last executing test programs: 44.987684283s ago: executing program 4 (id=148): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000740)=ANY=[@ANYBLOB="b702000004000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff1d6405000000000065040400210000000404000001e37c60b7040000e5cd00006a0a00fe000000008500000032000000b70000000000000095000000000000000ce0de7621e5e832249c04112cf7af2b75d0d1f034b1b3fb6bd3ce8fa62c7941272ff49142d860010ab162aa2264ab67e55a00000000000000edfe0969a9ddc166b686a1e83c8790c893d713b3295dad0ea697181d1e85b64126b5d72f20ff0f0000000000005dee354e93cfc3f50ff23f8432c72012f021c84c59a9d4c142db5bdb0032c0b748cf0cfee621589fb3a20b407c7cbed48e7026f8d52d4bca2608c79aa4a73732028f88ce0787a375da4a2ef44e3d8b88873f0b1de87dfb6d15936ec0a27cb554def9e27396df6b7851ffa26237ea6730880f06371beb3b290b7d8629a6f0373fefa0acb60888fc14ad2b83ca03ac2ac4020000006e00c5b2200a91cbc0c6065a697d6fc8aa8b65aee0783b04cff0218ce82c9687b4474da89c474c23727555fc5e5f8ad0f2f7a261140440fce1f12cc6df312accd011d888384283092d987c40bbb46f68c243291c9b6300000000349834fa147bd5923bbd4e606708034931a8f1a89bdf77093a0000427aab8e21e1a33d3fe093547532fce6549dd648ad233e05a7b3ea178007c1c32e871ac81f287c4aabbd033390b16d1d41ee433e3a54ea9ee82cf14f3a4cc523ee000000000009e106d6b5289f0000100000000000000000f7bc9f46cb71f6b889d37807865e3b4e9916dd0f72c9d58ea333b90f8886dcbf5ddda0e42ca08e3303632401f2f5212b40c0e88c957fd767dbfc80b07ad668b4f6f92fb209d7c2dbac597843c8eb7bf92fe6d0bb0b72549795c2ed19e4411b422a35d3ec4752da0588e42cdbc5fcd245ce5e3ef0dca24931276702a312db7956f0a75eb9caa17d47a6331c7c963cbf86a845ce27c26b7136d3e7207318b1df7a6320c64f18ccd926eaeddcde8d5006e1c38db117fb1115221a661605f4bb9172720ccca770bff37e59511b2606138377eda44b2f288b491ab8aae0e11a98303b0e407e3c9d21f4a3ebbd3fabf6da9a1a1f869a339f67010000100000000734fd1147d45da1a30964e15a19b33c8644fff71b0162f2e1b827e2663e06a751182e968c8ab05fa1d0115d4b11d944f2c06acc023a02b7416a9a10218d21503cda13bb5df6c992e52e1c01793b728eac6b5c58ab3b3900d279297dadc127e2f38fc60c23af2e1fefa5a834564e7191ba1953d335f59aa261fe79613df6bf43884e9649691e32680d75a541c27ffe74f9d13340f2cf1c7dc2b7db01213296cd4ecfd30efe137641471987289b8a00482e026b26eacd1b97443e2ea2d1d6e31a01ee0ae7fa195a2152b2338b086423a3883f2ce3e2f84e04f4d52c985eac4b46336908599564b47db0e6aa97ee51a360f4382fd99745727a44c77d097f69d19fe86f71c38a0226d44ea00ecbd959f14b540745cd03b8c9f02b825ba45ca85706c73115f70871db9d2a1bc2a517b39f9648123917a5db07ba4e27f961373767e1ea8f7cc558e483abef1a9923c5cf7c377626b557ad31fdee17ba7bb235416e72c84afef2bdb08fb375147b028b89f15bc8976b91158c13c9876daa71e7db0f3f17376be39ea79ce1246c547c740e31c64e5d293e0e5a564dd166b60e61d6ccae46c173b8e1707b15c7d4f9d612a14c2156f4050ebefb69503fdd45e75fee4766694e890940ca9e02da1213440a3dec50ed065ceb3ae84b45163f37dbfeaec7bff2d98d877f81fa184b17f94fc26e3ab969efcd72554766939637835a0340b78e94076e8508d32f1448755216e1b12319bfb0704f27fcd939ee95729b870147346e70415da2ea338a792a0bb0a747b019d2a07c2ab71f220415129f3fea51d39f3dfa96e751d23c880e1fc9bc36432446f25bbb8432946dd3f4d6d753e3c7290358ac1089bd24345d2f55598262624125cfa2fae0eee9f2f6f50261a2cac50a335d5f8fca61c8cd9694144da20eff19ad230c9a43"], &(0x7f00000005c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffffe, 0x0, 0xffffffffffffffff, 0xfffffcf2, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x700, 0xe, 0x0, &(0x7f0000000380)="e460cdfbef2408000008019386dd", 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 37.445275051s ago: executing program 4 (id=148): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000740)=ANY=[@ANYBLOB="b702000004000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff1d6405000000000065040400210000000404000001e37c60b7040000e5cd00006a0a00fe000000008500000032000000b70000000000000095000000000000000ce0de7621e5e832249c04112cf7af2b75d0d1f034b1b3fb6bd3ce8fa62c7941272ff49142d860010ab162aa2264ab67e55a00000000000000edfe0969a9ddc166b686a1e83c8790c893d713b3295dad0ea697181d1e85b64126b5d72f20ff0f0000000000005dee354e93cfc3f50ff23f8432c72012f021c84c59a9d4c142db5bdb0032c0b748cf0cfee621589fb3a20b407c7cbed48e7026f8d52d4bca2608c79aa4a73732028f88ce0787a375da4a2ef44e3d8b88873f0b1de87dfb6d15936ec0a27cb554def9e27396df6b7851ffa26237ea6730880f06371beb3b290b7d8629a6f0373fefa0acb60888fc14ad2b83ca03ac2ac4020000006e00c5b2200a91cbc0c6065a697d6fc8aa8b65aee0783b04cff0218ce82c9687b4474da89c474c23727555fc5e5f8ad0f2f7a261140440fce1f12cc6df312accd011d888384283092d987c40bbb46f68c243291c9b6300000000349834fa147bd5923bbd4e606708034931a8f1a89bdf77093a0000427aab8e21e1a33d3fe093547532fce6549dd648ad233e05a7b3ea178007c1c32e871ac81f287c4aabbd033390b16d1d41ee433e3a54ea9ee82cf14f3a4cc523ee000000000009e106d6b5289f0000100000000000000000f7bc9f46cb71f6b889d37807865e3b4e9916dd0f72c9d58ea333b90f8886dcbf5ddda0e42ca08e3303632401f2f5212b40c0e88c957fd767dbfc80b07ad668b4f6f92fb209d7c2dbac597843c8eb7bf92fe6d0bb0b72549795c2ed19e4411b422a35d3ec4752da0588e42cdbc5fcd245ce5e3ef0dca24931276702a312db7956f0a75eb9caa17d47a6331c7c963cbf86a845ce27c26b7136d3e7207318b1df7a6320c64f18ccd926eaeddcde8d5006e1c38db117fb1115221a661605f4bb9172720ccca770bff37e59511b2606138377eda44b2f288b491ab8aae0e11a98303b0e407e3c9d21f4a3ebbd3fabf6da9a1a1f869a339f67010000100000000734fd1147d45da1a30964e15a19b33c8644fff71b0162f2e1b827e2663e06a751182e968c8ab05fa1d0115d4b11d944f2c06acc023a02b7416a9a10218d21503cda13bb5df6c992e52e1c01793b728eac6b5c58ab3b3900d279297dadc127e2f38fc60c23af2e1fefa5a834564e7191ba1953d335f59aa261fe79613df6bf43884e9649691e32680d75a541c27ffe74f9d13340f2cf1c7dc2b7db01213296cd4ecfd30efe137641471987289b8a00482e026b26eacd1b97443e2ea2d1d6e31a01ee0ae7fa195a2152b2338b086423a3883f2ce3e2f84e04f4d52c985eac4b46336908599564b47db0e6aa97ee51a360f4382fd99745727a44c77d097f69d19fe86f71c38a0226d44ea00ecbd959f14b540745cd03b8c9f02b825ba45ca85706c73115f70871db9d2a1bc2a517b39f9648123917a5db07ba4e27f961373767e1ea8f7cc558e483abef1a9923c5cf7c377626b557ad31fdee17ba7bb235416e72c84afef2bdb08fb375147b028b89f15bc8976b91158c13c9876daa71e7db0f3f17376be39ea79ce1246c547c740e31c64e5d293e0e5a564dd166b60e61d6ccae46c173b8e1707b15c7d4f9d612a14c2156f4050ebefb69503fdd45e75fee4766694e890940ca9e02da1213440a3dec50ed065ceb3ae84b45163f37dbfeaec7bff2d98d877f81fa184b17f94fc26e3ab969efcd72554766939637835a0340b78e94076e8508d32f1448755216e1b12319bfb0704f27fcd939ee95729b870147346e70415da2ea338a792a0bb0a747b019d2a07c2ab71f220415129f3fea51d39f3dfa96e751d23c880e1fc9bc36432446f25bbb8432946dd3f4d6d753e3c7290358ac1089bd24345d2f55598262624125cfa2fae0eee9f2f6f50261a2cac50a335d5f8fca61c8cd9694144da20eff19ad230c9a43"], &(0x7f00000005c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffffe, 0x0, 0xffffffffffffffff, 0xfffffcf2, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x700, 0xe, 0x0, &(0x7f0000000380)="e460cdfbef2408000008019386dd", 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 29.881482126s ago: executing program 4 (id=148): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000740)=ANY=[@ANYBLOB="b702000004000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff1d6405000000000065040400210000000404000001e37c60b7040000e5cd00006a0a00fe000000008500000032000000b70000000000000095000000000000000ce0de7621e5e832249c04112cf7af2b75d0d1f034b1b3fb6bd3ce8fa62c7941272ff49142d860010ab162aa2264ab67e55a00000000000000edfe0969a9ddc166b686a1e83c8790c893d713b3295dad0ea697181d1e85b64126b5d72f20ff0f0000000000005dee354e93cfc3f50ff23f8432c72012f021c84c59a9d4c142db5bdb0032c0b748cf0cfee621589fb3a20b407c7cbed48e7026f8d52d4bca2608c79aa4a73732028f88ce0787a375da4a2ef44e3d8b88873f0b1de87dfb6d15936ec0a27cb554def9e27396df6b7851ffa26237ea6730880f06371beb3b290b7d8629a6f0373fefa0acb60888fc14ad2b83ca03ac2ac4020000006e00c5b2200a91cbc0c6065a697d6fc8aa8b65aee0783b04cff0218ce82c9687b4474da89c474c23727555fc5e5f8ad0f2f7a261140440fce1f12cc6df312accd011d888384283092d987c40bbb46f68c243291c9b6300000000349834fa147bd5923bbd4e606708034931a8f1a89bdf77093a0000427aab8e21e1a33d3fe093547532fce6549dd648ad233e05a7b3ea178007c1c32e871ac81f287c4aabbd033390b16d1d41ee433e3a54ea9ee82cf14f3a4cc523ee000000000009e106d6b5289f0000100000000000000000f7bc9f46cb71f6b889d37807865e3b4e9916dd0f72c9d58ea333b90f8886dcbf5ddda0e42ca08e3303632401f2f5212b40c0e88c957fd767dbfc80b07ad668b4f6f92fb209d7c2dbac597843c8eb7bf92fe6d0bb0b72549795c2ed19e4411b422a35d3ec4752da0588e42cdbc5fcd245ce5e3ef0dca24931276702a312db7956f0a75eb9caa17d47a6331c7c963cbf86a845ce27c26b7136d3e7207318b1df7a6320c64f18ccd926eaeddcde8d5006e1c38db117fb1115221a661605f4bb9172720ccca770bff37e59511b2606138377eda44b2f288b491ab8aae0e11a98303b0e407e3c9d21f4a3ebbd3fabf6da9a1a1f869a339f67010000100000000734fd1147d45da1a30964e15a19b33c8644fff71b0162f2e1b827e2663e06a751182e968c8ab05fa1d0115d4b11d944f2c06acc023a02b7416a9a10218d21503cda13bb5df6c992e52e1c01793b728eac6b5c58ab3b3900d279297dadc127e2f38fc60c23af2e1fefa5a834564e7191ba1953d335f59aa261fe79613df6bf43884e9649691e32680d75a541c27ffe74f9d13340f2cf1c7dc2b7db01213296cd4ecfd30efe137641471987289b8a00482e026b26eacd1b97443e2ea2d1d6e31a01ee0ae7fa195a2152b2338b086423a3883f2ce3e2f84e04f4d52c985eac4b46336908599564b47db0e6aa97ee51a360f4382fd99745727a44c77d097f69d19fe86f71c38a0226d44ea00ecbd959f14b540745cd03b8c9f02b825ba45ca85706c73115f70871db9d2a1bc2a517b39f9648123917a5db07ba4e27f961373767e1ea8f7cc558e483abef1a9923c5cf7c377626b557ad31fdee17ba7bb235416e72c84afef2bdb08fb375147b028b89f15bc8976b91158c13c9876daa71e7db0f3f17376be39ea79ce1246c547c740e31c64e5d293e0e5a564dd166b60e61d6ccae46c173b8e1707b15c7d4f9d612a14c2156f4050ebefb69503fdd45e75fee4766694e890940ca9e02da1213440a3dec50ed065ceb3ae84b45163f37dbfeaec7bff2d98d877f81fa184b17f94fc26e3ab969efcd72554766939637835a0340b78e94076e8508d32f1448755216e1b12319bfb0704f27fcd939ee95729b870147346e70415da2ea338a792a0bb0a747b019d2a07c2ab71f220415129f3fea51d39f3dfa96e751d23c880e1fc9bc36432446f25bbb8432946dd3f4d6d753e3c7290358ac1089bd24345d2f55598262624125cfa2fae0eee9f2f6f50261a2cac50a335d5f8fca61c8cd9694144da20eff19ad230c9a43"], &(0x7f00000005c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffffe, 0x0, 0xffffffffffffffff, 0xfffffcf2, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x700, 0xe, 0x0, &(0x7f0000000380)="e460cdfbef2408000008019386dd", 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 18.838220583s ago: executing program 4 (id=148): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], &(0x7f00000005c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffffe, 0x0, 0xffffffffffffffff, 0xfffffcf2, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x700, 0xe, 0x0, &(0x7f0000000380)="e460cdfbef2408000008019386dd", 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 12.572660437s ago: executing program 4 (id=148): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], &(0x7f00000005c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffffe, 0x0, 0xffffffffffffffff, 0xfffffcf2, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x700, 0xe, 0x0, &(0x7f0000000380)="e460cdfbef2408000008019386dd", 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 4.65179399s ago: executing program 4 (id=148): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], &(0x7f00000005c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffffe, 0x0, 0xffffffffffffffff, 0xfffffcf2, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x700, 0xe, 0x0, &(0x7f0000000380)="e460cdfbef2408000008019386dd", 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 2.655817129s ago: executing program 0 (id=1090): socket$inet6_sctp(0xa, 0x1, 0x84) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000600), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) pipe(0x0) r3 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r3, 0xc008561c, &(0x7f0000000040)={0x980915, 0x8, @name="a13c67a9121f85cc1d3e142fe2fb8f9ba5ee159b867aa7d60668087c38d76487"}) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) openat$null(0xffffffffffffff9c, &(0x7f00000001c0), 0x801, 0x0) splice(0xffffffffffffffff, 0x0, r4, 0x0, 0x4ffe6, 0x0) r5 = getpid() r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r7 = dup(r6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, r7, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000700)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="4000000010000100"/20, @ANYRES32=r10, @ANYBLOB="20a102000400"], 0x40}}, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) process_vm_readv(r5, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x36}], 0x1, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x5f}], 0x1, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000640)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_AUTHENTICATE(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000180)={0x3c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r11}, @void}}, [@key_params=[@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x4}], @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x7}, @key_params=[@NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}]]}, 0x3c}}, 0x0) 2.45973195s ago: executing program 3 (id=1093): bind$tipc(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(0xffffffffffffffff, 0x84, 0x74, &(0x7f0000000140)=""/102, &(0x7f00000000c0)=0x66) sendmsg$tipc(0xffffffffffffffff, 0x0, 0x800) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x1b, &(0x7f0000000000)={@remote}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x1b, &(0x7f00000000c0)={@dev}, 0x20) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@dellink={0x20, 0x11, 0x101, 0x0, 0x0, {0x0, 0x0, 0x0, r3}}, 0x20}}, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6}]}) geteuid() close_range(r4, 0xffffffffffffffff, 0x0) r5 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000040)='test_dummy_encryption', 0x0, 0x0) 2.432474205s ago: executing program 0 (id=1094): openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2c41, 0x0) syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x54c, 0xce6, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x0, 0x2}}}}}]}}]}}, 0x0) socket(0x10, 0x80003, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) socket$nl_route(0x10, 0x3, 0x0) socket$inet6(0xa, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$iommufd(0xffffff9c, &(0x7f0000000540), 0x8182, 0x0) socket(0x10, 0x803, 0x0) socket$inet6(0xa, 0x6, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = creat(&(0x7f00000001c0)='./file1\x00', 0x0) write$binfmt_elf64(r0, 0x0, 0xfd14) socket$rds(0x15, 0x5, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @random="df559fdab89a"}, 0x14) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000a00)=ANY=[@ANYBLOB="940000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="444dc9fe000000006400128009000100766c616e000000005400028006000100000000000c000200020000000a000000040004801c0003800c00010068e30000030000000c0001007f000000070000001c0004800c0001000200000060d506000c000100000000000200000008000500", @ANYRES32=r3, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r5], 0x94}}, 0x0) 1.536157132s ago: executing program 3 (id=1096): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @private=0xa010101}, 0x10) 1.402379611s ago: executing program 3 (id=1097): setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000800)=@mangle={'mangle\x00', 0x44, 0x6, 0x390, 0x158, 0x288, 0x158, 0x288, 0x1f0, 0x320, 0x320, 0x320, 0x320, 0x320, 0x6, 0x0, {[{{@ip={@remote, @multicast2, 0x0, 0x0, 'veth0_to_bridge\x00', 'ipvlan1\x00'}, 0x0, 0x70, 0x98}, @ECN={0x28}}, {{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28}}, {{@ip={@multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'pim6reg1\x00', 'macvtap0\x00'}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@dev, @private, 0x0, 0x0, 'hsr0\x00', 'syzkaller1\x00'}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@local, @rand_addr, 0x0, 0x0, 'ip6erspan0\x00', 'batadv_slave_1\x00'}, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x38}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3f0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x42202) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000180)={0x92, @time={0x65757100}}) 1.236031644s ago: executing program 1 (id=1099): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x388, 0x220, 0xffffffff, 0xffffffff, 0x220, 0xffffffff, 0x340, 0xffffffff, 0xffffffff, 0x340, 0xffffffff, 0x3, 0x0, {[{{@ip={@multicast1, @local, 0x0, 0x0, 'veth1_to_batadv\x00', 'wg1\x00'}, 0x0, 0x1f8, 0x220, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'vcan0\x00', {0x4386, 0x0, 0x6a, 0x0, 0x0, 0xfe5, 0x20, 0x0, 0x80}}}, @common=@unspec=@devgroup={{0x38}, {0xb, 0x0, 0x0, 0x0, 0x1}}]}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x0, 0x0, 0x8}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x0, 0x0, 0x1]}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3e8) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f00000000c0)={[{0x2, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0xfc, 0xff}, {0x0, 0x3, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0xff}, {0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x40, 0x40000000000000}], 0x5}) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000180)="66ba4300b406ee0f01c40f009b27000000b9800000c00f3235008000000f30b80e0000000f23d80f21f835800000a00f23f8c9b9490300000f60b932c00a000000328fe858b660002fb90d090000b800680000ba000000000f30", 0x5a}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x8, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000000000000fdfffbff95"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2, @void, @value}, 0x94) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.235805896s ago: executing program 3 (id=1100): socket$nl_netfilter(0x10, 0x3, 0xc) shmget$private(0x0, 0x3000, 0x800, &(0x7f0000ffa000/0x3000)=nil) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x40b80, 0x0) r1 = syz_io_uring_setup(0x239, &(0x7f0000000340)={0x0, 0x0, 0x10100}, &(0x7f00000002c0), &(0x7f0000000000)) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) sendmsg$inet(r2, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[@ip_tos_int={{0x14, 0x11a}}], 0x18}, 0x0) io_uring_enter(r1, 0x2def, 0x0, 0x0, 0x0, 0x0) ioctl$TIOCSTI(r0, 0x5423, &(0x7f0000000080)=0x7) 1.169825691s ago: executing program 2 (id=1101): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00'}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="4000000010000100"/20, @ANYBLOB="00000000ff"], 0x40}}, 0x4000000) sendmmsg$inet(r0, &(0x7f0000000cc0)=[{{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f00000011c0)="93bffc", 0x3}], 0x1}}], 0x1, 0xc0) 1.005623958s ago: executing program 1 (id=1102): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) bind$llc(r1, &(0x7f0000000040), 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) dup(r1) close_range(r0, 0xffffffffffffffff, 0x0) 968.988644ms ago: executing program 1 (id=1103): unshare(0x62040200) syz_mount_image$udf(&(0x7f0000000080), &(0x7f0000000180)='./file1\x00', 0x4000, &(0x7f00000001c0)=ANY=[], 0x2, 0xc31, &(0x7f0000000e00)="$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") r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$EBT_SO_GET_ENTRIES(r0, 0x0, 0x81, &(0x7f00000000c0)={'filter\x00', 0x0, 0x4, 0x0, [0x0, 0x0, 0x0, 0x0, 0x1], 0x0, 0x0, 0x0}, &(0x7f0000000000)=0x78) 878.352174ms ago: executing program 2 (id=1104): socket$inet6_sctp(0xa, 0x1, 0x84) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000600), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) pipe(0x0) r3 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r3, 0xc008561c, &(0x7f0000000040)={0x980915, 0x8, @name="a13c67a9121f85cc1d3e142fe2fb8f9ba5ee159b867aa7d60668087c38d76487"}) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000000), 0xfffffecc) splice(0xffffffffffffffff, 0x0, r4, 0x0, 0x4ffe6, 0x0) r5 = getpid() r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r7 = dup(r6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, r7, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000700)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="4000000010000100"/20, @ANYRES32=r10, @ANYBLOB="20a102000400"], 0x40}}, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) process_vm_readv(r5, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x36}], 0x1, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x5f}], 0x1, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000640)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_AUTHENTICATE(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000180)={0x3c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r11}, @void}}, [@key_params=[@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x4}], @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x7}, @key_params=[@NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}]]}, 0x3c}}, 0x0) 743.948185ms ago: executing program 0 (id=1105): socket$pppoe(0x18, 0x1, 0x0) socket$pppoe(0x18, 0x1, 0x0) socket$unix(0x1, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) epoll_create1(0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x2, 0x80805, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="4ba2000000000000140012800c0001006d6163766c616e000400028008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRESDEC], 0x44}}, 0x0) 679.700199ms ago: executing program 2 (id=1106): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x80180, 0x0) close(r0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$SIOCSIFHWADDR(r0, 0x89b1, &(0x7f0000002280)={'veth0_macvtap\x00', @multicast}) 679.22164ms ago: executing program 3 (id=1107): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000540), 0x3c) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000000)=@gcm_256={{0x303}, "41328ac34a4ad2ba", "e8582491a0c4050000000000f6542a9b6800000000000000003967d2daa45b4e", "61241765", "89b06aff130000fd"}, 0x38) sendmsg$inet(r0, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x0) 630.070575ms ago: executing program 3 (id=1108): socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ptrace$poke(0x5, 0x0, 0x0, 0x440081f) ptrace$pokeuser(0x6, 0x0, 0xb, 0x80000000) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x149101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0x239, &(0x7f0000000300)={0x0, 0xbf61, 0x20, 0x3, 0x100002b9}, &(0x7f0000000140), &(0x7f00000001c0)) io_uring_enter(r1, 0x22def, 0x3ffe, 0x10, 0x0, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$bt_hci(r2, 0x84, 0x23, 0x0, 0x0) r3 = socket$inet(0x2, 0x2000080001, 0x84) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e20, @empty}, 0x10) sendto$inet(r3, &(0x7f00000000c0)="18", 0x1, 0x0, &(0x7f0000000000)={0x2, 0x0, @private=0xa010100}, 0x10) sendto$inet(r3, &(0x7f0000000200), 0x0, 0x0, &(0x7f0000000240)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) sendto$inet(r3, &(0x7f00000002c0)='\t', 0x1, 0xc084, &(0x7f00000003c0)={0x2, 0x4e23, @broadcast}, 0x10) r4 = socket$netlink(0x10, 0x3, 0x4) syz_emit_vhci(&(0x7f0000000340)=ANY=[@ANYBLOB="040e0c062f20"], 0xf) writev(r4, &(0x7f0000000280)=[{&(0x7f0000000340)="4800000014001d0d09074beafd0d8c560284606080ffe0064e204e20590000a2bc5603ca00000f7f8907000020008d42188fedc22e47ad8f75edc6d100000101ff0000000309ff5b", 0x48}], 0x1) 568.976325ms ago: executing program 0 (id=1109): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) eventfd(0x0) syz_genetlink_get_family_id$ipvs(0x0, r1) r2 = add_key$keyring(&(0x7f0000000240), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) unshare(0x400) openat$kvm(0xffffffffffffff9c, 0x0, 0x8000, 0x0) add_key(&(0x7f0000000440)='asymmetric\x00', 0x0, &(0x7f0000000000)="30800201", 0x1001, r2) 511.950738ms ago: executing program 2 (id=1110): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)={0x28, 0x19, 0x15, 0x0, 0x0, "", [@typed={0xa, 0x0, 0x0, 0x0, @str='\x02\x02\x00\x00\x00\x00'}, @nested={0xc, 0x9, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @pid}]}]}, 0x28}], 0x1}, 0x0) 504.672994ms ago: executing program 1 (id=1111): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x3c1, 0x3, 0x278, 0x0, 0xc8, 0x8, 0x118, 0x5803, 0x1f8, 0x2e8, 0x2e8, 0x1f8, 0x2e8, 0x3, 0x0, {[{{@uncond, 0x0, 0xa8, 0xc8, 0x0, {0x0, 0x2000000000000}}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x2, 0x3, 0x4}, {0x3, 0x2, 0x5}, {0x0, 0x6, 0x2}, 0x408001, 0x401}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2d8) 345.334498ms ago: executing program 1 (id=1112): open(&(0x7f0000000000)='./bus\x00', 0x44942, 0x0) r0 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) pwritev2(r0, 0x0, 0x0, 0x494, 0x0, 0x0) 284.104534ms ago: executing program 0 (id=1113): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) bind$llc(r1, &(0x7f0000000040), 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) dup(r1) close_range(r0, 0xffffffffffffffff, 0x0) 194.497482ms ago: executing program 0 (id=1114): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00'}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="4000000010000100"/20, @ANYBLOB="00000000ff"], 0x40}}, 0x4000000) sendmmsg$inet(r0, &(0x7f0000000cc0)=[{{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f00000011c0)="93bffc", 0x3}], 0x1}}], 0x1, 0xc0) 133.379219ms ago: executing program 1 (id=1115): socket$nl_generic(0x10, 0x3, 0x10) pipe(&(0x7f00000001c0)) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000080)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}, 0x45c) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000300)='sys_enter\x00', r2}, 0x10) bpf$ITER_CREATE(0x21, 0x0, 0x0) ioctl$UI_SET_PROPBIT(r0, 0x5501, 0x0) write$input_event(r0, &(0x7f00000005c0), 0x200005d8) write$uinput_user_dev(r0, &(0x7f00000007c0)={'syz0\x00', {0x0, 0x7}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000]}, 0x45c) 133.257696ms ago: executing program 2 (id=1116): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$kcm(0x29, 0x2, 0x0) r2 = creat(&(0x7f0000000900)='./file0\x00', 0x1c) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f0000000940)={r0, r2}) 0s ago: executing program 2 (id=1117): socket$inet6_sctp(0xa, 0x1, 0x84) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000600), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) pipe(0x0) r3 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r3, 0xc008561c, &(0x7f0000000040)={0x980915, 0x8, @name="a13c67a9121f85cc1d3e142fe2fb8f9ba5ee159b867aa7d60668087c38d76487"}) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000000), 0xfffffecc) splice(0xffffffffffffffff, 0x0, r4, 0x0, 0x4ffe6, 0x0) r5 = getpid() r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r7 = dup(r6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, r7, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000700)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="4000000010000100"/20, @ANYRES32=r10, @ANYBLOB="20a102000400"], 0x40}}, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) process_vm_readv(r5, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x36}], 0x1, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x5f}], 0x1, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000640)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_AUTHENTICATE(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000180)={0x3c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r11}, @void}}, [@key_params=[@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x4}], @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x7}, @key_params=[@NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}]]}, 0x3c}}, 0x0) kernel console output (not intermixed with test programs): ebugfs: Directory 'hsr0' with parent 'hsr' already present! [ 180.480750][ T4648] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 180.499056][ T4648] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 180.509071][ T4648] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 180.509480][ T6016] BTRFS info (device loop1): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 180.518556][ T4648] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 180.538563][T10810] Cannot create hsr debugfs directory [ 180.580972][ T4648] hub 4-1:4.0: USB hub found [ 180.608601][ T5235] Bluetooth: hci1: command tx timeout [ 180.789633][ T4648] hub 4-1:4.0: 2 ports detected [ 180.963537][T11298] loop1: detected capacity change from 0 to 1024 [ 181.012608][ T6860] hsr_slave_0: left promiscuous mode [ 181.032506][ T6860] hsr_slave_1: left promiscuous mode [ 181.064376][ T6860] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 181.072625][ T6860] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 181.088923][ T6860] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 181.089135][T11298] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 181.096606][ T6860] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 181.124719][ T6860] veth1_macvtap: left promiscuous mode [ 181.130477][ T6860] veth0_macvtap: left promiscuous mode [ 181.131160][T11298] EXT4-fs (loop1): shut down requested (0) [ 181.136208][ T6860] veth1_vlan: left promiscuous mode [ 181.147990][ T6860] veth0_vlan: left promiscuous mode [ 181.189652][ T6016] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 181.332731][ T6860] team0 (unregistering): Port device team_slave_1 removed [ 181.346770][ T6860] team0 (unregistering): Port device team_slave_0 removed [ 181.450329][T11331] netlink: 32 bytes leftover after parsing attributes in process `syz.1.637'. [ 181.895445][ T5235] Bluetooth: hci2: command tx timeout [ 181.940225][T10810] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 181.947483][T11403] loop0: detected capacity change from 0 to 32768 [ 181.964546][T10810] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 181.976294][T10810] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 181.989626][T10810] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 182.071526][T10810] 8021q: adding VLAN 0 to HW filter on device bond0 [ 182.087250][T10810] 8021q: adding VLAN 0 to HW filter on device team0 [ 182.097617][ T744] bridge0: port 1(bridge_slave_0) entered blocking state [ 182.104733][ T744] bridge0: port 1(bridge_slave_0) entered forwarding state [ 182.117131][ T744] bridge0: port 2(bridge_slave_1) entered blocking state [ 182.124246][ T744] bridge0: port 2(bridge_slave_1) entered forwarding state [ 182.160790][T10810] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 182.171752][T10810] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 182.221227][ T4648] usb 4-1: USB disconnect, device number 9 [ 182.292060][T10810] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 182.436651][T11469] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 182.576886][T11485] loop0: detected capacity change from 0 to 1024 [ 182.648091][T11485] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 182.652992][T10810] veth0_vlan: entered promiscuous mode [ 182.702225][ T5235] Bluetooth: hci1: command tx timeout [ 183.114977][T10304] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 183.140682][T10810] veth1_vlan: entered promiscuous mode [ 183.165423][T10810] veth0_macvtap: entered promiscuous mode [ 183.173985][T10810] veth1_macvtap: entered promiscuous mode [ 183.175309][T11498] loop2: detected capacity change from 0 to 164 [ 183.186670][T11498] iso9660: Unknown parameter '0xffffffffffffffff' [ 183.187424][T10810] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 183.195949][T11498] bio_check_eod: 40 callbacks suppressed [ 183.195966][T11498] syz.2.659: attempt to access beyond end of device [ 183.195966][T11498] loop2: rw=0, sector=64, nr_sectors = 1 limit=0 [ 183.204549][T10810] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 183.210005][T11498] syz.2.659: attempt to access beyond end of device [ 183.210005][T11498] loop2: rw=0, sector=256, nr_sectors = 1 limit=0 [ 183.222817][T10810] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 183.222837][T10810] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 183.222847][T10810] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 183.222859][T10810] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 183.222882][T10810] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 183.222894][T10810] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 183.224297][T10810] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 183.233071][T11498] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 183.249029][T10810] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 183.258903][T11498] syz.2.659: attempt to access beyond end of device [ 183.258903][T11498] loop2: rw=0, sector=512, nr_sectors = 1 limit=0 [ 183.267040][T10810] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 183.277588][T11498] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=512, location=512 [ 183.287710][T10810] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 183.298233][T11498] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found [ 183.308200][T10810] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 183.315490][T11498] UDF-fs: Scanning with blocksize 512 failed [ 183.315915][T11498] syz.2.659: attempt to access beyond end of device [ 183.315915][T11498] loop2: rw=0, sector=64, nr_sectors = 2 limit=0 [ 183.325513][T10810] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 183.336419][T11498] syz.2.659: attempt to access beyond end of device [ 183.336419][T11498] loop2: rw=0, sector=512, nr_sectors = 2 limit=0 [ 183.349096][T10810] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 183.349123][T10810] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 183.359037][T11498] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 183.368498][T10810] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 183.369400][T10810] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 183.382036][T11498] syz.2.659: attempt to access beyond end of device [ 183.382036][T11498] loop2: rw=0, sector=1024, nr_sectors = 2 limit=0 [ 183.389305][T10810] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 183.397306][T11498] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=512, location=512 [ 183.454579][T10810] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 183.459421][T11498] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found [ 183.468897][T10810] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 183.478780][T11498] UDF-fs: Scanning with blocksize 1024 failed [ 183.486128][T10810] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 183.499765][T11498] syz.2.659: attempt to access beyond end of device [ 183.499765][T11498] loop2: rw=0, sector=64, nr_sectors = 4 limit=0 [ 183.571579][T11498] syz.2.659: attempt to access beyond end of device [ 183.571579][T11498] loop2: rw=0, sector=1024, nr_sectors = 4 limit=0 [ 183.590837][T11500] netlink: 32 bytes leftover after parsing attributes in process `syz.3.660'. [ 183.651428][T11498] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 183.671807][T11498] syz.2.659: attempt to access beyond end of device [ 183.671807][T11498] loop2: rw=0, sector=2048, nr_sectors = 4 limit=0 [ 183.710657][T11498] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=512, location=512 [ 183.714604][ T29] audit: type=1326 audit(1728444694.078:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11510 comm="syz.0.658" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5371b7dff9 code=0x7ffc0000 [ 183.742733][ T29] audit: type=1326 audit(1728444694.078:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11510 comm="syz.0.658" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5371b7dff9 code=0x7ffc0000 [ 183.745486][ T2483] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 183.765034][ T29] audit: type=1326 audit(1728444694.078:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11510 comm="syz.0.658" exe="/root/syz-executor" sig=0 arch=c000003e syscall=206 compat=0 ip=0x7f5371b7dff9 code=0x7ffc0000 [ 183.795020][T11498] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found [ 183.795033][ T29] audit: type=1326 audit(1728444694.078:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11510 comm="syz.0.658" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5371b7dff9 code=0x7ffc0000 [ 183.802691][T11498] UDF-fs: Scanning with blocksize 2048 failed [ 183.802987][T11498] syz.2.659: attempt to access beyond end of device [ 183.802987][T11498] loop2: rw=0, sector=64, nr_sectors = 8 limit=0 [ 183.803118][T11498] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 183.803231][T11498] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=512, location=512 [ 183.803249][T11498] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found [ 183.803261][T11498] UDF-fs: Scanning with blocksize 4096 failed [ 183.803270][T11498] UDF-fs: warning (device loop2): udf_fill_super: No partition found (1) [ 183.805541][ T2483] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 183.825838][ T29] audit: type=1326 audit(1728444694.088:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11510 comm="syz.0.658" exe="/root/syz-executor" sig=0 arch=c000003e syscall=208 compat=0 ip=0x7f5371b7dff9 code=0x7ffc0000 [ 183.864379][ T1127] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 183.864401][ T1127] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 183.933352][ T29] audit: type=1326 audit(1728444694.088:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11510 comm="syz.0.658" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5371b7dff9 code=0x7ffc0000 [ 183.959853][ T29] audit: type=1326 audit(1728444694.088:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11510 comm="syz.0.658" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5371b7dff9 code=0x7ffc0000 [ 183.982183][ T29] audit: type=1326 audit(1728444694.088:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11510 comm="syz.0.658" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5371b7dff9 code=0x7ffc0000 [ 183.982337][ T5235] Bluetooth: hci2: command tx timeout [ 184.004848][ T29] audit: type=1326 audit(1728444694.088:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11510 comm="syz.0.658" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5371b7dff9 code=0x7ffc0000 [ 184.243226][T11567] netlink: 32 bytes leftover after parsing attributes in process `syz.3.672'. [ 184.367890][T11578] netlink: 8 bytes leftover after parsing attributes in process `syz.3.675'. [ 184.400023][T11578] bridge0: port 2(bridge_slave_1) entered disabled state [ 184.653625][ T5350] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 184.804230][ T5350] usb 4-1: Using ep0 maxpacket: 8 [ 184.811393][ T5350] usb 4-1: unable to get BOS descriptor or descriptor too short [ 184.820645][ T5350] usb 4-1: config 8 has an invalid interface number: 24 but max is 1 [ 184.829607][ T5350] usb 4-1: config 8 has no interface number 1 [ 184.837411][ T5350] usb 4-1: config 8 interface 24 altsetting 2 endpoint 0xE has invalid maxpacket 1535, setting to 1024 [ 184.850899][ T5350] usb 4-1: config 8 interface 24 altsetting 2 has an endpoint descriptor with address 0xA5, changing to 0x85 [ 184.863071][ T5350] usb 4-1: config 8 interface 24 altsetting 2 endpoint 0x85 has an invalid bInterval 255, changing to 11 [ 184.881286][ T5350] usb 4-1: config 8 interface 24 has no altsetting 0 [ 184.890631][ T5350] usb 4-1: New USB device found, idVendor=10cf, idProduct=5503, bcdDevice=75.af [ 184.907652][ T5350] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 184.916477][ T5350] usb 4-1: Product: syz [ 184.920832][ T5350] usb 4-1: Manufacturer: syz [ 184.928523][ T5350] usb 4-1: SerialNumber: syz [ 184.944219][T11578] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 184.965197][T11618] netlink: 32 bytes leftover after parsing attributes in process `syz.2.685'. [ 185.047558][T11624] netlink: 32 bytes leftover after parsing attributes in process `syz.2.687'. [ 185.211389][ T5350] comedi comedi0: driver 'vmk80xx' has successfully auto-configured 'K8055 (VM110)'. [ 185.223753][ T5350] vmk80xx 4-1:8.0: driver 'vmk80xx' failed to auto-configure device. [ 185.233983][ T5350] usb 4-1: USB disconnect, device number 10 [ 185.346051][T11645] loop0: detected capacity change from 0 to 4096 [ 185.353390][T11645] ntfs3(loop0): Different NTFS sector size (1024) and media sector size (512). [ 185.385515][T11645] ntfs3(loop0): Failed to load $Extend (-22). [ 185.394518][T11645] ntfs3(loop0): Failed to initialize $Extend. [ 185.651556][T11683] netlink: 'syz.1.701': attribute type 16 has an invalid length. [ 185.659540][T11683] netlink: 'syz.1.701': attribute type 17 has an invalid length. [ 185.681805][T11683] syz_tun: left promiscuous mode [ 185.689128][T11683] bridge0: port 2(bridge_slave_1) entered disabled state [ 185.696643][T11683] bridge0: port 1(bridge_slave_0) entered disabled state [ 185.747471][T11683] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 185.761459][T11683] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 185.797178][T11683] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.806252][T11683] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.816942][T11683] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.825878][T11683] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.872437][ T744] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 186.871876][T11698] netlink: 32 bytes leftover after parsing attributes in process `syz.2.705'. [ 186.988633][T11701] loop3: detected capacity change from 0 to 4096 [ 186.990997][T11711] loop0: detected capacity change from 0 to 64 [ 187.015878][T11701] ntfs3(loop3): Different NTFS sector size (1024) and media sector size (512). [ 187.055334][T11701] ntfs3(loop3): Failed to load $Extend (-22). [ 187.073393][T11701] ntfs3(loop3): Failed to initialize $Extend. [ 187.114422][T11711] loop0: detected capacity change from 64 to 63 [ 187.137732][ T5244] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 187.160827][ T5244] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 187.181909][ T5244] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 187.213056][T11735] loop3: detected capacity change from 0 to 256 [ 187.213645][ T5244] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 187.227608][ T5244] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 187.236375][ T5244] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 187.248572][ T744] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 187.252763][T10304] hfs: walked past end of dir [ 187.275411][T11735] FAT-fs (loop3): Directory bread(block 64) failed [ 187.282420][T11735] FAT-fs (loop3): Directory bread(block 65) failed [ 187.290371][T11735] FAT-fs (loop3): Directory bread(block 66) failed [ 187.297723][T11735] FAT-fs (loop3): Directory bread(block 67) failed [ 187.304747][T11735] FAT-fs (loop3): Directory bread(block 68) failed [ 187.311359][T11735] FAT-fs (loop3): Directory bread(block 69) failed [ 187.318199][T11735] FAT-fs (loop3): Directory bread(block 70) failed [ 187.326203][T11735] FAT-fs (loop3): Directory bread(block 71) failed [ 187.333101][T11735] FAT-fs (loop3): Directory bread(block 72) failed [ 187.340268][T11735] FAT-fs (loop3): Directory bread(block 73) failed [ 187.412737][ T744] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 187.479832][T11722] chnl_net:caif_netlink_parms(): no params data found [ 187.501025][ T744] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 187.553164][T11722] bridge0: port 1(bridge_slave_0) entered blocking state [ 187.564213][T11722] bridge0: port 1(bridge_slave_0) entered disabled state [ 187.571915][T11722] bridge_slave_0: entered allmulticast mode [ 187.579547][T11722] bridge_slave_0: entered promiscuous mode [ 187.591767][T11722] bridge0: port 2(bridge_slave_1) entered blocking state [ 187.599329][T11722] bridge0: port 2(bridge_slave_1) entered disabled state [ 187.606781][T11722] bridge_slave_1: entered allmulticast mode [ 187.613763][T11722] bridge_slave_1: entered promiscuous mode [ 187.652494][T11722] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 187.664240][T11722] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 187.720047][ T744] bridge_slave_1: left allmulticast mode [ 187.727615][ T744] bridge_slave_1: left promiscuous mode [ 187.733300][ T744] bridge0: port 2(bridge_slave_1) entered disabled state [ 187.742051][ T744] bridge_slave_0: left allmulticast mode [ 187.750734][ T744] bridge_slave_0: left promiscuous mode [ 187.757282][ T744] bridge0: port 1(bridge_slave_0) entered disabled state [ 187.800344][ T5235] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 187.813406][ T5235] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 187.821112][ T5235] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 187.830431][ T5235] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 187.838410][ T5235] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 187.846009][ T5235] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 187.901250][ T744] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 187.915837][ T744] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 187.926282][ T744] bond0 (unregistering): Released all slaves [ 187.945237][T11722] team0: Port device team_slave_0 added [ 187.958367][T11722] team0: Port device team_slave_1 added [ 187.991640][T11722] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 188.009399][T11722] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 188.038612][T11722] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 188.051502][T11722] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 188.059395][T11722] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 188.086317][T11722] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 188.170446][T11722] hsr_slave_0: entered promiscuous mode [ 188.189453][T11722] hsr_slave_1: entered promiscuous mode [ 188.233593][T11722] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 188.245829][T11722] Cannot create hsr debugfs directory [ 188.460156][T12101] binder: 12068:12101 ioctl c0306201 20000680 returned -14 [ 188.493117][T12104] loop3: detected capacity change from 0 to 256 [ 188.507627][T12100] loop2: detected capacity change from 0 to 4096 [ 188.523082][T12104] FAT-fs (loop3): Directory bread(block 64) failed [ 188.539267][T12104] FAT-fs (loop3): Directory bread(block 65) failed [ 188.546846][T12104] FAT-fs (loop3): Directory bread(block 66) failed [ 188.555606][T12100] ntfs3(loop2): Different NTFS sector size (1024) and media sector size (512). [ 188.582378][T12104] FAT-fs (loop3): Directory bread(block 67) failed [ 188.605150][T12104] FAT-fs (loop3): Directory bread(block 68) failed [ 188.607031][T12100] ntfs3(loop2): Failed to load $Extend (-22). [ 188.633015][T12100] ntfs3(loop2): Failed to initialize $Extend. [ 188.633021][T12104] FAT-fs (loop3): Directory bread(block 69) failed [ 188.633093][T12104] FAT-fs (loop3): Directory bread(block 70) failed [ 188.653489][T12104] FAT-fs (loop3): Directory bread(block 71) failed [ 188.660077][T12104] FAT-fs (loop3): Directory bread(block 72) failed [ 188.677353][T12104] FAT-fs (loop3): Directory bread(block 73) failed [ 188.817010][ T744] hsr_slave_0: left promiscuous mode [ 188.883641][ T744] hsr_slave_1: left promiscuous mode [ 188.908794][ T744] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 188.916328][ T744] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 188.926595][ T744] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 188.950415][ T744] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 189.004897][ T744] veth1_macvtap: left promiscuous mode [ 189.013908][ T744] veth0_macvtap: left promiscuous mode [ 189.019750][ T744] veth1_vlan: left promiscuous mode [ 189.026700][ T744] veth0_vlan: left promiscuous mode [ 189.175613][ T744] team0 (unregistering): Port device team_slave_1 removed [ 189.189645][ T744] team0 (unregistering): Port device team_slave_0 removed [ 189.326144][ T5235] Bluetooth: hci1: command tx timeout [ 189.389799][T11955] chnl_net:caif_netlink_parms(): no params data found [ 189.403333][T12265] netlink: 32 bytes leftover after parsing attributes in process `syz.3.737'. [ 189.584441][T12305] loop2: detected capacity change from 0 to 4096 [ 189.599780][T12305] ntfs3(loop2): Different NTFS sector size (1024) and media sector size (512). [ 189.653607][T12344] loop1: detected capacity change from 0 to 256 [ 189.675349][T11955] bridge0: port 1(bridge_slave_0) entered blocking state [ 189.676354][T12344] FAT-fs (loop1): Directory bread(block 64) failed [ 189.682651][T11955] bridge0: port 1(bridge_slave_0) entered disabled state [ 189.691903][T12344] FAT-fs (loop1): Directory bread(block 65) failed [ 189.711981][T12305] ntfs3(loop2): Failed to load $Extend (-22). [ 189.714809][T12344] FAT-fs (loop1): Directory bread(block 66) failed [ 189.731846][T11955] bridge_slave_0: entered allmulticast mode [ 189.737998][T12305] ntfs3(loop2): Failed to initialize $Extend. [ 189.738146][T12344] FAT-fs (loop1): Directory bread(block 67) failed [ 189.748405][T11955] bridge_slave_0: entered promiscuous mode [ 189.751266][T12344] FAT-fs (loop1): Directory bread(block 68) failed [ 189.768489][T12344] FAT-fs (loop1): Directory bread(block 69) failed [ 189.775924][T12344] FAT-fs (loop1): Directory bread(block 70) failed [ 189.777058][T11955] bridge0: port 2(bridge_slave_1) entered blocking state [ 189.791661][T12344] FAT-fs (loop1): Directory bread(block 71) failed [ 189.804836][T11955] bridge0: port 2(bridge_slave_1) entered disabled state [ 189.812093][T11955] bridge_slave_1: entered allmulticast mode [ 189.821452][T11955] bridge_slave_1: entered promiscuous mode [ 189.829337][T11722] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 189.829347][T12344] FAT-fs (loop1): Directory bread(block 72) failed [ 189.829374][T12344] FAT-fs (loop1): Directory bread(block 73) failed [ 189.883195][T11722] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 189.890647][ T5235] Bluetooth: hci2: command tx timeout [ 189.921980][T11722] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 189.967498][T11955] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 189.977082][T11722] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 189.988234][ T744] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 190.004429][T11955] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 190.029549][T11955] team0: Port device team_slave_0 added [ 190.037553][T11955] team0: Port device team_slave_1 added [ 190.057914][ T744] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 190.080086][T11955] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 190.087360][T11955] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 190.115118][T11955] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 190.128001][T11955] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 190.135335][T11955] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 190.161261][ C1] vkms_vblank_simulate: vblank timer overrun [ 190.168375][T11955] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 190.183295][ T744] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 190.221742][T11955] hsr_slave_0: entered promiscuous mode [ 190.228390][T11955] hsr_slave_1: entered promiscuous mode [ 190.237447][T11955] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 190.245329][T11955] Cannot create hsr debugfs directory [ 190.254997][ T744] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 190.380224][ T744] bridge_slave_1: left allmulticast mode [ 190.386787][ T744] bridge_slave_1: left promiscuous mode [ 190.392477][ T744] bridge0: port 2(bridge_slave_1) entered disabled state [ 190.402704][ T744] bridge_slave_0: left allmulticast mode [ 190.408546][ T744] bridge_slave_0: left promiscuous mode [ 190.414413][ T744] bridge0: port 1(bridge_slave_0) entered disabled state [ 190.488554][ T744] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 190.498608][ T744] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 190.508366][ T744] bond0 (unregistering): Released all slaves [ 190.529672][T11722] 8021q: adding VLAN 0 to HW filter on device bond0 [ 190.542622][T11722] 8021q: adding VLAN 0 to HW filter on device team0 [ 190.554800][ T1127] bridge0: port 1(bridge_slave_0) entered blocking state [ 190.561929][ T1127] bridge0: port 1(bridge_slave_0) entered forwarding state [ 190.573833][ T2966] bridge0: port 2(bridge_slave_1) entered blocking state [ 190.580909][ T2966] bridge0: port 2(bridge_slave_1) entered forwarding state [ 190.690813][T11722] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 190.773896][T12393] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 190.779846][T12393] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 190.789089][T12569] loop2: detected capacity change from 0 to 128 [ 190.813950][T12574] netlink: 32 bytes leftover after parsing attributes in process `syz.3.747'. [ 190.845408][T12393] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 190.866889][T12393] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 191.021467][T12393] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 191.024676][T11722] veth0_vlan: entered promiscuous mode [ 191.032934][T12393] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 191.046592][T11722] veth1_vlan: entered promiscuous mode [ 191.057043][T12393] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 191.072556][T12393] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 191.102369][T11955] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 191.131973][T11955] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 191.140466][T12621] loop2: detected capacity change from 0 to 4096 [ 191.144455][T11955] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 191.164689][T12621] ntfs3(loop2): Different NTFS sector size (1024) and media sector size (512). [ 191.181563][T12621] ntfs3(loop2): Failed to load $Extend (-22). [ 191.212661][T11955] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 191.220122][T12621] ntfs3(loop2): Failed to initialize $Extend. [ 191.237441][T11722] veth0_macvtap: entered promiscuous mode [ 191.250844][T11722] veth1_macvtap: entered promiscuous mode [ 191.278750][T11722] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 191.289267][T11722] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 191.299180][T11722] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 191.309690][T11722] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 191.319591][T11722] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 191.331775][T11722] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 191.342544][T11722] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 191.359951][T11722] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 191.370443][T11722] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 191.380331][T11722] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 191.390827][T11722] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 191.400713][T11722] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 191.411307][T11722] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 191.422086][T11722] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 191.465074][ T744] hsr_slave_0: left promiscuous mode [ 191.472045][ T744] hsr_slave_1: left promiscuous mode [ 191.496619][ T744] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 191.504212][ T744] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 191.512123][ T744] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 191.519753][ T744] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 191.529369][ T744] veth1_macvtap: left promiscuous mode [ 191.537659][ T744] veth0_macvtap: left promiscuous mode [ 191.550264][ T744] veth1_vlan: left promiscuous mode [ 191.555665][ T744] veth0_vlan: left promiscuous mode [ 191.589011][T12659] loop2: detected capacity change from 0 to 4096 [ 191.601888][T12659] EXT4-fs: Ignoring removed nomblk_io_submit option [ 191.629790][T12659] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 191.650315][ T29] kauditd_printk_skb: 9 callbacks suppressed [ 191.650333][ T29] audit: type=1800 audit(1728444702.028:64): pid=12659 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.758" name="file2" dev="loop2" ino=16 res=0 errno=0 [ 191.681063][ T5979] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 191.764477][ T744] team0 (unregistering): Port device team_slave_1 removed [ 191.783576][ T744] team0 (unregistering): Port device team_slave_0 removed [ 191.905630][T11722] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 191.916299][T11722] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 191.939096][T11722] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 191.948073][T11722] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 191.980140][T12684] netlink: 32 bytes leftover after parsing attributes in process `syz.1.764'. [ 192.037886][T11955] 8021q: adding VLAN 0 to HW filter on device bond0 [ 192.051950][T11955] 8021q: adding VLAN 0 to HW filter on device team0 [ 192.078700][T11955] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 192.089695][T11955] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 192.111192][ T5644] bridge0: port 1(bridge_slave_0) entered blocking state [ 192.118381][ T5644] bridge0: port 1(bridge_slave_0) entered forwarding state [ 192.150554][ T5644] bridge0: port 2(bridge_slave_1) entered blocking state [ 192.157821][ T5644] bridge0: port 2(bridge_slave_1) entered forwarding state [ 192.283186][ T5701] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 192.304741][ T5701] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 192.321662][T11955] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 192.356180][ T6860] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 192.378938][ T6860] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 192.395076][T11955] veth0_vlan: entered promiscuous mode [ 192.482181][T11955] veth1_vlan: entered promiscuous mode [ 192.527967][T11955] veth0_macvtap: entered promiscuous mode [ 192.536369][T11955] veth1_macvtap: entered promiscuous mode [ 192.548380][T11955] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 192.559310][T11955] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 192.569918][T11955] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 192.581035][T11955] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 192.610623][T11955] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 192.641704][T11955] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 192.655087][T11955] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 192.664532][T11955] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 192.675369][T11955] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 192.685555][T11955] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 192.703586][T11955] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 192.714586][T11955] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 192.737805][T11955] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 192.756433][T11955] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 192.801131][T11955] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 192.810070][T11955] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 192.819852][T11955] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 192.829716][T11955] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 192.870568][ T2966] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 192.885576][ T2966] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 192.901341][ T1127] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 192.910472][ T1127] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 193.035303][ T5285] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 193.165875][T12783] netlink: 32 bytes leftover after parsing attributes in process `syz.3.776'. [ 193.212556][ T5285] usb 3-1: New USB device found, idVendor=05ac, idProduct=0223, bcdDevice=e1.fc [ 193.230859][ T5285] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 193.270365][T12798] capability: warning: `syz.3.779' uses 32-bit capabilities (legacy support in use) [ 193.270970][ T5285] usb 3-1: config 0 descriptor?? [ 193.291327][ T5285] input: bcm5974 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input10 [ 193.357025][ T6860] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 193.377082][T12808] loop3: detected capacity change from 0 to 128 [ 193.409731][T12808] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 193.422354][T12808] ext4 filesystem being mounted at /167/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 193.457648][ T6090] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 193.492291][ T4673] bcm5974 3-1:0.0: could not read from device [ 193.505073][ T4673] bcm5974 3-1:0.0: could not read from device [ 193.515068][ T5285] usb 3-1: USB disconnect, device number 14 [ 193.525276][ T4673] bcm5974 3-1:0.0: could not read from device [ 193.531892][ T4673] bcm5974 3-1:0.0: could not read from device [ 194.126396][ T6860] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 194.356743][ T6860] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 194.396969][ T6860] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 194.468441][ T6860] bridge_slave_1: left allmulticast mode [ 194.474167][ T6860] bridge_slave_1: left promiscuous mode [ 194.489663][ T6860] bridge0: port 2(bridge_slave_1) entered disabled state [ 194.525179][ T1268] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.531494][ T1268] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.570139][ T6860] bridge_slave_0: left allmulticast mode [ 194.591964][ T6860] bridge_slave_0: left promiscuous mode [ 194.609722][ T6860] bridge0: port 1(bridge_slave_0) entered disabled state [ 194.673017][ T5244] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 194.680477][ T5244] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 194.702177][ T5244] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 194.711321][ T5244] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 194.719344][ T5244] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 194.726769][ T5244] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 194.811271][ T6860] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 194.824271][ T6860] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 194.836770][ T6860] bond0 (unregistering): Released all slaves [ 194.851570][T12856] sp0: Synchronizing with TNC [ 194.851577][T12859] netlink: 32 bytes leftover after parsing attributes in process `syz.0.789'. [ 195.020389][T12899] loop2: detected capacity change from 0 to 256 [ 195.048794][T12899] FAT-fs (loop2): Directory bread(block 64) failed [ 195.076458][T12899] FAT-fs (loop2): Directory bread(block 65) failed [ 195.097294][T12899] FAT-fs (loop2): Directory bread(block 66) failed [ 195.115055][T12899] FAT-fs (loop2): Directory bread(block 67) failed [ 195.132116][T12899] FAT-fs (loop2): Directory bread(block 68) failed [ 195.148792][T12899] FAT-fs (loop2): Directory bread(block 69) failed [ 195.167333][T12899] FAT-fs (loop2): Directory bread(block 70) failed [ 195.181939][T12899] FAT-fs (loop2): Directory bread(block 71) failed [ 195.206048][T12899] FAT-fs (loop2): Directory bread(block 72) failed [ 195.213315][T12899] FAT-fs (loop2): Directory bread(block 73) failed [ 195.256790][ T6860] hsr_slave_0: left promiscuous mode [ 195.262575][ T6860] hsr_slave_1: left promiscuous mode [ 195.269305][ T6860] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 195.279781][ T6860] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 195.296850][ T6860] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 195.305194][ T6860] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 195.316264][ T6860] veth1_macvtap: left promiscuous mode [ 195.343724][ T6860] veth0_macvtap: left promiscuous mode [ 195.349652][ T6860] veth1_vlan: left promiscuous mode [ 195.355381][ T6860] veth0_vlan: left promiscuous mode [ 195.653973][ T6860] team0 (unregistering): Port device team_slave_1 removed [ 195.665987][ T6860] team0 (unregistering): Port device team_slave_0 removed [ 195.764998][T12989] netlink: 32 bytes leftover after parsing attributes in process `syz.3.802'. [ 195.810001][T12860] chnl_net:caif_netlink_parms(): no params data found [ 196.089404][T12860] bridge0: port 1(bridge_slave_0) entered blocking state [ 196.114365][T12860] bridge0: port 1(bridge_slave_0) entered disabled state [ 196.121835][T12860] bridge_slave_0: entered allmulticast mode [ 196.128836][T12860] bridge_slave_0: entered promiscuous mode [ 196.136669][T12860] bridge0: port 2(bridge_slave_1) entered blocking state [ 196.143821][T12860] bridge0: port 2(bridge_slave_1) entered disabled state [ 196.150995][T12860] bridge_slave_1: entered allmulticast mode [ 196.157583][T12860] bridge_slave_1: entered promiscuous mode [ 196.182605][T13104] sp0: Synchronizing with TNC [ 196.245001][T12860] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 196.277778][T12860] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 196.356635][T12860] team0: Port device team_slave_0 added [ 196.365145][T12860] team0: Port device team_slave_1 added [ 196.389778][T12860] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 196.402355][T12860] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 196.430455][T12860] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 196.442703][T12860] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 196.471127][T12860] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 196.497457][T12860] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 196.534659][T12860] hsr_slave_0: entered promiscuous mode [ 196.540783][T12860] hsr_slave_1: entered promiscuous mode [ 196.763742][ T5244] Bluetooth: hci1: command tx timeout [ 196.780224][T12860] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 196.788771][T12860] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 196.797992][T12860] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 196.807113][T12860] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 196.849648][T12860] 8021q: adding VLAN 0 to HW filter on device bond0 [ 196.864252][T12860] 8021q: adding VLAN 0 to HW filter on device team0 [ 196.875183][ T1127] bridge0: port 1(bridge_slave_0) entered blocking state [ 196.882301][ T1127] bridge0: port 1(bridge_slave_0) entered forwarding state [ 196.896520][ T6860] bridge0: port 2(bridge_slave_1) entered blocking state [ 196.903705][ T6860] bridge0: port 2(bridge_slave_1) entered forwarding state [ 196.933300][T12860] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 196.945394][T13328] loop2: detected capacity change from 0 to 2048 [ 196.951830][T12860] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 196.967851][T13328] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 197.092224][T12860] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 197.219091][T12860] veth0_vlan: entered promiscuous mode [ 197.232746][T12860] veth1_vlan: entered promiscuous mode [ 197.263283][T12860] veth0_macvtap: entered promiscuous mode [ 197.278827][T12860] veth1_macvtap: entered promiscuous mode [ 197.317879][T12860] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 197.329824][T12860] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 197.344262][T12860] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 197.376573][T12860] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 197.388742][T12860] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 197.399735][T12860] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 197.412112][T12860] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 197.429369][T12860] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 197.441821][T12860] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 197.453782][T12860] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 197.475736][T12860] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 197.503303][T12860] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 197.530464][T12860] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 197.557983][T12860] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 197.569407][T13359] sp0: Synchronizing with TNC [ 197.596047][T12860] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 197.608025][T13370] input: syz0 as /devices/virtual/input/input11 [ 197.626556][T12860] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 197.635777][T12860] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 197.646066][T12860] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 197.754951][ T2483] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 197.787916][ T2483] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 197.821837][ T2483] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 197.838953][ T2483] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 198.139584][T13411] loop2: detected capacity change from 0 to 1024 [ 198.185823][T13416] loop2: detected capacity change from 0 to 128 [ 198.428004][T13428] loop3: detected capacity change from 0 to 2048 [ 198.437985][T13428] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 198.460363][T13428] UDF-fs: error (device loop3): udf_read_inode: (ino 1347) failed !bh [ 202.776242][ T6860] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 204.479565][ T6860] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 204.539381][T13491] netlink: 20 bytes leftover after parsing attributes in process `syz.0.851'. [ 204.644230][ T6860] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 204.710269][ T6860] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 204.770017][ T5235] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 204.779737][ T5235] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 204.787032][ T5235] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 204.798988][ T5235] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 204.806467][ T5235] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 204.815912][ T5235] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 204.928527][ T6860] bridge_slave_1: left allmulticast mode [ 204.951719][ T6860] bridge_slave_1: left promiscuous mode [ 204.955049][T13514] loop2: detected capacity change from 0 to 32768 [ 204.967707][ T6860] bridge0: port 2(bridge_slave_1) entered disabled state [ 204.977658][ T6860] bridge_slave_0: left allmulticast mode [ 204.983335][ T6860] bridge_slave_0: left promiscuous mode [ 204.993380][T13514] ocfs2: Mounting device (7,2) on (node local, slot 0) with writeback data mode. [ 205.002115][ T6860] bridge0: port 1(bridge_slave_0) entered disabled state [ 205.056512][ T5979] ocfs2: Unmounting device (7,2) on (node local) [ 205.201824][ T6860] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 205.216294][ T6860] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 205.229983][ T6860] bond0 (unregistering): Released all slaves [ 205.324566][T13579] loop1: detected capacity change from 0 to 2048 [ 205.448369][T13515] chnl_net:caif_netlink_parms(): no params data found [ 205.500617][T13579] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 205.527817][T13661] loop3: detected capacity change from 0 to 4096 [ 205.548368][T13579] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 205.561732][T13661] ntfs3(loop3): Different NTFS sector size (1024) and media sector size (512). [ 205.621978][T13661] ntfs3(loop3): Failed to load $Extend (-22). [ 205.696678][T13661] ntfs3(loop3): Failed to initialize $Extend. [ 205.762498][T13515] bridge0: port 1(bridge_slave_0) entered blocking state [ 205.788010][T13515] bridge0: port 1(bridge_slave_0) entered disabled state [ 205.795580][T13515] bridge_slave_0: entered allmulticast mode [ 205.838744][T13515] bridge_slave_0: entered promiscuous mode [ 205.847067][T13515] bridge0: port 2(bridge_slave_1) entered blocking state [ 205.855001][T13515] bridge0: port 2(bridge_slave_1) entered disabled state [ 205.862331][T13515] bridge_slave_1: entered allmulticast mode [ 205.915632][T13515] bridge_slave_1: entered promiscuous mode [ 206.009907][ T6860] hsr_slave_0: left promiscuous mode [ 206.019591][ T6860] hsr_slave_1: left promiscuous mode [ 206.069532][ T6860] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 206.085347][ T6860] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 206.202464][ T6860] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 206.210131][ T6860] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 206.221272][ T6860] veth1_macvtap: left promiscuous mode [ 206.227112][ T6860] veth0_macvtap: left promiscuous mode [ 206.233293][ T6860] veth1_vlan: left promiscuous mode [ 206.239312][ T6860] veth0_vlan: left promiscuous mode [ 206.378169][T13770] loop3: detected capacity change from 0 to 128 [ 206.386827][T13770] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x00067272 (sector = 1) [ 206.459036][ T6860] team0 (unregistering): Port device team_slave_1 removed [ 206.477754][ T6860] team0 (unregistering): Port device team_slave_0 removed [ 206.500072][T13777] loop1: detected capacity change from 0 to 4096 [ 206.523470][T13777] ntfs3(loop1): Different NTFS sector size (1024) and media sector size (512). [ 206.571511][T13777] ntfs3(loop1): Failed to load $Extend (-22). [ 206.578430][T13777] ntfs3(loop1): Failed to initialize $Extend. [ 206.742426][T13809] loop3: detected capacity change from 0 to 64 [ 206.745694][T13759] netlink: 32 bytes leftover after parsing attributes in process `syz.2.874'. [ 206.765658][T13515] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 206.815755][T13515] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 206.858300][ T5244] Bluetooth: hci1: command tx timeout [ 206.926484][T13515] team0: Port device team_slave_0 added [ 206.943914][T13515] team0: Port device team_slave_1 added [ 206.975522][ T6090] hfs: walked past end of dir [ 207.061289][T13515] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 207.072212][T13515] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 207.105916][T13515] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 207.117878][T13515] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 207.125048][T13515] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 207.188531][T13515] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 207.282438][T13515] hsr_slave_0: entered promiscuous mode [ 207.300712][T13515] hsr_slave_1: entered promiscuous mode [ 207.329152][T13928] loop1: detected capacity change from 0 to 4096 [ 207.341766][T13928] ntfs3(loop1): Different NTFS sector size (1024) and media sector size (512). [ 207.366611][T13928] ntfs3(loop1): Failed to load $Extend (-22). [ 207.376921][T13928] ntfs3(loop1): Failed to initialize $Extend. [ 207.492776][ T5235] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 207.502743][ T5235] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 207.510438][ T5235] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 207.530978][ T5235] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 207.542193][ T5235] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 207.550190][ T5235] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 207.602773][T14015] netlink: 32 bytes leftover after parsing attributes in process `syz.1.896'. [ 207.755651][T13515] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 207.803018][T13515] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 207.837534][T13515] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 207.885732][T14144] loop0: detected capacity change from 0 to 64 [ 207.926761][T13992] chnl_net:caif_netlink_parms(): no params data found [ 207.938191][T13515] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 207.974223][T14144] loop0: detected capacity change from 64 to 63 [ 207.999438][T13515] 8021q: adding VLAN 0 to HW filter on device bond0 [ 208.020965][T13515] 8021q: adding VLAN 0 to HW filter on device team0 [ 208.039618][ T6860] bridge0: port 1(bridge_slave_0) entered blocking state [ 208.046812][ T6860] bridge0: port 1(bridge_slave_0) entered forwarding state [ 208.056147][T14158] loop2: detected capacity change from 0 to 4096 [ 208.060800][T11955] hfs: walked past end of dir [ 208.064379][T14158] ntfs3(loop2): Different NTFS sector size (1024) and media sector size (512). [ 208.101974][ T6860] bridge0: port 2(bridge_slave_1) entered blocking state [ 208.105565][T14158] ntfs3(loop2): Failed to load $Extend (-22). [ 208.109110][ T6860] bridge0: port 2(bridge_slave_1) entered forwarding state [ 208.125279][T14158] ntfs3(loop2): Failed to initialize $Extend. [ 208.206879][T13992] bridge0: port 1(bridge_slave_0) entered blocking state [ 208.214901][T13992] bridge0: port 1(bridge_slave_0) entered disabled state [ 208.222355][T13992] bridge_slave_0: entered allmulticast mode [ 208.229847][T13992] bridge_slave_0: entered promiscuous mode [ 208.238133][T13992] bridge0: port 2(bridge_slave_1) entered blocking state [ 208.245717][T13992] bridge0: port 2(bridge_slave_1) entered disabled state [ 208.253755][T13992] bridge_slave_1: entered allmulticast mode [ 208.261811][T13992] bridge_slave_1: entered promiscuous mode [ 208.317817][T13992] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 208.360555][T13992] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 208.409630][T13992] team0: Port device team_slave_0 added [ 208.417489][T13992] team0: Port device team_slave_1 added [ 208.459843][T13992] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 208.470048][T13992] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 208.498745][T13992] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 208.515441][T13992] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 208.522454][T13992] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 208.550962][T13992] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 208.614558][T13992] hsr_slave_0: entered promiscuous mode [ 208.636241][ T5244] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 208.643782][T13992] hsr_slave_1: entered promiscuous mode [ 208.656948][T13992] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 208.665244][T13992] Cannot create hsr debugfs directory [ 208.667353][ T5244] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 208.680040][ T5244] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 208.688578][ T5244] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 208.696862][ T5244] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 208.704375][ T5244] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 208.787511][T13992] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 208.837574][T13992] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 208.855684][T14410] netlink: 32 bytes leftover after parsing attributes in process `syz.1.910'. [ 208.881576][T13515] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 208.904774][T13992] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 208.925329][ T5244] Bluetooth: hci1: command tx timeout [ 208.986750][T13992] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 209.445499][T14330] chnl_net:caif_netlink_parms(): no params data found [ 209.502163][T13992] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 209.528397][T13992] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 209.564001][ T5244] Bluetooth: hci0: command tx timeout [ 209.565502][T13992] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 209.579813][T13992] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 209.626381][T14330] bridge0: port 1(bridge_slave_0) entered blocking state [ 209.634154][T14330] bridge0: port 1(bridge_slave_0) entered disabled state [ 209.642084][T14330] bridge_slave_0: entered allmulticast mode [ 209.652164][T14330] bridge_slave_0: entered promiscuous mode [ 209.660410][T14330] bridge0: port 2(bridge_slave_1) entered blocking state [ 209.668249][T14330] bridge0: port 2(bridge_slave_1) entered disabled state [ 209.675927][T14330] bridge_slave_1: entered allmulticast mode [ 209.682756][T14330] bridge_slave_1: entered promiscuous mode [ 209.711923][T14330] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 209.728738][T14330] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 209.753942][ T5285] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 209.778564][T14330] team0: Port device team_slave_0 added [ 209.788117][T14330] team0: Port device team_slave_1 added [ 209.830449][T14330] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 209.837747][T14330] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 209.864820][T14330] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 209.891352][T14330] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 209.898569][T14330] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 209.914710][ T5285] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 209.924760][T14330] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 209.955772][ T5285] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 209.971668][ T5285] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 209.990640][ T5285] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 209.992997][T14330] hsr_slave_0: entered promiscuous mode [ 210.005852][ T5285] usb 3-1: config 0 descriptor?? [ 210.025287][T14330] hsr_slave_1: entered promiscuous mode [ 210.032914][T14330] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 210.041479][T14330] Cannot create hsr debugfs directory [ 210.052097][T13515] veth0_vlan: entered promiscuous mode [ 210.062339][T13515] veth1_vlan: entered promiscuous mode [ 210.120300][T13992] 8021q: adding VLAN 0 to HW filter on device bond0 [ 210.158198][T13992] 8021q: adding VLAN 0 to HW filter on device team0 [ 210.178995][ T5644] bridge0: port 1(bridge_slave_0) entered blocking state [ 210.186158][ T5644] bridge0: port 1(bridge_slave_0) entered forwarding state [ 210.200968][ T5701] bridge0: port 2(bridge_slave_1) entered blocking state [ 210.208100][ T5701] bridge0: port 2(bridge_slave_1) entered forwarding state [ 210.220955][T13515] veth0_macvtap: entered promiscuous mode [ 210.233218][T14330] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 210.249120][T13515] veth1_macvtap: entered promiscuous mode [ 210.271138][T13515] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 210.281939][T13515] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 210.292193][T13515] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 210.305312][T13515] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 210.315706][T13515] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 210.326181][T13515] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 210.337107][T13515] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 210.349597][T14330] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 210.371544][T13515] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 210.382202][T13515] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 210.392122][T13515] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 210.402584][T13515] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 210.412440][T13515] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 210.423285][T13515] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 210.434209][T13515] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 210.449095][T13992] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 210.459799][T13992] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 210.477710][T13515] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.486516][T13515] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.495640][T13515] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.504836][T13515] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.518198][T14330] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 210.574833][T14330] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 210.651652][ T2483] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 210.662153][ T2483] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 210.719812][ T5701] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 210.726909][T14330] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 210.736246][ T5701] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 210.747018][T14330] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 210.757611][T14330] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 210.765416][ T5244] Bluetooth: hci2: command tx timeout [ 210.777921][T14330] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 210.796009][T13992] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 210.827364][T13992] veth0_vlan: entered promiscuous mode [ 210.838705][T13992] veth1_vlan: entered promiscuous mode [ 210.875100][ T5285] usb 3-1: string descriptor 0 read error: -71 [ 210.882164][ T5285] uclogic 0003:256C:006D.0006: failed retrieving string descriptor #200: -71 [ 210.891817][ T5285] uclogic 0003:256C:006D.0006: failed retrieving pen parameters: -71 [ 210.900243][ T5285] uclogic 0003:256C:006D.0006: failed probing pen v2 parameters: -71 [ 210.908472][ T5285] uclogic 0003:256C:006D.0006: failed probing parameters: -71 [ 210.916330][ T5285] uclogic 0003:256C:006D.0006: probe with driver uclogic failed with error -71 [ 210.922501][T14330] 8021q: adding VLAN 0 to HW filter on device bond0 [ 210.932703][ T5285] usb 3-1: USB disconnect, device number 15 [ 210.964040][T14330] 8021q: adding VLAN 0 to HW filter on device team0 [ 211.005250][ T2966] bridge0: port 1(bridge_slave_0) entered blocking state [ 211.012378][ T2966] bridge0: port 1(bridge_slave_0) entered forwarding state [ 211.022602][ T2966] bridge0: port 2(bridge_slave_1) entered blocking state [ 211.029730][ T2966] bridge0: port 2(bridge_slave_1) entered forwarding state [ 211.049766][T14836] netlink: 32 bytes leftover after parsing attributes in process `syz.1.920'. [ 211.060662][T13992] veth0_macvtap: entered promiscuous mode [ 211.072940][T13992] veth1_macvtap: entered promiscuous mode [ 211.111697][T13992] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 211.127460][T13992] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 211.137647][T13992] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 211.148367][T13992] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 211.158435][T13992] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 211.169174][T13992] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 211.179280][T13992] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 211.190103][T13992] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 211.201210][T13992] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 211.217294][T13992] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 211.233104][T13992] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 211.244036][T13992] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 211.256101][T13992] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 211.267822][T13992] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 211.279612][T13992] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 211.290878][T13992] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 211.301981][T13992] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 211.313397][T13992] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 211.328548][T13992] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 211.338636][T13992] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 211.352116][T13992] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 211.361852][T13992] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 211.386386][T14330] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 211.428187][T14330] veth0_vlan: entered promiscuous mode [ 211.437934][T14330] veth1_vlan: entered promiscuous mode [ 211.455818][T14330] veth0_macvtap: entered promiscuous mode [ 211.458946][T14847] loop1: detected capacity change from 0 to 4096 [ 211.464236][T14330] veth1_macvtap: entered promiscuous mode [ 211.482697][T14330] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 211.493876][T14330] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 211.503905][T14330] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 211.514695][T14330] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 211.524657][T14330] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 211.535334][T14330] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 211.545371][T14330] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 211.556252][T14330] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 211.561321][T14847] ntfs3(loop1): Different NTFS sector size (1024) and media sector size (512). [ 211.566530][T14330] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 211.586090][T14330] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 211.598307][T14330] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 211.608488][T14850] sp0: Synchronizing with TNC [ 211.619862][T14847] ntfs3(loop1): Failed to load $Extend (-22). [ 211.622880][T14330] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 211.626119][T14847] ntfs3(loop1): Failed to initialize $Extend. [ 211.639471][T14330] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 211.652707][T14330] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 211.663379][T14330] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 211.673365][T14330] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 211.684323][T14330] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 211.689587][ T5244] Bluetooth: hci0: command tx timeout [ 211.694517][T14330] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 211.710233][T14330] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 211.720292][T14330] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 211.731375][T14330] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 211.746117][T14330] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 211.777075][T14330] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 211.787085][T14330] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 211.796112][T14330] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 211.805076][T14330] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 211.878887][ T2966] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 211.898118][ T2966] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 211.932108][ T2483] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 211.940603][ T2483] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 211.988480][ T5701] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 212.022366][ T1127] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 212.031509][ T1127] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 212.043156][ T1127] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 212.060834][ T1127] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 212.277303][ T5701] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 212.449629][ T5701] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 212.516511][ T5701] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 212.591788][ T5701] bridge_slave_1: left allmulticast mode [ 212.598480][ T5701] bridge_slave_1: left promiscuous mode [ 212.605400][ T5701] bridge0: port 2(bridge_slave_1) entered disabled state [ 212.616778][ T5701] bridge_slave_0: left allmulticast mode [ 212.622476][ T5701] bridge_slave_0: left promiscuous mode [ 212.628991][ T5701] bridge0: port 1(bridge_slave_0) entered disabled state [ 212.709115][ T5701] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 212.720068][ T5701] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 212.732268][ T5701] bond0 (unregistering): Released all slaves [ 212.853649][ T5244] Bluetooth: hci2: command tx timeout [ 212.949697][ T5701] hsr_slave_0: left promiscuous mode [ 212.956050][ T5701] hsr_slave_1: left promiscuous mode [ 212.962038][ T5701] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 212.969644][ T5701] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 212.979141][ T5701] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 212.988119][ T5701] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 212.999210][ T5701] veth1_macvtap: left promiscuous mode [ 213.008027][ T5701] veth0_macvtap: left promiscuous mode [ 213.013671][ T5701] veth1_vlan: left promiscuous mode [ 213.019232][ T5701] veth0_vlan: left promiscuous mode [ 213.107705][ T5701] team0 (unregistering): Port device team_slave_1 removed [ 213.123870][ T5701] team0 (unregistering): Port device team_slave_0 removed [ 213.424281][T14938] netlink: 32 bytes leftover after parsing attributes in process `syz.0.929'. [ 213.547577][ T5235] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 213.555187][ T5235] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 213.562417][ T5235] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 213.572583][ T5235] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 213.580334][ T5235] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 213.583904][ T938] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 213.603709][ T5235] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 213.625995][T14949] loop1: detected capacity change from 0 to 4096 [ 213.651494][T14949] ntfs3(loop1): Different NTFS sector size (1024) and media sector size (512). [ 213.700620][T14949] ntfs3(loop1): Failed to load $Extend (-22). [ 213.708558][T14949] ntfs3(loop1): Failed to initialize $Extend. [ 213.785764][ T5244] Bluetooth: hci0: command tx timeout [ 213.839303][T14966] sp0: Synchronizing with TNC [ 213.872944][ T938] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 213.895659][ T938] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 213.906840][ T938] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 213.916676][ T938] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 213.933688][ T938] usb 4-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 213.947850][ T938] usb 4-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 213.957930][ T938] usb 4-1: Manufacturer: syz [ 213.973939][ T938] usb 4-1: config 0 descriptor?? [ 214.021976][T14950] chnl_net:caif_netlink_parms(): no params data found [ 214.059566][T15087] loop1: detected capacity change from 0 to 4096 [ 214.084480][T15102] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 214.101962][T15087] NILFS error (device loop1): nilfs_dotdot: directory #12 missing '.' [ 214.116963][T15087] Remounting filesystem read-only [ 214.124179][T15087] NILFS (loop1): mounting fs with errors [ 214.132746][T15087] NILFS error (device loop1): nilfs_dotdot: directory #12 missing '.' [ 214.141593][T15087] Remounting filesystem read-only [ 214.202211][T14950] bridge0: port 1(bridge_slave_0) entered blocking state [ 214.210248][T14950] bridge0: port 1(bridge_slave_0) entered disabled state [ 214.217548][T14950] bridge_slave_0: entered allmulticast mode [ 214.234305][T14950] bridge_slave_0: entered promiscuous mode [ 214.243839][T14950] bridge0: port 2(bridge_slave_1) entered blocking state [ 214.251074][T14950] bridge0: port 2(bridge_slave_1) entered disabled state [ 214.258821][T14950] bridge_slave_1: entered allmulticast mode [ 214.266339][T14950] bridge_slave_1: entered promiscuous mode [ 214.309534][T15168] netlink: 32 bytes leftover after parsing attributes in process `syz.0.943'. [ 214.321650][T14950] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 214.332962][T14950] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 214.387465][T14950] team0: Port device team_slave_0 added [ 214.390066][ T938] appleir 0003:05AC:8243.0007: unknown main item tag 0x0 [ 214.396684][T14950] team0: Port device team_slave_1 added [ 214.406914][ T938] appleir 0003:05AC:8243.0007: No inputs registered, leaving [ 214.418231][ T938] appleir 0003:05AC:8243.0007: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.3-1/input0 [ 214.433332][T14950] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 214.451885][T14950] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 214.477816][ C1] vkms_vblank_simulate: vblank timer overrun [ 214.486736][T14950] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 214.498619][T14950] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 214.506947][T14950] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 214.535369][T14950] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 214.571422][T14950] hsr_slave_0: entered promiscuous mode [ 214.578138][T14950] hsr_slave_1: entered promiscuous mode [ 214.765866][T15348] sp0: Synchronizing with TNC [ 214.767116][T15343] loop2: detected capacity change from 0 to 4096 [ 214.779615][T15343] ntfs3(loop2): Different NTFS sector size (1024) and media sector size (512). [ 214.800172][T15343] ntfs3(loop2): Failed to load $Extend (-22). [ 214.806539][T15343] ntfs3(loop2): Failed to initialize $Extend. [ 214.926084][ T5235] Bluetooth: hci2: command tx timeout [ 214.938482][T15375] loop0: detected capacity change from 0 to 256 [ 214.980651][T15381] netlink: 32 bytes leftover after parsing attributes in process `syz.2.955'. [ 215.100975][T14950] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 215.111397][T14950] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 215.137702][T14950] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 215.160079][T14950] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 215.215745][T14950] bridge0: port 2(bridge_slave_1) entered blocking state [ 215.222916][T14950] bridge0: port 2(bridge_slave_1) entered forwarding state [ 215.246211][ T6857] bridge0: port 2(bridge_slave_1) entered disabled state [ 215.368539][T14950] 8021q: adding VLAN 0 to HW filter on device bond0 [ 215.387774][T14950] 8021q: adding VLAN 0 to HW filter on device team0 [ 215.400421][T15419] loop1: detected capacity change from 0 to 4096 [ 215.418746][ T6857] bridge0: port 1(bridge_slave_0) entered blocking state [ 215.425888][ T6857] bridge0: port 1(bridge_slave_0) entered forwarding state [ 215.434041][T15419] ntfs3(loop1): Different NTFS sector size (1024) and media sector size (512). [ 215.468272][ T1127] bridge0: port 2(bridge_slave_1) entered blocking state [ 215.475406][ T1127] bridge0: port 2(bridge_slave_1) entered forwarding state [ 215.480192][T15419] ntfs3(loop1): Failed to load $Extend (-22). [ 215.487236][T15433] netlink: 32 bytes leftover after parsing attributes in process `syz.2.967'. [ 215.489841][T15419] ntfs3(loop1): Failed to initialize $Extend. [ 215.572273][T15431] loop0: detected capacity change from 0 to 1024 [ 215.625442][T15431] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 215.644863][ T5235] Bluetooth: hci1: command tx timeout [ 215.700852][T14950] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 215.805620][ T5235] Bluetooth: hci0: command tx timeout [ 215.847912][T15431] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 215.932815][T14950] veth0_vlan: entered promiscuous mode [ 215.946286][T14950] veth1_vlan: entered promiscuous mode [ 215.985081][T14330] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 216.006730][T14950] veth0_macvtap: entered promiscuous mode [ 216.018796][T14950] veth1_macvtap: entered promiscuous mode [ 216.038638][T14950] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 216.050778][T14950] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 216.063812][T14950] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 216.078660][T14950] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 216.089940][T14950] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 216.102975][T14950] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 216.113366][T14950] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 216.128234][T14950] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 216.138407][T14950] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 216.151304][T14950] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 216.162657][T14950] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 216.193029][T14950] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 216.206525][T14950] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 216.217574][T14950] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 216.230956][T14950] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 216.241601][T14950] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 216.254718][T14950] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 216.265984][T14950] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 216.277974][T14950] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 216.291865][T14950] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 216.306216][T14950] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 216.317553][T14950] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 216.333527][T14950] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 216.354155][T14950] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 216.370258][ T5233] usb 4-1: USB disconnect, device number 11 [ 216.390223][T14950] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 216.399392][T14950] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 216.523888][ T744] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 216.531748][ T744] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 216.542585][ T5701] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 216.550597][ T5701] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 217.004359][ T5235] Bluetooth: hci2: command tx timeout [ 217.126585][T15531] netlink: 32 bytes leftover after parsing attributes in process `syz.3.979'. [ 217.338375][T15544] netlink: 32 bytes leftover after parsing attributes in process `syz.3.983'. [ 217.396576][T15543] loop2: detected capacity change from 0 to 4096 [ 217.407443][T15543] ntfs3(loop2): Different NTFS sector size (1024) and media sector size (512). [ 217.452710][T15543] ntfs3(loop2): Failed to load $Extend (-22). [ 217.463050][T15543] ntfs3(loop2): Failed to initialize $Extend. [ 217.652424][T15572] loop2: detected capacity change from 0 to 64 [ 217.809251][T15584] loop1: detected capacity change from 0 to 256 [ 217.822148][T15584] exfat: Deprecated parameter 'utf8' [ 217.839693][T15584] exfat: Deprecated parameter 'utf8' [ 217.848738][T15581] netlink: 32 bytes leftover after parsing attributes in process `syz.2.990'. [ 217.878822][T15584] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 218.285940][ T1127] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 218.400498][T15606] netlink: 32 bytes leftover after parsing attributes in process `syz.2.995'. [ 219.576214][ T1127] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 219.627944][ T1127] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 219.676458][ T1127] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 219.735902][ T1127] bridge_slave_1: left allmulticast mode [ 219.742363][ T1127] bridge_slave_1: left promiscuous mode [ 219.748362][ T1127] bridge0: port 2(bridge_slave_1) entered disabled state [ 219.756571][ T1127] bridge_slave_0: left allmulticast mode [ 219.762206][ T1127] bridge_slave_0: left promiscuous mode [ 219.768196][ T1127] bridge0: port 1(bridge_slave_0) entered disabled state [ 219.844405][T15636] loop3: detected capacity change from 0 to 64 [ 219.917386][ T1127] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 219.931390][T15634] loop1: detected capacity change from 0 to 4096 [ 219.942095][ T1127] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 219.952242][T15634] ntfs3(loop1): Different NTFS sector size (1024) and media sector size (512). [ 219.970301][ T1127] bond0 (unregistering): Released all slaves [ 219.992122][T15633] netlink: 'syz.2.999': attribute type 4 has an invalid length. [ 220.002014][T15634] ntfs3(loop1): Failed to load $Extend (-22). [ 220.014957][T15634] ntfs3(loop1): Failed to initialize $Extend. [ 220.125108][T15651] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1002'. [ 220.139224][ T5244] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 220.147021][ T5244] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 220.157702][ T5244] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 220.167235][ T5244] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 220.177644][ T5244] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 220.186778][ T5244] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 220.240980][T15669] netlink: 'syz.1.1007': attribute type 1 has an invalid length. [ 220.265433][T15669] loop1: detected capacity change from 0 to 1024 [ 220.272325][T15669] EXT4-fs: Ignoring removed orlov option [ 220.297633][T15669] EXT4-fs: Ignoring removed nomblk_io_submit option [ 220.446149][T15669] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 220.611474][ T1127] hsr_slave_0: left promiscuous mode [ 220.668629][ T1127] hsr_slave_1: left promiscuous mode [ 220.691032][ T1127] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 220.724383][ T1127] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 220.784643][ T1127] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 220.801956][ T1127] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 220.821235][ T6016] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 220.831225][ T1127] veth1_macvtap: left promiscuous mode [ 220.840966][ T1127] veth0_macvtap: left promiscuous mode [ 220.929364][T15799] loop0: detected capacity change from 0 to 32768 [ 220.966951][ T1127] veth1_vlan: left promiscuous mode [ 221.000476][T15805] loop0: detected capacity change from 0 to 4096 [ 221.008529][ T1127] veth0_vlan: left promiscuous mode [ 221.179635][T15807] loop1: detected capacity change from 0 to 4096 [ 221.237603][T15814] loop0: detected capacity change from 0 to 4096 [ 221.270162][T15814] ntfs3(loop0): Different NTFS sector size (1024) and media sector size (512). [ 221.290869][T15807] ntfs3(loop1): Mark volume as dirty due to NTFS errors [ 221.299283][T15807] ntfs3(loop1): mft corrupted [ 221.306926][T15807] ntfs3(loop1): Failed to load $MFT. [ 221.355095][T15814] ntfs3(loop0): Failed to load $Extend (-22). [ 221.361922][T15814] ntfs3(loop0): Failed to initialize $Extend. [ 221.473085][ T1127] team0 (unregistering): Port device team_slave_1 removed [ 221.486027][ T1127] team0 (unregistering): Port device team_slave_0 removed [ 221.539656][T15791] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1010'. [ 221.552917][T15657] chnl_net:caif_netlink_parms(): no params data found [ 221.573276][T15824] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 221.595272][T15829] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1017'. [ 221.771208][T15657] bridge0: port 1(bridge_slave_0) entered blocking state [ 221.783732][T15657] bridge0: port 1(bridge_slave_0) entered disabled state [ 221.802907][T15657] bridge_slave_0: entered allmulticast mode [ 221.811807][T15888] netlink: 'syz.3.1022': attribute type 1 has an invalid length. [ 221.844024][T15909] loop2: detected capacity change from 0 to 64 [ 221.847351][T15657] bridge_slave_0: entered promiscuous mode [ 221.869665][ T29] audit: type=1804 audit(1728444732.248:65): pid=15909 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.1023" name=2F6E6577726F6F742F3235332F131377C5FC35D41454D5D41D29AD1A6029598146E6BE166E41AD0DBD4054033C9F33BBDA8224A2F3D772E7636E48B33CBF708372E8F1B9933EC5127743BE2206209EF02DF9CBF2F6E880D3382F627573 dev="loop2" ino=21 res=1 errno=0 [ 221.873067][T15888] loop3: detected capacity change from 0 to 1024 [ 221.913855][T15657] bridge0: port 2(bridge_slave_1) entered blocking state [ 221.921137][T15657] bridge0: port 2(bridge_slave_1) entered disabled state [ 221.931353][T15657] bridge_slave_1: entered allmulticast mode [ 221.942115][T15657] bridge_slave_1: entered promiscuous mode [ 221.962636][T15888] EXT4-fs: Ignoring removed orlov option [ 221.999395][T15888] EXT4-fs: Ignoring removed nomblk_io_submit option [ 222.032782][T15888] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 222.088619][T15657] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 222.114370][T15657] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 222.172598][T15657] team0: Port device team_slave_0 added [ 222.203702][ T5235] Bluetooth: hci1: command tx timeout [ 222.214334][T15657] team0: Port device team_slave_1 added [ 222.335264][T15657] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 222.355790][T13992] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 222.371189][T16007] loop2: detected capacity change from 0 to 1024 [ 222.377875][T15657] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 222.421044][T15657] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 222.435756][T15657] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 222.443363][T15657] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 222.547980][T15657] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 222.687375][T15657] hsr_slave_0: entered promiscuous mode [ 222.701302][T15657] hsr_slave_1: entered promiscuous mode [ 222.817082][T16066] loop3: detected capacity change from 0 to 4096 [ 222.865543][T16107] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 222.954629][T16122] loop2: detected capacity change from 0 to 64 [ 223.005379][ T29] audit: type=1804 audit(1728444733.388:66): pid=16122 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.1036" name=2F6E6577726F6F742F3236302F131377C5FC35D41454D5D41D29AD1A6029598146E6BE166E41AD0DBD4054033C9F33BBDA8224A2F3D772E7636E48B33CBF708372E8F1B9933EC5127743BE2206209EF02DF9CBF2F6E880D3382F627573 dev="loop2" ino=21 res=1 errno=0 [ 223.280883][T16174] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1045'. [ 223.307981][T16184] loop3: detected capacity change from 0 to 512 [ 223.315129][T16184] EXT4-fs: Ignoring removed mblk_io_submit option [ 223.320919][T15657] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 223.336062][T16184] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=b856c118, mo2=0002] [ 223.345244][T16184] System zones: 1-12 [ 223.349940][T16184] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2240: inode #15: comm syz.3.1046: corrupted in-inode xattr: e_value size too large [ 223.355201][T15657] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 223.376419][T15657] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 223.379246][T16192] loop2: detected capacity change from 0 to 1024 [ 223.386468][T16184] EXT4-fs error (device loop3): ext4_orphan_get:1393: comm syz.3.1046: couldn't read orphan inode 15 (err -117) [ 223.390111][T16192] hfsplus: Bad value for 'session' [ 223.408022][T15657] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 223.413409][T16192] bio_check_eod: 2 callbacks suppressed [ 223.413773][T16192] syz.2.1047: attempt to access beyond end of device [ 223.413773][T16192] nbd2: rw=0, sector=0, nr_sectors = 1 limit=0 [ 223.433162][T16192] exFAT-fs (nbd2): unable to read boot sector [ 223.445872][T16192] exFAT-fs (nbd2): failed to read boot sector [ 223.452180][T16192] exFAT-fs (nbd2): failed to recognize exfat type [ 223.484534][T15657] 8021q: adding VLAN 0 to HW filter on device bond0 [ 223.490543][T16184] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 223.498456][T15657] 8021q: adding VLAN 0 to HW filter on device team0 [ 223.524450][ T2483] bridge0: port 1(bridge_slave_0) entered blocking state [ 223.531602][ T2483] bridge0: port 1(bridge_slave_0) entered forwarding state [ 223.566206][ T2483] bridge0: port 2(bridge_slave_1) entered blocking state [ 223.573336][ T2483] bridge0: port 2(bridge_slave_1) entered forwarding state [ 223.594705][T15657] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 223.610828][T13992] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 223.689316][T16210] netlink: 'syz.3.1049': attribute type 1 has an invalid length. [ 223.707167][T16210] loop3: detected capacity change from 0 to 1024 [ 223.711234][T15657] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 223.732295][T16210] EXT4-fs: Ignoring removed orlov option [ 223.752747][T16210] EXT4-fs: Ignoring removed nomblk_io_submit option [ 223.808848][T16210] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 223.859598][T15657] veth0_vlan: entered promiscuous mode [ 223.876369][T15657] veth1_vlan: entered promiscuous mode [ 223.893213][T15657] veth0_macvtap: entered promiscuous mode [ 223.901263][T15657] veth1_macvtap: entered promiscuous mode [ 223.913182][T15657] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 223.923701][T15657] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 223.933654][T15657] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 223.944309][T15657] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 223.954230][T15657] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 223.966692][T15657] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 223.977212][T15657] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 223.987933][T15657] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 223.998063][T15657] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 224.008847][T15657] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 224.021666][T15657] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 224.031108][T15657] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 224.041641][T15657] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 224.051880][T15657] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 224.062596][T15657] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 224.072741][T15657] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 224.083674][T15657] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 224.094016][T15657] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 224.104770][T15657] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 224.114819][T15657] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 224.125534][T15657] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 224.137776][T15657] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 224.159649][T15657] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 224.168871][T15657] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 224.178059][T15657] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 224.187181][T15657] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 224.254674][ T2483] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 224.262582][ T2483] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 224.274610][ T6857] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 224.283828][ T6857] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 224.302248][ T5235] Bluetooth: hci1: command tx timeout [ 224.314225][T13992] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 224.424371][T16254] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 224.537075][T16271] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1057'. [ 224.722955][ T5233] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 224.874544][ T5233] usb 4-1: Using ep0 maxpacket: 8 [ 224.884226][ T5233] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 224.896157][ T5233] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 224.906516][ T5233] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 224.916632][ T5233] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 224.937221][T16293] loop0: detected capacity change from 0 to 64 [ 224.971596][ T29] audit: type=1804 audit(1728444735.348:67): pid=16293 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.1064" name=2F6E6577726F6F742F32382F131377C5FC35D41454D5D41D29AD1A6029598146E6BE166E41AD0DBD4054033C9F33BBDA8224A2F3D772E7636E48B33CBF708372E8F1B9933EC5127743BE2206209EF02DF9CBF2F6E880D3382F627573 dev="loop0" ino=21 res=1 errno=0 [ 225.038386][ T5233] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 225.073673][ T5233] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 225.225239][T16310] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1068'. [ 225.308251][ T5233] usb 4-1: GET_CAPABILITIES returned 0 [ 225.361528][T16310] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1068'. [ 225.372154][ T5233] usbtmc 4-1:16.0: can't read capabilities [ 225.479374][T16330] loop2: detected capacity change from 0 to 128 [ 225.497023][ T5233] usb 4-1: USB disconnect, device number 12 [ 225.629953][T16353] loop2: detected capacity change from 0 to 64 [ 225.655205][ T29] audit: type=1804 audit(1728444736.038:68): pid=16353 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.1076" name=2F6E6577726F6F742F3237362F131377C5FC35D41454D5D41D29AD1A6029598146E6BE166E41AD0DBD4054033C9F33BBDA8224A2F3D772E7636E48B33CBF708372E8F1B9933EC5127743BE2206209EF02DF9CBF2F6E880D3382F627573 dev="loop2" ino=21 res=1 errno=0 [ 226.149266][ T1127] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 227.809284][T16388] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1084'. [ 227.818777][T16385] loop1: detected capacity change from 0 to 128 [ 227.833340][T16385] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 227.848867][T16385] ext4 filesystem being mounted at /263/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 227.899701][T16386] sp0: Synchronizing with TNC [ 227.913377][ T1127] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 227.917407][ T6016] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 227.982350][T16414] loop0: detected capacity change from 0 to 256 [ 227.990714][ T5244] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 227.998259][ T5244] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 228.006190][ T5244] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 228.013949][ T5244] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 228.021398][ T5244] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 228.029049][ T5244] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 228.157303][ T1127] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 228.202619][T16440] loop3: detected capacity change from 0 to 1024 [ 228.225279][T16440] hfsplus: xattr searching failed [ 228.231522][T16440] hfsplus: xattr searching failed [ 228.247655][ T1127] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 228.272735][T16443] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1090'. [ 228.423529][ T29] audit: type=1326 audit(1728444738.798:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16469 comm="syz.3.1093" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fdd98f7dff9 code=0x0 [ 228.485126][ T1127] bridge_slave_1: left allmulticast mode [ 228.513313][ T1127] bridge_slave_1: left promiscuous mode [ 228.528285][ T1127] bridge0: port 2(bridge_slave_1) entered disabled state [ 228.539779][ T1127] bridge_slave_0: left allmulticast mode [ 228.546166][ T1127] bridge_slave_0: left promiscuous mode [ 228.552305][ T1127] bridge0: port 1(bridge_slave_0) entered disabled state [ 228.643841][ T5995] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 228.716082][ T1127] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 228.796311][ T1127] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 228.805032][ T5995] usb 1-1: Using ep0 maxpacket: 8 [ 228.811990][ T5995] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 228.825216][ T5995] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 228.835869][ T1127] bond0 (unregistering): Released all slaves [ 228.843687][ T5995] usb 1-1: New USB device found, idVendor=054c, idProduct=0ce6, bcdDevice= 0.00 [ 228.854017][ T5995] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 228.865315][ T5995] usb 1-1: config 0 descriptor?? [ 229.148841][T16418] chnl_net:caif_netlink_parms(): no params data found [ 229.326994][T16477] vlan2: entered promiscuous mode [ 229.335543][T16477] batadv0: entered promiscuous mode [ 229.414819][T16477] bond0: (slave vlan2): Enslaving as an active interface with an up link [ 229.448578][ T5995] usbhid 1-1:0.0: can't add hid device: -71 [ 229.455046][ T5995] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 229.465157][ T5995] usb 1-1: USB disconnect, device number 9 [ 229.490232][ T1127] hsr_slave_0: left promiscuous mode [ 229.501783][ T1127] hsr_slave_1: left promiscuous mode [ 229.532027][T16651] loop2: detected capacity change from 0 to 128 [ 229.540264][ T1127] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 229.547967][ T1127] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 229.556516][ T1127] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 229.566498][ T1127] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 229.569995][T16651] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 229.587320][T16651] ext4 filesystem being mounted at /284/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 229.598078][ T1127] veth1_macvtap: left promiscuous mode [ 229.604295][ T1127] veth0_macvtap: left promiscuous mode [ 229.610356][ T1127] veth1_vlan: left promiscuous mode [ 229.615908][ T1127] veth0_vlan: left promiscuous mode [ 229.626847][ T5979] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 229.765841][ T1127] team0 (unregistering): Port device team_slave_1 removed [ 229.779963][ T1127] team0 (unregistering): Port device team_slave_0 removed [ 229.870895][T16665] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1101'. [ 229.874570][T16653] sp0: Synchronizing with TNC [ 229.907744][T16685] loop1: detected capacity change from 0 to 2048 [ 229.944649][T16418] bridge0: port 1(bridge_slave_0) entered blocking state [ 229.951846][T16418] bridge0: port 1(bridge_slave_0) entered disabled state [ 229.955327][T16685] UDF-fs: warning (device loop1): udf_fill_super: No partition found (2) [ 229.971908][T16418] bridge_slave_0: entered allmulticast mode [ 229.979305][T16418] bridge_slave_0: entered promiscuous mode [ 230.027348][T16699] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1104'. [ 230.037175][T16418] bridge0: port 2(bridge_slave_1) entered blocking state [ 230.046957][T16418] bridge0: port 2(bridge_slave_1) entered disabled state [ 230.055058][T16418] bridge_slave_1: entered allmulticast mode [ 230.061808][T16418] bridge_slave_1: entered promiscuous mode [ 230.087845][T16721] bridge0: entered promiscuous mode [ 230.093546][T16721] macvlan2: entered allmulticast mode [ 230.099523][T16721] bridge0: entered allmulticast mode [ 230.112634][T16721] bridge0: left allmulticast mode [ 230.123742][T16721] bridge0: left promiscuous mode [ 230.133633][ T5244] Bluetooth: hci1: command tx timeout [ 230.178098][T16418] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 230.189692][T16418] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 230.287950][T16797] PKCS8: Unsupported PKCS#8 version [ 230.291912][T16418] team0: Port device team_slave_0 added [ 230.316004][T16418] team0: Port device team_slave_1 added [ 230.338321][T16418] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 230.360311][T16418] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 230.532511][T16418] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 230.640168][T16418] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 230.657307][T16418] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 230.688473][T16418] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 230.710268][T16851] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1114'. [ 232.253493][ T5244] Bluetooth: hci1: command tx timeout [ 234.283565][ T5244] Bluetooth: hci1: command tx timeout [ 236.395726][ T5244] Bluetooth: hci1: command tx timeout [ 238.527657][T16879] input: syz0 as /devices/virtual/input/input12 [ 244.609008][T16418] hsr_slave_0: entered promiscuous mode [ 244.626370][T16418] hsr_slave_1: entered promiscuous mode [ 244.853538][ T5235] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 244.912520][ T5235] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 244.943530][ T5235] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 244.998527][ T5243] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 245.006113][ T5243] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 245.013307][ T5243] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 245.021116][ T5243] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 245.028682][ T5243] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 245.055835][ T5243] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 245.176886][ T5235] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 245.184065][ T5247] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 245.191482][ T5247] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 245.191773][ T5235] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 245.200371][ T5247] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 245.210640][ T5235] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 245.216776][ T5247] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 245.228258][ T5247] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 245.238804][ T5247] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 245.365226][ T5701] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 245.394822][ T5247] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 245.402024][ T5247] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 245.409355][ T5247] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 245.434733][ T5247] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 245.444596][ T5247] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 245.471861][ T5247] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 245.571359][ T5701] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 245.639633][ T5701] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 245.848711][ T5701] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 245.920969][T16919] chnl_net:caif_netlink_parms(): no params data found [ 246.002819][T16943] chnl_net:caif_netlink_parms(): no params data found [ 246.116023][T16915] chnl_net:caif_netlink_parms(): no params data found [ 246.158148][T16857] bond0: (slave syz_tun): Releasing backup interface [ 246.255995][ T5701] bridge_slave_1: left allmulticast mode [ 246.261648][ T5701] bridge_slave_1: left promiscuous mode [ 246.268840][ T5701] bridge0: port 2(bridge_slave_1) entered disabled state [ 246.277080][ T5701] bridge_slave_0: left allmulticast mode [ 246.282730][ T5701] bridge_slave_0: left promiscuous mode [ 246.289120][ T5701] bridge0: port 1(bridge_slave_0) entered disabled state [ 246.371761][ T5701] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 246.383837][ T5701] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 246.393890][ T5701] bond0 (unregistering): Released all slaves [ 246.426155][T16943] bridge0: port 1(bridge_slave_0) entered blocking state [ 246.433620][T16943] bridge0: port 1(bridge_slave_0) entered disabled state [ 246.440962][T16943] bridge_slave_0: entered allmulticast mode [ 246.447780][T16943] bridge_slave_0: entered promiscuous mode [ 246.488472][T16943] bridge0: port 2(bridge_slave_1) entered blocking state [ 246.496303][T16943] bridge0: port 2(bridge_slave_1) entered disabled state [ 246.504873][T16943] bridge_slave_1: entered allmulticast mode [ 246.511368][T16943] bridge_slave_1: entered promiscuous mode [ 246.548336][T16919] bridge0: port 1(bridge_slave_0) entered blocking state [ 246.556583][T16919] bridge0: port 1(bridge_slave_0) entered disabled state [ 246.564965][T16919] bridge_slave_0: entered allmulticast mode [ 246.571362][T16919] bridge_slave_0: entered promiscuous mode [ 246.610875][T16915] bridge0: port 1(bridge_slave_0) entered blocking state [ 246.618173][T16915] bridge0: port 1(bridge_slave_0) entered disabled state [ 246.626434][T16915] bridge_slave_0: entered allmulticast mode [ 246.632990][T16915] bridge_slave_0: entered promiscuous mode [ 246.639924][T16418] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 246.656212][T16919] bridge0: port 2(bridge_slave_1) entered blocking state [ 246.664564][T16919] bridge0: port 2(bridge_slave_1) entered disabled state [ 246.671781][T16919] bridge_slave_1: entered allmulticast mode [ 246.678406][T16919] bridge_slave_1: entered promiscuous mode [ 246.693786][T16943] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 246.703118][T16915] bridge0: port 2(bridge_slave_1) entered blocking state [ 246.711154][T16915] bridge0: port 2(bridge_slave_1) entered disabled state [ 246.719572][T16915] bridge_slave_1: entered allmulticast mode [ 246.726444][T16915] bridge_slave_1: entered promiscuous mode [ 246.733104][T16418] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 246.755226][T16943] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 246.766652][T16919] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 246.780294][T16995] chnl_net:caif_netlink_parms(): no params data found [ 246.804025][T16418] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 246.827750][T16919] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 246.852233][T16915] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 246.862112][T16418] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 246.902385][T16915] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 246.933796][T16943] team0: Port device team_slave_0 added [ 246.941455][T16943] team0: Port device team_slave_1 added [ 246.966537][T16919] team0: Port device team_slave_0 added [ 246.983750][T16915] team0: Port device team_slave_0 added [ 247.020124][T16943] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 247.027513][T16943] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 247.053922][T16943] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 247.066339][T16943] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 247.073281][T16943] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 247.099673][T16943] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 247.102472][ T5247] Bluetooth: hci5: command tx timeout [ 247.120560][T16919] team0: Port device team_slave_1 added [ 247.127224][T16915] team0: Port device team_slave_1 added [ 247.152656][ T5701] hsr_slave_0: left promiscuous mode [ 247.158466][ T5701] hsr_slave_1: left promiscuous mode [ 247.164573][ T5701] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 247.171967][ T5701] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 247.179900][ T5701] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 247.188337][ T5701] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 247.197568][ T5701] veth1_macvtap: left promiscuous mode [ 247.203046][ T5701] veth0_macvtap: left promiscuous mode [ 247.208655][ T5701] veth1_vlan: left promiscuous mode [ 247.213930][ T5701] veth0_vlan: left promiscuous mode [ 247.253540][ T5247] Bluetooth: hci4: command tx timeout [ 247.306951][ T5701] team0 (unregistering): Port device team_slave_1 removed [ 247.320677][ T5701] team0 (unregistering): Port device team_slave_0 removed [ 247.328072][ T5247] Bluetooth: hci0: command tx timeout [ 247.427374][T16995] bridge0: port 1(bridge_slave_0) entered blocking state [ 247.434779][T16995] bridge0: port 1(bridge_slave_0) entered disabled state [ 247.441953][T16995] bridge_slave_0: entered allmulticast mode [ 247.448754][T16995] bridge_slave_0: entered promiscuous mode [ 247.455927][T16915] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 247.462871][T16915] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 247.489336][T16915] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 247.500659][T16919] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 247.508046][T16919] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 247.534714][T16919] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 247.546524][T16919] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 247.553674][T16919] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 247.579627][ T5247] Bluetooth: hci2: command tx timeout [ 247.585468][T16919] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 247.610085][T16995] bridge0: port 2(bridge_slave_1) entered blocking state [ 247.617396][T16995] bridge0: port 2(bridge_slave_1) entered disabled state [ 247.624669][T16995] bridge_slave_1: entered allmulticast mode [ 247.631471][T16995] bridge_slave_1: entered promiscuous mode [ 247.646495][T16915] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 247.654678][T16915] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 247.681108][T16915] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 247.715995][T16943] hsr_slave_0: entered promiscuous mode [ 247.722249][T16943] hsr_slave_1: entered promiscuous mode [ 247.729747][T16943] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 247.737441][T16943] Cannot create hsr debugfs directory [ 247.752531][T16995] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 247.777566][T16919] hsr_slave_0: entered promiscuous mode [ 247.784143][T16919] hsr_slave_1: entered promiscuous mode [ 247.790047][T16919] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 247.798639][T16919] Cannot create hsr debugfs directory [ 247.807380][T16995] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 247.870224][T16915] hsr_slave_0: entered promiscuous mode [ 247.882442][T16915] hsr_slave_1: entered promiscuous mode [ 247.889105][T16915] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 247.899949][T16915] Cannot create hsr debugfs directory [ 247.919749][T16995] team0: Port device team_slave_0 added [ 247.927493][T16995] team0: Port device team_slave_1 added [ 247.991913][T16995] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 248.001736][T16995] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 248.028187][T16995] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 248.067486][T16995] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 248.074826][T16995] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 248.101584][T16995] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 248.160734][T16995] hsr_slave_0: entered promiscuous mode [ 248.167972][T16995] hsr_slave_1: entered promiscuous mode [ 248.175828][T16995] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 248.184070][T16995] Cannot create hsr debugfs directory [ 248.251808][T16943] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 248.310890][T16943] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 248.361324][ T5701] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 248.383702][T16943] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 248.407229][T16418] 8021q: adding VLAN 0 to HW filter on device bond0 [ 248.424364][T16418] 8021q: adding VLAN 0 to HW filter on device team0 [ 248.434762][ T1127] bridge0: port 1(bridge_slave_0) entered blocking state [ 248.441842][ T1127] bridge0: port 1(bridge_slave_0) entered forwarding state [ 248.455071][ T5701] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 248.469793][ T6860] bridge0: port 2(bridge_slave_1) entered blocking state [ 248.476998][ T6860] bridge0: port 2(bridge_slave_1) entered forwarding state [ 248.489969][T16943] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 248.529781][ T5701] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 248.599720][ T5701] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 248.624175][T16418] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 248.714160][ T5701] bridge_slave_1: left allmulticast mode [ 248.719843][ T5701] bridge_slave_1: left promiscuous mode [ 248.729411][ T5701] bridge0: port 2(bridge_slave_1) entered disabled state [ 248.739880][ T5701] bridge_slave_0: left allmulticast mode [ 248.746967][ T5701] bridge_slave_0: left promiscuous mode [ 248.753067][ T5701] bridge0: port 1(bridge_slave_0) entered disabled state [ 248.761893][ T5701] bridge_slave_1: left allmulticast mode [ 248.768972][ T5701] bridge_slave_1: left promiscuous mode [ 248.775087][ T5701] bridge0: port 2(bridge_slave_1) entered disabled state [ 248.782926][ T5701] bridge_slave_0: left allmulticast mode [ 248.788733][ T5701] bridge_slave_0: left promiscuous mode [ 248.794791][ T5701] bridge0: port 1(bridge_slave_0) entered disabled state [ 248.803820][ T5644] BUG: sleeping function called from invalid context at net/core/dev.c:11280 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 248.812601][ T5644] in_atomic(): 0, irqs_disabled(): 0, non_block: 0, pid: 5644, name: kworker/u8:9 [ 248.824856][ T5644] preempt_count: 0, expected: 0 [ 248.829897][ T5644] RCU nest depth: 1, expected: 0 [ 248.836480][ T5644] INFO: lockdep is turned off. [ 248.841985][ T5644] CPU: 0 UID: 0 PID: 5644 Comm: kworker/u8:9 Not tainted 6.12.0-rc2-next-20241008-syzkaller #0 [ 248.852435][ T5644] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 248.862512][ T5644] Workqueue: bond0 bond_mii_monitor [ 248.867748][ T5644] Call Trace: [ 248.871033][ T5644] [ 248.873957][ T5644] dump_stack_lvl+0x241/0x360 [ 248.878642][ T5644] ? __pfx_dump_stack_lvl+0x10/0x10 [ 248.883827][ T5644] ? __pfx__printk+0x10/0x10 [ 248.888404][ T5644] ? rcu_is_watching+0x15/0xb0 [ 248.893160][ T5644] __might_resched+0x5d4/0x780 [ 248.897921][ T5644] ? dev_deactivate_many+0x25f/0xb10 [ 248.903196][ T5644] ? __pfx___might_resched+0x10/0x10 [ 248.908477][ T5644] ? __local_bh_enable_ip+0x168/0x200 [ 248.913927][ T5644] ? dev_deactivate_many+0x250/0xb10 [ 248.919200][ T5644] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 248.924997][ T5644] ? do_raw_spin_unlock+0x13c/0x8b0 [ 248.930188][ T5644] synchronize_net+0x1b/0x50 [ 248.934767][ T5644] dev_deactivate_many+0x4a7/0xb10 [ 248.939867][ T5644] ? dev_deactivate_many+0x250/0xb10 [ 248.945148][ T5644] dev_deactivate+0x184/0x280 [ 248.949817][ T5644] ? __pfx_dev_deactivate+0x10/0x10 [ 248.955004][ T5644] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 248.960887][ T5644] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 248.967202][ T5644] ? rfc2863_policy+0x1d7/0x300 [ 248.972042][ T5644] linkwatch_do_dev+0x10a/0x170 [ 248.976879][ T5644] ethtool_op_get_link+0x15/0x60 [ 248.981805][ T5644] ? __pfx_ethtool_op_get_link+0x10/0x10 [ 248.987422][ T5644] bond_check_dev_link+0x1f1/0x3f0 [ 248.992527][ T5644] ? __pfx_bond_check_dev_link+0x10/0x10 [ 248.998147][ T5644] ? lock_release+0xbf/0xa30 [ 249.002726][ T5644] ? do_raw_spin_lock+0x14f/0x370 [ 249.007741][ T5644] ? __pfx_lock_release+0x10/0x10 [ 249.012749][ T5644] ? rcu_read_lock_held+0xa/0x50 [ 249.017677][ T5644] bond_mii_monitor+0x49a/0x3170 [ 249.022607][ T5644] ? bond_mii_monitor+0x174/0x3170 [ 249.027709][ T5644] ? do_raw_spin_unlock+0x13c/0x8b0 [ 249.032896][ T5644] ? __pfx_bond_mii_monitor+0x10/0x10 [ 249.038260][ T5644] ? rcu_is_watching+0x15/0xb0 [ 249.043013][ T5644] ? lock_acquire+0xe3/0x550 [ 249.047596][ T5644] ? __pfx_lock_acquire+0x10/0x10 [ 249.052607][ T5644] ? debug_object_deactivate+0x2d5/0x390 [ 249.058232][ T5644] ? __pfx_lock_release+0x10/0x10 [ 249.063247][ T5644] ? __pfx_debug_object_deactivate+0x10/0x10 [ 249.069221][ T5644] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 249.075546][ T5644] ? rcu_is_watching+0x15/0xb0 [ 249.080302][ T5644] ? process_scheduled_works+0x976/0x1850 [ 249.086014][ T5644] process_scheduled_works+0xa63/0x1850 [ 249.091561][ T5644] ? __pfx_process_scheduled_works+0x10/0x10 [ 249.097571][ T5644] ? __pfx__raw_spin_lock_irq+0x10/0x10 [ 249.103109][ T5644] ? assign_work+0x364/0x3d0 [ 249.107691][ T5644] worker_thread+0x870/0xd30 [ 249.112277][ T5644] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 249.118156][ T5644] ? __kthread_parkme+0x169/0x1d0 [ 249.123172][ T5644] ? __pfx_worker_thread+0x10/0x10 [ 249.128272][ T5644] kthread+0x2f0/0x390 [ 249.132328][ T5644] ? __pfx_worker_thread+0x10/0x10 [ 249.137427][ T5644] ? __pfx_kthread+0x10/0x10 [ 249.142002][ T5644] ret_from_fork+0x4b/0x80 [ 249.146413][ T5644] ? __pfx_kthread+0x10/0x10 [ 249.150989][ T5644] ret_from_fork_asm+0x1a/0x30 [ 249.155752][ T5644] [ 249.166167][ T5247] Bluetooth: hci5: command tx timeout [ 249.171617][ T5644] ------------[ cut here ]------------ [ 249.177079][ T5644] Voluntary context switch within RCU read-side critical section! [ 249.177164][ T5644] WARNING: CPU: 0 PID: 5644 at kernel/rcu/tree_plugin.h:331 rcu_note_context_switch+0xcf4/0xff0 [ 249.195813][ T5644] Modules linked in: [ 249.199708][ T5644] CPU: 0 UID: 0 PID: 5644 Comm: kworker/u8:9 Tainted: G W 6.12.0-rc2-next-20241008-syzkaller #0 [ 249.211505][ T5644] Tainted: [W]=WARN [ 249.215300][ T5644] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 249.225358][ T5644] Workqueue: bond0 bond_mii_monitor [ 249.230550][ T5644] RIP: 0010:rcu_note_context_switch+0xcf4/0xff0 [ 249.236783][ T5644] Code: 00 ba 02 00 00 00 e8 7b f8 fd ff 4c 8b b4 24 80 00 00 00 eb 91 c6 05 90 3e 8b 0e 01 90 48 c7 c7 80 28 0c 8c e8 dd 28 da ff 90 <0f> 0b 90 90 e9 3b f4 ff ff 90 0f 0b 90 45 84 ed 0f 84 00 f4 ff ff [ 249.256381][ T5644] RSP: 0018:ffffc900041eefc0 EFLAGS: 00010046 [ 249.262507][ T5644] RAX: a93a8b54ff6cdf00 RBX: ffff88802ef14044 RCX: ffff88802ef13c00 [ 249.270466][ T5644] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 249.278422][ T5644] RBP: ffffc900041ef110 R08: ffffffff8155e412 R09: 1ffff110170c519a [ 249.286376][ T5644] R10: dffffc0000000000 R11: ffffed10170c519b R12: ffff88802ef13c00 [ 249.294355][ T5644] R13: 0000000000000000 R14: 1ffff9200083de10 R15: dffffc0000000000 [ 249.302305][ T5644] FS: 0000000000000000(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 249.311213][ T5644] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 249.317783][ T5644] CR2: 00007fd7ff190440 CR3: 000000000e734000 CR4: 00000000003526f0 [ 249.325756][ T5644] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 249.333707][ T5644] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 249.341675][ T5644] Call Trace: [ 249.344935][ T5644] [ 249.347848][ T5644] ? __warn+0x168/0x4e0 [ 249.351984][ T5644] ? rcu_note_context_switch+0xcf4/0xff0 [ 249.357621][ T5644] ? report_bug+0x2b3/0x500 [ 249.362108][ T5644] ? rcu_note_context_switch+0xcf4/0xff0 [ 249.367741][ T5644] ? handle_bug+0x60/0x90 [ 249.372081][ T5644] ? exc_invalid_op+0x1a/0x50 [ 249.376742][ T5644] ? asm_exc_invalid_op+0x1a/0x20 [ 249.381746][ T5644] ? __warn_printk+0x292/0x360 [ 249.386490][ T5644] ? rcu_note_context_switch+0xcf4/0xff0 [ 249.392104][ T5644] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 249.398418][ T5644] ? do_raw_spin_unlock+0x13c/0x8b0 [ 249.403617][ T5644] ? rcu_is_watching+0x15/0xb0 [ 249.408359][ T5644] ? __pfx_rcu_note_context_switch+0x10/0x10 [ 249.413738][ T5247] Bluetooth: hci0: command tx timeout [ 249.414317][ T5644] ? rcu_is_watching+0x15/0xb0 [ 249.424428][ T5644] __schedule+0x348/0x4b30 [ 249.428849][ T5644] ? __wake_up_klogd+0xd5/0x110 [ 249.433688][ T5644] ? vprintk_emit+0x7ed/0xa10 [ 249.438343][ T5644] ? schedule+0x90/0x320 [ 249.442559][ T5644] ? rcu_is_watching+0x15/0xb0 [ 249.447301][ T5644] ? schedule+0x90/0x320 [ 249.451520][ T5644] ? lock_release+0xbf/0xa30 [ 249.456085][ T5644] ? __pfx___schedule+0x10/0x10 [ 249.460909][ T5644] ? __pfx_lock_acquire+0x10/0x10 [ 249.465931][ T5644] ? __pfx_lock_release+0x10/0x10 [ 249.470963][ T5644] ? __mutex_trylock_common+0x92/0x2e0 [ 249.476424][ T5644] ? kthread_data+0x52/0xd0 [ 249.480912][ T5644] ? schedule+0x90/0x320 [ 249.485138][ T5644] ? wq_worker_sleeping+0x66/0x240 [ 249.490262][ T5644] ? schedule+0x90/0x320 [ 249.494490][ T5644] schedule+0x14b/0x320 [ 249.498638][ T5644] schedule_preempt_disabled+0x13/0x30 [ 249.504081][ T5644] __mutex_lock+0x6a7/0xd70 [ 249.508568][ T5644] ? __mutex_lock+0x52a/0xd70 [ 249.513227][ T5644] ? synchronize_rcu_expedited+0x451/0x830 [ 249.519033][ T5644] ? __pfx___mutex_lock+0x10/0x10 [ 249.524048][ T5644] ? do_raw_spin_unlock+0x13c/0x8b0 [ 249.529229][ T5644] synchronize_rcu_expedited+0x451/0x830 [ 249.534864][ T5644] ? __pfx_synchronize_rcu_expedited+0x10/0x10 [ 249.541000][ T5644] ? add_taint+0x99/0xe0 [ 249.545312][ T5644] ? __might_resched+0x5e0/0x780 [ 249.550261][ T5644] ? __local_bh_enable_ip+0x168/0x200 [ 249.555626][ T5644] ? dev_deactivate_many+0x250/0xb10 [ 249.560894][ T5644] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 249.566617][ T5644] ? do_raw_spin_unlock+0x13c/0x8b0 [ 249.571835][ T5644] dev_deactivate_many+0x4a7/0xb10 [ 249.576933][ T5644] ? dev_deactivate_many+0x250/0xb10 [ 249.582196][ T5644] dev_deactivate+0x184/0x280 [ 249.586854][ T5644] ? __pfx_dev_deactivate+0x10/0x10 [ 249.592030][ T5644] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 249.597903][ T5644] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 249.604210][ T5644] ? rfc2863_policy+0x1d7/0x300 [ 249.609037][ T5644] linkwatch_do_dev+0x10a/0x170 [ 249.613885][ T5644] ethtool_op_get_link+0x15/0x60 [ 249.618827][ T5644] ? __pfx_ethtool_op_get_link+0x10/0x10 [ 249.624441][ T5644] bond_check_dev_link+0x1f1/0x3f0 [ 249.629539][ T5644] ? __pfx_bond_check_dev_link+0x10/0x10 [ 249.635173][ T5644] ? lock_release+0xbf/0xa30 [ 249.639743][ T5644] ? do_raw_spin_lock+0x14f/0x370 [ 249.644748][ T5644] ? __pfx_lock_release+0x10/0x10 [ 249.649745][ T5644] ? rcu_read_lock_held+0xa/0x50 [ 249.654664][ T5644] bond_mii_monitor+0x49a/0x3170 [ 249.659585][ T5644] ? bond_mii_monitor+0x174/0x3170 [ 249.663715][ T5247] Bluetooth: hci2: command tx timeout [ 249.664670][ T5644] ? do_raw_spin_unlock+0x13c/0x8b0 [ 249.675225][ T5644] ? __pfx_bond_mii_monitor+0x10/0x10 [ 249.680615][ T5644] ? rcu_is_watching+0x15/0xb0 [ 249.685366][ T5644] ? lock_acquire+0xe3/0x550 [ 249.689935][ T5644] ? __pfx_lock_acquire+0x10/0x10 [ 249.694935][ T5644] ? debug_object_deactivate+0x2d5/0x390 [ 249.700550][ T5644] ? __pfx_lock_release+0x10/0x10 [ 249.705553][ T5644] ? __pfx_debug_object_deactivate+0x10/0x10 [ 249.711515][ T5644] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 249.717833][ T5644] ? rcu_is_watching+0x15/0xb0 [ 249.722581][ T5644] ? process_scheduled_works+0x976/0x1850 [ 249.728281][ T5644] process_scheduled_works+0xa63/0x1850 [ 249.733828][ T5644] ? __pfx_process_scheduled_works+0x10/0x10 [ 249.739789][ T5644] ? __pfx__raw_spin_lock_irq+0x10/0x10 [ 249.745314][ T5644] ? assign_work+0x364/0x3d0 [ 249.749885][ T5644] worker_thread+0x870/0xd30 [ 249.754458][ T5644] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 249.760331][ T5644] ? __kthread_parkme+0x169/0x1d0 [ 249.765347][ T5644] ? __pfx_worker_thread+0x10/0x10 [ 249.770466][ T5644] kthread+0x2f0/0x390 [ 249.774517][ T5644] ? __pfx_worker_thread+0x10/0x10 [ 249.779615][ T5644] ? __pfx_kthread+0x10/0x10 [ 249.784202][ T5644] ret_from_fork+0x4b/0x80 [ 249.788600][ T5644] ? __pfx_kthread+0x10/0x10 [ 249.793166][ T5644] ret_from_fork_asm+0x1a/0x30 [ 249.797915][ T5644] [ 249.800924][ T5644] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 249.808201][ T5644] CPU: 0 UID: 0 PID: 5644 Comm: kworker/u8:9 Tainted: G W 6.12.0-rc2-next-20241008-syzkaller #0 [ 249.819985][ T5644] Tainted: [W]=WARN [ 249.823791][ T5644] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 249.833826][ T5644] Workqueue: bond0 bond_mii_monitor [ 249.839013][ T5644] Call Trace: [ 249.842275][ T5644] [ 249.845191][ T5644] dump_stack_lvl+0x241/0x360 [ 249.849852][ T5644] ? __pfx_dump_stack_lvl+0x10/0x10 [ 249.855032][ T5644] ? __pfx__printk+0x10/0x10 [ 249.859601][ T5644] ? vscnprintf+0x5d/0x90 [ 249.863924][ T5644] panic+0x349/0x880 [ 249.867820][ T5644] ? __warn+0x177/0x4e0 [ 249.871956][ T5644] ? __pfx_panic+0x10/0x10 [ 249.876375][ T5644] ? ret_from_fork_asm+0x1a/0x30 [ 249.881309][ T5644] __warn+0x34b/0x4e0 [ 249.885297][ T5644] ? rcu_note_context_switch+0xcf4/0xff0 [ 249.890917][ T5644] report_bug+0x2b3/0x500 [ 249.895429][ T5644] ? rcu_note_context_switch+0xcf4/0xff0 [ 249.901064][ T5644] handle_bug+0x60/0x90 [ 249.905209][ T5644] exc_invalid_op+0x1a/0x50 [ 249.909692][ T5644] asm_exc_invalid_op+0x1a/0x20 [ 249.914533][ T5644] RIP: 0010:rcu_note_context_switch+0xcf4/0xff0 [ 249.920789][ T5644] Code: 00 ba 02 00 00 00 e8 7b f8 fd ff 4c 8b b4 24 80 00 00 00 eb 91 c6 05 90 3e 8b 0e 01 90 48 c7 c7 80 28 0c 8c e8 dd 28 da ff 90 <0f> 0b 90 90 e9 3b f4 ff ff 90 0f 0b 90 45 84 ed 0f 84 00 f4 ff ff [ 249.940400][ T5644] RSP: 0018:ffffc900041eefc0 EFLAGS: 00010046 [ 249.946451][ T5644] RAX: a93a8b54ff6cdf00 RBX: ffff88802ef14044 RCX: ffff88802ef13c00 [ 249.954411][ T5644] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 249.962361][ T5644] RBP: ffffc900041ef110 R08: ffffffff8155e412 R09: 1ffff110170c519a [ 249.970316][ T5644] R10: dffffc0000000000 R11: ffffed10170c519b R12: ffff88802ef13c00 [ 249.978276][ T5644] R13: 0000000000000000 R14: 1ffff9200083de10 R15: dffffc0000000000 [ 249.986402][ T5644] ? __warn_printk+0x292/0x360 [ 249.991154][ T5644] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 249.997470][ T5644] ? do_raw_spin_unlock+0x13c/0x8b0 [ 250.002651][ T5644] ? rcu_is_watching+0x15/0xb0 [ 250.007417][ T5644] ? __pfx_rcu_note_context_switch+0x10/0x10 [ 250.013386][ T5644] ? rcu_is_watching+0x15/0xb0 [ 250.018142][ T5644] __schedule+0x348/0x4b30 [ 250.022564][ T5644] ? __wake_up_klogd+0xd5/0x110 [ 250.027408][ T5644] ? vprintk_emit+0x7ed/0xa10 [ 250.032064][ T5644] ? schedule+0x90/0x320 [ 250.036285][ T5644] ? rcu_is_watching+0x15/0xb0 [ 250.041026][ T5644] ? schedule+0x90/0x320 [ 250.045247][ T5644] ? lock_release+0xbf/0xa30 [ 250.049816][ T5644] ? __pfx___schedule+0x10/0x10 [ 250.054648][ T5644] ? __pfx_lock_acquire+0x10/0x10 [ 250.059648][ T5644] ? __pfx_lock_release+0x10/0x10 [ 250.064673][ T5644] ? __mutex_trylock_common+0x92/0x2e0 [ 250.070139][ T5644] ? kthread_data+0x52/0xd0 [ 250.074631][ T5644] ? schedule+0x90/0x320 [ 250.078853][ T5644] ? wq_worker_sleeping+0x66/0x240 [ 250.083954][ T5644] ? schedule+0x90/0x320 [ 250.088177][ T5644] schedule+0x14b/0x320 [ 250.092311][ T5644] schedule_preempt_disabled+0x13/0x30 [ 250.097747][ T5644] __mutex_lock+0x6a7/0xd70 [ 250.102230][ T5644] ? __mutex_lock+0x52a/0xd70 [ 250.106885][ T5644] ? synchronize_rcu_expedited+0x451/0x830 [ 250.112670][ T5644] ? __pfx___mutex_lock+0x10/0x10 [ 250.117682][ T5644] ? do_raw_spin_unlock+0x13c/0x8b0 [ 250.122865][ T5644] synchronize_rcu_expedited+0x451/0x830 [ 250.128479][ T5644] ? __pfx_synchronize_rcu_expedited+0x10/0x10 [ 250.134612][ T5644] ? add_taint+0x99/0xe0 [ 250.138833][ T5644] ? __might_resched+0x5e0/0x780 [ 250.143774][ T5644] ? __local_bh_enable_ip+0x168/0x200 [ 250.149145][ T5644] ? dev_deactivate_many+0x250/0xb10 [ 250.154410][ T5644] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 250.160130][ T5644] ? do_raw_spin_unlock+0x13c/0x8b0 [ 250.165325][ T5644] dev_deactivate_many+0x4a7/0xb10 [ 250.170436][ T5644] ? dev_deactivate_many+0x250/0xb10 [ 250.175727][ T5644] dev_deactivate+0x184/0x280 [ 250.180385][ T5644] ? __pfx_dev_deactivate+0x10/0x10 [ 250.185572][ T5644] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 250.191485][ T5644] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 250.197792][ T5644] ? rfc2863_policy+0x1d7/0x300 [ 250.202620][ T5644] linkwatch_do_dev+0x10a/0x170 [ 250.207449][ T5644] ethtool_op_get_link+0x15/0x60 [ 250.212365][ T5644] ? __pfx_ethtool_op_get_link+0x10/0x10 [ 250.217994][ T5644] bond_check_dev_link+0x1f1/0x3f0 [ 250.223123][ T5644] ? __pfx_bond_check_dev_link+0x10/0x10 [ 250.228742][ T5644] ? lock_release+0xbf/0xa30 [ 250.233314][ T5644] ? do_raw_spin_lock+0x14f/0x370 [ 250.238321][ T5644] ? __pfx_lock_release+0x10/0x10 [ 250.243326][ T5644] ? rcu_read_lock_held+0xa/0x50 [ 250.248249][ T5644] bond_mii_monitor+0x49a/0x3170 [ 250.253173][ T5644] ? bond_mii_monitor+0x174/0x3170 [ 250.258267][ T5644] ? do_raw_spin_unlock+0x13c/0x8b0 [ 250.263465][ T5644] ? __pfx_bond_mii_monitor+0x10/0x10 [ 250.268840][ T5644] ? rcu_is_watching+0x15/0xb0 [ 250.273587][ T5644] ? lock_acquire+0xe3/0x550 [ 250.278155][ T5644] ? __pfx_lock_acquire+0x10/0x10 [ 250.283156][ T5644] ? debug_object_deactivate+0x2d5/0x390 [ 250.288779][ T5644] ? __pfx_lock_release+0x10/0x10 [ 250.293788][ T5644] ? __pfx_debug_object_deactivate+0x10/0x10 [ 250.300190][ T5644] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 250.306516][ T5644] ? rcu_is_watching+0x15/0xb0 [ 250.311264][ T5644] ? process_scheduled_works+0x976/0x1850 [ 250.316987][ T5644] process_scheduled_works+0xa63/0x1850 [ 250.322576][ T5644] ? __pfx_process_scheduled_works+0x10/0x10 [ 250.328551][ T5644] ? __pfx__raw_spin_lock_irq+0x10/0x10 [ 250.334085][ T5644] ? assign_work+0x364/0x3d0 [ 250.338661][ T5644] worker_thread+0x870/0xd30 [ 250.343246][ T5644] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 250.349153][ T5644] ? __kthread_parkme+0x169/0x1d0 [ 250.354173][ T5644] ? __pfx_worker_thread+0x10/0x10 [ 250.359276][ T5644] kthread+0x2f0/0x390 [ 250.363322][ T5644] ? __pfx_worker_thread+0x10/0x10 [ 250.368424][ T5644] ? __pfx_kthread+0x10/0x10 [ 250.373001][ T5644] ret_from_fork+0x4b/0x80 [ 250.377404][ T5644] ? __pfx_kthread+0x10/0x10 [ 250.381975][ T5644] ret_from_fork_asm+0x1a/0x30 [ 250.386725][ T5644] [ 250.389999][ T5644] Kernel Offset: disabled [ 250.394324][ T5644] Rebooting in 86400 seconds..