last executing test programs: 3m43.699680519s ago: executing program 2 (id=112): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) socket(0x1e, 0x4, 0x0) unshare(0x20000400) syz_open_procfs(0x0, &(0x7f00000000c0)='net/unix\x00') epoll_create(0x4) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) socket$netlink(0x10, 0x3, 0x0) socket$key(0xf, 0x3, 0x2) pselect6(0x40, &(0x7f0000000600), 0x0, &(0x7f0000000680)={0x7ff}, 0x0, 0x0) 3m40.397744995s ago: executing program 2 (id=120): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000900)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@metacopy_on}]}) r0 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) mknodat$loop(r0, &(0x7f0000001600)='./file1\x00', 0x0, 0x0) chdir(&(0x7f00000003c0)='./bus\x00') rename(&(0x7f0000000180)='./file1\x00', &(0x7f0000000200)='./file0\x00') syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000280)='./bus\x00', 0x2029c1b, 0x0, 0x1, 0x0, &(0x7f0000000080)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) mkdirat(r1, &(0x7f0000000000)='./bus/file0\x00', 0x0) renameat2(r1, &(0x7f0000000240)='./bus/file0\x00', r1, &(0x7f00000001c0)='./file0\x00', 0x2) 3m40.177678351s ago: executing program 2 (id=122): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x23108000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6(0xa, 0x3, 0x3a) sendto$inet6(r3, &(0x7f0000000080)="800009e92208a1ce", 0xfdef, 0x0, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1, 0x9}, 0x1c) 3m38.595928736s ago: executing program 2 (id=124): socket$alg(0x26, 0x5, 0x0) socket$inet6(0xa, 0x800000000000002, 0x0) syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000300)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x800, &(0x7f0000000540)={[{@iocharset={'iocharset', 0x3d, 'maccenteuro'}}, {@umask={'umask', 0x3d, 0x9}}, {@dmask={'dmask', 0x3d, 0x9}}, {@iocharset={'iocharset', 0x3d, 'cp1250'}}, {@gid={'gid', 0x3d, 0xee00}}, {@errors_remount}, {@errors_remount}, {@errors_remount}, {@namecase}, {@errors_continue}]}, 0x5, 0x1510, &(0x7f00000037c0)="$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") r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mounts\x00') r1 = open(&(0x7f0000000080)='./file1\x00', 0x10b942, 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x89101a, 0x0) mount$bind(&(0x7f0000000040)='./file0/../file0\x00', &(0x7f0000000140)='./file0/../file0\x00', 0x0, 0x1217880, 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) sendfile(r1, r0, 0x0, 0x8000000d) 3m37.127189055s ago: executing program 2 (id=127): bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x5, 0x1000087}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000000c0)=0x1) syz_open_dev$sndctrl(&(0x7f0000000080), 0x315, 0x11103) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) rt_sigprocmask(0x0, &(0x7f0000000200)={[0xfffff7feffff7ffd]}, 0x0, 0x8) r1 = gettid() tkill(r1, 0x12) pselect6(0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), &(0x7f0000000300)={&(0x7f0000000100), 0x8}) 3m36.745549913s ago: executing program 2 (id=128): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) connect$unix(0xffffffffffffffff, 0x0, 0x0) setreuid(0xee01, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000680)={0x5c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x40, 0x33, @reassoc_resp={{{0x0, 0x0, 0x8}, {}, @broadcast, @device_a, @random="f70b87594b3f"}, 0x0, 0x0, @default, @val={0x1, 0x4, [{0xab91b652d320a200, 0x1}, {0x60, 0x1}, {0x16, 0x1}, {0x3}]}, @void, [{0xdd, 0x6, "8b7668a21729"}, {0xdd, 0x6, "d8a062cc132f"}, {0xdd, 0x6, "be3bd5f39a64"}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x44800}, 0x0) socket(0x22, 0x2, 0x1) 3m35.48043046s ago: executing program 32 (id=128): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) connect$unix(0xffffffffffffffff, 0x0, 0x0) setreuid(0xee01, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000680)={0x5c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x40, 0x33, @reassoc_resp={{{0x0, 0x0, 0x8}, {}, @broadcast, @device_a, @random="f70b87594b3f"}, 0x0, 0x0, @default, @val={0x1, 0x4, [{0xab91b652d320a200, 0x1}, {0x60, 0x1}, {0x16, 0x1}, {0x3}]}, @void, [{0xdd, 0x6, "8b7668a21729"}, {0xdd, 0x6, "d8a062cc132f"}, {0xdd, 0x6, "be3bd5f39a64"}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x44800}, 0x0) socket(0x22, 0x2, 0x1) 3m23.3226373s ago: executing program 0 (id=166): syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000240)='./file0\x00', 0x0, &(0x7f0000000680)={[{@abort}, {@debug}]}, 0x1, 0x774, &(0x7f00000007c0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000380)='net/ip6_mr_vif\x00') read$char_usb(r3, &(0x7f0000000140)=""/189, 0xfffffecd) 3m20.593654719s ago: executing program 0 (id=170): bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={0x0}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) fcntl$lock(r1, 0x6, &(0x7f0000002000)={0x1}) fcntl$lock(r1, 0x26, &(0x7f00000031c0)={0x1}) 3m18.224326401s ago: executing program 0 (id=177): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00') setgroups(0x400000000000026f, &(0x7f0000000080)=[0x0, 0xee00]) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) read$FUSE(r1, &(0x7f00000020c0)={0x2020}, 0x2020) 3m15.609017727s ago: executing program 0 (id=187): capset(&(0x7f0000000080)={0x20071026}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x1c916, &(0x7f0000000240), 0x1b, 0x4ed, &(0x7f0000000540)="$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") syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x410c84, &(0x7f0000000280)={[{@inode_readahead_blks}, {}, {@bh}, {@usrjquota}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x1}}, {@noinit_itable}]}, 0x5, 0x775, &(0x7f0000001180)="$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") r0 = syz_clone3(&(0x7f00000014c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x5c) syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f00000001c0)='./file0\x00', 0x8000ce, &(0x7f0000000b00)=ANY=[@ANYRESDEC, @ANYRESHEX=0x0, @ANYRES32, @ANYRESHEX=0x0, @ANYRES16=r0, @ANYRES32, @ANYBLOB="2c6f626a5f726f6c653d060a387b2640402c66736d616769633d3078303030303030303030303030303038302c66736d616769633d3078303030303030303030303030303030332c657569643d", @ANYRESDEC, @ANYRES32], 0x1, 0x6da, &(0x7f0000004980)="$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") mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x81105a, 0x0) mount$bind(&(0x7f0000000880)='./file0/../file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x1adc11, 0x0) mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f0000000080)='./file0/file0/file0\x00', 0x0, 0x887008, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r1, &(0x7f00000020c0)={0x2020}, 0x2020) 3m14.061359022s ago: executing program 0 (id=192): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x9) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) sendmmsg(r1, &(0x7f0000002840)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20044000) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)={0x20, r3, 0x1, 0x0, 0x0, {0x7}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}]}]}, 0x20}}, 0x0) 3m12.902741873s ago: executing program 0 (id=194): r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) pidfd_getfd(r2, 0xffffffffffffffff, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000200)={'wg2\x00'}) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000180), 0x1c3641) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r3, 0xc0a85352, &(0x7f0000000300)={{0x0, 0xff}, 'port1\x00'}) sendmmsg$inet(r1, &(0x7f0000000940)=[{{&(0x7f00000002c0)={0x2, 0x4e22, @multicast1}, 0x10, 0x0}}], 0x1, 0x20008050) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r0, 0x10e, 0x8, &(0x7f0000000100)=0x6680, 0x4) open$dir(&(0x7f00000000c0)='./file0\x00', 0x2dcd8b459a1f85bc, 0x70) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x18, 0x52, 0x1, 0x0, 0x0, {0x2}, [@nested={0x4, 0x13d}]}, 0x18}}, 0x0) 3m12.283525808s ago: executing program 33 (id=194): r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) pidfd_getfd(r2, 0xffffffffffffffff, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000200)={'wg2\x00'}) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000180), 0x1c3641) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r3, 0xc0a85352, &(0x7f0000000300)={{0x0, 0xff}, 'port1\x00'}) sendmmsg$inet(r1, &(0x7f0000000940)=[{{&(0x7f00000002c0)={0x2, 0x4e22, @multicast1}, 0x10, 0x0}}], 0x1, 0x20008050) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r0, 0x10e, 0x8, &(0x7f0000000100)=0x6680, 0x4) open$dir(&(0x7f00000000c0)='./file0\x00', 0x2dcd8b459a1f85bc, 0x70) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x18, 0x52, 0x1, 0x0, 0x0, {0x2}, [@nested={0x4, 0x13d}]}, 0x18}}, 0x0) 59.412002751s ago: executing program 6 (id=494): write$cgroup_type(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000300)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x2, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r1, &(0x7f0000000580)=[{{0x0, 0x0, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000880)="ec75d081fcbfdebb6a38b0c57cc77b83d2eea81aad8f73b36abc2019cb08fcaaec9647a07d0a0965f0f1e39afd84e7e2523aaded5e09847f7db29247c3296994544daa3836fcc90c269ad6d38d57619127caf1253655c320710542", 0x5b}, {0x0}], 0x3}}], 0x1, 0xc0) sendto$inet(r1, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x20c8, 0x11, 0x0, 0x27) 54.470441013s ago: executing program 6 (id=502): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) r3 = socket$kcm(0x29, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000580)=ANY=[@ANYBLOB="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"/5047], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe89, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f0000000040)={r3, r4}) 52.662825436s ago: executing program 6 (id=507): r0 = landlock_create_ruleset(&(0x7f0000000040)={0x8, 0x3}, 0x18, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x442, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1/file2\x00', 0x1000, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file1/file2\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2) 51.784580603s ago: executing program 6 (id=509): mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='mode=0']) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount$bind(&(0x7f0000000280)='./file0/../file0\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x1000, 0x0) mount$bind(&(0x7f0000000300)='./file0\x00', &(0x7f0000000040)='./file0/file0\x00', 0x0, 0x91905a, 0x0) mount$bind(&(0x7f00000001c0)='./file0/../file0\x00', &(0x7f0000000dc0)='./file0/file0\x00', 0x0, 0x1145d10, 0x0) mount$bind(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x81105a, 0x0) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={[{@size={'size', 0x3d, [0x25]}}]}) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00') read$FUSE(r0, &(0x7f00000029c0)={0x2020}, 0x2020) 50.426770622s ago: executing program 6 (id=513): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000190c0)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_io_uring_setup(0x10d, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x40000000}, &(0x7f0000000380)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_STATX={0x15, 0x4, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000840)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x1, 0x6400}) io_uring_enter(r3, 0x3f72, 0x74f1, 0x0, 0x0, 0x0) 47.724637389s ago: executing program 6 (id=520): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20010845, &(0x7f0000b63fe4)={0xa, 0x42, 0x1, @dev={0xfe, 0x80, '\x00', 0x39}}, 0x1c) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0xc82, 0x0) r4 = dup(r3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x38011, r4, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x46, 0x0, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00304, 0x9) 47.253391187s ago: executing program 34 (id=520): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20010845, &(0x7f0000b63fe4)={0xa, 0x42, 0x1, @dev={0xfe, 0x80, '\x00', 0x39}}, 0x1c) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0xc82, 0x0) r4 = dup(r3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x38011, r4, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x46, 0x0, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00304, 0x9) 29.687389101s ago: executing program 5 (id=551): socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) eventfd(0x6) mknodat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x100, 0x103) setxattr$security_capability(0x0, &(0x7f0000000280), 0x0, 0x0, 0x0) lsetxattr$security_capability(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), &(0x7f00000006c0)=@v3={0x3000000, [{0x3, 0x2}, {0x9, 0x56}], 0xee01}, 0x18, 0x0) lgetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000280)=ANY=[], 0x0, 0x0) 24.528464141s ago: executing program 5 (id=563): bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a3000000000090003007379"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) 22.673436675s ago: executing program 5 (id=555): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000c80)='./file1\x00', 0x210000, &(0x7f0000000580)={[{@jqfmt_vfsv1}, {@stripe={'stripe', 0x3d, 0x8}}, {@barrier_val={'barrier', 0x3d, 0x4}}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@nodiscard}, {@nodelalloc}, {@acl}, {@dioread_lock}]}, 0x1, 0x572, &(0x7f0000003780)="$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") bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='ext4_ext_remove_space_done\x00', r0}, 0x10) truncate(&(0x7f0000000140)='./file2\x00', 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002ac0)={0x1a, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x18, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x20c9, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e23, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}, 0x4}, 0x1c) ioctl$GIO_CMAP(0xffffffffffffffff, 0x4b70, &(0x7f0000000080)) 18.702215078s ago: executing program 5 (id=568): ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./bus\x00', 0x0, &(0x7f0000001080), 0x1, 0x4f7, &(0x7f0000000540)="$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") open(&(0x7f0000000140)='./bus\x00', 0x143142, 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000080)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, "ef359f413bb90152f7d6d1ce5d29c3ee5e5ca9000f7c41499dc2aac63a01000000000000004faa2ad9c084a003ea00", "036c47c67808200400000000000000335263bdbcef549ba197fce47ddfdd753abd950100002a00ffffffffffffffff00000000e8f20000000200", "b900000000fffffffff2060000000000000200"}) r1 = open(0x0, 0x0, 0x0) getdents(r1, 0x0, 0x0) syz_mount_image$udf(&(0x7f0000000a40), &(0x7f0000000000)='./bus\x00', 0x4400, &(0x7f0000000100)=ANY=[@ANYBLOB='shortad,rootdir=00000000000000000002,noadinicb\x00\x00\x00\x00=', @ANYRESDEC=0x0, @ANYRES32], 0x1, 0xa1b, &(0x7f0000001540)="$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") socket$rds(0x15, 0x5, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) getdents(r2, &(0x7f0000000080)=""/43, 0x2b) getdents(r2, 0xfffffffffffffffd, 0x58) 15.406241754s ago: executing program 4 (id=576): r0 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r0, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x8, @multicast2}}, 0x24) setreuid(0x0, 0xee00) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x0, 0x6031, 0xffffffffffffffff, 0x0) sendmmsg(r0, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18, 0xe000}, 0x5}], 0x1, 0x0) recvmmsg(r0, &(0x7f0000000d00)=[{{0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffffffffffe4e}}, {{&(0x7f0000000400)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, 0x0, &(0x7f0000000640)=[{&(0x7f0000000240)=""/39}, {&(0x7f0000000480)=""/182}, {&(0x7f0000000540)=""/75}, {&(0x7f0000000340)=""/28}, {&(0x7f0000000e00)=""/121}, {&(0x7f00000018c0)=""/4096}], 0x0, &(0x7f00000006c0)=""/213}}, {{&(0x7f00000007c0)=@ethernet={0x0, @dev}, 0x0, &(0x7f0000000900)=[{&(0x7f0000000840)=""/8}, {&(0x7f0000000880)=""/78}], 0x0, &(0x7f0000000a40)=""/186}}, {{&(0x7f0000000940)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private1}}}, 0x0, &(0x7f0000000c00)=[{&(0x7f0000000b00)=""/39}, {&(0x7f0000000b40)=""/158}], 0x0, &(0x7f0000000c40)=""/156}}], 0xf000, 0x10002, 0x0) recvmsg$inet_nvme(r0, &(0x7f0000000500)={&(0x7f0000000140)=@ethernet={0x0, @link_local}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000340)=""/125, 0x7d}, {&(0x7f0000000080)=""/35, 0x23}, {&(0x7f00000003c0)=""/219, 0xdb}], 0x3}, 0x0) syz_init_net_socket$ax25(0x3, 0x2, 0xca) r1 = io_uring_setup(0x23ea, &(0x7f00000001c0)={0x0, 0xb1d4, 0x400, 0x0, 0x20001a2}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="9feb010018000000000000002400000024000000040000000000000002000013020000000225b075"], &(0x7f0000000240)=""/220, 0x40, 0xdc, 0xa, 0x0, 0x0, @void, @value}, 0x28) r2 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r2, 0xc01864c6, &(0x7f0000000040)={0x0}) close_range(r1, 0xffffffffffffffff, 0x0) 15.028492098s ago: executing program 1 (id=579): r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(0x0, r2) r3 = syz_io_uring_setup(0x239, &(0x7f0000000380)={0x0, 0x1ffffe, 0x10100, 0x0, 0x274, 0x0, r1}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r3, 0x2ded, 0x4000, 0x0, 0x0, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RGETLOCK(r7, &(0x7f00000000c0)=ANY=[], 0xffffff6a) pipe2(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) tee(r6, r8, 0xfffffffffffffc01, 0x0) tee(r6, r8, 0x60000000f00, 0x0) 14.698736316s ago: executing program 4 (id=580): prlimit64(0x0, 0xe, &(0x7f0000000280)={0x7, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r3, &(0x7f0000000040), 0x8) shutdown(r3, 0x1) 14.121112481s ago: executing program 5 (id=581): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) socket(0x15, 0x5, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x803}, 0xe) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x8, &(0x7f0000005c00)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffff7e, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) r2 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r2, 0x400448c8, &(0x7f0000000340)={r0, r0, 0x8, 0x0, 0x0, 0xb, 0x81, 0x46d, 0xfff9, 0x3, 0x0, 0x8, 'syz0\x00'}) shutdown(r0, 0x1) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = socket$inet_sctp(0x2, 0x5, 0x84) bind$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) sendto$inet(r3, &(0x7f0000000300)="ab", 0x1, 0x0, &(0x7f0000000380)={0x2, 0x4e22, @local}, 0x10) 14.094506429s ago: executing program 7 (id=582): ptrace$getsig(0x4202, 0xffffffffffffffff, 0x3, &(0x7f0000000200)) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000080)=@req3={0x8000, 0x6, 0x300, 0xfc}, 0x1c) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmmsg$inet(r1, &(0x7f00000020c0)=[{{0x0, 0x4000, &(0x7f0000000680)=[{&(0x7f00000004c0)='\f', 0x1}], 0x1}}], 0xfdef, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f000010"], 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = syz_io_uring_setup(0x239, &(0x7f0000000200)={0x0, 0x0, 0x10100}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r2, 0x2def, 0x0, 0x0, 0x0, 0x0) 12.917059382s ago: executing program 4 (id=584): socket$kcm(0xa, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x18) r0 = open(0x0, 0x4102, 0x0) write(r0, 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r1, 0x6, 0x23, 0x0, 0x0) creat(0x0, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/stat\x00', 0x0, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r2, 0x0, 0x27, &(0x7f0000000180)={@multicast2, @loopback}, 0xc) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000040)={'lo\x00'}) setsockopt$inet_msfilter(r2, 0x0, 0x29, &(0x7f0000000080)=ANY=[@ANYBLOB="e00000027f0007000000000002"], 0x18) 12.701297272s ago: executing program 1 (id=586): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000b00)=ANY=[@ANYBLOB="1401000022000100000000000000000002"], 0x114}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0xf}]}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock_addr=0xb, 0xffffffffffffffff, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 12.414755612s ago: executing program 5 (id=587): openat$cuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet6_tcp(0xa, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) prlimit64(0x0, 0xe, 0x0, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x140, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001480), 0x42002, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000400)='/proc/stat\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x20000023896) 11.071021353s ago: executing program 35 (id=587): openat$cuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet6_tcp(0xa, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) prlimit64(0x0, 0xe, 0x0, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x140, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001480), 0x42002, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000400)='/proc/stat\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x20000023896) 11.060559399s ago: executing program 1 (id=589): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_procfs(0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f0000000380)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r1, 0x3ba0, &(0x7f0000000040)={0x48, 0x2, r2, 0x0, 0x0}) ioctl$IOMMU_DESTROY$ioas(r1, 0x3b80, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_REPLACE(r1, 0x3ba0, &(0x7f0000000300)={0x48, 0xa, r3, 0x0, r2}) 11.044349078s ago: executing program 3 (id=590): socket$inet_tcp(0x2, 0x1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffdd, 0xa}, [@ldst={0x3, 0x0, 0x3, 0x1c10a1, 0x0, 0xa4}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xb5, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) 11.043642773s ago: executing program 4 (id=591): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0xff, 0x0, 0x7fff7ffc}]}) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_SET_ABSBIT(r1, 0x40045567, 0x0) socket$igmp(0x2, 0x3, 0x2) fstat(0xffffffffffffffff, 0x0) quotactl_fd$Q_SETQUOTA(0xffffffffffffffff, 0xffffffff80000800, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x10e, &(0x7f0000000280)={[{@errors_remount}, {@nodelalloc}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2e}}, {@grpid}, {@block_validity}, {@quota}]}, 0x3, 0x44d, &(0x7f0000000a40)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x3) write$uinput_user_dev(r1, &(0x7f0000001740)={'syz1\x00', {}, 0x0, [0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdd22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc], [0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x6], [0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c) ioctl$UI_DEV_CREATE(r1, 0x5501) close_range(r0, 0xffffffffffffffff, 0x0) 9.654211165s ago: executing program 3 (id=592): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='writeback_bdi_register\x00', r3}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='writeback_bdi_register\x00', r4}, 0x10) r5 = dup(r2) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[], [], 0x6b}}) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r8 = dup(r7) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r6, @ANYBLOB=',wfdno=', @ANYRESHEX=r8]) 9.321666412s ago: executing program 7 (id=593): r0 = fsopen(&(0x7f0000005880)='zonefs\x00', 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000002c0)={0xffffffffffffffff}, 0x13f}}, 0x20) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) r6 = dup(r5) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0x2, 0x4e21, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0xa, 0x0, 0x0, @mcast2}, r2}}, 0x48) r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000000480)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000002c0)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r7, &(0x7f0000000380)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f0000000580)=0x1, r8, 0x0, 0x2, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r7, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0x0, @loopback}, {0xa, 0x0, 0x0, @remote}, r8}}, 0x48) close_range(r0, r6, 0x0) 9.157772642s ago: executing program 1 (id=594): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_io_uring_setup(0x237, &(0x7f0000000480)={0x0, 0x8101, 0x0, 0x0, 0x2cf}, &(0x7f0000000040)=0x0, &(0x7f0000000600)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_FSYNC={0x3, 0x4, 0x0, @fd_index=0x7}) io_uring_enter(r3, 0x7e77, 0x2b49, 0x0, 0x0, 0x0) 8.865172113s ago: executing program 4 (id=595): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00') r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) getdents(r0, 0x0, 0x58) r1 = io_uring_setup(0xaab, &(0x7f0000000340)={0x0, 0x40000001}) r2 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r2, &(0x7f000047b000)={0xa, 0x4e20, 0x4, @loopback}, 0x1c) listen(r2, 0x20000005) r3 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r4 = accept4(r2, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, 0x0, 0x4, 0x70bd28, 0x25dfdbfc, {{}, {}, {0x18, 0x17, {0x3, 0x5, @l2={'ib', 0x3a, 'ip6gre0\x00'}}}}, ["", "", ""]}, 0x34}, 0x1, 0x0, 0x0, 0x8040}, 0x200040d4) close_range(r1, 0xffffffffffffffff, 0x0) 7.775072205s ago: executing program 1 (id=596): syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) syz_init_net_socket$netrom(0x6, 0x5, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x5, 0x4, 0x3, 0xa4, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0xc, 0x4, 0x4, 0xa4, 0x8, r0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) socket$kcm(0x2, 0x5, 0x84) r1 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x12, 0xd, &(0x7f0000000580)=ANY=[@ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @cgroup_sock_addr=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r2, &(0x7f0000000140)={0xa, 0x0, 0x0, @dev, 0x9}, 0x1c) r3 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000004c0)=ANY=[@ANYBLOB="d8000000", @ANYRES16=0x0, @ANYBLOB="04002dbd7000f2dbdf254f0000000c00839ced540000680000004c007a8008000400000000181c000200134ecc4d908540c3c8630b918a29360800040004005111335ced5fd94e0800040009000000080004000300000048007a801400010003d869f47d8c428eaa74b31794b4b314b5000400000000000c0003004180081ee4f88f1a080004000c0000000c0003007858754e3c504054080004000800000004007a8020007a800800040005000000140002002929590c"], 0xd8}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendmsg(r2, &(0x7f00000000c0)={0x0, 0x9521, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0x5dc}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) 7.626712173s ago: executing program 7 (id=597): sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x80000000000001, 0x0, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, 0x0, 0x78) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) getsockname$packet(r1, 0x0, 0x0) r2 = syz_io_uring_setup(0x4b5, &(0x7f0000010400)={0x0, 0x86e1, 0x1, 0x8}, &(0x7f0000010080), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f0000010300)=[{0x0}, {&(0x7f0000010380)=""/47, 0x2f}], 0x2) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r2, 0x10, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000540)=[{0x0}, {&(0x7f0000000340), 0xa002a0}], &(0x7f00000005c0), 0x2}, 0x20) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) 7.532486194s ago: executing program 3 (id=598): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f0000000000)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r3, 0xc06864a1, &(0x7f0000000100)={0x0, 0x13, r4, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r3, 0xc06864ce, &(0x7f00000001c0)={r5, 0x2, 0x22540000, 0x0, 0x0, [0x0], [], [0x0, 0x0, 0x100, 0xd], [0x0, 0x0, 0xfffffffffffffffd]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc00c642d, &(0x7f0000000080)={r6, 0x0, 0xffffffffffffffff}) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1000004, 0x12, r7, 0x0) read$nci(r0, &(0x7f00000019c0)=""/97, 0x61) r8 = syz_genetlink_get_family_id$nfc(&(0x7f0000000240), r2) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r8, @ANYBLOB="0100000000000000000002000000080001"], 0x1c}}, 0x0) 1.835339313s ago: executing program 8 (id=588): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_io_uring_setup(0x45, &(0x7f0000000300)={0x0, 0x0, 0x40, 0x2, 0x18}, &(0x7f0000000100), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_PBUF_RING(r3, 0x22, &(0x7f0000000380)={&(0x7f0000001000)={[{0x0, 0x0, 0x1}]}, 0x1}, 0x1) 1.834179724s ago: executing program 7 (id=608): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet_sctp(0x2, 0x1, 0x84) bind$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) setsockopt$inet_sctp_SCTP_INITMSG(r3, 0x84, 0x2, &(0x7f0000000040)={0x803, 0x3, 0x0, 0x3}, 0x8) sendto$inet(r3, &(0x7f0000000300)="ab", 0x1, 0x0, &(0x7f0000000100)={0x2, 0x4e22, @local}, 0x10) 1.822088215s ago: executing program 1 (id=609): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a78000000060a0b0400000000000000000200000038000480340001800b"], 0xa0}}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) read$FUSE(r1, &(0x7f0000000140)={0x2020}, 0x2020) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000200)={0x0, 0x0, 0xf000, 0x2000, &(0x7f0000f9a000/0x2000)=nil}) r4 = dup(r3) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f0000000040)=@x86={0x0, 0x0, 0x0, 0x0, 0x0, 0x8}) ioctl$KVM_SET_VAPIC_ADDR(r4, 0x4008ae93, &(0x7f00000000c0)=0xffff) ioctl$KVM_RUN(r4, 0xae80, 0x0) 1.808997102s ago: executing program 3 (id=610): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0xc0800, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_smc(0x2b, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000202070"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = syz_io_uring_setup(0x24fa, &(0x7f0000000080)={0x0, 0x0, 0x10100, 0x1, 0x2c3}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)) write$UHID_CREATE2(r4, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r4, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_ASYNC_CANCEL={0xe, 0x2, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r1, 0x2d3e, 0x0, 0x0, 0x0, 0x0) 1.789170006s ago: executing program 4 (id=611): tee(0xffffffffffffffff, 0xffffffffffffffff, 0x3, 0x2) io_setup(0x7, &(0x7f0000000040)=0x0) r1 = openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0) io_submit(r0, 0x2, &(0x7f0000001500)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000000280)="1c", 0x1}, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8, 0x0, r1, 0x0}]) r2 = openat$vicodec0(0xffffffffffffff9c, 0x0, 0x2, 0x0) r3 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) getsockopt$llc_int(r3, 0x10c, 0x8, &(0x7f0000000000), &(0x7f0000000040)=0x4) ioctl$VIDIOC_S_CROP(r2, 0x4014563c, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) r4 = openat$kvm(0x0, &(0x7f0000000000), 0x101000, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) mbind(&(0x7f0000a40000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, 0x2) 213.640867ms ago: executing program 8 (id=599): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_io_uring_setup(0x119, &(0x7f0000000140)={0x0, 0xf84c, 0x400}, &(0x7f0000000240)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x20, 0x0, @fd=r3, 0x8, &(0x7f0000000400)=[{0x0}], 0x1, 0x1d}) io_uring_enter(r3, 0x47f6, 0x0, 0x0, 0x0, 0x0) 213.464926ms ago: executing program 3 (id=600): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) close(r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller0\x00', @random="371692e7f7ef"}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r3, 0x8943, &(0x7f0000000100)={'syzkaller0\x00'}) ioctl$SIOCSIFHWADDR(r2, 0x8943, &(0x7f0000002280)={'syzkaller0\x00', @random="110000000002"}) 209.132612ms ago: executing program 7 (id=613): r0 = landlock_create_ruleset(&(0x7f0000000140)={0x0, 0x3, 0x3}, 0x18, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) r1 = landlock_create_ruleset(&(0x7f0000000000)={0x0, 0x3}, 0x10, 0x0) landlock_restrict_self(r1, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r1, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) pivot_root(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f00000001c0)='./file0/../file0/../file0\x00') 84.807423ms ago: executing program 7 (id=601): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) rseq(&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x6}, 0x20, 0x0, 0x0) lchown(&(0x7f00000006c0)='./file0\x00', 0x0, 0xee01) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ptrace$getregs(0xe, r2, 0xc, &(0x7f0000000540)=""/229) 0s ago: executing program 3 (id=602): mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r1 = fanotify_init(0xf00, 0x0) fanotify_mark(r1, 0x105, 0x5000003a, r0, 0x0) r2 = fanotify_init(0x28, 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) fanotify_mark(r2, 0x41, 0x8000038, r3, 0x0) r4 = fanotify_init(0x8, 0x0) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) fanotify_mark(r4, 0x61, 0x40001002, r5, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000240), 0x0, &(0x7f0000000480)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.138' (ED25519) to the list of known hosts. [ 83.699235][ T5818] cgroup: Unknown subsys name 'net' [ 83.877947][ T5818] cgroup: Unknown subsys name 'cpuset' [ 83.887343][ T5818] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 85.534035][ T5818] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 89.872356][ T5142] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 89.881618][ T5142] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 89.894454][ T5142] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 89.902412][ T5142] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 89.911236][ T5142] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 89.918849][ T5142] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 89.926971][ T5142] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 89.932536][ T5846] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 89.935436][ T5142] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 89.949430][ T5142] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 89.957394][ T5846] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 89.958963][ T54] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 89.973372][ T54] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 89.981873][ T54] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 89.989970][ T5846] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 89.990212][ T54] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 90.000765][ T5847] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 90.009482][ T54] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 90.014059][ T5847] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 90.020073][ T54] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 90.026041][ T5847] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 90.035305][ T54] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 90.039377][ T5847] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 90.047310][ T54] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 90.060677][ T5844] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 90.061219][ T54] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 90.076867][ T54] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 90.099262][ T5833] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 90.107150][ T5833] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 90.114896][ T5833] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 90.709667][ T5830] chnl_net:caif_netlink_parms(): no params data found [ 90.721511][ T5840] chnl_net:caif_netlink_parms(): no params data found [ 90.767941][ T5837] chnl_net:caif_netlink_parms(): no params data found [ 91.018599][ T5829] chnl_net:caif_netlink_parms(): no params data found [ 91.109508][ T5837] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.116895][ T5837] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.125416][ T5837] bridge_slave_0: entered allmulticast mode [ 91.132522][ T5837] bridge_slave_0: entered promiscuous mode [ 91.141054][ T5830] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.148674][ T5830] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.156066][ T5830] bridge_slave_0: entered allmulticast mode [ 91.162964][ T5830] bridge_slave_0: entered promiscuous mode [ 91.178407][ T5830] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.185679][ T5830] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.192807][ T5830] bridge_slave_1: entered allmulticast mode [ 91.200521][ T5830] bridge_slave_1: entered promiscuous mode [ 91.229004][ T5840] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.236245][ T5840] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.243706][ T5840] bridge_slave_0: entered allmulticast mode [ 91.250827][ T5840] bridge_slave_0: entered promiscuous mode [ 91.259549][ T5840] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.267386][ T5840] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.274722][ T5840] bridge_slave_1: entered allmulticast mode [ 91.281672][ T5840] bridge_slave_1: entered promiscuous mode [ 91.289267][ T5837] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.296451][ T5837] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.304237][ T5837] bridge_slave_1: entered allmulticast mode [ 91.311228][ T5837] bridge_slave_1: entered promiscuous mode [ 91.416048][ T5830] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 91.477178][ T5830] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 91.499807][ T5840] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 91.518650][ T5840] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 91.530405][ T5837] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 91.586267][ T5837] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 91.607513][ T5829] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.615670][ T5829] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.622787][ T5829] bridge_slave_0: entered allmulticast mode [ 91.630053][ T5829] bridge_slave_0: entered promiscuous mode [ 91.657832][ T5830] team0: Port device team_slave_0 added [ 91.695496][ T5829] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.702603][ T5829] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.710381][ T5829] bridge_slave_1: entered allmulticast mode [ 91.720176][ T5829] bridge_slave_1: entered promiscuous mode [ 91.729731][ T5830] team0: Port device team_slave_1 added [ 91.749360][ T5832] chnl_net:caif_netlink_parms(): no params data found [ 91.783582][ T5840] team0: Port device team_slave_0 added [ 91.827685][ T5830] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.834722][ T5830] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.861253][ T5830] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.865450][ T972] cfg80211: failed to load regulatory.db [ 91.877761][ T5837] team0: Port device team_slave_0 added [ 91.886051][ T5840] team0: Port device team_slave_1 added [ 91.932007][ T5830] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.939315][ T5830] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.966302][ T5830] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 92.003409][ T5837] team0: Port device team_slave_1 added [ 92.012049][ T5829] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 92.082616][ T5829] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 92.084941][ T5839] Bluetooth: hci4: command tx timeout [ 92.140540][ T5840] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 92.147758][ T5840] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.173798][ T5840] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 92.174241][ T5839] Bluetooth: hci1: command tx timeout [ 92.184356][ T5833] Bluetooth: hci2: command tx timeout [ 92.190514][ T5839] Bluetooth: hci0: command tx timeout [ 92.198654][ T5840] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 92.208737][ T5840] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.234682][ T5840] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 92.254312][ T5839] Bluetooth: hci3: command tx timeout [ 92.292390][ T5829] team0: Port device team_slave_0 added [ 92.302554][ T5829] team0: Port device team_slave_1 added [ 92.309063][ T5832] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.316312][ T5832] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.323426][ T5832] bridge_slave_0: entered allmulticast mode [ 92.332775][ T5832] bridge_slave_0: entered promiscuous mode [ 92.349362][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 92.356400][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.382409][ T5837] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 92.396259][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 92.403204][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.429529][ T5837] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 92.447265][ T5830] hsr_slave_0: entered promiscuous mode [ 92.453845][ T5830] hsr_slave_1: entered promiscuous mode [ 92.475397][ T5832] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.482552][ T5832] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.490445][ T5832] bridge_slave_1: entered allmulticast mode [ 92.497739][ T5832] bridge_slave_1: entered promiscuous mode [ 92.557186][ T5829] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 92.564636][ T5829] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.591129][ T5829] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 92.686701][ T5837] hsr_slave_0: entered promiscuous mode [ 92.693064][ T5837] hsr_slave_1: entered promiscuous mode [ 92.699524][ T5837] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 92.708539][ T5837] Cannot create hsr debugfs directory [ 92.715573][ T5829] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 92.722529][ T5829] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.748542][ T5829] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 92.771037][ T5832] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 92.784573][ T5832] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 92.798907][ T5840] hsr_slave_0: entered promiscuous mode [ 92.806308][ T5840] hsr_slave_1: entered promiscuous mode [ 92.812479][ T5840] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 92.820467][ T5840] Cannot create hsr debugfs directory [ 92.938047][ T5829] hsr_slave_0: entered promiscuous mode [ 92.945765][ T5829] hsr_slave_1: entered promiscuous mode [ 92.952887][ T5829] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 92.960488][ T5829] Cannot create hsr debugfs directory [ 93.028374][ T5832] team0: Port device team_slave_0 added [ 93.087077][ T5832] team0: Port device team_slave_1 added [ 93.195637][ T5832] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 93.202616][ T5832] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 93.228865][ T5832] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 93.265602][ T5832] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 93.272565][ T5832] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 93.299582][ T5832] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 93.547181][ T5832] hsr_slave_0: entered promiscuous mode [ 93.553542][ T5832] hsr_slave_1: entered promiscuous mode [ 93.560277][ T5832] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 93.567937][ T5832] Cannot create hsr debugfs directory [ 93.594637][ T5830] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 93.644707][ T5830] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 93.685714][ T5830] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 93.719628][ T5830] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 93.794888][ T5837] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 93.820612][ T5837] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 93.830833][ T5837] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 93.859289][ T5837] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 93.973204][ T5840] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 93.998564][ T5840] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 94.017282][ T5840] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 94.050923][ T5840] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 94.106336][ T5829] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 94.129768][ T5829] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 94.144595][ T5829] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 94.155722][ T5829] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 94.165449][ T5839] Bluetooth: hci4: command tx timeout [ 94.244484][ T5839] Bluetooth: hci0: command tx timeout [ 94.247800][ T54] Bluetooth: hci2: command tx timeout [ 94.249985][ T5839] Bluetooth: hci1: command tx timeout [ 94.299102][ T5832] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 94.323983][ T5839] Bluetooth: hci3: command tx timeout [ 94.329508][ T5832] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 94.358001][ T5832] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 94.386904][ T5832] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 94.519176][ T5830] 8021q: adding VLAN 0 to HW filter on device bond0 [ 94.583052][ T5840] 8021q: adding VLAN 0 to HW filter on device bond0 [ 94.607391][ T5830] 8021q: adding VLAN 0 to HW filter on device team0 [ 94.631853][ T5837] 8021q: adding VLAN 0 to HW filter on device bond0 [ 94.641605][ T61] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.648918][ T61] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.677894][ T61] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.685084][ T61] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.765195][ T5840] 8021q: adding VLAN 0 to HW filter on device team0 [ 94.809960][ T5837] 8021q: adding VLAN 0 to HW filter on device team0 [ 94.819404][ T61] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.826536][ T61] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.839898][ T61] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.847015][ T61] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.908388][ T5832] 8021q: adding VLAN 0 to HW filter on device bond0 [ 94.932037][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.939238][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.971042][ T5829] 8021q: adding VLAN 0 to HW filter on device bond0 [ 94.990349][ T5832] 8021q: adding VLAN 0 to HW filter on device team0 [ 95.019458][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.026664][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 95.047687][ T1145] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.054900][ T1145] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.157715][ T1145] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.164930][ T1145] bridge0: port 2(bridge_slave_1) entered forwarding state [ 95.185377][ T5829] 8021q: adding VLAN 0 to HW filter on device team0 [ 95.228186][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.235403][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.262966][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.270091][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 95.437142][ T5832] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 95.482584][ T5830] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 95.672136][ T5830] veth0_vlan: entered promiscuous mode [ 95.779678][ T5830] veth1_vlan: entered promiscuous mode [ 95.836946][ T5840] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 95.914359][ T5837] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 95.959132][ T5830] veth0_macvtap: entered promiscuous mode [ 96.010292][ T5832] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 96.026272][ T5830] veth1_macvtap: entered promiscuous mode [ 96.040641][ T5829] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 96.140116][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 96.201648][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 96.219381][ T5840] veth0_vlan: entered promiscuous mode [ 96.237397][ T5832] veth0_vlan: entered promiscuous mode [ 96.245987][ T5839] Bluetooth: hci4: command tx timeout [ 96.271738][ T5830] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.282240][ T5830] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.291104][ T5830] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.299914][ T5830] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.315498][ T5840] veth1_vlan: entered promiscuous mode [ 96.325740][ T5839] Bluetooth: hci1: command tx timeout [ 96.330017][ T54] Bluetooth: hci2: command tx timeout [ 96.331142][ T5839] Bluetooth: hci0: command tx timeout [ 96.348811][ T5829] veth0_vlan: entered promiscuous mode [ 96.389807][ T5832] veth1_vlan: entered promiscuous mode [ 96.403577][ T5829] veth1_vlan: entered promiscuous mode [ 96.410178][ T5839] Bluetooth: hci3: command tx timeout [ 96.491048][ T5840] veth0_macvtap: entered promiscuous mode [ 96.519984][ T5840] veth1_macvtap: entered promiscuous mode [ 96.586013][ T5829] veth0_macvtap: entered promiscuous mode [ 96.602239][ T5837] veth0_vlan: entered promiscuous mode [ 96.614902][ T1145] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.622867][ T1145] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.627073][ T5829] veth1_macvtap: entered promiscuous mode [ 96.645985][ T5832] veth0_macvtap: entered promiscuous mode [ 96.693634][ T5832] veth1_macvtap: entered promiscuous mode [ 96.714293][ T5840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 96.725846][ T5840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.737033][ T5840] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 96.751934][ T5840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 96.762550][ T5840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.777239][ T5840] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 96.791811][ T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.795261][ T5829] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 96.800388][ T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.810815][ T5829] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.827915][ T5829] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 96.838389][ T5829] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.850161][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 96.869441][ T5837] veth1_vlan: entered promiscuous mode [ 96.876807][ T5840] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.892011][ T5840] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.902938][ T5840] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.911796][ T5840] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.935942][ T5832] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 96.946583][ T5832] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.956662][ T5832] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 96.968489][ T5832] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.978372][ T5832] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 96.988908][ T5832] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.000545][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 97.012985][ T5829] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 97.028884][ T5829] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.039088][ T5829] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 97.050582][ T5829] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.062502][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 97.089247][ T5832] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 97.107869][ T5832] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.120345][ T5832] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 97.131913][ T5832] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.142414][ T5832] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 97.152881][ T5832] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.164966][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 97.182480][ T5830] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 97.186559][ T5829] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.207960][ T5829] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.217376][ T5829] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.227634][ T5829] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.297194][ T5832] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.318689][ T5832] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.328627][ T5832] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.342770][ T5832] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.709950][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.717883][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.515562][ T5837] veth0_macvtap: entered promiscuous mode [ 98.577671][ T61] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.586687][ T61] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.603006][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.633869][ T5833] Bluetooth: hci0: command tx timeout [ 98.633891][ T54] Bluetooth: hci2: command tx timeout [ 98.639906][ T5833] Bluetooth: hci1: command tx timeout [ 98.647982][ T5835] Bluetooth: hci3: command tx timeout [ 98.650567][ T5839] Bluetooth: hci4: command tx timeout [ 98.674116][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.717127][ T5837] veth1_macvtap: entered promiscuous mode [ 98.763130][ T5924] loop2: detected capacity change from 0 to 1024 [ 98.825149][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.833068][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.912278][ T5924] EXT4-fs: Ignoring removed orlov option [ 98.923522][ T5924] EXT4-fs (loop2): Test dummy encryption mode enabled [ 99.019970][ T5924] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 99.021616][ T5931] dccp_close: ABORT with 2 bytes unread [ 99.053237][ T5837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 99.130074][ T5837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 99.163169][ T5837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 99.179337][ T5837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 99.190067][ T5837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 99.207031][ T5837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 99.219468][ T5837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 99.240218][ T5837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 99.262017][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 99.284503][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.292334][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.392934][ T5837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 99.405254][ T5837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 99.431004][ T5837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 99.443281][ T5837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 99.452919][ T5924] fscrypt: AES-256-CBC-CTS using implementation "cts-cbc-aes-aesni" [ 99.462422][ T5837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 99.491812][ T5837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 99.516418][ T5837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 99.527083][ T5837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 99.545500][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 99.595390][ T61] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.608678][ T5837] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.637209][ T61] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.645264][ T5924] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 99.658133][ T5837] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.667996][ T5837] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.701951][ T5837] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.876986][ T5830] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.993829][ T5922] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.001696][ T5922] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.315900][ T5954] loop3: detected capacity change from 0 to 1024 [ 102.716566][ T5947] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.757291][ T5947] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 103.894455][ T5974] loop2: detected capacity change from 0 to 512 [ 103.915431][ T5969] hfsplus: b-tree write err: -5, ino 3 [ 104.040953][ T5979] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 104.107741][ T5974] EXT4-fs warning (device loop2): ext4_enable_quotas:7145: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 104.189711][ T5974] EXT4-fs (loop2): mount failed [ 105.243753][ T5883] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 105.316793][ T5947] hfsplus: b-tree write err: -5, ino 3 [ 105.464305][ T5883] usb 1-1: config 0 has an invalid interface number: 82 but max is 0 [ 105.472562][ T5883] usb 1-1: config 0 has no interface number 0 [ 105.553734][ T5883] usb 1-1: New USB device found, idVendor=1bcf, idProduct=0b40, bcdDevice=bc.cc [ 105.585240][ T5883] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 105.625143][ T5883] usb 1-1: config 0 descriptor?? [ 105.659276][ T5883] usb 1-1: Found UVC 0.00 device (1bcf:0b40) [ 105.688379][ T5883] usb 1-1: Forcing UVC version to 1.0a [ 105.883203][ T5883] usb 1-1: No valid video chain found. [ 105.934183][ T2151] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 106.819968][ T2151] usb 5-1: Using ep0 maxpacket: 16 [ 106.832925][ T2151] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 106.834680][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 106.852319][ T2151] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 106.852852][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 106.880787][ T2151] usb 5-1: New USB device found, idVendor=044e, idProduct=120c, bcdDevice= 0.00 [ 106.936506][ T2151] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 106.950600][ T5883] usb 1-1: USB disconnect, device number 2 [ 106.999090][ T2151] usb 5-1: config 0 descriptor?? [ 108.899348][ T0] NOHZ tick-stop error: local softirq work is pending, handler #300!!! [ 108.954476][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 109.133959][ T0] NOHZ tick-stop error: local softirq work is pending, handler #8a!!! [ 109.176751][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 109.483837][ T0] NOHZ tick-stop error: local softirq work is pending, handler #142!!! [ 109.608600][ T0] NOHZ tick-stop error: local softirq work is pending, handler #01!!! [ 109.611228][ T2151] usbhid 5-1:0.0: can't add hid device: -71 [ 109.649119][ T2151] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 109.783144][ T2151] usb 5-1: USB disconnect, device number 2 [ 111.004090][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 112.288623][ T6033] netlink: 4 bytes leftover after parsing attributes in process `syz.2.30'. [ 112.320579][ T6033] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 112.365041][ T6033] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 112.419041][ T6033] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 112.435798][ T6033] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 113.919192][ T6036] loop4: detected capacity change from 0 to 32768 [ 114.494297][ T2151] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 114.603814][ T0] NOHZ tick-stop error: local softirq work is pending, handler #342!!! [ 114.764877][ T2151] usb 1-1: Using ep0 maxpacket: 16 [ 114.838962][ T2151] usb 1-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 9.00 [ 114.848311][ T2151] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 114.856381][ T2151] usb 1-1: Product: syz [ 114.863208][ T2151] usb 1-1: Manufacturer: syz [ 114.923844][ T2151] usb 1-1: SerialNumber: syz [ 114.954759][ T2151] usb 1-1: config 0 descriptor?? [ 114.983241][ T2151] ftdi_sio 1-1:0.0: FTDI USB Serial Device converter detected [ 115.016310][ T2151] usb 1-1: Detected FT232H [ 115.389723][ T2151] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 115.558745][ T6077] syz.0.37 uses obsolete (PF_INET,SOCK_PACKET) [ 115.608018][ T2151] ftdi_sio 1-1:0.0: GPIO initialisation failed: -71 [ 115.632690][ T2151] usb 1-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 115.661323][ T2151] usb 1-1: USB disconnect, device number 3 [ 115.682300][ T2151] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 115.738032][ T2151] ftdi_sio 1-1:0.0: device disconnected [ 116.209176][ T29] audit: type=1326 audit(1738832394.298:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6085 comm="syz.4.48" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba4798cde9 code=0x7ffc0000 [ 116.233051][ T29] audit: type=1326 audit(1738832394.298:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6085 comm="syz.4.48" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba4798cde9 code=0x7ffc0000 [ 116.253869][ T5823] usb 4-1: new full-speed USB device number 2 using dummy_hcd [ 116.257237][ T29] audit: type=1326 audit(1738832394.298:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6085 comm="syz.4.48" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba4798cde9 code=0x7ffc0000 [ 116.285102][ T29] audit: type=1326 audit(1738832394.298:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6085 comm="syz.4.48" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7fba4798cde9 code=0x7ffc0000 [ 116.307505][ T29] audit: type=1326 audit(1738832394.298:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6085 comm="syz.4.48" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba4798cde9 code=0x7ffc0000 [ 116.330072][ T29] audit: type=1326 audit(1738832394.298:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6085 comm="syz.4.48" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba4798cde9 code=0x7ffc0000 [ 116.467156][ T5823] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 116.489938][ T5823] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 116.521941][ T5823] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 116.573179][ T5823] usb 4-1: New USB device found, idVendor=17ef, idProduct=6067, bcdDevice= 0.00 [ 116.599594][ T5823] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 116.654643][ T5823] usb 4-1: config 0 descriptor?? [ 116.664400][ T6084] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 116.811755][ T6096] netlink: 'syz.0.53': attribute type 27 has an invalid length. [ 116.892160][ T6084] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 116.924277][ T6084] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 117.094018][ T6096] bridge0: port 2(bridge_slave_1) entered disabled state [ 117.102731][ T6096] bridge0: port 1(bridge_slave_0) entered disabled state [ 117.190867][ T5823] lenovo 0003:17EF:6067.0001: item fetching failed at offset 0/2 [ 117.221591][ T5823] lenovo 0003:17EF:6067.0001: hid_parse failed [ 117.240566][ T5823] lenovo 0003:17EF:6067.0001: probe with driver lenovo failed with error -22 [ 117.262056][ T6101] capability: warning: `syz.1.55' uses deprecated v2 capabilities in a way that may be insecure [ 117.340929][ T6090] loop4: detected capacity change from 0 to 32768 [ 117.448815][ T5823] usb 4-1: USB disconnect, device number 2 [ 117.465285][ T6096] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 117.584582][ T6096] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 118.651049][ T6099] loop2: detected capacity change from 0 to 40427 [ 118.662852][ T6096] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.679724][ T6099] F2FS-fs (loop2): Invalid segment/section count (31 != 24 * 1) [ 118.713822][ T6096] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.722716][ T6096] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.745856][ T6099] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 118.759032][ T6096] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.833315][ T6099] F2FS-fs (loop2): Unrecognized mount option "a" or missing value [ 118.924989][ T6111] xt_TPROXY: Can be used only with -p tcp or -p udp [ 119.652053][ T6097] 8021q: adding VLAN 0 to HW filter on device bond0 [ 119.670666][ T6097] 8021q: adding VLAN 0 to HW filter on device team0 [ 119.694505][ T6097] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 119.801862][ T6097] syz.0.53 (6097) used greatest stack depth: 18288 bytes left [ 119.860139][ T6122] netlink: 4 bytes leftover after parsing attributes in process `syz.1.60'. [ 120.557202][ T6131] loop2: detected capacity change from 0 to 164 [ 120.713824][ T6131] rock: directory entry would overflow storage [ 120.733890][ T6131] rock: sig=0x66, size=4, remaining=3 [ 121.625687][ T6139] loop1: detected capacity change from 0 to 512 [ 121.664416][ T6139] EXT4-fs (loop1): Test dummy encryption mode enabled [ 121.895517][ T6139] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2240: inode #12: comm syz.1.65: corrupted in-inode xattr: invalid ea_ino [ 121.980472][ T6139] EXT4-fs error (device loop1): ext4_orphan_get:1394: comm syz.1.65: couldn't read orphan inode 12 (err -117) [ 122.324321][ T5835] Bluetooth: hci3: command 0x0406 tx timeout [ 122.391418][ T6139] EXT4-fs (loop1): mounted filesystem 00000005-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 122.635537][ T6158] netlink: 'syz.2.68': attribute type 21 has an invalid length. [ 122.643295][ T6158] netlink: 'syz.2.68': attribute type 1 has an invalid length. [ 122.782407][ T6158] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.68'. [ 122.885346][ T6139] fscrypt: AES-256-XTS using implementation "xts-aes-aesni-avx" [ 122.901581][ T6139] EXT4-fs error (device loop1): ext4_add_entry:2444: inode #2: comm syz.1.65: Directory hole found for htree leaf block 0 [ 123.412800][ T5840] EXT4-fs (loop1): unmounting filesystem 00000005-0000-0000-0000-000000000000. [ 126.161417][ T6221] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 127.205625][ T6223] ip6gretap0: entered promiscuous mode [ 127.212301][ T6223] batadv_slave_0: entered promiscuous mode [ 128.245080][ T6233] input: syz0 as /devices/virtual/input/input5 [ 128.472242][ T6241] loop0: detected capacity change from 0 to 128 [ 128.501501][ T6241] gfs2: gfs2 mount does not exist [ 130.164125][ T6257] netlink: 8 bytes leftover after parsing attributes in process `syz.1.87'. [ 130.204931][ T6257] netlink: 8 bytes leftover after parsing attributes in process `syz.1.87'. [ 130.310339][ T6261] bridge_slave_0: left allmulticast mode [ 130.322962][ T6261] bridge_slave_0: left promiscuous mode [ 130.339995][ T6261] bridge0: port 1(bridge_slave_0) entered disabled state [ 130.393220][ T6261] bridge_slave_1: left allmulticast mode [ 130.403827][ T6261] bridge_slave_1: left promiscuous mode [ 130.410725][ T6261] bridge0: port 2(bridge_slave_1) entered disabled state [ 130.558650][ T6261] bond0: (slave bond_slave_0): Releasing backup interface [ 130.685224][ T6261] bond0: (slave bond_slave_1): Releasing backup interface [ 130.831288][ T6261] team0: Port device team_slave_0 removed [ 130.919176][ T6261] team0: Port device team_slave_1 removed [ 131.184403][ T6261] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 131.270708][ T6261] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 131.489824][ T6265] 8021q: adding VLAN 0 to HW filter on device bond0 [ 131.504147][ C0] IPv4: Oversized IP packet from 172.20.20.10 [ 131.508849][ T6265] bond0: (slave ipip0): The slave device specified does not support setting the MAC address [ 131.524993][ C1] IPv4: Oversized IP packet from 172.20.20.10 [ 131.532159][ C1] IPv4: Oversized IP packet from 172.20.20.10 [ 131.546255][ C1] IPv4: Oversized IP packet from 172.20.20.10 [ 131.563710][ C1] IPv4: Oversized IP packet from 172.20.20.10 [ 131.577553][ T6265] bond0: (slave ipip0): Error -95 calling set_mac_address [ 131.649206][ T6279] netlink: 'syz.3.95': attribute type 4 has an invalid length. [ 132.687678][ T6289] loop3: detected capacity change from 0 to 2048 [ 132.731601][ T6291] loop0: detected capacity change from 0 to 16 [ 132.782347][ T6291] erofs (device loop0): mounted with root inode @ nid 36. [ 132.819940][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.830091][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.863168][ T6292] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 132.883619][ T6291] erofs (device loop0): inline data across blocks @ nid 36 [ 132.893858][ T6291] syz.0.99: attempt to access beyond end of device [ 132.893858][ T6291] loop0: rw=524288, sector=34359738360, nr_sectors = 1976 limit=16 [ 133.102024][ T6295] warning: `syz.2.101' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 133.166035][ C1] Unknown status report in ack skb [ 134.276195][ T6307] bridge1: entered promiscuous mode [ 134.276221][ T6307] bridge1: entered allmulticast mode [ 134.401061][ T6311] evm: overlay not supported [ 134.443439][ T5839] Bluetooth: hci1: unexpected Set CIG Parameters response data [ 135.292438][ T29] audit: type=1326 audit(1738832412.638:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6315 comm="syz.4.107" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba4798cde9 code=0x7ffc0000 [ 135.402928][ T29] audit: type=1326 audit(1738832412.638:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6315 comm="syz.4.107" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba4798cde9 code=0x7ffc0000 [ 135.459876][ T29] audit: type=1326 audit(1738832412.648:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6315 comm="syz.4.107" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fba4798cde9 code=0x7ffc0000 [ 135.482345][ T29] audit: type=1326 audit(1738832412.648:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6315 comm="syz.4.107" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba4798cde9 code=0x7ffc0000 [ 135.513722][ T29] audit: type=1326 audit(1738832412.648:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6315 comm="syz.4.107" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba4798cde9 code=0x7ffc0000 [ 135.803725][ T29] audit: type=1326 audit(1738832412.658:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6315 comm="syz.4.107" exe="/root/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7fba4798cde9 code=0x7ffc0000 [ 136.777026][ T29] audit: type=1326 audit(1738832413.518:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6315 comm="syz.4.107" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba4798cde9 code=0x7ffc0000 [ 136.803787][ T29] audit: type=1326 audit(1738832413.518:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6315 comm="syz.4.107" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba4798cde9 code=0x7ffc0000 [ 136.827241][ T29] audit: type=1326 audit(1738832413.518:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6319 comm="syz.4.107" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fba479bf6a5 code=0x7ffc0000 [ 136.849442][ T29] audit: type=1326 audit(1738832413.698:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6319 comm="syz.4.107" exe="/root/syz-executor" sig=0 arch=c000003e syscall=60 compat=0 ip=0x7fba4798cde9 code=0x7ffc0000 [ 137.249631][ T6337] netlink: 28 bytes leftover after parsing attributes in process `syz.4.113'. [ 138.531217][ T5839] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 138.539852][ T5839] Bluetooth: hci1: Injecting HCI hardware error event [ 138.548369][ T5839] Bluetooth: hci1: hardware error 0x00 [ 140.723748][ T5839] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 142.071834][ T6372] loop2: detected capacity change from 0 to 256 [ 142.288542][ T6372] exfat: Deprecated parameter 'namecase' [ 142.534157][ T5823] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 142.610019][ T6372] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x1a9973fb, utbl_chksum : 0xe619d30d) [ 142.824257][ T5823] usb 2-1: Using ep0 maxpacket: 8 [ 143.081194][ T5823] usb 2-1: config 0 has no interfaces? [ 143.100647][ T5823] usb 2-1: New USB device found, idVendor=17a1, idProduct=0128, bcdDevice=bf.0a [ 143.120459][ T5823] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 143.177039][ T5823] usb 2-1: Product: syz [ 143.193891][ T5823] usb 2-1: Manufacturer: syz [ 143.198515][ T5823] usb 2-1: SerialNumber: syz [ 143.229030][ T5823] usb 2-1: config 0 descriptor?? [ 143.352008][ T2151] libceph: connect (1)[c::]:6789 error -101 [ 143.393319][ T2151] libceph: mon0 (1)[c::]:6789 connect error [ 143.464744][ T6374] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 143.505021][ T6374] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 143.530484][ T1154] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 143.544720][ T6377] ceph: No mds server is up or the cluster is laggy [ 143.571827][ T5823] usb 2-1: USB disconnect, device number 2 [ 143.777769][ T1154] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.166892][ T1154] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.796890][ T1154] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.044439][ T5835] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 146.052921][ T2151] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 146.053086][ T5835] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 146.068469][ T5835] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 146.078624][ T5835] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 146.103268][ T6401] loop4: detected capacity change from 0 to 512 [ 146.119374][ T6401] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 146.131281][ T5835] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 146.150373][ T5835] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 146.164238][ T6401] EXT4-fs (loop4): invalid journal inode [ 146.170006][ T6401] EXT4-fs (loop4): can't get journal size [ 146.272697][ T6401] EXT4-fs (loop4): 1 truncate cleaned up [ 146.286242][ T2151] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 146.297786][ T6397] kvm: pic: level sensitive irq not supported [ 146.320453][ T2151] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 146.340747][ T1154] bridge_slave_1: left allmulticast mode [ 146.342152][ T6401] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 146.359427][ T1154] bridge_slave_1: left promiscuous mode [ 146.360779][ T1154] bridge0: port 2(bridge_slave_1) entered disabled state [ 146.379050][ T2151] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 146.426232][ T1154] bridge_slave_0: left allmulticast mode [ 146.431466][ T6401] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 146.445640][ T2151] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 146.457256][ T1154] bridge_slave_0: left promiscuous mode [ 146.460460][ T2151] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 146.466098][ T1154] bridge0: port 1(bridge_slave_0) entered disabled state [ 146.472504][ T2151] usb 2-1: Product: syz [ 146.482823][ T2151] usb 2-1: Manufacturer: syz [ 146.492260][ T2151] usb 2-1: SerialNumber: syz [ 146.562046][ T2151] cdc_ncm 2-1:1.0: skipping garbage [ 146.611280][ T2151] cdc_ncm 2-1:1.0: CDC Union missing and no IAD found [ 146.653769][ T2151] cdc_ncm 2-1:1.0: bind() failure [ 146.812450][ T2151] usb 2-1: USB disconnect, device number 3 [ 147.055026][ T2151] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 147.104399][ T2151] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz1] on syz0 [ 147.464577][ T5883] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 147.705681][ T5883] usb 1-1: Using ep0 maxpacket: 16 [ 147.832409][ T5883] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 129, changing to 11 [ 148.244298][ T5835] Bluetooth: hci1: command tx timeout [ 148.324097][ T5883] usb 1-1: config 0 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 148.349043][ T5883] usb 1-1: config 0 interface 0 has no altsetting 0 [ 148.362742][ T5883] usb 1-1: New USB device found, idVendor=056a, idProduct=0029, bcdDevice= 0.00 [ 148.376966][ T5883] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 148.401654][ T5883] usb 1-1: config 0 descriptor?? [ 148.529152][ T6425] loop3: detected capacity change from 0 to 256 [ 148.768049][ T6425] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 148.783726][ T5883] usbhid 1-1:0.0: can't add hid device: -71 [ 148.789780][ T5883] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 148.807044][ T5883] usb 1-1: USB disconnect, device number 4 [ 149.067005][ T1154] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 149.187702][ T1154] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 149.238125][ T1154] bond0 (unregistering): Released all slaves [ 149.697892][ T6435] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 150.324964][ T5835] Bluetooth: hci1: command tx timeout [ 150.882091][ T6465] loop0: detected capacity change from 0 to 64 [ 150.965221][ T6465] ======================================================= [ 150.965221][ T6465] WARNING: The mand mount option has been deprecated and [ 150.965221][ T6465] and is ignored by this kernel. Remove the mand [ 150.965221][ T6465] option from the mount to silence this warning. [ 150.965221][ T6465] ======================================================= [ 151.044824][ T6465] minix: Unknown parameter '>' [ 152.028691][ T29] kauditd_printk_skb: 18 callbacks suppressed [ 152.028708][ T29] audit: type=1804 audit(1738832430.108:36): pid=6484 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.154" name="/newroot/29/file1" dev="fuse" ino=1 res=1 errno=0 [ 152.067235][ T6486] loop1: detected capacity change from 0 to 512 [ 152.088442][ T1154] hsr_slave_0: left promiscuous mode [ 152.130998][ T6486] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 152.156411][ T29] audit: type=1800 audit(1738832430.108:37): pid=6484 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.154" name="/" dev="fuse" ino=1 res=0 errno=0 [ 152.172891][ T6486] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 152.192825][ T1154] hsr_slave_1: left promiscuous mode [ 152.545601][ T1154] veth1_macvtap: left promiscuous mode [ 152.552661][ T1154] veth0_macvtap: left promiscuous mode [ 152.570656][ T5835] Bluetooth: hci1: command tx timeout [ 153.435825][ T6486] EXT4-fs (loop1): 1 truncate cleaned up [ 153.573191][ T6486] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 153.613309][ T1154] veth1_vlan: left promiscuous mode [ 153.687306][ T1154] veth0_vlan: left promiscuous mode [ 154.643936][ T5835] Bluetooth: hci1: command tx timeout [ 156.324764][ T6512] netlink: 4 bytes leftover after parsing attributes in process `syz.3.162'. [ 156.656913][ T5840] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 156.893431][ T6520] loop1: detected capacity change from 0 to 1024 [ 156.980768][ T6520] hfsplus: request for non-existent node 2048 in B*Tree [ 156.995603][ T6520] hfsplus: request for non-existent node 2048 in B*Tree [ 157.438271][ T6523] loop0: detected capacity change from 0 to 2048 [ 158.392535][ T6523] [EXT4 FS bs=2048, gc=1, bpg=262144, ipg=32, mo=a842c018, mo2=0102] [ 158.433832][ T6523] System zones: 0-7 [ 158.585382][ T6523] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 159.301432][ C0] vcan0: j1939_tp_rxtimer: 0xffff88807d367c00: rx timeout, send abort [ 159.812010][ C0] vcan0: j1939_tp_rxtimer: 0xffff88807d367c00: abort rx timeout. Force session deactivation [ 159.945436][ T5832] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 161.399191][ T29] audit: type=1326 audit(1738832439.488:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6548 comm="syz.1.172" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f80e158cde9 code=0x0 [ 161.490004][ T1154] team0 (unregistering): Port device team_slave_1 removed [ 161.549380][ T1154] team0 (unregistering): Port device team_slave_0 removed [ 162.215291][ T6398] chnl_net:caif_netlink_parms(): no params data found [ 162.466864][ T6571] loop1: detected capacity change from 0 to 16 [ 162.488579][ T6571] erofs: Unknown parameter 'acl' [ 163.620713][ T6582] loop4: detected capacity change from 0 to 128 [ 163.867015][ T6588] netlink: 'syz.3.182': attribute type 6 has an invalid length. [ 163.913317][ T6398] bridge0: port 1(bridge_slave_0) entered blocking state [ 163.955446][ T6398] bridge0: port 1(bridge_slave_0) entered disabled state [ 164.002060][ T6398] bridge_slave_0: entered allmulticast mode [ 164.044730][ T6398] bridge_slave_0: entered promiscuous mode [ 164.100872][ T6398] bridge0: port 2(bridge_slave_1) entered blocking state [ 164.101003][ T6398] bridge0: port 2(bridge_slave_1) entered disabled state [ 164.101191][ T6398] bridge_slave_1: entered allmulticast mode [ 164.109657][ T6398] bridge_slave_1: entered promiscuous mode [ 164.270164][ T6597] netlink: 4 bytes leftover after parsing attributes in process `syz.3.184'. [ 164.278695][ T6597] A link change request failed with some changes committed already. Interface wg0 may have been left with an inconsistent configuration, please check. [ 164.289607][ T6398] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 164.295982][ T6398] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 165.068095][ T6608] loop0: detected capacity change from 0 to 512 [ 165.126990][ T6608] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 165.178285][ T6608] EXT4-fs (loop0): blocks per group (3008) and clusters per group (32768) inconsistent [ 165.178578][ T6398] team0: Port device team_slave_0 added [ 165.592480][ T6398] team0: Port device team_slave_1 added [ 165.775344][ T6608] loop0: detected capacity change from 0 to 2048 [ 165.788252][ T6398] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 165.798452][ T6608] EXT4-fs: Ignoring removed bh option [ 165.808565][ T6611] loop4: detected capacity change from 0 to 16 [ 165.827223][ T6611] erofs: Unknown parameter '' [ 165.828914][ T6398] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 165.872978][ T6398] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 165.891598][ T6398] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 165.900232][ T6398] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 165.908649][ T6608] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 165.942079][ T6398] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 166.268221][ T6398] hsr_slave_0: entered promiscuous mode [ 166.323184][ T6398] hsr_slave_1: entered promiscuous mode [ 167.330719][ T5832] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 167.985325][ T6398] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 168.016801][ T6398] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 168.057917][ T6398] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 168.334165][ T6398] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 168.383550][ T6682] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1738832446 (3477664892 ns) > initial count (12 ns). Using initial count to start timer. [ 168.983103][ T6398] 8021q: adding VLAN 0 to HW filter on device bond0 [ 169.224208][ T1154] ip6gretap0 (unregistering): left promiscuous mode [ 170.117019][ T5839] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 170.127852][ T5839] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 170.138162][ T5839] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 170.161606][ T5839] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 170.176090][ T5839] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 170.184931][ T5839] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 170.847967][ T1154] bond0 (unregistering): Released all slaves [ 171.078991][ T6398] 8021q: adding VLAN 0 to HW filter on device team0 [ 171.192216][ T971] bridge0: port 1(bridge_slave_0) entered blocking state [ 171.200861][ T971] bridge0: port 1(bridge_slave_0) entered forwarding state [ 171.323738][ T5890] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 171.573486][ T61] bridge0: port 2(bridge_slave_1) entered blocking state [ 171.582121][ T61] bridge0: port 2(bridge_slave_1) entered forwarding state [ 171.735504][ T5890] usb 2-1: config 0 has an invalid interface number: 64 but max is 0 [ 171.746354][ T5890] usb 2-1: config 0 has an invalid descriptor of length 88, skipping remainder of the config [ 171.766286][ T5890] usb 2-1: config 0 has no interface number 0 [ 171.790492][ T5890] usb 2-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48 [ 171.820975][ T5890] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 171.853894][ T5890] usb 2-1: Product: syz [ 171.858907][ T5890] usb 2-1: Manufacturer: syz [ 171.881404][ T5890] usb 2-1: SerialNumber: syz [ 171.932234][ T5890] usb 2-1: config 0 descriptor?? [ 171.938261][ T1154] batadv_slave_0: left promiscuous mode [ 171.986232][ T1154] hsr_slave_0: left promiscuous mode [ 172.006764][ T1154] hsr_slave_1: left promiscuous mode [ 172.244014][ T5839] Bluetooth: hci2: command tx timeout [ 172.403811][ T5890] usb 2-1: Found UVC 0.00 device syz (046d:0823) [ 172.417288][ T5890] usb 2-1: No valid video chain found. [ 172.453785][ T5890] usb 2-1: USB disconnect, device number 4 [ 173.952953][ T6748] netlink: 28 bytes leftover after parsing attributes in process `syz.1.212'. [ 173.964359][ T6748] netlink: 28 bytes leftover after parsing attributes in process `syz.1.212'. [ 174.324763][ T5839] Bluetooth: hci2: command tx timeout [ 174.923904][ T5823] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 175.116503][ T5823] usb 5-1: Using ep0 maxpacket: 32 [ 175.139722][ T5823] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 175.160206][ T5823] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 175.192084][ T5823] usb 5-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 175.241436][ T5823] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 175.452477][ T5823] usb 5-1: config 0 descriptor?? [ 175.967493][ T6748] bridge0: entered promiscuous mode [ 175.981671][ T6748] syz_tun: entered promiscuous mode [ 176.215967][ T5823] ft260 0003:0403:6030.0003: unknown main item tag 0x0 [ 176.396342][ T5823] ft260 0003:0403:6030.0003: failed to retrieve chip version [ 176.403863][ T5839] Bluetooth: hci2: command tx timeout [ 176.442535][ T5823] ft260 0003:0403:6030.0003: probe with driver ft260 failed with error -5 [ 176.449629][ T6699] chnl_net:caif_netlink_parms(): no params data found [ 176.772541][ T6398] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 177.217713][ T6699] bridge0: port 1(bridge_slave_0) entered blocking state [ 177.264098][ T6699] bridge0: port 1(bridge_slave_0) entered disabled state [ 177.295478][ T6699] bridge_slave_0: entered allmulticast mode [ 177.310742][ T6699] bridge_slave_0: entered promiscuous mode [ 177.339305][ T6699] bridge0: port 2(bridge_slave_1) entered blocking state [ 177.363979][ T6699] bridge0: port 2(bridge_slave_1) entered disabled state [ 177.386533][ T6699] bridge_slave_1: entered allmulticast mode [ 177.417866][ T6699] bridge_slave_1: entered promiscuous mode [ 177.586101][ T6699] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 177.639430][ T6699] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 177.834788][ T6699] team0: Port device team_slave_0 added [ 177.864292][ T6699] team0: Port device team_slave_1 added [ 178.023038][ T6699] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 178.063785][ T6699] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 178.121696][ T46] usb 5-1: USB disconnect, device number 3 [ 178.187861][ T6699] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 178.283169][ T6699] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 178.303745][ T6699] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 178.371299][ T6699] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 178.484065][ T5839] Bluetooth: hci2: command tx timeout [ 178.513975][ T6699] hsr_slave_0: entered promiscuous mode [ 178.521874][ T6699] hsr_slave_1: entered promiscuous mode [ 178.530180][ T6699] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 178.540303][ T6699] Cannot create hsr debugfs directory [ 178.750057][ T6398] veth0_vlan: entered promiscuous mode [ 178.820356][ T6398] veth1_vlan: entered promiscuous mode [ 180.445430][ T6398] veth0_macvtap: entered promiscuous mode [ 180.519430][ T6398] veth1_macvtap: entered promiscuous mode [ 180.582794][ T6398] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 180.628936][ T29] audit: type=1800 audit(1738832458.708:39): pid=6832 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.228" name="/" dev="9p" ino=2 res=0 errno=0 [ 180.661672][ T6398] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 180.698790][ T6398] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 180.722943][ T6398] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 180.745168][ T6398] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 180.767179][ T6398] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 180.798586][ T6398] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 180.822718][ T6398] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 180.874537][ T6398] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 180.894881][ T6398] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 180.907564][ T6398] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 180.919518][ T6398] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 180.932737][ T6398] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 180.953450][ T6398] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 181.986389][ T6398] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.033202][ T6398] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.051913][ T6398] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.537724][ T6854] gfs2: not a GFS2 filesystem [ 182.674936][ T6398] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 183.175013][ T6855] loop1: detected capacity change from 0 to 2048 [ 183.205491][ T6699] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 183.295551][ T6699] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 183.333393][ T6699] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 183.346261][ T5202] loop1: p1 < > p4 < > [ 183.399873][ T6855] loop1: p1 < > p4 < > [ 183.594317][ T6699] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 183.618984][ T5202] loop1: p1 < > p4 < > [ 183.677138][ T6860] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 183.775321][ T6867] NILFS (nullb0): couldn't find nilfs on the device [ 184.798120][ T5851] udevd[5851]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 184.951597][ T5841] udevd[5841]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 185.742927][ T5845] udevd[5845]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 185.761561][ T5841] udevd[5841]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 185.909559][ T5851] udevd[5851]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 186.367935][ T5845] udevd[5845]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 186.423310][ T6881] loop4: detected capacity change from 0 to 4096 [ 186.525320][ T6186] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 186.559838][ T6186] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 186.662071][ T6881] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 186.688830][ T6699] 8021q: adding VLAN 0 to HW filter on device bond0 [ 186.881987][ T6878] fs-verity: sha256 using implementation "sha256-avx2" [ 186.917581][ T6186] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 186.942825][ T6878] fs-verity (loop4, inode 16): fs-verity keyring is empty, rejecting signed file! [ 186.972392][ T6699] 8021q: adding VLAN 0 to HW filter on device team0 [ 186.991166][ T6186] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 187.104719][ T5922] bridge0: port 1(bridge_slave_0) entered blocking state [ 187.113838][ T5922] bridge0: port 1(bridge_slave_0) entered forwarding state [ 187.246796][ T1145] bridge0: port 2(bridge_slave_1) entered blocking state [ 187.255570][ T1145] bridge0: port 2(bridge_slave_1) entered forwarding state [ 188.220429][ T5837] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 188.262665][ T5839] Bluetooth: Unknown BR/EDR signaling command 0x11 [ 188.272201][ T5839] Bluetooth: Wrong link type (-22) [ 188.279836][ T5839] Bluetooth: Unknown BR/EDR signaling command 0x0f [ 188.287815][ T5839] Bluetooth: Wrong link type (-22) [ 188.371085][ T6699] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 188.957668][ T6941] Bluetooth: MGMT ver 1.23 [ 191.144377][ T6699] veth0_vlan: entered promiscuous mode [ 191.168624][ T6699] veth1_vlan: entered promiscuous mode [ 191.312043][ T6699] veth0_macvtap: entered promiscuous mode [ 191.662313][ T6699] veth1_macvtap: entered promiscuous mode [ 191.986962][ T6699] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 192.062201][ T6699] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 192.123817][ T6699] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 192.156924][ T6699] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 192.190486][ T6699] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 192.223738][ T6699] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 192.253307][ T6699] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 192.276167][ T6699] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 193.255383][ T6699] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 193.270491][ T6699] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 193.283030][ T6699] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 193.578959][ T6699] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 193.593275][ T6699] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 193.605825][ T6699] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 193.618349][ T6699] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 193.643589][ T6699] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 193.659616][ T6699] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 193.676305][ T6699] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 194.264079][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.272681][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.258386][ T6699] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 195.270482][ T6699] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 195.281718][ T6699] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 195.474811][ T6699] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 198.630520][ T7007] netlink: 4 bytes leftover after parsing attributes in process `syz.3.261'. [ 199.329967][ T971] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 199.824748][ T971] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 199.949718][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 200.251551][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 202.440418][ T7037] block device autoloading is deprecated and will be removed. [ 203.424768][ T7030] loop5: detected capacity change from 0 to 1024 [ 203.504023][ T7030] hfsplus: failed to load extents file [ 203.783027][ T7048] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 204.211212][ T7067] loop4: detected capacity change from 0 to 1024 [ 204.257531][ T7067] EXT4-fs: Ignoring removed oldalloc option [ 204.332107][ T7067] EXT4-fs (loop4): stripe (7) is not aligned with cluster size (16), stripe is disabled [ 204.528860][ T7067] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 204.673964][ T7078] loop3: detected capacity change from 0 to 164 [ 204.774293][ T7083] netlink: 32 bytes leftover after parsing attributes in process `syz.1.277'. [ 205.328383][ T29] audit: type=1804 audit(1738832483.418:40): pid=7086 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.273" name="/newroot/61/file1/file1" dev="loop4" ino=15 res=1 errno=0 [ 205.423750][ T29] audit: type=1804 audit(1738832483.448:41): pid=7085 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.273" name="/newroot/61/file1/file1" dev="loop4" ino=15 res=1 errno=0 [ 205.511032][ T5837] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 206.014178][ T2151] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 207.003949][ T2151] usb 7-1: Using ep0 maxpacket: 8 [ 207.019391][ T2151] usb 7-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 207.903695][ T2151] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 207.971755][ T2151] usb 7-1: config 0 descriptor?? [ 208.575166][ T7114] loop3: detected capacity change from 0 to 256 [ 209.899790][ T2151] asix 7-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 210.016364][ T7114] FAT-fs (loop3): Directory bread(block 64) failed [ 210.030207][ T2151] asix 7-1:0.0: probe with driver asix failed with error -71 [ 210.091021][ T7114] FAT-fs (loop3): Directory bread(block 65) failed [ 210.172493][ T2151] usb 7-1: USB disconnect, device number 2 [ 210.181386][ T7114] FAT-fs (loop3): Directory bread(block 66) failed [ 210.510208][ T7114] FAT-fs (loop3): Directory bread(block 67) failed [ 210.814788][ T7114] FAT-fs (loop3): Directory bread(block 68) failed [ 211.389846][ T7114] FAT-fs (loop3): Directory bread(block 69) failed [ 211.496687][ T7114] FAT-fs (loop3): Directory bread(block 70) failed [ 211.552257][ T7114] FAT-fs (loop3): Directory bread(block 71) failed [ 211.683985][ T7114] FAT-fs (loop3): Directory bread(block 72) failed [ 211.793686][ T7114] FAT-fs (loop3): Directory bread(block 73) failed [ 211.981557][ T7143] netlink: 32 bytes leftover after parsing attributes in process `syz.5.293'. [ 212.591193][ T7147] netlink: 32 bytes leftover after parsing attributes in process `syz.5.293'. [ 213.117510][ T7147] Zero length message leads to an empty skb [ 213.232987][ T7152] loop6: detected capacity change from 0 to 512 [ 213.255438][ T7151] netlink: 4 bytes leftover after parsing attributes in process `syz.1.291'. [ 213.418164][ T7152] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 213.563871][ T7152] ext4 filesystem being mounted at /4/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 215.856103][ T7179] loop5: detected capacity change from 0 to 2048 [ 215.937532][ T6699] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 216.013756][ T7179] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 216.030883][ T7185] loop4: detected capacity change from 0 to 1024 [ 216.871077][ T5835] Bluetooth: hci4: command 0x0406 tx timeout [ 217.397987][ T7197] loop6: detected capacity change from 0 to 512 [ 217.469257][ T7197] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 217.522147][ T7196] loop1: detected capacity change from 0 to 2048 [ 217.535707][ T7197] EXT4-fs (loop6): SIPHASH is not a valid default hash value [ 217.556976][ T6188] hfsplus: b-tree write err: -5, ino 4 [ 217.820184][ T7196] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 218.116212][ T46] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 219.162076][ T46] usb 7-1: Using ep0 maxpacket: 32 [ 219.364494][ T46] usb 7-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 219.387149][ T46] usb 7-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 219.420484][ T46] usb 7-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 219.433710][ T46] usb 7-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 220.333658][ T46] usb 7-1: Product: syz [ 220.338874][ T46] usb 7-1: Manufacturer: syz [ 220.764461][ T5890] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 220.938225][ T46] usb 7-1: can't set config #4, error -71 [ 220.967557][ T46] usb 7-1: USB disconnect, device number 3 [ 222.946629][ T7240] loop6: detected capacity change from 0 to 512 [ 222.973743][ T5890] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 222.984682][ T5890] usb 4-1: can't read configurations, error -71 [ 223.031175][ T7240] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (3832!=33349) [ 223.134845][ T7240] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a842e02c, mo2=0002] [ 223.170550][ T7248] netlink: 4 bytes leftover after parsing attributes in process `syz.4.316'. [ 223.208905][ T7240] System zones: 1-12 [ 223.229241][ T7240] EXT4-fs (loop6): orphan cleanup on readonly fs [ 223.279244][ T7240] EXT4-fs error (device loop6): ext4_read_inode_bitmap:167: comm syz.6.314: Inode bitmap for bg 0 marked uninitialized [ 223.362885][ T7240] EXT4-fs (loop6): Remounting filesystem read-only [ 223.904385][ T7240] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 224.132017][ T7240] EXT4-fs warning (device loop6): dx_probe:823: inode #2: lblock 0: comm syz.6.314: error -117 reading directory block [ 224.183041][ T7240] EXT4-fs warning (device loop6): dx_probe:823: inode #2: lblock 0: comm syz.6.314: error -117 reading directory block [ 224.258516][ T7265] EXT4-fs warning (device loop6): dx_probe:823: inode #2: lblock 0: comm syz.6.314: error -117 reading directory block [ 224.385917][ T7269] mmap: syz.1.319 (7269) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 224.652708][ T7240] EXT4-fs warning (device loop6): dx_probe:823: inode #2: lblock 0: comm syz.6.314: error -117 reading directory block [ 225.000905][ T7240] EXT4-fs warning (device loop6): dx_probe:823: inode #2: lblock 0: comm syz.6.314: error -117 reading directory block [ 225.017744][ T7240] EXT4-fs warning (device loop6): dx_probe:823: inode #2: lblock 0: comm syz.6.314: error -117 reading directory block [ 225.040473][ T7270] EXT4-fs warning (device loop6): dx_probe:823: inode #2: lblock 0: comm syz.6.314: error -117 reading directory block [ 225.089776][ T7240] EXT4-fs warning (device loop6): dx_probe:823: inode #2: lblock 0: comm syz.6.314: error -117 reading directory block [ 225.205340][ T7265] EXT4-fs warning (device loop6): dx_probe:823: inode #2: lblock 0: comm syz.6.314: error -117 reading directory block [ 225.251295][ T7240] EXT4-fs warning (device loop6): dx_probe:823: inode #2: lblock 0: comm syz.6.314: error -117 reading directory block [ 226.295724][ T6699] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 227.040813][ T29] audit: type=1326 audit(1738832505.118:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7278 comm="syz.1.332" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f80e158cde9 code=0x0 [ 227.870508][ T7295] loop5: detected capacity change from 0 to 1024 [ 228.245936][ T7295] EXT4-fs: Ignoring removed orlov option [ 228.263296][ T7295] EXT4-fs (loop5): Test dummy encryption mode enabled [ 229.916332][ T7295] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 230.886477][ T6398] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 233.063734][ T5890] usb 7-1: new full-speed USB device number 4 using dummy_hcd [ 233.321574][ T5890] usb 7-1: config 0 has no interfaces? [ 233.435574][ T5890] usb 7-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 233.633464][ T5890] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 233.971308][ T7348] loop1: detected capacity change from 0 to 1024 [ 234.060334][ T5890] usb 7-1: config 0 descriptor?? [ 234.074382][ T7348] EXT4-fs: Mount option(s) incompatible with ext3 [ 234.300906][ T7353] netlink: 'syz.3.339': attribute type 4 has an invalid length. [ 234.431986][ T5885] usb 7-1: USB disconnect, device number 4 [ 234.713810][ T7362] netlink: 12 bytes leftover after parsing attributes in process `syz.4.340'. [ 235.916391][ T7372] loop1: detected capacity change from 0 to 1024 [ 236.874224][ T7372] EXT4-fs: Ignoring removed orlov option [ 236.957608][ T7372] EXT4-fs (loop1): Test dummy encryption mode enabled [ 237.411274][ T7372] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 237.553787][ T29] audit: type=1804 audit(1738832515.638:43): pid=7383 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.345" name="/newroot/83/bus/file0" dev="overlay" ino=472 res=1 errno=0 [ 237.682622][ T5840] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 238.145618][ T29] audit: type=1326 audit(1738832516.218:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7391 comm="syz.6.350" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb28db8cde9 code=0x7ffc0000 [ 238.287012][ T29] audit: type=1326 audit(1738832516.218:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7391 comm="syz.6.350" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb28db8cde9 code=0x7ffc0000 [ 238.329832][ T29] audit: type=1326 audit(1738832516.218:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7391 comm="syz.6.350" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb28db8cde9 code=0x7ffc0000 [ 238.373091][ T29] audit: type=1326 audit(1738832516.218:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7391 comm="syz.6.350" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb28db8cde9 code=0x7ffc0000 [ 238.860099][ T29] audit: type=1326 audit(1738832516.218:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7391 comm="syz.6.350" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb28db8cde9 code=0x7ffc0000 [ 239.193865][ T29] audit: type=1326 audit(1738832516.218:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7391 comm="syz.6.350" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb28db8cde9 code=0x7ffc0000 [ 239.348330][ T29] audit: type=1326 audit(1738832516.218:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7391 comm="syz.6.350" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb28db8cde9 code=0x7ffc0000 [ 240.382242][ T29] audit: type=1326 audit(1738832516.238:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7391 comm="syz.6.350" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb28db8cde9 code=0x7ffc0000 [ 240.425883][ T7424] loop5: detected capacity change from 0 to 16 [ 240.431978][ T29] audit: type=1326 audit(1738832516.238:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7391 comm="syz.6.350" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb28db8cde9 code=0x7ffc0000 [ 240.519182][ T7424] erofs (device loop5): mounted with root inode @ nid 36. [ 242.006822][ T7436] syz.5.355: attempt to access beyond end of device [ 242.006822][ T7436] loop5: rw=524288, sector=7864328, nr_sectors = 8 limit=16 [ 242.281780][ T7436] syz.5.355: attempt to access beyond end of device [ 242.281780][ T7436] loop5: rw=0, sector=7864328, nr_sectors = 8 limit=16 [ 242.300725][ T7436] erofs (device loop5): read error -5 @ 0 of nid 89 [ 242.365892][ T7446] xt_TCPMSS: Only works on TCP SYN packets [ 243.042654][ T29] kauditd_printk_skb: 7 callbacks suppressed [ 243.042675][ T29] audit: type=1800 audit(1738832521.128:60): pid=7436 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.355" name="file3" dev="loop5" ino=89 res=0 errno=0 [ 243.186509][ T7436] syz.5.355 (7436) used greatest stack depth: 17520 bytes left [ 243.467801][ T7458] syz.4.365 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 243.730364][ T7462] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=256 (512 ns) > initial count (34 ns). Using initial count to start timer. [ 245.454091][ T7480] netlink: 'syz.5.370': attribute type 1 has an invalid length. [ 245.463694][ T7480] netlink: 134744 bytes leftover after parsing attributes in process `syz.5.370'. [ 246.296499][ T7484] loop1: detected capacity change from 0 to 2048 [ 247.352284][ T7484] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [ 247.441959][ T5845] udevd[5845]: incorrect nilfs2 checksum on /dev/loop1 [ 247.489630][ T7497] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 247.819411][ T29] audit: type=1800 audit(1738832525.908:61): pid=7502 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.375" name="/" dev="fuse" ino=1 res=0 errno=0 [ 247.834036][ T7504] syzkaller0: entered allmulticast mode [ 249.009485][ T29] audit: type=1800 audit(1738832527.098:62): pid=7484 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.372" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 249.028454][ T7484] NILFS error (device loop1): nilfs_bmap_lookup_contig: broken bmap (inode number=15) [ 249.069860][ T7521] netlink: 'syz.4.379': attribute type 10 has an invalid length. [ 249.111806][ T7520] Cannot find del_set index 1 as target [ 249.157850][ T7484] Remounting filesystem read-only [ 249.207839][ T7484] NILFS (loop1): mounting fs with errors [ 250.817863][ T7521] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 251.776812][ T7546] loop5: detected capacity change from 0 to 512 [ 251.834904][ T7546] EXT4-fs: Ignoring removed bh option [ 251.873482][ T7546] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem [ 251.962828][ T7546] EXT4-fs (loop5): 1 truncate cleaned up [ 252.037582][ T7546] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 252.091030][ T7556] netlink: 'syz.3.389': attribute type 4 has an invalid length. [ 253.193223][ T6398] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 255.556875][ T7606] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 255.665822][ T7619] loop5: detected capacity change from 0 to 16 [ 255.722523][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.731083][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.666355][ T7619] erofs: Unknown parameter 'acl' [ 256.845249][ T7622] loop1: detected capacity change from 0 to 256 [ 257.562970][ T7622] FAT-fs (loop1): Directory bread(block 64) failed [ 257.571068][ T7622] FAT-fs (loop1): Directory bread(block 65) failed [ 257.579582][ T7622] FAT-fs (loop1): Directory bread(block 66) failed [ 257.587611][ T7622] FAT-fs (loop1): Directory bread(block 67) failed [ 257.596181][ T7622] FAT-fs (loop1): Directory bread(block 68) failed [ 257.604433][ T7622] FAT-fs (loop1): Directory bread(block 69) failed [ 257.612808][ T7622] FAT-fs (loop1): Directory bread(block 70) failed [ 257.620786][ T7622] FAT-fs (loop1): Directory bread(block 71) failed [ 257.629418][ T7622] FAT-fs (loop1): Directory bread(block 72) failed [ 257.637491][ T7622] FAT-fs (loop1): Directory bread(block 73) failed [ 259.230767][ T7637] netlink: 20 bytes leftover after parsing attributes in process `syz.6.402'. [ 261.432840][ T29] audit: type=1800 audit(1738832539.518:63): pid=7661 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.409" name="/" dev="9p" ino=2 res=0 errno=0 [ 262.034724][ T7670] loop6: detected capacity change from 0 to 64 [ 262.063087][ T7670] minix: Unknown parameter '>' [ 263.527941][ T7691] loop5: detected capacity change from 0 to 256 [ 263.733454][ T7691] FAT-fs (loop5): Directory bread(block 64) failed [ 263.741559][ T7691] FAT-fs (loop5): Directory bread(block 65) failed [ 263.750060][ T7691] FAT-fs (loop5): Directory bread(block 66) failed [ 263.758198][ T7691] FAT-fs (loop5): Directory bread(block 67) failed [ 263.767402][ T7691] FAT-fs (loop5): Directory bread(block 68) failed [ 263.775460][ T7691] FAT-fs (loop5): Directory bread(block 69) failed [ 263.784143][ T7691] FAT-fs (loop5): Directory bread(block 70) failed [ 263.792121][ T7691] FAT-fs (loop5): Directory bread(block 71) failed [ 263.801840][ T7691] FAT-fs (loop5): Directory bread(block 72) failed [ 263.810688][ T7691] FAT-fs (loop5): Directory bread(block 73) failed [ 265.736853][ T7697] loop6: detected capacity change from 0 to 16 [ 265.764820][ T7697] erofs: Unknown parameter 'acl' [ 273.844521][ T7760] loop5: detected capacity change from 0 to 2048 [ 273.863663][ T5835] Bluetooth: hci1: command 0x0406 tx timeout [ 274.488010][ T7760] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 278.354249][ T5835] Bluetooth: hci0: command 0x0406 tx timeout [ 280.093034][ T7803] loop5: detected capacity change from 0 to 64 [ 280.144783][ T7803] minix: Unknown parameter '>' [ 286.044526][ T7846] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 286.617728][ T29] audit: type=1804 audit(1738832564.708:64): pid=7863 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.5.459" name="/newroot/44/bus/bus" dev="overlay" ino=268 res=1 errno=0 [ 286.966095][ T7869] netlink: 4 bytes leftover after parsing attributes in process `syz.4.460'. [ 288.387970][ T29] audit: type=1800 audit(1738832566.468:65): pid=7884 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.465" name="/" dev="9p" ino=2 res=0 errno=0 [ 288.477195][ T7887] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 288.838561][ T7897] loop1: detected capacity change from 0 to 1024 [ 289.548843][ T7897] kvm: pic: non byte write [ 289.682561][ C0] vcan0: j1939_tp_rxtimer: 0xffff88807ce1e400: rx timeout, send abort [ 289.693894][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88807ce1e400: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 289.859102][ T1145] hfsplus: b-tree write err: -5, ino 4 [ 293.606118][ T5839] Bluetooth: hci2: command 0x0406 tx timeout [ 296.045544][ T7961] loop1: detected capacity change from 0 to 256 [ 297.199924][ T7964] loop4: detected capacity change from 0 to 8192 [ 297.306334][ T29] audit: type=1804 audit(1738832575.358:66): pid=7964 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.492" name="/newroot/107/file2/bus" dev="loop4" ino=164 res=1 errno=0 [ 298.562678][ T7985] overlayfs: failed to get inode (-116) [ 298.588629][ T7985] overlayfs: failed to look up (file0) for ino (-116) [ 298.980159][ T7997] TCP: out of memory -- consider tuning tcp_mem [ 306.025061][ T8041] netlink: 8 bytes leftover after parsing attributes in process `syz.1.499'. [ 306.060615][ T8041] netlink: 4 bytes leftover after parsing attributes in process `syz.1.499'. [ 306.116728][ T8041] netlink: 'syz.1.499': attribute type 1 has an invalid length. [ 306.151900][ T5964] Bluetooth: hci6: Frame reassembly failed (-84) [ 306.153709][ T8041] netlink: 10 bytes leftover after parsing attributes in process `syz.1.499'. [ 306.353907][ T5833] block nbd0: Receive control failed (result -32) [ 306.415225][ T6194] Bluetooth: Error in BCSP hdr checksum [ 306.671136][ T35] Bluetooth: Error in BCSP hdr checksum [ 307.650817][ T6188] Bluetooth: Error in BCSP hdr checksum [ 307.876124][ T35] Bluetooth: Error in BCSP hdr checksum [ 308.147491][ T6193] Bluetooth: Error in BCSP hdr checksum [ 308.164129][ T5839] Bluetooth: hci6: Entering manufacturer mode failed (-110) [ 308.168522][ T5833] Bluetooth: hci6: command 0xfc11 tx timeout [ 308.175155][ T54] Bluetooth: hci5: command 0x1003 tx timeout [ 308.181041][ T5835] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 308.413701][ T29] audit: type=1326 audit(1738832586.488:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8059 comm="syz.3.504" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fef76f8cde9 code=0x0 [ 308.544542][ T8070] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 309.949416][ T5890] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 310.012537][ T8091] loop1: detected capacity change from 0 to 1024 [ 310.064594][ T8091] EXT4-fs: Ignoring removed nomblk_io_submit option [ 310.074759][ T5890] hid-generic 0000:0000:0000.0004: hidraw0: HID v0.00 Device [syz1] on syz0 [ 310.156465][ T8091] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 310.189918][ T8094] netlink: 8 bytes leftover after parsing attributes in process `syz.4.512'. [ 310.203485][ T8094] netlink: 8 bytes leftover after parsing attributes in process `syz.4.512'. [ 310.328486][ T8091] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 310.670952][ T5823] kernel write not supported for file /uhid (pid: 5823 comm: kworker/0:3) [ 311.461196][ T8111] Unsupported ieee802154 address type: 0 [ 313.218028][ T35] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 314.200655][ T5840] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 315.469383][ T35] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 317.250210][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.258580][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.973297][ T35] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 318.005920][ T8162] loop4: detected capacity change from 0 to 512 [ 318.185850][ T8162] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 318.297661][ T8162] ext4 filesystem being mounted at /118/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 318.328947][ T5839] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 318.341407][ T5839] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 318.350860][ T5839] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 318.361304][ T5839] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 318.370581][ T5839] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 318.380073][ T5839] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 318.580030][ T35] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 320.403918][ T5839] Bluetooth: hci2: command tx timeout [ 320.747053][ T5837] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 321.925189][ T35] bridge_slave_1: left allmulticast mode [ 321.931988][ T35] bridge_slave_1: left promiscuous mode [ 322.483871][ T5839] Bluetooth: hci2: command tx timeout [ 322.664330][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 322.714105][ T35] bridge_slave_0: left allmulticast mode [ 322.721155][ T35] bridge_slave_0: left promiscuous mode [ 322.733807][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 324.575644][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 324.577154][ T5839] Bluetooth: hci2: command tx timeout [ 324.609647][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 324.622911][ T35] bond0 (unregistering): Released all slaves [ 324.745697][ T8199] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 324.756076][ T8199] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 324.807586][ T8199] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 324.829210][ T8199] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 324.863972][ T8199] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 324.879952][ T8199] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 324.890733][ T8199] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 324.904133][ T8199] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 324.923358][ T8199] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 324.960416][ T8199] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 324.986460][ T8199] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 325.221522][ T8218] smb3: Unknown parameter 'acl!ਟ-7K_LF[3]mM0\ y [ 325.221522][ T8218] ' [ 325.498709][ T8226] loop4: detected capacity change from 0 to 512 [ 325.857945][ T8226] EXT4-fs: Ignoring removed orlov option [ 326.354907][ T8226] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 326.553909][ T35] hsr_slave_0: left promiscuous mode [ 326.604934][ T8226] EXT4-fs error (device loop4): ext4_orphan_get:1389: inode #15: comm syz.4.542: casefold flag without casefold feature [ 326.633298][ T35] hsr_slave_1: left promiscuous mode [ 326.644273][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 326.653240][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 326.677157][ T8226] EXT4-fs (loop4): Remounting filesystem read-only [ 326.815006][ T5839] Bluetooth: hci0: command 0x0406 tx timeout [ 326.883948][ T5839] Bluetooth: hci3: command 0x0406 tx timeout [ 326.891417][ T5839] Bluetooth: hci4: command 0x0406 tx timeout [ 326.919021][ T8226] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 326.973989][ T5835] Bluetooth: hci1: command 0x0406 tx timeout [ 326.991341][ T5839] Bluetooth: hci2: command 0x0c1a tx timeout [ 327.072139][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 327.280841][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 327.321184][ T8241] loop1: detected capacity change from 0 to 64 [ 327.381372][ T8241] minix: Unknown parameter '>' [ 327.476169][ T35] veth1_macvtap: left promiscuous mode [ 327.485751][ T8245] dccp_close: ABORT with 32 bytes unread [ 327.564702][ T35] veth0_macvtap: left promiscuous mode [ 327.939387][ T35] veth1_vlan: left promiscuous mode [ 328.040265][ T35] veth0_vlan: left promiscuous mode [ 328.191151][ T5837] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 328.954416][ T5839] Bluetooth: hci0: command 0x0406 tx timeout [ 328.963730][ T5839] Bluetooth: hci3: command 0x0406 tx timeout [ 328.970963][ T5839] Bluetooth: hci4: command 0x0406 tx timeout [ 329.043746][ T5835] Bluetooth: hci2: command 0x0c1a tx timeout [ 329.051013][ T5835] Bluetooth: hci1: command 0x0406 tx timeout [ 330.081175][ T8266] loop4: detected capacity change from 0 to 8 [ 330.117781][ T8266] SQUASHFS error: lzo decompression failed, data probably corrupt [ 330.128172][ T8266] SQUASHFS error: Failed to read block 0x1dd: -5 [ 330.135823][ T8266] SQUASHFS error: Unable to read metadata cache entry [1db] [ 330.144611][ T8266] SQUASHFS error: Unable to read inode 0xa7 [ 330.155473][ T8266] netlink: 'syz.4.548': attribute type 28 has an invalid length. [ 330.164843][ T8266] netlink: 55 bytes leftover after parsing attributes in process `syz.4.548'. [ 331.125582][ T5835] Bluetooth: hci2: command 0x0c1a tx timeout [ 331.535679][ T8275] fuse: Bad value for 'fd' [ 331.838104][ T35] team0 (unregistering): Port device team_slave_1 removed [ 331.886327][ T35] team0 (unregistering): Port device team_slave_0 removed [ 332.398831][ T8172] chnl_net:caif_netlink_parms(): no params data found [ 332.408584][ T8267] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 332.426009][ T8267] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 332.446225][ T8267] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 332.515628][ T8267] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 332.534138][ T8267] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 332.865818][ T8172] bridge0: port 1(bridge_slave_0) entered blocking state [ 332.894752][ T8172] bridge0: port 1(bridge_slave_0) entered disabled state [ 332.903425][ T8172] bridge_slave_0: entered allmulticast mode [ 332.945654][ T8172] bridge_slave_0: entered promiscuous mode [ 332.966788][ T8172] bridge0: port 2(bridge_slave_1) entered blocking state [ 332.993966][ T8172] bridge0: port 2(bridge_slave_1) entered disabled state [ 333.002593][ T8172] bridge_slave_1: entered allmulticast mode [ 333.025356][ T8172] bridge_slave_1: entered promiscuous mode [ 333.143380][ T8172] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 333.178173][ T8172] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 333.298111][ T8172] team0: Port device team_slave_0 added [ 333.327663][ T8172] team0: Port device team_slave_1 added [ 333.429891][ T8172] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 333.440594][ T8172] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 333.472093][ T8172] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 333.491453][ T8172] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 333.501310][ T8172] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 333.537699][ T8172] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 333.624097][ T8172] hsr_slave_0: entered promiscuous mode [ 333.632009][ T8172] hsr_slave_1: entered promiscuous mode [ 333.649151][ T8172] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 333.662456][ T8172] Cannot create hsr debugfs directory [ 334.022990][ T8172] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 334.041017][ T8172] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 334.058234][ T8172] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 334.071807][ T8172] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 334.229922][ T8172] 8021q: adding VLAN 0 to HW filter on device bond0 [ 334.283207][ T8172] 8021q: adding VLAN 0 to HW filter on device team0 [ 334.307681][ T6193] bridge0: port 1(bridge_slave_0) entered blocking state [ 334.316287][ T6193] bridge0: port 1(bridge_slave_0) entered forwarding state [ 334.385703][ T6193] bridge0: port 2(bridge_slave_1) entered blocking state [ 334.394343][ T6193] bridge0: port 2(bridge_slave_1) entered forwarding state [ 334.484188][ T5835] Bluetooth: hci4: command 0x0406 tx timeout [ 334.491551][ T5835] Bluetooth: hci3: command 0x0406 tx timeout [ 334.493735][ T5839] Bluetooth: hci0: command 0x0406 tx timeout [ 334.564904][ T5839] Bluetooth: hci2: command 0x0c1a tx timeout [ 334.568525][ T5833] Bluetooth: hci1: command 0x0406 tx timeout [ 334.746639][ T8172] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 335.151315][ T8172] veth0_vlan: entered promiscuous mode [ 335.173447][ T8172] veth1_vlan: entered promiscuous mode [ 335.219703][ T8172] veth0_macvtap: entered promiscuous mode [ 335.233131][ T8172] veth1_macvtap: entered promiscuous mode [ 335.259191][ T8172] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 335.271767][ T8172] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 335.285141][ T8172] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 335.297697][ T8172] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 335.309794][ T8172] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 335.322369][ T8172] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 335.334616][ T8172] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 335.347163][ T8172] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 335.360870][ T8172] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 335.388600][ T8172] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 335.401241][ T8172] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 335.413461][ T8172] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 335.429349][ T8172] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 335.441171][ T8172] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 335.455012][ T8172] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 335.467027][ T8172] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 335.481524][ T8172] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 335.496305][ T8172] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 335.512053][ T8172] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 335.522858][ T8172] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 335.534531][ T8172] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 335.544987][ T8172] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 335.689714][ T1145] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 335.715896][ T1145] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 335.769548][ T6193] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 335.791502][ T6193] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 337.244366][ T8364] loop4: detected capacity change from 0 to 1024 [ 337.306034][ T8366] kvm: pic: single mode not supported [ 337.610286][ T8364] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 337.745556][ T29] audit: type=1800 audit(1738832615.828:68): pid=8364 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.565" name="bus" dev="loop4" ino=18 res=0 errno=0 [ 337.810628][ T8364] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 337.892240][ T8364] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 4 with error 28 [ 337.921689][ T8364] EXT4-fs (loop4): This should not happen!! Data will be lost [ 337.921689][ T8364] [ 337.940509][ T8364] EXT4-fs (loop4): Total free blocks count 0 [ 337.947833][ T8364] EXT4-fs (loop4): Free/Dirty block details [ 337.955139][ T8364] EXT4-fs (loop4): free_blocks=68451041280 [ 337.962217][ T8364] EXT4-fs (loop4): dirty_blocks=64 [ 338.208737][ T8385] loop5: detected capacity change from 0 to 1024 [ 339.183264][ T8364] EXT4-fs (loop4): Block reservation details [ 339.196220][ T8364] EXT4-fs (loop4): i_reserved_data_blocks=4 [ 339.230167][ T8379] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 4 with max blocks 60 with error 28 [ 340.225867][ T8385] EXT4-fs (loop5): stripe (8) is not aligned with cluster size (16), stripe is disabled [ 340.932042][ T8385] EXT4-fs warning (device loop5): ext4_multi_mount_protect:398: Unable to create kmmpd thread for loop5. [ 342.042302][ T8410] loop5: detected capacity change from 0 to 512 [ 342.295883][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807c630800: rx timeout, send abort [ 342.634053][ T8423] sctp: [Deprecated]: syz.3.567 (pid 8423) Use of struct sctp_assoc_value in delayed_ack socket option. [ 342.634053][ T8423] Use struct sctp_sack_info instead [ 342.805774][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807c630800: abort rx timeout. Force session deactivation [ 343.046406][ T8419] netlink: 20 bytes leftover after parsing attributes in process `syz.1.569'. [ 343.663038][ T8410] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 343.728309][ T8410] ext4 filesystem being mounted at /67/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 344.004225][ T8410] loop5: detected capacity change from 512 to 0 [ 344.174150][ C0] I/O error, dev loop5, sector 8 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 344.187017][ T8437] syz.5.568: attempt to access beyond end of device [ 344.187017][ T8437] loop5: rw=12288, sector=12, nr_sectors = 4 limit=0 [ 344.251714][ T8437] syz.5.568: attempt to access beyond end of device [ 344.251714][ T8437] loop5: rw=524288, sector=140, nr_sectors = 4 limit=0 [ 344.269561][ T8437] syz.5.568: attempt to access beyond end of device [ 344.269561][ T8437] loop5: rw=524288, sector=144, nr_sectors = 4 limit=0 [ 344.304210][ T8437] syz.5.568: attempt to access beyond end of device [ 344.304210][ T8437] loop5: rw=12288, sector=136, nr_sectors = 4 limit=0 [ 344.332692][ T8437] EXT4-fs error (device loop5): ext4_get_inode_loc:4561: inode #2: block 34: comm syz.5.568: unable to read itable block [ 344.415280][ T8437] syz.5.568: attempt to access beyond end of device [ 344.415280][ T8437] loop5: rw=145409, sector=0, nr_sectors = 4 limit=0 [ 344.812338][ T8437] Buffer I/O error on dev loop5, logical block 0, lost sync page write [ 344.933732][ T8437] EXT4-fs (loop5): I/O error while writing superblock [ 344.973695][ T8437] EXT4-fs error (device loop5) in ext4_reserve_inode_write:5826: IO failure [ 345.025662][ T8437] syz.5.568: attempt to access beyond end of device [ 345.025662][ T8437] loop5: rw=145409, sector=0, nr_sectors = 4 limit=0 [ 345.117637][ T8437] Buffer I/O error on dev loop5, logical block 0, lost sync page write [ 345.170452][ T8437] EXT4-fs (loop5): I/O error while writing superblock [ 345.204252][ T8437] EXT4-fs error (device loop5): ext4_dirty_inode:6030: inode #2: comm syz.5.568: mark_inode_dirty error [ 345.313997][ T8437] syz.5.568: attempt to access beyond end of device [ 345.313997][ T8437] loop5: rw=145409, sector=0, nr_sectors = 4 limit=0 [ 345.391654][ T8437] Buffer I/O error on dev loop5, logical block 0, lost sync page write [ 345.501614][ T8437] EXT4-fs (loop5): I/O error while writing superblock [ 345.544418][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 345.634624][ T8473] ipt_REJECT: TCP_RESET invalid for non-tcp [ 346.307538][ T6398] syz-executor: attempt to access beyond end of device [ 346.307538][ T6398] loop5: rw=12288, sector=12, nr_sectors = 4 limit=0 [ 346.419404][ T8430] ext4lazyinit: attempt to access beyond end of device [ 346.419404][ T8430] loop5: rw=536576, sector=8, nr_sectors = 4 limit=0 [ 346.650924][ T8487] netlink: 56 bytes leftover after parsing attributes in process `syz.3.583'. [ 346.668474][ T8430] ext4lazyinit: attempt to access beyond end of device [ 346.668474][ T8430] loop5: rw=12288, sector=8, nr_sectors = 4 limit=0 [ 346.684541][ T8430] EXT4-fs error (device loop5): ext4_wait_block_bitmap:584: comm ext4lazyinit: Cannot read block bitmap - block_group = 0, block_bitmap = 2 [ 346.707171][ T8430] Buffer I/O error on dev loop5, logical block 0, lost sync page write [ 346.720165][ T8430] EXT4-fs (loop5): I/O error while writing superblock [ 346.742681][ T8486] ieee802154 phy0 wpan0: encryption failed: -22 [ 347.559117][ T11] EXT4-fs error (device loop5): __ext4_get_inode_loc_noinmem:4546: inode #2: block 34: comm kworker/u8:0: unable to read itable block [ 347.649908][ T11] Buffer I/O error on dev loop5, logical block 0, lost sync page write [ 347.697532][ T11] EXT4-fs (loop5): I/O error while writing superblock [ 347.721831][ T6995] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 347.737888][ T6995] Buffer I/O error on dev loop5, logical block 0, lost sync page write [ 347.747930][ T6995] EXT4-fs (loop5): I/O error while writing superblock [ 347.768785][ T8424] Buffer I/O error on dev loop5, logical block 12, lost sync page write [ 348.304993][ T8506] netlink: 256 bytes leftover after parsing attributes in process `syz.1.586'. [ 348.963760][ T5839] Bluetooth: hci2: command 0x0c1a tx timeout [ 349.166955][ T6193] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 349.329373][ T6193] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 349.573115][ T6193] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 349.634076][ T8517] loop4: detected capacity change from 0 to 512 [ 349.818652][ T8519] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 350.639221][ T8517] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 351.173706][ T8517] EXT4-fs (loop4): 1 orphan inode deleted [ 351.180606][ T8517] EXT4-fs (loop4): 1 truncate cleaned up [ 351.280304][ T8517] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 351.306203][ T6193] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 351.396063][ T8517] input: syz1 as /devices/virtual/input/input6 [ 351.770935][ T5837] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 352.905853][ T6193] bridge_slave_1: left allmulticast mode [ 352.912658][ T6193] bridge_slave_1: left promiscuous mode [ 352.983172][ T6193] bridge0: port 2(bridge_slave_1) entered disabled state [ 353.079883][ T5839] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 353.109942][ T5839] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 353.120042][ T5839] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 353.139276][ T5839] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 353.150845][ T6193] bridge_slave_0: left allmulticast mode [ 353.157983][ T6193] bridge_slave_0: left promiscuous mode [ 353.165093][ T5839] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 353.174226][ T6193] bridge0: port 1(bridge_slave_0) entered disabled state [ 353.183373][ T5839] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 354.184190][ T6193] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 354.198577][ T6193] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 354.210386][ T6193] bond0 (unregistering): Released all slaves [ 354.674503][ T6193] hsr_slave_0: left promiscuous mode [ 354.681679][ T6193] hsr_slave_1: left promiscuous mode [ 354.690968][ T6193] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 354.700258][ T6193] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 354.716858][ T6193] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 354.732925][ T6193] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 354.760212][ T6193] veth1_macvtap: left promiscuous mode [ 354.767229][ T6193] veth0_macvtap: left promiscuous mode [ 354.774514][ T6193] veth1_vlan: left promiscuous mode [ 354.780918][ T6193] veth0_vlan: left promiscuous mode [ 355.278570][ T6193] team0 (unregistering): Port device team_slave_1 removed [ 355.291879][ T5839] Bluetooth: hci1: command tx timeout [ 355.330415][ T6193] team0 (unregistering): Port device team_slave_0 removed [ 355.747696][ T8553] chnl_net:caif_netlink_parms(): no params data found [ 355.956479][ T8553] bridge0: port 1(bridge_slave_0) entered blocking state [ 355.981815][ T8553] bridge0: port 1(bridge_slave_0) entered disabled state [ 355.998113][ T8553] bridge_slave_0: entered allmulticast mode [ 356.009785][ T8553] bridge_slave_0: entered promiscuous mode [ 356.026563][ T8553] bridge0: port 2(bridge_slave_1) entered blocking state [ 356.056586][ T8553] bridge0: port 2(bridge_slave_1) entered disabled state [ 356.066161][ T8553] bridge_slave_1: entered allmulticast mode [ 356.075850][ T8553] bridge_slave_1: entered promiscuous mode [ 356.134044][ T8553] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 356.148532][ T8553] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 356.229214][ T8553] team0: Port device team_slave_0 added [ 356.247324][ T8553] team0: Port device team_slave_1 added [ 356.319752][ T8553] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 356.328546][ T8553] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 356.361097][ T8553] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 356.383065][ T8553] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 356.392724][ T8553] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 356.424341][ T8553] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 356.496670][ T8553] hsr_slave_0: entered promiscuous mode [ 356.505183][ T8553] hsr_slave_1: entered promiscuous mode [ 356.758571][ T8553] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 356.789320][ T8553] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 356.802851][ T8553] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 356.819425][ T8553] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 357.021625][ T8553] 8021q: adding VLAN 0 to HW filter on device bond0 [ 357.067442][ T8553] 8021q: adding VLAN 0 to HW filter on device team0 [ 357.108790][ T6194] bridge0: port 1(bridge_slave_0) entered blocking state [ 357.117412][ T6194] bridge0: port 1(bridge_slave_0) entered forwarding state [ 357.138457][ T6194] bridge0: port 2(bridge_slave_1) entered blocking state [ 357.147067][ T6194] bridge0: port 2(bridge_slave_1) entered forwarding state [ 357.364943][ T5839] Bluetooth: hci1: command tx timeout [ 357.481858][ T8553] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 357.862451][ T8553] veth0_vlan: entered promiscuous mode [ 357.884857][ T8553] veth1_vlan: entered promiscuous mode [ 357.922642][ T8553] veth0_macvtap: entered promiscuous mode [ 357.939442][ T8553] veth1_macvtap: entered promiscuous mode [ 357.991642][ T8553] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 358.006238][ T8553] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 358.019391][ T8553] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 358.032051][ T8553] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 358.043945][ T8553] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 358.056770][ T8553] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 358.068623][ T8553] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 358.081262][ T8553] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 358.106073][ T8553] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 358.129220][ T8553] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 358.141899][ T8553] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 358.154191][ T8553] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 358.166912][ T8553] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 358.179366][ T8553] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 358.192051][ T8553] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 358.205397][ T8553] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 358.218767][ T8553] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 358.232293][ T8553] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 358.252940][ T8553] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 358.263898][ T8553] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 358.276061][ T8553] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 358.287593][ T8553] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 358.399050][ T6194] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 358.419719][ T6194] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 358.472055][ T6193] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 358.483296][ T6193] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 359.464959][ T5839] Bluetooth: hci1: command tx timeout [ 360.530290][ T8679] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000009: 0000 [#1] PREEMPT SMP KASAN PTI [ 360.545419][ T8679] KASAN: null-ptr-deref in range [0x0000000000000048-0x000000000000004f] [ 360.555517][ T8679] CPU: 1 UID: 0 PID: 8679 Comm: syz.3.602 Not tainted 6.14.0-rc1-next-20250206-syzkaller #0 [ 360.567586][ T8679] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 360.579652][ T8679] RIP: 0010:clone_private_mount+0x184/0x3e0 [ 360.586733][ T8679] Code: 89 d8 48 83 c4 10 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc 48 83 c3 48 48 89 d8 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df <80> 3c 08 00 4d 89 fc 74 08 48 89 df e8 db dd e4 ff 48 8b 1b 31 ff [ 360.610255][ T8679] RSP: 0018:ffffc90015faf958 EFLAGS: 00010206 [ 360.617521][ T8679] RAX: 0000000000000009 RBX: 0000000000000048 RCX: dffffc0000000000 [ 360.627072][ T8679] RDX: 0000000000000001 RSI: 0000000000000008 RDI: ffff88803511c8d0 [ 360.636615][ T8679] RBP: 0000000000000000 R08: ffffffff8ea81ca7 R09: 1ffffffff1d50394 [ 360.646158][ T8679] R10: dffffc0000000000 R11: fffffbfff1d50395 R12: ffff88803511c8c0 [ 360.655704][ T8679] R13: ffff88803511c8e0 R14: 1ffff1100faba440 R15: ffff88807d5d2200 [ 360.665246][ T8679] FS: 00007fef77d056c0(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 [ 360.675943][ T8679] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 360.683830][ T8679] CR2: 000020000001a000 CR3: 0000000063566000 CR4: 00000000003526f0 [ 360.693376][ T8679] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 360.702914][ T8679] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 360.712454][ T8679] Call Trace: [ 360.716368][ T8679] [ 360.719862][ T8679] ? __die_body+0x5f/0xb0 [ 360.725049][ T8679] ? die_addr+0xb0/0xe0 [ 360.730017][ T8679] ? exc_general_protection+0x3dd/0x5d0 [ 360.736667][ T8679] ? asm_exc_general_protection+0x26/0x30 [ 360.743626][ T8679] ? clone_private_mount+0x184/0x3e0 [ 360.749944][ T8679] ? clone_private_mount+0x83/0x3e0 [ 360.756157][ T8679] ? _raw_spin_unlock+0x28/0x50 [ 360.761974][ T8679] ovl_fill_super+0xe4c/0x3560 [ 360.767668][ T8679] ? shrinker_register+0x118/0x230 [ 360.773791][ T8679] ? _raw_spin_unlock_irqrestore+0xd8/0x140 [ 360.780863][ T8679] ? __pfx_lock_release+0x10/0x10 [ 360.786881][ T8679] ? __pfx_ovl_fill_super+0x10/0x10 [ 360.793094][ T8679] ? __pfx_lockdep_init_map_type+0x10/0x10 [ 360.800040][ T8679] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 360.807195][ T8679] ? preempt_schedule+0xe1/0xf0 [ 360.813000][ T8679] ? sget_fc+0x909/0x9c0 [ 360.818070][ T8679] ? __pfx_set_anon_super_fc+0x10/0x10 [ 360.824599][ T8679] ? __pfx_ovl_fill_super+0x10/0x10 [ 360.830810][ T8679] get_tree_nodev+0xb7/0x140 [ 360.836302][ T8679] vfs_get_tree+0x90/0x2b0 [ 360.841584][ T8679] do_new_mount+0x2be/0xb40 [ 360.846966][ T8679] ? __pfx_do_new_mount+0x10/0x10 [ 360.852987][ T8679] __se_sys_mount+0x2d6/0x3c0 [ 360.858591][ T8679] ? __pfx___se_sys_mount+0x10/0x10 [ 360.864807][ T8679] ? do_syscall_64+0x100/0x230 [ 360.870504][ T8679] ? __x64_sys_mount+0x20/0xc0 [ 360.876202][ T8679] do_syscall_64+0xf3/0x230 [ 360.881597][ T8679] ? clear_bhb_loop+0x35/0x90 [ 360.887197][ T8679] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 360.894259][ T8679] RIP: 0033:0x7fef76f8cde9 [ 360.899544][ T8679] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 360.923049][ T8679] RSP: 002b:00007fef77d05038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 360.933125][ T8679] RAX: ffffffffffffffda RBX: 00007fef771a5fa0 RCX: 00007fef76f8cde9 [ 360.942671][ T8679] RDX: 0000200000000240 RSI: 00002000000000c0 RDI: 0000000000000000 [ 360.952226][ T8679] RBP: 00007fef7700e2a0 R08: 0000200000000480 R09: 0000000000000000 [ 360.961775][ T8679] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 360.971320][ T8679] R13: 0000000000000000 R14: 00007fef771a5fa0 R15: 00007ffff34c7f18 [ 360.980899][ T8679] [ 360.984506][ T8679] Modules linked in: [ 360.990187][ T8679] ---[ end trace 0000000000000000 ]--- [ 361.264982][ T8679] RIP: 0010:clone_private_mount+0x184/0x3e0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 361.723600][ T8679] Code: 89 d8 48 83 c4 10 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc 48 83 c3 48 48 89 d8 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df <80> 3c 08 00 4d 89 fc 74 08 48 89 df e8 db dd e4 ff 48 8b 1b 31 ff [ 361.748531][ T5839] Bluetooth: hci1: command tx timeout [ 361.786125][ T8679] RSP: 0018:ffffc90015faf958 EFLAGS: 00010206 [ 361.839066][ T8679] RAX: 0000000000000009 RBX: 0000000000000048 RCX: dffffc0000000000 [ 361.859543][ T8679] RDX: 0000000000000001 RSI: 0000000000000008 RDI: ffff88803511c8d0 [ 361.879561][ T8679] RBP: 0000000000000000 R08: ffffffff8ea81ca7 R09: 1ffffffff1d50394 [ 361.891540][ T8679] R10: dffffc0000000000 R11: fffffbfff1d50395 R12: ffff88803511c8c0 [ 361.901927][ T8679] R13: ffff88803511c8e0 R14: 1ffff1100faba440 R15: ffff88807d5d2200 [ 361.911893][ T8679] FS: 00007fef77d056c0(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 361.953819][ T8679] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 362.002388][ T8679] CR2: 00007f80e22d7d60 CR3: 0000000063566000 CR4: 00000000003526f0 [ 362.023638][ T8679] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 362.033235][ T8679] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 362.113600][ T8679] Kernel panic - not syncing: Fatal exception [ 362.121241][ T8679] Kernel Offset: disabled [ 362.126413][ T8679] Rebooting in 86400 seconds..