last executing test programs: 3m45.232558465s ago: executing program 1 (id=279): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000180)=0x7, 0x4) setsockopt$sock_int(r0, 0x1, 0x31, &(0x7f0000000200), 0x4) listen(r0, 0x0) close(0x3) 3m45.070428078s ago: executing program 1 (id=280): r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_emit_ethernet(0x3e, &(0x7f00000006c0)=ANY=[@ANYBLOB="ffffffffffff0180c200000086dd6012100800083a00fe80000000180000000001000000debbfe8000000000000000000000000000aa"], 0x0) 3m44.410593631s ago: executing program 1 (id=283): socket$netlink(0x10, 0x3, 0x0) syz_mount_image$vfat(&(0x7f0000001400), &(0x7f0000000040)='./file1\x00', 0x10, &(0x7f0000003a00)=ANY=[], 0x9, 0x2b4, &(0x7f00000001c0)="$eJzs3c9qK2UUAPAzydw06iJF3CiCA7pwVW7dummUChezUiKoCw3ee0GScOEWAlYw3lWfwKXv4SO4ceMbCG4Fd+2iMjKZmSZt0z+0MYX6+60O880538l8IVnl5Os3x8PHz5J4cfhHtNtJNHZiJ46S2IxG1H6MNACA++Moz+Pv/CaZaWP13QAA61B+/5fuuhcAYD0+/fyLj7u93u4nWdaO1zsHk34SEeODSb9c7z6Nb2MUT+JhdOI4Ij9Rxh896u1GmhU2453xdNIvMsdf/VbV7/4VMcvfjk5sLs/fzkp1frPKfTmy6D59ULfaidfO5KcR8ai3+96Z/IjxNPqtePfthf63ohO/fxPPYhSPo6gz3/+H7Sz7MP/p8Psvi22K/KQR/Y3ZfXN5c11nAgAAAAAAAAAAAAAAAAAAAADA/beVZUk5vmc2v6e4NJufM+k3j2frW1ltcb7PtJ4PlNSFyvlAeVQjeqZ5/FzP13mYZVle3TjPT+ON1B8LAAAAAAAAAAAAAAAAAAAAQGHvu/3hYDR68nwlQT0NoP5Z/03r7CxceSv2h4PmxQU3rr/X4rSBotdLb440jRU9lquCl4p+Vl55Y364n0UZ1Aez0r1e/aAsuj8cZNVS/ZCHg+Sqvdr1wf0yX4q0FbdtLJ+9JY7z02faPmn1dFZrRU+j9crilb36vfZPnufXq/P+n+UZVVeS2YiN6+3+oAqWvsAiaJ8/i18vLnjhR0bz1h86AAAAAAAAAAAAAAAAAADAUvMf/S5ZfHFpauM/awoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA1mz+//910I6IwShZuHIumFbJl91TBa14vnfHLxEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAID/gX8DAAD//3boRtk=") r0 = syz_open_dev$sndctrl(0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc0405519, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_open_procfs(0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x2, &(0x7f00000000c0)=0x81, 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21, @local}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x2b) pipe(&(0x7f0000000480)) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000440), 0xfecc) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r1, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f00000001c0)="fbd5f12f5572b12b42e9678b0030eff9f3ae62755a76395d72430000aebe2b108a87e865501a5f9e0383611afdd3f83ac3d5cfd7772a3ab48d0ba4b600731e357e38716c449fae7c28548a091405f44b8fd9b330babe36307b6041270ae01f1a1f5e3f650fc3b0756d481c364fca000000000000f76d", 0x76, 0x404c884, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0xc, &(0x7f0000000040), 0x4) 3m43.066193855s ago: executing program 1 (id=286): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file0\x00', 0x2a14000, &(0x7f0000000480)={[{@user_xattr}, {@init_itable_val={'init_itable', 0x3d, 0x3}}, {@discard}, {@max_batch_time={'max_batch_time', 0x3d, 0x4000000}}, {@block_validity}, {@i_version}, {}, {@min_batch_time={'min_batch_time', 0x3d, 0x8}}, {@max_batch_time={'max_batch_time', 0x3d, 0x6}}, {@noquota}, {@stripe={'stripe', 0x3d, 0xff}}, {@discard}, {@block_validity}, {@user_xattr}, {@grpid}]}, 0x1, 0x54f, &(0x7f0000000b00)="$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") r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mounts\x00') r1 = open(&(0x7f00000003c0)='./bus\x00', 0x14bb42, 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x89101a, 0x0) mount$bind(&(0x7f0000000040)='./file0/../file0\x00', &(0x7f0000000140)='./file0/../file0\x00', 0x0, 0x1217880, 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) sendfile(r1, r0, 0x0, 0x80000000) 3m41.577331741s ago: executing program 1 (id=293): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000440)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) r2 = dup(r1) ioctl$int_in(r2, 0x5452, &(0x7f0000000080)=0x5327) read$FUSE(r2, &(0x7f00000004c0)={0x2020}, 0x2020) 3m39.779802419s ago: executing program 1 (id=302): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=@newqdisc={0x2c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x0, 0x1}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x400dc}, 0x4000080) 3m39.420334502s ago: executing program 32 (id=302): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=@newqdisc={0x2c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x0, 0x1}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x400dc}, 0x4000080) 2m18.160589809s ago: executing program 5 (id=601): syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000001fc0)=@delchain={0x5dc, 0x65, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x4}, {0xffe0, 0x3}}, [@filter_kind_options=@f_u32={{0x8}, {0x5a0, 0x2, [@TCA_U32_LINK={0x8, 0x3, 0x3f5}, @TCA_U32_FLAGS={0x8, 0xb, 0x5}, @TCA_U32_INDEV={0x14, 0x8, 'veth1_to_bridge\x00'}, @TCA_U32_ACT={0x578, 0x7, [@m_mpls={0xbc, 0x12, 0x0, 0x0, {{0x9}, {0x3c, 0x2, 0x0, 0x1, [@TCA_MPLS_PROTO={0x6, 0x4, 0x6005}, @TCA_MPLS_LABEL={0x8, 0x5, 0x38993}, @TCA_MPLS_TC={0x5, 0x6, 0x4}, @TCA_MPLS_LABEL={0x8, 0x5, 0xbc27b}, @TCA_MPLS_TC={0x5, 0x6, 0x2}, @TCA_MPLS_TTL={0x5, 0x7, 0x1}, @TCA_MPLS_LABEL={0x8, 0x5, 0xf80e6}]}, {0x55, 0x6, "61cd2d3699db034f8f08430151bfb3f0819c1d4430abc1c2b9f8d835a1e10dae1a821ce1a7e2fcd26a93322f414a08eb783ba01be15256ed15fc2fa03568c8552b41b32a505e88edbfc27ee190ed6a1520"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x3}}}}, @m_mirred={0x160, 0x1e, 0x0, 0x0, {{0xb}, {0x64, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x8, 0x7, 0x20000000, 0xffff, 0x6}, 0x1}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x3, 0x8, 0x8, 0x8, 0x401}, 0x4}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x3a61, 0x5a68ce02, 0x10000000, 0x2eca, 0x5}, 0x3}}]}, {0xd1, 0x6, "71558f82c797ed40aa96cae0561caac80e37421fbe6b5847795e9152419bd6e36082801f37e53ccbea50d8b4e7d6d4cd06cec76ec462499bdf122811144a51b56146738d4d25cbd285f2e729dbbe3c6137f7cd123b784cfddefd732ecc306f6cd0dc9c82fffc866125185fd50c16a59b8228811ffa42a3fc06ae6c491841f2d3b022b410d20071f23972ad211e8d088570180a0b72ec30b207b439e9499530f5ed3add294c6979c4716758179993cb396d1a9e8371981dc62a436962aa697442d2123e008f091efa1ef638699b"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_police={0x64, 0x20, 0x0, 0x0, {{0xb}, {0x4}, {0x35, 0x6, "becc0dfba237e62806d749b491e4df74a2edaae87448c525c394a1cd2b702d5bf5d0417b2f2d65c8e351d44c338dd81ad3"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_xt={0xac, 0x15, 0x0, 0x0, {{0x7}, {0x5c, 0x2, 0x0, 0x1, [@TCA_IPT_HOOK={0x8}, @TCA_IPT_INDEX={0x8, 0x3, 0xfffffffe}, @TCA_IPT_TABLE={0x24, 0x1, 'raw\x00'}, @TCA_IPT_TABLE={0x24, 0x1, 'mangle\x00'}]}, {0x29, 0x6, "7cc4d4d8913023393152cf1483893cb72022204afc5a3c78451fb35e595b70d04ef5495ca4"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_ct={0x40, 0xb, 0x0, 0x0, {{0x7}, {0x4}, {0x15, 0x6, "3b8dd99ff628f0e136ea03ee3bb7e4eb97"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_ct={0x90, 0x1f, 0x0, 0x0, {{0x7}, {0x68, 0x2, 0x0, 0x1, [@TCA_CT_ACTION={0x6, 0x3, 0x7}, @TCA_CT_NAT_IPV4_MIN={0x8, 0x9, @initdev={0xac, 0x1e, 0x0, 0x0}}, @TCA_CT_ACTION={0x6, 0x3, 0x21}, @TCA_CT_LABELS_MASK={0x14, 0x8, "0600be9e48e760ba6779831df0129d79"}, @TCA_CT_NAT_IPV4_MAX={0x8, 0xa, @local}, @TCA_CT_LABELS_MASK={0x14, 0x8, "e7011bcc7a6b8ee870edb3e1d4364f94"}, @TCA_CT_ACTION={0x6, 0x3, 0x34}, @TCA_CT_LABELS={0x14, 0x7, "d8751d004f5c5b09b9d9000000000002"}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1}}}}, @m_ctinfo={0x40, 0xf, 0x0, 0x0, {{0xb}, {0x14, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0x8}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x9}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}, @m_ct={0x138, 0x2, 0x0, 0x0, {{0x7}, {0x60, 0x2, 0x0, 0x1, [@TCA_CT_NAT_IPV6_MAX={0x14, 0xc, @empty}, @TCA_CT_NAT_PORT_MIN={0x6, 0xd, 0x4e21}, @TCA_CT_NAT_PORT_MAX={0x6, 0xe, 0x4e20}, @TCA_CT_NAT_IPV6_MAX={0x14, 0xc, @rand_addr=' \x01\x00'}, @TCA_CT_MARK={0x8, 0x5, 0x8}, @TCA_CT_LABELS_MASK={0x14, 0x8, "0e16c0fbcfd4e59e5f04cfa3cef75f58"}, @TCA_CT_ZONE={0x6, 0x4, 0x40}]}, {0xb3, 0x6, "a1f2a4ce007ddd8790543600a2420ec559f8c649a2a9f3d420934096de08ac63d9c315e8dded6fb2508c68041b7a0aaceed27574893969cda1525b9c8934a0e1e629652c69b92b0c6af575f0df47a043720f08c20d25a11fd3d0a1a33bb49821dd083349fa0d176cd4a307e71c04cd22f512591403a4b3bf2f517e65c5c9da8db780c47af490bf4f5a3657faefcdd5726a3328052df3f62a23cdddee72c32714d8e6fe2a05fbf6e706ce8982979ef8"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x1}}}}]}]}}, @TCA_RATE={0x6}, @TCA_CHAIN={0x8}]}, 0x5dc}, 0x1, 0x0, 0x0, 0x1}, 0x20000810) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020025797a31000000000900010073797a300000000008"], 0xe8}}, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x8}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 2m17.806806167s ago: executing program 5 (id=602): r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000d40)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r1, &(0x7f0000000ec0)={0x0, 0x0, &(0x7f0000000e80)={&(0x7f0000000180)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="0100feffffff000000002000000008000300", @ANYRES32=r2, @ANYBLOB="14002d800500010005000000060002"], 0x30}}, 0x4080) 2m17.28961931s ago: executing program 5 (id=607): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r1 = accept$inet(0xffffffffffffffff, 0x0, 0x0) listen(r1, 0x80000001) getsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000240), &(0x7f0000000280)=0x4) sendto$inet6(r0, 0x0, 0x0, 0x2404401d, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x20048804) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) bind$packet(0xffffffffffffffff, 0x0, 0x0) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000000), 0x8) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) r4 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r5 = syz_init_net_socket$x25(0x9, 0x5, 0x0) bind$x25(r5, &(0x7f0000000e00), 0x12) bind$x25(r4, &(0x7f0000000080), 0x12) r6 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) bind$netrom(0xffffffffffffffff, 0x0, 0xfffffffffffffd85) ioctl$sock_inet_SIOCSIFFLAGS(r6, 0x8914, &(0x7f0000000700)={'bond0\x00'}) shutdown(r0, 0x1) 2m16.245785115s ago: executing program 5 (id=612): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file0\x00', 0x2a14000, &(0x7f0000000480)={[{@user_xattr}, {@init_itable_val={'init_itable', 0x3d, 0x3}}, {@discard}, {@max_batch_time={'max_batch_time', 0x3d, 0x4000000}}, {@block_validity}, {@i_version}, {}, {@min_batch_time={'min_batch_time', 0x3d, 0x8}}, {@max_batch_time={'max_batch_time', 0x3d, 0x6}}, {@noquota}, {@stripe={'stripe', 0x3d, 0xff}}, {@discard}, {@block_validity}, {@user_xattr}, {@grpid}]}, 0x1, 0x54f, &(0x7f0000000b00)="$eJzs3d9rW1UcAPDvTdv91nUwhopIYQ9O5tK19ccEH+aj6HCg7zO0d2U0WUaTjrUO3B7ciy8yBBEH4ru++zj8B/wrBjoYMoo++BK56U2XrUmbZdnamc8HbnvOvTc995t7v6fn5iQkgKE1kf0oRLwcEd8kEQfbto1GvnFibb/V+1dnsyWJRuPTv5JI8nWt/ZP89/688lJE/PZVxPHCxnZryysLpXI5Xczrk/XKpcna8sqJC5XSfDqfXpyemTn19sz0e+++M7BY3zj7z/ef3P7w1NdHV7/75e6hm0mcjgP5tvY4nsC19spETOTPyVicfmTHqQE0tpMk230A9GUkz/OxyPqAgzGSZz3w//dlRDSAIZXIfxhSrXFA695+QPfBz417H6zdAG2Mf3TttZHY07w32reaPHRnlN3vjg+g/ayNX/+8dTNbYnCvQwBs6dr1iDg5Orqx/0vy/q9/J3vY59E29H/w7NzOxj9vdhr/FNbHP9Fh/LO/Q+72Y+v8L9wdQDNdZeO/9zuOf9cnrcZH8toLzTHfWHL+QjnN+rYXI+JYjO3O6pvN55xavdPotq19/JctWfutsWB+HHdHdz/8mLlSvfQkMbe7dz3ilY7j32T9/Ccdzn/2fJztsY0j6a3Xum3bOv6nq/FTxOsdz/+DGa1k8/nJyeb1MNm6Kjb6+8aR37u1v93xZ+d/3+bxjyft87W1x2/jxz3/pt229Xv970o+a5Z35euulOr1xamIXcnHG9dPP3hsq97aP4v/2NHN+79O1//eiPi8x/hvHP751f7jf7qy+Oce6/w/fuHOR1/80K393s7/W83SsXxNL/1frwf4JM8dAAAAAAAA7DSFiDgQSaG4Xi4UisW193ccjn2FcrVWP36+unRxLpqflR2PsUJrpvtg2/shpvL3w7bq04/UZyLiUER8O7K3WS/OVstz2x08AAAAAAAAAAAAAAAAAAAA7BD7u3z+P/PHyHYfHfDU+cpvGF5b5v8gvukJ2JH8/4fhJf9heMl/GF7yH4aX/IfhJf9heMl/GF7yHwAAAAAAAAAAAAAAAAAAAAAAAAAAAAbq7Jkz2dJYvX91NqvPXV5eWqhePjGX1haKlaXZ4mx18VJxvlqdL6fF2Wplq79XrlYvTU3H0pXJelqrT9aWV85VqksX6+cuVErz6bl07JlEBQAAAAAAAAAAAAAAAAAAAM+X2vLKQqlcThcVFPoqjO6Mw1AYcGG7eyYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeOC/AAAA///ktDiZ") r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mounts\x00') r1 = open(&(0x7f00000003c0)='./bus\x00', 0x14bb42, 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x89101a, 0x0) mount$bind(&(0x7f0000000040)='./file0/../file0\x00', &(0x7f0000000140)='./file0/../file0\x00', 0x0, 0x1217880, 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) sendfile(r1, r0, 0x0, 0x80000000) 2m13.956468573s ago: executing program 5 (id=622): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x1, &(0x7f00000000c0)=0x7b, 0x4) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @loopback}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 2m12.980899749s ago: executing program 5 (id=627): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0x2710, @host}, 0x10) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) listen(r0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) r2 = accept4(r0, 0x0, 0x0, 0x0) recvmsg$kcm(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)=""/150, 0x96}], 0x5}, 0x0) 2m11.539870442s ago: executing program 33 (id=627): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0x2710, @host}, 0x10) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) listen(r0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) r2 = accept4(r0, 0x0, 0x0, 0x0) recvmsg$kcm(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)=""/150, 0x96}], 0x5}, 0x0) 7.054043485s ago: executing program 0 (id=1224): syz_emit_ethernet(0x52, &(0x7f00000007c0)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaaaa86dd608a27f2001c2c00fe8000000000000000000000000000bbfe8000000000000000000000000000aa000000f6"], 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x2, &(0x7f00000001c0)=0x7ff, 0x4) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r1, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090000006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a688138dea09b776cbfa784cbf550bf3074fb0d775da4df5a3f48bbdf452eeb6b923da9d0e25b80f76a873664b5753444fe05f33e5f91045540836c3cd6af10f0cd018f0c6f57f926ac959a5628c45088fbe0c87fbe6cbcda4662d2a12f6d00", 0xca, 0x1, 0x0, 0x0) splice(r1, 0x0, r0, 0x0, 0x406f413, 0x0) 5.343062232s ago: executing program 4 (id=1233): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="04003ee0b4528c95a02997b85f1a0000000000"], 0x50) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x200000000000011, 0x4000000000080002, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) bind$packet(r2, &(0x7f0000000040)={0x11, 0x0, r5}, 0x14) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000004000)=@newtaction={0x48, 0x30, 0x25, 0x0, 0x0, {}, [{0x34, 0x1, [@m_pedit={0x30, 0x1, 0x0, 0x0, {{0xa}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x48}}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@gettaction={0x28, 0x32, 0x6dd711a25f4cb68b, 0x0, 0x0, {}, [@action_gd=@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}]}]}, 0x28}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r7) writev(r1, &(0x7f0000000780)=[{&(0x7f0000000380)="390000001300034700bb65e1c3e4ffff010000000100000056000000250000001900040004e0144000000007fd17e5ffff0800040000000000", 0x39}], 0x1) r8 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_group_source_req(r8, 0x29, 0x2e, &(0x7f0000000340)={0x51, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @local}}}, 0x108) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000006040000000000f93132", 0x39}], 0x1) r9 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r9, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) sendmsg$nl_route(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1, 0x5502000000000000}, 0x0) socket$netlink(0x10, 0x3, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={0x0, 0x44}}, 0x0) unshare(0x48000000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r11, 0x89f1, &(0x7f0000000900)={'ip6tnl0\x00', @random="0600002000"}) 5.116990963s ago: executing program 3 (id=1234): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB], 0x7c}, 0x1, 0x0, 0x0, 0x6084}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000300), 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)=ANY=[@ANYBLOB="98030000", @ANYRES16=r2, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r3, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c0900005603330080b0c000ffffffffffff"], 0x398}}, 0x0) 4.57228662s ago: executing program 6 (id=1237): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3400000003010103"], 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) sendmsg$IPSET_CMD_ADD(r0, 0x0, 0x1) sendmsg$NFT_MSG_GETSET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, 0xa, 0xa, 0x201, 0x0, 0x0, {0x7, 0x0, 0x7}}, 0x14}}, 0x4040000) 4.567207614s ago: executing program 3 (id=1238): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000002d00)=@delchain={0x40, 0x65, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff2}}, [@filter_kind_options=@f_route={{0xa}, {0x10, 0x2, [@TCA_ROUTE4_CLASSID={0x8, 0x1, {0xa, 0xe}}, @TCA_ROUTE4_ACT={0x4}]}}]}, 0x40}}, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x7e}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41, 0xb00}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 3.954826107s ago: executing program 2 (id=1239): socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x2a, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_sctp(0xa, 0x1, 0x84) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_smc(0x2b, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) socket$nl_route(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) socket$kcm(0x29, 0x2, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000008500000061000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000a000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000e4ff000000000000000000630100000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r1, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70) 3.690927436s ago: executing program 3 (id=1240): r0 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r0, 0x6) setsockopt(r0, 0x10d, 0xa, &(0x7f00001c9fff)="03", 0x19) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000580)={0xffffffffffffffff, 0x18000000000002a0, 0xe, 0x0, &(0x7f00000003c0)="12cdde26e7c496e99a9cf8625ec9", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000800)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x3, [@const={0x0, 0x0, 0x0, 0xa, 0x2}, @func_proto={0x0, 0x0, 0x0, 0xd, 0x3}]}, {0x0, [0x61]}}, 0x0, 0x33, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000f00)=@newtfilter={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x74, r3}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) 3.392799426s ago: executing program 6 (id=1241): r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmsg$802154_raw(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)="f10c04800000000100cb3046e577", 0xe}}, 0x20001000) recvmmsg(r0, &(0x7f0000002e40)=[{{0x0, 0x0, 0x0}}], 0x40000000000019e, 0x142, 0x0) 3.23919705s ago: executing program 4 (id=1242): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x2, 0x300) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000240)={0xab1, 0x8, 0x7c4}, 0x10) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001380)=ANY=[@ANYRESDEC=r0, @ANYRES16=r0, @ANYRESOCT=r0, @ANYRESDEC=r0, @ANYRESDEC=r0, @ANYRES64=r0], 0x2c}}, 0x0) sendmsg$IPSET_CMD_DEL(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[], 0x90}}, 0x0) r1 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) ioctl$SIOCAX25GETINFOOLD(r1, 0x89e3, &(0x7f0000000100)) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) shutdown(r2, 0x0) listen(r2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0x6}, [@call={0x85, 0x0, 0x0, 0x41}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x0, 0x8, 0x0, &(0x7f0000000100)="a408f7004084f4cd", 0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="b4050000200080006110600000000000c60000000000000095000000000000009f33ef60916e6e893f1eeb0be20000d072f5b89c3043c47c896ce0bc8731fa595b6b4d45ef26dcca5582054d54d53cd2b685b431c70ea948259c4c869b4fc8db714e4b94bdae214fa68a051d4dca7d2647bec1fc89398d2b9000f224891060017c4700de60beac671e8e8f00cb03588aa6007e71f871ab5c2ff88afc6002084e5b52710aeee835cf0d78e45f70983826fb8579c1fb47d2c59005cff414ed55b0d18a9d446935fb332bb593ee341ab59016f81860324b800c00000000000092d9c5fe34ccb80a61ffcb3363073f"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x48) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000200)={0x44, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x44}}, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000000906010200000000000000000200000208000940000000390900020073797a3100000000050001000700000014000880100007800c0001800c0001407f000001"], 0x44}, 0x1, 0x0, 0x0, 0x10000082}, 0x4000080) 3.23625385s ago: executing program 0 (id=1243): r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="c018030021000b12d25a80648c2594f90224fc60100c0b4002000000053582c137153e370248078000", 0x29}], 0x1}, 0x0) 3.107810015s ago: executing program 2 (id=1244): setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, 0x0, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000100)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x80000006}]}, 0x10) sendto$inet6(0xffffffffffffffff, &(0x7f0000004b40)="c5", 0x1, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x12}, 0x1c) 2.663939781s ago: executing program 2 (id=1245): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) pipe(&(0x7f0000000100)) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0xe) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x44, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x88adfda5}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x44}}, 0x0) 2.642496348s ago: executing program 4 (id=1246): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000300)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @remote}, 0x14) socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x2, 0x300) syz_emit_ethernet(0x2a, &(0x7f00000003c0)=ANY=[], 0x0) 2.473426775s ago: executing program 3 (id=1247): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r1) sendmsg$NFNL_MSG_COMPAT_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0xffffffffffffff6d, &(0x7f0000000080)={&(0x7f00000006c0)=ANY=[], 0x14}}, 0x48001) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0xbc) sendmsg$nl_route(r0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newtfilter={0x64, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0x5}}, [@filter_kind_options=@f_flow={{0x9}, {0x34, 0x2, [@TCA_FLOW_EMATCHES={0x30, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xffff}}, @TCA_EMATCH_TREE_LIST={0x24, 0x2, 0x0, 0x1, [@TCF_EM_META={0x20, 0x1, 0x0, 0x0, {{}, [@TCA_EM_META_HDR={0xc}, @TCA_EM_META_LVALUE={0x8, 0x2, [@TCF_META_TYPE_INT=0x1]}]}}]}]}]}}]}, 0x64}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 2.350541288s ago: executing program 6 (id=1248): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a30000000"], 0x7c}, 0x1, 0x0, 0x0, 0x6084}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000300), 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)=ANY=[@ANYBLOB="98030000", @ANYRES16=r2, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r3, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c0900005603330080b0c000ffffffffffff"], 0x398}}, 0x0) 2.271724532s ago: executing program 0 (id=1249): r0 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r0, 0x0, 0x0) getsockopt$inet_int(r0, 0x10d, 0xf2, &(0x7f0000000000), &(0x7f0000000280)=0x4) 1.776084105s ago: executing program 4 (id=1250): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000002340)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000012c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000000)={@cgroup=r0, r1, 0x2f, 0x18, 0x4, @void, @value}, 0x20) 1.718377589s ago: executing program 0 (id=1251): r0 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x29, &(0x7f0000000540)=0x10001, 0x4) r1 = socket(0x10, 0x3, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000008000000000000001000000940000000fad433ec50000000f00008095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='netlink_extack\x00', r2}, 0x10) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x5}, 0x10) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c0000001a00050a000000000000000002000000fc"], 0x1c}}, 0x0) 1.661102879s ago: executing program 2 (id=1252): sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="740000000001016caa0000000000000002000000240001801400018008000100e000000108000200ac1414000c0002800500010000000000240002801400018008000100e000040108000200e00000010c00028005000100000000000800074000000000100006800c00038006"], 0x74}, 0x1, 0x0, 0x0, 0x40004}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) socket$netlink(0x10, 0x3, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="3400000011000500000000000000000007000000", @ANYRES32=r2, @ANYBLOB="000000000000000014001a80100004"], 0x34}}, 0x0) 1.442525289s ago: executing program 6 (id=1253): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x88, 0x1, &(0x7f0000000080), 0x4) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000003100)={&(0x7f0000002fc0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x4}, {0x0, [0x2e, 0x30]}}, 0x0, 0x1c, 0x0, 0x1, 0x7f, 0x0, @void, @value}, 0x28) socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=@updpolicy={0x180, 0x15, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x32}}, [@XFRMA_IF_ID={0x8, 0x1f, 0x2}, @etimer_thresh={0x8}, @policy={0xac, 0x7, {{@in=@dev={0xac, 0x14, 0x14, 0x13}, @in=@loopback, 0x4e21, 0xffff, 0x4e24, 0x3, 0x2, 0xa0, 0x80, 0x33}, {0xfffffffffffffffe, 0x1, 0x8, 0x6, 0x4, 0x7, 0x1ff, 0x1ff}, {0x5, 0x7fffffffffffffff, 0x2, 0x7}, 0x200, 0x6e6bb7, 0x0, 0x1, 0x7, 0x3}}, @offload={0xc, 0x1c, {0x0, 0x2}}]}, 0x180}}, 0x0) 1.43504661s ago: executing program 3 (id=1254): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_STATION(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)={0x30, r3, 0x1, 0x0, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x7}]}, 0x30}}, 0x0) 927.578363ms ago: executing program 2 (id=1255): setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, 0x0, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000100)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x80000006}]}, 0x10) sendto$inet6(0xffffffffffffffff, &(0x7f0000004b40)="c5", 0x1, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x12}, 0x1c) 821.31375ms ago: executing program 0 (id=1256): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) 760.02232ms ago: executing program 4 (id=1257): r0 = socket$inet6(0xa, 0x80003, 0x9) connect$inet6(r0, &(0x7f0000000240)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000001e00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@dstopts_2292={{0x18}}, @dstopts_2292={{0x18}}], 0x30}}], 0x2, 0x8004) 538.683361ms ago: executing program 3 (id=1258): r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmsg$802154_raw(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)="f10c04800000000100cb3046e577", 0xe}}, 0x20001000) recvmmsg(r0, 0x0, 0x0, 0x142, 0x0) 494.737407ms ago: executing program 6 (id=1259): r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="c018030021000b12d25a80648c2594f90224fc60100c0b4002000000053582c137153e370248078000", 0x29}], 0x1}, 0x0) 171.305519ms ago: executing program 2 (id=1260): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000300)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @remote}, 0x14) socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x2, 0x300) syz_emit_ethernet(0x2a, &(0x7f00000003c0)=ANY=[], 0x0) 131.3589ms ago: executing program 0 (id=1261): r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x3fe3aa0262d8c583, 0x0, 0xfffffffc, {0x0, 0x0, 0x0, r2, {0x0, 0x2}, {0xffff, 0xffff}, {0x0, 0xc}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_SPLIT_GSO={0x8}, @TCA_CAKE_FWMARK={0x8, 0x12, 0x2}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x80}, 0x0) 78.614416ms ago: executing program 4 (id=1262): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000140)) ioctl$PPPIOCSPASS(r0, 0x40107447, &(0x7f0000002a40)={0x2, &(0x7f00000007c0)=[{0x40}, {0x6, 0x0, 0x0, 0x2}]}) write$ppp(r0, &(0x7f0000000900)='\x00\x00', 0x2) 0s ago: executing program 6 (id=1263): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a30000000"], 0x7c}, 0x1, 0x0, 0x0, 0x6084}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000300), 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)=ANY=[@ANYBLOB="98030000", @ANYRES16=r2, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r3, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c0900005603330080b0c000ffffffffffff"], 0x398}}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.4' (ED25519) to the list of known hosts. syzkaller login: [ 205.296509][ T5772] cgroup: Unknown subsys name 'net' [ 205.432423][ T5772] cgroup: Unknown subsys name 'cpuset' [ 205.450693][ T5772] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 229.388525][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 229.395480][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 260.430731][ T5772] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 264.651139][ T5790] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 264.691439][ T5794] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 264.700746][ T5794] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 264.711922][ T5800] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 264.720897][ T5800] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 264.732726][ T5801] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 264.752163][ T5801] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 264.755431][ T5800] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 264.767097][ T5801] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 264.773604][ T5800] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 264.779926][ T5801] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 264.782956][ T5805] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 264.791285][ T5801] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 264.799010][ T5805] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 264.815480][ T5805] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 264.818128][ T5801] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 264.833657][ T5805] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 264.842841][ T5805] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 264.843519][ T5801] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 264.863392][ T5801] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 264.872907][ T5801] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 264.883450][ T5801] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 264.892956][ T5801] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 264.897394][ T5805] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 264.910136][ T5801] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 264.924031][ T51] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 264.935509][ T51] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 264.948639][ T5801] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 264.960892][ T5801] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 264.969678][ T5801] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 266.134684][ T5791] chnl_net:caif_netlink_parms(): no params data found [ 266.493630][ T5788] chnl_net:caif_netlink_parms(): no params data found [ 266.752977][ T5795] chnl_net:caif_netlink_parms(): no params data found [ 266.896523][ T51] Bluetooth: hci0: command tx timeout [ 266.970475][ T51] Bluetooth: hci3: command tx timeout [ 267.132576][ T51] Bluetooth: hci2: command tx timeout [ 267.138304][ T51] Bluetooth: hci1: command tx timeout [ 267.145929][ T5801] Bluetooth: hci4: command tx timeout [ 267.193818][ T5798] chnl_net:caif_netlink_parms(): no params data found [ 267.349866][ T5792] chnl_net:caif_netlink_parms(): no params data found [ 267.819373][ T5788] bridge0: port 1(bridge_slave_0) entered blocking state [ 267.827328][ T5788] bridge0: port 1(bridge_slave_0) entered disabled state [ 267.835917][ T5788] bridge_slave_0: entered allmulticast mode [ 267.845476][ T5788] bridge_slave_0: entered promiscuous mode [ 267.862862][ T5791] bridge0: port 1(bridge_slave_0) entered blocking state [ 267.870855][ T5791] bridge0: port 1(bridge_slave_0) entered disabled state [ 267.878711][ T5791] bridge_slave_0: entered allmulticast mode [ 267.888399][ T5791] bridge_slave_0: entered promiscuous mode [ 267.926516][ T5788] bridge0: port 2(bridge_slave_1) entered blocking state [ 267.935930][ T5788] bridge0: port 2(bridge_slave_1) entered disabled state [ 267.944240][ T5788] bridge_slave_1: entered allmulticast mode [ 267.954693][ T5788] bridge_slave_1: entered promiscuous mode [ 267.968606][ T5791] bridge0: port 2(bridge_slave_1) entered blocking state [ 267.979389][ T5791] bridge0: port 2(bridge_slave_1) entered disabled state [ 267.987391][ T5791] bridge_slave_1: entered allmulticast mode [ 267.996949][ T5791] bridge_slave_1: entered promiscuous mode [ 268.262563][ T5788] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 268.292385][ T5791] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 268.355520][ T5788] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 268.439283][ T5791] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 268.484853][ T5795] bridge0: port 1(bridge_slave_0) entered blocking state [ 268.493090][ T5795] bridge0: port 1(bridge_slave_0) entered disabled state [ 268.501025][ T5795] bridge_slave_0: entered allmulticast mode [ 268.510503][ T5795] bridge_slave_0: entered promiscuous mode [ 268.714379][ T5798] bridge0: port 1(bridge_slave_0) entered blocking state [ 268.722907][ T5798] bridge0: port 1(bridge_slave_0) entered disabled state [ 268.730838][ T5798] bridge_slave_0: entered allmulticast mode [ 268.740115][ T5798] bridge_slave_0: entered promiscuous mode [ 268.752828][ T5795] bridge0: port 2(bridge_slave_1) entered blocking state [ 268.760736][ T5795] bridge0: port 2(bridge_slave_1) entered disabled state [ 268.768509][ T5795] bridge_slave_1: entered allmulticast mode [ 268.777573][ T5795] bridge_slave_1: entered promiscuous mode [ 268.793826][ T5788] team0: Port device team_slave_0 added [ 268.801981][ T5792] bridge0: port 1(bridge_slave_0) entered blocking state [ 268.810021][ T5792] bridge0: port 1(bridge_slave_0) entered disabled state [ 268.817793][ T5792] bridge_slave_0: entered allmulticast mode [ 268.826807][ T5792] bridge_slave_0: entered promiscuous mode [ 268.846086][ T5788] team0: Port device team_slave_1 added [ 268.918501][ T5798] bridge0: port 2(bridge_slave_1) entered blocking state [ 268.926571][ T5798] bridge0: port 2(bridge_slave_1) entered disabled state [ 268.934521][ T5798] bridge_slave_1: entered allmulticast mode [ 268.942866][ T5798] bridge_slave_1: entered promiscuous mode [ 268.980217][ T5801] Bluetooth: hci0: command tx timeout [ 269.022071][ T5792] bridge0: port 2(bridge_slave_1) entered blocking state [ 269.030194][ T5792] bridge0: port 2(bridge_slave_1) entered disabled state [ 269.037896][ T5792] bridge_slave_1: entered allmulticast mode [ 269.047228][ T5792] bridge_slave_1: entered promiscuous mode [ 269.055799][ T5801] Bluetooth: hci3: command tx timeout [ 269.095826][ T5791] team0: Port device team_slave_0 added [ 269.105573][ T5788] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 269.113023][ T5788] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 269.139977][ T5788] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 269.217731][ T5801] Bluetooth: hci1: command tx timeout [ 269.219461][ T51] Bluetooth: hci4: command tx timeout [ 269.223659][ T5801] Bluetooth: hci2: command tx timeout [ 269.250504][ T5795] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 269.294164][ T5788] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 269.301788][ T5788] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 269.328529][ T5788] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 269.382283][ T5791] team0: Port device team_slave_1 added [ 269.416079][ T5798] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 269.437111][ T5798] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 269.455614][ T5795] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 269.526888][ T5792] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 269.646547][ T5798] team0: Port device team_slave_0 added [ 269.693717][ T5792] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 269.710472][ T5795] team0: Port device team_slave_0 added [ 269.790881][ T5791] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 269.798100][ T5791] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 269.824806][ T5791] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 269.844430][ T5798] team0: Port device team_slave_1 added [ 269.854109][ T5791] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 269.862546][ T5791] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 269.889183][ T5791] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 269.910988][ T5795] team0: Port device team_slave_1 added [ 270.112351][ T5792] team0: Port device team_slave_0 added [ 270.122388][ T5795] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 270.129721][ T5795] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 270.156113][ T5795] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 270.216688][ T5788] hsr_slave_0: entered promiscuous mode [ 270.228631][ T5788] hsr_slave_1: entered promiscuous mode [ 270.274183][ T5798] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 270.281863][ T5798] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 270.308508][ T5798] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 270.327791][ T5792] team0: Port device team_slave_1 added [ 270.338561][ T5795] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 270.346089][ T5795] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 270.372564][ T5795] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 270.480863][ T5798] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 270.488076][ T5798] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 270.514868][ T5798] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 270.603252][ T5792] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 270.610665][ T5792] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 270.637196][ T5792] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 270.685156][ T5791] hsr_slave_0: entered promiscuous mode [ 270.694719][ T5791] hsr_slave_1: entered promiscuous mode [ 270.705293][ T5791] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 270.713219][ T5791] Cannot create hsr debugfs directory [ 270.774650][ T5792] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 270.782284][ T5792] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 270.809038][ T5792] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 271.053059][ T5801] Bluetooth: hci0: command tx timeout [ 271.086236][ T5795] hsr_slave_0: entered promiscuous mode [ 271.096289][ T5795] hsr_slave_1: entered promiscuous mode [ 271.105296][ T5795] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 271.114650][ T5795] Cannot create hsr debugfs directory [ 271.133735][ T5801] Bluetooth: hci3: command tx timeout [ 271.167608][ T5798] hsr_slave_0: entered promiscuous mode [ 271.177547][ T5798] hsr_slave_1: entered promiscuous mode [ 271.186967][ T5798] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 271.194940][ T5798] Cannot create hsr debugfs directory [ 271.300269][ T5801] Bluetooth: hci2: command tx timeout [ 271.300952][ T5797] Bluetooth: hci4: command tx timeout [ 271.305875][ T5801] Bluetooth: hci1: command tx timeout [ 271.541617][ T5792] hsr_slave_0: entered promiscuous mode [ 271.552684][ T5792] hsr_slave_1: entered promiscuous mode [ 271.562857][ T5792] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 271.572518][ T5792] Cannot create hsr debugfs directory [ 272.627647][ T5788] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 272.682610][ T5788] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 272.718481][ T5788] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 272.757540][ T5788] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 272.899890][ T5791] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 272.952000][ T5798] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 273.007061][ T5791] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 273.027709][ T5798] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 273.052128][ T5798] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 273.093614][ T5791] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 273.114538][ T5798] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 273.134849][ T51] Bluetooth: hci0: command tx timeout [ 273.177582][ T5791] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 273.209463][ T51] Bluetooth: hci3: command tx timeout [ 273.253554][ T5795] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 273.367875][ T5795] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 273.385970][ T51] Bluetooth: hci1: command tx timeout [ 273.395487][ T5801] Bluetooth: hci4: command tx timeout [ 273.395554][ T5797] Bluetooth: hci2: command tx timeout [ 273.470180][ T5795] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 273.591527][ T5795] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 273.650990][ T5792] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 273.748086][ T5792] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 273.784473][ T5792] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 273.843856][ T5792] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 274.355030][ T5788] 8021q: adding VLAN 0 to HW filter on device bond0 [ 274.648296][ T5788] 8021q: adding VLAN 0 to HW filter on device team0 [ 274.770947][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 274.778719][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 274.856715][ T5798] 8021q: adding VLAN 0 to HW filter on device bond0 [ 274.895983][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 274.904039][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 274.929315][ T5795] 8021q: adding VLAN 0 to HW filter on device bond0 [ 274.995483][ T5791] 8021q: adding VLAN 0 to HW filter on device bond0 [ 275.133298][ T5795] 8021q: adding VLAN 0 to HW filter on device team0 [ 275.284706][ T5798] 8021q: adding VLAN 0 to HW filter on device team0 [ 275.368162][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 275.375990][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 275.432912][ T5791] 8021q: adding VLAN 0 to HW filter on device team0 [ 275.462730][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 275.470634][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 275.584792][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 275.592959][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 275.609683][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 275.617647][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 275.723884][ T5792] 8021q: adding VLAN 0 to HW filter on device bond0 [ 275.827224][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 275.835129][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 275.857100][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 275.865166][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 276.072863][ T5798] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 276.083965][ T5798] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 276.127469][ T5792] 8021q: adding VLAN 0 to HW filter on device team0 [ 276.343290][ T1138] bridge0: port 1(bridge_slave_0) entered blocking state [ 276.351416][ T1138] bridge0: port 1(bridge_slave_0) entered forwarding state [ 276.431607][ T5795] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 276.469647][ T1138] bridge0: port 2(bridge_slave_1) entered blocking state [ 276.477520][ T1138] bridge0: port 2(bridge_slave_1) entered forwarding state [ 276.854883][ T5792] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 276.866714][ T5792] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 277.766423][ T5788] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 278.406289][ T5788] veth0_vlan: entered promiscuous mode [ 278.423574][ T5798] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 278.534176][ T5791] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 278.570366][ T5788] veth1_vlan: entered promiscuous mode [ 278.687679][ T5795] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 278.907046][ T5792] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 279.032256][ T5788] veth0_macvtap: entered promiscuous mode [ 279.138096][ T5798] veth0_vlan: entered promiscuous mode [ 279.149419][ T5788] veth1_macvtap: entered promiscuous mode [ 279.284231][ T5798] veth1_vlan: entered promiscuous mode [ 279.407608][ T5795] veth0_vlan: entered promiscuous mode [ 279.436401][ T5788] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 279.446750][ T5791] veth0_vlan: entered promiscuous mode [ 279.563782][ T5788] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 279.588247][ T5795] veth1_vlan: entered promiscuous mode [ 279.620973][ T5791] veth1_vlan: entered promiscuous mode [ 279.725763][ T5788] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 279.735252][ T5788] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 279.744726][ T5788] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 279.753989][ T5788] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 279.839897][ T5798] veth0_macvtap: entered promiscuous mode [ 279.930612][ T5798] veth1_macvtap: entered promiscuous mode [ 280.069850][ T5795] veth0_macvtap: entered promiscuous mode [ 280.167835][ T5798] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 280.178950][ T5798] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 280.194449][ T5798] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 280.244486][ T5791] veth0_macvtap: entered promiscuous mode [ 280.265975][ T5795] veth1_macvtap: entered promiscuous mode [ 280.311207][ T5791] veth1_macvtap: entered promiscuous mode [ 280.395486][ T5798] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 280.406413][ T5798] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 280.423577][ T5798] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 280.553932][ T5795] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 280.565122][ T5795] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 280.575539][ T5795] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 280.586450][ T5795] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 280.602059][ T5795] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 280.643143][ T5791] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 280.654400][ T5791] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 280.666179][ T5791] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 280.677040][ T5791] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 280.687332][ T5791] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 280.698235][ T5791] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 280.716016][ T5791] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 280.752940][ T5798] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 280.762269][ T5798] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 280.771631][ T5798] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 280.780967][ T5798] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 280.814937][ T5795] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 280.826037][ T5795] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 280.836476][ T5795] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 280.847237][ T5795] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 280.862691][ T5795] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 280.986740][ T5791] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 280.997722][ T5791] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 281.008036][ T5791] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 281.019084][ T5791] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 281.029381][ T5791] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 281.040391][ T5791] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 281.058655][ T5791] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 281.121032][ T5795] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 281.130407][ T5795] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 281.139659][ T5795] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 281.149053][ T5795] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 281.322337][ T5791] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 281.331766][ T5791] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 281.343415][ T5791] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 281.352770][ T5791] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 282.267083][ T5792] veth0_vlan: entered promiscuous mode [ 282.414431][ T5792] veth1_vlan: entered promiscuous mode [ 282.813522][ T5792] veth0_macvtap: entered promiscuous mode [ 282.919279][ T5792] veth1_macvtap: entered promiscuous mode [ 283.113584][ T5792] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 283.126391][ T5792] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 283.140743][ T5792] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 283.153038][ T5792] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 283.163257][ T5792] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 283.174165][ T5792] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 283.184322][ T5792] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 283.195328][ T5792] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 283.212735][ T5792] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 283.442412][ T5792] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 283.456201][ T5792] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 283.469172][ T5792] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 283.480746][ T5792] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 283.491269][ T5792] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 283.502410][ T5792] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 283.512634][ T5792] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 283.523858][ T5792] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 283.543459][ T5792] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 283.792080][ T5792] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 283.801573][ T5792] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 283.810966][ T5792] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 283.820144][ T5792] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 287.255152][ T34] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 287.263474][ T34] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 287.467353][ T1138] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 287.476925][ T1138] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 287.761315][ T5788] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 288.360578][ T29] audit: type=1326 audit(1730454013.898:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5962 comm="syz.0.1" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f269a17e719 code=0x0 [ 288.435089][ T34] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 288.443534][ T34] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 288.548496][ T1138] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 288.558051][ T1138] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 288.607144][ T4889] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 288.615360][ T4889] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 288.820477][ T3896] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 288.829048][ T3896] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 288.986136][ T34] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 288.995796][ T34] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 289.310650][ T4889] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 289.319085][ T4889] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 289.542167][ T5970] loop2: detected capacity change from 0 to 128 [ 289.705510][ T5970] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 289.841464][ T5970] ext4 filesystem being mounted at /0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 290.534133][ T5791] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 290.900803][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 290.907654][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 290.967003][ T5991] loop0: detected capacity change from 0 to 512 [ 291.115969][ T5991] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 291.129711][ T5991] ext4 filesystem being mounted at /2/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 291.214995][ T5995] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 291.371471][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 291.380109][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 291.721285][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 291.729699][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 291.953387][ T6003] loop1: detected capacity change from 0 to 1024 [ 292.006294][ T6003] EXT4-fs: Ignoring removed orlov option [ 292.012901][ T6003] EXT4-fs: Ignoring removed nomblk_io_submit option [ 292.193522][ T5788] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 292.194510][ T5848] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 292.411533][ T6003] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 292.452842][ T5848] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 292.464419][ T5848] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 292.475479][ T5848] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 292.489320][ T5848] usb 3-1: New USB device found, idVendor=046d, idProduct=c293, bcdDevice= 0.00 [ 292.503844][ T5848] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 292.684953][ T6015] loop0: detected capacity change from 0 to 16 [ 292.774727][ T5848] usb 3-1: config 0 descriptor?? [ 292.987693][ T6015] erofs: (device loop0): mounted with root inode @ nid 36. [ 293.568111][ T6005] loop2: detected capacity change from 0 to 1024 [ 293.887814][ T6025] loop3: detected capacity change from 0 to 1024 [ 293.922248][ T6005] EXT4-fs: Ignoring removed orlov option [ 293.932178][ T6005] EXT4-fs: Ignoring removed nomblk_io_submit option [ 294.744796][ T5798] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 294.811544][ T6005] EXT4-fs (loop2): Test dummy encryption mode enabled [ 295.224223][ T6005] EXT4-fs: error -4 creating inode table initialization thread [ 295.239931][ T6005] EXT4-fs (loop2): mount failed [ 296.087526][ T5848] usbhid 3-1:0.0: can't add hid device: -71 [ 296.094576][ T5848] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 296.326401][ T6053] loop0: detected capacity change from 0 to 1024 [ 296.345571][ T5848] usb 3-1: USB disconnect, device number 2 [ 296.410902][ T6053] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 296.929775][ T1933] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 297.130758][ T1933] usb 4-1: config 9 has an invalid interface number: 200 but max is 1 [ 297.141006][ T1933] usb 4-1: config 9 has an invalid interface number: 32 but max is 1 [ 297.149658][ T1933] usb 4-1: config 9 has no interface number 0 [ 297.156036][ T1933] usb 4-1: config 9 has no interface number 1 [ 297.162675][ T1933] usb 4-1: config 9 interface 200 has no altsetting 0 [ 297.169895][ T1933] usb 4-1: config 9 interface 32 has no altsetting 0 [ 297.572137][ T1933] usb 4-1: New USB device found, idVendor=0421, idProduct=01d0, bcdDevice=44.b3 [ 297.581779][ T1933] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 297.590363][ T1933] usb 4-1: Product: syz [ 297.594827][ T1933] usb 4-1: Manufacturer: syz [ 297.599945][ T1933] usb 4-1: SerialNumber: syz [ 297.879919][ T1933] usb 4-1: bad CDC descriptors [ 297.991023][ T1933] usb 4-1: USB disconnect, device number 2 [ 298.447300][ T6080] loop4: detected capacity change from 0 to 256 [ 298.504436][ T6080] FAT-fs (loop4): Directory bread(block 1285) failed [ 298.616689][ T6080] syzkaller0: entered promiscuous mode [ 298.622774][ T6080] syzkaller0: entered allmulticast mode [ 299.452002][ T6092] loop1: detected capacity change from 0 to 512 [ 299.534314][ T6092] ext4: Unknown parameter 'subj_role' [ 299.681723][ T6098] loop0: detected capacity change from 0 to 256 [ 299.741547][ T6098] exfat: Unknown parameter 'ÿÿÿÿ' [ 299.745492][ T6092] ./file0: Can't lookup blockdev [ 300.201741][ T6103] ecryptfs_parse_options: eCryptfs: unrecognized option [&@] [ 300.211101][ T6103] ecryptfs_parse_options: eCryptfs: unrecognized option [211] [ 300.220083][ T6103] ecryptfs_parse_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README [ 300.234030][ T6103] Error parsing options; rc = [-22] [ 300.921689][ T6111] loop1: detected capacity change from 0 to 512 [ 300.980204][ T6111] EXT4-fs: Ignoring removed oldalloc option [ 301.059394][ T6111] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 301.179493][ T6119] loop0: detected capacity change from 0 to 16 [ 301.262625][ T6119] erofs: (device loop0): mounted with root inode @ nid 36. [ 301.264825][ T6111] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 301.283739][ T6111] ext4 filesystem being mounted at /12/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 301.359977][ T1933] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 301.434314][ T6111] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 301.801526][ T1933] usb 5-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 301.812214][ T1933] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 301.848647][ T1933] usb 5-1: config 0 descriptor?? [ 302.045072][ T5798] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 302.959648][ T5848] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 303.186541][ T1933] pegasus 5-1:0.0: can't reset MAC [ 303.193557][ T1933] pegasus 5-1:0.0: probe with driver pegasus failed with error -5 [ 303.215696][ T5848] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 303.226636][ T5848] usb 2-1: config 0 has no interfaces? [ 303.232877][ T5848] usb 2-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 303.244775][ T5848] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 303.311387][ T1933] usb 5-1: USB disconnect, device number 2 [ 303.441134][ T5848] usb 2-1: config 0 descriptor?? [ 304.743410][ T6160] loop3: detected capacity change from 0 to 2048 [ 304.859188][ T6160] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 304.961084][ T6168] loop0: detected capacity change from 0 to 1024 [ 305.213813][ T29] audit: type=1800 audit(1730454030.748:3): pid=6168 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.69" name="bus" dev="loop0" ino=0 res=0 errno=0 [ 305.437825][ T5795] UDF-fs: warning (device loop3): udf_evict_inode: Inode 1367 (mode 120777) has inode size 4 different from extent length 512. Filesystem need not be standards compliant. [ 305.570645][ T6175] netlink: 4 bytes leftover after parsing attributes in process `syz.3.74'. [ 305.653344][ T29] audit: type=1326 audit(1730454031.158:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6172 comm="syz.2.71" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f232c97e719 code=0x0 [ 306.188026][ T1933] usb 2-1: USB disconnect, device number 2 [ 306.537963][ T6184] loop0: detected capacity change from 0 to 128 [ 306.696321][ T6184] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 306.749070][ T6186] loop1: detected capacity change from 0 to 512 [ 306.930973][ T6186] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 307.461183][ T6196] loop2: detected capacity change from 0 to 1024 [ 307.490153][ T29] audit: type=1800 audit(1730454033.008:5): pid=6186 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.76" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 307.534716][ T6196] ======================================================= [ 307.534716][ T6196] WARNING: The mand mount option has been deprecated and [ 307.534716][ T6196] and is ignored by this kernel. Remove the mand [ 307.534716][ T6196] option from the mount to silence this warning. [ 307.534716][ T6196] ======================================================= [ 307.832964][ T5798] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 307.875482][ T6199] loop0: detected capacity change from 0 to 256 [ 308.118698][ T6201] loop3: detected capacity change from 0 to 512 [ 308.192807][ T6201] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 308.202169][ T6201] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 308.211834][ T6201] EXT4-fs (loop3): blocks per group (71) and clusters per group (20800) inconsistent [ 308.287565][ T6204] loop4: detected capacity change from 0 to 512 [ 308.347995][ T6204] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 308.544157][ T6204] EXT4-fs error (device loop4): mb_free_blocks:1948: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt. [ 308.846335][ T6204] EXT4-fs (loop4): Remounting filesystem read-only [ 308.858032][ T6204] EXT4-fs (loop4): 1 truncate cleaned up [ 308.865970][ T6204] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 309.461766][ T6225] loop2: detected capacity change from 0 to 128 [ 309.591132][ T5792] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 309.667102][ T6225] process 'syz.2.90' launched './file0' with NULL argv: empty string added [ 310.979249][ T5848] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 311.007666][ T6246] loop3: detected capacity change from 0 to 256 [ 311.059441][ T5849] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 311.179313][ T5848] usb 2-1: Using ep0 maxpacket: 16 [ 311.219579][ T5848] usb 2-1: too many configurations: 129, using maximum allowed: 8 [ 311.267031][ T5848] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 311.278156][ T5848] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 18 [ 311.313104][ T5849] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 311.324768][ T5849] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 311.335224][ T5849] usb 3-1: New USB device found, idVendor=056a, idProduct=00d3, bcdDevice= 0.00 [ 311.348294][ T5849] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 311.390685][ T5848] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 311.401654][ T5848] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 18 [ 311.432559][ T5849] usb 3-1: config 0 descriptor?? [ 311.445870][ T25] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 311.501539][ T5848] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 311.512466][ T5848] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 18 [ 311.585403][ T6250] loop0: detected capacity change from 0 to 1024 [ 311.594579][ T5848] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 311.605805][ T5848] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 18 [ 311.619374][ T6250] ext4: Unknown parameter 'noacl' [ 311.650119][ T25] usb 5-1: Using ep0 maxpacket: 8 [ 311.660585][ T6242] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 311.669906][ T25] usb 5-1: config 0 has an invalid interface number: 150 but max is 0 [ 311.678615][ T25] usb 5-1: config 0 has an invalid interface number: 112 but max is 0 [ 311.687412][ T25] usb 5-1: config 0 has an invalid interface number: 3 but max is 0 [ 311.696035][ T25] usb 5-1: config 0 has 3 interfaces, different from the descriptor's value: 1 [ 311.705488][ T25] usb 5-1: config 0 has no interface number 0 [ 311.712006][ T25] usb 5-1: config 0 has no interface number 1 [ 311.718382][ T25] usb 5-1: config 0 has no interface number 2 [ 311.724992][ T25] usb 5-1: config 0 interface 150 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 311.738468][ T25] usb 5-1: too many endpoints for config 0 interface 112 altsetting 233: 104, using maximum allowed: 30 [ 311.757645][ T25] usb 5-1: config 0 interface 112 altsetting 233 has 1 endpoint descriptor, different from the interface descriptor's value: 104 [ 311.773252][ T25] usb 5-1: config 0 interface 150 has no altsetting 0 [ 311.780581][ T25] usb 5-1: config 0 interface 112 has no altsetting 0 [ 311.787754][ T25] usb 5-1: New USB device found, idVendor=1395, idProduct=0300, bcdDevice=81.75 [ 311.797349][ T25] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 311.813939][ T6242] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 311.871883][ T5848] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 311.879872][ T5849] usbhid 3-1:0.0: can't add hid device: -71 [ 311.882615][ T5848] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 18 [ 311.889538][ T5849] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 311.924562][ T6252] netlink: 80 bytes leftover after parsing attributes in process `syz.3.100'. [ 312.020650][ T5848] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 312.031466][ T5848] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 18 [ 312.118344][ T5849] usb 3-1: USB disconnect, device number 3 [ 312.167628][ T5848] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 312.179087][ T5848] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 18 [ 312.268612][ T5848] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 312.280147][ T5848] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 18 [ 312.332879][ T25] usb 5-1: config 0 descriptor?? [ 312.420152][ T5848] usb 2-1: string descriptor 0 read error: -71 [ 312.427015][ T5848] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 312.436916][ T5848] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 312.587009][ T5848] usb 2-1: can't set config #1, error -71 [ 312.612872][ T5848] usb 2-1: USB disconnect, device number 3 [ 313.005091][ T6261] loop2: detected capacity change from 0 to 256 [ 313.014422][ T6261] exfat: Deprecated parameter 'namecase' [ 313.229861][ T44] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 313.292139][ T6259] loop0: detected capacity change from 0 to 512 [ 313.303010][ T6259] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 313.381223][ T6259] EXT4-fs (loop0): invalid journal inode [ 313.391263][ T6259] EXT4-fs (loop0): can't get journal size [ 313.419139][ T44] usb 4-1: Using ep0 maxpacket: 32 [ 313.434622][ T6261] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d) [ 313.482598][ T6259] EXT4-fs (loop0): 1 truncate cleaned up [ 313.496510][ T6259] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 313.570417][ T25] usb 5-1: string descriptor 0 read error: -71 [ 313.613916][ T25] usb 5-1: USB disconnect, device number 3 [ 313.679536][ T44] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 313.696327][ T44] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 313.709883][ T44] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 313.719625][ T44] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 313.782628][ T5985] udevd[5985]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.150/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 313.822587][ T44] usb 4-1: config 0 descriptor?? [ 313.830678][ T6258] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 313.968617][ T44] hub 4-1:0.0: USB hub found [ 314.327276][ T5788] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 314.485991][ T44] hub 4-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 314.496236][ T6271] loop2: detected capacity change from 0 to 128 [ 314.747925][ T44] hid-generic 0003:046D:C314.0001: unknown main item tag 0x0 [ 314.777779][ T44] hid-generic 0003:046D:C314.0001: hidraw0: USB HID v8.00 Device [HID 046d:c314] on usb-dummy_hcd.3-1/input0 [ 314.802309][ T6271] FAT-fs (loop2): Directory bread(block 32) failed [ 314.810054][ T6271] FAT-fs (loop2): Directory bread(block 33) failed [ 314.817030][ T6271] FAT-fs (loop2): Directory bread(block 34) failed [ 314.828065][ T6271] FAT-fs (loop2): Directory bread(block 35) failed [ 314.836503][ T6271] FAT-fs (loop2): Directory bread(block 36) failed [ 314.843551][ T6271] FAT-fs (loop2): Directory bread(block 37) failed [ 314.850641][ T6271] FAT-fs (loop2): Directory bread(block 38) failed [ 314.857486][ T6271] FAT-fs (loop2): Directory bread(block 39) failed [ 314.864697][ T6271] FAT-fs (loop2): Directory bread(block 40) failed [ 314.871735][ T6271] FAT-fs (loop2): Directory bread(block 41) failed [ 315.254822][ T5849] usb 4-1: USB disconnect, device number 3 [ 315.267636][ T6276] loop1: detected capacity change from 0 to 256 [ 316.239070][ T5849] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 316.314914][ T6284] loop0: detected capacity change from 0 to 1024 [ 316.446308][ T5849] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 316.461253][ T5849] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 316.555065][ T5849] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 316.568458][ T5849] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 316.578362][ T5849] usb 5-1: SerialNumber: syz [ 316.630558][ T6291] mmap: syz.2.113 (6291): VmData 37466112 exceed data ulimit 82. Update limits or use boot option ignore_rlimit_data. [ 316.931847][ T5849] usb 5-1: 0:2 : does not exist [ 317.114533][ T5849] usb 5-1: USB disconnect, device number 4 [ 317.525315][ T6298] loop0: detected capacity change from 0 to 512 [ 317.535225][ T6294] loop1: detected capacity change from 0 to 2048 [ 317.861442][ T6294] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 318.231101][ T6298] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 318.244735][ T6298] ext4 filesystem being mounted at /27/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 318.790865][ T6314] loop2: detected capacity change from 0 to 256 [ 318.806325][ T6312] syz.3.121 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 319.283822][ T5788] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 319.375819][ T6320] loop1: detected capacity change from 0 to 256 [ 319.626414][ T6320] exFAT-fs (loop1): failed to load upcase table (idx : 0x00011a39, chksum : 0xa7648d78, utbl_chksum : 0xe619d30d) [ 319.833929][ T5951] udevd[5951]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 320.091838][ T6330] loop2: detected capacity change from 0 to 512 [ 320.162287][ T6330] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 320.288629][ T6330] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #16: comm syz.2.131: invalid indirect mapped block 83886080 (level 1) [ 320.423385][ T6330] EXT4-fs (loop2): 1 orphan inode deleted [ 320.429648][ T6330] EXT4-fs (loop2): 1 truncate cleaned up [ 320.437456][ T6330] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 320.568391][ T6338] netlink: 8 bytes leftover after parsing attributes in process `syz.4.134'. [ 321.341679][ T5791] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 321.899924][ T5849] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 322.162947][ T6356] loop0: detected capacity change from 0 to 256 [ 322.189578][ T6355] loop1: detected capacity change from 0 to 512 [ 322.269207][ T5849] usb 4-1: config 0 has an invalid interface number: 51 but max is 0 [ 322.277866][ T5849] usb 4-1: config 0 contains an unexpected descriptor of type 0x1, skipping [ 322.287048][ T5849] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 322.300975][ T5849] usb 4-1: config 0 has no interface number 0 [ 322.612656][ T6355] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 322.627321][ T6355] ext4 filesystem being mounted at /27/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 322.642398][ T5849] usb 4-1: New USB device found, idVendor=cc35, idProduct=693f, bcdDevice=e7.0f [ 322.654048][ T5849] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 322.662975][ T5849] usb 4-1: Product: syz [ 322.667459][ T5849] usb 4-1: Manufacturer: syz [ 322.672664][ T5849] usb 4-1: SerialNumber: syz [ 322.955114][ T5849] usb 4-1: config 0 descriptor?? [ 323.062778][ T5849] cdc_acm 4-1:0.51: invalid descriptor buffer length [ 323.395957][ T5849] usb 4-1: USB disconnect, device number 4 [ 323.496342][ T6367] loop0: detected capacity change from 0 to 128 [ 323.852610][ T5798] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 323.916148][ T6372] loop4: detected capacity change from 0 to 128 [ 324.080775][ T6372] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 324.231618][ T6372] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 325.555040][ T6390] loop0: detected capacity change from 0 to 256 [ 326.240574][ T6393] syz.4.156 (6393) used obsolete PPPIOCDETACH ioctl [ 326.480572][ T6397] loop3: detected capacity change from 0 to 256 [ 326.806702][ T6397] exFAT-fs (loop3): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 327.157878][ T6400] loop0: detected capacity change from 0 to 164 [ 327.284740][ T6404] binder: 6401:6404 ioctl 4018620d 0 returned -22 [ 327.327635][ T6404] binder: 6401:6404 ioctl c0306201 0 returned -14 [ 327.329356][ T6400] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 327.373318][ T6405] Bluetooth: MGMT ver 1.23 [ 327.410472][ T6404] binder: 6401:6404 ioctl c0306201 200001c0 returned -14 [ 328.786212][ T6420] loop2: detected capacity change from 0 to 256 [ 329.326649][ T6433] loop0: detected capacity change from 0 to 256 [ 329.552055][ T6432] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 330.227567][ T6439] loop2: detected capacity change from 0 to 256 [ 330.243724][ T6439] exfat: Deprecated parameter 'namecase' [ 330.250121][ T6439] exfat: Deprecated parameter 'namecase' [ 330.815025][ T6439] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x1fdf94bc, utbl_chksum : 0xe619d30d) [ 331.324464][ T6449] loop3: detected capacity change from 0 to 512 [ 331.557004][ T6450] loop0: detected capacity change from 0 to 2048 [ 331.609660][ T6449] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2240: inode #12: comm syz.3.174: corrupted in-inode xattr: invalid ea_ino [ 331.695782][ T6449] EXT4-fs error (device loop3): ext4_orphan_get:1393: comm syz.3.174: couldn't read orphan inode 12 (err -117) [ 331.760346][ T6449] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 331.776411][ T44] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 331.782461][ T6450] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 331.848709][ T6459] Zero length message leads to an empty skb [ 331.911422][ T6449] EXT4-fs error (device loop3): ext4_add_entry:2437: inode #2: comm syz.3.174: Directory hole found for htree leaf block 0 [ 331.950214][ T44] usb 5-1: Using ep0 maxpacket: 16 [ 331.985927][ T44] usb 5-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0 [ 331.996497][ T44] usb 5-1: config 0 interface 0 altsetting 1 endpoint 0x89 has invalid wMaxPacketSize 0 [ 332.007015][ T44] usb 5-1: config 0 interface 0 has no altsetting 0 [ 332.300104][ T5788] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 332.346598][ T44] usb 5-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 332.356290][ T44] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 332.365209][ T44] usb 5-1: Product: syz [ 332.369878][ T44] usb 5-1: Manufacturer: syz [ 332.374770][ T44] usb 5-1: SerialNumber: syz [ 332.400618][ T6466] loop1: detected capacity change from 0 to 1024 [ 332.426829][ T6466] EXT4-fs: Ignoring removed orlov option [ 332.440920][ T6466] EXT4-fs: Ignoring removed nomblk_io_submit option [ 332.491040][ T44] usb 5-1: config 0 descriptor?? [ 332.563500][ T5795] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 332.721360][ T6466] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 332.748496][ T6455] deleting an unspecified loop device is not supported. [ 332.764861][ T44] usb 5-1: Can not set alternate setting to 1, error: -71 [ 332.772823][ T44] synaptics_usb 5-1:0.0: probe with driver synaptics_usb failed with error -71 [ 332.777208][ T6468] loop2: detected capacity change from 0 to 256 [ 332.794557][ T44] usb 5-1: USB disconnect, device number 5 [ 333.154379][ T6474] loop3: detected capacity change from 0 to 256 [ 333.268062][ T6474] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 333.542311][ T5798] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 333.634273][ T6474] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=512, location=512 [ 333.644746][ T6474] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found [ 333.652974][ T6474] UDF-fs: Scanning with blocksize 512 failed [ 333.772867][ T6468] FAT-fs (loop2): Directory bread(block 64) failed [ 333.780018][ T6468] FAT-fs (loop2): Directory bread(block 65) failed [ 333.787148][ T6468] FAT-fs (loop2): Directory bread(block 66) failed [ 333.794205][ T6468] FAT-fs (loop2): Directory bread(block 67) failed [ 333.801560][ T6468] FAT-fs (loop2): Directory bread(block 68) failed [ 333.808386][ T6468] FAT-fs (loop2): Directory bread(block 69) failed [ 333.815493][ T6468] FAT-fs (loop2): Directory bread(block 70) failed [ 333.822498][ T6468] FAT-fs (loop2): Directory bread(block 71) failed [ 333.829757][ T6468] FAT-fs (loop2): Directory bread(block 72) failed [ 333.836579][ T6468] FAT-fs (loop2): Directory bread(block 73) failed [ 333.973273][ T6474] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 334.094601][ T6474] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 334.572566][ T6468] syz.2.181: attempt to access beyond end of device [ 334.572566][ T6468] loop2: rw=524288, sector=1768, nr_sectors = 4 limit=256 [ 334.591639][ T6468] syz.2.181: attempt to access beyond end of device [ 334.591639][ T6468] loop2: rw=0, sector=1768, nr_sectors = 4 limit=256 [ 334.636845][ T29] audit: type=1800 audit(1730454060.148:6): pid=6468 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.181" name="file1" dev="loop2" ino=1048607 res=0 errno=0 [ 334.704513][ T6468] syz.2.181: attempt to access beyond end of device [ 334.704513][ T6468] loop2: rw=0, sector=1768, nr_sectors = 4 limit=256 [ 334.828395][ T6468] syz.2.181: attempt to access beyond end of device [ 334.828395][ T6468] loop2: rw=0, sector=1768, nr_sectors = 4 limit=256 [ 335.562987][ T6496] loop1: detected capacity change from 0 to 256 [ 335.622859][ T6496] exfat: Deprecated parameter 'namecase' [ 335.629213][ T6496] exfat: Deprecated parameter 'namecase' [ 335.768238][ T6499] loop0: detected capacity change from 0 to 512 [ 335.769270][ T6496] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x1fdf94bc, utbl_chksum : 0xe619d30d) [ 335.905024][ T6499] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.193: invalid indirect mapped block 256 (level 2) [ 335.956668][ T6504] loop3: detected capacity change from 0 to 512 [ 335.966885][ T6504] EXT4-fs: quotafile must be on filesystem root [ 335.989152][ T5849] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 336.008576][ T6499] EXT4-fs (loop0): 2 truncates cleaned up [ 336.131499][ T6499] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 336.205236][ T5849] usb 3-1: config 3 has an invalid interface number: 1 but max is 0 [ 336.214055][ T5849] usb 3-1: config 3 has no interface number 0 [ 336.326461][ T5849] usb 3-1: New USB device found, idVendor=0eef, idProduct=0001, bcdDevice=ae.d2 [ 336.336241][ T5849] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 336.345081][ T5849] usb 3-1: Product: syz [ 336.349709][ T5849] usb 3-1: Manufacturer: syz [ 336.354680][ T5849] usb 3-1: SerialNumber: syz [ 336.450234][ T5849] usbhid 3-1:3.1: couldn't find an input interrupt endpoint [ 336.673884][ T5788] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 336.703622][ T5849] usb 3-1: USB disconnect, device number 4 [ 336.887658][ T6511] loop1: detected capacity change from 0 to 128 [ 336.996057][ T6511] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 337.045565][ T6511] ext4 filesystem being mounted at /41/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 337.070760][ T6509] loop3: detected capacity change from 0 to 2048 [ 337.323152][ T6509] UDF-fs: error (device loop3): udf_read_tagged: tag checksum failed, block 160: 0x0b != 0xd4 [ 337.470939][ T6509] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 337.723508][ T6511] fscrypt (loop1, inode 12): Missing crypto API support for AES-256-CBC-CTS (API name: "cts(cbc(aes))") [ 337.738002][ T6511] fscrypt (loop1, inode 12): Missing crypto API support for AES-256-CBC-CTS (API name: "cts(cbc(aes))") [ 338.460469][ T5849] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 339.106931][ T5798] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 339.162843][ T5849] usb 4-1: Using ep0 maxpacket: 16 [ 339.167369][ T6537] loop4: detected capacity change from 0 to 512 [ 339.202728][ T5849] usb 4-1: config 0 has an invalid interface number: 104 but max is 1 [ 339.212171][ T5849] usb 4-1: config 0 has an invalid interface number: 104 but max is 1 [ 339.220881][ T5849] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 339.230283][ T5849] usb 4-1: config 0 has no interface number 0 [ 339.236688][ T5849] usb 4-1: config 0 interface 104 altsetting 0 endpoint 0x8 has invalid maxpacket 2985, setting to 64 [ 339.248924][ T5849] usb 4-1: config 0 interface 104 has no altsetting 1 [ 339.262150][ T6537] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 339.386993][ T6537] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2863: Unable to expand inode 17. Delete some EAs or run e2fsck. [ 339.430667][ T6537] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #16: comm syz.4.201: invalid indirect mapped block 4294967295 (level 0) [ 339.462714][ T5849] usb 4-1: New USB device found, idVendor=1189, idProduct=0893, bcdDevice= 7.36 [ 339.473007][ T5849] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 339.474991][ T6537] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #16: comm syz.4.201: invalid indirect mapped block 4294967295 (level 1) [ 339.481369][ T5849] usb 4-1: Product: syz [ 339.481498][ T5849] usb 4-1: Manufacturer: syz [ 339.481616][ T5849] usb 4-1: SerialNumber: syz [ 339.559034][ T6537] EXT4-fs (loop4): 1 orphan inode deleted [ 339.565214][ T6537] EXT4-fs (loop4): 1 truncate cleaned up [ 339.573391][ T6537] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 339.604251][ T6537] EXT4-fs (loop4): shut down requested (1) [ 339.638598][ T5849] usb 4-1: config 0 descriptor?? [ 340.107410][ T6547] loop2: detected capacity change from 0 to 16 [ 340.236973][ T6547] erofs: (device loop2): mounted with root inode @ nid 36. [ 340.256742][ T5849] asix 4-1:0.104 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 340.270741][ T5849] asix 4-1:0.104: probe with driver asix failed with error -71 [ 340.564141][ T5849] usb 4-1: USB disconnect, device number 5 [ 340.658009][ T5792] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 341.608209][ T6560] loop2: detected capacity change from 0 to 764 [ 343.106179][ T6570] loop4: detected capacity change from 0 to 256 [ 343.202995][ T6574] loop0: detected capacity change from 0 to 256 [ 343.844928][ T6577] loop3: detected capacity change from 0 to 2048 [ 344.013112][ T6577] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 344.549834][ T6581] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 344.880029][ T6584] Bluetooth: hci0: Opcode 0x080f failed: -4 [ 345.699204][ T6594] loop0: detected capacity change from 0 to 512 [ 345.998054][ T6595] fuse: Bad value for 'fd' [ 346.252271][ T5801] Bluetooth: hci0: command 0x0c1a tx timeout [ 346.449291][ T6594] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 346.468036][ T6594] ext4 filesystem being mounted at /52/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 347.064961][ T6592] loop2: detected capacity change from 0 to 1024 [ 348.356241][ T5801] Bluetooth: hci0: command 0x0c1a tx timeout [ 348.357646][ T5788] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 348.851338][ T6612] loop2: detected capacity change from 0 to 256 [ 349.005228][ T6614] loop3: detected capacity change from 0 to 512 [ 349.081298][ T6614] EXT4-fs: quotafile must be on filesystem root [ 350.523208][ T6640] loop4: detected capacity change from 0 to 128 [ 350.533553][ T6640] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 350.663668][ T6640] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 350.879116][ C0] hrtimer: interrupt took 334773 ns [ 351.821706][ T6647] pim6reg1: entered allmulticast mode [ 351.936068][ T6651] pim6reg1: entered promiscuous mode [ 351.993837][ T44] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 352.189639][ T44] usb 3-1: Using ep0 maxpacket: 8 [ 352.253355][ T44] usb 3-1: config 11 has an invalid interface number: 95 but max is 0 [ 352.262109][ T44] usb 3-1: config 11 has no interface number 0 [ 352.269778][ T44] usb 3-1: config 11 interface 95 altsetting 64 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 352.278573][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 352.281410][ T44] usb 3-1: config 11 interface 95 altsetting 64 endpoint 0x82 has invalid wMaxPacketSize 0 [ 352.287963][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 352.303407][ T44] usb 3-1: config 11 interface 95 has no altsetting 0 [ 352.482592][ T44] usb 3-1: New USB device found, idVendor=10f0, idProduct=2002, bcdDevice=dc.4d [ 352.492508][ T44] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 352.505971][ T44] usb 3-1: Product: syz [ 352.512264][ T44] usb 3-1: Manufacturer: syz [ 352.517167][ T44] usb 3-1: SerialNumber: syz [ 353.103395][ T6646] loop2: detected capacity change from 0 to 8 [ 353.290439][ T5849] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 353.401029][ T6656] loop1: detected capacity change from 0 to 256 [ 353.502188][ T5849] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 353.513851][ T5849] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 353.524179][ T5849] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 353.542117][ T5849] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 353.552194][ T5849] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 353.583833][ T44] usbtouchscreen 3-1:11.95: probe with driver usbtouchscreen failed with error -90 [ 353.770812][ T5849] usb 5-1: config 0 descriptor?? [ 353.785990][ T44] usb 3-1: USB disconnect, device number 5 [ 354.399144][ T6664] loop2: detected capacity change from 0 to 256 [ 354.409667][ T6664] exfat: Deprecated parameter 'namecase' [ 354.415746][ T6664] exfat: Deprecated parameter 'namecase' [ 354.566279][ T5849] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 354.595042][ T5849] plantronics 0003:047F:FFFF.0002: No inputs registered, leaving [ 354.682648][ T6664] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x1fdf94bc, utbl_chksum : 0xe619d30d) [ 354.781558][ T5849] plantronics 0003:047F:FFFF.0002: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 355.126663][ T44] usb 5-1: USB disconnect, device number 6 [ 356.183217][ T6676] capability: warning: `syz.4.249' uses deprecated v2 capabilities in a way that may be insecure [ 358.898643][ T6694] loop1: detected capacity change from 0 to 256 [ 359.273288][ T6701] loop4: detected capacity change from 0 to 128 [ 359.341530][ T6701] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 359.629665][ T6702] loop2: detected capacity change from 0 to 512 [ 359.713646][ T6702] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 359.747081][ T6704] loop3: detected capacity change from 0 to 128 [ 360.370873][ T6704] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 360.445652][ T6704] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 360.847099][ T6702] EXT4-fs (loop2): 1 orphan inode deleted [ 360.853444][ T6702] EXT4-fs (loop2): 1 truncate cleaned up [ 360.861911][ T6702] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 360.967486][ T44] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 361.059775][ T6709] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 361.127622][ T6709] EXT4-fs (loop2): Remounting filesystem read-only [ 361.179190][ T44] usb 1-1: Using ep0 maxpacket: 8 [ 361.192805][ T44] usb 1-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 361.204653][ T44] usb 1-1: config 0 interface 0 has no altsetting 0 [ 361.216975][ T44] usb 1-1: New USB device found, idVendor=5543, idProduct=0045, bcdDevice= 0.00 [ 361.228152][ T44] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 361.448569][ T5791] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 361.476186][ T44] usb 1-1: config 0 descriptor?? [ 361.853121][ T6715] loop1: detected capacity change from 0 to 1024 [ 362.335683][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 362.355796][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 362.437734][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 362.458200][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 362.540569][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 362.665345][ T0] NOHZ tick-stop error: local softirq work is pending, handler #10!!! [ 363.203569][ T6715] hfsplus: xattr searching failed [ 363.477086][ T44] usb 1-1: string descriptor 0 read error: -71 [ 363.769229][ T0] NOHZ tick-stop error: local softirq work is pending, handler #c2!!! [ 363.789225][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 363.830856][ T6730] loop3: detected capacity change from 0 to 512 [ 363.864342][ T44] uclogic 0003:5543:0045.0003: failed retrieving string descriptor #200: -71 [ 363.882890][ T44] uclogic 0003:5543:0045.0003: failed retrieving pen parameters: -71 [ 363.896060][ T44] uclogic 0003:5543:0045.0003: failed probing pen v2 parameters: -71 [ 363.906946][ T44] uclogic 0003:5543:0045.0003: failed probing parameters: -71 [ 363.920677][ T44] uclogic 0003:5543:0045.0003: probe with driver uclogic failed with error -71 [ 364.034519][ T44] usb 1-1: USB disconnect, device number 2 [ 364.157492][ T6730] EXT4-fs (loop3): blocks per group (255) and clusters per group (8192) inconsistent [ 364.312106][ T6733] loop0: detected capacity change from 0 to 128 [ 364.446986][ T6733] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 364.516721][ T6736] loop4: detected capacity change from 0 to 256 [ 364.524031][ T4889] hfsplus: b-tree write err: -5, ino 4 [ 364.741439][ T6733] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 365.742885][ T6748] loop4: detected capacity change from 0 to 256 [ 365.758945][ T6747] loop0: detected capacity change from 0 to 512 [ 365.895781][ T6747] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 365.898106][ T6748] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 366.151287][ T6747] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 366.164708][ T6747] ext4 filesystem being mounted at /56/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 366.743747][ T6755] loop2: detected capacity change from 0 to 128 [ 366.805784][ T6755] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 366.965751][ T6755] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 367.492154][ T5788] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 368.146120][ T6774] loop1: detected capacity change from 0 to 256 [ 369.354557][ T6787] loop1: detected capacity change from 0 to 1024 [ 369.413872][ T6787] EXT4-fs: Ignoring removed i_version option [ 369.467260][ T6787] EXT4-fs (loop1): stripe (255) is not aligned with cluster size (16), stripe is disabled [ 369.595069][ T6787] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 370.948374][ T6805] loop4: detected capacity change from 0 to 128 [ 371.030165][ T6805] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 371.224515][ T6805] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 371.310468][ T6406] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 372.026430][ T6818] syz.3.297 uses obsolete (PF_INET,SOCK_PACKET) [ 372.829233][ T6827] netlink: 36 bytes leftover after parsing attributes in process `syz.4.300'. [ 372.838538][ T6827] netlink: 16 bytes leftover after parsing attributes in process `syz.4.300'. [ 372.847928][ T6827] netlink: 36 bytes leftover after parsing attributes in process `syz.4.300'. [ 372.857194][ T6827] netlink: 36 bytes leftover after parsing attributes in process `syz.4.300'. [ 373.020793][ T4889] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 373.301659][ T4889] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 373.547169][ T4889] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 373.944850][ T4889] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 374.734033][ T51] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 374.767467][ T51] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 374.834817][ T51] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 374.931980][ T51] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 374.952469][ T51] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 374.962287][ T51] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 375.276157][ T4889] bridge_slave_1: left allmulticast mode [ 375.282320][ T4889] bridge_slave_1: left promiscuous mode [ 375.289264][ T4889] bridge0: port 2(bridge_slave_1) entered disabled state [ 375.778073][ T4889] bridge_slave_0: left allmulticast mode [ 375.784277][ T4889] bridge_slave_0: left promiscuous mode [ 375.791285][ T4889] bridge0: port 1(bridge_slave_0) entered disabled state [ 376.323422][ T6850] loop4: detected capacity change from 0 to 128 [ 376.441123][ T6850] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 376.501356][ T4889] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 376.535013][ T6850] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 376.604835][ T4889] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 376.644132][ T4889] bond0 (unregistering): Released all slaves [ 377.050006][ T5801] Bluetooth: hci4: command tx timeout [ 377.603995][ T6854] netlink: 4 bytes leftover after parsing attributes in process `syz.2.311'. [ 377.614627][ T6854] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 377.623042][ T6854] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 377.732766][ T6854] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 377.740875][ T6854] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 377.962292][ T6856] warning: `syz.4.313' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 378.119356][ T4889] hsr_slave_0: left promiscuous mode [ 378.174261][ T4889] hsr_slave_1: left promiscuous mode [ 378.194093][ T4889] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 378.202134][ T4889] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 378.274557][ T4889] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 378.282610][ T4889] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 378.381249][ T4889] veth1_macvtap: left promiscuous mode [ 378.387120][ T4889] veth0_macvtap: left promiscuous mode [ 378.393698][ T4889] veth1_vlan: left promiscuous mode [ 378.399411][ T4889] veth0_vlan: left promiscuous mode [ 378.833673][ T44] hid-generic 0005:0C45:FFF9.0004: item fetching failed at offset 0/2 [ 378.966473][ T44] hid-generic 0005:0C45:FFF9.0004: probe with driver hid-generic failed with error -22 [ 379.153389][ T5801] Bluetooth: hci4: command 0x041b tx timeout [ 380.174333][ T4889] team0 (unregistering): Port device team_slave_1 removed [ 380.279072][ T4889] team0 (unregistering): Port device team_slave_0 removed [ 380.648627][ T6890] loop4: detected capacity change from 0 to 128 [ 380.737628][ T6890] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 380.828509][ T6890] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 381.209306][ T51] Bluetooth: hci4: command 0x041b tx timeout [ 382.017197][ T6838] chnl_net:caif_netlink_parms(): no params data found [ 383.319851][ T5801] Bluetooth: hci4: command 0x041b tx timeout [ 383.504293][ T6917] netlink: 2 bytes leftover after parsing attributes in process `syz.0.329'. [ 384.127625][ T6921] loop3: detected capacity change from 0 to 256 [ 384.941088][ T6939] loop2: detected capacity change from 0 to 128 [ 385.048639][ T6939] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 385.112074][ T6939] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 385.221596][ T6936] bridge0: port 2(bridge_slave_1) entered disabled state [ 385.231822][ T6936] bridge0: port 1(bridge_slave_0) entered disabled state [ 385.287780][ T6838] bridge0: port 1(bridge_slave_0) entered blocking state [ 385.295865][ T6838] bridge0: port 1(bridge_slave_0) entered disabled state [ 385.303901][ T6838] bridge_slave_0: entered allmulticast mode [ 385.314235][ T6838] bridge_slave_0: entered promiscuous mode [ 385.452632][ T51] Bluetooth: hci4: command 0x041b tx timeout [ 385.526491][ T6838] bridge0: port 2(bridge_slave_1) entered blocking state [ 385.534573][ T6838] bridge0: port 2(bridge_slave_1) entered disabled state [ 385.542581][ T6838] bridge_slave_1: entered allmulticast mode [ 385.552002][ T6838] bridge_slave_1: entered promiscuous mode [ 385.971922][ T6838] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 386.260705][ T6838] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 386.441082][ T6952] loop4: detected capacity change from 0 to 256 [ 386.504235][ T6952] exfat: Deprecated parameter 'namecase' [ 386.510870][ T6952] exfat: Deprecated parameter 'namecase' [ 386.590224][ T6838] team0: Port device team_slave_0 added [ 386.646924][ T6838] team0: Port device team_slave_1 added [ 387.069471][ T6952] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x1fdf94bc, utbl_chksum : 0xe619d30d) [ 387.194052][ T6838] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 387.202550][ T6838] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 387.232412][ T6838] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 387.719895][ T51] Bluetooth: hci4: command 0x041b tx timeout [ 387.891258][ T6838] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 387.898605][ T6838] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 387.925289][ T6838] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 388.639895][ T6838] hsr_slave_0: entered promiscuous mode [ 388.748298][ T6838] hsr_slave_1: entered promiscuous mode [ 388.868554][ T6838] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 388.876660][ T6838] Cannot create hsr debugfs directory [ 388.926773][ T6969] netlink: 24 bytes leftover after parsing attributes in process `syz.2.343'. [ 390.135616][ T6984] loop0: detected capacity change from 0 to 256 [ 390.415013][ T5797] Bluetooth: hci2: command 0x0406 tx timeout [ 390.421923][ T5801] Bluetooth: hci0: command 0x0c1a tx timeout [ 390.428219][ T5801] Bluetooth: hci3: command 0x0406 tx timeout [ 390.436821][ T5801] Bluetooth: hci1: command 0x0406 tx timeout [ 390.522434][ T6838] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 390.545036][ T6838] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 390.590681][ T6838] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 390.637176][ T6838] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 390.689134][ T6991] loop3: detected capacity change from 0 to 128 [ 391.039644][ T6991] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 391.261362][ T6991] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 391.409615][ T1933] hid-generic 0005:0C45:FFF9.0005: item fetching failed at offset 0/2 [ 391.502394][ T1933] hid-generic 0005:0C45:FFF9.0005: probe with driver hid-generic failed with error -22 [ 391.555861][ T6838] 8021q: adding VLAN 0 to HW filter on device bond0 [ 391.604614][ T6838] 8021q: adding VLAN 0 to HW filter on device team0 [ 391.738687][ T6838] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 391.751154][ T6838] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 391.812032][ T34] bridge0: port 1(bridge_slave_0) entered blocking state [ 391.819938][ T34] bridge0: port 1(bridge_slave_0) entered forwarding state [ 391.843291][ T34] bridge0: port 2(bridge_slave_1) entered blocking state [ 391.851160][ T34] bridge0: port 2(bridge_slave_1) entered forwarding state [ 393.064458][ T7016] loop4: detected capacity change from 0 to 256 [ 393.206567][ T7016] exfat: Deprecated parameter 'namecase' [ 393.220900][ T7016] exfat: Deprecated parameter 'namecase' [ 393.612279][ T7016] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x1fdf94bc, utbl_chksum : 0xe619d30d) [ 394.936254][ T7040] loop4: detected capacity change from 0 to 256 [ 395.200038][ T6838] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 396.647440][ T7056] loop4: detected capacity change from 0 to 128 [ 397.154612][ T7056] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 397.442884][ T7065] loop3: detected capacity change from 0 to 256 [ 397.465031][ T7065] exfat: Deprecated parameter 'namecase' [ 397.472925][ T7065] exfat: Deprecated parameter 'namecase' [ 397.685220][ T7056] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 397.734104][ T7065] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x1fdf94bc, utbl_chksum : 0xe619d30d) [ 398.392567][ T7078] loop2: detected capacity change from 0 to 256 [ 398.956530][ T6838] veth0_vlan: entered promiscuous mode [ 399.113398][ T6838] veth1_vlan: entered promiscuous mode [ 399.676781][ T6838] veth0_macvtap: entered promiscuous mode [ 399.766846][ T6838] veth1_macvtap: entered promiscuous mode [ 399.852843][ T6838] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 399.865064][ T6838] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 399.876470][ T6838] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 399.888571][ T6838] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 399.899947][ T6838] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 399.910754][ T6838] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 399.930637][ T6838] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 399.980817][ T7096] bridge0: port 2(bridge_slave_1) entered disabled state [ 399.991113][ T7096] bridge0: port 1(bridge_slave_0) entered disabled state [ 400.059073][ T6838] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 400.069941][ T6838] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 400.080234][ T6838] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 400.091044][ T6838] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 400.101213][ T6838] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 400.111973][ T6838] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 400.131636][ T6838] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 400.155142][ T6838] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 400.164506][ T6838] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 400.173817][ T6838] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 400.182967][ T6838] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 400.766947][ T7105] netlink: 4 bytes leftover after parsing attributes in process `syz.4.384'. [ 400.981429][ T7108] loop0: detected capacity change from 0 to 256 [ 400.991400][ T7108] exfat: Deprecated parameter 'namecase' [ 400.997480][ T7108] exfat: Deprecated parameter 'namecase' [ 401.002045][ T7109] loop3: detected capacity change from 0 to 128 [ 401.064926][ T7109] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 401.201063][ T7109] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 401.322331][ T7108] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x1fdf94bc, utbl_chksum : 0xe619d30d) [ 402.313634][ T7126] loop4: detected capacity change from 0 to 256 [ 402.500999][ T7125] netlink: 36 bytes leftover after parsing attributes in process `syz.2.389'. [ 402.510548][ T7125] netlink: 16 bytes leftover after parsing attributes in process `syz.2.389'. [ 402.519965][ T7125] netlink: 36 bytes leftover after parsing attributes in process `syz.2.389'. [ 402.529370][ T7125] netlink: 36 bytes leftover after parsing attributes in process `syz.2.389'. [ 403.063224][ T7137] loop3: detected capacity change from 0 to 128 [ 403.158032][ T7137] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 403.655523][ T7143] bridge0: port 2(bridge_slave_1) entered disabled state [ 403.665572][ T7143] bridge0: port 1(bridge_slave_0) entered disabled state [ 403.743186][ T7145] netlink: 12 bytes leftover after parsing attributes in process `syz.4.395'. [ 404.678581][ T7158] loop4: detected capacity change from 0 to 128 [ 404.716539][ T7157] syzkaller1: entered promiscuous mode [ 404.723421][ T7157] syzkaller1: entered allmulticast mode [ 404.775975][ T7158] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 404.868543][ T7158] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 406.011420][ T7170] netlink: 8 bytes leftover after parsing attributes in process `syz.4.402'. [ 406.020834][ T7170] block nbd0: not configured, cannot reconfigure [ 406.435068][ T7177] loop2: detected capacity change from 0 to 256 [ 406.511434][ T7179] loop4: detected capacity change from 0 to 128 [ 406.601439][ T7179] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 407.873377][ T7194] loop3: detected capacity change from 0 to 128 [ 407.987214][ T7194] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 408.047591][ T7194] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 408.934918][ T4889] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 408.943150][ T4889] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 409.159509][ T7210] tc_dump_action: action bad kind [ 409.285613][ T4148] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 409.294344][ T4148] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 410.086904][ T7222] loop2: detected capacity change from 0 to 256 [ 410.329306][ T7230] loop3: detected capacity change from 0 to 128 [ 410.368169][ T7230] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 411.205828][ T7240] loop5: detected capacity change from 0 to 128 [ 411.681706][ T7240] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256 [ 411.911800][ T7240] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 412.446835][ T7260] loop4: detected capacity change from 0 to 128 [ 412.512487][ T7260] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 413.612074][ T7275] loop5: detected capacity change from 0 to 256 [ 413.810601][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 413.817335][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 413.831190][ T7273] dccp_close: ABORT with 2 bytes unread [ 415.370627][ T7304] loop5: detected capacity change from 0 to 128 [ 415.530461][ T7304] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256 [ 415.642948][ T7304] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 417.340793][ T7328] loop2: detected capacity change from 0 to 256 [ 418.694931][ T7336] netlink: 24 bytes leftover after parsing attributes in process `syz.4.456'. [ 419.491275][ T7348] loop3: detected capacity change from 0 to 128 [ 419.559545][ T7348] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 419.786999][ T7348] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 420.851638][ T7362] veth0: entered promiscuous mode [ 420.899639][ T7360] veth0: left promiscuous mode [ 421.183502][ T7369] loop3: detected capacity change from 0 to 256 [ 421.682255][ T7377] netlink: 24 bytes leftover after parsing attributes in process `syz.4.473'. [ 422.087884][ T7381] loop0: detected capacity change from 0 to 256 [ 422.140457][ T7381] exfat: Deprecated parameter 'namecase' [ 422.146524][ T7381] exfat: Deprecated parameter 'namecase' [ 422.295681][ T7381] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x1fdf94bc, utbl_chksum : 0xe619d30d) [ 422.705124][ T7391] loop2: detected capacity change from 0 to 128 [ 422.753651][ T7391] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 423.066576][ T7391] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 424.258157][ T7415] netlink: 24 bytes leftover after parsing attributes in process `syz.0.484'. [ 424.998331][ T7411] dccp_close: ABORT with 32 bytes unread [ 425.297139][ T7430] loop4: detected capacity change from 0 to 256 [ 425.314703][ T7430] exfat: Deprecated parameter 'namecase' [ 425.323207][ T7430] exfat: Deprecated parameter 'namecase' [ 425.553850][ T7434] loop3: detected capacity change from 0 to 256 [ 426.226361][ T7430] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x1fdf94bc, utbl_chksum : 0xe619d30d) [ 426.602832][ T7447] netlink: 24 bytes leftover after parsing attributes in process `syz.5.496'. [ 426.755352][ T7450] netlink: 32 bytes leftover after parsing attributes in process `syz.3.495'. [ 428.076306][ T7461] netlink: 'syz.4.501': attribute type 1 has an invalid length. [ 428.386485][ T7473] loop0: detected capacity change from 0 to 256 [ 428.516181][ T7464] bond1: (slave veth7): Enslaving as a backup interface with a down link [ 428.526048][ T7468] netlink: 4 bytes leftover after parsing attributes in process `syz.3.504'. [ 428.665819][ T7468] bridge_slave_0 (unregistering): left allmulticast mode [ 428.673856][ T7468] bridge_slave_0 (unregistering): left promiscuous mode [ 428.681609][ T7468] bridge0: port 1(bridge_slave_0) entered disabled state [ 429.179726][ T7470] netlink: 'syz.5.503': attribute type 29 has an invalid length. [ 430.302480][ T7504] loop0: detected capacity change from 0 to 256 [ 430.312349][ T7504] exfat: Deprecated parameter 'namecase' [ 430.318410][ T7504] exfat: Deprecated parameter 'namecase' [ 430.642712][ T7504] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x1fdf94bc, utbl_chksum : 0xe619d30d) [ 431.026243][ T7514] netlink: 8 bytes leftover after parsing attributes in process `syz.0.516'. [ 432.005788][ T7523] loop3: detected capacity change from 0 to 256 [ 432.636040][ T7537] loop5: detected capacity change from 0 to 256 [ 432.730792][ T7537] exfat: Deprecated parameter 'namecase' [ 432.736884][ T7537] exfat: Deprecated parameter 'namecase' [ 432.901017][ T7541] netlink: 32 bytes leftover after parsing attributes in process `syz.2.527'. [ 433.060663][ T7537] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x1fdf94bc, utbl_chksum : 0xe619d30d) [ 433.180285][ T7541] netlink: 12 bytes leftover after parsing attributes in process `syz.2.527'. [ 435.462503][ T7576] loop2: detected capacity change from 0 to 128 [ 435.525878][ T7576] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 435.844503][ T7576] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 437.090777][ T7593] netlink: 24 bytes leftover after parsing attributes in process `syz.5.542'. [ 437.350078][ T7596] vlan2: entered allmulticast mode [ 437.359014][ T7596] bond0: entered allmulticast mode [ 437.364423][ T7596] bond_slave_0: entered allmulticast mode [ 437.370965][ T7596] bond_slave_1: entered allmulticast mode [ 437.464355][ T7599] netlink: 32 bytes leftover after parsing attributes in process `syz.3.544'. [ 437.525779][ T7596] bond0: left allmulticast mode [ 437.531204][ T7596] bond_slave_0: left allmulticast mode [ 437.536940][ T7596] bond_slave_1: left allmulticast mode [ 437.754462][ T7599] netlink: 12 bytes leftover after parsing attributes in process `syz.3.544'. [ 439.082752][ T7617] loop4: detected capacity change from 0 to 128 [ 439.251806][ T7617] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 439.383196][ T7617] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 441.094485][ T7639] netlink: 4 bytes leftover after parsing attributes in process `syz.2.560'. [ 441.376982][ T7643] netlink: 32 bytes leftover after parsing attributes in process `syz.0.562'. [ 442.402641][ T7662] loop4: detected capacity change from 0 to 128 [ 442.522922][ T7662] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 442.642806][ T7662] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 443.987378][ T7688] netlink: 8 bytes leftover after parsing attributes in process `syz.2.577'. [ 443.997294][ T7688] netlink: 12 bytes leftover after parsing attributes in process `syz.2.577'. [ 444.608641][ T7698] loop0: detected capacity change from 0 to 512 [ 444.672177][ T7698] EXT4-fs: quotafile must be on filesystem root [ 449.447623][ T7719] loop2: detected capacity change from 0 to 128 [ 450.798139][ T7719] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 451.084713][ T7719] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 452.183156][ T7734] netlink: 8 bytes leftover after parsing attributes in process `syz.3.592'. [ 452.192720][ T7734] netlink: 12 bytes leftover after parsing attributes in process `syz.3.592'. [ 454.503382][ T7762] netlink: 'syz.5.602': attribute type 2 has an invalid length. [ 455.104005][ T7770] loop0: detected capacity change from 0 to 128 [ 455.185096][ T7770] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 455.244498][ T7770] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 455.584594][ T5790] Bluetooth: hci4: link tx timeout [ 455.590360][ T5790] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 455.623834][ T5797] Bluetooth: hci4: link tx timeout [ 455.629328][ T5797] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 455.680317][ T5797] Bluetooth: hci4: link tx timeout [ 455.685711][ T5797] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 456.117916][ T5797] Bluetooth: hci4: link tx timeout [ 456.123847][ T5797] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 456.381554][ T7786] loop5: detected capacity change from 0 to 1024 [ 456.428429][ T7786] EXT4-fs: Ignoring removed i_version option [ 456.470461][ T5797] Bluetooth: hci4: link tx timeout [ 456.475864][ T5797] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 456.531384][ T7786] EXT4-fs (loop5): stripe (255) is not aligned with cluster size (16), stripe is disabled [ 456.709522][ T7792] tipc: Started in network mode [ 456.714830][ T7792] tipc: Node identity f28193d4e78c, cluster identity 4711 [ 456.721239][ T7786] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 456.723265][ T7792] tipc: Enabled bearer , priority 0 [ 456.874190][ T7792] tipc: Resetting bearer [ 457.073436][ T7791] tipc: Resetting bearer [ 457.249558][ T7791] tipc: Disabling bearer [ 457.311777][ T5797] Bluetooth: hci4: link tx timeout [ 457.317281][ T5797] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 457.325759][ T5797] Bluetooth: hci4: link tx timeout [ 457.331333][ T5797] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 457.410124][ T7803] netlink: 'syz.2.617': attribute type 2 has an invalid length. [ 457.616219][ T5797] Bluetooth: hci4: command 0x041b tx timeout [ 458.831164][ T6838] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 458.869990][ T4889] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 458.929461][ T7821] loop4: detected capacity change from 0 to 128 [ 458.986034][ T7821] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 459.026338][ T4889] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 459.195429][ T7821] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 459.529834][ T4889] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 459.789816][ T4889] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 460.524368][ T4889] bridge_slave_1: left allmulticast mode [ 460.530485][ T4889] bridge_slave_1: left promiscuous mode [ 460.540986][ T4889] bridge0: port 2(bridge_slave_1) entered disabled state [ 460.586051][ T4889] bridge_slave_0: left allmulticast mode [ 460.592277][ T4889] bridge_slave_0: left promiscuous mode [ 460.599552][ T4889] bridge0: port 1(bridge_slave_0) entered disabled state [ 461.215122][ T5797] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 461.234782][ T5797] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 461.246104][ T5797] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 461.348445][ T5797] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 461.377888][ T5797] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 461.390472][ T5797] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 461.871135][ T4889] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 461.948536][ T4889] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 461.974996][ T4889] bond0 (unregistering): Released all slaves [ 463.679774][ T5797] Bluetooth: hci4: command tx timeout [ 464.594921][ T4889] hsr_slave_0: left promiscuous mode [ 464.715527][ T4889] hsr_slave_1: left promiscuous mode [ 464.849561][ T4889] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 464.859058][ T4889] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 465.045317][ T4889] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 465.053427][ T4889] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 465.385504][ T4889] veth1_macvtap: left promiscuous mode [ 465.391733][ T4889] veth0_macvtap: left promiscuous mode [ 465.398065][ T4889] veth1_vlan: left promiscuous mode [ 465.403988][ T4889] veth0_vlan: left promiscuous mode [ 465.889391][ T5797] Bluetooth: hci4: command tx timeout [ 466.073346][ T7882] netlink: 8 bytes leftover after parsing attributes in process `syz.0.639'. [ 466.082779][ T7882] block nbd0: not configured, cannot reconfigure [ 466.280108][ T7887] loop4: detected capacity change from 0 to 128 [ 466.299587][ T7887] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 466.345097][ T7887] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 466.762166][ T5848] IPVS: starting estimator thread 0... [ 466.879481][ T7893] IPVS: using max 192 ests per chain, 9600 per kthread [ 467.106078][ T4889] team0 (unregistering): Port device team_slave_1 removed [ 467.149512][ T4889] team0 (unregistering): Port device team_slave_0 removed [ 467.475935][ T7845] chnl_net:caif_netlink_parms(): no params data found [ 467.560685][ T7892] tipc: Started in network mode [ 467.566036][ T7892] tipc: Node identity ac1414aa, cluster identity 4711 [ 467.576732][ T7892] tipc: Enabled bearer , priority 10 [ 468.022294][ T5797] Bluetooth: hci4: command tx timeout [ 468.434281][ T7906] netlink: 4 bytes leftover after parsing attributes in process `syz.0.645'. [ 468.971261][ T1933] tipc: Node number set to 2886997162 [ 470.123721][ T5797] Bluetooth: hci4: command tx timeout [ 470.151097][ T7926] netlink: 8 bytes leftover after parsing attributes in process `syz.4.651'. [ 470.164347][ T7926] block nbd0: not configured, cannot reconfigure [ 470.286414][ T7845] bridge0: port 1(bridge_slave_0) entered blocking state [ 470.294342][ T7845] bridge0: port 1(bridge_slave_0) entered disabled state [ 470.302370][ T7845] bridge_slave_0: entered allmulticast mode [ 470.311812][ T7845] bridge_slave_0: entered promiscuous mode [ 470.384641][ T7845] bridge0: port 2(bridge_slave_1) entered blocking state [ 470.394786][ T7845] bridge0: port 2(bridge_slave_1) entered disabled state [ 470.405282][ T7845] bridge_slave_1: entered allmulticast mode [ 470.410580][ T7934] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 470.414793][ T7845] bridge_slave_1: entered promiscuous mode [ 471.059789][ T7845] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 471.113791][ T7845] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 471.351680][ T7845] team0: Port device team_slave_0 added [ 471.373924][ T7845] team0: Port device team_slave_1 added [ 471.681334][ T7845] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 471.688663][ T7845] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 471.720411][ T7845] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 471.726932][ T7949] netlink: 4 bytes leftover after parsing attributes in process `syz.3.658'. [ 471.818466][ T7845] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 471.827133][ T7845] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 471.854015][ T7845] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 472.349766][ T7845] hsr_slave_0: entered promiscuous mode [ 472.440042][ T7845] hsr_slave_1: entered promiscuous mode [ 472.496166][ T7845] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 472.504344][ T7845] Cannot create hsr debugfs directory [ 475.164127][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 475.171091][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 475.283866][ T7845] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 475.324341][ T7845] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 475.418677][ T7845] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 475.454612][ T7845] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 475.852279][ T8006] netlink: 4 bytes leftover after parsing attributes in process `syz.3.670'. [ 476.101518][ T8011] netlink: 44 bytes leftover after parsing attributes in process `syz.2.673'. [ 477.508563][ T7845] 8021q: adding VLAN 0 to HW filter on device bond0 [ 477.599964][ T7845] 8021q: adding VLAN 0 to HW filter on device team0 [ 477.694852][ T5848] IPVS: starting estimator thread 0... [ 477.767302][ T7845] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 477.778581][ T7845] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 477.790429][ T8033] IPVS: using max 240 ests per chain, 12000 per kthread [ 477.833136][ T4889] bridge0: port 1(bridge_slave_0) entered blocking state [ 477.840972][ T4889] bridge0: port 1(bridge_slave_0) entered forwarding state [ 477.860992][ T4889] bridge0: port 2(bridge_slave_1) entered blocking state [ 477.868839][ T4889] bridge0: port 2(bridge_slave_1) entered forwarding state [ 478.650560][ T8031] tipc: Enabled bearer , priority 10 [ 479.291968][ T8047] netlink: 44 bytes leftover after parsing attributes in process `syz.3.683'. [ 479.459475][ T7845] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 479.759049][ T25] tipc: Node number set to 353211348 [ 479.966980][ T8053] netlink: 8 bytes leftover after parsing attributes in process `syz.4.685'. [ 479.977158][ T8053] netlink: 12 bytes leftover after parsing attributes in process `syz.4.685'. [ 483.231441][ T7845] veth0_vlan: entered promiscuous mode [ 483.272517][ T7845] veth1_vlan: entered promiscuous mode [ 483.373496][ T7845] veth0_macvtap: entered promiscuous mode [ 483.617207][ T7845] veth1_macvtap: entered promiscuous mode [ 483.689741][ T7845] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 483.700606][ T7845] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 483.710950][ T7845] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 483.721739][ T7845] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 483.732300][ T7845] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 483.743072][ T7845] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 483.758573][ T7845] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 483.809408][ T7845] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 483.823287][ T7845] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 483.833425][ T7845] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 483.844201][ T7845] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 483.856460][ T7845] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 483.867699][ T7845] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 483.887703][ T7845] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 484.350915][ T7845] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 484.360538][ T7845] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 484.369853][ T7845] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 484.379050][ T7845] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 485.687152][ T74] bridge0: port 2(bridge_slave_1) entered disabled state [ 489.137177][ T8185] netlink: 8 bytes leftover after parsing attributes in process `syz.2.723'. [ 489.146464][ T8185] netlink: 12 bytes leftover after parsing attributes in process `syz.2.723'. [ 494.139483][ T3828] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 494.147718][ T3828] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 494.475970][ T4889] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 494.484495][ T4889] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 497.391787][ T8307] ip6_tunnel: non-ECT from fe80:0000:0000:0000:0000:0000:0000:0000 with DS=0x2 [ 498.404911][ T8317] netlink: 24 bytes leftover after parsing attributes in process `syz.2.764'. [ 501.072127][ T8358] netlink: 16 bytes leftover after parsing attributes in process `syz.4.778'. [ 501.507796][ T8363] netlink: 24 bytes leftover after parsing attributes in process `syz.4.779'. [ 501.894218][ T8369] fuse: Bad value for 'fd' [ 504.192802][ T8402] netlink: 16 bytes leftover after parsing attributes in process `syz.6.789'. [ 504.205923][ T8401] netlink: 24 bytes leftover after parsing attributes in process `syz.0.790'. [ 505.279958][ T8419] netlink: 8 bytes leftover after parsing attributes in process `syz.6.792'. [ 505.292428][ T8419] netlink: 12 bytes leftover after parsing attributes in process `syz.6.792'. [ 506.335938][ T8434] netlink: 16 bytes leftover after parsing attributes in process `syz.6.802'. [ 507.356655][ T8453] netlink: 24 bytes leftover after parsing attributes in process `syz.4.809'. [ 508.316530][ T8467] netlink: 8 bytes leftover after parsing attributes in process `syz.3.812'. [ 508.327357][ T8467] netlink: 12 bytes leftover after parsing attributes in process `syz.3.812'. [ 509.143724][ T8480] netlink: 16 bytes leftover after parsing attributes in process `syz.3.817'. [ 510.651439][ T8501] netlink: 24 bytes leftover after parsing attributes in process `syz.6.824'. [ 510.746763][ T8504] loop2: detected capacity change from 0 to 128 [ 510.828136][ T8504] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 510.911160][ T8504] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 512.033127][ T8515] tipc: Started in network mode [ 512.038533][ T8515] tipc: Node identity 32f76a8683f1, cluster identity 4711 [ 512.050720][ T8515] tipc: Enabled bearer , priority 0 [ 512.195746][ T8514] tipc: Disabling bearer [ 512.289774][ T8520] netlink: 16 bytes leftover after parsing attributes in process `syz.2.832'. [ 513.029811][ T8531] netlink: 36 bytes leftover after parsing attributes in process `syz.2.836'. [ 513.039296][ T8531] netlink: 16 bytes leftover after parsing attributes in process `syz.2.836'. [ 513.048454][ T8531] netlink: 36 bytes leftover after parsing attributes in process `syz.2.836'. [ 513.057875][ T8531] netlink: 36 bytes leftover after parsing attributes in process `syz.2.836'. [ 514.069840][ T8544] netlink: 24 bytes leftover after parsing attributes in process `syz.4.840'. [ 514.299210][ T8554] loop0: detected capacity change from 0 to 128 [ 514.619632][ T8554] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 514.790029][ T8554] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 515.183242][ T8561] netlink: 16 bytes leftover after parsing attributes in process `syz.2.846'. [ 515.513094][ T8564] tipc: Started in network mode [ 515.518360][ T8564] tipc: Node identity 3a2ada5c1037, cluster identity 4711 [ 515.533920][ T8564] tipc: Enabled bearer , priority 0 [ 515.712120][ T8563] tipc: Disabling bearer [ 516.152960][ T8577] netlink: 36 bytes leftover after parsing attributes in process `syz.0.849'. [ 516.164757][ T8577] netlink: 16 bytes leftover after parsing attributes in process `syz.0.849'. [ 516.176280][ T8577] netlink: 36 bytes leftover after parsing attributes in process `syz.0.849'. [ 516.185743][ T8577] netlink: 36 bytes leftover after parsing attributes in process `syz.0.849'. [ 518.242742][ T8606] tipc: Enabled bearer , priority 0 [ 518.693821][ T8603] tipc: Disabling bearer [ 518.809397][ T8616] tipc: Enabled bearer , priority 0 [ 518.938438][ T8614] tipc: Disabling bearer [ 519.718972][ T8632] sit0: entered promiscuous mode [ 519.751177][ T8632] netlink: 'syz.2.871': attribute type 1 has an invalid length. [ 519.759377][ T8632] netlink: 1 bytes leftover after parsing attributes in process `syz.2.871'. [ 520.704517][ T8650] netlink: 'syz.2.876': attribute type 11 has an invalid length. [ 520.712830][ T8650] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.876'. [ 521.621215][ T8662] netlink: 36 bytes leftover after parsing attributes in process `syz.3.881'. [ 521.630972][ T8662] netlink: 16 bytes leftover after parsing attributes in process `syz.3.881'. [ 521.640386][ T8662] netlink: 36 bytes leftover after parsing attributes in process `syz.3.881'. [ 521.649633][ T8662] netlink: 36 bytes leftover after parsing attributes in process `syz.3.881'. [ 521.851073][ T8664] tipc: Enabled bearer , priority 0 [ 522.016340][ T8661] tipc: Disabling bearer [ 522.145913][ T8668] tipc: Enabled bearer , priority 0 [ 522.224325][ T8665] tipc: Disabling bearer [ 522.715433][ T8682] hsr0: entered promiscuous mode [ 524.109952][ T8697] netlink: 1752 bytes leftover after parsing attributes in process `syz.2.893'. [ 524.408080][ T8706] netlink: 4 bytes leftover after parsing attributes in process `syz.0.897'. [ 525.231699][ T8718] tipc: Enabled bearer , priority 0 [ 525.473491][ T8717] tipc: Disabling bearer [ 526.450759][ T8741] netlink: 1752 bytes leftover after parsing attributes in process `syz.3.908'. [ 526.504587][ T8742] syzkaller1: entered promiscuous mode [ 526.510698][ T8742] syzkaller1: entered allmulticast mode [ 527.084023][ T8749] netlink: 4 bytes leftover after parsing attributes in process `syz.4.910'. [ 528.633040][ T8772] hsr_slave_0 (unregistering): left promiscuous mode [ 529.138285][ T8782] netlink: 1752 bytes leftover after parsing attributes in process `syz.0.921'. [ 530.172227][ T8792] netlink: 4 bytes leftover after parsing attributes in process `syz.2.924'. [ 531.849583][ T8817] tipc: Enabling of bearer rejected, failed to enable media [ 532.699951][ T8837] hsr_slave_0 (unregistering): left promiscuous mode [ 533.059529][ T8844] netlink: 1752 bytes leftover after parsing attributes in process `syz.6.935'. [ 533.821330][ T8854] tipc: Enabled bearer , priority 0 [ 534.202619][ T8853] tipc: Disabling bearer [ 534.782708][ T8866] tipc: Enabling of bearer rejected, failed to enable media [ 534.853489][ T8870] netlink: 24 bytes leftover after parsing attributes in process `syz.6.951'. [ 535.342349][ T8875] hsr0: entered promiscuous mode [ 536.706693][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 536.713899][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 536.759398][ T8903] tipc: Enabling of bearer rejected, failed to enable media [ 541.911559][ T8989] netlink: 4 bytes leftover after parsing attributes in process `syz.0.989'. [ 543.962760][ T9017] netlink: 36 bytes leftover after parsing attributes in process `syz.2.998'. [ 543.972142][ T9017] netlink: 16 bytes leftover after parsing attributes in process `syz.2.998'. [ 543.981641][ T9017] netlink: 36 bytes leftover after parsing attributes in process `syz.2.998'. [ 543.993144][ T9017] netlink: 36 bytes leftover after parsing attributes in process `syz.2.998'. [ 544.085497][ T9021] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1000'. [ 544.439581][ T9024] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1002'. [ 546.099895][ T9059] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1015'. [ 546.701771][ T9068] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1018'. [ 549.061802][ T9106] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1032'. [ 551.522862][ T9142] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1045'. [ 554.955202][ T9182] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1062'. [ 555.709088][ T9193] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1065'. [ 557.314541][ T9220] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1074'. [ 558.980037][ T9239] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1081'. [ 560.083348][ T9250] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1085'. [ 562.245844][ T9285] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1097'. [ 562.802002][ T9293] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1102'. [ 562.918640][ T9297] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1103'. [ 563.797392][ T9310] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1109'. [ 564.643997][ T9318] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1110'. [ 565.460223][ T9336] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1115'. [ 566.738152][ T9356] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1120'. [ 568.080578][ T9377] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1129'. [ 568.616253][ T9385] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1131'. [ 569.436794][ T9402] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1137'. [ 569.641796][ T9408] ieee802154 phy0 wpan0: encryption failed: -22 [ 570.016633][ T9413] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1140'. [ 570.027212][ T9413] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1140'. [ 570.802632][ T9418] tipc: Enabled bearer , priority 0 [ 571.697785][ T9438] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1147'. [ 571.825239][ T9441] ieee802154 phy0 wpan0: encryption failed: -22 [ 571.919785][ T44] tipc: Node number set to 2969987718 [ 572.255320][ T9443] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1151'. [ 574.605053][ T9484] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1165'. [ 574.831738][ T9488] netlink: 44 bytes leftover after parsing attributes in process `syz.6.1167'. [ 574.874744][ T9479] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1164'. [ 576.865893][ T9518] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1178'. [ 577.661005][ T9526] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1180'. [ 578.933309][ T9544] Illegal XDP return value 4294967274 on prog (id 152) dev N/A, expect packet loss! [ 579.073103][ T9546] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1189'. [ 579.817514][ T9556] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1193'. [ 582.157237][ T9597] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1204'. [ 583.071064][ T9617] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1211'. [ 584.294087][ T9634] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1218'. [ 584.301652][ T9630] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1217'. [ 584.303880][ T9634] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1218'. [ 584.742130][ T5790] Bluetooth: hci4: command 0x0405 tx timeout [ 585.308104][ T9648] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1221'. [ 585.633393][ T9654] SET target dimension over the limit! [ 586.054697][ T9662] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1227'. [ 587.000158][ T9678] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1234'. [ 587.273623][ T9676] netlink: 'syz.4.1233': attribute type 4 has an invalid length. [ 587.581358][ T9676] netlink: 'syz.4.1233': attribute type 4 has an invalid length. [ 587.613221][ T9688] netlink: 32 bytes leftover after parsing attributes in process `syz.6.1237'. [ 588.666663][ T9699] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1240'. [ 589.907347][ T9711] vlan2: entered promiscuous mode [ 590.127193][ T9720] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1248'. [ 591.080846][ T9733] netlink: 304 bytes leftover after parsing attributes in process `syz.6.1253'. [ 592.295218][ T9753] ===================================================== [ 592.302833][ T9753] BUG: KMSAN: uninit-value in ___bpf_prog_run+0x94d5/0xe0f0 [ 592.310629][ T9753] ___bpf_prog_run+0x94d5/0xe0f0 [ 592.315844][ T9753] __bpf_prog_run32+0xc2/0xf0 [ 592.320978][ T9753] __ppp_xmit_process+0x416/0x2840 [ 592.326450][ T9753] ppp_xmit_process+0x100/0x2b0 [ 592.331738][ T9753] ppp_write+0x71d/0x910 [ 592.336190][ T9753] vfs_write+0x48a/0x1540 [ 592.340904][ T9753] ksys_write+0x24f/0x4c0 [ 592.345497][ T9753] __x64_sys_write+0x93/0xe0 [ 592.350520][ T9753] x64_sys_call+0x306a/0x3ba0 [ 592.355480][ T9753] do_syscall_64+0xcd/0x1e0 [ 592.360382][ T9753] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 592.366515][ T9753] [ 592.369111][ T9753] Uninit was stored to memory at: [ 592.374447][ T9753] ___bpf_prog_run+0x98e7/0xe0f0 [ 592.379831][ T9753] __bpf_prog_run32+0xc2/0xf0 [ 592.384800][ T9753] __ppp_xmit_process+0x416/0x2840 [ 592.390356][ T9753] ppp_xmit_process+0x100/0x2b0 [ 592.395568][ T9753] ppp_write+0x71d/0x910 [ 592.400159][ T9753] vfs_write+0x48a/0x1540 [ 592.404750][ T9753] ksys_write+0x24f/0x4c0 [ 592.409501][ T9753] __x64_sys_write+0x93/0xe0 [ 592.414342][ T9753] x64_sys_call+0x306a/0x3ba0 [ 592.419430][ T9753] do_syscall_64+0xcd/0x1e0 [ 592.424296][ T9753] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 592.430586][ T9753] [ 592.433046][ T9753] Uninit was created at: [ 592.437597][ T9753] kmem_cache_alloc_node_noprof+0x6bf/0xb80 [ 592.443951][ T9753] kmalloc_reserve+0x13d/0x4a0 [ 592.449092][ T9753] __alloc_skb+0x363/0x7b0 [ 592.453758][ T9753] ppp_write+0xdf/0x910 [ 592.458126][ T9753] vfs_write+0x48a/0x1540 [ 592.462868][ T9753] ksys_write+0x24f/0x4c0 [ 592.467439][ T9753] __x64_sys_write+0x93/0xe0 [ 592.472423][ T9753] x64_sys_call+0x306a/0x3ba0 [ 592.477341][ T9753] do_syscall_64+0xcd/0x1e0 [ 592.482252][ T9753] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 592.488387][ T9753] [ 592.491033][ T9753] CPU: 1 UID: 0 PID: 9753 Comm: syz.4.1262 Not tainted 6.12.0-rc5-syzkaller-00181-g6c52d4da1c74 #0 [ 592.502104][ T9753] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 592.512507][ T9753] ===================================================== [ 592.519773][ T9753] Disabling lock debugging due to kernel taint [ 592.526100][ T9753] Kernel panic - not syncing: kmsan.panic set ... [ 592.532703][ T9753] CPU: 1 UID: 0 PID: 9753 Comm: syz.4.1262 Tainted: G B 6.12.0-rc5-syzkaller-00181-g6c52d4da1c74 #0 [ 592.545234][ T9753] Tainted: [B]=BAD_PAGE [ 592.549626][ T9753] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 592.559902][ T9753] Call Trace: [ 592.563428][ T9753] [ 592.566503][ T9753] dump_stack_lvl+0x216/0x2d0 [ 592.571459][ T9753] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 592.577674][ T9753] dump_stack+0x1e/0x30 [ 592.582104][ T9753] panic+0x4e2/0xcf0 [ 592.586255][ T9753] ? kmsan_get_metadata+0x41/0x1c0 [ 592.591667][ T9753] kmsan_report+0x2c7/0x2d0 [ 592.596496][ T9753] ? kmsan_internal_chain_origin+0xb0/0xd0 [ 592.602586][ T9753] ? __msan_warning+0x95/0x120 [ 592.607632][ T9753] ? ___bpf_prog_run+0x94d5/0xe0f0 [ 592.613024][ T9753] ? __bpf_prog_run32+0xc2/0xf0 [ 592.618149][ T9753] ? __ppp_xmit_process+0x416/0x2840 [ 592.623716][ T9753] ? ppp_xmit_process+0x100/0x2b0 [ 592.629054][ T9753] ? ppp_write+0x71d/0x910 [ 592.633666][ T9753] ? vfs_write+0x48a/0x1540 [ 592.638521][ T9753] ? ksys_write+0x24f/0x4c0 [ 592.643257][ T9753] ? __x64_sys_write+0x93/0xe0 [ 592.648261][ T9753] ? x64_sys_call+0x306a/0x3ba0 [ 592.653373][ T9753] ? do_syscall_64+0xcd/0x1e0 [ 592.658308][ T9753] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 592.664582][ T9753] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 592.670866][ T9753] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 592.676929][ T9753] ? bpf_skb_load_helper_32+0x40/0x1d0 [ 592.682677][ T9753] ? filter_irq_stacks+0x60/0x1a0 [ 592.687962][ T9753] ? kmsan_get_metadata+0x13e/0x1c0 [ 592.693410][ T9753] ? kmsan_internal_set_shadow_origin+0x69/0x100 [ 592.699976][ T9753] ? kmsan_get_metadata+0x13e/0x1c0 [ 592.705496][ T9753] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 592.711559][ T9753] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 592.717627][ T9753] __msan_warning+0x95/0x120 [ 592.722454][ T9753] ___bpf_prog_run+0x94d5/0xe0f0 [ 592.727651][ T9753] __bpf_prog_run32+0xc2/0xf0 [ 592.732635][ T9753] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 592.738716][ T9753] ? __pfx___bpf_prog_run32+0x10/0x10 [ 592.744357][ T9753] __ppp_xmit_process+0x416/0x2840 [ 592.749794][ T9753] ? kmsan_get_metadata+0x13e/0x1c0 [ 592.755271][ T9753] ppp_xmit_process+0x100/0x2b0 [ 592.760386][ T9753] ? ppp_xmit_process+0x2d/0x2b0 [ 592.765572][ T9753] ppp_write+0x71d/0x910 [ 592.769989][ T9753] ? __pfx_ppp_write+0x10/0x10 [ 592.774929][ T9753] vfs_write+0x48a/0x1540 [ 592.779462][ T9753] ? kmsan_get_metadata+0x13e/0x1c0 [ 592.784929][ T9753] ? kmsan_internal_set_shadow_origin+0x69/0x100 [ 592.791498][ T9753] ? kmsan_get_metadata+0x13e/0x1c0 [ 592.796934][ T9753] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 592.802994][ T9753] ksys_write+0x24f/0x4c0 [ 592.807539][ T9753] __x64_sys_write+0x93/0xe0 [ 592.812340][ T9753] x64_sys_call+0x306a/0x3ba0 [ 592.817247][ T9753] do_syscall_64+0xcd/0x1e0 [ 592.821987][ T9753] ? clear_bhb_loop+0x25/0x80 [ 592.826868][ T9753] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 592.832983][ T9753] RIP: 0033:0x7f044337e719 [ 592.837578][ T9753] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 592.857426][ T9753] RSP: 002b:00007f04441c3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 592.866065][ T9753] RAX: ffffffffffffffda RBX: 00007f0443535f80 RCX: 00007f044337e719 [ 592.874209][ T9753] RDX: 0000000000000002 RSI: 0000000020000900 RDI: 0000000000000003 [ 592.882340][ T9753] RBP: 00007f04433f132e R08: 0000000000000000 R09: 0000000000000000 [ 592.890470][ T9753] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 592.898592][ T9753] R13: 0000000000000000 R14: 00007f0443535f80 R15: 00007ffdae2fb7a8 [ 592.906761][ T9753] [ 592.910242][ T9753] Kernel Offset: disabled [ 592.914742][ T9753] Rebooting in 86400 seconds..