last executing test programs: 53.586825517s ago: executing program 2 (id=1300): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x11, 0x4, 0x3e8, 0x200, 0x200, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2}}, {@mac}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'erspan0\x00'}, 0xc0, 0x100, 0x0, {0x0, 0x3000000000000}}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x2, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local}, {@mac=@multicast}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) 53.267493094s ago: executing program 2 (id=1303): socket$nl_route(0x10, 0x3, 0x0) syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000240)='./file1\x00', 0x210052, &(0x7f00000000c0)=ANY=[@ANYRES64=0x0, @ANYRES32, @ANYBLOB="2c74696d655f6f66667365743d3078060066666666666666666666666236352c6e6f646f74732c636865636b3d7374726963742c00"], 0xfd, 0x1d3, &(0x7f0000000540)="$eJzs3c9qE1EUB+AzMW2iG7sTxMWAG1dBfYKKVBADgpKFriy0bhoRkk3sxvgWvoUv5QNIV0WQK82MTS1Vq84fTb9vk5P8ZnLPvYGbVW5e3Hi1t/N6+vLjtffR72fR2YzNOMxiIzrxzTwAgFVymFJ8SoW2ewEAmnGO7/8vDbcEANTs6bPnj+4Nh1tP8rwfcTCfjWaj4rHIHzwcbt3OFzaWdx3MZqNLx/mdIs+/z9fiSpnfPTNfj1s3F/m7o+z+4+GpvBc79U8fAAAAAAAAAAAAAAAAAAAAAABaMciPnXm+z2Dwo7yoTpwPdOr8nm5c7zY2DQAAAAAAAAAAAAAAAAAAAPivTd/s722vlU+2x+PdybQXEYviKPqLIl09MUQVb1hH0Yl/oo3mi6xbzaf8O8U8Ghorr2B9qugnznvx55TS8pX1iPj5XZcjouY1XO4RvVZ2JgAAAAAAAAAAAAAAAAAAuHjK3/pmk2nbnQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAe4r//x/vTv6keBsR+x/Sry4uh8panioAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAr7GsAAAD//5UUKus=") openat(0xffffffffffffff9c, &(0x7f0000000200)='./bus\x00', 0x40942, 0x0) open(&(0x7f0000000080)='./file1\x00', 0x0, 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000080)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, "ef359f4f3b9d01527f00d1ce5d29c3ee5e5ca9000f7c41499dc2bdc63a00000000000000002caa2ad9c084a003ea0000000000000000000800002000", "036c47c67808200400000000000000335263bdbcef549ba197fce47ddfdd753abd950100002a00ffffffffffffffff00000000e8f20000000200", "b7326736181c208220000000b9000000000000000000f0fffffffff2ff00"}) unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x0) 52.576129557s ago: executing program 2 (id=1311): r0 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x24, r0, 0x1, 0x0, 0x0, {0x7}, [@L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_SESSION_ID={0x8}]}, 0x24}}, 0x0) 49.950032679s ago: executing program 2 (id=1317): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cgroup.events\x00', 0x275a, 0x0) ioctl$PIO_UNIMAPCLR(r0, 0x4b68, &(0x7f0000000180)={0x9, 0x7fff, 0x1ff}) r1 = creat(&(0x7f0000000300)='./bus\x00', 0x0) r2 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x40) r3 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x206, &(0x7f0000000200)=0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_emit_ethernet(0xa6, &(0x7f0000000000)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x70, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0xff, 0x0, 0x9, 0x0, 0x0, [{0x0, 0xa, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af1802"}, {0x0, 0x1, "ffffffffff60000000000000"}]}}}}}}, 0x0) sendto$inet6(r5, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c) io_submit(r4, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f0000000000), 0x1a00001a}]) fcntl$setstatus(r2, 0x4, 0x4400) dup3(r2, r1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x2000000000000078, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b708000001000080000000000000000098bfa200003ce2868507020000f8ffffffb703000008000000b70400000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r6 = syz_open_dev$usbfs(&(0x7f0000000000), 0x1ff, 0x2) r7 = dup(r6) ioctl$USBDEVFS_CONTROL(r7, 0xc0185500, &(0x7f0000000040)={0x23, 0x3, 0x14, 0x0, 0x0, 0x0, 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x5, 0x10001, 0x7fff, 0x7e, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x48) r8 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r8, 0x29, 0x36, &(0x7f00000003c0)=ANY=[], 0x8) connect$inet6(r8, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) setsockopt$SO_BINDTODEVICE(r8, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10) sendmmsg$inet6(r8, &(0x7f00000014c0)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)="a852", 0x2}], 0x1}}], 0x1, 0x6000c000) sendto$inet6(r8, &(0x7f0000000300), 0x18, 0x0, 0x0, 0xfffffffffffffdfd) io_setup(0x6, &(0x7f0000000240)=0x0) fallocate(r3, 0x10, 0x2000000, 0x9) io_submit(r9, 0x3f0a, &(0x7f0000000540)=[&(0x7f00000000c0)={0xf04aef, 0x3d8, 0x4, 0x0, 0x0, r1, &(0x7f0000000000), 0x200a00}]) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r0, 0x0) 15.997470122s ago: executing program 4 (id=1415): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000200)={0x48, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4, 0xfd}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x48}}, 0x0) 15.754193019s ago: executing program 4 (id=1418): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, &(0x7f0000000300)='usrquota') chdir(&(0x7f0000000080)='./file1\x00') mknod$loop(&(0x7f0000000140)='./file0\x00', 0x2000, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) unlink(&(0x7f0000000040)='./file0\x00') 15.386601215s ago: executing program 4 (id=1420): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0xfffffffe, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xffffffff}, 0x48) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r2 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0x4008af12, &(0x7f0000000080)={0x1, 0x7b}) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000240)=r2) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000040)={0x1, r2}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f00000001c0)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000280)=""/73}) ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f0000000480)={0x1}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000015640)=""/102400, 0x19000) sendmsg$IPCTNL_MSG_CT_DELETE(0xffffffffffffffff, 0x0, 0x0) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0x63, &(0x7f0000000600)=""/99}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000000)=0x1) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x90) syz_read_part_table(0x5ba, &(0x7f00000005c0)="$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") bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r5 = bpf$ITER_CREATE(0xb, 0x0, 0x0) close(0xffffffffffffffff) ioctl$VHOST_VDPA_SET_CONFIG(0xffffffffffffffff, 0x4008af74, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, r5, 0x0, 0xfffffffffffffdfa, &(0x7f0000000000)='cgroup\x00'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000200)=ANY=[@ANYRES16=r5, @ANYRES32=r0, @ANYRES64=r4, @ANYRESHEX=r5, @ANYRES16=r0], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x90) 9.826289232s ago: executing program 5 (id=1436): madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) madvise(&(0x7f000036c000/0x1000)=nil, 0x1000, 0x17) r0 = syz_open_procfs$pagemap(0x0, &(0x7f0000000040)) ioctl$PAGEMAP_SCAN(r0, 0xc0606610, &(0x7f0000000080)={0x60, 0x0, &(0x7f00001b8000/0x2000)=nil, &(0x7f000075c000/0x1000)=nil, 0x0, &(0x7f0000000100)=[{}], 0x1, 0x6, 0x0, 0x2, 0x0, 0x35}) 9.645391352s ago: executing program 2 (id=1318): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) openat$dsp(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xc) r0 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0) write$sysctl(r0, &(0x7f0000000580)='1\x00', 0x2) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_clone(0x88200, 0x0, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) socket$nl_route(0x10, 0x3, 0x0) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000003c0)={0x0}}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)) write$sysctl(r0, &(0x7f00000000c0)='2\x00', 0x22) 9.225546227s ago: executing program 3 (id=1439): io_uring_setup(0x30d3, &(0x7f0000000000)) r0 = syz_io_uring_setup(0x6908, &(0x7f0000000340), &(0x7f0000000140), &(0x7f0000000100)) r1 = io_uring_setup(0x7058, &(0x7f0000000040)) r2 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0x18, 0x20000002, r2) 9.182721683s ago: executing program 5 (id=1440): r0 = creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r0, 0x18000000000002a0, 0x27, 0x0, &(0x7f0000000380)="1000c93bffafa6db0474d6d9f49ff947a94836ea0c39f0a4cf74b19f95cebd05ce88d6b5b2a460", 0x0, 0x200, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfffffffb}, 0x4c) r1 = inotify_init1(0x0) inotify_add_watch(r1, &(0x7f0000000140)='.\x00', 0x40000022) r2 = shmget(0x3, 0x2000, 0x200, &(0x7f0000ffd000/0x2000)=nil) shmctl$SHM_STAT_ANY(r2, 0xf, &(0x7f0000000000)=""/212) shmctl$IPC_RMID(r2, 0x0) shmctl$SHM_LOCK(r2, 0xb) write$binfmt_elf32(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="7f454c46000000000000000000000000030006000000000000000000380000000000000000191bda0000200001000000000280000000000003"], 0x69) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) close(r0) prctl$PR_SET_SECUREBITS(0x1c, 0x2f) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) bind$unix(r3, &(0x7f0000000140)=@file={0x0, './file0\x00'}, 0x6e) faccessat2(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r4, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f0000000280)={0x1, 0x0, 0x0, &(0x7f00000000c0)=""/87, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f0000000300)={0x0, 0x1, 0x0, &(0x7f0000000780)=""/159, 0x0, 0x6322bb2a80d3f510}) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f00000000c0)={0x0, 0x4788, &(0x7f0000000000)=[{&(0x7f0000000140)="d800000019008111e0020f060d8107040a60090000020000000455a1bc00090008000699e3ffffff140005000800000006000567b8b7b94002000009080016060000000000000074d67f6f9400f7d1d9bbe94fa27100a007a2f7457f01896034277ce06bbace8017cb39b62ee5a7cef4090000001fb791643a5e83d42365f003724a237ee4b11602b2a10000000014d6d930dfe1d9c322fe040000005025acca262f3d40fad95667e006dcdf634c1f215ce3bb9ad809d50b694138c9f1ac76efb42a9ecbee5de6ccd44242f4d643f6fd0f26187b51980dd6", 0xd8}], 0x1}, 0x0) ioctl$VHOST_SET_MEM_TABLE(r4, 0x4008af03, &(0x7f0000000680)) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_buf(r6, 0x29, 0xd4, 0x0, 0x4) ioctl$VHOST_VSOCK_SET_RUNNING(r4, 0x4004af61, &(0x7f0000000000)=0x1) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCADDRT(r7, 0x890b, &(0x7f0000000200)={@mcast1={0xff, 0x5}, @dev={0xfe, 0x80, '\x00', 0x8}, @private2={0xfc, 0x2, '\x00', 0x1}}) sendmsg$AUDIT_MAKE_EQUIV(r0, &(0x7f00000002c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x40a040}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x28, 0x3f7, 0x400, 0x70bd2d, 0x25dfdbfe, {0x7, 0x7, './file0', './file1'}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x4084}, 0x20000000) r8 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_AEAD_AUTHSIZE(r8, 0x117, 0x5, 0x0, 0x1) 7.300375867s ago: executing program 3 (id=1441): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)=@delchain={0x130, 0x65, 0x0, 0x0, 0x0, {}, [@TCA_CHAIN={0x8}, @TCA_RATE={0x6}, @TCA_CHAIN={0x8}, @filter_kind_options=@f_flower={{0xb}, {0x40, 0x2, [@TCA_FLOWER_KEY_ARP_OP={0x5}, @TCA_FLOWER_KEY_ICMPV6_CODE={0x5}, @TCA_FLOWER_KEY_TCP_DST_MASK={0x6}, @TCA_FLOWER_KEY_ENC_IPV6_SRC_MASK={0x14}, @TCA_FLOWER_KEY_UDP_SRC_MASK={0x6}, @TCA_FLOWER_KEY_ICMPV6_TYPE={0x5}]}}, @filter_kind_options=@f_route={{0xa}, {0x9c, 0x2, [@TCA_ROUTE4_FROM={0x8}, @TCA_ROUTE4_FROM={0x8}, @TCA_ROUTE4_IIF={0x8}, @TCA_ROUTE4_ACT={0x80, 0x6, [@m_nat={0x7c, 0x0, 0x0, 0x0, {{0x8}, {0x54, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{}, @rand_addr, @loopback}}, @TCA_NAT_PARMS={0x28, 0x1, {{}, @rand_addr, @broadcast}}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x130}}, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x8}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 6.723396138s ago: executing program 5 (id=1442): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'ip_vti0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vti={{0x8}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_VTI_LOCAL={0x8, 0x4, @private}, @IFLA_VTI_REMOTE={0x8, 0x5, @multicast1}, @vti_common_policy=[@IFLA_VTI_OKEY={0x8}]]}}}]}, 0x48}}, 0x0) 6.456990916s ago: executing program 3 (id=1444): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) ioctl$TCSETAF(r0, 0x5408, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x7ff, 0x0, "ec28a144f13d7607"}) write$binfmt_aout(r0, &(0x7f0000000380)=ANY=[@ANYRES64, @ANYRES32], 0x100000025) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x0, "0062ba7d82000000000000000000f7ffffff00"}) r1 = syz_open_pts(r0, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000000)=0x44) 6.455386369s ago: executing program 4 (id=1445): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="12010100000000105801000100000000000109022400010000002009040000010300000009210000000122dc0109058903"], 0x0) syz_mount_image$vfat(&(0x7f0000000440), &(0x7f0000000000)='./file0\x00', 0xa00a14, &(0x7f0000000080)=ANY=[], 0xff, 0x328, &(0x7f00000000c0)="$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") syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000700)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0) syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12011003000000002505a8"], 0x0) syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0) socket$packet(0x11, 0x0, 0x300) mknodat(0xffffffffffffffff, 0x0, 0x100, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, 0x0) 6.362215046s ago: executing program 5 (id=1446): syz_mount_image$udf(&(0x7f0000000f00), &(0x7f00000000c0)='./file0\x00', 0x2000010, &(0x7f0000001180)=ANY=[@ANYBLOB='mode=00000000000000000000010,mode=00000000000000000000001,utf8,anchor=00000000000000000001,undelete,uid=', @ANYRESDEC=0x0, @ANYBLOB, @ANYRESDEC=0x0, @ANYBLOB=',uid=', @ANYRESDEC=0x0, @ANYBLOB=',gid=ignore,noadinicb,dmode=00000000000000000000006,novrs,lastblock=00000000000000000003,bs=00000000000000000009,nostrict,\x00'], 0x1, 0xc43, &(0x7f0000000200)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) sendmmsg$inet6(r3, &(0x7f0000007e40)=[{{&(0x7f0000000340)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1=0xe0000010}}, 0x1c, 0x0}}], 0x6c00, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) ioperm(0x0, 0x5, 0x6) remap_file_pages(&(0x7f0000ffd000/0x1000)=nil, 0x300, 0x0, 0x0, 0x0) setgroups(0x400000000000026f, &(0x7f0000000080)=[0x0, 0xee00]) 6.148184672s ago: executing program 1 (id=1448): syz_init_net_socket$ax25(0x3, 0x2, 0xf0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) prlimit64(0x0, 0x1, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) ioctl$mixer_OSS_GETVERSION(0xffffffffffffffff, 0x80086303, &(0x7f0000000000)) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b8000000190001000000000000000000fc020000000000000000000000000000ff02000000000000000000000000000100000000000000000a"], 0xb8}}, 0x0) sendmsg$nl_xfrm(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="650100001b"], 0x188}}, 0x0) 4.925066011s ago: executing program 1 (id=1449): r0 = syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0285628, &(0x7f0000000080)) 4.897185575s ago: executing program 3 (id=1450): r0 = syz_io_uring_setup(0x6908, &(0x7f0000000340), &(0x7f0000000140), &(0x7f0000000100)) r1 = io_uring_setup(0x7057, &(0x7f0000000040)) r2 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x0, 0x4002011, r2, 0x0) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0x1a, 0x20000002, r3) 4.819196777s ago: executing program 1 (id=1451): r0 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote, 0x5}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x4c, &(0x7f0000000040)=0x2000000, 0x4) 4.646285197s ago: executing program 1 (id=1452): r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$TCSETSF(r0, 0x5404, &(0x7f00000009c0)={0x0, 0xb, 0x0, 0x0, 0x0, "72391a4900ebcb77ec95aae89800"}) writev(r0, &(0x7f0000001280)=[{&(0x7f00000000c0)="69fd801b170a250aeb56eb412af4e8c10f924c341cb06a6e24b2f0090d", 0x1d}], 0x1) 4.574897398s ago: executing program 3 (id=1453): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f00000000c0)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000d, 0x4008031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) fanotify_init(0x0, 0x0) 4.3778666s ago: executing program 1 (id=1455): r0 = syz_open_dev$evdev(0x0, 0x2, 0x0) write$char_usb(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000109737107d071004c1ec0102030109021b00010040b0000904000001362434000905df030002"], 0x0) r1 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000040)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f00020000000905050200067e"], 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x10, 0x738, 0x1713, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x40, 0x30, 0x1, [{{0x9, 0x4, 0x0, 0xd, 0x1, 0x3, 0x1, 0x3, 0xba, {0x9, 0x21, 0xfff8, 0x3e, 0x1, {0x22, 0x98c}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0x62, 0x2, 0x6}}}}}]}}]}}, &(0x7f00000003c0)={0x0, 0x0, 0xc, &(0x7f00000001c0)={0x5, 0xf, 0xc, 0x1, [@ext_cap={0x7, 0x10, 0x2, 0x4, 0x2, 0x6, 0x6}]}, 0x5, [{0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x44b}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x41c}}, {0x4, &(0x7f0000000280)=@lang_id={0x4}}, {0x37, &(0x7f00000002c0)=@string={0x37, 0x3, "b493d1439368b1fe56cbe72cfb079c51df8320f163a0267dacad9cc44e3426588fc118dfaa306e53bab43390238dfa81af6f3f5b9a"}}, {0xad, &(0x7f0000000300)=@string={0xad, 0x3, "ebc4e11681d694883201bd01ab0268fc051ecd0334550dc40d4e1646d23225c4a18185fe333e0ec5d35093e9ff6eba7060e5135a05fae1d4937e4fad7ef628b837fad9a7f405a036471be0775df06f8298ac56a5ff0242491b2cc53b68eaba0a168168183ce32a436c60badd5fe8f94e982f9ebc79cd2b2ee28510fe537fb6e0b1da44f045f2619b1f770a3edf059510d9fd7c6a263c60ac8356afa9f5111b308c278f46544117806b16a5"}}]}) syz_usb_connect(0x1, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="1a0100005c6b4408070a64006e40010203030902240001a82300000904000002ca744d00090503034d00ff99090805848f"], &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r2, &(0x7f0000000200)=""/128, 0x80) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r3, 0x5b06, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) ioctl$EVIOCGMTSLOTS(r0, 0x8040450a, &(0x7f0000000480)=""/94) r4 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) syz_usb_disconnect(r4) read$char_usb(0xffffffffffffffff, &(0x7f0000000440)=""/54, 0x36) syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000500)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0xff, 0x5ac, 0x262, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0xfe, 0x10, 0x80, [{{0x9, 0x4, 0x0, 0x6, 0x2, 0x3, 0x1, 0x5, 0x5, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x453}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x40, 0xa, 0x1}}}}}]}}]}}, &(0x7f0000000780)={0xa, &(0x7f0000000540)={0xa, 0x6, 0x1, 0x8, 0x7, 0x10, 0x0, 0xe}, 0x17, &(0x7f0000000580)={0x5, 0xf, 0x17, 0x2, [@ext_cap={0x7, 0x10, 0x2, 0x4, 0xe, 0x4, 0xfff9}, @wireless={0xb, 0x10, 0x1, 0x4, 0x0, 0xfd, 0xfe, 0x2, 0xe8}]}, 0x6, [{0x4, &(0x7f00000005c0)=@lang_id={0x4, 0x3, 0x200a}}, {0x4, &(0x7f0000000600)=@lang_id={0x4, 0x3, 0x426}}, {0x4, &(0x7f0000000640)=@lang_id={0x4, 0x3, 0x1404}}, {0x4, &(0x7f0000000680)=@lang_id={0x4, 0x3, 0x404}}, {0x4, &(0x7f00000006c0)=@lang_id={0x4, 0x3, 0x42d}}, {0x7e, &(0x7f0000000700)=@string={0x7e, 0x3, "11694d8880464eeff6ac197b695531ae0123b5b21cb0241693c3a1ba2daaf9915a72166ecbdd84af4baf125e103e82d1582d7845e5b529e2c3bcf545b18f18408b886de2fcb99815feb0738bc6bbff061a88a61526053565874e1aae4146f73e2895d48c4ad18ad10373aede396c84a4417db79765c8c1313c94bae7"}}]}) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902"], 0x0) ioctl$EVIOCRMFF(r4, 0x83c0550b, 0x0) read$char_usb(0xffffffffffffffff, &(0x7f0000000080)=""/157, 0x9d) syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000000bc0)={0x0, 0x0, 0x0, 0x0, 0x5, [{0x2, &(0x7f00000008c0)=@string={0x2}}, {0x0, 0x0}, {0x2, &(0x7f0000000a00)=@string={0x2}}, {0x0, 0x0}, {0x0, 0x0}]}) syz_open_dev$hiddev(&(0x7f0000000040), 0x100, 0x202000) syz_usb_connect$cdc_ecm(0x2, 0x56, &(0x7f0000000440)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x0, 0x0, 0xffffffffffff8001, 0x1, [{{0x9, 0x2, 0x44, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}, {[{{0x9, 0x5, 0x81, 0x3, 0x20}}], {{0x9, 0x5, 0x82, 0x2, 0x10}}}}}]}}]}}, 0x0) 4.075836806s ago: executing program 2 (id=1456): r0 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205648, &(0x7f0000000100)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x98f909, 0x8000, '\x00', @string=&(0x7f00000000c0)}}) syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000000)='./file1\x00', 0x40, &(0x7f0000000280)=ANY=[@ANYRES8, @ANYRESHEX=r0, @ANYRES16=0x0], 0x2, 0x1fe, &(0x7f00000006c0)="$eJzs3b9rE3EUAPCXWptUELuJInjgoktQ/4KIRBADohJBJ4XWpREhWaKLdRBcHAX/QHelUxc9MXc2SXu5lqbt0fD5LH30ve8vvkeSJS+vrr3dXH83ePPj8vdoNGqx1IpW7NRiLZbiv60AABbJTprGrzRdrnofAMDpyd//R2aU/C4b74MDAJw9z168fHSv02k/TZJGxPbWsDvsZn+z/IOHnfbtZGRtPGp7OOye283fyfLJdP58XIiI1ei07xbmV+LmjdH4T/9y9x939uTrsX7yxwcAAAAAAAAAAAAAAAAAAAAAgEo0k12F/X2azVn5LJroD7Snf89yXJ1oDvitfvJnAQAAAAAAAAAAAAAAAAAAgLNq8P7D5uteb6M/DuoRMf2fowXppYIlPn+NKB6VRMT+eb7k+5xjP41seDQi9tcszTPzwgXR+jlxO7V5Jrx1peTinkfRXRxPEHnXiZKa61NP+J+imuQQaz25eFDNjEf9oGAlIsprVssPeBzB+DVC6w4AAAAAAAAAAAAAAAAAADgd+Xd9a/1B1TsBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgOpkv//f2+gfJfgYEYcozpeqVXxUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFtjfAAAA//9frBXs") r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0, 0x0) fcntl$setlease(r1, 0x400, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x3c, 0x3c, 0x2, [@struct={0x0, 0x2, 0x0, 0x4, 0x0, 0xffffffff, [{0x0, 0x3}, {0x8, 0x3}]}, @ptr, @restrict={0x8000000, 0x0, 0x0, 0x10, 0x2}]}}, 0x0, 0x56}, 0x20) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000040)={0xa, 0x0, &(0x7f0000000340)={&(0x7f00000000c0)=ANY=[@ANYBLOB="020300020b00000000000000010000f901001300090000002bbd70000735000002000100000000000000fb000000000004000300220000001f000000000000000500000000000000f8ffffffffffffff0100080000080000"], 0x58}, 0x1, 0x7}, 0x0) open(&(0x7f0000000100)='./bus\x00', 0x143142, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) unshare(0x22020400) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r3, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r5 = dup(r4) mmap(&(0x7f000002b000/0x2000)=nil, 0x2000, 0x3000007, 0x38011, r5, 0x0) syz_mount_image$vfat(&(0x7f0000000480), &(0x7f0000000100)='./bus\x00', 0x1000840, &(0x7f0000000380)={[{@iocharset={'iocharset', 0x3d, 'iso8859-6'}}, {@fat=@sys_immutable}, {@shortname_lower}, {@iocharset={'iocharset', 0x3d, 'cp936'}}, {@rodir}, {@uni_xlateno}, {@fat=@nocase}, {@fat=@dmask={'dmask', 0x3d, 0x3ff}}, {@iocharset={'iocharset', 0x3d, 'macinuit'}}, {@shortname_lower}, {@shortname_win95}, {@utf8no}, {@fat=@discard}, {@iocharset={'iocharset', 0x3d, 'iso8859-5'}}, {@utf8}]}, 0x0, 0x35f, &(0x7f0000000900)="$eJzs3U9om/UbAPAne9OkHezX8kMYCsKrN0HL/uBBTx2jg2EuKsE/BzG4TqWpgwaD22FZvYhHwaM7efOgBw87i6CINw9enSBT8aC7DRy+krxvmjdLmm1CNoufzyE8fb7Pk+/3bd42b9Pm21fXYvPMQpy9fv1aLC5Worp2ci1uVGIlkhi6FJNqU3IAwP5wI8vijyx3hy2VOS8JAJizwfP/64dKmXe/mlWfefYHgH2v+Pl/aVbN4l4D5+ayJABgziZe/390bLg2/qv+aumvAgCA/er5l15+5kQj4rk0XYzYeq/b7Dbj6dH4ibPxZrRjI47EctyMyC8U+jeVwe2p0431I2ma9uLnlWj2O7rNiK1et5lfKZxIBv31OBrLsVL0F1cbWZYlpz5vrB9NByLiUm8wf2xVus2FOFjM/8PB2IhjkcYDE/0Rpxvrx9LiDppbw/5exM7odYv++ldjOb57Lc5FO85Ev3d4WdNYv3g0TU9mjbH+brM+qMvt+QoIAAAAAAAAAAAAAAAAAAAAAAD8I6vprpXd/W+y0f49q6tTxgf74+T9xf5AO/n+QFk9iyz7/Z0nmu8nMbY/0K3783Sb1Thwfw8dAAAAAAAAAAAAAAAAAAAA/jU652vRarc3tjvnL2yWg9525/yBiOhn3vrm0y+XYrLmNkG1mKM0lBapC5utLBkWZ8lYTREk/cmHmU+u7K64XFPfPYqpy6jvPdRuH3rkp49GmYeT4T3/NapJYvoBJrcsoxxs/S9f0t18onaDY7epuZpl2V7tF1+Z7IpKRPXuH7jZQdYPvr72xoPHO4efHGS+yHKPPb78wtUPP/51s9XuzxyDR7C23bmZbbaKj6efbHsHSen8qUQeVMpnQnVW+854ppV8/9uLD33w7fTi/x8fz2TlmrenTJHkh/PZrUO1POgvs8jsXM6DpWlLXZhy8s8hOHx5rXXl4o+/zKpZGn3FtUvfJGzUAQAAAAAAAAAAAAAAAAAA90TpveKF4s2+C7O6nnp2/isDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgHtn9P//S8HOROZOgj97MTlU39juRNTu92ECAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPAf93cAAAD//75XbXA=") r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r6, 0x125f, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00'}, 0x10) r7 = socket$unix(0x1, 0x1, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) bind$unix(r8, &(0x7f0000003000)=@file={0x1}, 0x6e) listen(r8, 0x0) connect$unix(r7, &(0x7f0000000640)=@file={0x1}, 0x6e) connect$unix(r7, &(0x7f0000000280)=@file={0x1}, 0x6e) fcntl$dupfd(r8, 0x0, r7) 4.02635867s ago: executing program 0 (id=1457): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)=@delchain={0x130, 0x65, 0x0, 0x0, 0x0, {}, [@TCA_CHAIN={0x8}, @TCA_RATE={0x6}, @TCA_CHAIN={0x8}, @filter_kind_options=@f_flower={{0xb}, {0x40, 0x2, [@TCA_FLOWER_KEY_ARP_OP={0x5}, @TCA_FLOWER_KEY_ICMPV6_CODE={0x5}, @TCA_FLOWER_KEY_TCP_DST_MASK={0x6}, @TCA_FLOWER_KEY_ENC_IPV6_SRC_MASK={0x14}, @TCA_FLOWER_KEY_UDP_SRC_MASK={0x6}, @TCA_FLOWER_KEY_ICMPV6_TYPE={0x5}]}}, @filter_kind_options=@f_route={{0xa}, {0x9c, 0x2, [@TCA_ROUTE4_FROM={0x8}, @TCA_ROUTE4_FROM={0x8}, @TCA_ROUTE4_IIF={0x8}, @TCA_ROUTE4_ACT={0x80, 0x6, [@m_nat={0x7c, 0x0, 0x0, 0x0, {{0x8}, {0x54, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{}, @rand_addr, @loopback}}, @TCA_NAT_PARMS={0x28, 0x1, {{}, @rand_addr, @broadcast}}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x130}}, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x8}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 3.26989084s ago: executing program 0 (id=1458): syz_emit_ethernet(0x6a, &(0x7f0000000000)={@link_local, @link_local, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x2f, 0x0, @private, @multicast1}, {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x4, 0x6558, 0x0, 0x0, [0x0, 0x0]}, {0x0, 0x0, 0x0, 0x0, 0x11}}}}}}, 0x0) 3.079709292s ago: executing program 0 (id=1459): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'ip_vti0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vti={{0x8}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_VTI_LOCAL={0x8, 0x4, @private}, @IFLA_VTI_REMOTE={0x8, 0x5, @multicast1}, @vti_common_policy=[@IFLA_VTI_OKEY={0x8}]]}}}]}, 0x48}}, 0x0) 2.995680337s ago: executing program 0 (id=1460): bpf$MAP_CREATE(0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) inotify_init1(0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x2d) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) getsockopt$IP_VS_SO_GET_DAEMON(0xffffffffffffffff, 0x0, 0x487, 0x0, &(0x7f0000000240)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = syz_open_dev$vim2m(&(0x7f0000000080), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r5, 0xc0145608, &(0x7f00000000c0)={0x2, 0x1, 0x1}) ioctl$vim2m_VIDIOC_STREAMOFF(r5, 0x40045612, &(0x7f0000000000)=0x1) ioctl$vim2m_VIDIOC_QBUF(r5, 0xc058560f, &(0x7f0000000140)=@multiplanar_mmap={0x0, 0x1, 0x4, 0x0, 0x0, {0x0, 0x2710}, {}, 0x0, 0x1, {0x0}}) close(r5) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) 1.567695998s ago: executing program 0 (id=1461): r0 = socket$inet_sctp(0x2, 0x1, 0x84) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000080)={0x0, 0x0, 0x30}, 0xc) sendto$inet(r0, &(0x7f00000000c0)='}', 0x1, 0x0, &(0x7f00000001c0)={0x2, 0x4e22, @local}, 0x10) sendto$inet(r0, &(0x7f0000000280)='p', 0x1, 0x0, 0x0, 0x0) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000040)={0x0, 0x4}, 0x8) sendto$inet(r0, &(0x7f0000000300)="ab", 0x34000, 0x0, &(0x7f0000000380)={0x2, 0x4e22, @local}, 0x10) 1.547674179s ago: executing program 4 (id=1462): syz_init_net_socket$ax25(0x3, 0x2, 0xf0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) prlimit64(0x0, 0x1, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) ioctl$mixer_OSS_GETVERSION(0xffffffffffffffff, 0x80086303, &(0x7f0000000000)) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b8000000190001000000000000000000fc020000000000000000000000000000ff02000000000000000000000000000100000000000000000a"], 0xb8}}, 0x0) sendmsg$nl_xfrm(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="650100001b"], 0x188}}, 0x0) 1.088723159s ago: executing program 5 (id=1463): r0 = syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0285628, &(0x7f0000000080)) 245.091478ms ago: executing program 4 (id=1464): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) r1 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000000)='source', &(0x7f0000000040)='c:::\x00', 0x0) r2 = gettid() fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) readv(r1, &(0x7f0000000100)=[{&(0x7f00000012c0)=""/141, 0x8d}], 0x1) fsmount(r1, 0x0, 0x0) tkill(r2, 0xb) 106.901156ms ago: executing program 0 (id=1465): r0 = syz_io_uring_setup(0x6908, &(0x7f0000000340), &(0x7f0000000140), &(0x7f0000000100)) r1 = io_uring_setup(0x7057, &(0x7f0000000040)) r2 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x0, 0x4002011, r2, 0x0) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0x1a, 0x20000002, r3) 71.231532ms ago: executing program 1 (id=1466): setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0xc9) ioctl$VHOST_VDPA_GET_STATUS(0xffffffffffffffff, 0x8001af71, &(0x7f00000000c0)) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) timer_create(0xfffffff4, 0x0, &(0x7f0000044000)) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000100)) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000002040)={0x8, 0x0, &(0x7f0000002540)=[@acquire], 0x0, 0x0, 0x0}) r4 = dup3(r3, r2, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r5, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000000000)={0x73622a85, 0x1}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000380)={0x4, 0x0, &(0x7f0000000280)=[@register_looper], 0x1, 0x0, &(0x7f00000006c0)='U'}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000480)={0x4c, 0x0, &(0x7f0000000580)=[@acquire, @transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000080)={0x4, &(0x7f00000001c0)=[{0x1, 0x5, 0xfb, 0x1}, {0x400, 0x9, 0x4, 0x8}, {0x9, 0xff, 0x48, 0x78}, {0x7f, 0x40, 0x1, 0x5}]}) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) r6 = syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x201c448, &(0x7f0000000240)=ANY=[@ANYRES64=0x0, @ANYRESHEX, @ANYBLOB="2c6769643cfdcf0b77ac6521230a8e69bd954673aa802f1833d29130aeed4c22f81044f553f456f9bfb5098b2a9e93a548712e8ab98eb09e6416868eb529124b101953e0856f719f3a5ef09399b0", @ANYRESDEC=0xee00, @ANYBLOB="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"], 0x0, 0xa78, &(0x7f0000000540)="$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") name_to_handle_at(r6, &(0x7f0000000080)='./file0\x00', &(0x7f0000000180)=ANY=[], &(0x7f0000000140), 0x0) close(r1) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xb, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="18080000000000000000000013000000180f0000", @ANYRES32=r7, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000b7020000000000007b9af8ff00000000b5090800000000007baaf0ff00000000bf9800000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018280000", @ANYBLOB="0000000000000000b7050000080000004600000076000000bf91000000000000560800000000000085000000850000"], &(0x7f0000000980)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x2b, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) 28.96021ms ago: executing program 3 (id=1467): r0 = epoll_create1(0x0) r1 = syz_open_dev$usbmon(&(0x7f00000000c0), 0x0, 0x0) socket$unix(0x1, 0x5, 0x0) socket$unix(0x1, 0x1, 0x0) write(0xffffffffffffffff, &(0x7f0000004200), 0x0) write$binfmt_elf32(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) ioctl$EXT4_IOC_CHECKPOINT(0xffffffffffffffff, 0xc080661a, 0x0) dup3(r0, r1, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0xa6, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x70, 0x3a, 0xff, @local, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x3, 0xa, "bd3e6d4706598080a80300378927fc503b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af0302"}, {0x0, 0x1, "000000050000000026000400"}]}}}}}}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000100)) r2 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000240)={'vxcan0\x00', 0x0}) connect$can_bcm(0xffffffffffffffff, &(0x7f0000000180), 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@getchain={0x24, 0x11, 0x839, 0x0, 0x0, {0x0, 0x0, 0x0, r3}}, 0x24}}, 0x0) syz_open_dev$usbfs(&(0x7f0000000080), 0x20000007d, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x1e, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x8, 0x9, 0xffffffffffffffff}]}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) 0s ago: executing program 5 (id=1468): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x4a8e42, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000000)=0x200001) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$inet6(0xa, 0x6, 0x0) r4 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r4, &(0x7f000047b000)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r5 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @mcast1, 0x4}, 0x1c) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={{0x14}, [@NFT_MSG_NEWCHAIN={0x2c, 0x5, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_CHAIN_HANDLE={0xc}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x54}}, 0x0) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e0000000800000000001800038014000380"], 0x44}}, 0x0) bind$bt_hci(r1, &(0x7f0000000080), 0x6) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r8, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=ANY=[@ANYBLOB="98030000", @ANYRES16=r9, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r11, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c0900005603330080b0c000ffffffffffff"], 0x398}}, 0x0) sendmsg$NL80211_CMD_DEAUTHENTICATE(r8, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)={0x5c, r9, 0x400, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_SSID={0x4}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_SSID={0xe, 0x34, @random="a86471f57f417456459f"}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x2}, @NL80211_ATTR_IE={0xf, 0x2a, [@dsss={0x3, 0x1, 0x2c}, @mesh_chsw={0x76, 0x6, {0xca, 0xe6, 0x2c, 0x7f}}]}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x40}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000}, 0x4) sendmsg$NL80211_CMD_STOP_NAN(r2, &(0x7f0000000240)={&(0x7f00000000c0), 0xc, &(0x7f0000000200)={&(0x7f0000000100)={0x20, r9, 0x10, 0x70bd25, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x9, 0x40}}}}, ["", "", "", "", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x20004800}, 0x0) ioctl$sock_bt_hci(r1, 0x400448e7, &(0x7f0000000000)) kernel console output (not intermixed with test programs): lave_1 [ 322.552187][ T8445] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 322.593919][ T8445] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 322.614071][ T8626] loop1: detected capacity change from 0 to 40427 [ 322.620999][ T8445] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 322.631496][ T8626] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 322.640710][ T8626] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 322.658637][ T8445] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 322.680901][ T8445] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 322.689959][ T8445] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 322.693257][ T8626] F2FS-fs (loop1): Found nat_bits in checkpoint [ 322.811040][ T8626] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 322.818201][ T8626] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 322.990189][ T8633] netlink: 'syz.1.1045': attribute type 1 has an invalid length. [ 323.292422][ T45] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 323.542110][ T45] usb 2-1: Using ep0 maxpacket: 16 [ 323.612887][ T45] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 323.728040][ T45] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 323.772464][ T45] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 323.812740][ T45] usb 2-1: Manufacturer: syz [ 323.895183][ T45] usb 2-1: config 0 descriptor?? [ 324.010456][ T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 324.042241][ T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 324.333719][ T8453] veth0_vlan: entered promiscuous mode [ 325.491113][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 325.518183][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 325.540028][ T8453] veth1_vlan: entered promiscuous mode [ 325.577422][ T2461] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 325.597496][ T2461] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 325.662809][ T2461] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 325.700336][ T9] usb 2-1: USB disconnect, device number 13 [ 325.700832][ T2461] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 325.834921][ T8453] veth0_macvtap: entered promiscuous mode [ 325.924663][ T8453] veth1_macvtap: entered promiscuous mode [ 325.945044][ T8455] veth0_vlan: entered promiscuous mode [ 326.000960][ T8455] veth1_vlan: entered promiscuous mode [ 326.024918][ T8641] loop3: detected capacity change from 0 to 16 [ 326.094203][ T8641] erofs: (device loop3): mounted with root inode @ nid 36. [ 326.336950][ T8453] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 326.359799][ T8453] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 326.373249][ T8453] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 326.458665][ T8453] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 326.468988][ T8453] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 326.479736][ T8453] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 326.489727][ T8453] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 326.507434][ T8453] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 326.521874][ T8453] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 326.543214][ T8453] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 326.554856][ T8453] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 326.565534][ T8453] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 326.584377][ T8453] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 326.606298][ T8453] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 326.621957][ T8453] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 326.646732][ T8453] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 326.667591][ T8453] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 326.677732][ T8453] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 326.688524][ T8453] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 326.700147][ T8453] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 326.711177][ T8453] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 326.731338][ T8453] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 326.742008][ T8453] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 326.750795][ T8650] loop0: detected capacity change from 0 to 4096 [ 326.766872][ T8453] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 326.777087][ T8650] ntfs3: loop0: Different NTFS sector size (4096) and media sector size (512). [ 326.787628][ T8453] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 326.817279][ T8650] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 326.823536][ T8453] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 326.825042][ T8650] ntfs3: loop0: ino=3, ntfs_set_state failed, -22. [ 326.850656][ T8641] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1011'. [ 326.944298][ T8650] ntfs3: loop0: ino=1e, "file1" attr_set_size [ 326.944918][ T8455] veth0_macvtap: entered promiscuous mode [ 326.980601][ T8453] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 326.998949][ T8453] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 327.025383][ T8453] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 327.034719][ T8453] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 327.080212][ T8455] veth1_macvtap: entered promiscuous mode [ 327.104848][ T35] ntfs3: loop0: ino=3, ntfs3_write_inode failed, -22. [ 327.328252][ T8455] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 327.381865][ T8455] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 327.391738][ T8455] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 327.427536][ T8455] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 327.451751][ T8455] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 327.478518][ T8455] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 327.500322][ T8660] loop0: detected capacity change from 0 to 128 [ 327.512167][ T8455] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 327.564821][ T8660] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 327.573280][ T8455] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 327.595207][ T8660] ext4 filesystem being mounted at /3/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 327.611978][ T8455] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 327.640039][ T8455] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 327.680347][ T29] audit: type=1326 audit(1720553644.274:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8665 comm="syz.2.1053" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f458dd75bd9 code=0x0 [ 327.692020][ T8455] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 327.712975][ T8455] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 327.727709][ T8455] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 327.742091][ T8455] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 327.765565][ T8455] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 327.816350][ T8455] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 327.835264][ T8455] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 327.845893][ T8455] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 327.860142][ T8455] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 327.877749][ T8455] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 327.894508][ T8455] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 327.911902][ T8455] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 327.931923][ T8455] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 327.947458][ T8455] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 327.960523][ T8455] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 327.971148][ T8455] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 327.983356][ T8455] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 327.993478][ T8455] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 328.004196][ T8455] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 328.020252][ T8445] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 328.036658][ T8455] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 328.088530][ T8455] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 328.115161][ T8455] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 328.137554][ T8455] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 328.158174][ T8455] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 328.248730][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 328.260112][ T8680] loop3: detected capacity change from 0 to 16 [ 328.281348][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 328.320329][ T8680] erofs: (device loop3): mounted with root inode @ nid 36. [ 328.432065][ T8680] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1059'. [ 328.502870][ T8679] xt_TCPMSS: Only works on TCP SYN packets [ 328.522310][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 328.530242][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 328.792278][ T2461] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 328.800163][ T2461] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 328.878828][ T8687] loop3: detected capacity change from 0 to 1024 [ 328.940639][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 328.958875][ T8687] hfsplus: unable to parse mount options [ 328.990769][ T8672] loop1: detected capacity change from 0 to 40427 [ 329.010072][ T8672] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 329.016647][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 329.018178][ T8672] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 329.094093][ T8687] loop3: detected capacity change from 0 to 128 [ 329.141362][ T8672] F2FS-fs (loop1): Found nat_bits in checkpoint [ 329.149459][ T8687] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 329.208156][ T8687] UDF-fs: error (device loop3): udf_process_sequence: Primary Volume Descriptor not found! [ 329.261511][ T8687] UDF-fs: error (device loop3): udf_process_sequence: Primary Volume Descriptor not found! [ 329.300202][ T8687] UDF-fs: Scanning with blocksize 512 failed [ 329.336410][ T8687] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 329.554754][ T8687] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=512, location=512 [ 329.655725][ T8687] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found [ 329.671652][ T8672] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 329.693868][ T8687] UDF-fs: Scanning with blocksize 1024 failed [ 329.713565][ T8672] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 329.745996][ T8687] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 329.814315][ T8687] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=512, location=512 [ 343.023625][ T5100] Bluetooth: hci6: Controller not accepting commands anymore: ncmd = 0 [ 343.036456][ T5100] Bluetooth: hci6: Injecting HCI hardware error event [ 343.048000][ T5100] Bluetooth: hci6: hardware error 0x00 [ 343.052048][ T8687] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found [ 343.127588][ T8687] UDF-fs: Scanning with blocksize 2048 failed [ 343.324034][ T8687] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 343.632573][ T8687] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=512, location=512 [ 343.674117][ T8687] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found [ 343.803271][ T8687] UDF-fs: Scanning with blocksize 4096 failed [ 343.809393][ T8687] UDF-fs: warning (device loop3): udf_fill_super: No partition found (1) [ 345.036438][ T53] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 345.056707][ T53] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 345.093654][ T5107] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 345.105120][ T5107] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 345.117958][ T5107] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 345.125643][ T5107] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 345.253088][ T5108] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 345.292214][ T5108] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 345.302425][ T5108] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 345.312614][ T5106] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 345.314668][ T5108] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 345.338331][ T5106] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 345.353031][ T5106] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 345.360493][ T5106] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 345.373436][ T53] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 345.420143][ T5107] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 345.448036][ T5107] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 345.462260][ T5107] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 345.516335][ T5100] Bluetooth: hci6: Opcode 0x0c03 failed: -110 [ 345.533182][ T5100] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 345.554571][ T5100] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 345.565367][ T5100] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 345.633017][ T5100] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 345.683510][ T5100] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 345.703517][ T5100] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 345.725918][ T5100] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 345.811122][ T5100] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 345.823084][ T5100] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 345.869510][ T5100] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 345.878607][ T5100] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 345.893986][ T5100] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 345.916274][ T5100] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 345.936848][ T5106] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 345.972203][ T5106] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 345.980621][ T5106] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 345.990611][ T5106] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 345.999547][ T5106] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 346.606812][ T2461] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 346.810659][ T2461] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 346.974364][ T2461] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 347.124138][ T2461] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 347.423055][ T5106] Bluetooth: hci3: command tx timeout [ 347.429463][ T5106] Bluetooth: hci2: command tx timeout [ 347.478949][ T8713] chnl_net:caif_netlink_parms(): no params data found [ 347.583973][ T5106] Bluetooth: hci8: command tx timeout [ 347.648316][ T2461] bridge_slave_1: left allmulticast mode [ 347.654937][ T2461] bridge_slave_1: left promiscuous mode [ 347.660682][ T2461] bridge0: port 2(bridge_slave_1) entered disabled state [ 347.671347][ T2461] bridge_slave_0: left allmulticast mode [ 347.677419][ T2461] bridge_slave_0: left promiscuous mode [ 347.683338][ T2461] bridge0: port 1(bridge_slave_0) entered disabled state [ 347.825178][ T5106] Bluetooth: hci0: command tx timeout [ 347.992585][ T5106] Bluetooth: hci4: command tx timeout [ 348.062391][ T5106] Bluetooth: hci6: command tx timeout [ 348.345699][ T2461] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 348.361066][ T2461] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 348.380185][ T2461] bond0 (unregistering): Released all slaves [ 348.930152][ T8713] bridge0: port 1(bridge_slave_0) entered blocking state [ 348.941000][ T8713] bridge0: port 1(bridge_slave_0) entered disabled state [ 348.951174][ T8713] bridge_slave_0: entered allmulticast mode [ 348.960223][ T8713] bridge_slave_0: entered promiscuous mode [ 349.046801][ T8713] bridge0: port 2(bridge_slave_1) entered blocking state [ 349.061110][ T8713] bridge0: port 2(bridge_slave_1) entered disabled state [ 349.072378][ T8713] bridge_slave_1: entered allmulticast mode [ 349.080325][ T8713] bridge_slave_1: entered promiscuous mode [ 349.171916][ T8717] chnl_net:caif_netlink_parms(): no params data found [ 349.199199][ T8723] chnl_net:caif_netlink_parms(): no params data found [ 349.284538][ T8713] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 349.310886][ T2461] hsr_slave_0: left promiscuous mode [ 349.319261][ T2461] hsr_slave_1: left promiscuous mode [ 349.338699][ T2461] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 349.347184][ T2461] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 349.362874][ T2461] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 349.370343][ T2461] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 349.396116][ T2461] veth1_macvtap: left promiscuous mode [ 349.401668][ T2461] veth0_macvtap: left promiscuous mode [ 349.407647][ T2461] veth1_vlan: left promiscuous mode [ 349.413120][ T2461] veth0_vlan: left promiscuous mode [ 349.508949][ T5106] Bluetooth: hci2: command tx timeout [ 349.508970][ T5107] Bluetooth: hci3: command tx timeout [ 349.662176][ T5107] Bluetooth: hci8: command tx timeout [ 349.907118][ T5107] Bluetooth: hci0: command tx timeout [ 350.067911][ T5107] Bluetooth: hci4: command tx timeout [ 350.143272][ T5107] Bluetooth: hci6: command tx timeout [ 350.234476][ T2461] team0 (unregistering): Port device team_slave_1 removed [ 350.291409][ T2461] team0 (unregistering): Port device team_slave_0 removed [ 350.879296][ T8719] chnl_net:caif_netlink_parms(): no params data found [ 350.911487][ T8715] chnl_net:caif_netlink_parms(): no params data found [ 350.928037][ T8713] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 351.260852][ T8713] team0: Port device team_slave_0 added [ 351.285477][ T8713] team0: Port device team_slave_1 added [ 351.292283][ T8721] chnl_net:caif_netlink_parms(): no params data found [ 351.468592][ T8717] bridge0: port 1(bridge_slave_0) entered blocking state [ 351.476633][ T8717] bridge0: port 1(bridge_slave_0) entered disabled state [ 351.487460][ T8717] bridge_slave_0: entered allmulticast mode [ 351.495631][ T8717] bridge_slave_0: entered promiscuous mode [ 351.543119][ T8713] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 351.550119][ T8713] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 351.583140][ T5107] Bluetooth: hci2: command tx timeout [ 351.585768][ T5106] Bluetooth: hci3: command tx timeout [ 351.600295][ T8713] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 351.654198][ T8717] bridge0: port 2(bridge_slave_1) entered blocking state [ 351.661439][ T8717] bridge0: port 2(bridge_slave_1) entered disabled state [ 351.669978][ T8717] bridge_slave_1: entered allmulticast mode [ 351.677846][ T8717] bridge_slave_1: entered promiscuous mode [ 351.730370][ T8713] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 351.737952][ T8713] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 351.765487][ T8713] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 351.776642][ T5106] Bluetooth: hci8: command tx timeout [ 351.826236][ T8723] bridge0: port 1(bridge_slave_0) entered blocking state [ 351.835644][ T8723] bridge0: port 1(bridge_slave_0) entered disabled state [ 351.845032][ T8723] bridge_slave_0: entered allmulticast mode [ 351.853254][ T8723] bridge_slave_0: entered promiscuous mode [ 351.862888][ T8723] bridge0: port 2(bridge_slave_1) entered blocking state [ 351.870052][ T8723] bridge0: port 2(bridge_slave_1) entered disabled state [ 351.878706][ T8723] bridge_slave_1: entered allmulticast mode [ 351.892295][ T8723] bridge_slave_1: entered promiscuous mode [ 351.899405][ T8719] bridge0: port 1(bridge_slave_0) entered blocking state [ 351.907577][ T8719] bridge0: port 1(bridge_slave_0) entered disabled state [ 351.915289][ T8719] bridge_slave_0: entered allmulticast mode [ 351.924939][ T8719] bridge_slave_0: entered promiscuous mode [ 351.934493][ T8719] bridge0: port 2(bridge_slave_1) entered blocking state [ 351.941707][ T8719] bridge0: port 2(bridge_slave_1) entered disabled state [ 351.952366][ T8719] bridge_slave_1: entered allmulticast mode [ 351.960185][ T8719] bridge_slave_1: entered promiscuous mode [ 351.986036][ T5106] Bluetooth: hci0: command tx timeout [ 352.017715][ T8715] bridge0: port 1(bridge_slave_0) entered blocking state [ 352.025561][ T8715] bridge0: port 1(bridge_slave_0) entered disabled state [ 352.034293][ T8715] bridge_slave_0: entered allmulticast mode [ 352.043372][ T8715] bridge_slave_0: entered promiscuous mode [ 352.142085][ T5106] Bluetooth: hci4: command tx timeout [ 352.170492][ T8717] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 352.184347][ T8717] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 352.214424][ T8715] bridge0: port 2(bridge_slave_1) entered blocking state [ 352.221604][ T8715] bridge0: port 2(bridge_slave_1) entered disabled state [ 352.231867][ T5106] Bluetooth: hci6: command tx timeout [ 352.232346][ T8715] bridge_slave_1: entered allmulticast mode [ 352.245963][ T8715] bridge_slave_1: entered promiscuous mode [ 352.308550][ T8723] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 352.336438][ T8723] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 352.386203][ T8719] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 352.439822][ T8715] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 352.455125][ T8715] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 352.539084][ T8719] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 352.562139][ T8717] team0: Port device team_slave_0 added [ 352.595498][ T8713] hsr_slave_0: entered promiscuous mode [ 352.602767][ T8713] hsr_slave_1: entered promiscuous mode [ 352.612946][ T8713] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 352.620530][ T8713] Cannot create hsr debugfs directory [ 352.668707][ T8721] bridge0: port 1(bridge_slave_0) entered blocking state [ 352.682248][ T8721] bridge0: port 1(bridge_slave_0) entered disabled state [ 352.689564][ T8721] bridge_slave_0: entered allmulticast mode [ 352.697541][ T8721] bridge_slave_0: entered promiscuous mode [ 352.784860][ T8717] team0: Port device team_slave_1 added [ 352.800306][ T8719] team0: Port device team_slave_0 added [ 352.835713][ T8715] team0: Port device team_slave_0 added [ 352.854476][ T8715] team0: Port device team_slave_1 added [ 352.860719][ T8721] bridge0: port 2(bridge_slave_1) entered blocking state [ 352.869695][ T8721] bridge0: port 2(bridge_slave_1) entered disabled state [ 352.877182][ T8721] bridge_slave_1: entered allmulticast mode [ 352.886087][ T8721] bridge_slave_1: entered promiscuous mode [ 352.904101][ T8723] team0: Port device team_slave_0 added [ 352.970546][ T8719] team0: Port device team_slave_1 added [ 353.036439][ T8723] team0: Port device team_slave_1 added [ 353.137230][ T8715] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 353.144837][ T8715] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 353.171753][ T8715] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 353.231729][ T8717] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 353.238899][ T8717] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 353.265182][ T8717] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 353.349943][ T8715] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 353.357151][ T8715] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 353.383312][ T8715] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 353.508129][ T8723] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 353.516961][ T8723] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 353.545981][ T8723] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 353.565086][ T8721] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 353.579501][ T8721] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 353.589657][ T8717] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 353.597180][ T8717] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 353.623478][ T8717] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 353.669874][ T5106] Bluetooth: hci2: command tx timeout [ 353.673472][ T5107] Bluetooth: hci3: command tx timeout [ 353.699953][ T2461] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 353.734438][ T8719] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 353.741573][ T8719] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 353.779164][ T8719] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 353.799952][ T8723] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 353.807118][ T8723] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 353.837620][ T8723] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 353.848196][ T5107] Bluetooth: hci8: command tx timeout [ 353.931069][ T2461] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 353.952945][ T8719] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 353.959910][ T8719] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 353.986958][ T8719] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 354.062665][ T5107] Bluetooth: hci0: command tx timeout [ 354.136470][ T2461] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 354.205150][ T8721] team0: Port device team_slave_0 added [ 354.222843][ T5107] Bluetooth: hci4: command tx timeout [ 354.285171][ T8715] hsr_slave_0: entered promiscuous mode [ 354.291794][ T8715] hsr_slave_1: entered promiscuous mode [ 354.302136][ T5107] Bluetooth: hci6: command tx timeout [ 354.310835][ T8715] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 354.323317][ T8715] Cannot create hsr debugfs directory [ 354.337036][ T8723] hsr_slave_0: entered promiscuous mode [ 354.352412][ T8723] hsr_slave_1: entered promiscuous mode [ 354.368858][ T8723] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 354.376669][ T8723] Cannot create hsr debugfs directory [ 354.408864][ T2461] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 354.428897][ T8721] team0: Port device team_slave_1 added [ 354.488473][ T8717] hsr_slave_0: entered promiscuous mode [ 354.496254][ T8717] hsr_slave_1: entered promiscuous mode [ 354.503461][ T8717] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 354.511047][ T8717] Cannot create hsr debugfs directory [ 354.570562][ T8719] hsr_slave_0: entered promiscuous mode [ 354.580196][ T8719] hsr_slave_1: entered promiscuous mode [ 354.587017][ T8719] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 354.596143][ T8719] Cannot create hsr debugfs directory [ 354.779681][ T8721] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 354.789576][ T8721] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 354.816305][ T8721] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 354.830580][ T8721] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 354.837756][ T8721] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 354.866870][ T8721] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 355.243016][ T8721] hsr_slave_0: entered promiscuous mode [ 355.249997][ T8721] hsr_slave_1: entered promiscuous mode [ 355.259955][ T8721] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 355.270487][ T8721] Cannot create hsr debugfs directory [ 355.617213][ T2461] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 355.808900][ T2461] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 355.917628][ T2461] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 356.032528][ T2461] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 356.213457][ T8715] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 356.237887][ T8713] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 356.250027][ T8713] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 356.340162][ T8715] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 356.356350][ T8713] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 356.370060][ T8713] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 356.450225][ T8715] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 356.564716][ T2461] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 356.608911][ T8715] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 356.678976][ T2461] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 356.790721][ T2461] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 356.840961][ T8713] 8021q: adding VLAN 0 to HW filter on device bond0 [ 356.871731][ T8713] 8021q: adding VLAN 0 to HW filter on device team0 [ 356.900487][ T2461] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 356.934937][ T58] bridge0: port 1(bridge_slave_0) entered blocking state [ 356.942165][ T58] bridge0: port 1(bridge_slave_0) entered forwarding state [ 356.977615][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 356.984960][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 357.028037][ T8713] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 357.039438][ T8713] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 357.296406][ T2461] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 357.412174][ T2461] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 357.470558][ T8713] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 357.512464][ T2461] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 357.628193][ T2461] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 357.701119][ T8713] veth0_vlan: entered promiscuous mode [ 357.741425][ T8713] veth1_vlan: entered promiscuous mode [ 357.805584][ T8713] veth0_macvtap: entered promiscuous mode [ 357.845913][ T8713] veth1_macvtap: entered promiscuous mode [ 357.913225][ T2461] bridge_slave_1: left allmulticast mode [ 357.918920][ T2461] bridge_slave_1: left promiscuous mode [ 357.932529][ T2461] bridge0: port 2(bridge_slave_1) entered disabled state [ 357.948234][ T2461] bridge_slave_0: left allmulticast mode [ 357.954156][ T2461] bridge_slave_0: left promiscuous mode [ 357.960004][ T2461] bridge0: port 1(bridge_slave_0) entered disabled state [ 357.975820][ T2461] bridge_slave_1: left allmulticast mode [ 357.981456][ T2461] bridge_slave_1: left promiscuous mode [ 358.000408][ T2461] bridge0: port 2(bridge_slave_1) entered disabled state [ 358.014332][ T2461] bridge_slave_0: left allmulticast mode [ 358.019973][ T2461] bridge_slave_0: left promiscuous mode [ 358.034066][ T2461] bridge0: port 1(bridge_slave_0) entered disabled state [ 358.046013][ T2461] bridge_slave_1: left allmulticast mode [ 358.051668][ T2461] bridge_slave_1: left promiscuous mode [ 358.057970][ T2461] bridge0: port 2(bridge_slave_1) entered disabled state [ 358.071665][ T2461] bridge_slave_0: left allmulticast mode [ 358.077981][ T2461] bridge_slave_0: left promiscuous mode [ 358.084060][ T2461] bridge0: port 1(bridge_slave_0) entered disabled state [ 358.098294][ T2461] bridge_slave_1: left allmulticast mode [ 358.109154][ T2461] bridge_slave_1: left promiscuous mode [ 358.114992][ T2461] bridge0: port 2(bridge_slave_1) entered disabled state [ 358.127945][ T2461] bridge_slave_0: left allmulticast mode [ 358.136487][ T2461] bridge_slave_0: left promiscuous mode [ 358.142896][ T2461] bridge0: port 1(bridge_slave_0) entered disabled state [ 358.157180][ T2461] bridge_slave_1: left allmulticast mode [ 358.164445][ T2461] bridge_slave_1: left promiscuous mode [ 358.170167][ T2461] bridge0: port 2(bridge_slave_1) entered disabled state [ 358.181346][ T2461] bridge_slave_0: left allmulticast mode [ 358.187711][ T2461] bridge_slave_0: left promiscuous mode [ 358.193560][ T2461] bridge0: port 1(bridge_slave_0) entered disabled state [ 360.251800][ T2461] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 360.268592][ T2461] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 360.286032][ T2461] bond0 (unregistering): Released all slaves [ 360.439927][ T2461] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 360.460942][ T2461] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 360.486834][ T2461] bond0 (unregistering): Released all slaves [ 360.666245][ T2461] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 360.678681][ T2461] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 360.699672][ T2461] bond0 (unregistering): Released all slaves [ 360.841767][ T2461] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 360.856076][ T2461] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 360.869716][ T2461] bond0 (unregistering): Released all slaves [ 361.059120][ T2461] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 361.082737][ T2461] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 361.107718][ T2461] bond0 (unregistering): Released all slaves [ 361.123181][ T8713] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 361.143767][ T8713] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 361.154045][ T8713] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 361.164792][ T8713] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 361.174674][ T8713] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 361.185803][ T8713] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 361.195784][ T8713] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 361.208341][ T8713] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 361.218201][ T8713] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 361.228715][ T8713] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 361.238561][ T8713] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 361.249059][ T8713] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 361.259003][ T8713] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 361.269935][ T8713] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 361.282641][ T8713] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 361.356921][ T8713] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 361.372847][ T8713] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 361.385369][ T8713] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 361.396648][ T8713] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 361.408027][ T8713] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 361.421252][ T8713] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 361.431595][ T8713] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 361.442225][ T8713] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 361.452408][ T8713] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 361.462953][ T8713] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 361.472992][ T8713] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 361.483527][ T8713] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 361.493404][ T8713] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 361.504373][ T8713] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 361.537563][ T8713] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 361.567328][ T8713] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 361.576372][ T8713] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 361.587253][ T8713] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 361.596111][ T8713] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 362.056529][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 362.075533][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 362.092100][ T8719] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 362.196679][ T8719] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 362.209930][ T8719] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 362.260964][ T8719] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 362.262150][ T2415] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 362.275827][ T2415] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 362.632899][ T8768] loop0: detected capacity change from 0 to 16 [ 362.648096][ T8768] erofs: (device loop0): mounted with root inode @ nid 36. [ 362.702384][ T8768] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1072'. [ 362.930436][ T8771] loop0: detected capacity change from 0 to 1024 [ 363.188661][ T8723] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 363.209174][ T8723] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 364.687715][ T8723] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 364.715814][ T8723] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 365.076247][ T8719] 8021q: adding VLAN 0 to HW filter on device bond0 [ 365.200009][ T8719] 8021q: adding VLAN 0 to HW filter on device team0 [ 365.375691][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 365.382967][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 365.471750][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 365.478988][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 365.625538][ T8784] QAT: failed to copy from user cfg_data. [ 365.702901][ T2461] hsr_slave_0: left promiscuous mode [ 365.747373][ T2461] hsr_slave_1: left promiscuous mode [ 365.763500][ T2461] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 365.770939][ T2461] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 365.783209][ T2461] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 365.790659][ T2461] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 365.819971][ T2461] hsr_slave_0: left promiscuous mode [ 365.828060][ T2461] hsr_slave_1: left promiscuous mode [ 365.857796][ T2461] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 365.866586][ T2461] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 365.884037][ T2461] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 365.891449][ T2461] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 365.926746][ T2461] hsr_slave_0: left promiscuous mode [ 365.942966][ T2461] hsr_slave_1: left promiscuous mode [ 365.949072][ T2461] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 365.956613][ T2461] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 365.973344][ T2461] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 365.980777][ T2461] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 365.997537][ T2461] hsr_slave_0: left promiscuous mode [ 366.005620][ T2461] hsr_slave_1: left promiscuous mode [ 366.011741][ T2461] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 366.021399][ T2461] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 366.030464][ T2461] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 366.038979][ T2461] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 366.051707][ T2461] hsr_slave_0: left promiscuous mode [ 366.058692][ T2461] hsr_slave_1: left promiscuous mode [ 366.068275][ T2461] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 366.075887][ T2461] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 366.085421][ T2461] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 366.093640][ T2461] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 366.199472][ T2461] veth1_macvtap: left promiscuous mode [ 366.205087][ T2461] veth0_macvtap: left promiscuous mode [ 366.210705][ T2461] veth1_vlan: left promiscuous mode [ 366.216343][ T2461] veth0_vlan: left promiscuous mode [ 366.227326][ T2461] veth1_macvtap: left promiscuous mode [ 366.233214][ T2461] veth0_macvtap: left promiscuous mode [ 366.238845][ T2461] veth1_vlan: left promiscuous mode [ 366.245025][ T2461] veth0_vlan: left promiscuous mode [ 366.254344][ T2461] veth1_macvtap: left promiscuous mode [ 366.259905][ T2461] veth0_macvtap: left promiscuous mode [ 366.266025][ T2461] veth1_vlan: left promiscuous mode [ 366.271338][ T2461] veth0_vlan: left promiscuous mode [ 366.278228][ T2461] veth1_macvtap: left promiscuous mode [ 366.283891][ T2461] veth0_macvtap: left promiscuous mode [ 366.289592][ T2461] veth1_vlan: left promiscuous mode [ 366.295228][ T2461] veth0_vlan: left promiscuous mode [ 366.302498][ T2461] veth1_macvtap: left promiscuous mode [ 366.308176][ T2461] veth0_macvtap: left promiscuous mode [ 366.314156][ T2461] veth1_vlan: left promiscuous mode [ 366.319487][ T2461] veth0_vlan: left promiscuous mode [ 366.782785][ T5107] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 366.794998][ T5107] Bluetooth: hci2: Injecting HCI hardware error event [ 366.805071][ T5107] Bluetooth: hci2: hardware error 0x00 [ 367.745485][ T2461] team0 (unregistering): Port device team_slave_1 removed [ 367.804793][ T2461] team0 (unregistering): Port device team_slave_0 removed [ 368.862833][ T5107] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 368.937480][ T2461] team0 (unregistering): Port device team_slave_1 removed [ 369.000215][ T2461] team0 (unregistering): Port device team_slave_0 removed [ 370.085237][ T2461] team0 (unregistering): Port device team_slave_1 removed [ 370.139924][ T2461] team0 (unregistering): Port device team_slave_0 removed [ 371.388702][ T2461] team0 (unregistering): Port device team_slave_1 removed [ 371.460058][ T2461] team0 (unregistering): Port device team_slave_0 removed [ 372.517339][ T2461] team0 (unregistering): Port device team_slave_1 removed [ 372.573319][ T2461] team0 (unregistering): Port device team_slave_0 removed [ 373.364994][ T8723] 8021q: adding VLAN 0 to HW filter on device bond0 [ 373.399453][ T8719] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 373.502868][ T8723] 8021q: adding VLAN 0 to HW filter on device team0 [ 373.604024][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 373.611241][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 373.647078][ T5199] bridge0: port 2(bridge_slave_1) entered blocking state [ 373.654307][ T5199] bridge0: port 2(bridge_slave_1) entered forwarding state [ 373.889517][ T8715] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 373.918593][ T8715] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 373.997099][ T8715] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 374.052894][ T8715] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 374.124716][ T8719] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 374.665365][ T8717] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 374.704342][ T8717] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 374.762184][ T8717] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 374.816488][ T8717] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 375.105735][ T8719] veth0_vlan: entered promiscuous mode [ 375.269247][ T8719] veth1_vlan: entered promiscuous mode [ 375.293790][ T8723] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 375.365319][ T8721] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 375.393541][ T8721] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 375.419957][ T8721] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 375.506581][ T8715] 8021q: adding VLAN 0 to HW filter on device bond0 [ 375.518499][ T8721] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 375.527223][ T8816] loop0: detected capacity change from 0 to 512 [ 375.611395][ T8816] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 375.616741][ T8715] 8021q: adding VLAN 0 to HW filter on device team0 [ 375.639104][ T8816] ext4 filesystem being mounted at /14/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 375.739871][ T5149] bridge0: port 1(bridge_slave_0) entered blocking state [ 375.747110][ T5149] bridge0: port 1(bridge_slave_0) entered forwarding state [ 375.796287][ T5149] bridge0: port 2(bridge_slave_1) entered blocking state [ 375.803526][ T5149] bridge0: port 2(bridge_slave_1) entered forwarding state [ 375.916124][ T8719] veth0_macvtap: entered promiscuous mode [ 375.966561][ T8717] 8021q: adding VLAN 0 to HW filter on device bond0 [ 376.013413][ T8719] veth1_macvtap: entered promiscuous mode [ 376.137949][ T8713] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 376.150861][ T8719] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 376.163198][ T8719] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 376.174038][ T8719] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 376.184918][ T8719] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 376.195091][ T8719] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 376.209728][ T8719] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 376.221763][ T8719] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 376.261480][ T8717] 8021q: adding VLAN 0 to HW filter on device team0 [ 376.289940][ T8719] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 376.305276][ T8719] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 376.324551][ T8719] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 376.335129][ T8719] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 376.345270][ T8719] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 376.355759][ T8719] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 376.370547][ T8719] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 376.417096][ T8719] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 376.437146][ T8719] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 376.462379][ T8719] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 376.475332][ T8719] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 376.548523][ T8715] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 376.581255][ T5156] bridge0: port 1(bridge_slave_0) entered blocking state [ 376.588553][ T5156] bridge0: port 1(bridge_slave_0) entered forwarding state [ 376.643318][ T5149] bridge0: port 2(bridge_slave_1) entered blocking state [ 376.650514][ T5149] bridge0: port 2(bridge_slave_1) entered forwarding state [ 376.766885][ T8723] veth0_vlan: entered promiscuous mode [ 377.086437][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 377.140105][ T8723] veth1_vlan: entered promiscuous mode [ 377.149864][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 377.198011][ T8721] 8021q: adding VLAN 0 to HW filter on device bond0 [ 377.291022][ T2446] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 377.320278][ T2446] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 377.347403][ T8721] 8021q: adding VLAN 0 to HW filter on device team0 [ 377.447318][ T5149] bridge0: port 1(bridge_slave_0) entered blocking state [ 377.454579][ T5149] bridge0: port 1(bridge_slave_0) entered forwarding state [ 377.524751][ T8715] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 377.551874][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 377.559065][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 377.656085][ T8723] veth0_macvtap: entered promiscuous mode [ 377.750436][ T29] audit: type=1800 audit(1720553694.354:74): pid=8854 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1092" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 377.810676][ T8723] veth1_macvtap: entered promiscuous mode [ 377.910370][ T8723] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 377.926402][ T8723] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 377.938764][ T8723] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 377.954984][ T8723] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 377.977644][ T8723] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 377.990678][ T8723] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 378.001435][ T8723] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 378.015440][ T8723] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 378.027873][ T8723] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 378.063469][ T8723] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 378.079965][ T8723] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 378.097384][ T8723] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 378.124304][ T8723] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 378.142635][ T8723] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 378.161036][ T8723] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 378.200372][ T8723] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 378.218826][ T8723] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 378.233788][ T1233] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.233922][ T1233] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.259158][ T8869] loop0: detected capacity change from 0 to 512 [ 378.267067][ T8723] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 378.273444][ T8869] EXT4-fs: Ignoring removed nobh option [ 378.293563][ T8717] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 378.317180][ T8723] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 378.326706][ T8723] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 378.357536][ T8869] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 378.370683][ T8877] loop3: detected capacity change from 0 to 64 [ 378.381866][ T8723] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 378.390579][ T8723] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 378.410608][ T8869] ext4 filesystem being mounted at /25/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 378.636585][ T8713] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 378.714043][ T8715] veth0_vlan: entered promiscuous mode [ 378.747786][ T2415] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 378.773433][ T2415] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 378.796050][ T8717] veth0_vlan: entered promiscuous mode [ 378.856599][ T8715] veth1_vlan: entered promiscuous mode [ 378.921789][ T8717] veth1_vlan: entered promiscuous mode [ 378.981355][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 379.022982][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 379.069748][ T8715] veth0_macvtap: entered promiscuous mode [ 379.096563][ T8721] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 379.199735][ T8715] veth1_macvtap: entered promiscuous mode [ 379.269690][ T8715] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 379.325292][ T8715] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 379.361882][ T8715] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 379.387021][ T8715] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 379.412704][ T8715] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 379.423019][ T8897] program syz.3.1105 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 379.431871][ T8715] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 379.455916][ T8715] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 379.476730][ T8715] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 379.477269][ T8899] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 379.496784][ T8715] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 379.532385][ T8715] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 379.590193][ T8715] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 379.654357][ T8715] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 379.721942][ T8715] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 379.761890][ T8715] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 379.778094][ T8885] loop0: detected capacity change from 0 to 32768 [ 379.796166][ T8715] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 379.832172][ T8715] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 379.839776][ T8885] read_mapping_page failed! [ 379.860387][ T8715] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 379.860741][ T8885] ERROR: (device loop0): txCommit: [ 379.860741][ T8885] [ 379.887958][ T8715] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 379.899765][ T8885] ERROR: (device loop0): remounting filesystem as read-only [ 379.919617][ T8715] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 379.930137][ T8905] CIFS mount error: No usable UNC path provided in device string! [ 379.930137][ T8905] [ 379.950391][ T8715] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 379.962028][ T8905] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 379.971249][ T8715] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 380.003290][ T8715] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 380.028713][ T8906] loop0: detected capacity change from 32768 to 0 [ 380.054711][ T8715] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 380.091894][ T8715] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 380.111879][ T8715] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 380.120713][ T8715] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 380.172999][ T8713] syz-executor: attempt to access beyond end of device [ 380.172999][ T8713] loop0: rw=1, sector=256, nr_sectors = 8 limit=0 [ 380.184085][ T8717] veth0_macvtap: entered promiscuous mode [ 380.225207][ T8717] veth1_macvtap: entered promiscuous mode [ 380.245947][ T8713] metapage_write_end_io: I/O error [ 380.272763][ T8713] syz-executor: attempt to access beyond end of device [ 380.272763][ T8713] loop0: rw=0, sector=104, nr_sectors = 8 limit=0 [ 380.304723][ T8713] metapage_read_end_io: I/O error [ 380.309841][ T8713] read_mapping_page failed! [ 380.315145][ T8713] diWriteSpecial: failed to read aggregate inode extent! [ 380.341214][ T8713] syz-executor: attempt to access beyond end of device [ 380.341214][ T8713] loop0: rw=1, sector=72, nr_sectors = 8 limit=0 [ 380.406595][ T8713] metapage_write_end_io: I/O error [ 380.413351][ T8713] syz-executor: attempt to access beyond end of device [ 380.413351][ T8713] loop0: rw=0, sector=88, nr_sectors = 8 limit=0 [ 380.437480][ T8713] metapage_read_end_io: I/O error [ 380.446845][ T8713] read_mapping_page failed! [ 380.448100][ T8717] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 380.451415][ T8713] diWriteSpecial: failed to read aggregate inode extent! [ 380.474763][ T8713] syz-executor: attempt to access beyond end of device [ 380.474763][ T8713] loop0: rw=1, sector=128, nr_sectors = 8 limit=0 [ 380.488084][ T8713] metapage_write_end_io: I/O error [ 380.494722][ T8713] syz-executor: attempt to access beyond end of device [ 380.494722][ T8713] loop0: rw=0, sector=88, nr_sectors = 8 limit=0 [ 380.507984][ T8717] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 380.517890][ T8713] metapage_read_end_io: I/O error [ 380.523883][ T8717] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 380.535217][ T8713] read_mapping_page failed! [ 380.539832][ T8713] diWriteSpecial: failed to read aggregate inode extent! [ 380.548084][ T8717] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 380.558325][ T8713] syz-executor: attempt to access beyond end of device [ 380.558325][ T8713] loop0: rw=2049, sector=30744, nr_sectors = 8 limit=0 [ 380.574557][ T8717] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 380.587602][ T8717] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 380.597880][ T8713] lbmIODone: I/O error in JFS log [ 380.603977][ T8713] syz-executor: attempt to access beyond end of device [ 380.603977][ T8713] loop0: rw=0, sector=30728, nr_sectors = 8 limit=0 [ 380.617484][ T8717] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 380.628901][ T8717] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 380.639663][ T8713] lbmIODone: I/O error in JFS log [ 380.644919][ T8713] syz-executor: attempt to access beyond end of device [ 380.644919][ T8713] loop0: rw=2049, sector=30728, nr_sectors = 8 limit=0 [ 380.658680][ T8717] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 380.670496][ T8713] lbmIODone: I/O error in JFS log [ 380.672773][ T8899] loop3: detected capacity change from 0 to 40427 [ 380.675890][ T8717] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 380.694825][ T8713] lmLogShutdown: exit(-5) [ 380.699257][ T8717] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 380.700084][ T8899] F2FS-fs (loop3): invalid crc value [ 380.712329][ T8713] jfs_umount failed with return code -5 [ 380.723574][ T29] audit: type=1326 audit(1720553697.324:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8904 comm="syz.5.1107" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe315375bd9 code=0x7fc00000 [ 380.746353][ T8717] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 380.760784][ T8717] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 380.776411][ T8717] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 380.788150][ T8717] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 380.798084][ T8717] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 380.800375][ T8899] F2FS-fs (loop3): Found nat_bits in checkpoint [ 380.808558][ T8717] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 380.808583][ T8717] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 380.808605][ T8717] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 380.808624][ T8717] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 380.808644][ T8717] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 380.808668][ T8717] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 380.808688][ T8717] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 380.808703][ T8717] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 380.808723][ T8717] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 380.810920][ T8717] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 380.922845][ T8914] loop5: detected capacity change from 0 to 64 [ 380.977569][ T8717] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 380.990338][ T8717] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 381.002638][ T8717] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 381.011443][ T8717] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 381.100220][ T8899] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 381.119294][ T7269] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 381.140671][ T7269] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 381.214543][ T8721] veth0_vlan: entered promiscuous mode [ 381.223458][ T8917] loop5: detected capacity change from 0 to 47 [ 381.240383][ T8721] veth1_vlan: entered promiscuous mode [ 381.296656][ T7269] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 381.331941][ T7269] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 381.334545][ T8897] syz.3.1105: attempt to access beyond end of device [ 381.334545][ T8897] loop3: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 381.367097][ T8917] Cannot find add_set index 0 as target [ 381.442116][ T8897] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 381.537745][ T8897] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 381.570943][ T8899] block device autoloading is deprecated and will be removed. [ 381.581711][ T8721] veth0_macvtap: entered promiscuous mode [ 381.619635][ T2415] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 381.652107][ T2415] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 381.653353][ T8721] veth1_macvtap: entered promiscuous mode [ 381.852737][ T7269] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 381.871233][ T7269] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 381.996378][ T8721] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 382.030768][ T8721] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 382.072781][ T8721] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 382.104149][ T8721] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 382.161709][ T8721] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 382.190285][ T8721] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 382.216963][ T8721] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 382.247172][ T8929] loop0: detected capacity change from 0 to 64 [ 382.248909][ T8721] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 382.306771][ T8721] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 382.341597][ T8721] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 382.581666][ T8932] loop1: detected capacity change from 0 to 128 [ 382.589461][ T8721] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 383.374897][ T8721] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 383.416549][ T8721] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 383.434979][ T8932] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 383.457466][ T8721] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 383.509552][ T8932] ext4 filesystem being mounted at /0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 383.563231][ T8721] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 383.689579][ T8721] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 383.718124][ T8721] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 383.737101][ T8721] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 383.774797][ T8721] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 383.792131][ T8721] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 383.825269][ T8721] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 383.843722][ T8721] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 383.865313][ T8721] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 383.909776][ T8721] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 383.966027][ T8721] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 384.073429][ T8721] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 384.259217][ T8721] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 384.617112][ T8721] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 384.656157][ T8721] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 384.684602][ T8721] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 384.698375][ T8715] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 384.761537][ T8721] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 384.802435][ T8721] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 384.821546][ T8721] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 384.850711][ T8721] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 385.147334][ T8947] loop0: detected capacity change from 0 to 64 [ 385.179760][ T8946] loop5: detected capacity change from 0 to 1024 [ 385.949479][ T2461] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 386.011949][ T2461] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 386.164786][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 386.217519][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 386.249161][ T8967] loop3: detected capacity change from 0 to 4096 [ 386.281938][ T8967] ntfs3: loop3: Different NTFS sector size (4096) and media sector size (512). [ 386.420603][ T8967] ntfs3: loop3: Failed to initialize $Extend/$Reparse. [ 386.608351][ T8981] loop5: detected capacity change from 0 to 128 [ 386.655238][ T8981] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 386.772038][ T29] audit: type=1326 audit(1720553703.374:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8980 comm="syz.4.1070" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fcddfb75bd9 code=0x0 [ 386.806643][ T8981] ext4 filesystem being mounted at /7/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 386.997651][ T8719] ntfs3: loop3: ino=1a, ntfs_sync_fs failed, -22. [ 387.106192][ T8723] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 387.306725][ T8998] loop5: detected capacity change from 0 to 1024 [ 387.414364][ T8998] hfsplus: request for non-existent node 33423360 in B*Tree [ 387.445236][ T8998] hfsplus: request for non-existent node 33423360 in B*Tree [ 387.685104][ T9011] loop1: detected capacity change from 0 to 164 [ 387.707499][ T9011] iso9660: Unknown parameter '000000000000000000000008' [ 388.154573][ T9011] loop1: detected capacity change from 0 to 40427 [ 388.163603][ T9011] F2FS-fs (loop1): Wrong SIT boundary, start(1536) end(50334208) blocks(1024) [ 388.172665][ T9011] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 388.210445][ T9011] F2FS-fs (loop1): invalid crc value [ 388.225148][ T9011] F2FS-fs (loop1): Found nat_bits in checkpoint [ 388.305453][ T9011] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 388.312623][ T9011] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 388.378513][ T9019] loop0: detected capacity change from 0 to 4096 [ 388.593640][ T9019] ntfs3: loop0: Different NTFS sector size (4096) and media sector size (512). [ 388.703573][ T9037] ubi0: attaching mtd0 [ 388.724174][ T9037] ubi0: scanning is finished [ 388.728895][ T9037] ubi0: empty MTD device detected [ 388.828611][ T9038] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1138'. [ 389.413875][ T9037] ubi0 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt0d", error -4 [ 389.590606][ T8715] bio_check_eod: 1 callbacks suppressed [ 389.590626][ T8715] syz-executor: attempt to access beyond end of device [ 389.590626][ T8715] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 389.652092][ T8715] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 389.662121][ T9019] ntfs3: loop0: Failed to initialize $Extend/$Reparse. [ 390.018592][ T8713] ntfs3: loop0: ino=1a, ntfs_sync_fs failed, -22. [ 390.461369][ T9041] loop2: detected capacity change from 0 to 32768 [ 390.471712][ T9041] XFS: attr2 mount option is deprecated. [ 390.480811][ T9041] XFS: noikeep mount option is deprecated. [ 390.561364][ T9041] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 390.681278][ T9071] RDS: rds_bind could not find a transport for 2001::1, load rds_tcp or rds_rdma? [ 390.818867][ T9041] XFS (loop2): Ending clean mount [ 390.867784][ T9041] XFS (loop2): Quotacheck needed: Please wait. [ 391.013753][ T9041] XFS (loop2): Quotacheck: Done. [ 391.307400][ T8717] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 391.472966][ T29] audit: type=1326 audit(1720553708.074:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9092 comm="syz.3.1168" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0b61b75bd9 code=0x0 [ 392.464106][ T5107] Bluetooth: hci6: command tx timeout [ 394.530754][ T9132] loop4: detected capacity change from 0 to 4096 [ 394.596250][ T9132] ntfs3: loop4: Different NTFS sector size (4096) and media sector size (512). [ 394.676274][ T9132] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 394.820944][ T9151] program syz.3.1190 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 394.850508][ T9132] ntfs3: loop4: ino=0, "file0" failed to extend initialized size to 148452. [ 394.869011][ T25] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 394.877674][ T5149] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 394.912717][ T9156] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 395.072284][ T5149] usb 1-1: Using ep0 maxpacket: 16 [ 395.077635][ T25] usb 6-1: Using ep0 maxpacket: 32 [ 395.087826][ T5149] usb 1-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5 [ 395.122457][ T25] usb 6-1: config index 0 descriptor too short (expected 40100, got 36) [ 395.131095][ T25] usb 6-1: config 241 has too many interfaces: 151, using maximum allowed: 32 [ 395.147739][ T5149] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 395.166241][ T5149] usb 1-1: Product: syz [ 395.170450][ T5149] usb 1-1: Manufacturer: syz [ 395.178022][ T25] usb 6-1: config 241 has an invalid descriptor of length 126, skipping remainder of the config [ 395.189921][ T5149] usb 1-1: SerialNumber: syz [ 395.193101][ T5107] Bluetooth: hci6: command tx timeout [ 395.194602][ T25] usb 6-1: config 241 has 0 interfaces, different from the descriptor's value: 151 [ 395.216173][ T5149] usb 1-1: config 0 descriptor?? [ 395.252934][ T25] usb 6-1: config index 1 descriptor too short (expected 40100, got 36) [ 395.261453][ T25] usb 6-1: config 241 has too many interfaces: 151, using maximum allowed: 32 [ 395.292938][ T5149] visor 1-1:0.0: Sony Clie 3.5 converter detected [ 395.332139][ T25] usb 6-1: config 241 has an invalid descriptor of length 126, skipping remainder of the config [ 395.358754][ T25] usb 6-1: config 241 has 0 interfaces, different from the descriptor's value: 151 [ 395.368667][ T25] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 395.411084][ T25] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 395.425040][ T9164] loop4: detected capacity change from 0 to 4096 [ 395.487340][ T5149] usb 1-1: clie_3_5_startup: get config number bad return length: 0 [ 395.498879][ T5149] visor 1-1:0.0: probe with driver visor failed with error -5 [ 395.512545][ T9166] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 395.720673][ T9143] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 395.762352][ T9143] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 395.772138][ T25] usb 6-1: string descriptor 0 read error: -71 [ 395.802176][ T25] usb 6-1: USB disconnect, device number 7 [ 395.904200][ T9156] loop3: detected capacity change from 0 to 40427 [ 395.917699][ T9156] F2FS-fs (loop3): invalid crc value [ 395.966710][ T9156] F2FS-fs (loop3): Found nat_bits in checkpoint [ 396.058596][ T9156] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 396.166301][ T5225] usb 1-1: USB disconnect, device number 10 [ 396.174378][ T9151] syz.3.1190: attempt to access beyond end of device [ 396.174378][ T9151] loop3: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 396.208819][ T9151] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 396.235881][ T9151] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 396.257320][ T9151] syz.3.1190: attempt to access beyond end of device [ 396.257320][ T9151] md102: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 396.543964][ T58] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 396.725020][ T9191] loop2: detected capacity change from 0 to 4096 [ 396.752043][ T9191] ntfs3: loop2: Different NTFS sector size (4096) and media sector size (512). [ 396.767212][ T58] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xFF has an invalid bInterval 0, changing to 7 [ 396.791370][ T58] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xFF has invalid wMaxPacketSize 0 [ 396.832422][ T58] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 396.878920][ T58] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 396.927466][ T58] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 396.962885][ T58] usb 2-1: config 0 descriptor?? [ 396.968157][ T9191] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 397.169077][ T9203] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.1210'. [ 397.180707][ T9191] ntfs3: loop2: ino=0, "file0" failed to extend initialized size to 148452. [ 397.201943][ T9203] openvswitch: netlink: Key type 29 is not supported [ 397.319285][ T9208] netlink: 184 bytes leftover after parsing attributes in process `syz.3.1211'. [ 397.346554][ T9208] netlink: 'syz.3.1211': attribute type 1 has an invalid length. [ 397.404902][ T58] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 397.435914][ T58] plantronics 0003:047F:FFFF.0007: No inputs registered, leaving [ 397.492989][ T58] plantronics 0003:047F:FFFF.0007: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 397.549079][ T9210] loop4: detected capacity change from 0 to 4096 [ 397.568975][ T9210] ntfs3: loop4: Different NTFS sector size (4096) and media sector size (512). [ 397.686697][ T9210] ntfs3: loop4: Failed to initialize $Extend/$Reparse. [ 397.816818][ T8721] ntfs3: loop4: ino=1a, ntfs_sync_fs failed, -22. [ 397.830430][ T58] usb 2-1: USB disconnect, device number 14 [ 397.999994][ T5107] Bluetooth: hci4: command tx timeout [ 398.085965][ T9230] netlink: 144 bytes leftover after parsing attributes in process `syz.0.1219'. [ 398.362510][ T9238] loop4: detected capacity change from 0 to 2048 [ 398.402877][ T9242] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.1224'. [ 398.417906][ T9242] openvswitch: netlink: Key type 29 is not supported [ 398.432362][ T9238] UDF-fs: error (device loop4): udf_process_sequence: Primary Volume Descriptor not found! [ 398.498754][ T9238] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 398.522692][ T9245] xt_addrtype: ipv6 BLACKHOLE matching not supported [ 398.612102][ T9245] loop5: detected capacity change from 0 to 1024 [ 398.619127][ T9245] ext3: Unknown parameter 'noacl' [ 399.294937][ T9243] loop3: detected capacity change from 0 to 4096 [ 399.333134][ T29] audit: type=1800 audit(1720553715.944:78): pid=9238 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1223" name="file1" dev="loop4" ino=1346 res=0 errno=0 [ 399.603420][ T9243] ntfs3: loop3: Different NTFS sector size (4096) and media sector size (512). [ 401.219512][ T9257] binder: transaction release 11 bad handle 1, ret = -22 [ 401.243247][ T9257] binder: 9256:9257 ioctl c0306201 20002300 returned -14 [ 401.356032][ T9243] ntfs3: loop3: Failed to read $UpCase (-4). [ 401.569933][ T9264] netlink: 144 bytes leftover after parsing attributes in process `syz.5.1233'. [ 401.606037][ T9262] usb usb8: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 401.787026][ T9275] loop5: detected capacity change from 0 to 4096 [ 401.866527][ T9283] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 401.912531][ T9282] bridge0: port 2(bridge_slave_1) entered disabled state [ 401.948423][ T25] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 401.955424][ T9287] xt_addrtype: ipv6 BLACKHOLE matching not supported [ 401.974667][ T9282] bridge_slave_1: left allmulticast mode [ 401.996485][ T9282] bridge_slave_1: left promiscuous mode [ 402.020732][ T9282] bridge0: port 2(bridge_slave_1) entered disabled state [ 402.032397][ T9287] loop3: detected capacity change from 0 to 1024 [ 402.039366][ T9287] ext3: Unknown parameter 'noacl' [ 402.112212][ T5149] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 402.263593][ T25] usb 3-1: Using ep0 maxpacket: 32 [ 402.537295][ T25] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 402.674171][ T25] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 402.688403][ T25] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 402.702061][ T25] usb 3-1: New USB device found, idVendor=1b96, idProduct=000a, bcdDevice= 0.00 [ 402.711243][ T25] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 402.749441][ T25] usb 3-1: config 0 descriptor?? [ 403.263432][ T25] ntrig 0003:1B96:000A.0008: unknown main item tag 0x0 [ 403.270381][ T25] ntrig 0003:1B96:000A.0008: unknown main item tag 0x0 [ 403.305328][ T25] ntrig 0003:1B96:000A.0008: unknown main item tag 0x0 [ 403.312996][ T25] ntrig 0003:1B96:000A.0008: unknown main item tag 0x0 [ 403.319901][ T25] ntrig 0003:1B96:000A.0008: unknown main item tag 0x0 [ 403.346807][ T25] ntrig 0003:1B96:000A.0008: hidraw0: USB HID v0.00 Device [HID 1b96:000a] on usb-dummy_hcd.2-1/input0 [ 403.561733][ T9306] vlan2: entered allmulticast mode [ 403.568394][ T9306] mac80211_hwsim hwsim44 wlan1: entered allmulticast mode [ 403.670596][ T29] audit: type=1326 audit(1720553720.244:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9259 comm="syz.2.1231" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a4e175bd9 code=0x7ffc0000 [ 403.699091][ T5158] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 403.716476][ T25] usb 3-1: USB disconnect, device number 7 [ 403.766304][ T9306] mac80211_hwsim hwsim44 wlan1: left allmulticast mode [ 404.104193][ T29] audit: type=1326 audit(1720553720.264:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9259 comm="syz.2.1231" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a4e175bd9 code=0x7ffc0000 [ 404.573189][ T29] audit: type=1326 audit(1720553720.304:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9259 comm="syz.2.1231" exe="/root/syz-executor" sig=0 arch=c000003e syscall=116 compat=0 ip=0x7f6a4e175bd9 code=0x7ffc0000 [ 404.622392][ T5158] usb 5-1: Using ep0 maxpacket: 16 [ 404.657141][ T5158] usb 5-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5 [ 404.671989][ T29] audit: type=1326 audit(1720553720.304:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9259 comm="syz.2.1231" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a4e175bd9 code=0x7ffc0000 [ 404.697719][ T9313] netlink: 144 bytes leftover after parsing attributes in process `syz.0.1249'. [ 404.702389][ T5158] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 404.775461][ T5158] usb 5-1: Product: syz [ 404.779686][ T5158] usb 5-1: Manufacturer: syz [ 404.792019][ T29] audit: type=1326 audit(1720553720.304:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9259 comm="syz.2.1231" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a4e175bd9 code=0x7ffc0000 [ 404.814671][ T5158] usb 5-1: SerialNumber: syz [ 404.816208][ T9317] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 404.843335][ T5158] usb 5-1: config 0 descriptor?? [ 404.864527][ T5158] visor 5-1:0.0: Sony Clie 3.5 converter detected [ 404.881426][ T29] audit: type=1326 audit(1720553720.304:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9259 comm="syz.2.1231" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f6a4e175bd9 code=0x7ffc0000 [ 404.905131][ T9317] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 404.932309][ T9321] x_tables: unsorted underflow at hook 4 [ 404.962165][ T29] audit: type=1326 audit(1720553721.134:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9259 comm="syz.2.1231" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a4e175bd9 code=0x7ffc0000 [ 405.045568][ T29] audit: type=1326 audit(1720553721.154:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9259 comm="syz.2.1231" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a4e175bd9 code=0x7ffc0000 [ 405.093452][ T5158] usb 5-1: clie_3_5_startup: get config number bad return length: 0 [ 405.117860][ T5158] visor 5-1:0.0: probe with driver visor failed with error -5 [ 405.164346][ T9327] loop5: detected capacity change from 0 to 47 [ 405.201054][ T9320] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1252'. [ 405.430057][ T9294] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 405.432168][ T9327] Cannot find add_set index 0 as target [ 405.446993][ T9294] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 405.465982][ T9329] xt_addrtype: ipv6 BLACKHOLE matching not supported [ 406.718542][ T9329] loop3: detected capacity change from 0 to 1024 [ 406.725534][ T9329] ext3: Unknown parameter 'noacl' [ 406.822419][ T9335] netlink: 'syz.2.1258': attribute type 4 has an invalid length. [ 407.795378][ T9348] loop0: detected capacity change from 0 to 256 [ 407.826489][ T9350] netlink: 144 bytes leftover after parsing attributes in process `syz.1.1264'. [ 407.902399][ T5149] usb 5-1: USB disconnect, device number 7 [ 408.142238][ T9354] vlan2: entered allmulticast mode [ 408.147435][ T9354] mac80211_hwsim hwsim46 wlan1: entered allmulticast mode [ 408.220460][ T9359] x_tables: unsorted underflow at hook 4 [ 408.232433][ T9354] mac80211_hwsim hwsim46 wlan1: left allmulticast mode [ 408.233393][ T9360] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 408.329565][ T9360] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 408.842514][ T9382] netlink: 144 bytes leftover after parsing attributes in process `syz.2.1278'. [ 408.888306][ T9380] loop0: detected capacity change from 0 to 1024 [ 409.172409][ T9387] loop1: detected capacity change from 0 to 4096 [ 409.202162][ T9394] x_tables: unsorted underflow at hook 4 [ 409.297324][ T9398] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 409.342894][ T9398] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 410.198697][ T9435] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 410.213513][ T9435] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 410.215794][ T9437] loop4: detected capacity change from 0 to 128 [ 410.310062][ T9437] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 410.337935][ T9437] ext4 filesystem being mounted at /24/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 410.464754][ T5149] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 410.518681][ T9442] x_tables: unsorted underflow at hook 4 [ 410.623947][ T8721] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 410.678111][ T5149] usb 2-1: Using ep0 maxpacket: 32 [ 410.702758][ T5149] usb 2-1: config index 0 descriptor too short (expected 35577, got 27) [ 410.725903][ T5149] usb 2-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 410.768707][ T5149] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 410.789393][ T5149] usb 2-1: config 1 has no interface number 0 [ 410.809268][ T5149] usb 2-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 410.849638][ T5149] usb 2-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 410.888339][ T9449] loop2: detected capacity change from 0 to 256 [ 410.915145][ T9452] vxcan0: tx drop: invalid da for name 0x0000000000000003 [ 410.934077][ T5149] usb 2-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 411.006876][ T5149] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 411.036553][ T5149] snd_usb_pod 2-1:1.1: Line 6 Pocket POD found [ 411.057421][ T9454] tipc: Started in network mode [ 411.063726][ T9454] tipc: Node identity ac1414aa, cluster identity 4711 [ 411.102246][ T9449] loop2: detected capacity change from 256 to 0 [ 411.108620][ T9454] tipc: New replicast peer: 100.1.1.1 [ 411.133569][ T9449] syz.2.1303: attempt to access beyond end of device [ 411.133569][ T9449] loop2: rw=0, sector=12, nr_sectors = 4 limit=0 [ 411.134438][ T9454] tipc: Enabled bearer , priority 10 [ 411.174995][ T9449] FAT-fs (loop2): Directory bread(block 3) failed [ 411.316065][ T8717] syz-executor: attempt to access beyond end of device [ 411.316065][ T8717] loop2: rw=0, sector=12, nr_sectors = 4 limit=0 [ 411.343077][ T8717] FAT-fs (loop2): Directory bread(block 3) failed [ 411.418327][ T9460] random: crng reseeded on system resumption [ 411.469491][ T8717] syz-executor: attempt to access beyond end of device [ 411.469491][ T8717] loop2: rw=0, sector=0, nr_sectors = 4 limit=0 [ 411.486172][ T8717] FAT-fs (loop2): unable to read boot sector to mark fs as dirty [ 412.686844][ T5149] snd_usb_pod 2-1:1.1: Line 6 Pocket POD now attached [ 413.104307][ T5107] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 413.196689][ T5149] usb 2-1: USB disconnect, device number 16 [ 413.202772][ T5107] Bluetooth: hci4: Injecting HCI hardware error event [ 413.541930][ T5107] Bluetooth: hci4: hardware error 0x00 [ 413.566294][ T5149] snd_usb_pod 2-1:1.1: Line 6 Pocket POD now disconnected [ 413.574138][ T25] tipc: Node number set to 2886997162 [ 413.650493][ T9466] Cannot find add_set index 0 as target [ 413.765328][ T9476] xt_addrtype: ipv6 BLACKHOLE matching not supported [ 413.776206][ T9466] loop5: detected capacity change from 0 to 64 [ 413.790270][ T9472] loop3: detected capacity change from 0 to 1024 [ 413.850358][ T9476] loop0: detected capacity change from 0 to 1024 [ 413.857428][ T9476] ext3: Unknown parameter 'noacl' [ 413.905669][ T9472] hfsplus: invalid btree flag [ 413.944832][ T9480] loop4: detected capacity change from 0 to 512 [ 413.946751][ T9472] hfsplus: failed to load extents file [ 413.952203][ T9480] EXT4-fs: Ignoring removed nobh option [ 414.040606][ T9480] EXT4-fs (loop4): can't mount with both data=journal and delalloc [ 414.961297][ T12] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 415.063745][ T9487] vxcan0: tx drop: invalid da for name 0x0000000000000003 [ 415.235175][ T12] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 415.304617][ T9501] tipc: Started in network mode [ 415.324188][ T9501] tipc: Node identity ac1414aa, cluster identity 4711 [ 415.352114][ T9501] tipc: New replicast peer: 100.1.1.1 [ 415.368209][ T9501] tipc: Enabled bearer , priority 10 [ 415.382862][ T5102] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 415.562563][ T12] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 415.787340][ T5102] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 415.797616][ T5102] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 415.807581][ T5102] usb 5-1: New USB device found, idVendor=1d50, idProduct=606f, bcdDevice=14.d4 [ 415.833728][ T5102] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 415.963190][ T5107] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 415.996641][ T5102] usb 5-1: config 0 descriptor?? [ 416.756901][ T5225] tipc: Node number set to 2886997162 [ 416.957545][ T9520] random: crng reseeded on system resumption [ 417.932968][ T9493] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 417.979970][ T9493] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 418.114608][ T5106] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 418.126021][ T5106] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 418.129489][ T9525] xt_addrtype: ipv6 BLACKHOLE matching not supported [ 418.142909][ T5106] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 418.157373][ T5106] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 418.168978][ T5106] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 418.177473][ T5106] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 418.213066][ T25] usb 5-1: USB disconnect, device number 8 [ 418.236323][ T12] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 418.238996][ T9530] loop1: detected capacity change from 0 to 1024 [ 418.273678][ T9525] loop5: detected capacity change from 0 to 1024 [ 418.280585][ T9525] ext3: Unknown parameter 'noacl' [ 418.308288][ T9530] hfsplus: invalid btree flag [ 418.313646][ T9530] hfsplus: failed to load extents file [ 419.294845][ T9541] loop1: detected capacity change from 0 to 164 [ 419.330063][ T9542] loop5: detected capacity change from 0 to 512 [ 419.356997][ T9541] iso9660: Unknown parameter '000000000000000000000008' [ 419.366681][ T9542] EXT4-fs: Ignoring removed nobh option [ 419.402074][ T9542] EXT4-fs (loop5): can't mount with both data=journal and delalloc [ 419.978447][ T9541] loop1: detected capacity change from 0 to 40427 [ 420.762466][ T9541] F2FS-fs (loop1): Wrong SIT boundary, start(1536) end(50334208) blocks(1024) [ 420.771557][ T9541] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 420.786029][ T5106] Bluetooth: hci1: command tx timeout [ 420.840459][ T9541] F2FS-fs (loop1): invalid crc value [ 420.874921][ T9541] F2FS-fs (loop1): Found nat_bits in checkpoint [ 420.951074][ T9541] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 420.958306][ T9541] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 421.319455][ T12] bridge_slave_1: left allmulticast mode [ 421.370321][ T12] bridge_slave_1: left promiscuous mode [ 421.382149][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 421.489845][ T9560] ubi0: attaching mtd0 [ 421.502026][ T9560] ubi0: scanning is finished [ 421.584770][ T9561] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1335'. [ 421.912880][ T12] bridge_slave_0: left allmulticast mode [ 421.955814][ T12] bridge_slave_0: left promiscuous mode [ 421.996619][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 422.099950][ T9560] ubi0 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt0d", error -4 [ 422.249867][ T9564] loop5: detected capacity change from 0 to 1024 [ 422.502499][ T8715] syz-executor: attempt to access beyond end of device [ 422.502499][ T8715] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 425.139460][ T5106] Bluetooth: hci1: command tx timeout [ 425.156531][ T8715] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 426.991072][ T9575] loop3: detected capacity change from 0 to 40427 [ 427.035055][ T9575] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 427.069452][ T9573] loop4: detected capacity change from 0 to 32768 [ 427.074879][ T9575] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 427.107647][ T9575] F2FS-fs (loop3): invalid crc value [ 427.117969][ T9573] jfs_strtoUCS: char2uni returned -22. [ 427.126242][ T9573] charset = euc-jp, char = 0xd4 [ 427.149425][ T9575] F2FS-fs (loop3): Found nat_bits in checkpoint [ 427.182162][ T5107] Bluetooth: hci1: command tx timeout [ 427.371123][ T9575] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 427.398190][ T9575] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 427.529056][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 427.559877][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 427.604175][ T12] bond0 (unregistering): Released all slaves [ 427.621145][ T9558] tipc: Started in network mode [ 427.628641][ T11] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 427.647733][ T9558] tipc: Node identity ac1414aa, cluster identity 4711 [ 427.649942][ T11] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 427.666569][ T9592] vxcan0: tx drop: invalid da for name 0x0000000000000003 [ 427.697491][ T9558] tipc: New replicast peer: 100.1.1.1 [ 427.710775][ T9558] tipc: Enabled bearer , priority 10 [ 427.912118][ T9597] loop4: detected capacity change from 0 to 512 [ 427.945511][ T9597] EXT4-fs: Ignoring removed nobh option [ 427.997333][ T9597] EXT4-fs (loop4): can't mount with both data=journal and delalloc [ 428.046389][ T9524] chnl_net:caif_netlink_parms(): no params data found [ 428.298723][ T9606] loop0: detected capacity change from 0 to 2048 [ 428.322269][ T9607] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1355'. [ 428.353011][ T9606] EXT4-fs: Ignoring removed mblk_io_submit option [ 428.407559][ T9606] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 428.685914][ T5102] IPVS: starting estimator thread 0... [ 428.695404][ T9606] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1356'. [ 428.711367][ T9605] loop4: detected capacity change from 0 to 8192 [ 428.749719][ T9605] REISERFS warning (device loop4): super-6513 reiserfs_parse_options: quotafile must be on filesystem root. [ 428.784793][ T9524] bridge0: port 1(bridge_slave_0) entered blocking state [ 428.803963][ T9524] bridge0: port 1(bridge_slave_0) entered disabled state [ 428.811483][ T9524] bridge_slave_0: entered allmulticast mode [ 428.812829][ T9625] IPVS: using max 17 ests per chain, 40800 per kthread [ 428.819559][ T9524] bridge_slave_0: entered promiscuous mode [ 428.838388][ T25] tipc: Node number set to 2886997162 [ 428.846251][ T9524] bridge0: port 2(bridge_slave_1) entered blocking state [ 428.872352][ T9524] bridge0: port 2(bridge_slave_1) entered disabled state [ 428.889988][ T9524] bridge_slave_1: entered allmulticast mode [ 428.908269][ T9524] bridge_slave_1: entered promiscuous mode [ 428.935806][ T8713] EXT4-fs error (device loop0): ext4_readdir:260: inode #2: block 16: comm syz-executor: path /76/file0: bad entry in directory: rec_len is smaller than minimal - offset=60, inode=117440527, rec_len=0, size=2048 fake=0 [ 428.952125][ T9] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 428.992160][ T8713] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 429.028993][ T12] hsr_slave_0: left promiscuous mode [ 429.035510][ T12] hsr_slave_1: left promiscuous mode [ 429.058729][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 429.092514][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 429.120644][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 429.128457][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 429.137822][ T8713] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 429.168606][ T9] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 429.209765][ T9] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 429.251988][ T9] usb 6-1: New USB device found, idVendor=1d50, idProduct=606f, bcdDevice=14.d4 [ 429.262758][ T5107] Bluetooth: hci1: command tx timeout [ 429.273749][ T12] veth1_macvtap: left promiscuous mode [ 429.296120][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 429.306462][ T12] veth0_macvtap: left promiscuous mode [ 429.338016][ T12] veth1_vlan: left promiscuous mode [ 429.346052][ T9] usb 6-1: config 0 descriptor?? [ 429.351235][ T12] veth0_vlan: left promiscuous mode [ 429.637914][ T9622] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 429.662606][ T9622] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 429.817520][ T5225] usb 6-1: USB disconnect, device number 8 [ 429.879621][ T9636] loop4: detected capacity change from 0 to 2048 [ 430.727140][ T12] team0 (unregistering): Port device team_slave_1 removed [ 431.078077][ T12] team0 (unregistering): Port device team_slave_0 removed [ 432.440739][ T9657] loop4: detected capacity change from 0 to 1024 [ 432.536443][ T9657] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 433.432729][ T9654] loop5: detected capacity change from 0 to 32768 [ 433.505628][ T9654] XFS (loop5): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 433.647143][ T9654] XFS (loop5): Ending clean mount [ 433.680656][ T9654] XFS (loop5): Quotacheck needed: Please wait. [ 433.812191][ T9654] XFS (loop5): Quotacheck: Done. [ 433.844977][ T9524] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 433.861205][ T9640] tipc: Started in network mode [ 433.871888][ T9640] tipc: Node identity ac1414aa, cluster identity 4711 [ 433.884172][ T9640] tipc: New replicast peer: 100.1.1.1 [ 433.892606][ T9640] tipc: Enabled bearer , priority 10 [ 433.900152][ T9673] xt_addrtype: ipv6 BLACKHOLE matching not supported [ 433.949689][ T9673] loop1: detected capacity change from 0 to 1024 [ 433.957447][ T9673] ext3: Unknown parameter 'noacl' [ 433.977267][ T9524] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 434.332789][ T45] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 434.543530][ T45] usb 1-1: Using ep0 maxpacket: 32 [ 434.614125][ T45] usb 1-1: config index 0 descriptor too short (expected 35577, got 27) [ 434.648230][ T45] usb 1-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 434.688603][ T45] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 434.697814][ T45] usb 1-1: config 1 has no interface number 0 [ 434.704072][ T45] usb 1-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 434.715167][ T45] usb 1-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 434.731332][ T45] usb 1-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 434.739363][ T9524] team0: Port device team_slave_0 added [ 434.740598][ T45] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 434.861302][ T45] snd_usb_pod 1-1:1.1: Line 6 Pocket POD found [ 434.970169][ T25] tipc: Node number set to 2886997162 [ 435.003069][ T9524] team0: Port device team_slave_1 added [ 435.160141][ T8721] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 435.264080][ T8723] XFS (loop5): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 435.292964][ T9524] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 435.300007][ T9524] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 435.312088][ T9683] binder: 9682:9683 unknown command 0 [ 435.335632][ T9683] binder: 9682:9683 ioctl c0306201 20000a80 returned -22 [ 435.346830][ T9524] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 435.366749][ T9524] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 435.369351][ T45] snd_usb_pod 1-1:1.1: Line 6 Pocket POD now attached [ 435.373832][ T9524] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 435.433864][ T9689] loop1: detected capacity change from 0 to 128 [ 435.474676][ T9524] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 435.534454][ T9689] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 435.598504][ T45] usb 1-1: USB disconnect, device number 11 [ 435.606091][ T45] snd_usb_pod 1-1:1.1: Line 6 Pocket POD now disconnected [ 435.665978][ T9689] ext4 filesystem being mounted at /43/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 437.547007][ T9524] hsr_slave_0: entered promiscuous mode [ 437.717185][ T9524] hsr_slave_1: entered promiscuous mode [ 437.785450][ T8715] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 439.665626][ T1233] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.674785][ T1233] ieee802154 phy1 wpan1: encryption failed: -22 [ 439.963892][ T9734] random: crng reseeded on system resumption [ 440.741334][ T9733] xt_addrtype: ipv6 BLACKHOLE matching not supported [ 440.835962][ T9733] loop3: detected capacity change from 0 to 1024 [ 440.843102][ T9733] ext3: Unknown parameter 'noacl' [ 441.901011][ T9747] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1393'. [ 442.220196][ T9756] loop5: detected capacity change from 0 to 2048 [ 442.648469][ T9756] udf: Unknown parameter 'nov' [ 445.315802][ T9524] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 445.371626][ T9524] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 445.411202][ T9524] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 445.469817][ T9524] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 446.002857][ T9524] 8021q: adding VLAN 0 to HW filter on device bond0 [ 446.028221][ T9784] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1408'. [ 446.132837][ T9778] loop0: detected capacity change from 0 to 4096 [ 446.148646][ T9524] 8021q: adding VLAN 0 to HW filter on device team0 [ 446.167393][ T9778] ntfs3: loop0: try to read out of volume at offset 0x5c00 [ 446.177617][ T9778] ntfs3: loop0: Failed to load $Volume (-5). [ 446.199105][ T5102] bridge0: port 1(bridge_slave_0) entered blocking state [ 446.206464][ T5102] bridge0: port 1(bridge_slave_0) entered forwarding state [ 446.266049][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 446.273392][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 446.372068][ T5225] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 447.432320][ T29] audit: type=1804 audit(1720553764.014:87): pid=9778 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.1403" name="/newroot/86/bus/bus" dev="overlay" ino=477 res=1 errno=0 [ 447.463758][ T5225] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 447.497878][ T9778] Invalid ELF header magic: != ELF [ 447.507361][ T5225] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 447.563329][ T5225] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 447.598653][ T5225] usb 4-1: config 0 descriptor?? [ 447.871428][ T29] audit: type=1326 audit(1720553764.474:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9779 comm="syz.3.1406" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b61b75bd9 code=0x7ffc0000 [ 447.927099][ T29] audit: type=1326 audit(1720553764.474:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9779 comm="syz.3.1406" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b61b75bd9 code=0x7ffc0000 [ 447.974231][ T5225] ath6kl: Failed to submit usb control message: -71 [ 447.994352][ T5225] ath6kl: unable to send the bmi data to the device: -71 [ 448.001415][ T5225] ath6kl: Unable to send get target info: -71 [ 448.027793][ T9524] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 448.043392][ T29] audit: type=1326 audit(1720553764.484:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9779 comm="syz.3.1406" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f0b61b74610 code=0x7ffc0000 [ 448.071523][ T5225] ath6kl: Failed to init ath6kl core: -71 [ 448.120982][ T29] audit: type=1326 audit(1720553764.484:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9779 comm="syz.3.1406" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b61b75bd9 code=0x7ffc0000 [ 448.234598][ T29] audit: type=1326 audit(1720553764.484:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9779 comm="syz.3.1406" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b61b75bd9 code=0x7ffc0000 [ 448.396735][ T9808] loop0: detected capacity change from 0 to 32768 [ 448.407767][ T9808] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.1416 (9808) [ 448.411962][ T29] audit: type=1326 audit(1720553764.494:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9779 comm="syz.3.1406" exe="/root/syz-executor" sig=0 arch=c000003e syscall=295 compat=0 ip=0x7f0b61b75bd9 code=0x7ffc0000 [ 448.455771][ T5225] ath6kl_usb 4-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 448.469625][ T5225] usb 4-1: USB disconnect, device number 8 [ 448.494358][ T9808] BTRFS info (device loop0): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 448.504676][ T9808] BTRFS info (device loop0): using sha256 (sha256-ni) checksum algorithm [ 448.513265][ T9808] BTRFS info (device loop0): using free-space-tree [ 448.571599][ T9524] veth0_vlan: entered promiscuous mode [ 448.621097][ T29] audit: type=1326 audit(1720553764.494:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9779 comm="syz.3.1406" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b61b75bd9 code=0x7ffc0000 [ 448.631029][ T9524] veth1_vlan: entered promiscuous mode [ 448.702260][ T29] audit: type=1326 audit(1720553764.494:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9779 comm="syz.3.1406" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f0b61b75bd9 code=0x7ffc0000 [ 448.726441][ T29] audit: type=1326 audit(1720553764.494:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9779 comm="syz.3.1406" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b61b75bd9 code=0x7ffc0000 [ 448.786038][ T9524] veth0_macvtap: entered promiscuous mode [ 448.993871][ T9524] veth1_macvtap: entered promiscuous mode [ 452.044653][ T9524] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 452.158238][ T9832] loop4: detected capacity change from 0 to 2048 [ 452.209619][ T9524] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 452.224215][ T9524] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 452.255696][ T9524] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 452.278890][ T9838] Process accounting resumed [ 452.288469][ T9524] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 452.422222][ T9524] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 452.437833][ T9524] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 452.453457][ T9524] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 452.476362][ T9524] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 452.519085][ T9524] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 452.529639][ T9524] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 452.543170][ T9524] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 452.557252][ T9524] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 452.567980][ T9524] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 452.583786][ T9524] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 452.656140][ T9524] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 452.731917][ T9524] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 452.765183][ T9524] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 452.807377][ T9524] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 452.855637][ T9524] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 452.886281][ T9524] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 452.901996][ T9524] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 452.921892][ T9524] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 452.959178][ T9524] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 452.990478][ T8713] BTRFS info (device loop0): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 452.991494][ T9524] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 453.017651][ T9524] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 453.028906][ T9524] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 453.047606][ T9524] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 453.068608][ T9524] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 453.232842][ T9524] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 453.301641][ T9524] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 453.338177][ T9524] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 453.357133][ T9524] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 453.368872][ T9524] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 453.824924][ T8708] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 453.853392][ T8708] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 454.021091][ T8708] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 454.058393][ T8708] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 454.500073][ T9879] loop0: detected capacity change from 0 to 32768 [ 454.522237][ T9879] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.1437 (9879) [ 454.582760][ T9879] BTRFS info (device loop0): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 454.593297][ T9879] BTRFS info (device loop0): using sha256 (sha256-ni) checksum algorithm [ 454.602662][ T9879] BTRFS info (device loop0): using free-space-tree [ 455.082279][ T29] kauditd_printk_skb: 27 callbacks suppressed [ 455.082484][ T29] audit: type=1400 audit(1720553771.684:124): apparmor="DENIED" operation="change_onexec" class="file" info="label not found" error=-2 profile="unconfined" name=3A0A994F13051CA817FA97844BAA978732BDAD5A3D174B3B1A18F96A11DC04562D34DE812A8A50C8704F71C73A pid=9877 comm="syz.0.1437" [ 457.322295][ T9904] Process accounting resumed [ 457.519129][ T8713] BTRFS info (device loop0): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 457.719692][ T9916] loop5: detected capacity change from 0 to 2048 [ 457.746066][ T9916] udf: Unknown parameter 'nov' [ 458.277644][ T9928] netlink: 165 bytes leftover after parsing attributes in process `syz.1.1448'. [ 458.973544][ T58] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 459.173634][ T58] usb 5-1: Using ep0 maxpacket: 16 [ 459.194758][ T58] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 459.241894][ T58] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 459.272066][ T58] usb 5-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 459.306591][ T58] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 459.360898][ T58] usb 5-1: config 0 descriptor?? [ 459.386689][ T9938] [U] IÝ€ [ 459.400994][ T9938] [U] % [ 459.404280][ T9938] [U] ËVËA*ÔÈÁ’L4°JN$²Ð [ 459.458037][ T9941] netlink: 156 bytes leftover after parsing attributes in process `syz.0.1454'. [ 459.588767][ T9921] loop4: detected capacity change from 0 to 128 [ 459.624217][ T9921] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 459.651938][ T9921] FAT-fs (loop4): bogus number of directory entries (203) [ 459.679910][ T9921] FAT-fs (loop4): Can't find a valid FAT filesystem [ 460.273186][ T9947] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 460.334955][ T9947] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 460.640470][ T58] hid (null): bogus close delimiter [ 460.654326][ T58] hid (null): usage index exceeded [ 460.664762][ T58] hid-generic 0003:0158:0100.0009: unknown main item tag 0x0 [ 460.672320][ T58] hid-generic 0003:0158:0100.0009: unknown main item tag 0x0 [ 460.674672][ T9951] loop2: detected capacity change from 0 to 256 [ 460.679705][ T58] hid-generic 0003:0158:0100.0009: bogus close delimiter [ 460.679727][ T58] hid-generic 0003:0158:0100.0009: item 0 0 2 10 parsing failed [ 460.680691][ T58] hid-generic 0003:0158:0100.0009: probe with driver hid-generic failed with error -22 [ 460.714588][ T58] usb 5-1: USB disconnect, device number 9 [ 460.743103][ T9951] FAT-fs (loop2): Unrecognized mount option "ÿ0x0000000000000003" or missing value [ 460.802437][ T9] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 461.002825][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 461.023134][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xDF has an invalid bInterval 0, changing to 7 [ 461.305451][ T9] usb 2-1: New USB device found, idVendor=077d, idProduct=0410, bcdDevice=ec.c1 [ 461.314918][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 461.332108][ T9] usb 2-1: Product: syz [ 461.336333][ T9] usb 2-1: Manufacturer: syz [ 461.340954][ T9] usb 2-1: SerialNumber: syz [ 462.334151][ T9] usb 2-1: config 0 descriptor?? [ 462.455469][ T9963] loop2: detected capacity change from 0 to 256 [ 462.561644][ T9944] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 462.874119][ T9971] netlink: 165 bytes leftover after parsing attributes in process `syz.4.1462'. [ 463.164581][ T9944] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 463.893763][ T9] powermate: Expected payload of 3--6 bytes, found 512 bytes! [ 463.960525][ T9] input: Griffin PowerMate as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input10 [ 463.994966][ T45] libceph: connect (1)[c::]:6789 error -101 [ 464.003015][ T9983] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1468'. [ 464.030817][ T9963] FAT-fs (loop2): Directory bread(block 64) failed [ 464.043608][ T45] libceph: mon0 (1)[c::]:6789 connect error [ 464.053917][ C0] ------------[ cut here ]------------ [ 464.060860][ C0] WARNING: CPU: 0 PID: 2405 at kernel/kcov.c:871 kcov_remote_start+0x5a2/0x7e0 [ 464.061243][ T9975] ceph: No mds server is up or the cluster is laggy [ 464.069827][ C0] Modules linked in: [ 464.069909][ C0] CPU: 0 PID: 2405 Comm: kworker/u8:6 Not tainted 6.10.0-rc7-syzkaller-00012-g34afb82a3c67 #0 [ 464.069942][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 464.069962][ C0] Workqueue: events_unbound cfg80211_wiphy_work [ 464.070012][ C0] RIP: 0010:kcov_remote_start+0x5a2/0x7e0 [ 464.084747][ T45] libceph: connect (1)[c::]:6789 error -101 [ 464.091385][ C0] Code: 24 00 00 00 00 9c 8f 04 24 f7 04 24 00 02 00 00 0f 85 a6 01 00 00 41 f7 c6 00 02 00 00 0f 84 93 fa ff ff fb e9 8d fa ff ff 90 <0f> 0b 90 e8 66 cd ef 09 89 c0 48 c7 c7 c8 d4 02 00 48 03 3c c5 e0 [ 464.091413][ C0] RSP: 0018:ffffc900000072b0 EFLAGS: 00010002 [ 464.091440][ C0] RAX: 0000000080010101 RBX: ffff8880294e0000 RCX: 0000000000000002 [ 464.091461][ C0] RDX: dffffc0000000000 RSI: ffffffff8bcaccc0 RDI: ffffffff8c1fe980 [ 464.106179][ T45] libceph: mon0 (1)[c::]:6789 connect error [ 464.107731][ C0] RBP: 0100000000000002 R08: ffffffff92fa75f7 R09: 1ffffffff25f4ebe [ 464.107758][ C0] R10: dffffc0000000000 R11: fffffbfff25f4ebf R12: ffffffff8196315e [ 464.182980][ C0] R13: ffff88802c695200 R14: 0000000000000006 R15: ffff8880b942d4c8 [ 464.190960][ C0] FS: 0000000000000000(0000) GS:ffff8880b9400000(0000) knlGS:0000000000000000 [ 464.199903][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 464.206502][ C0] CR2: 0000555555691808 CR3: 000000006fe36000 CR4: 0000000000350ef0 [ 464.214502][ C0] Call Trace: [ 464.217792][ C0] [ 464.220652][ C0] ? __warn+0x163/0x4e0 [ 464.224850][ C0] ? kcov_remote_start+0x5a2/0x7e0 [ 464.229990][ C0] ? report_bug+0x2b3/0x500 [ 464.234550][ C0] ? kcov_remote_start+0x5a2/0x7e0 [ 464.239690][ C0] ? handle_bug+0x3e/0x70 [ 464.244069][ C0] ? exc_invalid_op+0x1a/0x50 [ 464.248828][ C0] ? asm_exc_invalid_op+0x1a/0x20 [ 464.253886][ C0] ? kcov_remote_start+0x9e/0x7e0 [ 464.258943][ C0] ? kcov_remote_start+0x5a2/0x7e0 [ 464.264078][ C0] ? usb_unanchor_urb+0xa3/0xc0 [ 464.268961][ C0] ? usb_anchor_suspend_wakeups+0x3a/0x40 [ 464.274727][ C0] __usb_hcd_giveback_urb+0x405/0x6e0 [ 464.280141][ C0] ? __pfx___usb_hcd_giveback_urb+0x10/0x10 [ 464.286077][ C0] ? do_raw_spin_unlock+0x13c/0x8b0 [ 464.291389][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 464.297085][ C0] dummy_timer+0x830/0x45d0 [ 464.301620][ C0] ? __pfx_lock_release+0x10/0x10 [ 464.306679][ C0] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 464.313038][ C0] ? __hrtimer_run_queues+0x477/0xd50 [ 464.318472][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 464.324143][ C0] ? do_raw_spin_unlock+0x13c/0x8b0 [ 464.329399][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 464.334353][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 464.339299][ C0] __hrtimer_run_queues+0x59d/0xd50 [ 464.344547][ C0] ? ktime_get_update_offsets_now+0x3c/0x250 [ 464.350594][ C0] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 464.356358][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 464.362070][ C0] hrtimer_interrupt+0x396/0x990 [ 464.367149][ C0] __sysvec_apic_timer_interrupt+0x112/0x3f0 [ 464.373166][ C0] sysvec_apic_timer_interrupt+0x52/0xc0 [ 464.378866][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 464.384961][ C0] RIP: 0010:ieee80211_rx_list+0xabe/0x3780 [ 464.390809][ C0] Code: 44 89 f7 89 de e8 a2 8d 99 f6 41 39 de 0f 86 55 23 00 00 e8 d4 8b 99 f6 b8 04 00 00 00 48 89 84 24 88 00 00 00 48 8b 44 24 50 <44> 8d 68 02 31 ff 44 89 ee e8 f4 8f 99 f6 45 85 ed 0f 88 74 1f 00 [ 464.410433][ C0] RSP: 0018:ffffc90000007a40 EFLAGS: 00000283 [ 464.416546][ C0] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000040000 [ 464.424566][ C0] RDX: ffffc90002131000 RSI: 0000000000000003 RDI: 0000000000000004 [ 464.428945][ T45] libceph: connect (1)[c::]:6789 error -101 [ 464.432547][ C0] RBP: ffffc90000007c90 R08: ffffffff8afc9b85 R09: 1ffff1100ddde1cf [ 464.432574][ C0] R10: dffffc0000000000 R11: ffffed100ddde1d0 R12: dffffc0000000000 [ 464.432596][ C0] R13: ffff888063848780 R14: 0000000000020000 R15: ffff88806eef30b0 [ 464.432630][ C0] ? ieee80211_rx_list+0xa55/0x3780 [ 464.439020][ T45] libceph: mon0 (1)[c::]:6789 connect error [ 464.446454][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 464.446491][ C0] ? __lock_acquire+0x1346/0x1fd0 [ 464.446536][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 464.489848][ C0] ? __pfx_ieee80211_rx_list+0x10/0x10 [ 464.495354][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 464.500999][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 464.506646][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 464.512399][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 464.517468][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 464.523130][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 464.529160][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 464.535542][ C0] ? ieee80211_rx_napi+0xd6/0x3c0 [ 464.540624][ C0] ieee80211_rx_napi+0x18a/0x3c0 [ 464.545601][ C0] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 464.551990][ C0] ? __pfx_ieee80211_rx_napi+0x10/0x10 [ 464.557524][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 464.563204][ C0] ? skb_dequeue+0x113/0x150 [ 464.567878][ C0] ieee80211_handle_queued_frames+0xe7/0x1e0 [ 464.573934][ C0] tasklet_action_common+0x323/0x4d0 [ 464.579294][ C0] ? __pfx_tasklet_action_common+0x10/0x10 [ 464.585174][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 464.591571][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 464.597260][ C0] ? workqueue_softirq_action+0xca/0x140 [ 464.602974][ C0] handle_softirqs+0x2c6/0x970 [ 464.607814][ C0] ? do_softirq+0x11b/0x1e0 [ 464.612378][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 464.617722][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 464.623410][ C0] do_softirq+0x11b/0x1e0 [ 464.627771][ C0] [ 464.630717][ C0] [ 464.633718][ C0] ? __pfx_do_softirq+0x10/0x10 [ 464.638606][ C0] ? __pfx_lockdep_softirqs_on+0x10/0x10 [ 464.644264][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 464.649909][ C0] ? rcu_is_watching+0x15/0xb0 [ 464.654695][ C0] __local_bh_enable_ip+0x1bb/0x200 [ 464.659901][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 464.665543][ C0] ? ieee80211_xmit+0x30f/0x3f0 [ 464.670406][ C0] ? __ieee80211_tx_skb_tid_band+0x49e/0x610 [ 464.676402][ C0] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 464.682137][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 464.687776][ C0] ? __ieee80211_tx_skb_tid_band+0x4e2/0x610 [ 464.693783][ C0] ieee80211_handle_roc_started+0x267/0x440 [ 464.699728][ C0] ? ieee80211_handle_roc_started+0x14f/0x440 [ 464.705819][ C0] _ieee80211_start_next_roc+0x7a1/0xb00 [ 464.711515][ C0] cfg80211_wiphy_work+0x223/0x260 [ 464.716678][ C0] ? process_scheduled_works+0x945/0x1830 [ 464.722439][ C0] process_scheduled_works+0xa2e/0x1830 [ 464.728103][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 464.734139][ C0] ? assign_work+0x364/0x3d0 [ 464.738783][ C0] worker_thread+0x86d/0xd50 [ 464.743441][ C0] ? __kthread_parkme+0x169/0x1d0 [ 464.748505][ C0] ? __pfx_worker_thread+0x10/0x10 [ 464.753636][ C0] kthread+0x2f2/0x390 [ 464.757758][ C0] ? __pfx_worker_thread+0x10/0x10 [ 464.762924][ C0] ? __pfx_kthread+0x10/0x10 [ 464.767736][ C0] ret_from_fork+0x4d/0x80 [ 464.772190][ C0] ? __pfx_kthread+0x10/0x10 [ 464.776799][ C0] ret_from_fork_asm+0x1a/0x30 [ 464.781600][ C0] [ 464.784619][ C0] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 464.791899][ C0] CPU: 0 PID: 2405 Comm: kworker/u8:6 Not tainted 6.10.0-rc7-syzkaller-00012-g34afb82a3c67 #0 [ 464.802149][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 464.812226][ C0] Workqueue: events_unbound cfg80211_wiphy_work [ 464.818552][ C0] Call Trace: [ 464.821844][ C0] [ 464.824697][ C0] dump_stack_lvl+0x241/0x360 [ 464.829394][ C0] ? __pfx_dump_stack_lvl+0x10/0x10 [ 464.834705][ C0] ? __pfx__printk+0x10/0x10 [ 464.839334][ C0] ? _printk+0xd5/0x120 [ 464.843510][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 464.849141][ C0] ? vscnprintf+0x5d/0x90 [ 464.853474][ C0] panic+0x349/0x860 [ 464.857381][ C0] ? __warn+0x172/0x4e0 [ 464.861541][ C0] ? __pfx_panic+0x10/0x10 [ 464.865969][ C0] ? show_trace_log_lvl+0x4e6/0x520 [ 464.871199][ C0] ? ret_from_fork_asm+0x1a/0x30 [ 464.876165][ C0] __warn+0x346/0x4e0 [ 464.880160][ C0] ? kcov_remote_start+0x5a2/0x7e0 [ 464.885293][ C0] report_bug+0x2b3/0x500 [ 464.889640][ C0] ? kcov_remote_start+0x5a2/0x7e0 [ 464.894772][ C0] handle_bug+0x3e/0x70 [ 464.898995][ C0] exc_invalid_op+0x1a/0x50 [ 464.903522][ C0] asm_exc_invalid_op+0x1a/0x20 [ 464.908396][ C0] RIP: 0010:kcov_remote_start+0x5a2/0x7e0 [ 464.914134][ C0] Code: 24 00 00 00 00 9c 8f 04 24 f7 04 24 00 02 00 00 0f 85 a6 01 00 00 41 f7 c6 00 02 00 00 0f 84 93 fa ff ff fb e9 8d fa ff ff 90 <0f> 0b 90 e8 66 cd ef 09 89 c0 48 c7 c7 c8 d4 02 00 48 03 3c c5 e0 [ 464.933866][ C0] RSP: 0018:ffffc900000072b0 EFLAGS: 00010002 [ 464.939961][ C0] RAX: 0000000080010101 RBX: ffff8880294e0000 RCX: 0000000000000002 [ 464.947992][ C0] RDX: dffffc0000000000 RSI: ffffffff8bcaccc0 RDI: ffffffff8c1fe980 [ 464.955980][ C0] RBP: 0100000000000002 R08: ffffffff92fa75f7 R09: 1ffffffff25f4ebe [ 464.963995][ C0] R10: dffffc0000000000 R11: fffffbfff25f4ebf R12: ffffffff8196315e [ 464.971980][ C0] R13: ffff88802c695200 R14: 0000000000000006 R15: ffff8880b942d4c8 [ 464.979972][ C0] ? kcov_remote_start+0x9e/0x7e0 [ 464.985031][ C0] ? usb_unanchor_urb+0xa3/0xc0 [ 464.989897][ C0] ? usb_anchor_suspend_wakeups+0x3a/0x40 [ 464.995642][ C0] __usb_hcd_giveback_urb+0x405/0x6e0 [ 465.001028][ C0] ? __pfx___usb_hcd_giveback_urb+0x10/0x10 [ 465.006941][ C0] ? do_raw_spin_unlock+0x13c/0x8b0 [ 465.012162][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 465.017810][ C0] dummy_timer+0x830/0x45d0 [ 465.022328][ C0] ? __pfx_lock_release+0x10/0x10 [ 465.027376][ C0] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 465.033711][ C0] ? __hrtimer_run_queues+0x477/0xd50 [ 465.039131][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 465.044792][ C0] ? do_raw_spin_unlock+0x13c/0x8b0 [ 465.050022][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 465.054975][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 465.059925][ C0] __hrtimer_run_queues+0x59d/0xd50 [ 465.065146][ C0] ? ktime_get_update_offsets_now+0x3c/0x250 [ 465.071160][ C0] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 465.076896][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 465.082549][ C0] hrtimer_interrupt+0x396/0x990 [ 465.087525][ C0] __sysvec_apic_timer_interrupt+0x112/0x3f0 [ 465.093521][ C0] sysvec_apic_timer_interrupt+0x52/0xc0 [ 465.099166][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 465.105158][ C0] RIP: 0010:ieee80211_rx_list+0xabe/0x3780 [ 465.110985][ C0] Code: 44 89 f7 89 de e8 a2 8d 99 f6 41 39 de 0f 86 55 23 00 00 e8 d4 8b 99 f6 b8 04 00 00 00 48 89 84 24 88 00 00 00 48 8b 44 24 50 <44> 8d 68 02 31 ff 44 89 ee e8 f4 8f 99 f6 45 85 ed 0f 88 74 1f 00 [ 465.130611][ C0] RSP: 0018:ffffc90000007a40 EFLAGS: 00000283 [ 465.136691][ C0] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000040000 [ 465.144674][ C0] RDX: ffffc90002131000 RSI: 0000000000000003 RDI: 0000000000000004 [ 465.152658][ C0] RBP: ffffc90000007c90 R08: ffffffff8afc9b85 R09: 1ffff1100ddde1cf [ 465.160632][ C0] R10: dffffc0000000000 R11: ffffed100ddde1d0 R12: dffffc0000000000 [ 465.168611][ C0] R13: ffff888063848780 R14: 0000000000020000 R15: ffff88806eef30b0 [ 465.176592][ C0] ? ieee80211_rx_list+0xa55/0x3780 [ 465.181815][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 465.187464][ C0] ? __lock_acquire+0x1346/0x1fd0 [ 465.192499][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 465.198132][ C0] ? __pfx_ieee80211_rx_list+0x10/0x10 [ 465.203600][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 465.209239][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 465.214882][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 465.220518][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 465.225553][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 465.231194][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 465.237215][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 465.243609][ C0] ? ieee80211_rx_napi+0xd6/0x3c0 [ 465.248685][ C0] ieee80211_rx_napi+0x18a/0x3c0 [ 465.253645][ C0] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 465.259992][ C0] ? __pfx_ieee80211_rx_napi+0x10/0x10 [ 465.265481][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 465.271127][ C0] ? skb_dequeue+0x113/0x150 [ 465.275836][ C0] ieee80211_handle_queued_frames+0xe7/0x1e0 [ 465.281852][ C0] tasklet_action_common+0x323/0x4d0 [ 465.287171][ C0] ? __pfx_tasklet_action_common+0x10/0x10 [ 465.292991][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 465.299326][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 465.304959][ C0] ? workqueue_softirq_action+0xca/0x140 [ 465.310623][ C0] handle_softirqs+0x2c6/0x970 [ 465.315408][ C0] ? do_softirq+0x11b/0x1e0 [ 465.319926][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 465.325222][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 465.330864][ C0] do_softirq+0x11b/0x1e0 [ 465.335200][ C0] [ 465.338126][ C0] [ 465.341050][ C0] ? __pfx_do_softirq+0x10/0x10 [ 465.345922][ C0] ? __pfx_lockdep_softirqs_on+0x10/0x10 [ 465.351586][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 465.357229][ C0] ? rcu_is_watching+0x15/0xb0 [ 465.362017][ C0] __local_bh_enable_ip+0x1bb/0x200 [ 465.367251][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 465.372899][ C0] ? ieee80211_xmit+0x30f/0x3f0 [ 465.377750][ C0] ? __ieee80211_tx_skb_tid_band+0x49e/0x610 [ 465.383760][ C0] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 465.389484][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 465.395119][ C0] ? __ieee80211_tx_skb_tid_band+0x4e2/0x610 [ 465.401120][ C0] ieee80211_handle_roc_started+0x267/0x440 [ 465.407029][ C0] ? ieee80211_handle_roc_started+0x14f/0x440 [ 465.413112][ C0] _ieee80211_start_next_roc+0x7a1/0xb00 [ 465.418769][ C0] cfg80211_wiphy_work+0x223/0x260 [ 465.423911][ C0] ? process_scheduled_works+0x945/0x1830 [ 465.429635][ C0] process_scheduled_works+0xa2e/0x1830 [ 465.435218][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 465.441210][ C0] ? assign_work+0x364/0x3d0 [ 465.445822][ C0] worker_thread+0x86d/0xd50 [ 465.450465][ C0] ? __kthread_parkme+0x169/0x1d0 [ 465.455536][ C0] ? __pfx_worker_thread+0x10/0x10 [ 465.460651][ C0] kthread+0x2f2/0x390 [ 465.464741][ C0] ? __pfx_worker_thread+0x10/0x10 [ 465.469867][ C0] ? __pfx_kthread+0x10/0x10 [ 465.474469][ C0] ret_from_fork+0x4d/0x80 [ 465.478897][ C0] ? __pfx_kthread+0x10/0x10 [ 465.483489][ C0] ret_from_fork_asm+0x1a/0x30 [ 465.488275][ C0] [ 465.491417][ C0] Kernel Offset: disabled [ 465.495867][ C0] Rebooting in 86400 seconds..