last executing test programs: 18.995390033s ago: executing program 0 (id=1848): syz_open_dev$evdev(0x0, 0x0, 0x0) fsopen(0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000280)={@mcast2, 0x800, 0x0, 0x2, 0x1}, 0x20) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) sendmsg$NL80211_CMD_DEL_KEY(r0, &(0x7f0000000540)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40}, 0xffffffffffffffad, &(0x7f0000000500)={&(0x7f0000000400)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="abbd7000fcdbdf090000000000000000", @ANYRES32=0x0, @ANYBLOB="0800090002ac0f000400280008000a00f85013e409000700aa3406da760000000800090001ac0f0004000b0009000700fb0d20c9da00000008003700020000000800090005ac0f00"], 0x64}, 0x1, 0x0, 0x0, 0x24040801}, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) r3 = socket(0x40000000015, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r3, 0x114, 0x8, &(0x7f0000000440), 0x4) bind$inet6(r3, &(0x7f0000000280)={0xa, 0x0, 0x0, @loopback}, 0x1c) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000100), 0x2, 0x3}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r1, &(0x7f0000000580)={0x14, 0x88, 0xfa00, {r2, 0x30, 0x0, @in={0x2, 0x4e22, @multicast1}}}, 0x90) r4 = syz_open_dev$usbfs(&(0x7f0000000200), 0x77, 0x0) ioctl$USBDEVFS_FREE_STREAMS(r4, 0x802c550a, 0x0) r5 = openat(0xffffffffffffffff, 0x0, 0x20002, 0x5) openat$cgroup_ro(r5, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc000ff}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r6, 0xc0502100, &(0x7f0000000340)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r6, 0xc0182101, &(0x7f00000000c0)={r7}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r6, 0xc0502100, &(0x7f0000000480)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r6, 0x40182103, &(0x7f0000000080)={r8, 0x3, r6, 0x5}) 17.461641868s ago: executing program 0 (id=1853): r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r0, 0x50009405, &(0x7f0000000180)) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[@ANYBLOB], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r1}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount(&(0x7f0000000000)=@nullb, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='adfs\x00', 0x0, &(0x7f0000000240)) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x54, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0xfc}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x54}}, 0x0) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x40, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x40}, 0x1, 0x7000000}, 0x0) sendmsg$IPSET_CMD_DESTROY(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x1c, 0x3, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, &(0x7f0000000080)={0x2, 0x4, 0xd, 0x5, 0x101}) 13.1802634s ago: executing program 0 (id=1858): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) keyctl$KEYCTL_PKEY_QUERY(0x18, 0x0, 0x0, &(0x7f0000000080)=' hash=', 0x0) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = socket(0x40000000015, 0x5, 0x0) connect$inet(r3, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(r3, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000003c0)="fe", 0x1}], 0x1}, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000440)={'sit0\x00', 0x0}) syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x0) recvmmsg(r3, &(0x7f0000001740)=[{{0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000400)=""/4096, 0x1000}], 0x1}}], 0x4000210, 0x2, 0x0) 10.142648857s ago: executing program 1 (id=1861): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000003340)="a5d3b26367b9576854ff7bdc3f6fea67", 0x10) recvmmsg(r1, &(0x7f0000005740)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000140)=""/4, 0x4}, {&(0x7f0000000180)=""/106, 0x6a}], 0x2}}], 0x1, 0x0, 0x0) 9.864094107s ago: executing program 4 (id=1862): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee6, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$kcm(0x29, 0x5, 0x0) sendmsg$kcm(r3, &(0x7f0000000540)={&(0x7f0000000340)=@l2tp={0x2, 0x0, @remote, 0x4}, 0x80, &(0x7f0000000240)=[{&(0x7f00000003c0)="8b9f2c5d6b4c74ad5231a4c13f23531f14f9f7074431425e101f6bde21ecc04afcdddeabfb3d10e73688fe337989dff7aa3dffcf67d587fc449f9eca0fed44ee86560643c0406e3f3591abd6cea308a494450f4ab74036ba5b1dfcfe0f792c79d8caa789ef8cff0044b58dffa3bf3ae8b8f29a38fd92a989c5109c436642e5838757d2", 0x83}], 0x1, &(0x7f0000000480)=[{0x98, 0x109, 0x7fffffff, "17e508dc8d07552298300cc12ef4dde6f6984ffc06dd14f59055579fc850a1f66c2d33b4d69a5e94ff96d6631e17763a7bb1cc8f6eb1e5e7869ed60e6388e7f01c65cf85b9cab874c2eddd439576467bd58dbb328f14518e46b188ace1a191b302f54ac080eeb31ff8c6325f6900ee1505c404b64fc4e1c6157b730ac18d14417162a06e43"}], 0x98}, 0xc0) io_setup(0x9, 0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) mmap$xdp(&(0x7f0000b77000/0x4000)=nil, 0x4000, 0x3000000, 0x2010, 0xffffffffffffffff, 0x0) io_submit(0x0, 0x1, &(0x7f0000000180)=[0x0]) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00304, 0x15) r4 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) ioctl$SIOCAX25GETINFOOLD(r4, 0x89e3, &(0x7f0000000280)) mount$cgroup(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x110, &(0x7f00000002c0)={[{@subsystem='cpu'}, {@release_agent={'release_agent', 0x3d, './file0'}}, {@noprefix}, {}, {@name={'name', 0x3d, 'cgroup.procs\x00'}}, {@cpuset_v2_mode}], [{@subj_user={'subj_user', 0x3d, '\x00'}}, {@hash}, {@permit_directio}]}) 8.902001462s ago: executing program 3 (id=1864): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000740), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_PRE_FAULT_MEMORY(r2, 0xc040aed5, &(0x7f0000000080)={0x2, 0x101000}) 8.647880009s ago: executing program 1 (id=1866): syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000080)='./file1\x00', 0x1008014, &(0x7f0000000000)=ANY=[], 0x3, 0x7bf, &(0x7f0000000d80)="$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") mount$bind(0x0, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) dup(0xffffffffffffffff) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0xe}, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500), 0x25) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) 8.230992838s ago: executing program 1 (id=1867): mount$fuse(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootm', @ANYRESDEC=0x0, @ANYBLOB=',group_i', @ANYRESDEC=0x0]) read$FUSE(0xffffffffffffffff, &(0x7f000000c3c0)={0x2020}, 0x2020) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000002140)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000180000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f0ffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007ed10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000889049938edebcd600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000004140)="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", 0x2000, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)={0x18, 0xfffffffffffffffe}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x0, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/route\x00') read$FUSE(r0, &(0x7f0000007700)={0x2020}, 0x2020) read$FUSE(r0, &(0x7f0000000a40)={0x2020}, 0x2020) r1 = openat$audio(0xffffffffffffff9c, 0x0, 0x40000000040201, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c012500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb70200"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000600)='sys_enter\x00', r2}, 0x10) membarrier(0x40, 0x0) membarrier(0x20, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r1, 0xc0045006, &(0x7f0000000100)=0x6) r3 = getpid() process_vm_readv(r3, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') writev(r4, &(0x7f0000000100)=[{0x0}], 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r5 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') pread64(r5, &(0x7f000001a240)=""/102400, 0x19000, 0x100008) 8.182990531s ago: executing program 3 (id=1868): r0 = getpid() process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000006bc0), 0x0, 0x0) read$eventfd(r1, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x17, 0x0, 0x0) 8.176490082s ago: executing program 0 (id=1869): setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f0000000180)=@req3={0x40000000, 0x1, 0x5, 0x7, 0x7, 0x0, 0x5}, 0x1c) socket(0x2, 0x3, 0x7) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) fsopen(0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f00000700000000000000", @ANYRES32, @ANYBLOB="0000000000000000000000000400000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='sched_switch\x00', r4}, 0x10) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r5], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000001080)=ANY=[@ANYBLOB="9feb010018000000000000002400000024000000050000000000000001000084000000000300000002000000000000000000000000000005000000000000005f"], &(0x7f0000000280)=""/265, 0x41, 0x109, 0x1, 0x0, 0x0, @void, @value}, 0x20) 7.400184454s ago: executing program 2 (id=1871): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x4000800) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000180)={0x3, 0x40, 0xfa02, {{0x6000000, 0x0, 0x0, @mcast2}, {0xa, 0x0, 0x0, @mcast2={0xff, 0x5}}, r1}}, 0x48) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x2, &(0x7f00000002c0)={0xffffffffffffffff}, 0x106, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_MIGRATE_ID(r0, &(0x7f0000000440)={0x12, 0x10, 0xfa00, {&(0x7f0000000300), r2, r0}}, 0x18) 7.287121592s ago: executing program 2 (id=1872): gettid() bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = socket$inet_smc(0x2b, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x9, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}], {0x14}}, 0x64}}, 0x0) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000180)='vlan0\x00', 0x10) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f0000000000)=0x1, 0xfef2) connect$inet(r4, &(0x7f0000000080)={0x2, 0x0, @dev}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x48, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @gtp={{0x8}, {0x1c}}}]}, 0x48}}, 0x0) setsockopt$sock_int(r3, 0x1, 0x12, &(0x7f00000005c0)=0x80000001, 0x4) 6.202806386s ago: executing program 2 (id=1873): stat(&(0x7f0000000340)='./file0\x00', &(0x7f0000000180)) r0 = getgid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000030000000000002d000000008500000087000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000060000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x0, 0xe, 0x0, &(0x7f00000003c0)="386d178529a39dea18dd3f87d7a5", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x0) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x6) ioctl$GIO_UNIMAP(r1, 0x4b66, &(0x7f0000000380)={0x0, 0x0}) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {}, 0x2c, {'group_id', 0x3d, r0}}) write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f0000000100)={0x30, 0x5, 0x0, {0x0, 0x1}}, 0x30) read$FUSE(r3, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) umount2(&(0x7f00000001c0)='./file0\x00', 0x0) write$FUSE_NOTIFY_INVAL_ENTRY(r3, &(0x7f0000000200)=ANY=[@ANYBLOB="290000000300000000000000000000000000000000000000080000000000001067726f75705f696400"], 0x29) write$FUSE_INIT(r3, &(0x7f0000000040)={0x50, 0xffffffffffffffda, r4, {0x7, 0x28, 0x0, 0x0, 0x0, 0x0, 0x3}}, 0x50) setsockopt$MRT_DONE(0xffffffffffffffff, 0x0, 0xc9, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="2400000076000907000000000000000007020000", @ANYRES32=0x0, @ANYBLOB='\f\x00'], 0x24}, 0x1, 0x5502000000000000}, 0x0) chdir(0x0) socket$packet(0x11, 0x2, 0x300) getpid() 6.124008562s ago: executing program 3 (id=1874): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYRESHEX=r2], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c000000030603000000000000020000010000000500010007000000"], 0x1c}}, 0x5) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r5, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) r6 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r6, 0x40405515, &(0x7f0000000540)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x8, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0xf38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9]}) setsockopt$inet_tcp_int(r5, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000400)={0x0, 0x0}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000000)='yeah\x00', 0x5) sendmsg$inet(r5, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'sha512-avx\x00'}, 0x58) r8 = accept4(r7, 0x0, 0x0, 0x0) sendmmsg(r8, &(0x7f00000098c0)=[{{0x0, 0x0, &(0x7f0000000e00)=[{&(0x7f0000002340)="0f", 0x1}], 0x1}}], 0x1, 0x44008000) sendmsg$alg(r8, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) 6.111508443s ago: executing program 1 (id=1875): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x9, 0x3, 0x8, 0x4, 0x2, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xd, &(0x7f0000000640)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 3.310593464s ago: executing program 2 (id=1876): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000003340)="a5d3b26367b9576854ff7bdc3f6fea67", 0x10) recvmmsg(r1, &(0x7f0000005740)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000140)=""/4, 0x4}, {&(0x7f0000000180)=""/106, 0x6a}], 0x2}}], 0x1, 0x0, 0x0) 3.306836374s ago: executing program 4 (id=1877): syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000080)='./file1\x00', 0x1008014, &(0x7f0000000000)=ANY=[], 0x3, 0x7bf, &(0x7f0000000d80)="$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") mount$bind(0x0, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) dup(0xffffffffffffffff) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0xe}, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500), 0x25) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) 3.261478197s ago: executing program 1 (id=1878): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2500, 0x500) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r1, &(0x7f0000000040)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x8) 2.843614396s ago: executing program 4 (id=1879): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) keyctl$KEYCTL_PKEY_QUERY(0x18, 0x0, 0x0, &(0x7f0000000080)=' hash=', 0x0) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = socket(0x40000000015, 0x5, 0x0) connect$inet(r3, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(r3, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000003c0)="fe", 0x1}], 0x1}, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000440)={'sit0\x00', 0x0}) syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x0) recvmmsg(r3, &(0x7f0000001740)=[{{0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000400)=""/4096, 0x1000}], 0x1}}], 0x4000210, 0x2, 0x0) 2.78027603s ago: executing program 3 (id=1880): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) 2.716477385s ago: executing program 1 (id=1881): openat$vicodec0(0xffffffffffffff9c, 0x0, 0x2, 0x0) mprotect(&(0x7f00003fd000/0xc00000)=nil, 0xc00000, 0x5) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x165900, 0x42) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xe6, 0x35, 0x55, 0x40, 0x5ac, 0x290, 0xdc1b, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0xbb, 0x2}}]}}]}}, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x3, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='contention_end\x00', r1}, 0x10) syz_open_dev$evdev(0x0, 0x4, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_GET_TSC(0x43, &(0x7f0000000040)) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r2, &(0x7f0000000240)=ANY=[@ANYBLOB="000386dd0a00100000004000000060ec97000fc82900fe8000000000000000000000000000aaff020000000000000000000000000001"], 0xffe) add_key(0x0, &(0x7f0000000100)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) syz_open_dev$usbfs(0x0, 0x1ff, 0x0) pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$VIDIOC_G_SELECTION(0xffffffffffffffff, 0xc040565e, &(0x7f0000000040)={0x2}) 1.540404955s ago: executing program 2 (id=1882): r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f00000000c0)={0x18, 0x0, {0x3, @local, 'macvtap0\x00'}}, 0x1e) stat(&(0x7f0000000280)='./file0\x00', &(0x7f0000000340)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x101000, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x40047438, &(0x7f0000000180)=""/246) pwritev(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f00000010c0)="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", 0xd0e}, {&(0x7f0000000400)="9b2f7e9dd799fe2bb80020307877a48044bdf07025b476cc9127b6e1eff4f9fa6fa5d37f1aea08d69d9bcdf479048e3555947e65a377a8001e3d8bf10f2e7a5dafd0d19abf7200cc32ff58e90d413f6351ea9069253f916aeb15306392cd85d7cb00825ad0147d323c474d8b32f3d98fc3ac9092b4", 0x75}, {&(0x7f00000042c0)="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", 0x1f2}, {&(0x7f0000000d00)="60cd1aa66b785e7173949b3ca0b96d182305dbc8da490593c5616809105f26e7830703675a32d203bfe396dc2abb07117746775ac0a9efc95ae38b96116a1bf7bb288cc9086dba45be3eeec21c1c6d427ebee1c15bff8e9397c806205fea2cd700ecb6a8eb15ed367357b7cd48cc52b99ca9ace5bf3e9c0f70a3aaca7cd4afdad1f9337812468c980394c7b346e0614f310c86ae148600eaf786ceba05cf825a29db1b00237b44861dd88d9202c496537c0d20aef64126178bf3bf351d", 0xbd}], 0x4, 0x8, 0x5) 1.411115484s ago: executing program 4 (id=1883): gettid() bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = socket$inet_smc(0x2b, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x9, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}], {0x14}}, 0x64}}, 0x0) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000180)='vlan0\x00', 0x10) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f0000000000)=0x1, 0xfef2) connect$inet(r4, &(0x7f0000000080)={0x2, 0x0, @dev}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x48, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @gtp={{0x8}, {0x1c}}}]}, 0x48}}, 0x0) setsockopt$sock_int(r3, 0x1, 0x12, &(0x7f00000005c0)=0x80000001, 0x4) 1.403798144s ago: executing program 0 (id=1884): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f00000001c0)={&(0x7f0000000240)='m', 0x1, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000380)={&(0x7f0000000340)=[r1], 0x1}) 1.32402482s ago: executing program 2 (id=1885): openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x19) r0 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000140)={0x0, &(0x7f0000000380)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f0000000300)={0x0, 0xfffffffffffffe7a, r1, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r0, 0xc06864ce, &(0x7f0000000600)={r2, 0x0, 0x0, 0x0, 0x0, [0x0]}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000004c0)={'veth1_to_hsr\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)=@newlink={0x44, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r6}]}, 0x44}, 0x1, 0x0, 0x0, 0x20004081}, 0x0) r7 = syz_open_dev$sg(0x0, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) ioctl$SCSI_IOCTL_GET_BUS_NUMBER(r7, 0x5386, &(0x7f0000000540)) ioctl$DRM_IOCTL_GEM_FLINK(r0, 0xc008640a, &(0x7f0000000040)={r3}) ioctl$DRM_IOCTL_GEM_OPEN(r0, 0xc010640b, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_emit_ethernet(0x4a, 0x0, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) r8 = getpid() process_vm_readv(r8, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x5, &(0x7f0000000340)=ANY=[@ANYBLOB="180200000199d47000000000000000008500000053000000850000000700000095"], &(0x7f0000000080)='GPL\x00', 0x4, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r9, 0x0, 0xe, 0x0, &(0x7f0000000200)="e0b9000000007ffff2ff9b6f5bec", 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.059385708s ago: executing program 0 (id=1886): syz_open_dev$sndctrl(&(0x7f0000000040), 0x8, 0x8000) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r4, @ANYBLOB=',wfdno=', @ANYRESDEC=r3]) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x7, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x35) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000001dc0)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-clmulni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x3, 0x0, 0x1, 0x8000000, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x200, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r6 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_INFO(r6, 0x80e85411, 0x0) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={{{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={{{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) 371.888994ms ago: executing program 4 (id=1887): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x4000001, 0x13, r0, 0x48079000) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), 0xffffffffffffffff) 305.545459ms ago: executing program 3 (id=1888): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x9, 0x3, 0x8, 0x4, 0x2, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xd, &(0x7f0000000640)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000850000000f"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 106.830773ms ago: executing program 3 (id=1889): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) r1 = socket(0x200000000000011, 0x2, 0x0) r2 = creat(&(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x0) close(r2) r3 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'team_slave_1\x00', 0x0}) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = socket(0x10, 0x3, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x28}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507000000000400000000000000", @ANYRES32=r9, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000001400)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000580)=@newqdisc={0x40, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_pfifo_head_drop={{0x14}, {0x8}}]}, 0x40}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000002b80)=@newqdisc={0x30, 0x24, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8, 0x8}, {0x4}}]}, 0x30}}, 0x0) getsockopt$inet_mreqn(r5, 0x0, 0x24, &(0x7f00000002c0)={@broadcast, @rand_addr, 0x0}, &(0x7f0000000300)=0xc) sendmsg$nl_route_sched(r5, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000340)={&(0x7f0000001440)=@newtaction={0x9b4, 0x30, 0x20, 0x70bd2b, 0x25dfdbfb, {}, [{0x174, 0x1, [@m_connmark={0x170, 0xd, 0x0, 0x0, {{0xd}, {0x58, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x4, 0x2, 0x7, 0x101}, 0x200}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x80, 0x3, 0x4, 0x5, 0x80000001}}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x9, 0x3, 0x0, 0x200, 0x6}}}]}, {0xeb, 0x6, "1a57eaadb03acd28007cb077bf63ac505e8aea9a92ae0a6a7f16754f199d725a6c89c76d204549c229d4d8ad1738485e3d4539f84e4c23603a9039cc7144745a15cac64ccd4d189afbdecfcad3206acb682a0bd47f3edaea6635ed88f45af745b3eb8eff8a5fb18e577099b472980fbcbbf724db9246d000c081786169b69fe1dd34eb49b354831035308a240c92e1898f326d515e22c2b73246d43997c1a80067e3fd8cbde60fdd76ac60d7ac0017b5b1fd8263ef96fa72d023758df5448928df9331c343b269d87bf2d56146be7e0fa683c6fdbd7445050c024c2668a1bfa5e829465c085ae7"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}, {0x7dc, 0x1, [@m_skbmod={0x184, 0xd, 0x0, 0x0, {{0xb}, {0x88, 0x2, 0x0, 0x1, [@TCA_SKBMOD_ETYPE={0x6, 0x5, 0x1}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x61c}, @TCA_SKBMOD_SMAC={0xa, 0x4, @broadcast}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x7}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x4, 0x6, 0x7, 0x5, 0x2cc}, 0x10}}, @TCA_SKBMOD_DMAC={0xa, 0x3, @link_local}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x2, 0x4, 0x1, 0xa51, 0x1}, 0x10}}, @TCA_SKBMOD_SMAC={0xa}]}, {0xd4, 0x6, "c3991db1818bd6d8fde6969058323848d3e57c91f1a815acbf75b05b2b145a3991571217c136516528cc43b4f413dc1ba2c003e8a4afab996fe592ac374ed4e3e51b773196f1b72cd6fb88f847606c3e83075c750827d764bbc9c952f9c52e57284d80081db79c3a15c3dcd0df8d2309e3788619bc694fc11a15f2c888cce01395e9ac8dfbb3e6abdb3ac18a074dd5b7530892fd85c168a76929a0cea91a6c20a925d96a685b018459d625e8922a82eb8e8ef5db76bfde8be4baefc2570b1049b2539b065b8866eed086486ed702b1f6"}, {0xc}, {0xc, 0x8, {0x2}}}}, @m_ife={0x84, 0xc, 0x0, 0x0, {{0x8}, {0x50, 0x2, 0x0, 0x1, [@TCA_IFE_TYPE={0x6, 0x5, 0x1}, @TCA_IFE_DMAC={0xa}, @TCA_IFE_TYPE={0x6, 0x5, 0xfffc}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x5, 0x8, 0x10000000, 0x1cb4, 0x1000}, 0x1}}, @TCA_IFE_METALST={0x14, 0x6, [@IFE_META_SKBMARK={0x8, 0x1, @val=0x5}, @IFE_META_TCINDEX={0x4, 0x5, @void}, @IFE_META_SKBMARK={0x4, 0x1, @void}]}]}, {0xd, 0x6, "356d4e379827cc66d9"}, {0xc}, {0xc, 0x8, {0x1, 0x1}}}}, @m_csum={0x134, 0xf, 0x0, 0x0, {{0x9}, {0x90, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x1400, 0x7, 0x3, 0x0, 0x3ff}, 0x62}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x7, 0x6, 0x4, 0x7, 0x7ff}, 0x30}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x20, 0x9, 0x4, 0x0, 0x100}, 0x13}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x401, 0x6, 0x1, 0x4, 0x203}, 0x20}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x0, 0x8f1, 0x10000000, 0x4c}, 0x71}}]}, {0x7c, 0x6, "2df5d4a5195352eb8502e9319b4c5de7b5f714819a934334fc16a0e6635b9a961b7b4d1be043f4a2b43041aa2b09df0114e7f910844fd58a777d9ce0e303a69988b79a7fdf6b8cd6e91615372275a8221a9a027f6e57e860ddfbe17061ba4d4145a6763421f19241880e38517ceb3f304e406d976f9e9d9b"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3}}}}, @m_mirred={0x184, 0x0, 0x0, 0x0, {{0xb}, {0xc4, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x3ff, 0x8d52, 0x6, 0x4, 0x3f}, 0x4, r4}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x2, 0x5, 0x10000000, 0x9, 0x7}, 0x2, r4}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x1f, 0x5, 0x7, 0x0, 0x5}, 0x3, r9}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x8, 0x200, 0x0, 0xca, 0x4}, 0x3, r4}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x3, 0x4, 0x0, 0xfff, 0x2}, 0x6, r10}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x9, 0x5, 0x7, 0x7, 0x1}, 0x3, r4}}]}, {0x98, 0x6, "b3c0affcec250b3ed543aa1a30751e5fb226edabb6b418c6c30828cd890b4da63a1daf0d1778bf687d24df74de3b893d2d6962e7fdace6c15835fdaf80ee79463a91c3c0ef3226128d67a1fa49cf18187113ed21d9a7e50804e3980e19c70c73bf91b6f75ee29d5d1e5b54ea79fdbc6e480541aacd08dbb22d8fbe1a45d4463165f8621ded272ccae1ecd5a52c567dfa23bf7026"}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}, @m_vlan={0x7c, 0xf, 0x0, 0x0, {{0x9}, {0x14, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x231}]}, {0x3f, 0x6, "6201393a51c96c7ead5c953734b4309828c614364d4ea7559cbc9dfe91d1dc4de570c1b7983e28f4a9894a2d0bbbd86eecd74c49b46107d9ec3d98"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_connmark={0x1ac, 0x20, 0x0, 0x0, {{0xd}, {0x100, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x3a42, 0x3, 0x7, 0xfffffffa, 0x7}, 0x6}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x2, 0x136, 0xffffffffcffffffc, 0x0, 0x6}, 0x4}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xfffffff8, 0x7f, 0x20000008, 0x1, 0x5}, 0x8001}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x81, 0xff, 0x8, 0x8, 0x8}, 0xfff9}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xf6, 0x80000000, 0x10000000, 0x1}}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1, 0x0, 0x8, 0x7794, 0x9}, 0x6}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x401, 0x3, 0x5, 0x100, 0x5}, 0x2}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x4, 0x6, 0x0, 0x4, 0x7f}, 0x3}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x0, 0x3, 0xffffffffffffffff, 0x7764, 0xfffffffd}, 0x1ddb}}]}, {0x7f, 0x6, "28dc7dded1369d4b7f872ca56b31eba996bd21354312ac40d7f52c1c1c4f3192a9840dc7420bfef08ed48732cff1fdbee63fff1b335fcf9432fed0345e55398171313f95a7686b36bc32a244970ae34ada4029188e102c9127acdc43da3d7d793fa0ca584b5d8354913336b6136cce92d78fd65d42f099e368fb83"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_ctinfo={0xf0, 0x7, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x7ff}, @TCA_CTINFO_ACT={0x18, 0x3, {0x3, 0x8, 0x5, 0x7, 0x400}}]}, {0xa4, 0x6, "f54756c38ca571a7370aca702d931adeeb8f432d34e8246fa0f3d3664314792326abacdc0edb2ddb53445f12c039d2f3da6d5c237bd0f40db5a02a5e48ae394e929e29b71a6aa891ff67528973586ff51ced0144956a2c642d9755a61a06c6b2046eab28d0db12410e7b8edea8e2417affcf0a4c31da0a9bc501f882234ac73c74dfe51c324d3055efb5af73976e4ab3da672a6c97172f091d20446c205f1656"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x2}}}}]}, {0x50, 0x1, [@m_ife={0x4c, 0x6, 0x0, 0x0, {{0x8}, {0x10, 0x2, 0x0, 0x1, [@TCA_IFE_SMAC={0xa, 0x4, @broadcast}]}, {0x17, 0x6, "f9f92e45e06c37e1ee93ec644e1edc673eb4c3"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1}}}}]}]}, 0x9b4}, 0x1, 0x0, 0x0, 0x40000}, 0x4000010) ioctl$vim2m_VIDIOC_STREAMOFF(r5, 0x40045612, &(0x7f00000001c0)) r11 = socket$unix(0x1, 0x1, 0x0) r12 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSETD(r12, 0x5423, &(0x7f0000000000)) mount$9p_fd(0x0, &(0x7f0000000080)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000040), 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB="000000001d5600", @ANYRESHEX=r11, @ANYBLOB=',\x00']) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="4400000010000304000000000000000000007400", @ANYRES32=r13, @ANYBLOB="0000000000000000240012800b000100627269646765000014000280060027000000000005002d"], 0x44}}, 0x0) syz_open_dev$usbmon(&(0x7f00000000c0), 0x6, 0xc400) 0s ago: executing program 4 (id=1890): syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000080)='./file1\x00', 0x1008014, &(0x7f0000000000)=ANY=[], 0x3, 0x7bf, &(0x7f0000000d80)="$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") mount$bind(0x0, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) dup(0xffffffffffffffff) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0xe}, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500), 0x25) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) kernel console output (not intermixed with test programs): nl_net:caif_netlink_parms(): no params data found [ 799.820990][ T9537] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1280'. [ 800.259690][ T9509] bridge0: port 1(bridge_slave_0) entered blocking state [ 802.814504][ T9552] MTD: Attempt to mount non-MTD device "/dev/nbd1" [ 802.821294][ T9552] cramfs: wrong magic [ 803.187488][ T8248] Bluetooth: hci2: command tx timeout [ 803.334302][ T9509] bridge0: port 1(bridge_slave_0) entered disabled state [ 803.364379][ T9509] device bridge_slave_0 entered promiscuous mode [ 803.469928][ T9509] bridge0: port 2(bridge_slave_1) entered blocking state [ 803.522648][ T9509] bridge0: port 2(bridge_slave_1) entered disabled state [ 803.585766][ T9509] device bridge_slave_1 entered promiscuous mode [ 803.608243][ T9562] kAFS: unable to lookup cell '/' [ 803.736712][ T9509] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 803.957444][ T9509] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 804.296041][ T9567] tmpfs: Unknown parameter 'usrquotaŸ5x }šž2aÏH"È;é–¦•&Ô-dv9tO5ðoýÿ$Õv"¡a:ü  #qûHð¿ºR¹@öE»\kmõîß6£Ï†1áÖ„ËÓßlô£±Ÿ®eVŸ²AGNzyoý¡œ§Y™fçç¤[Ñ»Rjèl¶ãåñ³ÇÆs~þ‘ÉæîßÒªk¡ Z`Âe' [ 804.965351][ T9509] team0: Port device team_slave_0 added [ 805.071297][ T9509] team0: Port device team_slave_1 added [ 805.129096][ T3648] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 805.142021][ T3648] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 805.153264][ T3648] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 805.162598][ T3648] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 805.170380][ T3648] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 805.177907][ T3648] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 805.325891][ T9509] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 805.464287][ T3648] Bluetooth: hci3: command 0x0419 tx timeout [ 805.488882][ T9509] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 805.716959][ T9509] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 806.340565][ T9589] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1290'. [ 806.663061][ T9585] ADFS-fs (nullb0): error: can't find an ADFS filesystem on dev nullb0. [ 806.678893][ T9509] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 806.707165][ T9509] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 806.793018][ T9509] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 806.997978][ T9509] device hsr_slave_0 entered promiscuous mode [ 807.026446][ T9509] device hsr_slave_1 entered promiscuous mode [ 807.234205][ T3648] Bluetooth: hci4: command tx timeout [ 808.231673][ T3795] device hsr_slave_0 left promiscuous mode [ 808.255243][ T3795] device hsr_slave_1 left promiscuous mode [ 808.306546][ T3795] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 808.320492][ T3795] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 808.340273][ T3795] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 808.348665][ T3795] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 808.365132][ T3795] device bridge_slave_1 left promiscuous mode [ 808.371482][ T3795] bridge0: port 2(bridge_slave_1) entered disabled state [ 808.395221][ T3795] device bridge_slave_0 left promiscuous mode [ 808.404713][ T3795] bridge0: port 1(bridge_slave_0) entered disabled state [ 808.478919][ T3795] device veth1_macvtap left promiscuous mode [ 808.495012][ T3795] device veth0_macvtap left promiscuous mode [ 808.507965][ T1271] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.508614][ T3795] device veth1_vlan left promiscuous mode [ 808.514435][ T1271] ieee802154 phy1 wpan1: encryption failed: -22 [ 808.565610][ T3795] device veth0_vlan left promiscuous mode [ 809.304371][ T3648] Bluetooth: hci4: command tx timeout [ 810.002591][ T3795] team0 (unregistering): Port device team_slave_1 removed [ 810.393413][ T3795] team0 (unregistering): Port device team_slave_0 removed [ 810.850195][ T3795] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 810.935018][ T3795] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 811.134369][ T9633] tmpfs: Unknown parameter 'usrquotaŸ5x }šž2aÏH"È;é–¦•&Ô-dv9tO5ðoýÿ$Õv"¡a:ü  #qûHð¿ºR¹@öE»\kmõîß6£Ï†1áÖ„ËÓßlô£±Ÿ®eVŸ²AGNzyoý¡œ§Y™fçç¤[Ñ»Rjèl¶ãåñ³ÇÆs~þ‘ÉæîßÒªk¡ Z`Âe' [ 811.387504][ T3648] Bluetooth: hci4: command tx timeout [ 813.042680][ T3795] bond0 (unregistering): Released all slaves [ 813.071218][ T9642] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1300'. [ 813.494494][ T3648] Bluetooth: hci4: command tx timeout [ 814.029402][ T9570] chnl_net:caif_netlink_parms(): no params data found [ 816.265934][ T9668] tmpfs: Unknown parameter 'usrquotaŸ5x }šž2aÏH"È;é–¦•&Ô-dv9tO5ðoýÿ$Õv"¡a:ü  #qûHð¿ºR¹@öE»\kmõîß6£Ï†1áÖ„ËÓßlô£±Ÿ®eVŸ²AGNzyoý¡œ§Y™fçç¤[Ñ»Rjèl¶ãåñ³ÇÆs~þ‘ÉæîßÒªk¡ Z`Âe' [ 816.833162][ T9570] bridge0: port 1(bridge_slave_0) entered blocking state [ 816.874475][ T9570] bridge0: port 1(bridge_slave_0) entered disabled state [ 816.882968][ T9570] device bridge_slave_0 entered promiscuous mode [ 816.979548][ T9570] bridge0: port 2(bridge_slave_1) entered blocking state [ 816.998979][ T9570] bridge0: port 2(bridge_slave_1) entered disabled state [ 817.155641][ T9570] device bridge_slave_1 entered promiscuous mode [ 817.892029][ T9570] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 817.933538][ T9570] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 818.439574][ T9509] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 818.576619][ T9570] team0: Port device team_slave_0 added [ 818.652592][ T9509] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 818.751981][ T9570] team0: Port device team_slave_1 added [ 818.768961][ T9509] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 818.888899][ T9509] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 818.950702][ T9570] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 818.964190][ T9570] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 818.996315][ T9570] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 819.164686][ T9] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 819.236186][ T9570] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 819.243198][ T9570] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 819.334374][ T9570] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 819.366205][ T9700] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1312'. [ 819.480054][ T9] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 819.654630][ T9] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 819.713031][ T9570] device hsr_slave_0 entered promiscuous mode [ 819.740361][ T9570] device hsr_slave_1 entered promiscuous mode [ 819.781039][ T9570] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 819.807655][ T9570] Cannot create hsr debugfs directory [ 819.863479][ T9] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 820.186828][ T8248] Bluetooth: Wrong link type (-71) [ 821.043883][ T9509] 8021q: adding VLAN 0 to HW filter on device bond0 [ 821.153643][ T9509] 8021q: adding VLAN 0 to HW filter on device team0 [ 821.210142][ T3784] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 821.220821][ T3784] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 821.307071][ T3784] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 821.457029][ T9724] tmpfs: Unknown parameter 'usrquotaŸ5x }šž2aÏH"È;é–¦•&Ô-dv9tO5ðoýÿ$Õv"¡a:ü  #qûHð¿ºR¹@öE»\kmõîß6£Ï†1áÖ„ËÓßlô£±Ÿ®eVŸ²AGNzyoý¡œ§Y™fçç¤[Ñ»Rjèl¶ãåñ³ÇÆs~þ‘ÉæîßÒªk¡ Z`Âe' [ 821.485435][ T3784] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 823.954421][ T3784] bridge0: port 1(bridge_slave_0) entered blocking state [ 823.961613][ T3784] bridge0: port 1(bridge_slave_0) entered forwarding state [ 824.014679][ T3784] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 824.065072][ T3784] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 824.102560][ T3784] bridge0: port 2(bridge_slave_1) entered blocking state [ 824.109721][ T3784] bridge0: port 2(bridge_slave_1) entered forwarding state [ 824.169878][ T3784] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 824.192898][ T3784] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 824.256635][ T3784] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 824.272955][ T3784] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 824.300141][ T3784] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 824.316829][ T3784] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 824.366297][ T3784] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 824.635827][ T3784] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 824.962468][ T3784] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 824.971815][ T3784] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 825.249150][ T3784] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 825.376530][ T3784] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 826.991490][ T9760] loop1: detected capacity change from 0 to 764 [ 827.197893][ T9764] tmpfs: Unknown parameter 'usrquotaŸ5x }šž2aÏH"È;é–¦•&Ô-dv9tO5ðoýÿ$Õv"¡a:ü  #qûHð¿ºR¹@öE»\kmõîß6£Ï†1áÖ„ËÓßlô£±Ÿ®eVŸ²AGNzyoý¡œ§Y™fçç¤[Ñ»Rjèl¶ãåñ³ÇÆs~þ‘ÉæîßÒªk¡ Z`Âe' [ 830.987794][ T9570] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 831.046785][ T3801] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 831.074897][ T3801] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 831.263499][ T9570] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 832.159553][ T9779] MTD: Attempt to mount non-MTD device "/dev/nbd2" [ 832.167350][ T9779] cramfs: wrong magic [ 832.248415][ T9509] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 832.280942][ T9570] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 832.341829][ T9570] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 832.956940][ T9570] 8021q: adding VLAN 0 to HW filter on device bond0 [ 833.067778][ T4986] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 833.121154][ T4986] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 833.927813][ T9570] 8021q: adding VLAN 0 to HW filter on device team0 [ 833.961845][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 833.995295][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 834.061545][ T33] bridge0: port 1(bridge_slave_0) entered blocking state [ 834.068746][ T33] bridge0: port 1(bridge_slave_0) entered forwarding state [ 834.181020][ T9799] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1328'. [ 834.334264][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 834.342410][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 834.362635][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 834.384989][ T33] bridge0: port 2(bridge_slave_1) entered blocking state [ 834.392191][ T33] bridge0: port 2(bridge_slave_1) entered forwarding state [ 834.420418][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 834.454630][ T2525] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 834.512454][ T2525] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 834.563920][ T2525] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 834.585477][ T2525] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 834.754811][ T3801] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 834.772001][ T3801] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 834.809068][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 834.821214][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 834.896406][ T9570] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 834.926010][ T9570] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 834.947366][ T9] device hsr_slave_0 left promiscuous mode [ 834.974772][ T9] device hsr_slave_1 left promiscuous mode [ 835.001506][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 835.020864][ T9] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 835.054472][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 835.082335][ T9] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 835.113598][ T9] device bridge_slave_1 left promiscuous mode [ 835.123100][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 835.175673][ T9] device bridge_slave_0 left promiscuous mode [ 835.181972][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 835.327288][ T9] device veth1_macvtap left promiscuous mode [ 835.336835][ T9] device veth0_macvtap left promiscuous mode [ 835.342983][ T9] device veth1_vlan left promiscuous mode [ 835.370963][ T9] device veth0_vlan left promiscuous mode [ 837.546312][ T9826] tmpfs: Unknown parameter 'usrquotaŸ5x }šž2aÏH"È;é–¦•&Ô-dv9tO5ðoýÿ$Õv"¡a:ü  #qûHð¿ºR¹@öE»\kmõîß6£Ï†1áÖ„ËÓßlô£±Ÿ®eVŸ²AGNzyoý¡œ§Y™fçç¤[Ñ»Rjèl¶ãåñ³ÇÆs~þ‘ÉæîßÒªk¡ Z`Âe' [ 839.975861][ T9833] MTD: Attempt to mount non-MTD device "/dev/nbd0" [ 839.983590][ T9833] cramfs: wrong magic [ 841.198478][ T9] team0 (unregistering): Port device team_slave_1 removed [ 841.490831][ T9] team0 (unregistering): Port device team_slave_0 removed [ 841.612504][ T9] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 841.638152][ T9848] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1342'. [ 841.739684][ T9] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 843.062990][ T9] bond0 (unregistering): Released all slaves [ 843.313002][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 843.321935][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 843.330926][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 844.045746][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 844.168595][ T4986] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 844.201490][ T4986] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 844.220680][ T9859] loop0: detected capacity change from 0 to 764 [ 844.246190][ T9509] device veth0_vlan entered promiscuous mode [ 844.275431][ T4986] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 844.291984][ T4986] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 844.336064][ T9509] device veth1_vlan entered promiscuous mode [ 844.381880][ T4986] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 844.479234][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 844.524067][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 844.622026][ T9509] device veth0_macvtap entered promiscuous mode [ 844.643425][ T9509] device veth1_macvtap entered promiscuous mode [ 844.787273][ T9509] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 844.817702][ T9865] tmpfs: Unknown parameter 'usrquotaŸ5x }šž2aÏH"È;é–¦•&Ô-dv9tO5ðoýÿ$Õv"¡a:ü  #qûHð¿ºR¹@öE»\kmõîß6£Ï†1áÖ„ËÓßlô£±Ÿ®eVŸ²AGNzyoý¡œ§Y™fçç¤[Ñ»Rjèl¶ãåñ³ÇÆs~þ‘ÉæîßÒªk¡ Z`Âe' [ 844.828374][ T9509] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 844.877105][ T9509] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 844.918417][ T9509] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 844.952911][ T9509] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 845.003578][ T9509] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 845.030620][ T9509] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 845.065040][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 845.100125][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 845.127664][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 845.150164][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 845.194270][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 845.208302][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 845.241169][ T9509] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 845.280649][ T9509] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 845.316764][ T9509] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 845.344208][ T9509] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 845.361276][ T9509] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 845.382080][ T9509] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 845.396655][ T9509] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 845.410098][ T9570] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 845.515103][ T3784] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 845.525491][ T9875] ADFS-fs (nullb0): error: can't find an ADFS filesystem on dev nullb0. [ 845.544886][ T3784] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 845.571486][ T9509] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 845.613794][ T9509] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 845.631469][ T9509] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 845.660891][ T9509] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 846.596822][ T4986] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 846.620963][ T4986] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 846.713462][ T4986] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 846.726811][ T4986] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 846.772691][ T4986] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 846.831730][ T4986] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 846.911572][ T9570] device veth0_vlan entered promiscuous mode [ 846.977727][ T9570] device veth1_vlan entered promiscuous mode [ 847.069395][ T4986] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 847.143754][ T4986] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 847.226200][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 847.244902][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 847.616294][ T3784] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 847.649763][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 847.687594][ T3784] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 847.765056][ T9570] device veth0_macvtap entered promiscuous mode [ 847.775774][ T4986] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 847.804299][ T4986] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 847.855550][ T4986] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 847.926799][ T9570] device veth1_macvtap entered promiscuous mode [ 847.940022][ T4986] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 848.045011][ T4986] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 848.220326][ T9570] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 848.230800][ C0] vxcan0: j1939_tp_rxtimer: 0xffff88807c0a0000: rx timeout, send abort [ 848.240985][ T9570] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 848.296870][ T9570] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 848.350268][ T9570] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 848.394126][ T9570] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 848.434117][ T9570] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 848.456838][ T9570] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 848.487608][ T9570] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 848.542377][ T9570] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 848.566401][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 848.585545][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 848.617272][ T9570] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 848.649160][ T9570] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 848.679779][ T9570] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 848.730914][ C0] vxcan0: j1939_tp_rxtimer: 0xffff88807c0a0000: abort rx timeout. Force session deactivation [ 848.764184][ T9570] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 848.790746][ T9570] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 848.832104][ T9570] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 848.862773][ T9570] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 848.904232][ T9570] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 848.964927][ T9570] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 849.029706][ T3784] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 849.207234][ T3784] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 849.835281][ T9570] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 849.844048][ T9570] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 849.939628][ T9570] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 849.963502][ T9570] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 849.974611][ T9904] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1357'. [ 850.160169][ T3784] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 850.206165][ T3784] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 851.134939][ T9910] tmpfs: Unknown parameter 'usrquotaŸ5x }šž2aÏH"È;é–¦•&Ô-dv9tO5ðoýÿ$Õv"¡a:ü  #qûHð¿ºR¹@öE»\kmõîß6£Ï†1áÖ„ËÓßlô£±Ÿ®eVŸ²AGNzyoý¡œ§Y™fçç¤[Ñ»Rjèl¶ãåñ³ÇÆs~þ‘ÉæîßÒªk¡ Z`Âe' [ 854.054244][ T3784] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 854.241806][ T2525] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 854.274728][ T2525] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 854.330202][ T3784] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 855.125687][ T27] audit: type=1326 audit(1726577532.731:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9924 comm="syz.3.1285" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7faf97f7def9 code=0x0 [ 858.394021][ C0] vxcan0: j1939_tp_rxtimer: 0xffff888061bf7c00: rx timeout, send abort [ 858.473038][ T9957] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1368'. [ 858.965017][ T9964] MTD: Attempt to mount non-MTD device "/dev/nbd0" [ 858.973781][ T9964] cramfs: wrong magic [ 859.098539][ C0] vxcan0: j1939_tp_rxtimer: 0xffff888061bf7c00: abort rx timeout. Force session deactivation [ 859.626855][ T9973] tmpfs: Unknown parameter 'usrquotaŸ5x }šž2aÏH"È;é–¦•&Ô-dv9tO5ðoýÿ$Õv"¡a:ü  #qûHð¿ºR¹@öE»\kmõîß6£Ï†1áÖ„ËÓßlô£±Ÿ®eVŸ²AGNzyoý¡œ§Y™fçç¤[Ñ»Rjèl¶ãåñ³ÇÆs~þ‘ÉæîßÒªk¡ Z`Âe' [ 867.684401][ T3648] Bluetooth: hci1: command 0x0406 tx timeout [ 867.715429][T10009] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1381'. [ 868.084297][ C0] vxcan0: j1939_tp_rxtimer: 0xffff8880741ca400: rx timeout, send abort [ 868.592693][ C0] vxcan0: j1939_tp_rxtimer: 0xffff8880741ca400: abort rx timeout. Force session deactivation [ 870.208388][ T1271] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.215097][ T1271] ieee802154 phy1 wpan1: encryption failed: -22 [ 871.385169][ T3648] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 871.402468][ T3648] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 871.465929][T10060] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1395'. [ 871.476501][ T3648] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 871.676432][ T3648] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 871.684904][ T3648] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 871.783546][ T48] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 871.893393][ T3795] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 872.437426][ T3795] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 872.686546][ T3795] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 872.927310][ T3795] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 873.954693][ T3648] Bluetooth: hci3: command tx timeout [ 874.320633][T10053] chnl_net:caif_netlink_parms(): no params data found [ 875.151492][ C1] vxcan0: j1939_tp_rxtimer: 0xffff88805ebe3000: rx timeout, send abort [ 875.659964][ C1] vxcan0: j1939_tp_rxtimer: 0xffff88805ebe3000: abort rx timeout. Force session deactivation [ 876.071424][ T3648] Bluetooth: hci3: command tx timeout [ 877.206886][T10053] bridge0: port 1(bridge_slave_0) entered blocking state [ 877.213983][T10053] bridge0: port 1(bridge_slave_0) entered disabled state [ 877.233744][T10053] device bridge_slave_0 entered promiscuous mode [ 878.105015][ T3648] Bluetooth: hci3: command tx timeout [ 878.244530][T10053] bridge0: port 2(bridge_slave_1) entered blocking state [ 878.300573][T10114] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1407'. [ 878.362563][T10053] bridge0: port 2(bridge_slave_1) entered disabled state [ 878.589208][T10053] device bridge_slave_1 entered promiscuous mode [ 878.817028][T10053] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 879.326521][T10053] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 879.641561][T10053] team0: Port device team_slave_0 added [ 880.192467][ T3648] Bluetooth: hci3: command tx timeout [ 880.299713][T10053] team0: Port device team_slave_1 added [ 880.542406][T10053] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 880.566193][T10053] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 880.685225][T10053] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 880.732009][T10053] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 880.771467][T10053] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 880.869036][T10053] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 881.302661][T10053] device hsr_slave_0 entered promiscuous mode [ 881.330402][T10053] device hsr_slave_1 entered promiscuous mode [ 881.350302][T10053] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 881.364950][T10053] Cannot create hsr debugfs directory [ 883.849490][ C0] vxcan0: j1939_tp_rxtimer: 0xffff88802e4c8000: rx timeout, send abort [ 884.357878][ C0] vxcan0: j1939_tp_rxtimer: 0xffff88802e4c8000: abort rx timeout. Force session deactivation [ 885.335814][T10186] MTD: Attempt to mount non-MTD device "/dev/nbd0" [ 885.345166][T10186] cramfs: wrong magic [ 886.227050][ T3795] device hsr_slave_0 left promiscuous mode [ 886.232542][T10175] ADFS-fs (nullb0): error: can't find an ADFS filesystem on dev nullb0. [ 886.253434][ T3795] device hsr_slave_1 left promiscuous mode [ 886.273757][ T3795] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 886.281802][ T3795] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 886.323792][ T3795] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 886.343245][ T3795] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 886.353975][ T3795] device bridge_slave_1 left promiscuous mode [ 886.363916][T10204] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1420'. [ 886.384272][ T3795] bridge0: port 2(bridge_slave_1) entered disabled state [ 886.393496][ T3795] device bridge_slave_0 left promiscuous mode [ 886.400302][ T3795] bridge0: port 1(bridge_slave_0) entered disabled state [ 886.720050][ T3795] device veth1_macvtap left promiscuous mode [ 886.762797][ T3795] device veth0_macvtap left promiscuous mode [ 886.785935][ T3795] device veth1_vlan left promiscuous mode [ 886.989036][ T3795] device veth0_vlan left promiscuous mode [ 888.151079][ T3795] team0 (unregistering): Port device team_slave_1 removed [ 888.538318][ T3795] team0 (unregistering): Port device team_slave_0 removed [ 889.000920][ T3795] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 889.259072][ T3795] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 890.550525][ T3795] bond0 (unregistering): Released all slaves [ 894.127755][T10236] MTD: Attempt to mount non-MTD device "/dev/nbd1" [ 894.229140][T10236] cramfs: wrong magic [ 894.408920][T10238] loop4: detected capacity change from 0 to 764 [ 894.547581][T10053] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 894.734679][T10053] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 895.433963][T10053] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 895.562615][T10053] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 896.121181][T10262] kvm [10260]: vcpu0, guest rIP: 0x1be ignored wrmsr: 0x11e data 0xbe702111 [ 896.136075][T10053] 8021q: adding VLAN 0 to HW filter on device bond0 [ 896.193034][ T3801] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 896.215921][ T3801] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 896.266082][T10269] warning: checkpointing journal with EXT4_IOC_CHECKPOINT_FLAG_ZEROOUT can be slow [ 896.275700][T10053] 8021q: adding VLAN 0 to HW filter on device team0 [ 896.343810][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 896.369870][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 896.405236][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 896.412374][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 896.531881][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 896.556983][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 896.596547][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 896.643922][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 896.651208][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 896.695495][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 896.725750][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 896.792065][ T9976] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 896.820526][ T9976] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 896.857288][T10279] ADFS-fs (nullb0): error: can't find an ADFS filesystem on dev nullb0. [ 896.886206][ T9976] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 897.073271][ T9976] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 898.049776][T10294] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1438'. [ 898.061630][ T9976] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 898.078370][ T9976] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 898.940364][T10053] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 899.018398][T10053] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 899.047140][ T9976] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 899.070242][ T9976] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 899.236124][ T9976] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 900.155049][T10311] MTD: Attempt to mount non-MTD device "/dev/nbd1" [ 900.162727][T10311] cramfs: wrong magic [ 901.125104][ T9914] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 901.134377][ T9914] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 901.173290][T10053] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 901.279975][ T3805] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 901.319745][ T3805] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 901.383031][T10312] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 901.406193][T10312] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 901.417772][T10053] device veth0_vlan entered promiscuous mode [ 901.438180][T10312] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 901.469771][T10312] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 901.490196][T10053] device veth1_vlan entered promiscuous mode [ 901.659527][T10053] device veth0_macvtap entered promiscuous mode [ 901.804439][ T3648] Bluetooth: Wrong link type (-71) [ 901.812012][ T3648] Bluetooth: hci0: link tx timeout [ 901.818297][ T3648] Bluetooth: hci0: killing stalled connection 10:aa:aa:aa:aa:aa [ 901.826888][ T3648] Bluetooth: hci0: link tx timeout [ 901.832899][ T3648] Bluetooth: hci0: killing stalled connection 11:aa:aa:aa:aa:aa [ 902.096266][ T9914] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 902.180422][ T9914] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 902.337817][ T9914] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 902.381310][ T9914] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 902.460839][ T9914] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 902.521031][T10053] device veth1_macvtap entered promiscuous mode [ 902.597354][T10053] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 902.659890][T10053] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 902.689880][T10053] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 902.716282][T10053] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 902.758878][T10053] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 902.794175][T10053] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 902.814322][T10053] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 902.852111][T10053] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 902.925783][T10053] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 902.952672][ T3783] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 902.990187][ T3783] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 903.019738][T10053] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 903.061354][T10053] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 903.086720][T10053] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 903.105326][T10053] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 903.119436][T10053] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 903.131038][T10053] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 903.143169][T10053] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 903.154160][T10053] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 903.166226][T10053] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 903.180637][T10053] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 903.224217][T10053] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 903.254115][T10053] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 903.262881][T10053] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 903.321844][ T9914] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 903.349617][ T9914] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 904.584660][ T33] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 904.624100][ T33] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 904.678289][ T9914] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 905.389195][T10312] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 905.568937][T10312] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 905.622846][ T2525] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 906.151425][T10398] loop1: detected capacity change from 0 to 1024 [ 906.160287][T10398] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 906.213304][T10398] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 906.280866][T10406] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1458'. [ 907.466304][ T5540] EXT4-fs (loop1): unmounting filesystem. [ 908.933505][ T48] Bluetooth: hci3: command tx timeout [ 909.694737][T10389] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 909.700705][T10389] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 909.708662][T10389] Bluetooth: hci0: Suspend notifier action (1) failed: -4 [ 909.715929][T10389] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 909.721839][T10389] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 909.727945][T10389] Bluetooth: hci5: Suspend notifier action (1) failed: -4 [ 909.735146][T10389] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 909.741050][T10389] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 909.747033][T10389] Bluetooth: hci1: Suspend notifier action (1) failed: -4 [ 909.754217][T10389] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 909.760123][T10389] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 909.766093][T10389] Bluetooth: hci2: Suspend notifier action (1) failed: -4 [ 909.773241][T10389] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 909.779195][T10389] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 909.785203][T10389] Bluetooth: hci3: Suspend notifier action (1) failed: -4 [ 911.935358][T10468] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1470'. [ 911.961943][T10464] kAFS: unable to lookup cell '/' [ 911.967730][ T3648] Bluetooth: hci3: command 0x0c1a tx timeout [ 911.975191][ T8248] Bluetooth: hci1: command 0x0406 tx timeout [ 911.975397][ T48] Bluetooth: hci2: command 0x0c1a tx timeout [ 911.981664][ T48] Bluetooth: hci5: command 0x0c1a tx timeout [ 911.993656][ T3648] Bluetooth: hci0: command 0x0406 tx timeout [ 914.024276][T10469] Bluetooth: hci1: command 0x0406 tx timeout [ 914.030843][T10469] Bluetooth: hci0: command 0x0406 tx timeout [ 914.037665][T10469] Bluetooth: hci5: command 0x0c1a tx timeout [ 914.043800][T10469] Bluetooth: hci3: command 0x0c1a tx timeout [ 914.050338][T10469] Bluetooth: hci2: command 0x0c1a tx timeout [ 914.397326][T10492] warning: checkpointing journal with EXT4_IOC_CHECKPOINT_FLAG_ZEROOUT can be slow [ 916.018321][T10521] ADFS-fs (nullb0): error: can't find an ADFS filesystem on dev nullb0. [ 916.167517][T10524] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1487'. [ 917.058273][T10529] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 917.142803][T10531] kAFS: unable to lookup cell '/' [ 917.988115][T10532] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(7) [ 917.994700][T10532] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 918.124427][ T3658] Bluetooth: hci2: command 0x0c1a tx timeout [ 918.208421][T10532] vhci_hcd vhci_hcd.0: Device attached [ 918.414592][ T5825] vhci_hcd: vhci_device speed not set [ 918.486557][ T5825] usb 15-1: new full-speed USB device number 2 using vhci_hcd [ 920.232416][T10469] Bluetooth: hci0: link tx timeout [ 920.237673][T10469] Bluetooth: hci0: killing stalled connection 10:aa:aa:aa:aa:aa [ 920.246617][T10469] Bluetooth: hci0: link tx timeout [ 920.251768][T10469] Bluetooth: hci0: killing stalled connection 11:aa:aa:aa:aa:aa [ 920.264180][T10469] Bluetooth: hci3: command 0x0c1a tx timeout [ 922.191906][T10569] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1499'. [ 924.597183][T10586] autofs4:pid:10586:autofs_fill_super: called with bogus options [ 924.849593][T10533] vhci_hcd: connection reset by peer [ 924.870842][ T6067] vhci_hcd: stop threads [ 924.899761][ T6067] vhci_hcd: release socket [ 925.141398][ T6067] vhci_hcd: disconnect device [ 926.356167][ T5825] vhci_hcd: vhci_device speed not set [ 927.097466][T10469] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 927.109983][T10469] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 927.120231][T10469] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 927.130760][T10469] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 927.140256][T10469] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 927.147802][T10469] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 927.345368][ T9509] syz-executor (9509) used greatest stack depth: 18616 bytes left [ 927.450226][ T9976] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 928.323440][T10610] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1511'. [ 931.009403][ T3658] Bluetooth: hci2: command tx timeout [ 931.148387][ T9976] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 931.396661][ T1271] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.404861][ T1271] ieee802154 phy1 wpan1: encryption failed: -22 [ 932.627831][ T9976] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 932.643381][T10640] autofs4:pid:10640:autofs_fill_super: called with bogus options [ 933.381637][ T9976] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 933.666895][ T3658] Bluetooth: hci2: command tx timeout [ 933.699752][T10602] chnl_net:caif_netlink_parms(): no params data found [ 934.862590][T10655] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1523'. [ 934.981294][T10602] bridge0: port 1(bridge_slave_0) entered blocking state [ 935.035042][T10602] bridge0: port 1(bridge_slave_0) entered disabled state [ 935.043931][T10602] device bridge_slave_0 entered promiscuous mode [ 935.097427][T10602] bridge0: port 2(bridge_slave_1) entered blocking state [ 935.122945][T10602] bridge0: port 2(bridge_slave_1) entered disabled state [ 935.176988][T10602] device bridge_slave_1 entered promiscuous mode [ 935.246851][T10672] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 935.317590][T10647] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 935.323607][T10647] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 935.329640][T10647] Bluetooth: hci0: Suspend notifier action (1) failed: -4 [ 935.338223][T10647] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 935.344400][T10647] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 935.350353][T10647] Bluetooth: hci5: Suspend notifier action (1) failed: -4 [ 935.357591][T10647] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 935.363531][T10647] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 935.370158][T10647] Bluetooth: hci1: Suspend notifier action (1) failed: -4 [ 935.378467][T10647] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 935.384463][T10647] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 935.390442][T10647] Bluetooth: hci3: Suspend notifier action (1) failed: -4 [ 935.398245][T10647] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 935.404254][T10647] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 935.410197][T10647] Bluetooth: hci2: Suspend notifier action (1) failed: -4 [ 935.504003][T10672] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 1th superblock [ 935.512557][T10672] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 935.521310][T10672] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 2th superblock [ 935.886789][T10602] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 936.269612][T10602] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 937.396157][ T3658] Bluetooth: hci1: command 0x0406 tx timeout [ 937.396212][T10469] Bluetooth: hci5: command 0x0c1a tx timeout [ 937.402676][ T3658] Bluetooth: hci0: command 0x0406 tx timeout [ 937.464154][ T3658] Bluetooth: hci2: command 0x0419 tx timeout [ 937.470265][ T3658] Bluetooth: hci3: command 0x0c1a tx timeout [ 938.808975][T10602] team0: Port device team_slave_0 added [ 939.055554][T10602] team0: Port device team_slave_1 added [ 939.478096][T10469] Bluetooth: hci0: command 0x0406 tx timeout [ 939.478251][ T3658] Bluetooth: hci5: command 0x0c1a tx timeout [ 939.565772][ T8248] Bluetooth: hci2: command 0x0419 tx timeout [ 939.565877][ T3648] Bluetooth: hci1: command 0x0406 tx timeout [ 940.517391][ T48] Bluetooth: hci3: command 0x0c1a tx timeout [ 940.720455][T10602] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 940.732299][T10602] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 940.844443][T10602] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 941.017693][T10602] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 941.076269][T10602] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 941.382323][T10602] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 941.838984][T10602] device hsr_slave_0 entered promiscuous mode [ 941.872609][T10602] device hsr_slave_1 entered promiscuous mode [ 941.918753][T10602] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 941.974336][T10602] Cannot create hsr debugfs directory [ 942.167987][ T3658] Bluetooth: hci2: command 0x0419 tx timeout [ 944.768007][T10776] REISERFS warning (device nullb0): sh-2021 reiserfs_fill_super: can not find reiserfs on nullb0 [ 944.851300][ T9727] hid-generic 0000:0000:0000.0001: unknown main item tag 0x1 [ 944.971199][ T9727] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 945.062726][ T9727] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 945.125782][ T9727] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 945.133270][ T9727] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 945.181874][ T9727] hid-generic 0000:0000:0000.0001: unknown main item tag 0x2 [ 945.205390][ T9727] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 945.251880][ T9727] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 945.304461][ T9727] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 945.358690][ T9727] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 945.416241][ T9727] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 945.473394][ T9727] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 945.551939][ T9727] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 945.606535][ T9727] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 945.613997][ T9727] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 945.661686][ T9727] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 945.693942][ T9727] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 945.719832][ T9727] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 945.748751][ T9727] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 945.781695][ T9727] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 945.847392][ T9727] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 945.888059][ T9727] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 945.918859][ T9727] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 945.947839][ T9727] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 945.978717][ T9727] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 946.010827][ T9727] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 946.049036][ T9727] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 946.079450][ T9727] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 946.108119][ T9727] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 946.143720][ T9727] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 946.170074][ T9727] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 946.203303][ T9727] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 946.233137][ T9727] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 946.274596][ T9727] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 946.315559][ T9727] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 946.373249][ T9727] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz0] on syz0 [ 948.324821][T10828] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 949.092424][T10828] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(7) [ 949.099001][T10828] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 949.252504][T10828] vhci_hcd vhci_hcd.0: Device attached [ 949.317724][ T9976] device hsr_slave_0 left promiscuous mode [ 949.386516][ T9976] device hsr_slave_1 left promiscuous mode [ 949.444163][ T5828] vhci_hcd: vhci_device speed not set [ 949.454439][ T9976] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 949.461901][ T9976] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 949.514225][ T9976] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 949.524487][ T5828] usb 13-1: new full-speed USB device number 2 using vhci_hcd [ 949.549140][ T9976] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 950.435440][ T9976] device bridge_slave_1 left promiscuous mode [ 950.454455][ T9976] bridge0: port 2(bridge_slave_1) entered disabled state [ 950.481243][T10831] vhci_hcd: connection reset by peer [ 950.486997][ T3801] vhci_hcd: stop threads [ 950.491275][ T3801] vhci_hcd: release socket [ 950.498841][ T9976] device bridge_slave_0 left promiscuous mode [ 950.506926][ T9976] bridge0: port 1(bridge_slave_0) entered disabled state [ 950.526594][ T3801] vhci_hcd: disconnect device [ 950.598046][ T9976] device veth1_macvtap left promiscuous mode [ 950.622328][ T9976] device veth0_macvtap left promiscuous mode [ 950.664417][ T9976] device veth1_vlan left promiscuous mode [ 950.694053][ T9976] device veth0_vlan left promiscuous mode [ 950.888392][ T3658] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 950.898777][ T3658] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 950.921852][ T3658] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 950.930109][ T3658] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 950.938347][ T3658] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 950.950762][ T3658] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 951.918725][ T9976] team0 (unregistering): Port device team_slave_1 removed [ 952.028054][ T9976] team0 (unregistering): Port device team_slave_0 removed [ 952.221951][ T9976] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 952.349299][ T9976] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 952.524633][T10860] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 952.563823][T10860] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 1th superblock [ 952.592925][T10860] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 952.623656][T10860] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 2th superblock [ 952.626913][T10861] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 952.783937][T10862] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(7) [ 952.790626][T10862] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 952.865506][T10862] vhci_hcd vhci_hcd.0: Device attached [ 952.986388][ T48] Bluetooth: hci4: command tx timeout [ 953.067272][ T5405] vhci_hcd: vhci_device speed not set [ 953.118656][T10863] vhci_hcd: connection closed [ 953.123359][ T46] vhci_hcd: stop threads [ 953.138413][ T46] vhci_hcd: release socket [ 953.144498][ T5405] usb 11-1: new full-speed USB device number 2 using vhci_hcd [ 953.170691][ T46] vhci_hcd: disconnect device [ 953.626558][ T9976] bond0 (unregistering): Released all slaves [ 954.674571][ T5828] vhci_hcd: vhci_device speed not set [ 954.693174][T10602] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 954.853005][T10602] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 954.890001][T10602] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 954.958320][T10602] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 955.064230][ T48] Bluetooth: hci4: command tx timeout [ 955.488199][ T9976] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 955.552310][T10602] 8021q: adding VLAN 0 to HW filter on device bond0 [ 955.638097][T10846] chnl_net:caif_netlink_parms(): no params data found [ 955.780940][ T9976] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 956.206380][ T9976] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 956.267432][T10883] syz.2.1566 (10883): drop_caches: 2 [ 956.293488][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 956.331935][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 956.496920][ T9976] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 956.557535][T10602] 8021q: adding VLAN 0 to HW filter on device team0 [ 956.655990][T10846] bridge0: port 1(bridge_slave_0) entered blocking state [ 956.663168][T10846] bridge0: port 1(bridge_slave_0) entered disabled state [ 956.705793][T10846] device bridge_slave_0 entered promiscuous mode [ 956.724465][ T4986] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 956.763783][ T4986] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 956.783471][ T4986] bridge0: port 1(bridge_slave_0) entered blocking state [ 956.790659][ T4986] bridge0: port 1(bridge_slave_0) entered forwarding state [ 956.823107][ T4986] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 956.850315][T10910] device syzkaller0 entered promiscuous mode [ 956.871747][ T4986] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 956.891000][ T4986] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 956.913574][ T4986] bridge0: port 2(bridge_slave_1) entered blocking state [ 956.920754][ T4986] bridge0: port 2(bridge_slave_1) entered forwarding state [ 956.937396][T10846] bridge0: port 2(bridge_slave_1) entered blocking state [ 956.950345][T10846] bridge0: port 2(bridge_slave_1) entered disabled state [ 956.971439][T10846] device bridge_slave_1 entered promiscuous mode [ 957.017237][T10914] device syzkaller0 left promiscuous mode [ 957.144286][ T48] Bluetooth: hci4: command tx timeout [ 957.881537][ T9914] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 957.891687][ T9914] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 957.922291][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 957.962986][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 958.007421][T10846] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 958.047109][T10846] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 958.235092][T10846] team0: Port device team_slave_0 added [ 958.264387][ T5405] vhci_hcd: vhci_device speed not set [ 958.277389][T10846] team0: Port device team_slave_1 added [ 958.299818][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 958.359403][T10602] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 958.424593][T10602] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 958.653702][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 958.692115][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 958.736746][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 958.775945][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 958.787001][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 958.804952][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 958.929022][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 959.029597][T10846] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 959.220074][T10846] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 959.247049][ T48] Bluetooth: hci4: command tx timeout [ 960.123054][T10846] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 960.167545][T10846] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 960.194122][T10846] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 960.290419][T10846] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 960.483939][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 960.513987][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 960.536215][T10602] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 960.649948][T10846] device hsr_slave_0 entered promiscuous mode [ 960.674878][T10846] device hsr_slave_1 entered promiscuous mode [ 960.739236][T10969] kAFS: unable to lookup cell '/' [ 963.295666][ T9914] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 963.320137][ T9914] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 964.122100][ T3801] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 964.141615][ T3801] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 964.193291][T10602] device veth0_vlan entered promiscuous mode [ 964.406990][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 964.416777][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 964.435045][T10602] device veth1_vlan entered promiscuous mode [ 965.353047][T11017] vivid-000: ================= START STATUS ================= [ 965.442490][T11017] vivid-000: Generate PTS: true [ 965.454199][T11017] vivid-000: Generate SCR: true [ 965.459129][T11017] tpg source WxH: 640x360 (Y'CbCr) [ 965.498760][T11017] tpg field: 1 [ 965.514234][T11017] tpg crop: 640x360@0x0 [ 965.543762][T11017] tpg compose: 640x360@0x0 [ 965.549227][T11017] tpg colorspace: 8 [ 965.553071][T11017] tpg transfer function: 0/0 [ 965.574192][T11017] tpg Y'CbCr encoding: 0/0 [ 965.578744][ T9914] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 965.603680][ T9914] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 965.620530][T11017] tpg quantization: 0/0 [ 965.638217][T11017] tpg RGB range: 0/2 [ 965.643384][T11017] vivid-000: ================== END STATUS ================== [ 965.655843][T10602] device veth0_macvtap entered promiscuous mode [ 965.696968][ T9914] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 965.736320][T10846] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 965.769569][T10602] device veth1_macvtap entered promiscuous mode [ 965.793746][ T9976] device hsr_slave_0 left promiscuous mode [ 965.834508][ T9976] device hsr_slave_1 left promiscuous mode [ 965.841884][ T9976] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 965.868020][ T9976] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 965.883907][ T9976] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 965.909816][ T9976] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 965.939236][ T9976] device bridge_slave_1 left promiscuous mode [ 965.969342][ T9976] bridge0: port 2(bridge_slave_1) entered disabled state [ 965.980687][ T9976] device bridge_slave_0 left promiscuous mode [ 965.990195][ T9976] bridge0: port 1(bridge_slave_0) entered disabled state [ 966.054705][ T9976] device veth1_macvtap left promiscuous mode [ 966.069034][ T9976] device veth0_macvtap left promiscuous mode [ 966.082084][ T9976] device veth1_vlan left promiscuous mode [ 966.098328][ T9976] device veth0_vlan left promiscuous mode [ 968.142786][ T48] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 968.165219][ T48] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 968.173814][ T48] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 968.183625][ T48] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 968.192957][ T48] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 968.200607][ T48] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 969.518236][ T9976] team0 (unregistering): Port device team_slave_1 removed [ 969.573126][ T9976] team0 (unregistering): Port device team_slave_0 removed [ 969.622004][ T9976] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 969.668907][ T9976] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 970.213169][ T9976] bond0 (unregistering): Released all slaves [ 970.264425][ T48] Bluetooth: hci1: command tx timeout [ 970.286228][T10846] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 970.301516][T10846] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 970.493878][T10907] device syz_tun left promiscuous mode [ 970.503760][T10907] bridge0: port 3(syz_tun) entered disabled state [ 970.567165][T10846] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 970.604736][T10602] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 970.621554][T10602] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 970.644193][T10602] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 970.714202][T10602] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 970.725986][T10602] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 970.736647][T10602] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 970.749235][T10602] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 971.863810][T11048] chnl_net:caif_netlink_parms(): no params data found [ 971.952185][ T3795] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 971.982529][ T3795] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 972.144374][ T3648] Bluetooth: Wrong link type (-71) [ 972.150281][ T3648] Bluetooth: hci5: link tx timeout [ 972.156932][ T3648] Bluetooth: hci5: killing stalled connection 10:aa:aa:aa:aa:aa [ 972.165280][ T3648] Bluetooth: hci5: link tx timeout [ 972.170579][ T3648] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 972.357274][ T3658] Bluetooth: hci1: command tx timeout [ 972.841621][T10602] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 972.874271][T10602] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 973.034109][T10602] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 973.044852][T10602] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 973.054925][T10602] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 973.065478][T10602] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 973.171966][T10602] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 973.895368][T10602] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 973.922275][T10602] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 973.960318][T10602] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 973.971507][T10602] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 973.988690][ T9914] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 974.000896][ T9914] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 974.064581][T11088] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1602'. [ 974.162448][T11048] bridge0: port 1(bridge_slave_0) entered blocking state [ 974.180540][T11048] bridge0: port 1(bridge_slave_0) entered disabled state [ 974.198308][T11048] device bridge_slave_0 entered promiscuous mode [ 974.233226][T11048] bridge0: port 2(bridge_slave_1) entered blocking state [ 974.249582][T11048] bridge0: port 2(bridge_slave_1) entered disabled state [ 974.263296][T11048] device bridge_slave_1 entered promiscuous mode [ 974.274959][ T3658] Bluetooth: hci5: command 0x0c1a tx timeout [ 974.383678][T11048] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 974.434490][ T3658] Bluetooth: hci1: command tx timeout [ 974.445640][T11048] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 974.537820][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 974.550123][T10846] 8021q: adding VLAN 0 to HW filter on device bond0 [ 974.570310][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 974.612444][T10846] 8021q: adding VLAN 0 to HW filter on device team0 [ 974.638666][ T3801] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 974.652471][ T3801] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 974.668282][ T3801] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 974.682814][T11048] team0: Port device team_slave_0 added [ 974.701633][ T3801] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 974.713919][ T3801] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 974.724121][ T3801] bridge0: port 1(bridge_slave_0) entered blocking state [ 974.731325][ T3801] bridge0: port 1(bridge_slave_0) entered forwarding state [ 974.747627][ T9914] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 974.767313][T11048] team0: Port device team_slave_1 added [ 974.794388][ T9914] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 974.929890][ T9976] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 974.959758][ T3801] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 974.969693][ T3801] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 974.985087][ T3801] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 974.994313][ T3801] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 975.002931][ T3801] bridge0: port 2(bridge_slave_1) entered blocking state [ 975.010093][ T3801] bridge0: port 2(bridge_slave_1) entered forwarding state [ 975.029640][ T3801] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 975.196969][ T9976] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 975.258819][ T3801] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 975.325904][T11048] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 976.104185][T11048] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 976.193763][T11048] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 976.229043][T11048] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 976.252185][T11048] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 976.340385][T11101] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1606'. [ 976.357194][T11048] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 976.383778][T11101] openvswitch: netlink: Flow key attr not present in new flow. [ 976.396811][ T3711] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 976.625358][ T3658] Bluetooth: hci1: command tx timeout [ 976.643701][ T3711] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 978.166146][ T3658] Bluetooth: Wrong link type (-71) [ 978.532979][T11112] loop2: detected capacity change from 0 to 512 [ 978.541350][T11112] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 978.594083][T11112] EXT4-fs error (device loop2): ext4_orphan_get:1396: inode #15: comm syz.2.1609: iget: bad i_size value: -67835469387268086 [ 978.610118][T11112] EXT4-fs error (device loop2): ext4_orphan_get:1401: comm syz.2.1609: couldn't read orphan inode 15 (err -117) [ 978.622899][T11112] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 978.631612][T11112] ext2 filesystem being mounted at /138/file0 supports timestamps until 2038 (0x7fffffff) [ 978.645951][T11112] EXT4-fs error (device loop2): ext4_add_entry:2484: inode #2: comm syz.2.1609: Directory hole found for htree leaf block 0 [ 978.688344][ T9976] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 979.255203][ T3711] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 979.274761][ T3711] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 979.339987][ T3711] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 979.387681][ T8432] EXT4-fs (loop2): unmounting filesystem. [ 979.417795][ T3711] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 979.436025][ T3711] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 979.900524][T11129] 9pnet_virtio: no channels available for device syz [ 980.202765][ T9976] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 980.256176][ T9914] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 980.284909][ T9914] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 980.347727][T10846] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 980.426912][T11048] device hsr_slave_0 entered promiscuous mode [ 980.449762][T11048] device hsr_slave_1 entered promiscuous mode [ 980.461029][T11048] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 980.476877][T11048] Cannot create hsr debugfs directory [ 982.787215][T10846] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 982.953841][ T3795] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 983.073834][ T3795] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 983.116781][ T48] Bluetooth: Wrong link type (-71) [ 983.271357][ T3795] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 983.509148][ T3795] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 983.867159][ T3783] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 983.887116][T11180] loop3: detected capacity change from 0 to 512 [ 983.904434][T11180] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 983.937335][T11180] EXT4-fs error (device loop3): ext4_orphan_get:1396: inode #15: comm syz.3.1621: iget: bad i_size value: -67835469387268086 [ 983.952603][T11180] EXT4-fs error (device loop3): ext4_orphan_get:1401: comm syz.3.1621: couldn't read orphan inode 15 (err -117) [ 983.954842][ T3783] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 983.967812][T11180] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 983.981036][T11180] ext2 filesystem being mounted at /53/file0 supports timestamps until 2038 (0x7fffffff) [ 984.015460][T11180] EXT4-fs error (device loop3): ext4_add_entry:2484: inode #2: comm syz.3.1621: Directory hole found for htree leaf block 0 [ 984.208852][ T3783] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 985.129800][ T3783] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 985.673423][T10053] EXT4-fs (loop3): unmounting filesystem. [ 985.733531][T10846] device veth0_vlan entered promiscuous mode [ 985.758010][T11048] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 985.783011][T10846] device veth1_vlan entered promiscuous mode [ 985.993317][T11048] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 986.008894][T11203] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1626'. [ 986.056313][T11048] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 986.191223][T11048] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 986.224901][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 986.243550][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 986.259277][T10846] device veth0_macvtap entered promiscuous mode [ 986.337357][ T9976] device hsr_slave_0 left promiscuous mode [ 986.350236][ T9976] device hsr_slave_1 left promiscuous mode [ 986.368063][ T9976] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 986.389729][ T9976] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 986.422743][ T9976] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 986.437838][ T9976] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 986.458953][ T9976] device bridge_slave_1 left promiscuous mode [ 986.478818][ T9976] bridge0: port 2(bridge_slave_1) entered disabled state [ 986.500771][ T9976] device bridge_slave_0 left promiscuous mode [ 986.517917][ T9976] bridge0: port 1(bridge_slave_0) entered disabled state [ 986.615857][ T9976] device veth1_macvtap left promiscuous mode [ 986.629073][ T9976] device veth0_macvtap left promiscuous mode [ 986.654687][ T9976] device veth1_vlan left promiscuous mode [ 986.675350][ T9976] device veth0_vlan left promiscuous mode [ 987.484273][ T3658] Bluetooth: Wrong link type (-71) [ 987.490074][ T3658] Bluetooth: hci5: link tx timeout [ 987.496142][ T3658] Bluetooth: hci5: killing stalled connection 10:aa:aa:aa:aa:aa [ 987.504080][ T3658] Bluetooth: hci5: link tx timeout [ 987.509588][ T3658] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 988.841065][T11245] loop2: detected capacity change from 0 to 512 [ 988.854851][T11245] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 989.074537][T11245] EXT4-fs error (device loop2): ext4_orphan_get:1396: inode #15: comm syz.2.1634: iget: bad i_size value: -67835469387268086 [ 989.088990][T11245] EXT4-fs error (device loop2): ext4_orphan_get:1401: comm syz.2.1634: couldn't read orphan inode 15 (err -117) [ 989.114661][T11245] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 989.123286][T11245] ext2 filesystem being mounted at /149/file0 supports timestamps until 2038 (0x7fffffff) [ 989.151649][T11245] EXT4-fs error (device loop2): ext4_add_entry:2484: inode #2: comm syz.2.1634: Directory hole found for htree leaf block 0 [ 990.090136][ T9976] team0 (unregistering): Port device team_slave_1 removed [ 990.206168][ T9976] team0 (unregistering): Port device team_slave_0 removed [ 990.281650][ T9976] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 990.407735][ T9976] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 991.471551][ T9976] bond0 (unregistering): Released all slaves [ 991.622274][T10846] device veth1_macvtap entered promiscuous mode [ 991.634641][ T8432] EXT4-fs (loop2): unmounting filesystem. [ 991.651080][ T2525] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 991.679384][ T2525] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 991.997274][T11048] 8021q: adding VLAN 0 to HW filter on device bond0 [ 992.091920][T11048] 8021q: adding VLAN 0 to HW filter on device team0 [ 992.280471][T11048] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 992.313603][T11048] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 992.341547][ T2525] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 992.364335][ T2525] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 992.379841][ T2525] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 992.391282][ T2525] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 992.413414][ T2525] bridge0: port 1(bridge_slave_0) entered blocking state [ 992.420662][ T2525] bridge0: port 1(bridge_slave_0) entered forwarding state [ 992.436763][ T2525] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 992.451350][ T2525] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 992.463531][ T2525] bridge0: port 2(bridge_slave_1) entered blocking state [ 992.470763][ T2525] bridge0: port 2(bridge_slave_1) entered forwarding state [ 992.488225][ T2525] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 992.499915][ T2525] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 992.513980][ T2525] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 992.530496][ T2525] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 992.540488][ T2525] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 992.549637][ T2525] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 992.558840][ T2525] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 992.588006][ T2525] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 992.605886][ T2525] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 992.624724][ T2525] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 992.640109][T10846] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 992.654674][T10846] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 992.676505][T10846] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 992.705045][T10846] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 992.726321][T10846] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 992.744200][T10846] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 992.762931][T10846] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 992.778985][ T2525] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 992.793393][ T2525] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 992.802286][ T2525] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 992.816597][ T2525] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 992.837703][ T1271] ieee802154 phy0 wpan0: encryption failed: -22 [ 992.854688][ T1271] ieee802154 phy1 wpan1: encryption failed: -22 [ 992.867558][ T2525] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 992.930928][T11275] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1639'. [ 992.941230][T10846] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 992.952662][T10846] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 993.006293][T10846] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 993.051921][T10846] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 993.082497][T10846] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 993.114080][T10846] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 993.133130][T10846] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 993.156275][ T3784] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 993.165801][ T3784] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 993.231806][T10846] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 993.245864][T10846] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 993.263027][T10846] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 993.273822][T10846] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 993.324390][ T4081] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 993.522124][ T3784] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 993.541184][ T3784] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 993.574158][ T4081] usb 5-1: Using ep0 maxpacket: 32 [ 993.594260][ T3783] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 993.663124][T11048] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 993.680018][ T4986] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 993.694591][ T4081] usb 5-1: config index 0 descriptor too short (expected 156, got 27) [ 993.698379][ T4986] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 993.710813][ T4081] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 993.731214][ T3783] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 993.731393][ T4081] usb 5-1: config 0 has no interfaces? [ 993.753809][ T3783] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 993.766260][ T4986] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 993.795469][ T4986] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 993.829334][ T4986] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 993.884681][ T3711] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 993.897511][ T3711] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 993.916701][ T3711] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 993.930718][ T3711] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 994.096421][T11048] device veth0_vlan entered promiscuous mode [ 994.130867][T11048] device veth1_vlan entered promiscuous mode [ 994.165817][ T4081] usb 5-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 994.291603][ T4081] usb 5-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 994.400101][ T4081] usb 5-1: Product: syz [ 994.453848][ T4081] usb 5-1: Manufacturer: syz [ 994.515863][ T4081] usb 5-1: SerialNumber: syz [ 994.665134][ T4081] usb 5-1: config 0 descriptor?? [ 994.905148][T11302] loop0: detected capacity change from 0 to 512 [ 994.922386][ T48] Bluetooth: hci3: command 0x0c1a tx timeout [ 994.930067][T11302] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 994.941436][T11302] EXT4-fs error (device loop0): ext4_orphan_get:1396: inode #15: comm syz.0.1646: iget: bad i_size value: -67835469387268086 [ 994.956486][T11302] EXT4-fs error (device loop0): ext4_orphan_get:1401: comm syz.0.1646: couldn't read orphan inode 15 (err -117) [ 994.970081][T11302] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 994.978741][T11302] ext2 filesystem being mounted at /1/file0 supports timestamps until 2038 (0x7fffffff) [ 994.990510][ T9976] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 994.999829][T11302] EXT4-fs error (device loop0): ext4_add_entry:2484: inode #2: comm syz.0.1646: Directory hole found for htree leaf block 0 [ 995.022722][ T9976] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 995.061058][ T4089] usb 5-1: USB disconnect, device number 4 [ 995.061693][T11048] device veth0_macvtap entered promiscuous mode [ 995.097598][T11300] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 995.107398][ T9976] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 995.122992][ T9976] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 995.145559][ T9976] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 995.485067][T11048] device veth1_macvtap entered promiscuous mode [ 995.567876][T11300] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(7) [ 995.574443][T11300] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 995.592436][T11300] vhci_hcd vhci_hcd.0: Device attached [ 995.621893][T11048] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 995.636296][T11048] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 995.649045][T11048] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 995.669246][T11048] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 995.683258][T11048] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 995.696127][T11048] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 995.739516][T11048] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 995.794420][ T5825] vhci_hcd: vhci_device speed not set [ 995.887854][ T5825] usb 13-1: new full-speed USB device number 3 using vhci_hcd [ 995.954285][T11048] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 996.043394][T11048] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 996.068467][ T9976] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 996.089197][ T9976] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 996.135767][ T9976] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 996.174706][T11048] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 996.209240][T11048] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 996.241695][T11048] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 996.278598][T11048] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 996.317845][T11048] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 996.363373][T11048] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 996.398019][T11048] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 996.438093][T11048] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 996.472739][T11048] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 996.503905][T11316] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1649'. [ 996.523502][ T3783] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 996.561641][ T3783] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 996.595527][T11048] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 996.636350][T11048] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 996.658864][T11048] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 996.673234][T11048] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 996.764289][T10846] EXT4-fs (loop0): unmounting filesystem. [ 996.934754][T11311] vhci_hcd: connection reset by peer [ 996.941297][ T4986] vhci_hcd: stop threads [ 996.946267][ T4986] vhci_hcd: release socket [ 996.974531][ T4986] vhci_hcd: disconnect device [ 996.983611][ T9976] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 997.013853][ T9976] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 997.083198][ T4986] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 997.155358][ T3783] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 997.172958][ T3783] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 997.219181][ T2525] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 998.288821][ T48] Bluetooth: hci3: unexpected event for opcode 0x0c6d [ 999.533478][T11345] MTD: Attempt to mount non-MTD device "/dev/nbd1" [ 999.541349][T11345] cramfs: wrong magic [ 1001.204228][ T5825] vhci_hcd: vhci_device speed not set [ 1002.032753][T11368] netlink: 'syz.4.1664': attribute type 7 has an invalid length. [ 1002.569255][ T48] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 1002.584266][ T48] Bluetooth: hci3: Injecting HCI hardware error event [ 1002.848410][ T48] Bluetooth: hci3: hardware error 0x00 [ 1004.312432][T11392] vivid-000: ================= START STATUS ================= [ 1004.320257][T11392] vivid-000: Generate PTS: true [ 1004.330825][T11392] vivid-000: Generate SCR: true [ 1005.236277][T11395] MTD: Attempt to mount non-MTD device "/dev/nbd2" [ 1005.243957][T11395] cramfs: wrong magic [ 1005.554411][ T48] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 1005.561571][T11392] tpg source WxH: 640x360 (Y'CbCr) [ 1005.566792][T11392] tpg field: 1 [ 1005.570178][T11392] tpg crop: 640x360@0x0 [ 1005.724294][T11392] tpg compose: 640x360@0x0 [ 1005.728792][T11392] tpg colorspace: 8 [ 1005.732611][T11392] tpg transfer function: 0/0 [ 1005.768669][T11392] tpg Y'CbCr encoding: 0/0 [ 1005.824143][T11392] tpg quantization: 0/0 [ 1006.036979][T11392] tpg RGB range: 0/2 [ 1006.066501][T11392] vivid-000: ================== END STATUS ================== [ 1006.938355][T11405] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1007.138039][T11413] kAFS: unable to lookup cell '/' [ 1008.335124][T11422] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1678'. [ 1008.403754][T11422] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1678'. [ 1010.587950][T11438] vivid-000: ================= START STATUS ================= [ 1010.608567][T11438] vivid-000: Generate PTS: true [ 1010.613497][T11438] vivid-000: Generate SCR: true [ 1010.615165][ T3658] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1010.619314][T11438] tpg source WxH: 640x360 (Y'CbCr) [ 1010.631390][T11438] tpg field: 1 [ 1010.634356][ T3658] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1010.635341][T11438] tpg crop: 640x360@0x0 [ 1010.661532][T11438] tpg compose: 640x360@0x0 [ 1010.711886][T11438] tpg colorspace: 8 [ 1010.725613][ T3658] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1010.733784][ T3648] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1010.743501][ T3648] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1010.751916][ T3658] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1010.754746][T11438] tpg transfer function: 0/0 [ 1010.784148][T11438] tpg Y'CbCr encoding: 0/0 [ 1010.788617][T11438] tpg quantization: 0/0 [ 1010.792791][T11438] tpg RGB range: 0/2 [ 1010.844179][T11438] vivid-000: ================== END STATUS ================== [ 1010.964062][T11451] kAFS: unable to lookup cell '/' [ 1012.360619][ T3784] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1013.024127][ T48] Bluetooth: hci0: command tx timeout [ 1013.124887][ T3784] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1013.302256][ T3784] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1013.459312][ T3784] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1013.709979][ T4021] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 1014.107385][ T4021] usb 3-1: New USB device found, idVendor=05ac, idProduct=0290, bcdDevice=dc.1b [ 1015.902297][ T48] Bluetooth: hci0: command tx timeout [ 1015.909048][ T4021] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1015.933025][ T4021] usb 3-1: config 0 descriptor?? [ 1017.084172][ T4021] usb 3-1: can't set config #0, error -71 [ 1017.092096][ T4021] usb 3-1: USB disconnect, device number 5 [ 1017.245363][T11435] chnl_net:caif_netlink_parms(): no params data found [ 1017.365727][T11498] kAFS: unable to lookup cell '/' [ 1018.073375][ T48] Bluetooth: hci0: command tx timeout [ 1019.833630][T11435] bridge0: port 1(bridge_slave_0) entered blocking state [ 1019.851314][T11435] bridge0: port 1(bridge_slave_0) entered disabled state [ 1019.904141][T11435] device bridge_slave_0 entered promiscuous mode [ 1020.105350][ T48] Bluetooth: hci0: command tx timeout [ 1020.506354][T11435] bridge0: port 2(bridge_slave_1) entered blocking state [ 1020.513530][T11435] bridge0: port 2(bridge_slave_1) entered disabled state [ 1020.544972][T11435] device bridge_slave_1 entered promiscuous mode [ 1020.641492][T11538] kAFS: unable to lookup cell '/' [ 1020.754414][ T9727] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 1023.046649][T11435] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1023.134099][ T9727] usb 5-1: device descriptor read/all, error -71 [ 1023.608202][T11435] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1023.758129][ T48] Bluetooth: hci1: unexpected event 0x13 length: 0 < 1 [ 1024.131658][T11435] team0: Port device team_slave_0 added [ 1024.212936][T11435] team0: Port device team_slave_1 added [ 1025.418529][T11583] ADFS-fs (nullb0): error: can't find an ADFS filesystem on dev nullb0. [ 1025.435917][T11435] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1025.445692][T11435] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1025.475488][T11435] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1025.499729][T11435] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1025.508442][T11435] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1025.541465][T11585] kAFS: unable to lookup cell '/' [ 1025.563744][T11435] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1026.364109][ T3784] device hsr_slave_0 left promiscuous mode [ 1026.383619][ T3784] device hsr_slave_1 left promiscuous mode [ 1026.414585][ T3784] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1026.432535][ T3784] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1026.455156][T11575] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1026.461166][T11575] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 1026.467224][T11575] Bluetooth: hci5: Suspend notifier action (1) failed: -4 [ 1026.474405][T11575] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1026.480323][T11575] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 1026.486307][T11575] Bluetooth: hci2: Suspend notifier action (1) failed: -4 [ 1026.493516][T11575] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1026.499455][T11575] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 1026.505498][T11575] Bluetooth: hci1: Suspend notifier action (1) failed: -4 [ 1026.512644][T11575] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1026.518687][T11575] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 1026.524646][T11575] Bluetooth: hci0: Suspend notifier action (1) failed: -4 [ 1026.780741][ T3784] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1026.832462][ T3784] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1027.394408][ T3784] device bridge_slave_1 left promiscuous mode [ 1027.405638][ T3784] bridge0: port 2(bridge_slave_1) entered disabled state [ 1027.433413][ T3784] device bridge_slave_0 left promiscuous mode [ 1027.456731][ T3784] bridge0: port 1(bridge_slave_0) entered disabled state [ 1027.769641][ T3784] device veth1_macvtap left promiscuous mode [ 1027.798925][ T3784] device veth0_macvtap left promiscuous mode [ 1027.840743][ T3784] device veth1_vlan left promiscuous mode [ 1027.878591][ T3784] device veth0_vlan left promiscuous mode [ 1028.560017][ T3658] Bluetooth: hci5: command 0x0c1a tx timeout [ 1028.584273][ T3658] Bluetooth: hci0: command 0x0c1a tx timeout [ 1028.590433][ T3658] Bluetooth: hci1: command 0x0c1a tx timeout [ 1028.596556][ T48] Bluetooth: hci2: command 0x0419 tx timeout [ 1029.224272][ T7] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 1029.594259][ T7] usb 3-1: New USB device found, idVendor=05ac, idProduct=0290, bcdDevice=dc.1b [ 1029.614469][ T7] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1029.632634][ T7] usb 3-1: config 0 descriptor?? [ 1029.837408][ T7] input: bcm5974 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input19 [ 1029.949835][ T3784] team0 (unregistering): Port device team_slave_1 removed [ 1030.585568][ T3658] Bluetooth: hci5: command 0x0c1a tx timeout [ 1030.616786][ T4021] usb 3-1: USB disconnect, device number 6 [ 1030.670587][ T3658] Bluetooth: hci1: command 0x0c1a tx timeout [ 1030.677095][ T3648] Bluetooth: hci2: command 0x0419 tx timeout [ 1030.677103][ T48] Bluetooth: hci0: command 0x0c1a tx timeout [ 1030.713351][ T3784] team0 (unregistering): Port device team_slave_0 removed [ 1030.762627][ T3784] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1030.808923][ T3784] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1031.716106][ T3784] bond0 (unregistering): Released all slaves [ 1032.081099][T11435] device hsr_slave_0 entered promiscuous mode [ 1032.088406][T11435] device hsr_slave_1 entered promiscuous mode [ 1032.238027][T11626] tipc: Started in network mode [ 1032.243154][T11626] tipc: Node identity 080211, cluster identity 4711 [ 1032.254974][T11626] tipc: Enabled bearer , priority 10 [ 1032.318350][T11647] kAFS: unable to lookup cell '/' [ 1033.218947][ T3711] tipc: Resetting bearer [ 1034.315145][ T4604] tipc: Node number set to 134353152 [ 1034.347097][T11660] autofs4:pid:11660:autofs_fill_super: called with bogus options [ 1034.590167][T11660] ALSA: mixer_oss: invalid OSS volume 'DIGIT ' [ 1038.183589][T11704] device macsec0 entered promiscuous mode [ 1039.444602][T11435] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1039.510294][T11435] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1039.556402][T11435] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1039.882448][T11730] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1753'. [ 1039.919067][T11725] device bridge_slave_1 left promiscuous mode [ 1039.930343][T11725] bridge0: port 2(bridge_slave_1) entered disabled state [ 1039.941903][T11725] bridge1: port 1(bridge_slave_1) entered blocking state [ 1039.950387][T11725] bridge1: port 1(bridge_slave_1) entered disabled state [ 1039.959231][T11725] device bridge_slave_1 entered promiscuous mode [ 1039.968390][T11435] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1040.191889][T11435] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1040.933276][T10312] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1040.950078][T10312] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1041.000098][T11435] 8021q: adding VLAN 0 to HW filter on device team0 [ 1041.141445][ T9914] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1041.182143][ T9914] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1041.215152][ T9914] bridge0: port 1(bridge_slave_0) entered blocking state [ 1041.222324][ T9914] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1041.352451][ T9914] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1041.409384][ T9914] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1041.458300][ T9914] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1041.496850][ T9914] bridge0: port 2(bridge_slave_1) entered blocking state [ 1041.504105][ T9914] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1041.524046][ T9914] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1041.545304][ T9914] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1042.431367][ T5828] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 1042.480676][ T3783] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1042.544455][ T3783] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1042.578231][ T3783] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1042.597944][T11763] loop4: detected capacity change from 0 to 512 [ 1042.606569][T11763] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 1042.720736][T11435] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1042.753445][T11435] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1042.771964][T11763] EXT4-fs error (device loop4): ext4_orphan_get:1396: inode #15: comm syz.4.1759: iget: bad i_size value: -67835469387268086 [ 1042.796983][T11763] EXT4-fs error (device loop4): ext4_orphan_get:1401: comm syz.4.1759: couldn't read orphan inode 15 (err -117) [ 1042.810825][ T5828] usb 4-1: New USB device found, idVendor=05ac, idProduct=0290, bcdDevice=dc.1b [ 1042.821258][T11763] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 1042.830449][T11763] ext2 filesystem being mounted at /32/file0 supports timestamps until 2038 (0x7fffffff) [ 1042.843584][T11763] EXT4-fs error (device loop4): ext4_add_entry:2484: inode #2: comm syz.4.1759: Directory hole found for htree leaf block 0 [ 1042.894962][T10312] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1043.037041][T10312] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1043.208774][T10312] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1043.448125][T10312] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1043.498826][T10312] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1043.530296][T10312] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1043.571761][T10312] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1043.627821][ T5828] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1043.638942][ T5828] usb 4-1: config 0 descriptor?? [ 1043.688972][ T5828] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input20 [ 1043.793847][T10602] EXT4-fs (loop4): unmounting filesystem. [ 1043.939895][ T5828] usb 4-1: USB disconnect, device number 3 [ 1044.191740][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1044.214601][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1044.238348][T11435] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1044.288809][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1044.289528][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1044.335447][T10312] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1044.365086][T10312] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1044.387228][T11435] device veth0_vlan entered promiscuous mode [ 1044.531887][T10312] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1044.559873][T11791] 9pnet_virtio: no channels available for device syz [ 1044.567644][T10312] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1045.449369][T11435] device veth1_vlan entered promiscuous mode [ 1045.511671][T10312] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1045.737644][T11815] hub 9-0:1.0: USB hub found [ 1045.826787][T11815] hub 9-0:1.0: 8 ports detected [ 1045.879774][ T9914] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1046.058676][T11825] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1768'. [ 1047.117464][ T9914] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1047.196254][T11435] device veth0_macvtap entered promiscuous mode [ 1047.241845][ T9914] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1047.466461][T11435] device veth1_macvtap entered promiscuous mode [ 1048.314402][T11435] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1048.326604][T11435] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1048.337027][T11435] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1048.348572][T11435] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1048.358806][T11435] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1048.374131][T11435] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1048.388084][T11435] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1048.398832][T11435] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1048.416093][T11435] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1048.436840][T11435] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1048.458437][T11435] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1048.504636][T11435] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1048.540281][T11435] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1048.557851][T11847] loop4: detected capacity change from 0 to 512 [ 1048.571648][T11847] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 1048.591443][T11435] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1048.615474][T11847] EXT4-fs error (device loop4): ext4_orphan_get:1396: inode #15: comm syz.4.1772: iget: bad i_size value: -67835469387268086 [ 1048.629247][T11847] EXT4-fs error (device loop4): ext4_orphan_get:1401: comm syz.4.1772: couldn't read orphan inode 15 (err -117) [ 1048.641823][T11847] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 1048.650915][T11847] ext2 filesystem being mounted at /34/file0 supports timestamps until 2038 (0x7fffffff) [ 1048.664240][T11847] EXT4-fs error (device loop4): ext4_add_entry:2484: inode #2: comm syz.4.1772: Directory hole found for htree leaf block 0 [ 1048.779254][T11435] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1048.904136][T11435] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1048.945334][T11435] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1048.994715][T11435] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1049.019936][ T4986] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1049.059371][ T4986] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1049.354206][ T4604] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 1049.434924][ T4986] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1049.464935][ T4986] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1049.491875][T11435] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1049.520344][T11435] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1049.542097][T11435] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1049.614092][T11435] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1049.614270][ T4604] usb 2-1: Using ep0 maxpacket: 8 [ 1049.693943][T10602] EXT4-fs (loop4): unmounting filesystem. [ 1049.820000][ T4604] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 1049.837786][ T4604] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1049.858389][ T3801] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1049.871254][ T4604] usb 2-1: config 168 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 1049.893074][ T3801] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1049.937756][ T4986] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1049.976341][ T33] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1049.994351][ T4604] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 1050.001944][ T4604] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1050.030083][ T33] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1050.053741][ T3801] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1050.053900][ T4604] usb 2-1: config 168 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 1050.194393][ T4604] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 1050.214433][ T4604] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1050.246481][ T4604] usb 2-1: config 168 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 1050.564263][ T4604] usb 2-1: string descriptor 0 read error: -22 [ 1050.572925][ T4604] usb 2-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1050.603240][ T4604] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1050.695909][ T4604] adutux 2-1:168.0: interrupt endpoints not found [ 1050.916158][ T4604] usb 2-1: USB disconnect, device number 3 [ 1051.224228][ T48] Bluetooth: hci2: command 0x0419 tx timeout [ 1051.365453][T11905] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1051.415892][T11905] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(7) [ 1051.422480][T11905] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 1051.453440][T11905] vhci_hcd vhci_hcd.0: Device attached [ 1051.654355][ T4604] vhci_hcd: vhci_device speed not set [ 1051.739934][ T4604] usb 13-1: new full-speed USB device number 4 using vhci_hcd [ 1051.781931][T11911] vhci_hcd: connection reset by peer [ 1051.795408][ T33] vhci_hcd: stop threads [ 1051.801476][ T33] vhci_hcd: release socket [ 1051.831014][ T33] vhci_hcd: disconnect device [ 1052.943118][T11928] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1785'. [ 1052.999373][T11934] 9pnet_fd: Insufficient options for proto=fd [ 1054.265580][ T1271] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.272023][ T1271] ieee802154 phy1 wpan1: encryption failed: -22 [ 1055.017516][T11967] netlink: 134672 bytes leftover after parsing attributes in process `syz.1.1796'. [ 1055.046593][T11967] netlink: zone id is out of range [ 1055.087063][T11967] netlink: zone id is out of range [ 1055.122024][T11967] netlink: zone id is out of range [ 1055.134139][T11967] netlink: zone id is out of range [ 1055.141402][T11967] netlink: get zone limit has 4 unknown bytes [ 1055.366507][T11928] infiniband syz0: set active [ 1055.393002][T11928] infiniband syz0: added bond_slave_0 [ 1055.429623][T11928] rdma_rxe: unable to create cq [ 1055.436177][T11978] vivid-000: ================= START STATUS ================= [ 1055.475242][T11928] infiniband syz0: Couldn't create ib_mad CQ [ 1055.494378][T11978] vivid-000: Generate PTS: true [ 1055.514590][T11928] infiniband syz0: Couldn't open port 1 [ 1055.527341][T11978] vivid-000: Generate SCR: true [ 1055.541959][T11978] tpg source WxH: 640x360 (Y'CbCr) [ 1055.567852][T11978] tpg field: 1 [ 1055.581545][T11978] tpg crop: 640x360@0x0 [ 1055.599545][T11928] RDS/IB: syz0: added [ 1055.603666][T11978] tpg compose: 640x360@0x0 [ 1055.609238][T11928] smc: adding ib device syz0 with port count 1 [ 1055.616271][T11978] tpg colorspace: 8 [ 1055.620539][T11978] tpg transfer function: 0/0 [ 1055.626583][T11928] smc: ib device syz0 port 1 has pnetid [ 1055.632626][T11978] tpg Y'CbCr encoding: 0/0 [ 1055.644935][T11978] tpg quantization: 0/0 [ 1055.653477][T11978] tpg RGB range: 0/2 [ 1055.662445][T11978] vivid-000: ================== END STATUS ================== [ 1056.714094][ T26] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 1056.738765][ T48] Bluetooth: hci0: unexpected event for opcode 0x0c6d [ 1056.914202][ T4604] vhci_hcd: vhci_device speed not set [ 1057.124367][ T26] usb 2-1: New USB device found, idVendor=05ac, idProduct=0290, bcdDevice=dc.1b [ 1058.119899][ T26] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1058.189753][ T26] usb 2-1: config 0 descriptor?? [ 1058.247519][ T26] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input21 [ 1058.392310][T12008] hub 9-0:1.0: USB hub found [ 1058.424454][T12008] hub 9-0:1.0: 8 ports detected [ 1058.551713][ T4081] usb 2-1: USB disconnect, device number 4 [ 1059.461508][T12024] bridge0: port 2(syz_tun) entered blocking state [ 1059.565234][T12024] bridge0: port 2(syz_tun) entered disabled state [ 1059.619394][T12024] device syz_tun entered promiscuous mode [ 1059.667533][T12024] bridge0: port 2(syz_tun) entered blocking state [ 1059.674918][T12024] bridge0: port 2(syz_tun) entered forwarding state [ 1060.895939][ T48] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 1060.898350][T12034] vivid-000: ================= START STATUS ================= [ 1060.905420][ T48] Bluetooth: hci0: Injecting HCI hardware error event [ 1060.921823][ T48] Bluetooth: hci0: hardware error 0x00 [ 1060.990110][T12034] vivid-000: Generate PTS: true [ 1061.017357][T12034] vivid-000: Generate SCR: true [ 1061.063332][T12034] tpg source WxH: 640x360 (Y'CbCr) [ 1061.996470][T12034] tpg field: 1 [ 1061.999927][T12034] tpg crop: 640x360@0x0 [ 1062.104151][T12034] tpg compose: 640x360@0x0 [ 1062.108614][T12034] tpg colorspace: 8 [ 1062.149370][T12034] tpg transfer function: 0/0 [ 1062.154379][T12034] tpg Y'CbCr encoding: 0/0 [ 1062.169633][T12034] tpg quantization: 0/0 [ 1062.179768][T12034] tpg RGB range: 0/2 [ 1062.191172][T12034] vivid-000: ================== END STATUS ================== [ 1064.205086][T12056] MTD: Attempt to mount non-MTD device "/dev/nbd1" [ 1064.212361][T12056] cramfs: wrong magic [ 1064.659689][ T48] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 1065.999647][ T4604] usb 5-1: new full-speed USB device number 7 using dummy_hcd [ 1066.826902][ T4604] usb 5-1: not running at top speed; connect to a high speed hub [ 1066.924430][ T4604] usb 5-1: config 95 has an invalid interface number: 1 but max is 0 [ 1066.943878][ T4604] usb 5-1: config 95 has no interface number 0 [ 1066.960855][ T4604] usb 5-1: config 95 interface 1 has no altsetting 0 [ 1067.180327][T12078] ADFS-fs (nullb0): error: can't find an ADFS filesystem on dev nullb0. [ 1067.225673][ T4604] usb 5-1: string descriptor 0 read error: -22 [ 1067.235094][ T4604] usb 5-1: New USB device found, idVendor=0763, idProduct=2030, bcdDevice=79.79 [ 1067.254337][ T4604] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1067.629203][ T4604] usb 5-1: USB disconnect, device number 7 [ 1069.163868][T12089] vivid-000: ================= START STATUS ================= [ 1069.189091][T12089] vivid-000: Generate PTS: true [ 1069.203091][T12089] vivid-000: Generate SCR: true [ 1069.208472][T12089] tpg source WxH: 640x360 (Y'CbCr) [ 1069.222151][T12089] tpg field: 1 [ 1069.232626][T12089] tpg crop: 640x360@0x0 [ 1069.249861][T12089] tpg compose: 640x360@0x0 [ 1069.257318][T12089] tpg colorspace: 8 [ 1069.305492][T12089] tpg transfer function: 0/0 [ 1069.347769][T12089] tpg Y'CbCr encoding: 0/0 [ 1069.365721][T12089] tpg quantization: 0/0 [ 1069.389042][T12089] tpg RGB range: 0/2 [ 1069.437653][T12096] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1824'. [ 1069.447763][T12096] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1824'. [ 1069.457316][T12089] vivid-000: ================== END STATUS ================== [ 1069.544139][ T48] Bluetooth: hci1: command 0x0c1a tx timeout [ 1071.414366][T12109] MTD: Attempt to mount non-MTD device "/dev/nbd1" [ 1071.421129][T12109] cramfs: wrong magic [ 1071.897143][ T48] Bluetooth: hci1: command 0x0c1a tx timeout [ 1072.698719][ T27] audit: type=1326 audit(1726577750.301:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12099 comm="syz.2.1828" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7fa857def9 code=0x7fc00000 [ 1072.750006][ T27] audit: type=1326 audit(1726577750.331:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12099 comm="syz.2.1828" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f7fa857def9 code=0x7fc00000 [ 1072.803195][T12094] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1072.809349][T12094] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 1072.815718][T12094] Bluetooth: hci5: Suspend notifier action (1) failed: -4 [ 1072.823000][T12094] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1072.829209][T12094] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 1072.835225][T12094] Bluetooth: hci2: Suspend notifier action (1) failed: -4 [ 1072.842461][T12094] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1072.848418][T12094] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 1072.854400][T12094] Bluetooth: hci1: Suspend notifier action (1) failed: -4 [ 1072.903891][ T27] audit: type=1326 audit(1726577750.501:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12099 comm="syz.2.1828" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7fa857def9 code=0x7fc00000 [ 1072.998436][ T27] audit: type=1326 audit(1726577750.531:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12099 comm="syz.2.1828" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7fa857def9 code=0x7fc00000 [ 1073.051763][ T27] audit: type=1326 audit(1726577750.531:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12099 comm="syz.2.1828" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7fa857def9 code=0x7fc00000 [ 1073.075283][ T27] audit: type=1326 audit(1726577750.531:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12099 comm="syz.2.1828" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7fa857def9 code=0x7fc00000 [ 1073.099342][ T27] audit: type=1326 audit(1726577750.531:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12099 comm="syz.2.1828" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7fa857def9 code=0x7fc00000 [ 1073.224641][ T27] audit: type=1326 audit(1726577750.531:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12099 comm="syz.2.1828" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7fa857def9 code=0x7fc00000 [ 1073.349845][ T27] audit: type=1326 audit(1726577750.531:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12099 comm="syz.2.1828" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7fa857def9 code=0x7fc00000 [ 1074.306916][T12137] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1074.386407][ T27] audit: type=1326 audit(1726577750.531:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12099 comm="syz.2.1828" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7fa857def9 code=0x7fc00000 [ 1074.408978][T12137] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(7) [ 1074.415533][T12137] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 1074.614170][T12137] vhci_hcd vhci_hcd.0: Device attached [ 1074.655583][T12151] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 1074.706541][T12151] CIFS: Unable to determine destination address [ 1074.744751][ T48] Bluetooth: hci5: command 0x0c1a tx timeout [ 1074.819184][T12151] device batadv_slave_1 entered promiscuous mode [ 1074.834222][ T4081] vhci_hcd: vhci_device speed not set [ 1074.904141][ T48] Bluetooth: hci2: command 0x0419 tx timeout [ 1074.914390][ T48] Bluetooth: hci1: command 0x0c1a tx timeout [ 1074.938459][T12141] vhci_hcd: connection closed [ 1074.939321][ T4081] usb 9-1: new full-speed USB device number 3 using vhci_hcd [ 1074.962190][T12142] vhci_hcd: sendmsg failed!, ret=-32 for 48 [ 1075.005702][T10312] vhci_hcd: stop threads [ 1075.010100][T10312] vhci_hcd: release socket [ 1075.063419][T10312] vhci_hcd: disconnect device [ 1075.371012][T12148] device batadv_slave_1 left promiscuous mode [ 1078.615767][T12165] MTD: Attempt to mount non-MTD device "/dev/nbd0" [ 1078.930417][T12165] cramfs: wrong magic [ 1078.948632][ T48] Bluetooth: hci5: command 0x0c1a tx timeout [ 1078.954811][ T48] Bluetooth: hci1: command 0x0c1a tx timeout [ 1078.960845][ T48] Bluetooth: hci2: command 0x0419 tx timeout [ 1080.864093][ T4081] vhci_hcd: vhci_device speed not set [ 1082.684151][ T27] kauditd_printk_skb: 59 callbacks suppressed [ 1082.684168][ T27] audit: type=1326 audit(1726577760.291:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12183 comm="syz.0.1848" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa93cf7def9 code=0x7fc00000 [ 1082.838558][ T27] audit: type=1326 audit(1726577760.351:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12183 comm="syz.0.1848" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7fa93cf7def9 code=0x7fc00000 [ 1082.840218][ T27] audit: type=1326 audit(1726577760.441:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12183 comm="syz.0.1848" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa93cf7def9 code=0x7fc00000 [ 1082.840437][ T27] audit: type=1326 audit(1726577760.441:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12183 comm="syz.0.1848" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa93cf7def9 code=0x7fc00000 [ 1082.840709][ T27] audit: type=1326 audit(1726577760.441:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12183 comm="syz.0.1848" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa93cf7def9 code=0x7fc00000 [ 1082.840905][ T27] audit: type=1326 audit(1726577760.441:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12183 comm="syz.0.1848" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa93cf7def9 code=0x7fc00000 [ 1083.056149][ C1] vkms_vblank_simulate: vblank timer overrun [ 1086.229861][T12207] MTD: Attempt to mount non-MTD device "/dev/nbd4" [ 1086.230215][T12207] cramfs: wrong magic [ 1091.925580][T12243] loop1: detected capacity change from 0 to 764 [ 1092.344171][ T3648] Bluetooth: hci1: command 0x0c1a tx timeout [ 1097.197577][T12279] loop4: detected capacity change from 0 to 764 [ 1097.342088][T12282] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1097.350335][T12282] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 1097.370102][T12282] Bluetooth: hci5: Suspend notifier action (1) failed: -4 [ 1097.397527][T12282] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1097.412636][T12282] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 1097.432282][T12282] Bluetooth: hci2: Suspend notifier action (1) failed: -4 [ 1097.470194][T12282] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1097.489871][T12282] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 1097.544531][T12282] Bluetooth: hci1: Suspend notifier action (1) failed: -4 [ 1099.129743][ T3686] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 1099.384327][ T3648] Bluetooth: hci5: command 0x0c1a tx timeout [ 1099.464339][ T3648] Bluetooth: hci2: command 0x0419 tx timeout [ 1099.544069][ T3648] Bluetooth: hci1: command 0x0c1a tx timeout [ 1100.171082][T12307] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1100.238882][ T26] wlan1: authenticate with 08:02:11:00:00:00 [ 1100.251652][ T26] wlan1: send auth to 08:02:11:00:00:00 (try 1/3) [ 1100.367628][ T2525] wlan1: authenticated [ 1100.367783][T12311] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1100.372699][ T2525] ------------[ cut here ]------------ [ 1100.387391][ T2525] WARNING: CPU: 1 PID: 2525 at net/wireless/core.h:246 cfg80211_rx_mlme_mgmt+0x323/0x560 [ 1100.397276][ T2525] Modules linked in: [ 1100.398941][T12317] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1889'. [ 1100.401184][ T2525] CPU: 1 PID: 2525 Comm: kworker/u4:5 Not tainted 6.1.110-syzkaller #0 [ 1100.418462][ T2525] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 1100.428651][ T2525] Workqueue: phy49 ieee80211_iface_work [ 1100.434354][ T2525] RIP: 0010:cfg80211_rx_mlme_mgmt+0x323/0x560 [ 1100.440501][ T2525] Code: e8 e2 0d 7a f7 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 d2 0d 7a f7 0f 0b eb ec e8 c9 0d 7a f7 0f 0b e9 40 fe ff ff e8 bd 0d 7a f7 <0f> 0b e9 8f fd ff ff e8 b1 0d 7a f7 0f 0b e9 9b fe ff ff e8 a5 0d [ 1100.460241][ T2525] RSP: 0018:ffffc9000a727708 EFLAGS: 00010283 [ 1100.466419][ T2525] RAX: ffffffff8a10a183 RBX: dffffc0000000000 RCX: 0000000000100000 [ 1100.474489][ T2525] RDX: ffffc9001451c000 RSI: 0000000000001425 RDI: 0000000000001426 [ 1100.478775][T12311] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1100.482522][ T2525] RBP: 0000000000000000 R08: ffffffff8a109f0c R09: fffff520014e4ed1 [ 1100.482559][ T2525] R10: 0000000000000000 R11: dffffc0000000001 R12: ffff888018c00000 [ 1100.508458][ T2525] R13: ffff888018c00c90 R14: 000000000000001e R15: ffff88805bf25400 [ 1100.516501][ T2525] FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 1100.525515][ T2525] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1100.532155][ T2525] CR2: 000055558a574808 CR3: 0000000053d4e000 CR4: 00000000003506e0 [ 1100.540213][ T2525] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1100.548329][ T2525] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1100.556366][ T2525] Call Trace: [ 1100.559675][ T2525] [ 1100.562630][ T2525] ? __warn+0x15a/0x520 [ 1100.566849][ T2525] ? cfg80211_rx_mlme_mgmt+0x323/0x560 [ 1100.572345][ T2525] ? report_bug+0x2af/0x500 [ 1100.576923][ T2525] ? cfg80211_rx_mlme_mgmt+0x323/0x560 [ 1100.582434][ T2525] ? handle_bug+0x3d/0x70 [ 1100.586871][ T2525] ? exc_invalid_op+0x16/0x40 [ 1100.591584][ T2525] ? asm_exc_invalid_op+0x16/0x20 [ 1100.596743][ T2525] ? cfg80211_rx_mlme_mgmt+0xac/0x560 [ 1100.602168][ T2525] ? cfg80211_rx_mlme_mgmt+0x323/0x560 [ 1100.607733][ T2525] ? cfg80211_rx_mlme_mgmt+0x323/0x560 [ 1100.613239][ T2525] ? cfg80211_rx_mlme_mgmt+0x323/0x560 [ 1100.616747][T12324] loop4: detected capacity change from 0 to 764 [ 1100.618773][ T2525] ieee80211_sta_rx_queued_mgmt+0x20d4/0x4100 [ 1100.631196][ T2525] ? reacquire_held_locks+0x660/0x660 [ 1100.631978][T12325] 9pnet_fd: Insufficient options for proto=fd [ 1100.636657][ T2525] ? reacquire_held_locks+0x660/0x660 [ 1100.636701][ T2525] ? reacquire_held_locks+0x660/0x660 [ 1100.636746][ T2525] ? ieee80211_rx_mgmt_beacon+0x3180/0x3180 [ 1100.636812][ T2525] ? validate_chain+0x112/0x5950 [ 1100.636853][ T2525] ? mark_lock+0x9a/0x340 [ 1100.664806][ T2525] ? __lock_acquire+0x125b/0x1f80 [ 1100.664895][ T2525] ? mark_lock+0x9a/0x340 [ 1100.664960][ T2525] ? __lock_acquire+0x125b/0x1f80 [ 1100.684240][ T2525] ? mark_lock+0x9a/0x340 [ 1100.688687][ T2525] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 1100.694867][ T2525] ? print_irqtrace_events+0x210/0x210 [ 1100.700459][ T2525] ? do_raw_spin_unlock+0x137/0x8a0 [ 1100.705799][ T2525] ? kcov_remote_start+0x4ae/0x7c0 [ 1100.710982][ T2525] ? kcov_remote_start+0x8c/0x7c0 [ 1100.716113][ T2525] ieee80211_iface_work+0x737/0xce0 [ 1100.721354][ T2525] ? process_one_work+0x7a9/0x11d0 [ 1100.726538][ T2525] process_one_work+0x8a9/0x11d0 [ 1100.731500][ T2525] ? worker_detach_from_pool+0x260/0x260 [ 1100.737190][ T2525] ? _raw_spin_lock_irqsave+0x120/0x120 [ 1100.742745][ T2525] ? kthread_data+0x4e/0xc0 [ 1100.747286][ T2525] ? wq_worker_running+0x97/0x190 [ 1100.752315][ T2525] worker_thread+0xa47/0x1200 [ 1100.757065][ T2525] kthread+0x28d/0x320 [ 1100.761142][ T2525] ? worker_clr_flags+0x190/0x190 [ 1100.766249][ T2525] ? kthread_blkcg+0xd0/0xd0 [ 1100.770850][ T2525] ret_from_fork+0x1f/0x30 [ 1100.775326][ T2525] [ 1100.778350][ T2525] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1100.785631][ T2525] CPU: 1 PID: 2525 Comm: kworker/u4:5 Not tainted 6.1.110-syzkaller #0 [ 1100.793864][ T2525] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 1100.803914][ T2525] Workqueue: phy49 ieee80211_iface_work [ 1100.809483][ T2525] Call Trace: [ 1100.812774][ T2525] [ 1100.815748][ T2525] dump_stack_lvl+0x1e3/0x2cb [ 1100.820440][ T2525] ? nf_tcp_handle_invalid+0x642/0x642 [ 1100.825914][ T2525] ? panic+0x764/0x764 [ 1100.829989][ T2525] ? 0xffffffffa00038c0 [ 1100.834154][ T2525] ? vscnprintf+0x59/0x80 [ 1100.838488][ T2525] panic+0x318/0x764 [ 1100.842386][ T2525] ? __warn+0x169/0x520 [ 1100.846644][ T2525] ? memcpy_page_flushcache+0xfc/0xfc [ 1100.852045][ T2525] ? ret_from_fork+0x1f/0x30 [ 1100.856646][ T2525] __warn+0x348/0x520 [ 1100.860630][ T2525] ? cfg80211_rx_mlme_mgmt+0x323/0x560 [ 1100.866090][ T2525] report_bug+0x2af/0x500 [ 1100.870413][ T2525] ? cfg80211_rx_mlme_mgmt+0x323/0x560 [ 1100.875883][ T2525] handle_bug+0x3d/0x70 [ 1100.880063][ T2525] exc_invalid_op+0x16/0x40 [ 1100.884650][ T2525] asm_exc_invalid_op+0x16/0x20 [ 1100.889512][ T2525] RIP: 0010:cfg80211_rx_mlme_mgmt+0x323/0x560 [ 1100.895589][ T2525] Code: e8 e2 0d 7a f7 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 d2 0d 7a f7 0f 0b eb ec e8 c9 0d 7a f7 0f 0b e9 40 fe ff ff e8 bd 0d 7a f7 <0f> 0b e9 8f fd ff ff e8 b1 0d 7a f7 0f 0b e9 9b fe ff ff e8 a5 0d [ 1100.915201][ T2525] RSP: 0018:ffffc9000a727708 EFLAGS: 00010283 [ 1100.921266][ T2525] RAX: ffffffff8a10a183 RBX: dffffc0000000000 RCX: 0000000000100000 [ 1100.929232][ T2525] RDX: ffffc9001451c000 RSI: 0000000000001425 RDI: 0000000000001426 [ 1100.937201][ T2525] RBP: 0000000000000000 R08: ffffffff8a109f0c R09: fffff520014e4ed1 [ 1100.945166][ T2525] R10: 0000000000000000 R11: dffffc0000000001 R12: ffff888018c00000 [ 1100.953130][ T2525] R13: ffff888018c00c90 R14: 000000000000001e R15: ffff88805bf25400 [ 1100.961112][ T2525] ? cfg80211_rx_mlme_mgmt+0xac/0x560 [ 1100.966583][ T2525] ? cfg80211_rx_mlme_mgmt+0x323/0x560 [ 1100.972046][ T2525] ? cfg80211_rx_mlme_mgmt+0x323/0x560 [ 1100.977512][ T2525] ieee80211_sta_rx_queued_mgmt+0x20d4/0x4100 [ 1100.983594][ T2525] ? reacquire_held_locks+0x660/0x660 [ 1100.988989][ T2525] ? reacquire_held_locks+0x660/0x660 [ 1100.994361][ T2525] ? reacquire_held_locks+0x660/0x660 [ 1100.999726][ T2525] ? ieee80211_rx_mgmt_beacon+0x3180/0x3180 [ 1101.005641][ T2525] ? validate_chain+0x112/0x5950 [ 1101.010603][ T2525] ? mark_lock+0x9a/0x340 [ 1101.014964][ T2525] ? __lock_acquire+0x125b/0x1f80 [ 1101.020018][ T2525] ? mark_lock+0x9a/0x340 [ 1101.024367][ T2525] ? __lock_acquire+0x125b/0x1f80 [ 1101.029428][ T2525] ? mark_lock+0x9a/0x340 [ 1101.033772][ T2525] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 1101.039764][ T2525] ? print_irqtrace_events+0x210/0x210 [ 1101.045227][ T2525] ? do_raw_spin_unlock+0x137/0x8a0 [ 1101.050422][ T2525] ? kcov_remote_start+0x4ae/0x7c0 [ 1101.055538][ T2525] ? kcov_remote_start+0x8c/0x7c0 [ 1101.060606][ T2525] ieee80211_iface_work+0x737/0xce0 [ 1101.065815][ T2525] ? process_one_work+0x7a9/0x11d0 [ 1101.070925][ T2525] process_one_work+0x8a9/0x11d0 [ 1101.075882][ T2525] ? worker_detach_from_pool+0x260/0x260 [ 1101.081522][ T2525] ? _raw_spin_lock_irqsave+0x120/0x120 [ 1101.087100][ T2525] ? kthread_data+0x4e/0xc0 [ 1101.091615][ T2525] ? wq_worker_running+0x97/0x190 [ 1101.096637][ T2525] worker_thread+0xa47/0x1200 [ 1101.101352][ T2525] kthread+0x28d/0x320 [ 1101.105449][ T2525] ? worker_clr_flags+0x190/0x190 [ 1101.110470][ T2525] ? kthread_blkcg+0xd0/0xd0 [ 1101.115070][ T2525] ret_from_fork+0x1f/0x30 [ 1101.119502][ T2525] [ 1101.122793][ T2525] Kernel Offset: disabled [ 1101.127225][ T2525] Rebooting in 86400 seconds..