last executing test programs: 4m46.210098691s ago: executing program 1 (id=126): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f00000002c0)='rpm_return_int\x00', r1}, 0x10) syz_usb_connect(0x3, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xae, 0x9b, 0x71, 0x40, 0x2201, 0x12c, 0x60d9, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xef, 0x0, 0x0, 0x4, 0x3a, 0x1e}}]}}]}}, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0xe, 0x7fff0000}]}) close_range(r2, 0xffffffffffffffff, 0x0) 4m44.041410321s ago: executing program 1 (id=134): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=@newtfilter={0x50, 0x2c, 0xd27, 0x30bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x1, 0xffff}, {}, {0x7}}, [@filter_kind_options=@f_flow={{0x9}, {0x20, 0x2, [@TCA_FLOW_EMATCHES={0x1c, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x7}}, @TCA_EMATCH_TREE_LIST={0x10, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0xc, 0x1, 0x0, 0x0, {{0x2008, 0x9, 0x40}}}]}]}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x10}, 0x2008c014) 4m43.287872173s ago: executing program 1 (id=139): socket$nl_generic(0x10, 0x3, 0x10) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x8, &(0x7f0000000000)={[{@sb={'sb', 0x3d, 0x1}}, {@nodioread_nolock}, {@discard}, {@debug}]}, 0x4, 0x511, &(0x7f0000000540)="$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") sendmsg$key(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, 0x1, 0x7}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r0, 0x40305839, &(0x7f0000000000)={0x17c04, r0, 0x0, 0xfff, 0x800000000, 0x10}) 4m41.918492736s ago: executing program 1 (id=144): syz_mount_image$exfat(&(0x7f0000006c00), &(0x7f0000001b40)='./file0\x00', 0x208008de, &(0x7f00000024c0)=ANY=[@ANYBLOB='utf8,errors=continue,namecase=1,utf8,gid=', @ANYRESHEX=0x0, @ANYBLOB=',umask=00000000000000000000077,umask=00000000000000000005676,uid=', @ANYRESHEX=0x0, @ANYBLOB=',gid=', @ANYRESHEX=0x0, @ANYBLOB="2c000ca8768ddddc191573cbd33da79641936c9de64e264f331d1b50f4c4f54702f51dcbddb39c14c19175f07a639bb65ea608fbf6fadf5d8da30ace1281bed3e61b084526e10dbe921dad84fbcabc5791f52445cb76b789ed377aa0cd17309c4df04d525e8af05fb246b33836d90656cd2daa991b916be40df3bd607ae5672e1bb90730d0ff03000000000000c5f0cf287ea707c1fc66165f74e7d8a78c37a4b86907cec1df06da3611f616718d88770a2520ceb039bc06ef4d1183", @ANYBLOB="b374a4d331905dccdc859a1983694e8f490512381512741fff30ee27d1f3037d16edba79a31b3bbf830f5e9096eeaaa5aa2b00f8676ca8410e692cb11d2934bf22070b86a25013d519132f5b816747c3879e02b38716dd62d5c238a04218213481e5724acd01f9ac8736be91e2b717e5e033", @ANYBLOB="b271ade69caec817a4b99ba14165246c4b01d2360d40a6909acc6d8464cb89750ef3843b91c830fa1f7c633d87be40b02b43b18fad2749cf1424984c1495ba2bac5c7b92b37bd937f6725d879a13a85ceadd42f10ee1d1ab8942aa99be9d72f02470776429a4400f0ec90f5b7b2632af2bde693a0163f3cd1fca85b998878e9fe7c9c7a613886219cdf517aec40ac8b8acc761fc512fd7017043d00dd9155323f5fddef09f9874b2cbe3682fb7e73084636bd95a44f043c0b52f81cb0805aaaedd", @ANYRES8, @ANYBLOB="d7e43106bbcaf72e33a1c64d8c53a2968e442c75680a6f7f23cc6b012ca5f68c098ba64ea295d6e06300334894e2119943207b1a368e107086520378735ac6745c0872feee8429bc865fd37d6cb18f2c2bc98c245e32410da8a560fb51c796afe8ec9c0ca132f05754a2a95c6d41dc81c10784d0e06a93c11c6c4fc7f47c740ac9f325e3d235a8af036e696395596193fe0faa5c2578f8beba779f7622e741dcd0b2fcf69a2024", @ANYRESOCT=0x0, @ANYRES8=0x0], 0x1, 0x1503, &(0x7f0000000580)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='devices.list\x00', 0x275a, 0x0) creat(&(0x7f0000000000)='./bus\x00', 0x0) mount(&(0x7f0000000440)=@loop={'/dev/loop', 0x0}, &(0x7f0000000080)='./bus\x00', 0x0, 0x1000, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x0, 0x0, 0x0, 0x5, 0x0, "ef359f413bb901527f00d1ce5d29c3ee5e5ca9000f7c41499dc2aac63a01000000000000004faa2ad9c084a003ea0000000000000000000800002000", "036c47c67808200400000000000000335263bdbcef549ba197fce47ddfdd753abd950100002a00ffffffffffffffff00000000e8f20000000200", "b7326736181c208220000000b9000000000000000000f0fffffffff2ff00", [0x4]}) write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b) 4m40.309205087s ago: executing program 1 (id=152): r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x60) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write$binfmt_script(r0, &(0x7f0000000300)={'#! ', './file0', [{0x20, '\t\x1b\x1c\x1e\xc3h$\xb0^/\xb9\xf0\x13\xed\xd2\x05\xdfn{q\xac\xca\'\xef\xb0*\x11j=\xfb\x06$pY\x1cD\xd4\xf3\x98\xc6\xa1\x88\x9c\xe4\r9\xd3\x06L\xbf\x1adW[\x0ew\x18\xd4\xf0W\x80\x9c\x0f\xfb\bH\xa8V\xc9ty\xdaJ9E-\xd0Z\xf4\x9b\xa0\xf5\x92\x06\x1b\x81\x03\xb7\xb0\xe3\x88\x85}G\xd9\x05\x85Jn\xf7\xf0\xae\xf7\xe2b^\x8c\xaf\x11\xcc\x87\xbb\x9e\xd6\x0fW\x03\xf2c\xa5\x98h\xfezZ\xc5\xd0ua\xd7\x06\x00\xa8\xf27\x8cU\xc4\x11\x1e\"`\x06Y\xafZ\xefK\xb1\xf0\x99\xd6\x1b\xed\xf5\xb7@/\x9d\x11\x9b\xe5\x9dP\xff\x99w\x81\xca,\x9a\xfc\a\x99\f\b%\x90\xd5\xd8\xb7\xc07#\xb7\xb5\xfc!i/\x05\x865\xeawWV+\xcc\x8c\xd3\xb5\x03\xff\xe0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\bl\x83w\x81\x8a\xdb\f\xb3y_\x8f\x87y\x7f'}, {0x20, '\x00{aU<7*g\xa0W\x110\xba\'\xd8\xad\xe4\x87\x0f\xbd\x0f\x1d\xfd\xbf]8\x0e\x1d\t\x12\xa2L\xb6i\x03\r\bYK8\xc9c\x99S\xc9\xed\x8b|\xc8r\n\x80\x04!\x80j\x9f\xb6s\xed1\x96\xc5\x16\x0f|h\xa8\xc9]\xfc\x1c\x97\x1bQMP\xf8\xc7\xea\xcf\x90\xad\xbf\xc1:\x96\xa1\x8a\xb7)m\x9e\xc81\x85qL\x06\x81\xa0\x1d\xd2\xc7\xe9\xe8V\xc4\x88I\xdb\xdd\xb1\x98yC\v\x9d\x1e\xad\xcbQA\x83\xd2e\xfekH\xe2\x86\x01;+\xea,a\x94\xce\xb0h\xe9I\xe4\x87\x0f8\xfc\x02\x1d\xa5\xfd\xe9\xb4\xa6F\xd8yp7\x85\x9fqj0xffffffffffffffff}) r2 = syz_io_uring_setup(0x66e, &(0x7f0000000240)={0x0, 0x0, 0x10100, 0x3}, &(0x7f0000000380)=0x0, &(0x7f0000000200)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r2, 0x567, 0x0, 0x0, 0x0, 0x0) poll(&(0x7f0000000040)=[{r1, 0x10}], 0x1, 0x10001) ioctl$SW_SYNC_IOC_INC(r0, 0x40045701, &(0x7f0000000140)=0x816) 3m21.205936407s ago: executing program 3 (id=464): syz_open_dev$media(&(0x7f0000000040), 0x4c6c, 0x200) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x28403) r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f00000000c0), 0x10) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYRES16=r0], 0x448}}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="050000000808"], 0x80}}, 0x0) sendmmsg$inet(r0, &(0x7f0000001b00)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000080)="050000007402b8f4191db62b", 0xc}, {&(0x7f0000000440)="9f336d70bf41f19e47e98b4015e3b0384d86a1ceb4e530554ebc8154bf392bcf9ce0b09f879bd7aaf9d086e3", 0x2c}], 0x2}}, {{0x0, 0x0, &(0x7f0000000100), 0x2}}], 0x40000000000003a, 0x0) 3m18.788552461s ago: executing program 33 (id=464): syz_open_dev$media(&(0x7f0000000040), 0x4c6c, 0x200) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x28403) r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f00000000c0), 0x10) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYRES16=r0], 0x448}}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="050000000808"], 0x80}}, 0x0) sendmmsg$inet(r0, &(0x7f0000001b00)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000080)="050000007402b8f4191db62b", 0xc}, {&(0x7f0000000440)="9f336d70bf41f19e47e98b4015e3b0384d86a1ceb4e530554ebc8154bf392bcf9ce0b09f879bd7aaf9d086e3", 0x2c}], 0x2}}, {{0x0, 0x0, &(0x7f0000000100), 0x2}}], 0x40000000000003a, 0x0) 2m22.311795135s ago: executing program 5 (id=613): pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x2, &(0x7f00000001c0)=0x7ff, 0x4) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x8000002, 0x2000}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r1, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090000006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a688138dea09b776cbfa784cbf550bf3074fb0d775da4df5a3f48bbdf452eeb6b923da9d0e25b80f76a873664b5753444fe05f33e5f91045540836c3cd6af10f0cd018f0c6f57f926ac959a5628c45088fbe0c87fbe6cbcda4662d2a12f6d00"/215, 0xd0d0c2ac, 0x1, 0x0, 0x0) splice(r1, 0x0, r0, 0x0, 0x406f413, 0x0) 2m20.551564147s ago: executing program 5 (id=618): r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'veth0_to_bridge\x00', 0x0}) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000580)={'batadv_slave_0\x00', 0x0}) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000300000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', r3, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x2c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r1, 0xd120}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r4}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x88000}, 0x0) 2m19.08137829s ago: executing program 5 (id=630): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r1, 0x6, &(0x7f0000002000)={0x1}) fcntl$lock(r1, 0x26, &(0x7f00000031c0)={0x1}) fcntl$lock(r1, 0x26, &(0x7f0000000080)) 2m17.80804235s ago: executing program 5 (id=623): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000440)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x18d811, 0x0) syz_mount_image$ext4(&(0x7f0000000140)='ext2\x00', &(0x7f0000000080)='./file0\x00', 0x1, &(0x7f0000000100), 0x0, 0x46e, &(0x7f0000000e80)="$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") 2m16.235064015s ago: executing program 5 (id=628): r0 = syz_io_uring_setup(0x81f, &(0x7f0000000480)={0x0, 0x0, 0x10, 0xffffffff, 0x30f}, &(0x7f00000000c0)=0x0, &(0x7f0000000540)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000080)={'syz1\x00', {0x1b10, 0x0, 0x1, 0x2}, 0x2f, [0x2, 0x1, 0x704d, 0x1, 0x5, 0x1, 0x2, 0x7db, 0x4, 0xfffffc01, 0xfffffffb, 0x8, 0xfffffffd, 0x100, 0xfe, 0x48, 0x7, 0x5, 0x7ff, 0x8, 0x76, 0x8, 0x0, 0x81, 0x40, 0x19b1, 0x8000, 0x7, 0x7fff, 0x4000000, 0x7, 0x3, 0xe, 0x7, 0x1, 0x1, 0x5, 0xf, 0x7, 0x10001, 0x9, 0x7f, 0x8, 0x6, 0xb, 0x5, 0x6, 0x40, 0x7f, 0x9, 0x1, 0x6, 0x3, 0x2284919, 0x4, 0x5643fa73, 0xfffeffff, 0x6, 0x800, 0x2, 0x8a, 0x6, 0x1, 0x6], [0xffffffd2, 0x7fffffff, 0xffff, 0x8, 0xe62, 0x3, 0x0, 0x9, 0xc33, 0x3, 0x7, 0x800, 0x6c368000, 0x4, 0x7, 0x0, 0x10, 0x5, 0x8, 0x8001, 0x3, 0x7fff, 0x9, 0x0, 0x5, 0x4, 0x7, 0x8, 0x40, 0xc10, 0x80000001, 0x3, 0x3, 0x6, 0x7, 0x8, 0x8, 0x7, 0x4, 0x9, 0x5, 0x3, 0x2, 0x0, 0x0, 0x11e, 0xa4, 0x4, 0x5, 0xd69, 0x9, 0xf404, 0xf1, 0x3, 0x3, 0x1, 0x6, 0x6, 0x0, 0x6, 0x8, 0x6, 0x4, 0x68], [0x3, 0x1, 0x4, 0xfffffffc, 0x0, 0x7ffc, 0x401, 0x9, 0x2, 0xffc, 0x7, 0x4, 0xc, 0x7, 0x6, 0xa, 0x6, 0x4, 0x5, 0x5, 0x2, 0x30000000, 0x644, 0x2, 0xfffffffd, 0x7, 0x5, 0x7f, 0x7ff, 0xd, 0x3fc, 0xf, 0x41, 0x81, 0xc99, 0x25a, 0x2, 0x0, 0x2, 0x5d9fffa, 0x3ff, 0xff, 0x1, 0x8, 0x10000, 0xe7, 0x200, 0x7af5, 0x2, 0xb, 0x0, 0xffff, 0x7, 0x6, 0x2, 0x81, 0x8, 0x2, 0x7, 0x100, 0x8, 0x0, 0x6, 0x10], [0xffffff80, 0xd5800000, 0x0, 0x4, 0x2, 0x62a, 0x3, 0x407, 0xb343, 0x4, 0x1, 0x8, 0x8000, 0x8, 0xffffff81, 0x80000000, 0x5, 0x3, 0x200, 0xfff, 0x3, 0xfffffffd, 0x3c63, 0x7, 0x6, 0xe6, 0xffffffff, 0x3, 0x2, 0x7, 0x1, 0x7, 0x7, 0x8, 0x1, 0xf, 0x9, 0x17ce, 0x0, 0x3, 0x6fe, 0xe, 0x7, 0x13a, 0x7, 0x0, 0xb757, 0x5, 0x65, 0x996, 0x50, 0x8c1, 0x0, 0x5, 0x4, 0xf, 0x100, 0x10000400, 0x9, 0x7fff, 0x3, 0xfffffffb, 0xc, 0x2]}, 0x45c) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x6, 0x0, 0x0, 0x7}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x50, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r0, 0x47bc, 0x0, 0x21, 0x0, 0x0) 2m15.614728578s ago: executing program 5 (id=631): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00', 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000040)={r3, 0x1, 0x6, @broadcast}, 0x10) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000000)={r1, 0x1, 0x0, @local}, 0x10) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000100)={r1, 0x1, 0x6}, 0x10) 2m13.046283935s ago: executing program 34 (id=631): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00', 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000040)={r3, 0x1, 0x6, @broadcast}, 0x10) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000000)={r1, 0x1, 0x0, @local}, 0x10) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000100)={r1, 0x1, 0x6}, 0x10) 2m5.296593046s ago: executing program 2 (id=400): r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) r1 = userfaultfd(0x801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) syz_io_uring_setup(0x48ba, &(0x7f0000000000)={0x0, 0xfffffffc, 0x1000, 0x0, 0x333}, &(0x7f0000000080), &(0x7f0000ff4000)) close_range(r0, 0xffffffffffffffff, 0x0) 1m45.82719761s ago: executing program 2 (id=400): r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) r1 = userfaultfd(0x801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) syz_io_uring_setup(0x48ba, &(0x7f0000000000)={0x0, 0xfffffffc, 0x1000, 0x0, 0x333}, &(0x7f0000000080), &(0x7f0000ff4000)) close_range(r0, 0xffffffffffffffff, 0x0) 1m21.933556299s ago: executing program 2 (id=400): r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) r1 = userfaultfd(0x801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) syz_io_uring_setup(0x48ba, &(0x7f0000000000)={0x0, 0xfffffffc, 0x1000, 0x0, 0x333}, &(0x7f0000000080), &(0x7f0000ff4000)) close_range(r0, 0xffffffffffffffff, 0x0) 1m17.564786876s ago: executing program 4 (id=747): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f0000000280)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f00000002c0)="9e", 0x1, 0x841, &(0x7f0000000200)={0xa, 0x4e23, 0x0, @loopback, 0xe}, 0x1c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000300)={0x0, 0x200002, 0x30}, 0xc) sendmsg$inet6(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000240)="165db410f7", 0x5}], 0x1}, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000000)={0x0, 0x5, 0x10}, 0xc) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000040)=',', 0x34000}], 0x1) 1m16.569313202s ago: executing program 4 (id=752): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000002180)='blkio.bfq.io_merged\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r0, 0x0) ftruncate(r0, 0xc17a) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000080)=0x9, 0x8, 0x0) mbind(&(0x7f0000673000/0x1000)=nil, 0x1000, 0x3, &(0x7f00000009c0)=0x7, 0x3, 0x0) mremap(&(0x7f0000440000/0x2000)=nil, 0x2000, 0x4000, 0x3, &(0x7f00002a0000/0x4000)=nil) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x0) 1m15.94437816s ago: executing program 4 (id=755): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@xino_on}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='mounts\x00') read$FUSE(r0, &(0x7f0000002140)={0x2020}, 0x2100) 1m15.082191077s ago: executing program 4 (id=759): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f00000000c0)='./file0/../file0\x00', &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x19cc5, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x262) 1m14.453455625s ago: executing program 4 (id=761): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) socket$packet(0x11, 0x2, 0x300) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) unshare(0x2040400) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 1m13.561513043s ago: executing program 4 (id=764): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$int_in(r0, 0x5452, &(0x7f0000000180)=0x401) listen(r0, 0x0) r1 = syz_io_uring_setup(0x364d, &(0x7f0000000180)={0x0, 0xaa44, 0x13900, 0x0, 0x4}, &(0x7f0000000000)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000380)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x244}}) io_uring_enter(r1, 0x2def, 0x0, 0x0, 0x0, 0x0) shutdown(r0, 0x0) 1m11.614469s ago: executing program 35 (id=764): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$int_in(r0, 0x5452, &(0x7f0000000180)=0x401) listen(r0, 0x0) r1 = syz_io_uring_setup(0x364d, &(0x7f0000000180)={0x0, 0xaa44, 0x13900, 0x0, 0x4}, &(0x7f0000000000)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000380)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x244}}) io_uring_enter(r1, 0x2def, 0x0, 0x0, 0x0, 0x0) shutdown(r0, 0x0) 50.049291043s ago: executing program 2 (id=400): r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) r1 = userfaultfd(0x801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) syz_io_uring_setup(0x48ba, &(0x7f0000000000)={0x0, 0xfffffffc, 0x1000, 0x0, 0x333}, &(0x7f0000000080), &(0x7f0000ff4000)) close_range(r0, 0xffffffffffffffff, 0x0) 27.692835671s ago: executing program 2 (id=400): r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) r1 = userfaultfd(0x801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) syz_io_uring_setup(0x48ba, &(0x7f0000000000)={0x0, 0xfffffffc, 0x1000, 0x0, 0x333}, &(0x7f0000000080), &(0x7f0000ff4000)) close_range(r0, 0xffffffffffffffff, 0x0) 9.295327104s ago: executing program 0 (id=961): r0 = fsopen(&(0x7f0000000180)='proc\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x1) fchdir(r1) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x2100, 0x0) lseek(r2, 0x101, 0x2) getdents(r2, 0x0, 0x58) 8.565610938s ago: executing program 0 (id=965): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b0000000500000008040000cd00000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r1}, 0x10) r2 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$VT_RESIZE(r2, 0x5609, &(0x7f0000000700)={0x80, 0x400, 0x2}) 7.976293924s ago: executing program 6 (id=967): r0 = syz_open_dev$sndctrl(&(0x7f0000001ac0), 0x0, 0x0) add_key$user(0x0, 0x0, &(0x7f0000000140)="00c2", 0x2, 0xfffffffffffffffd) r1 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000000)={r1, r1, r1}, &(0x7f00000001c0)=""/166, 0xa6, &(0x7f0000000140)={&(0x7f0000000300)={'crc32\x00'}}) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(0xffffffffffffffff, 0x40405514, &(0x7f0000000200)={0x9, 0x0, 0xfffffff9, 0x1, '\x00', 0x69}) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(0xffffffffffffffff, 0xc1105511, &(0x7f0000000040)={0x9, 0x0, 0x40, 0x10000, 'syz1\x00', 0x4000000}) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0xc1105511, &(0x7f0000000040)) 7.913738485s ago: executing program 0 (id=968): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000080)=0x474c, 0x4) connect$inet(r0, &(0x7f0000000480)={0x2, 0xce20, @local}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$inet_int(r0, 0x0, 0xc, &(0x7f0000000040)=0xe, 0x4) setsockopt$inet_int(r0, 0x0, 0x14, &(0x7f0000000180)=0x40000000, 0x4) recvfrom$inet(r0, 0x0, 0x0, 0x2041, 0x0, 0x0) 7.60167616s ago: executing program 8 (id=970): mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000002280)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}}) statx(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x2000, 0x800, 0x0) read$FUSE(r0, &(0x7f0000008340)={0x2020, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r0, &(0x7f0000004300)="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", 0x2000, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000a00)={0x130, 0x0, 0x400, {0xffffffffffffffff, 0x7, 0x0, '\x00', {0x7ff, 0x1, 0xae2, 0x802, 0xee01, 0x0, 0x2000, '\x00', 0x1, 0x8, 0xb4e7, 0x320d3873, {0x8003, 0x8}, {0x4000000000006, 0x3}, {0xaeb, 0x7}, {0xf, 0x8}, 0x8000, 0xa, 0x8, 0x6}}}}) write$FUSE_INIT(r0, &(0x7f0000001200)={0x50, 0x0, r1, {0x7, 0x29, 0x0, 0x22000100}}, 0x50) 7.367075834s ago: executing program 7 (id=971): socket$packet(0x11, 0x2, 0x300) socket$nl_netfilter(0x10, 0x3, 0xc) socket$unix(0x1, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="0c04000010000104000000000000000000480000", @ANYRES32=r1, @ANYBLOB="101000000000000008000d0005000000e4031680a40001800c0007"], 0x40c}}, 0x0) 7.227731809s ago: executing program 6 (id=972): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000140)={[{@delalloc}, {@errors_remount}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@errors_remount}, {@data_err_ignore}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@nodelalloc}, {@grpquota}, {@noload}, {@nouid32}, {@bh}, {@dioread_nolock}]}, 0x1, 0x553, &(0x7f0000001080)="$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") open(&(0x7f0000000200)='./bus\x00', 0x14507e, 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) ioctl$BLKROSET(r0, 0x125d, &(0x7f0000000080)=0x3f) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) pwrite64(r1, &(0x7f0000000240)='6', 0x1, 0x1576) 6.698346079s ago: executing program 8 (id=973): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=@newtfilter={0x50, 0x2c, 0xd27, 0x70bd28, 0x4, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {}, {0x7}}, [@filter_kind_options=@f_basic={{0xa}, {0x20, 0x2, [@TCA_BASIC_EMATCHES={0x1c, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xffff}}, @TCA_EMATCH_TREE_LIST={0x10, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0xc, 0x1, 0x0, 0x0, {{0x44c, 0x0, 0x4}}}]}]}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) 6.377746908s ago: executing program 7 (id=974): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@nfs_export_on}]}) chdir(&(0x7f00000000c0)='./bus\x00') r0 = creat(&(0x7f0000000440)='./file0\x00', 0x0) open_by_handle_at(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000f800030000000000fb"], 0x23a503) 6.336043483s ago: executing program 6 (id=975): r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) r2 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x8042, 0x0) fcntl$setlease(r2, 0x400, 0x0) link(&(0x7f0000000200)='./file1\x00', &(0x7f0000000300)='./bus\x00') 5.693806605s ago: executing program 8 (id=976): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000480)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000002c0)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0x2, 0x4e21, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0xa, 0x0, 0x0, @mcast2}, r1}}, 0x48) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000480)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000002c0)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000380)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f0000000580)=0x1, r3, 0x0, 0x2, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0x0, @loopback}, {0xa, 0x0, 0x0, @remote}, r3}}, 0x48) 5.610525206s ago: executing program 7 (id=977): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x256c, 0x6d, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001440)={0x24, 0x0, 0x0, &(0x7f00000013c0)={0x0, 0x22, 0x5, {[@main=@item_4={0x3, 0x0, 0x9, "83c5b03b"}]}}, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000340)={0x24, 0x0, &(0x7f00000000c0)={0x0, 0x3, 0x2, @lang_id={0x0, 0x3, 0x423}}, 0x0, 0x0}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x50}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) syz_usb_control_io(r0, &(0x7f0000000200)={0x2c, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0003"], 0x0, 0x0, 0x0}, 0x0) 5.610288989s ago: executing program 6 (id=978): openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x80000, 0x4) socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(0xffffffffffffffff, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000000041}, 0xc) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f00000007c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_RESET_LINK_STATS(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000e40)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010025bd7000fcdbdf2501000000000000000c4100000014001462726f6164636173de7e289795730701"], 0x30}, 0x1, 0x0, 0x0, 0x44000}, 0x8000) 5.528414371s ago: executing program 2 (id=400): r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) r1 = userfaultfd(0x801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) syz_io_uring_setup(0x48ba, &(0x7f0000000000)={0x0, 0xfffffffc, 0x1000, 0x0, 0x333}, &(0x7f0000000080), &(0x7f0000ff4000)) close_range(r0, 0xffffffffffffffff, 0x0) 1.63050833s ago: executing program 0 (id=979): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000040ac054382408b0b00000109022400010000002009040000fd0301000009210000000122010009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000003c0)={0x24, 0x0, 0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="002281"], 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x40400) ioctl$HIDIOCGFLAG(r1, 0x8004480e, &(0x7f0000000000)) 1.63023312s ago: executing program 7 (id=980): openat$mixer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000000b00)=0x7) r1 = syz_io_uring_setup(0xd1, &(0x7f0000000480)={0x0, 0x0, 0x400, 0x0, 0x247}, &(0x7f0000000080)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000040)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r1, 0x47ba, 0x0, 0x0, 0x0, 0x0) 1.630115503s ago: executing program 6 (id=981): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000406d0434c500000000000109022400010000000009040f0001030000000921000000012205000905810300"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x5, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000000)=0x200, 0x4) r1 = syz_open_dev$evdev(0x0, 0x20000, 0x0) ioctl$EVIOCGLED(r1, 0x80284504, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000280)={0x24, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x22, 0x5, {[@main=@item_4={0x3, 0x0, 0x8, "00000100"}]}}, 0x0}, 0x0) 1.629886421s ago: executing program 8 (id=982): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x68, 0x24, 0x4ee4e6a52ff56541, 0x40000, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xa}, {0xffff, 0xffff}, {0x8, 0xc}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x38, 0x2, {{0x6, 0x8003, 0x1, 0x0, 0xffffffff, 0x91b1}, [@TCA_NETEM_LOSS={0x1c, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0x18, 0x1, {0x4d962bd, 0x2, 0x7, 0x103ff, 0x5}}]}]}}}]}, 0x68}, 0x1, 0x0, 0x0, 0x4000400}, 0x4) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) 1.246050062s ago: executing program 8 (id=983): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000f40)) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) r1 = dup2(r0, r0) preadv(r1, &(0x7f0000000440)=[{&(0x7f0000000100)=""/224, 0xe0}, {0x0}], 0x2, 0x0, 0x10000ac1) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000000)=0x5) 1.113852062s ago: executing program 7 (id=984): r0 = epoll_create1(0x0) r1 = socket(0x1, 0x80802, 0x0) r2 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000000)={0x90000000}) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f00000000c0)={0x10000001}) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r0, &(0x7f0000000600)) 798.248141ms ago: executing program 6 (id=985): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000a8f4dd086d0492082a6d0000000109021b0001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000580)={0x2c, &(0x7f00000000c0)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000280)={0x44, &(0x7f0000000300)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000380)={0x1c, &(0x7f0000000200)={0x20, 0x6}, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) 637.657949ms ago: executing program 7 (id=986): openat(0xffffffffffffff9c, &(0x7f0000002600)='./file1\x00', 0x105042, 0x0) r0 = inotify_init1(0x800) inotify_add_watch(r0, &(0x7f0000000200)='.\x00', 0x10000a0) inotify_add_watch(r0, &(0x7f0000000000)='./file1\x00', 0x90) r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r1, 0x402, 0x23) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) 501.755355ms ago: executing program 0 (id=987): syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x8, 0x8, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0xc0ed4040, &(0x7f00000002c0)={[{@noblock_validity}, {@noinit_itable}, {@nodelalloc}, {@dioread_lock}, {@journal_ioprio}, {@journal_dev={'journal_dev', 0x3d, 0x1ff}}, {@usrjquota}, {@minixdf}]}, 0xf6, 0x479, &(0x7f00000004c0)="$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") 460.939326ms ago: executing program 8 (id=988): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000fc0)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c) socket$kcm(0x29, 0x5, 0x0) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004900)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000004c0)="e9", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000c00)="bda033176eb146b36ef41f221a4e7ce4a02598d750606488520915c6806affc0a913781c7211ce1fcd59a12b5d5afdaf9d723f092ce9d1eed16e208f2e79831ca049e8979ad94621175c2c48c10e33b29f2def51498743b057efc21efe4be4d9f02e9d236f27197fffc5da0f3799452f5e3640340502fde4ae8c56b303e1b79b3d1842bf6277771bef544c745e7a80c9e7efdd1c619f69b9d01839aa326776d335689e4db7cb7e32fad8f4c40e943b43eb4ea173d720bf5998149625a731643636c8ddbe61e1d7d4736f8414a84acc40557012c82697d8a59c873424aefb3c7ff0dba302efaaf887a477b1ab7ea6c1def9db3514e444c1ef36c6cf42cde90d4bbb2e923a5d16a1bb191ad91cab867cd55037d507a12803f3df1b81f1857fad085dbc5c46aac14230d7a4f8b36d6bc63b4a16cd309b7697b421a662b83001b5ce5ab3ff80800243107df7aa6cae9a5db6a8f2a53ef7d6c6aeac76b83a15466c74a9cdbcde8505e3d14c0c3a47a36bf464168202dc88e25f4c1da57faf0eaa7ff16bdd751c2ae5778e169c8ffba57c9a20e24ad51e6e8e02b721e8ca94f131cc98e03b34b615a1db4080362de4ef215d5a0541aeb0c742a2636ac5af8538ceb3585ef9dca8037df55baa072096073b005b53eff0b899de59bc2b5d687d109520571eeacb30124c4012fe6cb9e3bf451be3d219206ddc35099101533cff5aee6c4783e00e6dd391f664052a6c66c62f62a49fde8fbe336543bf99b55e53b801e54c1d0a292da83db26a8a870ac1d8751c4bc0d495277295cd3a17f9e9a25d70214a17b981b62d5c75356ed025df3557a8b59648edd9d1dbdf169d91f9d85cfac11a57db0a14f03e8934a2cc98d389912a0d9942a40c3ee98d35da61d3bab1a32c9d788e9f74ee57012ca5bfd0dc090b591c64aae6a205fbd349fc372bbd7429983a69cae26ff8b5b019144d318ba225e46bc6cf8d7d3e5952333042542b2fd4fb4d88a3651dd8e14ecc2845d4e71f7dfd128e9e2ee2ab0062a3e701bb2477bfd73d7396ae522f11fa481078d1c7f7905e0846fb072dcf7c06102b3816ec4a3518514c7166d7385b680469f5184a93953258952554e68d93ea8f789c4f13982b65996d7d9cf19f0b39b72e1dc9079d84413bbc30d24fc481e24ef1beacb8bc15f50c2663d684d16a1c71b2c8a568481f4f1b254ccd66fbef4cacfc3e13f2c943a264e429824bef7297f93076aea55ed9cf12512ce3ac3df331695024bd1e53369a87caf6894fce811a64dad315402678de76", 0x390}], 0x1}}], 0x2, 0x4048800) close(0x3) 0s ago: executing program 0 (id=989): r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0xfffffffc, 0x2, 0xfffffffc}, 0x10) sendmmsg(r0, &(0x7f0000005840)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000005980)="b64e", 0x2}], 0x1}}], 0x1, 0x9200000000000000) r2 = dup3(r1, r0, 0x0) recvmmsg$unix(r2, &(0x7f0000005800)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000001700)=""/4096, 0x1000}], 0x1}}], 0x1, 0x400021c0, 0x0) kernel console output (not intermixed with test programs): ve_0 [ 393.998977][ T7302] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 394.029734][ T7302] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 394.225260][ T7302] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 394.232939][ T7302] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 394.259402][ T7302] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 394.652791][ T7377] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 394.764708][ T52] Bluetooth: hci0: command tx timeout [ 394.841312][ T7302] hsr_slave_0: entered promiscuous mode [ 394.851766][ T7302] hsr_slave_1: entered promiscuous mode [ 394.860975][ T7302] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 394.869029][ T7302] Cannot create hsr debugfs directory [ 394.888521][ T7354] chnl_net:caif_netlink_parms(): no params data found [ 395.389628][ T52] Bluetooth: hci1: command tx timeout [ 395.875380][ T7386] netlink: 32 bytes leftover after parsing attributes in process `syz.0.489'. [ 395.927024][ T7302] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 395.951981][ T7302] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 395.979456][ T7302] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 396.010723][ T7302] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 396.348783][ T7354] bridge0: port 1(bridge_slave_0) entered blocking state [ 396.356764][ T7354] bridge0: port 1(bridge_slave_0) entered disabled state [ 396.364698][ T7354] bridge_slave_0: entered allmulticast mode [ 396.379484][ T7354] bridge_slave_0: entered promiscuous mode [ 396.492114][ T7354] bridge0: port 2(bridge_slave_1) entered blocking state [ 396.499957][ T7354] bridge0: port 2(bridge_slave_1) entered disabled state [ 396.509090][ T7354] bridge_slave_1: entered allmulticast mode [ 396.519074][ T7354] bridge_slave_1: entered promiscuous mode [ 396.869898][ T52] Bluetooth: hci0: command 0x041b tx timeout [ 396.900413][ T7354] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 397.038448][ T7354] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 397.255152][ T7354] team0: Port device team_slave_0 added [ 397.299309][ T7354] team0: Port device team_slave_1 added [ 397.333057][ T7399] loop5: detected capacity change from 0 to 1024 [ 397.406915][ T7399] EXT4-fs: Ignoring removed nomblk_io_submit option [ 397.433239][ T7354] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 397.442192][ T7354] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 397.470133][ T7354] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 397.516179][ T7302] 8021q: adding VLAN 0 to HW filter on device bond0 [ 397.531733][ T7354] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 397.539746][ T7354] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 397.570568][ T7354] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 397.599551][ T7399] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 397.643211][ T7399] 9pnet: p9_errstr2errno: server reported unknown error validity,nomblk_io_submit, [ 397.840164][ T7302] 8021q: adding VLAN 0 to HW filter on device team0 [ 397.942513][ T3688] bridge0: port 1(bridge_slave_0) entered blocking state [ 397.950354][ T3688] bridge0: port 1(bridge_slave_0) entered forwarding state [ 398.037716][ T6409] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 398.067533][ T7354] hsr_slave_0: entered promiscuous mode [ 398.078249][ T7354] hsr_slave_1: entered promiscuous mode [ 398.094340][ T7354] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 398.102349][ T7354] Cannot create hsr debugfs directory [ 398.147584][ T3688] bridge0: port 2(bridge_slave_1) entered blocking state [ 398.155196][ T3688] bridge0: port 2(bridge_slave_1) entered forwarding state [ 398.909723][ T5797] Bluetooth: hci0: command 0x041b tx timeout [ 399.687534][ T7354] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 399.764140][ T7354] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 399.800869][ T7354] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 399.842399][ T7354] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 400.594158][ T7302] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 400.988284][ T5797] Bluetooth: hci0: command 0x041b tx timeout [ 401.029324][ T7354] 8021q: adding VLAN 0 to HW filter on device bond0 [ 401.120143][ T7354] 8021q: adding VLAN 0 to HW filter on device team0 [ 401.205353][ T4249] bridge0: port 1(bridge_slave_0) entered blocking state [ 401.213068][ T4249] bridge0: port 1(bridge_slave_0) entered forwarding state [ 401.285545][ T4249] bridge0: port 2(bridge_slave_1) entered blocking state [ 401.293391][ T4249] bridge0: port 2(bridge_slave_1) entered forwarding state [ 401.445932][ T30] audit: type=1326 audit(1746044410.474:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7440 comm="syz.5.506" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf704e539 code=0x0 [ 402.883636][ T7302] veth0_vlan: entered promiscuous mode [ 403.004923][ T7302] veth1_vlan: entered promiscuous mode [ 403.070065][ T5797] Bluetooth: hci0: command 0x041b tx timeout [ 403.428006][ T7354] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 403.507159][ T7302] veth0_macvtap: entered promiscuous mode [ 403.601655][ T7302] veth1_macvtap: entered promiscuous mode [ 403.831617][ T7302] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 403.843087][ T7302] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 403.854478][ T7302] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 403.865787][ T7302] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 403.881986][ T7302] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 403.992469][ T7354] veth0_vlan: entered promiscuous mode [ 404.092909][ T7302] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 404.103843][ T7302] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 404.115446][ T7302] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 404.127837][ T7302] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 404.144095][ T7302] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 404.195333][ T7354] veth1_vlan: entered promiscuous mode [ 404.241616][ T7302] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 404.251952][ T7302] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 404.262491][ T7302] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 404.274512][ T7302] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 404.620359][ T7354] veth0_macvtap: entered promiscuous mode [ 404.720087][ T7354] veth1_macvtap: entered promiscuous mode [ 404.894781][ T7354] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 404.905795][ T7354] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 404.917060][ T7354] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 404.928384][ T7354] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 404.938650][ T7354] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 404.949464][ T7354] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 404.965548][ T7354] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 405.122377][ T7354] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 405.133378][ T7354] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 405.143934][ T7354] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 405.156658][ T7354] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 405.167071][ T7354] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 405.181096][ T7354] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 405.197994][ T7354] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 405.359201][ T7354] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 405.368650][ T7354] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 405.378434][ T7354] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 405.393151][ T7354] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 405.888961][ T7487] loop5: detected capacity change from 0 to 8 [ 405.939365][ T7487] SQUASHFS error: zlib decompression failed, data probably corrupt [ 405.949164][ T7487] SQUASHFS error: Failed to read block 0x9b: -5 [ 405.955646][ T7487] SQUASHFS error: Unable to read metadata cache entry [99] [ 405.963473][ T7487] SQUASHFS error: Unable to read inode 0x127 [ 406.010760][ T7487] netlink: 'syz.5.517': attribute type 12 has an invalid length. [ 406.019335][ T7487] netlink: 'syz.5.517': attribute type 29 has an invalid length. [ 406.027625][ T7487] netlink: 148 bytes leftover after parsing attributes in process `syz.5.517'. [ 406.037002][ T7487] netlink: 'syz.5.517': attribute type 1 has an invalid length. [ 406.044871][ T7487] netlink: 'syz.5.517': attribute type 2 has an invalid length. [ 406.052952][ T7487] netlink: 39 bytes leftover after parsing attributes in process `syz.5.517'. [ 406.729067][ T7500] netlink: 12 bytes leftover after parsing attributes in process `syz.5.519'. [ 408.237987][ T7529] netlink: 96 bytes leftover after parsing attributes in process `syz.5.525'. [ 408.688613][ T1284] ieee802154 phy0 wpan0: encryption failed: -22 [ 408.695495][ T1284] ieee802154 phy1 wpan1: encryption failed: -22 [ 409.659429][ T7547] netlink: 'syz.5.529': attribute type 1 has an invalid length. [ 409.668317][ T7547] netlink: 'syz.5.529': attribute type 4 has an invalid length. [ 409.676576][ T7547] netlink: 9462 bytes leftover after parsing attributes in process `syz.5.529'. [ 409.802351][ T159] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 409.811211][ T159] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 410.007178][ T159] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 410.015296][ T159] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 410.768754][ T3810] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 410.777212][ T3810] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 411.087600][ T3810] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 411.095925][ T3810] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 412.212921][ T4331] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 412.454846][ T4331] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 412.598215][ T4331] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 412.761975][ T4331] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 413.224177][ T4331] bridge_slave_1: left allmulticast mode [ 413.230814][ T4331] bridge_slave_1: left promiscuous mode [ 413.237754][ T4331] bridge0: port 2(bridge_slave_1) entered disabled state [ 413.254390][ T4331] bridge_slave_0: left allmulticast mode [ 413.260789][ T4331] bridge_slave_0: left promiscuous mode [ 413.271552][ T4331] bridge0: port 1(bridge_slave_0) entered disabled state [ 415.088145][ T4331] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 415.198972][ T4331] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 415.282075][ T4331] bond0 (unregistering): Released all slaves [ 417.057271][ T7579] loop5: detected capacity change from 0 to 2048 [ 417.571510][ T4331] hsr_slave_0: left promiscuous mode [ 417.616657][ T4331] hsr_slave_1: left promiscuous mode [ 417.624917][ T4331] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 417.634834][ T4331] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 417.789351][ T4331] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 417.797343][ T4331] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 418.052165][ T4331] veth1_macvtap: left promiscuous mode [ 418.058115][ T4331] veth0_macvtap: left promiscuous mode [ 418.064098][ T4331] veth1_vlan: left promiscuous mode [ 418.069986][ T4331] veth0_vlan: left promiscuous mode [ 418.609638][ T7579] udf: Unknown parameter 'unhid./bus' [ 419.745707][ T4331] team0 (unregistering): Port device team_slave_1 removed [ 419.774248][ T4331] team0 (unregistering): Port device team_slave_0 removed [ 420.060659][ T52] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 420.078152][ T52] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 420.093908][ T52] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 420.122596][ T52] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 420.163848][ T52] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 420.259875][ T7586] veth0_to_bridge: entered promiscuous mode [ 420.284346][ T3810] bridge0: port 1(bridge_slave_0) entered disabled state [ 420.684711][ T7601] loop5: detected capacity change from 0 to 256 [ 421.327949][ T7592] chnl_net:caif_netlink_parms(): no params data found [ 421.521946][ T7606] loop4: detected capacity change from 0 to 256 [ 421.591921][ T7606] FAT-fs (loop4): Invalid FSINFO signature: 0x00fffff8, 0x00000000 (sector = 1) [ 421.656551][ T7609] loop5: detected capacity change from 0 to 2048 [ 421.810072][ T7609] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 421.922391][ T3810] FAT-fs (loop4): Invalid FSINFO signature: 0x00fffff8, 0x00000000 (sector = 1) [ 422.266854][ T52] Bluetooth: hci0: command tx timeout [ 422.307154][ T6409] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 422.400052][ T7592] bridge0: port 1(bridge_slave_0) entered blocking state [ 422.407965][ T7592] bridge0: port 1(bridge_slave_0) entered disabled state [ 422.415827][ T7592] bridge_slave_0: entered allmulticast mode [ 422.425763][ T7592] bridge_slave_0: entered promiscuous mode [ 422.509771][ T7592] bridge0: port 2(bridge_slave_1) entered blocking state [ 422.517531][ T7592] bridge0: port 2(bridge_slave_1) entered disabled state [ 422.525369][ T7592] bridge_slave_1: entered allmulticast mode [ 422.535618][ T7592] bridge_slave_1: entered promiscuous mode [ 422.784921][ T7592] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 422.842832][ T7592] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 422.979558][ T7592] team0: Port device team_slave_0 added [ 423.003482][ T7592] team0: Port device team_slave_1 added [ 423.475139][ T7592] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 423.483782][ T7592] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 423.512308][ T7592] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 424.346803][ T52] Bluetooth: hci0: command tx timeout [ 424.565547][ T7592] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 424.573205][ T7592] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 424.599982][ T7592] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 425.033749][ T7592] hsr_slave_0: entered promiscuous mode [ 425.046145][ T7592] hsr_slave_1: entered promiscuous mode [ 425.055251][ T7592] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 425.063172][ T7592] Cannot create hsr debugfs directory [ 425.404231][ T30] audit: type=1326 audit(1746044434.464:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7642 comm="syz.4.560" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705e539 code=0x7ffc0000 [ 425.491220][ T30] audit: type=1326 audit(1746044434.514:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7642 comm="syz.4.560" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705e539 code=0x7ffc0000 [ 425.513739][ T30] audit: type=1326 audit(1746044434.524:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7642 comm="syz.4.560" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf705e539 code=0x7ffc0000 [ 425.536617][ T30] audit: type=1326 audit(1746044434.524:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7642 comm="syz.4.560" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705e539 code=0x7ffc0000 [ 425.563146][ T30] audit: type=1326 audit(1746044434.524:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7642 comm="syz.4.560" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705e539 code=0x7ffc0000 [ 425.587012][ T30] audit: type=1326 audit(1746044434.524:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7642 comm="syz.4.560" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf705e539 code=0x7ffc0000 [ 425.609466][ T30] audit: type=1326 audit(1746044434.534:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7642 comm="syz.4.560" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705e539 code=0x7ffc0000 [ 425.631920][ T30] audit: type=1326 audit(1746044434.534:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7642 comm="syz.4.560" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705e539 code=0x7ffc0000 [ 425.654431][ T30] audit: type=1326 audit(1746044434.534:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7642 comm="syz.4.560" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf705e539 code=0x7ffc0000 [ 425.682797][ T30] audit: type=1326 audit(1746044434.534:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7642 comm="syz.4.560" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705e539 code=0x7ffc0000 [ 426.432918][ T52] Bluetooth: hci0: command tx timeout [ 427.053561][ T7592] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 427.127679][ T7592] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 427.217995][ T7592] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 427.269861][ T7592] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 427.463990][ T7668] input: syz1 as /devices/virtual/input/input9 [ 428.150782][ T7592] 8021q: adding VLAN 0 to HW filter on device bond0 [ 428.327117][ T7592] 8021q: adding VLAN 0 to HW filter on device team0 [ 428.381661][ T3688] bridge0: port 1(bridge_slave_0) entered blocking state [ 428.389396][ T3688] bridge0: port 1(bridge_slave_0) entered forwarding state [ 428.509146][ T3688] bridge0: port 2(bridge_slave_1) entered blocking state [ 428.516902][ T3688] bridge0: port 2(bridge_slave_1) entered forwarding state [ 428.527696][ T52] Bluetooth: hci0: command tx timeout [ 428.675222][ T7592] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 428.686578][ T7592] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 429.803501][ T7692] netlink: 'syz.6.577': attribute type 1 has an invalid length. [ 430.464843][ T7592] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 430.880997][ T7592] veth0_vlan: entered promiscuous mode [ 430.981751][ T7592] veth1_vlan: entered promiscuous mode [ 431.234844][ T7592] veth0_macvtap: entered promiscuous mode [ 431.420595][ T7592] veth1_macvtap: entered promiscuous mode [ 431.609448][ T7592] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 431.621039][ T7592] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 431.631482][ T7592] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 431.642355][ T7592] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 431.652662][ T7592] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 431.663450][ T7592] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 431.679237][ T7592] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 431.759286][ T7592] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 431.770478][ T7592] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 431.780790][ T7592] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 431.791668][ T7592] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 431.803175][ T7592] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 431.814349][ T7592] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 431.830127][ T7592] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 431.909188][ T7592] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 431.918708][ T7592] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 431.927972][ T7592] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 431.937161][ T7592] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 432.520977][ T7714] loop6: detected capacity change from 0 to 512 [ 432.585737][ T7714] EXT4-fs (loop6): Cannot use DAX on a filesystem that may contain inline data [ 435.497347][ T7747] Bluetooth: MGMT ver 1.23 [ 435.525793][ T7741] ceph: No mds server is up or the cluster is laggy [ 436.553533][ T3942] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 436.562070][ T3942] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 436.675219][ T159] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 436.683723][ T159] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 437.292746][ T3810] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 437.481080][ T3810] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 437.593231][ T7766] sit0: entered promiscuous mode [ 437.616904][ T7766] netlink: 'syz.6.595': attribute type 1 has an invalid length. [ 437.624938][ T7766] netlink: 1 bytes leftover after parsing attributes in process `syz.6.595'. [ 437.753655][ T3810] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 437.928082][ T3810] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 438.383892][ T3810] bridge_slave_1: left allmulticast mode [ 438.390069][ T3810] bridge_slave_1: left promiscuous mode [ 438.397144][ T3810] bridge0: port 2(bridge_slave_1) entered disabled state [ 438.421668][ T3810] bridge_slave_0: left allmulticast mode [ 438.428707][ T3810] bridge_slave_0: left promiscuous mode [ 438.435338][ T3810] bridge0: port 1(bridge_slave_0) entered disabled state [ 438.989295][ T3810] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 439.014821][ T3810] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 439.039833][ T3810] bond0 (unregistering): Released all slaves [ 439.420269][ T3810] hsr_slave_0: left promiscuous mode [ 439.430021][ T3810] hsr_slave_1: left promiscuous mode [ 439.438509][ T3810] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 439.448094][ T3810] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 439.465527][ T3810] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 439.473562][ T3810] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 439.510053][ T3810] veth1_macvtap: left promiscuous mode [ 439.515780][ T3810] veth0_macvtap: left promiscuous mode [ 439.521923][ T3810] veth1_vlan: left promiscuous mode [ 439.527641][ T3810] veth0_vlan: left promiscuous mode [ 440.140404][ T7782] loop4: detected capacity change from 0 to 512 [ 440.224737][ T7782] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 440.458268][ T7788] netlink: 4 bytes leftover after parsing attributes in process `syz.6.599'. [ 440.526443][ T7782] EXT4-fs (loop4): 1 truncate cleaned up [ 440.534782][ T7782] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 440.676488][ T3810] team0 (unregistering): Port device team_slave_1 removed [ 440.778585][ T3810] team0 (unregistering): Port device team_slave_0 removed [ 441.070436][ T5803] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 441.113065][ T5797] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 441.142047][ T5797] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 441.260943][ T5797] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 441.288151][ T5797] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 441.317747][ T5797] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 441.917469][ T7801] Bluetooth: MGMT ver 1.23 [ 441.922292][ T7801] Bluetooth: hci0: invalid len left 7, exp >= 258 [ 442.537309][ T7793] chnl_net:caif_netlink_parms(): no params data found [ 442.790087][ T7816] loop6: detected capacity change from 0 to 128 [ 443.206403][ T7816] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 443.258400][ T7816] ext4 filesystem being mounted at /21/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 443.484191][ T52] Bluetooth: hci0: command tx timeout [ 444.153911][ T7302] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 444.294493][ T7793] bridge0: port 1(bridge_slave_0) entered blocking state [ 444.302403][ T7793] bridge0: port 1(bridge_slave_0) entered disabled state [ 444.310424][ T7793] bridge_slave_0: entered allmulticast mode [ 444.320472][ T7793] bridge_slave_0: entered promiscuous mode [ 444.455608][ T7793] bridge0: port 2(bridge_slave_1) entered blocking state [ 444.463752][ T7793] bridge0: port 2(bridge_slave_1) entered disabled state [ 444.471836][ T7793] bridge_slave_1: entered allmulticast mode [ 444.481692][ T7793] bridge_slave_1: entered promiscuous mode [ 444.748944][ T7840] veth0_to_bridge: entered promiscuous mode [ 444.783255][ T3810] bridge0: port 1(bridge_slave_0) entered disabled state [ 444.823004][ T7793] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 445.001839][ T7793] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 445.212026][ T7793] team0: Port device team_slave_0 added [ 445.247454][ T7793] team0: Port device team_slave_1 added [ 445.440320][ T7793] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 445.447748][ T7793] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 445.474422][ T7793] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 445.546267][ T5797] Bluetooth: hci0: command tx timeout [ 445.570771][ T7793] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 445.578399][ T7793] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 445.605265][ T7793] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 446.159565][ T7793] hsr_slave_0: entered promiscuous mode [ 446.170304][ T7793] hsr_slave_1: entered promiscuous mode [ 446.180593][ T7793] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 446.189984][ T7793] Cannot create hsr debugfs directory [ 446.586370][ T5797] Bluetooth: hci3: command 0x0406 tx timeout [ 447.453887][ T7793] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 447.478431][ T7859] loop5: detected capacity change from 0 to 512 [ 447.500579][ T7859] EXT4-fs (loop5): mounting ext2 file system using the ext4 subsystem [ 447.530895][ T7793] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 447.608416][ T7859] EXT4-fs (loop5): orphan cleanup on readonly fs [ 447.618137][ T7859] EXT4-fs error (device loop5): mb_free_blocks:1948: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt. [ 447.633682][ T7859] EXT4-fs error (device loop5): ext4_do_update_inode:5211: inode #11: comm syz.5.623: corrupted inode contents [ 447.648957][ T52] Bluetooth: hci0: command tx timeout [ 447.649619][ T7793] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 447.689263][ T7859] EXT4-fs error (device loop5): ext4_dirty_inode:6103: inode #11: comm syz.5.623: mark_inode_dirty error [ 447.703832][ T7793] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 447.736867][ T7859] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #11: comm syz.5.623: invalid indirect mapped block 1 (level 1) [ 447.798841][ T7859] EXT4-fs error (device loop5): ext4_do_update_inode:5211: inode #11: comm syz.5.623: corrupted inode contents [ 447.862773][ T7859] EXT4-fs error (device loop5) in ext4_orphan_del:305: Corrupt filesystem [ 447.913117][ T7859] EXT4-fs error (device loop5): ext4_do_update_inode:5211: inode #11: comm syz.5.623: corrupted inode contents [ 447.956806][ T7859] EXT4-fs error (device loop5): ext4_truncate:4255: inode #11: comm syz.5.623: mark_inode_dirty error [ 448.003465][ T7859] EXT4-fs error (device loop5) in ext4_process_orphan:347: Corrupt filesystem [ 448.050225][ T7859] EXT4-fs (loop5): 1 truncate cleaned up [ 448.058938][ T7859] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 448.412214][ T6409] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 448.913639][ T7793] 8021q: adding VLAN 0 to HW filter on device bond0 [ 449.087392][ T3810] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 449.169344][ T7793] 8021q: adding VLAN 0 to HW filter on device team0 [ 449.230899][ T4249] bridge0: port 1(bridge_slave_0) entered blocking state [ 449.238848][ T4249] bridge0: port 1(bridge_slave_0) entered forwarding state [ 449.323740][ T3810] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 449.424890][ T4671] bridge0: port 2(bridge_slave_1) entered blocking state [ 449.432674][ T4671] bridge0: port 2(bridge_slave_1) entered forwarding state [ 449.512592][ T3810] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 449.695571][ T3810] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 449.711568][ T52] Bluetooth: hci0: command tx timeout [ 450.166089][ T3810] bridge_slave_1: left allmulticast mode [ 450.172042][ T3810] bridge_slave_1: left promiscuous mode [ 450.178976][ T3810] bridge0: port 2(bridge_slave_1) entered disabled state [ 450.242935][ T3810] bridge_slave_0: left allmulticast mode [ 450.249252][ T3810] bridge_slave_0: left promiscuous mode [ 450.256139][ T3810] bridge0: port 1(bridge_slave_0) entered disabled state [ 450.926595][ T3810] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 450.977401][ T3810] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 451.005513][ T3810] bond0 (unregistering): Released all slaves [ 451.720238][ T3810] hsr_slave_0: left promiscuous mode [ 451.771408][ T3810] hsr_slave_1: left promiscuous mode [ 451.784709][ T3810] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 451.792859][ T3810] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 451.829059][ T3810] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 451.837690][ T3810] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 451.909645][ T3810] veth1_macvtap: left promiscuous mode [ 451.915649][ T3810] veth0_macvtap: left promiscuous mode [ 451.923288][ T3810] veth1_vlan: left promiscuous mode [ 451.929155][ T3810] veth0_vlan: left promiscuous mode [ 452.639407][ T3810] team0 (unregistering): Port device team_slave_1 removed [ 452.713656][ T3810] team0 (unregistering): Port device team_slave_0 removed [ 453.159983][ T5797] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 453.170171][ T5797] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 453.182522][ T5797] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 453.238373][ T7793] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 453.447402][ T5797] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 453.460672][ T5797] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 454.040513][ T7793] veth0_vlan: entered promiscuous mode [ 454.180779][ T7793] veth1_vlan: entered promiscuous mode [ 454.665780][ T7793] veth0_macvtap: entered promiscuous mode [ 454.691728][ T7912] netlink: 4 bytes leftover after parsing attributes in process `syz.6.641'. [ 454.771914][ T7912] erspan0: entered promiscuous mode [ 454.777858][ T7912] macvtap1: entered promiscuous mode [ 454.784116][ T7912] macvtap1: entered allmulticast mode [ 454.789960][ T7912] erspan0: entered allmulticast mode [ 454.854370][ T7793] veth1_macvtap: entered promiscuous mode [ 454.874097][ T7896] chnl_net:caif_netlink_parms(): no params data found [ 454.957227][ T7913] erspan0: left allmulticast mode [ 454.963416][ T7913] erspan0: left promiscuous mode [ 455.052580][ T7793] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 455.063584][ T7793] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 455.074018][ T7793] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 455.085002][ T7793] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 455.100561][ T7793] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 455.289652][ T7793] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 455.300530][ T7793] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 455.310892][ T7793] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 455.321920][ T7793] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 455.337198][ T7793] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 455.512105][ T7793] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 455.522599][ T7793] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 455.530208][ T7916] netlink: 4 bytes leftover after parsing attributes in process `syz.4.643'. [ 455.531843][ T7793] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 455.551725][ T7793] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 455.570779][ T5797] Bluetooth: hci3: command tx timeout [ 455.579231][ T7916] tipc: Started in network mode [ 455.584436][ T7916] tipc: Node identity ac14140f, cluster identity 4711 [ 455.592303][ T7916] tipc: New replicast peer: 255.255.255.255 [ 455.602596][ T7916] tipc: Enabled bearer , priority 10 [ 456.044873][ T7896] bridge0: port 1(bridge_slave_0) entered blocking state [ 456.052745][ T7896] bridge0: port 1(bridge_slave_0) entered disabled state [ 456.060817][ T7896] bridge_slave_0: entered allmulticast mode [ 456.070750][ T7896] bridge_slave_0: entered promiscuous mode [ 456.095177][ T7896] bridge0: port 2(bridge_slave_1) entered blocking state [ 456.104949][ T7896] bridge0: port 2(bridge_slave_1) entered disabled state [ 456.115694][ T7896] bridge_slave_1: entered allmulticast mode [ 456.125564][ T7896] bridge_slave_1: entered promiscuous mode [ 456.250523][ T7896] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 456.276107][ T7896] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 456.388678][ T7896] team0: Port device team_slave_0 added [ 456.428693][ T7896] team0: Port device team_slave_1 added [ 456.548961][ T7896] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 456.556402][ T7896] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 456.582826][ T7896] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 456.608891][ T7896] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 456.616318][ T7896] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 456.642920][ T7896] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 456.726447][ T24] tipc: Node number set to 2886997007 [ 456.851189][ T7896] hsr_slave_0: entered promiscuous mode [ 456.861803][ T7896] hsr_slave_1: entered promiscuous mode [ 456.875026][ T7896] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 456.883041][ T7896] Cannot create hsr debugfs directory [ 457.419893][ T7896] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 457.458512][ T7896] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 457.499006][ T7896] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 457.531013][ T7896] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 457.626878][ T5797] Bluetooth: hci3: command tx timeout [ 458.023317][ T7896] 8021q: adding VLAN 0 to HW filter on device bond0 [ 458.127917][ T7896] 8021q: adding VLAN 0 to HW filter on device team0 [ 458.175034][ T4249] bridge0: port 1(bridge_slave_0) entered blocking state [ 458.182781][ T4249] bridge0: port 1(bridge_slave_0) entered forwarding state [ 458.251662][ T4249] bridge0: port 2(bridge_slave_1) entered blocking state [ 458.259359][ T4249] bridge0: port 2(bridge_slave_1) entered forwarding state [ 458.711410][ T4671] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 458.719708][ T4671] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 458.818726][ T4331] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 458.827218][ T4331] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 459.179858][ T7896] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 459.425080][ T3688] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 459.562949][ T3688] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 459.708653][ T5797] Bluetooth: hci3: command tx timeout [ 459.795435][ T3688] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 459.903189][ T3688] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 460.174071][ T3688] bridge_slave_1: left allmulticast mode [ 460.180398][ T3688] bridge_slave_1: left promiscuous mode [ 460.187406][ T3688] bridge0: port 2(bridge_slave_1) entered disabled state [ 460.209729][ T3688] bridge_slave_0: left allmulticast mode [ 460.215690][ T3688] bridge_slave_0: left promiscuous mode [ 460.223194][ T3688] bridge0: port 1(bridge_slave_0) entered disabled state [ 460.722254][ T3688] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 460.741075][ T3688] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 460.771011][ T3688] bond0 (unregistering): Released all slaves [ 461.242420][ T7896] veth0_vlan: entered promiscuous mode [ 461.321530][ T3688] hsr_slave_0: left promiscuous mode [ 461.329760][ T3688] hsr_slave_1: left promiscuous mode [ 461.339424][ T3688] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 461.347417][ T3688] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 461.358155][ T3688] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 461.365828][ T3688] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 461.398927][ T3688] veth1_macvtap: left promiscuous mode [ 461.404695][ T3688] veth0_macvtap: left promiscuous mode [ 461.410846][ T3688] veth1_vlan: left promiscuous mode [ 461.418540][ T3688] veth0_vlan: left promiscuous mode [ 461.786719][ T5797] Bluetooth: hci3: command tx timeout [ 462.094762][ T3688] team0 (unregistering): Port device team_slave_1 removed [ 462.167368][ T3688] team0 (unregistering): Port device team_slave_0 removed [ 462.533985][ T52] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 462.545577][ T52] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 462.555616][ T52] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 462.570123][ T52] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 462.601228][ T7896] veth1_vlan: entered promiscuous mode [ 462.679480][ T52] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 462.953889][ T7896] veth0_macvtap: entered promiscuous mode [ 462.997059][ T7896] veth1_macvtap: entered promiscuous mode [ 463.087278][ T7896] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 463.098179][ T7896] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 463.108450][ T7896] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 463.120565][ T7896] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 463.140934][ T7896] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 463.272649][ T7896] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 463.283693][ T7896] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 463.294991][ T7896] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 463.305737][ T7896] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 463.320914][ T7896] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 463.426721][ T7896] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 463.435844][ T7896] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 463.445244][ T7896] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 463.454571][ T7896] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 463.673079][ T7954] chnl_net:caif_netlink_parms(): no params data found [ 464.265841][ T7954] bridge0: port 1(bridge_slave_0) entered blocking state [ 464.273704][ T7954] bridge0: port 1(bridge_slave_0) entered disabled state [ 464.281827][ T7954] bridge_slave_0: entered allmulticast mode [ 464.291924][ T7954] bridge_slave_0: entered promiscuous mode [ 464.322885][ T7954] bridge0: port 2(bridge_slave_1) entered blocking state [ 464.330836][ T7954] bridge0: port 2(bridge_slave_1) entered disabled state [ 464.339112][ T7954] bridge_slave_1: entered allmulticast mode [ 464.349216][ T7954] bridge_slave_1: entered promiscuous mode [ 464.470611][ T7954] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 464.496533][ T7954] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 464.681210][ T7954] team0: Port device team_slave_0 added [ 464.717031][ T7954] team0: Port device team_slave_1 added [ 464.760669][ T52] Bluetooth: hci0: command tx timeout [ 464.832864][ T7954] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 464.840355][ T7954] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 464.868302][ T7954] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 464.925006][ T7954] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 464.933161][ T7954] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 464.959924][ T7954] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 465.175403][ T7954] hsr_slave_0: entered promiscuous mode [ 465.197289][ T7954] hsr_slave_1: entered promiscuous mode [ 465.208282][ T7954] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 465.217525][ T7954] Cannot create hsr debugfs directory [ 466.144622][ T4671] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 466.152750][ T4671] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 466.229847][ T7954] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 466.257679][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 466.265788][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 466.288080][ T7954] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 466.337019][ T7954] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 466.362912][ T7954] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 466.826413][ T52] Bluetooth: hci0: command tx timeout [ 466.886656][ T7987] loop4: detected capacity change from 0 to 2048 [ 466.951797][ T7987] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 466.997241][ T7996] loop7: detected capacity change from 0 to 256 [ 467.112827][ T7954] 8021q: adding VLAN 0 to HW filter on device bond0 [ 467.206302][ T7954] 8021q: adding VLAN 0 to HW filter on device team0 [ 467.286361][ T7987] loop4: detected capacity change from 2048 to 0 [ 467.297791][ T7985] bio_check_eod: 7 callbacks suppressed [ 467.297871][ T7985] syz.4.656: attempt to access beyond end of device [ 467.297871][ T7985] loop4: rw=12288, sector=12, nr_sectors = 4 limit=0 [ 467.317575][ T7985] EXT4-fs error (device loop4): ext4_read_inode_bitmap:203: comm syz.4.656: Cannot read inode bitmap - block_group = 0, inode_bitmap = 3 [ 467.321436][ T4249] bridge0: port 1(bridge_slave_0) entered blocking state [ 467.337766][ T7985] syz.4.656: attempt to access beyond end of device [ 467.337766][ T7985] loop4: rw=145409, sector=0, nr_sectors = 4 limit=0 [ 467.339447][ T4249] bridge0: port 1(bridge_slave_0) entered forwarding state [ 467.354403][ T7985] Buffer I/O error on dev loop4, logical block 0, lost sync page write [ 467.368787][ T7985] EXT4-fs (loop4): I/O error while writing superblock [ 467.376235][ T7985] EXT4-fs error (device loop4) in ext4_free_inode:361: IO failure [ 467.384400][ T7985] syz.4.656: attempt to access beyond end of device [ 467.384400][ T7985] loop4: rw=145409, sector=0, nr_sectors = 4 limit=0 [ 467.398136][ T7985] Buffer I/O error on dev loop4, logical block 0, lost sync page write [ 467.406857][ T7985] EXT4-fs (loop4): I/O error while writing superblock [ 467.580016][ T4249] bridge0: port 2(bridge_slave_1) entered blocking state [ 467.587796][ T4249] bridge0: port 2(bridge_slave_1) entered forwarding state [ 467.779866][ T7954] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 467.791302][ T7954] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 467.888839][ T5803] EXT4-fs error (device loop4): ext4_check_bdev_write_error:227: comm syz-executor: Error while async write back metadata [ 467.902569][ T5803] syz-executor: attempt to access beyond end of device [ 467.902569][ T5803] loop4: rw=145409, sector=0, nr_sectors = 4 limit=0 [ 467.918274][ T5803] Buffer I/O error on dev loop4, logical block 0, lost sync page write [ 467.927920][ T5803] EXT4-fs (loop4): I/O error while writing superblock [ 467.988383][ T5803] syz-executor: attempt to access beyond end of device [ 467.988383][ T5803] loop4: rw=12288, sector=128, nr_sectors = 4 limit=0 [ 468.002783][ T5803] EXT4-fs error (device loop4): ext4_check_bdev_write_error:227: comm syz-executor: Error while async write back metadata [ 468.016320][ T5803] syz-executor: attempt to access beyond end of device [ 468.016320][ T5803] loop4: rw=145409, sector=0, nr_sectors = 4 limit=0 [ 468.030295][ T5803] Buffer I/O error on dev loop4, logical block 0, lost sync page write [ 468.041312][ T5803] EXT4-fs (loop4): I/O error while writing superblock [ 468.169950][ T5803] syz-executor: attempt to access beyond end of device [ 468.169950][ T5803] loop4: rw=12288, sector=128, nr_sectors = 4 limit=0 [ 468.184093][ T5803] EXT4-fs warning (device loop4): ext4_empty_dir:3080: inode #11: lblock 0: comm syz-executor: error -5 reading directory block [ 468.203471][ T5803] syz-executor: attempt to access beyond end of device [ 468.203471][ T5803] loop4: rw=12288, sector=128, nr_sectors = 4 limit=0 [ 468.221782][ T5803] syz-executor: attempt to access beyond end of device [ 468.221782][ T5803] loop4: rw=12288, sector=128, nr_sectors = 4 limit=0 [ 468.236475][ T5803] EXT4-fs warning (device loop4): ext4_empty_dir:3080: inode #11: lblock 0: comm syz-executor: error -5 reading directory block [ 468.408137][ T5803] syz-executor: attempt to access beyond end of device [ 468.408137][ T5803] loop4: rw=12288, sector=128, nr_sectors = 4 limit=0 [ 468.491971][ T5803] EXT4-fs warning (device loop4): ext4_empty_dir:3080: inode #11: lblock 0: comm syz-executor: error -5 reading directory block [ 468.540393][ T5803] EXT4-fs warning (device loop4): ext4_empty_dir:3080: inode #11: lblock 0: comm syz-executor: error -5 reading directory block [ 468.618888][ T5803] EXT4-fs warning (device loop4): ext4_empty_dir:3080: inode #11: lblock 0: comm syz-executor: error -5 reading directory block [ 468.688744][ T5803] EXT4-fs warning (device loop4): ext4_empty_dir:3080: inode #11: lblock 0: comm syz-executor: error -5 reading directory block [ 468.736876][ T5803] EXT4-fs warning (device loop4): ext4_empty_dir:3080: inode #11: lblock 0: comm syz-executor: error -5 reading directory block [ 468.788350][ T5803] EXT4-fs warning (device loop4): ext4_empty_dir:3080: inode #11: lblock 0: comm syz-executor: error -5 reading directory block [ 468.837669][ T5803] EXT4-fs warning (device loop4): ext4_empty_dir:3080: inode #11: lblock 0: comm syz-executor: error -5 reading directory block [ 468.897114][ T5803] EXT4-fs warning (device loop4): ext4_empty_dir:3080: inode #11: lblock 0: comm syz-executor: error -5 reading directory block [ 468.936646][ T52] Bluetooth: hci0: command tx timeout [ 469.262018][ T7954] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 469.538098][ T5803] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 469.617615][ T5803] Buffer I/O error on dev loop4, logical block 0, lost sync page write [ 469.627366][ T5803] EXT4-fs (loop4): I/O error while writing superblock [ 469.649005][ T7993] Buffer I/O error on dev loop4, logical block 64, lost sync page write [ 469.768736][ T7954] veth0_vlan: entered promiscuous mode [ 469.922872][ T7954] veth1_vlan: entered promiscuous mode [ 470.140343][ T1284] ieee802154 phy0 wpan0: encryption failed: -22 [ 470.147327][ T1284] ieee802154 phy1 wpan1: encryption failed: -22 [ 470.180102][ T3688] bridge_slave_1: left allmulticast mode [ 470.190206][ T3688] bridge_slave_1: left promiscuous mode [ 470.197046][ T3688] bridge0: port 2(bridge_slave_1) entered disabled state [ 470.232682][ T3688] bridge_slave_0: left allmulticast mode [ 470.238899][ T3688] bridge_slave_0: left promiscuous mode [ 470.245656][ T3688] bridge0: port 1(bridge_slave_0) entered disabled state [ 470.607287][ T3688] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 470.678764][ T3688] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 470.721669][ T3688] bond0 (unregistering): Released all slaves [ 470.890877][ T7954] veth0_macvtap: entered promiscuous mode [ 470.940609][ T7954] veth1_macvtap: entered promiscuous mode [ 470.952450][ T3688] tipc: Disabling bearer [ 470.958618][ T3688] tipc: Left network mode [ 470.987593][ T52] Bluetooth: hci0: command tx timeout [ 471.198024][ T7954] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 471.209574][ T7954] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 471.219979][ T7954] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 471.236401][ T7954] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 471.248451][ T7954] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 471.259380][ T7954] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 471.275386][ T7954] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 471.338864][ T3688] hsr_slave_0: left promiscuous mode [ 471.351666][ T3688] hsr_slave_1: left promiscuous mode [ 471.363237][ T3688] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 471.401129][ T3688] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 472.217254][ T7954] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 472.228157][ T7954] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 472.238578][ T7954] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 472.254670][ T7954] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 472.266480][ T7954] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 472.278700][ T7954] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 472.293931][ T7954] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 472.524001][ T7954] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 472.534126][ T7954] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 472.543535][ T7954] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 472.552940][ T7954] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 473.218108][ T5797] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 473.229052][ T5797] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 473.248875][ T5797] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 473.268098][ T5797] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 473.293831][ T5797] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 474.266293][ T5797] block nbd6: Receive control failed (result -32) [ 474.273934][ T52] block nbd6: Receive control failed (result -32) [ 474.288471][ T8033] block nbd6: shutting down sockets [ 474.632939][ T8024] chnl_net:caif_netlink_parms(): no params data found [ 475.019745][ T8054] loop7: detected capacity change from 0 to 24 [ 475.090295][ T8054] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 475.183829][ T8054] overlayfs: fs on './file0/../file0' does not support file handles, falling back to index=off,nfs_export=off. [ 475.386432][ T52] Bluetooth: hci4: command tx timeout [ 475.878593][ T8024] bridge0: port 1(bridge_slave_0) entered blocking state [ 475.886535][ T8024] bridge0: port 1(bridge_slave_0) entered disabled state [ 475.894330][ T8024] bridge_slave_0: entered allmulticast mode [ 475.904321][ T8024] bridge_slave_0: entered promiscuous mode [ 475.944723][ T8024] bridge0: port 2(bridge_slave_1) entered blocking state [ 475.952719][ T8024] bridge0: port 2(bridge_slave_1) entered disabled state [ 475.960885][ T8024] bridge_slave_1: entered allmulticast mode [ 475.971212][ T8024] bridge_slave_1: entered promiscuous mode [ 476.019690][ T8066] loop7: detected capacity change from 0 to 512 [ 476.178369][ T8066] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 476.259102][ T8024] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 476.282413][ T8024] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 476.503650][ T8024] team0: Port device team_slave_0 added [ 476.539898][ T8024] team0: Port device team_slave_1 added [ 476.626352][ T7896] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 476.811119][ T8024] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 476.819395][ T8024] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 476.846054][ T8024] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 476.924110][ T8024] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 476.931611][ T8024] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 476.963528][ T8024] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 477.461711][ T8024] hsr_slave_0: entered promiscuous mode [ 477.476432][ T52] Bluetooth: hci4: command tx timeout [ 477.482152][ T8024] hsr_slave_1: entered promiscuous mode [ 477.872325][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 477.881763][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 478.022963][ T4190] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 478.031362][ T4190] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 478.336998][ T8088] loop7: detected capacity change from 0 to 2048 [ 478.356641][ T8088] NILFS (loop7): broken superblock, retrying with spare superblock (blocksize = 1024) [ 478.422769][ T8090] NILFS (loop7): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 478.518497][ T30] kauditd_printk_skb: 7 callbacks suppressed [ 478.518577][ T30] audit: type=1800 audit(1746044487.594:23): pid=8088 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.673" name="file1" dev="loop7" ino=15 res=0 errno=0 [ 478.901790][ T4331] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 479.104674][ T4331] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 479.315276][ T4331] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 479.546902][ T52] Bluetooth: hci4: command tx timeout [ 479.562518][ T4331] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 479.617135][ T8024] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 479.681678][ T8024] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 479.777773][ T8024] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 479.889216][ T8024] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 479.917394][ T4331] bridge_slave_1: left allmulticast mode [ 479.923345][ T4331] bridge_slave_1: left promiscuous mode [ 479.932791][ T4331] bridge0: port 2(bridge_slave_1) entered disabled state [ 479.962389][ T4331] bridge_slave_0: left allmulticast mode [ 479.968596][ T4331] bridge_slave_0: left promiscuous mode [ 479.975320][ T4331] bridge0: port 1(bridge_slave_0) entered disabled state [ 480.499563][ T4331] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 480.533345][ T4331] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 480.561476][ T4331] bond0 (unregistering): Released all slaves [ 481.003755][ T4331] hsr_slave_0: left promiscuous mode [ 481.012291][ T4331] hsr_slave_1: left promiscuous mode [ 481.020846][ T4331] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 481.031008][ T4331] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 481.058558][ T4331] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 481.069452][ T4331] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 481.098762][ T4331] veth1_macvtap: left promiscuous mode [ 481.104469][ T4331] veth0_macvtap: left promiscuous mode [ 481.110789][ T4331] veth1_vlan: left promiscuous mode [ 481.116633][ T4331] veth0_vlan: left promiscuous mode [ 481.659486][ T52] Bluetooth: hci4: command tx timeout [ 481.798626][ T4331] team0 (unregistering): Port device team_slave_1 removed [ 481.831722][ T4331] team0 (unregistering): Port device team_slave_0 removed [ 482.364273][ T8103] loop7: detected capacity change from 0 to 2048 [ 482.580432][ T8103] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 482.598666][ T8103] ext4 filesystem being mounted at /10/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 482.650322][ T8024] 8021q: adding VLAN 0 to HW filter on device bond0 [ 482.708458][ T8024] 8021q: adding VLAN 0 to HW filter on device team0 [ 482.743424][ T4190] bridge0: port 1(bridge_slave_0) entered blocking state [ 482.751114][ T4190] bridge0: port 1(bridge_slave_0) entered forwarding state [ 482.834397][ T4190] bridge0: port 2(bridge_slave_1) entered blocking state [ 482.842102][ T4190] bridge0: port 2(bridge_slave_1) entered forwarding state [ 483.127228][ T5797] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 483.139569][ T5797] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 483.155072][ T5797] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 483.183888][ T5797] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 483.205494][ T5797] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 483.405674][ T7896] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 484.252363][ T8110] chnl_net:caif_netlink_parms(): no params data found [ 485.019094][ T8024] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 485.316155][ T52] Bluetooth: hci0: command tx timeout [ 485.907311][ T8110] bridge0: port 1(bridge_slave_0) entered blocking state [ 485.914960][ T8110] bridge0: port 1(bridge_slave_0) entered disabled state [ 485.925511][ T8110] bridge_slave_0: entered allmulticast mode [ 485.935472][ T8110] bridge_slave_0: entered promiscuous mode [ 485.999782][ T8110] bridge0: port 2(bridge_slave_1) entered blocking state [ 486.010150][ T8110] bridge0: port 2(bridge_slave_1) entered disabled state [ 486.018246][ T8110] bridge_slave_1: entered allmulticast mode [ 486.028248][ T8110] bridge_slave_1: entered promiscuous mode [ 486.226218][ T8110] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 486.289003][ T8110] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 486.592935][ T8110] team0: Port device team_slave_0 added [ 486.644085][ T8110] team0: Port device team_slave_1 added [ 486.905044][ T8110] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 486.912528][ T8110] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 486.939220][ T8110] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 486.952288][ T24] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 487.008604][ T8110] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 487.015827][ T8110] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 487.042928][ T8110] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 487.200384][ T24] usb 8-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 487.211795][ T24] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 487.223317][ T24] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 487.233683][ T24] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 487.285801][ T24] usb 8-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 487.295779][ T24] usb 8-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 487.305241][ T24] usb 8-1: Manufacturer: syz [ 487.338801][ T24] usb 8-1: config 0 descriptor?? [ 487.393603][ T52] Bluetooth: hci0: command tx timeout [ 487.414420][ T8024] veth0_vlan: entered promiscuous mode [ 487.462454][ T8110] hsr_slave_0: entered promiscuous mode [ 487.477348][ T8110] hsr_slave_1: entered promiscuous mode [ 487.488574][ T8110] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 487.496822][ T8110] Cannot create hsr debugfs directory [ 487.540598][ T8024] veth1_vlan: entered promiscuous mode [ 487.783473][ T24] appleir 0003:05AC:8243.0005: unknown main item tag 0x0 [ 487.845616][ T24] appleir 0003:05AC:8243.0005: No inputs registered, leaving [ 487.897539][ T24] appleir 0003:05AC:8243.0005: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.7-1/input0 [ 487.922530][ T8024] veth0_macvtap: entered promiscuous mode [ 488.025164][ T8024] veth1_macvtap: entered promiscuous mode [ 488.138990][ T8024] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 488.149986][ T8024] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 488.160352][ T8024] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 488.171362][ T8024] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 488.181533][ T8024] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 488.193509][ T8024] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 488.209525][ T8024] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 488.299178][ T8024] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 488.310124][ T8024] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 488.320502][ T8024] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 488.332686][ T8024] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 488.343238][ T8024] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 488.354332][ T8024] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 488.369724][ T8024] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 488.547812][ T8024] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 488.557207][ T8024] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 488.566468][ T8024] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 488.575563][ T8024] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 489.477230][ T52] Bluetooth: hci0: command tx timeout [ 489.504098][ T8110] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 489.609404][ T8110] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 489.636466][ T45] usb 8-1: reset high-speed USB device number 2 using dummy_hcd [ 489.695310][ T8110] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 489.743551][ T8110] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 489.806954][ T45] usb 8-1: device descriptor read/64, error -32 [ 490.056609][ T45] usb 8-1: reset high-speed USB device number 2 using dummy_hcd [ 490.675660][ T8186] loop7: detected capacity change from 0 to 128 [ 490.683250][ T8110] 8021q: adding VLAN 0 to HW filter on device bond0 [ 490.882001][ T8110] 8021q: adding VLAN 0 to HW filter on device team0 [ 490.927490][ T24] usb 8-1: USB disconnect, device number 2 [ 491.052863][ T4671] bridge0: port 1(bridge_slave_0) entered blocking state [ 491.060608][ T4671] bridge0: port 1(bridge_slave_0) entered forwarding state [ 491.183503][ T4671] bridge0: port 2(bridge_slave_1) entered blocking state [ 491.191221][ T4671] bridge0: port 2(bridge_slave_1) entered forwarding state [ 491.555735][ T52] Bluetooth: hci0: command tx timeout [ 493.003307][ T8110] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 493.497705][ T8212] gretap0: entered promiscuous mode [ 493.505224][ T8212] vlan2: entered promiscuous mode [ 493.649774][ T8110] veth0_vlan: entered promiscuous mode [ 493.778638][ T8110] veth1_vlan: entered promiscuous mode [ 494.094902][ T8110] veth0_macvtap: entered promiscuous mode [ 494.202933][ T8110] veth1_macvtap: entered promiscuous mode [ 494.333378][ T8110] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 494.346554][ T8110] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 494.358082][ T8110] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 494.370013][ T8110] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 494.380548][ T8110] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 494.391383][ T8110] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 494.401705][ T8110] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 494.412571][ T8110] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 494.433479][ T8110] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 494.637267][ T8110] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 494.648417][ T8110] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 494.658668][ T8110] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 494.673160][ T8110] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 494.684998][ T8110] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 494.696294][ T8110] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 494.706629][ T8110] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 494.717396][ T8110] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 494.732849][ T8110] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 494.761051][ T8110] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 494.772269][ T8110] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 494.782804][ T8110] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 494.792485][ T8110] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 495.131252][ T159] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 495.139667][ T159] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 495.454099][ T4671] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 495.462610][ T4671] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 501.069517][ T24] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 501.113678][ T3810] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 501.122300][ T3810] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 501.267532][ T24] usb 8-1: Using ep0 maxpacket: 16 [ 501.290576][ T24] usb 8-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 501.302738][ T24] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 501.381737][ T24] usb 8-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 501.392978][ T24] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 501.402450][ T24] usb 8-1: Product: syz [ 501.407067][ T24] usb 8-1: Manufacturer: syz [ 501.411940][ T24] usb 8-1: SerialNumber: syz [ 501.472948][ T3942] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 501.483013][ T3942] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 501.678781][ T24] usb 8-1: config 0 descriptor?? [ 501.717359][ T24] em28xx 8-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 501.727050][ T24] em28xx 8-1:0.0: Audio interface 0 found (Vendor Class) [ 501.733195][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 501.749567][ T0] NOHZ tick-stop error: local softirq work is pending, handler #242!!! [ 501.808445][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 502.308693][ T24] em28xx 8-1:0.0: unknown em28xx chip ID (0) [ 502.318447][ T24] em28xx 8-1:0.0: Config register raw data: 0xea [ 502.324976][ T24] em28xx 8-1:0.0: I2S Audio (1 sample rate(s)) [ 502.331732][ T24] em28xx 8-1:0.0: No AC97 audio processor [ 502.831760][ T4671] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 502.935212][ T24] usb 8-1: USB disconnect, device number 3 [ 503.047754][ T4671] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 503.179875][ T4671] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 503.328620][ T4671] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 503.740439][ T4671] bridge_slave_1: left allmulticast mode [ 503.747690][ T4671] bridge_slave_1: left promiscuous mode [ 503.754303][ T4671] bridge0: port 2(bridge_slave_1) entered disabled state [ 503.827450][ T4671] bridge_slave_0: left allmulticast mode [ 503.833390][ T4671] bridge_slave_0: left promiscuous mode [ 503.840277][ T4671] bridge0: port 1(bridge_slave_0) entered disabled state [ 504.408844][ T4671] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 504.443508][ T4671] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 504.459280][ T4671] bond0 (unregistering): Released all slaves [ 504.868547][ T4671] hsr_slave_0: left promiscuous mode [ 504.906861][ T4671] hsr_slave_1: left promiscuous mode [ 504.919374][ T4671] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 504.927387][ T4671] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 504.939191][ T4671] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 504.947212][ T4671] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 504.973418][ T4671] veth1_macvtap: left promiscuous mode [ 504.979851][ T4671] veth0_macvtap: left promiscuous mode [ 504.985705][ T4671] veth1_vlan: left promiscuous mode [ 504.992123][ T4671] veth0_vlan: left promiscuous mode [ 505.572612][ T4671] team0 (unregistering): Port device team_slave_1 removed [ 505.643100][ T4671] team0 (unregistering): Port device team_slave_0 removed [ 506.351333][ T8325] netlink: 4 bytes leftover after parsing attributes in process `syz.4.743'. [ 506.819433][ T8329] netlink: 'syz.0.745': attribute type 1 has an invalid length. [ 506.919126][ T5797] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 506.974001][ T5797] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 506.997141][ T5797] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 507.028725][ T8333] bond2: (slave gretap1): making interface the new active one [ 507.040146][ T8333] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 507.082507][ T5797] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 507.105095][ T5797] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 507.855721][ T8331] chnl_net:caif_netlink_parms(): no params data found [ 509.073865][ T8331] bridge0: port 1(bridge_slave_0) entered blocking state [ 509.081724][ T8331] bridge0: port 1(bridge_slave_0) entered disabled state [ 509.090025][ T8331] bridge_slave_0: entered allmulticast mode [ 509.100311][ T8331] bridge_slave_0: entered promiscuous mode [ 509.151487][ T52] Bluetooth: hci0: command tx timeout [ 509.162465][ T8331] bridge0: port 2(bridge_slave_1) entered blocking state [ 509.170460][ T8331] bridge0: port 2(bridge_slave_1) entered disabled state [ 509.178482][ T8331] bridge_slave_1: entered allmulticast mode [ 509.188235][ T8331] bridge_slave_1: entered promiscuous mode [ 509.218958][ T8362] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 509.347480][ T8331] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 509.393907][ T8331] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 509.765568][ T8368] tipc: Failed to remove unknown binding: 66,1,1/0:2350263171/2350263173 [ 509.768906][ T8331] team0: Port device team_slave_0 added [ 509.774515][ T8368] tipc: Failed to remove unknown binding: 66,1,1/0:2350263171/2350263173 [ 509.847066][ T8331] team0: Port device team_slave_1 added [ 510.148423][ T8331] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 510.155851][ T8331] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 510.183575][ T8331] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 510.354855][ T8331] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 510.362742][ T8331] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 510.389478][ T8331] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 510.830720][ T8331] hsr_slave_0: entered promiscuous mode [ 510.857788][ T8331] hsr_slave_1: entered promiscuous mode [ 510.868400][ T8331] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 510.876547][ T8331] Cannot create hsr debugfs directory [ 511.164735][ T3810] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 511.236733][ T5797] Bluetooth: hci0: command tx timeout [ 511.321645][ T3810] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 511.460690][ T3810] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 511.640663][ T3810] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 511.814165][ T8379] loop7: detected capacity change from 0 to 4096 [ 511.823234][ C0] vcan0: j1939_tp_rxtimer: 0xffff88804fd30200: rx timeout, send abort [ 511.833302][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88804fd30200: 0x2f000: (3) A timeout occurred and this is the connection abort to close the session. [ 512.057651][ T3810] bridge_slave_1: left allmulticast mode [ 512.063595][ T3810] bridge_slave_1: left promiscuous mode [ 512.070523][ T3810] bridge0: port 2(bridge_slave_1) entered disabled state [ 512.153416][ T3810] bridge_slave_0: left allmulticast mode [ 512.159664][ T3810] bridge_slave_0: left promiscuous mode [ 512.166628][ T3810] bridge0: port 1(bridge_slave_0) entered disabled state [ 512.361749][ T8379] ntfs3(loop7): Failed to load $Extend (-22). [ 512.368540][ T8379] ntfs3(loop7): Failed to initialize $Extend. [ 512.758300][ T3810] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 512.777397][ T3810] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 512.810249][ T3810] bond0 (unregistering): Released all slaves [ 512.865472][ T8379] netlink: 'syz.7.763': attribute type 12 has an invalid length. [ 512.873840][ T8379] netlink: 'syz.7.763': attribute type 29 has an invalid length. [ 512.883625][ T8379] netlink: 148 bytes leftover after parsing attributes in process `syz.7.763'. [ 512.895748][ T8379] netlink: 51 bytes leftover after parsing attributes in process `syz.7.763'. [ 513.146914][ T5797] Bluetooth: hci1: command 0x0406 tx timeout [ 513.318432][ T52] Bluetooth: hci0: command tx timeout [ 513.511113][ T3810] hsr_slave_0: left promiscuous mode [ 513.549263][ T3810] hsr_slave_1: left promiscuous mode [ 513.557927][ T3810] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 513.565704][ T3810] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 513.629798][ T3810] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 513.637873][ T3810] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 513.687152][ T3810] veth1_macvtap: left promiscuous mode [ 513.692989][ T3810] veth0_macvtap: left promiscuous mode [ 513.699335][ T3810] veth1_vlan: left promiscuous mode [ 513.705070][ T3810] veth0_vlan: left promiscuous mode [ 514.276955][ T5797] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 514.294042][ T5797] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 514.315163][ T5797] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 514.342937][ T5797] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 514.362462][ T5797] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 514.966772][ T3810] team0 (unregistering): Port device team_slave_1 removed [ 515.031605][ T3810] team0 (unregistering): Port device team_slave_0 removed [ 515.430786][ T5797] Bluetooth: hci0: command tx timeout [ 516.708590][ T5797] Bluetooth: hci4: command tx timeout [ 517.290110][ T8331] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 518.010434][ T8331] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 518.158017][ T8331] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 518.299156][ T8331] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 518.547922][ T8387] chnl_net:caif_netlink_parms(): no params data found [ 518.817202][ T5797] Bluetooth: hci4: command tx timeout [ 520.848370][ T5797] Bluetooth: hci4: command tx timeout [ 521.432977][ T8331] 8021q: adding VLAN 0 to HW filter on device bond0 [ 521.594119][ T8433] netlink: 4 bytes leftover after parsing attributes in process `syz.7.779'. [ 521.622898][ T8433] netlink: 16 bytes leftover after parsing attributes in process `syz.7.779'. [ 521.631753][ T8331] 8021q: adding VLAN 0 to HW filter on device team0 [ 521.778131][ T4331] bridge0: port 1(bridge_slave_0) entered blocking state [ 521.785886][ T4331] bridge0: port 1(bridge_slave_0) entered forwarding state [ 521.802495][ T4331] bridge0: port 2(bridge_slave_1) entered blocking state [ 521.810254][ T4331] bridge0: port 2(bridge_slave_1) entered forwarding state [ 522.465726][ T8390] Set syz1 is full, maxelem 65536 reached [ 522.675104][ T8387] bridge0: port 1(bridge_slave_0) entered blocking state [ 522.686147][ T8387] bridge0: port 1(bridge_slave_0) entered disabled state [ 522.694080][ T8387] bridge_slave_0: entered allmulticast mode [ 522.704048][ T8387] bridge_slave_0: entered promiscuous mode [ 522.801171][ T8387] bridge0: port 2(bridge_slave_1) entered blocking state [ 522.809332][ T8387] bridge0: port 2(bridge_slave_1) entered disabled state [ 522.817341][ T8387] bridge_slave_1: entered allmulticast mode [ 522.827478][ T8387] bridge_slave_1: entered promiscuous mode [ 522.908517][ T5797] Bluetooth: hci4: command tx timeout [ 523.166489][ T8387] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 523.249892][ T8387] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 523.595770][ T8387] team0: Port device team_slave_0 added [ 523.669573][ T8387] team0: Port device team_slave_1 added [ 523.957757][ T8387] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 523.966486][ T8387] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 523.993021][ T8387] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 524.010766][ T8387] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 524.018778][ T8387] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 524.045627][ T8387] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 524.529193][ T8387] hsr_slave_0: entered promiscuous mode [ 524.539920][ T8387] hsr_slave_1: entered promiscuous mode [ 524.588053][ T8458] macvlan2: entered promiscuous mode [ 524.593629][ T8458] macvlan2: entered allmulticast mode [ 524.602624][ T8458] bond0: entered promiscuous mode [ 524.608105][ T8458] bond_slave_0: entered promiscuous mode [ 524.615324][ T8458] bond_slave_1: entered promiscuous mode [ 524.625531][ T8458] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 524.700323][ T8458] bond0: left promiscuous mode [ 524.705393][ T8458] bond_slave_0: left promiscuous mode [ 524.713013][ T8458] bond_slave_1: left promiscuous mode [ 525.338933][ T8331] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 525.461081][ T8464] loop7: detected capacity change from 0 to 512 [ 525.660291][ T8464] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=e000c018, mo2=0002] [ 525.683428][ T8464] System zones: 0-2, 18-18, 34-35 [ 525.771396][ T8464] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 525.784924][ T8464] ext4 filesystem being mounted at /42/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 525.999477][ T8331] veth0_vlan: entered promiscuous mode [ 526.029045][ T7896] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 526.239687][ T8331] veth1_vlan: entered promiscuous mode [ 526.348687][ T8387] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 526.462252][ T8387] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 526.537459][ T8387] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 526.582938][ T8331] veth0_macvtap: entered promiscuous mode [ 526.628355][ T8387] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 526.684472][ T8483] netlink: 4 bytes leftover after parsing attributes in process `syz.7.795'. [ 526.718442][ T8331] veth1_macvtap: entered promiscuous mode [ 526.756188][ T8483] netlink: 4 bytes leftover after parsing attributes in process `syz.7.795'. [ 526.853568][ T8483] loop7: detected capacity change from 0 to 128 [ 526.883829][ T8331] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 526.894970][ T8331] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 526.906229][ T8331] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 526.920710][ T8331] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 526.932464][ T8331] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 526.943718][ T8331] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 526.959544][ T8331] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 527.024969][ T8483] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 527.062260][ T8331] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 527.074999][ T8331] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 527.085477][ T8331] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 527.097079][ T8331] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 527.107365][ T8331] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 527.118274][ T8331] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 527.136297][ T8331] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 527.169342][ T8483] ext4 filesystem being mounted at /43/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 527.240314][ T8483] netlink: 4 bytes leftover after parsing attributes in process `syz.7.795'. [ 527.401878][ T8331] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 527.411409][ T8331] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 527.422601][ T8331] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 527.431784][ T8331] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 527.778771][ T7896] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 527.930149][ T8387] 8021q: adding VLAN 0 to HW filter on device bond0 [ 528.133302][ T8387] 8021q: adding VLAN 0 to HW filter on device team0 [ 528.221313][ T4249] bridge0: port 1(bridge_slave_0) entered blocking state [ 528.229133][ T4249] bridge0: port 1(bridge_slave_0) entered forwarding state [ 528.367722][ T4249] bridge0: port 2(bridge_slave_1) entered blocking state [ 528.375342][ T4249] bridge0: port 2(bridge_slave_1) entered forwarding state [ 530.237949][ T8387] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 531.600268][ T1284] ieee802154 phy0 wpan0: encryption failed: -22 [ 531.607266][ T1284] ieee802154 phy1 wpan1: encryption failed: -22 [ 532.025292][ T8387] veth0_vlan: entered promiscuous mode [ 532.198496][ T8387] veth1_vlan: entered promiscuous mode [ 532.572754][ T8387] veth0_macvtap: entered promiscuous mode [ 532.626905][ T5851] usb 8-1: new full-speed USB device number 4 using dummy_hcd [ 532.630618][ T8387] veth1_macvtap: entered promiscuous mode [ 532.733315][ T8561] mmap: syz.0.813 (8561) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 532.813508][ T8387] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 532.824989][ T8387] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 532.835355][ T8387] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 532.846307][ T8387] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 532.856508][ T8387] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 532.859311][ T5851] usb 8-1: config 2 has an invalid interface number: 74 but max is 0 [ 532.871360][ T8387] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 532.877221][ T5851] usb 8-1: config 2 has no interface number 0 [ 532.877355][ T5851] usb 8-1: config 2 interface 74 has no altsetting 0 [ 532.901164][ T8387] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 532.912855][ T8387] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 532.925231][ T5851] usb 8-1: New USB device found, idVendor=1b80, idProduct=e411, bcdDevice=84.e3 [ 532.929405][ T8387] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 532.934908][ T5851] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 532.950482][ T5851] usb 8-1: Product: syz [ 532.954908][ T5851] usb 8-1: Manufacturer: syz [ 532.960496][ T5851] usb 8-1: SerialNumber: syz [ 533.182160][ T4671] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 533.190567][ T4671] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 533.284673][ T8387] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 533.295881][ T8387] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 533.306407][ T8387] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 533.317189][ T8387] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 533.327429][ T8387] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 533.338290][ T8387] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 533.341374][ T5851] usb 8-1: USB disconnect, device number 4 [ 533.348380][ T8387] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 533.348478][ T8387] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 533.354364][ T8387] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 533.488093][ T4671] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 533.496394][ T4671] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 533.544953][ T8387] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 533.555171][ T8387] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 533.564980][ T8387] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 533.574480][ T8387] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 534.179519][ T8572] netlink: 8 bytes leftover after parsing attributes in process `syz.6.816'. [ 534.293271][ T8572] A link change request failed with some changes committed already. Interface gre1 may have been left with an inconsistent configuration, please check. [ 534.662182][ T159] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 534.853511][ T159] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 535.071771][ T159] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 535.210791][ T159] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 535.608585][ T159] bridge_slave_1: left allmulticast mode [ 535.614551][ T159] bridge_slave_1: left promiscuous mode [ 535.621428][ T159] bridge0: port 2(bridge_slave_1) entered disabled state [ 535.685405][ T159] bridge_slave_0: left allmulticast mode [ 535.691607][ T159] bridge_slave_0: left promiscuous mode [ 535.698536][ T159] bridge0: port 1(bridge_slave_0) entered disabled state [ 536.229154][ T159] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 536.271905][ T159] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 536.293889][ T159] bond0 (unregistering): Released all slaves [ 536.783045][ T159] hsr_slave_0: left promiscuous mode [ 536.798938][ T159] hsr_slave_1: left promiscuous mode [ 536.807364][ T159] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 536.815086][ T159] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 536.835843][ T159] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 536.843904][ T159] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 536.873449][ T159] veth1_macvtap: left promiscuous mode [ 536.879278][ T159] veth0_macvtap: left promiscuous mode [ 536.885112][ T159] veth1_vlan: left promiscuous mode [ 536.891658][ T159] veth0_vlan: left promiscuous mode [ 537.645466][ T8591] 9pnet_fd: Insufficient options for proto=fd [ 537.690746][ T159] team0 (unregistering): Port device team_slave_1 removed [ 537.740646][ T8597] netlink: 'syz.6.823': attribute type 4 has an invalid length. [ 537.817531][ T159] team0 (unregistering): Port device team_slave_0 removed [ 538.501336][ T52] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 538.513923][ T52] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 538.558866][ T52] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 538.584241][ T52] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 538.671329][ T52] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 538.866294][ T30] audit: type=1326 audit(1746044547.934:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8603 comm="syz.0.825" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf710e539 code=0x0 [ 539.248311][ T8613] loop6: detected capacity change from 0 to 524287999 [ 539.278641][ T8613] I/O error, dev loop6, sector 8 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 539.289495][ T8613] I/O error, dev loop6, sector 8 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 539.311752][ T8613] I/O error, dev loop6, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 0 [ 539.323225][ T8613] Buffer I/O error on dev loop6, logical block 0, lost async page write [ 539.396820][ T8615] I/O error, dev loop6, sector 8 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 539.406797][ T8615] I/O error, dev loop6, sector 8 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 539.435146][ T8615] I/O error, dev loop6, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 0 [ 539.445123][ T8615] Buffer I/O error on dev loop6, logical block 0, lost async page write [ 539.819084][ T8601] chnl_net:caif_netlink_parms(): no params data found [ 540.131367][ T159] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 540.143571][ T159] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 540.443152][ T4249] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 540.455122][ T4249] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 540.748598][ T52] Bluetooth: hci0: command tx timeout [ 541.194040][ T8601] bridge0: port 1(bridge_slave_0) entered blocking state [ 541.202444][ T8601] bridge0: port 1(bridge_slave_0) entered disabled state [ 541.210466][ T8601] bridge_slave_0: entered allmulticast mode [ 541.220457][ T8601] bridge_slave_0: entered promiscuous mode [ 541.237472][ T8601] bridge0: port 2(bridge_slave_1) entered blocking state [ 541.245106][ T8601] bridge0: port 2(bridge_slave_1) entered disabled state [ 541.253043][ T8601] bridge_slave_1: entered allmulticast mode [ 541.270352][ T8601] bridge_slave_1: entered promiscuous mode [ 541.709091][ T8601] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 541.766879][ T8601] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 542.051704][ T8648] syz_tun: entered promiscuous mode [ 542.127316][ T8648] syz_tun: left promiscuous mode [ 542.360146][ T8601] team0: Port device team_slave_0 added [ 542.416269][ T8601] team0: Port device team_slave_1 added [ 542.672150][ T8601] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 542.679781][ T8601] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 542.707421][ T8601] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 542.803554][ T8601] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 542.811268][ T8601] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 542.837941][ T8601] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 542.880933][ T52] Bluetooth: hci0: command tx timeout [ 543.078647][ T8601] hsr_slave_0: entered promiscuous mode [ 543.089594][ T8601] hsr_slave_1: entered promiscuous mode [ 543.101477][ T8601] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 543.110853][ T8601] Cannot create hsr debugfs directory [ 543.160741][ T8663] netlink: 8 bytes leftover after parsing attributes in process `syz.7.842'. [ 544.007008][ T8661] loop8: detected capacity change from 0 to 8192 [ 544.709263][ T8601] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 544.759227][ T8601] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 544.854892][ T8601] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 544.906750][ T52] Bluetooth: hci0: command tx timeout [ 544.929018][ T8601] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 545.767222][ T30] audit: type=1326 audit(1746044554.824:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8690 comm="syz.6.853" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f38539 code=0x7ffc0000 [ 545.790552][ T30] audit: type=1326 audit(1746044554.844:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8690 comm="syz.6.853" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f38539 code=0x7ffc0000 [ 545.813219][ T30] audit: type=1326 audit(1746044554.874:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8690 comm="syz.6.853" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7f38539 code=0x7ffc0000 [ 545.836166][ T30] audit: type=1326 audit(1746044554.874:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8690 comm="syz.6.853" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f38539 code=0x7ffc0000 [ 545.858765][ T30] audit: type=1326 audit(1746044554.874:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8690 comm="syz.6.853" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f38539 code=0x7ffc0000 [ 545.882613][ T30] audit: type=1326 audit(1746044554.874:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8690 comm="syz.6.853" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7f38539 code=0x7ffc0000 [ 545.905342][ T30] audit: type=1326 audit(1746044554.874:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8690 comm="syz.6.853" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f38539 code=0x7ffc0000 [ 545.927933][ T30] audit: type=1326 audit(1746044554.874:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8690 comm="syz.6.853" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7f38539 code=0x7ffc0000 [ 545.950258][ T30] audit: type=1326 audit(1746044554.984:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8690 comm="syz.6.853" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f38539 code=0x7ffc0000 [ 545.972741][ T30] audit: type=1326 audit(1746044554.984:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8690 comm="syz.6.853" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f38539 code=0x7ffc0000 [ 545.992521][ T8601] 8021q: adding VLAN 0 to HW filter on device bond0 [ 546.244687][ T8601] 8021q: adding VLAN 0 to HW filter on device team0 [ 546.342331][ T4249] bridge0: port 1(bridge_slave_0) entered blocking state [ 546.350057][ T4249] bridge0: port 1(bridge_slave_0) entered forwarding state [ 546.445090][ T4249] bridge0: port 2(bridge_slave_1) entered blocking state [ 546.452821][ T4249] bridge0: port 2(bridge_slave_1) entered forwarding state [ 546.991699][ T52] Bluetooth: hci0: command tx timeout [ 547.858063][ T8716] Illegal XDP return value 4294967274 on prog (id 120) dev syz_tun, expect packet loss! [ 548.018115][ T8601] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 548.569309][ T8601] veth0_vlan: entered promiscuous mode [ 548.675603][ T8601] veth1_vlan: entered promiscuous mode [ 548.870142][ T8725] netlink: 28 bytes leftover after parsing attributes in process `syz.8.864'. [ 548.880004][ T8725] netlink: 28 bytes leftover after parsing attributes in process `syz.8.864'. [ 549.270709][ T8601] veth0_macvtap: entered promiscuous mode [ 549.378005][ T8601] veth1_macvtap: entered promiscuous mode [ 549.616479][ T8601] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 549.627418][ T8601] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 549.637739][ T8601] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 549.648652][ T8601] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 549.658942][ T8601] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 549.675715][ T8601] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 549.687637][ T8601] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 549.698725][ T8601] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 549.857269][ T8601] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 550.154170][ T8601] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 550.165521][ T8601] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 550.177701][ T8601] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 550.188837][ T8601] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 550.200360][ T8601] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 550.211267][ T8601] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 550.221511][ T8601] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 550.232386][ T8601] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 550.248532][ T8601] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 550.395345][ T8739] loop7: detected capacity change from 0 to 1024 [ 550.413276][ T8739] EXT4-fs: Ignoring removed nobh option [ 550.416428][ T8601] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 550.419630][ T8739] EXT4-fs: Ignoring removed bh option [ 550.428187][ T8601] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 550.428386][ T8601] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 550.428577][ T8601] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 550.551284][ T8739] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 550.754742][ T8739] EXT4-fs error (device loop7): mb_free_blocks:1948: group 0, inode 15: block 129:freeing already freed block (bit 8); block bitmap corrupt. [ 551.277274][ T7896] Trying to write to read-only block-device loop7 [ 551.330553][ T7896] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 551.857336][ T8763] 9pnet_fd: Insufficient options for proto=fd [ 552.263240][ T8769] Bluetooth: MGMT ver 1.23 [ 553.095773][ T8781] loop8: detected capacity change from 0 to 128 [ 553.387121][ T8781] bio_check_eod: 199 callbacks suppressed [ 553.387222][ T8781] syz.8.882: attempt to access beyond end of device [ 553.387222][ T8781] loop8: rw=2049, sector=145, nr_sectors = 8 limit=128 [ 553.476887][ T8781] syz.8.882: attempt to access beyond end of device [ 553.476887][ T8781] loop8: rw=2049, sector=161, nr_sectors = 8 limit=128 [ 553.525031][ T8781] syz.8.882: attempt to access beyond end of device [ 553.525031][ T8781] loop8: rw=2049, sector=177, nr_sectors = 8 limit=128 [ 554.169973][ T24] IPVS: starting estimator thread 0... [ 554.202275][ T8794] tipc: Started in network mode [ 554.208042][ T8794] tipc: Node identity ac1414aa, cluster identity 4711 [ 554.218193][ T8794] tipc: Enabled bearer , priority 10 [ 554.276809][ T8797] IPVS: using max 192 ests per chain, 9600 per kthread [ 554.558246][ T8801] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap2 [ 554.582226][ T8801] batman_adv: batadv0: Adding interface: ip6gretap2 [ 554.590806][ T8801] batman_adv: batadv0: The MTU of interface ip6gretap2 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 554.618347][ T8801] batman_adv: batadv0: Interface activated: ip6gretap2 [ 555.337292][ T24] tipc: Node number set to 2886997162 [ 555.717204][ T4249] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 555.725429][ T4249] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 555.984923][ T4249] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 555.993408][ T4249] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 556.854137][ T8824] netlink: 12 bytes leftover after parsing attributes in process `syz.8.895'. [ 557.003055][ T4190] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 557.282638][ T4190] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 557.464439][ T4190] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 557.632701][ T4190] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 558.291138][ T4190] bridge_slave_1: left allmulticast mode [ 558.297418][ T4190] bridge_slave_1: left promiscuous mode [ 558.304019][ T4190] bridge0: port 2(bridge_slave_1) entered disabled state [ 558.322131][ T4190] bridge_slave_0: left allmulticast mode [ 558.328204][ T4190] bridge_slave_0: left promiscuous mode [ 558.334862][ T4190] bridge0: port 1(bridge_slave_0) entered disabled state [ 558.946344][ T4190] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 558.967705][ T4190] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 559.000642][ T4190] bond0 (unregistering): Released all slaves [ 559.412396][ T4190] hsr_slave_0: left promiscuous mode [ 559.421156][ T4190] hsr_slave_1: left promiscuous mode [ 559.436565][ T4190] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 559.444340][ T4190] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 559.454455][ T4190] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 559.462578][ T4190] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 559.490265][ T4190] veth1_macvtap: left promiscuous mode [ 559.497635][ T4190] veth0_macvtap: left promiscuous mode [ 559.503679][ T4190] veth1_vlan: left promiscuous mode [ 559.510646][ T4190] veth0_vlan: left promiscuous mode [ 560.113496][ T4190] team0 (unregistering): Port device team_slave_1 removed [ 560.158526][ T4190] team0 (unregistering): Port device team_slave_0 removed [ 561.367662][ T5797] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 561.377880][ T5797] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 561.390098][ T5797] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 561.405340][ T5797] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 561.419106][ T5797] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 561.669024][ T52] Bluetooth: hci4: unexpected event 0x09 length: 14 > 3 [ 562.280933][ T24] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 562.474296][ T24] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 562.485716][ T24] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 562.496583][ T24] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 562.512127][ T24] usb 8-1: New USB device found, idVendor=20d6, idProduct=cb17, bcdDevice= 0.00 [ 562.521649][ T24] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 562.722604][ T8848] chnl_net:caif_netlink_parms(): no params data found [ 562.778819][ T24] usb 8-1: config 0 descriptor?? [ 563.203648][ T24] hid-udraw 0003:20D6:CB17.0006: unknown main item tag 0x0 [ 563.251006][ T24] input: THQ uDraw Game Tablet for PS3 Joypad as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/0003:20D6:CB17.0006/input/input10 [ 563.346966][ T24] input: THQ uDraw Game Tablet for PS3 Touchpad as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/0003:20D6:CB17.0006/input/input11 [ 563.440768][ T24] input: THQ uDraw Game Tablet for PS3 Pen as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/0003:20D6:CB17.0006/input/input12 [ 563.469839][ T8857] loop7: detected capacity change from 0 to 256 [ 563.479610][ T52] Bluetooth: hci0: command tx timeout [ 563.507727][ T24] input: THQ uDraw Game Tablet for PS3 Accelerometer as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/0003:20D6:CB17.0006/input/input13 [ 563.555266][ T24] hid-udraw 0003:20D6:CB17.0006: hidraw0: USB HID v0.00 Device [HID 20d6:cb17] on usb-dummy_hcd.7-1/input0 [ 563.591073][ T24] usb 8-1: USB disconnect, device number 5 [ 563.875018][ T8848] bridge0: port 1(bridge_slave_0) entered blocking state [ 563.887021][ T8848] bridge0: port 1(bridge_slave_0) entered disabled state [ 563.899010][ T8848] bridge_slave_0: entered allmulticast mode [ 563.911611][ T8848] bridge_slave_0: entered promiscuous mode [ 563.970106][ T8848] bridge0: port 2(bridge_slave_1) entered blocking state [ 563.978292][ T8848] bridge0: port 2(bridge_slave_1) entered disabled state [ 563.986510][ T8848] bridge_slave_1: entered allmulticast mode [ 564.001935][ T8848] bridge_slave_1: entered promiscuous mode [ 564.251945][ T8848] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 564.330044][ T8848] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 564.567385][ T30] kauditd_printk_skb: 6 callbacks suppressed [ 564.567468][ T30] audit: type=1326 audit(1746044573.634:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8879 comm="syz.0.915" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf710e539 code=0x7fc00000 [ 564.620106][ T8848] team0: Port device team_slave_0 added [ 564.653273][ T8848] team0: Port device team_slave_1 added [ 564.864710][ T8848] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 564.873035][ T8848] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 564.899554][ T8848] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 564.920993][ T8848] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 564.928830][ T8848] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 564.955520][ T8848] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 565.139016][ T30] audit: type=1326 audit(1746044574.204:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8879 comm="syz.0.915" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf710e539 code=0x7fc00000 [ 565.428156][ T8848] hsr_slave_0: entered promiscuous mode [ 565.440540][ T8848] hsr_slave_1: entered promiscuous mode [ 565.449776][ T8848] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 565.457729][ T8848] Cannot create hsr debugfs directory [ 565.575259][ T52] Bluetooth: hci0: command tx timeout [ 566.343894][ T8900] loop8: detected capacity change from 0 to 512 [ 566.507272][ T8900] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 566.520593][ T8900] ext4 filesystem being mounted at /23/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 566.829063][ T8387] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 566.992701][ T8848] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 567.129782][ T8848] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 567.195546][ T8848] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 567.257682][ T8848] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 567.626882][ T52] Bluetooth: hci0: command tx timeout [ 568.162738][ T8919] netlink: 4 bytes leftover after parsing attributes in process `syz.8.929'. [ 568.440782][ T8848] 8021q: adding VLAN 0 to HW filter on device bond0 [ 568.635316][ T8848] 8021q: adding VLAN 0 to HW filter on device team0 [ 568.743291][ T4190] bridge0: port 1(bridge_slave_0) entered blocking state [ 568.751104][ T4190] bridge0: port 1(bridge_slave_0) entered forwarding state [ 568.803799][ T4190] bridge0: port 2(bridge_slave_1) entered blocking state [ 568.811518][ T4190] bridge0: port 2(bridge_slave_1) entered forwarding state [ 569.708937][ T52] Bluetooth: hci0: command tx timeout [ 569.988428][ T8945] netlink: 204 bytes leftover after parsing attributes in process `syz.6.937'. [ 569.992066][ T8938] ceph: No mds server is up or the cluster is laggy [ 570.006393][ T3070] libceph: connect (1)[c::]:6789 error -101 [ 570.012894][ T3070] libceph: mon0 (1)[c::]:6789 connect error [ 570.746571][ T8848] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 570.792981][ T8953] loop7: detected capacity change from 0 to 256 [ 571.324689][ T8848] veth0_vlan: entered promiscuous mode [ 571.482719][ T8848] veth1_vlan: entered promiscuous mode [ 571.797514][ T8848] veth0_macvtap: entered promiscuous mode [ 571.875113][ T8848] veth1_macvtap: entered promiscuous mode [ 572.073322][ T8848] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 572.085796][ T8848] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 572.104545][ T8848] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 572.116624][ T8848] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 572.126913][ T8848] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 572.137767][ T8848] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 572.147937][ T8848] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 572.158898][ T8848] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 572.183001][ T8848] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 572.381846][ T8848] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 572.392903][ T8848] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 572.411290][ T8848] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 572.422250][ T8848] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 572.432581][ T8848] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 572.443484][ T8848] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 572.453792][ T8848] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 572.465333][ T8848] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 572.482610][ T8848] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 572.531722][ T8848] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 572.541527][ T8848] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 572.550812][ T8848] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 572.560826][ T8848] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 574.343688][ T9000] netlink: 'syz.0.954': attribute type 1 has an invalid length. [ 574.487812][ T9002] bond3: (slave vcan0): The slave device specified does not support setting the MAC address [ 574.498516][ T9002] bond3: (slave vcan0): Setting fail_over_mac to active for active-backup mode [ 574.524794][ T9002] bond3: (slave vcan0): making interface the new active one [ 574.536298][ T9002] bond3: (slave vcan0): Enslaving as an active interface with an up link [ 577.761270][ T9054] netlink: 148 bytes leftover after parsing attributes in process `syz.7.971'. [ 577.770752][ T9054] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 578.017971][ T4671] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 578.030758][ T4671] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 578.107614][ T4331] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 578.116522][ T4331] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 579.111981][ T159] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 579.343832][ T159] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 579.524436][ T159] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 579.676161][ T3070] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 579.680364][ T159] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 579.717597][ T5797] Bluetooth: hci3: command 0x0406 tx timeout [ 579.885331][ T3070] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 579.896852][ T3070] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 579.907136][ T3070] usb 8-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 579.916600][ T3070] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 579.933289][ T3070] usb 8-1: config 0 descriptor?? [ 580.116922][ T159] bridge_slave_1: left allmulticast mode [ 580.123260][ T159] bridge_slave_1: left promiscuous mode [ 580.130245][ T159] bridge0: port 2(bridge_slave_1) entered disabled state [ 580.167543][ T159] bridge_slave_0: left allmulticast mode [ 580.173858][ T159] bridge_slave_0: left promiscuous mode [ 580.187692][ T159] bridge0: port 1(bridge_slave_0) entered disabled state [ 580.841510][ T3070] usb 8-1: string descriptor 0 read error: -22 [ 580.928464][ T159] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 580.953257][ T159] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 580.976984][ T159] bond0 (unregistering): Released all slaves [ 581.274564][ T3070] uclogic 0003:256C:006D.0007: failed retrieving string descriptor #100: -71 [ 581.284186][ T3070] uclogic 0003:256C:006D.0007: failed retrieving pen parameters: -71 [ 581.292913][ T3070] uclogic 0003:256C:006D.0007: failed probing pen v1 parameters: -71 [ 581.301587][ T3070] uclogic 0003:256C:006D.0007: failed probing parameters: -71 [ 581.317402][ T3070] uclogic 0003:256C:006D.0007: probe with driver uclogic failed with error -71 [ 581.345414][ T3070] usb 8-1: USB disconnect, device number 6 [ 581.626615][ T159] hsr_slave_0: left promiscuous mode [ 581.645823][ T159] hsr_slave_1: left promiscuous mode [ 581.654764][ T159] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 581.662876][ T159] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 581.695097][ T159] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 581.703479][ T159] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 581.867553][ T159] veth1_macvtap: left promiscuous mode [ 581.873500][ T159] veth0_macvtap: left promiscuous mode [ 581.880456][ T159] veth1_vlan: left promiscuous mode [ 581.886302][ T159] veth0_vlan: left promiscuous mode [ 582.512230][ T159] team0 (unregistering): Port device team_slave_1 removed [ 582.549932][ T159] team0 (unregistering): Port device team_slave_0 removed [ 583.730935][ T5797] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 583.741911][ T5797] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 583.754751][ T5797] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 583.781485][ T5797] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 583.797040][ T5797] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 584.702159][ T9096] ===================================================== [ 584.711923][ T9096] BUG: KMSAN: uninit-value in sctp_inq_pop+0x14dc/0x19e0 [ 584.719485][ T9096] sctp_inq_pop+0x14dc/0x19e0 [ 584.724419][ T9096] sctp_assoc_bh_rcv+0x1a0/0xbc0 [ 584.729805][ T9096] sctp_inq_push+0x2a3/0x350 [ 584.734636][ T9096] sctp_backlog_rcv+0x3c7/0xda0 [ 584.740078][ T9096] sk_backlog_rcv+0x13f/0x420 [ 584.744990][ T9096] __release_sock+0x1d3/0x330 [ 584.750042][ T9096] release_sock+0x6b/0x270 [ 584.755193][ T9096] sctp_wait_for_connect+0x458/0x820 [ 584.761459][ T9096] sctp_sendmsg_to_asoc+0x223a/0x2260 [ 584.767175][ T9096] sctp_sendmsg+0x3910/0x49f0 [ 584.772062][ T9096] inet_sendmsg+0x269/0x2a0 [ 584.777082][ T9096] __sock_sendmsg+0x278/0x3d0 [ 584.781978][ T9096] __sys_sendto+0x590/0x710 [ 584.792053][ T9096] __ia32_sys_sendto+0x12f/0x200 [ 584.800344][ T9096] ia32_sys_call+0x1397/0x42c0 [ 584.805324][ T9096] __do_fast_syscall_32+0xb0/0x110 [ 584.811130][ T9096] do_fast_syscall_32+0x38/0x80 [ 584.817026][ T9096] do_SYSENTER_32+0x1f/0x30 [ 584.821770][ T9096] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 584.828519][ T9096] [ 584.830986][ T9096] Uninit was stored to memory at: [ 584.836490][ T9096] sctp_inq_pop+0x144a/0x19e0 [ 584.841383][ T9096] sctp_assoc_bh_rcv+0x1a0/0xbc0 [ 584.846856][ T9096] sctp_inq_push+0x2a3/0x350 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 584.851675][ T9096] sctp_backlog_rcv+0x3c7/0xda0 [ 584.856979][ T9096] sk_backlog_rcv+0x13f/0x420 [ 584.861916][ T9096] __release_sock+0x1d3/0x330 [ 584.866949][ T9096] release_sock+0x6b/0x270 [ 584.871615][ T9096] sctp_wait_for_connect+0x458/0x820 [ 584.877346][ T9096] sctp_sendmsg_to_asoc+0x223a/0x2260 [ 584.882955][ T9096] sctp_sendmsg+0x3910/0x49f0 [ 584.893152][ T9096] inet_sendmsg+0x269/0x2a0 [ 584.899351][ T9096] __sock_sendmsg+0x278/0x3d0 [ 584.904295][ T9096] __sys_sendto+0x590/0x710 [ 584.909792][ T9096] __ia32_sys_sendto+0x12f/0x200 [ 584.914990][ T9096] ia32_sys_call+0x1397/0x42c0 [ 584.920157][ T9096] __do_fast_syscall_32+0xb0/0x110 [ 584.925530][ T9096] do_fast_syscall_32+0x38/0x80 [ 584.930907][ T9096] do_SYSENTER_32+0x1f/0x30 [ 584.935655][ T9096] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 584.942596][ T9096] [ 584.945047][ T9096] Uninit was created at: [ 584.950434][ T9096] __kmalloc_node_track_caller_noprof+0x96d/0x12f0 [ 584.957387][ T9096] kmalloc_reserve+0x22f/0x4b0 [ 584.962432][ T9096] __alloc_skb+0x347/0x7d0 [ 584.967323][ T9096] sctp_packet_transmit+0x189e/0x4560 [ 584.972950][ T9096] sctp_outq_flush+0x1c7d/0x67c0 [ 584.978404][ T9096] sctp_outq_uncork+0x9e/0xc0 [ 584.983323][ T9096] sctp_do_sm+0x8c8e/0x9720 [ 584.988236][ T9096] sctp_assoc_bh_rcv+0x88b/0xbc0 [ 584.999980][ T9096] sctp_inq_push+0x2a3/0x350 [ 585.004814][ T9096] sctp_backlog_rcv+0x3c7/0xda0 [ 585.010062][ T9096] sk_backlog_rcv+0x13f/0x420 [ 585.014980][ T9096] __release_sock+0x1d3/0x330 [ 585.020051][ T9096] release_sock+0x6b/0x270 [ 585.024707][ T9096] sctp_wait_for_connect+0x458/0x820 [ 585.030481][ T9096] sctp_sendmsg_to_asoc+0x223a/0x2260 [ 585.036278][ T9096] sctp_sendmsg+0x3910/0x49f0 [ 585.041168][ T9096] inet_sendmsg+0x269/0x2a0 [ 585.046059][ T9096] __sock_sendmsg+0x278/0x3d0 [ 585.050974][ T9096] __sys_sendto+0x590/0x710 [ 585.055725][ T9096] __ia32_sys_sendto+0x12f/0x200 [ 585.061827][ T9096] ia32_sys_call+0x1397/0x42c0 [ 585.067034][ T9096] __do_fast_syscall_32+0xb0/0x110 [ 585.072405][ T9096] do_fast_syscall_32+0x38/0x80 [ 585.075563][ T9082] chnl_net:caif_netlink_parms(): no params data found [ 585.077721][ T9096] do_SYSENTER_32+0x1f/0x30 [ 585.077870][ T9096] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 585.101364][ T9096] [ 585.103847][ T9096] CPU: 0 UID: 0 PID: 9096 Comm: syz.8.988 Not tainted 6.15.0-rc3-syzkaller-00094-g02ddfb981de8 #0 PREEMPT(undef) [ 585.117617][ T9096] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 585.128162][ T9096] ===================================================== [ 585.135251][ T9096] Disabling lock debugging due to kernel taint [ 585.141863][ T9096] Kernel panic - not syncing: kmsan.panic set ... [ 585.148477][ T9096] CPU: 0 UID: 0 PID: 9096 Comm: syz.8.988 Tainted: G B 6.15.0-rc3-syzkaller-00094-g02ddfb981de8 #0 PREEMPT(undef) [ 585.162319][ T9096] Tainted: [B]=BAD_PAGE [ 585.166634][ T9096] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 585.176883][ T9096] Call Trace: [ 585.180311][ T9096] [ 585.183377][ T9096] __dump_stack+0x26/0x30 [ 585.187975][ T9096] dump_stack_lvl+0x53/0x270 [ 585.192807][ T9096] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 585.198887][ T9096] dump_stack+0x1e/0x25 [ 585.203286][ T9096] panic+0x4bd/0xd50 [ 585.207481][ T9096] kmsan_report+0x29d/0x2a0 [ 585.212251][ T9096] ? kmsan_internal_chain_origin+0xb6/0xd0 [ 585.218296][ T9096] ? __msan_warning+0x96/0x120 [ 585.223298][ T9096] ? sctp_inq_pop+0x14dc/0x19e0 [ 585.228446][ T9096] ? sctp_assoc_bh_rcv+0x1a0/0xbc0 [ 585.233821][ T9096] ? sctp_inq_push+0x2a3/0x350 [ 585.238825][ T9096] ? sctp_backlog_rcv+0x3c7/0xda0 [ 585.244083][ T9096] ? sk_backlog_rcv+0x13f/0x420 [ 585.249176][ T9096] ? __release_sock+0x1d3/0x330 [ 585.254251][ T9096] ? release_sock+0x6b/0x270 [ 585.259079][ T9096] ? sctp_wait_for_connect+0x458/0x820 [ 585.264769][ T9096] ? sctp_sendmsg_to_asoc+0x223a/0x2260 [ 585.270545][ T9096] ? sctp_sendmsg+0x3910/0x49f0 [ 585.275623][ T9096] ? inet_sendmsg+0x269/0x2a0 [ 585.280553][ T9096] ? __sock_sendmsg+0x278/0x3d0 [ 585.285667][ T9096] ? __sys_sendto+0x590/0x710 [ 585.290609][ T9096] ? __ia32_sys_sendto+0x12f/0x200 [ 585.296066][ T9096] ? ia32_sys_call+0x1397/0x42c0 [ 585.301202][ T9096] ? __do_fast_syscall_32+0xb0/0x110 [ 585.306720][ T9096] ? do_fast_syscall_32+0x38/0x80 [ 585.311980][ T9096] ? do_SYSENTER_32+0x1f/0x30 [ 585.316880][ T9096] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 585.323609][ T9096] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 585.330336][ T9096] ? sched_clock_cpu+0x59/0xa80 [ 585.335481][ T9096] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 585.341569][ T9096] ? kmsan_get_metadata+0x105/0x1b0 [ 585.347008][ T9096] ? kmsan_internal_set_shadow_origin+0x79/0x110 [ 585.353606][ T9096] ? kmsan_get_metadata+0x105/0x1b0 [ 585.359032][ T9096] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 585.365079][ T9096] ? __loadsegment_fs+0x21/0x30 [ 585.370146][ T9096] ? kmsan_get_metadata+0x105/0x1b0 [ 585.375562][ T9096] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 585.381609][ T9096] ? kmsan_get_metadata+0x105/0x1b0 [ 585.387028][ T9096] __msan_warning+0x96/0x120 [ 585.391814][ T9096] sctp_inq_pop+0x14dc/0x19e0 [ 585.396743][ T9096] sctp_assoc_bh_rcv+0x1a0/0xbc0 [ 585.401936][ T9096] ? __schedule+0x26ef/0x7720 [ 585.406978][ T9096] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 585.413011][ T9096] ? __pfx_sctp_assoc_bh_rcv+0x10/0x10 [ 585.418714][ T9096] sctp_inq_push+0x2a3/0x350 [ 585.423534][ T9096] sctp_backlog_rcv+0x3c7/0xda0 [ 585.428609][ T9096] ? kmsan_get_metadata+0x105/0x1b0 [ 585.434046][ T9096] ? __pfx_sctp_backlog_rcv+0x10/0x10 [ 585.439653][ T9096] sk_backlog_rcv+0x13f/0x420 [ 585.444563][ T9096] __release_sock+0x1d3/0x330 [ 585.449458][ T9096] release_sock+0x6b/0x270 [ 585.454097][ T9096] sctp_wait_for_connect+0x458/0x820 [ 585.459603][ T9096] ? __pfx_autoremove_wake_function+0x10/0x10 [ 585.465897][ T9096] sctp_sendmsg_to_asoc+0x223a/0x2260 [ 585.471480][ T9096] ? kmsan_get_metadata+0x105/0x1b0 [ 585.476900][ T9096] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 585.482991][ T9096] sctp_sendmsg+0x3910/0x49f0 [ 585.487886][ T9096] ? kmsan_internal_set_shadow_origin+0x79/0x110 [ 585.494567][ T9096] ? __pfx_sctp_sendmsg+0x10/0x10 [ 585.499862][ T9096] inet_sendmsg+0x269/0x2a0 [ 585.504740][ T9096] __sock_sendmsg+0x278/0x3d0 [ 585.509669][ T9096] __sys_sendto+0x590/0x710 [ 585.514440][ T9096] ? kmsan_get_metadata+0x105/0x1b0 [ 585.519901][ T9096] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 585.525993][ T9096] ? kmsan_internal_set_shadow_origin+0x79/0x110 [ 585.532606][ T9096] __ia32_sys_sendto+0x12f/0x200 [ 585.537840][ T9096] ia32_sys_call+0x1397/0x42c0 [ 585.542816][ T9096] __do_fast_syscall_32+0xb0/0x110 [ 585.548328][ T9096] ? irqentry_exit_to_user_mode+0x82/0xa0 [ 585.554285][ T9096] do_fast_syscall_32+0x38/0x80 [ 585.559361][ T9096] do_SYSENTER_32+0x1f/0x30 [ 585.564116][ T9096] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 585.570710][ T9096] RIP: 0023:0xf710e539 [ 585.574924][ T9096] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 585.594839][ T9096] RSP: 002b:00000000f50fe55c EFLAGS: 00000206 ORIG_RAX: 0000000000000171 [ 585.603455][ T9096] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080847fff [ 585.611618][ T9096] RDX: 000000000000fee4 RSI: 0000000000000000 RDI: 000000008005ffe4 [ 585.619755][ T9096] RBP: 000000000000001c R08: 0000000000000000 R09: 0000000000000000 [ 585.627891][ T9096] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 585.636037][ T9096] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 585.644204][ T9096] [ 585.647772][ T9096] Kernel Offset: disabled [ 585.652219][ T9096] Rebooting in 86400 seconds..