last executing test programs: 1m16.505360742s ago: executing program 0 (id=1): read$FUSE(0xffffffffffffffff, 0x0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000100)) r0 = socket(0xa, 0x2, 0x0) getsockopt$bt_BT_SECURITY(r0, 0x29, 0x1d, 0x0, 0x20000000) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0) timer_create(0x0, &(0x7f0000000180)={0x0, 0x13, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000240)) r1 = syz_open_dev$sndctrl(&(0x7f0000000080), 0x0, 0xc8080) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r1, 0xc0045516, &(0x7f0000000000)=0x639) readv(r1, &(0x7f0000000180)=[{&(0x7f0000000200)=""/147, 0x48}, {0x0, 0x2}], 0x2) read$FUSE(r1, &(0x7f0000001ac0)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r1, 0xc1105517, &(0x7f00000002c0)={{0x0, 0x5, 0xfeff, 0x0, 'syz0\x00'}, 0x1, 0x0, 0x1, r2, 0x0, 0x0, 'syz1\x00', 0x0}) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000380)=@raw={'raw\x00', 0x64, 0x3, 0x240, 0x0, 0xffffffad, 0x190, 0x0, 0x190, 0x268, 0x268, 0x268, 0x268, 0x268, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xd0, 0xffffffc5}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, 0x0, 0x0, 'team0\x00', 'ip6erspan0\x00'}, 0x0, 0x98, 0xd8, 0x0, {}, [@common=@inet=@set1={{0x28}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x2a0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x4}, 0x8080) read$FUSE(0xffffffffffffffff, 0x0, 0x0) 1m14.004429298s ago: executing program 0 (id=9): sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000280)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f00000002c0)={0x73622a85, 0x10a}) prlimit64(0x0, 0xe, 0x0, 0x0) syz_open_dev$MSR(0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x250942, 0x1cd) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000540)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x58, 0x18, &(0x7f00000005c0)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x0, 0x3c}, @fd={0x66642a85, 0x0, r3}, @flat=@weak_handle={0x77682a85, 0x1001}}, &(0x7f0000000200)={0x0, 0x28, 0x40}}, 0x1000}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x1, 0x1000000000000, &(0x7f0000000340)="cb"}) socket$nl_xfrm(0x10, 0x3, 0x6) 1m11.594491141s ago: executing program 0 (id=13): openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) socket$packet(0x11, 0x3, 0x300) socket$can_bcm(0x1d, 0x2, 0x2) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec850000007d000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0xc) socket$key(0xf, 0x3, 0x2) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.current\x00', 0x275a, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_COALESCE(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000400)={0x0, 0x14}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x26e1, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x8f) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c0000001000030400000006000000005dcc0300", @ANYRES32=r3, @ANYBLOB="71e79fd800000000140012800c0001006d616376746170001400028008000500", @ANYRES32=r4], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newtfilter={0x2c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x74, r3, {0xffe0}, {}, {0xa, 0x1}}, [@TCA_RATE={0x6, 0x5, {0x39, 0x1}}]}, 0x2c}, 0x1, 0xf0ffffffffffff, 0x0, 0x4004140}, 0x0) 1m8.452876293s ago: executing program 0 (id=17): setsockopt$inet_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x0, 0x2d, 0x0, 0x0) shmat(0xffffffffffffffff, &(0x7f0000ffa000/0x2000)=nil, 0x2000) getsockopt$kcm_KCM_RECV_DISABLE(0xffffffffffffffff, 0x119, 0x1, 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xc, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000140)={0xfffffffffffffe49, 0x0}) syz_open_dev$radio(&(0x7f0000000280), 0x2, 0x2) ioctl$KVM_GET_SUPPORTED_CPUID(0xffffffffffffffff, 0xc008ae05, 0x0) openat$iommufd(0xffffffffffffff9c, 0x0, 0x101080, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_KEY(0xffffffffffffffff, 0x84, 0x17, &(0x7f0000000780)={0x0, 0x3}, 0x8) mkdir(&(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdir(&(0x7f0000000440)='./file0\x00', 0x0) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='autofs\x00', 0x0, &(0x7f0000000100)) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r0, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x29, r1}, './file0\x00'}) mmap(&(0x7f0000ff9000/0x3000)=nil, 0x3000, 0x2, 0x1010, 0xffffffffffffffff, 0xb475d000) 1m6.091562541s ago: executing program 0 (id=19): socket$unix(0x1, 0x5, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={0x0, 0xffffffffffffffff, 0x0, 0x100000000}, 0x5b) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000fbff000000000000001d8500000007000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={0x0, 0xffffffffffffffff, 0x0, 0x101}, 0x18) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000240)='./file2\x00', 0x2000410, &(0x7f0000000080), 0x81, 0x7a5, &(0x7f0000000f80)="$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") ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, 0x0) pipe(&(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) request_key(0x0, &(0x7f00000001c0)={'syz', 0x1}, &(0x7f0000000280)='rose0\x00', 0xfffffffffffffffe) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) ioctl$TUNGETSNDBUF(r0, 0x800454d3, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0xffffffff, @loopback}, 0x1c) splice(r1, 0x0, r0, 0x0, 0x406f413, 0x8) shutdown(r1, 0x1) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@bloom_filter={0x1e, 0x8, 0x81, 0xa, 0x100, 0xffffffffffffffff, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x3, 0x0, 0x1, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) 50.752860489s ago: executing program 32 (id=19): socket$unix(0x1, 0x5, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={0x0, 0xffffffffffffffff, 0x0, 0x100000000}, 0x5b) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000fbff000000000000001d8500000007000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={0x0, 0xffffffffffffffff, 0x0, 0x101}, 0x18) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000240)='./file2\x00', 0x2000410, &(0x7f0000000080), 0x81, 0x7a5, &(0x7f0000000f80)="$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") ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, 0x0) pipe(&(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) request_key(0x0, &(0x7f00000001c0)={'syz', 0x1}, &(0x7f0000000280)='rose0\x00', 0xfffffffffffffffe) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) ioctl$TUNGETSNDBUF(r0, 0x800454d3, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0xffffffff, @loopback}, 0x1c) splice(r1, 0x0, r0, 0x0, 0x406f413, 0x8) shutdown(r1, 0x1) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@bloom_filter={0x1e, 0x8, 0x81, 0xa, 0x100, 0xffffffffffffffff, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x3, 0x0, 0x1, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) 9.026851874s ago: executing program 1 (id=118): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010002ffd26f10cb060600eb9a010203010902240001000000000904df01020a16d1000905070040000000000905091b"], 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) 6.443788115s ago: executing program 4 (id=126): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000c80)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @reject={{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_REJECT_TYPE={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0xbc}}, 0x0) 6.249471689s ago: executing program 1 (id=127): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) shmdt(0x0) 5.856800689s ago: executing program 2 (id=128): r0 = socket(0x10, 0x80002, 0x4) sendmsg$nl_route_sched(r0, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000d00)=@newtaction={0x58, 0x13, 0x1, 0x0, 0x10, {}, [{0x44, 0x1, [@m_mirred={0x40, 0x1a, 0x0, 0x0, {{0xb}, {0x4}, {0x11, 0x6, "3ffe55b8992719dfa1fb9fe85c"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x2}}}}]}]}, 0x58}}, 0x4008000) 5.737902713s ago: executing program 3 (id=129): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f0000000000)={0x2, 'macvlan0\x00'}, 0x18) 5.410612518s ago: executing program 4 (id=130): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x90, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x88ac5fb5}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8}, @IFLA_MASTER={0x8}, @IFLA_LINKINFO={0x44, 0x12, 0x0, 0x1, @ipip={{0x9}, {0x34, 0x2, 0x0, 0x1, [@IFLA_IPTUN_TOS={0x5, 0x5, 0x7}, @IFLA_IPTUN_LOCAL={0x8, 0x2, @empty}, @IFLA_IPTUN_FWMARK={0x8, 0x14, 0x4}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @loopback}, @IFLA_IPTUN_ENCAP_TYPE={0x6}, @IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0xe}]}}}]}, 0x90}}, 0x0) 5.307419174s ago: executing program 1 (id=131): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TEST(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x28, 0xb, 0x6, 0x801, 0x0, 0x0, {0x6, 0x0, 0x5}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x28}}, 0x4804) 4.826935401s ago: executing program 3 (id=132): r0 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r0, 0x8922, &(0x7f0000000440)={'hsr0\x00'}) 4.79583948s ago: executing program 2 (id=133): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f00000008c0)=@raw={'raw\x00', 0x8, 0x3, 0x210, 0xdc, 0x11, 0x148, 0xdc, 0x0, 0x17c, 0x2a8, 0x2a8, 0x17c, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x94, 0xdc, 0x0, {}, [@inet=@rpfilter={{0x24}, {0xf}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x3}}}, {{@ip={@multicast2, @empty, 0x0, 0x0, 'vlan0\x00', 'netdevsim0\x00', {}, {}, 0x0, 0x2}, 0x0, 0x70, 0xa0}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x0, 0x2}}}], {{'\x00', 0x0, 0x70, 0x94}, {0x24}}}}, 0x26c) 4.3104044s ago: executing program 1 (id=134): syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0x2}}}, 0x5) 4.289329027s ago: executing program 5 (id=45): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000e00)) socket$inet6_mptcp(0xa, 0x1, 0x106) r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x2, 0x8, &(0x7f0000000240)=@framed={{0x18, 0x6}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0xb2}, {0x7, 0x0, 0xb, 0x7}}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = socket$nl_rdma(0x10, 0x3, 0x14) r2 = syz_open_procfs$namespace(0x0, &(0x7f00000001c0)='ns/cgroup\x00') ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x12, r2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x8, 0x4, &(0x7f0000000000)=@framed={{}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffd}]}, &(0x7f0000000080)='syzkaller\x00', 0x4, 0xff7, &(0x7f0000002e00)=""/4087, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) sendmsg$RDMA_NLDEV_CMD_SET(r1, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000240)={&(0x7f00000002c0)={0x2c, 0x1402, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r2}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz0\x00'}]}, 0x2c}}, 0x0) syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) r4 = socket$netlink(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_DELETE(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, 0x2, 0x2, 0x201, 0x0, 0x0, {}, [@CTA_EXPECT_HELP_NAME={0x5, 0x6, '\x00'}]}, 0x1c}}, 0x0) 4.184343076s ago: executing program 4 (id=135): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)={0x28, 0x4, 0x6, 0x301, 0x0, 0x0, {0x2, 0x0, 0x7}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x28}, 0x1, 0x0, 0x0, 0x24060000}, 0x0) 3.70755067s ago: executing program 3 (id=136): r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0x200, 0x102) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x4, 0x11, r0, 0x0) 3.509086558s ago: executing program 2 (id=137): r0 = syz_open_dev$sndctrl(&(0x7f0000000780), 0xe8, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r0, 0xc0045540, &(0x7f00000007c0)={0x1000000}) 3.119413928s ago: executing program 1 (id=138): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000500)=ANY=[@ANYBLOB="12010000f1d566201e043c40d7cc000000010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000900)={0x2c, &(0x7f00000006c0)=ANY=[], 0x0, 0x0, 0x0, 0x0}) 3.035675968s ago: executing program 4 (id=139): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94) syz_mount_image$iso9660(&(0x7f0000000dc0), &(0x7f0000002380)='./file1\x00', 0x2808c53, &(0x7f0000000480)={[{@unhide}, {@session={'session', 0x3d, 0x13}}, {@nocompress}, {@check_strict}, {@check_relaxed}, {@hide}, {@session={'session', 0x3d, 0x54}}, {@gid}, {@overriderock}, {@mode={'mode', 0x3d, 0x44c3}}, {@map_off}, {@map_normal}], [{@uid_eq}], 0x2c}, 0x3, 0x9bf, &(0x7f0000001640)="$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") 2.986011275s ago: executing program 5 (id=140): r0 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r0, &(0x7f0000000040)=[{0x0}], 0x1) 2.906484173s ago: executing program 3 (id=141): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300), 0x20002, 0x0) ioctl$TIOCSIG(r0, 0x40045436, 0x12) 2.435776373s ago: executing program 2 (id=142): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYBLOB="3400000020000100000000000000000002001000000000000000000008000200ac1414aa08000b0004000000050016006c"], 0x34}}, 0x0) 1.887727431s ago: executing program 5 (id=143): socket$nl_route(0x10, 0x3, 0x0) socket$inet_icmp(0x2, 0x2, 0x1) syz_open_dev$sndctrl(&(0x7f0000000080), 0x0, 0x80000) syz_mount_image$minix(&(0x7f0000000100), &(0x7f00000066c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1810002, &(0x7f0000000680)=ANY=[@ANYBLOB="002ecbc55fe6d6100837adda58fa7d10ab54aee93b992510be054d731ab7da7e75676e729a84f3b6a90100db5e477dbfee9ea3db9e2cdf0aa97fb2a48d7a569258274a727cb0c7227e8f51529264e568b34e6f7ee018b3562d8fdd26e1b83ab2b09862ea8ac241fca01893c02becc286b2b17bd8c515b3dd02562333f6a7273bc91c9841bf3cb673bc8942336c5cebffbb08f82ba108af50c8dabb9628fc8e59c207395f370146898f1f3400f50f5e0566363558fe2c744cbebda08fe49b2155b62fcbb938b0d78d5e36b52dc29043bc4725bb5488066333a94b1f311c1d70dc272c6528d8057273e9bffbc8747d7c8a65b368828d39c69fc42125281702192328142ebbae2cb6877b71a6476b2290d6b5a376ab004afb2ccc83293222ce378ef0e8d88e873ee168d615985aaabc293ff63ce789dd163747e965405c11730f23faf8053fb37e93d5a54cdce54c1ce09598258ec5892938c5a16cf0c548695c973b45a0bc95feff28efd82474db81558adbae6b4057c5da581fe9215d1a9e358a9da84b4ceb0f586c2ddbabbe2347dd728b8e05ecf90b4c7c9861ce1af7709c9babcdc2bd2175a8496a48942dc2755a5ed6296745ec0810e42050e657b2c0965d4230b4706da0140277053c8ce91d0000000000000000000000f81a60f8321a29d95e555edc5822e904e5b3821224bb704efa9aea0f736fa06f46b1023fc644c7879a6315e96f6695f65fef95d6dbf22d80c068a20fc98bad02dbeb3c9f478063d2f2f8fd5e8af7a5d5937e5626c71efa3369e99787e78597c01acfa3b273102993abd03263ae4115a65254d32c517eddeb58bbc458d025fdc566906ac145a9db74f46d10805e6c7560f6740cf29445f6aec713655cdd27032c6413f342d8e76782bdc2d96870cf7e84d15838c48aa6af77086acec169846791fbb50b0f648adbc6f4058870827efcf4da44b43c62f30000000000000000000000000000000000000000000000000000b24f6cc29b362e8f5cb58073e97232c24a0ce2c94de014887053e85757e0c1eb75d0f6f99883e5f54a06ae2d6a78d41d04b00b51cb8321f9160aec2dd25d76d410ae3845a9298845b3e62fd5feabd167bfb76cd04e6cd6fdb9c81efe3ef97afcfe13ddaf974828529af73f4aed0c6aefb9d57ffdf234e1fa7b6aa5e2e184b9b58242f0f937", @ANYRES32, @ANYBLOB="ba3ce4903fe33cef6b2e7d0d01c03112ea9ffca159b52fe55b452a40d05c552a8155349b8ca1ff6c220724f36c7984da53a93de910089f283b95df1461a2ec11e204b2f25f480f577d56985d3ff6a8eaf1fd33bf2f1d85492473e64224e89de95f853b66bfd50fabaacf588f328b1102ac010fa57e42f29775b9e78d35ce90e8bc4a2bd958e92b6e12c148da61e7aca8afdb2ab37cbcda75c957cede016a114ef20b57a5e5802118406c0b27e788520e7e24b1842270223b7d0ac685f99e809e154a25911c9431dba8ae17f0a800027fe5604b53a369678a59c97c9d7fb5d25f2ff511d97190654b2546ebabd3bb69e18af8e9ecbbd2c3112233706cccd72ee9dda1f38ffc693c84d45b1546ef58eded754e5b1064eb19f7866ad38e5568f137dfa4a8f942a7dcabf15e9b45c0e3e4db62c7", @ANYBLOB="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", @ANYRESOCT, @ANYRES16=0x0, @ANYRESDEC, @ANYRES64=0x0, @ANYRES32, @ANYBLOB="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", @ANYRESOCT], 0x1, 0x1cd, &(0x7f0000002180)="$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") socket$nl_xfrm(0x10, 0x3, 0x6) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x81000) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$xdp(0x2c, 0x3, 0x0) socket(0x2a, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) socket$rxrpc(0x21, 0x2, 0xa) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000100)=[0x0], 0x1}) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{}, 0x0, &(0x7f0000000200)=r1}, 0x20) ioctl$DRM_IOCTL_MODE_ATOMIC(0xffffffffffffffff, 0xc03864bc, &(0x7f0000000180)={0x1, 0x1, &(0x7f00000000c0)=[r0], &(0x7f0000000180), &(0x7f0000000200), &(0x7f0000000040)}) 1.806991762s ago: executing program 3 (id=144): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x3, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0xfffffe1f, &(0x7f00000004c0)=""/153, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x15) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000ac0)={r0, 0x0, 0x10, 0x0, &(0x7f0000000b40)="055d05e04eda1b15ffce0fbe1fcd9916", 0x0, 0x81d, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.432699829s ago: executing program 4 (id=145): ioperm(0x2, 0x2, 0x81) fchmod(0xffffffffffffffff, 0x1) 1.123802796s ago: executing program 2 (id=146): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="300000001800010327bd7000000000000a600000ff030006"], 0x30}}, 0x0) 537.232428ms ago: executing program 1 (id=147): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x20, 0x1405, 0x1, 0x0, 0x0, "", [{{0x8}, {0x8, 0x3, 0x1000000}}]}, 0x20}}, 0x80) 467.26658ms ago: executing program 3 (id=148): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000080)={'netdevsim0\x00', &(0x7f0000000140)=@ethtool_ringparam={0x11, 0x8, 0x2, 0x6, 0x40000, 0x4, 0x6, 0x89, 0x9}}) 291.653532ms ago: executing program 5 (id=149): r0 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_int(r0, 0x107, 0xe, 0x0, &(0x7f0000000100)) 187.52782ms ago: executing program 4 (id=150): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000e00)) socket$inet6_mptcp(0xa, 0x1, 0x106) r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x2, 0x8, &(0x7f0000000240)=@framed={{0x18, 0x6}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0xb2}, {0x7, 0x0, 0xb, 0x7}}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = socket$nl_rdma(0x10, 0x3, 0x14) r2 = syz_open_procfs$namespace(0x0, &(0x7f00000001c0)='ns/cgroup\x00') ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x12, r2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x8, 0x4, &(0x7f0000000000)=@framed={{}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffd}]}, &(0x7f0000000080)='syzkaller\x00', 0x4, 0xff7, &(0x7f0000002e00)=""/4087, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) sendmsg$RDMA_NLDEV_CMD_SET(r1, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000240)={&(0x7f00000002c0)={0x2c, 0x1402, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r2}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz0\x00'}]}, 0x2c}}, 0x0) syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) r4 = socket$netlink(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_DELETE(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, 0x2, 0x2, 0x201, 0x0, 0x0, {}, [@CTA_EXPECT_HELP_NAME={0x5, 0x6, '\x00'}]}, 0x1c}}, 0x0) 0s ago: executing program 2 (id=151): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@ipv4_newrule={0x30, 0x20, 0x301, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, [@FRA_GENERIC_POLICY=@FRA_IIFNAME={0x14, 0x3, 'geneve1\x00'}]}, 0x30}}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.84' (ED25519) to the list of known hosts. [ 210.373856][ T5761] cgroup: Unknown subsys name 'net' [ 210.511370][ T5761] cgroup: Unknown subsys name 'cpuset' [ 210.528434][ T5761] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 234.871369][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 234.878246][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 266.661413][ T5761] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 271.188991][ T5787] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 271.199084][ T5788] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 271.211475][ T5787] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 271.220447][ T5787] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 271.228793][ T5787] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 271.238988][ T5787] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 271.248642][ T5787] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 271.252611][ T5789] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 271.261251][ T5787] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 271.272819][ T5787] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 271.272897][ T5789] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 271.295086][ T5787] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 271.301765][ T5793] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 271.304878][ T5787] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 271.313746][ T5793] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 271.317755][ T5787] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 271.326846][ T5793] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 271.335904][ T5787] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 271.354658][ T5787] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 271.359050][ T5793] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 271.371885][ T5078] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 271.380437][ T5078] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 271.389983][ T5078] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 271.399429][ T5793] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 271.420462][ T5793] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 271.430905][ T5793] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 271.447611][ T5793] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 271.453252][ T5786] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 271.457808][ T5793] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 271.471091][ T5793] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 272.849323][ T5777] chnl_net:caif_netlink_parms(): no params data found [ 273.321234][ T5784] chnl_net:caif_netlink_parms(): no params data found [ 273.493227][ T51] Bluetooth: hci3: command tx timeout [ 273.499051][ T51] Bluetooth: hci0: command tx timeout [ 273.610533][ T5793] Bluetooth: hci4: command tx timeout [ 273.610800][ T51] Bluetooth: hci2: command tx timeout [ 273.651280][ T51] Bluetooth: hci1: command tx timeout [ 273.814916][ T5778] chnl_net:caif_netlink_parms(): no params data found [ 273.877305][ T5779] chnl_net:caif_netlink_parms(): no params data found [ 274.038866][ T5777] bridge0: port 1(bridge_slave_0) entered blocking state [ 274.046748][ T5777] bridge0: port 1(bridge_slave_0) entered disabled state [ 274.054740][ T5777] bridge_slave_0: entered allmulticast mode [ 274.064310][ T5777] bridge_slave_0: entered promiscuous mode [ 274.098539][ T5777] bridge0: port 2(bridge_slave_1) entered blocking state [ 274.106344][ T5777] bridge0: port 2(bridge_slave_1) entered disabled state [ 274.114375][ T5777] bridge_slave_1: entered allmulticast mode [ 274.124267][ T5777] bridge_slave_1: entered promiscuous mode [ 274.347444][ T5780] chnl_net:caif_netlink_parms(): no params data found [ 274.386001][ T5777] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 274.484462][ T5777] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 274.693709][ T5784] bridge0: port 1(bridge_slave_0) entered blocking state [ 274.702348][ T5784] bridge0: port 1(bridge_slave_0) entered disabled state [ 274.710388][ T5784] bridge_slave_0: entered allmulticast mode [ 274.719811][ T5784] bridge_slave_0: entered promiscuous mode [ 274.804733][ T5777] team0: Port device team_slave_0 added [ 274.849022][ T5784] bridge0: port 2(bridge_slave_1) entered blocking state [ 274.856840][ T5784] bridge0: port 2(bridge_slave_1) entered disabled state [ 274.864988][ T5784] bridge_slave_1: entered allmulticast mode [ 274.878604][ T5784] bridge_slave_1: entered promiscuous mode [ 274.902834][ T5777] team0: Port device team_slave_1 added [ 275.319658][ T5777] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 275.326849][ T5777] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 275.353347][ T5777] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 275.447248][ T5784] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 275.494875][ T5777] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 275.502519][ T5777] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 275.529018][ T5777] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 275.541662][ T5778] bridge0: port 1(bridge_slave_0) entered blocking state [ 275.549533][ T5778] bridge0: port 1(bridge_slave_0) entered disabled state [ 275.557342][ T5778] bridge_slave_0: entered allmulticast mode [ 275.566947][ T5778] bridge_slave_0: entered promiscuous mode [ 275.578670][ T51] Bluetooth: hci0: command tx timeout [ 275.584474][ T51] Bluetooth: hci3: command tx timeout [ 275.640030][ T5784] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 275.648836][ T51] Bluetooth: hci4: command tx timeout [ 275.650796][ T5793] Bluetooth: hci2: command tx timeout [ 275.655894][ T5778] bridge0: port 2(bridge_slave_1) entered blocking state [ 275.668741][ T5778] bridge0: port 2(bridge_slave_1) entered disabled state [ 275.676558][ T5778] bridge_slave_1: entered allmulticast mode [ 275.685530][ T5778] bridge_slave_1: entered promiscuous mode [ 275.728431][ T51] Bluetooth: hci1: command tx timeout [ 275.794181][ T5779] bridge0: port 1(bridge_slave_0) entered blocking state [ 275.802499][ T5779] bridge0: port 1(bridge_slave_0) entered disabled state [ 275.810458][ T5779] bridge_slave_0: entered allmulticast mode [ 275.819602][ T5779] bridge_slave_0: entered promiscuous mode [ 275.964694][ T5778] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 275.977350][ T5780] bridge0: port 1(bridge_slave_0) entered blocking state [ 275.987380][ T5780] bridge0: port 1(bridge_slave_0) entered disabled state [ 275.995328][ T5780] bridge_slave_0: entered allmulticast mode [ 276.004296][ T5780] bridge_slave_0: entered promiscuous mode [ 276.017525][ T5779] bridge0: port 2(bridge_slave_1) entered blocking state [ 276.025697][ T5779] bridge0: port 2(bridge_slave_1) entered disabled state [ 276.033749][ T5779] bridge_slave_1: entered allmulticast mode [ 276.043347][ T5779] bridge_slave_1: entered promiscuous mode [ 276.105465][ T5778] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 276.122670][ T5784] team0: Port device team_slave_0 added [ 276.134224][ T5780] bridge0: port 2(bridge_slave_1) entered blocking state [ 276.142280][ T5780] bridge0: port 2(bridge_slave_1) entered disabled state [ 276.150272][ T5780] bridge_slave_1: entered allmulticast mode [ 276.159252][ T5780] bridge_slave_1: entered promiscuous mode [ 276.278291][ T5784] team0: Port device team_slave_1 added [ 276.450400][ T5777] hsr_slave_0: entered promiscuous mode [ 276.461324][ T5777] hsr_slave_1: entered promiscuous mode [ 276.560953][ T5780] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 276.582220][ T5779] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 276.604715][ T5778] team0: Port device team_slave_0 added [ 276.700862][ T5780] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 276.756498][ T5779] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 276.774532][ T5778] team0: Port device team_slave_1 added [ 276.802141][ T5784] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 276.809606][ T5784] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 276.835983][ T5784] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 277.039644][ T5784] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 277.046838][ T5784] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 277.074948][ T5784] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 277.134363][ T5780] team0: Port device team_slave_0 added [ 277.153842][ T5780] team0: Port device team_slave_1 added [ 277.170064][ T5779] team0: Port device team_slave_0 added [ 277.267040][ T5779] team0: Port device team_slave_1 added [ 277.349520][ T5778] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 277.356717][ T5778] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 277.383215][ T5778] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 277.399236][ T5778] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 277.406434][ T5778] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 277.432907][ T5778] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 277.543633][ T5780] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 277.551425][ T5780] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 277.577916][ T5780] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 277.648812][ T51] Bluetooth: hci3: command tx timeout [ 277.648872][ T5793] Bluetooth: hci0: command tx timeout [ 277.685518][ T5784] hsr_slave_0: entered promiscuous mode [ 277.696050][ T5784] hsr_slave_1: entered promiscuous mode [ 277.705251][ T5784] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 277.713174][ T5784] Cannot create hsr debugfs directory [ 277.728428][ T51] Bluetooth: hci4: command tx timeout [ 277.734106][ T51] Bluetooth: hci2: command tx timeout [ 277.762808][ T5780] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 277.770233][ T5780] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 277.796757][ T5780] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 277.822407][ T5793] Bluetooth: hci1: command tx timeout [ 277.950610][ T5778] hsr_slave_0: entered promiscuous mode [ 277.964093][ T5778] hsr_slave_1: entered promiscuous mode [ 277.973225][ T5778] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 277.981146][ T5778] Cannot create hsr debugfs directory [ 277.993240][ T5779] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 278.000952][ T5779] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 278.027296][ T5779] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 278.045830][ T5779] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 278.053354][ T5779] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 278.079850][ T5779] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 278.325846][ T5780] hsr_slave_0: entered promiscuous mode [ 278.336396][ T5780] hsr_slave_1: entered promiscuous mode [ 278.345844][ T5780] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 278.353868][ T5780] Cannot create hsr debugfs directory [ 278.665557][ T5779] hsr_slave_0: entered promiscuous mode [ 278.676260][ T5779] hsr_slave_1: entered promiscuous mode [ 278.685547][ T5779] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 278.693528][ T5779] Cannot create hsr debugfs directory [ 279.391147][ T5777] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 279.414200][ T5777] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 279.539044][ T5777] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 279.702089][ T5777] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 279.729014][ T5793] Bluetooth: hci3: command tx timeout [ 279.734759][ T51] Bluetooth: hci0: command tx timeout [ 279.808996][ T51] Bluetooth: hci2: command tx timeout [ 279.814692][ T51] Bluetooth: hci4: command tx timeout [ 279.888603][ T5793] Bluetooth: hci1: command tx timeout [ 279.973107][ T5784] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 280.076385][ T5784] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 280.100659][ T5784] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 280.195664][ T5784] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 280.477774][ T5780] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 280.526328][ T5780] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 280.556164][ T5780] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 280.634292][ T5780] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 280.708802][ T5778] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 280.829578][ T5778] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 280.939663][ T5778] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 281.026248][ T5778] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 281.071355][ T5779] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 281.140058][ T5779] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 281.244254][ T5779] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 281.306363][ T5779] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 281.579001][ T5777] 8021q: adding VLAN 0 to HW filter on device bond0 [ 281.867909][ T5777] 8021q: adding VLAN 0 to HW filter on device team0 [ 282.015380][ T1127] bridge0: port 1(bridge_slave_0) entered blocking state [ 282.023355][ T1127] bridge0: port 1(bridge_slave_0) entered forwarding state [ 282.049816][ T5784] 8021q: adding VLAN 0 to HW filter on device bond0 [ 282.119678][ T5780] 8021q: adding VLAN 0 to HW filter on device bond0 [ 282.148001][ T1127] bridge0: port 2(bridge_slave_1) entered blocking state [ 282.155866][ T1127] bridge0: port 2(bridge_slave_1) entered forwarding state [ 282.416164][ T5780] 8021q: adding VLAN 0 to HW filter on device team0 [ 282.471285][ T5784] 8021q: adding VLAN 0 to HW filter on device team0 [ 282.631072][ T3491] bridge0: port 1(bridge_slave_0) entered blocking state [ 282.638940][ T3491] bridge0: port 1(bridge_slave_0) entered forwarding state [ 282.670282][ T3491] bridge0: port 1(bridge_slave_0) entered blocking state [ 282.678001][ T3491] bridge0: port 1(bridge_slave_0) entered forwarding state [ 282.753513][ T3491] bridge0: port 2(bridge_slave_1) entered blocking state [ 282.761355][ T3491] bridge0: port 2(bridge_slave_1) entered forwarding state [ 282.854998][ T5777] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 282.941651][ T3491] bridge0: port 2(bridge_slave_1) entered blocking state [ 282.949490][ T3491] bridge0: port 2(bridge_slave_1) entered forwarding state [ 283.107031][ T5778] 8021q: adding VLAN 0 to HW filter on device bond0 [ 283.306853][ T5780] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 283.425056][ T5779] 8021q: adding VLAN 0 to HW filter on device bond0 [ 283.477925][ T5784] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 283.541235][ T5778] 8021q: adding VLAN 0 to HW filter on device team0 [ 283.705416][ T5779] 8021q: adding VLAN 0 to HW filter on device team0 [ 283.775382][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 283.783217][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 283.876503][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 283.884453][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 283.906611][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 283.914469][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 284.228284][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 284.236045][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 284.365973][ T5778] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 285.269393][ T5777] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 285.828777][ T5777] veth0_vlan: entered promiscuous mode [ 285.855478][ T5780] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 285.902779][ T5784] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 285.986716][ T5777] veth1_vlan: entered promiscuous mode [ 286.494516][ T5784] veth0_vlan: entered promiscuous mode [ 286.516874][ T5777] veth0_macvtap: entered promiscuous mode [ 286.629135][ T5777] veth1_macvtap: entered promiscuous mode [ 286.647293][ T5784] veth1_vlan: entered promiscuous mode [ 286.789712][ T5778] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 286.925224][ T5777] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 287.023317][ T5779] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 287.085714][ T5777] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 287.201250][ T5777] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 287.213411][ T5777] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 287.223249][ T5777] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 287.232523][ T5777] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 287.256101][ T5784] veth0_macvtap: entered promiscuous mode [ 287.351778][ T5784] veth1_macvtap: entered promiscuous mode [ 287.557688][ T5778] veth0_vlan: entered promiscuous mode [ 287.596687][ T5784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 287.608353][ T5784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 287.624069][ T5784] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 287.764725][ T5778] veth1_vlan: entered promiscuous mode [ 287.821886][ T5779] veth0_vlan: entered promiscuous mode [ 287.856604][ T5784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 287.868519][ T5784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 287.884569][ T5784] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 288.027274][ T5784] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 288.038454][ T5784] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 288.047503][ T5784] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 288.058270][ T5784] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 288.099966][ T5779] veth1_vlan: entered promiscuous mode [ 288.280516][ T5778] veth0_macvtap: entered promiscuous mode [ 288.359024][ T5778] veth1_macvtap: entered promiscuous mode [ 288.626245][ T5779] veth0_macvtap: entered promiscuous mode [ 288.690249][ T5778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 288.701124][ T5778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 288.711364][ T5778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 288.722219][ T5778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 288.737933][ T5778] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 288.768975][ T5779] veth1_macvtap: entered promiscuous mode [ 288.946106][ T5778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 288.958747][ T5778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 288.969124][ T5778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 288.980010][ T5778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 288.995238][ T5778] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 289.086922][ T5779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 289.100340][ T5779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 289.110698][ T5779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 289.121592][ T5779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 289.131781][ T5779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 289.142672][ T5779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 289.158777][ T5779] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 289.226816][ T5778] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 289.237501][ T5778] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 289.250445][ T5778] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 289.260900][ T5778] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 289.349330][ T5779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 289.362831][ T5779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 289.375887][ T5779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 289.389271][ T5779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 289.400720][ T5779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 289.414491][ T5779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 289.430262][ T5779] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 289.495284][ T5780] veth0_vlan: entered promiscuous mode [ 289.606580][ T5780] veth1_vlan: entered promiscuous mode [ 289.747434][ T5779] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 289.758482][ T5779] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 289.767547][ T5779] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 289.777033][ T5779] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 289.987444][ T5780] veth0_macvtap: entered promiscuous mode [ 290.077128][ T5780] veth1_macvtap: entered promiscuous mode [ 290.333328][ T5780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 290.344366][ T5780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 290.354794][ T5780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 290.365652][ T5780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 290.376924][ T5780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 290.387878][ T5780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 290.399343][ T5780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 290.410276][ T5780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 290.425910][ T5780] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 290.732495][ T5780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 290.745109][ T5780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 290.755580][ T5780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 290.766437][ T5780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 290.776706][ T5780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 290.789527][ T5780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 290.800826][ T5780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 290.811820][ T5780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 290.827439][ T5780] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 291.069008][ T5780] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 291.078357][ T5780] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 291.087429][ T5780] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 291.096865][ T5780] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 295.593103][ T3909] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 295.602200][ T3909] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 295.913582][ T3909] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 295.921762][ T3909] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 296.000241][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 296.008617][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 296.169246][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 296.177369][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 296.381191][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 296.387981][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 296.472795][ T5784] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 297.211736][ T4008] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 297.220026][ T4008] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 297.535182][ T1127] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 297.544533][ T1127] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 297.638951][ T10] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 297.743540][ T3491] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 297.751899][ T3491] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 297.901387][ T10] usb 4-1: Using ep0 maxpacket: 8 [ 297.921817][ T10] usb 4-1: config index 0 descriptor too short (expected 6427, got 27) [ 297.930658][ T10] usb 4-1: config 0 has an invalid interface number: 21 but max is 0 [ 297.939348][ T10] usb 4-1: config 0 has no interface number 0 [ 297.945702][ T10] usb 4-1: config 0 interface 21 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 297.957684][ T10] usb 4-1: config 0 interface 21 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 297.969098][ T10] usb 4-1: config 0 interface 21 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 298.008304][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 298.016582][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 298.070945][ T10] usb 4-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 298.085727][ T10] usb 4-1: New USB device strings: Mfr=31, Product=1, SerialNumber=0 [ 298.096284][ T10] usb 4-1: Product: syz [ 298.100910][ T10] usb 4-1: Manufacturer: syz [ 298.151828][ T10] usb 4-1: config 0 descriptor?? [ 298.161621][ T5959] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 298.842340][ T5968] loop2: detected capacity change from 0 to 512 [ 298.908972][ T10] input: syz syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.21/input/input5 [ 299.049240][ T5968] EXT4-fs: Ignoring removed nobh option [ 299.055471][ T5968] ext4: Unknown parameter '.' [ 299.138872][ T5970] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 299.267128][ T10] usb 4-1: USB disconnect, device number 2 [ 299.267371][ C0] keyspan_remote 4-1:0.21: keyspan_irq_recv - usb_submit_urb failed with result: -19 [ 299.836309][ T4008] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 299.845185][ T4008] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 300.776292][ T3909] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 300.784617][ T3909] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 301.389764][ T5982] warning: `syz.2.7' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 302.779367][ T5987] binder: 5986:5987 ioctl c0306201 20000680 returned -14 [ 303.721175][ T1679] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 303.992262][ T1679] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 304.003381][ T1679] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 304.017031][ T1679] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 304.141303][ T5992] overlayfs: metacopy with no lower data found - abort lookup (/bus) [ 304.300490][ T1679] usb 2-1: config 0 descriptor?? [ 304.393354][ T1679] pwc: Askey VC010 type 2 USB webcam detected. [ 304.902908][ T1679] pwc: recv_control_msg error -32 req 02 val 2b00 [ 304.969175][ T1679] pwc: recv_control_msg error -32 req 02 val 2700 [ 305.060988][ T1679] pwc: recv_control_msg error -32 req 02 val 2c00 [ 305.112209][ T1679] pwc: recv_control_msg error -32 req 04 val 1000 [ 305.230623][ T1679] pwc: recv_control_msg error -32 req 04 val 1300 [ 305.273254][ T6002] netlink: 4 bytes leftover after parsing attributes in process `syz.0.13'. [ 305.282712][ T6002] ip6tnl0: entered promiscuous mode [ 305.288339][ T6002] ip6tnl0: entered allmulticast mode [ 305.357355][ T1679] pwc: recv_control_msg error -32 req 04 val 1400 [ 305.426281][ T1679] pwc: recv_control_msg error -32 req 02 val 2000 [ 305.491597][ T1679] pwc: recv_control_msg error -32 req 02 val 2100 [ 305.576439][ T1679] pwc: recv_control_msg error -32 req 04 val 1500 [ 305.665156][ T1679] pwc: recv_control_msg error -32 req 02 val 2500 [ 305.750622][ T1679] pwc: recv_control_msg error -32 req 02 val 2400 [ 305.893465][ T1679] pwc: recv_control_msg error -32 req 02 val 2600 [ 305.948911][ T1679] pwc: recv_control_msg error -32 req 02 val 2900 [ 306.189234][ T1679] pwc: recv_control_msg error -71 req 04 val 1100 [ 306.299473][ T1679] pwc: recv_control_msg error -71 req 04 val 1200 [ 306.378405][ T1679] pwc: Registered as video103. [ 306.387220][ T1679] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input6 [ 306.720198][ T1679] usb 2-1: USB disconnect, device number 2 [ 307.315885][ T6009] batman_adv: batadv0: Adding interface: vxlan0 [ 307.322670][ T6009] batman_adv: batadv0: The MTU of interface vxlan0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 307.348932][ T6009] batman_adv: batadv0: Not using interface vxlan0 (retrying later): interface not active [ 307.537855][ T6011] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 307.585219][ T6011] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 308.672098][ T6013] loop3: detected capacity change from 0 to 1024 [ 308.840406][ T6013] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 309.109153][ T6013] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 309.179262][ T6013] EXT4-fs (loop3): orphan cleanup on readonly fs [ 309.250615][ T6013] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5838: Corrupt filesystem [ 309.332212][ T6013] EXT4-fs (loop3): Remounting filesystem read-only [ 309.350436][ T6013] Quota error (device loop3): write_blk: dquota write failed [ 309.358581][ T6013] Quota error (device loop3): write_blk: dquota write failed [ 309.366517][ T6013] Quota error (device loop3): qtree_write_dquot: Error -28 occurred while creating quota [ 309.376929][ T6013] Quota error (device loop3): v2_write_file_info: Can't write info structure [ 309.386235][ T6013] EXT4-fs (loop3): 1 orphan inode deleted [ 309.482430][ T6013] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 309.934916][ T6013] syz.3.16 (6013) used greatest stack depth: 4384 bytes left [ 310.023569][ T5784] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 310.265288][ T1679] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 310.458913][ T1679] usb 2-1: Using ep0 maxpacket: 16 [ 310.495548][ T1679] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 310.507782][ T1679] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 310.553930][ T6034] loop3: detected capacity change from 0 to 64 [ 310.591167][ T1679] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 310.600966][ T1679] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 310.610514][ T1679] usb 2-1: Product: syz [ 310.614942][ T1679] usb 2-1: Manufacturer: syz [ 310.620403][ T1679] usb 2-1: SerialNumber: syz [ 310.691468][ T1679] usb 2-1: config 0 descriptor?? [ 310.749340][ T1679] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 310.759464][ T1679] em28xx 2-1:0.0: Audio interface 0 found (Vendor Class) [ 311.142398][ T6036] loop2: detected capacity change from 0 to 1024 [ 311.220129][ T6036] EXT4-fs (loop2): orphan cleanup on readonly fs [ 311.363874][ T6036] EXT4-fs (loop2): 1 truncate cleaned up [ 311.373741][ T1679] em28xx 2-1:0.0: unknown em28xx chip ID (0) [ 311.403470][ T6036] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 311.409584][ T1679] em28xx 2-1:0.0: Config register raw data: 0xfffffffb [ 312.052696][ T1679] em28xx 2-1:0.0: Unknown AC97 audio processor detected! [ 312.088975][ T1679] em28xx 2-1:0.0: couldn't setup AC97 register 2 [ 312.118585][ T1679] em28xx 2-1:0.0: couldn't setup AC97 register 4 [ 312.158625][ T1679] em28xx 2-1:0.0: couldn't setup AC97 register 6 [ 312.187226][ T1679] em28xx 2-1:0.0: couldn't setup AC97 register 54 [ 312.249761][ T1679] em28xx 2-1:0.0: couldn't setup AC97 register 56 [ 312.363476][ T5777] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 312.738704][ T1679] em28xx 2-1:0.0: couldn't setup AC97 register 2 [ 312.745532][ T1679] em28xx 2-1:0.0: couldn't setup AC97 register 4 [ 312.752418][ T1679] em28xx 2-1:0.0: couldn't setup AC97 register 6 [ 312.759135][ T1679] em28xx 2-1:0.0: couldn't setup AC97 register 54 [ 312.765829][ T1679] em28xx 2-1:0.0: couldn't setup AC97 register 56 [ 312.795316][ T6048] loop3: detected capacity change from 0 to 1024 [ 312.838444][ T6048] ======================================================= [ 312.838444][ T6048] WARNING: The mand mount option has been deprecated and [ 312.838444][ T6048] and is ignored by this kernel. Remove the mand [ 312.838444][ T6048] option from the mount to silence this warning. [ 312.838444][ T6048] ======================================================= [ 312.875112][ T6048] EXT4-fs: Ignoring removed i_version option [ 312.882221][ T6048] EXT4-fs: Ignoring removed bh option [ 312.967854][ T1679] usb 2-1: USB disconnect, device number 3 [ 313.250189][ T6048] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 313.610913][ T44] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 313.813039][ T44] usb 3-1: Using ep0 maxpacket: 16 [ 313.897520][ T44] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 313.909738][ T44] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 313.941795][ T44] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 313.955692][ T44] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 313.965829][ T44] usb 3-1: Product: syz [ 313.970646][ T44] usb 3-1: Manufacturer: syz [ 313.975517][ T44] usb 3-1: SerialNumber: syz [ 314.016439][ T44] usb 3-1: config 0 descriptor?? [ 314.084343][ T6057] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 314.100250][ T5784] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 314.100709][ T44] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 314.119826][ T44] em28xx 3-1:0.0: Audio interface 0 found (Vendor Class) [ 314.220137][ T6057] kvm: pic: non byte read [ 314.762516][ T44] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 314.825908][ T44] em28xx 3-1:0.0: Config register raw data: 0xfffffffb [ 315.464181][ T44] em28xx 3-1:0.0: Unknown AC97 audio processor detected! [ 315.474398][ T6068] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 315.546017][ T44] em28xx 3-1:0.0: couldn't setup AC97 register 2 [ 315.578946][ T44] em28xx 3-1:0.0: couldn't setup AC97 register 4 [ 315.648718][ T44] em28xx 3-1:0.0: couldn't setup AC97 register 6 [ 315.701761][ T44] em28xx 3-1:0.0: couldn't setup AC97 register 54 [ 315.748881][ T44] em28xx 3-1:0.0: couldn't setup AC97 register 56 [ 315.915165][ T5833] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 316.127580][ T5833] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 316.142737][ T5833] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 316.168643][ T5833] usb 4-1: New USB device found, idVendor=04da, idProduct=390d, bcdDevice=fc.43 [ 316.178012][ T5833] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 316.310396][ T5833] usb 4-1: config 0 descriptor?? [ 316.469369][ T44] em28xx 3-1:0.0: couldn't setup AC97 register 20 [ 316.548992][ T5833] ath6kl: Failed to submit usb control message: -71 [ 316.556010][ T5833] ath6kl: unable to send the bmi data to the device: -71 [ 316.563659][ T5833] ath6kl: Unable to send get target info: -71 [ 316.650651][ T5833] ath6kl: Failed to init ath6kl core: -71 [ 316.664384][ T5833] ath6kl_usb 4-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 316.689946][ T44] em28xx 3-1:0.0: couldn't setup AC97 register 16 [ 316.739335][ T44] em28xx 3-1:0.0: couldn't setup AC97 register 12 [ 316.759901][ T44] em28xx 3-1:0.0: couldn't setup AC97 register 14 [ 316.803494][ T5833] usb 4-1: USB disconnect, device number 3 [ 316.829468][ T44] em28xx 3-1:0.0: couldn't setup AC97 register 18 [ 316.889443][ T44] em28xx 3-1:0.0: couldn't setup AC97 register 22 [ 316.904506][ T44] em28xx 3-1:0.0: couldn't setup AC97 register 24 [ 316.928443][ T44] em28xx 3-1:0.0: Binding audio extension [ 316.934483][ T44] em28xx 3-1:0.0: em28xx-audio.c: Copyright (C) 2006 Markus Rechberger [ 316.943278][ T44] em28xx 3-1:0.0: em28xx-audio.c: Copyright (C) 2007-2016 Mauro Carvalho Chehab [ 316.957887][ T44] em28xx 3-1:0.0: alt 0 doesn't exist on interface 7 [ 317.095469][ T44] usb 3-1: USB disconnect, device number 2 [ 317.103272][ T44] em28xx 3-1:0.0: Disconnecting em28xx [ 317.109819][ T44] em28xx 3-1:0.0: Closing audio extension [ 317.137420][ T44] em28xx 3-1:0.0: Freeing device [ 318.516659][ T6092] loop1: detected capacity change from 0 to 128 [ 318.764468][ T44] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 318.988723][ T44] usb 5-1: Using ep0 maxpacket: 16 [ 319.134676][ T44] usb 5-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 319.144355][ T44] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 319.152829][ T44] usb 5-1: Product: syz [ 319.157294][ T44] usb 5-1: Manufacturer: syz [ 319.162759][ T44] usb 5-1: SerialNumber: syz [ 319.574389][ T44] r8152-cfgselector 5-1: Unknown version 0x0000 [ 319.587072][ T44] r8152-cfgselector 5-1: config 0 descriptor?? [ 322.892133][ T6096] sctp: failed to load transform for md5: -2 [ 322.954819][ T6097] sctp: failed to load transform for md5: -2 [ 322.971740][ T6100] sctp: failed to load transform for md5: -2 [ 322.991090][ T5833] r8152-cfgselector 5-1: USB disconnect, device number 2 [ 323.189985][ T6115] Trying to write to read-only block-device nullb0 [ 323.221238][ T6102] sctp: failed to load transform for md5: -2 [ 323.241693][ T6107] sctp: failed to load transform for md5: -2 [ 323.452712][ T6103] sctp: failed to load transform for md5: -2 [ 324.372026][ T6140] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 324.380388][ T6140] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 324.714965][ T6140] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 324.724808][ T6140] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 324.861167][ T6140] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 324.868308][ T6140] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 324.990618][ T6142] loop1: detected capacity change from 0 to 2048 [ 325.280088][ T6140] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 325.286480][ T6140] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 325.747604][ T6140] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 325.754215][ T6140] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 325.955820][ T6147] netlink: 'syz.3.46': attribute type 10 has an invalid length. [ 325.964621][ T6147] bridge0: port 2(bridge_slave_1) entered disabled state [ 325.975009][ T6147] bridge0: port 1(bridge_slave_0) entered disabled state [ 326.003697][ T6147] bridge0: port 2(bridge_slave_1) entered blocking state [ 326.011775][ T6147] bridge0: port 2(bridge_slave_1) entered forwarding state [ 326.020956][ T6147] bridge0: port 1(bridge_slave_0) entered blocking state [ 326.029082][ T6147] bridge0: port 1(bridge_slave_0) entered forwarding state [ 326.057495][ T6147] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 326.067732][ T6159] netlink: 4 bytes leftover after parsing attributes in process `syz.3.46'. [ 326.078953][ T6159] bridge_slave_1: left allmulticast mode [ 326.085382][ T6159] bridge_slave_1: left promiscuous mode [ 326.092463][ T6159] bridge0: port 2(bridge_slave_1) entered disabled state [ 326.150050][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 326.151663][ T6159] bridge_slave_0: left allmulticast mode [ 326.165800][ T6159] bridge_slave_0: left promiscuous mode [ 326.172859][ T6159] bridge0: port 1(bridge_slave_0) entered disabled state [ 326.205731][ T6159] bond0: (slave bridge0): Releasing backup interface [ 326.237568][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 326.300295][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 326.330839][ T6142] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 326.529452][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 326.610217][ T29] audit: type=1800 audit(1737629144.819:2): pid=6140 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.44" name="file0" dev="loop1" ino=13 res=0 errno=0 [ 326.712243][ T6146] sctp: failed to load transform for md5: -2 [ 326.730733][ T6162] sctp: failed to load transform for md5: -2 [ 326.836595][ T6160] sctp: failed to load transform for md5: -2 [ 327.263263][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 327.312976][ T6153] sctp: failed to load transform for md5: -2 [ 327.429695][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 327.991359][ T51] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 328.020984][ T51] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 328.121555][ T51] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 328.160040][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 328.291291][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 328.301896][ T51] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 328.318907][ T51] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 328.329070][ T51] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 328.406745][ T5793] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 328.491148][ T0] NOHZ tick-stop error: local softirq work is pending, handler #c2!!! [ 328.515819][ T5793] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 328.545433][ T5793] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 328.607595][ T5793] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 328.675755][ T5793] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 328.720812][ T5793] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 328.743706][ T6164] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 329.217076][ T0] NOHZ tick-stop error: local softirq work is pending, handler #242!!! [ 329.277062][ T5778] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 330.098806][ T44] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 330.204000][ T6209] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 330.303277][ T44] usb 5-1: New USB device found, idVendor=055f, idProduct=c420, bcdDevice=6a.33 [ 330.313029][ T44] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 330.369959][ T44] usb 5-1: config 0 descriptor?? [ 330.401473][ T44] gspca_main: sunplus-2.14.0 probing 055f:c420 [ 330.865431][ T51] Bluetooth: hci5: command tx timeout [ 330.916125][ T3515] bridge0: port 2(bridge_slave_1) entered disabled state [ 331.075063][ T6194] chnl_net:caif_netlink_parms(): no params data found [ 331.330732][ T44] gspca_sunplus: reg_w_riv err -71 [ 331.336446][ T44] sunplus 5-1:0.0: probe with driver sunplus failed with error -71 [ 331.430817][ T44] usb 5-1: USB disconnect, device number 3 [ 332.050752][ T3537] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 332.207232][ T6218] 9pnet_virtio: no channels available for device syz [ 332.316506][ T3537] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 332.403648][ T3537] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 332.600951][ T3537] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 332.950159][ T51] Bluetooth: hci5: command tx timeout [ 332.958539][ T6224] loop3: detected capacity change from 0 to 1024 [ 332.979889][ T3537] bridge_slave_1: left allmulticast mode [ 332.985863][ T3537] bridge_slave_1: left promiscuous mode [ 332.999653][ T3537] bridge0: port 2(bridge_slave_1) entered disabled state [ 333.015163][ T3537] bridge_slave_0: left allmulticast mode [ 333.021480][ T3537] bridge_slave_0: left promiscuous mode [ 333.028292][ T3537] bridge0: port 1(bridge_slave_0) entered disabled state [ 333.167820][ T6224] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 333.180775][ T6224] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (42840!=20869) [ 333.191111][ T6224] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 333.322665][ T6224] EXT4-fs error (device loop3): ext4_get_journal_inode:5809: inode #5: comm syz.3.55: casefold flag without casefold feature [ 333.415448][ T6224] EXT4-fs (loop3): no journal found [ 333.846109][ T6232] Zero length message leads to an empty skb [ 334.012392][ T3537] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 334.115141][ T3537] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 334.196519][ T3537] bond0 (unregistering): Released all slaves [ 334.557333][ T6239] loop3: detected capacity change from 0 to 128 [ 334.724727][ T6194] bridge0: port 1(bridge_slave_0) entered blocking state [ 334.741769][ T6194] bridge0: port 1(bridge_slave_0) entered disabled state [ 334.749995][ T6194] bridge_slave_0: entered allmulticast mode [ 334.759547][ T6194] bridge_slave_0: entered promiscuous mode [ 335.009317][ T51] Bluetooth: hci5: command tx timeout [ 335.015184][ T6194] bridge0: port 2(bridge_slave_1) entered blocking state [ 335.023181][ T6194] bridge0: port 2(bridge_slave_1) entered disabled state [ 335.033055][ T6194] bridge_slave_1: entered allmulticast mode [ 335.050893][ T6194] bridge_slave_1: entered promiscuous mode [ 335.395546][ T6245] loop1: detected capacity change from 0 to 128 [ 335.435422][ T6245] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 335.500728][ T6245] FAT-fs (loop1): bogus number of FAT sectors [ 335.518419][ T6245] FAT-fs (loop1): Can't find a valid FAT filesystem [ 335.698314][ T10] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 335.776430][ T6194] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 335.898718][ T10] usb 3-1: Using ep0 maxpacket: 16 [ 335.948007][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 335.992026][ T6194] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 336.102853][ T10] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 336.113311][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 336.122311][ T10] usb 3-1: Product: syz [ 336.126729][ T10] usb 3-1: Manufacturer: syz [ 336.132382][ T10] usb 3-1: SerialNumber: syz [ 336.241856][ T10] usb 3-1: config 0 descriptor?? [ 336.297934][ T10] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 336.307674][ T10] em28xx 3-1:0.0: DVB interface 0 found: bulk [ 336.340202][ T6248] netlink: 12 bytes leftover after parsing attributes in process `syz.3.63'. [ 336.661599][ T10] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 336.746478][ T3537] hsr_slave_0: left promiscuous mode [ 336.806981][ T3537] hsr_slave_1: left promiscuous mode [ 336.816431][ T3537] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 336.824590][ T3537] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 336.839336][ T10] em28xx 3-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 336.847877][ T10] em28xx 3-1:0.0: board has no eeprom [ 336.904008][ T3537] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 336.912083][ T3537] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 336.991083][ T10] em28xx 3-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 336.999517][ T10] em28xx 3-1:0.0: dvb set to bulk mode. [ 337.010143][ T5833] em28xx 3-1:0.0: Binding DVB extension [ 337.019403][ T3537] veth1_macvtap: left promiscuous mode [ 337.025213][ T3537] veth0_macvtap: left promiscuous mode [ 337.031712][ T3537] veth1_vlan: left promiscuous mode [ 337.037471][ T3537] veth0_vlan: left promiscuous mode [ 337.093426][ T51] Bluetooth: hci5: command tx timeout [ 337.095863][ T10] usb 3-1: USB disconnect, device number 3 [ 337.106953][ T10] em28xx 3-1:0.0: Disconnecting em28xx [ 337.559937][ T6194] team0: Port device team_slave_0 added [ 337.634092][ T5833] em28xx 3-1:0.0: Registering input extension [ 337.658625][ T10] em28xx 3-1:0.0: Closing input extension [ 337.825639][ T10] em28xx 3-1:0.0: Freeing device [ 338.441634][ T3537] team0 (unregistering): Port device team_slave_1 removed [ 338.520030][ T3537] team0 (unregistering): Port device team_slave_0 removed [ 339.203620][ T6194] team0: Port device team_slave_1 added [ 339.675589][ T6194] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 339.683278][ T6194] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 339.709919][ T6194] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 339.782829][ T5839] libceph: connect (1)[c::]:6789 error -101 [ 339.789596][ T5839] libceph: mon0 (1)[c::]:6789 connect error [ 339.933106][ T6270] ceph: No mds server is up or the cluster is laggy [ 340.105166][ T6194] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 340.113705][ T6194] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 340.141109][ T6194] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 340.798444][ T6194] hsr_slave_0: entered promiscuous mode [ 340.810334][ T6194] hsr_slave_1: entered promiscuous mode [ 340.819655][ T6194] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 340.827476][ T6194] Cannot create hsr debugfs directory [ 340.891192][ T6282] loop1: detected capacity change from 0 to 256 [ 341.375199][ T6282] FAT-fs (loop1): codepage cp86 not found [ 342.087585][ T6289] loop3: detected capacity change from 0 to 4096 [ 342.191085][ T6289] ntfs3(loop3): Different NTFS sector size (4096) and media sector size (512). [ 342.675308][ T6295] team_slave_0: entered promiscuous mode [ 342.681506][ T6295] team_slave_1: entered promiscuous mode [ 342.690420][ T6295] macsec1: entered promiscuous mode [ 342.695884][ T6295] team0: entered promiscuous mode [ 342.704783][ T6295] macsec1: entered allmulticast mode [ 342.710535][ T6295] team0: entered allmulticast mode [ 342.715893][ T6295] team_slave_0: entered allmulticast mode [ 342.728338][ T6295] team_slave_1: entered allmulticast mode [ 342.989788][ T6194] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 343.014981][ T6289] ntfs3(loop3): Failed to initialize $Extend/$Reparse. [ 343.109528][ T6194] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 343.197438][ T6194] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 343.310879][ T6194] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 343.731110][ T6303] bridge0: port 3(vlan2) entered blocking state [ 343.738448][ T6303] bridge0: port 3(vlan2) entered disabled state [ 343.751546][ T6303] vlan2: entered allmulticast mode [ 343.757076][ T6303] team0: entered allmulticast mode [ 343.762231][ T6305] loop1: detected capacity change from 0 to 128 [ 343.762779][ T6303] team_slave_0: entered allmulticast mode [ 343.774783][ T6303] team_slave_1: entered allmulticast mode [ 343.788287][ T6303] vlan2: entered promiscuous mode [ 343.793590][ T6303] team0: entered promiscuous mode [ 343.799110][ T6303] team_slave_0: entered promiscuous mode [ 343.802510][ T6305] zonefs (loop1) ERROR: Not a zoned block device [ 343.806132][ T6303] team_slave_1: entered promiscuous mode [ 343.823374][ T6303] bridge0: port 3(vlan2) entered blocking state [ 343.830567][ T6303] bridge0: port 3(vlan2) entered forwarding state [ 344.422388][ T5784] ntfs3(loop3): ino=1a, ntfs_sync_fs failed, -22. [ 345.193979][ T6194] 8021q: adding VLAN 0 to HW filter on device bond0 [ 345.210594][ T6316] loop4: detected capacity change from 0 to 64 [ 345.550637][ T6194] 8021q: adding VLAN 0 to HW filter on device team0 [ 345.701285][ T1116] bridge0: port 1(bridge_slave_0) entered blocking state [ 345.709131][ T1116] bridge0: port 1(bridge_slave_0) entered forwarding state [ 345.817587][ T1116] bridge0: port 2(bridge_slave_1) entered blocking state [ 345.825465][ T1116] bridge0: port 2(bridge_slave_1) entered forwarding state [ 345.936541][ T6323] vlan2: entered promiscuous mode [ 345.942098][ T6323] team0: entered promiscuous mode [ 345.947374][ T6323] team_slave_0: entered promiscuous mode [ 345.954732][ T6323] team_slave_1: entered promiscuous mode [ 345.971123][ T6323] team0: Device vlan2 is already an upper device of the team interface [ 345.982157][ T6323] team0: left promiscuous mode [ 345.987186][ T6323] team_slave_0: left promiscuous mode [ 345.994260][ T6323] team_slave_1: left promiscuous mode [ 346.286633][ T6320] loop3: detected capacity change from 0 to 4096 [ 346.491919][ T6320] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found [ 346.500498][ T6320] UDF-fs: Scanning with blocksize 512 failed [ 346.663854][ T6320] UDF-fs: error (device loop3): udf_process_sequence: Primary Volume Descriptor not found! [ 346.813114][ T6320] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 346.923826][ T6320] UDF-fs: error (device loop3): udf_read_inode: (ino 1408) failed !bh [ 346.927810][ T6328] syz.1.82 uses obsolete (PF_INET,SOCK_PACKET) [ 346.932532][ T6320] UDF-fs: error (device loop3): udf_fill_super: Error in udf_iget, block=96, partition=0 [ 347.871284][ T6340] overlayfs: failed to clone upperpath [ 348.590260][ T10] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 348.778942][ T6349] netlink: 8 bytes leftover after parsing attributes in process `syz.4.86'. [ 348.787991][ T6349] netlink: 4 bytes leftover after parsing attributes in process `syz.4.86'. [ 348.797328][ T6349] netlink: 'syz.4.86': attribute type 1 has an invalid length. [ 348.806155][ T6349] netlink: 10 bytes leftover after parsing attributes in process `syz.4.86'. [ 348.878713][ T10] usb 4-1: Using ep0 maxpacket: 16 [ 348.893599][ T10] usb 4-1: config 0 has an invalid interface number: 126 but max is 0 [ 348.902444][ T10] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 348.913748][ T10] usb 4-1: config 0 has no interface number 0 [ 348.920662][ T10] usb 4-1: config 0 interface 126 altsetting 0 has an endpoint descriptor with address 0xB7, changing to 0x87 [ 348.932860][ T10] usb 4-1: config 0 interface 126 altsetting 0 endpoint 0x87 has invalid maxpacket 34328, setting to 1024 [ 348.944643][ T10] usb 4-1: config 0 interface 126 altsetting 0 endpoint 0xA has invalid maxpacket 512, setting to 64 [ 348.956367][ T10] usb 4-1: config 0 interface 126 altsetting 0 endpoint 0x4 has an invalid bInterval 0, changing to 7 [ 348.971382][ T10] usb 4-1: config 0 interface 126 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 348.986275][ T10] usb 4-1: New USB device found, idVendor=0763, idProduct=1015, bcdDevice=56.88 [ 348.995826][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 349.031148][ T51] block nbd0: Receive control failed (result -107) [ 349.386262][ T10] usb 4-1: config 0 descriptor?? [ 349.395353][ T6345] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 349.532180][ T10] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 349.578318][ T6194] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 350.119239][ T10] usb 4-1: USB disconnect, device number 4 [ 350.161527][ T44] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 350.380186][ T44] usb 2-1: Using ep0 maxpacket: 32 [ 350.479416][ T44] usb 2-1: config 0 has an invalid interface number: 12 but max is 0 [ 350.487827][ T44] usb 2-1: config 0 has no interface number 0 [ 350.494563][ T44] usb 2-1: config 0 interface 12 has no altsetting 0 [ 350.792669][ T44] usb 2-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 350.802642][ T44] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 350.814994][ T44] usb 2-1: Product: syz [ 350.820742][ T44] usb 2-1: Manufacturer: syz [ 350.825606][ T44] usb 2-1: SerialNumber: syz [ 351.152262][ T44] usb 2-1: config 0 descriptor?? [ 351.615418][ T6021] udevd[6021]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.126/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 352.882482][ T6376] binder: 6374:6376 ioctl c0306201 0 returned -14 [ 354.647339][ T6387] loop4: detected capacity change from 0 to 8 [ 354.672500][ T6387] squashfs: Bad value for 'errors' [ 355.424967][ T44] f81534 2-1:0.12: f81534_set_register: reg: 1001 data: f1 failed: -71 [ 355.435331][ T44] f81534 2-1:0.12: f81534_find_config_idx: read failed: -71 [ 355.443665][ T44] f81534 2-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 355.451968][ T44] f81534 2-1:0.12: probe with driver f81534 failed with error -71 [ 355.571473][ T6194] veth0_vlan: entered promiscuous mode [ 355.710059][ T44] usb 2-1: USB disconnect, device number 4 [ 355.755689][ T6194] veth1_vlan: entered promiscuous mode [ 355.994506][ T6392] loop4: detected capacity change from 0 to 512 [ 356.043789][ T6392] EXT4-fs: Ignoring removed bh option [ 356.103309][ T6392] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 356.254998][ T6392] EXT4-fs error (device loop4): __ext4_iget:4984: inode #15: block 1803188595: comm syz.4.96: invalid block [ 356.326376][ T6392] EXT4-fs error (device loop4): ext4_orphan_get:1394: comm syz.4.96: couldn't read orphan inode 15 (err -117) [ 356.366672][ T6194] veth0_macvtap: entered promiscuous mode [ 356.423040][ T6194] veth1_macvtap: entered promiscuous mode [ 356.440763][ T6392] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 356.504944][ T6194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 356.516897][ T6194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 356.528282][ T6194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 356.540007][ T6194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 356.550180][ T6194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 356.565856][ T6194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 356.577488][ T6194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 356.588457][ T6194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 356.604119][ T6194] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 356.905918][ T6194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 356.916741][ T6194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 356.926962][ T6194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 356.937776][ T6194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 356.948284][ T6194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 356.959265][ T6194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 356.974095][ T6194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 356.986378][ T6194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 357.002017][ T6194] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 357.110501][ T6400] loop3: detected capacity change from 0 to 4096 [ 357.188331][ T6194] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 357.197427][ T6194] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 357.207292][ T6194] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 357.216777][ T6194] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 357.225712][ T5780] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 357.235947][ T6400] ntfs3(loop3): Different NTFS sector size (1024) and media sector size (512). [ 357.755516][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 357.762988][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 358.888695][ T6417] loop1: detected capacity change from 0 to 2048 [ 360.148355][ T6430] loop4: detected capacity change from 0 to 1024 [ 360.310534][ T6430] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 361.001398][ T6430] EXT4-fs error (device loop4): __ext4_remount:6749: comm syz.4.107: Abort forced by user [ 361.080891][ T6430] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [ 361.791833][ T5780] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 363.852651][ T6451] loop3: detected capacity change from 0 to 1024 [ 363.898678][ T6451] EXT4-fs: Ignoring removed nomblk_io_submit option [ 363.978857][ T6451] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 364.200585][ T6451] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 365.005256][ T5784] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 366.166447][ T6474] loop4: detected capacity change from 0 to 4096 [ 366.243483][ T6474] ntfs3(loop4): Different NTFS sector size (2048) and media sector size (512). [ 366.801399][ T10] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 366.998362][ T10] usb 2-1: Using ep0 maxpacket: 16 [ 367.051818][ T10] usb 2-1: config 0 has an invalid interface number: 223 but max is 0 [ 367.060536][ T10] usb 2-1: config 0 has no interface number 0 [ 367.066895][ T10] usb 2-1: config 0 interface 223 altsetting 1 endpoint 0x9 has an invalid bInterval 0, changing to 7 [ 367.079623][ T10] usb 2-1: config 0 interface 223 altsetting 1 endpoint 0x9 has invalid wMaxPacketSize 0 [ 367.090053][ T10] usb 2-1: config 0 interface 223 has no altsetting 0 [ 367.267664][ T10] usb 2-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 367.277251][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 367.286529][ T10] usb 2-1: Product: syz [ 367.291041][ T10] usb 2-1: Manufacturer: syz [ 367.299496][ T10] usb 2-1: SerialNumber: syz [ 367.393732][ T10] usb 2-1: config 0 descriptor?? [ 367.565018][ T6492] mac80211_hwsim hwsim2 ªªªªªª: renamed from wlan0 (while UP) [ 367.931540][ T5839] usb 2-1: USB disconnect, device number 5 [ 368.297699][ T6501] netlink: 'syz.4.122': attribute type 15 has an invalid length. [ 369.909075][ T6520] IPVS: sync thread started: state = BACKUP, mcast_ifn = macvlan0, syncid = 0, id = 0 [ 370.032438][ T1127] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 370.041530][ T1127] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 370.304537][ T6522] ipip0: entered promiscuous mode [ 370.310184][ T6522] ipip0: entered allmulticast mode [ 370.440931][ T1127] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 370.449304][ T1127] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 372.779125][ T5833] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 372.917263][ T6546] loop4: detected capacity change from 0 to 1764 [ 372.999834][ T5833] usb 2-1: Using ep0 maxpacket: 32 [ 373.036698][ T5833] usb 2-1: New USB device found, idVendor=041e, idProduct=403c, bcdDevice=cc.d7 [ 373.046298][ T5833] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 373.177446][ T5833] usb 2-1: config 0 descriptor?? [ 373.277222][ T5833] gspca_main: sq930x-2.14.0 probing 041e:403c [ 373.699163][ T5833] gspca_sq930x: ucbus_write failed -71 [ 373.705216][ T5833] sq930x 2-1:0.0: probe with driver sq930x failed with error -71 [ 373.820261][ T5833] usb 2-1: USB disconnect, device number 6 [ 374.014382][ T6557] loop5: detected capacity change from 0 to 64 [ 374.579547][ T6564] netlink: 20 bytes leftover after parsing attributes in process `syz.2.146'. [ 374.589125][ T6564] IPv6: NLM_F_REPLACE set, but no existing node found! [ 375.246309][ T6568] ===================================================== [ 375.253842][ T6568] BUG: KMSAN: uninit-value in nsim_get_ringparam+0xa8/0xe0 [ 375.261675][ T6568] nsim_get_ringparam+0xa8/0xe0 [ 375.266754][ T6568] ethtool_set_ringparam+0x268/0x570 [ 375.272432][ T6568] dev_ethtool+0x126d/0x2a40 [ 375.277302][ T6568] dev_ioctl+0xb0e/0x1280 [ 375.282119][ T6568] compat_sock_ioctl+0xeea/0x1360 [ 375.293605][ T6568] __se_compat_sys_ioctl+0x80f/0x1020 [ 375.301621][ T6568] __ia32_compat_sys_ioctl+0x93/0xe0 [ 375.307234][ T6568] ia32_sys_call+0x2226/0x4180 [ 375.312498][ T6568] __do_fast_syscall_32+0xb0/0x110 [ 375.317858][ T6568] do_fast_syscall_32+0x38/0x80 [ 375.323199][ T6568] do_SYSENTER_32+0x1f/0x30 [ 375.327928][ T6568] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 375.334725][ T6568] [ 375.337185][ T6568] Local variable kernel_ringparam created at: [ 375.343714][ T6568] ethtool_set_ringparam+0x96/0x570 [ 375.349373][ T6568] dev_ethtool+0x126d/0x2a40 [ 375.354237][ T6568] [ 375.356745][ T6568] CPU: 1 UID: 0 PID: 6568 Comm: syz.3.148 Not tainted 6.13.0-syzkaller-04788-g7004a2e46d16 #0 [ 375.367713][ T6568] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 375.378282][ T6568] ===================================================== [ 375.391521][ T6568] Disabling lock debugging due to kernel taint [ 375.397857][ T6568] Kernel panic - not syncing: kmsan.panic set ... [ 375.404556][ T6568] CPU: 1 UID: 0 PID: 6568 Comm: syz.3.148 Tainted: G B 6.13.0-syzkaller-04788-g7004a2e46d16 #0 [ 375.416656][ T6568] Tainted: [B]=BAD_PAGE [ 375.420990][ T6568] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 375.431258][ T6568] Call Trace: [ 375.434706][ T6568] [ 375.437786][ T6568] dump_stack_lvl+0x216/0x2d0 [ 375.442739][ T6568] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 375.448817][ T6568] dump_stack+0x1e/0x24 [ 375.453246][ T6568] panic+0x4e2/0xcf0 [ 375.457405][ T6568] ? kmsan_get_metadata+0xf1/0x1c0 [ 375.462787][ T6568] kmsan_report+0x2c7/0x2d0 [ 375.467669][ T6568] ? __msan_warning+0x95/0x120 [ 375.472652][ T6568] ? nsim_get_ringparam+0xa8/0xe0 [ 375.477906][ T6568] ? ethtool_set_ringparam+0x268/0x570 [ 375.483598][ T6568] ? dev_ethtool+0x126d/0x2a40 [ 375.488650][ T6568] ? dev_ioctl+0xb0e/0x1280 [ 375.493377][ T6568] ? compat_sock_ioctl+0xeea/0x1360 [ 375.498853][ T6568] ? __se_compat_sys_ioctl+0x80f/0x1020 [ 375.504695][ T6568] ? __ia32_compat_sys_ioctl+0x93/0xe0 [ 375.510489][ T6568] ? ia32_sys_call+0x2226/0x4180 [ 375.515695][ T6568] ? __do_fast_syscall_32+0xb0/0x110 [ 375.521240][ T6568] ? do_fast_syscall_32+0x38/0x80 [ 375.526507][ T6568] ? do_SYSENTER_32+0x1f/0x30 [ 375.531421][ T6568] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 375.538192][ T6568] ? __do_fast_syscall_32+0xb0/0x110 [ 375.543767][ T6568] ? do_fast_syscall_32+0x38/0x80 [ 375.549048][ T6568] ? do_SYSENTER_32+0x1f/0x30 [ 375.553960][ T6568] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 375.560753][ T6568] ? kmsan_get_metadata+0x13e/0x1c0 [ 375.566212][ T6568] ? kmsan_internal_set_shadow_origin+0x69/0x100 [ 375.572870][ T6568] ? kmsan_get_metadata+0x13e/0x1c0 [ 375.578328][ T6568] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 375.584488][ T6568] ? kmsan_get_metadata+0x13e/0x1c0 [ 375.589950][ T6568] ? kmsan_internal_memmove_metadata+0x91/0x230 [ 375.596523][ T6568] ? kmsan_get_metadata+0x13e/0x1c0 [ 375.602021][ T6568] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 375.608105][ T6568] __msan_warning+0x95/0x120 [ 375.612912][ T6568] nsim_get_ringparam+0xa8/0xe0 [ 375.617986][ T6568] ? __pfx_nsim_set_ringparam+0x10/0x10 [ 375.623769][ T6568] ? __pfx_nsim_get_ringparam+0x10/0x10 [ 375.629555][ T6568] ethtool_set_ringparam+0x268/0x570 [ 375.635100][ T6568] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 375.641199][ T6568] dev_ethtool+0x126d/0x2a40 [ 375.646119][ T6568] dev_ioctl+0xb0e/0x1280 [ 375.650785][ T6568] compat_sock_ioctl+0xeea/0x1360 [ 375.656128][ T6568] ? __pfx_compat_sock_ioctl+0x10/0x10 [ 375.661868][ T6568] __se_compat_sys_ioctl+0x80f/0x1020 [ 375.667550][ T6568] ? kmsan_internal_set_shadow_origin+0x69/0x100 [ 375.674199][ T6568] ? kmsan_get_metadata+0x13e/0x1c0 [ 375.679655][ T6568] __ia32_compat_sys_ioctl+0x93/0xe0 [ 375.685238][ T6568] ia32_sys_call+0x2226/0x4180 [ 375.690250][ T6568] __do_fast_syscall_32+0xb0/0x110 [ 375.695603][ T6568] ? irqentry_exit+0x16/0x60 [ 375.700477][ T6568] do_fast_syscall_32+0x38/0x80 [ 375.705587][ T6568] do_SYSENTER_32+0x1f/0x30 [ 375.710412][ T6568] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 375.717018][ T6568] RIP: 0023:0xf73ad579 [ 375.721291][ T6568] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 375.741169][ T6568] RSP: 002b:00000000f503655c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 375.749839][ T6568] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000008946 [ 375.758031][ T6568] RDX: 0000000020000080 RSI: 0000000000000000 RDI: 0000000000000000 [ 375.766191][ T6568] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 375.774351][ T6568] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 375.782517][ T6568] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 375.790706][ T6568] [ 375.794263][ T6568] Kernel Offset: disabled [ 375.798701][ T6568] Rebooting in 86400 seconds..