last executing test programs: 40.714530384s ago: executing program 2 (id=22): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x21, &(0x7f0000001880)=0x40, 0x4) sendmmsg$inet6(r0, &(0x7f0000000900)=[{{&(0x7f0000000100)={0xa, 0x4e21, 0x0, @loopback, 0x10}, 0x1c, 0x0}}, {{&(0x7f0000000040)={0xa, 0x4e61, 0x80, @mcast2, 0x81}, 0x1c, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1400000000000000290000000b000000ff"], 0x18}}], 0x2, 0x0) 40.002148346s ago: executing program 2 (id=25): setresuid(0x0, 0xee01, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000040)={@private2}, 0x14) 39.476528634s ago: executing program 2 (id=29): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) unshare(0x22020600) recvfrom(r0, 0x0, 0x0, 0x10020, &(0x7f00000000c0)=@un=@abs={0x3, 0x0, 0x4e23}, 0x80) 38.017710872s ago: executing program 2 (id=32): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000003c0)='./file1\x00', 0x1c, &(0x7f0000000a00), 0x3, 0x455, &(0x7f0000001040)="$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") mount$bind(&(0x7f0000000040)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x23e9c9e, 0x0) mount$bind(&(0x7f0000000280)='./file0/../file0\x00', &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x28a5291, 0x0) 36.661615178s ago: executing program 2 (id=39): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) connect$bt_l2cap(r0, &(0x7f00000000c0)={0x1f, 0x3, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, 0xe) 35.461694684s ago: executing program 2 (id=44): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'netdevsim0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000001540)=@newqdisc={0x40, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0xe, 0xfff3}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x0, 0xb, 0x1}}}}]}, 0x40}}, 0x40080) 33.318182123s ago: executing program 32 (id=44): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'netdevsim0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000001540)=@newqdisc={0x40, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0xe, 0xfff3}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x0, 0xb, 0x1}}}}]}, 0x40}}, 0x40080) 7.51978654s ago: executing program 4 (id=141): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000400)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_COPY(r0, 0x3b83, &(0x7f0000000040)={0x28, 0x5, r1, r1, 0x0, 0x80000001, 0x3fff}) 6.831185693s ago: executing program 3 (id=143): syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0xa00008, &(0x7f0000000140)={[{@min_batch_time={'min_batch_time', 0x3d, 0xd}}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@noblock_validity}]}, 0x1, 0x7ad, &(0x7f00000007c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0) pwrite64(r0, &(0x7f0000000000)='3', 0x1, 0x4fed0) 6.645298419s ago: executing program 4 (id=144): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@ipv6_newrule={0x44, 0x20, 0x1, 0x70bd27, 0x0, {0xa, 0x0, 0x0, 0x40}, [@FIB_RULE_POLICY=@FRA_IIFNAME={0x14, 0x3, 'hsr0\x00'}, @FIB_RULE_POLICY=@FRA_OIFNAME={0x14, 0x11, 'veth1_vlan\x00'}]}, 0x44}, 0x1, 0x0, 0x0, 0x24040804}, 0x4008000) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='\\\x00\x00\x00!'], 0x5c}}, 0x40084) 5.744620018s ago: executing program 4 (id=147): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)={0x3c, r1, 0x633d41a77d0888ff, 0x70bd26, 0x25dfdbfd, {}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4044000}, 0x20048844) 5.485644635s ago: executing program 0 (id=148): mkdir(&(0x7f0000000300)='./bus\x00', 0x0) lsetxattr$system_posix_acl(&(0x7f00000003c0)='./bus\x00', &(0x7f0000000540)='system.posix_acl_access\x00', &(0x7f0000000180)={{}, {}, [{}]}, 0x2c, 0x0) getxattr(&(0x7f0000000140)='./bus\x00', &(0x7f00000001c0)=@known='system.posix_acl_access\x00', &(0x7f0000000400)=""/254, 0x145) 4.544613244s ago: executing program 1 (id=149): r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000080)={@ipv4={'\x00', '\xff\xff', @empty}, 0x22, r1}) 4.52475041s ago: executing program 0 (id=150): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001800)=ANY=[@ANYBLOB="180000002500010324bd7002ffdbdf25010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x4008}, 0x0) recvmmsg(r0, &(0x7f0000000d80)=[{{0x0, 0x0, 0x0}, 0xac}, {{0x0, 0x0, 0x0}, 0x8}, {{0x0, 0x0, 0x0}, 0x7}, {{0x0, 0x0, 0x0}, 0x5}, {{0x0, 0x0, 0x0}, 0x10001}], 0x5, 0x2000, 0x0) 4.381069769s ago: executing program 4 (id=151): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f00000007c0)={0x833, 0x7, 0x4, "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"}) 4.060997179s ago: executing program 3 (id=152): r0 = syz_io_uring_setup(0x17ac, &(0x7f0000000500)={0x0, 0xbc48, 0x13290, 0x0, 0x1e1}, &(0x7f0000000300)=0x0, &(0x7f0000000340)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r0}) io_uring_enter(r0, 0x1, 0x2, 0x29, 0x0, 0x0) 3.628128022s ago: executing program 1 (id=153): r0 = socket$netlink(0x10, 0x3, 0xb) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000280)={0x200000, 0x200000, 0x0, 0x0, 0x10000}) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000500)=0x17, 0x4) 3.479509097s ago: executing program 4 (id=154): syz_usb_connect(0x5, 0x24, &(0x7f0000001280)=ANY=[@ANYBLOB="12010003001f66088f0510660548020003010902120001049570810904008100ffffff02"], &(0x7f0000001700)={0xffffffa0, 0x0, 0x0, 0x0, 0x23}) r0 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000040)="e2", 0x1}], 0x1) 3.407194029s ago: executing program 0 (id=155): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$bt_BT_SECURITY(r0, 0x112, 0x4, &(0x7f00000001c0)={0x4, 0x9}, 0x2) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) 2.891876881s ago: executing program 1 (id=156): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, r1, 0x431, 0x70bd28, 0x25dfdbf8, {}, [@ETHTOOL_A_PAUSE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @ETHTOOL_A_PAUSE_TX={0x5, 0x4, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x2000c010}, 0x20000000) 2.859381506s ago: executing program 3 (id=157): r0 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000280)={0x3, 0x980900, 0x2eae0342ca72d7e8}) ioctl$VIDIOC_QUERYMENU(r0, 0xc008561c, &(0x7f00000001c0)={0x980900, 0xfffffff2, @value=0x9}) 2.227582612s ago: executing program 3 (id=158): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3000003, 0x204031, 0xffffffffffffffff, 0xffffd000) r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x1, 0x2002) ioctl$EVIOCGKEY(r0, 0x80404518, &(0x7f00000038c0)=""/4096) 1.964681403s ago: executing program 1 (id=159): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x800}, 0x10) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c0000005e0001"], 0x1c}, 0x1, 0x0, 0x0, 0x4040084}, 0x0) 1.63505299s ago: executing program 0 (id=160): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x46, 0x0, 0x0) sendmsg$inet6(r0, &(0x7f0000000980)={&(0x7f00000004c0)={0xa, 0x4e22, 0x5, @empty, 0x3ff}, 0x1c, 0x0, 0x0, &(0x7f0000000940)=[@flowinfo={{0x14, 0x29, 0xb, 0x8}}], 0x18}, 0x200440c4) 956.016273ms ago: executing program 3 (id=161): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000180)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @hash={{0x9}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_HASH_LEN={0x8, 0x3, 0x1, 0x0, 0x29}, @NFTA_HASH_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_HASH_DREG={0x8, 0x2, 0x1, 0x0, 0x11}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x84}, 0x1, 0x0, 0x0, 0x6597ff2602cb09ce}, 0x24000800) 904.615059ms ago: executing program 1 (id=162): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'gre0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newlink={0x38, 0x10, 0x421, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r1, 0x4952, 0x4}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_DPORT={0x6, 0x11, 0x4e23}]}}}]}, 0x38}}, 0x0) 849.815285ms ago: executing program 0 (id=163): r0 = io_uring_setup(0x167c, &(0x7f00000003c0)={0x0, 0x800000, 0x400, 0x2, 0x201}) io_uring_register$IORING_REGISTER_PBUF_RING(r0, 0x16, &(0x7f0000000740)={&(0x7f0000002000)={[{0x0, 0x0, 0x3}, {0x0}, {0x0, 0x0, 0xfffe}, {0x0}]}, 0x4}, 0x1) io_uring_register$IORING_REGISTER_PBUF_STATUS(r0, 0x1a, &(0x7f0000000000), 0x1) 234.597067ms ago: executing program 4 (id=164): r0 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x20000) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r0, 0x40146f2c, &(0x7f00000000c0)={0x100, 0x0, 0x0, 0x5, 0x4}) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r0, 0x40146f2c, &(0x7f0000000040)={0x4, 0x0, 0x0, 0xb, 0x4}) 194.420965ms ago: executing program 1 (id=165): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000200)={0x0, 0x22, 0xf, {[@global=@item_012={0x0, 0x1, 0xa}, @main=@item_4={0x3, 0x0, 0xa, "9a5773c7"}, @global=@item_012={0x1, 0x1, 0x9, "f5"}, @main=@item_012={0x1, 0x0, 0x8, 'n'}, @main=@item_4={0x3, 0x0, 0xc, "9e3ce0b2"}]}}, 0x0}, 0x0) 71.397006ms ago: executing program 0 (id=166): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x11, 0xc, 0x0, &(0x7f00000000c0)='GPL\x00', 0x4, 0xa0, &(0x7f0000001a80)=""/160, 0x8eb2e000f2c28467, 0x1, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='maps\x00') ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0xc0686611, &(0x7f0000000180)={0x68, 0x0, 0x17, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) 0s ago: executing program 3 (id=167): mknod$loop(&(0x7f0000000140)='./file0\x00', 0x840, 0x1) lsetxattr$security_capability(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, 0x0, 0x0) llistxattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)=""/18, 0x12) kernel console output (not intermixed with test programs): no interfaces have a carrier [ 139.284553][ T5428] 8021q: adding VLAN 0 to HW filter on device bond0 [ 139.308405][ T5428] eql: remember to turn off Van-Jacobson compression on your slave devices Starting crond: OK Starting sshd: OK syzkaller Warning: Permanently added '10.128.1.162' (ED25519) to the list of known hosts. syzkaller login: [ 190.741411][ T5754] cgroup: Unknown subsys name 'net' [ 190.873292][ T5754] cgroup: Unknown subsys name 'cpuset' [ 190.888991][ T5754] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 197.217818][ T5754] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 203.334761][ T5775] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 203.345619][ T5775] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 203.357720][ T5778] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 203.371708][ T5778] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 203.383385][ T5778] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 203.404441][ T49] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 203.428386][ T49] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 203.448255][ T5783] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 203.460939][ T5786] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 203.461064][ T5073] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 203.479056][ T5073] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 203.490427][ T5073] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 203.508188][ T5073] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 203.515900][ T5786] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 203.534788][ T5775] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 203.546393][ T49] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 203.547803][ T5775] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 203.559103][ T49] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 203.577351][ T5786] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 203.592987][ T49] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 203.601541][ T49] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 203.623865][ T49] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 203.633479][ T49] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 203.672428][ T49] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 203.684157][ T49] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 204.089752][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 204.117905][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 205.482752][ T5772] chnl_net:caif_netlink_parms(): no params data found [ 205.550708][ T5787] chnl_net:caif_netlink_parms(): no params data found [ 205.577576][ T5775] Bluetooth: hci0: command tx timeout [ 205.583609][ T49] Bluetooth: hci2: command tx timeout [ 205.659957][ T49] Bluetooth: hci3: command tx timeout [ 205.738981][ T49] Bluetooth: hci4: command tx timeout [ 205.744659][ T49] Bluetooth: hci1: command tx timeout [ 205.808861][ T5779] chnl_net:caif_netlink_parms(): no params data found [ 205.915442][ T5773] chnl_net:caif_netlink_parms(): no params data found [ 205.999994][ T5776] chnl_net:caif_netlink_parms(): no params data found [ 206.720142][ T5772] bridge0: port 1(bridge_slave_0) entered blocking state [ 206.737543][ T5772] bridge0: port 1(bridge_slave_0) entered disabled state [ 206.745252][ T5772] bridge_slave_0: entered allmulticast mode [ 206.771264][ T5772] bridge_slave_0: entered promiscuous mode [ 206.859467][ T5772] bridge0: port 2(bridge_slave_1) entered blocking state [ 206.868610][ T5772] bridge0: port 2(bridge_slave_1) entered disabled state [ 206.876261][ T5772] bridge_slave_1: entered allmulticast mode [ 206.890490][ T5772] bridge_slave_1: entered promiscuous mode [ 206.903381][ T5787] bridge0: port 1(bridge_slave_0) entered blocking state [ 206.913796][ T5787] bridge0: port 1(bridge_slave_0) entered disabled state [ 206.924066][ T5787] bridge_slave_0: entered allmulticast mode [ 206.935467][ T5787] bridge_slave_0: entered promiscuous mode [ 206.991274][ T5787] bridge0: port 2(bridge_slave_1) entered blocking state [ 206.999513][ T5787] bridge0: port 2(bridge_slave_1) entered disabled state [ 207.008337][ T5787] bridge_slave_1: entered allmulticast mode [ 207.019656][ T5787] bridge_slave_1: entered promiscuous mode [ 207.324025][ T5772] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 207.371553][ T5787] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 207.409706][ T5779] bridge0: port 1(bridge_slave_0) entered blocking state [ 207.419207][ T5779] bridge0: port 1(bridge_slave_0) entered disabled state [ 207.426721][ T5779] bridge_slave_0: entered allmulticast mode [ 207.436711][ T5779] bridge_slave_0: entered promiscuous mode [ 207.457916][ T5772] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 207.505311][ T5787] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 207.568203][ T5779] bridge0: port 2(bridge_slave_1) entered blocking state [ 207.575844][ T5779] bridge0: port 2(bridge_slave_1) entered disabled state [ 207.583987][ T5779] bridge_slave_1: entered allmulticast mode [ 207.593198][ T5779] bridge_slave_1: entered promiscuous mode [ 207.656870][ T5773] bridge0: port 1(bridge_slave_0) entered blocking state [ 207.657475][ T5775] Bluetooth: hci0: command tx timeout [ 207.658300][ T5773] bridge0: port 1(bridge_slave_0) entered disabled state [ 207.665809][ T49] Bluetooth: hci2: command tx timeout [ 207.674060][ T5773] bridge_slave_0: entered allmulticast mode [ 207.692249][ T5773] bridge_slave_0: entered promiscuous mode [ 207.729791][ T5776] bridge0: port 1(bridge_slave_0) entered blocking state [ 207.737406][ T49] Bluetooth: hci3: command tx timeout [ 207.743592][ T5776] bridge0: port 1(bridge_slave_0) entered disabled state [ 207.751401][ T5776] bridge_slave_0: entered allmulticast mode [ 207.760159][ T5776] bridge_slave_0: entered promiscuous mode [ 207.817325][ T49] Bluetooth: hci1: command tx timeout [ 207.817370][ T5775] Bluetooth: hci4: command tx timeout [ 207.837887][ T5773] bridge0: port 2(bridge_slave_1) entered blocking state [ 207.845852][ T5773] bridge0: port 2(bridge_slave_1) entered disabled state [ 207.853755][ T5773] bridge_slave_1: entered allmulticast mode [ 207.862354][ T5773] bridge_slave_1: entered promiscuous mode [ 207.881002][ T5787] team0: Port device team_slave_0 added [ 207.887373][ T5776] bridge0: port 2(bridge_slave_1) entered blocking state [ 207.894929][ T5776] bridge0: port 2(bridge_slave_1) entered disabled state [ 207.902850][ T5776] bridge_slave_1: entered allmulticast mode [ 207.911929][ T5776] bridge_slave_1: entered promiscuous mode [ 207.931709][ T5779] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 207.950521][ T5772] team0: Port device team_slave_0 added [ 207.993580][ T5787] team0: Port device team_slave_1 added [ 208.048210][ T5779] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 208.099141][ T5772] team0: Port device team_slave_1 added [ 208.252346][ T5773] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 208.300530][ T5776] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 208.320476][ T5779] team0: Port device team_slave_0 added [ 208.366454][ T5773] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 208.379780][ T5787] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 208.387235][ T5787] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 208.413681][ T5787] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 208.435135][ T5776] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 208.452377][ T5779] team0: Port device team_slave_1 added [ 208.461607][ T5772] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 208.469461][ T5772] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 208.495853][ T5772] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 208.538307][ T5787] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 208.545406][ T5787] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 208.571994][ T5787] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 208.641792][ T5772] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 208.649242][ T5772] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 208.675600][ T5772] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 208.834982][ T5773] team0: Port device team_slave_0 added [ 208.852183][ T5773] team0: Port device team_slave_1 added [ 208.864811][ T5776] team0: Port device team_slave_0 added [ 208.873733][ T5779] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 208.881918][ T5779] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 208.908579][ T5779] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 208.926027][ T5779] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 208.933556][ T5779] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 208.960004][ T5779] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 209.026630][ T5776] team0: Port device team_slave_1 added [ 209.109187][ T5787] hsr_slave_0: entered promiscuous mode [ 209.118650][ T5787] hsr_slave_1: entered promiscuous mode [ 209.258393][ T5773] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 209.265476][ T5773] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 209.291970][ T5773] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 209.391803][ T5773] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 209.399456][ T5773] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 209.426494][ T5773] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 209.440777][ T5776] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 209.448469][ T5776] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 209.475405][ T5776] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 209.491296][ T5776] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 209.498825][ T5776] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 209.525546][ T5776] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 209.582796][ T5772] hsr_slave_0: entered promiscuous mode [ 209.591730][ T5772] hsr_slave_1: entered promiscuous mode [ 209.600394][ T5772] debugfs: 'hsr0' already exists in 'hsr' [ 209.608545][ T5772] Cannot create hsr debugfs directory [ 209.628704][ T5779] hsr_slave_0: entered promiscuous mode [ 209.638039][ T5779] hsr_slave_1: entered promiscuous mode [ 209.645925][ T5779] debugfs: 'hsr0' already exists in 'hsr' [ 209.652184][ T5779] Cannot create hsr debugfs directory [ 209.737599][ T49] Bluetooth: hci2: command tx timeout [ 209.737655][ T5775] Bluetooth: hci0: command tx timeout [ 209.817189][ T49] Bluetooth: hci3: command tx timeout [ 209.897354][ T49] Bluetooth: hci1: command tx timeout [ 209.898201][ T5775] Bluetooth: hci4: command tx timeout [ 210.073494][ T5773] hsr_slave_0: entered promiscuous mode [ 210.082601][ T5773] hsr_slave_1: entered promiscuous mode [ 210.091528][ T5773] debugfs: 'hsr0' already exists in 'hsr' [ 210.097649][ T5773] Cannot create hsr debugfs directory [ 210.229168][ T5776] hsr_slave_0: entered promiscuous mode [ 210.238583][ T5776] hsr_slave_1: entered promiscuous mode [ 210.246426][ T5776] debugfs: 'hsr0' already exists in 'hsr' [ 210.252827][ T5776] Cannot create hsr debugfs directory [ 211.448755][ T5787] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 211.476217][ T5787] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 211.499044][ T5787] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 211.518747][ T5787] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 211.671715][ T5772] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 211.723654][ T5772] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 211.781547][ T5772] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 211.805292][ T5772] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 211.817640][ T5775] Bluetooth: hci0: command tx timeout [ 211.827369][ T5775] Bluetooth: hci2: command tx timeout [ 211.897931][ T5775] Bluetooth: hci3: command tx timeout [ 211.978695][ T5775] Bluetooth: hci1: command tx timeout [ 211.984337][ T5775] Bluetooth: hci4: command tx timeout [ 212.072546][ T5779] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 212.127833][ T5779] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 212.152175][ T5779] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 212.173692][ T5779] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 212.516068][ T5773] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 212.565099][ T5773] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 212.586563][ T5773] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 212.617184][ T5773] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 212.845014][ T5776] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 212.884321][ T5787] 8021q: adding VLAN 0 to HW filter on device bond0 [ 212.920336][ T5776] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 212.967156][ T5776] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 213.020375][ T5776] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 213.229251][ T5772] 8021q: adding VLAN 0 to HW filter on device bond0 [ 213.255708][ T5787] 8021q: adding VLAN 0 to HW filter on device team0 [ 213.365656][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 213.373160][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 213.436824][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 213.444505][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 213.581463][ T5772] 8021q: adding VLAN 0 to HW filter on device team0 [ 213.693999][ T57] bridge0: port 1(bridge_slave_0) entered blocking state [ 213.701521][ T57] bridge0: port 1(bridge_slave_0) entered forwarding state [ 213.820031][ T5779] 8021q: adding VLAN 0 to HW filter on device bond0 [ 213.836492][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 213.844432][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 214.103624][ T5779] 8021q: adding VLAN 0 to HW filter on device team0 [ 214.145330][ T5773] 8021q: adding VLAN 0 to HW filter on device bond0 [ 214.183438][ T1088] bridge0: port 1(bridge_slave_0) entered blocking state [ 214.191079][ T1088] bridge0: port 1(bridge_slave_0) entered forwarding state [ 214.322140][ T1088] bridge0: port 2(bridge_slave_1) entered blocking state [ 214.330047][ T1088] bridge0: port 2(bridge_slave_1) entered forwarding state [ 214.484944][ T5773] 8021q: adding VLAN 0 to HW filter on device team0 [ 214.609689][ T5776] 8021q: adding VLAN 0 to HW filter on device bond0 [ 214.733287][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 214.740985][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 214.970631][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 214.978274][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 215.056891][ T5776] 8021q: adding VLAN 0 to HW filter on device team0 [ 215.203606][ T57] bridge0: port 1(bridge_slave_0) entered blocking state [ 215.211368][ T57] bridge0: port 1(bridge_slave_0) entered forwarding state [ 215.316281][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 215.323934][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 215.464844][ T5787] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 215.814273][ T5772] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 216.423158][ T5787] veth0_vlan: entered promiscuous mode [ 216.644498][ T5779] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 216.663913][ T5787] veth1_vlan: entered promiscuous mode [ 216.694605][ T5772] veth0_vlan: entered promiscuous mode [ 216.873202][ T5772] veth1_vlan: entered promiscuous mode [ 217.143787][ T5773] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 217.323912][ T5787] veth0_macvtap: entered promiscuous mode [ 217.405116][ T5787] veth1_macvtap: entered promiscuous mode [ 217.444847][ T5772] veth0_macvtap: entered promiscuous mode [ 217.528734][ T5772] veth1_macvtap: entered promiscuous mode [ 217.596709][ T5776] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 217.674422][ T5787] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 217.785909][ T5787] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 217.834922][ T5772] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 217.952334][ T5773] veth0_vlan: entered promiscuous mode [ 218.001960][ T5772] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 218.022074][ T57] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.067176][ T57] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.154835][ T1088] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.168705][ T1088] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.233827][ T5773] veth1_vlan: entered promiscuous mode [ 218.287227][ T1088] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.296259][ T1088] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.394764][ T1088] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.409094][ T1088] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.490826][ T5776] veth0_vlan: entered promiscuous mode [ 218.710371][ T5779] veth0_vlan: entered promiscuous mode [ 218.730228][ T5776] veth1_vlan: entered promiscuous mode [ 218.901067][ T5773] veth0_macvtap: entered promiscuous mode [ 218.951726][ T5779] veth1_vlan: entered promiscuous mode [ 219.041058][ T5773] veth1_macvtap: entered promiscuous mode [ 219.246468][ T5773] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 219.331825][ T5773] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 219.482464][ T5776] veth0_macvtap: entered promiscuous mode [ 219.521087][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.532348][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.562744][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.575731][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.647868][ T5776] veth1_macvtap: entered promiscuous mode [ 219.820554][ T5779] veth0_macvtap: entered promiscuous mode [ 219.934961][ T5779] veth1_macvtap: entered promiscuous mode [ 220.034660][ T5776] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 220.209506][ T5776] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 220.323888][ T1099] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.337458][ T1099] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.346533][ T1099] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.380918][ T5779] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 220.411515][ T1099] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.523038][ T5779] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 220.653441][ T13] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.692089][ T3446] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.770349][ T3446] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.841866][ T3446] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 224.178599][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 224.186659][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 224.237341][ T1152] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 224.245391][ T1152] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 224.565235][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 224.603371][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 224.757212][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 224.765256][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 225.198507][ T5787] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 226.692460][ T5962] netlink: 68 bytes leftover after parsing attributes in process `syz.2.6'. [ 226.758240][ T5962] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6'. [ 226.829353][ T5962] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6'. [ 226.861388][ T1152] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 226.896403][ T5964] loop3: detected capacity change from 0 to 1024 [ 226.907789][ T1152] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 227.167894][ T1152] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 227.175951][ T1152] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 227.468209][ T56] hfsplus: b-tree write err: -5, ino 25 [ 227.474432][ T56] hfsplus: b-tree write err: -5, ino 4 [ 227.525730][ T56] hfsplus: b-tree write err: -5, ino 2 [ 228.114229][ T3446] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 228.143871][ T3446] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 228.504849][ T5975] vlan2: entered promiscuous mode [ 228.529901][ T5975] bridge0: entered promiscuous mode [ 228.542264][ T5977] capability: warning: `syz.3.10' uses deprecated v2 capabilities in a way that may be insecure [ 228.802511][ T5980] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11'. [ 228.885531][ T56] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 228.927301][ T56] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 229.263453][ T3446] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 229.298031][ T3446] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 229.435007][ T3446] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 229.493271][ T3446] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 229.978316][ T5989] netlink: 4 bytes leftover after parsing attributes in process `syz.0.15'. [ 230.974021][ T6001] loop0: detected capacity change from 0 to 8 [ 231.011554][ T5993] loop1: detected capacity change from 0 to 2048 [ 231.187612][ T5993] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 232.399471][ T6017] netlink: 184 bytes leftover after parsing attributes in process `syz.1.24'. [ 232.415957][ T6013] loop3: detected capacity change from 0 to 512 [ 232.580226][ T6013] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 232.604162][ T6013] ext4 filesystem being mounted at /8/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 233.635175][ T6027] loop1: detected capacity change from 0 to 64 [ 233.973458][ T6029] netlink: 20 bytes leftover after parsing attributes in process `syz.4.30'. [ 234.428537][ T6032] loop2: detected capacity change from 0 to 512 [ 234.490751][ T6032] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 234.581869][ T6032] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 234.742436][ T6032] EXT4-fs (loop2): 1 truncate cleaned up [ 234.747758][ C0] hrtimer: interrupt took 778795 ns [ 234.832167][ T6032] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 234.989611][ T5787] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 236.350332][ T5772] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 236.463372][ T3446] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 236.907161][ T3446] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 237.246506][ T3446] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 237.471111][ T3446] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 238.014037][ T3446] bridge_slave_1: left allmulticast mode [ 238.022676][ T3446] bridge_slave_1: left promiscuous mode [ 238.056120][ T3446] bridge0: port 2(bridge_slave_1) entered disabled state [ 238.106791][ T3446] bridge_slave_0: left allmulticast mode [ 238.113057][ T3446] bridge_slave_0: left promiscuous mode [ 238.125357][ T3446] bridge0: port 1(bridge_slave_0) entered disabled state [ 238.866523][ T3446] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 238.988470][ T3446] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 239.063619][ T3446] bond0 (unregistering): Released all slaves [ 240.038039][ T49] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 240.058812][ T49] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 240.078084][ T49] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 240.129206][ T49] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 240.156378][ T49] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 241.077624][ T3446] hsr_slave_0: left promiscuous mode [ 241.117461][ T3446] hsr_slave_1: left promiscuous mode [ 241.175933][ T3446] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 241.208452][ T3446] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 241.256426][ T3446] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 241.296408][ T3446] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 241.392317][ T3446] veth1_macvtap: left promiscuous mode [ 241.436308][ T3446] veth0_macvtap: left promiscuous mode [ 241.454115][ T3446] veth1_vlan: left promiscuous mode [ 241.482166][ T3446] veth0_vlan: left promiscuous mode [ 241.571345][ T6111] netlink: 68 bytes leftover after parsing attributes in process `syz.3.64'. [ 242.299270][ T49] Bluetooth: hci0: command tx timeout [ 242.886818][ T6125] Bluetooth: MGMT ver 1.23 [ 243.404996][ T6129] loop0: detected capacity change from 0 to 64 [ 243.495761][ T3446] team0 (unregistering): Port device team_slave_1 removed [ 243.570350][ T3446] team0 (unregistering): Port device team_slave_0 removed [ 244.077981][ T6133] loop0: detected capacity change from 0 to 512 [ 244.216097][ T6133] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8856c01c, mo2=0002] [ 244.240886][ T6133] EXT4-fs (loop0): orphan cleanup on readonly fs [ 244.270297][ T6133] EXT4-fs warning (device loop0): ext4_enable_quotas:7236: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 244.335257][ T6133] EXT4-fs (loop0): Cannot turn on quotas: error -22 [ 244.360423][ T6133] EXT4-fs error (device loop0): ext4_ext_check_inode:521: inode #13: comm syz.0.69: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 244.390056][ T49] Bluetooth: hci0: command tx timeout [ 244.414691][ T6133] loop0: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 244.416093][ T6133] EXT4-fs error (device loop0): ext4_orphan_get:1396: comm syz.0.69: couldn't read orphan inode 13 (err -117) [ 244.426051][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 244.426149][ C0] EXT4-fs (loop0): last error at time 1774042571: ext4_ext_check_inode:521: inode 13 [ 244.459975][ T6133] loop0: lost filesystem error report for type 5 error -117 [ 244.499612][ T6133] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 244.817800][ T6133] ======================================================= [ 244.817800][ T6133] WARNING: The mand mount option has been deprecated and [ 244.817800][ T6133] and is ignored by this kernel. Remove the mand [ 244.817800][ T6133] option from the mount to silence this warning. [ 244.817800][ T6133] ======================================================= [ 244.947926][ T6133] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 244.998402][ T6133] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 245.090577][ T6133] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=2856c09c, mo2=0002] [ 245.152435][ T6133] System zones: 0-2, 18-18, 34-34 [ 245.189105][ T6133] EXT4-fs warning (device loop0): ext4_enable_quotas:7236: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 245.437368][ T6141] loop3: detected capacity change from 0 to 256 [ 245.565865][ T5773] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 245.644804][ T6145] loop1: detected capacity change from 0 to 128 [ 245.742063][ T6145] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 245.910981][ T6145] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 245.992231][ T6141] FAT-fs (loop3): Directory bread(block 64) failed [ 246.030660][ T6141] FAT-fs (loop3): Directory bread(block 65) failed [ 246.154328][ T6141] FAT-fs (loop3): Directory bread(block 66) failed [ 246.170349][ T6141] FAT-fs (loop3): Directory bread(block 67) failed [ 246.217299][ T6141] FAT-fs (loop3): Directory bread(block 68) failed [ 246.224323][ T6141] FAT-fs (loop3): Directory bread(block 69) failed [ 246.274332][ T6141] FAT-fs (loop3): Directory bread(block 70) failed [ 246.307619][ T6141] FAT-fs (loop3): Directory bread(block 71) failed [ 246.417931][ T6141] FAT-fs (loop3): Directory bread(block 72) failed [ 246.458228][ T49] Bluetooth: hci0: command tx timeout [ 246.467206][ T6141] FAT-fs (loop3): Directory bread(block 73) failed [ 247.021141][ T6083] chnl_net:caif_netlink_parms(): no params data found [ 247.877413][ T6173] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 248.537451][ T49] Bluetooth: hci0: command tx timeout [ 248.742359][ T6186] loop3: detected capacity change from 0 to 256 [ 249.085266][ T6189] netlink: 8 bytes leftover after parsing attributes in process `syz.1.86'. [ 249.164939][ T6192] netlink: 16 bytes leftover after parsing attributes in process `syz.0.87'. [ 249.303692][ T6186] FAT-fs (loop3): Directory bread(block 64) failed [ 249.360371][ T6186] FAT-fs (loop3): Directory bread(block 65) failed [ 249.401985][ T6186] FAT-fs (loop3): Directory bread(block 66) failed [ 249.474722][ T6186] FAT-fs (loop3): Directory bread(block 67) failed [ 249.487995][ T6186] FAT-fs (loop3): Directory bread(block 68) failed [ 249.553392][ T6186] FAT-fs (loop3): Directory bread(block 69) failed [ 249.587545][ T6186] FAT-fs (loop3): Directory bread(block 70) failed [ 249.594340][ T6186] FAT-fs (loop3): Directory bread(block 71) failed [ 249.608867][ T6083] bridge0: port 1(bridge_slave_0) entered blocking state [ 249.616500][ T6083] bridge0: port 1(bridge_slave_0) entered disabled state [ 249.683840][ T6186] FAT-fs (loop3): Directory bread(block 72) failed [ 249.705174][ T6186] FAT-fs (loop3): Directory bread(block 73) failed [ 249.712933][ T6083] bridge_slave_0: entered allmulticast mode [ 249.773161][ T6083] bridge_slave_0: entered promiscuous mode [ 249.847290][ T6083] bridge0: port 2(bridge_slave_1) entered blocking state [ 249.860405][ T6083] bridge0: port 2(bridge_slave_1) entered disabled state [ 249.901026][ T6083] bridge_slave_1: entered allmulticast mode [ 249.943679][ T6083] bridge_slave_1: entered promiscuous mode [ 250.172840][ T6199] netlink: 'syz.4.90': attribute type 29 has an invalid length. [ 250.207916][ T6199] netlink: 8 bytes leftover after parsing attributes in process `syz.4.90'. [ 250.381348][ T6201] netlink: 'syz.4.90': attribute type 29 has an invalid length. [ 250.418674][ T6201] netlink: 8 bytes leftover after parsing attributes in process `syz.4.90'. [ 250.502397][ T6083] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 250.660712][ T6083] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 250.961273][ T6206] loop0: detected capacity change from 0 to 512 [ 251.106389][ T6206] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 251.121235][ T6083] team0: Port device team_slave_0 added [ 251.138853][ T6083] team0: Port device team_slave_1 added [ 251.257750][ T6206] ext4 filesystem being mounted at /23/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 251.407131][ T6206] EXT4-fs error (device loop0): ext4_xattr_block_list:766: inode #15: comm syz.0.94: corrupted xattr block 33: e_value size too large [ 251.627919][ T6083] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 251.646080][ T6083] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 251.743604][ T6083] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 251.845784][ T6083] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 251.907574][ T6083] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 252.004266][ T5773] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 252.053394][ T6219] loop3: detected capacity change from 0 to 1024 [ 252.090014][ T6083] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 252.307108][ T29] audit: type=1326 audit(1774042579.149:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6221 comm="syz.1.99" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f1847d9c799 code=0x0 [ 252.711595][ T6228] vimc link validate: Sensor B:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 1:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 252.844889][ T6083] hsr_slave_0: entered promiscuous mode [ 252.944285][ T6083] hsr_slave_1: entered promiscuous mode [ 252.991879][ T6083] debugfs: 'hsr0' already exists in 'hsr' [ 253.017616][ T6083] Cannot create hsr debugfs directory [ 253.563571][ T6237] raw_sendmsg: syz.0.103 forgot to set AF_INET. Fix it! [ 253.751744][ T6239] loop1: detected capacity change from 0 to 16 [ 254.567378][ T30] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 254.613021][ T6248] bridge0: adding interface bridge0 with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 254.819408][ T30] usb 1-1: config 0 has no interfaces? [ 254.825213][ T30] usb 1-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=df.bb [ 254.897442][ T30] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 254.975982][ T30] usb 1-1: config 0 descriptor?? [ 255.240784][ T6254] loop3: detected capacity change from 0 to 1024 [ 255.274105][ T30] usb 1-1: USB disconnect, device number 2 [ 255.345834][ T6254] EXT4-fs: inline encryption not supported [ 255.372106][ T6254] EXT4-fs: Ignoring removed i_version option [ 255.481812][ T6259] loop4: detected capacity change from 0 to 256 [ 255.530353][ T6259] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 255.556582][ T6254] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 255.652746][ T6259] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 255.809131][ T6083] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 255.975554][ T6083] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 256.072673][ T6257] loop1: detected capacity change from 0 to 4096 [ 256.148919][ T6083] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 256.245893][ T5787] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 256.317417][ T6265] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 256.334271][ T6083] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 256.782086][ T6269] loop0: detected capacity change from 0 to 1024 [ 257.030249][ T6269] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-001000000000 r/w without journal. Quota mode: writeback. [ 257.926219][ T5773] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-001000000000. [ 258.565322][ T6083] 8021q: adding VLAN 0 to HW filter on device bond0 [ 258.686662][ T6287] loop0: detected capacity change from 0 to 512 [ 258.869742][ T6281] loop3: detected capacity change from 0 to 4096 [ 258.956193][ T6287] EXT4-fs error (device loop0): __ext4_iget:5378: inode #11: block 1: comm syz.0.119: invalid block [ 259.017818][ T6287] loop0: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 259.019793][ T6083] 8021q: adding VLAN 0 to HW filter on device team0 [ 259.027549][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 259.042726][ C0] EXT4-fs (loop0): initial error at time 1774042585: __ext4_iget:5378: inode 11: block 1 [ 259.053134][ C0] EXT4-fs (loop0): last error at time 1774042585: __ext4_iget:5378: inode 11: block 1 [ 259.087399][ T6287] EXT4-fs error (device loop0): ext4_orphan_get:1396: comm syz.0.119: couldn't read orphan inode 11 (err -117) [ 259.163357][ T6287] loop0: lost filesystem error report for type 5 error -117 [ 259.210050][ T6287] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 259.295766][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 259.303702][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 259.518671][ T3446] bridge0: port 2(bridge_slave_1) entered blocking state [ 259.526277][ T3446] bridge0: port 2(bridge_slave_1) entered forwarding state [ 260.071682][ T5773] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 260.263873][ T6299] loop4: detected capacity change from 0 to 1024 [ 261.059108][ T12] hfsplus: b-tree write err: -5, ino 25 [ 261.065243][ T12] hfsplus: b-tree write err: -5, ino 4 [ 261.142936][ T12] hfsplus: b-tree write err: -5, ino 2 [ 261.256489][ T12] hfsplus: b-tree write err: -5, ino 17 [ 263.354452][ T6083] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 263.383815][ T6339] loop3: detected capacity change from 0 to 1024 [ 263.597799][ T6339] hfsplus: bad catalog entry type [ 264.168116][ T57] hfsplus: b-tree write err: -5, ino 25 [ 264.174191][ T57] hfsplus: b-tree write err: -5, ino 4 [ 264.246313][ T57] hfsplus: b-tree write err: -5, ino 2 [ 264.360196][ T6344] loop0: detected capacity change from 0 to 4096 [ 264.968898][ T6344] ntfs3(loop0): Mark volume as dirty due to NTFS errors [ 265.005420][ T6344] ntfs3(loop0): Failed to initialize $Extend/$ObjId. [ 265.158736][ T6343] ntfs3(loop0): ino=1e, "file1" attr_set_size_ex [ 265.333242][ T6360] netlink: 8 bytes leftover after parsing attributes in process `syz.1.142'. [ 265.397930][ T6360] netlink: 4 bytes leftover after parsing attributes in process `syz.1.142'. [ 265.448866][ T6360] netlink: 'syz.1.142': attribute type 15 has an invalid length. [ 265.526253][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 265.533508][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 265.766261][ T6366] netlink: 24 bytes leftover after parsing attributes in process `syz.4.144'. [ 266.051695][ T6365] loop3: detected capacity change from 0 to 2048 [ 266.058911][ T6369] netlink: 8 bytes leftover after parsing attributes in process `syz.0.145'. [ 266.059010][ T6369] netlink: 4 bytes leftover after parsing attributes in process `syz.0.145'. [ 266.059142][ T6369] netlink: 'syz.0.145': attribute type 18 has an invalid length. [ 266.422643][ T6365] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 266.531333][ T6375] loop1: detected capacity change from 0 to 128 [ 266.738190][ T6365] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters [ 266.819933][ T6365] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 159 with max blocks 1 with error 28 [ 266.877644][ T6365] EXT4-fs (loop3): This should not happen!! Data will be lost [ 266.877644][ T6365] [ 266.993834][ T6365] EXT4-fs (loop3): Total free blocks count 0 [ 267.067801][ T6365] EXT4-fs (loop3): Free/Dirty block details [ 267.073943][ T6365] EXT4-fs (loop3): free_blocks=66060288 [ 267.173535][ T6365] EXT4-fs (loop3): dirty_blocks=32 [ 267.276519][ T6365] EXT4-fs (loop3): Block reservation details [ 267.379766][ T6365] EXT4-fs (loop3): i_reserved_data_blocks=2 [ 267.626508][ T6083] veth0_vlan: entered promiscuous mode [ 267.816319][ T6083] veth1_vlan: entered promiscuous mode [ 267.900280][ T1088] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 267.965382][ T6389] program syz.4.151 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 268.435091][ T6083] veth0_macvtap: entered promiscuous mode [ 268.619364][ T6083] veth1_macvtap: entered promiscuous mode [ 268.963638][ T6083] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 269.073837][ T6083] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 269.098134][ T5838] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 269.162545][ T56] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 269.206724][ T56] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 269.262544][ T12] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 269.268873][ T5838] usb 5-1: Using ep0 maxpacket: 8 [ 269.301954][ T12] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 269.357368][ T5838] usb 5-1: unable to get BOS descriptor or descriptor too short [ 269.399811][ T5838] usb 5-1: config 4 interface 0 has no altsetting 0 [ 269.445449][ T5838] usb 5-1: string descriptor 0 read error: -22 [ 269.466027][ T5838] usb 5-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 269.511308][ T5838] usb 5-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3 [ 269.688981][ T5838] usb 5-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 269.809653][ T5838] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 269.888393][ T5838] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 269.896109][ T5838] usb 5-1: media controller created [ 270.435665][ T5838] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 270.917663][ T5838] zl10353_read_register: readreg error (reg=127, ret==0) [ 270.946843][ T49] Bluetooth: hci0: command tx timeout [ 271.841198][ T5838] usb 5-1: USB disconnect, device number 2 [ 272.114690][ T24] ===================================================== [ 272.122169][ T24] BUG: KMSAN: uninit-value in vidtv_ts_null_write_into+0x43e/0x5c0 [ 272.130702][ T24] vidtv_ts_null_write_into+0x43e/0x5c0 [ 272.136593][ T24] vidtv_mux_tick+0x3480/0x3e30 [ 272.141876][ T24] process_scheduled_works+0xb82/0x1e80 [ 272.147777][ T24] worker_thread+0xee4/0x1590 [ 272.154590][ T24] kthread+0x53f/0x600 [ 272.159684][ T24] ret_from_fork+0x20f/0x910 [ 272.164561][ T24] ret_from_fork_asm+0x1a/0x30 [ 272.169662][ T24] [ 272.172123][ T24] Uninit was stored to memory at: [ 272.177539][ T24] vidtv_ts_null_write_into+0x437/0x5c0 [ 272.183328][ T24] vidtv_mux_tick+0x3480/0x3e30 [ 272.188613][ T24] process_scheduled_works+0xb82/0x1e80 [ 272.194467][ T24] worker_thread+0xee4/0x1590 [ 272.199562][ T24] kthread+0x53f/0x600 [ 272.203842][ T24] ret_from_fork+0x20f/0x910 [ 272.208763][ T24] ret_from_fork_asm+0x1a/0x30 [ 272.213752][ T24] [ 272.216169][ T24] Local variable args.i132 created at: [ 272.223883][ T24] vidtv_mux_tick+0x3119/0x3e30 [ 272.229536][ T24] process_scheduled_works+0xb82/0x1e80 [ 272.235310][ T24] [ 272.237999][ T24] CPU: 1 UID: 0 PID: 24 Comm: kworker/1:0 Not tainted syzkaller #0 PREEMPT(full) [ 272.247488][ T24] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 272.259508][ T24] Workqueue: events vidtv_mux_tick [ 272.264952][ T24] ===================================================== [ 272.272699][ T24] Disabling lock debugging due to kernel taint [ 272.371504][ T24] Kernel panic - not syncing: kmsan.panic set ... [ 272.378166][ T24] CPU: 1 UID: 0 PID: 24 Comm: kworker/1:0 Tainted: G B syzkaller #0 PREEMPT(full) [ 272.389186][ T24] Tainted: [B]=BAD_PAGE [ 272.393462][ T24] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 272.403789][ T24] Workqueue: events vidtv_mux_tick [ 272.409159][ T24] Call Trace: [ 272.412834][ T24] [ 272.415897][ T24] __dump_stack+0x26/0x30 [ 272.420451][ T24] dump_stack_lvl+0x50/0x1c0 [ 272.425267][ T24] ? dump_stack+0x12/0x25 [ 272.429916][ T24] dump_stack+0x1e/0x25 [ 272.434281][ T24] vpanic+0x7b4/0x1430 [ 272.438611][ T24] panic+0x15d/0x160 [ 272.442766][ T24] kmsan_report+0x31a/0x320 [ 272.447524][ T24] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 272.453601][ T24] ? __msan_warning+0x1b/0x30 [ 272.458514][ T24] ? vidtv_ts_null_write_into+0x43e/0x5c0 [ 272.464494][ T24] ? vidtv_mux_tick+0x3480/0x3e30 [ 272.469731][ T24] ? process_scheduled_works+0xb82/0x1e80 [ 272.475669][ T24] ? worker_thread+0xee4/0x1590 [ 272.480813][ T24] ? kthread+0x53f/0x600 [ 272.485366][ T24] ? ret_from_fork+0x20f/0x910 [ 272.490350][ T24] ? ret_from_fork_asm+0x1a/0x30 [ 272.495529][ T24] ? ret_from_fork_asm+0x1a/0x30 [ 272.500705][ T24] ? raw_irqentry_exit_cond_resched+0x5d/0x80 [ 272.507055][ T24] ? irqentry_exit+0x8f/0x6c0 [ 272.511957][ T24] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 272.518546][ T24] ? kmsan_get_metadata+0xf1/0x160 [ 272.523968][ T24] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 272.530140][ T24] ? vidtv_ts_null_write_into+0x81/0x5c0 [ 272.536038][ T24] ? filter_irq_stacks+0x49/0x190 [ 272.541324][ T24] ? stack_depot_save_flags+0x35/0x790 [ 272.547010][ T24] ? kmsan_get_metadata+0xf1/0x160 [ 272.552381][ T24] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 272.559055][ T24] ? kmsan_get_metadata+0xf1/0x160 [ 272.564424][ T24] __msan_warning+0x1b/0x30 [ 272.569152][ T24] vidtv_ts_null_write_into+0x43e/0x5c0 [ 272.574994][ T24] vidtv_mux_tick+0x3480/0x3e30 [ 272.580218][ T24] ? __pfx_vidtv_mux_tick+0x10/0x10 [ 272.585646][ T24] process_scheduled_works+0xb82/0x1e80 [ 272.591483][ T24] worker_thread+0xee4/0x1590 [ 272.596421][ T24] kthread+0x53f/0x600 [ 272.600724][ T24] ? __pfx_worker_thread+0x10/0x10 [ 272.606059][ T24] ? __pfx_kthread+0x10/0x10 [ 272.610869][ T24] ret_from_fork+0x20f/0x910 [ 272.615670][ T24] ? __switch_to+0x51c/0x750 [ 272.620509][ T24] ? __pfx_kthread+0x10/0x10 [ 272.625352][ T24] ret_from_fork_asm+0x1a/0x30 [ 272.630400][ T24] [ 272.634211][ T24] Kernel Offset: disabled [ 272.638637][ T24] Rebooting in 86400 seconds..