last executing test programs: 13.478305266s ago: executing program 3: open(&(0x7f0000000140)='./file0\x00', 0x40c2, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000240), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000006380)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0x0, r1, {0x7, 0x1f}}, 0x50) statx(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0xfd885f51ea8e4c7, 0x0) 11.987610854s ago: executing program 3: bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1b}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x18, &(0x7f0000000300)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r2}, 0x10) 11.360486297s ago: executing program 3: unshare(0x20000400) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x12, r1, 0x0) ioctl$SNDCTL_SEQ_CTRLRATE(r0, 0xc0045103, 0x0) 10.728736323s ago: executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) getdents64(0xffffffffffffffff, &(0x7f00000002c0)=""/100, 0x64) pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a80)={0x18, 0x11, &(0x7f0000000540)=@raw=[@ldst={0x1, 0x3, 0x2, 0x2, 0x8, 0xc}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r3}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @cb_func={0x18, 0x8, 0x4, 0x0, 0xffffffffffffffff}, @jmp={0x5, 0x1, 0x5, 0x0, 0x2, 0x6, 0x10}], &(0x7f0000000640)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000a00)={0x8, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000a40)=[r3, r3, r3]}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB='fd', @ANYRESHEX, @ANYBLOB, @ANYRESDEC=0x0, @ANYBLOB=',']) read$FUSE(0xffffffffffffffff, &(0x7f00000021c0)={0x2020}, 0x2020) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000380)=@newsa={0x138, 0x10, 0x633, 0x0, 0x0, {{@in=@broadcast, @in=@multicast2}, {@in6=@empty, 0x0, 0x32}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, {}, {}, {}, 0x0, 0x0, 0xa, 0x4}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}]}, 0x138}}, 0x0) 6.644433474s ago: executing program 1: bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) 5.70537556s ago: executing program 1: bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r0}, 0x10) 5.079137695s ago: executing program 1: sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$VT_ACTIVATE(0xffffffffffffffff, 0x4b44, 0x10000000000004) 4.605072637s ago: executing program 1: connect$pppoe(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000002140)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20048004, 0x0, 0x0) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, 0x0, 0x0) socket$igmp(0x2, 0x3, 0x2) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000070000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000008500000004000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040), 0x208e24b) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r2, &(0x7f00000001c0)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @dev}, 0x10) sendfile(r2, r1, 0x0, 0xffefffff) 4.583256196s ago: executing program 2: bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000380)={0x1d, r1, 0x1}, 0x18) r2 = epoll_create(0x1) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000280)) 4.114754841s ago: executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0x4, 0x7fe2, 0x2}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000000c0)={r0, 0x0, 0x0}, 0x20) 4.073099955s ago: executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000380)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000240)=0x1, 0x4) connect$inet(r0, &(0x7f00000006c0)={0x2, 0x0, @dev}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x1, 0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000003e80)={0x0, 0x0, &(0x7f0000003e40)={&(0x7f0000003e00)=@newlinkprop={0x34, 0x11, 0x1, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3d, 'netpci0\x00'}]}, 0x34}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) sendmsg$NL80211_CMD_CONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) getpid() r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001240)={&(0x7f00000028c0)={0x654, 0x19, 0x10, 0x0, 0x0, {0x1b, 0xd601, 0x9}, [@generic="418ff38a0df186a43f8a759472b3b0fab544", @generic, @generic="1cf7f619a2e4639f3f2a4cff8158612c47780bb1571ac0666d8ec03dbf6d10fc3a28b6c93d047303a5a589817d42f9dca3932b06a0255edad29227f67e3dca3f134d7008e186ef042965e6e1d8cd2f703c31ea2fc76cfd3579db7d20d157a7b71e68bff6f57a13e1b88ec5531389b74034788d3bd663f63771adc56d73634f7a2dc8e5c50cba69c868e507b99740c24a3783903e45a6409ff7edf581930564270545b9508e476a9e4464d70187f1b6db8501eb6f4a7b930c64f3c4837e897baffd36fe7261a8780ee991d6d6344fc81dc43d32c3bc3755a7117616fee297f4f6c82145a651f80b711928c64e9bbbf197ec9887e70ecfa9bce83142be1a77e3147f7141031906e5de0e8ea5c75543378d9ff4d55625bfdcbef5a4697a951f709f20ef9c8cad952b2103a4aa7457cdb65ecd5406d25f30513663bdecd65d404fb2b6d7ab33483de22b029a6bdb45359ef744c4f0a243d8c01667c025eb9e152ac37eed63c6319b51cc8547ea5a063e684c0c31daa9803fc786017f1563cc4efa238c14ab6c4d7c51e219a5404d70e9a2d2fc72e3b2f34d45afc3b8cfb3e37bab0ef453051703be29c269b8bf456d41389c14c3f6398f3c2f3b7ce17618907a7cc3cc0ba52bf9c01006c015ed79c72a640775b34cee8ff118c7add12e383c738cd2f65011153fc29a0f80b8a3924726ee0b37c6ed34fb5ec0a763b7642967f4b8065333b66dd7f595fa86800a958dd497fd02f797fc3034d7a5b899fc510d5c81235249ed98191e2b87665ce82e6d0a61d19e5e83eee95fc5a6da1a7201096e9e007c2c0b8761e32c9d84f35a233bd4ebe618a1ce88c2c608b0e03f4f1cf5af03bbee3bdd9386a6780041b3bfa644ff41723b899fbbe0f201bf5a4684aac7173ba375c2fb17aef3436c2b8b0093a5c52b9eb6b71a4b91ac572374419bbf8a3a28b5206d7ac539e3526f14a99aa78013ebe740de83cc8400f3a39ee6d9909d14f95705d3baecb3a31de7c941348aa247bab03c5a477c8ef0f781b4858261dd17a591d05a7959a8f8ba80acb48bc679ffbec356878f57bb806191fc76393797ac4ef350f1167b7c65fc040b3ab8eb1b1dd03d073fa301e86a01faed4a03891f088495330169f8a4a843c0368e6f30a0d6794561850caad06fc53dfe7c5acac6620129f2e305d5e7f4d1dfcfa1690dbcfa058b9804141a560a9f15cec6b2749a1ee86a575aa4e88fa7a4163f8506a5602d3da2b0c492025363656da5aa2e55c6b49f6161d8164c500c13046305badc787e7508f87b955a47ff29a62a18625ed3f577e17562ea638974d759bde01de0f429326d7a110fbd9df9fab930399539bcabd669d5a4a5b567d5cc78ea8840dfcf06610588df7d3a2b7b2a1f67df", @typed={0x8, 0x0, 0x0, 0x0, @uid}, @generic="eeec65babf7a1328164bf90553335839f65d18a908f0eb338dcacdb560e9ab49ecdf4c8f26a5427f42979ee72a7744b4af60df7c5c4c8523429624c94e826299e623d98e932084b47b6fa5830fa95b8bbdce08941f7831155a490894c8bf48d213e2c5ac9b0c7aec859dc2", @typed={0x8, 0xb0, 0x0, 0x0, @fd=r3}, @nested={0x4, 0x58}, @nested={0x13a, 0x1, 0x0, 0x1, [@generic="c7551adfa8c8dc262d3235b24ded5493f8655269962b85e7f9fd7a878effc2392554c8e699ae9d61797117e707ed26102392ea9ebd21136973304c2c3489341be08c0c387c661cef55a254e649fcf655a01636ccae0a9e7981270e869c2f68e485a8dda632f4c7f4639c9286c1bf4704215d071471faf69a5eb51500b0878bc0ee1330eb93911e2c85a5634e948eb3cd6806fa9cda373ffeb5712bb8b2c6dbbad9b9a5925513ce14e23dc6b4b04b571544150fec04d6f8496c4363cd5cccfcdfb0463f81826520ab15b1f96d3dcd82acdc6184b89d7ee51e36e6f474afb3643bd8b107010599a8173a47c1bff2cc", @generic="c7b358c2df3990d62eb8bb57865a15b08c1e0362310f87108247f921f39189d5b8099ef7c39bc042f6012abd4904bbafd60963fcbd9023d75a915633b685d9a3", @typed={0x5, 0xf7, 0x0, 0x0, @str='\x00'}, @generic]}, @generic="edfb82331e956224fce8494f5b47b8d7b216ca0660da7f90c40670183229f819745a555188265d305876203c1d000c4fbfc6da234e91fd87b4218a54b021ce23d36bfdec7c52b8cf72b1370ad925eba7152d3a6e70eccd95b8fe959bb546358fc0749d1df0dabf661c2b5dac89ab94b5056ef3b3b23c1ced7593a3fece065f1cafc434baf121f31a58cc86f7e7c4a265ca3b2702da47c5ae"]}, 0x654}}, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000004ac0), &(0x7f0000004b00)=0xc) getpid() r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) r5 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) write$binfmt_misc(r4, &(0x7f0000000200)=ANY=[@ANYBLOB='&\x00\x00\x00\a', @ANYRES16=r6], 0xd) 3.888973983s ago: executing program 4: bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) 3.430304712s ago: executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(0xffffffffffffffff, &(0x7f0000000040)={@val={0x6f01, 0x800}, @val={0x1}, @mpls={[], @ipv4=@udp={{0x5, 0x4, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x11, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote}, {0x0, 0x4e21, 0x4d, 0x0, @opaque="0c5030af9da3266af52f864706b63b7389cf476778daf646c151e6e4f3417473508c668cb6d473656ad7b75180eceedd55bd77a3b8fc26a1295df7e94f30f8fe5edd7a7852"}}}}, 0x6f) 3.280408915s ago: executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) 3.205477967s ago: executing program 1: bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r0}, 0x10) 3.148742234s ago: executing program 4: unshare(0x24020400) r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) setsockopt$rose(r0, 0x104, 0x2, &(0x7f0000000080)=0x2, 0x4) 2.670092567s ago: executing program 0: sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$VT_ACTIVATE(0xffffffffffffffff, 0x4b44, 0x10000000000004) 2.565619319s ago: executing program 4: unshare(0x20000400) ioctl$SNDCTL_SEQ_CTRLRATE(0xffffffffffffffff, 0xc0045103, 0x0) 2.458367634s ago: executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x19, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, [@call={0x61, 0x11, 0x4}]}, &(0x7f0000001380)='syzkaller\x00', 0x8, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x15}, 0x90) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$TUNSETVNETBE(r0, 0x400454de, &(0x7f0000000140)) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f0000000040)=[{0x20, 0x0, 0x0, 0xfffff010}, {0x30, 0x0, 0x0, 0x8000}, {0x6}]}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000004b80)={0x0, 0x0, &(0x7f0000004b40)={&(0x7f0000000280), 0x68}}, 0x0) ioctl$TUNSETDEBUG(r0, 0x400454c9, &(0x7f0000000100)=0xff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000340), 0xffffffffffffffff) ioctl$BTRFS_IOC_SYNC(r0, 0x9408, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r5, 0xc004743e, 0x20001400) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x0, 0x2, &(0x7f0000000000)=ANY=[@ANYBLOB="811001800000000005009700ffff"], 0x0}, 0x90) ioctl$TUNSETOFFLOAD(r5, 0x40047451, 0x2000000a) close(r5) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000380)={'batadv0\x00', 0x0}) r7 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_udp_int(r7, 0x11, 0xa, &(0x7f00000013c0)=0xfffffffd, 0x4) sendmsg$BATADV_CMD_GET_GATEWAYS(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000003c0)={0x1c, r3, 0x701, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r6}]}, 0x1c}}, 0x0) r8 = accept4(r1, &(0x7f0000001200)=@pppoe={0x18, 0x0, {0x0, @random}}, &(0x7f0000001280)=0x80, 0x81000) setsockopt$inet_MCAST_JOIN_GROUP(r8, 0x0, 0x2a, &(0x7f00000012c0)={0x101, {{0x2, 0x4e23, @private=0xa010100}}}, 0x88) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r9 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="034886dd010000000000000000006000000001002100fe880001000000000000060000007d01ff020000000000000000000000000001"], 0xfdef) 2.239633201s ago: executing program 1: r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) close(r0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r2}, 0x10) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) r4 = accept4(r3, 0x0, 0x0, 0x0) recvmmsg(r4, &(0x7f00000005c0)=[{{0x0, 0xfffffffffffffea3, 0x0}}], 0x3ffffffffffff62, 0x0, 0x0) 2.119969752s ago: executing program 0: open(&(0x7f0000000140)='./file0\x00', 0x40c2, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000240), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000006380)={0x2020}, 0x2020) syz_fuse_handle_req(r0, &(0x7f000000c400)="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", 0x2000, &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x78, 0x0, 0x0, {0x0, 0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) statx(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0xfd885f51ea8e4c7, 0x0) 2.006615231s ago: executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="9feb010018000000000000004400000044000000070000000c0000000000000a0400000089b8000000000100000d000000000e000000010000000300000000000009050000000d0000000000000a000000000000000000"], 0x0, 0x63, 0x0, 0x0, 0x6}, 0x20) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x200000000000011, 0x3, 0x0) ioctl$FS_IOC_FSGETXATTR(r0, 0x801c581f, &(0x7f00000006c0)={0x0, 0x9, 0x7, 0x138, 0x3}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xf, 0x4, 0x4, 0x4}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) ppoll(0x0, 0x0, &(0x7f0000000380), 0x0, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000400)={r2, &(0x7f0000000300)="1f106541d51d9a2231bd3665dfb39a3370b6bf4b10d49fc342f6f28cf7b347d7ceae6fc25a585eff75a6c61620da1a52d32a2748922954bbb63f823b26f7b2", &(0x7f00000003c0)=@udp6, 0x1}, 0x20) r3 = socket$xdp(0x2c, 0x3, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x8012, r3, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x409c884, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @local}, 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f0000000780)="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", 0x482, 0x6d91fb6102d8d9cc, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x30}, 0x90) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'vcan0\x00'}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000001300)={'syztnl1\x00', &(0x7f0000001280)={'ip6tnl0\x00', 0x0, 0x5e, 0x1, 0x8, 0x569, 0x24, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast2, 0x80, 0x40, 0x80000000, 0xffffffff}}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="580000001000010400"/20, @ANYRES32=r4, @ANYBLOB="0000000000800200380012800b0001006272696467650000280002800c002300fbffffffffffffff05002400000000010500240001000000060027"], 0x58}}, 0x0) 1.711981881s ago: executing program 3: bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="3000000076000d0b00000008000000000300000000000000080001000100000008000a0000000000080005"], 0x30}}, 0x0) 1.377656996s ago: executing program 2: socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='memory.events\x00', 0x275a, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000540)={&(0x7f00000004c0), 0xc, &(0x7f0000000500)={0x0}}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000240)={'#! ', './file0'}, 0xb) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000000)={'netdevsim0\x00', &(0x7f0000000100)=@ethtool_drvinfo={0x3, "0e26042b3268a73b39ec004a2fdb00000000000000000000000000008000", "c384f5cd57b5e701ff72e127a9f2b7236b435a9c9b3b08475fc3f2ed65e8f9f4", "0811fa0df09d0d8a5cce569d749b4964941a9f8595c77fe0e9e6597a37d77e61", "c4c5ef9fdd2f11956bb405ea01000000000000000700", "7cbd7582ba9216468c98dcdcf9ecd4350fa9127767fbe76746ae8d2b4eedf89a", "16ef86bc424b5d5778173c0e"}}) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) sendfile(r2, r0, 0x0, 0xf03afffe) 1.074328884s ago: executing program 3: connect$pppoe(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000002140)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20048004, 0x0, 0x0) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, 0x0, 0x0) socket$igmp(0x2, 0x3, 0x2) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000070000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000008500000004000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040), 0x208e24b) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r2, &(0x7f00000001c0)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @dev}, 0x10) sendfile(r2, r1, 0x0, 0xffefffff) 805.870531ms ago: executing program 0: bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0xcc03, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) 789.111247ms ago: executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) 324.578314ms ago: executing program 2: r0 = socket$inet_mptcp(0x2, 0x1, 0x106) listen(r0, 0x0) poll(0x0, 0x0, 0x11ff) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8ab8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000006900000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4}, 0x48) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6(0xa, 0x806, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000280)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x800, 0x0, 0x103, 0xd}, 0x20) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0xa, 0x4e22, 0x80000, @mcast1}, 0x1c, 0x0, 0x0, &(0x7f0000003a80)=ANY=[@ANYBLOB="18000000000000002900000004000000000000000000000098000000000000002900000037"], 0xb0}, 0x0) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="500000000206010100000000000000000000000005000100070000fb0900020073797a30000000000c00078008001300000000000c000300686173683a697000050005000a0000000500040000000000"], 0x50}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r2, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 134.395993ms ago: executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(0xffffffffffffffff, &(0x7f0000000040)={@val={0x6f01, 0x800}, @val={0x1}, @mpls={[], @ipv4=@udp={{0x5, 0x4, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x11, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote}, {0x0, 0x4e21, 0x4d, 0x0, @opaque="0c5030af9da3266af52f864706b63b7389cf476778daf646c151e6e4f3417473508c668cb6d473656ad7b75180eceedd55bd77a3b8fc26a1295df7e94f30f8fe5edd7a7852"}}}}, 0x6f) 0s ago: executing program 0: bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r0}, 0x10) kernel console output (not intermixed with test programs): ][ T3118] IPVS: stop unused estimator thread 0... [ 1163.292277][ T5668] bridge0: port 1(bridge_slave_0) entered blocking state [ 1163.300084][ T5668] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1163.427696][ T5668] bridge0: port 2(bridge_slave_1) entered blocking state [ 1163.435557][ T5668] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1163.987861][T13216] netlink: 148 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1165.085984][T13228] overlayfs: missing 'lowerdir' [ 1165.239366][T13121] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1165.758885][T13121] veth0_vlan: entered promiscuous mode [ 1165.819496][T13233] loop0: detected capacity change from 0 to 16384 [ 1165.932852][T13121] veth1_vlan: entered promiscuous mode [ 1165.951843][T13234] loop1: detected capacity change from 0 to 512 [ 1165.990889][T13233] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1166.000366][T13233] Buffer I/O error on dev loop0, logical block 0, async page read [ 1166.008909][T13233] ldm_validate_partition_table(): Disk read failed. [ 1166.015924][T13233] Dev loop0: unable to read RDB block 0 [ 1166.021859][T13233] loop0: unable to read partition table [ 1166.056931][T13234] UDF-fs: warning (device loop1): udf_load_vrs: No VRS found [ 1166.065025][T13234] UDF-fs: Scanning with blocksize 512 failed [ 1166.085189][T13233] loop0: partition table beyond EOD, truncated [ 1166.092019][T13233] loop_reread_partitions: partition scan of loop0 () failed (rc=-5) [ 1166.113729][T13234] UDF-fs: warning (device loop1): udf_load_vrs: No VRS found [ 1166.121953][T13234] UDF-fs: Scanning with blocksize 1024 failed [ 1166.214251][T13234] UDF-fs: warning (device loop1): udf_load_vrs: No VRS found [ 1166.223012][T13234] UDF-fs: Scanning with blocksize 2048 failed [ 1166.297254][T13234] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 1166.314609][T13121] veth0_macvtap: entered promiscuous mode [ 1166.359346][T13234] UDF-fs: error (device loop1): udf_process_sequence: Primary Volume Descriptor not found! [ 1166.370607][T13234] UDF-fs: error (device loop1): udf_process_sequence: Primary Volume Descriptor not found! [ 1166.381653][T13234] UDF-fs: Scanning with blocksize 4096 failed [ 1166.416183][T13121] veth1_macvtap: entered promiscuous mode [ 1166.602311][T13121] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1166.613202][T13121] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1166.623349][T13121] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1166.633992][T13121] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1166.644352][T13121] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1166.655006][T13121] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1166.665044][T13121] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1166.675765][T13121] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1166.691246][T13121] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1166.903232][T13240] netlink: 140 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1166.941388][T13121] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1166.952224][T13121] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1166.962271][T13121] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1166.972951][T13121] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1166.982991][T13121] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1166.993700][T13121] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1167.012809][T13121] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1167.183999][T13121] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1167.193139][T13121] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1167.202216][T13121] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1167.215579][T13121] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1168.912355][T13257] netlink: 148 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1170.555803][T13274] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 1170.565220][T13274] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1170.709538][T13276] loop0: detected capacity change from 0 to 16384 [ 1171.432372][T13284] netlink: 140 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1171.904322][ T29] kauditd_printk_skb: 10 callbacks suppressed [ 1171.904404][ T29] audit: type=1326 audit(1717691509.919:528): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13293 comm="syz-executor.3" exe="/root/syz-executor.3" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf745f579 code=0x0 [ 1172.557636][T13302] netlink: 148 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1173.289650][T13318] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 1173.299113][T13318] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1173.393784][ T3251] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1173.402045][ T3251] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1173.500025][ T7096] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1173.508332][ T7096] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1173.916007][T13321] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1174.633377][T13335] netlink: 140 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1174.707909][T13330] loop2: detected capacity change from 0 to 64 [ 1175.221569][T13330] hfs: request for non-existent node 1286 in B*Tree [ 1175.228386][T13330] hfs: request for non-existent node 1286 in B*Tree [ 1175.235379][T13330] hfs: request for non-existent node 1286 in B*Tree [ 1175.242194][T13330] hfs: request for non-existent node 1286 in B*Tree [ 1176.081501][T13347] netlink: 140 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1177.325275][T13360] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 1177.334838][T13360] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1179.742020][T13381] loop3: detected capacity change from 0 to 1024 [ 1179.969298][T13381] hfsplus: extend alloc file! (8192,65536,366) [ 1179.981820][T13387] netlink: 140 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1181.187820][T13393] support for the xor transformation has been removed. [ 1181.471273][T13396] overlayfs: missing 'lowerdir' [ 1182.901733][ T43] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 1183.191128][ T43] usb 1-1: Using ep0 maxpacket: 16 [ 1183.366709][ T43] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xC has an invalid bInterval 0, changing to 7 [ 1183.378364][ T43] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xC has invalid wMaxPacketSize 0 [ 1183.625473][ T43] usb 1-1: New USB device found, idVendor=0d46, idProduct=0081, bcdDevice=19.82 [ 1183.635154][ T43] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1183.643673][ T43] usb 1-1: Product: syz [ 1183.648123][ T43] usb 1-1: Manufacturer: syz [ 1183.653071][ T43] usb 1-1: SerialNumber: syz [ 1183.689826][ T43] usb 1-1: config 0 descriptor?? [ 1183.767794][ T43] kobil_sct 1-1:0.0: KOBIL USB smart card terminal converter detected [ 1183.790382][ T43] usb 1-1: KOBIL USB smart card terminal converter now attached to ttyUSB0 [ 1183.971559][ T5668] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 1184.058642][ T5133] usb 1-1: USB disconnect, device number 31 [ 1184.097779][ T5133] kobil ttyUSB0: KOBIL USB smart card terminal converter now disconnected from ttyUSB0 [ 1184.116348][ T5133] kobil_sct 1-1:0.0: device disconnected [ 1184.441832][ T5668] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1184.452375][ T5668] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 18 [ 1184.687213][ T5668] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1184.696975][ T5668] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1184.705491][ T5668] usb 5-1: SerialNumber: syz [ 1184.838928][ T5668] usb 5-1: bad CDC descriptors [ 1184.913663][T13420] netlink: 140 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1185.058190][ T5668] usb 5-1: USB disconnect, device number 23 [ 1186.378087][T13435] overlayfs: missing 'lowerdir' [ 1188.434199][ T5133] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 1188.728029][T13458] netlink: 140 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1188.741842][ T5133] usb 1-1: Using ep0 maxpacket: 16 [ 1188.872810][ T5133] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xC has an invalid bInterval 0, changing to 7 [ 1188.884667][ T5133] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xC has invalid wMaxPacketSize 0 [ 1189.062244][ T5133] usb 1-1: New USB device found, idVendor=0d46, idProduct=0081, bcdDevice=19.82 [ 1189.071631][ T5133] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1189.079780][ T5133] usb 1-1: Product: syz [ 1189.084261][ T5133] usb 1-1: Manufacturer: syz [ 1189.088988][ T5133] usb 1-1: SerialNumber: syz [ 1189.151257][ T5133] usb 1-1: config 0 descriptor?? [ 1189.219815][ T5133] kobil_sct 1-1:0.0: KOBIL USB smart card terminal converter detected [ 1189.291559][ T5133] usb 1-1: KOBIL USB smart card terminal converter now attached to ttyUSB0 [ 1189.578685][ T5668] usb 1-1: USB disconnect, device number 32 [ 1189.626875][ T5668] kobil ttyUSB0: KOBIL USB smart card terminal converter now disconnected from ttyUSB0 [ 1189.643196][ T5668] kobil_sct 1-1:0.0: device disconnected [ 1190.136740][ T5087] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci5/hci5:201' [ 1190.149949][ T5087] CPU: 1 PID: 5087 Comm: kworker/u9:3 Not tainted 6.9.0-syzkaller-02339-g101b7a97143a #0 [ 1190.160088][ T5087] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024 [ 1190.170429][ T5087] Workqueue: hci5 hci_rx_work [ 1190.175521][ T5087] Call Trace: [ 1190.179048][ T5087] [ 1190.182201][ T5087] dump_stack_lvl+0x216/0x2d0 [ 1190.187253][ T5087] dump_stack+0x1e/0x30 [ 1190.191737][ T5087] sysfs_create_dir_ns+0x45f/0x4c0 [ 1190.197170][ T5087] kobject_add_internal+0xfe7/0x1900 [ 1190.202779][ T5087] kobject_add+0x28c/0x3c0 [ 1190.207674][ T5087] ? kmsan_get_metadata+0x146/0x1d0 [ 1190.207866][ T5087] device_add+0xa93/0x1c90 [ 1190.208075][ T5087] hci_conn_add_sysfs+0x161/0x2c0 [ 1190.208313][ T5087] le_conn_complete_evt+0x1975/0x1f40 [ 1190.208534][ T5087] ? kmsan_get_metadata+0x146/0x1d0 [ 1190.208712][ T5087] hci_le_enh_conn_complete_evt+0x15e/0x210 [ 1190.208971][ T5087] hci_le_meta_evt+0x600/0x850 [ 1190.209170][ T5087] ? __pfx_hci_le_enh_conn_complete_evt+0x10/0x10 [ 1190.209414][ T5087] hci_event_packet+0x1118/0x1bc0 [ 1190.209600][ T5087] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 1190.209836][ T5087] hci_rx_work+0x687/0x1130 [ 1190.210065][ T5087] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 1190.210229][ T5087] ? __pfx_hci_rx_work+0x10/0x10 [ 1190.210401][ T5087] ? __pfx_hci_rx_work+0x10/0x10 [ 1190.210575][ T5087] process_scheduled_works+0xa81/0x1bd0 [ 1190.210784][ T5087] worker_thread+0xea5/0x1560 [ 1190.210982][ T5087] kthread+0x3e2/0x540 [ 1190.211164][ T5087] ? __pfx_worker_thread+0x10/0x10 [ 1190.211343][ T5087] ? __pfx_kthread+0x10/0x10 [ 1190.211519][ T5087] ret_from_fork+0x6d/0x90 [ 1190.211674][ T5087] ? __pfx_kthread+0x10/0x10 [ 1190.211854][ T5087] ret_from_fork_asm+0x1a/0x30 [ 1190.212059][ T5087] [ 1190.213532][ T5087] kobject: kobject_add_internal failed for hci5:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 1190.351191][ T5087] Bluetooth: hci5: failed to register connection device [ 1191.552870][T13478] overlayfs: missing 'lowerdir' [ 1192.381404][ T4439] Bluetooth: hci5: command 0x0406 tx timeout [ 1192.717596][T13495] netlink: 140 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1193.551852][ T10] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 1193.821684][ T10] usb 5-1: Using ep0 maxpacket: 16 [ 1193.903270][ T4439] Bluetooth: hci1: command 0x0406 tx timeout [ 1193.967680][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xC has an invalid bInterval 0, changing to 7 [ 1193.979133][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xC has invalid wMaxPacketSize 0 [ 1194.234909][ T10] usb 5-1: New USB device found, idVendor=0d46, idProduct=0081, bcdDevice=19.82 [ 1194.250624][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1194.261494][ T10] usb 5-1: Product: syz [ 1194.265950][ T10] usb 5-1: Manufacturer: syz [ 1194.271020][ T10] usb 5-1: SerialNumber: syz [ 1194.304007][ T10] usb 5-1: config 0 descriptor?? [ 1194.359198][ T10] kobil_sct 5-1:0.0: KOBIL USB smart card terminal converter detected [ 1194.401920][ T10] usb 5-1: KOBIL USB smart card terminal converter now attached to ttyUSB0 [ 1194.737706][ T43] usb 5-1: USB disconnect, device number 24 [ 1194.786607][ T43] kobil ttyUSB0: KOBIL USB smart card terminal converter now disconnected from ttyUSB0 [ 1194.799202][ T43] kobil_sct 5-1:0.0: device disconnected [ 1195.376864][T13520] loop1: detected capacity change from 0 to 64 [ 1195.403149][T13522] overlayfs: missing 'workdir' [ 1196.939226][T13536] netlink: 140 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1199.486643][ T43] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 1199.775675][ T43] usb 3-1: Using ep0 maxpacket: 16 [ 1199.901544][ T43] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xC has an invalid bInterval 0, changing to 7 [ 1199.912808][ T43] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xC has invalid wMaxPacketSize 0 [ 1199.958982][T13560] overlayfs: missing 'workdir' [ 1200.143890][ T43] usb 3-1: New USB device found, idVendor=0d46, idProduct=0081, bcdDevice=19.82 [ 1200.153539][ T43] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1200.162034][ T43] usb 3-1: Product: syz [ 1200.166444][ T43] usb 3-1: Manufacturer: syz [ 1200.171403][ T43] usb 3-1: SerialNumber: syz [ 1200.236295][ T43] usb 3-1: config 0 descriptor?? [ 1200.321965][ T43] kobil_sct 3-1:0.0: KOBIL USB smart card terminal converter detected [ 1200.464367][ T43] usb 3-1: KOBIL USB smart card terminal converter now attached to ttyUSB0 [ 1200.700191][ T43] usb 3-1: USB disconnect, device number 31 [ 1200.784818][ T43] kobil ttyUSB0: KOBIL USB smart card terminal converter now disconnected from ttyUSB0 [ 1200.799575][ T43] kobil_sct 3-1:0.0: device disconnected [ 1201.806025][T13574] netlink: 140 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1203.246321][ T3118] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1203.366853][ T4439] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1203.378986][ T4439] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1203.393486][ T4439] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1203.410884][ T4439] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1203.424347][ T4439] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1203.438635][ T4439] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1203.516485][ T3118] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1203.688957][ T3118] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1204.136295][ T3118] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1204.612698][ T3118] bridge_slave_1: left allmulticast mode [ 1204.618734][ T3118] bridge_slave_1: left promiscuous mode [ 1204.627885][ T3118] bridge0: port 2(bridge_slave_1) entered disabled state [ 1204.649279][ T3118] bridge_slave_0: left allmulticast mode [ 1204.655500][ T3118] bridge_slave_0: left promiscuous mode [ 1204.662441][ T3118] bridge0: port 1(bridge_slave_0) entered disabled state [ 1205.245677][ T3118] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1205.308537][ T3118] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1205.343728][ T3118] bond0 (unregistering): Released all slaves [ 1205.581001][T13466] Bluetooth: hci1: command tx timeout [ 1206.595605][T13603] overlayfs: missing 'workdir' [ 1206.680415][T13585] chnl_net:caif_netlink_parms(): no params data found [ 1206.862325][ T3118] hsr_slave_0: left promiscuous mode [ 1206.889552][ T3118] hsr_slave_1: left promiscuous mode [ 1206.942438][ T3118] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1206.950113][ T3118] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1207.051857][ T3118] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1207.059490][ T3118] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1207.132660][ T3118] veth1_macvtap: left promiscuous mode [ 1207.138410][ T3118] veth0_macvtap: left promiscuous mode [ 1207.149021][ T3118] veth1_vlan: left promiscuous mode [ 1207.154707][ T3118] veth0_vlan: left promiscuous mode [ 1207.214000][ T1216] ieee802154 phy0 wpan0: encryption failed: -22 [ 1207.220790][ T1216] ieee802154 phy1 wpan1: encryption failed: -22 [ 1207.664386][T13466] Bluetooth: hci1: command tx timeout [ 1208.175887][ T3118] team0 (unregistering): Port device team_slave_1 removed [ 1208.333884][ T3118] team0 (unregistering): Port device team_slave_0 removed [ 1209.741972][T13466] Bluetooth: hci1: command tx timeout [ 1210.583110][T13621] netlink: 140 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1211.204962][T13585] bridge0: port 1(bridge_slave_0) entered blocking state [ 1211.212926][T13585] bridge0: port 1(bridge_slave_0) entered disabled state [ 1211.220600][T13585] bridge_slave_0: entered allmulticast mode [ 1211.229217][T13585] bridge_slave_0: entered promiscuous mode [ 1211.463537][T13585] bridge0: port 2(bridge_slave_1) entered blocking state [ 1211.471724][T13585] bridge0: port 2(bridge_slave_1) entered disabled state [ 1211.479639][T13585] bridge_slave_1: entered allmulticast mode [ 1211.491432][T13585] bridge_slave_1: entered promiscuous mode [ 1211.833954][ T4439] Bluetooth: hci1: command tx timeout [ 1211.963065][T13585] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1212.142704][T13585] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1212.511030][T13627] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1212.599653][T13585] team0: Port device team_slave_0 added [ 1212.723639][T13585] team0: Port device team_slave_1 added [ 1213.413855][T13585] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1213.421276][T13585] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1213.447847][T13585] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1213.666261][T13585] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1213.673706][T13585] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1213.702129][T13585] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1214.323110][T13585] hsr_slave_0: entered promiscuous mode [ 1214.378070][T13585] hsr_slave_1: entered promiscuous mode [ 1214.437816][T13585] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1214.446019][T13585] Cannot create hsr debugfs directory [ 1216.735382][T13642] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1216.800570][T13585] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1216.859017][T13585] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1216.976730][T13585] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1217.113544][T13585] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1217.212986][T13655] netlink: 140 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1218.476639][T13585] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1218.525542][T13667] loop2: detected capacity change from 0 to 64 [ 1218.719597][T13585] 8021q: adding VLAN 0 to HW filter on device team0 [ 1218.942914][ T10] bridge0: port 1(bridge_slave_0) entered blocking state [ 1218.950414][ T10] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1219.040383][ T10] bridge0: port 2(bridge_slave_1) entered blocking state [ 1219.048036][ T10] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1219.887586][T13676] syz_tun: entered promiscuous mode [ 1219.992234][T13676] syz_tun: left promiscuous mode [ 1221.195616][T13687] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1221.387461][T13585] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1222.537909][T13705] netlink: 140 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1222.548544][T13705] caif0 speed is unknown, defaulting to 1000 [ 1222.557721][T13705] caif0 speed is unknown, defaulting to 1000 [ 1222.565365][T13705] caif0 speed is unknown, defaulting to 1000 [ 1223.045044][T13705] infiniband syz1: set down [ 1223.049834][T13705] infiniband syz1: added caif0 [ 1223.102478][ T5139] caif0 speed is unknown, defaulting to 1000 [ 1223.488764][T13585] veth0_vlan: entered promiscuous mode [ 1223.557731][T13585] veth1_vlan: entered promiscuous mode [ 1223.615491][T13705] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR [ 1223.726719][T13705] infiniband syz1: Couldn't open port 1 [ 1223.967455][T13585] veth0_macvtap: entered promiscuous mode [ 1223.982661][T13705] RDS/IB: syz1: added [ 1223.986937][T13705] smc: adding ib device syz1 with port count 1 [ 1223.993528][T13705] smc: ib device syz1 port 1 has pnetid SYZ0 (user defined) [ 1224.002682][T13705] caif0 speed is unknown, defaulting to 1000 [ 1224.387438][T13705] caif0 speed is unknown, defaulting to 1000 [ 1224.725985][T13585] veth1_macvtap: entered promiscuous mode [ 1224.798986][T13705] caif0 speed is unknown, defaulting to 1000 [ 1225.142722][T13585] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1225.153562][T13585] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1225.166115][T13585] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1225.177672][T13585] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1225.187871][T13585] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1225.198754][T13585] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1225.209087][T13585] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1225.219845][T13585] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1225.235861][T13585] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1225.321169][T13705] caif0 speed is unknown, defaulting to 1000 [ 1225.389413][ T10] caif0 speed is unknown, defaulting to 1000 [ 1225.442664][T13585] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1225.453502][T13585] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1225.463697][T13585] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1225.481496][T13585] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1225.493653][T13585] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1225.506892][T13585] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1225.522720][T13585] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1225.853502][T13705] caif0 speed is unknown, defaulting to 1000 [ 1225.901307][T13585] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1225.910402][T13585] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1225.921604][T13585] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1225.930667][T13585] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1228.154423][T13730] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1229.914076][T13758] netlink: 140 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1229.924111][T13758] syz1: rxe_newlink: already configured on caif0 [ 1231.608567][T13780] overlayfs: failed to resolve './file1': -2 [ 1232.990133][ T3251] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1232.998424][ T3251] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1233.173660][ T3406] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1233.183722][ T3406] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1235.061274][ T29] audit: type=1326 audit(1717691572.979:529): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13794 comm="syz-executor.1" exe="/root/syz-executor.1" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf73d1579 code=0x0 [ 1235.828591][T13802] netlink: 140 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1235.842175][T13802] rdma_rxe: rxe_newlink: failed to add caif0 [ 1237.941284][T13817] overlayfs: failed to resolve './file1': -2 [ 1239.858838][ T29] audit: type=1326 audit(1717691577.839:530): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13829 comm="syz-executor.3" exe="/root/syz-executor.3" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf745f579 code=0x0 [ 1240.358550][T13840] loop1: detected capacity change from 0 to 512 [ 1240.702277][T13840] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2250: inode #15: comm syz-executor.1: corrupted in-inode xattr: invalid ea_ino [ 1240.827102][T13840] EXT4-fs error (device loop1): ext4_orphan_get:1399: comm syz-executor.1: couldn't read orphan inode 15 (err -117) [ 1240.911587][T13840] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1241.849730][T13863] overlayfs: failed to resolve './file1': -2 [ 1242.239165][T13867] loop0: detected capacity change from 0 to 64 [ 1245.403236][T13883] netlink: 524 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1247.372088][T13896] overlayfs: failed to resolve './file0': -2 [ 1247.616909][T13900] netlink: 'syz-executor.2': attribute type 5 has an invalid length. [ 1250.309420][ T7681] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1250.876379][T13918] netlink: 96 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1251.155008][T13920] netlink: 'syz-executor.4': attribute type 10 has an invalid length. [ 1251.217994][T13920] batman_adv: batadv0: Adding interface: team0 [ 1251.224630][T13920] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1251.250250][T13920] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 1251.333801][T13920] netlink: 'syz-executor.4': attribute type 10 has an invalid length. [ 1251.342552][T13920] netlink: 2 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1251.352865][T13920] team0: entered promiscuous mode [ 1251.358124][T13920] team_slave_0: entered promiscuous mode [ 1251.365417][T13920] team_slave_1: entered promiscuous mode [ 1251.391472][T13920] 8021q: adding VLAN 0 to HW filter on device team0 [ 1251.399757][T13920] batman_adv: batadv0: Interface activated: team0 [ 1251.407059][T13920] batman_adv: batadv0: Interface deactivated: team0 [ 1251.414311][T13920] batman_adv: batadv0: Removing interface: team0 [ 1251.637704][T13920] bridge0: port 3(team0) entered blocking state [ 1251.644976][T13920] bridge0: port 3(team0) entered disabled state [ 1251.652201][T13920] team0: entered allmulticast mode [ 1251.657482][T13920] team_slave_0: entered allmulticast mode [ 1251.663539][T13920] team_slave_1: entered allmulticast mode [ 1251.676043][T13920] bridge0: port 3(team0) entered blocking state [ 1251.682950][T13920] bridge0: port 3(team0) entered forwarding state [ 1252.927021][T13933] overlayfs: failed to resolve './file0': -2 [ 1254.632506][T13956] loop3: detected capacity change from 0 to 512 [ 1255.089600][T13956] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2250: inode #15: comm syz-executor.3: corrupted in-inode xattr: invalid ea_ino [ 1255.294162][T13956] EXT4-fs error (device loop3): ext4_orphan_get:1399: comm syz-executor.3: couldn't read orphan inode 15 (err -117) [ 1255.397149][T13956] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1256.870381][T13981] overlayfs: failed to resolve './file0': -2 [ 1260.721467][T14020] loop0: detected capacity change from 0 to 16384 [ 1260.934042][T14024] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1260.943895][T14024] Buffer I/O error on dev loop0, logical block 0, async page read [ 1260.952362][T14024] ldm_validate_partition_table(): Disk read failed. [ 1260.959253][T14024] Dev loop0: unable to read RDB block 0 [ 1260.965262][T14024] loop0: unable to read partition table [ 1261.061449][T14020] I/O error, dev loop0, sector 256 op 0x0:(READ) flags 0x80700 phys_seg 32 prio class 0 [ 1261.101048][T14024] loop0: partition table beyond EOD, truncated [ 1261.110614][T14024] loop_reread_partitions: partition scan of loop0 () failed (rc=-5) [ 1263.028974][T14052] loop2: detected capacity change from 0 to 64 [ 1263.713065][T14061] netlink: 'syz-executor.4': attribute type 7 has an invalid length. [ 1263.722192][T14061] netlink: 'syz-executor.4': attribute type 39 has an invalid length. [ 1263.864316][T14062] bridge1: port 1(gretap1) entered blocking state [ 1263.878496][T14062] bridge1: port 1(gretap1) entered disabled state [ 1263.886053][T14062] gretap1: entered allmulticast mode [ 1263.894241][T14062] gretap1: entered promiscuous mode [ 1264.819283][ T9631] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1268.640032][ T1216] ieee802154 phy0 wpan0: encryption failed: -22 [ 1268.646997][ T1216] ieee802154 phy1 wpan1: encryption failed: -22 [ 1270.668879][ T29] audit: type=1804 audit(1717691608.659:531): pid=14125 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir2734877955/syzkaller.7XrNxX/437/bus" dev="sda1" ino=1961 res=1 errno=0 [ 1270.694965][ T29] audit: type=1800 audit(1717691608.659:532): pid=14125 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=1961 res=0 errno=0 [ 1271.148689][T14125] Invalid ELF header magic: != ELF [ 1271.823540][T14131] loop3: detected capacity change from 0 to 256 [ 1271.902861][T14131] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 1272.007118][T14131] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1272.238609][ T29] audit: type=1326 audit(1717691610.219:533): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14130 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf745f579 code=0x7ffc0000 [ 1272.262171][ T29] audit: type=1326 audit(1717691610.219:534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14130 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf745f579 code=0x7ffc0000 [ 1272.287787][ T29] audit: type=1326 audit(1717691610.229:535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14130 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf745f579 code=0x7ffc0000 [ 1272.311602][ T29] audit: type=1326 audit(1717691610.229:536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14130 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf745f579 code=0x7ffc0000 [ 1272.334893][ T29] audit: type=1326 audit(1717691610.229:537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14130 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=40000003 syscall=370 compat=1 ip=0xf745f579 code=0x7ffc0000 [ 1272.358464][ T29] audit: type=1326 audit(1717691610.239:538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14130 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf745f579 code=0x7ffc0000 [ 1272.385546][ T29] audit: type=1326 audit(1717691610.259:539): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14130 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf745f579 code=0x7ffc0000 [ 1275.822767][T13466] Bluetooth: hci4: command 0x0406 tx timeout [ 1275.996919][T14164] smc: net device ip6tnl0 applied user defined pnetid SYZ0 [ 1276.765662][T14170] ax25_connect(): syz-executor.4 uses autobind, please contact jreuter@yaina.de [ 1279.056289][T14189] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1280.176769][T14198] ax25_connect(): syz-executor.3 uses autobind, please contact jreuter@yaina.de [ 1282.475280][T14220] loop4: detected capacity change from 0 to 512 [ 1282.568185][T14220] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1282.581709][T14220] ext4 filesystem being mounted at /root/syzkaller-testdir357212764/syzkaller.pvxi1E/49/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1282.710277][ T3251] Ignoring NSS change in VHT Operating Mode Notification from 08:02:11:00:00:00 with invalid nss 2 [ 1283.025163][T14232] ax25_connect(): syz-executor.2 uses autobind, please contact jreuter@yaina.de [ 1283.275440][T13585] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1283.519738][T14236] loop3: detected capacity change from 0 to 512 [ 1283.770260][T14236] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2250: inode #15: comm syz-executor.3: corrupted in-inode xattr: invalid ea_ino [ 1283.863440][T14236] EXT4-fs error (device loop3): ext4_orphan_get:1399: comm syz-executor.3: couldn't read orphan inode 15 (err -117) [ 1283.980012][T14236] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1284.307419][T14245] loop4: detected capacity change from 0 to 64 [ 1287.199518][T14262] loop2: detected capacity change from 0 to 512 [ 1287.278368][T14262] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1287.371166][T14262] EXT4-fs: old and new quota format mixing [ 1287.800329][T14262] loop2: detected capacity change from 0 to 1764 [ 1288.771812][T14269] loop1: detected capacity change from 0 to 256 [ 1289.226579][ T59] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1289.400380][ T59] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1289.492031][T14269] FAT-fs (loop1): Directory bread(block 64) failed [ 1289.498900][T14269] FAT-fs (loop1): Directory bread(block 65) failed [ 1289.506135][T14269] FAT-fs (loop1): Directory bread(block 66) failed [ 1289.513271][T14269] FAT-fs (loop1): Directory bread(block 67) failed [ 1289.520276][T14269] FAT-fs (loop1): Directory bread(block 68) failed [ 1289.527350][T14269] FAT-fs (loop1): Directory bread(block 69) failed [ 1289.534487][T14269] FAT-fs (loop1): Directory bread(block 70) failed [ 1289.541475][T14269] FAT-fs (loop1): Directory bread(block 71) failed [ 1289.548470][T14269] FAT-fs (loop1): Directory bread(block 72) failed [ 1289.555443][T14269] FAT-fs (loop1): Directory bread(block 73) failed [ 1289.667289][ T59] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1289.850650][ T59] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1290.157336][ T59] bridge_slave_1: left allmulticast mode [ 1290.163688][ T59] bridge_slave_1: left promiscuous mode [ 1290.170127][ T59] bridge0: port 2(bridge_slave_1) entered disabled state [ 1290.267832][ T59] bridge_slave_0: left allmulticast mode [ 1290.274335][ T59] bridge_slave_0: left promiscuous mode [ 1290.281575][ T59] bridge0: port 1(bridge_slave_0) entered disabled state [ 1290.957033][ T59] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1291.026253][ T59] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1291.132568][ T59] bond0 (unregistering): Released all slaves [ 1292.502100][ T59] hsr_slave_0: left promiscuous mode [ 1292.518267][ T59] hsr_slave_1: left promiscuous mode [ 1292.572435][ T59] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1292.580236][ T59] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1292.634472][ T59] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1292.642788][ T59] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1292.736824][ T59] veth1_macvtap: left promiscuous mode [ 1292.742815][ T59] veth0_macvtap: left promiscuous mode [ 1292.752929][ T59] veth1_vlan: left promiscuous mode [ 1292.758627][ T59] veth0_vlan: left promiscuous mode [ 1293.787488][T13466] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1293.804709][T13466] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1293.823496][T13466] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1293.973443][T13466] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1293.989465][T13466] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1293.999596][T13466] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1294.027216][ T59] team0 (unregistering): Port device team_slave_1 removed [ 1294.065634][ T59] team0 (unregistering): Port device team_slave_0 removed [ 1294.586927][T14273] caif0 speed is unknown, defaulting to 1000 [ 1295.241459][ T9631] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1295.935356][T14273] chnl_net:caif_netlink_parms(): no params data found [ 1296.222505][T13466] Bluetooth: hci3: command tx timeout [ 1297.909686][T14273] bridge0: port 1(bridge_slave_0) entered blocking state [ 1297.917604][T14273] bridge0: port 1(bridge_slave_0) entered disabled state [ 1297.925547][T14273] bridge_slave_0: entered allmulticast mode [ 1297.935580][T14273] bridge_slave_0: entered promiscuous mode [ 1298.056714][T14273] bridge0: port 2(bridge_slave_1) entered blocking state [ 1298.065167][T14273] bridge0: port 2(bridge_slave_1) entered disabled state [ 1298.077377][T14273] bridge_slave_1: entered allmulticast mode [ 1298.087347][T14273] bridge_slave_1: entered promiscuous mode [ 1298.293859][ T4439] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1298.302036][ T4439] Bluetooth: hci3: command tx timeout [ 1298.345564][ T5087] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1298.355571][ T5087] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1298.383340][ T5087] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1298.405191][ T5087] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 1298.423842][ T5087] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1298.458630][T14273] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1298.498357][T14273] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1298.643702][T14302] loop3: detected capacity change from 0 to 512 [ 1298.708949][T14302] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 1298.784777][T14273] team0: Port device team_slave_0 added [ 1298.869632][T14299] caif0 speed is unknown, defaulting to 1000 [ 1299.024608][T14273] team0: Port device team_slave_1 added [ 1299.127037][T14302] EXT4-fs error (device loop3): ext4_orphan_get:1394: inode #15: comm syz-executor.3: iget: bad i_size value: -67835469387268086 [ 1299.156886][T14302] EXT4-fs error (device loop3): ext4_orphan_get:1399: comm syz-executor.3: couldn't read orphan inode 15 (err -117) [ 1299.176492][T14302] EXT4-fs (loop3): mounted filesystem f7ff0000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1299.189520][T14302] ext2 filesystem being mounted at /root/syzkaller-testdir2824628467/syzkaller.aI8mtr/348/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1299.457952][T14273] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1299.466124][T14273] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1299.492807][T14273] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1299.717026][T14273] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1299.724435][T14273] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1299.752418][T14273] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1300.297807][T14273] hsr_slave_0: entered promiscuous mode [ 1300.322594][T14273] hsr_slave_1: entered promiscuous mode [ 1300.348299][T14273] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1300.356544][T14273] Cannot create hsr debugfs directory [ 1300.381353][T13466] Bluetooth: hci3: command tx timeout [ 1300.549808][T13466] Bluetooth: hci4: command tx timeout [ 1301.256628][T14316] loop1: detected capacity change from 0 to 512 [ 1301.326575][T14316] EXT4-fs (loop1): blocks per group (95) and clusters per group (32768) inconsistent [ 1301.598013][T14299] chnl_net:caif_netlink_parms(): no params data found [ 1301.801131][ T5137] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 1302.145109][ T5137] usb 2-1: Using ep0 maxpacket: 8 [ 1302.331990][ T5137] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 117, changing to 10 [ 1302.343794][ T5137] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 25380, setting to 1024 [ 1302.355334][ T5137] usb 2-1: New USB device found, idVendor=1b3d, idProduct=0146, bcdDevice= 1.b8 [ 1302.364815][ T5137] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1302.511119][ T5137] usb 2-1: config 0 descriptor?? [ 1302.513214][T13466] Bluetooth: hci3: command tx timeout [ 1302.528005][T14273] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1302.612404][ T5137] ftdi_sio 2-1:0.0: FTDI USB Serial Device converter detected [ 1302.622319][ T5137] usb 2-1: Detected SIO [ 1302.623190][T13466] Bluetooth: hci4: command tx timeout [ 1302.675042][ T5137] usb 2-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 1302.700320][T14273] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1302.831457][ T9631] EXT4-fs (loop3): unmounting filesystem f7ff0000-0000-0000-0000-000000000000. [ 1302.835728][T14273] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1302.874906][ T5137] usb 2-1: USB disconnect, device number 25 [ 1302.906075][T14273] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1302.917941][ T5137] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 1302.928706][ T5137] ftdi_sio 2-1:0.0: device disconnected [ 1303.844438][T14299] bridge0: port 1(bridge_slave_0) entered blocking state [ 1303.852576][T14299] bridge0: port 1(bridge_slave_0) entered disabled state [ 1303.860581][T14299] bridge_slave_0: entered allmulticast mode [ 1303.870309][T14299] bridge_slave_0: entered promiscuous mode [ 1304.005169][T14299] bridge0: port 2(bridge_slave_1) entered blocking state [ 1304.017529][T14299] bridge0: port 2(bridge_slave_1) entered disabled state [ 1304.025638][T14299] bridge_slave_1: entered allmulticast mode [ 1304.035577][T14299] bridge_slave_1: entered promiscuous mode [ 1304.337966][T14299] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1304.431295][T14299] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1304.701042][T13466] Bluetooth: hci4: command tx timeout [ 1304.848454][T14299] team0: Port device team_slave_0 added [ 1304.889422][T14299] team0: Port device team_slave_1 added [ 1305.175328][T14273] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1305.193866][T14299] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1305.201413][T14299] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1305.227778][T14299] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1305.257504][T14299] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1305.265225][T14299] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1305.291892][T14299] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1305.718542][T14273] 8021q: adding VLAN 0 to HW filter on device team0 [ 1305.791666][T14299] hsr_slave_0: entered promiscuous mode [ 1305.848047][T14299] hsr_slave_1: entered promiscuous mode [ 1305.898786][T14299] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1305.907549][T14299] Cannot create hsr debugfs directory [ 1305.953004][T14270] bridge0: port 1(bridge_slave_0) entered blocking state [ 1305.960548][T14270] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1306.187485][T14270] bridge0: port 2(bridge_slave_1) entered blocking state [ 1306.195127][T14270] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1306.788122][T13466] Bluetooth: hci4: command tx timeout [ 1307.422540][T14299] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1307.645345][T14299] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1307.928519][T14299] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1308.151658][T14299] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1308.812059][ T29] audit: type=1326 audit(1717691646.789:540): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14350 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73d1579 code=0x7ffc0000 [ 1308.838207][ T29] audit: type=1326 audit(1717691646.789:541): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14350 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73d1579 code=0x7ffc0000 [ 1308.862617][ T29] audit: type=1326 audit(1717691646.809:542): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14350 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=40000003 syscall=356 compat=1 ip=0xf73d1579 code=0x7ffc0000 [ 1308.885713][ T29] audit: type=1326 audit(1717691646.819:543): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14350 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=40000003 syscall=192 compat=1 ip=0xf73d1579 code=0x7ffc0000 [ 1308.908945][ T29] audit: type=1326 audit(1717691646.909:544): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14350 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=40000003 syscall=4 compat=1 ip=0xf73d1579 code=0x7ffc0000 [ 1308.964041][T14299] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1309.058216][T14351] loop1: detected capacity change from 0 to 2048 [ 1309.080944][ T29] audit: type=1326 audit(1717691647.059:545): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14350 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=40000003 syscall=91 compat=1 ip=0xf73d1579 code=0x7ffc0000 [ 1309.084497][T14299] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1309.103850][ T29] audit: type=1326 audit(1717691647.099:546): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14350 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf73d1579 code=0x7ffc0000 [ 1309.137188][ T29] audit: type=1326 audit(1717691647.099:547): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14350 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf73d1579 code=0x7ffc0000 [ 1309.232781][T14353] loop3: detected capacity change from 0 to 512 [ 1309.248426][ T29] audit: type=1326 audit(1717691647.249:548): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14350 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=40000003 syscall=6 compat=1 ip=0xf73d1579 code=0x7ffc0000 [ 1309.271587][ T29] audit: type=1326 audit(1717691647.249:549): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14350 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=40000003 syscall=6 compat=1 ip=0xf73d1579 code=0x7ffc0000 [ 1309.272477][T14299] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1309.316318][T14353] EXT4-fs (loop3): blocks per group (95) and clusters per group (32768) inconsistent [ 1309.366836][T14273] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1309.413541][T14351] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1309.445680][T14299] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1309.831964][ T5139] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 1309.948652][ T7681] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1310.093418][T14273] veth0_vlan: entered promiscuous mode [ 1310.111832][ T5139] usb 4-1: Using ep0 maxpacket: 8 [ 1310.253255][ T5139] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 117, changing to 10 [ 1310.268280][ T5139] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 25380, setting to 1024 [ 1310.280980][ T5139] usb 4-1: New USB device found, idVendor=1b3d, idProduct=0146, bcdDevice= 1.b8 [ 1310.290324][ T5139] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1310.292365][T14273] veth1_vlan: entered promiscuous mode [ 1310.369094][ T5139] usb 4-1: config 0 descriptor?? [ 1310.436206][ T5139] ftdi_sio 4-1:0.0: FTDI USB Serial Device converter detected [ 1310.445884][ T5139] usb 4-1: Detected SIO [ 1310.535683][ T5139] usb 4-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 1310.767692][ T5139] usb 4-1: USB disconnect, device number 31 [ 1310.839286][ T5139] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 1310.850063][ T5139] ftdi_sio 4-1:0.0: device disconnected [ 1310.902408][T14273] veth0_macvtap: entered promiscuous mode [ 1311.030814][T14273] veth1_macvtap: entered promiscuous mode [ 1311.146627][T14299] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1311.256794][ T3406] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1311.450132][ T3406] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1311.517992][T14273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1311.529309][T14273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1311.539498][T14273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1311.550315][T14273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1311.560522][T14273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1311.571352][T14273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1311.581538][T14273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1311.595704][T14273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1311.612217][T14273] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1311.799009][ T3406] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1311.852978][T14362] overlayfs: missing 'lowerdir' [ 1311.874436][T14299] 8021q: adding VLAN 0 to HW filter on device team0 [ 1311.953367][ T3406] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1312.035785][T14273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1312.046994][T14273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1312.057232][T14273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1312.068160][T14273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1312.078454][T14273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1312.089277][T14273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1312.109070][T14273] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1312.211978][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 1312.219745][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1312.236665][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 1312.244512][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1312.494552][T14273] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1312.505009][T14273] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1312.517781][T14273] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1312.527918][T14273] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1312.815185][ T3406] team0: left allmulticast mode [ 1312.823807][ T3406] team_slave_0: left allmulticast mode [ 1312.830527][ T3406] team_slave_1: left allmulticast mode [ 1312.837287][ T3406] bridge0: port 3(team0) entered disabled state [ 1312.913614][ T3406] bridge_slave_1: left allmulticast mode [ 1312.924446][ T3406] bridge_slave_1: left promiscuous mode [ 1312.931352][ T3406] bridge0: port 2(bridge_slave_1) entered disabled state [ 1312.989829][ T3406] bridge_slave_0: left allmulticast mode [ 1312.996091][ T3406] bridge_slave_0: left promiscuous mode [ 1313.002887][ T3406] bridge0: port 1(bridge_slave_0) entered disabled state [ 1313.075778][ T3406] gretap1: left allmulticast mode [ 1313.081442][ T3406] gretap1: left promiscuous mode [ 1313.087521][ T3406] bridge1: port 1(gretap1) entered disabled state [ 1313.095987][ T5087] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1313.133682][ T5087] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1313.152639][ T5087] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1313.198302][ T5087] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1313.423304][ T5087] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1313.434430][ T5087] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1314.011583][ T3406] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1314.076505][ T3406] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1314.147043][ T3406] bond0 (unregistering): Released all slaves [ 1314.467125][T14368] caif0 speed is unknown, defaulting to 1000 [ 1315.396506][T14385] loop1: detected capacity change from 0 to 64 [ 1315.502208][ T5087] Bluetooth: hci1: command tx timeout [ 1316.120911][ T3406] hsr_slave_0: left promiscuous mode [ 1316.208744][ T3406] hsr_slave_1: left promiscuous mode [ 1316.240480][ T3406] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1316.248438][ T3406] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1316.315570][ T3406] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1316.323504][ T3406] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1316.432807][ T3406] veth1_macvtap: left promiscuous mode [ 1316.438604][ T3406] veth0_macvtap: left promiscuous mode [ 1316.444766][ T3406] veth1_vlan: left promiscuous mode [ 1316.450428][ T3406] veth0_vlan: left promiscuous mode [ 1317.244713][ T3406] team_slave_1 (unregistering): left promiscuous mode [ 1317.307395][ T3406] team0 (unregistering): Port device team_slave_1 removed [ 1317.379790][ T3406] team_slave_0 (unregistering): left promiscuous mode [ 1317.456019][ T3406] team0 (unregistering): Port device team_slave_0 removed [ 1317.587281][ T5087] Bluetooth: hci1: command tx timeout [ 1318.615947][T14403] loop3: detected capacity change from 0 to 2048 [ 1319.151405][T14299] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1319.162470][T14368] chnl_net:caif_netlink_parms(): no params data found [ 1319.661084][ T5087] Bluetooth: hci1: command tx timeout [ 1320.139847][T14414] loop3: detected capacity change from 0 to 512 [ 1320.153211][T14299] veth0_vlan: entered promiscuous mode [ 1320.273360][T14299] veth1_vlan: entered promiscuous mode [ 1320.336473][T14414] EXT4-fs (loop3): blocks per group (95) and clusters per group (32768) inconsistent [ 1320.760490][T14299] veth0_macvtap: entered promiscuous mode [ 1320.941154][ T43] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 1321.094994][T14368] bridge0: port 1(bridge_slave_0) entered blocking state [ 1321.119483][T14368] bridge0: port 1(bridge_slave_0) entered disabled state [ 1321.127810][T14368] bridge_slave_0: entered allmulticast mode [ 1321.137856][T14368] bridge_slave_0: entered promiscuous mode [ 1321.175568][T14299] veth1_macvtap: entered promiscuous mode [ 1321.231296][ T43] usb 4-1: Using ep0 maxpacket: 8 [ 1321.249669][T14368] bridge0: port 2(bridge_slave_1) entered blocking state [ 1321.257836][T14368] bridge0: port 2(bridge_slave_1) entered disabled state [ 1321.266020][T14368] bridge_slave_1: entered allmulticast mode [ 1321.276579][T14368] bridge_slave_1: entered promiscuous mode [ 1321.424081][T14299] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1321.435335][T14299] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1321.445624][T14299] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1321.456496][T14299] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1321.466653][T14299] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1321.477441][T14299] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1321.487635][T14299] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1321.498440][T14299] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1321.514572][T14299] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1321.526906][ T43] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 117, changing to 10 [ 1321.538595][ T43] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 25380, setting to 1024 [ 1321.550259][ T43] usb 4-1: New USB device found, idVendor=1b3d, idProduct=0146, bcdDevice= 1.b8 [ 1321.559806][ T43] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1321.611146][ T43] usb 4-1: config 0 descriptor?? [ 1321.655629][ T43] ftdi_sio 4-1:0.0: FTDI USB Serial Device converter detected [ 1321.665302][ T43] usb 4-1: Detected SIO [ 1321.744228][ T5087] Bluetooth: hci1: command tx timeout [ 1321.756929][ T43] usb 4-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 1321.817964][T14299] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1321.833700][T14299] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1321.844872][T14299] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1321.855631][T14299] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1321.865731][T14299] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1321.876462][T14299] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1321.891893][T14299] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1321.925153][T14368] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1322.045025][T14368] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1322.071585][T14299] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1322.081908][T14299] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1322.091077][T14299] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1322.100135][T14299] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1322.183238][ T5133] usb 4-1: USB disconnect, device number 32 [ 1322.282279][ T5133] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 1322.292830][ T5133] ftdi_sio 4-1:0.0: device disconnected [ 1322.383803][T14368] team0: Port device team_slave_0 added [ 1322.423289][T14368] team0: Port device team_slave_1 added [ 1322.660162][T14368] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1322.667756][T14368] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1322.695046][T14368] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1322.927720][T14368] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1322.935316][T14368] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1322.963643][T14368] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1323.564676][T14368] hsr_slave_0: entered promiscuous mode [ 1323.615268][T14368] hsr_slave_1: entered promiscuous mode [ 1323.670234][T14368] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1323.680499][T14368] Cannot create hsr debugfs directory [ 1324.221687][T14390] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1324.229883][T14390] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1324.528268][ T3118] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1324.538448][ T3118] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1325.734394][T14368] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1325.811661][T14368] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1325.848615][T14368] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1325.949682][T14368] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1327.510504][T14368] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1327.715042][T14368] 8021q: adding VLAN 0 to HW filter on device team0 [ 1327.877195][ T5140] bridge0: port 1(bridge_slave_0) entered blocking state [ 1327.884883][ T5140] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1328.004421][ T5140] bridge0: port 2(bridge_slave_1) entered blocking state [ 1328.012736][ T5140] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1330.115459][ T1216] ieee802154 phy0 wpan0: encryption failed: -22 [ 1330.122696][ T1216] ieee802154 phy1 wpan1: encryption failed: -22 [ 1330.932219][ T3406] geneve1: left allmulticast mode [ 1330.937754][ T3406] geneve1: left promiscuous mode [ 1330.949148][ T3406] bridge0: port 3(geneve1) entered disabled state [ 1331.028061][ T3406] bridge_slave_1: left allmulticast mode [ 1331.034533][ T3406] bridge_slave_1: left promiscuous mode [ 1331.041233][ T3406] bridge0: port 2(bridge_slave_1) entered disabled state [ 1331.090569][ T3406] bridge_slave_0: left allmulticast mode [ 1331.096749][ T3406] bridge_slave_0: left promiscuous mode [ 1331.103895][ T3406] bridge0: port 1(bridge_slave_0) entered disabled state [ 1331.258360][T14478] overlayfs: missing 'lowerdir' [ 1331.858092][ T3406] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1331.895421][ T3406] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1331.924655][ T3406] bond0 (unregistering): Released all slaves [ 1331.946550][ T3406] bond1 (unregistering): Released all slaves [ 1331.999905][ T3406] bond2 (unregistering): Released all slaves [ 1332.021693][ T3406] bond3 (unregistering): Released all slaves [ 1332.062179][ T3406] bond4 (unregistering): Released all slaves [ 1332.088360][ T3406] bond5 (unregistering): Released all slaves [ 1332.142713][ T3406] bond6 (unregistering): Released all slaves [ 1332.214425][ T3406] bond7 (unregistering): Released all slaves [ 1332.405237][T14368] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1332.505750][T14270] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1332.516191][T14270] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1332.608034][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1332.617593][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1333.819972][T14493] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1333.892231][ T3406] hsr_slave_0: left promiscuous mode [ 1333.984781][ T3406] hsr_slave_1: left promiscuous mode [ 1334.057079][ T3406] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1334.067703][ T3406] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1334.110277][ T3406] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1334.122686][ T3406] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1334.208158][ T3406] veth1_macvtap: left promiscuous mode [ 1334.214216][ T3406] veth0_macvtap: left promiscuous mode [ 1334.224234][ T3406] veth1_vlan: left promiscuous mode [ 1334.229838][ T3406] veth0_vlan: left promiscuous mode [ 1334.866882][ T29] kauditd_printk_skb: 16 callbacks suppressed [ 1334.866963][ T29] audit: type=1800 audit(1717691672.889:566): pid=14501 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="file1" dev="sda1" ino=1951 res=0 errno=0 [ 1334.991196][ T29] audit: type=1804 audit(1717691672.949:567): pid=14502 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir3259555366/syzkaller.q00GDZ/1/file1" dev="sda1" ino=1951 res=1 errno=0 [ 1335.066390][T14502] loop0: detected capacity change from 0 to 256 [ 1335.145921][ T3406] team0 (unregistering): Port device team_slave_1 removed [ 1335.250271][ T3406] team0 (unregistering): Port device team_slave_0 removed [ 1335.870339][T14502] FAT-fs (loop0): Directory bread(block 64) failed [ 1335.877474][T14502] FAT-fs (loop0): Directory bread(block 65) failed [ 1335.885082][T14502] FAT-fs (loop0): Directory bread(block 66) failed [ 1335.892061][T14502] FAT-fs (loop0): Directory bread(block 67) failed [ 1335.899330][T14502] FAT-fs (loop0): Directory bread(block 68) failed [ 1335.906655][T14502] FAT-fs (loop0): Directory bread(block 69) failed [ 1335.914417][T14502] FAT-fs (loop0): Directory bread(block 70) failed [ 1335.921442][T14502] FAT-fs (loop0): Directory bread(block 71) failed [ 1335.928922][T14502] FAT-fs (loop0): Directory bread(block 72) failed [ 1335.936373][T14502] FAT-fs (loop0): Directory bread(block 73) failed [ 1336.161903][ T29] audit: type=1800 audit(1717691674.139:568): pid=14501 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="file2" dev="loop0" ino=1048710 res=0 errno=0 [ 1336.289236][ T29] audit: type=1800 audit(1717691674.279:569): pid=14501 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="file2" dev="loop0" ino=1048710 res=0 errno=0 [ 1337.199183][T14368] veth0_vlan: entered promiscuous mode [ 1337.380268][T14368] veth1_vlan: entered promiscuous mode [ 1337.899071][T14368] veth0_macvtap: entered promiscuous mode [ 1338.014912][T14368] veth1_macvtap: entered promiscuous mode [ 1338.375834][T14368] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1338.391734][T14368] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1338.403108][T14368] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1338.413852][T14368] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1338.425978][T14368] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1338.437232][T14368] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1338.447299][T14368] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1338.458029][T14368] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1338.472276][T14368] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1338.593232][T14515] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 1338.602744][T14515] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1338.857613][T14368] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1338.868417][T14368] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1338.878532][T14368] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1338.889192][T14368] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1338.899274][T14368] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1338.910011][T14368] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1338.923902][T14368] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1339.232698][T14368] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1339.246695][T14368] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1339.257220][T14368] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1339.267952][T14368] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1340.808349][T14530] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1341.909227][T14540] loop3: detected capacity change from 0 to 1764 [ 1342.077433][T14544] loop2: detected capacity change from 0 to 512 [ 1342.180127][T14544] EXT4-fs (loop2): blocks per group (71) and clusters per group (32768) inconsistent [ 1343.074675][T14549] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 1343.083826][T14549] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1343.617588][T14554] loop3: detected capacity change from 0 to 1024 [ 1343.767922][T14554] hfsplus: failed to load root directory [ 1346.664968][ T3637] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1346.872186][ T3637] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1347.127016][ T3637] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1347.303506][ T3637] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1347.767017][ T3637] bridge_slave_1: left allmulticast mode [ 1347.773170][ T3637] bridge_slave_1: left promiscuous mode [ 1347.779857][ T3637] bridge0: port 2(bridge_slave_1) entered disabled state [ 1347.882356][ T3637] bridge0: port 1(bridge_slave_0) entered disabled state [ 1347.948292][T14567] loop0: detected capacity change from 0 to 256 [ 1347.957463][T14563] loop3: detected capacity change from 0 to 4096 [ 1347.987047][T14567] exfat: Unknown parameter 'H' [ 1348.241577][T14563] NILFS (loop3): invalid segment: Checksum error in segment payload [ 1348.253951][T14563] NILFS (loop3): trying rollback from an earlier position [ 1348.401530][T14563] NILFS (loop3): recovery complete [ 1348.449789][T14572] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1348.713610][T13466] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1348.728936][T13466] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1348.740140][T13466] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1348.756480][T13466] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1348.771655][T13466] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1348.805074][T13466] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1348.969509][ T3637] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1349.080067][ T3637] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1349.103882][T14578] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1349.193218][ T3637] bond0 (unregistering): Released all slaves [ 1349.214456][ T3637] bond1 (unregistering): Released all slaves [ 1349.231785][ T3637] bond2 (unregistering): Released all slaves [ 1349.542602][T14574] caif0 speed is unknown, defaulting to 1000 [ 1349.752606][ T3637] tipc: Left network mode [ 1350.646624][ T3637] hsr_slave_0: left promiscuous mode [ 1350.657577][ T3637] hsr_slave_1: left promiscuous mode [ 1350.669677][ T3637] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1350.677621][ T3637] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1350.729109][ T3637] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1350.736957][ T3637] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1350.898271][T13466] Bluetooth: hci0: command tx timeout [ 1350.939372][ T3637] veth1_macvtap: left promiscuous mode [ 1350.945675][ T3637] veth0_macvtap: left promiscuous mode [ 1350.951983][ T3637] veth1_vlan: left promiscuous mode [ 1350.957552][ T3637] veth0_vlan: left promiscuous mode [ 1351.957636][ T5087] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1351.985915][ T5087] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1352.007923][ T5087] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1352.023679][ T5087] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1352.212708][ T5087] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1352.224437][ T5087] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1352.348703][ T3637] team0 (unregistering): Port device team_slave_1 removed [ 1352.419551][ T3637] team0 (unregistering): Port device team_slave_0 removed [ 1352.562830][ T3156] smc: removing ib device syz1 [ 1353.016815][T13466] Bluetooth: hci0: command tx timeout [ 1353.794486][T14390] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1353.802737][T14390] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1353.989698][T14595] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 1353.998974][T14595] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1354.152140][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1354.160251][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1354.440604][T13466] Bluetooth: hci2: command tx timeout [ 1355.131559][T13466] Bluetooth: hci0: command tx timeout [ 1355.201322][T14574] chnl_net:caif_netlink_parms(): no params data found [ 1355.713598][T14604] loop3: detected capacity change from 0 to 64 [ 1355.998003][T14590] chnl_net:caif_netlink_parms(): no params data found [ 1356.477731][T13466] Bluetooth: hci2: command tx timeout [ 1356.641825][T14608] loop4: detected capacity change from 0 to 1024 [ 1356.698276][T14608] EXT4-fs: Ignoring removed i_version option [ 1357.165889][T14608] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 1357.204883][T13466] Bluetooth: hci0: command tx timeout [ 1357.209959][T14608] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1357.329267][T14613] loop2: detected capacity change from 0 to 1024 [ 1357.483349][T14613] hfsplus: failed to load root directory [ 1357.795118][ T5087] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1357.804871][ T5087] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1357.814943][ T5087] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1357.837590][T14574] bridge0: port 1(bridge_slave_0) entered blocking state [ 1357.842751][ T5087] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1357.845499][T14574] bridge0: port 1(bridge_slave_0) entered disabled state [ 1357.856739][ T5087] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 1357.860010][T14574] bridge_slave_0: entered allmulticast mode [ 1357.868841][ T5087] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1357.882012][T14574] bridge_slave_0: entered promiscuous mode [ 1358.013503][T14368] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1358.090012][T14574] bridge0: port 2(bridge_slave_1) entered blocking state [ 1358.098240][T14574] bridge0: port 2(bridge_slave_1) entered disabled state [ 1358.106325][T14574] bridge_slave_1: entered allmulticast mode [ 1358.115858][T14574] bridge_slave_1: entered promiscuous mode [ 1358.612972][ T5087] Bluetooth: hci2: command tx timeout [ 1358.752037][T14574] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1359.466321][T14574] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1359.611811][T14590] bridge0: port 1(bridge_slave_0) entered blocking state [ 1359.634818][T14590] bridge0: port 1(bridge_slave_0) entered disabled state [ 1359.643664][T14590] bridge_slave_0: entered allmulticast mode [ 1359.660308][T14590] bridge_slave_0: entered promiscuous mode [ 1360.011123][ T5087] Bluetooth: hci4: command tx timeout [ 1360.237211][ T5133] hid-generic 0000:0000:0000.001C: unknown main item tag 0x0 [ 1360.245851][ T5133] hid-generic 0000:0000:0000.001C: unknown main item tag 0x0 [ 1360.408341][T14590] bridge0: port 2(bridge_slave_1) entered blocking state [ 1360.417135][T14590] bridge0: port 2(bridge_slave_1) entered disabled state [ 1360.425224][T14590] bridge_slave_1: entered allmulticast mode [ 1360.443251][T14590] bridge_slave_1: entered promiscuous mode [ 1360.466411][T14574] team0: Port device team_slave_0 added [ 1360.476686][ T5133] hid-generic 0000:0000:0000.001C: hidraw0: HID v0.00 Device [syz0] on syz1 [ 1360.700899][ T5087] Bluetooth: hci2: command tx timeout [ 1360.828827][T14574] team0: Port device team_slave_1 added [ 1360.877019][T14590] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1360.957035][T14590] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1362.091400][ T5087] Bluetooth: hci4: command tx timeout [ 1362.114756][T14574] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1362.122059][T14574] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1362.148648][T14574] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1362.191533][T14590] team0: Port device team_slave_0 added [ 1362.346435][T14590] team0: Port device team_slave_1 added [ 1362.371085][T14574] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1362.378377][T14574] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1362.410475][T14574] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1362.752397][T14620] chnl_net:caif_netlink_parms(): no params data found [ 1362.962565][T14590] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1362.969848][T14590] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1362.998370][T14637] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1363.010473][T14590] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1363.034384][T14636] loop2: detected capacity change from 0 to 128 [ 1363.063299][T14590] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1363.070497][T14590] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1363.102343][T14590] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1363.131374][T14636] ufs: ufs_fill_super(): fragment size 2066844866 is not a power of 2 [ 1363.195547][T14574] hsr_slave_0: entered promiscuous mode [ 1363.237458][T14574] hsr_slave_1: entered promiscuous mode [ 1363.895327][T14590] hsr_slave_0: entered promiscuous mode [ 1363.953729][T14590] hsr_slave_1: entered promiscuous mode [ 1364.023518][T14590] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1364.031959][T14590] Cannot create hsr debugfs directory [ 1364.083314][T14643] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1364.090932][T14643] IPv6: NLM_F_CREATE should be set when creating new route [ 1364.141141][ T5087] Bluetooth: hci4: command tx timeout [ 1365.022098][T14652] loop4: detected capacity change from 0 to 8 [ 1365.029912][T14620] bridge0: port 1(bridge_slave_0) entered blocking state [ 1365.049773][T14620] bridge0: port 1(bridge_slave_0) entered disabled state [ 1365.060006][T14620] bridge_slave_0: entered allmulticast mode [ 1365.072594][T14620] bridge_slave_0: entered promiscuous mode [ 1365.082803][T14650] overlayfs: missing 'lowerdir' [ 1365.123878][ T3637] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1365.236648][T14620] bridge0: port 2(bridge_slave_1) entered blocking state [ 1365.244062][T14652] SQUASHFS error: Unable to read inode 0xe3 [ 1365.256521][T14620] bridge0: port 2(bridge_slave_1) entered disabled state [ 1365.276361][T14620] bridge_slave_1: entered allmulticast mode [ 1365.286102][T14620] bridge_slave_1: entered promiscuous mode [ 1365.353318][ T3637] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1365.482002][ T3637] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1365.628777][T14620] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1365.692156][ T3637] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1365.802403][T14620] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1365.985127][T14590] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1366.215966][T14590] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1366.238387][ T5087] Bluetooth: hci4: command tx timeout [ 1366.279109][T14620] team0: Port device team_slave_0 added [ 1366.301488][T14620] team0: Port device team_slave_1 added [ 1366.358417][T14590] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1366.513387][T14590] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1366.572644][T14620] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1366.584158][T14620] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1366.612797][T14620] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1366.633812][T14620] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1366.641498][T14620] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1366.667843][T14620] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1366.941300][T14620] hsr_slave_0: entered promiscuous mode [ 1366.962864][T14620] hsr_slave_1: entered promiscuous mode [ 1366.981350][T14620] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1366.993574][T14620] Cannot create hsr debugfs directory [ 1367.095944][ T3637] bridge_slave_1: left allmulticast mode [ 1367.102050][ T3637] bridge_slave_1: left promiscuous mode [ 1367.108680][ T3637] bridge0: port 2(bridge_slave_1) entered disabled state [ 1367.126299][ T3637] bridge_slave_0: left allmulticast mode [ 1367.132504][ T3637] bridge_slave_0: left promiscuous mode [ 1367.139172][ T3637] bridge0: port 1(bridge_slave_0) entered disabled state [ 1367.159818][ T3637] bridge_slave_1: left allmulticast mode [ 1367.165909][ T3637] bridge_slave_1: left promiscuous mode [ 1367.172667][ T3637] bridge0: port 2(bridge_slave_1) entered disabled state [ 1367.202857][ T3637] bridge_slave_0: left allmulticast mode [ 1367.208782][ T3637] bridge_slave_0: left promiscuous mode [ 1367.218598][ T3637] bridge0: port 1(bridge_slave_0) entered disabled state [ 1367.492930][T14665] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1368.074876][T14669] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1368.473702][ T3637] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1368.527516][ T3637] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1368.567191][ T3637] bond0 (unregistering): Released all slaves [ 1368.589282][ T3637] bond1 (unregistering): Released all slaves [ 1368.611419][ T3637] bond2 (unregistering): Released all slaves [ 1368.638732][ T3637] bond3 (unregistering): Released all slaves [ 1368.660341][ T3637] bond4 (unregistering): Released all slaves [ 1368.757232][ T3637] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1368.902639][ T3637] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1368.924696][ T3637] bond0 (unregistering): Released all slaves [ 1368.967997][T14574] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1369.292093][T14574] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1369.507201][T14590] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1369.536495][T14574] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1369.606035][T14574] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1369.632673][T14590] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1369.807731][T14590] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1369.913963][T14590] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1370.154000][T14683] overlayfs: missing 'lowerdir' [ 1370.498342][ T3637] hsr_slave_0: left promiscuous mode [ 1370.527376][ T3637] hsr_slave_1: left promiscuous mode [ 1370.552052][ T3637] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1370.560109][ T3637] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1370.621089][ T3637] hsr_slave_0: left promiscuous mode [ 1370.652491][ T3637] hsr_slave_1: left promiscuous mode [ 1370.675979][ T3637] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1370.684054][ T3637] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1370.716076][ T3637] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1370.724071][ T3637] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1370.802595][ T3637] veth1_macvtap: left promiscuous mode [ 1370.808409][ T3637] veth0_macvtap: left promiscuous mode [ 1370.814646][ T3637] veth1_vlan: left promiscuous mode [ 1370.820331][ T3637] veth0_vlan: left promiscuous mode [ 1370.851272][ T3637] veth1_macvtap: left promiscuous mode [ 1370.857093][ T3637] veth0_macvtap: left promiscuous mode [ 1370.864389][ T3637] veth1_vlan: left promiscuous mode [ 1370.870033][ T3637] veth0_vlan: left promiscuous mode [ 1371.311035][T14687] loop2: detected capacity change from 0 to 1024 [ 1371.367578][T14687] EXT4-fs (loop2): stripe (2310) is not aligned with cluster size (16), stripe is disabled [ 1371.567797][T14687] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1371.986483][T14273] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1372.169649][ T3637] team0 (unregistering): Port device team_slave_1 removed [ 1372.202473][ T3637] team0 (unregistering): Port device team_slave_0 removed [ 1372.714276][T14693] loop2: detected capacity change from 0 to 128 [ 1372.851396][T14693] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 1372.896366][T14693] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1373.062660][ T3637] team0 (unregistering): Port device team_slave_1 removed [ 1373.119565][ T3637] team0 (unregistering): Port device team_slave_0 removed [ 1374.085761][T14701] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1374.591172][T14574] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1374.622938][T14590] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1374.764224][T14703] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1374.809831][T14574] 8021q: adding VLAN 0 to HW filter on device team0 [ 1374.933691][T14590] 8021q: adding VLAN 0 to HW filter on device team0 [ 1374.973247][T14199] bridge0: port 1(bridge_slave_0) entered blocking state [ 1374.981120][T14199] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1375.042404][T14620] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1375.106655][T14199] bridge0: port 2(bridge_slave_1) entered blocking state [ 1375.114552][T14199] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1375.132194][T14199] bridge0: port 1(bridge_slave_0) entered blocking state [ 1375.139933][T14199] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1375.192584][T14620] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1375.276529][T14707] ip6erspan0: entered allmulticast mode [ 1375.293879][T14620] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1375.407931][T14199] bridge0: port 2(bridge_slave_1) entered blocking state [ 1375.415896][T14199] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1375.473079][T14620] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1376.249718][T14712] overlayfs: missing 'lowerdir' [ 1377.399716][T14620] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1377.558143][T14723] loop4: detected capacity change from 0 to 512 [ 1377.679242][T14723] EXT4-fs (loop4): Test dummy encryption mode enabled [ 1377.786241][T14620] 8021q: adding VLAN 0 to HW filter on device team0 [ 1377.845673][ T5140] bridge0: port 1(bridge_slave_0) entered blocking state [ 1377.853409][ T5140] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1377.891241][T14723] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2250: inode #12: comm syz-executor.4: corrupted in-inode xattr: invalid ea_ino [ 1377.963247][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 1377.971086][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1378.053957][T14723] EXT4-fs error (device loop4): ext4_orphan_get:1399: comm syz-executor.4: couldn't read orphan inode 12 (err -117) [ 1378.103785][T14723] EXT4-fs (loop4): mounted filesystem 00000005-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1378.336808][T14590] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1378.552304][T14722] fscrypt (loop4): Missing crypto API support for AES-256-XTS (API name: "xts(aes)") [ 1378.958479][T14574] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1379.223174][T14368] EXT4-fs (loop4): unmounting filesystem 00000005-0000-0000-0000-000000000000. [ 1379.297390][T14590] veth0_vlan: entered promiscuous mode [ 1379.451110][T14735] loop2: detected capacity change from 0 to 1764 [ 1379.509314][T14590] veth1_vlan: entered promiscuous mode [ 1379.763905][T14574] veth0_vlan: entered promiscuous mode [ 1379.965771][T14574] veth1_vlan: entered promiscuous mode [ 1380.015109][T14590] veth0_macvtap: entered promiscuous mode [ 1380.046875][T14739] loop4: detected capacity change from 0 to 8 [ 1380.128436][T14739] cramfs: Unknown parameter '@C3fnFONg' [ 1380.132404][T14590] veth1_macvtap: entered promiscuous mode [ 1380.387091][T14590] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1380.399679][T14590] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1380.410373][T14590] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1380.423581][T14590] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1380.440246][T14590] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1380.537115][T14574] veth0_macvtap: entered promiscuous mode [ 1380.601414][T14574] veth1_macvtap: entered promiscuous mode [ 1380.739286][T14590] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1380.750604][T14590] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1380.761241][T14590] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1380.771995][T14590] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1380.792742][T14590] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1380.922945][T14574] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1380.935257][T14574] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1380.948836][T14574] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1380.962611][T14574] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1380.972950][T14574] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1380.983722][T14574] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1380.999540][T14574] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1381.132513][T14620] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1381.151687][T14590] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1381.160933][T14590] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1381.169988][T14590] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1381.179206][T14590] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1381.340523][T14574] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1381.353724][T14574] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1381.363878][T14574] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1381.374704][T14574] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1381.384929][T14574] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1381.395910][T14574] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1381.412069][T14574] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1381.562575][T14574] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1381.573590][T14574] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1381.585186][T14574] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1381.595216][T14574] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1381.864932][T14620] veth0_vlan: entered promiscuous mode [ 1381.985583][T14620] veth1_vlan: entered promiscuous mode [ 1382.344556][T14620] veth0_macvtap: entered promiscuous mode [ 1382.459651][T14620] veth1_macvtap: entered promiscuous mode [ 1382.713840][T14620] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1382.725963][T14620] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1382.736152][T14620] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1382.746913][T14620] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1382.759415][T14620] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1382.771062][T14620] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1382.781287][T14620] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1382.792108][T14620] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1382.808084][T14620] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1382.967583][T14620] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1382.979190][T14620] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1382.989395][T14620] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1383.000217][T14620] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1383.010446][T14620] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1383.021446][T14620] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1383.033091][T14620] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1383.043887][T14620] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1383.059969][T14620] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1383.263281][T14620] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1383.274745][T14620] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1383.284575][T14620] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1383.293840][T14620] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1384.973500][T14772] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1385.884610][T14783] overlayfs: missing 'workdir' [ 1386.325377][T14794] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1388.062295][ T5668] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1388.070374][ T5668] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1388.295916][ T3156] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1388.312179][ T3156] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1388.781144][ T5138] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1388.789232][ T5138] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1388.970328][ T3118] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1388.978525][ T3118] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1389.076756][T14833] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1389.149239][T14834] vivid-004: disconnect [ 1389.162566][T14829] vivid-004: reconnect [ 1389.606190][T14838] overlayfs: missing 'workdir' [ 1389.802981][T14843] loop1: detected capacity change from 0 to 256 [ 1390.014483][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1390.023206][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1390.171690][ T3118] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1390.180291][ T3118] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1391.528534][ T1216] ieee802154 phy0 wpan0: encryption failed: -22 [ 1391.535717][ T1216] ieee802154 phy1 wpan1: encryption failed: -22 [ 1391.574375][T14866] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1391.824248][T14869] overlayfs: missing 'workdir' [ 1392.011101][T14199] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 1392.301048][T14199] usb 2-1: Using ep0 maxpacket: 32 [ 1392.482985][T14199] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1392.497383][T14199] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1392.508549][T14199] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 1392.518238][T14199] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1392.633951][T14199] hub 2-1:4.0: USB hub found [ 1392.962000][T14199] hub 2-1:4.0: 2 ports detected [ 1393.722024][T14199] usb 2-1: USB disconnect, device number 26 [ 1393.773523][T14890] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1393.915101][T14879] loop4: detected capacity change from 0 to 8192 [ 1393.994561][T14879] ntfs3: loop4: Different NTFS sector size (4096) and media sector size (512). [ 1395.602054][T13466] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1395.648206][T13466] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1395.672071][T13466] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1395.692493][T13466] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1395.714379][T13466] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 1395.732500][T13466] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1397.461786][T14903] chnl_net:caif_netlink_parms(): no params data found [ 1397.599938][ T3637] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1397.832118][ T5087] Bluetooth: hci5: command tx timeout [ 1397.990978][ T3637] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1398.164383][ T3637] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1398.356056][T14930] loop1: detected capacity change from 0 to 1024 [ 1398.384881][ T3637] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1398.772004][ T3637] bridge_slave_1: left allmulticast mode [ 1398.778031][ T3637] bridge_slave_1: left promiscuous mode [ 1398.785109][ T3637] bridge0: port 2(bridge_slave_1) entered disabled state [ 1398.885592][ T7096] hfsplus: b-tree write err: -5, ino 4 [ 1398.971961][ T3637] bridge_slave_0: left allmulticast mode [ 1398.977896][ T3637] bridge_slave_0: left promiscuous mode [ 1398.984674][ T3637] bridge0: port 1(bridge_slave_0) entered disabled state [ 1399.729729][ T3637] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1399.829282][ T3637] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1399.876662][ T3637] bond0 (unregistering): Released all slaves [ 1399.901416][ T5087] Bluetooth: hci5: command tx timeout [ 1400.752302][T14903] bridge0: port 1(bridge_slave_0) entered blocking state [ 1400.760183][T14903] bridge0: port 1(bridge_slave_0) entered disabled state [ 1400.768904][T14903] bridge_slave_0: entered allmulticast mode [ 1400.782230][T14903] bridge_slave_0: entered promiscuous mode [ 1400.942529][ T3637] hsr_slave_0: left promiscuous mode [ 1401.010071][ T3637] hsr_slave_1: left promiscuous mode [ 1401.056980][ T3637] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1401.065198][ T3637] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1401.128124][ T3637] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1401.136140][ T3637] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1401.217226][ T3637] veth1_macvtap: left promiscuous mode [ 1401.224206][ T3637] veth0_macvtap: left promiscuous mode [ 1401.230182][ T3637] veth1_vlan: left promiscuous mode [ 1401.237220][ T3637] veth0_vlan: left promiscuous mode [ 1401.959515][T14963] loop3: detected capacity change from 0 to 256 [ 1401.981501][ T5087] Bluetooth: hci5: command tx timeout [ 1402.045588][T14964] serio: Serial port ptm0 [ 1402.434731][ T3637] team0 (unregistering): Port device team_slave_1 removed [ 1402.543787][ T3637] team0 (unregistering): Port device team_slave_0 removed [ 1402.700468][T14620] FAT-fs (loop3): error, corrupted directory (invalid entries) [ 1402.708690][T14620] FAT-fs (loop3): Filesystem has been set read-only [ 1402.812050][T14620] FAT-fs (loop3): error, corrupted directory (invalid entries) [ 1402.901936][T14903] bridge0: port 2(bridge_slave_1) entered blocking state [ 1402.909909][T14903] bridge0: port 2(bridge_slave_1) entered disabled state [ 1402.922217][T14903] bridge_slave_1: entered allmulticast mode [ 1402.940121][T14903] bridge_slave_1: entered promiscuous mode [ 1403.583004][T14903] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1403.688407][T14903] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1403.872834][T14903] team0: Port device team_slave_0 added [ 1403.928385][T14903] team0: Port device team_slave_1 added [ 1404.090005][ T5087] Bluetooth: hci5: command tx timeout [ 1404.128422][T14984] netlink: 'syz-executor.0': attribute type 10 has an invalid length. [ 1404.189834][T14984] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 1404.412737][T14903] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1404.419990][T14903] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1404.446448][T14903] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1404.734305][T14903] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1404.741867][T14903] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1404.768578][T14903] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1405.317011][T14903] hsr_slave_0: entered promiscuous mode [ 1405.359193][T14903] hsr_slave_1: entered promiscuous mode [ 1405.406117][T14903] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1405.414302][T14903] Cannot create hsr debugfs directory [ 1405.864218][T14994] serio: Serial port ptm0 [ 1407.776257][T14903] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1407.902638][T14903] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1407.992989][T14903] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1408.021390][T13466] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1408.031240][T13466] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1408.040839][T13466] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1408.057737][T13466] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1408.069786][T13466] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1408.092037][T13466] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1408.102810][T14903] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1409.069636][ T3637] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1409.342293][ T3637] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1409.580488][ T3637] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1409.803093][ T3637] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1410.023919][T15034] serio: Serial port ptm0 [ 1410.217433][ T3637] bridge_slave_1: left allmulticast mode [ 1410.226906][ T3637] bridge_slave_1: left promiscuous mode [ 1410.233725][ T3637] bridge0: port 2(bridge_slave_1) entered disabled state [ 1410.244983][ T5087] Bluetooth: hci3: command tx timeout [ 1410.264900][ T3637] bridge_slave_0: left allmulticast mode [ 1410.271250][ T3637] bridge_slave_0: left promiscuous mode [ 1410.277862][ T3637] bridge0: port 1(bridge_slave_0) entered disabled state [ 1410.972819][ T3637] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1411.057287][ T3637] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1411.091965][ T3637] bond0 (unregistering): Released all slaves [ 1411.205269][T15010] chnl_net:caif_netlink_parms(): no params data found [ 1411.259884][T14903] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1411.527421][T14903] 8021q: adding VLAN 0 to HW filter on device team0 [ 1411.778432][ T5137] bridge0: port 1(bridge_slave_0) entered blocking state [ 1411.786318][ T5137] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1412.029797][ T5137] bridge0: port 2(bridge_slave_1) entered blocking state [ 1412.037806][ T5137] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1412.178467][ T3637] hsr_slave_0: left promiscuous mode [ 1412.204490][ T3637] hsr_slave_1: left promiscuous mode [ 1412.223621][ T3637] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1412.231569][ T3637] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1412.278364][ T3637] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1412.286660][ T3637] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1412.303208][ T5087] Bluetooth: hci3: command tx timeout [ 1412.415089][ T3637] veth1_macvtap: left promiscuous mode [ 1412.421314][ T3637] veth0_macvtap: left promiscuous mode [ 1412.427292][ T3637] veth1_vlan: left promiscuous mode [ 1412.433246][ T3637] veth0_vlan: left promiscuous mode [ 1413.380968][ T3637] team0 (unregistering): Port device team_slave_1 removed [ 1413.457714][ T3637] team0 (unregistering): Port device team_slave_0 removed [ 1413.573385][T15067] loop0: detected capacity change from 0 to 256 [ 1413.773553][T15067] syz-executor.0: attempt to access beyond end of device [ 1413.773553][T15067] loop0: rw=2049, sector=256, nr_sectors = 128 limit=256 [ 1414.381416][ T5087] Bluetooth: hci3: command tx timeout [ 1414.557351][T15010] bridge0: port 1(bridge_slave_0) entered blocking state [ 1414.565654][T15010] bridge0: port 1(bridge_slave_0) entered disabled state [ 1414.573663][T15010] bridge_slave_0: entered allmulticast mode [ 1414.583330][T15010] bridge_slave_0: entered promiscuous mode [ 1414.711522][T15010] bridge0: port 2(bridge_slave_1) entered blocking state [ 1414.719455][T15010] bridge0: port 2(bridge_slave_1) entered disabled state [ 1414.727553][T15010] bridge_slave_1: entered allmulticast mode [ 1414.737131][T15010] bridge_slave_1: entered promiscuous mode [ 1414.793232][T15076] serio: Serial port ptm0 [ 1415.133139][T15010] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1415.254363][T15010] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1415.576801][T15010] team0: Port device team_slave_0 added [ 1415.658008][T15010] team0: Port device team_slave_1 added [ 1415.986226][T15010] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1415.993495][T15010] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1416.019829][T15010] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1416.115448][T15010] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1416.122905][T15010] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1416.152473][T15010] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1416.461153][ T5087] Bluetooth: hci3: command tx timeout [ 1416.523181][T14903] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1416.684902][T15010] hsr_slave_0: entered promiscuous mode [ 1416.749347][T15010] hsr_slave_1: entered promiscuous mode [ 1416.800791][T15010] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1416.808732][T15010] Cannot create hsr debugfs directory [ 1417.622395][T14903] veth0_vlan: entered promiscuous mode [ 1417.965531][T14903] veth1_vlan: entered promiscuous mode [ 1418.463748][T15109] bridge0: port 3(syz_tun) entered blocking state [ 1418.471620][T15109] bridge0: port 3(syz_tun) entered disabled state [ 1418.478739][T15109] syz_tun: entered allmulticast mode [ 1418.487470][T15109] syz_tun: entered promiscuous mode [ 1418.500308][T15109] bridge0: port 3(syz_tun) entered blocking state [ 1418.507810][T15109] bridge0: port 3(syz_tun) entered forwarding state [ 1418.728634][T14903] veth0_macvtap: entered promiscuous mode [ 1418.834547][T14903] veth1_macvtap: entered promiscuous mode [ 1418.998884][T15010] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1419.092699][T15010] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1419.155312][T14903] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1419.166484][T14903] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1419.177892][T14903] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1419.188710][T14903] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1419.198874][T14903] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1419.209871][T14903] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1419.312784][T14903] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1419.349305][T15010] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1419.440224][T15010] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1419.483896][T14903] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1419.494876][T14903] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1419.505196][T14903] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1419.516036][T14903] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1419.529612][T14903] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1419.541525][T14903] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1419.556956][T14903] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1419.778435][T14903] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1419.787785][T14903] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1419.797014][T14903] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1419.806358][T14903] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1419.992063][T15125] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1420.934760][T15010] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1421.194239][T15010] 8021q: adding VLAN 0 to HW filter on device team0 [ 1421.276627][ T5138] bridge0: port 1(bridge_slave_0) entered blocking state [ 1421.284512][ T5138] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1421.377043][ T5138] bridge0: port 2(bridge_slave_1) entered blocking state [ 1421.384962][ T5138] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1423.621267][T15010] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1424.325309][T15010] veth0_vlan: entered promiscuous mode [ 1424.437137][T15010] veth1_vlan: entered promiscuous mode [ 1424.892987][T15010] veth0_macvtap: entered promiscuous mode [ 1424.986897][T15010] veth1_macvtap: entered promiscuous mode [ 1425.225566][T15010] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1425.236418][T15010] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1425.246657][T15010] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1425.261045][T15010] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1425.272962][T15010] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1425.284277][T15010] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1425.294535][T15010] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1425.305442][T15010] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1425.323363][T15010] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1425.642559][T15010] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1425.654253][T15010] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1425.668006][T15010] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1425.679984][T15010] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1425.690191][T15010] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1425.701036][T15010] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1425.711257][T15010] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1425.722143][T15010] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1425.737979][T15010] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1425.918501][T15010] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1425.927794][T15010] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1425.937052][T15010] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1425.946328][T15010] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1426.983366][T14390] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1426.991580][T14390] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1427.246749][ T5133] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1427.255189][ T5133] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1429.396578][T15247] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 1431.615429][T15278] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1431.630876][T15278] team0: Port device batadv0 added [ 1431.651145][ T29] audit: type=1800 audit(1717691769.589:570): pid=15279 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="file0" dev="sda1" ino=1954 res=0 errno=0 [ 1432.268428][T15285] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1433.656492][ T3118] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1433.664668][ T3118] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1433.991600][ T3251] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1433.999734][ T3251] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1434.589078][T15314] loop1: detected capacity change from 0 to 256 [ 1434.610893][ T5138] usb 5-1: new full-speed USB device number 25 using dummy_hcd [ 1434.750501][T15314] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 1435.081924][ T5138] usb 5-1: New USB device found, idVendor=9022, idProduct=d484, bcdDevice=cd.35 [ 1435.096890][ T5138] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1435.158153][ T5138] usb 5-1: config 0 descriptor?? [ 1435.249949][ T29] audit: type=1800 audit(1717691773.249:571): pid=15322 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="file0" dev="sda1" ino=1947 res=0 errno=0 [ 1435.276317][ T5138] dw2102: su3000_identify_state [ 1435.281511][ T5138] dvb-usb: found a 'TeVii S482 (tuner 2)' in warm state. [ 1435.297070][ T5138] dw2102: su3000_power_ctrl: 1, initialized 0 [ 1435.305543][ T5138] dvb-usb: bulk message failed: -22 (2/0) [ 1435.347837][ T5138] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 1435.378085][ T5138] dvb-usb: TeVii S482 (tuner 2) error while loading driver (-19) [ 1435.477092][ T5138] usb 5-1: USB disconnect, device number 25 [ 1438.120868][T14199] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 1438.391412][T14199] usb 5-1: Using ep0 maxpacket: 8 [ 1438.532646][T14199] usb 5-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 1438.543736][T14199] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 255, changing to 11 [ 1438.543942][T14199] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8D has invalid maxpacket 59391, setting to 1024 [ 1438.544119][T14199] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1438.544362][T14199] usb 5-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 1438.544522][T14199] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1438.592889][T14199] usb 5-1: config 0 descriptor?? [ 1438.612706][T15340] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1438.893675][T14199] usb 5-1: USB disconnect, device number 26 [ 1439.298502][T15349] loop2: detected capacity change from 0 to 64 [ 1439.662104][T13466] Bluetooth: hci1: command 0x0406 tx timeout [ 1439.894470][ T29] audit: type=1800 audit(1717691777.899:572): pid=15355 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="file0" dev="sda1" ino=1947 res=0 errno=0 [ 1440.006433][ T5138] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 1440.582323][ T5138] usb 1-1: config 1 interface 0 altsetting 63 bulk endpoint 0x82 has invalid maxpacket 1024 [ 1440.593350][ T5138] usb 1-1: config 1 interface 0 altsetting 63 bulk endpoint 0x3 has invalid maxpacket 1023 [ 1440.603762][ T5138] usb 1-1: config 1 interface 0 has no altsetting 0 [ 1440.815582][ T5138] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1440.831792][ T5138] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1440.840123][ T5138] usb 1-1: Product: 髗殘멮冃矍ᠱ벎癨ͭ퇛䧢ỗ믶廌睖뢎뛑Ⰷ짛⊁堇魼㡐ﱆ羭ẑꀼ⻕ね岹㘧䥚쁟⭷ֈ꯺撇渙꟭쿯ꋪ匓ଖ⒎壦죤溰⑅湭埕쐒돠鼾岭↫尿ꔿ腚쌝ꆉ䷪䕭嬈꣜턳ล㒧胥ᗨᙺ蘪彦僴텊綁 [ 1440.866800][ T5138] usb 1-1: Manufacturer: 㥚醎潽⭩Ȩ孬餝캳었禟ꦣ➳ [ 1440.875342][ T5138] usb 1-1: SerialNumber: 夐睯㄁줿翁ᵎ⨋녌笁ꚽ큵ㄇ舨䁎粜ϳ􂌛桲俪銻랪ﱇ뙆⨳᪒ᐡሚ끄뛜稉뮢䛵 [ 1440.983225][T15353] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1441.014105][T15353] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1441.609044][T15374] syz-executor.1[15374] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1441.609719][T15374] syz-executor.1[15374] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1441.623473][T15353] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1441.763529][ T5138] cdc_ether 1-1:1.0: probe with driver cdc_ether failed with error -71 [ 1441.866134][T15377] loop1: detected capacity change from 0 to 512 [ 1441.875179][ T5138] usb 1-1: USB disconnect, device number 33 [ 1441.983103][T15377] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 1441.992962][T15377] EXT4-fs (loop1): blocks per group (3008) and clusters per group (32768) inconsistent [ 1442.759953][T15386] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1443.302800][ T29] audit: type=1800 audit(1717691781.309:573): pid=15395 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="file0" dev="sda1" ino=1956 res=0 errno=0 [ 1447.731246][ T29] audit: type=1800 audit(1717691785.719:574): pid=15436 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="file0" dev="sda1" ino=1942 res=0 errno=0 [ 1450.972407][T15471] dccp_invalid_packet: P.Data Offset(0) too small [ 1451.002415][ T29] audit: type=1800 audit(1717691788.999:575): pid=15476 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="file0" dev="sda1" ino=1959 res=0 errno=0 [ 1452.887591][T15497] ===================================================== [ 1452.895059][T15497] BUG: KMSAN: uninit-value in __bpf_strtoull+0x245/0x5b0 [ 1452.902453][T15497] __bpf_strtoull+0x245/0x5b0 [ 1452.907368][T15497] bpf_strtol+0x7c/0x270 [ 1452.911972][T15497] ___bpf_prog_run+0x13fe/0xe0f0 [ 1452.917173][T15497] __bpf_prog_run96+0xb5/0xe0 [ 1452.922184][T15497] bpf_test_run_xdp_live+0x10a9/0x2f70 [ 1452.927924][T15497] bpf_prog_test_run_xdp+0xf02/0x1a40 [ 1452.933651][T15497] bpf_prog_test_run+0x6b7/0xad0 [ 1452.938837][T15497] __sys_bpf+0x6aa/0xd90 [ 1452.943445][T15497] __ia32_sys_bpf+0xa0/0xe0 [ 1452.948156][T15497] ia32_sys_call+0xf7e/0x40a0 [ 1452.953211][T15497] __do_fast_syscall_32+0xb4/0x120 [ 1452.958577][T15497] do_fast_syscall_32+0x38/0x80 [ 1452.963781][T15497] do_SYSENTER_32+0x1f/0x30 [ 1452.968527][T15497] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1452.975266][T15497] [ 1452.977722][T15497] Local variable stack created at: [ 1452.983073][T15497] __bpf_prog_run96+0x45/0xe0 [ 1452.987979][T15497] bpf_test_run_xdp_live+0x10a9/0x2f70 [ 1452.993528][ T1216] ieee802154 phy0 wpan0: encryption failed: -22 [ 1452.993809][ T1216] ieee802154 phy1 wpan1: encryption failed: -22 [ 1453.000059][T15497] [ 1453.000100][T15497] CPU: 1 PID: 15497 Comm: syz-executor.2 Not tainted 6.9.0-syzkaller-02339-g101b7a97143a #0 [ 1453.019284][T15497] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024 [ 1453.029630][T15497] ===================================================== [ 1453.036824][T15497] Disabling lock debugging due to kernel taint [ 1453.043219][T15497] Kernel panic - not syncing: kmsan.panic set ... [ 1453.049768][T15497] CPU: 1 PID: 15497 Comm: syz-executor.2 Tainted: G B 6.9.0-syzkaller-02339-g101b7a97143a #0 [ 1453.061545][T15497] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024 [ 1453.071770][T15497] Call Trace: [ 1453.075172][T15497] [ 1453.078228][T15497] dump_stack_lvl+0x216/0x2d0 [ 1453.083159][T15497] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 1453.089211][T15497] dump_stack+0x1e/0x30 [ 1453.093629][T15497] panic+0x4e2/0xcd0 [ 1453.097740][T15497] ? kmsan_get_metadata+0xf1/0x1d0 [ 1453.103096][T15497] kmsan_report+0x2d5/0x2e0 [ 1453.107809][T15497] ? __msan_warning+0x95/0x120 [ 1453.112790][T15497] ? __bpf_strtoull+0x245/0x5b0 [ 1453.117857][T15497] ? bpf_strtol+0x7c/0x270 [ 1453.122508][T15497] ? ___bpf_prog_run+0x13fe/0xe0f0 [ 1453.127817][T15497] ? __bpf_prog_run96+0xb5/0xe0 [ 1453.132874][T15497] ? bpf_test_run_xdp_live+0x10a9/0x2f70 [ 1453.138744][T15497] ? bpf_prog_test_run_xdp+0xf02/0x1a40 [ 1453.144545][T15497] ? bpf_prog_test_run+0x6b7/0xad0 [ 1453.149866][T15497] ? __sys_bpf+0x6aa/0xd90 [ 1453.154480][T15497] ? __ia32_sys_bpf+0xa0/0xe0 [ 1453.159339][T15497] ? ia32_sys_call+0xf7e/0x40a0 [ 1453.164422][T15497] ? __do_fast_syscall_32+0xb4/0x120 [ 1453.169938][T15497] ? do_fast_syscall_32+0x38/0x80 [ 1453.175189][T15497] ? do_SYSENTER_32+0x1f/0x30 [ 1453.180069][T15497] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1453.186824][T15497] ? kmsan_internal_chain_origin+0xb0/0xd0 [ 1453.192873][T15497] ? kmsan_get_metadata+0x146/0x1d0 [ 1453.198298][T15497] ? kmsan_internal_set_shadow_origin+0x66/0xe0 [ 1453.204781][T15497] ? kmsan_get_metadata+0x146/0x1d0 [ 1453.210202][T15497] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 1453.216224][T15497] ? _raw_spin_unlock_irqrestore+0x3f/0x60 [ 1453.222226][T15497] ? stack_depot_save_flags+0x66d/0x6e0 [ 1453.227967][T15497] ? kmsan_get_metadata+0x146/0x1d0 [ 1453.233375][T15497] ? kmsan_internal_set_shadow_origin+0x66/0xe0 [ 1453.239844][T15497] ? kmsan_get_metadata+0x146/0x1d0 [ 1453.245240][T15497] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 1453.251256][T15497] __msan_warning+0x95/0x120 [ 1453.256005][T15497] __bpf_strtoull+0x245/0x5b0 [ 1453.260885][T15497] ? bpf_strtol+0x5c/0x270 [ 1453.265516][T15497] ? ___bpf_prog_run+0x13fe/0xe0f0 [ 1453.270825][T15497] bpf_strtol+0x7c/0x270 [ 1453.275287][T15497] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 1453.281303][T15497] ___bpf_prog_run+0x13fe/0xe0f0 [ 1453.286526][T15497] ? kmsan_get_metadata+0x146/0x1d0 [ 1453.291939][T15497] __bpf_prog_run96+0xb5/0xe0 [ 1453.296865][T15497] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 1453.302886][T15497] ? __pfx___bpf_prog_run96+0x10/0x10 [ 1453.308467][T15497] bpf_test_run_xdp_live+0x10a9/0x2f70 [ 1453.314179][T15497] ? kmsan_get_metadata+0x146/0x1d0 [ 1453.319590][T15497] ? kmsan_get_metadata+0x146/0x1d0 [ 1453.325028][T15497] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 1453.331214][T15497] ? kmsan_internal_unpoison_memory+0x14/0x20 [ 1453.337505][T15497] ? bpf_test_run_xdp_live+0x7ed/0x2f70 [ 1453.343288][T15497] ? _copy_from_user+0x10c/0x160 [ 1453.348508][T15497] ? kmsan_get_metadata+0x146/0x1d0 [ 1453.353901][T15497] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 1453.359944][T15497] bpf_prog_test_run_xdp+0xf02/0x1a40 [ 1453.365634][T15497] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 1453.371684][T15497] bpf_prog_test_run+0x6b7/0xad0 [ 1453.376852][T15497] __sys_bpf+0x6aa/0xd90 [ 1453.381323][T15497] __ia32_sys_bpf+0xa0/0xe0 [ 1453.386015][T15497] ia32_sys_call+0xf7e/0x40a0 [ 1453.390927][T15497] __do_fast_syscall_32+0xb4/0x120 [ 1453.396312][T15497] ? switch_fpu_return+0x17/0x20 [ 1453.401482][T15497] do_fast_syscall_32+0x38/0x80 [ 1453.406556][T15497] do_SYSENTER_32+0x1f/0x30 [ 1453.411268][T15497] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1453.417855][T15497] RIP: 0023:0xf7412579 [ 1453.422158][T15497] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1453.441966][T15497] RSP: 002b:00000000f5e7a5ac EFLAGS: 00000206 ORIG_RAX: 0000000000000165 [ 1453.450560][T15497] RAX: ffffffffffffffda RBX: 000000000000000a RCX: 0000000020000640 [ 1453.458699][T15497] RDX: 0000000000000050 RSI: 0000000000000000 RDI: 0000000000000000 [ 1453.466817][T15497] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1453.474932][T15497] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1453.483060][T15497] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1453.491212][T15497] [ 1453.494656][T15497] Kernel Offset: disabled [ 1453.499117][T15497] Rebooting in 86400 seconds..