last executing test programs: 6.893518957s ago: executing program 1: r0 = memfd_create(&(0x7f0000000000)='\xf3e\t\x9f\x918\xc0y\x01c\x1fnux\x00sV\ad\xb0l \xfd\xd7\x8e\x7f\x89\xb8\xc5;~\x04\x03~K\xfbP\x84=\xfa\x81\f\x1et\x10\x0e\xcf^9\xbe\\', 0x0) pwrite64(r0, &(0x7f000003bfff)='/', 0x1, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r0, 0x0) symlink(&(0x7f0000001000)='./file0\x00', &(0x7f00000000c0)='./file0\x00') r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004cc311ec8500000075000000a70000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='kfree\x00', r1}, 0x10) mount$tmpfs(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='m']) 6.247326857s ago: executing program 0: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, 0x0, 0x0) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000002540)=[{{0x0, 0x0, &(0x7f0000002800)=[{&(0x7f0000000240)="1380204305db3005fee06a4edeab5e114e7ab994e47e0d17030cd7f061099f9368", 0x21}, {&(0x7f0000000800)="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", 0x394}], 0x2}}], 0x1, 0x0) 6.192749789s ago: executing program 1: r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{}, {0x0, 0x989680}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) write$binfmt_script(r1, &(0x7f0000000200)={'#! ', '', [{0x20, '#!2'}, {0x20, '#! '}, {0x20, '/proc/sys/net/ipv4/tcp_congestion_control\x00'}, {}], 0xa, "8855d1bef46f70e481dbdabbfc3bcc3f005c1079e7344e4392717247b88b05708cd1663511237737ac00004c03fa9d00005380"}, 0xfffffe59) sendmsg$unix(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f00000002c0)='c', 0x1}], 0x1}, 0x0) close(r1) socket$unix(0x1, 0x1, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) rt_sigreturn() mlockall(0x1) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) 6.072747793s ago: executing program 2: lsetxattr$security_capability(0x0, 0x0, 0x0, 0x5b, 0x0) 5.695774348s ago: executing program 3: sched_setscheduler(0x0, 0x0, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_mount_image$nilfs2(&(0x7f0000000dc0), &(0x7f0000000e00)='./file0\x00', 0x0, &(0x7f0000000e40), 0x1, 0xd99, &(0x7f0000000e80)="$eJzs3UtvXNUdAPBzx544LxqHmMZN09glpbiP2CRYpbsaKV2gSqgSnwClgYYa+ghdgIKUsOi2kRAfoIh9F31mgRSxSsWmVb8AYtVNipBoG1UCI9vnjMf/zOjOOLbH4/n9pDtn7v2fe88587hz575OAkZWY+1xcXG6SuntW29dvDcz/r/VKTOtHLNrj+N5bCml1GzNl9JkWN7SxHr62SfXLrWnn+e0ShdSlarW9PTs3da8R1JK19Nsup0m03Mfn7z50gfPLL934saJi2/M3dmZ1gMAwGi596N3f/m3x3947fj/f39mKU20ppft86U8fjRv9y9V6+M5af0PqNrSqm28OBDyjeehEfKNdcjXXk4z5BvvUv6BsNxml3wTNeWPtU3r1G4YZhv/46vG/KbxRmN+fv0/+aoPxw5U869cWX7h6oAqCmy7T2fyLj6DwTByw8qxQa+BANbF44b3uR73LDyY1tLGeyv/7tONzvPDNtjtz7/yh6v8d29Y47B99uunqbSrfI+O5vF4HGE8zNfv978sLx6PaPZYz27HEYbl+EK3eo7tcj22qlv94+div/paTsvrcCbE278/8T0dlvcY6Oye/f8Gw8gOK4NeAQF7VjxvbiUr8XheX4xP1MQP1sQP1cQP18SP1MRhlP3h1d+mm9XG//z4n77f/WFlP9tDOf1Sn/WJ+yP7LT+e99uvBy0/nk8Me9rcf09/+uvbf4/n/38ezv8/m39LJ/MKouwvjPvVW+f+hwuDG13yPRyq81CH/GvPpzbnq6Y2lpPa1jP31WN683zHuuU7vTnfZMh3OG+LHAz1jdsnh8N8ZfujrFfL6zUe2tsM7TgQ6lHemeM5PRjac7xbu8KO7AMhXzMPJ0K7pkK7HgnzfTm0q5re3K64/7zU52SYHo+TlHzhbbvvdym+F/G6jEdz+mZO38np+zn9qEO5o6h8Hrud/18+n9OpWb1wZfnyE3m8fE7vjDUnVqef3+V6Aw+u1+t/ptPm63+OtqY3G+3rhWMb06v29cJkmH6hy/Qn83j5Pfvp2KG16fOXfr78k+1uPIy4q6+9/rPnl5cv/8oTTzzxpPVk0GsmYKctvPryLxauvvb6uSsvP//i5Rcvv3L+ie9/78mnnlpcWNuqX2jftgf2l40f/UHXBAAAAAAAAAAAAOhZdajz5JzW3d+2XE9erk+P18czHMr7Vj4N5T4G5frPbvd1KddvHt+FOrL9duNyokG3Eejs3+7/azCM7LCy4i7+wN4w6P7/yn0PS3r03D+Prw4l292nN68v4/0L4UHs9f7nlL+/+v9r9X/V8/ov9Jg1ubVy/3jv0D/aik2nei0/tr/cB3aqv/L/lMsvrXks9Vb+yu9C+fFGpT36cyj/cI/l39f+01sr/y+5/PKyzZ3ttfz1GleNzfWI+43LfQDjfuPir6H95d5+fbd/ix213crlwygbln4m+zUs/X92U5Zb1oN59dw6Tlfuvx37O+i3/uW+3+V34JGw/Krm903/n8Otrv/P8vlb0P8n7DsfOv5nMIzssLKyMtCuT0a135W9YtCv/6C3IQdd/qBf/zqx/8/4fyn2/xnjsf/PGI/9f8Z47F8rxmP/n/H1jP1/xvjJsNzYP+h0TfwrNfFTNfGv1sRP18Tj/7cYn62Jn6mJz9TEH66JP1oTP1sT/0ZN/LGa+OM18bma+H739ZyOavthlMV+I33/YXSU4z/dvv9TNXFgeMV+neP3+5s1cWB4lfM8fL9hBFWd79gR97eX/bhv5vSdnL6f0492rILshm/l9Ns5/U5Ov5vTczmdz+lCTvUNOdx+869TZ25WG+f5HQvxXs8njdcDxPvEnO+xPvH4XL/ns57ssZydKn+Ll4MAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADI3G2uPi4nSV0tu33rr4n6kf/Hh1ykwrx+za43geW0opNVNKVR4fD8u7PrGefvbJtUud0ipdWHss4+nZu615j6zOn2bT7TSZnvv45M2XPnhm+b0TN05cfGPuzs60HgAAAEbDFwEAAP//ManlwQ==") sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) preadv(r0, &(0x7f0000000240)=[{0x0}], 0x1, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x0, 0x7, 0x8, 0x0, 0x5}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0xf, &(0x7f0000000540)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r2}}}, &(0x7f0000000180)='syzkaller\x00', 0x2, 0xeb, &(0x7f0000000200)=""/235, 0x0, 0x11}, 0x90) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r3 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1c0000005e0021a5553f8f06af8cc464ecf39417087718268c"], 0x1c}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r3) 5.619566635s ago: executing program 0: r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'veth1_to_batadv\x00', 0x0}) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000100)={@local, 0x0, r1}) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, &(0x7f0000000140)={@mcast2, @mcast1, @private2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa0022}) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'veth1_to_bridge\x00'}) socket$inet6_mptcp(0xa, 0x1, 0x106) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8914, &(0x7f0000000100)={'veth1_to_bridge\x00'}) 5.402749517s ago: executing program 4: r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000), 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000a8c5000000a5000000180100002020640500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3d, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 5.182072886s ago: executing program 2: r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f0000bbdffc)) pipe2(&(0x7f0000000140)={0xffffffffffffffff}, 0x0) read$char_usb(r1, &(0x7f0000000840)=""/160, 0xa0) close(r1) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write$FUSE_NOTIFY_STORE(r2, &(0x7f00000020c0)=ANY=[], 0x2b) dup3(r2, r1, 0x0) rt_sigreturn() poll(0x0, 0x0, 0x64) poll(0x0, 0x0, 0x401) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) mlockall(0x1) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) 5.119839416s ago: executing program 0: socket$xdp(0x2c, 0x3, 0x0) r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=@framed, &(0x7f00000003c0)='GPL\x00'}, 0x90) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000000040)=0x20, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'xfrm0\x00', 0x0}) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r0, &(0x7f0000000100)={0x2c, 0x0, r2}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001e80)=0x14) sendmsg$nl_route(r3, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000540)=@newlink={0x20, 0x11, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, r5}}, 0x20}}, 0x0) 4.942609729s ago: executing program 1: r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'macvlan0\x00'}) unshare(0x20000400) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={0x0, 0x0, 0x26}, 0x20) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) ioctl$EXT4_IOC_SETFSUUID(r1, 0x4008662c, 0x0) ioctl$sock_SIOCBRDELBR(0xffffffffffffffff, 0x89a2, &(0x7f0000000000)='bridge0\x00') 4.632168658s ago: executing program 4: r0 = memfd_create(&(0x7f00000003c0)='\x00\xac=W[[\x87\x12\x04\xd5\xbc\x80K\x06\xcd]4(\xa2\xee2>\xa1\x9c\x86x\x1c\x9f\x97\x87\xd9c\xecR\xd6\xe8\xf3Y\x121p^\xc1\x0f\x00\x00\x00\x00\x00\x00\x00t\x00\x00\x00\x00\x00\x00\x00\x05\x00\x00\x00\x00M\xc2N%\x93t[\xf3\xee\xa4\xb4\xfbW\x8dz7\\\x8e\xac\x18\x00\xfd\x89\xe1d\xfa\xcfb\xf3\xdc\xd4CY\x9a\xef\xa3\\\xa7\xa9^\xaf\x01:[\x8e\x83U\xff\xfd\xb0\xfa\xdaL\xa99\x9b\xcfA\xe4n\xa0^\n\x1c\x84\x04\xc5a\xdf\xe5\xd4Hyn\xba:/\xa5\xf4\xaa\xfa\xcd\xc7T\x83\xf5N^\xf2n\xd0=\xb9\t\xdd-F\xacb\xac \xd3\xccj\x13\xa2\x9fLu\'\xed\x91\x867\xaa\xf5\xa0]\xb6\xaa\x95\xdf\xbb\xadkz\x0f\xdd\x9c\xea\xfd\xde\xa6\xec\b\x16\x86l:;\xf9\xdb\xcf\x88\"\xca\xe0E\xdb\xec\xf9\xb3\xed\a\xf2\xff\xff\xff\xff\xff\xff\xd5.\xf7\x92\xc42\xdf\xefE\xce}\x1b\xda\xdd?\n6\xe1\xb1\xd8Y\x960\xd1\x00\x00\x00\x00\x00\x00MW\x8f\xc6\x82\xe4\x15\xf7\xe9\xd8\xc5b\x0e\x91\xc5\xc76$\x18\xa4\xbe\xe8V\x8d-\xe3\x8fC\xd5\xf5\xd6L\xe3\xce\xa1\x8dz\xce\xa7\xa5\xc8\xcbhM\x1b\xf8\x98\xc4\xfbD6\x88\xfd\xe5i\x8a\xd8\xcfm\x81Z\x19\xf0\xef\xc15\xe8\xcb\xf5\t\t\x00\x17\xfa\x1fqb\xe7\"\xcb/\xb8\xe5/\xd52\x17\x12\x1d\xd8\x87\xb9|\x8d\x83\xea\xcc\x94\xcbZ\xae\xaf\x19\xa4\xb2\xc6\xe1\x926B\xb6\x89Z\xa9\xb5/\xbb\x9d&\xeeO\xb3\xb3\xd4\b`\xa9f\x84\xad\t\x1a\xc2\xd5\x88\xbfo\x80V\x93\x9fX\xd7\xff\x03\xb7J\xed\x183\xe3\x7f\xfaq,\xca\x06\xb0\xc9\x92\x93\xa5I\x89\xb7\x85\x90\xb7\x1b0\xce\xd7!\x8fD\x96\xe1 ^>\x9f\x04\x89<\xb7S\x7f\x1a\x88\xab$\xd3y\xc2\xe1\x99\xbch\xd3\x83\xcd\x7f\xc5n\xb1\xc1X \xe2\xbb\x1f\x01\x90\xb1O\x8d\x7f\xa8\xd4\xdbO\xef\x99r\t.-\t\x7f\n,\x84\x1f\xfa\xe2\xc8\x99\x97Oq\xae\x9b\x86h\xfa3\xb9\xfd\xbb\xd4^\xc0t\xa7]Y\xe9\x7f[\x11\xb1\xf3m\x17F\x9d\x18\xe2\xe1\x01\xb6f=-?\xbcI\xf2\xd9\xc4>-\xc0E\x9a\x82\xcc7S\xd4\xb6\'\xd2DY\xa5\x83,\xd1\xbc\xc7\xf6\xe0\x1f o\x06\xc2t\x14\xc2\xa4\xb0\x17\xe0\x92\xc1\x04)w\xe1\xc9\xb0\x84\x1f,\xa8T2\xf8% \xc7\x13l\x8bJ\xe5\xec\x1dE\xf5\xc5\xe2\xe3\x10G7r#\xbc\x95&\x14\x1e\x97\xce\x83>Q@\xfb\xeb=\x1e\xb3\xd5H\x02\x86\xc6\xf3\xe1i\\\x1d\xf4\xc1\xacJC+\xc8}\x1b{\x86\x17\x00\n\"\xec\xa5x\xe6\xb1i\xeb\xb3\xb7I\x90\x9eai\xde\x01\xdc\xfeA\x05Sn\xe6\xe8^\xdf\x8c`\x17\xca\xbd\\QG\xb15\x82*\x03\x00\x00\x00\x12<\xd7\xe1$\xa4\xdaU\xfb^\xd8!\xacxy\xd5X\xef\x03\xa7\x10\xa1C#\xff\xff\x00\x00\x00\x00\x00\x00mv0\x9eZ\x89\xf4\xae\a\xc8\x16\xd2t\x16\xf3X%Q\xbd\xe9\x86V\xf2\x99^0\xe8xI(\xde-\x04s\x15\x06#2\xef\xef@\xa3t0d^^\xad\xf6\xad\xe0\x16\xf6\xa8\x99!\xc9\x9d+;D&\xebN\x94\x12\x04\x95o\xd6\x9fl\xcb\x16gc\xf5(\xaa_\xec\x9aiE\f\xd4\xc6\xf2\xae\x85n\x995\xcd\xa7\xbb\xf0pz\xaf\tC\x1cq\xaa\x92,Li\r\x95Z\x89\"\xaf]\x95\xb9b_\xe4\xba\xd4\x93\xab\xe1\xb9\xd8E[\xbb\xc9.M+\xbe\x81<\x91\xb0\xdd\x9f\x93\xe6h\x97\x7f\xaf\xc5\x06g\fI\xa58\xf5\x18x\xc9\xb9\x03\t\x06\x96gf5\xb0\xc8\x86\x14\xe2\x01\x1f\x80\xe7Ol\xba\x93\xaa\x15\x87I7W\x87\xc4;p\xc5\x1e\"K5r\xec6\xac\xf0;\xf8 \xad\xc9\xf0\x16\xce\x17\xa1%f\x12\x80\x03N[qz\xf0q\xbd\xb8s\xe5>N\xd2\xae\xf4\x18\xd0\xe7\x98\x90,\xce\ft\xc4\xc7\x02\xaa\xc7\xeb1;\x86b\x8f\x12{k#c\x1d@\xc31\x00\xd2\x7f\x00\x00\x00\xce\xed\xa4\xe4\xca`<_}\'\xce\x81\xb3O\xae\xa1\xbfwcN,\xf2#\x16\xc4\xad\a&\xb1U\x83w\xd0K\xaa\xdf\x84\xe5\xe4\xdb\xa3G(\x7fv\x93\xb8m\x96\xd89Kb\xa9\x852\xb9\xcaG\x8b\x11\x16\x16\xeeI\x14\xcb\xe4\x9a\x1e\xb6^\xa3\xaa^\xdc\xcfo\xfb\xd6<\xa2\xc6\xbdj\xc4\xb1B\xf3S}\xfeI\xe2e\xec}o\xcfB\xa6\x877\'\x80\x82\t\xec\xc1&\xb8\xa9\x82&\xb8XQ8M@\xaa\x1f\vj\x9aW\xec\x92\x19\xdb^\x9d\x94\x87-&\x00/z\xa2\xd7\x01\\\t\xae~\xed\no\x1a\x9cKG^+\xc9\xe0v\xc0\x96\xc4\xcc\xb7\xdd\xdf\xf9\x01\x91\xd1\to[\x97\xbe\x110\x93\x14\xf8\x8a\x8d\xeb\t\xe7?/C\xaa\xd9\xc4\xc9\xbe\x12\xed\xb3*f\xd1T\xc0\x80Iy4\xa9\xf88C\xe3\x0e\xcd\xec,\xd4+d\x84\x96\x99\xe8\xec\xe5\xcdg\xd5~\x1c\xaexVW\xf7\x0fo\xa5r\xca\x00d\vD\xc9<\x1c\\\xbe\x99w\xf7\xe5\xa5\xf3H\a\f\xa0\xb3\x12%\x90\xd4\xed\x98\xc7\x1a\xd747\x86\x88\xbb\xf3\r\x82\xf4K}\xb9\xbb\xb7\xcf\xd7\xf2\x1f1\x04\x12%\x01\xa9\xd9s\x9a\xf7?X\xda\xc1\xba\x1cq\x89g\xbb\v]\x0fF\xa1\x05\xab,@\x13\x19\xbe\x14\xc4\x1aO\xa6\x966\xb6)\xde,qy\xa0\xf1\xc3sx\x1a\x02i\xed:)\x9fC\xaafH\xec\xfe\x97I\xac\xdeV\xb2\xe4\"\x1f\x10u\x91\n\xb19_\xe5\x80\xd2U\xd9\x92:\xe0\t?\x81\xeb\xf9\xd7o\x8b\xd0\xc9`\xad\xd5\x83#\x1e\xb6\x01\x1fTg\b\x12*\x99[\x00<\xd8\x01\xec\xbd\x9f\xec=u\b\xb0\x1b\x9d\xcf\xe8xs\x14/\x8eA\x041EF\xc4\xd5\x12\xc6\xf7', 0x0) write(0xffffffffffffffff, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x0) mremap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x3000, 0x3, &(0x7f0000ffa000/0x3000)=nil) 4.105021517s ago: executing program 1: r0 = memfd_create(&(0x7f0000000000)='\xf3e\t\x9f\x918\xc0y\x01c\x1fnux\x00sV\ad\xb0l \xfd\xd7\x8e\x7f\x89\xb8\xc5;~\x04\x03~K\xfbP\x84=\xfa\x81\f\x1et\x10\x0e\xcf^9\xbe\\', 0x0) pwrite64(r0, &(0x7f000003bfff)='/', 0x1, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r0, 0x0) symlink(&(0x7f0000001000)='./file0\x00', &(0x7f00000000c0)='./file0\x00') r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004cc311ec8500000075000000a70000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='kfree\x00', r1}, 0x10) mount$tmpfs(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='m']) 4.01177412s ago: executing program 3: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x9cb5, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000200)={0x0, 0x20, 0x2, {0x1, @raw_data="4bbf622b20d2538e6e1f445b7795aa93c004bbb74ebdde873aa40cfdb8d06aefde8880cf4a22212c23b7c448cd514212f3419dcccde3ae9debb21b3ee10fdf63d3e7583e6702b0e9a49174a54c8fc2394f74d8c60dd96a7d41cebaaa10e0fe4fb36d1d8c9ff5984eea66eb54ff774e7af403c61eb7963e0bd5b1370d56b3a9efdaabcb8c2d20c39e64de366fce7e9c408b86db8a782f306a3e186d49e5f92e8a46d4ef2b353b7082844034eb36e4df5d2bf8b6635dd0f7a4d05bc0e9c33dffa2e74c75962dc70ea1"}}) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, 0x0) 3.959835975s ago: executing program 4: syz_open_procfs(0xffffffffffffffff, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00'}) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000080)=0xf3e, 0x62) syz_mount_image$hfsplus(&(0x7f0000000100), &(0x7f00000004c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x8000, &(0x7f00000003c0)={[{@gid}, {@nobarrier}, {@nodecompose}, {@creator={'creator', 0x3d, "3bf9bacf"}}, {@barrier}]}, 0x1, 0x6a9, &(0x7f0000000c80)="$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") syz_mount_image$fuse(0x0, &(0x7f0000000e80)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) renameat(r1, &(0x7f0000001380)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r1, &(0x7f0000000240)='./file0\x00') 3.810829531s ago: executing program 0: r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000440), 0x10) listen(r0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) r2 = accept4$unix(r0, 0x0, 0x0, 0x0) gettid() sendmsg$unix(r2, &(0x7f0000002a80)={0x0, 0x0, 0x0}, 0x0) 3.625477442s ago: executing program 2: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, 0x0, 0x0) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000002540)=[{{0x0, 0x0, &(0x7f0000002800)=[{&(0x7f0000000240)="1380204305db3005fee06a4edeab5e114e7ab994e47e0d17030cd7f061099f9368", 0x21}, {&(0x7f0000000800)="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", 0x394}], 0x2}}], 0x1, 0x0) 3.305859606s ago: executing program 3: r0 = open(&(0x7f0000000040)='./bus\x00', 0x145142, 0x0) ftruncate(r0, 0x2007ffb) sendfile(r0, r0, 0x0, 0x800000009) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) lseek(r0, 0x2007ffb, 0x3) 3.232252366s ago: executing program 0: bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x0, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeea, 0x10, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_emit_ethernet(0x34, &(0x7f0000001940)=ANY=[@ANYBLOB], 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000700), 0x4) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ppoll(&(0x7f0000000080)=[{r0}], 0x1, 0x0, 0x0, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000100)=0x10000611) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000001800)={0x0, 0x0, 0x0, 0x0, 0x0, "df3f0400000000000000000000000609000040"}) r1 = syz_open_pts(r0, 0x0) dup3(r1, r0, 0x0) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) 3.22706645s ago: executing program 4: r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'veth1_to_batadv\x00', 0x0}) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000100)={@local, 0x0, r1}) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, &(0x7f0000000140)={@mcast2, @mcast1, @private2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa0022}) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'veth1_to_bridge\x00'}) socket$inet6_mptcp(0xa, 0x1, 0x106) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8914, &(0x7f0000000100)={'veth1_to_bridge\x00'}) 2.992612736s ago: executing program 1: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000001a40)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x7, &(0x7f0000000080)=0x1, 0x4) 2.796989157s ago: executing program 2: r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000), 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000a8c5000000a5000000180100002020640500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3d, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 2.590578576s ago: executing program 0: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000001a40)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x81) r5 = getpid() sendmmsg$unix(0xffffffffffffffff, &(0x7f00000037c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="00000000000000000100000001000000", @ANYRES32, @ANYRESOCT=r3, @ANYRES32=r5, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYRES32=0xee01, @ANYRES8=r3], 0x40}}], 0x1, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x24, &(0x7f0000000080)=0x1, 0x4) recvmmsg(r6, &(0x7f0000001980)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/26, 0x1a}}, {{&(0x7f0000001380)=@pppoe={0x18, 0x0, {0x0, @local}}, 0x80, &(0x7f0000001840)=[{&(0x7f0000001400)=""/149, 0x95}, {&(0x7f00000014c0)=""/105, 0x69}, {&(0x7f0000001540)=""/188, 0xbc}, {&(0x7f0000001600)=""/57, 0x39}, {&(0x7f0000001780)=""/171, 0xab}], 0x5}}], 0x2, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f0000000e00)=ANY=[], &(0x7f00000004c0)='syzkaller\x00', 0x400, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) socket$inet(0x2, 0xa, 0x0) creat(&(0x7f0000000300)='./bus\x00', 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r7, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r7, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xadf29f33fb903ae1, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) shutdown(0xffffffffffffffff, 0x1) setsockopt$inet6_IPV6_DSTOPTS(0xffffffffffffffff, 0x29, 0x3b, &(0x7f0000000ac0)=ANY=[@ANYBLOB="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"], 0x8) recvmsg(r7, &(0x7f00000008c0)={0x0, 0x4, &(0x7f0000000840)=[{&(0x7f0000000040)=""/50, 0xfffffe72}, {&(0x7f0000000240)=""/52, 0x34}, {&(0x7f0000000780)=""/129, 0x80}, {&(0x7f0000000300)=""/68, 0x44}, {&(0x7f0000000380)=""/121, 0x79}, {&(0x7f0000000400)=""/183, 0xb7}], 0x6}, 0x40000110) 2.190106395s ago: executing program 4: sched_setscheduler(0x0, 0x0, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_mount_image$nilfs2(&(0x7f0000000dc0), &(0x7f0000000e00)='./file0\x00', 0x0, &(0x7f0000000e40), 0x1, 0xd99, &(0x7f0000000e80)="$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") sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) preadv(r0, &(0x7f0000000240)=[{0x0}], 0x1, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x0, 0x7, 0x8, 0x0, 0x5}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0xf, &(0x7f0000000540)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r2}}}, &(0x7f0000000180)='syzkaller\x00', 0x2, 0xeb, &(0x7f0000000200)=""/235, 0x0, 0x11}, 0x90) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r3 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1c0000005e0021a5553f8f06af8cc464ecf39417087718268c"], 0x1c}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r3) 2.011121493s ago: executing program 3: syz_mount_image$iso9660(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='check=strict,norock\x00\x00\x00\x00e,check=relaxed,check=relaxed,nojoliet,check=relaxed,block=0x0000000000000400,\x00'], 0x1, 0x52c, &(0x7f0000000580)="$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") r0 = inotify_init1(0x0) inotify_add_watch(r0, &(0x7f00000000c0)='./file0\x00', 0x1000a10) openat$dir(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x0, 0x0) 1.750557063s ago: executing program 2: socket$xdp(0x2c, 0x3, 0x0) r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=@framed, &(0x7f00000003c0)='GPL\x00'}, 0x90) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000000040)=0x20, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'xfrm0\x00', 0x0}) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r0, &(0x7f0000000100)={0x2c, 0x0, r2}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001e80)=0x14) sendmsg$nl_route(r3, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000540)=@newlink={0x20, 0x11, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, r5}}, 0x20}}, 0x0) 1.597843783s ago: executing program 1: ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'sit0\x00', &(0x7f00000002c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x26, 0x4, 0x0, 0x0, 0x98, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast, @remote, {[@timestamp={0x44, 0x18, 0x0, 0x0, 0x0, [0x0, 0x5, 0x0, 0x0, 0x4]}, @timestamp_prespec={0x44, 0x44, 0xc0, 0x3, 0x0, [{@private=0xa010100}, {@multicast1}, {@remote}, {@dev, 0x659}, {@broadcast}, {@empty}, {@multicast1, 0xffd200}, {@private=0xa010100, 0x7}]}, @noop, @noop, @noop, @lsrr={0x83, 0xf, 0xdc, [@private=0xa010102, @rand_addr=0x64010102, @multicast1]}, @rr={0x7, 0x13, 0x0, [@remote, @multicast1, @private=0xa010102, @remote]}]}}}}}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r2, 0x0) r3 = dup(r1) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0xffff, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0xd000}) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_RUN(r4, 0xae80, 0x0) 855.393558ms ago: executing program 3: r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x9cb5, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000200)={0x0, 0x20, 0x2, {0x1, @raw_data="4bbf622b20d2538e6e1f445b7795aa93c004bbb74ebdde873aa40cfdb8d06aefde8880cf4a22212c23b7c448cd514212f3419dcccde3ae9debb21b3ee10fdf63d3e7583e6702b0e9a49174a54c8fc2394f74d8c60dd96a7d41cebaaa10e0fe4fb36d1d8c9ff5984eea66eb54ff774e7af403c61eb7963e0bd5b1370d56b3a9efdaabcb8c2d20c39e64de366fce7e9c408b86db8a782f306a3e186d49e5f92e8a46d4ef2b353b7082844034eb36e4df5d2bf8b6635dd0f7a4d05bc0e9c33dffa2e74c75962dc70ea1"}}) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, 0x0) 145.278869ms ago: executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x200000000000011, 0x2, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="380000005500e501000000000000000007000000", @ANYRES32=r1, @ANYBLOB="20000100", @ANYRES32, @ANYBLOB="250b00000000000000000000000000ca05000000c0"], 0x38}}, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0x2, 0xc}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007d00000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000ff0300000000000000000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000e00000095"], &(0x7f00000001c0)='syzkaller\x00', 0x400000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000200)='rxrpc_conn\x00', r4}, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r6, &(0x7f00000bd000), 0x492492492492846, 0x0) fcntl$setstatus(r6, 0x4, 0x2400) ppoll(&(0x7f0000000040)=[{r6, 0x300}], 0x1, 0x0, 0x0, 0x0) connect$unix(r5, &(0x7f00000002c0)=@file={0x0, './file0\x00'}, 0x6e) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000080)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0x8c}, [@ldst={0x6, 0x0, 0x3}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x366, 0x10, &(0x7f0000000000), 0x2b2}, 0x48) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r7, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4), 0x1c) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x41, &(0x7f0000000140)=0x2998, 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendto$packet(r2, 0x0, 0x0, 0x0, &(0x7f0000000080)={0x11, 0x0, r8}, 0x14) close(r2) request_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000080)={'syz', 0x1}, &(0x7f0000000100)='-\xdc(,[{^+\x00', 0xfffffffffffffff9) 14.139785ms ago: executing program 3: syz_open_procfs(0xffffffffffffffff, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00'}) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000080)=0xf3e, 0x62) syz_mount_image$hfsplus(&(0x7f0000000100), &(0x7f00000004c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x8000, &(0x7f00000003c0)={[{@gid}, {@nobarrier}, {@nodecompose}, {@creator={'creator', 0x3d, "3bf9bacf"}}, {@barrier}]}, 0x1, 0x6a9, &(0x7f0000000c80)="$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") syz_mount_image$fuse(0x0, &(0x7f0000000e80)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) renameat(r1, &(0x7f0000001380)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r1, &(0x7f0000000240)='./file0\x00') 0s ago: executing program 4: r0 = memfd_create(&(0x7f0000000000)='\xf3e\t\x9f\x918\xc0y\x01c\x1fnux\x00sV\ad\xb0l \xfd\xd7\x8e\x7f\x89\xb8\xc5;~\x04\x03~K\xfbP\x84=\xfa\x81\f\x1et\x10\x0e\xcf^9\xbe\\', 0x0) pwrite64(r0, &(0x7f000003bfff)='/', 0x1, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r0, 0x0) symlink(&(0x7f0000001000)='./file0\x00', &(0x7f00000000c0)='./file0\x00') r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='kfree\x00', r1}, 0x10) mount$tmpfs(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='m']) kernel console output (not intermixed with test programs): 1, 0] type 2 family 0 port 6081 - 0 [ 569.145487][ T2465] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 569.326824][ T2465] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 569.457417][ T1065] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 569.465868][ T1065] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 569.591893][ T4196] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 569.604777][ T4196] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 569.814529][ T2465] bridge_slave_1: left allmulticast mode [ 569.820550][ T2465] bridge_slave_1: left promiscuous mode [ 569.827143][ T2465] bridge0: port 2(bridge_slave_1) entered disabled state [ 569.901137][ T2465] bridge_slave_0: left allmulticast mode [ 569.914851][ T2465] bridge_slave_0: left promiscuous mode [ 569.921961][ T2465] bridge0: port 1(bridge_slave_0) entered disabled state [ 570.001201][ T29] audit: type=1804 audit(1717808560.153:43): pid=8526 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir617410377/syzkaller.papGZ5/10/bus" dev="sda1" ino=1951 res=1 errno=0 [ 570.591722][ T2465] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 570.651681][ T2465] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 570.670650][ T2465] bond0 (unregistering): Released all slaves [ 570.791063][ T5119] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 570.799099][ T5119] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 571.495306][ T2465] hsr_slave_0: left promiscuous mode [ 571.538869][ T2465] hsr_slave_1: left promiscuous mode [ 571.587960][ T2465] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 571.596293][ T2465] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 571.635186][ T2465] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 571.642929][ T2465] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 571.779438][ T2465] veth1_macvtap: left promiscuous mode [ 571.787243][ T2465] veth0_macvtap: left promiscuous mode [ 571.793266][ T2465] veth1_vlan: left promiscuous mode [ 571.798825][ T2465] veth0_vlan: left promiscuous mode [ 572.829023][ T2465] team0 (unregistering): Port device team_slave_1 removed [ 572.829595][ T4428] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 572.907360][ T4428] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 572.922287][ T4428] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 572.934518][ T2465] team0 (unregistering): Port device team_slave_0 removed [ 573.191291][ T4428] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 573.321936][ T8536] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 573.334171][ T4428] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 573.343796][ T4428] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 573.677869][ T8540] netlink: 108 bytes leftover after parsing attributes in process `syz-executor.4'. [ 574.061259][ T4196] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 574.069315][ T4196] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 574.138634][ T1065] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 574.147416][ T1065] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 574.288581][ T8550] Cannot find add_set index 0 as target [ 575.082511][ T8544] chnl_net:caif_netlink_parms(): no params data found [ 575.297324][ T8565] random: crng reseeded on system resumption [ 575.414910][ T4428] Bluetooth: hci3: command tx timeout [ 575.609848][ T8567] loop4: detected capacity change from 0 to 512 [ 575.679919][ T8567] EXT4-fs: Ignoring removed bh option [ 575.715412][ T8567] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 575.866058][ T8567] EXT4-fs (loop4): 1 truncate cleaned up [ 575.872264][ T8567] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 577.464136][ T8217] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 577.512030][ T4428] Bluetooth: hci3: command tx timeout [ 577.654018][ T8544] bridge0: port 1(bridge_slave_0) entered blocking state [ 577.661905][ T8544] bridge0: port 1(bridge_slave_0) entered disabled state [ 577.669660][ T8544] bridge_slave_0: entered allmulticast mode [ 577.683591][ T8544] bridge_slave_0: entered promiscuous mode [ 577.843558][ T8544] bridge0: port 2(bridge_slave_1) entered blocking state [ 577.851384][ T8544] bridge0: port 2(bridge_slave_1) entered disabled state [ 577.859141][ T8544] bridge_slave_1: entered allmulticast mode [ 577.868447][ T8544] bridge_slave_1: entered promiscuous mode [ 578.198914][ T8544] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 578.262813][ T8544] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 578.570643][ T8544] team0: Port device team_slave_0 added [ 578.599821][ T8544] team0: Port device team_slave_1 added [ 578.888863][ T8544] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 578.896190][ T8544] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 578.928218][ T8544] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 579.094976][ T8544] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 579.102424][ T8544] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 579.134485][ T8544] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 579.240070][ T2465] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 579.434779][ T2465] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 579.575335][ T4428] Bluetooth: hci3: command tx timeout [ 579.678207][ T2465] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 579.903955][ T2465] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 579.972270][ T8544] hsr_slave_0: entered promiscuous mode [ 580.027479][ T8544] hsr_slave_1: entered promiscuous mode [ 580.098456][ T8544] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 580.106464][ T8544] Cannot create hsr debugfs directory [ 580.522050][ T8602] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 580.968918][ T8607] loop3: detected capacity change from 0 to 512 [ 580.983081][ T2465] bridge_slave_1: left allmulticast mode [ 580.988975][ T2465] bridge_slave_1: left promiscuous mode [ 580.996759][ T2465] bridge0: port 2(bridge_slave_1) entered disabled state [ 581.018093][ T8607] EXT4-fs: Ignoring removed bh option [ 581.026770][ T8607] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 581.060954][ T2465] bridge_slave_0: left allmulticast mode [ 581.073756][ T2465] bridge_slave_0: left promiscuous mode [ 581.080356][ T2465] bridge0: port 1(bridge_slave_0) entered disabled state [ 581.311039][ T8607] EXT4-fs (loop3): 1 truncate cleaned up [ 581.316943][ T8607] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 581.381637][ T5077] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 581.408803][ T5077] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 581.429207][ T5077] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 581.562659][ T5077] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 581.574221][ T5077] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 581.592171][ T5077] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 581.659798][ T5077] Bluetooth: hci3: command tx timeout [ 581.854184][ T2465] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 581.934068][ T2465] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 582.041595][ T2465] bond0 (unregistering): Released all slaves [ 582.539229][ T8358] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 582.894242][ T8623] loop2: detected capacity change from 0 to 2048 [ 583.046677][ T8623] UDF-fs: error (device loop2): udf_process_sequence: Primary Volume Descriptor not found! [ 583.167517][ T8623] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 583.270573][ T2465] hsr_slave_0: left promiscuous mode [ 583.289438][ T2465] hsr_slave_1: left promiscuous mode [ 583.315359][ T2465] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 583.329537][ T2465] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 583.368436][ T2465] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 583.368582][ T2465] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 583.440020][ T2465] veth1_macvtap: left promiscuous mode [ 583.440339][ T2465] veth0_macvtap: left promiscuous mode [ 583.440633][ T2465] veth1_vlan: left promiscuous mode [ 583.440849][ T2465] veth0_vlan: left promiscuous mode [ 583.650509][ T4428] Bluetooth: hci2: command tx timeout [ 584.276288][ T2465] team0 (unregistering): Port device team_slave_1 removed [ 584.405026][ T2465] team0 (unregistering): Port device team_slave_0 removed [ 584.691978][ T4428] Bluetooth: hci1: command 0x0406 tx timeout [ 585.734515][ T5077] Bluetooth: hci2: command tx timeout [ 585.949899][ T8544] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 586.047340][ T8544] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 586.146306][ T8544] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 586.216328][ T4428] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 586.255033][ T4428] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 586.261589][ T8544] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 586.271748][ T4428] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 586.335250][ T4428] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 586.343510][ T8609] chnl_net:caif_netlink_parms(): no params data found [ 586.367681][ T4428] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 586.380915][ T4428] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 587.803038][ T1223] ieee802154 phy0 wpan0: encryption failed: -22 [ 587.809756][ T1223] ieee802154 phy1 wpan1: encryption failed: -22 [ 587.816614][ T4428] Bluetooth: hci2: command tx timeout [ 587.871316][ T8544] 8021q: adding VLAN 0 to HW filter on device bond0 [ 588.120639][ T8609] bridge0: port 1(bridge_slave_0) entered blocking state [ 588.128343][ T8609] bridge0: port 1(bridge_slave_0) entered disabled state [ 588.143691][ T8609] bridge_slave_0: entered allmulticast mode [ 588.152809][ T8609] bridge_slave_0: entered promiscuous mode [ 588.263488][ T8609] bridge0: port 2(bridge_slave_1) entered blocking state [ 588.271301][ T8609] bridge0: port 2(bridge_slave_1) entered disabled state [ 588.279069][ T8609] bridge_slave_1: entered allmulticast mode [ 588.288311][ T8609] bridge_slave_1: entered promiscuous mode [ 588.332234][ T8544] 8021q: adding VLAN 0 to HW filter on device team0 [ 588.412772][ T5123] bridge0: port 1(bridge_slave_0) entered blocking state [ 588.420575][ T5123] bridge0: port 1(bridge_slave_0) entered forwarding state [ 588.460413][ T4428] Bluetooth: hci0: command tx timeout [ 588.620827][ T5123] bridge0: port 2(bridge_slave_1) entered blocking state [ 588.628511][ T5123] bridge0: port 2(bridge_slave_1) entered forwarding state [ 588.683436][ T8609] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 588.711164][ T8638] chnl_net:caif_netlink_parms(): no params data found [ 588.813154][ T8609] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 589.237223][ T8609] team0: Port device team_slave_0 added [ 589.359377][ T8609] team0: Port device team_slave_1 added [ 589.420470][ T8665] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 589.617287][ T8666] loop2: detected capacity change from 0 to 512 [ 589.700293][ T8666] EXT4-fs: Ignoring removed bh option [ 589.733543][ T8609] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 589.740834][ T8609] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 589.767375][ T8609] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 589.781393][ T8666] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 589.924697][ T4428] Bluetooth: hci2: command tx timeout [ 590.015751][ T8666] EXT4-fs (loop2): 1 truncate cleaned up [ 590.023210][ T8666] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 590.067626][ T2465] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 590.144718][ T8609] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 590.153211][ T8609] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 590.187698][ T8609] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 590.276900][ T2465] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 590.504941][ T2465] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 590.538526][ T4428] Bluetooth: hci0: command tx timeout [ 590.660075][ T2465] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 591.012886][ T8609] hsr_slave_0: entered promiscuous mode [ 591.081092][ T8609] hsr_slave_1: entered promiscuous mode [ 591.129545][ T8609] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 591.137517][ T8609] Cannot create hsr debugfs directory [ 591.152391][ T8638] bridge0: port 1(bridge_slave_0) entered blocking state [ 591.160578][ T8638] bridge0: port 1(bridge_slave_0) entered disabled state [ 591.168383][ T8638] bridge_slave_0: entered allmulticast mode [ 591.177840][ T8638] bridge_slave_0: entered promiscuous mode [ 591.353953][ T8638] bridge0: port 2(bridge_slave_1) entered blocking state [ 591.361870][ T8638] bridge0: port 2(bridge_slave_1) entered disabled state [ 591.369650][ T8638] bridge_slave_1: entered allmulticast mode [ 591.378934][ T8638] bridge_slave_1: entered promiscuous mode [ 591.934310][ T2465] bridge_slave_1: left allmulticast mode [ 591.940496][ T2465] bridge_slave_1: left promiscuous mode [ 591.947044][ T2465] bridge0: port 2(bridge_slave_1) entered disabled state [ 591.960705][ T8318] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 591.988266][ T2465] bridge_slave_0: left allmulticast mode [ 591.994394][ T2465] bridge_slave_0: left promiscuous mode [ 592.004034][ T2465] bridge0: port 1(bridge_slave_0) entered disabled state [ 592.611122][ T4428] Bluetooth: hci0: command tx timeout [ 592.724514][ T2465] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 592.804643][ T2465] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 592.895806][ T2465] bond0 (unregistering): Released all slaves [ 593.171073][ T8638] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 593.223027][ T8638] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 593.523719][ T8638] team0: Port device team_slave_0 added [ 593.609574][ T8638] team0: Port device team_slave_1 added [ 594.091205][ T2465] hsr_slave_0: left promiscuous mode [ 594.123729][ T2465] hsr_slave_1: left promiscuous mode [ 594.153380][ T2465] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 594.164300][ T2465] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 594.199318][ T2465] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 594.207171][ T2465] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 594.290960][ T2465] veth1_macvtap: left promiscuous mode [ 594.296703][ T2465] veth0_macvtap: left promiscuous mode [ 594.302703][ T2465] veth1_vlan: left promiscuous mode [ 594.308251][ T2465] veth0_vlan: left promiscuous mode [ 594.698536][ T4428] Bluetooth: hci0: command tx timeout [ 595.272556][ T5077] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 595.282424][ T5077] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 595.291848][ T5077] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 595.309037][ T5077] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 595.453607][ T5077] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 595.462988][ T5077] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 595.532979][ T2465] team0 (unregistering): Port device team_slave_1 removed [ 595.607062][ T2465] team0 (unregistering): Port device team_slave_0 removed [ 596.006011][ T8638] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 596.013359][ T8638] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 596.044122][ T8638] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 596.173501][ T8544] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 596.272445][ T8638] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 596.279610][ T8638] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 596.306485][ T8638] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 596.776663][ T8638] hsr_slave_0: entered promiscuous mode [ 596.818960][ T8638] hsr_slave_1: entered promiscuous mode [ 596.849875][ T8638] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 596.857926][ T8638] Cannot create hsr debugfs directory [ 597.570546][ T5077] Bluetooth: hci4: command tx timeout [ 597.794320][ T8544] veth0_vlan: entered promiscuous mode [ 597.827193][ T8544] veth1_vlan: entered promiscuous mode [ 598.062780][ T8544] veth0_macvtap: entered promiscuous mode [ 598.159153][ T8544] veth1_macvtap: entered promiscuous mode [ 598.428936][ T8609] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 598.542428][ T8609] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 598.628184][ T8544] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 598.638981][ T8544] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 598.649177][ T8544] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 598.659865][ T8544] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 598.669965][ T8544] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 598.684875][ T8544] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 598.696063][ T8544] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 598.706835][ T8544] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 598.722681][ T8544] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 598.762387][ T8609] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 598.798770][ T8609] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 598.900301][ T8688] chnl_net:caif_netlink_parms(): no params data found [ 599.064587][ T8544] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 599.076873][ T8544] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 599.087219][ T8544] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 599.102176][ T8544] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 599.113482][ T8544] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 599.124187][ T8544] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 599.134286][ T8544] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 599.145115][ T8544] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 599.160261][ T8544] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 599.581617][ T8544] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 599.592085][ T8544] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 599.605462][ T8544] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 599.615876][ T8544] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 599.686873][ T5077] Bluetooth: hci4: command tx timeout [ 600.416363][ T8638] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 600.537221][ T8638] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 600.677444][ T8638] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 600.758827][ T8609] 8021q: adding VLAN 0 to HW filter on device bond0 [ 601.017414][ T8638] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 601.102904][ T8688] bridge0: port 1(bridge_slave_0) entered blocking state [ 601.110778][ T8688] bridge0: port 1(bridge_slave_0) entered disabled state [ 601.118615][ T8688] bridge_slave_0: entered allmulticast mode [ 601.128048][ T8688] bridge_slave_0: entered promiscuous mode [ 601.260764][ T8609] 8021q: adding VLAN 0 to HW filter on device team0 [ 601.323936][ T8688] bridge0: port 2(bridge_slave_1) entered blocking state [ 601.333450][ T8688] bridge0: port 2(bridge_slave_1) entered disabled state [ 601.341420][ T8688] bridge_slave_1: entered allmulticast mode [ 601.356064][ T8688] bridge_slave_1: entered promiscuous mode [ 601.453639][ T5123] bridge0: port 1(bridge_slave_0) entered blocking state [ 601.461408][ T5123] bridge0: port 1(bridge_slave_0) entered forwarding state [ 601.740937][ T5077] Bluetooth: hci4: command tx timeout [ 601.836321][ T8688] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 601.859075][ T5123] bridge0: port 2(bridge_slave_1) entered blocking state [ 601.866845][ T5123] bridge0: port 2(bridge_slave_1) entered forwarding state [ 602.018738][ T8688] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 602.313171][ T8688] team0: Port device team_slave_0 added [ 602.399238][ T8688] team0: Port device team_slave_1 added [ 602.461640][ T2465] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 602.804884][ T8688] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 602.812229][ T8688] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 602.838577][ T8688] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 602.922639][ T2465] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 602.981702][ T8688] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 602.988859][ T8688] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 603.022302][ T8688] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 603.132861][ T2465] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 603.325443][ T2465] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 603.722917][ T8688] hsr_slave_0: entered promiscuous mode [ 603.788421][ T8688] hsr_slave_1: entered promiscuous mode [ 603.817905][ T5077] Bluetooth: hci4: command tx timeout [ 603.860666][ T8688] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 603.868434][ T8688] Cannot create hsr debugfs directory [ 604.201923][ T2465] bridge_slave_1: left allmulticast mode [ 604.207812][ T2465] bridge_slave_1: left promiscuous mode [ 604.219261][ T2465] bridge0: port 2(bridge_slave_1) entered disabled state [ 604.315423][ T2465] bridge_slave_0: left allmulticast mode [ 604.321509][ T2465] bridge_slave_0: left promiscuous mode [ 604.328047][ T2465] bridge0: port 1(bridge_slave_0) entered disabled state [ 605.051883][ T2465] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 605.101643][ T2465] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 605.145702][ T2465] bond0 (unregistering): Released all slaves [ 606.014034][ T8638] 8021q: adding VLAN 0 to HW filter on device bond0 [ 606.320611][ T2465] hsr_slave_0: left promiscuous mode [ 606.345258][ T2465] hsr_slave_1: left promiscuous mode [ 606.380399][ T2465] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 606.388090][ T2465] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 606.423647][ T2465] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 606.431480][ T2465] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 606.500726][ T2465] veth1_macvtap: left promiscuous mode [ 606.506459][ T2465] veth0_macvtap: left promiscuous mode [ 606.512968][ T2465] veth1_vlan: left promiscuous mode [ 606.518505][ T2465] veth0_vlan: left promiscuous mode [ 607.457464][ T2465] team0 (unregistering): Port device team_slave_1 removed [ 607.562130][ T2465] team0 (unregistering): Port device team_slave_0 removed [ 607.996685][ T8609] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 608.023868][ T8638] 8021q: adding VLAN 0 to HW filter on device team0 [ 608.095892][ T5123] bridge0: port 1(bridge_slave_0) entered blocking state [ 608.103693][ T5123] bridge0: port 1(bridge_slave_0) entered forwarding state [ 608.185412][ T5123] bridge0: port 2(bridge_slave_1) entered blocking state [ 608.193200][ T5123] bridge0: port 2(bridge_slave_1) entered forwarding state [ 609.077371][ T8688] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 609.182028][ T8688] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 609.297239][ T8688] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 609.401714][ T8688] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 609.686727][ T8732] program syz-executor.1 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 610.916829][ T5123] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 610.925620][ T5123] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 611.112772][ T8688] 8021q: adding VLAN 0 to HW filter on device bond0 [ 611.199880][ T8638] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 611.242249][ T8609] veth0_vlan: entered promiscuous mode [ 611.301618][ T3120] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 611.309662][ T3120] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 611.404850][ T8688] 8021q: adding VLAN 0 to HW filter on device team0 [ 611.464356][ T8609] veth1_vlan: entered promiscuous mode [ 611.664171][ T5123] bridge0: port 1(bridge_slave_0) entered blocking state [ 611.671977][ T5123] bridge0: port 1(bridge_slave_0) entered forwarding state [ 611.849595][ T5123] bridge0: port 2(bridge_slave_1) entered blocking state [ 611.857381][ T5123] bridge0: port 2(bridge_slave_1) entered forwarding state [ 611.927785][ T8638] veth0_vlan: entered promiscuous mode [ 612.047298][ T8638] veth1_vlan: entered promiscuous mode [ 612.163542][ T8609] veth0_macvtap: entered promiscuous mode [ 612.243272][ T8688] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 612.292479][ T8609] veth1_macvtap: entered promiscuous mode [ 612.622246][ T8638] veth0_macvtap: entered promiscuous mode [ 612.662833][ T8609] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 612.673615][ T8609] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 612.683877][ T8609] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 612.699486][ T8609] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 612.713314][ T8609] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 612.724637][ T8609] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 612.734818][ T8609] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 612.746249][ T8609] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 612.761613][ T8609] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 612.840673][ T8638] veth1_macvtap: entered promiscuous mode [ 612.962198][ T8609] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 612.975795][ T8609] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 612.986378][ T8609] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 612.998158][ T8609] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 613.008259][ T8609] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 613.025247][ T8609] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 613.036998][ T8609] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 613.047749][ T8609] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 613.063076][ T8609] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 613.233255][ T8638] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 613.244037][ T8638] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 613.254268][ T8638] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 613.265019][ T8638] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 613.277083][ T8638] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 613.287978][ T8638] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 613.298105][ T8638] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 613.308869][ T8638] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 613.319114][ T8638] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 613.331898][ T8638] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 613.362318][ T8638] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 613.487549][ T8609] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 613.496834][ T8609] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 613.506230][ T8609] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 613.515339][ T8609] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 613.773480][ T8753] loop0: detected capacity change from 0 to 512 [ 613.857558][ T8759] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 613.894369][ T8753] EXT4-fs: Ignoring removed bh option [ 613.942897][ T8638] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 613.954013][ T8638] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 613.964272][ T8638] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 613.975309][ T8753] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 614.014350][ T8638] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 614.024606][ T8638] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 614.035396][ T8638] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 614.047540][ T8638] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 614.058948][ T8638] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 614.069118][ T8638] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 614.080326][ T8638] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 614.095308][ T8638] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 614.163646][ T8753] EXT4-fs (loop0): 1 truncate cleaned up [ 614.169533][ T8753] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 614.535755][ T8638] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 614.545556][ T8638] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 614.556977][ T8638] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 614.566763][ T8638] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 615.322868][ T8544] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 615.322995][ T8688] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 615.482499][ T4196] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 615.635408][ T4196] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 615.845877][ T4196] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 616.068562][ T4196] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 616.221614][ T8688] veth0_vlan: entered promiscuous mode [ 616.443586][ T8688] veth1_vlan: entered promiscuous mode [ 616.504396][ T4196] bridge_slave_1: left allmulticast mode [ 616.510469][ T4196] bridge_slave_1: left promiscuous mode [ 616.517102][ T4196] bridge0: port 2(bridge_slave_1) entered disabled state [ 616.614854][ T4196] bridge_slave_0: left allmulticast mode [ 616.621602][ T4196] bridge_slave_0: left promiscuous mode [ 616.628133][ T4196] bridge0: port 1(bridge_slave_0) entered disabled state [ 617.399409][ T4196] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 617.449944][ T4196] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 617.474650][ T4196] bond0 (unregistering): Released all slaves [ 618.195154][ T4196] hsr_slave_0: left promiscuous mode [ 618.232542][ T4196] hsr_slave_1: left promiscuous mode [ 618.271890][ T4196] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 618.279586][ T4196] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 618.323329][ T4196] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 618.331150][ T4196] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 618.406567][ T4196] veth1_macvtap: left promiscuous mode [ 618.412562][ T4196] veth0_macvtap: left promiscuous mode [ 618.418441][ T4196] veth1_vlan: left promiscuous mode [ 618.424085][ T4196] veth0_vlan: left promiscuous mode [ 619.494973][ T4428] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 619.505611][ T4428] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 619.517705][ T4428] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 619.555103][ T4428] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 619.566502][ T4428] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 619.577820][ T4428] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 619.585544][ T4196] team0 (unregistering): Port device team_slave_1 removed [ 619.662941][ T4196] team0 (unregistering): Port device team_slave_0 removed [ 619.986809][ T8688] veth0_macvtap: entered promiscuous mode [ 620.155317][ T8688] veth1_macvtap: entered promiscuous mode [ 620.359090][ T8688] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 620.371979][ T8688] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 620.384090][ T8688] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 620.397203][ T8688] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 620.407904][ T8688] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 620.418627][ T8688] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 620.428812][ T8688] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 620.439553][ T8688] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 620.449662][ T8688] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 620.462534][ T8688] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 620.477781][ T8688] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 620.797068][ T8688] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 620.812428][ T8688] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 620.823648][ T8688] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 620.834373][ T8688] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 620.844441][ T8688] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 620.859166][ T8688] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 620.870227][ T8688] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 620.880924][ T8688] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 620.890987][ T8688] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 620.905611][ T8688] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 620.921527][ T8688] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 621.343118][ T8688] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 621.352364][ T8688] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 621.361510][ T8688] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 621.370633][ T8688] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 621.656153][ T5077] Bluetooth: hci3: command tx timeout [ 622.163163][ T8793] chnl_net:caif_netlink_parms(): no params data found [ 623.731527][ T4428] Bluetooth: hci3: command tx timeout [ 624.266648][ T8793] bridge0: port 1(bridge_slave_0) entered blocking state [ 624.274505][ T8793] bridge0: port 1(bridge_slave_0) entered disabled state [ 624.284843][ T8793] bridge_slave_0: entered allmulticast mode [ 624.296182][ T8793] bridge_slave_0: entered promiscuous mode [ 624.461441][ T43] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 624.469489][ T43] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 624.493556][ T8793] bridge0: port 2(bridge_slave_1) entered blocking state [ 624.501499][ T8793] bridge0: port 2(bridge_slave_1) entered disabled state [ 624.509208][ T8793] bridge_slave_1: entered allmulticast mode [ 624.518179][ T8793] bridge_slave_1: entered promiscuous mode [ 624.618150][ T779] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 624.626535][ T779] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 624.933500][ T8793] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 625.032236][ T8793] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 625.326141][ T8793] team0: Port device team_slave_0 added [ 625.458761][ T8793] team0: Port device team_slave_1 added [ 625.821676][ T4428] Bluetooth: hci3: command tx timeout [ 625.955742][ T3932] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 625.964313][ T3932] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 626.010909][ T8793] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 626.018069][ T8793] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 626.044200][ C1] vkms_vblank_simulate: vblank timer overrun [ 626.057623][ T8793] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 626.147097][ T2465] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 626.155350][ T2465] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 626.199002][ T8793] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 626.206535][ T8793] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 626.232607][ C1] vkms_vblank_simulate: vblank timer overrun [ 626.250290][ T8793] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 626.784254][ T8793] hsr_slave_0: entered promiscuous mode [ 626.821740][ T8858] loop4: detected capacity change from 0 to 512 [ 626.832109][ T8793] hsr_slave_1: entered promiscuous mode [ 626.895682][ T8858] EXT4-fs: Ignoring removed bh option [ 626.901747][ T8793] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 626.909590][ T8793] Cannot create hsr debugfs directory [ 626.968157][ T8858] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 627.167161][ T8858] EXT4-fs (loop4): 1 truncate cleaned up [ 627.173279][ T8858] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 627.693098][ T8868] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 627.890653][ T4428] Bluetooth: hci3: command tx timeout [ 628.394213][ T8609] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 628.525375][ T2465] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 628.775715][ T2465] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 628.965530][ T2465] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 629.217795][ T2465] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 629.408624][ T1065] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 629.416779][ T1065] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 629.545572][ T8793] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 629.715794][ T8793] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 629.805503][ T2465] bridge_slave_1: left allmulticast mode [ 629.815460][ T2465] bridge_slave_1: left promiscuous mode [ 629.822239][ T2465] bridge0: port 2(bridge_slave_1) entered disabled state [ 629.843510][ T3932] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 629.851965][ T3932] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 629.891376][ T2465] bridge_slave_0: left allmulticast mode [ 629.897250][ T2465] bridge_slave_0: left promiscuous mode [ 629.904005][ T2465] bridge0: port 1(bridge_slave_0) entered disabled state [ 630.558525][ T2465] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 630.595523][ T2465] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 630.645929][ T2465] bond0 (unregistering): Released all slaves [ 630.669637][ T8793] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 630.850543][ T8793] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 632.029236][ T2465] hsr_slave_0: left promiscuous mode [ 632.086143][ T2465] hsr_slave_1: left promiscuous mode [ 632.142263][ T2465] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 632.150275][ T2465] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 632.274856][ T2465] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 632.282703][ T2465] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 632.440707][ T2465] veth1_macvtap: left promiscuous mode [ 632.446543][ T2465] veth0_macvtap: left promiscuous mode [ 632.454412][ T2465] veth1_vlan: left promiscuous mode [ 632.459994][ T2465] veth0_vlan: left promiscuous mode [ 632.469568][ T5077] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 632.491237][ T5077] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 632.530099][ T5077] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 632.628582][ T5077] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 632.644541][ T5077] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 632.653813][ T5077] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 633.214724][ T8905] loop3: detected capacity change from 0 to 512 [ 633.272966][ T8905] EXT4-fs: Ignoring removed bh option [ 633.283935][ T8905] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 633.461195][ T8905] EXT4-fs (loop3): 1 truncate cleaned up [ 633.471240][ T8905] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 633.606024][ T2465] team0 (unregistering): Port device team_slave_1 removed [ 633.663444][ T2465] team0 (unregistering): Port device team_slave_0 removed [ 634.669270][ T8638] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 634.698451][ T5077] Bluetooth: hci2: command tx timeout [ 635.422206][ T8793] 8021q: adding VLAN 0 to HW filter on device bond0 [ 635.660945][ T8900] chnl_net:caif_netlink_parms(): no params data found [ 635.727273][ T8793] 8021q: adding VLAN 0 to HW filter on device team0 [ 635.799498][ T5123] bridge0: port 1(bridge_slave_0) entered blocking state [ 635.807293][ T5123] bridge0: port 1(bridge_slave_0) entered forwarding state [ 635.914831][ T5123] bridge0: port 2(bridge_slave_1) entered blocking state [ 635.922631][ T5123] bridge0: port 2(bridge_slave_1) entered forwarding state [ 636.779678][ T5077] Bluetooth: hci2: command tx timeout [ 637.973307][ T8900] bridge0: port 1(bridge_slave_0) entered blocking state [ 637.981988][ T8900] bridge0: port 1(bridge_slave_0) entered disabled state [ 637.989765][ T8900] bridge_slave_0: entered allmulticast mode [ 637.998761][ T8900] bridge_slave_0: entered promiscuous mode [ 638.173699][ T8900] bridge0: port 2(bridge_slave_1) entered blocking state [ 638.181580][ T8900] bridge0: port 2(bridge_slave_1) entered disabled state [ 638.189414][ T8900] bridge_slave_1: entered allmulticast mode [ 638.199526][ T8900] bridge_slave_1: entered promiscuous mode [ 638.621294][ T8900] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 638.698673][ T8900] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 638.775611][ T4428] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 638.789302][ T4428] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 638.835127][ T4428] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 638.850445][ T4428] Bluetooth: hci2: command tx timeout [ 638.870285][ T4428] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 638.900856][ T4428] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 638.941229][ T4428] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 639.071079][ T8793] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 639.114777][ T8900] team0: Port device team_slave_0 added [ 639.288758][ T8900] team0: Port device team_slave_1 added [ 639.694722][ T8900] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 639.702025][ T8900] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 639.728111][ C0] vkms_vblank_simulate: vblank timer overrun [ 639.734880][ T8900] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 640.081379][ T8793] veth0_vlan: entered promiscuous mode [ 640.117614][ T8900] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 640.125004][ T8900] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 640.158114][ T8900] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 640.405827][ T3932] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 640.507214][ T8793] veth1_vlan: entered promiscuous mode [ 640.551307][ T8900] hsr_slave_0: entered promiscuous mode [ 640.577877][ T8900] hsr_slave_1: entered promiscuous mode [ 640.587084][ T8900] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 640.594996][ T8900] Cannot create hsr debugfs directory [ 640.643630][ T3932] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 640.757973][ T8928] chnl_net:caif_netlink_parms(): no params data found [ 640.840464][ T3932] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 640.940768][ T4428] Bluetooth: hci2: command tx timeout [ 641.021592][ T4428] Bluetooth: hci0: command tx timeout [ 641.060502][ T3932] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 641.634710][ T8793] veth0_macvtap: entered promiscuous mode [ 641.989669][ T8793] veth1_macvtap: entered promiscuous mode [ 642.016630][ T3932] bridge_slave_1: left allmulticast mode [ 642.022749][ T3932] bridge_slave_1: left promiscuous mode [ 642.029358][ T3932] bridge0: port 2(bridge_slave_1) entered disabled state [ 642.060377][ T3932] bridge_slave_0: left allmulticast mode [ 642.066242][ T3932] bridge_slave_0: left promiscuous mode [ 642.073311][ T3932] bridge0: port 1(bridge_slave_0) entered disabled state [ 642.701841][ T3932] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 642.765182][ T3932] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 642.780076][ T8945] loop2: detected capacity change from 0 to 512 [ 642.796111][ T8945] EXT4-fs: Ignoring removed bh option [ 642.821388][ T3932] bond0 (unregistering): Released all slaves [ 642.837289][ T8945] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 643.031943][ T8945] EXT4-fs (loop2): 1 truncate cleaned up [ 643.037971][ T8945] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 643.092143][ T4428] Bluetooth: hci0: command tx timeout [ 643.603939][ T8793] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 643.614755][ T8793] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 643.624987][ T8793] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 643.639121][ T8793] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 643.650050][ T8793] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 643.661263][ T8793] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 643.671434][ T8793] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 643.682277][ T8793] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 643.692440][ T8793] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 643.703175][ T8793] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 643.718250][ T8793] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 644.048063][ T8928] bridge0: port 1(bridge_slave_0) entered blocking state [ 644.059615][ T8928] bridge0: port 1(bridge_slave_0) entered disabled state [ 644.067572][ T8928] bridge_slave_0: entered allmulticast mode [ 644.076916][ T8928] bridge_slave_0: entered promiscuous mode [ 644.099043][ T8793] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 644.109792][ T8793] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 644.119878][ T8793] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 644.131368][ T8793] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 644.141478][ T8793] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 644.158395][ T8793] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 644.171263][ T8793] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 644.183237][ T8793] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 644.194690][ T8793] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 644.206569][ T8793] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 644.223412][ T8793] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 644.366219][ T3932] hsr_slave_0: left promiscuous mode [ 644.384542][ T3932] hsr_slave_1: left promiscuous mode [ 644.400070][ T3932] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 644.408532][ T3932] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 644.443615][ T3932] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 644.451500][ T3932] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 644.510857][ T3932] veth1_macvtap: left promiscuous mode [ 644.516599][ T3932] veth0_macvtap: left promiscuous mode [ 644.522740][ T3932] veth1_vlan: left promiscuous mode [ 644.528290][ T3932] veth0_vlan: left promiscuous mode [ 645.178058][ T4428] Bluetooth: hci0: command tx timeout [ 645.382145][ T3932] team0 (unregistering): Port device team_slave_1 removed [ 645.412508][ T3932] team0 (unregistering): Port device team_slave_0 removed [ 645.939126][ T8928] bridge0: port 2(bridge_slave_1) entered blocking state [ 645.948157][ T8928] bridge0: port 2(bridge_slave_1) entered disabled state [ 645.955998][ T8928] bridge_slave_1: entered allmulticast mode [ 645.965210][ T8928] bridge_slave_1: entered promiscuous mode [ 646.002964][ T8793] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 646.012272][ T8793] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 646.021366][ T8793] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 646.030457][ T8793] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 646.207208][ T8688] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 646.417690][ T8928] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 646.534918][ T8900] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 646.655619][ T8928] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 646.857166][ T8900] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 646.940683][ T8928] team0: Port device team_slave_0 added [ 646.961640][ T8900] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 647.028629][ T8928] team0: Port device team_slave_1 added [ 647.051937][ T8900] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 647.267846][ T4428] Bluetooth: hci0: command tx timeout [ 647.464771][ T8928] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 647.472195][ T8928] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 647.499262][ T8928] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 647.694580][ T8928] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 647.701951][ T8928] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 647.728318][ T8928] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 648.326065][ T8928] hsr_slave_0: entered promiscuous mode [ 648.383288][ T8928] hsr_slave_1: entered promiscuous mode [ 648.408173][ T8928] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 648.416291][ T8928] Cannot create hsr debugfs directory [ 649.147895][ T8900] 8021q: adding VLAN 0 to HW filter on device bond0 [ 649.191508][ T1223] ieee802154 phy0 wpan0: encryption failed: -22 [ 649.198150][ T1223] ieee802154 phy1 wpan1: encryption failed: -22 [ 649.348637][ T8900] 8021q: adding VLAN 0 to HW filter on device team0 [ 649.381743][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 649.389388][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 649.445022][ T5161] bridge0: port 2(bridge_slave_1) entered blocking state [ 649.452793][ T5161] bridge0: port 2(bridge_slave_1) entered forwarding state [ 650.181634][ T5077] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 650.199589][ T5077] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 650.209652][ T5077] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 650.256863][ T5077] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 650.286642][ T5077] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 650.302327][ T5077] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 651.183257][ T8928] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 651.261582][ T8928] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 651.413823][ T8928] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 651.459586][ T8986] loop1: detected capacity change from 0 to 512 [ 651.526377][ T8928] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 652.024931][ T8986] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 652.041306][ T8986] ext4 filesystem being mounted at /root/syzkaller-testdir3975191644/syzkaller.BVKG4H/43/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 652.115595][ T3932] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 652.331503][ T3932] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 652.379381][ T4428] Bluetooth: hci4: command tx timeout [ 652.582686][ T8332] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 652.643621][ T3932] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 652.795670][ T3932] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 652.883895][ T8900] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 652.895422][ T8976] chnl_net:caif_netlink_parms(): no params data found [ 653.399520][ T9002] loop1: detected capacity change from 0 to 512 [ 653.469796][ T3932] bridge_slave_1: left allmulticast mode [ 653.476157][ T3932] bridge_slave_1: left promiscuous mode [ 653.485286][ T3932] bridge0: port 2(bridge_slave_1) entered disabled state [ 653.526465][ T9002] EXT4-fs: Ignoring removed bh option [ 653.552928][ T3932] bridge_slave_0: left allmulticast mode [ 653.558844][ T3932] bridge_slave_0: left promiscuous mode [ 653.565696][ T3932] bridge0: port 1(bridge_slave_0) entered disabled state [ 653.863975][ T9002] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 653.961037][ T9002] EXT4-fs (loop1): 1 truncate cleaned up [ 653.967058][ T9002] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 654.137246][ T3932] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 654.176430][ T3932] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 654.237473][ T3932] bond0 (unregistering): Released all slaves [ 654.500899][ T5077] Bluetooth: hci4: command tx timeout [ 654.816634][ T8928] 8021q: adding VLAN 0 to HW filter on device bond0 [ 654.832620][ T3160] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 654.840688][ T3160] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 655.220311][ T3932] hsr_slave_0: left promiscuous mode [ 655.252342][ T3932] hsr_slave_1: left promiscuous mode [ 655.279647][ T3932] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 655.287527][ T3932] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 655.314809][ T3932] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 655.322631][ T3932] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 655.390825][ T3932] veth1_macvtap: left promiscuous mode [ 655.396562][ T3932] veth0_macvtap: left promiscuous mode [ 655.402945][ T3932] veth1_vlan: left promiscuous mode [ 655.408484][ T3932] veth0_vlan: left promiscuous mode [ 656.390876][ T5077] Bluetooth: hci6: command 0x0406 tx timeout [ 656.402774][ T3932] team0 (unregistering): Port device team_slave_1 removed [ 656.455304][ T3932] team0 (unregistering): Port device team_slave_0 removed [ 656.530423][ T4428] Bluetooth: hci4: command tx timeout [ 656.861092][ T5123] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 656.869147][ T5123] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 657.183483][ T8332] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 657.265270][ T8976] bridge0: port 1(bridge_slave_0) entered blocking state [ 657.273145][ T8976] bridge0: port 1(bridge_slave_0) entered disabled state [ 657.283594][ T8976] bridge_slave_0: entered allmulticast mode [ 657.292797][ T8976] bridge_slave_0: entered promiscuous mode [ 657.342237][ T8928] 8021q: adding VLAN 0 to HW filter on device team0 [ 657.430084][ T779] bridge0: port 1(bridge_slave_0) entered blocking state [ 657.437845][ T779] bridge0: port 1(bridge_slave_0) entered forwarding state [ 657.452747][ T8976] bridge0: port 2(bridge_slave_1) entered blocking state [ 657.466005][ T8976] bridge0: port 2(bridge_slave_1) entered disabled state [ 657.473973][ T8976] bridge_slave_1: entered allmulticast mode [ 657.483190][ T8976] bridge_slave_1: entered promiscuous mode [ 657.602295][ T779] bridge0: port 2(bridge_slave_1) entered blocking state [ 657.609970][ T779] bridge0: port 2(bridge_slave_1) entered forwarding state [ 657.909792][ T8976] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 658.024822][ T8976] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 658.437438][ T8976] team0: Port device team_slave_0 added [ 658.557783][ T8976] team0: Port device team_slave_1 added [ 658.611502][ T4428] Bluetooth: hci4: command tx timeout [ 658.903889][ T8976] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 658.912999][ T8976] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 658.939542][ T8976] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 658.952246][ T8900] veth0_vlan: entered promiscuous mode [ 659.147461][ T8900] veth1_vlan: entered promiscuous mode [ 659.184661][ T8976] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 659.192484][ T8976] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 659.221872][ T8976] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 659.877652][ T8900] veth0_macvtap: entered promiscuous mode [ 659.936573][ T8976] hsr_slave_0: entered promiscuous mode [ 660.011768][ T8976] hsr_slave_1: entered promiscuous mode [ 660.060845][ T8976] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 660.068617][ T8976] Cannot create hsr debugfs directory [ 660.134992][ T8900] veth1_macvtap: entered promiscuous mode [ 660.719712][ T8900] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 660.733454][ T8900] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 660.750374][ T8900] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 660.761095][ T8900] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 660.771238][ T8900] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 660.781945][ T8900] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 660.792012][ T8900] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 660.802728][ T8900] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 660.817938][ T8900] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 661.023074][ T8900] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 661.033855][ T8900] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 661.047006][ T8900] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 661.058623][ T8900] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 661.068733][ T8900] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 661.079708][ T8900] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 661.089837][ T8900] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 661.104517][ T8900] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 661.119996][ T8900] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 661.368635][ T8900] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 661.378673][ T8900] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 661.387864][ T8900] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 661.396999][ T8900] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 661.891777][ T9031] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 662.071076][ T5077] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 662.090819][ T5077] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 662.101460][ T5077] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 662.127879][ T5077] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 662.166709][ T5077] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 662.180902][ T5077] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 662.293859][ T8928] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 663.155607][ T8928] veth0_vlan: entered promiscuous mode [ 663.208554][ T8976] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 663.232756][ T8976] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 663.259721][ T8976] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 663.290805][ T8976] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 663.582718][ T8928] veth1_vlan: entered promiscuous mode [ 664.007820][ T3932] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 664.170071][ T3932] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 664.210468][ T5077] Bluetooth: hci6: command tx timeout [ 664.412942][ T3932] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 664.473873][ T9032] chnl_net:caif_netlink_parms(): no params data found [ 664.580090][ T3932] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 664.646515][ T8928] veth0_macvtap: entered promiscuous mode [ 664.745763][ T8928] veth1_macvtap: entered promiscuous mode [ 665.046638][ T8928] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 665.057567][ T8928] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 665.067781][ T8928] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 665.078569][ T8928] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 665.088714][ T8928] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 665.101667][ T8928] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 665.113672][ T8928] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 665.124373][ T8928] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 665.134516][ T8928] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 665.150327][ T8928] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 665.167905][ T8928] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 665.411643][ T3932] bridge_slave_1: left allmulticast mode [ 665.417524][ T3932] bridge_slave_1: left promiscuous mode [ 665.425479][ T3932] bridge0: port 2(bridge_slave_1) entered disabled state [ 665.501140][ T3932] bridge_slave_0: left allmulticast mode [ 665.507075][ T3932] bridge_slave_0: left promiscuous mode [ 665.515740][ T3932] bridge0: port 1(bridge_slave_0) entered disabled state [ 666.132708][ T3932] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 666.199098][ T3932] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 666.227988][ T3932] bond0 (unregistering): Released all slaves [ 666.292015][ T5077] Bluetooth: hci6: command tx timeout [ 666.356299][ T8928] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 666.371306][ T8928] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 666.381495][ T8928] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 666.392659][ T8928] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 666.402795][ T8928] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 666.414747][ T8928] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 666.425966][ T8928] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 666.436732][ T8928] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 666.446910][ T8928] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 666.459425][ T8928] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 666.481078][ T8928] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 666.490791][ T9052] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 667.196985][ T8928] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 667.206727][ T8928] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 667.216470][ T8928] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 667.226169][ T8928] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 667.448036][ T8976] 8021q: adding VLAN 0 to HW filter on device bond0 [ 667.581020][ T29] audit: type=1804 audit(1717808657.653:44): pid=9059 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir3546981372/syzkaller.2dd28k/8/bus" dev="sda1" ino=1946 res=1 errno=0 [ 667.606069][ C0] vkms_vblank_simulate: vblank timer overrun [ 667.622642][ T3932] hsr_slave_0: left promiscuous mode [ 667.655535][ T3932] hsr_slave_1: left promiscuous mode [ 667.701481][ T3932] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 667.709330][ T3932] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 667.764476][ T3932] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 667.772389][ T3932] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 667.841021][ T3932] veth1_macvtap: left promiscuous mode [ 667.846777][ T3932] veth0_macvtap: left promiscuous mode [ 667.853181][ T3932] veth1_vlan: left promiscuous mode [ 667.858784][ T3932] veth0_vlan: left promiscuous mode [ 668.380905][ T5077] Bluetooth: hci6: command tx timeout [ 668.854991][ T3932] team0 (unregistering): Port device team_slave_1 removed [ 668.890891][ T3932] team0 (unregistering): Port device team_slave_0 removed [ 669.241093][ T9032] bridge0: port 1(bridge_slave_0) entered blocking state [ 669.248803][ T9032] bridge0: port 1(bridge_slave_0) entered disabled state [ 669.256740][ T9032] bridge_slave_0: entered allmulticast mode [ 669.266010][ T9032] bridge_slave_0: entered promiscuous mode [ 669.517961][ T9032] bridge0: port 2(bridge_slave_1) entered blocking state [ 669.526298][ T9032] bridge0: port 2(bridge_slave_1) entered disabled state [ 669.534269][ T9032] bridge_slave_1: entered allmulticast mode [ 669.548559][ T9032] bridge_slave_1: entered promiscuous mode [ 669.609669][ T8976] 8021q: adding VLAN 0 to HW filter on device team0 [ 669.822978][ T8768] bridge0: port 1(bridge_slave_0) entered blocking state [ 669.830785][ T8768] bridge0: port 1(bridge_slave_0) entered forwarding state [ 670.008264][ T9032] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 670.082513][ T8768] bridge0: port 2(bridge_slave_1) entered blocking state [ 670.090265][ T8768] bridge0: port 2(bridge_slave_1) entered forwarding state [ 670.165593][ T9032] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 670.451990][ T5077] Bluetooth: hci6: command tx timeout [ 670.499558][ T9032] team0: Port device team_slave_0 added [ 670.626541][ T9032] team0: Port device team_slave_1 added [ 670.968249][ T9032] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 670.979346][ T9032] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 671.008345][ T9032] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 671.159048][ T9032] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 671.166476][ T9032] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 671.198607][ T9032] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 671.337283][ T3160] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 671.346301][ T3160] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 671.813182][ T9032] hsr_slave_0: entered promiscuous mode [ 671.864438][ T9032] hsr_slave_1: entered promiscuous mode [ 671.931512][ T9032] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 671.939287][ T9032] Cannot create hsr debugfs directory [ 671.989209][ T8074] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 671.997386][ T8074] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 672.741218][ T9092] netlink: 'syz-executor.4': attribute type 30 has an invalid length. [ 673.765829][ T8976] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 674.239798][ T9032] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 674.335070][ T9032] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 674.454129][ T9032] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 674.581814][ T9032] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 674.640534][ T9107] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 674.961498][ T8976] veth0_vlan: entered promiscuous mode [ 675.079162][ T8976] veth1_vlan: entered promiscuous mode [ 675.625999][ T8976] veth0_macvtap: entered promiscuous mode [ 675.734882][ T8976] veth1_macvtap: entered promiscuous mode [ 676.079597][ T8976] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 676.090563][ T8976] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 676.106752][ T8976] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 676.120844][ T8976] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 676.131900][ T8976] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 676.142680][ T8976] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 676.152871][ T8976] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 676.163667][ T8976] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 676.168892][ T9118] loop4: detected capacity change from 0 to 64 [ 676.173697][ T8976] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 676.173786][ T8976] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 676.178789][ T8976] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 676.331265][ T9118] hfs: unable to locate alternate MDB [ 676.336928][ T9118] hfs: continuing without an alternate MDB [ 676.349464][ T9032] 8021q: adding VLAN 0 to HW filter on device bond0 [ 676.545350][ T9032] 8021q: adding VLAN 0 to HW filter on device team0 [ 676.644229][ T5161] bridge0: port 1(bridge_slave_0) entered blocking state [ 676.652055][ T5161] bridge0: port 1(bridge_slave_0) entered forwarding state [ 676.789984][ T5161] bridge0: port 2(bridge_slave_1) entered blocking state [ 676.797758][ T5161] bridge0: port 2(bridge_slave_1) entered forwarding state [ 676.858741][ T8976] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 676.869534][ T8976] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 676.880043][ T8976] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 676.890934][ T8976] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 676.901148][ T8976] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 676.911991][ T8976] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 676.928209][ T8976] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 676.940774][ T8976] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 676.951785][ T8976] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 676.963119][ T8976] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 676.978578][ T8976] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 677.375557][ T8976] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 677.384814][ T8976] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 677.393957][ T8976] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 677.403053][ T8976] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 677.793102][ T29] audit: type=1804 audit(1717808667.903:45): pid=9122 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir3546981372/syzkaller.2dd28k/16/bus" dev="sda1" ino=1948 res=1 errno=0 [ 678.542829][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 678.552840][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 678.787142][ T3160] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 678.903508][ T1095] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 678.911939][ T1095] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 679.026008][ T3160] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 679.236035][ T3160] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 679.457028][ T3160] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 679.691442][ T9032] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 679.888043][ T3160] bridge_slave_1: left allmulticast mode [ 679.896585][ T3160] bridge_slave_1: left promiscuous mode [ 679.903312][ T3160] bridge0: port 2(bridge_slave_1) entered disabled state [ 679.934310][ T3160] bridge_slave_0: left allmulticast mode [ 679.940581][ T3160] bridge_slave_0: left promiscuous mode [ 679.947121][ T3160] bridge0: port 1(bridge_slave_0) entered disabled state [ 680.803824][ T3160] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 680.936623][ T3160] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 680.995129][ T3160] bond0 (unregistering): Released all slaves [ 681.925589][ T9032] veth0_vlan: entered promiscuous mode [ 682.084926][ T3160] hsr_slave_0: left promiscuous mode [ 682.111108][ T3160] hsr_slave_1: left promiscuous mode [ 682.145497][ T3160] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 682.153404][ T3160] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 682.176232][ T3160] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 682.184840][ T3160] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 682.318575][ T3160] veth1_macvtap: left promiscuous mode [ 682.324612][ T3160] veth0_macvtap: left promiscuous mode [ 682.330717][ T3160] veth1_vlan: left promiscuous mode [ 682.336260][ T3160] veth0_vlan: left promiscuous mode [ 682.942023][ T4428] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 682.953591][ T4428] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 682.980933][ T4428] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 683.002689][ T4428] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 683.017699][ T4428] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 683.055219][ T4428] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 683.327582][ C1] vxcan0: j1939_tp_rxtimer: 0xffff888044281a00: rx timeout, send abort [ 683.340504][ C1] vxcan0: j1939_xtp_rx_abort_one: 0xffff888044281a00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 683.527033][ T3160] team0 (unregistering): Port device team_slave_1 removed [ 683.592264][ T3160] team0 (unregistering): Port device team_slave_0 removed [ 683.851823][ T9158] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 684.304874][ T9032] veth1_vlan: entered promiscuous mode [ 684.683091][ T9032] veth0_macvtap: entered promiscuous mode [ 684.794447][ T9032] veth1_macvtap: entered promiscuous mode [ 685.090771][ T4428] Bluetooth: hci2: command tx timeout [ 685.181868][ T9032] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 685.192623][ T9032] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 685.202812][ T9032] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 685.218528][ T9032] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 685.230046][ T9032] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 685.241238][ T9032] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 685.251456][ T9032] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 685.262258][ T9032] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 685.272414][ T9032] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 685.283131][ T9032] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 685.298023][ T9032] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 685.557355][ T9032] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 685.568239][ T9032] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 685.578547][ T9032] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 685.589454][ T9032] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 685.599611][ T9032] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 685.610385][ T9032] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 685.623510][ T9032] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 685.635422][ T29] audit: type=1804 audit(1717808675.753:46): pid=9168 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir605902318/syzkaller.SvYXo8/3/bus" dev="sda1" ino=1941 res=1 errno=0 [ 685.660814][ T9032] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 685.670956][ T9032] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 685.681783][ T9032] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 685.696634][ T9032] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 686.043591][ T9159] chnl_net:caif_netlink_parms(): no params data found [ 686.097126][ T9032] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 686.107720][ T9032] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 686.118240][ T9032] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 686.128161][ T9032] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 687.171244][ T4428] Bluetooth: hci2: command tx timeout [ 687.392778][ T9191] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 688.172520][ T9159] bridge0: port 1(bridge_slave_0) entered blocking state [ 688.186748][ T9159] bridge0: port 1(bridge_slave_0) entered disabled state [ 688.194494][ T9159] bridge_slave_0: entered allmulticast mode [ 688.202577][ T9159] bridge_slave_0: entered promiscuous mode [ 688.353182][ T9159] bridge0: port 2(bridge_slave_1) entered blocking state [ 688.361517][ T9159] bridge0: port 2(bridge_slave_1) entered disabled state [ 688.369305][ T9159] bridge_slave_1: entered allmulticast mode [ 688.378601][ T9159] bridge_slave_1: entered promiscuous mode [ 688.811262][ T9159] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 689.005415][ T9159] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 689.482618][ T4428] Bluetooth: hci2: command tx timeout [ 691.299830][ T8074] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 691.308000][ T8074] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 691.432228][ T9159] team0: Port device team_slave_0 added [ 691.490577][ T4428] Bluetooth: hci2: command tx timeout [ 691.546677][ T9159] team0: Port device team_slave_1 added [ 691.597772][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 691.605992][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 691.959201][ T9159] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 691.971220][ T9159] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 691.998716][ T9159] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 692.164665][ T9159] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 692.175941][ T9159] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 692.203398][ T9159] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 692.262795][ T9226] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 692.977233][ T9159] hsr_slave_0: entered promiscuous mode [ 693.086967][ T9159] hsr_slave_1: entered promiscuous mode [ 693.146110][ T9159] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 693.154106][ T9159] Cannot create hsr debugfs directory [ 694.010928][ T29] audit: type=1804 audit(1717808684.223:47): pid=9241 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir605902318/syzkaller.SvYXo8/9/bus" dev="sda1" ino=1960 res=1 errno=0 [ 695.415040][ T9159] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 695.543232][ T9159] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 695.695884][ T9159] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 695.794120][ T9159] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 696.126987][ T9267] tmpfs: Unknown parameter 'm' [ 696.712374][ T5119] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 696.720513][ T5119] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 696.966370][ T3932] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 696.974673][ T3932] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 697.299994][ T9159] 8021q: adding VLAN 0 to HW filter on device bond0 [ 697.448880][ T9159] 8021q: adding VLAN 0 to HW filter on device team0 [ 697.523605][ T5119] bridge0: port 1(bridge_slave_0) entered blocking state [ 697.531428][ T5119] bridge0: port 1(bridge_slave_0) entered forwarding state [ 697.619269][ T5119] bridge0: port 2(bridge_slave_1) entered blocking state [ 697.627023][ T5119] bridge0: port 2(bridge_slave_1) entered forwarding state [ 697.938516][ T9282] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 699.085461][ T29] audit: type=1804 audit(1717808689.233:48): pid=9292 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir3546981372/syzkaller.2dd28k/33/bus" dev="sda1" ino=1959 res=1 errno=0 [ 702.053151][ T9316] tmpfs: Unknown parameter 'm' [ 702.191588][ T9159] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 704.021865][ T9342] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 704.522250][ T9337] loop1: detected capacity change from 0 to 256 [ 704.637365][ T9337] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 704.942681][ T9159] veth0_vlan: entered promiscuous mode [ 705.099619][ T9159] veth1_vlan: entered promiscuous mode [ 705.348522][ T9159] veth0_macvtap: entered promiscuous mode [ 705.434573][ T9159] veth1_macvtap: entered promiscuous mode [ 705.550513][ T29] audit: type=1804 audit(1717808695.623:49): pid=9352 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir605902318/syzkaller.SvYXo8/19/bus" dev="sda1" ino=1963 res=1 errno=0 [ 705.632893][ T9159] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 705.644306][ T9159] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 705.656480][ T9159] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 705.667907][ T9159] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 705.677963][ T9159] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 705.694405][ T9159] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 705.705551][ T9159] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 705.716223][ T9159] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 705.726316][ T9159] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 705.736932][ T9159] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 705.746929][ T9159] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 705.757506][ T9159] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 705.771200][ T9159] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 705.897910][ T9358] tmpfs: Unknown parameter 'm' [ 706.013735][ T9159] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 706.025327][ T9159] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 706.035575][ T9159] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 706.046358][ T9159] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 706.056604][ T9159] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 706.067453][ T9159] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 706.077598][ T9159] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 706.088325][ T9159] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 706.104854][ T9159] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 706.117333][ T9159] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 706.127542][ T9159] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 706.143306][ T9159] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 706.159625][ T9159] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 706.234180][ T9159] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 706.244503][ T9159] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 706.253709][ T9159] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 706.262876][ T9159] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 708.791274][ T9395] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 709.944945][ T9411] tmpfs: Unknown parameter 'm' [ 710.272273][ T29] audit: type=1804 audit(1717808700.423:50): pid=9410 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir489463956/syzkaller.QAazk0/11/bus" dev="sda1" ino=1951 res=1 errno=0 [ 710.647465][ T1223] ieee802154 phy0 wpan0: encryption failed: -22 [ 710.654340][ T1223] ieee802154 phy1 wpan1: encryption failed: -22 [ 712.313631][ T9442] loop0: detected capacity change from 0 to 1024 [ 712.445087][ T1065] hfsplus: b-tree write err: -5, ino 4 [ 712.704213][ T9449] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 712.781121][ T8768] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 712.789156][ T8768] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 713.082222][ T8768] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 713.091496][ T8768] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 713.723616][ T9456] tmpfs: Unknown parameter 'm' [ 714.340368][ T29] audit: type=1804 audit(1717808704.473:51): pid=9459 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir605902318/syzkaller.SvYXo8/28/bus" dev="sda1" ino=1948 res=1 errno=0 [ 716.192144][ T9484] loop3: detected capacity change from 0 to 1024 [ 716.254701][ T1065] hfsplus: b-tree write err: -5, ino 4 [ 716.692075][ T9494] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 717.281682][ T9499] tmpfs: Unknown parameter 'm' [ 718.162253][ T29] audit: type=1804 audit(1717808708.353:52): pid=9505 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir605902318/syzkaller.SvYXo8/33/bus" dev="sda1" ino=1971 res=1 errno=0 [ 719.735130][ T9532] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 721.203038][ T29] audit: type=1804 audit(1717808711.323:53): pid=9550 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir2437367100/syzkaller.q6MTKM/8/bus" dev="sda1" ino=1946 res=1 errno=0 [ 722.443759][ T9577] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 723.746444][ T9594] loop2: detected capacity change from 0 to 64 [ 724.500578][ T29] audit: type=1804 audit(1717808714.663:54): pid=9600 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir2437367100/syzkaller.q6MTKM/13/bus" dev="sda1" ino=1947 res=1 errno=0 [ 727.600693][ T9643] loop1: detected capacity change from 0 to 64 [ 727.853441][ T29] audit: type=1804 audit(1717808718.013:55): pid=9644 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir2437367100/syzkaller.q6MTKM/17/bus" dev="sda1" ino=1968 res=1 errno=0 [ 730.075039][ T9679] loop4: detected capacity change from 0 to 64 [ 730.792376][ T9691] loop0: detected capacity change from 0 to 512 [ 730.838027][ T9691] EXT4-fs: Ignoring removed i_version option [ 730.891117][ T9691] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 730.900754][ T9691] EXT4-fs (loop0): DAX unsupported by block device. [ 731.639843][ T9700] loop3: detected capacity change from 0 to 1764 [ 732.762806][ T9725] loop2: detected capacity change from 0 to 64 [ 732.834835][ T9724] loop0: detected capacity change from 0 to 1024 [ 732.920754][ T9724] EXT4-fs (loop0): unsupported inode size: 0 [ 732.934393][ T9724] EXT4-fs (loop0): blocksize: 1024 [ 733.792655][ T9719] loop4: detected capacity change from 0 to 8192 [ 734.970658][ T29] audit: type=1800 audit(1717808724.823:56): pid=9741 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="loop4" ino=1048701 res=0 errno=0 [ 736.802776][ T9751] loop3: detected capacity change from 0 to 1764 [ 737.488274][ T29] audit: type=1326 audit(1717808727.663:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9764 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f862487cf69 code=0x7ffc0000 [ 737.514342][ T29] audit: type=1326 audit(1717808727.663:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9764 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f862487cf69 code=0x7ffc0000 [ 737.545147][ T29] audit: type=1326 audit(1717808727.663:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9764 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=323 compat=0 ip=0x7f862487cf69 code=0x7ffc0000 [ 737.570657][ T29] audit: type=1326 audit(1717808727.673:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9764 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f862487cf69 code=0x7ffc0000 [ 737.902954][ T9770] loop1: detected capacity change from 0 to 64 [ 739.013786][ C1] vxcan0: j1939_tp_rxtimer: 0xffff88801706fc00: rx timeout, send abort [ 739.024588][ C1] vxcan0: j1939_xtp_rx_abort_one: 0xffff88801706fc00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 742.099224][ T9790] loop3: detected capacity change from 0 to 1764 [ 742.159934][ C1] vxcan0: j1939_tp_rxtimer: 0xffff88801706fc00: rx timeout, send abort [ 742.668630][ C1] vxcan0: j1939_tp_rxtimer: 0xffff88801706fc00: abort rx timeout. Force session deactivation [ 742.893447][ T9804] veth0: entered promiscuous mode [ 742.915832][ T9802] veth0: left promiscuous mode [ 743.342376][ T9808] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 743.352038][ T9808] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 743.359645][ T9808] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 743.412109][ T5077] Bluetooth: hci3: command 0x0406 tx timeout [ 743.462764][ T9808] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 743.470735][ T9808] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 743.981139][ T9816] netlink: 'syz-executor.1': attribute type 39 has an invalid length. [ 745.825444][ T9834] loop3: detected capacity change from 0 to 1764 [ 748.297590][ T9863] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 749.668431][ T9876] loop3: detected capacity change from 0 to 1764 [ 753.085220][ T5077] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 753.097083][ T5077] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 753.110844][ T5077] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 753.122524][ T5077] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 753.132744][ T5077] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 753.147117][ T5077] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 753.890885][ T9905] chnl_net:caif_netlink_parms(): no params data found [ 754.987466][ T9919] loop3: detected capacity change from 0 to 1764 [ 755.281559][ T4428] Bluetooth: hci7: command tx timeout [ 755.915356][ T9905] bridge0: port 1(bridge_slave_0) entered blocking state [ 755.923154][ T9905] bridge0: port 1(bridge_slave_0) entered disabled state [ 755.931126][ T9905] bridge_slave_0: entered allmulticast mode [ 755.940497][ T9905] bridge_slave_0: entered promiscuous mode [ 756.047241][ T9905] bridge0: port 2(bridge_slave_1) entered blocking state [ 756.054894][ T9905] bridge0: port 2(bridge_slave_1) entered disabled state [ 756.062760][ T9905] bridge_slave_1: entered allmulticast mode [ 756.078889][ T9905] bridge_slave_1: entered promiscuous mode [ 756.513756][ T9905] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 756.619613][ T9905] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 757.270545][ T9905] team0: Port device team_slave_0 added [ 757.330785][ T4428] Bluetooth: hci7: command tx timeout [ 757.581063][ T9905] team0: Port device team_slave_1 added [ 758.027725][ T1065] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 758.113269][ T9905] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 758.128045][ T9905] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 758.160610][ T9905] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 758.292731][ T1065] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 758.375592][ T9905] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 758.382935][ T9905] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 758.409353][ T9905] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 758.536002][ T1065] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 758.758439][ T1065] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 758.775804][ T5119] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 759.220848][ T5119] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 759.231285][ T5119] usb 3-1: New USB device found, idVendor=0582, idProduct=007d, bcdDevice=3f.99 [ 759.240606][ T5119] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 759.312740][ T9905] hsr_slave_0: entered promiscuous mode [ 759.340825][ T5119] usb 3-1: config 0 descriptor?? [ 759.392261][ T9905] hsr_slave_1: entered promiscuous mode [ 759.411611][ T4428] Bluetooth: hci7: command tx timeout [ 759.475772][ T9905] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 759.483615][ T9905] Cannot create hsr debugfs directory [ 759.582020][ T5119] usb 3-1: interface 1 not found [ 759.611005][ T1065] bridge_slave_1: left allmulticast mode [ 759.616962][ T1065] bridge_slave_1: left promiscuous mode [ 759.624784][ T1065] bridge0: port 2(bridge_slave_1) entered disabled state [ 759.733622][ T1065] bridge_slave_0: left allmulticast mode [ 759.739597][ T1065] bridge_slave_0: left promiscuous mode [ 759.746986][ T1065] bridge0: port 1(bridge_slave_0) entered disabled state [ 760.289101][ T1065] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 760.396579][ T1065] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 760.496521][ T1065] bond0 (unregistering): Released all slaves [ 761.119350][ T9956] loop0: detected capacity change from 0 to 1764 [ 761.402713][ T1065] hsr_slave_0: left promiscuous mode [ 761.427278][ T1065] hsr_slave_1: left promiscuous mode [ 761.468048][ T1065] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 761.475987][ T1065] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 761.491164][ T4428] Bluetooth: hci7: command tx timeout [ 761.522389][ T1065] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 761.529957][ T1065] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 761.662040][ T5123] usb 3-1: USB disconnect, device number 4 [ 761.726653][ T1065] veth1_macvtap: left promiscuous mode [ 761.732545][ T1065] veth0_macvtap: left promiscuous mode [ 761.738431][ T1065] veth1_vlan: left promiscuous mode [ 761.744064][ T1065] veth0_vlan: left promiscuous mode [ 762.882116][ T1065] team0 (unregistering): Port device team_slave_1 removed [ 762.946036][ T1065] team0 (unregistering): Port device team_slave_0 removed [ 763.898138][ T5077] Bluetooth: hci0: command 0x0406 tx timeout [ 765.051041][ T9905] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 765.121887][ T9905] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 765.207711][ T9905] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 765.279674][ T9905] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 766.589170][ T9905] 8021q: adding VLAN 0 to HW filter on device bond0 [ 766.791839][ T9905] 8021q: adding VLAN 0 to HW filter on device team0 [ 766.862758][ T5123] bridge0: port 1(bridge_slave_0) entered blocking state [ 766.870556][ T5123] bridge0: port 1(bridge_slave_0) entered forwarding state [ 767.040325][ T5123] bridge0: port 2(bridge_slave_1) entered blocking state [ 767.048013][ T5123] bridge0: port 2(bridge_slave_1) entered forwarding state [ 767.397319][T10006] loop3: detected capacity change from 0 to 1764 [ 769.608605][ T9905] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 770.079516][ T9905] veth0_vlan: entered promiscuous mode [ 770.192657][ T9905] veth1_vlan: entered promiscuous mode [ 770.519608][ T9905] veth0_macvtap: entered promiscuous mode [ 770.647637][ T9905] veth1_macvtap: entered promiscuous mode [ 770.865987][ T9905] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 770.877189][ T9905] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 770.887350][ T9905] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 770.898370][ T9905] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 770.908463][ T9905] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 770.927246][ T9905] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 770.939640][ T9905] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 770.951113][ T9905] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 770.961218][ T9905] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 770.971917][ T9905] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 770.987125][ T9905] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 771.085466][ T9905] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 771.096417][ T9905] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 771.106515][ T9905] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 771.117499][ T9905] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 771.135833][ T9905] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 771.148845][ T9905] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 771.158961][ T9905] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 771.169691][ T9905] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 771.180866][ T9905] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 771.191598][ T9905] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 771.206624][ T9905] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 771.318086][ T9905] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 771.323659][T10054] loop3: detected capacity change from 0 to 1764 [ 771.337326][ T9905] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 771.348814][ T9905] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 771.357999][ T9905] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 772.066119][ T1223] ieee802154 phy0 wpan0: encryption failed: -22 [ 772.072937][ T1223] ieee802154 phy1 wpan1: encryption failed: -22 [ 772.371752][ C0] vxcan0: j1939_tp_rxtimer: 0xffff88802d80ac00: rx timeout, send abort [ 772.382215][ C0] vxcan0: j1939_xtp_rx_abort_one: 0xffff88802d80ac00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 773.115310][ C1] TCP: request_sock_TCP: Possible SYN flooding on port [::]:2. Sending cookies. [ 773.871499][ C0] vxcan0: j1939_xtp_rx_dat: no tx connection found [ 773.921937][ C1] TCP: request_sock_TCP: Possible SYN flooding on port [::]:2. Sending cookies. [ 774.131583][ T4428] Bluetooth: hci4: command 0x0406 tx timeout [ 774.628316][ C0] vxcan0: j1939_tp_rxtimer: 0xffff888017056200: rx timeout, send abort [ 775.137008][ C0] vxcan0: j1939_tp_rxtimer: 0xffff888017056200: abort rx timeout. Force session deactivation [ 775.502544][T10092] loop3: detected capacity change from 0 to 1764 [ 775.535420][T10095] netlink: 116 bytes leftover after parsing attributes in process `syz-executor.4'. [ 777.895093][ C1] vxcan0: j1939_tp_rxtimer: 0xffff888042acd800: rx timeout, send abort [ 777.906299][ C1] vxcan0: j1939_xtp_rx_abort_one: 0xffff888042acd800: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 778.649474][T10125] loop0: detected capacity change from 0 to 164 [ 778.760670][T10125] rock: corrupted directory entry. extent=28, offset=0, size=16777216 [ 778.840848][T10125] rock: corrupted directory entry. extent=28, offset=0, size=16777216 [ 778.893957][T10125] syz-executor.0: attempt to access beyond end of device [ 778.893957][T10125] loop0: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 778.913464][T10125] syz-executor.0: attempt to access beyond end of device [ 778.913464][T10125] loop0: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 779.027998][ T29] audit: type=1800 audit(1717808769.143:61): pid=10125 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor.0" name="file0" dev="loop0" ino=1862 res=0 errno=0 [ 779.921171][ T1065] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 779.935849][ T1065] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 780.189668][ T3932] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 780.198087][ T3932] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 780.293909][ C0] TCP: request_sock_TCP: Possible SYN flooding on port [::]:2. Sending cookies. [ 780.696037][ C1] vxcan0: j1939_tp_rxtimer: 0xffff888042acd800: rx timeout, send abort [ 781.204696][ C1] vxcan0: j1939_tp_rxtimer: 0xffff888042acd800: abort rx timeout. Force session deactivation [ 804.453357][T10317] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 808.056033][T10362] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 809.892921][T10387] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.3'. [ 809.970426][ T4428] Bluetooth: hci2: command 0x0406 tx timeout [ 811.609669][T10410] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 812.620023][T10423] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.0'. [ 814.163772][T10449] loop3: detected capacity change from 0 to 256 [ 814.329814][T10449] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fe7f, chksum : 0x39626d3b, utbl_chksum : 0xe619d30d) [ 814.384031][T10453] loop0: detected capacity change from 0 to 512 [ 814.442077][T10453] EXT4-fs: Ignoring removed nobh option [ 814.517248][T10453] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -13 [ 814.534775][T10453] EXT4-fs error (device loop0): ext4_clear_blocks:883: inode #13: comm syz-executor.0: attempt to clear invalid blocks 2 len 1 [ 814.559536][T10453] EXT4-fs (loop0): Remounting filesystem read-only [ 814.575583][T10453] EXT4-fs (loop0): 1 truncate cleaned up [ 814.581685][T10453] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 814.630545][ T8] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 814.863983][ T8793] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 815.040840][ T8] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 815.055502][ T8] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 815.184969][T10464] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.0'. [ 815.196932][ T8] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 815.206489][ T8] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 815.214858][ T8] usb 5-1: SerialNumber: syz [ 815.547029][T10466] loop3: detected capacity change from 0 to 256 [ 815.573952][ T8] usb 5-1: 0:2 : does not exist [ 815.696152][T10466] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fe7f, chksum : 0x39626d3b, utbl_chksum : 0xe619d30d) [ 815.744288][ T8] usb 5-1: USB disconnect, device number 2 [ 816.948847][T10479] loop4: detected capacity change from 0 to 2048 [ 817.081465][T10479] loop4: p3 < > p4 < > [ 817.085889][T10479] loop4: partition table partially beyond EOD, truncated [ 817.093693][T10479] loop4: p3 start 4284289 is beyond EOD, truncated [ 817.181316][ T5123] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 817.292111][T10485] loop2: detected capacity change from 0 to 1024 [ 817.442303][T10485] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 817.535130][T10485] JBD2: no valid journal superblock found [ 817.541288][T10485] EXT4-fs (loop2): Could not load journal inode [ 817.592397][ T5123] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 817.603797][ T5123] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 817.621502][ T5123] usb 2-1: New USB device found, idVendor=056a, idProduct=00f8, bcdDevice= 0.00 [ 817.633168][ T5123] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 817.680612][ T5123] usb 2-1: config 0 descriptor?? [ 817.757170][T10494] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.3'. [ 817.893335][T10496] Bluetooth: MGMT ver 1.22 [ 818.306757][ T5123] wacom 0003:056A:00F8.0002: item fetching failed at offset 3/5 [ 818.372918][ T5123] wacom 0003:056A:00F8.0002: parse failed [ 818.379546][ T5123] wacom 0003:056A:00F8.0002: probe with driver wacom failed with error -22 [ 818.491668][ T5123] usb 2-1: USB disconnect, device number 4 [ 818.730539][ T8] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 818.748073][T10510] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 819.156469][ T8] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 819.167072][ T8] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 819.330882][ T8] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 819.340393][ T8] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 819.348664][ T8] usb 5-1: SerialNumber: syz [ 819.760513][ T8] usb 5-1: 0:2 : does not exist [ 820.085973][ T8] usb 5-1: USB disconnect, device number 3 [ 820.417096][T10526] capability: warning: `syz-executor.2' uses deprecated v2 capabilities in a way that may be insecure [ 820.842019][T10526] binder: transaction release 44 bad object at offset 2314885888464021861, size 72 [ 820.851740][T10526] binder: transaction release 44 bad object at offset 2314885530818453536, size 72 [ 821.129621][T10533] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.3'. [ 821.955256][T10536] loop0: detected capacity change from 0 to 2048 [ 822.047708][T10536] loop0: p3 < > p4 < > [ 822.047821][T10536] loop0: partition table partially beyond EOD, truncated [ 822.048257][T10536] loop0: p3 start 4284289 is beyond EOD, truncated [ 822.595672][T10552] loop4: detected capacity change from 0 to 256 [ 822.752441][T10552] Invalid ELF header type: 60126 != 1 [ 826.664527][T10575] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.2'. [ 826.847629][T10576] binder: transaction release 52 bad object at offset 2314885888464021861, size 72 [ 826.857365][T10576] binder: transaction release 52 bad object at offset 2314885530818453536, size 72 [ 827.967468][T10583] loop2: detected capacity change from 0 to 64 [ 829.359003][T10593] loop0: detected capacity change from 0 to 1024 [ 829.511060][T10593] hfsplus: failed to load root directory [ 830.140638][T10595] loop0: detected capacity change from 0 to 64 [ 830.225953][T10595] hfs: bad catalog namelength [ 830.231130][T10595] hfs: get root inode failed [ 830.278294][T10596] loop2: detected capacity change from 0 to 1024 [ 831.083290][T10606] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.0'. [ 831.330694][T10607] binder: transaction release 60 bad object at offset 2314885888464021861, size 72 [ 831.345460][T10607] binder: transaction release 60 bad object at offset 2314885530818453536, size 72 [ 833.407697][T10629] loop0: detected capacity change from 0 to 1024 [ 833.515206][ T1223] ieee802154 phy0 wpan0: encryption failed: -22 [ 833.523232][ T1223] ieee802154 phy1 wpan1: encryption failed: -22 [ 833.557481][T10629] hfsplus: failed to load root directory [ 834.552973][T10636] loop0: detected capacity change from 0 to 64 [ 834.629011][T10636] hfs: bad catalog namelength [ 834.633976][T10636] hfs: get root inode failed [ 834.669136][T10639] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.3'. [ 837.723484][T10667] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.3'. [ 838.318721][T10670] loop2: detected capacity change from 0 to 1024 [ 838.432862][T10670] hfsplus: failed to load root directory [ 839.614737][T10683] loop2: detected capacity change from 0 to 64 [ 839.870765][T10683] hfs: bad catalog namelength [ 839.875883][T10683] hfs: get root inode failed [ 843.145283][T10736] loop0: detected capacity change from 0 to 1024 [ 843.202850][T10736] hfsplus: failed to load root directory [ 843.903176][T10749] loop0: detected capacity change from 0 to 64 [ 843.992451][T10749] hfs: bad catalog namelength [ 843.997559][T10749] hfs: get root inode failed [ 846.023573][T10781] loop3: detected capacity change from 0 to 1024 [ 846.122161][T10781] hfsplus: failed to load root directory [ 847.121528][T10791] loop3: detected capacity change from 0 to 64 [ 847.166254][T10791] hfs: bad catalog namelength [ 847.171569][T10791] hfs: get root inode failed [ 848.599608][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 848.622595][T10817] tmpfs: Unknown parameter 'm' [ 851.942323][ T10] bridge0: port 2(bridge_slave_1) entered disabled state [ 852.033718][T10872] tmpfs: Unknown parameter 'm' [ 853.482382][T10894] bridge0: port 3(macvlan0) entered blocking state [ 853.489553][T10894] bridge0: port 3(macvlan0) entered disabled state [ 853.497129][T10894] macvlan0: entered allmulticast mode [ 853.502836][T10894] veth1_vlan: entered allmulticast mode [ 853.511469][T10894] macvlan0: entered promiscuous mode [ 853.521478][T10894] bridge0: port 3(macvlan0) entered blocking state [ 853.528639][T10894] bridge0: port 3(macvlan0) entered forwarding state [ 853.744745][T10900] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 854.696538][T10902] loop2: detected capacity change from 0 to 4096 [ 854.714679][T10908] tmpfs: Unknown parameter 'm' [ 855.218224][T10915] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 857.113547][T10937] bridge0: port 3(macvlan0) entered blocking state [ 857.120951][T10937] bridge0: port 3(macvlan0) entered disabled state [ 857.128247][T10937] macvlan0: entered allmulticast mode [ 857.134030][T10937] veth1_vlan: entered allmulticast mode [ 857.149583][T10937] macvlan0: entered promiscuous mode [ 857.159680][T10937] bridge0: port 3(macvlan0) entered blocking state [ 857.166986][T10937] bridge0: port 3(macvlan0) entered forwarding state [ 857.700523][T10942] tmpfs: Unknown parameter 'm' [ 858.766592][T10950] loop0: detected capacity change from 0 to 4096 [ 859.033572][T10961] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 860.719983][T10984] tmpfs: Unknown parameter 'm' [ 862.233295][T10999] loop3: detected capacity change from 0 to 4096 [ 862.450399][T11009] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 863.359676][T11018] loop4: detected capacity change from 0 to 1024 [ 863.622249][T11022] tmpfs: Unknown parameter 'm' [ 863.932567][ T29] audit: type=1800 audit(1717808854.103:62): pid=11029 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="bus" dev="sda1" ino=1954 res=0 errno=0 [ 864.456221][ T8768] bridge0: port 2(bridge_slave_1) entered disabled state [ 865.372629][T11050] loop3: detected capacity change from 0 to 164 [ 866.314499][T11049] loop4: detected capacity change from 0 to 4096 [ 866.517247][T11059] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 867.437823][T11064] loop3: detected capacity change from 0 to 1024 [ 867.605022][T11068] tmpfs: Unknown parameter 'm' [ 867.654475][T11064] ===================================================== [ 867.661797][T11064] BUG: KMSAN: uninit-value in hfsplus_rename_cat+0x10e3/0x1700 [ 867.669528][T11064] hfsplus_rename_cat+0x10e3/0x1700 [ 867.675084][T11064] hfsplus_rename+0x20f/0x2f0 [ 867.679926][T11064] vfs_rename+0x1d9a/0x2280 [ 867.692644][T11064] do_renameat2+0x18cc/0x1d50 [ 867.697495][T11064] __x64_sys_renameat+0x12a/0x1c0 [ 867.705216][T11064] x64_sys_call+0x3818/0x3b50 [ 867.710098][T11064] do_syscall_64+0xcf/0x1e0 [ 867.714958][T11064] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 867.721210][T11064] [ 867.723615][T11064] Uninit was stored to memory at: [ 867.728851][T11064] hfsplus_rename_cat+0x101c/0x1700 [ 867.737854][T11064] hfsplus_rename+0x20f/0x2f0 [ 867.743589][T11064] vfs_rename+0x1d9a/0x2280 [ 867.748252][T11064] do_renameat2+0x18cc/0x1d50 2024/06/08 01:07:37 SYZFATAL: failed to send *flatrpc.ExecutorMessageRawT: write tcp 10.128.1.60:52148->10.128.0.169:30024: write: broken pipe [ 867.753198][T11064] __x64_sys_renameat+0x12a/0x1c0 [ 867.758381][T11064] x64_sys_call+0x3818/0x3b50 [ 867.763374][T11064] do_syscall_64+0xcf/0x1e0 [ 867.768080][T11064] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 867.774350][T11064] [ 867.776757][T11064] Uninit was stored to memory at: [ 867.782794][T11064] hfsplus_create_cat+0x1804/0x1810 [ 867.796377][T11064] hfsplus_mknod+0x201/0x570 [ 867.803605][T11064] hfsplus_mkdir+0x58/0x70 [ 867.808187][T11064] vfs_mkdir+0x49e/0x710 [ 867.812799][T11064] do_mkdirat+0x529/0x810 [ 867.817327][T11064] __x64_sys_mkdirat+0xc8/0x120 [ 867.822496][T11064] x64_sys_call+0x28f5/0x3b50 [ 867.827368][T11064] do_syscall_64+0xcf/0x1e0 [ 867.832205][T11064] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 867.838306][T11064] [ 867.840858][T11064] Uninit was stored to memory at: [ 867.846093][T11064] hfsplus_create_cat+0x1804/0x1810 [ 867.851570][T11064] hfsplus_fill_super+0x227f/0x2700 [ 867.856972][T11064] mount_bdev+0x397/0x520 [ 867.862471][T11064] hfsplus_mount+0x4d/0x60 [ 867.867082][T11064] legacy_get_tree+0x114/0x290 [ 867.872179][T11064] vfs_get_tree+0xa7/0x570 [ 867.876797][T11064] do_new_mount+0x71f/0x15e0 [ 867.881760][T11064] path_mount+0x742/0x1f20 [ 867.886364][T11064] __se_sys_mount+0x725/0x810 [ 867.899346][T11064] __x64_sys_mount+0xe4/0x150 [ 867.906712][T11064] x64_sys_call+0x2bf4/0x3b50 [ 867.911715][T11064] do_syscall_64+0xcf/0x1e0 [ 867.916412][T11064] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 867.922674][T11064] [ 867.925081][T11064] Uninit was created at: [ 867.929533][T11064] __alloc_pages+0x9d6/0xe70 [ 867.934420][T11064] new_slab+0x2de/0x1400 [ 867.938825][T11064] ___slab_alloc+0x121d/0x34a0 [ 867.943890][T11064] kmem_cache_alloc_lru+0x6da/0xc20 [ 867.949250][T11064] hfsplus_alloc_inode+0x5a/0xd0 [ 867.954642][T11064] alloc_inode+0x86/0x460 [ 867.959128][T11064] new_inode+0x38/0x4f0 [ 867.963574][T11064] hfsplus_new_inode+0x5e/0xa70 [ 867.968638][T11064] hfsplus_fill_super+0x21c6/0x2700 [ 867.974162][T11064] mount_bdev+0x397/0x520 [ 867.978684][T11064] hfsplus_mount+0x4d/0x60 [ 867.983396][T11064] legacy_get_tree+0x114/0x290 [ 867.988353][T11064] vfs_get_tree+0xa7/0x570 [ 868.001432][T11064] do_new_mount+0x71f/0x15e0 [ 868.006227][T11064] path_mount+0x742/0x1f20 [ 868.013369][T11064] __se_sys_mount+0x725/0x810 [ 868.018246][T11064] __x64_sys_mount+0xe4/0x150 [ 868.023276][T11064] x64_sys_call+0x2bf4/0x3b50 [ 868.028162][T11064] do_syscall_64+0xcf/0x1e0 [ 868.033026][T11064] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 868.039131][T11064] [ 868.041674][T11064] CPU: 1 PID: 11064 Comm: syz-executor.3 Not tainted 6.9.0-syzkaller-02707-g614da38e2f7a #0 [ 868.052240][T11064] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024 [ 868.062559][T11064] ===================================================== [ 868.069599][T11064] Disabling lock debugging due to kernel taint [ 868.076105][T11064] Kernel panic - not syncing: kmsan.panic set ... [ 868.082636][T11064] CPU: 1 PID: 11064 Comm: syz-executor.3 Tainted: G B 6.9.0-syzkaller-02707-g614da38e2f7a #0 [ 868.094365][T11064] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024 [ 868.104568][T11064] Call Trace: [ 868.107953][T11064] [ 868.110983][T11064] dump_stack_lvl+0x216/0x2d0 [ 868.115871][T11064] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 868.121875][T11064] dump_stack+0x1e/0x30 [ 868.126231][T11064] panic+0x4e2/0xcd0 [ 868.130322][T11064] ? kmsan_get_metadata+0xf1/0x1d0 [ 868.135636][T11064] kmsan_report+0x2d5/0x2e0 [ 868.140317][T11064] ? kmsan_internal_memmove_metadata+0x91/0x230 [ 868.146799][T11064] ? kmsan_get_metadata+0x146/0x1d0 [ 868.152183][T11064] ? __msan_warning+0x95/0x120 [ 868.157122][T11064] ? hfsplus_rename_cat+0x10e3/0x1700 [ 868.162667][T11064] ? hfsplus_rename+0x20f/0x2f0 [ 868.167681][T11064] ? vfs_rename+0x1d9a/0x2280 [ 868.172518][T11064] ? do_renameat2+0x18cc/0x1d50 [ 868.177527][T11064] ? __x64_sys_renameat+0x12a/0x1c0 [ 868.182890][T11064] ? x64_sys_call+0x3818/0x3b50 [ 868.187941][T11064] ? do_syscall_64+0xcf/0x1e0 [ 868.192813][T11064] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 868.199091][T11064] ? hfsplus_bnode_dump+0xca0/0xcd0 [ 868.204502][T11064] ? kmsan_get_metadata+0x146/0x1d0 [ 868.209880][T11064] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 868.215876][T11064] ? hfsplus_brec_remove+0x91d/0x9d0 [ 868.221363][T11064] ? kmsan_get_metadata+0x146/0x1d0 [ 868.226735][T11064] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 868.232730][T11064] __msan_warning+0x95/0x120 [ 868.237483][T11064] hfsplus_rename_cat+0x10e3/0x1700 [ 868.242862][T11064] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 868.248846][T11064] ? kfree+0x18f/0xa60 [ 868.253069][T11064] ? filter_irq_stacks+0x60/0x1a0 [ 868.258317][T11064] ? stack_depot_save_flags+0x2c/0x6e0 [ 868.263958][T11064] ? kmsan_get_metadata+0x146/0x1d0 [ 868.269334][T11064] ? kmsan_internal_set_shadow_origin+0x66/0xe0 [ 868.275810][T11064] ? kmsan_get_metadata+0x146/0x1d0 [ 868.281182][T11064] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 868.287172][T11064] ? kmsan_get_metadata+0x146/0x1d0 [ 868.292544][T11064] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 868.298529][T11064] ? kmsan_get_metadata+0x146/0x1d0 [ 868.303933][T11064] hfsplus_rename+0x20f/0x2f0 [ 868.308781][T11064] ? __pfx_hfsplus_rename+0x10/0x10 [ 868.314145][T11064] vfs_rename+0x1d9a/0x2280 [ 868.318854][T11064] do_renameat2+0x18cc/0x1d50 [ 868.323738][T11064] __x64_sys_renameat+0x12a/0x1c0 [ 868.328941][T11064] x64_sys_call+0x3818/0x3b50 [ 868.333822][T11064] do_syscall_64+0xcf/0x1e0 [ 868.338523][T11064] ? clear_bhb_loop+0x25/0x80 [ 868.343407][T11064] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 868.349510][T11064] RIP: 0033:0x7f862487cf69 [ 868.354063][T11064] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 868.373858][T11064] RSP: 002b:00007f86255640c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000108 [ 868.382435][T11064] RAX: ffffffffffffffda RBX: 00007f86249b3f80 RCX: 00007f862487cf69 [ 868.390542][T11064] RDX: 0000000000000006 RSI: 0000000020001380 RDI: 0000000000000006 [ 868.398633][T11064] RBP: 00007f86248da6fe R08: 0000000000000000 R09: 0000000000000000 [ 868.406725][T11064] R10: 0000000020000240 R11: 0000000000000246 R12: 0000000000000000 [ 868.414822][T11064] R13: 000000000000000b R14: 00007f86249b3f80 R15: 00007fffcc9052f8 [ 868.422943][T11064] [ 868.426267][T11064] Kernel Offset: disabled [ 868.430646][T11064] Rebooting in 86400 seconds..