last executing test programs: 2m36.207763865s ago: executing program 3 (id=1267): socket$inet6_sctp(0xa, 0x5, 0x84) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = fanotify_init(0x0, 0x0) r2 = dup(r0) fanotify_mark(r1, 0x1, 0x12, r2, 0x0) r3 = syz_io_uring_setup(0x231, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000000)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r4, r5, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0}) io_uring_enter(r3, 0x7a98, 0x0, 0x0, 0x0, 0x0) 2m6.400401887s ago: executing program 3 (id=1267): socket$inet6_sctp(0xa, 0x5, 0x84) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = fanotify_init(0x0, 0x0) r2 = dup(r0) fanotify_mark(r1, 0x1, 0x12, r2, 0x0) r3 = syz_io_uring_setup(0x231, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000000)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r4, r5, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0}) io_uring_enter(r3, 0x7a98, 0x0, 0x0, 0x0, 0x0) 1m25.338690424s ago: executing program 3 (id=1267): socket$inet6_sctp(0xa, 0x5, 0x84) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = fanotify_init(0x0, 0x0) r2 = dup(r0) fanotify_mark(r1, 0x1, 0x12, r2, 0x0) r3 = syz_io_uring_setup(0x231, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000000)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r4, r5, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0}) io_uring_enter(r3, 0x7a98, 0x0, 0x0, 0x0, 0x0) 59.89966212s ago: executing program 3 (id=1267): socket$inet6_sctp(0xa, 0x5, 0x84) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = fanotify_init(0x0, 0x0) r2 = dup(r0) fanotify_mark(r1, 0x1, 0x12, r2, 0x0) r3 = syz_io_uring_setup(0x231, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000000)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r4, r5, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0}) io_uring_enter(r3, 0x7a98, 0x0, 0x0, 0x0, 0x0) 32.105915602s ago: executing program 3 (id=1267): socket$inet6_sctp(0xa, 0x5, 0x84) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = fanotify_init(0x0, 0x0) r2 = dup(r0) fanotify_mark(r1, 0x1, 0x12, r2, 0x0) r3 = syz_io_uring_setup(0x231, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000000)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r4, r5, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0}) io_uring_enter(r3, 0x7a98, 0x0, 0x0, 0x0, 0x0) 14.670229169s ago: executing program 3 (id=1267): socket$inet6_sctp(0xa, 0x5, 0x84) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = fanotify_init(0x0, 0x0) r2 = dup(r0) fanotify_mark(r1, 0x1, 0x12, r2, 0x0) r3 = syz_io_uring_setup(0x231, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000000)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r4, r5, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0}) io_uring_enter(r3, 0x7a98, 0x0, 0x0, 0x0, 0x0) 9.291093882s ago: executing program 2 (id=1601): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x20, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_OIF={0x8, 0x5, r4}]}, 0x20}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000004380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@ipv6_newrule={0x24, 0x18, 0x409, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_GOTO={0x8, 0x1e, 0x1}]}, 0x24}}, 0x0) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000240)={@private1={0xfc, 0x1, '\x00', 0x4}, @dev={0xfe, 0x80, '\x00', 0x42}, @private2, 0x0, 0x0, 0x0, 0x400, 0x0, 0x2000002, r4}) 8.754783553s ago: executing program 2 (id=1603): bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) r0 = fanotify_init(0xf00, 0x0) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, 0x0, 0x0) fanotify_mark(r0, 0x105, 0x4800003a, r1, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="120100003d37d840890457e00000000000010902"], 0x0) read$FUSE(r0, &(0x7f0000002f00)={0x2020}, 0x2020) 7.06723938s ago: executing program 2 (id=1610): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x0, 0x0, 0xffffffff}, 0x1c) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000009c0)) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) write$cgroup_devices(r1, &(0x7f0000000840)=ANY=[@ANYBLOB="1e0308004d6b71ef288563"], 0xffdd) 6.044400968s ago: executing program 2 (id=1615): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000040ac054382408b0b00000109022400010000002009040000fd0301000009210000000122010009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000003c0)={0x24, 0x0, 0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="002281"], 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x0) ioctl$HIDIOCSREPORT(r1, 0x81044804, &(0x7f0000000400)={0x1}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000002480)={0x18, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0003040400000003"], 0x0, 0x0, 0x0}, 0x0) 5.933426657s ago: executing program 0 (id=1617): bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001100)='/proc/locks\x00', 0x0, 0x0) fcntl$setlease(r2, 0x400, 0x0) close(r2) 5.682152973s ago: executing program 0 (id=1619): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c40)={0x8, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x42202) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r1, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000180)={0xd2, @time={0x8f9}}) 5.178381234s ago: executing program 0 (id=1622): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x7, 0x10001, 0x8, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r4 = dup(r3) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r4, @ANYBLOB=',privport,access=', @ANYRESDEC]) 5.025618019s ago: executing program 4 (id=1623): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000580)={0x0, 0x0, 0x0, &(0x7f0000000100)=""/47, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x0, 0x0, &(0x7f0000000500)=""/69, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000016c0)) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af00, &(0x7f00000000c0)) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000040)=0x1) r1 = syz_open_dev$sndpcmc(&(0x7f0000000d00), 0x0, 0x0) mmap$snddsp_control(&(0x7f0000000000/0x3000)=nil, 0x1000, 0x0, 0x11, r1, 0x81000000) 4.728760423s ago: executing program 0 (id=1624): r0 = syz_open_dev$dri(&(0x7f0000000140), 0x1, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f0000000040)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000004c0)={0x0, 0x0, r3, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r2, 0xc06864ce, &(0x7f0000000100)={r4, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000300)={r4}) ioctl$DRM_IOCTL_GEM_FLINK(r1, 0xc008640a, &(0x7f00000002c0)={r5, 0x0}) ioctl$DRM_IOCTL_GEM_OPEN(r0, 0xc010640b, &(0x7f0000000080)={r6}) 4.484051972s ago: executing program 4 (id=1625): socket$inet6_mptcp(0xa, 0x1, 0x106) r0 = syz_io_uring_setup(0x16d1, &(0x7f0000000080)={0x0, 0x0, 0x10100, 0x0, 0x20000}, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x3}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000140)={0x0, @in={{0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x30}}}, 0x3, 0x4}, 0x0) write$UHID_CREATE2(r3, &(0x7f00000001c0)=ANY=[@ANYBLOB='.'], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_MKDIRAT={0x25, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r0, 0x2d3e, 0x0, 0x0, 0x0, 0x0) 4.202643238s ago: executing program 0 (id=1626): pipe(&(0x7f0000001540)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000500)={0xa, 0x2, 0x0, @empty}, 0x1c) shutdown(r2, 0x1) listen(r2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) splice(r1, 0x0, r0, 0x0, 0x406f413, 0x0) 3.708009329s ago: executing program 4 (id=1628): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4e, &(0x7f0000000040)=0x7, 0x4) r1 = dup(r0) sendmsg$ETHTOOL_MSG_CHANNELS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={0x14, 0x0, 0x0, 0xfffffffe}, 0x14}}, 0x0) bind$unix(r1, &(0x7f00000001c0)=@abs={0xa, 0x2}, 0x6e) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r2, 0x29, 0x4e, &(0x7f0000000040)=0x7, 0x4) r3 = dup(r2) bind$unix(r3, &(0x7f00000001c0)=@abs={0xa, 0x2}, 0x6e) 3.360759445s ago: executing program 4 (id=1630): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_mount_image$exfat(&(0x7f0000006c00), &(0x7f0000000040)='./file0\x00', 0x3089a03, &(0x7f0000000200)=ANY=[@ANYRESHEX=r1, @ANYRESOCT, @ANYRES64], 0xff, 0x14fd, &(0x7f0000000580)="$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") r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) socket$nl_route(0x10, 0x3, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000012000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, &(0x7f0000000040)="f3470fbc06c744240006000000c744240200000000c7442406000000000f01142436450f0012c74424001afa0000c744240216383d27c7442406000000000f9a3c2466b8f0000f00d0400f060f00e4c4a1c1edba2500000066baa00066b8000066ef66b82f008ed0", 0x68}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 3.016065255s ago: executing program 1 (id=1632): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000004002, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x15) r2 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') writev(r2, &(0x7f0000000100)=[{&(0x7f00000004c0)='4', 0x1}], 0x9) recvmmsg(0xffffffffffffffff, &(0x7f00000008c0), 0x0, 0xcb, 0x0) 2.872135009s ago: executing program 2 (id=1633): mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) r0 = open$dir(&(0x7f0000000140)='./file0\x00', 0x2, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000000c0)={0x30000009}) epoll_pwait2(r1, &(0x7f0000000180)=[{}], 0x1, 0x0, 0x0, 0x0) r2 = io_uring_setup(0x6503, &(0x7f0000001300)) dup3(r2, r1, 0x0) r3 = open$dir(&(0x7f0000000080)='./file0\x00', 0x7e, 0x0) writev(r3, &(0x7f0000000280)=[{&(0x7f0000000300)="e7", 0x1}], 0x1) 2.428153918s ago: executing program 4 (id=1634): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x12, &(0x7f0000000080)=0x4, 0x4) getsockopt$inet6_int(r0, 0x29, 0x48, 0x0, &(0x7f00007d0000)) creat(0x0, 0x0) timer_create(0x0, 0x0, 0x0) clock_gettime(0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{0x77359400}}, 0x0) syz_usb_connect(0x0, 0x51, &(0x7f0000000600)={{0x12, 0x1, 0x0, 0x42, 0xab, 0x9c, 0x40, 0x2040, 0x4903, 0xf6b5, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3f, 0x2, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x4, 0x16, 0x99, 0x0, 0x0, [], [{{0x9, 0x5, 0x4, 0x2}}, {{0x9, 0x5, 0xa}}, {{0x9, 0x5, 0x81, 0x2}}, {{0x9, 0x5, 0xe}}]}}, {{0x9, 0x4, 0x0, 0x0, 0x0, 0xff, 0xff, 0xff}}]}}]}}, 0x0) syz_usb_connect(0x2, 0x6f, &(0x7f00000042c0)=ANY=[], 0x0) 2.374302919s ago: executing program 1 (id=1635): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000340)={0xa, 0x4e22, 0x4, @empty}, 0x1c) listen(r0, 0x0) r1 = epoll_create(0x689) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000000c0)) r2 = socket$netlink(0x10, 0x3, 0x4) epoll_wait(r1, &(0x7f00000002c0)=[{}], 0x1, 0x9450) epoll_wait(r1, &(0x7f0000000100)=[{}], 0x1, 0x7fffffff) writev(r2, &(0x7f0000000080)=[{&(0x7f0000000200)="a10100001500add427323b470c45b4560a067fffffff81004e22000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee00000000000000000200000000", 0x1a1}], 0x1) 2.253677097s ago: executing program 2 (id=1636): syz_usb_connect(0x2, 0xb7, &(0x7f0000000500)=ANY=[@ANYBLOB="12010003cf7e8f4040201f7262f2010203010902a500018104004f0904870609a97a37020a68010a0b06020102092403050703020496062404029cfe09050b00400080000007250181f7090009050d0000046404050725010300bfbb0905020200040a410307250103070c000725010108040009050b001000030509072501010702000905050000042703080905010c00024e090709050a0c20000501000725010102d00009058008200000b4ac09050701ff0304b4d4713ef392c0cdce8ee0e9c3f4cefa8382d572ca2f8dee8aeb2260b8c0b4a4a625686095d601d4cf01ba922a8d16ef8f17e5a60071e6b464ce86ee049aac6cc9e8392b183d2ec6892eb8ecc6"], &(0x7f0000000e80)={0x0, 0x0, 0x0, 0x0, 0x3, [{0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}]}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r1, 0x4) socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r1, 0x84, 0x7, 0x0, 0x0) sendto$inet6(r1, &(0x7f0000847fff)='X', 0x1, 0x200440fe, &(0x7f00000003c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 1.835870603s ago: executing program 1 (id=1637): syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000080)='./file0\x00', 0x2010050, &(0x7f0000000580)=ANY=[@ANYRES32=0x0, @ANYRES32, @ANYBLOB="574ebc0e94989fcde4c7e6c29d5b7d84ea1d3b850bb44bd48bb9519bc17acbb165391925581f91c0647c1d56315d4d044e055c5842362d6e3547a65f0d1dc45f590e08b80c1182db21b765ab93d407000000a9415a11b2facb5efbeda5c99dab23a7176fd9bdcc116a308a7b3a9e3562550da7ba26451b761e0bc1c92c045eee"], 0xff, 0x2ce, &(0x7f0000000640)="$eJzs3M9LFH8cx/G3uu6uK7p7+PL98i2iN3UpgkG3e7CEUrRQqBtZEIw6W8tOu7IzGBuhduoa/REdxKM3oTp09dKtU5duHgo6JPRjYmdnddUVk9od0+cDdN7OzNvP58OM8hrBWb/17EEx7xh505XueK90iyzKhkiqVolUa5+6RCQudV0SlWaLcr7/87tT45O3r2Wy2ZEx1dHMxMW0qg6efvnw8fKZ127/zZXB1Zispe6uf0p/WPt37f/1HxP3C44WHC2VXTV1qvzejU7Zls4UnKKhesPzTMfSQunNpIh/vOyateN5uzw7W1WzNDOQmK1YjqNmqapFq6oSEalU1bxnFkpqGIYOJAT7iS2NjZkZv4wfuHm6DRPCb7uy68avVDJmj4j07To3t9SpWQEAgMNje/7Xnfnf1xVsa3u+e57X3H+w/L8a3SP/B/m+kf9tq57/Havi/lr+d8vq1vJ/hPx/ALmt/I8jq5b/E8HPr+/JneUhvyD/AwAAAAAAAAAAAAAAAAAAAADwN9jwvKTnecnGtvERC/4lvPF12PNEe3D9j7dxDQrVuIj9dC43lxOxe+s7N6+7JUOSlG/+/RCo16NXsyND6kvJK3sh6F+Yy/X4jZm8FMQWS4YlKanW/cP1ft3e3yuJ5v60JOWf1v3plv1ROXe2qd+QpLydlrLYMuPf11v988Oql69nd/T3+ecBAAAAAHAUGLqp5fO7Yex1vN6fyYv4z9f7/31gx/N1RE5Ewl07AAAAAADHhVN9VDRt26p0sIiLSPvHqq2us+tqUcxfCHP0sItk057GS6Q7Po1I86CxYBZtGuu/5y++/LlveGnl5NfwrmB4v5MAAAAAtMdW6N/7HO9jJ2cEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMDx04nXiYW9RgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOCw+BkAAP//0b8mQA==") mkdir(&(0x7f0000000000)='./control\x00', 0x0) open(&(0x7f0000001780)='./bus\x00', 0x64842, 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000340)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f00000005c0)='./bus\x00', 0x0, 0x0) syz_io_uring_setup(0x1526, &(0x7f0000000100), 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x4c02, &(0x7f0000000140)) open$dir(&(0x7f00000002c0)='./control/file0\x00', 0xc0040, 0x0) rmdir(&(0x7f0000000000)='./control\x00') 1.408218924s ago: executing program 1 (id=1638): bind$alg(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_SET_NESTED_STATE(0xffffffffffffffff, 0x4080aebf, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/route\x00') read$FUSE(r0, &(0x7f0000007700)={0x2020}, 0x2020) r1 = socket(0x11, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000000)={'bridge0\x00', {0x2, 0x0, @remote}}) read$FUSE(r0, &(0x7f0000000a40)={0x2020}, 0x2072) 754.622168ms ago: executing program 0 (id=1639): syz_mount_image$exfat(&(0x7f0000001500), &(0x7f0000000180)='./file1\x00', 0x8000, &(0x7f0000000400)=ANY=[@ANYRES64=0x0], 0x1, 0x14fe, &(0x7f0000001580)="$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") r0 = creat(&(0x7f0000000040)='./bus\x00', 0x48) lseek(r0, 0x7fff, 0x0) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r2 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r2, 0x0) ftruncate(r1, 0x1f) write$FUSE_ATTR(r0, &(0x7f0000000600)={0x78}, 0xffffff10) write$cgroup_type(r1, &(0x7f0000000200), 0x175d9003) 690.572962ms ago: executing program 1 (id=1640): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000a40)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x15) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0xc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) process_mrelease(0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000000)='kmem_cache_free\x00'}, 0x10) getresuid(&(0x7f00000000c0), &(0x7f00000001c0), &(0x7f0000000180)) 132.065597ms ago: executing program 1 (id=1641): r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000180)) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000bcc000/0x4000)=nil, 0x4000}, 0x2}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) r1 = syz_io_uring_setup(0x6908, &(0x7f0000000340)={0x0, 0x0, 0x10100}, &(0x7f0000000140), &(0x7f0000000100)=0x0) syz_io_uring_setup(0x1864, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000000000)=0x0, &(0x7f0000000180)) syz_io_uring_submit(r3, r2, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xfffffffffffffe54}) io_uring_enter(r1, 0x184c, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x202ddd, &(0x7f0000000080), &(0x7f0000000100), &(0x7f0000000140)) 0s ago: executing program 4 (id=1642): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_time\x00', 0x26e1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x28, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x28}}, 0x0) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r0, 0x8b04, &(0x7f0000000000)={'wlan1\x00', @random="0e00"}) kernel console output (not intermixed with test programs): ft promiscuous mode [ 745.106114][T10335] loop0: detected capacity change from 0 to 4096 [ 745.143161][T10335] ntfs3: loop0: Different NTFS sector size (4096) and media sector size (512). [ 745.380144][T10335] ntfs3: loop0: Failed to initialize $Extend/$Reparse. [ 745.651869][T10335] loop0: detected capacity change from 4096 to 0 [ 745.667233][T10346] syz.0.1356: attempt to access beyond end of device [ 745.667233][T10346] loop0: rw=0, sector=40, nr_sectors = 8 limit=0 [ 745.734815][T10346] syz.0.1356: attempt to access beyond end of device [ 745.734815][T10346] loop0: rw=2049, sector=2040, nr_sectors = 8 limit=0 [ 745.748697][T10346] Buffer I/O error on dev loop0, logical block 255, lost sync page write [ 745.802308][ T3026] team0 (unregistering): Port device team_slave_1 removed [ 745.922379][ T3026] team0 (unregistering): Port device team_slave_0 removed [ 746.268637][T10230] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 746.276123][T10230] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 746.302209][ C1] vkms_vblank_simulate: vblank timer overrun [ 746.308827][T10230] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 746.321388][T10351] netlink: 2036 bytes leftover after parsing attributes in process `syz.1.1363'. [ 746.331588][T10351] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1363'. [ 746.430684][ T25] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 746.599138][T10230] hsr_slave_0: entered promiscuous mode [ 746.665464][ T25] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 746.677478][ T25] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 746.688953][ T25] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 746.699113][ T25] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 746.712628][ T25] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 746.722136][ T25] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 746.741719][T10230] hsr_slave_1: entered promiscuous mode [ 746.777660][ T25] usb 5-1: config 0 descriptor?? [ 746.800339][T10230] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 746.808304][T10230] Cannot create hsr debugfs directory [ 747.278381][ T25] plantronics 0003:047F:FFFF.000E: ignoring exceeding usage max [ 747.312752][ T25] plantronics 0003:047F:FFFF.000E: No inputs registered, leaving [ 747.347575][ T25] plantronics 0003:047F:FFFF.000E: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 748.135237][T10223] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 748.398737][T10223] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 748.460957][T10223] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 748.529159][ T5288] usb 5-1: USB disconnect, device number 18 [ 748.551139][T10223] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 749.277696][T10364] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1368'. [ 749.664094][T10230] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 749.782169][T10230] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 749.959563][T10230] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 750.085762][T10230] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 750.930829][T10223] 8021q: adding VLAN 0 to HW filter on device bond0 [ 751.232600][T10223] 8021q: adding VLAN 0 to HW filter on device team0 [ 751.422169][ T3523] bridge0: port 1(bridge_slave_0) entered blocking state [ 751.430047][ T3523] bridge0: port 1(bridge_slave_0) entered forwarding state [ 751.529552][T10373] loop4: detected capacity change from 0 to 128 [ 751.649150][ T3523] bridge0: port 2(bridge_slave_1) entered blocking state [ 751.656990][ T3523] bridge0: port 2(bridge_slave_1) entered forwarding state [ 751.686092][T10373] FAT-fs (loop4): invalid media value (0x00) [ 751.692707][T10373] FAT-fs (loop4): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 751.702539][T10373] FAT-fs (loop4): Can't find a valid FAT filesystem [ 751.805748][T10370] syz.1.1370: attempt to access beyond end of device [ 751.805748][T10370] loop0: rw=0, sector=40, nr_sectors = 8 limit=0 [ 751.940266][T10370] syz.1.1370: attempt to access beyond end of device [ 751.940266][T10370] loop0: rw=2049, sector=2040, nr_sectors = 8 limit=0 [ 751.954081][T10370] Buffer I/O error on dev loop0, logical block 255, lost sync page write [ 752.444209][T10230] 8021q: adding VLAN 0 to HW filter on device bond0 [ 752.883337][T10230] 8021q: adding VLAN 0 to HW filter on device team0 [ 753.086107][ T3092] bridge0: port 1(bridge_slave_0) entered blocking state [ 753.093847][ T3092] bridge0: port 1(bridge_slave_0) entered forwarding state [ 753.438731][ T3092] bridge0: port 2(bridge_slave_1) entered blocking state [ 753.446491][ T3092] bridge0: port 2(bridge_slave_1) entered forwarding state [ 753.521297][T10381] fuse: Bad value for 'fd' [ 755.601848][T10223] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 756.645102][T10223] veth0_vlan: entered promiscuous mode [ 756.777945][T10223] veth1_vlan: entered promiscuous mode [ 757.056753][T10230] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 757.132886][T10223] veth0_macvtap: entered promiscuous mode [ 757.154162][T10223] veth1_macvtap: entered promiscuous mode [ 757.264530][T10223] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 757.275418][T10223] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 757.285941][T10223] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 757.296687][T10223] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 757.309659][T10223] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 757.321378][T10223] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 757.331551][T10223] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 757.342315][T10223] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 757.352450][T10223] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 757.363320][T10223] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 757.373509][T10223] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 757.384301][T10223] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 757.399469][T10223] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 757.476159][T10398] loop4: detected capacity change from 0 to 2048 [ 757.535562][T10223] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 757.547072][T10223] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 757.557389][T10223] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 757.568194][T10223] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 757.578349][T10223] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 757.589129][T10223] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 757.601310][T10223] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 757.615530][T10223] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 757.626529][T10223] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 757.637342][T10223] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 757.652285][T10223] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 757.723619][T10223] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 757.732925][T10223] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 757.744221][T10223] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 757.753340][T10223] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 757.775081][T10010] syz-executor: attempt to access beyond end of device [ 757.775081][T10010] loop0: rw=0, sector=40, nr_sectors = 8 limit=0 [ 757.801557][T10010] syz-executor: attempt to access beyond end of device [ 757.801557][T10010] loop0: rw=2049, sector=2040, nr_sectors = 8 limit=0 [ 757.819439][T10010] Buffer I/O error on dev loop0, logical block 255, lost sync page write [ 757.832239][T10010] syz-executor: attempt to access beyond end of device [ 757.832239][T10010] loop0: rw=0, sector=40, nr_sectors = 8 limit=0 [ 757.908556][ T5185] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 757.948253][ T5185] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 757.960150][ T5185] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 757.983485][T10398] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 758.042109][ T5185] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 758.072193][ T5185] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 758.073247][ T3092] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 758.095591][ T5185] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 758.231789][ T3092] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 758.379931][ T3092] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 758.521838][T10014] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 758.597302][ T3092] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 758.923881][T10230] veth0_vlan: entered promiscuous mode [ 759.107543][ T3092] bridge_slave_1: left allmulticast mode [ 759.116937][ T3092] bridge_slave_1: left promiscuous mode [ 759.124039][ T3092] bridge0: port 2(bridge_slave_1) entered disabled state [ 759.149196][ T3092] bridge_slave_0: left allmulticast mode [ 759.155418][ T3092] bridge_slave_0: left promiscuous mode [ 759.163850][ T3092] bridge0: port 1(bridge_slave_0) entered disabled state [ 759.290726][T10414] loop4: detected capacity change from 0 to 1024 [ 759.299541][T10414] EXT4-fs: Ignoring removed orlov option [ 759.305709][T10414] EXT4-fs: Ignoring removed nomblk_io_submit option [ 759.413134][T10414] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 759.633193][ T3092] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 759.711950][ T3092] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 759.754432][ T3092] bond0 (unregistering): Released all slaves [ 759.857761][ T5288] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 759.909237][T10230] veth1_vlan: entered promiscuous mode [ 760.060003][ T5288] usb 5-1: Using ep0 maxpacket: 16 [ 760.085610][ T5288] usb 5-1: config 5 has an invalid interface number: 242 but max is 0 [ 760.094544][ T5288] usb 5-1: config 5 has no interface number 0 [ 760.101171][ T5288] usb 5-1: config 5 interface 242 has no altsetting 0 [ 760.156607][ T5288] usb 5-1: New USB device found, idVendor=06cd, idProduct=010c, bcdDevice=6b.64 [ 760.166265][ T5288] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 760.177764][ T5288] usb 5-1: Product: syz [ 760.183142][ T5288] usb 5-1: Manufacturer: syz [ 760.187982][ T5288] usb 5-1: SerialNumber: syz [ 760.246381][ T5185] Bluetooth: hci2: command tx timeout [ 760.504287][ T5288] keyspan 5-1:5.242: Keyspan 1 port adapter converter detected [ 760.512393][ T5288] keyspan 5-1:5.242: found no endpoint descriptor for endpoint 84 [ 760.522669][ T5288] keyspan 5-1:5.242: found no endpoint descriptor for endpoint 81 [ 760.531116][ T5288] keyspan 5-1:5.242: found no endpoint descriptor for endpoint 82 [ 760.539428][ T5288] keyspan 5-1:5.242: found no endpoint descriptor for endpoint 1 [ 760.547728][ T5288] keyspan 5-1:5.242: found no endpoint descriptor for endpoint 2 [ 760.556139][ T5288] keyspan 5-1:5.242: found no endpoint descriptor for endpoint 83 [ 760.564610][ T5288] keyspan 5-1:5.242: found no endpoint descriptor for endpoint 3 [ 760.585074][ T5288] usb 5-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 760.606844][ T5288] usb 5-1: USB disconnect, device number 19 [ 760.618709][ T5288] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 760.632904][ T5288] keyspan 5-1:5.242: device disconnected [ 760.747883][ T3092] hsr_slave_0: left promiscuous mode [ 760.758566][ T3092] hsr_slave_1: left promiscuous mode [ 760.767973][ T3092] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 760.778015][ T3092] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 760.793224][ T3092] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 760.803288][ T3092] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 760.863089][ T3092] veth1_macvtap: left promiscuous mode [ 760.868855][ T3092] veth0_macvtap: left promiscuous mode [ 760.876698][ T3092] veth1_vlan: left promiscuous mode [ 760.882486][ T3092] veth0_vlan: left promiscuous mode [ 761.019091][T10425] fuse: Bad value for 'fd' [ 761.638939][T10014] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 761.651511][ T3092] team0 (unregistering): Port device team_slave_1 removed [ 761.696644][ T3092] team0 (unregistering): Port device team_slave_0 removed [ 762.146948][T10230] veth0_macvtap: entered promiscuous mode [ 762.208359][T10230] veth1_macvtap: entered promiscuous mode [ 762.323733][ T5185] Bluetooth: hci2: command tx timeout [ 762.477051][T10230] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 762.488013][T10230] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 762.498508][T10230] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 762.509379][T10230] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 762.519505][T10230] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 762.533172][T10230] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 762.545796][T10230] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 762.557440][T10230] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 762.568572][T10230] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 762.579385][T10230] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 762.589793][T10230] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 762.600594][T10230] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 762.615641][T10230] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 762.683579][T10230] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 762.694424][T10230] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 762.704615][T10230] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 762.716265][T10230] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 762.727546][T10230] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 762.741154][T10230] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 762.752258][T10230] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 762.762996][T10230] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 762.773380][T10230] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 762.784162][T10230] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 762.805206][T10230] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 762.820741][T10401] chnl_net:caif_netlink_parms(): no params data found [ 762.914198][T10230] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 762.923635][T10230] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 762.935907][T10230] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 762.945839][T10230] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 763.623466][T10444] fuse: Bad value for 'fd' [ 764.401824][ T5185] Bluetooth: hci2: command tx timeout [ 764.873763][T10401] bridge0: port 1(bridge_slave_0) entered blocking state [ 764.886873][T10401] bridge0: port 1(bridge_slave_0) entered disabled state [ 764.894876][T10401] bridge_slave_0: entered allmulticast mode [ 764.904042][T10401] bridge_slave_0: entered promiscuous mode [ 764.935925][T10401] bridge0: port 2(bridge_slave_1) entered blocking state [ 764.943836][T10401] bridge0: port 2(bridge_slave_1) entered disabled state [ 764.958124][T10401] bridge_slave_1: entered allmulticast mode [ 764.967315][T10401] bridge_slave_1: entered promiscuous mode [ 765.094009][T10401] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 765.146575][T10401] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 765.353156][T10401] team0: Port device team_slave_0 added [ 765.440591][T10401] team0: Port device team_slave_1 added [ 765.516166][T10470] fuse: Bad value for 'fd' [ 765.652878][T10401] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 765.660393][T10401] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 765.686824][T10401] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 765.873330][T10475] loop4: detected capacity change from 0 to 128 [ 765.883618][T10401] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 765.892317][T10401] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 765.922335][T10401] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 766.070167][ T29] audit: type=1800 audit(1727508144.882:62): pid=10475 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1395" name="bus" dev="loop4" ino=1048804 res=0 errno=0 [ 766.168819][T10475] loop4: detected capacity change from 128 to 0 [ 766.182542][T10480] syz.4.1395: attempt to access beyond end of device [ 766.182542][T10480] loop4: rw=524288, sector=99, nr_sectors = 1 limit=0 [ 766.196363][T10480] syz.4.1395: attempt to access beyond end of device [ 766.196363][T10480] loop4: rw=524288, sector=100, nr_sectors = 1 limit=0 [ 766.213120][T10480] syz.4.1395: attempt to access beyond end of device [ 766.213120][T10480] loop4: rw=524288, sector=101, nr_sectors = 1 limit=0 [ 766.227818][T10480] syz.4.1395: attempt to access beyond end of device [ 766.227818][T10480] loop4: rw=524288, sector=102, nr_sectors = 1 limit=0 [ 766.241938][T10480] syz.4.1395: attempt to access beyond end of device [ 766.241938][T10480] loop4: rw=524288, sector=103, nr_sectors = 1 limit=0 [ 766.256072][T10480] syz.4.1395: attempt to access beyond end of device [ 766.256072][T10480] loop4: rw=524288, sector=104, nr_sectors = 1 limit=0 [ 766.270062][T10480] syz.4.1395: attempt to access beyond end of device [ 766.270062][T10480] loop4: rw=524288, sector=105, nr_sectors = 1 limit=0 [ 766.284106][T10480] syz.4.1395: attempt to access beyond end of device [ 766.284106][T10480] loop4: rw=0, sector=99, nr_sectors = 1 limit=0 [ 766.297496][T10480] FAT-fs (loop4): Directory bread(block 99) failed [ 766.304562][T10480] syz.4.1395: attempt to access beyond end of device [ 766.304562][T10480] loop4: rw=0, sector=100, nr_sectors = 1 limit=0 [ 766.320512][T10480] FAT-fs (loop4): Directory bread(block 100) failed [ 766.327419][T10480] syz.4.1395: attempt to access beyond end of device [ 766.327419][T10480] loop4: rw=0, sector=101, nr_sectors = 1 limit=0 [ 766.341697][T10480] FAT-fs (loop4): Directory bread(block 101) failed [ 766.348599][T10480] FAT-fs (loop4): Directory bread(block 102) failed [ 766.355725][T10480] FAT-fs (loop4): Directory bread(block 103) failed [ 766.362868][T10480] FAT-fs (loop4): Directory bread(block 104) failed [ 766.369897][T10480] FAT-fs (loop4): Directory bread(block 105) failed [ 766.377526][T10480] FAT-fs (loop4): Directory bread(block 42) failed [ 766.384565][T10480] FAT-fs (loop4): Directory bread(block 43) failed [ 766.391511][T10480] FAT-fs (loop4): Directory bread(block 44) failed [ 766.476151][ T5185] Bluetooth: hci2: command tx timeout [ 766.716394][T10401] hsr_slave_0: entered promiscuous mode [ 766.746101][T10401] hsr_slave_1: entered promiscuous mode [ 766.768932][T10401] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 766.776841][T10401] Cannot create hsr debugfs directory [ 766.813481][ T3672] FAT-fs (loop4): bread failed in fat_clusters_flush [ 766.821604][T10014] FAT-fs (loop4): unable to read boot sector to mark fs as dirty [ 767.065712][ T3523] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 767.074139][ T3523] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 767.251303][ T3672] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 767.407789][ T3672] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 767.471070][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 767.479237][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 767.575338][ T3672] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 767.716015][ T3672] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 768.238741][ T3672] bridge_slave_1: left allmulticast mode [ 768.245021][ T3672] bridge_slave_1: left promiscuous mode [ 768.254027][ T3672] bridge0: port 2(bridge_slave_1) entered disabled state [ 768.295889][ T3672] bridge_slave_0: left allmulticast mode [ 768.301932][ T3672] bridge_slave_0: left promiscuous mode [ 768.308539][ T3672] bridge0: port 1(bridge_slave_0) entered disabled state [ 768.784000][ T3672] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 768.846395][ T3672] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 768.889593][ T3672] bond0 (unregistering): Released all slaves [ 769.434216][ T4561] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 769.504563][ T4561] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 769.509908][T10401] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 769.523651][ T4561] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 769.542792][ T4561] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 769.556544][T10401] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 769.568350][ T4561] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 769.577849][ T4561] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 769.636711][T10508] xs_local_setup_socket: unhandled error (13) connecting to /var/run/rpcbind.sock [ 769.665346][T10401] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 769.813705][T10401] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 769.987672][ T3672] hsr_slave_0: left promiscuous mode [ 770.005463][ T3672] hsr_slave_1: left promiscuous mode [ 770.027459][ T3672] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 770.035571][ T3672] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 770.057625][ T3672] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 770.065658][ T3672] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 770.094381][ T3672] veth1_macvtap: left promiscuous mode [ 770.103168][ T3672] veth0_macvtap: left promiscuous mode [ 770.109093][ T3672] veth1_vlan: left promiscuous mode [ 770.114896][ T3672] veth0_vlan: left promiscuous mode [ 770.854404][ T3672] team0 (unregistering): Port device team_slave_1 removed [ 770.885320][ T3672] team0 (unregistering): Port device team_slave_0 removed [ 771.250113][ T3061] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 771.258222][ T3061] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 771.557677][ T3523] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 771.566055][ T3523] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 771.751075][ T5185] Bluetooth: hci3: command tx timeout [ 771.785194][T10401] 8021q: adding VLAN 0 to HW filter on device bond0 [ 771.940830][T10401] 8021q: adding VLAN 0 to HW filter on device team0 [ 771.989185][ T3026] bridge0: port 1(bridge_slave_0) entered blocking state [ 771.997009][ T3026] bridge0: port 1(bridge_slave_0) entered forwarding state [ 772.032575][ T1241] ieee802154 phy0 wpan0: encryption failed: -22 [ 772.144887][ T3026] bridge0: port 2(bridge_slave_1) entered blocking state [ 772.152624][ T3026] bridge0: port 2(bridge_slave_1) entered forwarding state [ 772.599073][ T59] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 772.740577][T10505] chnl_net:caif_netlink_parms(): no params data found [ 772.835695][ T59] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 772.884617][T10536] syz.1.1413[10536] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 772.885023][T10536] syz.1.1413[10536] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 772.931346][T10536] syz.1.1413[10536] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 772.965399][ T59] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 773.157400][ T59] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 773.535928][ T59] bridge_slave_1: left allmulticast mode [ 773.542012][ T59] bridge_slave_1: left promiscuous mode [ 773.548582][ T59] bridge0: port 2(bridge_slave_1) entered disabled state [ 773.574560][ T59] bridge_slave_0: left allmulticast mode [ 773.580639][ T59] bridge_slave_0: left promiscuous mode [ 773.591748][ T59] bridge0: port 1(bridge_slave_0) entered disabled state [ 773.830439][ T5185] Bluetooth: hci3: command tx timeout [ 774.101664][ T59] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 774.123979][ T59] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 774.146341][ T59] bond0 (unregistering): Released all slaves [ 774.755374][ T4561] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 774.783746][ T4561] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 774.817067][ T4561] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 774.840450][ T4561] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 774.911390][ T4561] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 774.931349][ T4561] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 775.012662][ T59] hsr_slave_0: left promiscuous mode [ 775.040708][ T59] hsr_slave_1: left promiscuous mode [ 775.062370][ T59] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 775.070443][ T59] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 775.082292][ T59] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 775.090797][ T59] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 775.125425][ T59] veth1_macvtap: left promiscuous mode [ 775.132431][ T59] veth0_macvtap: left promiscuous mode [ 775.140799][ T59] veth1_vlan: left promiscuous mode [ 775.146374][ T59] veth0_vlan: left promiscuous mode [ 775.806935][ T59] team0 (unregistering): Port device team_slave_1 removed [ 775.886068][ T59] team0 (unregistering): Port device team_slave_0 removed [ 775.910994][ T4561] Bluetooth: hci3: command tx timeout [ 776.203255][T10505] bridge0: port 1(bridge_slave_0) entered blocking state [ 776.211261][T10505] bridge0: port 1(bridge_slave_0) entered disabled state [ 776.218973][T10505] bridge_slave_0: entered allmulticast mode [ 776.227917][T10505] bridge_slave_0: entered promiscuous mode [ 776.424922][T10505] bridge0: port 2(bridge_slave_1) entered blocking state [ 776.432884][T10505] bridge0: port 2(bridge_slave_1) entered disabled state [ 776.441569][T10505] bridge_slave_1: entered allmulticast mode [ 776.454801][T10505] bridge_slave_1: entered promiscuous mode [ 776.712201][T10505] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 776.809477][T10505] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 776.841647][T10401] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 777.051390][ T4561] Bluetooth: hci1: command tx timeout [ 777.084375][T10505] team0: Port device team_slave_0 added [ 777.230215][T10505] team0: Port device team_slave_1 added [ 777.238917][T10569] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1422'. [ 777.362790][ T29] audit: type=1804 audit(1727508156.152:63): pid=10572 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.1423" name="/newroot/12/bus/file0" dev="overlay" ino=89 res=1 errno=0 [ 777.514056][T10505] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 777.521634][T10505] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 777.547953][T10505] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 777.594422][T10547] chnl_net:caif_netlink_parms(): no params data found [ 777.715423][T10505] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 777.722965][T10505] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 777.749340][T10505] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 777.934475][T10401] veth0_vlan: entered promiscuous mode [ 777.990871][ T4561] Bluetooth: hci3: command tx timeout [ 778.106286][T10401] veth1_vlan: entered promiscuous mode [ 778.236775][T10505] hsr_slave_0: entered promiscuous mode [ 778.271011][T10505] hsr_slave_1: entered promiscuous mode [ 778.307049][T10505] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 778.315177][T10505] Cannot create hsr debugfs directory [ 778.686352][T10584] loop2: detected capacity change from 0 to 2048 [ 778.739550][T10584] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 778.808192][T10547] bridge0: port 1(bridge_slave_0) entered blocking state [ 778.816034][T10547] bridge0: port 1(bridge_slave_0) entered disabled state [ 778.824018][T10547] bridge_slave_0: entered allmulticast mode [ 778.832993][T10547] bridge_slave_0: entered promiscuous mode [ 778.876872][T10401] veth0_macvtap: entered promiscuous mode [ 778.887551][T10547] bridge0: port 2(bridge_slave_1) entered blocking state [ 778.896119][T10547] bridge0: port 2(bridge_slave_1) entered disabled state [ 778.904081][T10547] bridge_slave_1: entered allmulticast mode [ 778.917258][T10547] bridge_slave_1: entered promiscuous mode [ 779.095630][T10401] veth1_macvtap: entered promiscuous mode [ 779.140549][ T4561] Bluetooth: hci1: command tx timeout [ 779.210387][T10547] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 779.259674][T10547] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 779.380177][T10401] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 779.392049][T10401] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 779.403363][T10401] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 779.414176][T10401] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 779.427089][T10401] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 779.440672][T10401] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 779.451347][T10401] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 779.462129][T10401] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 779.472362][T10401] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 779.483105][T10401] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 779.497872][T10401] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 779.604436][T10588] loop2: detected capacity change from 0 to 1024 [ 779.698882][T10547] team0: Port device team_slave_0 added [ 779.717220][T10401] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 779.720270][T10588] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 779.731275][T10401] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 779.756841][T10401] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 779.768035][T10401] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 779.778361][T10401] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 779.789148][T10401] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 779.799286][T10401] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 779.810112][T10401] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 779.824837][T10401] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 779.886474][T10547] team0: Port device team_slave_1 added [ 779.899506][T10401] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 779.908857][T10401] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 779.918492][T10401] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 779.927667][T10401] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 780.163786][T10547] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 780.171211][T10547] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 780.198668][T10547] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 780.254807][T10547] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 780.262270][T10547] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 780.288739][T10547] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 780.467164][T10547] hsr_slave_0: entered promiscuous mode [ 780.496613][T10547] hsr_slave_1: entered promiscuous mode [ 780.506691][T10547] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 780.514559][T10547] Cannot create hsr debugfs directory [ 780.783660][T10505] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 780.822040][T10505] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 780.916069][T10505] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 780.983352][T10505] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 781.102408][T10603] fuse: Bad value for 'fd' [ 781.190499][ T4561] Bluetooth: hci1: command tx timeout [ 781.814255][T10547] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 781.887906][T10547] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 781.913784][T10547] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 781.945507][T10547] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 782.171870][T10505] 8021q: adding VLAN 0 to HW filter on device bond0 [ 782.279585][T10505] 8021q: adding VLAN 0 to HW filter on device team0 [ 782.375312][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 782.383104][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 782.488719][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 782.496463][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 782.822148][ T4561] Bluetooth: hci8: Malformed LE Event: 0x0b [ 783.154452][T10547] 8021q: adding VLAN 0 to HW filter on device bond0 [ 783.289253][ T4561] Bluetooth: hci1: command tx timeout [ 783.369401][T10547] 8021q: adding VLAN 0 to HW filter on device team0 [ 783.488425][ T3001] bridge0: port 1(bridge_slave_0) entered blocking state [ 783.496146][ T3001] bridge0: port 1(bridge_slave_0) entered forwarding state [ 783.590938][ T3001] bridge0: port 2(bridge_slave_1) entered blocking state [ 783.598578][ T3001] bridge0: port 2(bridge_slave_1) entered forwarding state [ 783.783170][T10624] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 783.795361][T10624] Cannot find add_set index 0 as target [ 784.713926][T10505] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 785.221693][ T3118] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 785.229955][ T3118] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 785.391841][T10547] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 785.489129][ T3523] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 785.497477][ T3523] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 785.775716][T10547] veth0_vlan: entered promiscuous mode [ 785.818762][T10547] veth1_vlan: entered promiscuous mode [ 785.985067][T10647] loop0: detected capacity change from 0 to 256 [ 786.010922][T10547] veth0_macvtap: entered promiscuous mode [ 786.039479][T10547] veth1_macvtap: entered promiscuous mode [ 786.139470][T10547] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 786.150364][T10547] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 786.162061][T10547] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 786.173864][T10547] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 786.187656][T10547] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 786.199600][T10547] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 786.210074][T10547] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 786.218319][T10647] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 786.220732][T10547] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 786.220811][T10547] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 786.257445][T10547] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 786.267581][T10547] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 786.278361][T10547] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 786.298715][T10547] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 786.344392][T10547] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 786.355500][T10547] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 786.366036][T10547] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 786.376822][T10547] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 786.390717][T10547] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 786.405374][T10547] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 786.415989][T10547] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 786.426815][T10547] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 786.436957][T10547] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 786.447725][T10547] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 786.463195][T10547] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 786.504944][T10547] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 786.514118][T10547] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 786.523236][T10547] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 786.532851][T10547] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 786.871906][T10505] veth0_vlan: entered promiscuous mode [ 786.940603][T10505] veth1_vlan: entered promiscuous mode [ 787.256305][ T3523] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 787.314419][T10505] veth0_macvtap: entered promiscuous mode [ 787.442379][ T3523] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 787.529659][T10505] veth1_macvtap: entered promiscuous mode [ 787.672652][ T3523] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 787.806580][ T3523] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 787.906118][T10505] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 787.917975][T10505] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 787.932581][T10505] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 787.944402][T10505] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 787.954502][T10505] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 787.965248][T10505] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 787.975535][T10505] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 787.986297][T10505] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 788.013431][T10505] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 788.031248][T10505] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 788.042493][T10505] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 788.053245][T10505] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 788.063484][T10505] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 788.075719][T10505] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 788.091445][T10505] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 788.261143][T10505] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 788.272038][T10505] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 788.282208][T10505] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 788.293040][T10505] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 788.303312][T10505] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 788.314081][T10505] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 788.324239][T10505] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 788.338721][T10505] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 788.350161][T10505] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 788.361112][T10505] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 788.371336][T10505] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 788.382111][T10505] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 788.397045][T10505] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 788.415897][ T3523] bridge_slave_1: left allmulticast mode [ 788.422858][ T3523] bridge_slave_1: left promiscuous mode [ 788.429416][ T3523] bridge0: port 2(bridge_slave_1) entered disabled state [ 788.473388][ T3523] bridge_slave_0: left allmulticast mode [ 788.479283][ T3523] bridge_slave_0: left promiscuous mode [ 788.486671][ T3523] bridge0: port 1(bridge_slave_0) entered disabled state [ 788.948610][ T3523] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 789.003838][ T3523] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 789.069392][ T3523] bond0 (unregistering): Released all slaves [ 789.186063][ T5185] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 789.207502][ T5185] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 789.265385][ T5185] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 789.292397][T10013] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 789.319674][T10013] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 789.329651][T10013] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 789.425256][T10505] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 789.435792][T10505] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 789.445607][T10505] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 789.457762][T10505] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 789.768711][ T3523] hsr_slave_0: left promiscuous mode [ 789.796083][ T3523] hsr_slave_1: left promiscuous mode [ 789.813536][ T3523] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 789.821530][ T3523] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 789.861998][ T3523] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 789.873541][ T3523] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 789.896818][ T3523] veth1_macvtap: left promiscuous mode [ 789.902954][ T3523] veth0_macvtap: left promiscuous mode [ 789.908953][ T3523] veth1_vlan: left promiscuous mode [ 789.914632][ T3523] veth0_vlan: left promiscuous mode [ 790.554990][ T3523] team0 (unregistering): Port device team_slave_1 removed [ 790.659685][ T3523] team0 (unregistering): Port device team_slave_0 removed [ 791.491026][T10013] Bluetooth: hci2: command tx timeout [ 791.929458][ T4561] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 791.947278][ T4561] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 792.002019][ T4561] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 792.035365][ T4561] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 792.077816][ T4561] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 792.088336][ T4561] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 792.302893][T10663] chnl_net:caif_netlink_parms(): no params data found [ 793.519095][T10013] Bluetooth: hci2: command tx timeout [ 793.611880][T10223] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 793.635879][ T3523] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 793.690806][T10663] bridge0: port 1(bridge_slave_0) entered blocking state [ 793.698590][T10663] bridge0: port 1(bridge_slave_0) entered disabled state [ 793.706666][T10663] bridge_slave_0: entered allmulticast mode [ 793.715788][T10663] bridge_slave_0: entered promiscuous mode [ 793.766418][ T3523] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 793.783737][T10663] bridge0: port 2(bridge_slave_1) entered blocking state [ 793.793740][T10663] bridge0: port 2(bridge_slave_1) entered disabled state [ 793.802885][T10663] bridge_slave_1: entered allmulticast mode [ 793.813791][T10663] bridge_slave_1: entered promiscuous mode [ 793.923407][T10678] chnl_net:caif_netlink_parms(): no params data found [ 793.970889][ T3523] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 794.156360][T10013] Bluetooth: hci4: command tx timeout [ 794.173152][ T3523] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 794.239016][T10663] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 794.386714][T10663] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 794.578243][ T3523] bridge_slave_1: left allmulticast mode [ 794.586354][ T3523] bridge_slave_1: left promiscuous mode [ 794.593124][ T3523] bridge0: port 2(bridge_slave_1) entered disabled state [ 794.618778][ T3523] bridge_slave_0: left allmulticast mode [ 794.625702][ T3523] bridge_slave_0: left promiscuous mode [ 794.632380][ T3523] bridge0: port 1(bridge_slave_0) entered disabled state [ 795.106069][ T3523] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 795.127688][ T3523] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 795.144300][ T3523] bond0 (unregistering): Released all slaves [ 795.201907][T10663] team0: Port device team_slave_0 added [ 795.372553][T10663] team0: Port device team_slave_1 added [ 795.493448][ T3061] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 795.503632][ T3061] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 795.594059][T10013] Bluetooth: hci2: command tx timeout [ 795.782959][T10663] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 795.790508][T10663] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 795.823625][T10663] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 795.935170][T10678] bridge0: port 1(bridge_slave_0) entered blocking state [ 795.943166][T10678] bridge0: port 1(bridge_slave_0) entered disabled state [ 795.951186][T10678] bridge_slave_0: entered allmulticast mode [ 795.960246][T10678] bridge_slave_0: entered promiscuous mode [ 796.105715][T10663] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 796.115423][T10663] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 796.142426][T10663] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 796.181510][ T3118] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 796.189572][ T3118] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 796.228066][T10678] bridge0: port 2(bridge_slave_1) entered blocking state [ 796.235925][T10678] bridge0: port 2(bridge_slave_1) entered disabled state [ 796.245459][T10678] bridge_slave_1: entered allmulticast mode [ 796.256628][T10678] bridge_slave_1: entered promiscuous mode [ 796.269190][T10013] Bluetooth: hci4: command tx timeout [ 796.481212][ T3092] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 796.489272][ T3092] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 796.609474][ T3523] hsr_slave_0: left promiscuous mode [ 796.633459][ T3523] hsr_slave_1: left promiscuous mode [ 796.649276][ T3523] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 796.657564][ T3523] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 796.674095][ T3523] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 796.681916][ T3523] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 796.710165][ T3523] veth1_macvtap: left promiscuous mode [ 796.715929][ T3523] veth0_macvtap: left promiscuous mode [ 796.721914][ T3523] veth1_vlan: left promiscuous mode [ 796.731193][ T3523] veth0_vlan: left promiscuous mode [ 797.311769][ T3523] team0 (unregistering): Port device team_slave_1 removed [ 797.353255][ T3523] team0 (unregistering): Port device team_slave_0 removed [ 797.633946][T10678] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 797.670155][T10013] Bluetooth: hci2: command tx timeout [ 797.807487][T10678] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 797.877024][T10663] hsr_slave_0: entered promiscuous mode [ 797.888291][T10663] hsr_slave_1: entered promiscuous mode [ 797.898320][T10663] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 797.906590][T10663] Cannot create hsr debugfs directory [ 798.131195][ T3118] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 798.139256][ T3118] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 798.222100][T10678] team0: Port device team_slave_0 added [ 798.292967][T10678] team0: Port device team_slave_1 added [ 798.321203][T10013] Bluetooth: hci4: command tx timeout [ 798.645520][ T3061] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 798.785370][ T3061] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 798.812513][T10678] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 798.819678][T10678] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 798.846489][T10678] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 798.923889][ T3061] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 798.983251][T10678] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 798.991896][T10678] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 799.018204][T10678] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 799.113956][ T3061] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 799.275194][T10678] hsr_slave_0: entered promiscuous mode [ 799.288366][T10678] hsr_slave_1: entered promiscuous mode [ 799.297421][T10678] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 799.306241][T10678] Cannot create hsr debugfs directory [ 799.486386][ T3061] bridge_slave_1: left allmulticast mode [ 799.495550][ T3061] bridge_slave_1: left promiscuous mode [ 799.502647][ T3061] bridge0: port 2(bridge_slave_1) entered disabled state [ 799.516522][ T3061] bridge_slave_0: left allmulticast mode [ 799.522708][ T3061] bridge_slave_0: left promiscuous mode [ 799.528910][ T3061] bridge0: port 1(bridge_slave_0) entered disabled state [ 799.981455][ T3061] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 800.039942][ T3061] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 800.098008][ T3061] bond0 (unregistering): Released all slaves [ 800.392621][T10013] Bluetooth: hci4: command tx timeout [ 800.444710][ T4561] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 800.463097][ T4561] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 800.481140][T10744] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1461'. [ 800.500776][ T4561] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 800.518166][ T4561] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 800.531589][ T4561] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 800.547754][ T4561] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 800.625105][T10663] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 800.857979][ T5288] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 800.883902][T10663] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 800.943620][T10663] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 801.042423][ T5288] usb 5-1: Using ep0 maxpacket: 32 [ 801.057915][ T3061] hsr_slave_0: left promiscuous mode [ 801.067457][ T3061] hsr_slave_1: left promiscuous mode [ 801.078023][ T3061] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 801.086525][ T3061] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 801.096802][ T3061] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 801.104666][ T3061] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 801.112913][ T5288] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 801.124865][ T5288] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 801.140985][ T5288] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 801.152640][ T5288] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 801.162331][ T5288] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 801.189124][ T5288] usb 5-1: config 0 descriptor?? [ 801.196370][ T3061] veth1_macvtap: left promiscuous mode [ 801.196755][T10751] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 801.202153][ T3061] veth0_macvtap: left promiscuous mode [ 801.215321][ T3061] veth1_vlan: left promiscuous mode [ 801.221246][ T3061] veth0_vlan: left promiscuous mode [ 801.239505][ T5288] hub 5-1:0.0: USB hub found [ 801.464522][ T5288] hub 5-1:0.0: 2 ports detected [ 801.893431][ T3061] team0 (unregistering): Port device team_slave_1 removed [ 801.948914][ T3061] team0 (unregistering): Port device team_slave_0 removed [ 802.103997][ T5288] usb 5-1: USB disconnect, device number 20 [ 802.338021][T10663] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 802.427991][T10759] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1465'. [ 802.509499][T10759] hsr_slave_1 (unregistering): left promiscuous mode [ 802.647158][ T4561] Bluetooth: hci0: command tx timeout [ 803.454050][T10746] chnl_net:caif_netlink_parms(): no params data found [ 803.498271][T10663] 8021q: adding VLAN 0 to HW filter on device bond0 [ 803.541487][T10663] 8021q: adding VLAN 0 to HW filter on device team0 [ 803.630844][ T3118] bridge0: port 1(bridge_slave_0) entered blocking state [ 803.638499][ T3118] bridge0: port 1(bridge_slave_0) entered forwarding state [ 803.657535][ T3118] bridge0: port 2(bridge_slave_1) entered blocking state [ 803.665252][ T3118] bridge0: port 2(bridge_slave_1) entered forwarding state [ 803.801846][T10678] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 804.013089][T10678] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 804.084925][T10678] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 804.122192][T10678] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 804.274673][T10779] loop4: detected capacity change from 0 to 512 [ 804.357698][T10779] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 804.521952][T10779] loop4: detected capacity change from 512 to 11 [ 804.532477][T10787] EXT4-fs error (device loop4) in ext4_setattr:5523: Out of memory [ 804.599625][T10779] Dev loop4: unable to read RDB block 11 [ 804.606852][T10779] loop4: unable to read partition table [ 804.741757][T10779] loop4: partition table beyond EOD, truncated [ 804.748210][T10779] loop_reread_partitions: partition scan of loop4 (ï5ŸA;¹8R÷ÖÑÎ])Ãî^\©) failed (rc=-5) [ 804.770460][ T4561] Bluetooth: hci0: command tx timeout [ 805.058761][T10505] EXT4-fs warning (device loop4): htree_dirblock_to_tree:1083: inode #2: lblock 0: comm syz-executor: error -12 reading directory block [ 805.074420][T10505] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5780: Out of memory [ 805.086985][T10505] EXT4-fs error (device loop4): ext4_dirty_inode:5984: inode #2: comm syz-executor: mark_inode_dirty error [ 805.110946][T10746] bridge0: port 1(bridge_slave_0) entered blocking state [ 805.118607][T10746] bridge0: port 1(bridge_slave_0) entered disabled state [ 805.131614][T10746] bridge_slave_0: entered allmulticast mode [ 805.140647][T10746] bridge_slave_0: entered promiscuous mode [ 805.183624][T10746] bridge0: port 2(bridge_slave_1) entered blocking state [ 805.192470][T10746] bridge0: port 2(bridge_slave_1) entered disabled state [ 805.200533][T10746] bridge_slave_1: entered allmulticast mode [ 805.209650][T10746] bridge_slave_1: entered promiscuous mode [ 805.266861][T10505] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 805.385403][T10793] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 805.419265][T10746] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 805.446045][T10746] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 805.459311][T10793] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 805.636719][T10746] team0: Port device team_slave_0 added [ 805.681049][T10678] 8021q: adding VLAN 0 to HW filter on device bond0 [ 805.705744][T10746] team0: Port device team_slave_1 added [ 805.756352][ T3118] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 805.993801][ T3118] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 806.082399][T10746] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 806.089581][T10746] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 806.117235][T10746] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 806.143633][T10678] 8021q: adding VLAN 0 to HW filter on device team0 [ 806.180610][ T3118] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 806.241826][T10663] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 806.258881][T10746] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 806.266399][T10746] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 806.293633][T10746] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 806.336306][ T3118] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 806.419695][ T3672] bridge0: port 1(bridge_slave_0) entered blocking state [ 806.427402][ T3672] bridge0: port 1(bridge_slave_0) entered forwarding state [ 806.599806][ T3672] bridge0: port 2(bridge_slave_1) entered blocking state [ 806.607532][ T3672] bridge0: port 2(bridge_slave_1) entered forwarding state [ 806.673958][T10746] hsr_slave_0: entered promiscuous mode [ 806.684837][T10746] hsr_slave_1: entered promiscuous mode [ 806.698377][T10746] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 806.706419][T10746] Cannot create hsr debugfs directory [ 806.791006][ T4561] Bluetooth: hci0: command tx timeout [ 806.967361][ T3118] bridge_slave_1: left allmulticast mode [ 806.974614][ T3118] bridge_slave_1: left promiscuous mode [ 806.981426][ T3118] bridge0: port 2(bridge_slave_1) entered disabled state [ 807.040683][ T3118] bridge_slave_0: left allmulticast mode [ 807.046629][ T3118] bridge_slave_0: left promiscuous mode [ 807.053327][ T3118] bridge0: port 1(bridge_slave_0) entered disabled state [ 807.384318][T10013] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 807.393965][T10013] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 807.404257][T10013] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 807.417876][T10013] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 807.429417][T10013] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 807.466673][T10013] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 807.548092][ T3118] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 807.577312][ T3118] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 807.598743][ T3118] bond0 (unregistering): Released all slaves [ 808.254683][T10663] veth0_vlan: entered promiscuous mode [ 808.332409][ T3118] hsr_slave_0: left promiscuous mode [ 808.344059][ T3118] hsr_slave_1: left promiscuous mode [ 808.352822][ T3118] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 808.362368][ T3118] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 808.382398][ T3118] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 808.390366][ T3118] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 808.409305][ T3118] veth1_macvtap: left promiscuous mode [ 808.415949][ T3118] veth0_macvtap: left promiscuous mode [ 808.422154][ T3118] veth1_vlan: left promiscuous mode [ 808.427619][ T3118] veth0_vlan: left promiscuous mode [ 808.870064][ T4561] Bluetooth: hci0: command tx timeout [ 808.965514][ T3118] team0 (unregistering): Port device team_slave_1 removed [ 808.998133][ T3118] team0 (unregistering): Port device team_slave_0 removed [ 809.479114][ T29] audit: type=1326 audit(1727508188.302:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10807 comm="syz.1.1480" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc63f7dff9 code=0x7fc00000 [ 809.503768][ T29] audit: type=1326 audit(1727508188.302:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10807 comm="syz.1.1480" exe="/root/syz-executor" sig=0 arch=c000003e syscall=208 compat=0 ip=0x7efc63f7dff9 code=0x7fc00000 [ 809.530315][ T29] audit: type=1326 audit(1727508188.302:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10807 comm="syz.1.1480" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc63f7dff9 code=0x7fc00000 [ 809.540358][ T4561] Bluetooth: hci1: command tx timeout [ 809.654929][T10663] veth1_vlan: entered promiscuous mode [ 810.094751][ T3118] bridge_slave_1: left allmulticast mode [ 810.100814][ T3118] bridge_slave_1: left promiscuous mode [ 810.107357][ T3118] bridge0: port 2(bridge_slave_1) entered disabled state [ 810.125254][ T3118] bridge_slave_0: left allmulticast mode [ 810.133055][ T3118] bridge_slave_0: left promiscuous mode [ 810.143668][ T3118] bridge0: port 1(bridge_slave_0) entered disabled state [ 810.625773][ T3118] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 810.661446][ T3118] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 810.691092][ T3118] bond0 (unregistering): Released all slaves [ 810.931937][T10663] veth0_macvtap: entered promiscuous mode [ 811.135995][T10663] veth1_macvtap: entered promiscuous mode [ 811.149618][T10800] chnl_net:caif_netlink_parms(): no params data found [ 811.544909][T10746] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 811.586258][ T3118] hsr_slave_0: left promiscuous mode [ 811.596813][ T3118] hsr_slave_1: left promiscuous mode [ 811.605261][ T4561] Bluetooth: hci1: command tx timeout [ 811.615322][ T3118] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 811.626043][ T3118] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 811.652093][ T3118] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 811.660211][ T3118] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 811.690730][ T3118] veth1_macvtap: left promiscuous mode [ 811.696477][ T3118] veth0_macvtap: left promiscuous mode [ 811.702969][ T3118] veth1_vlan: left promiscuous mode [ 811.705122][T10829] fuse: Bad value for 'fd' [ 811.708481][ T3118] veth0_vlan: left promiscuous mode [ 812.187873][ T3118] team0 (unregistering): Port device team_slave_1 removed [ 812.224684][ T3118] team0 (unregistering): Port device team_slave_0 removed [ 812.562877][T10663] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 812.573770][T10663] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 812.583917][T10663] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 812.594726][T10663] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 812.605369][T10663] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 812.616157][T10663] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 812.631246][T10663] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 812.649245][T10746] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 812.761256][T10746] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 812.817625][T10746] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 812.888857][T10663] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 812.900119][T10663] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 812.910934][T10663] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 812.921723][T10663] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 812.936413][T10663] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 813.046815][T10678] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 813.098407][T10663] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 813.109325][T10663] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 813.119126][T10663] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 813.128379][T10663] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 813.675713][ T4561] Bluetooth: hci1: command tx timeout [ 813.697795][T10800] bridge0: port 1(bridge_slave_0) entered blocking state [ 813.707136][T10800] bridge0: port 1(bridge_slave_0) entered disabled state [ 813.715054][T10800] bridge_slave_0: entered allmulticast mode [ 813.724702][T10800] bridge_slave_0: entered promiscuous mode [ 813.747870][T10800] bridge0: port 2(bridge_slave_1) entered blocking state [ 813.755747][T10800] bridge0: port 2(bridge_slave_1) entered disabled state [ 813.764150][T10800] bridge_slave_1: entered allmulticast mode [ 813.773313][T10800] bridge_slave_1: entered promiscuous mode [ 813.885304][T10678] veth0_vlan: entered promiscuous mode [ 813.955457][T10800] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 814.010482][T10800] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 814.040103][T10678] veth1_vlan: entered promiscuous mode [ 814.159090][T10800] team0: Port device team_slave_0 added [ 814.209266][T10800] team0: Port device team_slave_1 added [ 814.322967][T10800] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 814.331547][T10800] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 814.359440][T10800] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 814.398097][T10800] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 814.406777][T10800] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 814.434611][T10800] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 814.569090][T10678] veth0_macvtap: entered promiscuous mode [ 814.724362][T10678] veth1_macvtap: entered promiscuous mode [ 814.749448][T10746] 8021q: adding VLAN 0 to HW filter on device bond0 [ 814.769914][T10800] hsr_slave_0: entered promiscuous mode [ 814.782088][T10800] hsr_slave_1: entered promiscuous mode [ 814.792271][T10800] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 814.800407][T10800] Cannot create hsr debugfs directory [ 815.090083][T10746] 8021q: adding VLAN 0 to HW filter on device team0 [ 815.147585][ T3672] bridge0: port 1(bridge_slave_0) entered blocking state [ 815.155335][ T3672] bridge0: port 1(bridge_slave_0) entered forwarding state [ 815.179507][T10678] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 815.190446][T10678] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 815.201532][T10678] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 815.212454][T10678] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 815.222639][T10678] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 815.233424][T10678] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 815.243598][T10678] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 815.254354][T10678] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 815.269666][T10678] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 815.318088][T10678] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 815.329001][T10678] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 815.339465][T10678] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 815.352334][T10678] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 815.365133][T10678] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 815.375970][T10678] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 815.390727][T10678] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 815.449153][ T3118] bridge0: port 2(bridge_slave_1) entered blocking state [ 815.456892][ T3118] bridge0: port 2(bridge_slave_1) entered forwarding state [ 815.473541][T10678] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 815.482825][T10678] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 815.492370][T10678] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 815.501534][T10678] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 815.753585][ T4561] Bluetooth: hci1: command tx timeout [ 816.424905][T10800] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 816.496188][T10800] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 816.561107][T10800] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 816.641301][T10800] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 817.212990][T10746] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 817.531565][T10800] 8021q: adding VLAN 0 to HW filter on device bond0 [ 817.645158][T10800] 8021q: adding VLAN 0 to HW filter on device team0 [ 817.699246][ T3672] bridge0: port 1(bridge_slave_0) entered blocking state [ 817.707004][ T3672] bridge0: port 1(bridge_slave_0) entered forwarding state [ 817.760699][ T3672] bridge0: port 2(bridge_slave_1) entered blocking state [ 817.768361][ T3672] bridge0: port 2(bridge_slave_1) entered forwarding state [ 817.889527][T10746] veth0_vlan: entered promiscuous mode [ 818.044641][T10746] veth1_vlan: entered promiscuous mode [ 818.232154][T10746] veth0_macvtap: entered promiscuous mode [ 818.280218][T10746] veth1_macvtap: entered promiscuous mode [ 818.446690][T10746] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 818.458462][T10746] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 818.468635][T10746] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 818.481106][T10746] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 818.491619][T10746] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 818.502340][T10746] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 818.512511][T10746] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 818.525854][T10746] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 818.536513][T10746] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 818.547284][T10746] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 818.564308][T10746] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 818.618334][T10746] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 818.629281][T10746] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 818.642217][T10746] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 818.653714][T10746] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 818.663871][T10746] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 818.674687][T10746] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 818.684848][T10746] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 818.695614][T10746] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 818.714751][T10746] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 818.807297][T10746] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 818.817886][T10746] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 818.828903][T10746] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 818.840980][T10746] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 818.887375][ T3672] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 818.895538][ T3672] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 819.073051][ T3001] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 819.082730][ T3001] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 819.669101][T10883] fuse: Bad value for 'fd' [ 819.753474][T10800] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 820.223289][T10891] loop0: detected capacity change from 0 to 512 [ 820.227732][T10013] Bluetooth: hci8: command 0x0406 tx timeout [ 820.684665][T10891] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 820.699403][T10891] ext4 filesystem being mounted at /1/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 821.568931][T10800] veth0_vlan: entered promiscuous mode [ 821.645425][T10663] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 821.657484][T10800] veth1_vlan: entered promiscuous mode [ 821.677147][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 821.685332][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 821.878735][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 821.887687][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 822.047612][T10800] veth0_macvtap: entered promiscuous mode [ 822.117999][T10800] veth1_macvtap: entered promiscuous mode [ 822.150227][T10916] loop0: detected capacity change from 0 to 1024 [ 822.328666][T10800] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 822.340515][T10800] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 822.350908][T10800] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 822.363718][T10800] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 822.373812][T10800] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 822.384546][T10800] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 822.394808][T10800] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 822.405525][T10800] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 822.415599][T10800] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 822.426373][T10800] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 822.438862][T10800] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 822.450238][T10800] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 822.465329][T10800] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 822.573835][T10800] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 822.584681][T10800] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 822.594863][T10800] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 822.605625][T10800] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 822.616204][T10800] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 822.626994][T10800] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 822.639529][T10800] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 822.650954][T10800] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 822.661088][T10800] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 822.671802][T10800] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 822.692569][T10800] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 822.719302][T10920] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1447'. [ 822.747290][T10800] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 822.756871][T10800] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 822.767604][T10800] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 822.777028][T10800] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 824.590576][T10954] loop2: detected capacity change from 0 to 256 [ 824.599130][T10954] vfat: Unknown parameter 'uni_x[ate' [ 825.021901][ T3523] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 825.030549][ T3523] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 825.241302][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 825.249572][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 825.829518][ T3118] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 826.004306][ T3118] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 826.165100][ T3118] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 826.234213][T10979] loop2: detected capacity change from 0 to 128 [ 826.304427][T10979] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 826.355630][ T3118] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 826.378103][T10979] ext4 filesystem being mounted at /4/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 826.643565][ T3118] bridge_slave_1: left allmulticast mode [ 826.649466][ T3118] bridge_slave_1: left promiscuous mode [ 826.656236][ T3118] bridge0: port 2(bridge_slave_1) entered disabled state [ 826.678750][ T3118] bridge_slave_0: left allmulticast mode [ 826.681592][T10678] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 826.684985][ T3118] bridge_slave_0: left promiscuous mode [ 826.700328][ T3118] bridge0: port 1(bridge_slave_0) entered disabled state [ 827.232396][ T3118] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 827.281441][ T3118] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 827.303848][ T3118] bond0 (unregistering): Released all slaves [ 827.593591][ T4561] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 827.602852][ T4561] Bluetooth: hci2: Injecting HCI hardware error event [ 827.611155][ T4561] Bluetooth: hci2: hardware error 0x00 [ 827.708620][ T3118] hsr_slave_0: left promiscuous mode [ 827.733179][ T3118] hsr_slave_1: left promiscuous mode [ 827.746683][ T3118] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 827.757652][ T3118] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 827.780376][ T3118] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 827.788089][ T3118] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 827.809934][ T3118] veth1_macvtap: left promiscuous mode [ 827.815678][ T3118] veth0_macvtap: left promiscuous mode [ 827.822474][ T3118] veth1_vlan: left promiscuous mode [ 827.828046][ T3118] veth0_vlan: left promiscuous mode [ 828.987763][ T5185] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 828.999858][ T3118] team0 (unregistering): Port device team_slave_1 removed [ 829.023935][ T5185] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 829.034163][ T3118] team0 (unregistering): Port device team_slave_0 removed [ 829.164177][ T5185] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 829.187437][ T5185] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 829.203270][ T5185] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 829.212562][ T5185] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 829.671355][ T4561] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 830.044217][ T3001] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 830.052302][ T3001] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 830.509114][ T3061] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 830.519305][ T3061] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 830.908113][T11004] chnl_net:caif_netlink_parms(): no params data found [ 830.973334][T11041] netlink: 2036 bytes leftover after parsing attributes in process `syz.2.1526'. [ 830.983286][T11041] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1526'. [ 831.271065][T11047] EXT4-fs warning (device sda1): verify_group_input:137: Cannot add at group 327669 (only 8 groups) [ 831.291295][T11046] loop4: detected capacity change from 0 to 2048 [ 831.432155][ T4561] Bluetooth: hci0: command tx timeout [ 831.709165][T11004] bridge0: port 1(bridge_slave_0) entered blocking state [ 831.717043][T11004] bridge0: port 1(bridge_slave_0) entered disabled state [ 831.725015][T11004] bridge_slave_0: entered allmulticast mode [ 831.733975][T11004] bridge_slave_0: entered promiscuous mode [ 831.758710][T11004] bridge0: port 2(bridge_slave_1) entered blocking state [ 831.766463][T11004] bridge0: port 2(bridge_slave_1) entered disabled state [ 831.774340][T11004] bridge_slave_1: entered allmulticast mode [ 831.783470][T11004] bridge_slave_1: entered promiscuous mode [ 831.900742][T11004] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 831.974295][T11004] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 832.111510][T11004] team0: Port device team_slave_0 added [ 832.133511][T11004] team0: Port device team_slave_1 added [ 832.227561][T11004] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 832.236137][T11004] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 832.265598][ C0] vxcan1: j1939_tp_rxtimer: 0xffff888021578c00: rx timeout, send abort [ 832.277569][ C0] vxcan1: j1939_xtp_rx_abort_one: 0xffff888021578c00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 832.277776][ C0] ------------[ cut here ]------------ [ 832.277825][ C0] refcount_t: underflow; use-after-free. [ 832.279498][ C0] WARNING: CPU: 0 PID: 11004 at lib/refcount.c:28 refcount_warn_saturate+0x2cb/0x370 [ 832.279789][ C0] Modules linked in: [ 832.279893][ C0] CPU: 0 UID: 0 PID: 11004 Comm: syz-executor Tainted: G W 6.11.0-syzkaller-11728-gad46e8f95e93 #0 [ 832.280088][ C0] Tainted: [W]=WARN [ 832.280139][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 832.280218][ C0] RIP: 0010:refcount_warn_saturate+0x2cb/0x370 [ 832.280398][ C0] Code: f6 91 e8 78 06 27 fc c6 00 00 c6 05 52 61 cf 0b 01 90 49 c7 86 80 0c 00 00 00 00 00 00 48 c7 c7 2e bf 16 91 e8 c6 88 33 fb 90 <0f> 0b 90 90 e9 c4 fe ff ff 8b 3a e8 05 13 27 fc f6 c3 01 0f 85 83 [ 832.280531][ C0] RSP: 0018:ffff88813fc05748 EFLAGS: 00010246 [ 832.280656][ C0] RAX: ffffffff815a7139 RBX: 0000000000000000 RCX: ffff888112de8000 [ 832.280764][ C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 832.280857][ C0] RBP: ffff88813fc05760 R08: ffffffff815a712f R09: 0000000000000000 [ 832.280961][ C0] R10: ffff888237de3a4c R11: 0000000000000004 R12: 0000000000000000 [ 832.281060][ C0] R13: ffff88813fca1d80 R14: ffff88813fca1d80 R15: 0000000000000003 [ 832.281168][ C0] FS: 000055556f238500(0000) GS:ffff88813fc00000(0000) knlGS:0000000000000000 [ 832.281300][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 832.281406][ C0] CR2: 000055557a4b2808 CR3: 00000000141ea000 CR4: 00000000003506f0 [ 832.281520][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 832.281611][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 832.281709][ C0] Call Trace: [ 832.281754][ C0] [ 832.281809][ C0] ? show_trace_log_lvl+0x268/0x3d0 [ 832.281976][ C0] ? sk_skb_reason_drop+0x154/0x480 [ 832.282143][ C0] ? show_regs+0xb4/0xe0 [ 832.282289][ C0] ? __warn+0x2c7/0x780 [ 832.282439][ C0] ? refcount_warn_saturate+0x2cb/0x370 [ 832.282606][ C0] ? report_bug+0x929/0xbd0 [ 832.282762][ C0] ? refcount_warn_saturate+0x2cb/0x370 [ 832.282932][ C0] ? handle_bug+0x6a/0x90 [ 832.283093][ C0] ? exc_invalid_op+0x1f/0x50 [ 832.283253][ C0] ? asm_exc_invalid_op+0x1f/0x30 [ 832.283446][ C0] ? __warn_printk+0x43f/0x470 [ 832.283598][ C0] ? __warn_printk+0x449/0x470 [ 832.283756][ C0] ? refcount_warn_saturate+0x2cb/0x370 [ 832.283919][ C0] ? refcount_warn_saturate+0x2ca/0x370 [ 832.284083][ C0] sk_skb_reason_drop+0x154/0x480 [ 832.284238][ C0] j1939_session_put+0x2a0/0x620 [ 832.284415][ C0] j1939_xtp_rx_abort_one+0x132/0x9b0 [ 832.284627][ C0] j1939_tp_recv+0xff7/0x1600 [ 832.284806][ C0] j1939_can_recv+0xe30/0xfa0 [ 832.284974][ C0] ? __pfx_j1939_can_recv+0x10/0x10 [ 832.285131][ C0] can_rcv_filter+0x697/0x1010 [ 832.285306][ C0] can_receive+0x423/0x5d0 [ 832.285473][ C0] can_rcv+0x209/0x3a0 [ 832.285625][ C0] ? ip6_rcv_finish+0x900/0x970 [ 832.285810][ C0] ? __pfx_can_rcv+0x10/0x10 [ 832.285957][ C0] __netif_receive_skb+0x42b/0xa00 [ 832.286114][ C0] ? kmsan_get_metadata+0x13e/0x1c0 [ 832.286315][ C0] process_backlog+0x4ad/0xa50 [ 832.286495][ C0] ? __pfx_process_backlog+0x10/0x10 [ 832.286662][ C0] __napi_poll+0xe7/0x980 [ 832.286811][ C0] ? kmsan_get_metadata+0x13e/0x1c0 [ 832.287005][ C0] net_rx_action+0xa5a/0x19b0 [ 832.287166][ C0] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 832.287396][ C0] ? __pfx_net_rx_action+0x10/0x10 [ 832.287566][ C0] handle_softirqs+0x1a0/0x7c0 [ 832.287747][ C0] ? irqtime_account_irq+0x19d/0x280 [ 832.287925][ C0] __irq_exit_rcu+0x68/0x120 [ 832.288096][ C0] irq_exit_rcu+0x12/0x20 [ 832.288260][ C0] sysvec_apic_timer_interrupt+0x83/0x90 [ 832.288413][ C0] [ 832.288471][ C0] [ 832.288524][ C0] asm_sysvec_apic_timer_interrupt+0x1f/0x30 [ 832.288721][ C0] RIP: 0010:console_flush_all+0xef5/0x1590 [ 832.288902][ C0] Code: b8 00 0f 85 78 04 00 00 49 ff c4 48 8b 5d 88 48 89 df e8 be 75 ca 00 4c 89 28 4d 85 ed 0f 85 6a 04 00 00 4c 89 23 4c 8b 75 c8 <4c> 8b 65 b8 4d 85 e4 0f 85 b9 02 00 00 48 8b 03 48 89 45 98 48 89 [ 832.289031][ C0] RSP: 0018:ffff888036422f60 EFLAGS: 00000293 [ 832.289156][ C0] RAX: ffffffff818373c9 RBX: ffffffff91ac1548 RCX: ffff888112de8000 [ 832.289267][ C0] RDX: 0000000000000000 RSI: 0000000000000200 RDI: 0000000000000000 [ 832.289359][ C0] RBP: ffff888036423060 R08: ffffffff81837399 R09: 0000000000000004 [ 832.289472][ C0] R10: ffff888237de3a4c R11: ffffffff86ec68a0 R12: 0000000000000200 [ 832.289578][ C0] R13: 0000000000001f7f R14: ffff888112de8b38 R15: 0000000000000000 [ 832.289684][ C0] ? __pfx_io_serial_out+0x10/0x10 [ 832.289926][ C0] ? console_flush_all+0xbd9/0x1590 [ 832.290088][ C0] ? console_flush_all+0xc09/0x1590 [ 832.290287][ C0] console_unlock+0x110/0x640 [ 832.290451][ C0] vprintk_emit+0x757/0xea0 [ 832.290615][ C0] vprintk_default+0x3e/0x50 [ 832.290769][ C0] vprintk+0xee/0xf0 [ 832.290934][ C0] _printk+0x157/0x190 [ 832.291093][ C0] ? kmsan_get_metadata+0x13e/0x1c0 [ 832.291291][ C0] batadv_hardif_enable_interface+0xae3/0xec0 [ 832.291474][ C0] batadv_softif_slave_add+0x103/0x220 [ 832.291653][ C0] ? __pfx_batadv_softif_slave_add+0x10/0x10 [ 832.291829][ C0] do_setlink+0x1a1d/0x7120 [ 832.291994][ C0] ? __nla_validate_parse+0x3be4/0x45c0 [ 832.292186][ C0] ? kmsan_get_metadata+0x13e/0x1c0 [ 832.292373][ C0] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 832.292576][ C0] ? validate_linkmsg+0xe4e/0xe90 [ 832.292758][ C0] ? kmsan_internal_set_shadow_origin+0x69/0x100 [ 832.292936][ C0] ? kmsan_get_metadata+0x13e/0x1c0 [ 832.293120][ C0] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 832.293320][ C0] rtnl_newlink+0x329e/0x4200 [ 832.293474][ C0] ? kmsan_internal_set_shadow_origin+0x69/0x100 [ 832.293690][ C0] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 832.293885][ C0] ? kmsan_get_metadata+0x13e/0x1c0 [ 832.294072][ C0] ? kmsan_internal_set_shadow_origin+0x69/0x100 [ 832.294278][ C0] ? kmsan_get_metadata+0x13e/0x1c0 [ 832.294468][ C0] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 832.294658][ C0] ? __pfx_rtnl_newlink+0x10/0x10 [ 832.294796][ C0] ? __pfx_rtnl_newlink+0x10/0x10 [ 832.294930][ C0] rtnetlink_rcv_msg+0x12fc/0x1410 [ 832.295093][ C0] ? kmsan_get_metadata+0x13e/0x1c0 [ 832.295300][ C0] netlink_rcv_skb+0x375/0x650 [ 832.295481][ C0] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 832.295654][ C0] ? __pfx_rtnetlink_rcv+0x10/0x10 [ 832.295804][ C0] rtnetlink_rcv+0x34/0x40 [ 832.295948][ C0] netlink_unicast+0xf52/0x1260 [ 832.296118][ C0] netlink_sendmsg+0x10da/0x11e0 [ 832.296298][ C0] ? __pfx_netlink_sendmsg+0x10/0x10 [ 832.296468][ C0] ? __pfx_netlink_sendmsg+0x10/0x10 [ 832.296632][ C0] __sock_sendmsg+0x30f/0x380 [ 832.296811][ C0] __sys_sendto+0x645/0x7f0 [ 832.296953][ C0] ? __fput+0xe27/0x1120 [ 832.297094][ C0] ? kmsan_get_metadata+0xb0/0x1c0 [ 832.297305][ C0] __x64_sys_sendto+0x125/0x1d0 [ 832.297471][ C0] x64_sys_call+0x3373/0x3ba0 [ 832.297647][ C0] do_syscall_64+0xcd/0x1e0 [ 832.297804][ C0] ? clear_bhb_loop+0x25/0x80 [ 832.297942][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 832.298133][ C0] RIP: 0033:0x7f7b4ef7fe8c [ 832.298242][ C0] Code: 2a 5a 02 00 44 8b 4c 24 2c 4c 8b 44 24 20 89 c5 44 8b 54 24 28 48 8b 54 24 18 b8 2c 00 00 00 48 8b 74 24 10 8b 7c 24 08 0f 05 <48> 3d 00 f0 ff ff 77 34 89 ef 48 89 44 24 08 e8 70 5a 02 00 48 8b [ 832.298371][ C0] RSP: 002b:00007ffe851e0b70 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 832.298520][ C0] RAX: ffffffffffffffda RBX: 00007f7b4fc64620 RCX: 00007f7b4ef7fe8c [ 832.298629][ C0] RDX: 0000000000000028 RSI: 00007f7b4fc64670 RDI: 0000000000000003 [ 832.298726][ C0] RBP: 0000000000000000 R08: 00007ffe851e0bc4 R09: 000000000000000c [ 832.298824][ C0] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003 [ 832.298917][ C0] R13: 0000000000000000 R14: 00007f7b4fc64670 R15: 0000000000000000 [ 832.299035][ C0] [ 832.299091][ C0] ---[ end trace 0000000000000000 ]--- [ 833.166717][T11004] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 833.265213][T11004] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 833.274457][T11004] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 833.301113][T11004] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 833.415649][ C0] Unknown status report in ack skb [ 833.444525][ T1241] ieee802154 phy0 wpan0: encryption failed: -22 [ 833.512515][ T4561] Bluetooth: hci0: command tx timeout [ 833.530751][T11004] hsr_slave_0: entered promiscuous mode [ 833.545555][T11004] hsr_slave_1: entered promiscuous mode [ 833.591720][T11004] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 833.602306][T11004] Cannot create hsr debugfs directory [ 834.241675][T11082] loop2: detected capacity change from 0 to 512 [ 834.345904][T11082] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 834.359122][T11082] ext4 filesystem being mounted at /15/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 834.495025][T11082] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000d40000 ro. Quota mode: writeback. [ 834.513104][T11091] overlay: filesystem on ./bus is read-only [ 834.786384][T10678] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 834.974033][T11004] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 835.012405][T11004] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 835.064439][T11004] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 835.117022][T11004] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 835.590077][ T4561] Bluetooth: hci0: command tx timeout [ 835.635475][ T5266] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 835.890924][T11004] 8021q: adding VLAN 0 to HW filter on device bond0 [ 835.976185][T11004] 8021q: adding VLAN 0 to HW filter on device team0 [ 836.061115][ T5266] usb 3-1: Using ep0 maxpacket: 32 [ 836.078137][ T3001] bridge0: port 1(bridge_slave_0) entered blocking state [ 836.085889][ T3001] bridge0: port 1(bridge_slave_0) entered forwarding state [ 836.110608][ T5266] usb 3-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 836.120180][ T5266] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 836.128448][ T5266] usb 3-1: Product: syz [ 836.133000][ T5266] usb 3-1: Manufacturer: syz [ 836.137839][ T5266] usb 3-1: SerialNumber: syz [ 836.172581][ T3092] bridge0: port 2(bridge_slave_1) entered blocking state [ 836.180306][ T3092] bridge0: port 2(bridge_slave_1) entered forwarding state [ 836.190908][ T5266] usb 3-1: config 0 descriptor?? [ 836.266310][ T5266] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 836.983787][T11120] fuse: Bad value for 'fd' [ 837.676146][ T4561] Bluetooth: hci0: command tx timeout [ 837.825527][T11004] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 837.971769][T11004] veth0_vlan: entered promiscuous mode [ 838.007815][T11004] veth1_vlan: entered promiscuous mode [ 838.092856][T11004] veth0_macvtap: entered promiscuous mode [ 838.117155][T11004] veth1_macvtap: entered promiscuous mode [ 838.171107][T11004] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 838.182788][T11004] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 838.193093][T11004] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 838.207272][T11004] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 838.218234][T11004] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 838.229055][T11004] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 838.239249][T11004] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 838.250041][T11004] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 838.260253][T11004] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 838.271029][T11004] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 838.281217][T11004] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 838.291977][T11004] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 838.311173][T11004] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 838.382353][T11004] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 838.395346][T11004] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 838.408829][T11004] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 838.420552][T11004] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 838.430729][T11004] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 838.441582][T11004] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 838.451752][T11004] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 838.462497][T11004] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 838.472684][T11004] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 838.483495][T11004] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 838.498594][T11004] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 838.522287][T11004] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 838.533757][T11004] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 838.542915][T11004] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 838.558681][T11004] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 838.579620][ T5266] gspca_stk1135: reg_w 0x200 err -71 [ 838.586475][ T5266] gspca_stk1135: serial bus timeout: status=0x00 [ 838.594358][ T5266] gspca_stk1135: Sensor write failed [ 838.599981][ T5266] gspca_stk1135: serial bus timeout: status=0x00 [ 838.610936][ T5266] gspca_stk1135: Sensor write failed [ 838.617422][ T5266] gspca_stk1135: serial bus timeout: status=0x00 [ 838.624346][ T5266] gspca_stk1135: Sensor read failed [ 838.629982][ T5266] gspca_stk1135: serial bus timeout: status=0x00 [ 838.636549][ T5266] gspca_stk1135: Sensor read failed [ 838.643552][ T5266] gspca_stk1135: Detected sensor type unknown (0x0) [ 838.650604][ T5266] gspca_stk1135: serial bus timeout: status=0x00 [ 838.657132][ T5266] gspca_stk1135: Sensor read failed [ 838.662707][ T5266] gspca_stk1135: serial bus timeout: status=0x00 [ 838.669242][ T5266] gspca_stk1135: Sensor read failed [ 838.674812][ T5266] gspca_stk1135: serial bus timeout: status=0x00 [ 838.681409][ T5266] gspca_stk1135: Sensor write failed [ 838.686979][ T5266] gspca_stk1135: serial bus timeout: status=0x00 [ 838.693634][ T5266] gspca_stk1135: Sensor write failed [ 838.699383][ T5266] stk1135 3-1:0.0: probe with driver stk1135 failed with error -71 [ 838.805491][T11131] loop0: detected capacity change from 0 to 4096 [ 838.940998][ T5266] usb 3-1: USB disconnect, device number 10 [ 839.047959][T11141] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 839.204722][T11145] bond0: (slave vlan2): Enslaving as an active interface with an up link [ 840.527452][T11150] loop4: detected capacity change from 0 to 4096 [ 840.563165][ T29] audit: type=1326 audit(1727508219.392:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11163 comm="syz.1.1566" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7efc63f7dff9 code=0x0 [ 840.608721][T11150] ntfs3: loop4: Different NTFS sector size (4096) and media sector size (512). [ 840.891046][T11161] loop0: detected capacity change from 0 to 4096 [ 840.955082][T11170] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 842.376331][ T3001] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 842.385032][ T3001] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 842.543399][ T3001] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 842.551675][ T3001] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 842.582590][T11187] loop4: detected capacity change from 0 to 2048 [ 842.635923][T11187] UDF-fs: error (device loop4): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 842.701405][T11187] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 843.139373][T11187] loop4: detected capacity change from 2048 to 0 [ 843.225995][ T3092] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 843.475947][ T3092] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 843.547928][T10800] bio_check_eod: 38 callbacks suppressed [ 843.548014][T10800] syz-executor: attempt to access beyond end of device [ 843.548014][T10800] loop4: rw=2049, sector=128, nr_sectors = 1 limit=0 [ 843.568004][T10800] Buffer I/O error on dev loop4, logical block 128, lost sync page write [ 843.655423][ T3092] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 843.805119][ T3092] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 843.845656][T11199] loop0: detected capacity change from 0 to 2048 [ 844.174135][ T3092] bridge_slave_1: left allmulticast mode [ 844.180236][ T3092] bridge_slave_1: left promiscuous mode [ 844.181274][T11199] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 844.186808][ T3092] bridge0: port 2(bridge_slave_1) entered disabled state [ 844.198873][T11199] ext4 filesystem being mounted at /25/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 844.298430][ T3092] bridge_slave_0: left allmulticast mode [ 844.305050][ T3092] bridge_slave_0: left promiscuous mode [ 844.313742][ T3092] bridge0: port 1(bridge_slave_0) entered disabled state [ 844.607905][T11202] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 192: padding at end of block bitmap is not set [ 844.635591][T10663] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 844.788955][ T3092] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 844.819420][ T3092] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 844.835985][ T3092] bond0 (unregistering): Released all slaves [ 845.661198][ T5185] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 845.670506][ T5185] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 845.683574][ T5185] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 845.696545][ T5185] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 845.711399][ T5185] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 845.720590][ T5185] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 845.821371][ T3092] hsr_slave_0: left promiscuous mode [ 845.850599][ T3092] hsr_slave_1: left promiscuous mode [ 845.868650][ T3092] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 845.880047][ T3092] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 845.894841][ T3092] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 845.902896][ T3092] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 845.937508][T11222] input: syz1 as /devices/virtual/input/input8 [ 846.002276][ T3092] veth1_macvtap: left promiscuous mode [ 846.008045][ T3092] veth0_macvtap: left promiscuous mode [ 846.015029][ T3092] veth1_vlan: left promiscuous mode [ 846.021065][ T3092] veth0_vlan: left promiscuous mode [ 846.561356][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 846.572082][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 846.598168][ T0] NOHZ tick-stop error: local softirq work is pending, handler #182!!! [ 846.646919][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 846.672694][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 846.855424][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 847.005257][ T3092] team0 (unregistering): Port device team_slave_1 removed [ 847.125933][ T3092] team0 (unregistering): Port device team_slave_0 removed [ 847.866862][ T4561] Bluetooth: hci0: command tx timeout [ 848.654024][T11214] chnl_net:caif_netlink_parms(): no params data found [ 848.810995][ T5241] kworker/1:4 (5241) used greatest stack depth: 4408 bytes left [ 849.550919][ T8211] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 849.582377][T11214] bridge0: port 1(bridge_slave_0) entered blocking state [ 849.591313][T11214] bridge0: port 1(bridge_slave_0) entered disabled state [ 849.599086][T11214] bridge_slave_0: entered allmulticast mode [ 849.608141][T11214] bridge_slave_0: entered promiscuous mode [ 849.627852][T11214] bridge0: port 2(bridge_slave_1) entered blocking state [ 849.635850][T11214] bridge0: port 2(bridge_slave_1) entered disabled state [ 849.645215][T11214] bridge_slave_1: entered allmulticast mode [ 849.654237][T11214] bridge_slave_1: entered promiscuous mode [ 849.751470][ T8211] usb 3-1: config 0 has no interfaces? [ 849.757253][ T8211] usb 3-1: New USB device found, idVendor=0489, idProduct=e057, bcdDevice= 0.00 [ 849.766796][ T8211] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 849.834577][ T8211] usb 3-1: config 0 descriptor?? [ 849.884192][T11214] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 849.912409][ T5185] Bluetooth: hci0: command tx timeout [ 849.928389][T11214] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 850.019225][T11287] overlayfs: failed to resolve './file0': -2 [ 850.060399][ T8211] usb 3-1: USB disconnect, device number 11 [ 850.083531][T11286] syzkaller0: entered allmulticast mode [ 850.099411][T11214] team0: Port device team_slave_0 added [ 850.131004][T11286] syzkaller0 (unregistering): left allmulticast mode [ 850.204260][T11214] team0: Port device team_slave_1 added [ 850.216704][T11281] loop4: detected capacity change from 0 to 4096 [ 850.229294][T11281] ntfs3: loop4: Different NTFS sector size (1024) and media sector size (512). [ 850.314543][T11214] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 850.321993][T11214] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 850.348333][T11214] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 850.373911][T11214] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 850.381870][T11214] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 850.411751][T11214] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 850.584292][T11281] overlayfs: upper fs does not support tmpfile. [ 850.611711][T11281] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 850.714238][T11214] hsr_slave_0: entered promiscuous mode [ 850.751411][T11214] hsr_slave_1: entered promiscuous mode [ 850.764915][T11214] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 850.773726][T11214] Cannot create hsr debugfs directory [ 850.936410][T11292] fuse: Bad value for 'fd' [ 851.286996][T11296] overlayfs: failed to resolve './file0': -2 [ 851.533930][T11302] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1613'. [ 851.995823][ T5185] Bluetooth: hci0: command tx timeout [ 852.293491][ T8211] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 852.597173][T11214] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 852.641444][T11214] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 852.703622][T11214] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 852.786449][T11214] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 852.796699][ T8211] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 852.808015][ T8211] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 852.819324][ T8211] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 852.829434][ T8211] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 852.878071][ T8211] usb 3-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 852.879260][T11322] 9p: Unknown access argument 18446744073709551615: -34 [ 852.887451][ T8211] usb 3-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 852.887592][ T8211] usb 3-1: Manufacturer: syz [ 852.977914][ T8211] usb 3-1: config 0 descriptor?? [ 853.274657][T11214] 8021q: adding VLAN 0 to HW filter on device bond0 [ 853.327964][T11214] 8021q: adding VLAN 0 to HW filter on device team0 [ 853.400094][ T3001] bridge0: port 1(bridge_slave_0) entered blocking state [ 853.407774][ T3001] bridge0: port 1(bridge_slave_0) entered forwarding state [ 853.485628][ T8211] appleir 0003:05AC:8243.000F: unknown main item tag 0x0 [ 853.489654][ T3001] bridge0: port 2(bridge_slave_1) entered blocking state [ 853.500569][ T3001] bridge0: port 2(bridge_slave_1) entered forwarding state [ 853.504682][ T8211] appleir 0003:05AC:8243.000F: No inputs registered, leaving [ 853.579672][ T8211] appleir 0003:05AC:8243.000F: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.2-1/input0 [ 854.151665][ T5185] Bluetooth: hci0: command tx timeout [ 854.268684][ T8211] usb 3-1: USB disconnect, device number 12 [ 854.845598][T11349] loop4: detected capacity change from 0 to 256 [ 855.005532][T11214] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 855.391949][T11214] veth0_vlan: entered promiscuous mode [ 855.478247][T11214] veth1_vlan: entered promiscuous mode [ 855.733585][T11214] veth0_macvtap: entered promiscuous mode [ 855.771458][T11214] veth1_macvtap: entered promiscuous mode [ 855.836881][T11214] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 855.847831][T11214] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 855.858219][T11214] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 855.868872][T11214] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 855.878991][T11214] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 855.889827][T11214] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 855.900317][T11214] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 855.911198][T11214] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 855.925568][T11214] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 855.937599][T11214] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 855.947799][T11214] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 855.958581][T11214] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 855.973765][T11214] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 856.011305][T11214] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 856.026742][T11214] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 856.038045][T11214] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 856.048843][T11214] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 856.059129][T11214] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 856.070130][T11214] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 856.080292][T11214] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 856.091123][T11214] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 856.101334][T11214] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 856.112209][T11214] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 856.132590][T11214] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 856.178297][T11214] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 856.188213][T11214] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 856.197386][T11214] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 856.206543][T11214] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 856.233233][ T8] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 856.241866][ T5266] usb 3-1: new full-speed USB device number 13 using dummy_hcd [ 856.439969][ T5266] usb 3-1: unable to get BOS descriptor or descriptor too short [ 856.452766][ T8] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 856.463265][ T8] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 856.475613][ T8] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 0 [ 856.486026][ T8] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 856.496097][ T8] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 856.506301][ T8] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 0 [ 856.516494][ T8] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xE has invalid wMaxPacketSize 0 [ 856.530134][ T8] usb 5-1: Duplicate descriptor for config 0 interface 0 altsetting 0, skipping [ 856.554741][ T5266] usb 3-1: not running at top speed; connect to a high speed hub [ 856.575839][ T5266] usb 3-1: config 129 has an invalid interface number: 135 but max is 0 [ 856.584980][ T5266] usb 3-1: config 129 has an invalid interface number: 5 but max is 0 [ 856.593994][ T5266] usb 3-1: config 129 descriptor has 1 excess byte, ignoring [ 856.601736][ T5266] usb 3-1: config 129 has 2 interfaces, different from the descriptor's value: 1 [ 856.611269][ T5266] usb 3-1: config 129 has no interface number 0 [ 856.617827][ T5266] usb 3-1: config 129 has no interface number 1 [ 856.624526][ T5266] usb 3-1: config 129 interface 135 altsetting 6 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 856.641785][ T5266] usb 3-1: too many endpoints for config 129 interface 5 altsetting 7: 37, using maximum allowed: 30 [ 856.654177][ T5266] usb 3-1: config 129 interface 5 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 37 [ 856.667839][ T5266] usb 3-1: config 129 interface 135 has no altsetting 0 [ 856.675205][ T5266] usb 3-1: config 129 interface 5 has no altsetting 0 [ 856.720702][ T8] usb 5-1: New USB device found, idVendor=2040, idProduct=4903, bcdDevice=f6.b5 [ 856.730463][ T8] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 856.743682][ T8] usb 5-1: Product: syz [ 856.748269][ T8] usb 5-1: Manufacturer: syz [ 856.753394][ T8] usb 5-1: SerialNumber: syz [ 856.769302][ T8] usb 5-1: config 0 descriptor?? [ 856.830275][ T5266] usb 3-1: string descriptor 0 read error: -22 [ 856.840941][ T5266] usb 3-1: New USB device found, idVendor=2040, idProduct=721f, bcdDevice=f2.62 [ 856.851663][ T5266] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 856.987714][ T5266] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 856.995237][ T5266] usb 3-1: MIDIStreaming interface descriptor not found [ 856.997797][T11359] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 857.067008][T11359] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 857.124859][ T8] hdpvr 5-1:0.0: unexpected answer of status request, len -71 [ 857.133023][ T8] hdpvr 5-1:0.0: device init failed [ 857.138686][ T8] hdpvr 5-1:0.0: probe with driver hdpvr failed with error -12 [ 857.251458][ T8] usb 5-1: USB disconnect, device number 21 [ 857.355784][T11377] loop0: detected capacity change from 0 to 256 [ 857.475240][T11377] exFAT-fs (loop0): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 857.597527][ T29] audit: type=1326 audit(1727508236.352:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11378 comm="syz.1.1640" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc63f7dff9 code=0x7ffc0000 [ 857.620358][ T29] audit: type=1326 audit(1727508236.352:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11378 comm="syz.1.1640" exe="/root/syz-executor" sig=0 arch=c000003e syscall=448 compat=0 ip=0x7efc63f7dff9 code=0x7ffc0000 [ 857.643177][ T29] audit: type=1326 audit(1727508236.362:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11378 comm="syz.1.1640" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc63f7dff9 code=0x7ffc0000 [ 857.672284][ T29] audit: type=1326 audit(1727508236.362:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11378 comm="syz.1.1640" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc63f7dff9 code=0x7ffc0000 [ 857.695319][ T29] audit: type=1326 audit(1727508236.402:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11378 comm="syz.1.1640" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7efc63f7dff9 code=0x7ffc0000 [ 857.719095][ T29] audit: type=1326 audit(1727508236.402:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11378 comm="syz.1.1640" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc63f7dff9 code=0x7ffc0000 [ 857.741899][ T29] audit: type=1326 audit(1727508236.402:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11378 comm="syz.1.1640" exe="/root/syz-executor" sig=0 arch=c000003e syscall=118 compat=0 ip=0x7efc63f7dff9 code=0x7ffc0000 [ 857.767940][ T29] audit: type=1326 audit(1727508236.402:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11378 comm="syz.1.1640" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc63f7dff9 code=0x7ffc0000 [ 857.854649][ T8] usb 3-1: USB disconnect, device number 13 [ 858.208539][T11377] ===================================================== [ 858.215986][T11377] BUG: KMSAN: uninit-value in ima_add_template_entry+0x52b/0x880 [ 858.224021][T11377] ima_add_template_entry+0x52b/0x880 [ 858.229686][T11377] ima_store_measurement+0x36b/0x8d0 [ 858.235459][T11377] process_measurement+0x2c11/0x3f30 [ 858.241110][T11377] ima_file_check+0xb4/0x100 [ 858.245957][T11377] security_file_post_open+0xc6/0x540 [ 858.251797][T11377] path_openat+0x58cc/0x6200 [ 858.256575][T11377] do_filp_open+0x20e/0x590 [ 858.261527][T11377] do_sys_openat2+0x1bf/0x2f0 [ 858.268878][T11377] __x64_sys_open+0x275/0x2d0 [ 858.274379][T11377] x64_sys_call+0x15a2/0x3ba0 [ 858.279627][T11377] do_syscall_64+0xcd/0x1e0 [ 858.284505][T11377] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 858.290754][T11377] [ 858.293234][T11377] [ 858.293234][T11377] [ 858.302208][T11377] Uninit was stored to memory at: [ 858.307481][T11377] sha256_transform_blocks+0x2dbf/0x2e90 [ 858.314093][T11377] sha256_update+0x2ff/0x340 [ 858.318870][T11377] crypto_sha256_update+0x37/0x60 [ 858.326172][T11377] crypto_shash_update+0x79/0xa0 [ 858.331475][T11377] ima_calc_file_hash+0x1804/0x3c90 [ 858.336905][T11377] ima_collect_measurement+0x464/0xd20 [ 858.342745][T11377] process_measurement+0x2948/0x3f30 [ 858.348253][T11377] ima_file_check+0xb4/0x100 [ 858.353141][T11377] security_file_post_open+0xc6/0x540 [ 858.358769][T11377] path_openat+0x58cc/0x6200 [ 858.363667][T11377] do_filp_open+0x20e/0x590 [ 858.368357][T11377] do_sys_openat2+0x1bf/0x2f0 [ 858.375544][T11377] __x64_sys_open+0x275/0x2d0 [ 858.381126][T11377] x64_sys_call+0x15a2/0x3ba0 [ 858.386015][T11377] do_syscall_64+0xcd/0x1e0 [ 858.395715][T11377] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 858.403083][T11377] [ 858.405510][T11377] Uninit was stored to memory at: [ 858.410953][T11377] sha256_transform_blocks+0x2dbf/0x2e90 [ 858.416792][T11377] sha256_update+0x2ff/0x340 [ 858.421687][T11377] crypto_sha256_update+0x37/0x60 [ 858.426975][T11377] crypto_shash_update+0x79/0xa0 [ 858.432242][T11377] ima_calc_file_hash+0x1804/0x3c90 [ 858.437658][T11377] ima_collect_measurement+0x464/0xd20 [ 858.443581][T11377] process_measurement+0x2948/0x3f30 [ 858.449089][T11377] ima_file_check+0xb4/0x100 [ 858.453967][T11377] security_file_post_open+0xc6/0x540 [ 858.459593][T11377] path_openat+0x58cc/0x6200 [ 858.464458][T11377] do_filp_open+0x20e/0x590 [ 858.469143][T11377] do_sys_openat2+0x1bf/0x2f0 [ 858.476636][T11377] __x64_sys_open+0x275/0x2d0 [ 858.482109][T11377] x64_sys_call+0x15a2/0x3ba0 [ 858.487001][T11377] do_syscall_64+0xcd/0x1e0 [ 858.491801][T11377] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 858.497925][T11377] [ 858.500438][T11377] Uninit was stored to memory at: [ 858.505730][T11377] sha256_transform_blocks+0xf33/0x2e90 [ 858.511623][T11377] sha256_update+0x2ff/0x340 [ 858.516398][T11377] crypto_sha256_update+0x37/0x60 [ 858.521721][T11377] crypto_shash_update+0x79/0xa0 [ 858.526880][T11377] ima_calc_file_hash+0x1804/0x3c90 [ 858.532501][T11377] ima_collect_measurement+0x464/0xd20 [ 858.538196][T11377] process_measurement+0x2948/0x3f30 [ 858.543842][T11377] ima_file_check+0xb4/0x100 [ 858.548633][T11377] security_file_post_open+0xc6/0x540 [ 858.554323][T11377] path_openat+0x58cc/0x6200 [ 858.559097][T11377] do_filp_open+0x20e/0x590 [ 858.563869][T11377] do_sys_openat2+0x1bf/0x2f0 [ 858.568712][T11377] __x64_sys_open+0x275/0x2d0 [ 858.576227][T11377] x64_sys_call+0x15a2/0x3ba0 [ 858.581725][T11377] do_syscall_64+0xcd/0x1e0 [ 858.586414][T11377] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 858.593230][T11377] [ 858.595654][T11377] Uninit was stored to memory at: [ 858.601029][T11377] sha256_transform_blocks+0xf7d/0x2e90 [ 858.606772][T11377] sha256_update+0x2ff/0x340 [ 858.611715][T11377] crypto_sha256_update+0x37/0x60 [ 858.616947][T11377] crypto_shash_update+0x79/0xa0 [ 858.622292][T11377] ima_calc_file_hash+0x1804/0x3c90 [ 858.627706][T11377] ima_collect_measurement+0x464/0xd20 [ 858.633562][T11377] process_measurement+0x2948/0x3f30 [ 858.639068][T11377] ima_file_check+0xb4/0x100 [ 858.643943][T11377] security_file_post_open+0xc6/0x540 [ 858.649515][T11377] path_openat+0x58cc/0x6200 [ 858.654402][T11377] do_filp_open+0x20e/0x590 [ 858.659085][T11377] do_sys_openat2+0x1bf/0x2f0 [ 858.664060][T11377] __x64_sys_open+0x275/0x2d0 [ 858.668905][T11377] x64_sys_call+0x15a2/0x3ba0 [ 858.673911][T11377] do_syscall_64+0xcd/0x1e0 [ 858.680936][T11377] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 858.687068][T11377] [ 858.689487][T11377] Uninit was stored to memory at: [ 858.695555][T11377] sha256_transform_blocks+0xfb5/0x2e90 [ 858.701436][T11377] sha256_update+0x2ff/0x340 [ 858.706209][T11377] crypto_sha256_update+0x37/0x60 [ 858.712412][T11377] crypto_shash_update+0x79/0xa0 [ 858.717570][T11377] ima_calc_file_hash+0x1804/0x3c90 [ 858.723115][T11377] ima_collect_measurement+0x464/0xd20 [ 858.728800][T11377] process_measurement+0x2948/0x3f30 [ 858.734428][T11377] ima_file_check+0xb4/0x100 [ 858.739218][T11377] security_file_post_open+0xc6/0x540 [ 858.744891][T11377] path_openat+0x58cc/0x6200 [ 858.749659][T11377] do_filp_open+0x20e/0x590 [ 858.754553][T11377] do_sys_openat2+0x1bf/0x2f0 [ 858.759395][T11377] __x64_sys_open+0x275/0x2d0 [ 858.764342][T11377] x64_sys_call+0x15a2/0x3ba0 [ 858.769216][T11377] do_syscall_64+0xcd/0x1e0 [ 858.774002][T11377] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 858.782753][T11377] [ 858.785179][T11377] Uninit was stored to memory at: [ 858.792024][T11377] sha256_transform_blocks+0x2c35/0x2e90 [ 858.797866][T11377] sha256_update+0x2ff/0x340 [ 858.802740][T11377] crypto_sha256_update+0x37/0x60 [ 858.807969][T11377] crypto_shash_update+0x79/0xa0 [ 858.813228][T11377] ima_calc_file_hash+0x1804/0x3c90 [ 858.818636][T11377] ima_collect_measurement+0x464/0xd20 [ 858.824464][T11377] process_measurement+0x2948/0x3f30 [ 858.830056][T11377] ima_file_check+0xb4/0x100 [ 858.834841][T11377] security_file_post_open+0xc6/0x540 [ 858.840593][T11377] path_openat+0x58cc/0x6200 [ 858.845359][T11377] do_filp_open+0x20e/0x590 [ 858.850156][T11377] do_sys_openat2+0x1bf/0x2f0 [ 858.855010][T11377] __x64_sys_open+0x275/0x2d0 [ 858.859980][T11377] x64_sys_call+0x15a2/0x3ba0 [ 858.864855][T11377] do_syscall_64+0xcd/0x1e0 [ 858.869554][T11377] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 858.875832][T11377] [ 858.878249][T11377] Uninit was stored to memory at: [ 858.886002][T11377] _copy_to_iter+0x124a/0x2b30 [ 858.891699][T11377] copy_page_to_iter+0x419/0x880 [ 858.896826][T11377] filemap_read+0xc13/0x1500 [ 858.901780][T11377] generic_file_read_iter+0x136/0xad0 [ 858.907379][T11377] __kernel_read+0x726/0xd30 [ 858.912270][T11377] integrity_kernel_read+0x77/0x90 [ 858.917665][T11377] ima_calc_file_hash+0x1731/0x3c90 [ 858.923168][T11377] ima_collect_measurement+0x464/0xd20 [ 858.928850][T11377] process_measurement+0x2948/0x3f30 [ 858.934476][T11377] ima_file_check+0xb4/0x100 [ 858.939269][T11377] security_file_post_open+0xc6/0x540 [ 858.944963][T11377] path_openat+0x58cc/0x6200 [ 858.949860][T11377] do_filp_open+0x20e/0x590 [ 858.954548][T11377] do_sys_openat2+0x1bf/0x2f0 [ 858.959393][T11377] __x64_sys_open+0x275/0x2d0 [ 858.964402][T11377] x64_sys_call+0x15a2/0x3ba0 [ 858.969283][T11377] do_syscall_64+0xcd/0x1e0 [ 858.974097][T11377] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 858.980361][T11377] [ 858.982780][T11377] Uninit was created at: [ 858.989487][T11377] __alloc_pages_noprof+0x9d6/0xe70 [ 858.995614][T11377] alloc_pages_mpol_noprof+0x299/0x990 [ 859.001389][T11377] folio_alloc_noprof+0x1db/0x310 [ 859.006588][T11377] filemap_alloc_folio_noprof+0xa6/0x440 [ 859.012646][T11377] __filemap_get_folio+0xac4/0x1550 [ 859.018055][T11377] block_write_begin+0x6e/0x2b0 [ 859.023271][T11377] exfat_write_begin+0xfb/0x400 [ 859.028305][T11377] exfat_file_write_iter+0x474/0xfb0 [ 859.039040][T11377] vfs_write+0xb28/0x1540 [ 859.045556][T11377] ksys_write+0x24f/0x4c0 [ 859.050150][T11377] __x64_sys_write+0x93/0xe0 [ 859.054922][T11377] x64_sys_call+0x306a/0x3ba0 [ 859.059902][T11377] do_syscall_64+0xcd/0x1e0 [ 859.064598][T11377] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 859.070810][T11377] [ 859.073243][T11377] CPU: 1 UID: 0 PID: 11377 Comm: syz.0.1639 Tainted: G W 6.11.0-syzkaller-11728-gad46e8f95e93 #0 [ 859.088425][T11377] Tainted: [W]=WARN [ 859.092960][T11377] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 859.103283][T11377] ===================================================== [ 859.112636][T11377] Disabling lock debugging due to kernel taint [ 859.118920][T11377] Kernel panic - not syncing: kmsan.panic set ... [ 859.125471][T11377] CPU: 1 UID: 0 PID: 11377 Comm: syz.0.1639 Tainted: G B W 6.11.0-syzkaller-11728-gad46e8f95e93 #0 [ 859.137600][T11377] Tainted: [B]=BAD_PAGE, [W]=WARN [ 859.142741][T11377] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 859.152955][T11377] Call Trace: [ 859.156357][T11377] [ 859.159407][T11377] dump_stack_lvl+0x216/0x2d0 [ 859.164286][T11377] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 859.170338][T11377] dump_stack+0x1e/0x30 [ 859.174687][T11377] panic+0x4e2/0xcf0 [ 859.178778][T11377] ? kmsan_get_metadata+0xb1/0x1c0 [ 859.184127][T11377] kmsan_report+0x2c7/0x2d0 [ 859.188843][T11377] ? crypto_shash_final+0x72/0xa0 [ 859.194090][T11377] ? ima_calc_field_array_hash_tfm+0x7d8/0x810 [ 859.200483][T11377] ? __msan_warning+0x95/0x120 [ 859.205442][T11377] ? ima_add_template_entry+0x52b/0x880 [ 859.211185][T11377] ? ima_store_measurement+0x36b/0x8d0 [ 859.216924][T11377] ? process_measurement+0x2c11/0x3f30 [ 859.222601][T11377] ? ima_file_check+0xb4/0x100 [ 859.227561][T11377] ? security_file_post_open+0xc6/0x540 [ 859.233306][T11377] ? path_openat+0x58cc/0x6200 [ 859.238240][T11377] ? do_filp_open+0x20e/0x590 [ 859.243080][T11377] ? do_sys_openat2+0x1bf/0x2f0 [ 859.248085][T11377] ? __x64_sys_open+0x275/0x2d0 [ 859.253085][T11377] ? x64_sys_call+0x15a2/0x3ba0 [ 859.258128][T11377] ? do_syscall_64+0xcd/0x1e0 [ 859.262982][T11377] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 859.269265][T11377] ? kmsan_get_metadata+0x13e/0x1c0 [ 859.274672][T11377] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 859.280695][T11377] ? ima_add_template_entry+0x9b/0x880 [ 859.286351][T11377] ? filter_irq_stacks+0x60/0x1a0 [ 859.291597][T11377] ? kmsan_get_metadata+0x13e/0x1c0 [ 859.297015][T11377] ? kmsan_get_metadata+0x13e/0x1c0 [ 859.302425][T11377] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 859.308455][T11377] __msan_warning+0x95/0x120 [ 859.313232][T11377] ima_add_template_entry+0x52b/0x880 [ 859.318822][T11377] ? kmsan_get_metadata+0x13e/0x1c0 [ 859.324224][T11377] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 859.330251][T11377] ima_store_measurement+0x36b/0x8d0 [ 859.335774][T11377] process_measurement+0x2c11/0x3f30 [ 859.341295][T11377] ? filter_irq_stacks+0x60/0x1a0 [ 859.346526][T11377] ? kmsan_get_metadata+0x13e/0x1c0 [ 859.351935][T11377] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 859.357963][T11377] ? end_current_label_crit_section+0x124/0x2a0 [ 859.364409][T11377] ? kmsan_get_metadata+0x13e/0x1c0 [ 859.369821][T11377] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 859.375844][T11377] ima_file_check+0xb4/0x100 [ 859.380627][T11377] security_file_post_open+0xc6/0x540 [ 859.386199][T11377] path_openat+0x58cc/0x6200 [ 859.390987][T11377] ? kmsan_get_metadata+0x13e/0x1c0 [ 859.396396][T11377] ? kmsan_get_metadata+0x13e/0x1c0 [ 859.401825][T11377] do_filp_open+0x20e/0x590 [ 859.406536][T11377] do_sys_openat2+0x1bf/0x2f0 [ 859.411381][T11377] __x64_sys_open+0x275/0x2d0 [ 859.416237][T11377] x64_sys_call+0x15a2/0x3ba0 [ 859.421115][T11377] do_syscall_64+0xcd/0x1e0 [ 859.425798][T11377] ? clear_bhb_loop+0x25/0x80 [ 859.430631][T11377] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 859.436746][T11377] RIP: 0033:0x7f3c3557dff9 [ 859.441298][T11377] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 859.461091][T11377] RSP: 002b:00007f3c3634b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 859.469690][T11377] RAX: ffffffffffffffda RBX: 00007f3c35735f80 RCX: 00007f3c3557dff9 [ 859.477822][T11377] RDX: 0000000000000000 RSI: 000000000014927e RDI: 0000000020000180 [ 859.485933][T11377] RBP: 00007f3c355f0296 R08: 0000000000000000 R09: 0000000000000000 [ 859.494127][T11377] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 859.502237][T11377] R13: 0000000000000000 R14: 00007f3c35735f80 R15: 00007ffdd0165428 [ 859.510374][T11377] [ 859.513734][T11377] Kernel Offset: disabled [ 859.518123][T11377] Rebooting in 86400 seconds..