last executing test programs: 1m55.795189807s ago: executing program 2 (id=3): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) rt_sigaction(0x800001, &(0x7f0000000000)={&(0x7f0000000480)="f346d37ff2f2438395ff1f965a00c4c1185c840561ee0000c4e17a5bbc60aff00000c4816a512425160000006fea6dc463f962d60066660f38090dc65f0000a89e670f2a6cda00c412c1fd1129", 0x0, 0x0}, 0x0, 0x0, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) epoll_create(0x1) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_X86_SETUP_MCE(r2, 0x4140aecd, &(0x7f00000003c0)) 1m54.566336051s ago: executing program 2 (id=7): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000400)='./file0\x00', 0xe, &(0x7f0000000580)={[{@dioread_lock}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x80}}, {@barrier_val={'barrier', 0x3d, 0x3}}, {@stripe={'stripe', 0x3d, 0x4}}, {@block_validity}, {@debug}]}, 0x3, 0x43b, &(0x7f0000000e00)="$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") r0 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) ioctl$TUNSETNOCSUM(r0, 0x400454c8, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x13, r0, 0x0) add_key$fscrypt_v1(0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000006c0)='./file0\x00', &(0x7f0000000800)='9p\x00', 0x0, 0x0) pwritev2(r0, &(0x7f0000000500)=[{&(0x7f0000000340)='\b', 0x1}, {&(0x7f00000011c0)='(', 0x1}], 0x2, 0x7, 0x0, 0x0) 1m53.172543831s ago: executing program 2 (id=13): syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000300)='./file1\x00', 0x10, &(0x7f0000000680), 0x1, 0x259, &(0x7f0000000940)="$eJzs3T1oJGUcBvBnZnc9c7fKqY0gfoCIaCCcnWBzNgoHchwiggonojbKRYgJdomVjYXWKqlsgtgZLSVNsFEEq6gpYiNosDBYaLGyOxvJx+qqm+yI8/vBZObNfPxndud5Z4qd3QCNdT7JxSStJLNJOkmKgwvcVQ3nh83Vmc2rSa/3+E/FYLmqXdlf71ySlSQPJtkoi7zUTpbWn975ZevRe99c7Nzz/vpTM1M9yKHdne3H9t67/MZHlx5Y+uKrHy4XuZjuoeM6ecWI/7WL5ObTKPYfUbTr3gP+jiuvffh1P/e3JLl7kP9OylRv3lsL1210cv+7f7bu2z9+eds09xU4eb1ep38NXOkBjVMm6aYo55JU02U5N1fdw3/TOlu+PL/w6uyL84vXnq+7pwJOSjfZfuSTMx+fO5L/71tV/odate4kcCr6+X/iytq3/ek9KYdmuL0a9fM/++zyfZF/aBz5hwZ54VCr7CY3JJF/aKDx1/9aPqIDTIH7f2gu+Yfmkn/4H+v89Wz5h+aSf2gu+YfmOph/AKBZemfqfgIZqEvd/Q8AAAAAAAAAAAAAAAAAAHDc6szm1f1hWjU/eyfZfThJe1T91uD3iJPrB3/P/lz0F/tDUa02kWfunHADE/qg5qevb/xu4pdwIp/fUWf1ZPlasvJ6kgvt9vHzrxief//eTWPmd56bsMA/VBxpP/TkdOsf9dtavfUvbSWf9vufC6P6nzK3Dsaj+5/u+K9YHuuVXyfcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFPzewAAAP//XUZr6A==") r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000140)='2', 0x1, 0x8000c61) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0xc4042, 0x1ff) sendfile(r1, r0, 0x0, 0xfffe83) r2 = open(&(0x7f00000005c0)='./file1\x00', 0x64842, 0x0) pwritev2(r2, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x1}], 0x1, 0x1200, 0x0, 0xb) 1m51.389486838s ago: executing program 2 (id=20): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f0000000040)={[{@grpquota}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x8}}, {@minixdf}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$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") lchown(&(0x7f00000006c0)='./file0\x00', 0x0, 0xee01) open(&(0x7f0000000140)='./bus\x00', 0x143142, 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000080)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, "ef359f413bb90152f7d6d1ce5d29c3ee5e5ca9000f7c41499dc2aac63a01000000000000004faa2ad9c084a003ea00", "036c47c67808200400000000000000335263bdbcef549ba197fce47ddfdd753abd950100002a00ffffffffffffffff00000000e8f20000000200", "b900000000fffffffff2060000000000000200"}) lchown(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) 1m50.012839055s ago: executing program 2 (id=24): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) r1 = syz_io_uring_setup(0x4169, &(0x7f0000000200)={0x0, 0x0, 0x10100}, &(0x7f0000000480), &(0x7f0000000000)=0x0) syz_open_procfs(0x0, 0x0) syz_io_uring_setup(0xa94, &(0x7f0000000280), &(0x7f0000000040)=0x0, &(0x7f00000005c0)) syz_io_uring_submit(r3, r2, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xfffffffffffffe54}) io_uring_enter(r1, 0x48e9, 0x0, 0x0, 0x0, 0x0) 1m47.020663046s ago: executing program 2 (id=32): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000440)={'vcan0\x00', 0x0}) r3 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r3, &(0x7f0000000040)={0x1d, r2, 0x0, {0x2, 0x0, 0x4}, 0x2}, 0x18) bind$can_j1939(r1, &(0x7f0000000080)={0x1d, r2, 0x2, {0x1, 0xf1, 0x2}, 0xfd}, 0x18) sendmsg$can_j1939(r3, &(0x7f0000000840)={&(0x7f0000000600)={0x1d, 0x0, 0x2, {0x1, 0x1, 0x4}, 0xff}, 0x18, &(0x7f0000000800)={&(0x7f0000000740)="e4", 0x1}, 0x1, 0x0, 0x0, 0x1}, 0x0) 1m44.559484031s ago: executing program 32 (id=32): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000440)={'vcan0\x00', 0x0}) r3 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r3, &(0x7f0000000040)={0x1d, r2, 0x0, {0x2, 0x0, 0x4}, 0x2}, 0x18) bind$can_j1939(r1, &(0x7f0000000080)={0x1d, r2, 0x2, {0x1, 0xf1, 0x2}, 0xfd}, 0x18) sendmsg$can_j1939(r3, &(0x7f0000000840)={&(0x7f0000000600)={0x1d, 0x0, 0x2, {0x1, 0x1, 0x4}, 0xff}, 0x18, &(0x7f0000000800)={&(0x7f0000000740)="e4", 0x1}, 0x1, 0x0, 0x0, 0x1}, 0x0) 1m28.913166877s ago: executing program 3 (id=76): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x169802, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x13, r1, 0x0) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000001080)={{}, 0x0, 0x16, @inherit={0x58, 0x0}, @devid}) ioctl$BLKRRPART(r1, 0x125f, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) ioctl$BLKRRPART(r1, 0x125f, 0x0) 1m24.860739492s ago: executing program 3 (id=79): openat2$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000000)="dba7447d1ac45d5077199af9a2a09ba64dbb802f5a53f51a840c02a466620775c9473ff3a889e25e452d99907520a3c7814557df113121f248414c80367865357f1a76815364be20a9e9fd1c4a0d437a89b0ca", 0x53}, {0x0}], 0x2, 0x7, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = dup(r2) ioctl$KVM_SET_CPUID2(r3, 0x4008ae90, &(0x7f0000000040)=ANY=[@ANYBLOB="010000000000000001000080"]) 1m23.458831173s ago: executing program 3 (id=81): r0 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)=@deltclass={0x24, 0x29, 0x300, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x4, 0x7}, {0x4, 0xd}, {0x1, 0xa}}}, 0x24}}, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0xfffffcb7, &(0x7f0000000280)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=@newtfilter={0x74, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0xfff2}, {}, {0x2, 0x1}}, [@filter_kind_options=@f_basic={{0xa}, {0x44, 0x2, [@TCA_BASIC_EMATCHES={0x40, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x800}}, @TCA_EMATCH_TREE_LIST={0x34, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1, 0x0, 0x0, {{0x5, 0x2, 0x5}, {0x3, 0x0, 0x1}}}, @TCF_EM_CANID={0x14, 0x2, 0x0, 0x0, {{0x4dc4, 0x7, 0x1}, {{0x2, 0x1, 0x1, 0x1}, {0x1, 0x1}}}}, @TCF_EM_CONTAINER={0xc, 0x3, 0x0, 0x0, {{0x4, 0x0, 0x9}}}]}]}]}}]}, 0x74}, 0x1, 0x0, 0x0, 0x4011}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1m22.778897093s ago: executing program 3 (id=84): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0xe, &(0x7f00000004c0)={[{@resuid}, {@init_itable}, {@stripe}, {@noblock_validity}]}, 0x3, 0x453, &(0x7f0000001f80)="$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") r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) syz_mount_image$fuse(0x0, &(0x7f0000000180)='./file2\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) chdir(&(0x7f0000000240)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0) 1m20.485118287s ago: executing program 3 (id=93): sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000006c0)=ANY=[@ANYBLOB="4c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="1502ffffffa100001c00128009000100766c616e000000000c000280060001000000000008000500", @ANYRES32=r3, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x4c}, 0x1, 0xba01}, 0x0) 1m19.786460354s ago: executing program 3 (id=95): r0 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x20}}, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000880)=@newtfilter={0x1a8, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0xfff3}, {}, {0x1c}}, [@filter_kind_options=@f_fw={{0x7}, {0x12a, 0x2, [@TCA_FW_ACT={0x130, 0x4, [@m_skbedit={0x12c, 0x1c, 0x0, 0x0, {{0xc}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x1}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0x80000001}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0xfffffff9}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0x27a}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0xd, 0xffff}}]}, {0xd5, 0x6, "e87999dd81d118dc8b25cfd8d1822588102595ab9d3c4f9f362f86de1ced59d713b6f5589d9544f25e02425d8498b75529a2a1560b05518747b6aade031ac5c1153840173a0741c91bc9764c6da69565a4fcb808f807b3df91703aa0317c831476252fa3dba31b787b812e58b52202f020d2ea33f31e0ffe76f573f22c3a6cc8049f690b573969a8ef12d4e6d7c47ff0d20bbdc3b775a439ef6daed88f695bed230821f635ff92e9b4aa6fbd2bcf409a68e2f16dbde519e0aba489b3e11cb8a2c559f243b3d06bceb11771434c302a9079"}, {0xc}, {0xc, 0x8, {0x1}}}}]}]}}, @filter_kind_options=@f_bpf={{}, {0x0, 0x2, [@TCA_BPF_CLASSID={0x0, 0x3, {0x1}}, @TCA_BPF_FLAGS_GEN={0x0, 0x9, 0x6}, @TCA_BPF_FD, @TCA_BPF_FD, @TCA_BPF_FLAGS_GEN={0x0, 0x9, 0x3}, @TCA_BPF_FD, @TCA_BPF_ACT={0x0, 0x1, [@m_ct={0x0, 0x5, 0x0, 0x0, {{}, {0x0, 0x2, 0x0, 0x1, [@TCA_CT_MARK_MASK={0x0, 0x6, 0x3}, @TCA_CT_NAT_IPV4_MIN={0x0, 0x9, @broadcast}, @TCA_CT_PARMS={0x0, 0x1, {0x9, 0x3, 0x1, 0xee8, 0xe467}}, @TCA_CT_MARK_MASK={0x0, 0x6, 0x8}, @TCA_CT_NAT_IPV6_MIN={0x0, 0xb, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x16}}}, @TCA_CT_NAT_IPV4_MIN={0x0, 0x9, @multicast1}, @TCA_CT_NAT_IPV4_MIN={0x0, 0x9, @initdev={0xac, 0x1e, 0x1, 0x0}}]}, {0x0, 0x6, "56084d84aae9e99a9bad718f83249695dfbed5ee57a7c2fda8a81bec195cd2243abc015adc2771c92875950cc768be16bb6067af25b5c305a145cda1f809f2b153b4a0c9593d72210e6cf6a2c46844060556baf5dd530e88a26f48e55dce9f2667e7fe4d788057fc9b5af06556b87df7ca75f8da88ddd6bfeb5d63e6ebba75f419777c9796d4f1d41bae7b1e878b1dd122d5df94b5e8475d1608cd224d197c7636109f835c5bb85ded0bc975910d8a9a79573d1d5ed297cdaebd47fe9cab8512"}, {0x0, 0x7, {0x1, 0x1}}, {0x0, 0x8, {0x0, 0x3}}}}, @m_gact={0x0, 0x4, 0x0, 0x0, {{}, {0x0, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0x0, 0x3, {0x0, 0x2700, 0xffffffffffffffff}}, @TCA_GACT_PROB={0x0, 0x3, {0x1, 0x244b, 0x2}}, @TCA_GACT_PROB={0x0, 0x3, {0x1, 0x1d0a, 0x7}}, @TCA_GACT_PARMS={0x0, 0x2, {0xc, 0x4, 0x2, 0x81, 0xd}}]}, {0x0, 0x6, "1f14c4136342f6df57d6d46267e4f26c739723e322d338180a47405f7a894bd867a2c7613670f4cea416c0cbb4599f7be7ed5b68d47554216144f59e6b47a5b490eee7ca026dd12b5b14d0c976aff22f0a88756a875196e3b2a1ba89e047e8d0975b270b9e7207c5a406faad53899a7145c951c47e0d4fa00faf246ca582ed4878d6e317026e3140c99b0a5be62a1bbcbbbbb2c94ce781e329b9ae64b3abb27f3730772cf44cfe4dec29ec76fc780483ec432735c9478bc3"}, {}, {0x0, 0x8, {0x2, 0x4}}}}]}, @TCA_BPF_CLASSID={0x0, 0x3, {0x10016, 0xf}}]}}, @TCA_RATE={0x6, 0x5, {0x3f, 0x1}}, @filter_kind_options=@f_flower={{0xb}, {0x2c, 0x2, [@TCA_FLOWER_KEY_CVLAN_ID={0x6, 0x4d, 0xcf5}, @TCA_FLOWER_KEY_ICMPV4_CODE_MASK={0x5}, @TCA_FLOWER_KEY_PORT_DST_MIN={0x6, 0x59, 0x4e21}, @TCA_FLOWER_KEY_ARP_SIP_MASK={0x8, 0x3a, 0xffffff00}, @TCA_FLOWER_FLAGS={0x8, 0x16, 0x16}]}}]}, 0x1a8}}, 0x44050) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1m17.01437834s ago: executing program 33 (id=95): r0 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x20}}, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000880)=@newtfilter={0x1a8, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0xfff3}, {}, {0x1c}}, [@filter_kind_options=@f_fw={{0x7}, {0x12a, 0x2, [@TCA_FW_ACT={0x130, 0x4, [@m_skbedit={0x12c, 0x1c, 0x0, 0x0, {{0xc}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x1}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0x80000001}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0xfffffff9}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0x27a}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0xd, 0xffff}}]}, {0xd5, 0x6, "e87999dd81d118dc8b25cfd8d1822588102595ab9d3c4f9f362f86de1ced59d713b6f5589d9544f25e02425d8498b75529a2a1560b05518747b6aade031ac5c1153840173a0741c91bc9764c6da69565a4fcb808f807b3df91703aa0317c831476252fa3dba31b787b812e58b52202f020d2ea33f31e0ffe76f573f22c3a6cc8049f690b573969a8ef12d4e6d7c47ff0d20bbdc3b775a439ef6daed88f695bed230821f635ff92e9b4aa6fbd2bcf409a68e2f16dbde519e0aba489b3e11cb8a2c559f243b3d06bceb11771434c302a9079"}, {0xc}, {0xc, 0x8, {0x1}}}}]}]}}, @filter_kind_options=@f_bpf={{}, {0x0, 0x2, [@TCA_BPF_CLASSID={0x0, 0x3, {0x1}}, @TCA_BPF_FLAGS_GEN={0x0, 0x9, 0x6}, @TCA_BPF_FD, @TCA_BPF_FD, @TCA_BPF_FLAGS_GEN={0x0, 0x9, 0x3}, @TCA_BPF_FD, @TCA_BPF_ACT={0x0, 0x1, [@m_ct={0x0, 0x5, 0x0, 0x0, {{}, {0x0, 0x2, 0x0, 0x1, [@TCA_CT_MARK_MASK={0x0, 0x6, 0x3}, @TCA_CT_NAT_IPV4_MIN={0x0, 0x9, @broadcast}, @TCA_CT_PARMS={0x0, 0x1, {0x9, 0x3, 0x1, 0xee8, 0xe467}}, @TCA_CT_MARK_MASK={0x0, 0x6, 0x8}, @TCA_CT_NAT_IPV6_MIN={0x0, 0xb, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x16}}}, @TCA_CT_NAT_IPV4_MIN={0x0, 0x9, @multicast1}, @TCA_CT_NAT_IPV4_MIN={0x0, 0x9, @initdev={0xac, 0x1e, 0x1, 0x0}}]}, {0x0, 0x6, "56084d84aae9e99a9bad718f83249695dfbed5ee57a7c2fda8a81bec195cd2243abc015adc2771c92875950cc768be16bb6067af25b5c305a145cda1f809f2b153b4a0c9593d72210e6cf6a2c46844060556baf5dd530e88a26f48e55dce9f2667e7fe4d788057fc9b5af06556b87df7ca75f8da88ddd6bfeb5d63e6ebba75f419777c9796d4f1d41bae7b1e878b1dd122d5df94b5e8475d1608cd224d197c7636109f835c5bb85ded0bc975910d8a9a79573d1d5ed297cdaebd47fe9cab8512"}, {0x0, 0x7, {0x1, 0x1}}, {0x0, 0x8, {0x0, 0x3}}}}, @m_gact={0x0, 0x4, 0x0, 0x0, {{}, {0x0, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0x0, 0x3, {0x0, 0x2700, 0xffffffffffffffff}}, @TCA_GACT_PROB={0x0, 0x3, {0x1, 0x244b, 0x2}}, @TCA_GACT_PROB={0x0, 0x3, {0x1, 0x1d0a, 0x7}}, @TCA_GACT_PARMS={0x0, 0x2, {0xc, 0x4, 0x2, 0x81, 0xd}}]}, {0x0, 0x6, "1f14c4136342f6df57d6d46267e4f26c739723e322d338180a47405f7a894bd867a2c7613670f4cea416c0cbb4599f7be7ed5b68d47554216144f59e6b47a5b490eee7ca026dd12b5b14d0c976aff22f0a88756a875196e3b2a1ba89e047e8d0975b270b9e7207c5a406faad53899a7145c951c47e0d4fa00faf246ca582ed4878d6e317026e3140c99b0a5be62a1bbcbbbbb2c94ce781e329b9ae64b3abb27f3730772cf44cfe4dec29ec76fc780483ec432735c9478bc3"}, {}, {0x0, 0x8, {0x2, 0x4}}}}]}, @TCA_BPF_CLASSID={0x0, 0x3, {0x10016, 0xf}}]}}, @TCA_RATE={0x6, 0x5, {0x3f, 0x1}}, @filter_kind_options=@f_flower={{0xb}, {0x2c, 0x2, [@TCA_FLOWER_KEY_CVLAN_ID={0x6, 0x4d, 0xcf5}, @TCA_FLOWER_KEY_ICMPV4_CODE_MASK={0x5}, @TCA_FLOWER_KEY_PORT_DST_MIN={0x6, 0x59, 0x4e21}, @TCA_FLOWER_KEY_ARP_SIP_MASK={0x8, 0x3a, 0xffffff00}, @TCA_FLOWER_FLAGS={0x8, 0x16, 0x16}]}}]}, 0x1a8}}, 0x44050) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1m3.741490501s ago: executing program 5 (id=33): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f0000000100)='./file1\x00', 0x101880a, &(0x7f00000003c0)=ANY=[@ANYRES16=0x0, @ANYRESHEX, @ANYRESHEX, @ANYRES64, @ANYRESDEC], 0x1, 0x550b, &(0x7f00000079c0)="$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") mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000380)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000002c0)={[{@workdir={'workdir', 0x3d, './file1'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@userxattr}], [], 0x2c}) 1m0.041542307s ago: executing program 5 (id=131): r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x400) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000040)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000500)={0x0, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r2, 0xc0884113, &(0x7f0000000240)={0x1, 0x91cc, 0x2000000, 0x10000, 0x0, 0x0, 0x80, 0x0, 0xfffffffffffffffe}) ioctl$SNDRV_PCM_IOCTL_STATUS_EXT32(r2, 0xc06c4124, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11}) 56.370977994s ago: executing program 5 (id=138): r0 = syz_open_procfs(0x0, &(0x7f0000000040)='stack\x00') r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x20, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4}]}, 0x20}}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 54.338719897s ago: executing program 34 (id=138): r0 = syz_open_procfs(0x0, &(0x7f0000000040)='stack\x00') r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x20, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4}]}, 0x20}}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 23.055298954s ago: executing program 4 (id=207): r0 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000000)='source', &(0x7f0000000040)='c:::\x00\xfdM\xab\x89\xff\xda\xc7dw2\xa1\xb2\xabuQQ\x14\x97\xc9\xfae\xc7\xa1U\xe2\xbe\"\xb9t\xa0\x0e\xfa\xdb\xf1\xa5.\xd87\xc3p\xa5l\xf8vC\xe2\xe8 \xd5-<#\x186\xe1\xbd\xc0\xc3\xb5N(vj\xa7+<:\xc4\xe00\x01\xdd \x82\x83\xed\x0e\xc4\x1d\xac\xef7\b\xd3Z5\\A\'\x18\xa2\xc3\xab\xc7`\xc3\v\xf3L\x9d[Q\x9e\x11@=\xa1\x9b\xdc\xb1\xef\xc3k<\x97L\xa0\xab\xa6\x1ce\xcd\x99\xb3m\xef\x87\xc5i^N\xbd@\x01\xc0\xb2\x88\xc3\xe2\x96T\xa3\xa5\xeb\x0f\xf2f\xb9$\xd2\x140xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r4, 0x0, 0xf3a, 0x0) tee(r3, r0, 0x8, 0x2) write$binfmt_script(r4, 0x0, 0xfffffe48) write(r1, 0x0, 0x0) 8.533771623s ago: executing program 6 (id=256): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000772904202404419957c20102030109022400e8ffff"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, &(0x7f00000004c0)={0x14, 0x0, &(0x7f0000000480)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x405}}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000b00)={0x14, 0x0, &(0x7f0000000ac0)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) 6.153634765s ago: executing program 0 (id=264): socketpair(0x1, 0x80001, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000005c0)={'ip_vti0\x00', &(0x7f0000000440)={'syztnl0\x00', 0x0, 0x7800, 0x7800, 0x0, 0xfffffffe, {{0x5, 0x4, 0x0, 0x3, 0x14, 0x0, 0x0, 0x9b, 0x4, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x64010102}}}}) socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x3, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], &(0x7f0000001040)='GPL\x00', 0x0, 0x6b, &(0x7f00000004c0)=""/153, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x15) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000500)={{r2}, &(0x7f0000000480), &(0x7f00000004c0)=r3}, 0x20) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000100)={'syztnl0\x00', &(0x7f0000000080)={'syztnl1\x00', r1, 0x29, 0x0, 0x1, 0xa4700000, 0x12, @private1={0xfc, 0x1, '\x00', 0x1}, @private0, 0x10, 0x7800, 0xc0000000, 0xa92}}) 5.751753429s ago: executing program 1 (id=266): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000006000000000084e27fc70000000f000000c5000000a000020095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='io_uring_register\x00', r0}, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000dfff75390000000000000000850000007d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='io_uring_register\x00', r1}, 0x10) r2 = io_uring_setup(0x6f6, &(0x7f0000005100)) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r2, 0x10, 0x0, 0x0) 5.571632671s ago: executing program 0 (id=267): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0xfff) syz_emit_ethernet(0x4a, &(0x7f0000000240)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000280)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xc2}}}}}}}, 0x0) syz_usb_connect(0x0, 0x3d, &(0x7f0000000140)=ANY=[@ANYBLOB="120100009daf4920cf106780272c010203010902"], 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000040)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "101040", 0x14, 0x6, 0x1, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x5, 0xc2}}}}}}}, 0x0) 5.299359463s ago: executing program 6 (id=268): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0xd}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x10, 0x3, 0x0, 0x1}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x51}, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 5.078442062s ago: executing program 1 (id=269): syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000240)='./file0\x00', 0x2000480, &(0x7f0000000000)={[{@jqfmt_vfsv0}, {@errors_remount}]}, 0x1, 0x784, &(0x7f00000007c0)="$eJzs3c1rHOUfAPDvbJKmSfv7JYKg9RQQNFC6MTW2Ch4qHkSwUNCz7bLZhppNtmQ3pQkBW0TwIqh4EPTSsy/15tWXq/4XHqSlalqseJDI7Eu7bXbTTZvdDeTzgck+z8xsnue7z8wzz+wMOwHsWRPpn0zEoYj4KIkYq89PImKomhqMOFFb7/b6Wj6dktjYePOPpLrOrfW1fDS9J3WgnnkyIn58P+JwZnO55ZXV+VyxWFiq56cqC+enyiurR84t5OYKc4XFY9MzM0ePv3D82M7F+tcvqwevf/zas9+c+Oe9J65++FMSJ+JgfVlzHDtlIibqn8lQ+hHe49WdLqzPkn5XgIeS7poDtb08DsVYDFRTbYz0smYAQLe8GxEbAMAekzj+A8Ae0/ge4Nb6Wr4x9fcbid668UpE7K/F37i+WVsyWL9mt796HXT0VnLPlZEkIsZ3oPyJiPjiu7e/Sqfo0nVIgFYuXY6IM+MTm/v/ZNM9C9v13FYLN4arLxP3zdb/Qe98n45/Xmw1/svcGf9Ei/HPcIt992E8eP/PXNuBYtpKx38vN93bdrsp/rrxgXruf9Ux31By9lyxkPZt/4+IyRgaTvPT1VVb3wU1efPfm+3Kbx7//fnJO1+m5aevd9fIXBscvvc9s7lK7lHjbrhxOeKpwVbxJ3faP2kz/j3VYRmvv/TB5+2WpfGn8TamzfF318aViGdatv/dtky2vD9xqro5TDU2iha+/fWz0XblN7d/OqXlN84FeiFt/9Gt4x9Pmu/XLG+/jJ+vjP3QbtmD42+9/e9L3qqm99XnXcxVKkvTEfuSNzbPP3r3vY18Y/00/smnW+//W23/6TnhmQ7jH7z++9cPH393pfHPbqv9t5+4ent+oF35nbX/TDU1WZ/TSf/XaQUf5bMDAAAAAAAAAAAAAAAAAAAAAAAAgE5lIuJgJJnsnXQmk83WnuH9eIxmiqVy5fDZ0vLibFSflT0eQ5nGT12ONf0e6nT99/Ab+aP35Z+PiMci4tPhkWo+my8VZ/sdPAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADUHWjz/P/Ub8P9rh0A0DX7+10BAKDnHP8BYO/Z3vF/pGv1AAB6x/k/AOw9HR//z3S3HgBA7zj/BwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoMtOnTyZTht/r6/l0/zshZXl+dKFI7OF8nx2YTmfzZeWzmfnSqW5YiGbLy20/UeXai/FUun8TCwuX5yqFMqVqfLK6umF0vJi5fS5hdxc4XRhqGeRAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEDnyiur87lisbAksWViZHdUY9ckBmNXVEOia4nmXmKkfx0UAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwC73XwAAAP//+Lkq2Q==") open(&(0x7f0000000200)='./bus\x00', 0x14507e, 0x0) r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)=ANY=[], 0xfd14) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000005e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0x541b, &(0x7f0000000000)={0xffffffffffffffff}) close_range(r2, 0xffffffffffffffff, 0x0) 4.507637482s ago: executing program 6 (id=271): r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f0000000040)) r2 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0xa2c65) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000180)) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r2, 0xc2604111, &(0x7f0000000540)={0x0, [[], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x2]], '\x00', [{}, {}, {}, {}, {}, {}, {0x8}, {}, {}, {}, {0x0, 0x20000}]}) ioctl$SNDCTL_DSP_GETODELAY(r0, 0x80045017, 0x0) 3.974329586s ago: executing program 1 (id=272): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000000000000004b64ffec850000006d000000670000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r1}, 0x10) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x300000b, 0x4031, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9, 0x12, r0, 0x0) 3.961269909s ago: executing program 7 (id=273): r0 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_STOP_AP(r0, &(0x7f0000002cc0)={0x0, 0x0, &(0x7f00000028c0)={0x0, 0x28}}, 0x0) getsockname$packet(r0, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)=@newlink={0x48, 0x10, 0x401, 0x0, 0x101, {0x0, 0x0, 0x0, 0x0, 0x9}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8, 0x1, r1}]}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x48}}, 0x0) 3.843430146s ago: executing program 6 (id=274): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5ac, 0x8241, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="000008000000080482"], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x0) ioctl$HIDIOCGUSAGE(r1, 0xd01c4813, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000980)={0x84, &(0x7f0000000000)={0x20, 0xa, 0x5, "8e73c802f7"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 3.363231854s ago: executing program 0 (id=275): r0 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}}, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0xfffa, 0x4}, {}, {0x1c, 0xfff9}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x86dd}]}}]}, 0x3c}}, 0x24000000) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 3.336990595s ago: executing program 7 (id=276): r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = syz_io_uring_setup(0x320e, &(0x7f0000000800)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000000540)=0x0) syz_io_uring_setup(0x297a, &(0x7f0000000200), &(0x7f00000002c0)=0x0, &(0x7f0000000080)) syz_io_uring_submit(r3, r2, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0}) io_uring_enter(r1, 0x3332, 0x0, 0x0, 0x0, 0x0) readv(r0, &(0x7f0000000700)=[{&(0x7f0000000580)=""/52, 0x34}], 0x1) ioctl$IMADDTIMER(r0, 0x80044940, &(0x7f0000000a80)) 2.56785213s ago: executing program 0 (id=277): r0 = syz_io_uring_setup(0x24fe, &(0x7f0000000200)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) sendmsg$NFC_CMD_DEP_LINK_UP(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000bc0)={0x0, 0x5c}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f00000001c0)=ANY=[@ANYBLOB='5'], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r0, 0x2d3e, 0x0, 0x0, 0x0, 0x0) 2.493270396s ago: executing program 1 (id=278): socketpair$unix(0x1, 0x1, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)}, 0x4040001) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x12, 0x4, 0x4, 0x15, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000008c0)=ANY=[@ANYRES32=r0, @ANYBLOB, @ANYBLOB, @ANYRES64=0x0], 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000b80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0xffff0000, 0xf0, 0xe200, &(0x7f0000001a40)="2b206d074843b397737ea49da2aa", 0x0, 0xf000, 0x720e, 0x0, 0x0, 0x0, 0x0}, 0x48) 2.439885607s ago: executing program 7 (id=279): syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00003e1000/0x18000)=nil, &(0x7f00000001c0)=[@textreal={0x8, &(0x7f0000000040)="b2f80c66b86a50148f66efbafc0cbaf80c66b8660f8b8b8eeebafc0cb0ddee7720b000ee0fc71e0b001b7a00ba4300b0cdee0f01c40f01d126f08258005cf2acf4", 0x41}], 0x1, 0x5e, 0x0, 0x0) r0 = syz_io_uring_setup(0x16d2, &(0x7f0000000240)={0x0, 0x0, 0x10100, 0x0, 0x198}, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_service_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f00000001c0)=ANY=[@ANYBLOB='6'], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_MKDIRAT={0x25, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r0, 0x2d3e, 0x0, 0x0, 0x0, 0x0) 1.850709827s ago: executing program 0 (id=280): syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x4400, &(0x7f0000000640), 0x1, 0x75d, &(0x7f0000001100)="$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") chdir(&(0x7f0000000440)='./file0\x00') r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x401c5820, &(0x7f0000000100)=@v1={0x8, @adiantum, 0x3, @desc1}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_ENABLE_VERITY(r1, 0x40806685, &(0x7f0000000a80)={0x1, 0x2, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, 0x0, 0x0) 1.665520189s ago: executing program 7 (id=281): r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = landlock_create_ruleset(&(0x7f0000000000)={0xe01, 0x2, 0x1}, 0x18, 0x0) landlock_restrict_self(r2, 0x0) bind$unix(r1, &(0x7f0000003000)=@file={0x1}, 0x6e) listen(r1, 0x0) connect$unix(r0, &(0x7f0000000640)=@file={0x1}, 0x6e) 1.282677319s ago: executing program 1 (id=282): getsockopt$bt_hci(0xffffffffffffffff, 0x84, 0xd, 0x0, 0x0) r0 = socket(0x40000000015, 0x5, 0x0) setsockopt$sock_int(r0, 0x1, 0x23, &(0x7f0000000000)=0x5, 0x4) bind$inet(r0, &(0x7f00008a5ff0)={0x2, 0x0, @loopback}, 0x10) recvmmsg(r0, &(0x7f00000040c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000015c0)=""/127, 0x7f}}], 0x1, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2, 0x0, @loopback}, 0x10) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2000000, 0x42073, 0xffffffffffffffff, 0xaba00000) 887.954384ms ago: executing program 7 (id=283): socket$inet(0x2, 0x2, 0x0) r0 = syz_io_uring_setup(0xd2, &(0x7f0000000480), &(0x7f0000000000)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, 0x10, 0x0, {0x0, r3}}) add_key$keyring(&(0x7f0000000000), 0x0, 0x0, 0x0, 0xfffffffffffffffd) io_uring_enter(r0, 0x47ba, 0x0, 0x0, 0x0, 0x0) 841.870422ms ago: executing program 6 (id=284): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = socket$inet(0x2, 0x5, 0x0) setsockopt$sock_int(r1, 0x1, 0x2e, &(0x7f0000000180)=0x7b, 0x4) shutdown(r1, 0x0) recvmmsg(r1, &(0x7f00000066c0), 0xa0d, 0x0, 0x0) 130.515451ms ago: executing program 1 (id=285): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x0, @private2}]}, &(0x7f0000000180)=0x10) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000100)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000080)={r3, 0x6}, 0x8) 130.091278ms ago: executing program 0 (id=286): connect$pppoe(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000d1d7a440041601801f44010203010902120001000000000904"], 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000000000), 0xdc3, 0x0) syz_usb_disconnect(r0) r2 = epoll_create(0xffff) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000040)) 0s ago: executing program 7 (id=287): ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000200)={0x0, 'pimreg0\x00', {0x3}, 0x43}) r0 = syz_io_uring_setup(0x24fa, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f00000001c0)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r0, 0x2d3e, 0x0, 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.204' (ED25519) to the list of known hosts. [ 191.540115][ T5782] cgroup: Unknown subsys name 'net' [ 191.675485][ T5782] cgroup: Unknown subsys name 'cpuset' [ 191.697487][ T5782] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 229.267115][ T1274] ieee802154 phy0 wpan0: encryption failed: -22 [ 229.274035][ T1274] ieee802154 phy1 wpan1: encryption failed: -22 [ 245.695397][ T5782] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 250.956563][ T5800] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 250.965664][ T5800] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 250.975517][ T5800] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 250.984317][ T5800] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 250.996817][ T5805] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 251.005550][ T5806] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 251.014832][ T5805] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 251.023136][ T5806] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 251.037447][ T5805] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 251.046724][ T5806] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 251.058032][ T5806] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 251.071313][ T5806] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 251.072866][ T5810] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 251.083713][ T5806] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 251.087999][ T5810] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 251.097157][ T5806] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 251.107422][ T5810] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 251.108634][ T5814] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 251.119127][ T5810] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 251.131967][ T5806] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 251.140852][ T5805] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 251.162351][ T5806] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 251.171715][ T5806] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 251.186954][ T5806] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 251.219691][ T5097] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 251.229965][ T5097] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 251.243378][ T5097] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 251.267906][ T5805] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 251.279296][ T5805] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 251.335714][ T5805] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 252.620673][ T5799] chnl_net:caif_netlink_parms(): no params data found [ 252.835810][ T5804] chnl_net:caif_netlink_parms(): no params data found [ 253.079457][ T5808] chnl_net:caif_netlink_parms(): no params data found [ 253.255482][ T5810] Bluetooth: hci1: command tx timeout [ 253.261364][ T5810] Bluetooth: hci3: command tx timeout [ 253.276875][ T5798] chnl_net:caif_netlink_parms(): no params data found [ 253.324903][ T5810] Bluetooth: hci0: command tx timeout [ 253.407192][ T5810] Bluetooth: hci2: command tx timeout [ 253.483800][ T5810] Bluetooth: hci4: command tx timeout [ 253.538925][ T5813] chnl_net:caif_netlink_parms(): no params data found [ 253.716587][ T5799] bridge0: port 1(bridge_slave_0) entered blocking state [ 253.728480][ T5799] bridge0: port 1(bridge_slave_0) entered disabled state [ 253.736744][ T5799] bridge_slave_0: entered allmulticast mode [ 253.745931][ T5799] bridge_slave_0: entered promiscuous mode [ 253.823306][ T5799] bridge0: port 2(bridge_slave_1) entered blocking state [ 253.831024][ T5799] bridge0: port 2(bridge_slave_1) entered disabled state [ 253.839933][ T5799] bridge_slave_1: entered allmulticast mode [ 253.849137][ T5799] bridge_slave_1: entered promiscuous mode [ 254.063878][ T5799] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 254.119815][ T5799] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 254.408542][ T5808] bridge0: port 1(bridge_slave_0) entered blocking state [ 254.419326][ T5808] bridge0: port 1(bridge_slave_0) entered disabled state [ 254.427406][ T5808] bridge_slave_0: entered allmulticast mode [ 254.436389][ T5808] bridge_slave_0: entered promiscuous mode [ 254.450130][ T5804] bridge0: port 1(bridge_slave_0) entered blocking state [ 254.458251][ T5804] bridge0: port 1(bridge_slave_0) entered disabled state [ 254.466017][ T5804] bridge_slave_0: entered allmulticast mode [ 254.474997][ T5804] bridge_slave_0: entered promiscuous mode [ 254.487081][ T5808] bridge0: port 2(bridge_slave_1) entered blocking state [ 254.495340][ T5808] bridge0: port 2(bridge_slave_1) entered disabled state [ 254.503233][ T5808] bridge_slave_1: entered allmulticast mode [ 254.512327][ T5808] bridge_slave_1: entered promiscuous mode [ 254.531861][ T5799] team0: Port device team_slave_0 added [ 254.648614][ T5804] bridge0: port 2(bridge_slave_1) entered blocking state [ 254.656506][ T5804] bridge0: port 2(bridge_slave_1) entered disabled state [ 254.664350][ T5804] bridge_slave_1: entered allmulticast mode [ 254.673670][ T5804] bridge_slave_1: entered promiscuous mode [ 254.688868][ T5799] team0: Port device team_slave_1 added [ 254.780331][ T5798] bridge0: port 1(bridge_slave_0) entered blocking state [ 254.788448][ T5798] bridge0: port 1(bridge_slave_0) entered disabled state [ 254.796316][ T5798] bridge_slave_0: entered allmulticast mode [ 254.805584][ T5798] bridge_slave_0: entered promiscuous mode [ 254.823772][ T5798] bridge0: port 2(bridge_slave_1) entered blocking state [ 254.831586][ T5798] bridge0: port 2(bridge_slave_1) entered disabled state [ 254.841167][ T5798] bridge_slave_1: entered allmulticast mode [ 254.850319][ T5798] bridge_slave_1: entered promiscuous mode [ 255.239975][ T5808] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 255.284596][ T5813] bridge0: port 1(bridge_slave_0) entered blocking state [ 255.292486][ T5813] bridge0: port 1(bridge_slave_0) entered disabled state [ 255.300024][ T5813] bridge_slave_0: entered allmulticast mode [ 255.308855][ T5813] bridge_slave_0: entered promiscuous mode [ 255.322559][ T5799] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 255.322787][ T5810] Bluetooth: hci1: command tx timeout [ 255.329620][ T5799] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 255.329762][ T5799] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 255.335591][ T5810] Bluetooth: hci3: command tx timeout [ 255.373147][ T5804] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 255.387677][ T5813] bridge0: port 2(bridge_slave_1) entered blocking state [ 255.396008][ T5813] bridge0: port 2(bridge_slave_1) entered disabled state [ 255.403867][ T5813] bridge_slave_1: entered allmulticast mode [ 255.412345][ T5097] Bluetooth: hci0: command tx timeout [ 255.413306][ T5813] bridge_slave_1: entered promiscuous mode [ 255.435848][ T5808] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 255.454868][ T5798] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 255.474034][ T5804] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 255.483452][ T5097] Bluetooth: hci2: command tx timeout [ 255.491594][ T5799] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 255.498980][ T5799] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 255.525275][ T5799] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 255.562468][ T5097] Bluetooth: hci4: command tx timeout [ 255.579898][ T5798] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 255.839299][ T5813] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 255.854897][ T5798] team0: Port device team_slave_0 added [ 255.868161][ T5808] team0: Port device team_slave_0 added [ 255.881478][ T5798] team0: Port device team_slave_1 added [ 255.896775][ T5804] team0: Port device team_slave_0 added [ 255.950678][ T5813] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 256.000849][ T5808] team0: Port device team_slave_1 added [ 256.015430][ T5804] team0: Port device team_slave_1 added [ 256.213312][ T5798] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 256.220485][ T5798] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 256.246998][ T5798] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 256.300589][ T5799] hsr_slave_0: entered promiscuous mode [ 256.311157][ T5799] hsr_slave_1: entered promiscuous mode [ 256.353082][ T5804] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 256.360255][ T5804] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 256.386811][ T5804] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 256.401282][ T5798] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 256.409921][ T5798] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 256.437533][ T5798] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 256.456234][ T5813] team0: Port device team_slave_0 added [ 256.468091][ T5808] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 256.475431][ T5808] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 256.501788][ T5808] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 256.515919][ T5804] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 256.523599][ T5804] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 256.549966][ T5804] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 256.584072][ T5813] team0: Port device team_slave_1 added [ 256.626695][ T5808] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 256.634180][ T5808] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 256.660588][ T5808] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 256.906224][ T5813] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 256.913548][ T5813] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 256.940761][ T5813] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 257.029514][ T5804] hsr_slave_0: entered promiscuous mode [ 257.038769][ T5804] hsr_slave_1: entered promiscuous mode [ 257.049105][ T5804] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 257.058333][ T5804] Cannot create hsr debugfs directory [ 257.107585][ T5798] hsr_slave_0: entered promiscuous mode [ 257.116884][ T5798] hsr_slave_1: entered promiscuous mode [ 257.125719][ T5798] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 257.134877][ T5798] Cannot create hsr debugfs directory [ 257.144681][ T5813] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 257.151888][ T5813] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 257.178494][ T5813] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 257.319468][ T5808] hsr_slave_0: entered promiscuous mode [ 257.330003][ T5808] hsr_slave_1: entered promiscuous mode [ 257.339044][ T5808] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 257.347415][ T5808] Cannot create hsr debugfs directory [ 257.404170][ T5097] Bluetooth: hci3: command tx timeout [ 257.409880][ T5810] Bluetooth: hci1: command tx timeout [ 257.490321][ T5097] Bluetooth: hci0: command tx timeout [ 257.562455][ T5097] Bluetooth: hci2: command tx timeout [ 257.649661][ T5097] Bluetooth: hci4: command tx timeout [ 257.859331][ T5813] hsr_slave_0: entered promiscuous mode [ 257.869470][ T5813] hsr_slave_1: entered promiscuous mode [ 257.877755][ T5813] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 257.887096][ T5813] Cannot create hsr debugfs directory [ 258.651896][ T5799] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 258.726063][ T5799] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 258.819087][ T5799] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 258.840751][ T5799] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 258.860939][ T5808] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 258.936457][ T5808] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 259.040290][ T5798] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 259.065623][ T5808] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 259.105187][ T5808] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 259.126159][ T5798] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 259.154112][ T5798] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 259.272984][ T5798] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 259.332351][ T5804] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 259.458733][ T5813] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 259.487166][ T5097] Bluetooth: hci3: command tx timeout [ 259.493055][ T5810] Bluetooth: hci1: command tx timeout [ 259.499109][ T5804] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 259.545720][ T5813] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 259.566875][ T5097] Bluetooth: hci0: command tx timeout [ 259.584418][ T5813] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 259.642722][ T5097] Bluetooth: hci2: command tx timeout [ 259.651133][ T5804] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 259.677771][ T5813] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 259.715717][ T5804] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 259.724677][ T5097] Bluetooth: hci4: command tx timeout [ 260.661869][ T5808] 8021q: adding VLAN 0 to HW filter on device bond0 [ 260.721724][ T5799] 8021q: adding VLAN 0 to HW filter on device bond0 [ 260.798365][ T5813] 8021q: adding VLAN 0 to HW filter on device bond0 [ 260.862805][ T5798] 8021q: adding VLAN 0 to HW filter on device bond0 [ 260.922709][ T5808] 8021q: adding VLAN 0 to HW filter on device team0 [ 260.994033][ T5799] 8021q: adding VLAN 0 to HW filter on device team0 [ 261.059634][ T5804] 8021q: adding VLAN 0 to HW filter on device bond0 [ 261.085636][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 261.093396][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 261.110951][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 261.118723][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 261.146896][ T5798] 8021q: adding VLAN 0 to HW filter on device team0 [ 261.232724][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 261.240404][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 261.256597][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 261.264413][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 261.280893][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 261.288695][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 261.304977][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 261.312792][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 261.352885][ T5813] 8021q: adding VLAN 0 to HW filter on device team0 [ 261.596319][ T5804] 8021q: adding VLAN 0 to HW filter on device team0 [ 261.617394][ T4726] bridge0: port 1(bridge_slave_0) entered blocking state [ 261.625199][ T4726] bridge0: port 1(bridge_slave_0) entered forwarding state [ 261.656813][ T4726] bridge0: port 2(bridge_slave_1) entered blocking state [ 261.664545][ T4726] bridge0: port 2(bridge_slave_1) entered forwarding state [ 261.884908][ T4726] bridge0: port 1(bridge_slave_0) entered blocking state [ 261.892756][ T4726] bridge0: port 1(bridge_slave_0) entered forwarding state [ 261.988207][ T1869] bridge0: port 2(bridge_slave_1) entered blocking state [ 261.996137][ T1869] bridge0: port 2(bridge_slave_1) entered forwarding state [ 263.790658][ T5799] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 263.891792][ T5808] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 264.044586][ T5813] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 264.226149][ T5798] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 264.590092][ T5808] veth0_vlan: entered promiscuous mode [ 264.690874][ T5808] veth1_vlan: entered promiscuous mode [ 264.754668][ T5804] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 264.888101][ T5813] veth0_vlan: entered promiscuous mode [ 264.941654][ T5798] veth0_vlan: entered promiscuous mode [ 265.036548][ T5813] veth1_vlan: entered promiscuous mode [ 265.106863][ T5808] veth0_macvtap: entered promiscuous mode [ 265.156595][ T5798] veth1_vlan: entered promiscuous mode [ 265.225078][ T5808] veth1_macvtap: entered promiscuous mode [ 265.417719][ T5804] veth0_vlan: entered promiscuous mode [ 265.538195][ T5808] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 265.559926][ T5813] veth0_macvtap: entered promiscuous mode [ 265.584191][ T5804] veth1_vlan: entered promiscuous mode [ 265.619111][ T5813] veth1_macvtap: entered promiscuous mode [ 265.659537][ T5808] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 265.743907][ T5808] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 265.753213][ T5808] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 265.762649][ T5808] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 265.771717][ T5808] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 265.828230][ T5798] veth0_macvtap: entered promiscuous mode [ 265.882884][ T5813] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 265.893905][ T5813] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 265.908728][ T5813] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 265.949823][ T5798] veth1_macvtap: entered promiscuous mode [ 266.046566][ T5813] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 266.057450][ T5813] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 266.072389][ T5813] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 266.090536][ T5804] veth0_macvtap: entered promiscuous mode [ 266.139760][ T5804] veth1_macvtap: entered promiscuous mode [ 266.211556][ T5798] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 266.222694][ T5798] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 266.232918][ T5798] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 266.243801][ T5798] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 266.258536][ T5798] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 266.290234][ T5813] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 266.303893][ T5813] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 266.313217][ T5813] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 266.322494][ T5813] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 266.459474][ T5798] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 266.470409][ T5798] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 266.480665][ T5798] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 266.491489][ T5798] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 266.506210][ T5798] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 266.567937][ T5804] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 266.579170][ T5804] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 266.589519][ T5804] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 266.600370][ T5804] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 266.611618][ T5804] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 266.622468][ T5804] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 266.637023][ T5804] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 266.749599][ T5798] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 266.759037][ T5798] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 266.770715][ T5798] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 266.780264][ T5798] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 266.804010][ T5804] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 266.814849][ T5804] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 266.825134][ T5804] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 266.835963][ T5804] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 266.846072][ T5804] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 266.857155][ T5804] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 266.874804][ T5804] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 267.116971][ T5804] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 267.126366][ T5804] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 267.135637][ T5804] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 267.144824][ T5804] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 267.338799][ T5799] veth0_vlan: entered promiscuous mode [ 267.472696][ T5799] veth1_vlan: entered promiscuous mode [ 267.815499][ T5799] veth0_macvtap: entered promiscuous mode [ 267.898364][ T5799] veth1_macvtap: entered promiscuous mode [ 268.089174][ T5799] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 268.101164][ T5799] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 268.111499][ T5799] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 268.124141][ T5799] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 268.134799][ T5799] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 268.145898][ T5799] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 268.156087][ T5799] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 268.166978][ T5799] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 268.183818][ T5799] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 268.238983][ T5799] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 268.249939][ T5799] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 268.260258][ T5799] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 268.271074][ T5799] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 268.281320][ T5799] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 268.296006][ T5799] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 268.306704][ T5799] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 268.317522][ T5799] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 268.332591][ T5799] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 268.570240][ T5799] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 268.581629][ T5799] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 268.591687][ T5799] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 268.600930][ T5799] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 273.133826][ T4726] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 273.141965][ T4726] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 273.398800][ T4863] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 273.415310][ T4863] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 273.590596][ T4807] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 273.600214][ T4807] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 273.829948][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 273.838234][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 273.901743][ T3836] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 273.910010][ T3836] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 273.948258][ T5808] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 274.153678][ T1869] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 274.161780][ T1869] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 274.583397][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 274.591658][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 274.937427][ T3836] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 274.945824][ T3836] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 275.151771][ T5987] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 276.111761][ T5999] loop2: detected capacity change from 0 to 512 [ 276.197121][ T4083] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 276.200769][ T5999] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 276.205236][ T4083] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 276.226674][ T5999] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 276.310463][ T5999] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c018, mo2=0002] [ 276.527409][ T4083] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 276.535950][ T4083] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 276.544554][ T5999] System zones: 1-12 [ 276.733767][ T5999] EXT4-fs (loop2): 1 truncate cleaned up [ 276.741799][ T5999] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 277.450130][ T5813] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 278.012837][ T6022] input: syz0 as /devices/virtual/input/input5 [ 278.050881][ T6025] loop2: detected capacity change from 0 to 128 [ 278.210640][ T6025] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 278.317442][ T6025] ext4 filesystem being mounted at /2/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 278.407311][ T5858] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 278.600808][ T5855] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 278.704233][ T5858] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 278.716531][ T5858] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 278.728592][ T5858] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 278.740512][ T5858] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 278.753937][ T5858] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 278.763521][ T5858] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 279.000598][ T5855] usb 4-1: config 0 has no interfaces? [ 279.008875][ T5855] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=64.46 [ 279.019076][ T5855] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 279.037888][ T5858] usb 5-1: config 0 descriptor?? [ 279.047052][ T6027] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 279.061929][ T5855] usb 4-1: config 0 descriptor?? [ 279.184500][ T5813] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 279.438965][ T6040] loop2: detected capacity change from 0 to 512 [ 279.664131][ T5858] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 279.669858][ T5858] plantronics 0003:047F:FFFF.0001: No inputs registered, leaving [ 279.755188][ T5858] plantronics 0003:047F:FFFF.0001: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 279.829183][ T6040] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 279.829613][ T6040] ext4 filesystem being mounted at /3/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 279.911508][ T5858] usb 5-1: USB disconnect, device number 2 [ 280.055592][ T6040] loop2: detected capacity change from 512 to 0 [ 280.058001][ T6051] syz.2.20: attempt to access beyond end of device [ 280.058001][ T6051] loop2: rw=12288, sector=76, nr_sectors = 4 limit=0 [ 280.058181][ T6051] Quota error (device loop2): qtree_write_dquot: dquota write failed [ 280.058356][ T6051] EXT4-fs error (device loop2): ext4_write_dquot:6918: comm syz.2.20: Failed to commit dquot type 1 [ 280.058566][ T6051] syz.2.20: attempt to access beyond end of device [ 280.058566][ T6051] loop2: rw=145409, sector=0, nr_sectors = 4 limit=0 [ 280.058717][ T6051] Buffer I/O error on dev loop2, logical block 0, lost sync page write [ 280.058829][ T6051] EXT4-fs (loop2): I/O error while writing superblock [ 280.059042][ T6051] syz.2.20: attempt to access beyond end of device [ 280.059042][ T6051] loop2: rw=12288, sector=76, nr_sectors = 4 limit=0 [ 280.059197][ T6051] Quota error (device loop2): qtree_write_dquot: dquota write failed [ 280.059362][ T6051] EXT4-fs error (device loop2): ext4_write_dquot:6918: comm syz.2.20: Failed to commit dquot type 1 [ 280.059554][ T6051] syz.2.20: attempt to access beyond end of device [ 280.059554][ T6051] loop2: rw=145409, sector=0, nr_sectors = 4 limit=0 [ 280.059697][ T6051] Buffer I/O error on dev loop2, logical block 0, lost sync page write [ 280.059799][ T6051] EXT4-fs (loop2): I/O error while writing superblock [ 280.088547][ T1869] kworker/u8:7: attempt to access beyond end of device [ 280.088547][ T1869] loop2: rw=12288, sector=64, nr_sectors = 4 limit=0 [ 280.270577][ T1869] Quota error (device loop2): remove_tree: Can't read quota data block 1 [ 280.279495][ T1869] EXT4-fs error (device loop2): ext4_release_dquot:6961: comm kworker/u8:7: Failed to release dquot type 1 [ 280.292662][ T1869] kworker/u8:7: attempt to access beyond end of device [ 280.292662][ T1869] loop2: rw=145409, sector=0, nr_sectors = 4 limit=0 [ 280.307761][ T1869] Buffer I/O error on dev loop2, logical block 0, lost sync page write [ 280.316509][ T1869] EXT4-fs (loop2): I/O error while writing superblock [ 280.517223][ T5813] syz-executor: attempt to access beyond end of device [ 280.517223][ T5813] loop2: rw=12288, sector=12, nr_sectors = 4 limit=0 [ 281.404470][ T3836] kworker/u8:17: attempt to access beyond end of device [ 281.404470][ T3836] loop2: rw=524288, sector=140, nr_sectors = 4 limit=0 [ 281.419077][ T3836] kworker/u8:17: attempt to access beyond end of device [ 281.419077][ T3836] loop2: rw=524288, sector=144, nr_sectors = 4 limit=0 [ 281.433495][ T3836] kworker/u8:17: attempt to access beyond end of device [ 281.433495][ T3836] loop2: rw=12288, sector=136, nr_sectors = 4 limit=0 [ 281.449802][ T3836] EXT4-fs error (device loop2): __ext4_get_inode_loc_noinmem:4558: inode #4: block 34: comm kworker/u8:17: unable to read itable block [ 281.470568][ T3836] Buffer I/O error on dev loop2, logical block 0, lost sync page write [ 281.481665][ T3836] EXT4-fs (loop2): I/O error while writing superblock [ 281.704837][ T5159] usb 4-1: USB disconnect, device number 2 [ 281.889609][ T3836] EXT4-fs error (device loop2): __ext4_get_inode_loc_noinmem:4558: inode #12: block 34: comm kworker/u8:17: unable to read itable block [ 281.904188][ T3836] Buffer I/O error on dev loop2, logical block 0, lost sync page write [ 281.913487][ T3836] EXT4-fs (loop2): I/O error while writing superblock [ 282.440601][ T5813] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 282.716958][ T5813] Buffer I/O error on dev loop2, logical block 0, lost sync page write [ 282.725982][ T5813] EXT4-fs (loop2): I/O error while writing superblock [ 282.801129][ T6053] loop0: detected capacity change from 0 to 32768 [ 282.810277][ T6053] ======================================================= [ 282.810277][ T6053] WARNING: The mand mount option has been deprecated and [ 282.810277][ T6053] and is ignored by this kernel. Remove the mand [ 282.810277][ T6053] option from the mount to silence this warning. [ 282.810277][ T6053] ======================================================= [ 282.860778][ T6043] Buffer I/O error on dev loop2, logical block 12, lost sync page write [ 283.019194][ T6053] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 283.112322][ T6053] (syz.0.23,6053,1):ocfs2_read_blocks_sync:112 ERROR: status = -12 [ 283.120630][ T6053] (syz.0.23,6053,1):ocfs2_get_suballoc_slot_bit:2786 ERROR: read block 124554051584 failed -12 [ 283.131705][ T6053] (syz.0.23,6053,1):ocfs2_get_suballoc_slot_bit:2818 ERROR: status = -12 [ 283.140720][ T6053] (syz.0.23,6053,1):ocfs2_test_inode_bit:2900 ERROR: get alloc slot and bit failed -12 [ 283.150836][ T6053] (syz.0.23,6053,1):ocfs2_test_inode_bit:2941 ERROR: status = -12 [ 283.159097][ T6053] (syz.0.23,6053,1):ocfs2_get_dentry:78 ERROR: test inode bit failed -12 [ 283.330921][ T6064] loop3: detected capacity change from 0 to 256 [ 283.539372][ T5798] ocfs2: Unmounting device (7,0) on (node local) [ 283.780297][ T6064] FAT-fs (loop3): Directory bread(block 64) failed [ 283.787371][ T6064] FAT-fs (loop3): Directory bread(block 65) failed [ 283.794785][ T6064] FAT-fs (loop3): Directory bread(block 66) failed [ 283.801593][ T6064] FAT-fs (loop3): Directory bread(block 67) failed [ 283.816143][ T6064] FAT-fs (loop3): Directory bread(block 68) failed [ 283.827524][ T6064] FAT-fs (loop3): Directory bread(block 69) failed [ 283.834897][ T6064] FAT-fs (loop3): Directory bread(block 70) failed [ 283.841820][ T6064] FAT-fs (loop3): Directory bread(block 71) failed [ 283.849061][ T6064] FAT-fs (loop3): Directory bread(block 72) failed [ 283.856046][ T6064] FAT-fs (loop3): Directory bread(block 73) failed [ 284.343662][ T6064] process 'syz.3.28' launched '/dev/fd/5' with NULL argv: empty string added [ 284.546423][ T13] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 284.602504][ T6070] netlink: 4 bytes leftover after parsing attributes in process `syz.0.31'. [ 284.659924][ T6070] Zero length message leads to an empty skb [ 284.680819][ T13] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 284.819428][ T13] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 285.016854][ T13] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 285.387540][ T13] bridge_slave_1: left allmulticast mode [ 285.394014][ T13] bridge_slave_1: left promiscuous mode [ 285.400736][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 285.500338][ T13] bridge_slave_0: left allmulticast mode [ 285.506694][ T13] bridge_slave_0: left promiscuous mode [ 285.514575][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 286.111858][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 286.207985][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 286.256031][ T13] bond0 (unregistering): Released all slaves [ 287.036949][ T13] hsr_slave_0: left promiscuous mode [ 287.099198][ T13] hsr_slave_1: left promiscuous mode [ 287.123700][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 287.131591][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 287.213057][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 287.221422][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 287.329004][ T13] veth1_macvtap: left promiscuous mode [ 287.335719][ T13] veth0_macvtap: left promiscuous mode [ 287.341671][ T13] veth1_vlan: left promiscuous mode [ 287.347487][ T13] veth0_vlan: left promiscuous mode [ 287.355670][ T5810] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 287.473691][ T5810] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 287.490561][ T5810] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 287.509440][ T5810] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 287.608921][ T5810] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 287.624664][ T5810] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 288.513629][ T13] team0 (unregistering): Port device team_slave_1 removed [ 288.571042][ T13] team0 (unregistering): Port device team_slave_0 removed [ 290.222296][ T5097] Bluetooth: hci4: command tx timeout [ 290.816237][ T1274] ieee802154 phy0 wpan0: encryption failed: -22 [ 290.824818][ T1274] ieee802154 phy1 wpan1: encryption failed: -22 [ 291.986788][ T6123] loop4: detected capacity change from 0 to 32768 [ 292.276614][ T6090] chnl_net:caif_netlink_parms(): no params data found [ 292.302867][ T5810] Bluetooth: hci4: command tx timeout [ 292.317496][ T6144] fuse: Bad value for 'fd' [ 292.712309][ T6148] syz.3.55 uses obsolete (PF_INET,SOCK_PACKET) [ 292.799013][ T6148] syzkaller1: entered promiscuous mode [ 294.028666][ T6160] loop0: detected capacity change from 0 to 512 [ 294.147315][ T6160] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 294.319000][ T6160] EXT4-fs error (device loop0): ext4_orphan_get:1389: inode #15: comm syz.0.57: casefold flag without casefold feature [ 294.364601][ T5810] Bluetooth: hci4: command tx timeout [ 294.435693][ T6160] EXT4-fs error (device loop0): ext4_orphan_get:1394: comm syz.0.57: couldn't read orphan inode 15 (err -117) [ 294.705820][ T6160] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 294.824329][ T6173] input: syz0 as /devices/virtual/input/input6 [ 295.264979][ T6090] bridge0: port 1(bridge_slave_0) entered blocking state [ 295.272951][ T6090] bridge0: port 1(bridge_slave_0) entered disabled state [ 295.288854][ T6090] bridge_slave_0: entered allmulticast mode [ 295.298498][ T6090] bridge_slave_0: entered promiscuous mode [ 295.524071][ T6090] bridge0: port 2(bridge_slave_1) entered blocking state [ 295.531844][ T6090] bridge0: port 2(bridge_slave_1) entered disabled state [ 295.540035][ T6090] bridge_slave_1: entered allmulticast mode [ 295.549533][ T6090] bridge_slave_1: entered promiscuous mode [ 295.735540][ T5798] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 295.872979][ T6182] trusted_key: syz.4.62 sent an empty control message without MSG_MORE. [ 296.230349][ T6090] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 296.391489][ T6090] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 296.482314][ T5810] Bluetooth: hci4: command tx timeout [ 296.779039][ T6090] team0: Port device team_slave_0 added [ 296.801826][ T6090] team0: Port device team_slave_1 added [ 297.101407][ T6196] loop0: detected capacity change from 0 to 4096 [ 297.147425][ T6199] loop1: detected capacity change from 0 to 512 [ 297.159166][ T6199] EXT4-fs: Ignoring removed i_version option [ 297.165769][ T6199] EXT4-fs: Ignoring removed nobh option [ 297.295780][ T6196] ntfs3(loop0): This driver is compiled without CONFIG_NTFS3_64BIT_CLUSTER (like windows driver). [ 297.295780][ T6196] Volume contains 64 bits run: vcn 0, lcn ffffffffff000000, len 7ff. [ 297.295780][ T6196] Activate CONFIG_NTFS3_64BIT_CLUSTER to process this case [ 297.323299][ T6196] ntfs3(loop0): Mark volume as dirty due to NTFS errors [ 297.334433][ T6196] ntfs3(loop0): Failed to load $BadClus (-95). [ 297.415540][ T6090] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 297.423037][ T6090] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 297.451678][ T6090] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 297.625463][ T6196] loop0: detected capacity change from 0 to 128 [ 297.637311][ T6196] ufs: Invalid option: "FfFe4Fg Æd" or missing value [ 297.644609][ T6196] ufs: wrong mount options [ 297.677582][ T6090] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 297.686098][ T6090] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 297.713217][ T6090] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 298.179192][ T6199] EXT4-fs (loop1): Test dummy encryption mode enabled [ 298.186769][ T6199] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 298.435405][ T6090] hsr_slave_0: entered promiscuous mode [ 298.473690][ T6199] EXT4-fs (loop1): 1 truncate cleaned up [ 298.481796][ T6199] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 298.503975][ T6090] hsr_slave_1: entered promiscuous mode [ 298.612422][ T6090] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 298.620391][ T6090] Cannot create hsr debugfs directory [ 299.434556][ T5884] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 299.650082][ T5884] usb 1-1: Using ep0 maxpacket: 16 [ 299.669577][ T6199] fscrypt (loop1): Missing crypto API support for AES-256-CBC-CTS (API name: "cts(cbc(aes))") [ 299.710482][ T5884] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 299.722215][ T5884] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 299.732438][ T5884] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 299.994028][ T6228] netlink: 'syz.3.74': attribute type 1 has an invalid length. [ 300.185796][ T6090] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 300.369865][ T6090] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 300.429028][ T6090] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 300.439864][ T5884] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 300.449600][ T5884] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 300.458460][ T5884] usb 1-1: Product: syz [ 300.463219][ T5884] usb 1-1: Manufacturer: syz [ 300.468152][ T5884] usb 1-1: SerialNumber: syz [ 300.525440][ T6090] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 302.555832][ T5884] usb 1-1: 2:1 : format type 0 is detected, processed as PCM [ 303.228436][ T5808] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 304.057610][ T6090] 8021q: adding VLAN 0 to HW filter on device bond0 [ 304.147715][ T6090] 8021q: adding VLAN 0 to HW filter on device team0 [ 304.182912][ T3622] bridge0: port 1(bridge_slave_0) entered blocking state [ 304.190709][ T3622] bridge0: port 1(bridge_slave_0) entered forwarding state [ 304.439382][ T6090] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 304.450488][ T6090] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 304.946626][ T3622] bridge0: port 2(bridge_slave_1) entered blocking state [ 304.954518][ T3622] bridge0: port 2(bridge_slave_1) entered forwarding state [ 305.246710][ T4083] Bluetooth: hci5: Frame reassembly failed (-84) [ 305.271593][ T5097] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 305.379191][ T5884] usb 1-1: 2:1: cannot set freq 9338507 to ep 0x82 [ 305.628133][ T5884] usb 1-1: USB disconnect, device number 2 [ 306.111169][ T5988] udevd[5988]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 307.248284][ T5810] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 307.632433][ T6090] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 308.286352][ T6356] loop3: detected capacity change from 0 to 512 [ 308.376298][ T6356] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 308.833351][ T6356] EXT4-fs (loop3): 1 truncate cleaned up [ 308.840993][ T6356] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 309.926702][ T6379] program syz.0.90 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 310.328412][ T3890] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 310.382426][ T5804] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 310.412733][ T6387] netlink: 16 bytes leftover after parsing attributes in process `syz.4.91'. [ 310.735791][ T3890] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 310.840139][ T6392] warning: `syz.0.94' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 311.006255][ T3890] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 311.223430][ T3890] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 311.647252][ T6090] veth0_vlan: entered promiscuous mode [ 311.815277][ T6090] veth1_vlan: entered promiscuous mode [ 311.884426][ T3890] bridge_slave_1: left allmulticast mode [ 311.890361][ T3890] bridge_slave_1: left promiscuous mode [ 311.899816][ T3890] bridge0: port 2(bridge_slave_1) entered disabled state [ 311.955761][ T3890] bridge_slave_0: left allmulticast mode [ 311.961709][ T3890] bridge_slave_0: left promiscuous mode [ 311.971787][ T3890] bridge0: port 1(bridge_slave_0) entered disabled state [ 312.551759][ T3890] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 312.594962][ T3890] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 312.610571][ T3890] bond0 (unregistering): Released all slaves [ 312.806391][ T6090] veth0_macvtap: entered promiscuous mode [ 312.851815][ T6090] veth1_macvtap: entered promiscuous mode [ 313.173106][ T6090] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 313.183941][ T6090] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 313.194156][ T6090] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 313.206366][ T6090] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 313.216953][ T6090] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 313.227758][ T6090] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 313.238434][ T6090] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 313.249247][ T6090] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 313.264330][ T6090] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 313.394990][ T3890] hsr_slave_0: left promiscuous mode [ 313.433375][ T3890] hsr_slave_1: left promiscuous mode [ 313.473001][ T3890] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 313.480773][ T3890] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 313.492938][ T3890] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 313.500695][ T3890] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 313.603318][ T3890] veth1_macvtap: left promiscuous mode [ 313.612962][ T3890] veth0_macvtap: left promiscuous mode [ 313.618935][ T3890] veth1_vlan: left promiscuous mode [ 313.624722][ T3890] veth0_vlan: left promiscuous mode [ 313.920871][ T6414] loop1: detected capacity change from 0 to 128 [ 313.938560][ T6414] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 314.019876][ T6414] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 314.193084][ T29] audit: type=1800 audit(1732300756.592:2): pid=6414 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.100" name="bus" dev="loop1" ino=1048601 res=0 errno=0 [ 314.654855][ T6418] loop0: detected capacity change from 0 to 512 [ 314.688111][ T3666] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 314.721363][ T6418] EXT4-fs (loop0): Test dummy encryption mode enabled [ 314.728938][ T6418] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 314.813858][ T5097] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 314.840552][ T5097] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 314.864020][ T5097] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 314.883204][ T5097] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 314.886612][ T6418] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00cc018, mo2=0002] [ 314.903379][ T5097] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 314.913457][ T6418] System zones: 1-12 [ 314.925121][ T5097] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 315.072355][ T6418] EXT4-fs (loop0): 1 truncate cleaned up [ 315.080129][ T6418] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 315.114243][ T3890] team0 (unregistering): Port device team_slave_1 removed [ 315.165378][ T6425] netlink: 'syz.1.103': attribute type 39 has an invalid length. [ 315.185319][ T3890] team0 (unregistering): Port device team_slave_0 removed [ 315.551765][ T6415] mac80211_hwsim hwsim11 wlan1: entered allmulticast mode [ 315.734462][ T6425] bridge0: port 1(bridge_slave_0) entered disabled state [ 315.814993][ T6425] bridge_slave_0 (unregistering): left allmulticast mode [ 315.825222][ T6425] bridge_slave_0 (unregistering): left promiscuous mode [ 315.832893][ T6425] bridge0: port 1(bridge_slave_0) entered disabled state [ 315.862344][ T5798] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 315.924028][ T6090] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 315.936373][ T6090] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 315.948140][ T6090] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 315.960182][ T6090] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 315.974252][ T6090] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 315.987019][ T6090] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 316.016793][ T6090] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 316.271735][ T6428] loop0: detected capacity change from 0 to 256 [ 316.388477][ T6429] loop4: detected capacity change from 0 to 16 [ 316.490555][ T6429] erofs (device loop4): mounted with root inode @ nid 36. [ 316.524787][ T6090] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 316.534028][ T6090] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 316.546048][ T6090] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 316.555332][ T6090] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 316.913526][ T6428] FAT-fs (loop0): Directory bread(block 64) failed [ 316.920378][ T6428] FAT-fs (loop0): Directory bread(block 65) failed [ 316.932831][ T6428] FAT-fs (loop0): Directory bread(block 66) failed [ 316.939676][ T6428] FAT-fs (loop0): Directory bread(block 67) failed [ 316.947015][ T6428] FAT-fs (loop0): Directory bread(block 68) failed [ 316.953977][ T6428] FAT-fs (loop0): Directory bread(block 69) failed [ 316.960952][ T6428] FAT-fs (loop0): Directory bread(block 70) failed [ 316.967942][ T6428] FAT-fs (loop0): Directory bread(block 71) failed [ 316.975075][ T6428] FAT-fs (loop0): Directory bread(block 72) failed [ 316.981911][ T6428] FAT-fs (loop0): Directory bread(block 73) failed [ 317.032836][ T5810] Bluetooth: hci2: command tx timeout [ 317.378991][ T6419] chnl_net:caif_netlink_parms(): no params data found [ 317.683356][ T6441] capability: warning: `syz.4.108' uses deprecated v2 capabilities in a way that may be insecure [ 317.751344][ T5037] bio_check_eod: 8 callbacks suppressed [ 317.751422][ T5037] kworker/u8:28: attempt to access beyond end of device [ 317.751422][ T5037] loop0: rw=1, sector=1160, nr_sectors = 4 limit=256 [ 318.031116][ T6441] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 318.041500][ T6441] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 318.518728][ T6456] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 319.022735][ T6419] bridge0: port 1(bridge_slave_0) entered blocking state [ 319.030616][ T6419] bridge0: port 1(bridge_slave_0) entered disabled state [ 319.039654][ T6419] bridge_slave_0: entered allmulticast mode [ 319.049079][ T6419] bridge_slave_0: entered promiscuous mode [ 319.102236][ T5810] Bluetooth: hci2: command tx timeout [ 319.235222][ T6419] bridge0: port 2(bridge_slave_1) entered blocking state [ 319.243795][ T6419] bridge0: port 2(bridge_slave_1) entered disabled state [ 319.251668][ T6419] bridge_slave_1: entered allmulticast mode [ 319.261610][ T6419] bridge_slave_1: entered promiscuous mode [ 319.897379][ T6419] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 319.965764][ T6419] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 320.165847][ T6477] all: renamed from lo (while UP) [ 320.426176][ T6419] team0: Port device team_slave_0 added [ 320.492839][ T6419] team0: Port device team_slave_1 added [ 320.712328][ T5858] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 320.908110][ T5858] usb 2-1: Using ep0 maxpacket: 16 [ 320.921808][ T6419] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 320.929573][ T6419] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 320.957205][ T6419] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 320.984029][ T5884] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 321.007669][ T5858] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 321.019394][ T5858] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 321.029692][ T5858] usb 2-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00 [ 321.039213][ T5858] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 321.113771][ T6419] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 321.121186][ T6419] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 321.146404][ T5858] usb 2-1: config 0 descriptor?? [ 321.147763][ T6419] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 321.172717][ T5810] Bluetooth: hci2: command tx timeout [ 321.346320][ T5884] usb 5-1: config 0 has no interfaces? [ 321.418153][ T5884] usb 5-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 321.428099][ T5884] usb 5-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 321.436677][ T5884] usb 5-1: Manufacturer: syz [ 321.541043][ T5884] usb 5-1: config 0 descriptor?? [ 321.674053][ T5858] input: HID 05ac:8241 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:05AC:8241.0002/input/input7 [ 321.786223][ T5858] appleir 0003:05AC:8241.0002: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 05ac:8241] on usb-dummy_hcd.1-1/input0 [ 321.803302][ T5884] usb 5-1: USB disconnect, device number 3 [ 322.138843][ T6419] hsr_slave_0: entered promiscuous mode [ 322.244759][ T6419] hsr_slave_1: entered promiscuous mode [ 322.292996][ T6419] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 322.300963][ T6419] Cannot create hsr debugfs directory [ 322.518082][ T5884] usb 2-1: USB disconnect, device number 2 [ 323.274081][ T5810] Bluetooth: hci2: command tx timeout [ 323.834824][ T6419] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 323.906216][ T6419] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 323.961126][ T6419] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 324.029220][ T6419] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 324.213288][ T6522] netlink: 24 bytes leftover after parsing attributes in process `syz.4.124'. [ 325.040446][ T4083] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 325.049102][ T4083] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 325.687265][ T3666] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 325.698536][ T3666] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 326.609072][ T6419] 8021q: adding VLAN 0 to HW filter on device bond0 [ 326.738052][ T6528] loop0: detected capacity change from 0 to 32768 [ 326.749879][ T6528] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.125 (6528) [ 326.835441][ T6419] 8021q: adding VLAN 0 to HW filter on device team0 [ 326.860560][ T6528] BTRFS info (device loop0): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 326.871396][ T6528] BTRFS info (device loop0): using blake2b (blake2b-256-generic) checksum algorithm [ 326.881704][ T6528] BTRFS info (device loop0): using free-space-tree [ 327.072305][ T34] bridge0: port 1(bridge_slave_0) entered blocking state [ 327.080145][ T34] bridge0: port 1(bridge_slave_0) entered forwarding state [ 327.155795][ T34] bridge0: port 2(bridge_slave_1) entered blocking state [ 327.163676][ T34] bridge0: port 2(bridge_slave_1) entered forwarding state [ 327.332269][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 327.434608][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 327.805601][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 327.844219][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 328.253848][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 328.663433][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 329.037878][ T6549] loop5: detected capacity change from 0 to 40427 [ 329.078263][ T6549] F2FS-fs (loop5): invalid crc value [ 329.128264][ T5798] BTRFS info (device loop0): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 329.375361][ T6549] F2FS-fs (loop5): Found nat_bits in checkpoint [ 329.482578][ T0] NOHZ tick-stop error: local softirq work is pending, handler #c0!!! [ 329.713058][ T6549] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 329.724896][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 329.791765][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 329.892353][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 330.040993][ T6090] F2FS-fs (loop5): access invalid blkaddr:2816 [ 330.050801][ T6090] CPU: 0 UID: 0 PID: 6090 Comm: syz-executor Not tainted 6.12.0-syzkaller-07749-g28eb75e178d3 #0 [ 330.061660][ T6090] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 330.072025][ T6090] Call Trace: [ 330.075508][ T6090] [ 330.078628][ T6090] dump_stack_lvl+0x216/0x2d0 [ 330.083658][ T6090] dump_stack+0x1e/0x30 [ 330.088120][ T6090] __f2fs_is_valid_blkaddr+0x1344/0x1460 [ 330.094079][ T6090] f2fs_is_valid_blkaddr+0x19e/0x2a0 [ 330.099660][ T6090] ? f2fs_map_blocks+0xfc2/0x6f30 [ 330.105052][ T6090] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 330.111289][ T6090] f2fs_map_blocks+0xfc2/0x6f30 [ 330.116522][ T6090] f2fs_mpage_readpages+0x1574/0x33e0 [ 330.122226][ T6090] ? cgroup_rstat_updated+0xb6/0xb90 [ 330.127839][ T6090] ? kmsan_get_metadata+0x13e/0x1c0 [ 330.133390][ T6090] ? kmsan_get_metadata+0x13e/0x1c0 [ 330.138913][ T6090] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 330.145164][ T6090] f2fs_readahead+0x14e/0x3c0 [ 330.150172][ T6090] ? __pfx_f2fs_readahead+0x10/0x10 [ 330.155672][ T6090] read_pages+0x193/0x1110 [ 330.160386][ T6090] ? kmsan_get_metadata+0x13e/0x1c0 [ 330.166001][ T6090] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 330.172151][ T6090] page_cache_ra_unbounded+0xbbd/0xd00 [ 330.177941][ T6090] page_cache_ra_order+0x10d7/0x1290 [ 330.183563][ T6090] page_cache_sync_ra+0xed1/0x11a0 [ 330.188979][ T6090] f2fs_readdir+0x71a/0x1940 [ 330.193930][ T6090] ? __pfx_f2fs_readdir+0x10/0x10 [ 330.199270][ T6090] iterate_dir+0x5b3/0x9e0 [ 330.203981][ T6090] ? kmsan_get_metadata+0x13e/0x1c0 [ 330.209529][ T6090] __se_sys_getdents64+0x170/0x540 [ 330.214950][ T6090] ? kmsan_get_metadata+0x13e/0x1c0 [ 330.220474][ T6090] ? __pfx_filldir64+0x10/0x10 [ 330.225532][ T6090] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 330.231676][ T6090] __x64_sys_getdents64+0x96/0xe0 [ 330.237003][ T6090] x64_sys_call+0x3b0f/0x3c30 [ 330.241997][ T6090] do_syscall_64+0xcd/0x1e0 [ 330.246823][ T6090] ? clear_bhb_loop+0x25/0x80 [ 330.251807][ T6090] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 330.258026][ T6090] RIP: 0033:0x7f1be23b09b3 [ 330.262699][ T6090] Code: c1 66 0f 1f 44 00 00 48 83 c4 08 48 89 ef 5b 5d e9 72 43 f8 ff 66 90 b8 ff ff ff 7f 48 39 c2 48 0f 47 d0 b8 d9 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 05 c3 0f 1f 40 00 48 c7 c2 a8 ff ff ff f7 d8 [ 330.282635][ T6090] RSP: 002b:00007ffef9a92f08 EFLAGS: 00000293 ORIG_RAX: 00000000000000d9 [ 330.291384][ T6090] RAX: ffffffffffffffda RBX: 0000555558946600 RCX: 00007f1be23b09b3 [ 330.299650][ T6090] RDX: 0000000000008000 RSI: 0000555558946600 RDI: 0000000000000005 [ 330.307885][ T6090] RBP: 00005555589465d4 R08: 0000000000028a41 R09: 0000000000000000 [ 330.316115][ T6090] R10: 00007f1be250cca0 R11: 0000000000000293 R12: ffffffffffffffa8 [ 330.324339][ T6090] R13: 0000000000000010 R14: 00005555589465d0 R15: 00007ffef9a951b0 [ 330.332589][ T6090] [ 330.511020][ T6090] F2FS-fs (loop5): access invalid blkaddr:2816 [ 330.517675][ T6090] CPU: 0 UID: 0 PID: 6090 Comm: syz-executor Not tainted 6.12.0-syzkaller-07749-g28eb75e178d3 #0 [ 330.528437][ T6090] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 330.538781][ T6090] Call Trace: [ 330.542284][ T6090] [ 330.545433][ T6090] dump_stack_lvl+0x216/0x2d0 [ 330.550507][ T6090] dump_stack+0x1e/0x30 [ 330.555025][ T6090] __f2fs_is_valid_blkaddr+0x1344/0x1460 [ 330.561545][ T6090] f2fs_is_valid_blkaddr+0x19e/0x2a0 [ 330.567184][ T6090] ? f2fs_map_blocks+0xfc2/0x6f30 [ 330.572524][ T6090] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 330.578743][ T6090] f2fs_map_blocks+0xfc2/0x6f30 [ 330.584010][ T6090] f2fs_mpage_readpages+0x1574/0x33e0 [ 330.589789][ T6090] ? cgroup_rstat_updated+0xb6/0xb90 [ 330.595451][ T6090] ? kmsan_get_metadata+0x13e/0x1c0 [ 330.601055][ T6090] ? kmsan_get_metadata+0x13e/0x1c0 [ 330.606665][ T6090] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 330.612901][ T6090] f2fs_readahead+0x14e/0x3c0 [ 330.617931][ T6090] ? __pfx_f2fs_readahead+0x10/0x10 [ 330.623472][ T6090] read_pages+0x193/0x1110 [ 330.628228][ T6090] ? kmsan_get_metadata+0x13e/0x1c0 [ 330.633800][ T6090] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 330.639992][ T6090] page_cache_ra_unbounded+0xbbd/0xd00 [ 330.645825][ T6090] page_cache_ra_order+0x10d7/0x1290 [ 330.651485][ T6090] page_cache_sync_ra+0xed1/0x11a0 [ 330.657031][ T6090] f2fs_readdir+0x71a/0x1940 [ 330.662034][ T6090] ? __pfx_f2fs_readdir+0x10/0x10 [ 330.667429][ T6090] iterate_dir+0x5b3/0x9e0 [ 330.672269][ T6090] ? kmsan_get_metadata+0x13e/0x1c0 [ 330.677934][ T6090] __se_sys_getdents64+0x170/0x540 [ 330.683380][ T6090] ? kmsan_get_metadata+0x13e/0x1c0 [ 330.689237][ T6090] ? __pfx_filldir64+0x10/0x10 [ 330.694345][ T6090] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 330.700548][ T6090] __x64_sys_getdents64+0x96/0xe0 [ 330.705972][ T6090] x64_sys_call+0x3b0f/0x3c30 [ 330.711027][ T6090] do_syscall_64+0xcd/0x1e0 [ 330.715909][ T6090] ? clear_bhb_loop+0x25/0x80 [ 330.720949][ T6090] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 330.727199][ T6090] RIP: 0033:0x7f1be23b09b3 [ 330.731885][ T6090] Code: c1 66 0f 1f 44 00 00 48 83 c4 08 48 89 ef 5b 5d e9 72 43 f8 ff 66 90 b8 ff ff ff 7f 48 39 c2 48 0f 47 d0 b8 d9 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 05 c3 0f 1f 40 00 48 c7 c2 a8 ff ff ff f7 d8 [ 330.751881][ T6090] RSP: 002b:00007ffef9a92f08 EFLAGS: 00000293 ORIG_RAX: 00000000000000d9 [ 330.760719][ T6090] RAX: ffffffffffffffda RBX: 0000555558946600 RCX: 00007f1be23b09b3 [ 330.769026][ T6090] RDX: 0000000000008000 RSI: 0000555558946600 RDI: 0000000000000005 [ 330.777300][ T6090] RBP: 00005555589465d4 R08: 0000000000028a41 R09: 0000000000000000 [ 330.785592][ T6090] R10: 00007f1be250cca0 R11: 0000000000000293 R12: ffffffffffffffa8 [ 330.793859][ T6090] R13: 0000000000000010 R14: 00005555589465d0 R15: 00007ffef9a951b0 [ 330.802160][ T6090] [ 330.813865][ T6090] syz-executor: attempt to access beyond end of device [ 330.813865][ T6090] loop5: rw=0, sector=45064, nr_sectors = 8 limit=40427 [ 332.915774][ T6419] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 332.934999][ T6588] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 332.949639][ T50] kworker/u8:3: attempt to access beyond end of device [ 332.949639][ T50] loop5: rw=2049, sector=40960, nr_sectors = 24 limit=40427 [ 332.965423][ T50] F2FS-fs (loop5): Stopped filesystem due to reason: 3 [ 332.972810][ T50] F2FS-fs (loop5): Stopped filesystem due to reason: 3 [ 332.979020][ T6590] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 332.979875][ T50] F2FS-fs (loop5): Stopped filesystem due to reason: 3 [ 332.988999][ T6583] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 333.002056][ T6583] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 333.011869][ T6583] vhci_hcd vhci_hcd.0: Device attached [ 333.208558][ T6588] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 333.254985][ T5884] vhci_hcd: vhci_device speed not set [ 333.289768][ T6583] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 333.341919][ T6588] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 333.345132][ T5884] usb 33-1: new full-speed USB device number 2 using vhci_hcd [ 333.457156][ T50] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 333.543404][ T6590] vhci_hcd vhci_hcd.0: pdev(0) rhport(6) sockfd(13) [ 333.550373][ T6590] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 333.558703][ T6590] vhci_hcd vhci_hcd.0: Device attached [ 333.809459][ T6596] vhci_hcd: connection closed [ 333.810942][ T3641] vhci_hcd: stop threads [ 333.821288][ T3641] vhci_hcd: release socket [ 333.826146][ T3641] vhci_hcd: disconnect device [ 333.842892][ T6586] vhci_hcd: connection reset by peer [ 333.874492][ T3641] vhci_hcd: stop threads [ 333.878998][ T3641] vhci_hcd: release socket [ 333.887952][ T3641] vhci_hcd: disconnect device [ 333.907106][ T50] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 334.039993][ T50] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 334.250367][ T50] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 334.882799][ T50] bridge_slave_1: left allmulticast mode [ 334.888744][ T50] bridge_slave_1: left promiscuous mode [ 334.895923][ T50] bridge0: port 2(bridge_slave_1) entered disabled state [ 335.003860][ T50] bridge_slave_0: left allmulticast mode [ 335.012330][ T50] bridge_slave_0: left promiscuous mode [ 335.019049][ T50] bridge0: port 1(bridge_slave_0) entered disabled state [ 335.910351][ T50] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 335.943110][ T50] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 335.961782][ T50] bond0 (unregistering): Released all slaves [ 336.593634][ T6615] netlink: 4 bytes leftover after parsing attributes in process `syz.1.142'. [ 337.033731][ T50] hsr_slave_0: left promiscuous mode [ 337.050137][ T50] hsr_slave_1: left promiscuous mode [ 337.088796][ T50] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 337.097083][ T50] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 337.166960][ T50] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 337.175190][ T50] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 337.282867][ T50] veth1_macvtap: left promiscuous mode [ 337.288707][ T50] veth0_macvtap: left promiscuous mode [ 337.294877][ T50] veth1_vlan: left promiscuous mode [ 337.300571][ T50] veth0_vlan: left promiscuous mode [ 337.591602][ T5097] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 337.601561][ T5097] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 337.614056][ T5097] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 337.739581][ T5097] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 337.778806][ T5097] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 337.794886][ T5097] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 338.158191][ T5855] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 338.309765][ T50] team0 (unregistering): Port device team_slave_1 removed [ 338.351429][ T5855] usb 1-1: Using ep0 maxpacket: 16 [ 338.396479][ T50] team0 (unregistering): Port device team_slave_0 removed [ 338.410593][ T5855] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 338.423125][ T5855] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 338.436846][ T5884] vhci_hcd: vhci_device speed not set [ 338.620945][ T5855] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 338.631553][ T5855] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 338.640892][ T5855] usb 1-1: Product: syz [ 338.646284][ T5855] usb 1-1: Manufacturer: syz [ 338.653291][ T5855] usb 1-1: SerialNumber: syz [ 338.817212][ T5855] usb 1-1: config 0 descriptor?? [ 339.193704][ T6419] veth0_vlan: entered promiscuous mode [ 339.346945][ T6419] veth1_vlan: entered promiscuous mode [ 339.399509][ T5855] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 339.410263][ T5855] em28xx 1-1:0.0: Audio interface 0 found (Vendor Class) [ 339.746606][ T6419] veth0_macvtap: entered promiscuous mode [ 339.838494][ T5855] em28xx 1-1:0.0: unknown em28xx chip ID (0) [ 339.879363][ T6419] veth1_macvtap: entered promiscuous mode [ 339.882421][ T5097] Bluetooth: hci4: command tx timeout [ 339.902471][ T5855] em28xx 1-1:0.0: Config register raw data: 0xfffffffb [ 340.072646][ T6419] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 340.083673][ T6419] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 340.093963][ T6419] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 340.104846][ T6419] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 340.115169][ T6419] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 340.126065][ T6419] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 340.144402][ T6419] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 340.255352][ T6419] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 340.266278][ T6419] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 340.276549][ T6419] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 340.287523][ T6419] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 340.312761][ T6419] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 340.360289][ T6419] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 340.391018][ T6419] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 340.419639][ T6419] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 340.429175][ T6419] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 340.445095][ T6419] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 340.458354][ T6419] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 340.648969][ T5855] em28xx 1-1:0.0: AC97 chip type couldn't be determined [ 340.656709][ T5855] em28xx 1-1:0.0: No AC97 audio processor [ 340.779262][ T5855] usb 1-1: USB disconnect, device number 3 [ 340.787045][ T5855] em28xx 1-1:0.0: Disconnecting em28xx [ 340.946944][ T6627] chnl_net:caif_netlink_parms(): no params data found [ 340.959965][ T5855] em28xx 1-1:0.0: Freeing device [ 341.962322][ T5097] Bluetooth: hci4: command tx timeout [ 342.687236][ T6679] pimreg: entered allmulticast mode [ 342.768526][ T6679] pimreg: left allmulticast mode [ 343.161080][ T6627] bridge0: port 1(bridge_slave_0) entered blocking state [ 343.182188][ T6627] bridge0: port 1(bridge_slave_0) entered disabled state [ 343.195531][ T6627] bridge_slave_0: entered allmulticast mode [ 343.208604][ T6627] bridge_slave_0: entered promiscuous mode [ 343.327488][ T6627] bridge0: port 2(bridge_slave_1) entered blocking state [ 343.335768][ T6627] bridge0: port 2(bridge_slave_1) entered disabled state [ 343.343927][ T6627] bridge_slave_1: entered allmulticast mode [ 343.353682][ T6627] bridge_slave_1: entered promiscuous mode [ 343.649155][ T6627] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 343.680146][ T6627] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 343.855536][ T6627] team0: Port device team_slave_0 added [ 343.904442][ T6627] team0: Port device team_slave_1 added [ 344.045843][ T5097] Bluetooth: hci4: command tx timeout [ 344.318758][ T6627] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 344.326179][ T6627] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 344.353238][ T6627] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 344.416982][ T6627] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 344.424619][ T6627] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 344.451627][ T6627] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 344.736243][ T6697] loop1: detected capacity change from 0 to 164 [ 344.842353][ T6697] Unable to read rock-ridge attributes [ 344.885497][ T6627] hsr_slave_0: entered promiscuous mode [ 344.891394][ T6697] Unable to read rock-ridge attributes [ 344.931173][ T6693] loop0: detected capacity change from 0 to 2048 [ 344.984197][ T6627] hsr_slave_1: entered promiscuous mode [ 345.026501][ T6693] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 345.048942][ T6627] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 345.057121][ T6627] Cannot create hsr debugfs directory [ 345.771568][ T6701] loop1: detected capacity change from 0 to 1024 [ 345.893998][ T6701] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 345.985671][ T6695] loop4: detected capacity change from 0 to 4096 [ 345.993502][ T6701] JBD2: no valid journal superblock found [ 345.999547][ T6701] EXT4-fs (loop1): Could not load journal inode [ 346.181562][ T5097] Bluetooth: hci4: command tx timeout [ 346.520084][ T6627] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 346.643439][ T6627] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 346.794623][ T6627] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 346.915263][ T6627] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 347.528933][ T6717] loop0: detected capacity change from 0 to 1024 [ 347.658090][ T6717] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 347.667593][ T6717] EXT4-fs (loop0): The Hurd can't support 64-bit file systems [ 348.542379][ T6627] 8021q: adding VLAN 0 to HW filter on device bond0 [ 348.676863][ T3622] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 348.686047][ T3622] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 348.726626][ T6627] 8021q: adding VLAN 0 to HW filter on device team0 [ 348.909997][ T5037] bridge0: port 1(bridge_slave_0) entered blocking state [ 348.917891][ T5037] bridge0: port 1(bridge_slave_0) entered forwarding state [ 349.001759][ T4807] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 349.012432][ T4807] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 349.063659][ T5037] bridge0: port 2(bridge_slave_1) entered blocking state [ 349.071401][ T5037] bridge0: port 2(bridge_slave_1) entered forwarding state [ 350.546922][ T6750] loop6: detected capacity change from 0 to 256 [ 351.129085][ T6750] exFAT-fs (loop6): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 351.174878][ T6756] loop4: detected capacity change from 0 to 24 [ 351.646395][ T6756] syz.4.174 (6756) used greatest stack depth: 4744 bytes left [ 351.672448][ T29] audit: type=1326 audit(1732300794.102:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6758 comm="syz.1.173" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f331317e819 code=0x0 [ 352.246690][ T1274] ieee802154 phy0 wpan0: encryption failed: -22 [ 352.253580][ T1274] ieee802154 phy1 wpan1: encryption failed: -22 [ 352.608813][ T6779] loop6: detected capacity change from 0 to 16 [ 352.617275][ T6627] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 354.380797][ T8] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 354.914915][ T8] usb 2-1: Using ep0 maxpacket: 32 [ 355.053875][ T8] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 355.065889][ T8] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 355.076228][ T8] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 355.089690][ T8] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 355.517001][ T8] usb 2-1: config 0 descriptor?? [ 355.607250][ T8] hub 2-1:0.0: USB hub found [ 355.731213][ T6794] loop0: detected capacity change from 0 to 32768 [ 355.914738][ T6794] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 355.915625][ T8] hub 2-1:0.0: 1 port detected [ 356.278283][ T5798] ocfs2: Unmounting device (7,0) on (node local) [ 356.712650][ T8] hub 2-1:0.0: activate --> -90 [ 356.882877][ T25] usb 2-1: USB disconnect, device number 3 [ 356.903008][ T6627] veth0_vlan: entered promiscuous mode [ 357.132500][ T6627] veth1_vlan: entered promiscuous mode [ 357.479036][ T6627] veth0_macvtap: entered promiscuous mode [ 357.591121][ T6627] veth1_macvtap: entered promiscuous mode [ 357.839336][ T6627] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 357.851417][ T6627] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 357.861766][ T6627] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 357.873155][ T6627] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 357.883318][ T6627] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 357.894316][ T6627] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 357.904622][ T6627] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 357.915445][ T6627] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 357.930821][ T6627] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 358.315265][ T6627] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 358.326525][ T6627] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 358.336907][ T6627] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 358.348992][ T6627] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 358.360251][ T6627] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 358.371243][ T6627] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 358.382496][ T6627] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 358.393545][ T6627] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 358.408786][ T6627] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 358.454807][ T6627] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 358.469557][ T6627] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 358.480344][ T6627] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 358.489619][ T6627] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 359.199139][ T6831] loop1: detected capacity change from 0 to 64 [ 360.784972][ T4142] kworker/u8:22: attempt to access beyond end of device [ 360.784972][ T4142] loop1: rw=1, sector=65, nr_sectors = 1 limit=64 [ 360.798835][ T4142] Buffer I/O error on dev loop1, logical block 65, lost async page write [ 360.808121][ T4142] kworker/u8:22: attempt to access beyond end of device [ 360.808121][ T4142] loop1: rw=1, sector=66, nr_sectors = 1 limit=64 [ 360.822615][ T4142] Buffer I/O error on dev loop1, logical block 66, lost async page write [ 360.831368][ T4142] kworker/u8:22: attempt to access beyond end of device [ 360.831368][ T4142] loop1: rw=1, sector=67, nr_sectors = 1 limit=64 [ 360.845188][ T4142] Buffer I/O error on dev loop1, logical block 67, lost async page write [ 360.854040][ T4142] kworker/u8:22: attempt to access beyond end of device [ 360.854040][ T4142] loop1: rw=1, sector=68, nr_sectors = 1 limit=64 [ 360.868414][ T4142] Buffer I/O error on dev loop1, logical block 68, lost async page write [ 360.877301][ T4142] kworker/u8:22: attempt to access beyond end of device [ 360.877301][ T4142] loop1: rw=1, sector=72, nr_sectors = 1 limit=64 [ 360.890973][ T4142] Buffer I/O error on dev loop1, logical block 72, lost async page write [ 360.899844][ T4142] kworker/u8:22: attempt to access beyond end of device [ 360.899844][ T4142] loop1: rw=1, sector=73, nr_sectors = 1 limit=64 [ 360.913737][ T4142] Buffer I/O error on dev loop1, logical block 73, lost async page write [ 360.923296][ T4142] kworker/u8:22: attempt to access beyond end of device [ 360.923296][ T4142] loop1: rw=1, sector=76, nr_sectors = 1 limit=64 [ 360.936970][ T4142] Buffer I/O error on dev loop1, logical block 76, lost async page write [ 360.945974][ T4142] kworker/u8:22: attempt to access beyond end of device [ 360.945974][ T4142] loop1: rw=1, sector=77, nr_sectors = 1 limit=64 [ 360.959679][ T4142] Buffer I/O error on dev loop1, logical block 77, lost async page write [ 360.969103][ T4142] kworker/u8:22: attempt to access beyond end of device [ 360.969103][ T4142] loop1: rw=1, sector=78, nr_sectors = 89 limit=64 [ 363.620084][ T6879] loop1: detected capacity change from 0 to 1024 [ 363.979385][ T6879] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 364.135334][ T6879] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 364.167492][ T6879] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 27 with max blocks 1 with error 28 [ 364.180645][ T6879] EXT4-fs (loop1): This should not happen!! Data will be lost [ 364.180645][ T6879] [ 364.190805][ T6879] EXT4-fs (loop1): Total free blocks count 0 [ 364.197980][ T6879] EXT4-fs (loop1): Free/Dirty block details [ 364.204281][ T6879] EXT4-fs (loop1): free_blocks=68451041280 [ 364.210376][ T6879] EXT4-fs (loop1): dirty_blocks=32 [ 364.215932][ T6879] EXT4-fs (loop1): Block reservation details [ 364.222515][ T6879] EXT4-fs (loop1): i_reserved_data_blocks=2 [ 364.405216][ T6892] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 4096 with max blocks 1 with error 28 [ 366.076370][ T6910] loop4: detected capacity change from 0 to 8 [ 366.500648][ T6916] netlink: 'syz.1.205': attribute type 4 has an invalid length. [ 366.608896][ T6910] SQUASHFS error: xz decompression failed, data probably corrupt [ 366.617481][ T6910] SQUASHFS error: Failed to read block 0x108: -5 [ 366.624326][ T6910] SQUASHFS error: Unable to read metadata cache entry [106] [ 366.632141][ T6910] SQUASHFS error: Unable to read inode 0x11f [ 366.873468][ T6920] netlink: 'syz.1.205': attribute type 4 has an invalid length. [ 367.889369][ T4807] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 367.897901][ T4807] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 368.157855][ T3641] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 368.166233][ T3641] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 368.750620][ T5884] libceph: connect (1)[c::]:6789 error -101 [ 368.757556][ T5884] libceph: mon0 (1)[c::]:6789 connect error [ 368.805699][ T6926] ceph: No mds server is up or the cluster is laggy [ 369.047692][ T6943] netlink: 24 bytes leftover after parsing attributes in process `syz.6.210'. [ 369.060339][ T5884] libceph: connect (1)[c::]:6789 error -101 [ 369.067536][ T5884] libceph: mon0 (1)[c::]:6789 connect error [ 370.301250][ T6964] xt_TPROXY: Can be used only with -p tcp or -p udp [ 371.170855][ T6974] loop6: detected capacity change from 0 to 128 [ 371.552614][ T6981] hub 6-0:1.0: USB hub found [ 371.594936][ T6974] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 371.609060][ T6981] hub 6-0:1.0: 1 port detected [ 371.684106][ T6974] ext4 filesystem being mounted at /13/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 371.717475][ C1] vkms_vblank_simulate: vblank timer overrun [ 372.619075][ T6419] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 372.925018][ T5806] Bluetooth: hci4: command tx timeout [ 374.002447][ T29] audit: type=1326 audit(1732300816.442:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6999 comm="syz.0.231" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f5bdaf7e819 code=0x0 [ 374.261748][ T7004] netlink: 'syz.1.232': attribute type 1 has an invalid length. [ 374.399492][ T7004] 8021q: adding VLAN 0 to HW filter on device bond1 [ 374.628846][ T7008] 8021q: adding VLAN 0 to HW filter on device bond1 [ 374.638976][ T7008] bond1: (slave ip6tnl1): The slave device specified does not support setting the MAC address [ 374.655663][ T7008] bond1: (slave ip6tnl1): Error -95 calling set_mac_address [ 374.735438][ T5806] Bluetooth: hci3: command 0x0406 tx timeout [ 374.743169][ T5806] Bluetooth: hci0: command 0x0406 tx timeout [ 374.749548][ T5806] Bluetooth: hci1: command 0x0406 tx timeout [ 374.938758][ T7007] netlink: 44 bytes leftover after parsing attributes in process `syz.6.233'. [ 374.990991][ T5884] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 375.213151][ T5884] usb 8-1: Using ep0 maxpacket: 8 [ 375.339000][ T5884] usb 8-1: New USB device found, idVendor=046d, idProduct=0896, bcdDevice=3a.11 [ 375.349853][ T5884] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 375.375585][ T5884] usb 8-1: Product: syz [ 375.380079][ T5884] usb 8-1: Manufacturer: syz [ 375.388004][ T5884] usb 8-1: SerialNumber: syz [ 375.488498][ T5884] usb 8-1: config 0 descriptor?? [ 375.504440][ T4142] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 375.584361][ T5884] gspca_main: vc032x-2.14.0 probing 046d:0896 [ 376.208565][ T5884] gspca_vc032x: reg_r err -110 [ 376.214331][ T5884] vc032x 8-1:0.0: probe with driver vc032x failed with error -110 [ 376.341123][ T4142] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 376.463281][ T7021] syz.0.238 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 376.603854][ T4142] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 376.781312][ T4142] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 377.416543][ T4142] bridge_slave_1: left allmulticast mode [ 377.423365][ T4142] bridge_slave_1: left promiscuous mode [ 377.430672][ T4142] bridge0: port 2(bridge_slave_1) entered disabled state [ 377.549974][ T4142] bridge_slave_0: left allmulticast mode [ 377.556522][ T4142] bridge_slave_0: left promiscuous mode [ 377.563755][ T4142] bridge0: port 1(bridge_slave_0) entered disabled state [ 378.228310][ T4142] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 378.558499][ T4142] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 378.695887][ T4142] bond0 (unregistering): Released all slaves [ 379.764923][ T5884] usb 8-1: USB disconnect, device number 2 [ 380.075448][ T5884] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 380.299003][ T5884] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 380.310829][ T5884] usb 8-1: config 0 interface 0 has no altsetting 0 [ 380.318297][ T5884] usb 8-1: New USB device found, idVendor=056a, idProduct=0003, bcdDevice= 0.00 [ 380.329194][ T5884] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 380.448446][ T5884] usb 8-1: config 0 descriptor?? [ 380.738690][ T4142] hsr_slave_0: left promiscuous mode [ 380.753229][ T5097] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 380.761154][ T4142] hsr_slave_1: left promiscuous mode [ 380.776177][ T5097] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 380.790526][ T4142] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 380.798746][ T4142] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 380.881817][ T4142] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 380.889895][ T4142] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 380.901794][ T5097] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 380.927600][ T4142] veth1_macvtap: left promiscuous mode [ 380.934710][ T4142] veth0_macvtap: left promiscuous mode [ 380.941240][ T4142] veth1_vlan: left promiscuous mode [ 380.947526][ T4142] veth0_vlan: left promiscuous mode [ 381.042496][ T5884] wacom 0003:056A:0003.0003: Unknown device_type for 'HID 056a:0003'. Assuming pen. [ 381.068556][ T5884] wacom 0003:056A:0003.0003: hidraw0: USB HID v0.00 Device [HID 056a:0003] on usb-dummy_hcd.7-1/input0 [ 381.070703][ T5097] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 381.086687][ T5884] input: Wacom Cintiq Partner Pen as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/0003:056A:0003.0003/input/input8 [ 381.276001][ T5097] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 381.286162][ T5097] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 381.374050][ T5884] usb 8-1: USB disconnect, device number 3 [ 382.149881][ T4142] team0 (unregistering): Port device team_slave_1 removed [ 382.198516][ T4142] team0 (unregistering): Port device team_slave_0 removed [ 382.869680][ T5861] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 383.127202][ T5861] usb 7-1: Using ep0 maxpacket: 32 [ 383.208021][ T5861] usb 7-1: config 255 has too many interfaces: 232, using maximum allowed: 32 [ 383.217779][ T5861] usb 7-1: config 255 has an invalid descriptor of length 0, skipping remainder of the config [ 383.228825][ T5861] usb 7-1: config 255 has 0 interfaces, different from the descriptor's value: 232 [ 383.463185][ T5861] usb 7-1: New USB device found, idVendor=0424, idProduct=9941, bcdDevice=c2.57 [ 383.472933][ T5861] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 383.481251][ T5861] usb 7-1: Product: syz [ 383.486150][ T5861] usb 7-1: Manufacturer: syz [ 383.491153][ T5861] usb 7-1: SerialNumber: syz [ 383.498789][ T5810] Bluetooth: hci0: command tx timeout [ 383.547225][ T7085] netlink: 4 bytes leftover after parsing attributes in process `syz.1.259'. [ 384.019534][ T7055] chnl_net:caif_netlink_parms(): no params data found [ 384.359482][ T5861] usb 7-1: USB disconnect, device number 2 [ 384.977947][ T7055] bridge0: port 1(bridge_slave_0) entered blocking state [ 384.994721][ T7055] bridge0: port 1(bridge_slave_0) entered disabled state [ 385.003306][ T7055] bridge_slave_0: entered allmulticast mode [ 385.013139][ T7055] bridge_slave_0: entered promiscuous mode [ 385.075563][ T7055] bridge0: port 2(bridge_slave_1) entered blocking state [ 385.093247][ T7055] bridge0: port 2(bridge_slave_1) entered disabled state [ 385.101779][ T7055] bridge_slave_1: entered allmulticast mode [ 385.112545][ T7055] bridge_slave_1: entered promiscuous mode [ 385.471324][ T7055] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 385.502924][ T7055] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 385.575654][ T5810] Bluetooth: hci0: command tx timeout [ 385.628467][ T7055] team0: Port device team_slave_0 added [ 385.652271][ T25] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 385.746065][ T7055] team0: Port device team_slave_1 added [ 385.757456][ T7111] loop1: detected capacity change from 0 to 2048 [ 385.852649][ T25] usb 1-1: Using ep0 maxpacket: 32 [ 385.873121][ T25] usb 1-1: config 0 has no interfaces? [ 385.900943][ T25] usb 1-1: New USB device found, idVendor=10cf, idProduct=8067, bcdDevice=2c.27 [ 385.912196][ T25] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 385.921364][ T25] usb 1-1: Product: syz [ 385.926719][ T25] usb 1-1: Manufacturer: syz [ 385.932512][ T25] usb 1-1: SerialNumber: syz [ 385.985440][ T25] usb 1-1: config 0 descriptor?? [ 386.004462][ T7111] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 386.164957][ T29] audit: type=1800 audit(1732300828.612:5): pid=7111 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.269" name="bus" dev="loop1" ino=18 res=0 errno=0 [ 386.183717][ T7055] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 386.194063][ T7055] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 386.221648][ T7055] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 386.283093][ T25] usb 1-1: USB disconnect, device number 4 [ 386.394645][ T7055] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 386.402910][ T7055] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 386.436471][ T7055] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 386.500779][ T5808] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 386.775502][ T7124] batman_adv: batadv0: Adding interface: ip6gretap1 [ 386.782582][ T7124] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 386.809404][ T7124] batman_adv: batadv0: Interface activated: ip6gretap1 [ 386.841744][ T7055] hsr_slave_0: entered promiscuous mode [ 386.895789][ T7055] hsr_slave_1: entered promiscuous mode [ 386.962400][ T25] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 387.165177][ T25] usb 7-1: Using ep0 maxpacket: 16 [ 387.214515][ T25] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 387.228550][ T25] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 387.239929][ T25] usb 7-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00 [ 387.251237][ T25] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 387.386631][ T25] usb 7-1: config 0 descriptor?? [ 387.646115][ T5810] Bluetooth: hci0: command tx timeout [ 387.956358][ T7055] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 388.045384][ T7055] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 388.136047][ T7055] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 388.166557][ T7055] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 388.201195][ T25] input: HID 05ac:8241 as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/0003:05AC:8241.0004/input/input11 [ 388.318259][ T25] appleir 0003:05AC:8241.0004: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 05ac:8241] on usb-dummy_hcd.6-1/input0 [ 388.698125][ T5861] usb 7-1: USB disconnect, device number 3 [ 389.202768][ T7055] 8021q: adding VLAN 0 to HW filter on device bond0 [ 389.331104][ T7144] loop0: detected capacity change from 0 to 2048 [ 389.348344][ T7055] 8021q: adding VLAN 0 to HW filter on device team0 [ 389.425885][ T3641] bridge0: port 1(bridge_slave_0) entered blocking state [ 389.434084][ T3641] bridge0: port 1(bridge_slave_0) entered forwarding state [ 389.584877][ T3641] bridge0: port 2(bridge_slave_1) entered blocking state [ 389.592865][ T3641] bridge0: port 2(bridge_slave_1) entered forwarding state [ 389.638937][ T7144] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 389.652900][ T7144] ext4 filesystem being mounted at /74/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 389.748837][ T5810] Bluetooth: hci0: command tx timeout [ 389.844055][ T7055] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 390.398032][ T5798] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 390.868203][ T7164] ===================================================== [ 390.876730][ T7164] BUG: KMSAN: uninit-value in io_nop+0x549/0x8a0 [ 390.883895][ T7164] io_nop+0x549/0x8a0 [ 390.888112][ T7164] io_issue_sqe+0x420/0x2130 [ 390.893128][ T7164] io_submit_sqes+0x11bc/0x2f80 [ 390.898820][ T7164] __se_sys_io_uring_enter+0x423/0x4aa0 [ 390.904815][ T7164] __x64_sys_io_uring_enter+0x11f/0x1a0 [ 390.910827][ T7164] x64_sys_call+0xce5/0x3c30 [ 390.916061][ T7164] do_syscall_64+0xcd/0x1e0 [ 390.921038][ T7164] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 390.927750][ T7164] [ 390.930245][ T7164] Uninit was created at: [ 390.934965][ T7164] __alloc_pages_noprof+0x9a7/0xe00 [ 390.942290][ T7164] alloc_pages_mpol_noprof+0x299/0x990 [ 390.951128][ T7164] alloc_pages_noprof+0x1bf/0x1e0 [ 390.960155][ T7164] allocate_slab+0x320/0x12e0 [ 390.967481][ T7164] ___slab_alloc+0x12ef/0x35e0 [ 390.973490][ T7164] kmem_cache_alloc_bulk_noprof+0x486/0x1330 [ 390.979771][ T7164] __io_alloc_req_refill+0x84/0x5b0 [ 390.985341][ T7164] io_submit_sqes+0x9a2/0x2f80 [ 390.990360][ T7164] __se_sys_io_uring_enter+0x423/0x4aa0 [ 390.996330][ T7164] __x64_sys_io_uring_enter+0x11f/0x1a0 [ 391.003419][ T7164] x64_sys_call+0xce5/0x3c30 [ 391.009302][ T7164] do_syscall_64+0xcd/0x1e0 [ 391.014361][ T7164] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 391.020863][ T7164] [ 391.024073][ T7164] CPU: 1 UID: 0 PID: 7164 Comm: syz.7.287 Not tainted 6.12.0-syzkaller-07749-g28eb75e178d3 #0 [ 391.035110][ T7164] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 391.046402][ T7164] ===================================================== [ 391.054176][ T7164] Disabling lock debugging due to kernel taint [ 391.061746][ T7164] Kernel panic - not syncing: kmsan.panic set ... [ 391.069215][ T7164] CPU: 1 UID: 0 PID: 7164 Comm: syz.7.287 Tainted: G B 6.12.0-syzkaller-07749-g28eb75e178d3 #0 [ 391.081236][ T7164] Tainted: [B]=BAD_PAGE [ 391.085560][ T7164] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 391.095814][ T7164] Call Trace: [ 391.099253][ T7164] [ 391.102429][ T7164] dump_stack_lvl+0x216/0x2d0 [ 391.107408][ T7164] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 391.114089][ T7164] dump_stack+0x1e/0x30 [ 391.118553][ T7164] panic+0x4e2/0xcf0 [ 391.122826][ T7164] ? kmsan_get_metadata+0x101/0x1c0 [ 391.128708][ T7164] kmsan_report+0x2c7/0x2d0 [ 391.135528][ T7164] ? __msan_warning+0x95/0x120 [ 391.141607][ T7164] ? io_nop+0x549/0x8a0 [ 391.147330][ T7164] ? io_issue_sqe+0x420/0x2130 [ 391.153731][ T7164] ? io_submit_sqes+0x11bc/0x2f80 [ 391.160009][ T7164] ? __se_sys_io_uring_enter+0x423/0x4aa0 [ 391.166390][ T7164] ? __x64_sys_io_uring_enter+0x11f/0x1a0 [ 391.172559][ T7164] ? x64_sys_call+0xce5/0x3c30 [ 391.177621][ T7164] ? do_syscall_64+0xcd/0x1e0 [ 391.182663][ T7164] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 391.189031][ T7164] ? mod_objcg_state+0x898/0xe00 [ 391.194554][ T7164] ? kmsan_get_metadata+0x13e/0x1c0 [ 391.200638][ T7164] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 391.209542][ T7164] ? __memcg_slab_post_alloc_hook+0xbdd/0x1540 [ 391.219535][ T7164] ? kmsan_get_metadata+0x13e/0x1c0 [ 391.225709][ T7164] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 391.233410][ T7164] __msan_warning+0x95/0x120 [ 391.239786][ T7164] io_nop+0x549/0x8a0 [ 391.244512][ T7164] ? __pfx_io_nop+0x10/0x10 [ 391.250643][ T7164] io_issue_sqe+0x420/0x2130 [ 391.258307][ T7164] ? kmsan_get_metadata+0x13e/0x1c0 [ 391.265399][ T7164] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 391.273184][ T7164] io_submit_sqes+0x11bc/0x2f80 [ 391.278358][ T7164] ? kmsan_internal_set_shadow_origin+0x69/0x100 [ 391.285070][ T7164] __se_sys_io_uring_enter+0x423/0x4aa0 [ 391.290921][ T7164] ? futex_wait+0x2bf/0x360 [ 391.295970][ T7164] ? kmsan_internal_set_shadow_origin+0x69/0x100 [ 391.302978][ T7164] ? kmsan_get_metadata+0x13e/0x1c0 [ 391.308905][ T7164] ? do_futex+0x341/0x4a0 [ 391.314541][ T7164] ? kmsan_get_metadata+0x13e/0x1c0 [ 391.320427][ T7164] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 391.327713][ T7164] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 391.334114][ T7164] __x64_sys_io_uring_enter+0x11f/0x1a0 [ 391.341519][ T7164] x64_sys_call+0xce5/0x3c30 [ 391.347368][ T7164] do_syscall_64+0xcd/0x1e0 [ 391.352986][ T7164] ? clear_bhb_loop+0x25/0x80 [ 391.358177][ T7164] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 391.365296][ T7164] RIP: 0033:0x7fc770d7e819 [ 391.370455][ T7164] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 391.390868][ T7164] RSP: 002b:00007fc771ba9038 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 391.400191][ T7164] RAX: ffffffffffffffda RBX: 00007fc770f35fa0 RCX: 00007fc770d7e819 [ 391.409133][ T7164] RDX: 0000000000000000 RSI: 0000000000002d3e RDI: 0000000000000003 [ 391.419421][ T7164] RBP: 00007fc770df175e R08: 0000000000000000 R09: 0000000000000000 [ 391.427698][ T7164] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 391.436634][ T7164] R13: 0000000000000000 R14: 00007fc770f35fa0 R15: 00007ffd0debc928 [ 391.445685][ T7164] [ 391.449853][ T7164] Kernel Offset: disabled [ 391.454730][ T7164] Rebooting in 86400 seconds..