6 has an invalid length. [ 100.793259][ T5148] usb 3-1: USB disconnect, device number 3 [ 101.461987][ T5891] udevd[5891]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 101.539495][ T6173] loop3: detected capacity change from 0 to 4096 [ 101.610769][ T6179] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 102.668164][ T5321] syz-executor: attempt to access beyond end of device [ 102.668164][ T5321] loop4: rw=0, sector=768, nr_sectors = 8 limit=0 [ 102.742801][ T5321] ntfs3: loop4: failed to read volume at offset 0x60000 [ 102.803339][ T1087] kworker/u8:5: attempt to access beyond end of device [ 102.803339][ T1087] loop4: rw=0, sector=768, nr_sectors = 8 limit=0 [ 102.846496][ T1087] ntfs3: loop4: failed to read volume at offset 0x60000 [ 102.871574][ T5321] syz-executor: attempt to access beyond end of device [ 102.871574][ T5321] loop4: rw=2049, sector=256, nr_sectors = 8 limit=0 [ 102.928212][ T5321] Buffer I/O error on dev loop4, logical block 32, lost sync page write [ 102.961352][ T5321] ntfs3: loop4: ino=3, ntfs_set_state failed, -5. [ 102.978100][ T5321] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 102.987131][ T6174] loop1: detected capacity change from 0 to 32768 [ 102.993805][ T5321] syz-executor: attempt to access beyond end of device [ 102.993805][ T5321] loop4: rw=2049, sector=256, nr_sectors = 8 limit=0 [ 103.011301][ T6174] XFS: attr2 mount option is deprecated. [ 103.040132][ T5321] Buffer I/O error on dev loop4, logical block 32, lost sync page write [ 103.069538][ T6174] XFS (loop1): cannot change alignment: superblock does not support data alignment [ 103.087729][ T5321] ntfs3: loop4: ino=3, ntfs_set_state failed, -5. [ 103.097295][ T5321] syz-executor: attempt to access beyond end of device [ 103.097295][ T5321] loop4: rw=0, sector=256, nr_sectors = 8 limit=0 [ 103.101049][ T1151] usb 1-1: new low-speed USB device number 3 using dummy_hcd [ 103.112212][ T2820] kworker/u8:7: attempt to access beyond end of device [ 103.112212][ T2820] loop4: rw=2049, sector=256, nr_sectors = 8 limit=0 [ 103.154110][ T2820] Buffer I/O error on dev loop4, logical block 32, lost sync page write [ 103.165600][ T6205] netlink: 'syz.3.254': attribute type 17 has an invalid length. [ 103.188733][ T2820] ntfs3: loop4: ino=3, ntfs3_write_inode failed, -5. [ 103.205979][ T5321] syz-executor: attempt to access beyond end of device [ 103.205979][ T5321] loop4: rw=0, sector=256, nr_sectors = 8 limit=0 [ 103.211345][ T29] audit: type=1326 audit(1720533192.467:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6202 comm="syz.3.254" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb847975bd9 code=0x0 [ 103.226356][ T5321] syz-executor: attempt to access beyond end of device [ 103.226356][ T5321] loop4: rw=0, sector=256, nr_sectors = 8 limit=0 [ 103.309247][ T1151] usb 1-1: config index 0 descriptor too short (expected 1307, got 27) [ 103.319568][ T1151] usb 1-1: config 0 has an invalid interface number: 0 but max is -1 [ 103.338186][ T1151] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 103.360403][ T1151] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30 [ 103.382062][ T1151] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 is Bulk; changing to Interrupt [ 103.394103][ T1151] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246 [ 103.410120][ T1151] usb 1-1: string descriptor 0 read error: -22 [ 103.417904][ T1151] usb 1-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 103.427377][ T1151] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 103.438479][ T1151] usb 1-1: config 0 descriptor?? [ 103.448043][ T6194] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 103.457834][ T1151] hub 1-1:0.0: bad descriptor, ignoring hub [ 103.465331][ T1151] hub 1-1:0.0: probe with driver hub failed with error -5 [ 103.474550][ T1151] input: USB Acecad 302 Tablet 0460:0008 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input5 [ 103.544312][ C0] usb_acecad 1-1:0.0: can't resubmit intr, dummy_hcd.0-1/input0, status -1 [ 103.584775][ T2853] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.641041][ T8] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 103.657998][ T2853] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.739291][ T5143] usb 1-1: USB disconnect, device number 3 [ 103.741425][ T2853] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.938793][ T2853] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.967361][ T8] usb 2-1: config 1 has an invalid descriptor of length 116, skipping remainder of the config [ 103.980553][ T8] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 103.992993][ T8] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 104.018270][ T8] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 104.215170][ T4498] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 104.224077][ T4498] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 104.234890][ T4498] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 104.245690][ T4498] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 104.259862][ T4498] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 104.268677][ T4498] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 104.357455][ T8] usb 2-1: SerialNumber: syz [ 104.443721][ T6216] loop3: detected capacity change from 0 to 4096 [ 104.452639][ T6216] ntfs3: loop3: Different NTFS sector size (1024) and media sector size (512). [ 104.468575][ T8] usb 2-1: 0:2 : does not exist [ 104.495421][ T29] audit: type=1800 audit(1720533193.757:5): pid=6216 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.259" name="bus" dev="loop3" ino=33 res=0 errno=0 [ 104.525997][ T2853] bridge_slave_1: left allmulticast mode [ 104.534239][ T8] usb 2-1: USB disconnect, device number 3 [ 104.546496][ T2853] bridge_slave_1: left promiscuous mode [ 104.564051][ T2853] bridge0: port 2(bridge_slave_1) entered disabled state [ 104.582695][ T2853] bridge_slave_0: left allmulticast mode [ 104.583210][ T6216] loop3: detected capacity change from 4096 to 0 [ 104.588373][ T2853] bridge_slave_0: left promiscuous mode [ 104.588555][ T2853] bridge0: port 1(bridge_slave_0) entered disabled state [ 104.611375][ T6223] syz.3.259: attempt to access beyond end of device [ 104.611375][ T6223] loop3: rw=0, sector=2816, nr_sectors = 8 limit=0 [ 106.241855][ T5891] udevd[5891]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 106.321087][ T4498] Bluetooth: hci2: command tx timeout [ 106.445323][ T6241] loop2: detected capacity change from 0 to 1024 [ 106.485539][ T6241] EXT4-fs: Ignoring removed mblk_io_submit option [ 106.555438][ T6241] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 106.609541][ T2853] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 106.653262][ T2853] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 106.670203][ T2853] bond0 (unregistering): Released all slaves [ 106.684798][ T6246] netlink: 'syz.1.266': attribute type 6 has an invalid length. [ 106.854603][ T5101] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.900052][ T2853] team0: Port device wlan1 removed [ 106.995735][ T5326] syz-executor: attempt to access beyond end of device [ 106.995735][ T5326] loop3: rw=0, sector=768, nr_sectors = 8 limit=0 [ 107.028630][ T6267] loop2: detected capacity change from 0 to 1764 [ 107.068601][ T6267] iso9660: Unknown parameter 'ûÿÿÿÿpress' [ 107.076809][ T5326] ntfs3: loop3: failed to read volume at offset 0x60000 [ 107.206607][ T12] kworker/u8:1: attempt to access beyond end of device [ 107.206607][ T12] loop3: rw=0, sector=768, nr_sectors = 8 limit=0 [ 107.271479][ T12] ntfs3: loop3: failed to read volume at offset 0x60000 [ 107.316842][ T5326] syz-executor: attempt to access beyond end of device [ 107.316842][ T5326] loop3: rw=2049, sector=256, nr_sectors = 8 limit=0 [ 107.323433][ T6217] chnl_net:caif_netlink_parms(): no params data found [ 107.342609][ T6275] loop2: detected capacity change from 0 to 512 [ 107.351412][ T5326] Buffer I/O error on dev loop3, logical block 32, lost sync page write [ 107.393331][ T2853] hsr_slave_0: left promiscuous mode [ 107.402862][ T5326] ntfs3: loop3: ino=3, ntfs_set_state failed, -5. [ 107.430153][ T6275] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2234: inode #15: comm syz.2.269: corrupted in-inode xattr: invalid ea_ino [ 107.447428][ T5326] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 107.463720][ T6275] EXT4-fs error (device loop2): ext4_orphan_get:1399: comm syz.2.269: couldn't read orphan inode 15 (err -117) [ 107.465995][ T5326] syz-executor: attempt to access beyond end of device [ 107.465995][ T5326] loop3: rw=2049, sector=256, nr_sectors = 8 limit=0 [ 107.489609][ T2853] hsr_slave_1: left promiscuous mode [ 107.496460][ T6275] EXT4-fs (loop2): mounted filesystem 00000007-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 107.497583][ T5326] Buffer I/O error on dev loop3, logical block 32, lost sync page write [ 107.517163][ T2853] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 107.526357][ T2853] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 107.539335][ T5326] ntfs3: loop3: ino=3, ntfs_set_state failed, -5. [ 107.550778][ T5326] syz-executor: attempt to access beyond end of device [ 107.550778][ T5326] loop3: rw=0, sector=256, nr_sectors = 8 limit=0 [ 107.552920][ T6270] loop1: detected capacity change from 0 to 32768 [ 107.565075][ T2853] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 107.582097][ T2853] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 107.583257][ T11] kworker/u8:0: attempt to access beyond end of device [ 107.583257][ T11] loop3: rw=2049, sector=256, nr_sectors = 8 limit=0 [ 107.595202][ T6270] XFS: attr2 mount option is deprecated. [ 107.646584][ T2853] veth1_macvtap: left promiscuous mode [ 107.663423][ T11] Buffer I/O error on dev loop3, logical block 32, lost sync page write [ 107.671561][ T2853] veth0_macvtap: left promiscuous mode [ 107.672449][ T11] ntfs3: loop3: ino=3, ntfs3_write_inode failed, -5. [ 107.708458][ T2853] veth1_vlan: left promiscuous mode [ 107.711250][ T5326] syz-executor: attempt to access beyond end of device [ 107.711250][ T5326] loop3: rw=0, sector=256, nr_sectors = 8 limit=0 [ 107.714059][ T2853] veth0_vlan: left promiscuous mode [ 107.735561][ T5326] syz-executor: attempt to access beyond end of device [ 107.735561][ T5326] loop3: rw=0, sector=256, nr_sectors = 8 limit=0 [ 107.764496][ T6270] XFS (loop1): cannot change alignment: superblock does not support data alignment [ 108.511413][ T4498] Bluetooth: hci2: command tx timeout [ 108.796865][ T5101] EXT4-fs (loop2): unmounting filesystem 00000007-0000-0000-0000-000000000000. [ 109.344904][ T2853] team0 (unregistering): Port device team_slave_1 removed [ 109.358786][ T2853] team0 (unregistering): Port device team_slave_0 removed [ 109.521253][ T5147] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 109.570562][ T5143] usb 3-1: new low-speed USB device number 4 using dummy_hcd [ 109.635748][ T6217] bridge0: port 1(bridge_slave_0) entered blocking state [ 109.659288][ T6217] bridge0: port 1(bridge_slave_0) entered disabled state [ 109.683871][ T6217] bridge_slave_0: entered allmulticast mode [ 109.699273][ T6217] bridge_slave_0: entered promiscuous mode [ 109.714131][ T5147] usb 2-1: config 1 has an invalid descriptor of length 116, skipping remainder of the config [ 109.727948][ T6217] bridge0: port 2(bridge_slave_1) entered blocking state [ 109.736587][ T5147] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 109.746963][ T6217] bridge0: port 2(bridge_slave_1) entered disabled state [ 109.773215][ T5147] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 109.784361][ T6217] bridge_slave_1: entered allmulticast mode [ 109.792699][ T5143] usb 3-1: config index 0 descriptor too short (expected 1307, got 27) [ 109.802879][ T5147] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 109.811796][ T5143] usb 3-1: config 0 has an invalid interface number: 0 but max is -1 [ 109.819971][ T5143] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 109.836670][ T6217] bridge_slave_1: entered promiscuous mode [ 109.851054][ T5147] usb 2-1: SerialNumber: syz [ 109.863593][ T6326] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.277'. [ 109.867405][ T5143] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30 [ 109.894059][ T5143] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 is Bulk; changing to Interrupt [ 109.925156][ T5143] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246 [ 109.960378][ T6217] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 109.978893][ T5143] usb 3-1: string descriptor 0 read error: -22 [ 109.990382][ T5143] usb 3-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 110.006026][ T6217] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 110.018900][ T5143] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 110.067330][ T5143] usb 3-1: config 0 descriptor?? [ 110.102657][ T5147] usb 2-1: 0:2 : does not exist [ 110.110931][ T6306] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 110.119811][ T6217] team0: Port device team_slave_0 added [ 110.132575][ T5143] hub 3-1:0.0: bad descriptor, ignoring hub [ 110.138526][ T5143] hub 3-1:0.0: probe with driver hub failed with error -5 [ 110.140843][ T6217] team0: Port device team_slave_1 added [ 110.166344][ T5147] usb 2-1: USB disconnect, device number 4 [ 110.218383][ T5143] input: USB Acecad 302 Tablet 0460:0008 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input6 [ 110.267493][ T6217] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 110.281077][ T6217] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 110.311394][ T6217] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 110.374205][ T6217] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 110.409620][ T6217] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 110.468214][ T5891] udevd[5891]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 110.468995][ T5148] usb 3-1: USB disconnect, device number 4 [ 110.509417][ T6217] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 110.524465][ T5096] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 110.532299][ T5096] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 110.539774][ T5096] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 110.561098][ T5096] Bluetooth: hci2: command tx timeout [ 110.561366][ T5113] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 110.579485][ T5113] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 110.594980][ T5113] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 110.707793][ T6217] hsr_slave_0: entered promiscuous mode [ 110.715306][ T6217] hsr_slave_1: entered promiscuous mode [ 110.723350][ T6217] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 110.731033][ T6217] Cannot create hsr debugfs directory [ 110.757779][ T2853] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.849365][ T2853] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.964809][ T2853] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.089855][ T2853] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.115413][ T6360] netlink: 'syz.0.283': attribute type 1 has an invalid length. [ 111.158928][ T6360] nbd: must specify at least one socket [ 111.931095][ T6335] chnl_net:caif_netlink_parms(): no params data found [ 112.057043][ T2853] bridge_slave_1: left allmulticast mode [ 112.067273][ T2853] bridge_slave_1: left promiscuous mode [ 112.077068][ T2853] bridge0: port 2(bridge_slave_1) entered disabled state [ 112.154922][ T2853] bridge_slave_0: left allmulticast mode [ 112.170804][ T2853] bridge_slave_0: left promiscuous mode [ 112.194038][ T2853] bridge0: port 1(bridge_slave_0) entered disabled state [ 112.283710][ T5145] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 114.035130][ T5113] Bluetooth: hci2: command tx timeout [ 114.040793][ T4498] Bluetooth: hci4: command tx timeout [ 114.200675][ T5145] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 114.248441][ T5145] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 114.270348][ T5145] usb 3-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 114.311059][ T5145] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 114.352975][ T5145] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 114.374820][ T5145] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 114.393244][ T5145] usb 3-1: SerialNumber: syz [ 114.477908][ T5145] usb 3-1: can't set config #1, error -71 [ 114.536194][ T5145] usb 3-1: USB disconnect, device number 5 [ 114.672216][ T2853] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 114.704771][ T29] audit: type=1326 audit(1720533203.967:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6408 comm="syz.1.293" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ffadb375bd9 code=0x0 [ 114.726889][ T2853] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 114.743285][ T2853] bond0 (unregistering): Released all slaves [ 114.965877][ T6335] bridge0: port 1(bridge_slave_0) entered blocking state [ 114.988866][ T6335] bridge0: port 1(bridge_slave_0) entered disabled state [ 115.014379][ T6335] bridge_slave_0: entered allmulticast mode [ 115.024474][ T6335] bridge_slave_0: entered promiscuous mode [ 115.049165][ T6335] bridge0: port 2(bridge_slave_1) entered blocking state [ 115.056676][ T6335] bridge0: port 2(bridge_slave_1) entered disabled state [ 115.065138][ T6335] bridge_slave_1: entered allmulticast mode [ 115.076788][ T6335] bridge_slave_1: entered promiscuous mode [ 115.117776][ T6335] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 115.130448][ T6335] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 115.178024][ T2853] hsr_slave_0: left promiscuous mode [ 115.184476][ T2853] hsr_slave_1: left promiscuous mode [ 115.190252][ T2853] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 115.197749][ T2853] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 115.209091][ T2853] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 115.218518][ T2853] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 115.232712][ T2853] veth1_macvtap: left promiscuous mode [ 115.238290][ T2853] veth0_macvtap: left promiscuous mode [ 115.246025][ T2853] veth1_vlan: left promiscuous mode [ 115.251534][ T2853] veth0_vlan: left promiscuous mode [ 115.253658][ T6429] loop2: detected capacity change from 0 to 2048 [ 115.303874][ T6429] loop2: p1 < > p3 [ 115.310433][ T6429] loop2: p3 size 134217728 extends beyond EOD, truncated [ 115.404990][ T2853] team0 (unregistering): Port device team_slave_1 removed [ 115.435626][ T2853] team0 (unregistering): Port device team_slave_0 removed [ 115.478472][ T6431] loop2: detected capacity change from 0 to 1024 [ 115.506697][ T6431] EXT4-fs: Ignoring removed mblk_io_submit option [ 115.540111][ T6431] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 115.613061][ T6335] team0: Port device team_slave_0 added [ 115.623711][ T6335] team0: Port device team_slave_1 added [ 115.667473][ T6335] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 115.676664][ T6335] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 115.705019][ T6335] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 115.739890][ T6217] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 115.764505][ T6335] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 115.770242][ T5101] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 115.777336][ T6335] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 115.807204][ T6335] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 115.856086][ T6273] udevd[6273]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 115.870131][ T5891] udevd[5891]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 115.881146][ T6217] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 115.901745][ T6335] hsr_slave_0: entered promiscuous mode [ 115.919146][ T6335] hsr_slave_1: entered promiscuous mode [ 115.936441][ T6335] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 115.952274][ T6335] Cannot create hsr debugfs directory [ 115.982948][ T8] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 115.986002][ T6217] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 116.028599][ T6217] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 116.173314][ T8] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 116.219423][ T8] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 116.237016][ T8] usb 2-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 116.241115][ T4498] Bluetooth: hci4: command tx timeout [ 116.283402][ T8] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 116.332343][ T8] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 116.373022][ T8] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 116.395353][ T8] usb 2-1: SerialNumber: syz [ 116.395657][ T6217] 8021q: adding VLAN 0 to HW filter on device bond0 [ 116.443367][ T29] audit: type=1326 audit(1720533205.707:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6458 comm="syz.0.309" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa7c0f75bd9 code=0x0 [ 116.448961][ T6217] 8021q: adding VLAN 0 to HW filter on device team0 [ 116.479656][ T5147] bridge0: port 1(bridge_slave_0) entered blocking state [ 116.486938][ T5147] bridge0: port 1(bridge_slave_0) entered forwarding state [ 116.521257][ T5106] bridge0: port 2(bridge_slave_1) entered blocking state [ 116.528456][ T5106] bridge0: port 2(bridge_slave_1) entered forwarding state [ 116.571141][ T5143] usb 3-1: new low-speed USB device number 6 using dummy_hcd [ 116.689996][ T8] usb 2-1: 0:2 : does not exist [ 116.706039][ T8] usb 2-1: unit 5 not found! [ 116.710797][ T6335] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 116.725354][ T4498] Bluetooth: hci3: command 0x0405 tx timeout [ 116.749122][ T6335] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 116.772128][ T8] usb 2-1: USB disconnect, device number 5 [ 116.778167][ T5143] usb 3-1: config index 0 descriptor too short (expected 1307, got 27) [ 116.795997][ T6335] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 116.814678][ T6335] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 116.839407][ T5143] usb 3-1: config 0 has an invalid interface number: 0 but max is -1 [ 116.869797][ T5143] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 116.881899][ T5143] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30 [ 116.903299][ T5143] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 is Bulk; changing to Interrupt [ 116.924561][ T5143] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246 [ 116.957245][ T5143] usb 3-1: string descriptor 0 read error: -22 [ 116.978348][ T5143] usb 3-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 116.993857][ T6217] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 117.001768][ T5143] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 117.026559][ T5143] usb 3-1: config 0 descriptor?? [ 117.038744][ T6457] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 117.047890][ T6335] 8021q: adding VLAN 0 to HW filter on device bond0 [ 117.059554][ T5143] hub 3-1:0.0: bad descriptor, ignoring hub [ 117.070640][ T5891] udevd[5891]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 117.097100][ T5143] hub 3-1:0.0: probe with driver hub failed with error -5 [ 117.109212][ T6335] 8021q: adding VLAN 0 to HW filter on device team0 [ 117.119507][ T5143] input: USB Acecad 302 Tablet 0460:0008 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input7 [ 117.142546][ T5147] bridge0: port 1(bridge_slave_0) entered blocking state [ 117.149718][ T5147] bridge0: port 1(bridge_slave_0) entered forwarding state [ 117.213344][ T5147] bridge0: port 2(bridge_slave_1) entered blocking state [ 117.220535][ T5147] bridge0: port 2(bridge_slave_1) entered forwarding state [ 117.426318][ T5147] usb 3-1: USB disconnect, device number 6 [ 117.629338][ T6217] veth0_vlan: entered promiscuous mode [ 117.671755][ T6217] veth1_vlan: entered promiscuous mode [ 117.766721][ T6335] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 117.800235][ T6217] veth0_macvtap: entered promiscuous mode [ 117.834746][ T6217] veth1_macvtap: entered promiscuous mode [ 117.920775][ T6217] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 117.945469][ T6217] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 117.955604][ T6217] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 117.966619][ T6217] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 117.979258][ T6217] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 117.991892][ T6217] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 118.005454][ T6217] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 118.047757][ T6217] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 118.061104][ T6217] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 118.070956][ T6217] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 118.082791][ T6217] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 118.092990][ T6217] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 118.103747][ T6217] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 118.125177][ T6217] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 118.129498][ T6519] kvm: kvm [6518]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0x11e) = 0xbe702111 [ 118.156824][ T6335] veth0_vlan: entered promiscuous mode [ 118.200537][ T6217] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.231057][ T6217] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.254373][ T6217] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.265435][ T29] audit: type=1326 audit(1720533207.527:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6529 comm="syz.0.319" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa7c0f75bd9 code=0x0 [ 118.271521][ T6217] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.333543][ T4498] Bluetooth: hci4: command tx timeout [ 118.350196][ T6335] veth1_vlan: entered promiscuous mode [ 118.362667][ T6539] netlink: 8 bytes leftover after parsing attributes in process `syz.2.321'. [ 118.481329][ T4498] Bluetooth: hci0: command tx timeout [ 118.539248][ T6335] veth0_macvtap: entered promiscuous mode [ 118.599778][ T6335] veth1_macvtap: entered promiscuous mode [ 118.622490][ T1087] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 118.630353][ T1087] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 118.727095][ T2853] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 118.737655][ T6335] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 118.756239][ T2853] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 118.767330][ T6335] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 118.780332][ T6335] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 118.798464][ T6335] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 118.814117][ T6335] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 118.825014][ T6335] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 118.837254][ T6335] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 118.848270][ T6335] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 118.863302][ T6335] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 118.908022][ T6335] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 118.923375][ T6335] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 118.933906][ T5148] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 118.944212][ T6335] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 118.955692][ T6335] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 118.967760][ T6335] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 118.984371][ T6335] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 118.996015][ T6335] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 119.016686][ T6335] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 119.043738][ T6335] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 119.077731][ T6335] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.098767][ T6335] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.152121][ T6335] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.161300][ T5148] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 119.211033][ T5148] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 119.219648][ T6335] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.991976][ T2853] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 120.055032][ T2853] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 120.163151][ T2820] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 120.195453][ T2820] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 120.411062][ T4498] Bluetooth: hci4: command tx timeout [ 120.561641][ T4498] Bluetooth: hci0: command tx timeout [ 120.879490][ T6598] warning: `syz.3.279' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 120.892472][ T5144] usb 1-1: new low-speed USB device number 4 using dummy_hcd [ 120.954173][ T6601] netlink: 8 bytes leftover after parsing attributes in process `syz.4.330'. [ 121.051137][ T5148] usb 3-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 121.075141][ T5148] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 121.121564][ T5144] usb 1-1: config index 0 descriptor too short (expected 1307, got 27) [ 121.152622][ T5144] usb 1-1: config 0 has an invalid interface number: 0 but max is -1 [ 121.168250][ T5148] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 121.179335][ T5148] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 121.191580][ T5148] usb 3-1: SerialNumber: syz [ 121.226637][ T5144] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 121.259586][ T5144] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30 [ 121.282481][ T5144] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 is Bulk; changing to Interrupt [ 121.295582][ T5144] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246 [ 121.323901][ T5144] usb 1-1: string descriptor 0 read error: -22 [ 121.330389][ T5144] usb 1-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 121.373653][ T5144] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 121.412038][ T5144] usb 1-1: config 0 descriptor?? [ 121.417869][ T5148] usb 3-1: 0:2 : does not exist [ 121.429230][ T5148] usb 3-1: unit 5 not found! [ 121.434619][ T6593] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 121.461342][ T5148] usb 3-1: USB disconnect, device number 7 [ 121.462148][ T5144] hub 1-1:0.0: bad descriptor, ignoring hub [ 121.491125][ T5144] hub 1-1:0.0: probe with driver hub failed with error -5 [ 121.501742][ T8] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 121.539118][ T5144] input: USB Acecad 302 Tablet 0460:0008 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input8 [ 121.653150][ T29] audit: type=1326 audit(1720533210.917:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6623 comm="syz.3.334" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0d96575bd9 code=0x0 [ 121.734603][ T5891] udevd[5891]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 121.743192][ T8] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 121.785530][ T5148] usb 1-1: USB disconnect, device number 4 [ 121.796491][ T8] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 121.829437][ T8] usb 5-1: config 0 descriptor?? [ 121.860420][ T8] cp210x 5-1:0.0: cp210x converter detected [ 122.283972][ T8] cp210x 5-1:0.0: failed to get vendor val 0x0010 size 3: -71 [ 122.307579][ T8] cp210x 5-1:0.0: failed to get vendor val 0x000e size 678: -71 [ 122.330249][ T8] cp210x 5-1:0.0: GPIO initialisation failed: -71 [ 122.345095][ T8] usb 5-1: cp210x converter now attached to ttyUSB0 [ 122.392044][ T8] usb 5-1: USB disconnect, device number 3 [ 122.417041][ T6650] loop2: detected capacity change from 0 to 1764 [ 122.424215][ T8] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 122.435427][ T8] cp210x 5-1:0.0: device disconnected [ 122.455415][ T6650] iso9660: Unknown parameter 'ûÿÿÿÿpress' [ 122.748659][ T6669] loop2: detected capacity change from 0 to 512 [ 122.803529][ T6663] loop0: detected capacity change from 0 to 4096 [ 122.821281][ T6669] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2234: inode #15: comm syz.2.338: corrupted in-inode xattr: invalid ea_ino [ 122.843691][ T6669] EXT4-fs error (device loop2): ext4_orphan_get:1399: comm syz.2.338: couldn't read orphan inode 15 (err -117) [ 122.864974][ T6663] ntfs3: loop0: Different NTFS sector size (1024) and media sector size (512). [ 122.876489][ T6669] EXT4-fs (loop2): mounted filesystem 00000007-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 122.943140][ T6680] netlink: 8 bytes leftover after parsing attributes in process `syz.3.342'. [ 123.018503][ T29] audit: type=1800 audit(1720533212.277:10): pid=6663 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.340" name="bus" dev="loop0" ino=33 res=0 errno=0 [ 123.071436][ T6663] loop0: detected capacity change from 4096 to 0 [ 123.089486][ T6663] syz.0.340: attempt to access beyond end of device [ 123.089486][ T6663] loop0: rw=0, sector=2816, nr_sectors = 8 limit=0 [ 123.152146][ T6687] loop3: detected capacity change from 0 to 1024 [ 123.283926][ T6687] fuse: Bad value for 'fd' [ 123.353915][ T5101] EXT4-fs (loop2): unmounting filesystem 00000007-0000-0000-0000-000000000000. [ 123.409122][ T6698] loop3: detected capacity change from 0 to 136 [ 123.423864][ T6696] loop1: detected capacity change from 0 to 2048 [ 123.450801][ T6698] iso9660: Unknown parameter 'overriderock¹erm' [ 123.584297][ T6696] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 123.682037][ T4498] Bluetooth: hci4: command tx timeout [ 124.096457][ T6702] loop4: detected capacity change from 0 to 1024 [ 124.353987][ T6702] EXT4-fs: Ignoring removed orlov option [ 124.459901][ T6702] EXT4-fs (loop4): Test dummy encryption mode enabled [ 124.469992][ T6702] EXT4-fs (loop4): stripe (7) is not aligned with cluster size (16), stripe is disabled [ 124.973956][ T6702] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 125.001362][ T29] audit: type=1326 audit(1720533214.257:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6710 comm="syz.3.350" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0d96575bd9 code=0x0 [ 125.391611][ T6733] netlink: 'syz.1.351': attribute type 1 has an invalid length. [ 125.418955][ T6733] nbd: must specify at least one socket [ 125.464953][ T5094] syz-executor: attempt to access beyond end of device [ 125.464953][ T5094] loop0: rw=0, sector=768, nr_sectors = 8 limit=0 [ 125.505820][ T5094] ntfs3: loop0: failed to read volume at offset 0x60000 [ 125.529467][ T6737] netlink: 224 bytes leftover after parsing attributes in process `syz.2.354'. [ 125.563816][ T1087] kworker/u8:5: attempt to access beyond end of device [ 125.563816][ T1087] loop0: rw=0, sector=768, nr_sectors = 8 limit=0 [ 125.614938][ T1087] ntfs3: loop0: failed to read volume at offset 0x60000 [ 125.644248][ T5094] syz-executor: attempt to access beyond end of device [ 125.644248][ T5094] loop0: rw=2049, sector=256, nr_sectors = 8 limit=0 [ 125.668766][ T6743] netlink: 8 bytes leftover after parsing attributes in process `syz.2.355'. [ 125.682632][ T6730] fscrypt: AES-256-XTS using implementation "xts-aes-aesni-avx" [ 125.696505][ T5094] Buffer I/O error on dev loop0, logical block 32, lost sync page write [ 125.715876][ T5094] ntfs3: loop0: ino=3, ntfs_set_state failed, -5. [ 125.729863][ T5094] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 125.743812][ T5094] syz-executor: attempt to access beyond end of device [ 125.743812][ T5094] loop0: rw=2049, sector=256, nr_sectors = 8 limit=0 [ 125.780652][ T5094] Buffer I/O error on dev loop0, logical block 32, lost sync page write [ 125.809191][ T5094] ntfs3: loop0: ino=3, ntfs_set_state failed, -5. [ 125.830612][ T5094] syz-executor: attempt to access beyond end of device [ 125.830612][ T5094] loop0: rw=0, sector=256, nr_sectors = 8 limit=0 [ 125.880660][ T2853] kworker/u8:8: attempt to access beyond end of device [ 125.880660][ T2853] loop0: rw=2049, sector=256, nr_sectors = 8 limit=0 [ 125.945594][ T2853] Buffer I/O error on dev loop0, logical block 32, lost sync page write [ 125.962959][ T6217] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 125.966903][ T2853] ntfs3: loop0: ino=3, ntfs3_write_inode failed, -5. [ 125.982997][ T5094] syz-executor: attempt to access beyond end of device [ 125.982997][ T5094] loop0: rw=0, sector=256, nr_sectors = 8 limit=0 [ 125.997882][ T5094] syz-executor: attempt to access beyond end of device [ 125.997882][ T5094] loop0: rw=0, sector=256, nr_sectors = 8 limit=0 [ 126.043322][ T6757] loop3: detected capacity change from 0 to 1764 [ 126.074298][ T6757] iso9660: Unknown parameter 'ûÿÿÿÿpress' [ 126.671220][ T4498] Bluetooth: hci4: command tx timeout [ 126.775391][ T2853] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.845847][ T6772] loop3: detected capacity change from 0 to 512 [ 126.863506][ T6772] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2234: inode #15: comm syz.3.358: corrupted in-inode xattr: invalid ea_ino [ 126.880515][ T6772] EXT4-fs error (device loop3): ext4_orphan_get:1399: comm syz.3.358: couldn't read orphan inode 15 (err -117) [ 126.896323][ T6772] EXT4-fs (loop3): mounted filesystem 00000007-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 126.917698][ T2853] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.112556][ T2853] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.175042][ T6784] netlink: 224 bytes leftover after parsing attributes in process `syz.1.366'. [ 127.225693][ T2853] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.286498][ T6787] netlink: 4 bytes leftover after parsing attributes in process `syz.2.367'. [ 127.304773][ T6787] vxlan0: entered allmulticast mode [ 127.319689][ T6786] netlink: 8 bytes leftover after parsing attributes in process `syz.4.368'. [ 127.338169][ T4498] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 127.350301][ T4498] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 127.358537][ T4498] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 127.369139][ T4498] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 127.378407][ T4498] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 127.388148][ T4498] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 127.390230][ T6335] EXT4-fs (loop3): unmounting filesystem 00000007-0000-0000-0000-000000000000. [ 127.524850][ T2853] bridge_slave_1: left allmulticast mode [ 127.549306][ T2853] bridge_slave_1: left promiscuous mode [ 127.567224][ T2853] bridge0: port 2(bridge_slave_1) entered disabled state [ 127.579265][ T6803] loop1: detected capacity change from 0 to 1024 [ 127.588662][ T2853] bridge_slave_0: left allmulticast mode [ 127.600870][ T2853] bridge_slave_0: left promiscuous mode [ 127.609294][ T6803] fuse: Bad value for 'fd' [ 127.614881][ T2853] bridge0: port 1(bridge_slave_0) entered disabled state [ 127.829650][ T2853] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 127.843223][ T2853] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 127.853311][ T2853] bond0 (unregistering): Released all slaves [ 128.636689][ T6829] netlink: 224 bytes leftover after parsing attributes in process `syz.1.380'. [ 128.656832][ T6824] loop3: detected capacity change from 0 to 1764 [ 128.680671][ T6831] loop4: detected capacity change from 0 to 136 [ 128.700309][ T6824] iso9660: Unknown parameter 'ûÿÿÿÿpress' [ 128.722490][ T6831] iso9660: Unknown parameter 'overriderock¹erm' [ 128.864765][ T6790] chnl_net:caif_netlink_parms(): no params data found [ 129.439748][ T2853] hsr_slave_0: left promiscuous mode [ 129.441270][ T4498] Bluetooth: hci0: command tx timeout [ 129.463452][ T2853] hsr_slave_1: left promiscuous mode [ 129.594089][ T2853] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 129.932416][ T2853] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 129.984744][ T2853] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 129.998231][ T2853] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 130.011385][ T2853] veth1_macvtap: left promiscuous mode [ 130.025722][ T2853] veth0_macvtap: left promiscuous mode [ 130.033302][ T2853] veth1_vlan: left promiscuous mode [ 130.039461][ T2853] veth0_vlan: left promiscuous mode [ 130.109755][ T6847] loop3: detected capacity change from 0 to 512 [ 130.149120][ T6847] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2234: inode #15: comm syz.3.379: corrupted in-inode xattr: invalid ea_ino [ 130.169778][ T6847] EXT4-fs error (device loop3): ext4_orphan_get:1399: comm syz.3.379: couldn't read orphan inode 15 (err -117) [ 130.194368][ T6847] EXT4-fs (loop3): mounted filesystem 00000007-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 130.557260][ T6335] EXT4-fs (loop3): unmounting filesystem 00000007-0000-0000-0000-000000000000. [ 130.998642][ T2853] team0 (unregistering): Port device team_slave_1 removed [ 131.016521][ T2853] team0 (unregistering): Port device team_slave_0 removed [ 131.100188][ T6863] netlink: 4 bytes leftover after parsing attributes in process `syz.2.386'. [ 131.370405][ T6887] mkiss: ax0: crc mode is auto. [ 131.417649][ T6891] loop4: detected capacity change from 0 to 1024 [ 131.418732][ T6790] bridge0: port 1(bridge_slave_0) entered blocking state [ 131.434514][ T6790] bridge0: port 1(bridge_slave_0) entered disabled state [ 131.447060][ T6891] EXT4-fs: Ignoring removed orlov option [ 131.452322][ T6790] bridge_slave_0: entered allmulticast mode [ 131.477820][ T6891] EXT4-fs (loop4): Test dummy encryption mode enabled [ 131.480286][ T6790] bridge_slave_0: entered promiscuous mode [ 131.494619][ T6891] EXT4-fs (loop4): stripe (7) is not aligned with cluster size (16), stripe is disabled [ 131.498079][ T6790] bridge0: port 2(bridge_slave_1) entered blocking state [ 131.513936][ T6790] bridge0: port 2(bridge_slave_1) entered disabled state [ 131.521510][ T4498] Bluetooth: hci0: command tx timeout [ 131.530535][ T6790] bridge_slave_1: entered allmulticast mode [ 131.540291][ T6790] bridge_slave_1: entered promiscuous mode [ 131.550186][ T6891] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 131.571205][ T5145] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 131.623480][ T6790] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 131.637611][ T6790] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 131.722645][ T6790] team0: Port device team_slave_0 added [ 131.733338][ T6790] team0: Port device team_slave_1 added [ 131.777842][ T6790] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 131.785090][ T6790] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 131.791238][ T5145] usb 3-1: Using ep0 maxpacket: 16 [ 131.818967][ T6790] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 131.856521][ T5145] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 131.866846][ T5145] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 131.874853][ T6790] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 131.887380][ T6790] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 131.897462][ T5145] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2e22, bcdDevice= 0.00 [ 131.959951][ T6790] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 131.966554][ T6906] loop3: detected capacity change from 0 to 1024 [ 131.979192][ T5145] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 131.998722][ T5145] usb 3-1: config 0 descriptor?? [ 132.013308][ T6906] fuse: Bad value for 'fd' [ 132.026951][ T5145] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 132.268322][ T6790] hsr_slave_0: entered promiscuous mode [ 132.284290][ T6790] hsr_slave_1: entered promiscuous mode [ 132.330731][ T6217] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 132.596818][ T5145] usb 3-1: USB disconnect, device number 8 [ 133.077552][ T6929] loop1: detected capacity change from 0 to 1764 [ 133.085586][ T6929] iso9660: Unknown parameter 'ûÿÿÿÿpress' [ 133.391998][ T1247] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.398346][ T1247] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.428133][ T6938] loop1: detected capacity change from 0 to 512 [ 133.551637][ T6938] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2234: inode #15: comm syz.1.400: corrupted in-inode xattr: invalid ea_ino [ 133.572629][ T6938] EXT4-fs error (device loop1): ext4_orphan_get:1399: comm syz.1.400: couldn't read orphan inode 15 (err -117) [ 133.601141][ T4498] Bluetooth: hci0: command tx timeout [ 134.103559][ T6938] EXT4-fs (loop1): mounted filesystem 00000007-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 134.183656][ T6955] netlink: 4 bytes leftover after parsing attributes in process `syz.4.403'. [ 134.514942][ T5668] EXT4-fs (loop1): unmounting filesystem 00000007-0000-0000-0000-000000000000. [ 134.636283][ T6790] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 135.549727][ T6790] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 135.581041][ T1151] usb 5-1: new low-speed USB device number 4 using dummy_hcd [ 135.588459][ T6986] loop1: detected capacity change from 0 to 512 [ 135.618249][ T6790] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 135.635332][ T6986] EXT4-fs (loop1): filesystem is read-only [ 135.689182][ T6790] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 135.696673][ T4498] Bluetooth: hci0: command tx timeout [ 135.730427][ T6986] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 135.765150][ T6986] EXT4-fs (loop1): filesystem is read-only [ 135.773333][ T6986] EXT4-fs (loop1): orphan cleanup on readonly fs [ 135.920395][ T6986] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.407: bg 0: block 64: padding at end of block bitmap is not set [ 136.160538][ T6986] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6551: Corrupt filesystem [ 136.234544][ T6986] EXT4-fs (loop1): 1 orphan inode deleted [ 136.266044][ T6986] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 136.341511][ T1151] usb 5-1: config index 0 descriptor too short (expected 6427, got 27) [ 136.350194][ T1151] usb 5-1: config 0 has an invalid interface number: 21 but max is 0 [ 136.379321][ T1151] usb 5-1: config 0 has no interface number 0 [ 136.391929][ T1151] usb 5-1: config 0 interface 21 altsetting 0 endpoint 0x82 is Bulk; changing to Interrupt [ 136.401123][ T6790] 8021q: adding VLAN 0 to HW filter on device bond0 [ 136.410143][ T1151] usb 5-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 136.429450][ T1151] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 136.514996][ T1151] usb 5-1: config 0 descriptor?? [ 136.520609][ T6960] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 136.568787][ T6790] 8021q: adding VLAN 0 to HW filter on device team0 [ 136.599630][ T6996] loop3: detected capacity change from 0 to 512 [ 136.611520][ T5147] bridge0: port 1(bridge_slave_0) entered blocking state [ 136.618691][ T5147] bridge0: port 1(bridge_slave_0) entered forwarding state [ 136.646394][ T5147] bridge0: port 2(bridge_slave_1) entered blocking state [ 136.653623][ T5147] bridge0: port 2(bridge_slave_1) entered forwarding state [ 136.663133][ T6996] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 136.676339][ T6996] ext4 filesystem being mounted at /21/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 136.835673][ T1151] usb 5-1: USB disconnect, device number 4 [ 137.461860][ T7017] netlink: 4 bytes leftover after parsing attributes in process `syz.2.410'. [ 137.512044][ T6335] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 137.624962][ T6790] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 137.638822][ T7022] netlink: 'syz.3.411': attribute type 29 has an invalid length. [ 137.667798][ T7022] netlink: 'syz.3.411': attribute type 29 has an invalid length. [ 137.696942][ T7022] netlink: 'syz.3.411': attribute type 29 has an invalid length. [ 137.756036][ T6790] veth0_vlan: entered promiscuous mode [ 137.790109][ T6790] veth1_vlan: entered promiscuous mode [ 137.867392][ T6790] veth0_macvtap: entered promiscuous mode [ 137.894015][ T6790] veth1_macvtap: entered promiscuous mode [ 137.946970][ T6790] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 137.965777][ T6790] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 137.976173][ T6790] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 137.988837][ T6790] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 137.999208][ T6790] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 138.018224][ T6790] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 138.038433][ T6790] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 138.060992][ T6790] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 138.093032][ T6790] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 138.134359][ T6790] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 138.153444][ T6790] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 138.178612][ T6790] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 138.201781][ T6790] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 138.219032][ T6790] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 138.241610][ T6790] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 138.265951][ T6790] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 138.291042][ T6790] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 138.418638][ T6790] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 138.439527][ T5106] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 138.474564][ T6790] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 138.891122][ T5106] usb 5-1: Using ep0 maxpacket: 16 [ 138.919806][ T5106] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 138.922236][ T6790] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 138.938537][ T5106] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 138.951761][ T5106] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2e22, bcdDevice= 0.00 [ 138.960826][ T5106] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 138.979588][ T6790] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 139.001027][ T6790] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 139.011846][ T5106] usb 5-1: config 0 descriptor?? [ 139.024108][ T5106] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 139.084731][ T7059] loop3: detected capacity change from 0 to 1764 [ 139.102137][ T7059] iso9660: Unknown parameter 'ûÿÿÿÿpress' [ 140.553559][ T2853] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 140.574084][ T2853] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 140.668143][ T7071] loop3: detected capacity change from 0 to 512 [ 140.765275][ T2820] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 140.792922][ T2820] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 140.834946][ T7071] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2234: inode #15: comm syz.3.417: corrupted in-inode xattr: invalid ea_ino [ 141.424930][ T7071] EXT4-fs error (device loop3): ext4_orphan_get:1399: comm syz.3.417: couldn't read orphan inode 15 (err -117) [ 141.459497][ T7071] EXT4-fs (loop3): mounted filesystem 00000007-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 141.523138][ T5143] usb 5-1: USB disconnect, device number 5 [ 141.542152][ T7083] Driver unsupported XDP return value 0 on prog (id 60) dev N/A, expect packet loss! [ 141.649620][ T7083] loop0: detected capacity change from 0 to 512 [ 141.678188][ T7083] EXT4-fs (loop0): blocks per group (95) and clusters per group (32768) inconsistent [ 141.799306][ T6335] EXT4-fs (loop3): unmounting filesystem 00000007-0000-0000-0000-000000000000. [ 141.922141][ T7097] loop3: detected capacity change from 0 to 512 [ 141.930936][ T7098] netlink: 'syz.0.422': attribute type 29 has an invalid length. [ 141.967684][ T7098] netlink: 'syz.0.422': attribute type 29 has an invalid length. [ 141.968309][ T7097] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 141.988516][ T7097] ext4 filesystem being mounted at /27/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 142.031115][ T7098] netlink: 'syz.0.422': attribute type 29 has an invalid length. [ 142.724405][ T7114] netlink: 4 bytes leftover after parsing attributes in process `syz.0.424'. [ 142.845147][ T6335] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 143.165859][ T5143] usb 1-1: new low-speed USB device number 5 using dummy_hcd [ 146.663836][ T5143] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 146.753580][ T5143] usb 1-1: can't read configurations, error -71 [ 146.760278][ T7151] netlink: 'syz.3.433': attribute type 1 has an invalid length. [ 146.760311][ T7151] nbd: must specify at least one socket [ 146.902544][ T7157] sp0: Synchronizing with TNC [ 149.687202][ T7158] list_del corruption, ffffea0001ee0090->next is NULL [ 149.688362][ T5113] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 149.694325][ T7158] ------------[ cut here ]------------ [ 149.702524][ T5113] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 149.706514][ T7158] kernel BUG at lib/list_debug.c:53! [ 149.713956][ T5113] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 149.718735][ T7158] Oops: invalid opcode: 0000 [#1] PREEMPT SMP KASAN PTI [ 149.718765][ T7158] CPU: 1 UID: 0 PID: 7158 Comm: syz.2.436 Not tainted 6.10.0-rc7-next-20240709-syzkaller #0 [ 149.718785][ T7158] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 149.718799][ T7158] RIP: 0010:__list_del_entry_valid_or_report+0xd0/0x140 [ 149.718835][ T7158] Code: 06 e2 42 fd 48 8b 13 4c 39 fa 75 6b b0 01 5b 41 5c 41 5e 41 5f c3 cc cc cc cc 48 c7 c7 a0 9b 20 8c 4c 89 fe e8 71 e0 d7 06 90 <0f> 0b 48 c7 c7 00 9c 20 8c 4c 89 fe e8 5f e0 d7 06 90 0f 0b 48 c7 [ 149.718850][ T7158] RSP: 0018:ffffc900039c7410 EFLAGS: 00010046 [ 149.718872][ T7158] RAX: 0000000000000033 RBX: ffff888149322000 RCX: 07a14133b1b63300 [ 149.718885][ T7158] RDX: ffffc90009a2a000 RSI: 0000000000003594 RDI: 0000000000003595 [ 149.718898][ T7158] RBP: ffffea0001ee0090 R08: ffffffff8173a779 R09: 1ffff92000738e1c [ 149.718911][ T7158] R10: dffffc0000000000 R11: fffff52000738e1d R12: dffffc0000000000 [ 149.718924][ T7158] R13: dffffc0000000000 R14: 0000000000000000 R15: ffffea0001ee0090 [ 149.718937][ T7158] FS: 00007f4552afd6c0(0000) GS:ffff8880b9500000(0000) knlGS:0000000000000000 [ 149.718953][ T7158] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 149.718966][ T7158] CR2: 00007f0d966d3338 CR3: 00000000356be000 CR4: 00000000003526f0 [ 149.718981][ T7158] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 149.718991][ T7158] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 149.719003][ T7158] Call Trace: [ 149.719011][ T7158] [ 149.719018][ T7158] ? __die_body+0x88/0xe0 [ 149.719040][ T7158] ? die+0xcf/0x110 [ 149.719062][ T7158] ? do_trap+0x15a/0x3a0 [ 149.719089][ T7158] ? __list_del_entry_valid_or_report+0xd0/0x140 [ 149.719109][ T7158] ? do_error_trap+0x1dc/0x2c0 [ 149.719126][ T7158] ? __list_del_entry_valid_or_report+0xd0/0x140 [ 149.719146][ T7158] ? __pfx_do_error_trap+0x10/0x10 [ 149.719165][ T7158] ? report_bug+0x3cd/0x500 [ 149.719181][ T7158] ? __list_del_entry_valid_or_report+0xd0/0x140 [ 149.719199][ T7158] ? handle_invalid_op+0x34/0x40 [ 149.719215][ T7158] ? __list_del_entry_valid_or_report+0xd0/0x140 [ 149.719232][ T7158] ? exc_invalid_op+0x38/0x50 [ 149.719252][ T7158] ? asm_exc_invalid_op+0x1a/0x20 [ 149.719277][ T7158] ? __wake_up_klogd+0x109/0x140 [ 149.719297][ T7158] ? __list_del_entry_valid_or_report+0xd0/0x140 [ 149.719316][ T7158] __folio_undo_large_rmappable+0x104/0x230 [ 149.719341][ T7158] __folio_migrate_mapping+0x6c1/0x3490 [ 149.719363][ T7158] ? try_to_migrate_one+0x89f/0x42e0 [ 149.719387][ T7158] ? __pfx___might_resched+0x10/0x10 [ 149.719408][ T7158] ? __pfx___folio_migrate_mapping+0x10/0x10 [ 149.719433][ T7158] ? copy_mc_to_kernel+0x35/0xa0 [ 149.719454][ T7158] ? folio_mc_copy+0x17c/0x290 [ 149.719471][ T7158] migrate_folio+0x111/0x260 [ 149.719493][ T7158] move_to_new_folio+0x306/0x12e0 [ 149.719515][ T7158] ? __pfx_lock_release+0x10/0x10 [ 149.719538][ T7158] ? __pfx_move_to_new_folio+0x10/0x10 [ 149.719559][ T7158] ? rcu_is_watching+0x15/0xb0 [ 149.719581][ T7158] ? lock_release+0xbf/0x9f0 [ 149.719600][ T7158] ? folio_lock_anon_vma_read+0x58/0x670 [ 149.719617][ T7158] ? folio_lock_anon_vma_read+0x5c9/0x670 [ 149.719634][ T7158] ? folio_lock_anon_vma_read+0x58/0x670 [ 149.719654][ T7158] ? __up_read+0x2c2/0x6b0 [ 149.719670][ T7158] ? __pfx___up_read+0x10/0x10 [ 149.719690][ T7158] ? try_to_migrate+0x3de/0x4b0 [ 149.719709][ T7158] ? __pfx_lock_release+0x10/0x10 [ 149.719729][ T7158] ? __pfx_try_to_migrate+0x10/0x10 [ 149.719747][ T7158] ? __pfx_try_to_migrate_one+0x10/0x10 [ 149.719766][ T7158] ? __pfx_folio_not_mapped+0x10/0x10 [ 149.719783][ T7158] ? __pfx_folio_lock_anon_vma_read+0x10/0x10 [ 149.719800][ T7158] ? __pfx_invalid_migration_vma+0x10/0x10 [ 149.719824][ T7158] migrate_pages+0xb74/0x3460 [ 149.719854][ T7158] ? lock_release+0x70/0x9f0 [ 149.719892][ T7158] ? __pfx_alloc_migration_target_by_mpol+0x10/0x10 [ 149.719908][ T7158] ? __walk_page_range+0x6bd/0x720 [ 149.719931][ T7158] ? __pfx_migrate_pages+0x10/0x10 [ 149.719952][ T7158] ? __pfx_lock_release+0x10/0x10 [ 149.719971][ T7158] ? mas_prev_slot+0xf10/0xfb0 [ 149.719991][ T7158] ? mas_next_slot+0xeab/0xf90 [ 149.720013][ T7158] ? __pfx_up_write+0x10/0x10 [ 149.720028][ T7158] ? mas_find+0x422/0xbb0 [ 149.720047][ T7158] __se_sys_mbind+0x1490/0x19f0 [ 149.720080][ T7158] ? __pfx___se_sys_mbind+0x10/0x10 [ 149.720102][ T7158] ? vm_mmap_pgoff+0x2c3/0x3d0 [ 149.720124][ T7158] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 149.720143][ T7158] ? rcu_is_watching+0x15/0xb0 [ 149.720164][ T7158] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 149.720183][ T7158] ? rcu_is_watching+0x15/0xb0 [ 149.720205][ T7158] ? __x64_sys_mbind+0x21/0xf0 [ 149.720226][ T7158] do_syscall_64+0xf3/0x230 [ 149.720245][ T7158] ? clear_bhb_loop+0x35/0x90 [ 149.720261][ T7158] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 149.720284][ T7158] RIP: 0033:0x7f4551d75bd9 [ 149.720304][ T7158] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 149.720317][ T7158] RSP: 002b:00007f4552afd048 EFLAGS: 00000246 ORIG_RAX: 00000000000000ed [ 149.720334][ T7158] RAX: ffffffffffffffda RBX: 00007f4551f03f60 RCX: 00007f4551d75bd9 [ 149.720346][ T7158] RDX: 0000000000000000 RSI: 0000000000003000 RDI: 0000000020126000 [ 149.720357][ T7158] RBP: 00007f4551de4e60 R08: 0000000000000000 R09: 0000000000000002 [ 149.720367][ T7158] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 149.720377][ T7158] R13: 000000000000000b R14: 00007f4551f03f60 R15: 00007ffe5e06bd08 [ 149.720396][ T7158] [ 149.720402][ T7158] Modules linked in: [ 149.720420][ T7158] ---[ end trace 0000000000000000 ]--- [ 149.720431][ T7158] RIP: 0010:__list_del_entry_valid_or_report+0xd0/0x140 [ 149.726987][ T5113] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 149.733018][ T7158] Code: 06 e2 42 fd 48 8b 13 4c 39 fa 75 6b b0 01 5b 41 5c 41 5e 41 5f c3 cc cc cc cc 48 c7 c7 a0 9b 20 8c 4c 89 fe e8 71 e0 d7 06 90 <0f> 0b 48 c7 c7 00 9c 20 8c 4c 89 fe e8 5f e0 d7 06 90 0f 0b 48 c7 [ 149.733039][ T7158] RSP: 0018:ffffc900039c7410 EFLAGS: 00010046 [ 149.733055][ T7158] RAX: 0000000000000033 RBX: ffff888149322000 RCX: 07a14133b1b63300 [ 149.733067][ T7158] RDX: ffffc90009a2a000 RSI: 0000000000003594 RDI: 0000000000003595 [ 149.733083][ T7158] RBP: ffffea0001ee0090 R08: ffffffff8173a779 R09: 1ffff92000738e1c [ 149.733095][ T7158] R10: dffffc0000000000 R11: fffff52000738e1d R12: dffffc0000000000 [ 149.733107][ T7158] R13: dffffc0000000000 R14: 0000000000000000 R15: ffffea0001ee0090 [ 149.733118][ T7158] FS: 00007f4552afd6c0(0000) GS:ffff8880b9500000(0000) knlGS:0000000000000000 [ 149.733132][ T7158] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 149.733145][ T7158] CR2: 00007f0d966d3338 CR3: 00000000356be000 CR4: 00000000003526f0 [ 149.744738][ T5113] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 149.753215][ T7158] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 149.753236][ T7158] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 149.753249][ T7158] Kernel panic - not syncing: Fatal exception [ 149.753410][ T7158] Kernel Offset: disabled