last executing test programs: 8.754023716s ago: executing program 2 (id=607): r0 = socket$inet(0x2b, 0x801, 0x0) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @dev}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @private}, 0x4) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, 0x0, 0x0) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @private}, 0x74) 7.608205848s ago: executing program 2 (id=615): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0xbd, 0x2, 0xc4, 0x40, 0x856, 0xac31, 0x931e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xd2, 0xc8, 0x7f}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000980)={0x44, &(0x7f0000000300)={0x40, 0x16, 0x2, "d6a7"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 7.213485937s ago: executing program 3 (id=617): request_key(&(0x7f0000000080)='dns_resolver\x00', 0x0, 0x0, 0x0) r0 = add_key$keyring(&(0x7f0000000340), &(0x7f0000000380), 0x0, 0x0, 0xffffffffffffffff) request_key(&(0x7f00000001c0)='dns_resolver\x00', &(0x7f0000000200)={'syz', 0x2}, &(0x7f0000000440)='\x00', r0) add_key(&(0x7f0000000240)='dns_resolver\x00', &(0x7f0000000080)={'syz', 0x1}, &(0x7f0000000280)="dee7030022cf5c6c7bc31bd2599759fafa9e5e1dbac27b0426fc0299c41fb9b9761a1b44dac894f365ae68edf335abf35ec53d6751467ebd2c187491bcab2c8d34fec505fc8a14622dba33ff9b054eb7e8a5bc4ab2719cb230328931deb95ef3fcafb1ce27743a93f4715976edec860ab49c3a4f51ab0124b50c3362201a307df03000", 0x83, r0) keyctl$search(0xa, r0, &(0x7f0000000400)='dns_resolver\x00', &(0x7f0000000140)={'syz', 0x1, 0x2e}, 0xffffffffffffffff) 6.630101909s ago: executing program 3 (id=619): bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x9, 0x6, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x11, 0x3, &(0x7f00000001c0)=@framed, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r0}, 0x10) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x0, 0x0, 0x0, 0x60000004, &(0x7f00000002c0)) 5.660354645s ago: executing program 3 (id=623): r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fd\x00') fchdir(r0) r1 = landlock_create_ruleset(&(0x7f00000000c0)={0x100}, 0x10, 0x0) landlock_restrict_self(r1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000c40)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) 5.253232688s ago: executing program 1 (id=626): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r1, 0x1, 0x200000010, &(0x7f0000000000)=0x7, 0x4) sendto$unix(r0, &(0x7f0000000080)="008e", 0x2, 0xd1, 0x0, 0x0) write$binfmt_elf32(r0, &(0x7f0000000200)=ANY=[], 0x1) recvfrom$unix(r1, 0x0, 0x0, 0x10102, 0x0, 0x0) 4.998965672s ago: executing program 3 (id=638): r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_GETMOUSEREPORTING(r1, 0x5412, &(0x7f00000000c0)=0x13) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000200)={0xff02, 0x0, 0x0, 0x8007, 0x0, "5f730000a9003f00"}) ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x5412, &(0x7f00000006c0)=0x1a) 4.402868532s ago: executing program 0 (id=629): r0 = socket$inet(0x2b, 0x801, 0x0) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @dev}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @private}, 0x4) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, 0x0, 0x0) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @private}, 0x74) 4.399110546s ago: executing program 1 (id=631): openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x40, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file3\x00', 0xc1c0, 0x0) r0 = landlock_create_ruleset(&(0x7f0000000240)={0x1fff}, 0x10, 0x0) landlock_restrict_self(r0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000780)='./file3\x00', 0xffffffffffffff9c, &(0x7f00000007c0)='./file0\x00', 0x2) 4.39566196s ago: executing program 2 (id=632): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0xfff) syz_emit_ethernet(0x9a, &(0x7f00000004c0)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x64, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x19, 0x2, 0x0, 0x0, 0x0, {[@exp_smc={0xfe, 0x6}, @timestamp={0x8, 0xa, 0x80}, @md5sig={0x13, 0x12, "d082e275205e556149a021cc13c33d89"}, @window={0x3, 0x3}, @window={0x3, 0x3}, @sack_perm={0x4, 0x2}, @sack_perm={0x4, 0x2}, @fastopen={0x22, 0xf, "cf6af75d5cdcf048b19c939556"}, @md5sig={0x13, 0x12, "27406263e43d5959a166a23bd1116edc"}]}}}}}}}}, 0x0) syz_emit_ethernet(0x56, &(0x7f0000000140)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "df1d00", 0x20, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0x4, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa}]}}}}}}}}, 0x0) 4.350069761s ago: executing program 3 (id=633): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000340)={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f0000000040)="05000000010000", 0x7) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) close_range(r1, 0xffffffffffffffff, 0x0) 4.261578069s ago: executing program 4 (id=634): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000600000000000000000a20000000000a01030000000000000000010000000900010073797a300000000040000000030a01020000000000000000010000000900030073797a3200000000140004800800024032658aeb08000140000000000900010073797a300000000048000000060a010400000000000000000100000008000b40000000000900010073797a3000000000200004801c0001800b00010072656a65637400000c000280080001400000000114000000110001"], 0xd0}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, 0x0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000080)={@local, @dev, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x11ea, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2}}}}}}, 0x0) 3.962093825s ago: executing program 1 (id=635): r0 = syz_open_dev$loop(&(0x7f00000001c0), 0x75f, 0x103382) r1 = memfd_create(&(0x7f0000000880)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc9\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\xa4(V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93i|\xc0\x00\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\xb5\x13^\x13\xcb\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n0x0) r1 = socket(0x840000000002, 0x3, 0x100) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) sendmmsg$inet(r1, &(0x7f0000005240), 0x264e33, 0x0) io_submit(r0, 0x1, &(0x7f0000000a40)=[&(0x7f0000000840)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) 3.723226763s ago: executing program 0 (id=647): r0 = syz_io_uring_setup(0x24f7, &(0x7f0000000140)={0x0, 0x0, 0x10100}, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) prlimit64(0x0, 0x7, &(0x7f00000006c0), 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000740)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r3, 0x0}) io_uring_enter(r0, 0x2d3e, 0x0, 0x0, 0x0, 0x0) 3.610886681s ago: executing program 2 (id=637): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000040)={0x0, 0x4}, 0xe) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000440)=0x10) setsockopt$inet_sctp6_SCTP_CONTEXT(r0, 0x84, 0x71, &(0x7f0000000080)={r1}, 0x8) 3.60815587s ago: executing program 4 (id=639): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, &(0x7f00000000c0), 0x1) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x40000, @loopback}], 0x1c) sendto$inet6(r0, &(0x7f0000000500)="a4", 0x34000, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) 3.365236171s ago: executing program 1 (id=640): syz_mount_image$exfat(&(0x7f0000000040), &(0x7f0000000180)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0xa1000a, &(0x7f0000000200)=ANY=[@ANYRES8=0x0, @ANYBLOB="fe51e9654238f42c986fec5c702af4d690fec10cc48bb0162f98c2aabe2ce273cf5f4da9e412ba9d615293abf46e5f689178164fb965e6ef0f419c59c7a206d5a197ca9dfac377fd3265f94dbdff5b7b8aee42c4b8b7e0cc2028d137d89b39df3597cec6fe481a808d0559fa52bd228e9c550adb4b69481429baab", @ANYRES64], 0x21, 0x152d, &(0x7f00000008c0)="$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") r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000680)=ANY=[@ANYBLOB="98030000", @ANYRES16=r1, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r2, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c0900005603330080b0c000ffffffffffff080211000001", @ANYRES64, @ANYBLOB="d6012b84c5cb26ae1c251b84dbc5177f9ed9"], 0x398}}, 0x0) 3.162760812s ago: executing program 0 (id=641): r0 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x4) r1 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="48000000150081fb7059ae08060c04000aff0f11000000040011018701546fabca1b4e7d06a6bd7c493872f750375ed08a562af5745e17b8c119418f0f000000d6e74703c48f93b8", 0x48}], 0x1}, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={&(0x7f00000007c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000780)="f4000900062b2c25fe80000000000000dc8b850f238466cc00007a000000ad6e911b51818462b400", 0x28}], 0x1}, 0x0) 2.755825506s ago: executing program 4 (id=642): r0 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) fchdir(r0) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/net\x00') mount(&(0x7f0000000000), &(0x7f0000000040)='./cgroup\x00', 0x0, 0x1001, 0x0) unshare(0x60600) 2.319937914s ago: executing program 0 (id=643): syz_mount_image$hfs(&(0x7f0000000100), &(0x7f00000000c0)='./file0\x00', 0x204080, &(0x7f00000004c0)={[{@file_umask={'file_umask', 0x3d, 0x1}}, {@iocharset={'iocharset', 0x3d, 'cp855'}}, {@uid}, {@dir_umask={'dir_umask', 0x3d, 0x200}}]}, 0x41, 0x288, &(0x7f0000000540)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000a80)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000200), 0xfea7) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000380), 0xfea7) 2.317169283s ago: executing program 1 (id=644): prlimit64(0x0, 0xe, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) unshare(0x20000400) r0 = socket$inet6(0xa, 0x3, 0x88) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x5, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) 2.257051506s ago: executing program 2 (id=645): open(&(0x7f0000000100)='./file0\x00', 0x101bff, 0x0) r0 = open(&(0x7f00009e1000)='./file0\x00', 0x0, 0xca) fcntl$setlease(r0, 0x400, 0x0) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) rename(&(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000200)='./file0\x00') 1.884039894s ago: executing program 4 (id=646): mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) chroot(&(0x7f0000000180)='./file0\x00') move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x230) 1.49072708s ago: executing program 1 (id=648): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000101c1b021b00000000000109022400010000400009040000010300400009210000000122050009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, 0x0, 0x0, &(0x7f0000000180)={0x0, 0x22, 0x5, {[@main=@item_4={0x3, 0x0, 0x0, "78e99e15"}]}}, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000580)={0x2c, &(0x7f00000003c0)=ANY=[@ANYBLOB="000005"], 0x0, 0x0, 0x0, 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) 714.40985ms ago: executing program 2 (id=649): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000600000000000000000a20000000000a01030000000000000000010000000900010073797a300000000040000000030a01020000000000000000010000000900030073797a3200000000140004800800024032658aeb08000140000000000900010073797a300000000048000000060a010400000000000000000100000008000b40000000000900010073797a3000000000200004801c0001800b00010072656a65637400000c000280080001400000000114000000110001"], 0xd0}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, 0x0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000080)={@local, @dev, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x11ea, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2}}}}}}, 0x0) 702.628496ms ago: executing program 0 (id=659): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB="98030000", @ANYRES16=r1, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r3, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c0900005603330080b0c000ffffffffffff0802110000010569ea7fa08e8df3d0edd086922799ded6be01d09a95b66d3d"], 0x398}}, 0x0) 693.606568ms ago: executing program 4 (id=660): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.kill\x00', 0x275a, 0x0) write$UHID_INPUT(r1, &(0x7f0000000940)={0x8, {"85f080a4933d55266e07e799aa0cc421388242df2a3c6b631b65b1c061edd2aa108c3528fe9b0bb3a53ab1200f5d01a68a4acdec8fee09648222f908c1fedc3000342e6139de28366c13509306d00ebcc67497181ac916db98af9d366b76e427d9ab5bb68095f0fb246df32b8af0783653136f8a04c03690312125c7ded6a24fda8685340c575ead69519e3583f89d467ec232d6a1ffd0463ba4ea3cbae5dae6654b5547b5458f02ac307729e57b09e134f68be44f88d72517b230b066f6315b5fb80206397bbff8cbc2a36e01c2e7b3aadb32bd3dd5288a69a991d9c674717e3abba7167280b2db3b1b8502afa4f3f296c532510c9d2dd79bb5eeb25adb5edddbdd069c09d14d15c2e7e1e2bd6c108fab3591bb22e97d6992236d2273c8bb95536f7118d007965008b125c7daac2814e6bbe1adbfa3572ad0b7ad5c26c8014118d8374ca9f285779dfee7715a403908146a74de61b3853914c89f444c12e7a38bdd46c4ed36eb806ea598f44d1dec9eff9e2476f43802211f0762b66673b45d236b2391ce322e30fb9c69fe0d514dc1f8b6e3979c1205fd5224b07d18a44fec4f6f1a6f65158bb6adcc295bf2dd7dea107f59d7e03c61fe5822292e45968956b931bdc4d6445ff1631e0b98e4b4448774dd4b9cd53a45896fdb3f03702778741ae2b45a25bf9a23fc02fb97a630f132bf9def6c6d4a7baeb62972f1a814f6f2377bcfc78e2e86368c138510a04cedf7175af8c2034fae7413e3ace8c71ab9a0af1ca7042011a6ed028e205648535dabf3b2f85196ae18d36b839e3cd54ae4933ad529888fdac7bb8a70c72bc0fc81ba06506f2d5bc7686e219bbe5283959cbef9950e071cb6d9f341fc624a5110341f26cebd7100599a06e61f66fae120c7fc2b34c6221200eba75bd1277114671a3fa8f058b27fd897b052f4a52afcea814df526181c75c4497210a2b8b74e26601561e78735387cf123654b0295d1d60556956b36d96dd038866c4b4db31ebdcddd6929bbc2850cd4901389e6ea6e86041e0efa1158f334e7afda0e11c2fb0e6df6364cb95659f506d5c7e63fb67c8116577d15e4a4b1fc4c27de2e52586cb1f52be9c3601f5066549de8bdc3ec07d1a84caf1961323ec2487a37b751aeabafcd647ce2dae5d9499c0f969467e6cabad198669ac96bd1488954eff0854ee0c83d7b596d273625bdb16270782321071fda5d980ded78ffa9dc2b56037d7cbf942547f48a5131f1991f6c17ae1ed5120ca6878f98e68e7997a9a2b70be640a70a34adb80de286c6692abb5f092e4e3a15a83217e03d02a4054f34af3a65ff6b36f395b76a0579cffafd5d3bb0e704c935caecf3a7ab756c23fd60c9fe3f4fb2be7504f5bae22b116ff1588dcf02b327d31bf0488dba8af5b33ccf2d7d87f43bbc48fcd4f191ad6af9313ad38b8b29674bfabd6651bc1f6ce5abb4a2f1413194f96b26d7d6edc4e013fba549075c97eef508af5ca7873664b058b7bcf455a8a04b591d29fab6366c844bb75576bac2d52323e747303d00a5736c9812922b0e17bcec9135550736b54cf6407d61e22e62d7bb75f62935b665acf33e75f688c36ef416f1b890d0f0c8ad1df00e02ec45967834d5649c8e7143978622fa3704672970b7993a87e97d3d926a14265647bc8b8c9e6f83e29572608d24b42c2635ef4abbd0af83860e99c90d7471cf6e8ce99507f5ec2bc572212fa9ee3f5a9dfa3815fe55f0bbb119acce062ae37f2ff921707abba139bcddf42bfd174d29b540161b4113c4e1a13f3a628c638ec4d3a884dfbc093e23ec0d0671b46b41dc8b42d950c8615ba5ee87f49b5d0910ffa4871207995001920db05a95199967f097ba7b55bbd271d818690c4238406b40a3dfc42fa56a67173b53a96b543326c56738b6d043195934018696f5ab49347e5148a78f2d1369a71afab8330273d46ecfba4ee05802a5385649851db949dbfb39e290941641c50b1ac20fb3102754a760b097f464ddb0b83f8168badfa71db6621dcf22fb081e3403f3bac5c7e65905aca52885c807f8ddab18bb2f12ef952c50483c0e251968bc70ff0d42a638ca744dea4c7ebb4fea777cf663bb4f1505ed79730c45bc86e488a13f924377a8e2ee6670a02ca52874ae1c42a35d55b9765757047b2cc3742aa51fa3e43fb2c113c92ad213bad252c1a82966dd016f12a7f1c3900c0f1ab455035163f31899bdd30f3ff43ad17d9e45bb7438c1c986712736f24be14f71ab1bfe92a25ec07f086ee8c7971b8077a13e58a8e8bea39c8e06b251909f02cb0080abf020f27ca160eb26c082dda1fa54ea4094dfdbcb2fa7bddccb67a844e8075f4cc08dad35757006d051e183dced336bc0c2502f93ffc87dca622286ba174c24e1f53f27dc2777baafe170348b0e8d3e743b3aa906bc0764bbe7da08ff403efe2212627d672250658bb513b7312517d1f88c61c7ba5f9647cd619281c5b390b48606ee39fb4171103df2e09d7cfd56c06c721f7c24ad8cce383623fc2dcb15ac56438ea331820ae59c8c474e36fc73f7b1b3b86df1b42490815513681aafbf7e871b4b9686efae6c45ecfca60a640a6f071dfd31f9437c3d03086164b48c1ed802986864bfe0d49bdd7709662262368dbc3ecc05eb240ecc41904c76d78ab5c52b66af5a720fdd6a92f52be0676427a56e32e5bc5085b25f90add28a76f2fce6f8f0ef74f4659698549646bd63175adf77b5cdcfe676e1b1a9af15102946554ba6136cbc83c6268ee40318f3c9d4718025688b35d2265bf60bf889ff629f7834586ef46eab7a9176337536bb6001e676546b987f36b1fe4b9f6e46a8ce73eb22ebbb9c14d8e2b43ea77ef887e5a26448f4086fa819a25e27725ac10298851c8bc45f2ce4430b07917ade5ea8c434c3f2576effbeb521173736e5c9557450643068b0c0fb132a7e99de6ca292246a9937fa7d7e06e59cf59ce5b9f842629049931146af40a8a1256ba373a88d09dc00cdf4453cc6ba78572bf3e1f2352a978cdbad60220cb8ac37d7f614a306492a4b5eee9244b0ca84b6cf2e23013bfb1cb92bf6d126fe550e58c19f84e7a4081437b75b31b2b9fb658dcd8ba077962e0f3359721a148d4fefe5c97941ca9688cb85adf38fd10f5811cdd8e074a21bbfc9541c71465b08d7321281b68ed52bfab789b9c83849c09d52376d419b1e7ba367603236e119cdf4a7b7cf9d81f2229601deace53cea2f14a05f7fa0ca04b39e31c6453e332f4bd0915c0e09e28f4d1125c390c6ff0833a04b6fc37855e65de90333e505b9eb66e00686a3ed499cfb7b8b215dbdc9787b5baa724cfa71ee6745b41e203de8b7794757ac328ec5567540b951b50530c3d4ee34705ea1c66fd6591e88561083e86d48c45ef3b83a3029319d8f3d8e65ce14c1dc3cb92d0a7dbeb609a8d2793928caa079f0fbbb2bc90b9f058cc048f4032041d14c5bca00e99b3027ec3a50c4957199cf016a4594069af8659df0973f20ffb15dbc265ac5b8a2203e90b114a3e9441e357c60ce0b550a7fe66fc34f5702ac8e8992a22e89194c1df69e81a9b7ad3d2634ea8c0388588192fd47d8e803b10044d558617fb2921b69eb4d85c051f86ef63a2f4382b9becd870fb2ecadca6902712b88680792e2f2ec89591cfebb6db3ad31c2a339af10465fcf7988519d382218df52261234f26a6f66ad0d1859de505d0fe819caf2f8d30aa9fd1228ac91d11ca67f1f8d50c8eefa5c441514321507dff6c6ea3cff6f340a1c11e0c40f419e8e60fc94d8828fa47a96cdf7ee4f61e23f40751b25cf9ca1295041a350f83f0e679515d6b4b46e2c9ce8999e07f835abc1663cefcf728df37831f4e17f8c8a4feaf1fbf44c38c9313284404a50ba4cd8abe835b33bfecb02cd6c9d7f435853b4c8d505ab83cf46512739116694765658bae64b3127152d216055aef9b25c70a8a3b302752d7b1e8791c657b9f3fc9001ef299fd1a349491ae6ee9940149160507fc4130fb825d47d97dc2c243209d2403583ac3ef6ddbedcaa76432255487c0a06e59e043e572ab3aec002af6a6b6a2dc9cfaeefa70557886c4d12924a0388f2f1bc8e89e4cfa69705d1ef3c4658f8616278b588011d9dd914beec0b151d65b6524fba3e3f235d58373e021699b07622a51504eade747e0b2f9cf38bc167cabc8cb18c708d1337e25648707e8c0872876514c7a49c0b2aaee5ed9e9ecfcbcc23e032c4deb63e48e7120188056468fad31448e4b42e7d62fbcfc1c2cfb01fcf0db5e8a162bdb9bd820c763f17b96c23f32db9d1c1d74ddbe657b4f9595a9796982a0742153111b15e484d8ffebe47ce0a78a41e470a341616ec2eb6eef813fb415fab50fa965bec6a5977a0ade4fed67f86fc24e11b0e2f5364079f7c7c35b560cac726dbc80f29dbd248f7ecda0286a23ef172a28c96d9bdb1f598eab31c6baf0321312da23920c074b9d2d2e442717f2c21001142a39c2da6b8bd9d06b05a6a8deae1bd1be4108a636ddbebc682d113e715f2f3ee506abc28b1c654b3d2d28e02f73b171ed0deed71dda90ce4a0b728cc75cb576385e7418b545b992b1dd98e2ee53355f464f9250a2a03b3d1e4d2ac1aa71d01de2573530324e14d15a507883411ddbd37be21dc929db9b11f11010e4d2a04c7325a5ae6d24d19900ff97a8a89438f8676457a78cff05201528f4358fe67f61288bf042a8f3c2e0f8b4997b8fb74996b80d465489b2d7807a945eba72a945e8cf8625dbad6f6f6e30537b29e558ca8a8b0625f578c766d34f2d28d704715f94df1f6318a308042aa494baa295640679f1eab1e6a8308af8ce6441d5ad8a2f3d477eb5307af0dfae6644493f1434030b8361621340ad3dcefa6d8f090ed3929d89ad9c0ba01a6903033428dd8f98619304b1803187d2a6130bf1e009b5eb0e7e21c75594b3b8470f3106c92a9e55bfeb026091ced127a90a1f1247f3c07e36d3572923e0de3f73518d0369a25fcd4e65d243b7eab91063a7bfd8bc8ac9e39fbbb32b5c9517886287a18eacd8dbfda9b91db693cb12e42cba5988280e09e51e72b91a0f360656d8f21cc1eb3248ac345ad51d1a6172b18419277851dab01e028c7e8e2cf34095efd28267852a08fccf61c45b5e46930160daf50282be058274e7ff58c48b60b86d0c8cc886ab8778a2a2b5fa2557ad7bf7f01f2175523ce758871d334c20a9839f7a89fe2867c06289c8a2f6456ac7e4fbadee53ac41aee68214bc76669853baa4f58255b39ba581414f2e8c4b49303f8936a33bae5cbc96b29a5c724d5b50e1614144c2acd03bd90de891c3d36ce040d57543682ecbfcae66c4153c337c3a5d01896524c8e0c27e9a08919821ca27bbfe3fc9ba24a823aeec8d4ad8ef8a65c585bee4dcf1acaa3da501a8c11a23b2e22920c1ad0129a038b31fe16c2abc80589dbf7c37211afc5d1a6db908bc5fe8a692060069fcbcdcba7c523d3c424aa3b0c6556387e0e51bcde9e5f850abf62d2c2101c3a2786a0cb94932877a09cb6b64aa61da8cab3b423e7adc4c4700418a65e87225710e1691f6d9cb2eb63cce5b605ce0a4a89cf519767e00845397c5e381141a0ed8a89b01064b495ec8d1e2da37433bf1597d919a69610d2ad26bdf6fca8de422bb2cb80d0516206e8194ee51445a3dcb5dee33c0c310b4751e68e58bebda2fb586985a5a5b06456756f44e6dbfef4bb99ca732f00fb9ea35775f7419681bfbe6f43dc7c4650c13b63d93c1d490bf0173f287a4309531f13ecb1a775d0bd881a", 0x1000}}, 0x1006) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2000001, 0x10012, r1, 0x0) ioctl$KVM_GET_MSR_INDEX_LIST(r0, 0xc004ae02, &(0x7f0000000080)=ANY=[]) 285.42µs ago: executing program 0 (id=650): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0xfff) syz_emit_ethernet(0x9a, &(0x7f00000004c0)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x64, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x19, 0x2, 0x0, 0x0, 0x0, {[@exp_smc={0xfe, 0x6}, @timestamp={0x8, 0xa, 0x80}, @md5sig={0x13, 0x12, "d082e275205e556149a021cc13c33d89"}, @window={0x3, 0x3}, @window={0x3, 0x3}, @sack_perm={0x4, 0x2}, @sack_perm={0x4, 0x2}, @fastopen={0x22, 0xf, "cf6af75d5cdcf048b19c939556"}, @md5sig={0x13, 0x12, "27406263e43d5959a166a23bd1116edc"}]}}}}}}}}, 0x0) syz_emit_ethernet(0x56, &(0x7f0000000140)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "df1d00", 0x20, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0x4, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa}]}}}}}}}}, 0x0) 0s ago: executing program 4 (id=651): bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x0, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180200000000000000000022000000008500000028000000850000005000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x560f, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$TCFLSH(r0, 0x404c4701, 0x20000000) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.164' (ED25519) to the list of known hosts. [ 154.356443][ T5170] cgroup: Unknown subsys name 'net' [ 154.502540][ T5170] cgroup: Unknown subsys name 'cpuset' [ 154.516542][ T5170] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 157.635569][ T1248] ieee802154 phy0 wpan0: encryption failed: -22 [ 157.642424][ T1248] ieee802154 phy1 wpan1: encryption failed: -22 [ 199.172448][ T5170] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 202.842014][ T5196] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 202.853566][ T5196] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 202.854855][ T5198] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 202.862735][ T5196] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 202.872365][ T5198] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 202.880493][ T5196] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 202.883415][ T5198] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 202.891530][ T5196] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 202.897842][ T5198] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 202.907528][ T5196] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 202.920122][ T5202] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 202.927025][ T5196] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 202.932808][ T5198] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 202.936889][ T5196] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 202.944847][ T5198] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 202.949805][ T5196] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 202.963984][ T5204] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 202.964856][ T5196] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 202.972920][ T5204] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 202.984789][ T5196] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 202.988755][ T5204] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 202.995641][ T5196] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 203.000848][ T5204] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 203.007952][ T5196] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 203.025693][ T5204] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 203.034788][ T5204] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 203.047546][ T51] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 203.066283][ T5193] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 203.094113][ T5204] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 203.124029][ T5194] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 204.307592][ T5189] chnl_net:caif_netlink_parms(): no params data found [ 204.695787][ T5192] chnl_net:caif_netlink_parms(): no params data found [ 204.809674][ T5195] chnl_net:caif_netlink_parms(): no params data found [ 204.958416][ T5188] chnl_net:caif_netlink_parms(): no params data found [ 205.143483][ T5190] Bluetooth: hci1: command tx timeout [ 205.149226][ T5194] Bluetooth: hci3: command tx timeout [ 205.150382][ T5204] Bluetooth: hci0: command tx timeout [ 205.155888][ T5193] Bluetooth: hci4: command tx timeout [ 205.222298][ T5193] Bluetooth: hci2: command tx timeout [ 205.544879][ T5189] bridge0: port 1(bridge_slave_0) entered blocking state [ 205.556703][ T5189] bridge0: port 1(bridge_slave_0) entered disabled state [ 205.566623][ T5189] bridge_slave_0: entered allmulticast mode [ 205.575665][ T5189] bridge_slave_0: entered promiscuous mode [ 205.593113][ T5191] chnl_net:caif_netlink_parms(): no params data found [ 205.641890][ T5189] bridge0: port 2(bridge_slave_1) entered blocking state [ 205.649764][ T5189] bridge0: port 2(bridge_slave_1) entered disabled state [ 205.657670][ T5189] bridge_slave_1: entered allmulticast mode [ 205.666663][ T5189] bridge_slave_1: entered promiscuous mode [ 205.945975][ T5188] bridge0: port 1(bridge_slave_0) entered blocking state [ 205.956261][ T5188] bridge0: port 1(bridge_slave_0) entered disabled state [ 205.964130][ T5188] bridge_slave_0: entered allmulticast mode [ 205.973014][ T5188] bridge_slave_0: entered promiscuous mode [ 205.986536][ T5188] bridge0: port 2(bridge_slave_1) entered blocking state [ 205.994354][ T5188] bridge0: port 2(bridge_slave_1) entered disabled state [ 206.002028][ T5188] bridge_slave_1: entered allmulticast mode [ 206.011004][ T5188] bridge_slave_1: entered promiscuous mode [ 206.055255][ T5192] bridge0: port 1(bridge_slave_0) entered blocking state [ 206.063141][ T5192] bridge0: port 1(bridge_slave_0) entered disabled state [ 206.070858][ T5192] bridge_slave_0: entered allmulticast mode [ 206.080246][ T5192] bridge_slave_0: entered promiscuous mode [ 206.101365][ T5189] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 206.180892][ T5192] bridge0: port 2(bridge_slave_1) entered blocking state [ 206.191223][ T5192] bridge0: port 2(bridge_slave_1) entered disabled state [ 206.199203][ T5192] bridge_slave_1: entered allmulticast mode [ 206.208080][ T5192] bridge_slave_1: entered promiscuous mode [ 206.226224][ T5189] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 206.311059][ T5188] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 206.334433][ T5195] bridge0: port 1(bridge_slave_0) entered blocking state [ 206.344982][ T5195] bridge0: port 1(bridge_slave_0) entered disabled state [ 206.352971][ T5195] bridge_slave_0: entered allmulticast mode [ 206.361896][ T5195] bridge_slave_0: entered promiscuous mode [ 206.384302][ T5188] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 206.496801][ T5192] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 206.507038][ T5195] bridge0: port 2(bridge_slave_1) entered blocking state [ 206.514713][ T5195] bridge0: port 2(bridge_slave_1) entered disabled state [ 206.522306][ T5195] bridge_slave_1: entered allmulticast mode [ 206.531086][ T5195] bridge_slave_1: entered promiscuous mode [ 206.669585][ T5189] team0: Port device team_slave_0 added [ 206.729794][ T5192] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 206.800966][ T5188] team0: Port device team_slave_0 added [ 206.815918][ T5189] team0: Port device team_slave_1 added [ 206.978480][ T5188] team0: Port device team_slave_1 added [ 207.133701][ T5195] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 207.150251][ T5192] team0: Port device team_slave_0 added [ 207.201598][ T5189] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 207.209153][ T5189] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 207.235659][ T5189] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 207.283774][ T5193] Bluetooth: hci0: command tx timeout [ 207.289410][ T5193] Bluetooth: hci4: command tx timeout [ 207.295290][ T5193] Bluetooth: hci1: command tx timeout [ 207.300884][ T5193] Bluetooth: hci3: command tx timeout [ 207.309571][ T5193] Bluetooth: hci2: command tx timeout [ 207.328714][ T5192] team0: Port device team_slave_1 added [ 207.378123][ T5195] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 207.456077][ T5189] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 207.463497][ T5189] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 207.491039][ T5189] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 207.519642][ T5191] bridge0: port 1(bridge_slave_0) entered blocking state [ 207.529937][ T5191] bridge0: port 1(bridge_slave_0) entered disabled state [ 207.537856][ T5191] bridge_slave_0: entered allmulticast mode [ 207.546790][ T5191] bridge_slave_0: entered promiscuous mode [ 207.638695][ T5192] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 207.647116][ T5192] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 207.674159][ T5192] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 207.688104][ T5188] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 207.695470][ T5188] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 207.722735][ T5188] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 207.739570][ T5191] bridge0: port 2(bridge_slave_1) entered blocking state [ 207.747719][ T5191] bridge0: port 2(bridge_slave_1) entered disabled state [ 207.755574][ T5191] bridge_slave_1: entered allmulticast mode [ 207.764418][ T5191] bridge_slave_1: entered promiscuous mode [ 207.780328][ T5195] team0: Port device team_slave_0 added [ 207.821076][ T5192] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 207.828307][ T5192] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 207.854676][ T5192] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 207.868747][ T5188] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 207.877280][ T5188] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 207.904039][ T5188] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 207.947941][ T5195] team0: Port device team_slave_1 added [ 207.994346][ T5191] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 208.094529][ T5191] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 208.157570][ T5189] hsr_slave_0: entered promiscuous mode [ 208.166340][ T5189] hsr_slave_1: entered promiscuous mode [ 208.208013][ T5195] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 208.215341][ T5195] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 208.241844][ T5195] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 208.341903][ T5195] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 208.349234][ T5195] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 208.375869][ T5195] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 208.453946][ T5191] team0: Port device team_slave_0 added [ 208.535146][ T5192] hsr_slave_0: entered promiscuous mode [ 208.545769][ T5192] hsr_slave_1: entered promiscuous mode [ 208.554081][ T5192] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 208.561757][ T5192] Cannot create hsr debugfs directory [ 208.575833][ T5191] team0: Port device team_slave_1 added [ 208.666427][ T5188] hsr_slave_0: entered promiscuous mode [ 208.676402][ T5188] hsr_slave_1: entered promiscuous mode [ 208.684804][ T5188] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 208.692752][ T5188] Cannot create hsr debugfs directory [ 208.861792][ T5191] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 208.869029][ T5191] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 208.895352][ T5191] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 209.016213][ T5191] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 209.023633][ T5191] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 209.049971][ T5191] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 209.159377][ T5195] hsr_slave_0: entered promiscuous mode [ 209.168257][ T5195] hsr_slave_1: entered promiscuous mode [ 209.177297][ T5195] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 209.185201][ T5195] Cannot create hsr debugfs directory [ 209.388366][ T5193] Bluetooth: hci3: command tx timeout [ 209.394204][ T5193] Bluetooth: hci2: command tx timeout [ 209.399804][ T5193] Bluetooth: hci1: command tx timeout [ 209.405671][ T5193] Bluetooth: hci4: command tx timeout [ 209.411355][ T5193] Bluetooth: hci0: command tx timeout [ 209.628597][ T5191] hsr_slave_0: entered promiscuous mode [ 209.639132][ T5191] hsr_slave_1: entered promiscuous mode [ 209.648834][ T5191] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 209.656799][ T5191] Cannot create hsr debugfs directory [ 210.268921][ T5189] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 210.345285][ T5189] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 210.397454][ T5189] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 210.455653][ T5195] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 210.505451][ T5189] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 210.521854][ T5195] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 210.596936][ T5195] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 210.685514][ T5188] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 210.706244][ T5195] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 210.789664][ T5192] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 210.812564][ T5188] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 210.847205][ T5188] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 210.874101][ T5192] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 210.910764][ T5188] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 211.004774][ T5192] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 211.036101][ T5192] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 211.160722][ T5191] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 211.196430][ T5191] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 211.248479][ T5191] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 211.301422][ T5191] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 211.468762][ T5193] Bluetooth: hci4: command tx timeout [ 211.473981][ T5194] Bluetooth: hci1: command tx timeout [ 211.474467][ T5193] Bluetooth: hci2: command tx timeout [ 211.479734][ T5194] Bluetooth: hci3: command tx timeout [ 211.485660][ T5193] Bluetooth: hci0: command tx timeout [ 212.218577][ T5189] 8021q: adding VLAN 0 to HW filter on device bond0 [ 212.341562][ T5188] 8021q: adding VLAN 0 to HW filter on device bond0 [ 212.400281][ T5195] 8021q: adding VLAN 0 to HW filter on device bond0 [ 212.466390][ T5192] 8021q: adding VLAN 0 to HW filter on device bond0 [ 212.493200][ T5189] 8021q: adding VLAN 0 to HW filter on device team0 [ 212.617008][ T2550] bridge0: port 1(bridge_slave_0) entered blocking state [ 212.624775][ T2550] bridge0: port 1(bridge_slave_0) entered forwarding state [ 212.662808][ T5188] 8021q: adding VLAN 0 to HW filter on device team0 [ 212.684512][ T5195] 8021q: adding VLAN 0 to HW filter on device team0 [ 212.733580][ T2550] bridge0: port 2(bridge_slave_1) entered blocking state [ 212.741219][ T2550] bridge0: port 2(bridge_slave_1) entered forwarding state [ 212.787004][ T5191] 8021q: adding VLAN 0 to HW filter on device bond0 [ 212.859412][ T2550] bridge0: port 1(bridge_slave_0) entered blocking state [ 212.867138][ T2550] bridge0: port 1(bridge_slave_0) entered forwarding state [ 212.894315][ T2550] bridge0: port 2(bridge_slave_1) entered blocking state [ 212.901795][ T2550] bridge0: port 2(bridge_slave_1) entered forwarding state [ 212.916355][ T2550] bridge0: port 1(bridge_slave_0) entered blocking state [ 212.924005][ T2550] bridge0: port 1(bridge_slave_0) entered forwarding state [ 212.993535][ T5192] 8021q: adding VLAN 0 to HW filter on device team0 [ 213.048493][ T2550] bridge0: port 2(bridge_slave_1) entered blocking state [ 213.056043][ T2550] bridge0: port 2(bridge_slave_1) entered forwarding state [ 213.107034][ T5191] 8021q: adding VLAN 0 to HW filter on device team0 [ 213.156104][ T4336] bridge0: port 1(bridge_slave_0) entered blocking state [ 213.164119][ T4336] bridge0: port 1(bridge_slave_0) entered forwarding state [ 213.179057][ T4336] bridge0: port 1(bridge_slave_0) entered blocking state [ 213.186763][ T4336] bridge0: port 1(bridge_slave_0) entered forwarding state [ 213.386948][ T4336] bridge0: port 2(bridge_slave_1) entered blocking state [ 213.394770][ T4336] bridge0: port 2(bridge_slave_1) entered forwarding state [ 213.415824][ T4336] bridge0: port 2(bridge_slave_1) entered blocking state [ 213.423520][ T4336] bridge0: port 2(bridge_slave_1) entered forwarding state [ 213.738156][ T5188] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 213.752658][ T5188] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 215.244961][ T5189] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 215.742535][ T5189] veth0_vlan: entered promiscuous mode [ 215.813139][ T5188] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 215.845608][ T5191] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 215.889748][ T5195] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 215.915070][ T5189] veth1_vlan: entered promiscuous mode [ 216.018659][ T5192] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 216.312449][ T5189] veth0_macvtap: entered promiscuous mode [ 216.459736][ T5189] veth1_macvtap: entered promiscuous mode [ 216.558847][ T5188] veth0_vlan: entered promiscuous mode [ 216.684456][ T5191] veth0_vlan: entered promiscuous mode [ 216.740614][ T5188] veth1_vlan: entered promiscuous mode [ 216.753679][ T5192] veth0_vlan: entered promiscuous mode [ 216.796512][ T5189] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 216.863560][ T5191] veth1_vlan: entered promiscuous mode [ 216.913198][ T5189] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 216.923493][ T5192] veth1_vlan: entered promiscuous mode [ 217.011768][ T5189] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 217.022312][ T5189] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 217.031334][ T5189] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 217.040759][ T5189] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 217.241050][ T5188] veth0_macvtap: entered promiscuous mode [ 217.421327][ T5188] veth1_macvtap: entered promiscuous mode [ 217.463610][ T5191] veth0_macvtap: entered promiscuous mode [ 217.486932][ T5192] veth0_macvtap: entered promiscuous mode [ 217.538773][ T5192] veth1_macvtap: entered promiscuous mode [ 217.564899][ T5191] veth1_macvtap: entered promiscuous mode [ 217.642707][ T5188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 217.653575][ T5188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 217.668911][ T5188] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 217.801615][ T5191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 217.812472][ T5191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 217.822715][ T5191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 217.833515][ T5191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 217.850212][ T5191] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 217.901201][ T5192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 217.912254][ T5192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 217.923745][ T5192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 217.934668][ T5192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 217.945969][ T5192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 217.956783][ T5192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 217.972322][ T5192] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 218.037944][ T5191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 218.048808][ T5191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 218.064000][ T5191] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 218.081965][ T5188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 218.094305][ T5188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 218.104511][ T5188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 218.116694][ T5188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 218.131692][ T5188] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 218.197077][ T5192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 218.208085][ T5192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 218.219723][ T5192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 218.230577][ T5192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 218.240837][ T5192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 218.251705][ T5192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 218.267612][ T5192] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 218.336804][ T5192] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.346107][ T5192] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.355343][ T5192] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.364478][ T5192] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.406047][ T5191] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.416104][ T5191] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.427879][ T5191] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.437483][ T5191] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.458638][ T5188] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.469510][ T5188] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.480203][ T5188] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.490823][ T5188] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.859265][ T5195] veth0_vlan: entered promiscuous mode [ 219.007291][ T5195] veth1_vlan: entered promiscuous mode [ 219.089423][ T1248] ieee802154 phy0 wpan0: encryption failed: -22 [ 219.097627][ T1248] ieee802154 phy1 wpan1: encryption failed: -22 [ 219.314146][ T5195] veth0_macvtap: entered promiscuous mode [ 219.394557][ T5195] veth1_macvtap: entered promiscuous mode [ 219.575987][ T5195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 219.588084][ T5195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 219.599530][ T5195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 219.610830][ T5195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 219.621009][ T5195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 219.636482][ T5195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 219.648339][ T5195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 219.659216][ T5195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 219.674461][ T5195] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 219.894162][ T5195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 219.905396][ T5195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 219.915639][ T5195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 219.926437][ T5195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 219.936699][ T5195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 219.948846][ T5195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 219.960021][ T5195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 219.970848][ T5195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 219.986039][ T5195] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 220.039088][ T5195] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.048494][ T5195] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.057899][ T5195] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.067202][ T5195] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 223.427875][ T2550] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 223.437014][ T2550] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 223.747143][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 223.755424][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 224.481773][ T3953] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 224.490071][ T3953] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 224.726443][ T2568] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 224.734688][ T2568] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 224.944124][ T3931] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 224.952425][ T3931] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 225.095990][ T3953] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 225.106889][ T3953] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 225.261567][ T3953] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 225.269713][ T3953] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 225.434891][ T3931] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 225.443171][ T3931] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 225.755374][ T5381] loop0: detected capacity change from 0 to 64 [ 225.986294][ T3931] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 225.994479][ T3931] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 226.200844][ T3931] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 226.209136][ T3931] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 226.986897][ T5297] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 227.162776][ T5297] usb 1-1: Using ep0 maxpacket: 32 [ 227.230950][ T5297] usb 1-1: New USB device found, idVendor=0458, idProduct=7006, bcdDevice=69.91 [ 227.240544][ T5297] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 227.324918][ T5297] usb 1-1: config 0 descriptor?? [ 227.371901][ T5297] gspca_main: sunplus-2.14.0 probing 0458:7006 [ 227.376966][ T5398] loop3: detected capacity change from 0 to 1024 [ 227.618310][ T5398] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 227.814531][ T5406] Bluetooth: MGMT ver 1.23 [ 227.832869][ T8] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 228.191325][ T8] usb 3-1: Using ep0 maxpacket: 16 [ 228.216141][ T8] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 228.228316][ T8] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 228.306628][ T8] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 228.317182][ T8] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 228.326158][ T8] usb 3-1: Product: syz [ 228.330550][ T8] usb 3-1: Manufacturer: syz [ 228.335475][ T8] usb 3-1: SerialNumber: syz [ 228.353637][ T5189] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 228.409605][ T8] usb 3-1: config 0 descriptor?? [ 228.439894][ T8] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 228.449638][ T8] em28xx 3-1:0.0: Audio interface 0 found (Vendor Class) [ 228.466684][ T5297] gspca_sunplus: reg_w_riv err -71 [ 228.472497][ T5297] sunplus 1-1:0.0: probe with driver sunplus failed with error -71 [ 228.593338][ T5297] usb 1-1: USB disconnect, device number 2 [ 229.181209][ T8] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 229.222503][ T8] em28xx 3-1:0.0: Config register raw data: 0x52 [ 229.429329][ T8] em28xx 3-1:0.0: AC97 chip type couldn't be determined [ 229.436813][ T8] em28xx 3-1:0.0: No AC97 audio processor [ 229.490507][ T8] usb 3-1: USB disconnect, device number 2 [ 229.498055][ T8] em28xx 3-1:0.0: Disconnecting em28xx [ 229.563974][ T8] em28xx 3-1:0.0: Freeing device [ 230.637966][ T5428] loop4: detected capacity change from 0 to 2048 [ 230.707862][ T5428] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 230.976159][ T5297] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 231.162786][ T5297] usb 3-1: Using ep0 maxpacket: 8 [ 231.217909][ T5297] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ee [ 231.237521][ T5297] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 231.252785][ T5297] usb 3-1: Product: syz [ 231.257216][ T5297] usb 3-1: Manufacturer: syz [ 231.262974][ T5297] usb 3-1: SerialNumber: syz [ 231.375067][ T5297] usb 3-1: config 0 descriptor?? [ 231.630506][ T5297] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 232.110963][ T5297] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 232.182407][ T5297] usb 3-1: USB disconnect, device number 3 [ 232.936508][ T5462] Bluetooth: MGMT ver 1.23 [ 233.548838][ T5297] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 233.783932][ T5297] usb 3-1: config 0 interface 0 has no altsetting 0 [ 233.790907][ T5297] usb 3-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=94.75 [ 233.801449][ T5297] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 233.875484][ T5297] usb 3-1: config 0 descriptor?? [ 234.217425][ T8] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 234.435216][ T8] usb 1-1: Using ep0 maxpacket: 8 [ 234.533426][ T8] usb 1-1: New USB device found, idVendor=2770, idProduct=9120, bcdDevice=6c.77 [ 234.542997][ T8] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 234.551290][ T8] usb 1-1: Product: syz [ 234.553148][ T5297] video4linux radio32: keene_cmd_set failed (-71) [ 234.556331][ T8] usb 1-1: Manufacturer: syz [ 234.562236][ T5297] radio-keene 3-1:0.0: V4L2 device registered as radio32 [ 234.575680][ T8] usb 1-1: SerialNumber: syz [ 234.629995][ T5297] usb 3-1: USB disconnect, device number 4 [ 234.674892][ T8] usb 1-1: config 0 descriptor?? [ 234.767450][ T8] gspca_main: sq905-2.14.0 probing 2770:9120 [ 235.763804][ T8] gspca_sq905: sq905_read_data: usb_control_msg failed (-71) [ 235.771771][ T8] sq905 1-1:0.0: probe with driver sq905 failed with error -71 [ 235.818107][ T8] usb 1-1: USB disconnect, device number 3 [ 235.908492][ T5494] loop2: detected capacity change from 0 to 64 [ 236.009388][ T5494] Trying to free block not in datazone [ 236.015340][ T5494] Trying to free block not in datazone [ 236.020991][ T5494] Trying to free block not in datazone [ 236.027796][ T5494] Trying to free block not in datazone [ 236.034311][ T5494] minix_free_block (loop2:6): bit already cleared [ 236.040998][ T5494] Trying to free block not in datazone [ 236.047678][ T5494] Trying to free block not in datazone [ 236.162617][ T5497] syz.1.48 uses obsolete (PF_INET,SOCK_PACKET) [ 236.734987][ T5297] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 236.952338][ T5297] usb 4-1: Using ep0 maxpacket: 16 [ 236.998121][ T5297] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 237.010705][ T5297] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 237.051114][ T5297] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 237.061461][ T5297] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 237.070281][ T5297] usb 4-1: Product: syz [ 237.074894][ T5297] usb 4-1: Manufacturer: syz [ 237.081279][ T5297] usb 4-1: SerialNumber: syz [ 237.115627][ T5297] usb 4-1: config 0 descriptor?? [ 237.141567][ T5297] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 237.154014][ T5297] em28xx 4-1:0.0: Audio interface 0 found (Vendor Class) [ 237.361797][ T5512] loop4: detected capacity change from 0 to 64 [ 237.862909][ T5297] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 237.875531][ T5297] em28xx 4-1:0.0: Config register raw data: 0x52 [ 238.081151][ T5297] em28xx 4-1:0.0: AC97 chip type couldn't be determined [ 238.088697][ T5297] em28xx 4-1:0.0: No AC97 audio processor [ 238.169392][ T5297] usb 4-1: USB disconnect, device number 2 [ 238.176997][ T5297] em28xx 4-1:0.0: Disconnecting em28xx [ 238.251730][ T5297] em28xx 4-1:0.0: Freeing device [ 238.286524][ T5520] loop4: detected capacity change from 0 to 256 [ 238.318581][ T5520] exfat: Deprecated parameter 'namecase' [ 238.325044][ T5520] exfat: Deprecated parameter 'utf8' [ 238.401528][ T5520] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xbe675ead, utbl_chksum : 0xe619d30d) [ 239.297799][ T5533] warning: `syz.4.64' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 242.029020][ T5571] dummy0: entered promiscuous mode [ 242.034625][ T5571] macsec1: entered allmulticast mode [ 242.040159][ T5571] dummy0: entered allmulticast mode [ 242.090536][ T5571] dummy0: left allmulticast mode [ 242.102703][ T5571] dummy0: left promiscuous mode [ 242.499292][ T5577] loop2: detected capacity change from 0 to 64 [ 242.666104][ T29] audit: type=1800 audit(1726696430.948:2): pid=5577 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.85" name=FA dev="loop2" ino=22 res=0 errno=0 [ 243.025011][ T5581] loop3: detected capacity change from 0 to 512 [ 243.076505][ T5581] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 243.090447][ T5581] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 243.216164][ T5581] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2862: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 243.310247][ T5581] EXT4-fs (loop3): 1 truncate cleaned up [ 243.318803][ T5581] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 243.375343][ T5592] process 'syz.4.91' launched './file1' with NULL argv: empty string added [ 243.767073][ T5189] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 245.295274][ T5623] loop0: detected capacity change from 0 to 64 [ 245.526545][ T29] audit: type=1800 audit(1726696433.748:3): pid=5623 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.103" name=FA dev="loop0" ino=22 res=0 errno=0 [ 246.555299][ C1] sd 0:0:1:0: [sda] tag#6738 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 246.566419][ C1] sd 0:0:1:0: [sda] tag#6738 CDB: Write(6) 0a 00 00 00 00 00 00 00 00 00 00 00 [ 246.837081][ T5297] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 247.040953][ T5297] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 32 [ 247.051267][ T5297] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 247.130740][ T5297] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 247.140592][ T5297] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 247.149414][ T5297] usb 2-1: SerialNumber: syz [ 247.235612][ T5642] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 247.342795][ T8] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 247.520878][ T5642] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 247.536074][ T8] usb 5-1: Using ep0 maxpacket: 16 [ 247.569465][ T8] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 247.580953][ T8] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 247.592456][ T8] usb 5-1: New USB device found, idVendor=146b, idProduct=0902, bcdDevice= 0.00 [ 247.601803][ T8] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 247.695797][ T8] usb 5-1: config 0 descriptor?? [ 247.975838][ T5297] cdc_ether 2-1:1.0: probe with driver cdc_ether failed with error -22 [ 248.206231][ T8] hid (null): report_id 44214 is invalid [ 248.245855][ T8] bigben 0003:146B:0902.0001: unexpected rdesc, please submit for review [ 248.292500][ T5297] usb 2-1: USB disconnect, device number 2 [ 248.313059][ T8] bigben 0003:146B:0902.0001: report_id 44214 is invalid [ 248.320541][ T8] bigben 0003:146B:0902.0001: item 0 4 1 8 parsing failed [ 248.404557][ T8] bigben 0003:146B:0902.0001: parse failed [ 248.411097][ T8] bigben 0003:146B:0902.0001: probe with driver bigben failed with error -22 [ 248.486896][ T25] usb 5-1: USB disconnect, device number 2 [ 248.519479][ T5658] loop2: detected capacity change from 0 to 512 [ 248.612828][ T5658] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -13 [ 248.632464][ T5658] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.118: invalid indirect mapped block 2683928664 (level 1) [ 248.654228][ T5658] EXT4-fs (loop2): Remounting filesystem read-only [ 248.654808][ T5297] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 248.670015][ T5658] EXT4-fs (loop2): 1 truncate cleaned up [ 248.677762][ T5658] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 248.810254][ T5658] EXT4-fs (loop2): Quota file not on filesystem root. Journaled quota will not work [ 248.823315][ T5193] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 248.832454][ T5193] Bluetooth: hci2: Injecting HCI hardware error event [ 248.840251][ T5190] Bluetooth: hci2: hardware error 0x00 [ 248.905701][ T5297] usb 4-1: config 0 has no interfaces? [ 248.911767][ T5297] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 248.922291][ T5297] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 248.936028][ T5297] usb 4-1: config 0 descriptor?? [ 249.055265][ T5191] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 249.787268][ T5252] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 249.972619][ T5252] usb 5-1: Using ep0 maxpacket: 16 [ 250.010982][ T5252] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 250.023475][ T5252] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 250.086135][ T5252] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 250.095811][ T5252] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 250.104319][ T5252] usb 5-1: Product: syz [ 250.108730][ T5252] usb 5-1: Manufacturer: syz [ 250.113692][ T5252] usb 5-1: SerialNumber: syz [ 250.159468][ T5252] usb 5-1: config 0 descriptor?? [ 250.229500][ T5252] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 250.239490][ T5252] em28xx 5-1:0.0: Audio interface 0 found (Vendor Class) [ 250.841939][ T5252] em28xx 5-1:0.0: chip ID is em2800 [ 250.905958][ T5190] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 251.066867][ T5252] em28xx 5-1:0.0: Config register raw data: 0xfffffffb [ 251.117460][ T5252] em28xx 5-1:0.0: AC97 chip type couldn't be determined [ 251.124904][ T5252] em28xx 5-1:0.0: No AC97 audio processor [ 251.237277][ T5252] usb 5-1: USB disconnect, device number 3 [ 251.244712][ T5252] em28xx 5-1:0.0: Disconnecting em28xx [ 251.304530][ T5252] em28xx 5-1:0.0: Freeing device [ 252.471630][ T3953] Bluetooth: hci5: Frame reassembly failed (-84) [ 253.450427][ T5706] loop1: detected capacity change from 0 to 4096 [ 253.520148][ T5706] ntfs3: loop1: Different NTFS sector size (4096) and media sector size (512). [ 253.883372][ T5706] ntfs3: loop1: mft corrupted [ 253.888521][ T5706] ntfs3: loop1: Failed to load $Extend (-22). [ 253.895237][ T5706] ntfs3: loop1: Failed to initialize $Extend. [ 254.014502][ T5706] ntfs3: loop1: ino=1e, "file1" failed to parse mft record [ 254.022472][ T5706] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 254.071409][ T5706] ntfs3: loop1: ino=1e, "file1" attr_set_size [ 254.502420][ T5193] Bluetooth: hci5: command 0x1003 tx timeout [ 254.506829][ T5190] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 255.223047][ T5734] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 255.770837][ T5739] loop4: detected capacity change from 0 to 256 [ 255.815244][ T5739] ======================================================= [ 255.815244][ T5739] WARNING: The mand mount option has been deprecated and [ 255.815244][ T5739] and is ignored by this kernel. Remove the mand [ 255.815244][ T5739] option from the mount to silence this warning. [ 255.815244][ T5739] ======================================================= [ 255.850271][ C1] vkms_vblank_simulate: vblank timer overrun [ 256.058345][ T5739] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 257.100970][ T5755] ALSA: mixer_oss: invalid OSS volume '' [ 257.107478][ T5755] ALSA: mixer_oss: invalid OSS volume '' [ 257.115213][ T5755] ALSA: mixer_oss: invalid OSS volume 'L' [ 258.533335][ T5771] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 259.604375][ T5787] netlink: 4 bytes leftover after parsing attributes in process `syz.2.169'. [ 259.608197][ T5782] loop4: detected capacity change from 0 to 2048 [ 259.673892][ T5782] UDF-fs: error (device loop4): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 259.700037][ T5782] UDF-fs: warning (device loop4): udf_load_vrs: No anchor found [ 259.710225][ T5782] UDF-fs: Scanning with blocksize 512 failed [ 259.862571][ T5782] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 260.066871][ T29] audit: type=1326 audit(1726696448.278:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5792 comm="syz.1.173" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7fc3579 code=0x0 [ 261.829085][ T5813] loop4: detected capacity change from 0 to 1024 [ 262.039125][ T5813] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 262.052414][ T5813] ext4 filesystem being mounted at /39/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 262.194260][ T5820] netlink: 'syz.0.185': attribute type 11 has an invalid length. [ 262.293632][ T29] audit: type=1804 audit(1726696451.496:5): pid=5823 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.182" name="/newroot/39/file1/file1" dev="loop4" ino=15 res=1 errno=0 [ 262.638644][ T5195] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 264.100024][ T5846] loop0: detected capacity change from 0 to 64 [ 264.106913][ T5297] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 264.331237][ T5297] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 264.341954][ T5297] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 264.436094][ T5297] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 264.445949][ T5297] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 264.454440][ T5297] usb 3-1: SerialNumber: syz [ 264.750491][ T5297] usb 3-1: 0:2 : does not exist [ 264.858868][ T5854] loop0: detected capacity change from 0 to 1024 [ 264.883857][ T5297] usb 3-1: USB disconnect, device number 5 [ 265.123386][ T5392] udevd[5392]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 265.304423][ T5848] loop4: detected capacity change from 0 to 4096 [ 265.980201][ T5848] syz.4.195 (5848) used greatest stack depth: 4416 bytes left [ 266.084971][ T29] audit: type=1326 audit(1726696455.326:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5860 comm="syz.2.200" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73fd579 code=0x7ffc0000 [ 266.106905][ C1] vkms_vblank_simulate: vblank timer overrun [ 266.115578][ T29] audit: type=1326 audit(1726696455.326:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5860 comm="syz.2.200" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73fd579 code=0x7ffc0000 [ 266.137386][ C1] vkms_vblank_simulate: vblank timer overrun [ 266.144089][ T29] audit: type=1326 audit(1726696455.336:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5860 comm="syz.2.200" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf73fd579 code=0x7ffc0000 [ 266.167693][ T29] audit: type=1326 audit(1726696455.336:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5860 comm="syz.2.200" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73fd579 code=0x7ffc0000 [ 266.189514][ C1] vkms_vblank_simulate: vblank timer overrun [ 266.196898][ T29] audit: type=1326 audit(1726696455.336:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5860 comm="syz.2.200" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73fd579 code=0x7ffc0000 [ 266.268571][ T5863] mmap: syz.1.213 (5863) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 266.322387][ T29] audit: type=1326 audit(1726696455.516:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5860 comm="syz.2.200" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf73fd579 code=0x7ffc0000 [ 266.344777][ T29] audit: type=1326 audit(1726696455.516:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5860 comm="syz.2.200" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73fd579 code=0x7ffc0000 [ 266.368612][ T29] audit: type=1326 audit(1726696455.526:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5860 comm="syz.2.200" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73fd579 code=0x7ffc0000 [ 266.390504][ C1] vkms_vblank_simulate: vblank timer overrun [ 266.397669][ T29] audit: type=1326 audit(1726696455.526:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5860 comm="syz.2.200" exe="/root/syz-executor" sig=0 arch=40000003 syscall=459 compat=1 ip=0xf73fd579 code=0x7ffc0000 [ 266.420324][ T29] audit: type=1326 audit(1726696455.526:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5860 comm="syz.2.200" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73fd579 code=0x7ffc0000 [ 268.566180][ T5886] loop2: detected capacity change from 0 to 2048 [ 268.605399][ T5884] loop3: detected capacity change from 0 to 1764 [ 268.684172][ T5884] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 268.694571][ T5884] ISOFS: unable to read i-node block [ 268.703093][ T5884] isofs_fill_super: get root inode failed [ 268.787045][ T5886] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 268.799950][ T5886] ext4 filesystem being mounted at /41/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 268.943287][ T5886] fs-verity: sha512 using implementation "sha512-generic" [ 269.409859][ T5191] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 272.537916][ T5931] netlink: 'syz.0.230': attribute type 1 has an invalid length. [ 272.871279][ T5932] loop3: detected capacity change from 0 to 1024 [ 272.975709][ T5932] hfsplus: unable to parse mount options [ 273.561264][ T5943] netlink: 28 bytes leftover after parsing attributes in process `syz.0.235'. [ 273.571393][ T5943] netlink: 28 bytes leftover after parsing attributes in process `syz.0.235'. [ 273.802477][ T8] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 273.993834][ T8] usb 2-1: Using ep0 maxpacket: 8 [ 274.011626][ T8] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 274.023215][ T8] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8D has invalid maxpacket 26056, setting to 1024 [ 274.034794][ T8] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 274.048448][ T8] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 274.059542][ T8] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 274.070150][ T8] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 274.080661][ T8] usb 2-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8d.58 [ 274.090315][ T8] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 274.143834][ T8] usb 2-1: config 0 descriptor?? [ 274.158451][ T5941] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 274.243046][ T5190] Bluetooth: hci5: urb ffff88801b13cd80 submission failed (90) [ 274.436121][ T8] usb 2-1: USB disconnect, device number 3 [ 277.210273][ T5969] loop1: detected capacity change from 0 to 64 [ 277.474970][ T5193] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 277.486671][ T5193] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 277.503149][ T5193] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 277.558205][ T5193] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 277.577103][ T5193] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 277.591949][ T5193] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 278.723239][ T5979] netlink: 'syz.1.253': attribute type 29 has an invalid length. [ 279.227343][ C0] Illegal XDP return value 16128 on prog (id 24) dev veth0_virt_wifi, expect packet loss! [ 279.349036][ T5970] chnl_net:caif_netlink_parms(): no params data found [ 279.467635][ T4336] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 279.647724][ T4336] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 279.703139][ T5193] Bluetooth: hci5: command tx timeout [ 279.830002][ T4336] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 280.037926][ T4336] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 280.463012][ T4336] bridge_slave_1: left allmulticast mode [ 280.469069][ T4336] bridge_slave_1: left promiscuous mode [ 280.475925][ T4336] bridge0: port 2(bridge_slave_1) entered disabled state [ 280.522769][ T8] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 280.524638][ T1248] ieee802154 phy0 wpan0: encryption failed: -22 [ 280.538086][ T1248] ieee802154 phy1 wpan1: encryption failed: -22 [ 280.648379][ T4336] bridge_slave_0: left allmulticast mode [ 280.654459][ T4336] bridge_slave_0: left promiscuous mode [ 280.661128][ T4336] bridge0: port 1(bridge_slave_0) entered disabled state [ 280.722974][ T8] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 280.733619][ T8] usb 1-1: New USB device found, idVendor=046d, idProduct=08c1, bcdDevice=ee.8d [ 280.743097][ T8] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 280.785725][ T8] usb 1-1: config 0 descriptor?? [ 281.120930][ T10] usb 1-1: USB disconnect, device number 4 [ 281.445236][ T4336] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 281.495060][ T4336] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 281.535780][ T4336] bond0 (unregistering): Released all slaves [ 281.788637][ T5193] Bluetooth: hci5: command tx timeout [ 281.799163][ T5970] bridge0: port 1(bridge_slave_0) entered blocking state [ 281.807596][ T5970] bridge0: port 1(bridge_slave_0) entered disabled state [ 281.815585][ T5970] bridge_slave_0: entered allmulticast mode [ 281.824749][ T5970] bridge_slave_0: entered promiscuous mode [ 282.059118][ T5970] bridge0: port 2(bridge_slave_1) entered blocking state [ 282.067287][ T5970] bridge0: port 2(bridge_slave_1) entered disabled state [ 282.075251][ T5970] bridge_slave_1: entered allmulticast mode [ 282.084490][ T5970] bridge_slave_1: entered promiscuous mode [ 282.644517][ T4336] hsr_slave_0: left promiscuous mode [ 282.661193][ T4336] hsr_slave_1: left promiscuous mode [ 282.690778][ T4336] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 282.699975][ T4336] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 282.764119][ T4336] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 282.771823][ T4336] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 282.855418][ T4336] veth1_macvtap: left promiscuous mode [ 282.861190][ T4336] veth0_macvtap: left promiscuous mode [ 282.867351][ T4336] veth1_vlan: left promiscuous mode [ 282.873022][ T4336] veth0_vlan: left promiscuous mode [ 283.879434][ T5193] Bluetooth: hci5: command tx timeout [ 284.006444][ T6014] loop3: detected capacity change from 0 to 128 [ 284.311876][ T4336] team0 (unregistering): Port device team_slave_1 removed [ 284.418391][ T4336] team0 (unregistering): Port device team_slave_0 removed [ 284.789240][ T5970] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 284.946731][ T5970] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 285.304293][ T5970] team0: Port device team_slave_0 added [ 285.346185][ T5970] team0: Port device team_slave_1 added [ 285.370181][ T5190] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 285.393283][ T5190] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 285.424237][ T5190] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 285.450195][ T5190] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 285.494642][ T5190] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 285.529386][ T5190] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 285.546220][ T5970] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 285.553464][ T5970] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 285.579788][ T5970] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 285.730082][ T5970] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 285.737557][ T5970] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 285.764042][ T5970] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 286.012297][ T5193] Bluetooth: hci5: command tx timeout [ 286.185906][ T6033] loop1: detected capacity change from 0 to 256 [ 286.442607][ T5970] hsr_slave_0: entered promiscuous mode [ 286.510541][ T5970] hsr_slave_1: entered promiscuous mode [ 286.552641][ T5970] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 286.560463][ T5970] Cannot create hsr debugfs directory [ 287.702372][ T5193] Bluetooth: hci4: command tx timeout [ 288.093672][ T6025] chnl_net:caif_netlink_parms(): no params data found [ 289.108743][ T5970] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 289.167668][ T5970] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 289.235208][ T5970] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 289.320820][ T5970] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 289.667981][ T6025] bridge0: port 1(bridge_slave_0) entered blocking state [ 289.675787][ T6025] bridge0: port 1(bridge_slave_0) entered disabled state [ 289.683896][ T6025] bridge_slave_0: entered allmulticast mode [ 289.693103][ T6025] bridge_slave_0: entered promiscuous mode [ 289.792483][ T5193] Bluetooth: hci4: command tx timeout [ 289.794937][ T6025] bridge0: port 2(bridge_slave_1) entered blocking state [ 289.806060][ T6025] bridge0: port 2(bridge_slave_1) entered disabled state [ 289.817586][ T6025] bridge_slave_1: entered allmulticast mode [ 289.826832][ T6025] bridge_slave_1: entered promiscuous mode [ 290.049776][ T6025] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 290.108720][ T6025] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 290.329758][ T6025] team0: Port device team_slave_0 added [ 290.354027][ T6046] loop3: detected capacity change from 0 to 4096 [ 290.418512][ T6025] team0: Port device team_slave_1 added [ 290.676184][ T6025] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 290.685317][ T6025] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 290.711757][ T6025] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 290.844213][ T6025] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 290.851388][ T6025] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 290.879801][ T6025] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 291.233440][ T5970] 8021q: adding VLAN 0 to HW filter on device bond0 [ 291.279272][ T6025] hsr_slave_0: entered promiscuous mode [ 291.337539][ T6025] hsr_slave_1: entered promiscuous mode [ 291.367660][ T6025] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 291.375728][ T6025] Cannot create hsr debugfs directory [ 291.427758][ T6046] ntfs3: loop3: Failed to read $AttrDef (-4). [ 291.714779][ T5970] 8021q: adding VLAN 0 to HW filter on device team0 [ 291.813791][ T2550] bridge0: port 1(bridge_slave_0) entered blocking state [ 291.821470][ T2550] bridge0: port 1(bridge_slave_0) entered forwarding state [ 291.890597][ T2550] bridge0: port 2(bridge_slave_1) entered blocking state [ 291.898367][ T2550] bridge0: port 2(bridge_slave_1) entered forwarding state [ 291.908649][ T5193] Bluetooth: hci4: command tx timeout [ 292.458018][ T6025] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 292.469745][ T6065] loop0: detected capacity change from 0 to 128 [ 292.719458][ T6025] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 292.973813][ T6025] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 293.188380][ T6025] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 293.944751][ T5193] Bluetooth: hci4: command tx timeout [ 293.963174][ T6025] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 293.987637][ T6025] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 294.033662][ T6025] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 294.117104][ T6025] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 294.853354][ T6088] loop0: detected capacity change from 0 to 64 [ 294.984780][ T6088] Trying to free block not in datazone [ 294.990483][ T6088] Trying to free block not in datazone [ 294.997222][ T6088] Trying to free block not in datazone [ 295.003001][ T6088] Trying to free block not in datazone [ 295.008681][ T6088] minix_free_block (loop0:6): bit already cleared [ 295.015582][ T6088] Trying to free block not in datazone [ 295.021282][ T6088] Trying to free block not in datazone [ 295.251397][ T5970] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 295.840280][ T6025] 8021q: adding VLAN 0 to HW filter on device bond0 [ 296.109908][ T6025] 8021q: adding VLAN 0 to HW filter on device team0 [ 296.232969][ T3953] bridge0: port 1(bridge_slave_0) entered blocking state [ 296.240724][ T3953] bridge0: port 1(bridge_slave_0) entered forwarding state [ 296.383433][ T3953] bridge0: port 2(bridge_slave_1) entered blocking state [ 296.391189][ T3953] bridge0: port 2(bridge_slave_1) entered forwarding state [ 296.662612][ T5672] coredump: 59(syz.3.117): written to core: VMAs: 32, size 99516416; core: 64175838 bytes, pos 99520512 [ 296.858022][ T6099] loop3: detected capacity change from 0 to 1024 [ 296.965051][ T6099] EXT4-fs: Ignoring removed orlov option [ 297.323473][ T6111] capability: warning: `syz.0.287' uses deprecated v2 capabilities in a way that may be insecure [ 297.478904][ T6099] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 297.938419][ T5970] veth0_vlan: entered promiscuous mode [ 298.085014][ T5970] veth1_vlan: entered promiscuous mode [ 298.305176][ T10] IPVS: starting estimator thread 0... [ 298.392970][ T6121] IPVS: using max 288 ests per chain, 14400 per kthread [ 298.510341][ T5970] veth0_macvtap: entered promiscuous mode [ 298.603916][ T5970] veth1_macvtap: entered promiscuous mode [ 298.809517][ T5970] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 298.820451][ T5970] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 298.832748][ T5970] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 298.844301][ T5970] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 298.854461][ T5970] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 298.866560][ T5970] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 298.877422][ T5970] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 298.888342][ T5970] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 298.903815][ T5970] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 298.957280][ T6125] loop0: detected capacity change from 0 to 128 [ 298.981202][ T10] usb 4-1: USB disconnect, device number 3 [ 298.993666][ T5189] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 299.019639][ T6125] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 299.061274][ T6025] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 299.186772][ T5970] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 299.198508][ T5970] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 299.209764][ T5970] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 299.220704][ T5970] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 299.232962][ T5970] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 299.246132][ T5970] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 299.256921][ T5970] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 299.267864][ T5970] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 299.282774][ T5970] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 299.532516][ T5970] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 299.544339][ T5970] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 299.556491][ T5970] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 299.566109][ T5970] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 300.012123][ T6025] veth0_vlan: entered promiscuous mode [ 300.138946][ T6025] veth1_vlan: entered promiscuous mode [ 300.551888][ T6025] veth0_macvtap: entered promiscuous mode [ 300.646283][ T6025] veth1_macvtap: entered promiscuous mode [ 300.848961][ T6025] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 300.859849][ T6025] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 300.870555][ T6025] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 300.883977][ T6025] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 300.894839][ T6025] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 300.905655][ T6025] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 300.916052][ T6025] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 300.926773][ T6025] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 300.936938][ T6025] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 300.947663][ T6025] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 300.965534][ T6025] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 301.259361][ T5252] kernel write not supported for file /sequencer2 (pid: 5252 comm: kworker/1:4) [ 301.292439][ T6025] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 301.305344][ T6025] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 301.316088][ T6025] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 301.326828][ T6025] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 301.337031][ T6025] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 301.347782][ T6025] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 301.357996][ T6025] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 301.368766][ T6025] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 301.379698][ T6025] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 301.393053][ T6025] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 301.408950][ T6025] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 301.544583][ T6140] netlink: 8 bytes leftover after parsing attributes in process `syz.1.298'. [ 301.725072][ T6025] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 301.734402][ T6025] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 301.743764][ T6025] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 301.753100][ T6025] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 304.618818][ T6178] loop1: detected capacity change from 0 to 256 [ 306.833969][ T6206] loop0: detected capacity change from 0 to 64 [ 307.364503][ T3953] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 307.372761][ T3953] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 307.586599][ T3953] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 307.595058][ T3953] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 309.203322][ T5252] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 309.264732][ T3900] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 309.275316][ T3900] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 309.481410][ T4336] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 309.489878][ T4336] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 309.532868][ T5252] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 309.544325][ T5252] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 309.554654][ T5252] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 309.568166][ T5252] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 309.579242][ T5252] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 309.648941][ T5252] usb 5-1: config 0 descriptor?? [ 309.934222][ T6234] netlink: 8 bytes leftover after parsing attributes in process `syz.0.322'. [ 310.190492][ T5252] plantronics 0003:047F:FFFF.0002: No inputs registered, leaving [ 310.297929][ T5252] plantronics 0003:047F:FFFF.0002: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 310.524230][ T10] usb 5-1: USB disconnect, device number 4 [ 310.954955][ T6242] loop1: detected capacity change from 0 to 512 [ 311.078362][ T6242] EXT4-fs error (device loop1): ext4_orphan_get:1391: inode #15: comm syz.1.325: casefold flag without casefold feature [ 311.115825][ T6242] EXT4-fs error (device loop1): ext4_orphan_get:1396: comm syz.1.325: couldn't read orphan inode 15 (err -117) [ 311.148188][ T6242] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 311.576888][ T5192] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 311.603745][ T6247] netlink: 4 bytes leftover after parsing attributes in process `syz.3.324'. [ 313.813957][ T6279] loop1: detected capacity change from 0 to 256 [ 313.898387][ T6279] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 314.841730][ T6291] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 314.858149][ T6291] gretap1: entered promiscuous mode [ 314.863888][ T6291] gretap1: entered allmulticast mode [ 315.185168][ T6295] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 315.724308][ T6302] loop2: detected capacity change from 0 to 256 [ 316.083548][ T6302] FAT-fs (loop2): Directory bread(block 64) failed [ 316.090459][ T6302] FAT-fs (loop2): Directory bread(block 65) failed [ 316.097684][ T6302] FAT-fs (loop2): Directory bread(block 66) failed [ 316.104671][ T6302] FAT-fs (loop2): Directory bread(block 67) failed [ 316.111577][ T6302] FAT-fs (loop2): Directory bread(block 68) failed [ 316.118474][ T6302] FAT-fs (loop2): Directory bread(block 69) failed [ 316.125498][ T6302] FAT-fs (loop2): Directory bread(block 70) failed [ 316.134758][ T6302] FAT-fs (loop2): Directory bread(block 71) failed [ 316.142455][ T6302] FAT-fs (loop2): Directory bread(block 72) failed [ 316.149227][ T6302] FAT-fs (loop2): Directory bread(block 73) failed [ 316.678112][ T10] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 316.889404][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 316.901242][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 316.911444][ T10] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 316.925149][ T10] usb 5-1: New USB device found, idVendor=056e, idProduct=00fd, bcdDevice= 0.00 [ 316.934643][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 316.988760][ T10] usb 5-1: config 0 descriptor?? [ 317.043203][ T25] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 317.292487][ T4336] kworker/u8:26: attempt to access beyond end of device [ 317.292487][ T4336] loop2: rw=1, sector=1224, nr_sectors = 12 limit=256 [ 317.311109][ T25] usb 4-1: Using ep0 maxpacket: 32 [ 317.455739][ T25] usb 4-1: config 0 has an invalid interface number: 155 but max is 0 [ 317.466014][ T25] usb 4-1: config 0 has no interface number 0 [ 317.473218][ T25] usb 4-1: config 0 interface 155 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 317.483547][ T25] usb 4-1: config 0 interface 155 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 317.552771][ T10] elecom 0003:056E:00FD.0003: item fetching failed at offset 10/11 [ 317.603007][ T6307] loop3: detected capacity change from 0 to 2048 [ 317.619869][ T10] elecom 0003:056E:00FD.0003: probe with driver elecom failed with error -22 [ 317.634841][ T25] usb 4-1: New USB device found, idVendor=05d1, idProduct=1002, bcdDevice=c5.61 [ 317.644400][ T25] usb 4-1: New USB device strings: Mfr=225, Product=1, SerialNumber=3 [ 317.653106][ T25] usb 4-1: Product: syz [ 317.657509][ T25] usb 4-1: Manufacturer: syz [ 317.662740][ T25] usb 4-1: SerialNumber: syz [ 317.779612][ T25] usb 4-1: config 0 descriptor?? [ 317.825489][ T10] usb 5-1: USB disconnect, device number 5 [ 317.905440][ T25] ftdi_sio 4-1:0.155: FTDI USB Serial Device converter detected [ 317.916634][ T25] ftdi_sio ttyUSB0: unknown device type: 0xc561 [ 317.922407][ T6307] Alternate GPT is invalid, using primary GPT. [ 317.930117][ T6307] loop3: p1 p2 p3 [ 318.314068][ T25] usb 4-1: USB disconnect, device number 4 [ 318.323422][ T25] ftdi_sio 4-1:0.155: device disconnected [ 320.082793][ T6344] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 320.090372][ T6344] IPv6: NLM_F_CREATE should be set when creating new route [ 321.511665][ T6358] loop0: detected capacity change from 0 to 2048 [ 321.576907][ T6358] UDF-fs: error (device loop0): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 321.627494][ T6358] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 322.296423][ T6372] input: syz1 as /devices/virtual/input/input5 [ 322.707461][ T5965] coredump: 108(syz.3.245): written to core: VMAs: 29, size 82612224; core: 62062206 bytes, pos 82616320 [ 322.819150][ T6377] loop0: detected capacity change from 0 to 1024 [ 323.087134][ T6377] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 323.466388][ T5188] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 325.130301][ T6408] loop4: detected capacity change from 0 to 128 [ 325.211953][ T6408] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 325.304257][ T6409] loop3: detected capacity change from 0 to 1024 [ 325.841641][ T6416] loop2: detected capacity change from 0 to 256 [ 326.208602][ T6416] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x1a9973fb, utbl_chksum : 0xe619d30d) [ 326.464448][ T4111] hfsplus: b-tree write err: -5, ino 4 [ 327.105453][ T6424] netlink: 8 bytes leftover after parsing attributes in process `syz.4.401'. [ 327.115624][ T6424] netlink: 116 bytes leftover after parsing attributes in process `syz.4.401'. [ 327.429271][ T10] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 327.622737][ T10] usb 4-1: Using ep0 maxpacket: 16 [ 327.664647][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 327.676165][ T10] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 327.689542][ T10] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 327.690105][ T6432] loop1: detected capacity change from 0 to 64 [ 327.698920][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 327.762662][ T10] usb 4-1: config 0 descriptor?? [ 328.102562][ T29] audit: type=1800 audit(1726696517.296:16): pid=6432 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.404" name="bus" dev="loop1" ino=21 res=0 errno=0 [ 328.665626][ T5194] Bluetooth: hci1: command 0x0406 tx timeout [ 328.666962][ T5190] Bluetooth: hci0: command 0x0406 tx timeout [ 328.673304][ T51] Bluetooth: hci3: command 0x0406 tx timeout [ 328.701989][ T10] usbhid 4-1:0.0: can't add hid device: -71 [ 328.708760][ T10] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 328.803540][ T10] usb 4-1: USB disconnect, device number 5 [ 329.042742][ T25] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 329.078569][ T6443] devtmpfs: Unknown parameter 'devtmpfs' [ 329.281109][ T25] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 329.293232][ T25] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 329.304786][ T25] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 329.314944][ T25] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 329.328333][ T25] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 329.337879][ T25] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 329.428710][ T6446] loop4: detected capacity change from 0 to 512 [ 329.454294][ T25] usb 2-1: config 0 descriptor?? [ 329.609875][ T6446] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 219 vs 220 free clusters [ 329.650579][ T6433] loop2: detected capacity change from 0 to 4096 [ 329.733246][ T6446] EXT4-fs (loop4): Remounting filesystem read-only [ 329.744254][ T6446] EXT4-fs (loop4): 1 truncate cleaned up [ 329.754209][ T6446] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 329.948687][ T25] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 330.016654][ T25] plantronics 0003:047F:FFFF.0004: No inputs registered, leaving [ 330.134231][ T25] plantronics 0003:047F:FFFF.0004: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 330.242855][ T5970] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 330.329443][ T25] usb 2-1: USB disconnect, device number 4 [ 330.746521][ T6456] netlink: 16 bytes leftover after parsing attributes in process `syz.3.415'. [ 332.225500][ T6475] input: syz0 as /devices/virtual/input/input7 [ 332.609857][ T6481] loop0: detected capacity change from 0 to 64 [ 332.951058][ T6481] syz.0.424: attempt to access beyond end of device [ 332.951058][ T6481] loop0: rw=2049, sector=153, nr_sectors = 8 limit=64 [ 332.965084][ T6481] syz.0.424: attempt to access beyond end of device [ 332.965084][ T6481] loop0: rw=2049, sector=161, nr_sectors = 1 limit=64 [ 332.978762][ T6481] Buffer I/O error on dev loop0, logical block 161, lost async page write [ 332.989573][ T6481] syz.0.424: attempt to access beyond end of device [ 332.989573][ T6481] loop0: rw=2049, sector=162, nr_sectors = 1 limit=64 [ 333.004763][ T6481] Buffer I/O error on dev loop0, logical block 162, lost async page write [ 333.013885][ T6481] syz.0.424: attempt to access beyond end of device [ 333.013885][ T6481] loop0: rw=2049, sector=163, nr_sectors = 1 limit=64 [ 333.030089][ T6481] Buffer I/O error on dev loop0, logical block 163, lost async page write [ 333.039680][ T6481] syz.0.424: attempt to access beyond end of device [ 333.039680][ T6481] loop0: rw=2049, sector=167, nr_sectors = 1 limit=64 [ 333.054402][ T6481] Buffer I/O error on dev loop0, logical block 167, lost async page write [ 333.063741][ T6481] syz.0.424: attempt to access beyond end of device [ 333.063741][ T6481] loop0: rw=2049, sector=169, nr_sectors = 1 limit=64 [ 333.077317][ T6481] Buffer I/O error on dev loop0, logical block 169, lost async page write [ 333.086253][ T6481] syz.0.424: attempt to access beyond end of device [ 333.086253][ T6481] loop0: rw=2049, sector=171, nr_sectors = 1 limit=64 [ 333.099837][ T6481] Buffer I/O error on dev loop0, logical block 171, lost async page write [ 333.108747][ T6481] syz.0.424: attempt to access beyond end of device [ 333.108747][ T6481] loop0: rw=2049, sector=172, nr_sectors = 1 limit=64 [ 333.122425][ T6481] Buffer I/O error on dev loop0, logical block 172, lost async page write [ 333.134015][ T6481] syz.0.424: attempt to access beyond end of device [ 333.134015][ T6481] loop0: rw=2049, sector=173, nr_sectors = 1 limit=64 [ 333.150880][ T6481] Buffer I/O error on dev loop0, logical block 173, lost async page write [ 333.160942][ T6481] syz.0.424: attempt to access beyond end of device [ 333.160942][ T6481] loop0: rw=2049, sector=174, nr_sectors = 1 limit=64 [ 333.175233][ T6481] Buffer I/O error on dev loop0, logical block 174, lost async page write [ 333.184232][ T6481] Buffer I/O error on dev loop0, logical block 175, lost async page write [ 334.115762][ C0] IPv4: Oversized IP packet from 172.20.20.24 [ 334.696004][ T10] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 334.911906][ T10] usb 2-1: Using ep0 maxpacket: 32 [ 334.946393][ T10] usb 2-1: config 0 has no interfaces? [ 334.998953][ T10] usb 2-1: New USB device found, idVendor=08ca, idProduct=2060, bcdDevice=c6.58 [ 335.008434][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 335.016921][ T10] usb 2-1: Product: syz [ 335.021319][ T10] usb 2-1: Manufacturer: syz [ 335.026238][ T10] usb 2-1: SerialNumber: syz [ 335.115176][ T10] usb 2-1: config 0 descriptor?? [ 335.390094][ T10] usb 2-1: USB disconnect, device number 5 [ 335.473313][ T25] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 335.708448][ T25] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 335.723278][ T25] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 335.735626][ T25] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 335.747338][ T25] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 335.760764][ T25] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 335.770296][ T25] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 335.835750][ T25] usb 1-1: config 0 descriptor?? [ 335.843637][ T6512] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 335.870012][ T6520] loop4: detected capacity change from 0 to 256 [ 336.003370][ T6520] Process accounting resumed [ 336.112690][ T29] audit: type=1804 audit(1726696525.276:17): pid=6520 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.441" name="/newroot/30/file0/file0" dev="loop4" ino=1048626 res=1 errno=0 [ 336.384762][ T25] plantronics 0003:047F:FFFF.0005: No inputs registered, leaving [ 336.463799][ T25] plantronics 0003:047F:FFFF.0005: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 336.566761][ T6525] tipc: Started in network mode [ 336.574985][ T6525] tipc: Node identity 7ff, cluster identity 2 [ 336.581293][ T6525] tipc: Node number set to 2047 [ 336.651330][ T10] usb 1-1: USB disconnect, device number 5 [ 338.097010][ T6549] loop1: detected capacity change from 0 to 512 [ 338.178076][ T6549] EXT4-fs error (device loop1): ext4_orphan_get:1391: inode #15: comm syz.1.453: casefold flag without casefold feature [ 338.219277][ T6549] EXT4-fs error (device loop1): ext4_orphan_get:1396: comm syz.1.453: couldn't read orphan inode 15 (err -117) [ 338.345287][ T6549] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 338.677584][ T5192] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 339.030834][ C1] vxcan0: j1939_tp_rxtimer: 0xffff88801b1dee00: rx timeout, send abort [ 339.041442][ C1] vxcan0: j1939_xtp_rx_abort_one: 0xffff88801b1dee00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 339.056350][ C1] ------------[ cut here ]------------ [ 339.061992][ C1] refcount_t: underflow; use-after-free. [ 339.069599][ C1] WARNING: CPU: 1 PID: 24 at lib/refcount.c:28 refcount_warn_saturate+0x2cb/0x370 [ 339.079326][ C1] Modules linked in: [ 339.083597][ C1] CPU: 1 UID: 0 PID: 24 Comm: ksoftirqd/1 Not tainted 6.11.0-syzkaller-05319-g4a39ac5b7d62 #0 [ 339.094253][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 339.104692][ C1] RIP: 0010:refcount_warn_saturate+0x2cb/0x370 [ 339.111199][ C1] Code: d6 91 e8 08 56 29 fc c6 00 00 c6 05 5d ae b5 0b 01 90 49 c7 86 80 0c 00 00 00 00 00 00 48 c7 c7 eb ee f5 90 e8 96 0e 3a fb 90 <0f> 0b 90 90 e9 c4 fe ff ff 8b 3a e8 95 62 29 fc f6 c3 01 0f 85 83 [ 339.131280][ C1] RSP: 0018:ffff888100af3558 EFLAGS: 00010246 [ 339.137776][ C1] RAX: ffffffff815a8269 RBX: 0000000000000000 RCX: ffff888100ae0000 [ 339.146094][ C1] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 339.154616][ C1] RBP: ffff888100af3570 R08: ffffffff815a825f R09: 0000000000000000 [ 339.162909][ C1] R10: ffff8881002f31a0 R11: 0000000000000004 R12: 0000000000000000 [ 339.171184][ C1] R13: ffff88813fda1d40 R14: ffff88813fda1d40 R15: 0000000000000003 [ 339.179505][ C1] FS: 0000000000000000(0000) GS:ffff88813fd00000(0000) knlGS:0000000000000000 [ 339.188834][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 339.195775][ C1] CR2: 000000000c402343 CR3: 000000001a65e000 CR4: 00000000003506f0 [ 339.204101][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 339.212436][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 339.220697][ C1] Call Trace: [ 339.224275][ C1] [ 339.227400][ C1] ? show_trace_log_lvl+0x268/0x3d0 [ 339.233034][ C1] ? sk_skb_reason_drop+0x154/0x480 [ 339.238584][ C1] ? show_regs+0xb4/0xe0 [ 339.243229][ C1] ? __warn+0x2c7/0x780 [ 339.247682][ C1] ? refcount_warn_saturate+0x2cb/0x370 [ 339.253674][ C1] ? report_bug+0x929/0xbd0 [ 339.258460][ C1] ? refcount_warn_saturate+0x2cb/0x370 [ 339.264407][ C1] ? handle_bug+0x6a/0x90 [ 339.269072][ C1] ? exc_invalid_op+0x1f/0x50 [ 339.274137][ C1] ? asm_exc_invalid_op+0x1f/0x30 [ 339.279475][ C1] ? __warn_printk+0x43f/0x470 [ 339.284660][ C1] ? __warn_printk+0x449/0x470 [ 339.289737][ C1] ? refcount_warn_saturate+0x2cb/0x370 [ 339.295688][ C1] ? refcount_warn_saturate+0x2ca/0x370 [ 339.301587][ C1] sk_skb_reason_drop+0x154/0x480 [ 339.307032][ C1] j1939_session_put+0x2a0/0x620 [ 339.312359][ C1] j1939_xtp_rx_abort_one+0x132/0x9b0 [ 339.318117][ C1] j1939_tp_recv+0xff7/0x1600 [ 339.323203][ C1] j1939_can_recv+0xe30/0xfa0 [ 339.328175][ C1] ? __pfx_j1939_can_recv+0x10/0x10 [ 339.333779][ C1] can_rcv_filter+0x697/0x1010 [ 339.338841][ C1] can_receive+0x423/0x5d0 [ 339.343634][ C1] can_rcv+0x209/0x3a0 [ 339.348014][ C1] ? ip6_rcv_finish+0x960/0x970 [ 339.353306][ C1] ? __pfx_can_rcv+0x10/0x10 [ 339.358171][ C1] __netif_receive_skb+0x42b/0xa00 [ 339.363659][ C1] ? kmsan_get_metadata+0x13e/0x1c0 [ 339.369207][ C1] process_backlog+0x4ad/0xa50 [ 339.374401][ C1] ? __pfx_process_backlog+0x10/0x10 [ 339.380002][ C1] __napi_poll+0xe7/0x980 [ 339.384735][ C1] ? kmsan_get_metadata+0x13e/0x1c0 [ 339.390224][ C1] net_rx_action+0xa5a/0x19b0 [ 339.395287][ C1] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 339.401479][ C1] ? __pfx_net_rx_action+0x10/0x10 [ 339.407020][ C1] handle_softirqs+0x1a0/0x7c0 [ 339.412167][ C1] ? kmsan_get_metadata+0x13e/0x1c0 [ 339.417695][ C1] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 339.423934][ C1] ? __pfx_run_ksoftirqd+0x10/0x10 [ 339.429376][ C1] run_ksoftirqd+0x29/0x50 [ 339.434290][ C1] smpboot_thread_fn+0x555/0xa60 [ 339.439553][ C1] kthread+0x3e2/0x540 [ 339.444038][ C1] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 339.449859][ C1] ? __pfx_kthread+0x10/0x10 [ 339.454932][ C1] ret_from_fork+0x6d/0x90 [ 339.459645][ C1] ? __pfx_kthread+0x10/0x10 [ 339.464700][ C1] ret_from_fork_asm+0x1a/0x30 [ 339.469836][ C1] [ 339.473177][ C1] ---[ end trace 0000000000000000 ]--- [ 341.265274][ T6592] loop0: detected capacity change from 0 to 1024 [ 342.009336][ T1248] ieee802154 phy0 wpan0: encryption failed: -22 [ 342.016467][ T1248] ieee802154 phy1 wpan1: encryption failed: -22 [ 342.812200][ T6610] loop3: detected capacity change from 0 to 1024 [ 343.004069][ T6610] hfsplus: bad catalog entry type [ 343.013739][ T6610] hfsplus: bad catalog entry type [ 343.285552][ T6617] loop4: detected capacity change from 0 to 1024 [ 343.551687][ T6617] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 343.741630][ T6617] EXT4-fs (loop4): shut down requested (0) [ 343.748142][ T29] audit: type=1800 audit(1726696532.976:18): pid=6617 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.478" name="bus" dev="loop4" ino=18 res=0 errno=0 [ 344.145718][ T5970] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 344.754250][ T6634] loop4: detected capacity change from 0 to 1024 [ 345.273305][ T4111] hfsplus: b-tree write err: -5, ino 4 [ 345.911536][ T6650] loop0: detected capacity change from 0 to 64 [ 345.970152][ T6651] netlink: 4 bytes leftover after parsing attributes in process `syz.1.491'. [ 345.973411][ T6650] hfs: unable to locate alternate MDB [ 345.985334][ T6650] hfs: continuing without an alternate MDB [ 346.274899][ T29] audit: type=1800 audit(1726696535.466:19): pid=6650 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.490" name="file1" dev="loop0" ino=18 res=0 errno=0 [ 346.295071][ T29] audit: type=1800 audit(1726696535.476:20): pid=6650 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.490" name="file1" dev="loop0" ino=18 res=0 errno=0 [ 347.138924][ T6657] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 349.422352][ T29] audit: type=1326 audit(1726696538.646:21): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=unconfined pid=6679 comm="syz.1.504" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7fc3579 code=0x0 [ 349.874197][ T5204] Bluetooth: hci5: Controller not accepting commands anymore: ncmd = 0 [ 349.883075][ T5204] Bluetooth: hci5: Injecting HCI hardware error event [ 349.890710][ T5204] Bluetooth: hci5: hardware error 0x00 [ 351.950296][ T5204] Bluetooth: hci5: Opcode 0x0c03 failed: -110 [ 352.094805][ T6707] input: syz0 as /devices/virtual/input/input8 [ 352.102371][ T6707] input: failed to attach handler leds to device input8, error: -6 [ 352.942305][ T5251] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 353.166520][ T5251] usb 2-1: New USB device found, idVendor=0856, idProduct=ac31, bcdDevice=93.1e [ 353.176218][ T5251] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 353.184684][ T5251] usb 2-1: Product: syz [ 353.189087][ T5251] usb 2-1: Manufacturer: syz [ 353.194035][ T5251] usb 2-1: SerialNumber: syz [ 353.321352][ T5251] usb 2-1: config 0 descriptor?? [ 353.862613][ T6724] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 353.869471][ T6724] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 353.923408][ T6724] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 353.930072][ T6724] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 354.013599][ T5251] mos7840 2-1:0.0: required endpoints missing [ 354.040455][ T6724] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 354.048861][ T6724] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 354.083269][ T5251] usb 2-1: USB disconnect, device number 6 [ 354.111241][ T6726] tc_dump_action: action bad kind [ 354.166208][ T6724] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 354.172848][ T6724] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 354.216749][ T6724] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 355.435278][ T6740] input: syz1 as /devices/virtual/input/input10 [ 355.499276][ T6741] loop3: detected capacity change from 0 to 64 [ 355.802790][ T5204] Bluetooth: hci0: command 0x0406 tx timeout [ 355.942314][ T5204] Bluetooth: hci1: command 0x0406 tx timeout [ 356.105189][ T5204] Bluetooth: hci3: command 0x0406 tx timeout [ 356.182829][ T5204] Bluetooth: hci4: command 0x0c1a tx timeout [ 357.862574][ T5204] Bluetooth: hci0: command 0x0406 tx timeout [ 358.024818][ T5204] Bluetooth: hci1: command 0x0406 tx timeout [ 358.182576][ T5204] Bluetooth: hci3: command 0x0406 tx timeout [ 358.262334][ T5204] Bluetooth: hci4: command 0x0c1a tx timeout [ 358.565680][ T6771] loop4: detected capacity change from 0 to 256 [ 358.748845][ T6771] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010470, chksum : 0x23280b3e, utbl_chksum : 0xe619d30d) [ 358.937560][ T6776] Bluetooth: MGMT ver 1.23 [ 360.342724][ T5193] Bluetooth: hci4: command 0x0c1a tx timeout [ 360.992407][ T5204] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 360.999658][ T5204] Bluetooth: hci0: command 0x0406 tx timeout [ 362.499683][ T29] audit: type=1326 audit(1726696551.766:22): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=unconfined pid=6824 comm="syz.2.562" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf73ed579 code=0x0 [ 363.635139][ T6838] loop2: detected capacity change from 0 to 64 [ 363.741563][ T6838] hfs: unable to locate alternate MDB [ 363.741618][ T6838] hfs: continuing without an alternate MDB [ 363.999862][ T29] audit: type=1800 audit(1726696553.216:23): pid=6838 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.570" name="file1" dev="loop2" ino=18 res=0 errno=0 [ 364.019882][ T29] audit: type=1800 audit(1726696553.226:24): pid=6845 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.570" name="file1" dev="loop2" ino=18 res=0 errno=0 [ 364.048573][ T6834] loop1: detected capacity change from 0 to 4096 [ 364.177458][ T6848] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 364.318625][ T29] audit: type=1800 audit(1726696553.546:25): pid=6834 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.568" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 364.339635][ T29] audit: type=1800 audit(1726696553.596:26): pid=6834 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.568" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 364.368097][ T6834] program syz.1.568 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 365.503812][ T29] audit: type=1326 audit(1726696554.716:27): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=unconfined pid=6855 comm="syz.0.581" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf740d579 code=0x0 [ 365.786390][ T6863] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 366.179257][ T5252] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 366.365663][ T5252] usb 5-1: Using ep0 maxpacket: 32 [ 366.449956][ T5252] usb 5-1: New USB device found, idVendor=0cf2, idProduct=6250, bcdDevice=10.ae [ 366.459978][ T5252] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 366.468503][ T5252] usb 5-1: Product: syz [ 366.473010][ T5252] usb 5-1: Manufacturer: syz [ 366.477839][ T5252] usb 5-1: SerialNumber: syz [ 366.525760][ T5252] usb 5-1: config 0 descriptor?? [ 366.561092][ T5252] ums_eneub6250 5-1:0.0: USB Mass Storage device detected [ 366.757466][ T6880] loop0: detected capacity change from 0 to 64 [ 366.818844][ T5252] usb 5-1: USB disconnect, device number 6 [ 367.094011][ T6879] loop1: detected capacity change from 0 to 2048 [ 367.324088][ T6879] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 367.465652][ T6879] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: none. [ 367.536200][ T6884] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters [ 367.817488][ T5192] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 368.385245][ T5252] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 368.393654][ T6893] loop0: detected capacity change from 0 to 2048 [ 368.482557][ T6893] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 368.642466][ T5252] usb 5-1: New USB device found, idVendor=0856, idProduct=ac31, bcdDevice=93.1e [ 368.652729][ T5252] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 368.661003][ T5252] usb 5-1: Product: syz [ 368.666681][ T5252] usb 5-1: Manufacturer: syz [ 368.671540][ T5252] usb 5-1: SerialNumber: syz [ 368.715226][ T5252] usb 5-1: config 0 descriptor?? [ 368.917343][ T29] audit: type=1326 audit(1726696558.136:28): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=unconfined pid=6900 comm="syz.3.597" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf73ad579 code=0x0 [ 369.245009][ T6905] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 369.404846][ T5252] mos7840 5-1:0.0: required endpoints missing [ 369.441962][ T5252] usb 5-1: USB disconnect, device number 7 [ 370.651673][ T6921] loop1: detected capacity change from 0 to 256 [ 370.852390][ T6921] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010470, chksum : 0x23280b3e, utbl_chksum : 0xe619d30d) [ 371.399539][ T6931] loop3: detected capacity change from 0 to 256 [ 371.543255][ T6931] exFAT-fs (loop3): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 371.635355][ T6936] input: syz0 as /devices/virtual/input/input12 [ 371.642307][ T6936] input: failed to attach handler leds to device input12, error: -6 [ 371.986476][ T6929] loop3: detected capacity change from 0 to 2048 [ 372.052397][ T29] audit: type=1326 audit(1726696561.286:29): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=unconfined pid=6937 comm="syz.4.612" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf73dd579 code=0x0 [ 372.132949][ T6929] UDF-fs: error (device loop3): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 372.197973][ T6929] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 372.792642][ T10] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 373.094386][ T10] usb 3-1: New USB device found, idVendor=0856, idProduct=ac31, bcdDevice=93.1e [ 373.103879][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 373.112247][ T10] usb 3-1: Product: syz [ 373.116643][ T10] usb 3-1: Manufacturer: syz [ 373.121464][ T10] usb 3-1: SerialNumber: syz [ 373.185677][ T10] usb 3-1: config 0 descriptor?? [ 373.970826][ T10] mos7840 3-1:0.0: required endpoints missing [ 374.035728][ T10] usb 3-1: USB disconnect, device number 6 [ 376.631004][ T7002] loop1: detected capacity change from 0 to 256 [ 376.717847][ T7002] exFAT-fs (loop1): Invalid exboot-signature(sector = 1): 0xaa5500ba [ 376.759608][ T7002] exFAT-fs (loop1): Invalid boot checksum (boot checksum : 0x1119abd0, checksum : 0x5119b3c5) [ 376.770490][ T7002] exFAT-fs (loop1): invalid boot region [ 376.776439][ T7002] exFAT-fs (loop1): failed to recognize exfat type [ 377.016339][ T7002] netlink: 4 bytes leftover after parsing attributes in process `syz.1.640'. [ 377.803281][ T5193] Bluetooth: hci0: command 0x0406 tx timeout [ 377.817862][ T5204] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 377.856005][ T7012] loop0: detected capacity change from 0 to 64 [ 378.843890][ T25] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 379.055480][ T25] usb 2-1: Using ep0 maxpacket: 16 [ 379.088358][ T25] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 379.101929][ T25] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 379.115335][ T25] usb 2-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.00 [ 379.126579][ T25] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 379.230759][ T7023] netlink: 4 bytes leftover after parsing attributes in process `syz.0.659'. [ 379.243090][ T25] usb 2-1: config 0 descriptor?? [ 379.727966][ T25] corsair 0003:1B1C:1B02.0006: unknown main item tag 0x0 [ 379.872269][ T25] corsair 0003:1B1C:1B02.0006: hidraw0: USB HID v0.00 Device [HID 1b1c:1b02] on usb-dummy_hcd.1-1/input0 [ 380.189889][ T7029] ===================================================== [ 380.197501][ T7029] BUG: KMSAN: uninit-value in nf_reject_ip6_tcphdr_put+0x688/0x6c0 [ 380.205733][ T7029] nf_reject_ip6_tcphdr_put+0x688/0x6c0 [ 380.211467][ T7029] nf_send_reset6+0xd84/0x15b0 [ 380.216483][ T7029] nft_reject_inet_eval+0x3c1/0x880 [ 380.221859][ T7029] nft_do_chain+0x426/0x2290 [ 380.226758][ T7029] nft_do_chain_inet+0x41a/0x4f0 [ 380.231900][ T7029] nf_hook_slow+0xf4/0x400 [ 380.236626][ T7029] ipv6_rcv+0x29b/0x390 [ 380.240979][ T7029] __netif_receive_skb+0x1da/0xa00 [ 380.246359][ T7029] netif_receive_skb+0x58/0x660 [ 380.251378][ T7029] tun_rx_batched+0x3ee/0x980 [ 380.256332][ T7029] tun_get_user+0x5783/0x6c60 [ 380.261199][ T7029] tun_chr_write_iter+0x3ac/0x5d0 [ 380.266494][ T7029] vfs_write+0xb28/0x1540 [ 380.271001][ T7029] ksys_write+0x20f/0x4c0 [ 380.275598][ T7029] __ia32_sys_write+0x91/0xe0 [ 380.280459][ T7029] ia32_sys_call+0x2e34/0x40d0 [ 380.285532][ T7029] __do_fast_syscall_32+0xb0/0x110 [ 380.290916][ T7029] do_fast_syscall_32+0x38/0x80 [ 380.296041][ T7029] do_SYSENTER_32+0x1f/0x30 [ 380.300725][ T7029] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 380.307373][ T7029] [ 380.309791][ T7029] Uninit was stored to memory at: [ 380.315146][ T7029] nf_reject_ip6_tcphdr_put+0x60c/0x6c0 [ 380.320866][ T7029] nf_send_reset6+0xd84/0x15b0 [ 380.325891][ T7029] nft_reject_inet_eval+0x3c1/0x880 [ 380.331268][ T7029] nft_do_chain+0x426/0x2290 [ 380.336175][ T7029] nft_do_chain_inet+0x41a/0x4f0 [ 380.341319][ T7029] nf_hook_slow+0xf4/0x400 [ 380.346028][ T7029] ipv6_rcv+0x29b/0x390 [ 380.350392][ T7029] __netif_receive_skb+0x1da/0xa00 [ 380.355768][ T7029] netif_receive_skb+0x58/0x660 [ 380.360789][ T7029] tun_rx_batched+0x3ee/0x980 [ 380.365743][ T7029] tun_get_user+0x5783/0x6c60 [ 380.370615][ T7029] tun_chr_write_iter+0x3ac/0x5d0 [ 380.375914][ T7029] vfs_write+0xb28/0x1540 [ 380.380421][ T7029] ksys_write+0x20f/0x4c0 [ 380.385018][ T7029] __ia32_sys_write+0x91/0xe0 [ 380.389886][ T7029] ia32_sys_call+0x2e34/0x40d0 [ 380.394977][ T7029] __do_fast_syscall_32+0xb0/0x110 [ 380.400278][ T7029] do_fast_syscall_32+0x38/0x80 [ 380.405401][ T7029] do_SYSENTER_32+0x1f/0x30 [ 380.410081][ T7029] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 380.416734][ T7029] [ 380.419147][ T7029] Uninit was stored to memory at: [ 380.424518][ T7029] nf_reject_ip6_tcphdr_put+0x2ca/0x6c0 [ 380.430241][ T7029] nf_send_reset6+0xd84/0x15b0 [ 380.435261][ T7029] nft_reject_inet_eval+0x3c1/0x880 [ 380.440636][ T7029] nft_do_chain+0x426/0x2290 [ 380.445527][ T7029] nft_do_chain_inet+0x41a/0x4f0 [ 380.450675][ T7029] nf_hook_slow+0xf4/0x400 [ 380.455381][ T7029] ipv6_rcv+0x29b/0x390 [ 380.459740][ T7029] __netif_receive_skb+0x1da/0xa00 [ 380.465124][ T7029] netif_receive_skb+0x58/0x660 [ 380.470142][ T7029] tun_rx_batched+0x3ee/0x980 [ 380.475104][ T7029] tun_get_user+0x5783/0x6c60 [ 380.479967][ T7029] tun_chr_write_iter+0x3ac/0x5d0 [ 380.485279][ T7029] vfs_write+0xb28/0x1540 [ 380.489787][ T7029] ksys_write+0x20f/0x4c0 [ 380.494388][ T7029] __ia32_sys_write+0x91/0xe0 [ 380.499246][ T7029] ia32_sys_call+0x2e34/0x40d0 [ 380.504327][ T7029] __do_fast_syscall_32+0xb0/0x110 [ 380.509634][ T7029] do_fast_syscall_32+0x38/0x80 [ 380.514767][ T7029] do_SYSENTER_32+0x1f/0x30 [ 380.519537][ T7029] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 380.526195][ T7029] [ 380.528613][ T7029] Uninit was created at: [ 380.533306][ T7029] kmem_cache_alloc_node_noprof+0x6bf/0xb80 [ 380.539417][ T7029] kmalloc_reserve+0x13d/0x4a0 [ 380.544483][ T7029] __alloc_skb+0x363/0x7b0 [ 380.549106][ T7029] nf_send_reset6+0x98d/0x15b0 [ 380.554132][ T7029] nft_reject_inet_eval+0x3c1/0x880 [ 380.559502][ T7029] nft_do_chain+0x426/0x2290 [ 380.564386][ T7029] nft_do_chain_inet+0x41a/0x4f0 [ 380.569539][ T7029] nf_hook_slow+0xf4/0x400 [ 380.574252][ T7029] ipv6_rcv+0x29b/0x390 [ 380.578604][ T7029] __netif_receive_skb+0x1da/0xa00 [ 380.584076][ T7029] netif_receive_skb+0x58/0x660 [ 380.589104][ T7029] tun_rx_batched+0x3ee/0x980 [ 380.594076][ T7029] tun_get_user+0x5783/0x6c60 [ 380.598947][ T7029] tun_chr_write_iter+0x3ac/0x5d0 [ 380.604268][ T7029] vfs_write+0xb28/0x1540 [ 380.608781][ T7029] ksys_write+0x20f/0x4c0 [ 380.613389][ T7029] __ia32_sys_write+0x91/0xe0 [ 380.618255][ T7029] ia32_sys_call+0x2e34/0x40d0 [ 380.623328][ T7029] __do_fast_syscall_32+0xb0/0x110 [ 380.630131][ T7029] do_fast_syscall_32+0x38/0x80 [ 380.635266][ T7029] do_SYSENTER_32+0x1f/0x30 [ 380.639960][ T7029] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 380.649032][ T7029] [ 380.651495][ T7029] CPU: 0 UID: 0 PID: 7029 Comm: syz.0.650 Tainted: G W 6.11.0-syzkaller-05319-g4a39ac5b7d62 #0 [ 380.663550][ T7029] Tainted: [W]=WARN [ 380.667468][ T7029] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 380.677760][ T7029] ===================================================== [ 380.684908][ T7029] Disabling lock debugging due to kernel taint [ 380.691176][ T7029] Kernel panic - not syncing: kmsan.panic set ... [ 380.697725][ T7029] CPU: 0 UID: 0 PID: 7029 Comm: syz.0.650 Tainted: G B W 6.11.0-syzkaller-05319-g4a39ac5b7d62 #0 [ 380.709686][ T7029] Tainted: [B]=BAD_PAGE, [W]=WARN [ 380.714842][ T7029] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 380.725042][ T7029] Call Trace: [ 380.728424][ T7029] [ 380.731457][ T7029] dump_stack_lvl+0x216/0x2d0 [ 380.736307][ T7029] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 380.742299][ T7029] dump_stack+0x1e/0x30 [ 380.746611][ T7029] panic+0x4e2/0xce0 [ 380.750697][ T7029] ? kmsan_get_metadata+0xc1/0x1c0 [ 380.755999][ T7029] kmsan_report+0x2c7/0x2d0 [ 380.760668][ T7029] ? kmsan_internal_chain_origin+0x10/0xd0 [ 380.766689][ T7029] ? __msan_warning+0x95/0x120 [ 380.771652][ T7029] ? nf_reject_ip6_tcphdr_put+0x688/0x6c0 [ 380.777545][ T7029] ? nf_send_reset6+0xd84/0x15b0 [ 380.782649][ T7029] ? nft_reject_inet_eval+0x3c1/0x880 [ 380.788200][ T7029] ? nft_do_chain+0x426/0x2290 [ 380.793168][ T7029] ? nft_do_chain_inet+0x41a/0x4f0 [ 380.798476][ T7029] ? nf_hook_slow+0xf4/0x400 [ 380.803283][ T7029] ? ipv6_rcv+0x29b/0x390 [ 380.807812][ T7029] ? __netif_receive_skb+0x1da/0xa00 [ 380.813279][ T7029] ? netif_receive_skb+0x58/0x660 [ 380.818463][ T7029] ? tun_rx_batched+0x3ee/0x980 [ 380.823496][ T7029] ? tun_get_user+0x5783/0x6c60 [ 380.828605][ T7029] ? tun_chr_write_iter+0x3ac/0x5d0 [ 380.833979][ T7029] ? vfs_write+0xb28/0x1540 [ 380.838649][ T7029] ? ksys_write+0x20f/0x4c0 [ 380.843331][ T7029] ? __ia32_sys_write+0x91/0xe0 [ 380.848380][ T7029] ? ia32_sys_call+0x2e34/0x40d0 [ 380.853538][ T7029] ? __do_fast_syscall_32+0xb0/0x110 [ 380.859087][ T7029] ? do_fast_syscall_32+0x38/0x80 [ 380.864278][ T7029] ? do_SYSENTER_32+0x1f/0x30 [ 380.869122][ T7029] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 380.875846][ T7029] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 380.882570][ T7029] ? kmsan_get_metadata+0x13e/0x1c0 [ 380.887947][ T7029] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 380.893930][ T7029] ? kmem_cache_alloc_node_noprof+0x6df/0xb80 [ 380.900207][ T7029] ? kmsan_get_metadata+0x13e/0x1c0 [ 380.905924][ T7029] ? kmsan_get_metadata+0x13e/0x1c0 [ 380.911725][ T7029] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 380.917720][ T7029] ? csum_partial+0x45e/0x4b0 [ 380.922601][ T7029] __msan_warning+0x95/0x120 [ 380.927396][ T7029] nf_reject_ip6_tcphdr_put+0x688/0x6c0 [ 380.933133][ T7029] nf_send_reset6+0xd84/0x15b0 [ 380.938085][ T7029] nft_reject_inet_eval+0x3c1/0x880 [ 380.943448][ T7029] ? kmsan_get_metadata+0x13e/0x1c0 [ 380.948821][ T7029] ? __pfx_nft_reject_inet_eval+0x10/0x10 [ 380.954711][ T7029] nft_do_chain+0x426/0x2290 [ 380.959519][ T7029] ? kmsan_get_metadata+0x13e/0x1c0 [ 380.964888][ T7029] ? kmsan_get_metadata+0x13e/0x1c0 [ 380.970254][ T7029] ? ipv6_find_hdr+0xe8d/0x12f0 [ 380.975318][ T7029] ? kmsan_get_metadata+0x13e/0x1c0 [ 380.980779][ T7029] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 380.986766][ T7029] nft_do_chain_inet+0x41a/0x4f0 [ 380.991915][ T7029] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 380.997578][ T7029] nf_hook_slow+0xf4/0x400 [ 381.002197][ T7029] ipv6_rcv+0x29b/0x390 [ 381.006542][ T7029] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 381.011947][ T7029] __netif_receive_skb+0x1da/0xa00 [ 381.017226][ T7029] ? kmsan_get_metadata+0x13e/0x1c0 [ 381.022589][ T7029] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 381.028580][ T7029] netif_receive_skb+0x58/0x660 [ 381.033594][ T7029] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 381.039584][ T7029] ? tun_rx_batched+0x37c/0x980 [ 381.044619][ T7029] tun_rx_batched+0x3ee/0x980 [ 381.049478][ T7029] ? kmsan_get_metadata+0x13e/0x1c0 [ 381.054838][ T7029] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 381.060885][ T7029] tun_get_user+0x5783/0x6c60 [ 381.065774][ T7029] ? kmsan_get_metadata+0x13e/0x1c0 [ 381.071137][ T7029] ? kmsan_get_metadata+0x13e/0x1c0 [ 381.076499][ T7029] ? kmsan_internal_set_shadow_origin+0x69/0x100 [ 381.083100][ T7029] tun_chr_write_iter+0x3ac/0x5d0 [ 381.088352][ T7029] vfs_write+0xb28/0x1540 [ 381.092862][ T7029] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 381.098599][ T7029] ksys_write+0x20f/0x4c0 [ 381.103118][ T7029] __ia32_sys_write+0x91/0xe0 [ 381.107977][ T7029] ia32_sys_call+0x2e34/0x40d0 [ 381.112949][ T7029] __do_fast_syscall_32+0xb0/0x110 [ 381.118238][ T7029] ? irqentry_exit+0x16/0x60 [ 381.122987][ T7029] do_fast_syscall_32+0x38/0x80 [ 381.128004][ T7029] do_SYSENTER_32+0x1f/0x30 [ 381.132667][ T7029] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 381.139307][ T7029] RIP: 0023:0xf740d579 [ 381.143512][ T7029] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 381.163313][ T7029] RSP: 002b:00000000f56f6530 EFLAGS: 00000206 ORIG_RAX: 0000000000000004 [ 381.171897][ T7029] RAX: ffffffffffffffda RBX: 00000000000000c8 RCX: 00000000200004c0 [ 381.180024][ T7029] RDX: 000000000000009a RSI: 00000000f73fbff4 RDI: 0000000000000000 [ 381.188142][ T7029] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 381.196254][ T7029] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 381.204361][ T7029] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 381.212490][ T7029] [ 381.215747][ T7029] Kernel Offset: disabled [ 381.220144][ T7029] Rebooting in 86400 seconds..