last executing test programs: 6.01264207s ago: executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x0, 0x0) r3 = userfaultfd(0x80001) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) 4.896352664s ago: executing program 2: fcntl$setflags(0xffffffffffffffff, 0x2, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(0xffffffffffffffff, 0x84, 0x23, 0x0, 0x0) r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e03002a000b05d25a806c8c6f94f90424fc601100077a0a000312050282c137153e370e0c1180fc0b0c000300", 0x33fe0}], 0x1}, 0x0) 4.787175059s ago: executing program 2: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000280)={'wg2\x00'}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000040)={'wg2\x00', @multicast}) 3.82377798s ago: executing program 2: socket$alg(0x26, 0x5, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$f2fs(&(0x7f0000000040), &(0x7f00000000c0)='./file2\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"/297], 0x1, 0x54f9, &(0x7f000000ab40)="$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") prlimit64(0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r0, 0x0) 3.692941926s ago: executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BTRFS_IOC_QGROUP_LIMIT(r0, 0x5451, 0x0) 3.642845454s ago: executing program 4: r0 = memfd_create(&(0x7f00000005c0)='\xc0\x87:*\x18\xc1k\xa7\x87[\xa0o8\xaaK\xa5\xd3\v\x86\xca<\x7f\xfd6\x8d}\xd8\xf2G\xb8\xeae)\x90\x86\xe3\x86\b\xe0\xfa\xb1\xd8N\xb2=W\xcb\x8d}3lm8\xa57\xc9\x00HOA\xc8\x80kR\xfc\xcb%u3\xec\xde%\x00]\xd8\xebD\x82S\x17?\xd6As\xc2\xb1\x9aF\xe2\xba[\xc7%\x88 \xeeQR\x9f\x81\x8b\xdc\xc7\xdc\xdem\xbe\x7f2\x11)W\x9c\x82\x91\x17\xd8\xda@4\x9f\xc5*T\x1e^\xf7o\xff\xff\xff\xffwI\x02\xf3\xe3\x8d.\xd1=\xcf\xbf\x81\xb5\x8d%K\x1d\xe7_\xde\x87\xdd\xc1\xf0\x91\x1a!\x9c\xd3\v\xc9\x95d\xe3*\xa9\xfa\x99\x9d\xb8\x89>\xc9\xf2/\x13{\x1a\x7f\x00\x00\x00\x00+$\xedX\xb7KV\x90\xc3D\x82`\xea\x16\xc6\xce\x83\xab\x05g?\fL\x9a\x15\x9c\xf5\xb4O\x17@d\x81+\xf6\xe6+\xed\r\xd2\xb3\xaa\x9b\x7fC\'\xa2\xf6\x12\xa1\x15Punfo\x7f\x92G\x0e.\xce\xd8h\xb9p2\xccC\xbaH\xc4\xdc\xe2\xa1%)\x85\xc7O]\'9\x92\xad\xfbJ\x02\x1d\x91-\xc99\t&\xbdq\x06`T\xc8\x92\xaf\xad\x06\xdd\xaf\x84\xf4\"\x13\xcf\xe5\x93D\xad~F\xe5\x19\xaa\xaa\xb2\xb1\x03m\x82+\x06\x1bF^\xd3n\xc4F\xc1\xc08\x94\xe6\xe5\x1f\xa7\xf6\xcaA\x90T\xf1\x1b\xe6\xb9\xe7\xff\xc5H\x04\x8d\xca\xad\x17UlY\x9a}\r4\xac\x93\xac\v2\xc6\xf9\xbe\xfeI\x8b\xd4/`\xab\x1e\xcf\x7f\b\x94 2.{\xc1\xbe\x9bth~\xcb\xb9E\x10W\xed\xed51[\xc5\xeb\xb1ux\x94O \xe3\xda\x107\x8a\f(\x80\xa0\xfa\xd4\x01\xd8\x162q\xf5X\xf1\xaft11\x14T\xa4?\\\xd2\xea\xc31\xd0lf\xd1\xda\xe0\xf5j3\xe0\xd8\xe9k\x89+\x80B\x98\x9e.G\x9fr\x96\xfa?\xdeP\xf2X\x97\xcf\xd8\xd1\x83\x8f_\xfb\x86)\x7f\xca<\xd3\x12%', 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x4, 0x11, r0, 0x0) fallocate(r0, 0x0, 0x0, 0x8000007) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_inet6_tcp_SIOCOUTQ(r1, 0x8901, &(0x7f0000000240)) socketpair(0x0, 0x0, 0x0, 0x0) 2.242669848s ago: executing program 0: r0 = socket(0x10, 0x80002, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)=@gettclass={0x24}, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001a40)=ANY=[@ANYBLOB="440000001000010400"/18, @ANYRES32=r4, @ANYBLOB="00000000000000001c0012800b00010067726574617000000c00028008000100", @ANYRES32=r4, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r1], 0x44}}, 0x0) 2.142177661s ago: executing program 0: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000280)={'wg2\x00'}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000040)={'wg2\x00', @multicast}) 2.136418424s ago: executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) 2.088158467s ago: executing program 4: bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_CREATE(0x100000000000000, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = socket(0x8000000010, 0x2, 0x0) write(r1, &(0x7f00000002c0)="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", 0xfc) r2 = socket(0x840000000002, 0x3, 0x100) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x24, 0x0, 0x107, 0x0, 0x0, {0x2, 0x7c}, [@typed={0x4}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @uid}]}]}, 0x24}}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r4 = openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(r4, &(0x7f0000000240)=[{&(0x7f0000001a80)=""/102386, 0x18ff2}], 0x1, 0x0, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) mlock(&(0x7f00002bf000/0x4000)=nil, 0x4000) bind$netlink(r5, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r6 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r6, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f0000000340)={{{@in=@broadcast, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x2c}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000}, {}, 0x0, 0x0, 0x1}, {{@in6=@remote, 0x0, 0x32}, 0x0, @in6=@loopback, 0x8, 0x0, 0x0, 0x8}}, 0xe4) sendmmsg(r6, 0x0, 0x0, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x14, &(0x7f0000000000), 0x4) connect$inet(r2, &(0x7f00000005c0)={0x2, 0x0, @local}, 0x10) r7 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r7, 0x8955, &(0x7f0000000180)={{0x2, 0x0, @remote}, {0x20000010304, @dev}, 0x4, {0x2, 0x0, @multicast1=0xe000cc02}}) 2.072103839s ago: executing program 3: r0 = socket$pppoe(0x18, 0x1, 0x0) r1 = openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$int_in(r1, 0x40000000af01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000300)) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, &(0x7f00000003c0)=""/75, 0x0}) r3 = dup(r2) ioctl$VHOST_NET_SET_BACKEND(r1, 0x4008af30, &(0x7f0000000000)={0x0, r3}) connect$pppoe(r0, &(0x7f0000000080)={0x18, 0x0, {0x1, @empty, 'bond0\x00'}}, 0x1e) sendmmsg$sock(r0, &(0x7f0000001dc0), 0x213, 0x0) 1.277537893s ago: executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000500)={0xa, 0x2, 0x0, @empty}, 0x1c) listen(r1, 0x0) connect$inet(r0, &(0x7f00000001c0)={0x2, 0x2, @remote}, 0x10) r2 = accept4$inet6(r1, 0x0, 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, 0x0, 0x0) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, 0x0, 0x0) 1.210043813s ago: executing program 4: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x21, &(0x7f0000000240), 0x10) 1.183639126s ago: executing program 4: r0 = socket(0x1c, 0x10000001, 0x84) setsockopt$inet_sctp_SCTP_AUTH_KEY(r0, 0x84, 0x1203, &(0x7f0000000580)=ANY=[@ANYRES32, @ANYRES64], 0x3ef) 1.180188055s ago: executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r0, &(0x7f0000000a80)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000400)="2a947354495ee7d43ad76e0880fbf78e993afbfe90a44de4a12b00484f9f2646cfa901000000b654933bef6ff86be62063eb6a5fd31740d1e8f03b4f94a035855eb2ba64592b85d3a386f199f74474d80039b40f676e4cc9643ce9e8bdb12910ad632ba38746b2a3d52863a530c334df95850ccf3353910df7bfc340c2c5cd0bbe149921557eef18dc7a6820b3e68ef1385ebe3453e0f054f40fdb4759f95e30390fbdd488d081beacbf4d90a221de4b2b5942b738866c999dbf7b48b1970b", 0xbf}, {&(0x7f0000000200)="b350d8a459dc6b65dfaa287643d5b1027adfe9647a77c6f4f115dc6063f7e73a82768ebea104788e997d0d02a5440e124bdf947c3bdf64940eeaacdf8f7fbabfe6303126baeb8979bfdb39fe549c3b2c5d23dbd3944c7992e1c77a13dc4d56603512391ef40b3ebfa64d4008ef85c5fc0efa85f02318", 0x76}, {&(0x7f00000002c0)="3cd723b82355ed9f78cda5c2bf7ee6b9e733a0427ae2272c0729a2e9e28b2beae4b862c9ac320d4151dcd3cae35dd3985b6e2d0687f94a87", 0x38}], 0x3}}, {{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000b00)="4ef9147973bd0daa097ce373d9ebdc8ca4d7c269fd822c94cb42e885278e40ea11080ed01fca0b86d564d9cc7082dd4ad30734f9c0bb43d6394edc1cc3d6e50febd1ed302ad1f3c05203fdbe6608cbe4614bde9f88e811633ee37d751eaf0a9770c974b149666896f645dee19eac07495a87a39e90138b5a23dc5c6fb854", 0x7e}], 0x1}}], 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) write$binfmt_aout(r0, &(0x7f00000001c0)=ANY=[], 0x420) 1.15713827s ago: executing program 0: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x90) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0xfff, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3f, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000000020000000000000000018190000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000024"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) write$binfmt_misc(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="72b9800007"], 0xd) 1.149380613s ago: executing program 4: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000ddffffff850000002d00000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) syz_mount_image$exfat(&(0x7f0000000280), &(0x7f00000006c0)='./file2\x00', 0x810, &(0x7f0000000300)=ANY=[@ANYRESOCT, @ANYBLOB="19fdae7ff606676a07e73e992f6d05ef629de92755775dfea1e00613114e2f04a988c21a3ebee125daa32cbff4fef4aa0fc4c20f2b9cb7f31e9ca5b8121e9cd1bb930e31e91a006888898b80467e27c068ea6d236f2b8af52d5f3a0f75eeca42e16e5113898c446a75ea6324a47b7b158376ab5e862bfe27cf43f6d286140692ff5a912eaf8d", @ANYRESDEC, @ANYRES32=r1, @ANYRES8, @ANYRES64=0x0], 0xdd, 0x1501, &(0x7f0000001800)="$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") bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000500)='percpu_free_percpu\x00'}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001", @ANYRESOCT], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = syz_open_dev$rtc(&(0x7f0000000000), 0x0, 0x0) ioctl$RTC_ALM_SET(r5, 0x40247007, &(0x7f0000000180)={0x34, 0x0, 0x4, 0x1e, 0x9, 0x0, 0x0, 0x0, 0xffffffffffffffff}) 1.050596279s ago: executing program 1: r0 = socket(0x10, 0x80002, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)=@gettclass={0x24}, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001a40)=ANY=[@ANYBLOB="440000001000010400"/18, @ANYRES32=r4, @ANYBLOB="00000000000000001c0012800b00010067726574617000000c00028008000100", @ANYRES32=r4, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r1], 0x44}}, 0x0) 1.037084745s ago: executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x10001, 0x9, 0x101}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @loopback={0xfec0ffff00000000}}}) write$vga_arbiter(0xffffffffffffffff, &(0x7f0000000000)=@unlock_all, 0xb) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x89f1, &(0x7f0000000040)={'ip6tnl0\x00', @random='\a\x00\x00 \x00'}) 967.164775ms ago: executing program 1: memfd_create(&(0x7f0000000200)='-B\xd5NI\xc5j\x9ap\x84\xa2m\x00\v\x18\x004\x91\xfdy\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0`\xaa8\xc7\xc8\x9d\xfdA\b\x10\x92(c\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=w=\xcdI\x83\xa9\xb2\x04K\x98\x93=\xabn\xf7 \x1d\xa1\xce\x8b\xac \xe8\x80\xdc\x02\xd7\x04\x9b\x9aL\x9f([4\x81\xf6\xb6\xdf\x16J\xab\xecC\xe2{\xfd\x8a\xb4\x8e\x9c\xfb\xf6\xe9\xd8]B6{\xf0(\xaeW;)\x9f\x9cR\xae\x12G\xd8\xa4y', 0x0) syz_mount_image$fuse(0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000280)="541f63") 918.008556ms ago: executing program 0: r0 = gettid() timer_create(0x0, &(0x7f00000001c0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f00000000c0)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x8}, {0x0, 0x989680}}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$TCSETSF(r2, 0x5404, &(0x7f0000002400)={0x0, 0x0, 0x0, 0x0, 0x0, "1e5ac5f8190f37add17142df030d69f7038a83"}) 888.399771ms ago: executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) 336.985141ms ago: executing program 1: r0 = shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffa000/0x2000)=nil) shmctl$SHM_INFO(r0, 0xd, 0x0) 310.235922ms ago: executing program 3: fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) syz_io_uring_setup(0x239, &(0x7f0000000080), 0x0, 0x0) syz_io_uring_setup(0x2ddf, &(0x7f00000006c0)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000000140)) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index}) ppoll(&(0x7f0000000080)=[{}, {}], 0x20000000000000e8, &(0x7f0000000140), &(0x7f00000000c0), 0x8) 272.45601ms ago: executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) recvmsg(r0, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x40000021) 218.760279ms ago: executing program 3: r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000240), 0x8, 0x0) write$FUSE_INIT(r0, 0x0, 0x0) 191.136994ms ago: executing program 1: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000280)={'wg2\x00'}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000040)={'wg2\x00', @multicast}) 132.515494ms ago: executing program 3: r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) ptrace$getregset(0x4204, r1, 0x4, &(0x7f00000001c0)={&(0x7f0000000240)=""/95, 0x5f}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x4000000000002df, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000580)="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", 0x13c}], 0x2}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001200)=[{&(0x7f0000000200)="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", 0x383}], 0x1}, 0x0) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8b18, &(0x7f0000000000)={'wlan1\x00'}) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r5 = socket$inet6(0xa, 0x3, 0x8000000003c) syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000080)='./bus\x00', 0x2000010, &(0x7f00000013c0)=ANY=[], 0xf, 0x693, &(0x7f00000000c0)="$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") r6 = socket(0x200000100000011, 0x803, 0x0) socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f00000007c0)={'batadv0\x00', 0x0}) bind$packet(r6, &(0x7f0000000000)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @broadcast}, 0x14) write$binfmt_aout(r6, &(0x7f00000001c0)=ANY=[@ANYBLOB="90030ee7ff072d2200000e210806000108000604"], 0x120) connect$inet6(r5, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) 39.031982ms ago: executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) getsockname(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={0x0}}, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext2\x00', &(0x7f00000000c0)='./file0\x00', 0x14000, &(0x7f0000000500), 0x1, 0x496, &(0x7f0000000540)="$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") 0s ago: executing program 2: syz_open_procfs(0x0, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) syslog(0x0, 0x0, 0x0) syslog(0x0, 0x0, 0x0) syslog(0x0, 0x0, 0x0) syslog(0x2, &(0x7f0000002980)=""/85, 0x55) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.7' (ED25519) to the list of known hosts. 1970/01/01 00:00:33 fuzzer started 1970/01/01 00:00:33 dialing manager at 10.128.0.169:30028 [ 33.646037][ T6254] cgroup: Unknown subsys name 'net' [ 33.723875][ T6257] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k SS [ 33.876127][ T6254] cgroup: Unknown subsys name 'rlimit' 1970/01/01 00:00:34 starting 5 executor processes [ 34.779830][ T52] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 34.793510][ T6279] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 34.797596][ T6279] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 34.799744][ T6279] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 34.802162][ T6279] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 34.804353][ T6279] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 34.806902][ T6279] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 34.809261][ T6279] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 34.809475][ T6291] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 34.812336][ T6279] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 34.814326][ T6290] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 34.815816][ T6279] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 34.817559][ T6291] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 34.819183][ T6279] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 34.821813][ T6291] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 34.823996][ T5830] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 34.824724][ T6291] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 34.826940][ T5830] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 34.829116][ T6291] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 34.831215][ T5830] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 34.833163][ T6291] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 34.834121][ T5830] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 34.836418][ T6289] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 34.838244][ T5830] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 34.842198][ T5830] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 34.842841][ T6289] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 34.844520][ T5830] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 34.848066][ T6291] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 34.854720][ T6277] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 34.861416][ T6277] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 35.039316][ T6287] chnl_net:caif_netlink_parms(): no params data found [ 35.082537][ T6282] chnl_net:caif_netlink_parms(): no params data found [ 35.085924][ T6276] chnl_net:caif_netlink_parms(): no params data found [ 35.132026][ T6281] chnl_net:caif_netlink_parms(): no params data found [ 35.145022][ T6287] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.147003][ T6287] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.148949][ T6287] bridge_slave_0: entered allmulticast mode [ 35.152264][ T6287] bridge_slave_0: entered promiscuous mode [ 35.157901][ T6287] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.159748][ T6287] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.162192][ T6287] bridge_slave_1: entered allmulticast mode [ 35.164199][ T6287] bridge_slave_1: entered promiscuous mode [ 35.199937][ T6276] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.202064][ T6276] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.204080][ T6276] bridge_slave_0: entered allmulticast mode [ 35.206233][ T6276] bridge_slave_0: entered promiscuous mode [ 35.218446][ T6287] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 35.223198][ T6287] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 35.235524][ T6276] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.237532][ T6276] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.239465][ T6276] bridge_slave_1: entered allmulticast mode [ 35.242307][ T6276] bridge_slave_1: entered promiscuous mode [ 35.265158][ T6282] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.267130][ T6282] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.269142][ T6282] bridge_slave_0: entered allmulticast mode [ 35.271931][ T6282] bridge_slave_0: entered promiscuous mode [ 35.283821][ T6281] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.285679][ T6281] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.287648][ T6281] bridge_slave_0: entered allmulticast mode [ 35.289802][ T6281] bridge_slave_0: entered promiscuous mode [ 35.298921][ T6287] team0: Port device team_slave_0 added [ 35.302575][ T6282] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.306754][ T6282] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.308653][ T6282] bridge_slave_1: entered allmulticast mode [ 35.310853][ T6282] bridge_slave_1: entered promiscuous mode [ 35.317798][ T6276] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 35.324834][ T6281] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.326690][ T6281] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.328733][ T6281] bridge_slave_1: entered allmulticast mode [ 35.333504][ T6281] bridge_slave_1: entered promiscuous mode [ 35.337672][ T6287] team0: Port device team_slave_1 added [ 35.349174][ T6276] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 35.353514][ T6282] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 35.366186][ T6281] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 35.368926][ T6287] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 35.370688][ T6287] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 35.377769][ T6287] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 35.387358][ T6282] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 35.390848][ T6281] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 35.396879][ T6275] chnl_net:caif_netlink_parms(): no params data found [ 35.405242][ T6287] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 35.407059][ T6287] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 35.414198][ T6287] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 35.436683][ T6281] team0: Port device team_slave_0 added [ 35.441829][ T6281] team0: Port device team_slave_1 added [ 35.444774][ T6276] team0: Port device team_slave_0 added [ 35.453033][ T6282] team0: Port device team_slave_0 added [ 35.460078][ T6276] team0: Port device team_slave_1 added [ 35.474716][ T6276] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 35.476492][ T6276] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 35.487323][ T6276] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 35.491885][ T6282] team0: Port device team_slave_1 added [ 35.493932][ T6276] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 35.495749][ T6276] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 35.506277][ T6276] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 35.533399][ T6281] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 35.535263][ T6281] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 35.542116][ T6281] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 35.557979][ T6282] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 35.559857][ T6282] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 35.566891][ T6282] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 35.574783][ T6282] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 35.576588][ T6282] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 35.583686][ T6282] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 35.592913][ T6281] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 35.594786][ T6281] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 35.602175][ T6281] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 35.642753][ T6287] hsr_slave_0: entered promiscuous mode [ 35.681490][ T6287] hsr_slave_1: entered promiscuous mode [ 35.728129][ T6275] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.730050][ T6275] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.732797][ T6275] bridge_slave_0: entered allmulticast mode [ 35.734916][ T6275] bridge_slave_0: entered promiscuous mode [ 35.772697][ T6276] hsr_slave_0: entered promiscuous mode [ 35.811314][ T6276] hsr_slave_1: entered promiscuous mode [ 35.851418][ T6276] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 35.853760][ T6276] Cannot create hsr debugfs directory [ 35.865325][ T6275] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.867244][ T6275] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.869188][ T6275] bridge_slave_1: entered allmulticast mode [ 35.871641][ T6275] bridge_slave_1: entered promiscuous mode [ 35.942988][ T6282] hsr_slave_0: entered promiscuous mode [ 35.981242][ T6282] hsr_slave_1: entered promiscuous mode [ 36.021407][ T6282] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 36.023393][ T6282] Cannot create hsr debugfs directory [ 36.046085][ T6275] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 36.117368][ T6281] hsr_slave_0: entered promiscuous mode [ 36.151209][ T6281] hsr_slave_1: entered promiscuous mode [ 36.191107][ T6281] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 36.193119][ T6281] Cannot create hsr debugfs directory [ 36.196391][ T6275] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 36.245533][ T6275] team0: Port device team_slave_0 added [ 36.250208][ T6275] team0: Port device team_slave_1 added [ 36.288174][ T6275] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 36.289995][ T6275] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 36.297429][ T6275] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 36.318684][ T6275] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 36.320515][ T6275] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 36.328194][ T6275] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 36.422533][ T6275] hsr_slave_0: entered promiscuous mode [ 36.461679][ T6275] hsr_slave_1: entered promiscuous mode [ 36.501094][ T6275] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 36.503072][ T6275] Cannot create hsr debugfs directory [ 36.538279][ T6287] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 36.551097][ T6287] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 36.558409][ T6287] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 36.573030][ T6287] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 36.592532][ T6276] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 36.596399][ T6276] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 36.606103][ T6276] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 36.610740][ T6276] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 36.650372][ T6281] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 36.659301][ T6281] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 36.667065][ T6281] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 36.677437][ T6287] 8021q: adding VLAN 0 to HW filter on device bond0 [ 36.683035][ T6281] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 36.719246][ T6282] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 36.723010][ T6282] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 36.726996][ T6282] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 36.739036][ T6287] 8021q: adding VLAN 0 to HW filter on device team0 [ 36.744742][ T6282] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 36.781726][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.783750][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 36.787008][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.788821][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 36.807474][ T6276] 8021q: adding VLAN 0 to HW filter on device bond0 [ 36.812096][ T6275] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 36.815359][ T6275] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 36.840287][ T6275] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 36.844354][ T6275] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 36.858248][ T6276] 8021q: adding VLAN 0 to HW filter on device team0 [ 36.877475][ T6281] 8021q: adding VLAN 0 to HW filter on device bond0 [ 36.887235][ T6330] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.889197][ T6330] bridge0: port 1(bridge_slave_0) entered forwarding state [ 36.893760][ T6330] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.895627][ T6330] bridge0: port 2(bridge_slave_1) entered forwarding state [ 36.911889][ T6277] Bluetooth: hci3: command tx timeout [ 36.911967][ T6286] Bluetooth: hci1: command tx timeout [ 36.913931][ T6277] Bluetooth: hci2: command tx timeout [ 36.915443][ T6286] Bluetooth: hci4: command tx timeout [ 36.917121][ T6277] Bluetooth: hci0: command tx timeout [ 36.948398][ T6276] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 36.952863][ T6276] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 36.965016][ T6282] 8021q: adding VLAN 0 to HW filter on device bond0 [ 36.971271][ T6281] 8021q: adding VLAN 0 to HW filter on device team0 [ 36.985219][ T6275] 8021q: adding VLAN 0 to HW filter on device bond0 [ 36.988167][ T6330] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.990100][ T6330] bridge0: port 1(bridge_slave_0) entered forwarding state [ 36.993383][ T6330] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.995246][ T6330] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.012165][ T6281] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 37.014958][ T6281] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 37.027744][ T6282] 8021q: adding VLAN 0 to HW filter on device team0 [ 37.046444][ T6275] 8021q: adding VLAN 0 to HW filter on device team0 [ 37.066708][ T6328] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.068708][ T6328] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.082516][ T6328] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.084473][ T6328] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.087013][ T6328] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.088822][ T6328] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.099902][ T6287] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 37.122421][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.124359][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.140532][ T6282] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 37.145006][ T6282] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 37.180078][ T6276] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 37.200142][ T6281] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 37.221668][ T6287] veth0_vlan: entered promiscuous mode [ 37.242303][ T6287] veth1_vlan: entered promiscuous mode [ 37.294398][ T6287] veth0_macvtap: entered promiscuous mode [ 37.302749][ T6281] veth0_vlan: entered promiscuous mode [ 37.307650][ T6275] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 37.310308][ T6281] veth1_vlan: entered promiscuous mode [ 37.314783][ T6287] veth1_macvtap: entered promiscuous mode [ 37.323598][ T6287] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 37.327315][ T6287] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 37.348461][ T6287] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.351761][ T6287] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.354372][ T6287] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.356765][ T6287] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.366550][ T6282] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 37.375740][ T6276] veth0_vlan: entered promiscuous mode [ 37.390630][ T6276] veth1_vlan: entered promiscuous mode [ 37.398470][ T6281] veth0_macvtap: entered promiscuous mode [ 37.418238][ T6282] veth0_vlan: entered promiscuous mode [ 37.429448][ T6281] veth1_macvtap: entered promiscuous mode [ 37.439407][ T6282] veth1_vlan: entered promiscuous mode [ 37.468929][ T6276] veth0_macvtap: entered promiscuous mode [ 37.472839][ T6276] veth1_macvtap: entered promiscuous mode [ 37.475015][ T6281] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 37.478035][ T6281] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 37.493286][ T6281] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 37.499040][ T6282] veth0_macvtap: entered promiscuous mode [ 37.502430][ T6282] veth1_macvtap: entered promiscuous mode [ 37.515166][ T6281] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 37.518014][ T6281] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 37.522875][ T6281] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 37.535927][ T6282] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 37.538592][ T6282] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 37.543921][ T6282] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 37.546595][ T6282] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 37.550091][ T6282] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 37.560448][ T6281] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.566652][ T6281] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.568992][ T6281] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.572276][ T6281] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.579750][ T6276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 37.584441][ T6276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 37.586994][ T6276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 37.589845][ T6276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 37.592859][ T6276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 37.595665][ T6276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 37.599034][ T6276] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 37.604621][ T6276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 37.607488][ T6276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 37.610091][ T6276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 37.613518][ T6276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 37.617054][ T6276] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 37.619245][ T6282] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 37.622408][ T6282] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 37.625367][ T6282] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 37.628125][ T6282] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 37.630718][ T6282] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 37.634097][ T6282] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 37.638267][ T6282] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 37.645616][ T467] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 37.648524][ T467] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 37.667038][ T6276] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.669373][ T6276] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.673150][ T6276] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.675533][ T6276] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.679198][ T6282] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.682492][ T6282] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.684819][ T6282] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.687125][ T6282] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.711837][ T30] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 37.713992][ T30] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 37.746110][ T6275] veth0_vlan: entered promiscuous mode [ 37.752100][ T6275] veth1_vlan: entered promiscuous mode [ 37.770295][ T30] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 37.773032][ T30] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 37.825646][ T6359] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 37.828070][ T6275] veth0_macvtap: entered promiscuous mode [ 37.828259][ T6359] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 37.831551][ T6275] veth1_macvtap: entered promiscuous mode [ 37.854719][ T467] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 37.856839][ T467] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 37.867800][ T6275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 37.870613][ T6275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 37.874778][ T6275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 37.877499][ T6275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 37.880193][ T6275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 37.883157][ T6275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 37.885827][ T6275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 37.888652][ T6275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 37.892545][ T6275] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 37.909108][ T6275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 37.912842][ T6275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 37.915460][ T6275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 37.918416][ T6275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 37.922546][ T6275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 37.925287][ T6275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 37.927813][ T6275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 37.930567][ T6275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 37.934928][ T6275] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 37.938962][ T6275] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.941724][ T6275] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.944034][ T6275] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.946489][ T6275] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.956238][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 37.958309][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 37.964977][ T467] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 37.968185][ T467] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 38.007862][ T43] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 38.009963][ T43] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 38.014698][ T467] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 38.016803][ T467] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 38.080459][ T6361] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 38.085199][ T467] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 38.092579][ T467] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 38.095523][ T6361] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 38.133716][ T467] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 38.138073][ T467] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 38.197731][ T6366] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 38.200309][ T6366] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 38.993842][ T6289] Bluetooth: hci2: command tx timeout [ 38.995273][ T6289] Bluetooth: hci1: command tx timeout [ 38.996848][ T6286] Bluetooth: hci3: command tx timeout [ 38.998466][ T6277] Bluetooth: hci4: command tx timeout [ 39.001399][ T6277] Bluetooth: hci0: command tx timeout [ 39.007626][ T6377] loop4: detected capacity change from 0 to 2048 [ 39.170531][ T6378] loop0: detected capacity change from 0 to 32768 [ 39.173531][ T6380] loop3: detected capacity change from 0 to 32768 [ 39.197033][ T6378] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 39.198254][ T6377] loop4: p1 < > p4 [ 39.206240][ T6377] loop4: p4 size 8388608 extends beyond EOD, truncated [ 39.230129][ T5871] loop4: p1 < > p4 [ 39.239030][ T5871] loop4: p4 size 8388608 extends beyond EOD, truncated [ 39.243814][ T6380] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 39.300154][ T6378] XFS (loop0): Ending clean mount [ 39.318964][ T6378] XFS (loop0): Quotacheck needed: Please wait. [ 39.339798][ T6380] XFS (loop3): Ending clean mount [ 39.363846][ T6378] XFS (loop0): Quotacheck: Done. [ 39.407473][ T9] XFS (loop3): Metadata CRC error detected at xfs_rmapbt_read_verify+0x50/0xf0, xfs_rmapbt block 0x14 [ 39.410758][ T9] XFS (loop3): Unmount and run xfs_repair [ 39.421316][ T9] XFS (loop3): First 128 bytes of corrupted metadata buffer: [ 39.423229][ T9] 00000000: 52 4d 42 33 00 00 00 0c ff ff ff ff ff ff ff ff RMB3............ [ 39.429903][ T6404] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 39.440786][ T9] 00000010: 00 a7 50 00 00 00 00 14 00 00 00 01 00 00 00 80 ..P............. [ 39.444983][ T6275] __loop_clr_fd: partition scan of loop4 failed (rc=-16) [ 39.444986][ T6266] I/O error, dev loop4, sector 8 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 39.449115][ T9] 00000020: bf dc 47 fc 10 d8 4e ed a5 62 11 a8 31 b3 f7 91 ..G...N..b..1... [ 39.449807][ T6266] I/O error, dev loop4, sector 8 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 39.454035][ T9] 00000030: 00 00 00 00 5b af 3b 1d 00 00 00 00 00 00 00 01 ....[.;......... [ 39.462692][ T9] 00000040: ff ff ff ff ff ff ff fd 00 00 00 00 00 00 00 00 ................ [ 39.469277][ T9] 00000050: 00 00 00 01 00 00 00 02 ff ff ff ff ff ff ff fb ................ [ 39.474747][ T6368] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 39.477736][ T9] 00000060: 00 00 00 00 00 00 00 00 00 00 00 03 00 00 00 02 ................ [ 39.482076][ T9] 00000070: ff ff ff ff ff ff ff fa 00 00 00 00 00 00 00 00 ................ [ 39.486907][ T6368] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 39.489741][ T6380] XFS (loop3): metadata I/O error in "xfs_btree_read_buf_block+0x274/0x434" at daddr 0x14 len 4 error 74 [ 39.506806][ T6380] XFS (loop3): Metadata I/O Error (0x1) detected at xfs_trans_read_buf_map+0x590/0xafc (fs/xfs/xfs_trans_buf.c:296). Shutting down filesystem. [ 39.510712][ T6380] XFS (loop3): Please unmount the filesystem and rectify the problem(s) [ 39.517678][ T6368] Buffer I/O error on dev loop4p1, logical block 0, async page read [ 39.520079][ T6368] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 39.523214][ T6368] Buffer I/O error on dev loop4p1, logical block 0, async page read [ 39.525499][ T6368] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 39.528018][ T6368] Buffer I/O error on dev loop4p1, logical block 0, async page read [ 39.530050][ T6368] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 39.532804][ T6368] Buffer I/O error on dev loop4p1, logical block 0, async page read [ 39.551594][ T6368] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 39.554576][ T6368] Buffer I/O error on dev loop4p1, logical block 0, async page read [ 39.562775][ T6266] Buffer I/O error on dev loop4p4, logical block 1, async page read [ 39.570330][ T6287] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 39.581286][ T6276] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 39.790933][ T31] audit: type=1326 audit(39.740:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6424 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb645e068 code=0x7ffc0000 [ 39.796685][ T31] audit: type=1326 audit(39.740:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6424 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb645e068 code=0x7ffc0000 [ 39.820553][ T6423] loop2: detected capacity change from 0 to 32768 [ 39.829544][ T31] audit: type=1326 audit(39.770:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6424 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffffb645e068 code=0x7ffc0000 [ 39.835258][ T31] audit: type=1326 audit(39.790:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6424 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb645e068 code=0x7ffc0000 [ 39.841126][ T31] audit: type=1326 audit(39.790:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6424 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb645e068 code=0x7ffc0000 [ 39.846881][ T31] audit: type=1326 audit(39.790:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6424 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffffb645e068 code=0x7ffc0000 [ 39.853271][ T31] audit: type=1326 audit(39.790:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6424 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb645e068 code=0x7ffc0000 [ 39.858806][ T31] audit: type=1326 audit(39.790:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6424 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c00000b7 syscall=167 compat=0 ip=0xffffb645e068 code=0x7ffc0000 [ 39.865101][ T31] audit: type=1326 audit(39.790:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6424 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb645e068 code=0x7ffc0000 [ 39.878761][ T6436] loop3: detected capacity change from 0 to 512 [ 39.887921][ T31] audit: type=1326 audit(39.790:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6424 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb645e068 code=0x7ffc0000 [ 39.888268][ T6423] XFS (loop2): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 39.896913][ T6436] EXT4-fs (loop3): blocks per group (255) and clusters per group (8192) inconsistent [ 39.940060][ T6442] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.1'. [ 39.986762][ T6368] udevd[6368]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 40.007597][ T6423] XFS (loop2): Ending clean mount [ 40.008653][ T6400] udevd[6400]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 40.023383][ T6423] XFS (loop2): Quotacheck needed: Please wait. [ 40.042789][ T6423] XFS (loop2): Quotacheck: Done. [ 40.095716][ T6282] XFS (loop2): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 40.130447][ T6454] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 40.295322][ T6400] I/O error, dev loop2, sector 32640 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 41.071235][ T6277] Bluetooth: hci0: command tx timeout [ 41.071325][ T6289] Bluetooth: hci1: command tx timeout [ 41.072675][ T6277] Bluetooth: hci3: command tx timeout [ 41.074091][ T6289] Bluetooth: hci2: command tx timeout [ 41.076979][ T6291] Bluetooth: hci4: command tx timeout [ 41.111849][ T6477] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.3'. [ 41.179454][ T6474] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'. [ 41.190793][ T6480] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.2'. [ 41.296685][ T6485] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 41.454912][ T6490] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 41.513631][ T6486] loop2: detected capacity change from 0 to 32768 [ 41.522542][ T6486] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 (7:2) scanned by syz-executor.2 (6486) [ 41.565427][ T6486] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 41.569058][ T6486] BTRFS info (device loop2): using crc32c (crc32c-generic) checksum algorithm [ 41.574865][ T6492] 9pnet_fd: Insufficient options for proto=fd [ 41.576146][ T6486] BTRFS info (device loop2): using free-space-tree [ 42.484032][ T6523] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.3'. [ 42.498226][ T6521] loop0: detected capacity change from 0 to 512 [ 42.557804][ T6527] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.3'. [ 42.606576][ T6533] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 42.616372][ T6533] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 42.663001][ T6282] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 42.729233][ T6541] 9pnet_fd: Insufficient options for proto=fd [ 42.940667][ T6555] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.2'. [ 43.136289][ T6571] 9pnet_fd: Insufficient options for proto=fd [ 43.151785][ T6289] Bluetooth: hci2: command tx timeout [ 43.153337][ T6289] Bluetooth: hci4: command tx timeout [ 43.154741][ T6289] Bluetooth: hci3: command tx timeout [ 43.156219][ T6291] Bluetooth: hci1: command tx timeout [ 43.157697][ T6291] Bluetooth: hci0: command tx timeout [ 43.238645][ T6569] loop2: detected capacity change from 0 to 32768 [ 43.274654][ T6569] XFS (loop2): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 43.317386][ T6569] XFS (loop2): Ending clean mount [ 43.319789][ T6569] XFS (loop2): Quotacheck needed: Please wait. [ 43.336419][ T6569] XFS (loop2): Quotacheck: Done. [ 43.403463][ T6282] XFS (loop2): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 43.417149][ T6582] netlink: 'syz-executor.1': attribute type 12 has an invalid length. [ 43.872165][ T6601] gretap0: entered promiscuous mode [ 43.897215][ T6604] 9pnet_fd: Insufficient options for proto=fd [ 43.924498][ T6601] 0猉功D: renamed from gretap0 [ 43.935039][ T6601] 0猉功D: left promiscuous mode [ 43.941383][ T6601] 0猉功D: entered allmulticast mode [ 43.949163][ T6601] A link change request failed with some changes committed already. Interface 30猉功D may have been left with an inconsistent configuration, please check. [ 44.071254][ T6543] loop3: detected capacity change from 0 to 131072 [ 44.101822][ T6543] F2FS-fs (loop3): Found nat_bits in checkpoint [ 44.158195][ T6543] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 44.177711][ T6616] netlink: 'syz-executor.1': attribute type 12 has an invalid length. [ 44.570048][ C0] TCP: request_sock_TCP: Possible SYN flooding on port [::]:2. Sending cookies. [ 44.653263][ T6639] 9pnet_fd: Insufficient options for proto=fd [ 44.753936][ T6649] netlink: 'syz-executor.2': attribute type 12 has an invalid length. [ 45.249868][ T6670] __nla_validate_parse: 10 callbacks suppressed [ 45.249885][ T6670] netlink: 9 bytes leftover after parsing attributes in process `syz-executor.1'. [ 45.259744][ T6670] gretap0: entered promiscuous mode [ 45.287107][ T6670] netlink: 5 bytes leftover after parsing attributes in process `syz-executor.1'. [ 45.300797][ T6670] 0猉功D: renamed from gretap0 [ 45.310087][ T6670] 0猉功D: left promiscuous mode [ 45.320061][ T6670] 0猉功D: entered allmulticast mode [ 45.325135][ T6670] A link change request failed with some changes committed already. Interface 30猉功D may have been left with an inconsistent configuration, please check. [ 45.381752][ T31] kauditd_printk_skb: 1 callbacks suppressed [ 45.381769][ T31] audit: type=1326 audit(45.350:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6669 comm="syz-executor.1" exe="/root/syz-executor.1" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffb645e068 code=0x0 [ 46.263589][ T6685] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'. [ 46.685491][ T6697] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 46.697348][ T6697] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 46.874699][ T6701] netlink: 'syz-executor.1': attribute type 12 has an invalid length. [ 47.381512][ T6283] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 47.577170][ T6283] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 64, changing to 10 [ 47.580626][ T6283] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 47.586045][ T6283] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 47.593599][ T6283] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 47.608683][ T6706] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 48.148872][ C1] vxcan0: j1939_tp_txtimer: 0x000000003ecd9047: tx aborted with unknown reason: -2 [ 48.152397][ C1] vxcan0: j1939_xtp_rx_abort_one: 0x000000001fada4b8: 0x00000: (250) Any other reason (if a Connection Abort reason is identified that is not listed in the table use code 250) [ 48.157532][ C1] vxcan0: j1939_xtp_rx_abort_one: 0x000000003ecd9047: 0x00000: (250) Any other reason (if a Connection Abort reason is identified that is not listed in the table use code 250) [ 48.737411][ T6730] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.4'. [ 49.642180][ T6749] netlink: 'syz-executor.2': attribute type 12 has an invalid length. [ 50.057321][ T6755] loop1: detected capacity change from 0 to 32768 [ 50.090559][ T6755] XFS (loop1): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 50.135882][ T8] usb 1-1: USB disconnect, device number 2 [ 50.159588][ T6755] XFS (loop1): Ending clean mount [ 50.177902][ C1] TCP: request_sock_TCP: Possible SYN flooding on port [::]:2. Sending cookies. [ 50.191325][ T6755] XFS (loop1): Quotacheck needed: Please wait. [ 50.209373][ T6771] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.0'. [ 50.253235][ T6755] XFS (loop1): Quotacheck: Done. [ 50.312892][ T6777] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 50.317091][ T6777] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 50.348361][ T6281] XFS (loop1): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 50.367683][ T6779] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 50.376384][ T6779] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 50.650984][ T8] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 50.763669][ T6788] netlink: 'syz-executor.2': attribute type 12 has an invalid length. [ 50.832537][ T8] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 50.854222][ T8] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 50.856917][ T8] usb 1-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 50.859303][ T8] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 50.865213][ T8] usb 1-1: config 0 descriptor?? [ 52.453057][ T6805] loop4: detected capacity change from 0 to 16 [ 52.667939][ T6805] erofs: (device loop4): erofs_read_superblock: blkszbits 0 isn't supported [ 52.946258][ T8] cm6533_jd 0003:0D8C:0022.0001: unknown main item tag 0x0 [ 52.951515][ T8] cm6533_jd 0003:0D8C:0022.0001: unknown main item tag 0x0 [ 52.961032][ T8] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0D8C:0022.0001/input/input2 [ 52.986537][ T8] cm6533_jd 0003:0D8C:0022.0001: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.0-1/input0 [ 53.011811][ T6808] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.3'. [ 53.086696][ T6814] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 53.089263][ T6814] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 53.465041][ T6834] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.3'. [ 53.465568][ T6813] loop2: detected capacity change from 0 to 32768 [ 53.487822][ T6813] XFS (loop2): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 53.515278][ T6846] loop3: detected capacity change from 0 to 2048 [ 54.056906][ T6846] NILFS (loop3): invalid segment: Sequence number mismatch [ 54.059234][ T6846] NILFS (loop3): trying rollback from an earlier position [ 54.126606][ T6846] NILFS (loop3): recovery complete [ 54.131474][ T6848] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 54.162374][ T6813] XFS (loop2): Ending clean mount [ 54.215224][ T6813] XFS (loop2): Quotacheck needed: Please wait. [ 54.268510][ T6813] XFS (loop2): Quotacheck: Done. [ 54.270842][ T6850] veth1_macvtap: left promiscuous mode [ 54.276588][ T6850] macsec0: entered promiscuous mode [ 54.278237][ T6850] macsec0: entered allmulticast mode [ 54.290411][ T6282] XFS (loop2): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 54.948813][ T8] usb 1-1: USB disconnect, device number 3 [ 55.060126][ T6864] loop4: detected capacity change from 0 to 512 [ 55.202024][ T6880] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 55.212880][ T6880] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 55.317167][ T6888] loop2: detected capacity change from 0 to 2048 [ 55.321587][ T6888] NILFS (loop2): invalid segment: Sequence number mismatch [ 55.323547][ T6888] NILFS (loop2): trying rollback from an earlier position [ 55.330118][ T6888] NILFS (loop2): recovery complete [ 55.358457][ T6889] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 56.155767][ T6878] loop3: detected capacity change from 0 to 32768 [ 56.192033][ T6283] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 56.200184][ T6878] XFS (loop3): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 56.296713][ T6878] XFS (loop3): Ending clean mount [ 56.327059][ T6878] XFS (loop3): Quotacheck needed: Please wait. [ 56.345181][ T6918] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 56.347757][ T6918] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 56.360316][ T6878] XFS (loop3): Quotacheck: Done. [ 56.394860][ T6283] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 56.397939][ T6283] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 56.398341][ T6287] XFS (loop3): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 56.400610][ T6283] usb 1-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 56.428852][ T6283] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 56.447398][ T6283] usb 1-1: config 0 descriptor?? [ 56.607555][ T6927] loop4: detected capacity change from 0 to 512 [ 56.863461][ T6283] cm6533_jd 0003:0D8C:0022.0002: unknown main item tag 0x0 [ 56.865590][ T6283] cm6533_jd 0003:0D8C:0022.0002: unknown main item tag 0x0 [ 56.879246][ T6283] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0D8C:0022.0002/input/input3 [ 56.889202][ T6283] cm6533_jd 0003:0D8C:0022.0002: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.0-1/input0 [ 57.316093][ T6945] loop1: detected capacity change from 0 to 32768 [ 57.339828][ T6945] XFS (loop1): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 57.364807][ T6945] XFS (loop1): Ending clean mount [ 57.372595][ T6945] XFS (loop1): Quotacheck needed: Please wait. [ 57.396716][ T6945] XFS (loop1): Quotacheck: Done. [ 57.436060][ T6281] XFS (loop1): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 57.742492][ T6960] loop4: detected capacity change from 0 to 16 [ 57.765901][ T6960] erofs: (device loop4): erofs_read_superblock: blkszbits 0 isn't supported [ 59.263313][ T6283] usb 1-1: USB disconnect, device number 4 [ 59.524907][ T31] audit: type=1326 audit(59.490:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6975 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff7f25e068 code=0x0 [ 60.981598][ T6988] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.1'. [ 64.513680][ T2293] ieee802154 phy0 wpan0: encryption failed: -22 [ 64.515891][ T2293] ieee802154 phy1 wpan1: encryption failed: -22 [ 68.595603][ T6969] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 68.598532][ T6977] netlink: 9 bytes leftover after parsing attributes in process `syz-executor.0'. [ 68.614353][ T6977] gretap0: entered promiscuous mode [ 68.641857][ T6978] netlink: 5 bytes leftover after parsing attributes in process `syz-executor.0'. [ 68.644503][ T6978] 0猉功D: renamed from gretap0 [ 68.655913][ T6978] 0猉功D: left promiscuous mode [ 68.657258][ T6978] 0猉功D: entered allmulticast mode [ 68.672589][ T6978] A link change request failed with some changes committed already. Interface 30猉功D may have been left with an inconsistent configuration, please check. [ 68.869523][ T7019] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 68.950813][ T7027] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.1'. [ 69.531628][ T7061] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.1'. [ 69.667570][ T2201] cfg80211: failed to load regulatory.db [ 69.960380][ T7086] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 69.988775][ T7086] bond1: entered promiscuous mode [ 70.008337][ T7086] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 70.036437][ T7086] bond1: left promiscuous mode [ 70.040604][ T7086] 8021q: adding VLAN 0 to HW filter on device bond1 [ 70.375781][ T7102] loop2: detected capacity change from 0 to 512 [ 70.576119][ T7102] EXT4-fs (loop2): VFS: Found ext4 filesystem with unknown checksum algorithm. [ 71.035841][ T6991] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 72.464737][ T7149] loop0: detected capacity change from 0 to 512 [ 72.698009][ T7149] EXT4-fs (loop0): VFS: Found ext4 filesystem with unknown checksum algorithm. [ 73.099098][ T6991] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 73.485588][ T7182] loop4: detected capacity change from 0 to 4096 [ 73.526269][ T7182] ntfs3: loop4: failed to convert "0080" to macgaelic [ 73.531025][ T7182] ntfs3: loop4: failed to convert name for inode 1e. [ 73.535468][ T7182] ntfs3: loop4: failed to convert "8f66" to macgaelic [ 75.015237][ T7234] input: syz0 as /devices/virtual/input/input4 [ 75.468159][ T7255] x_tables: duplicate underflow at hook 3 [ 76.169112][ T7263] loop1: detected capacity change from 0 to 4096 [ 76.184757][ T7269] loop2: detected capacity change from 0 to 16 [ 76.210669][ T7269] erofs: (device loop2): mounted with root inode @ nid 36. [ 76.232116][ T7263] ntfs3: loop1: Failed to load $MFT (-22). [ 76.283520][ T7033] I/O error, dev loop1, sector 3968 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 77.223600][ T7285] input: syz0 as /devices/virtual/input/input5 [ 77.292626][ T7265] loop0: detected capacity change from 0 to 40427 [ 77.306448][ T7265] F2FS-fs (loop0): invalid crc value [ 77.324081][ T7265] F2FS-fs (loop0): Found nat_bits in checkpoint [ 77.369459][ T7265] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4 [ 78.792533][ T7354] x_tables: duplicate underflow at hook 3 [ 79.961757][ T6267] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 80.125149][ T7391] x_tables: duplicate underflow at hook 3 [ 80.679020][ T7375] loop4: detected capacity change from 0 to 32768 [ 80.687387][ T7375] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 (7:4) scanned by syz-executor.4 (7375) [ 80.697430][ T7375] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 80.700159][ T7375] BTRFS info (device loop4): using crc32c (crc32c-generic) checksum algorithm [ 80.702665][ T6267] usb 1-1: Using ep0 maxpacket: 32 [ 80.704239][ T7375] BTRFS info (device loop4): using free-space-tree [ 80.712788][ T6267] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 36 [ 80.718436][ T6267] usb 1-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 80.721275][ T6267] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 80.725308][ T6267] usb 1-1: Product: syz [ 80.727737][ T6267] usb 1-1: Manufacturer: syz [ 80.728943][ T6267] usb 1-1: SerialNumber: syz [ 80.731557][ T6267] usb 1-1: config 0 descriptor?? [ 80.734513][ T7360] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 80.741061][ T6267] hub 1-1:0.0: bad descriptor, ignoring hub [ 80.742914][ T6267] hub 1-1:0.0: probe with driver hub failed with error -5 [ 80.746937][ T6267] input: syz syz as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input6 [ 80.981318][ T6283] usb 1-1: USB disconnect, device number 5 [ 80.981404][ C0] usbtouchscreen 1-1:0.0: usbtouch_irq - usb_submit_urb failed with result: -19 [ 80.986632][ T6275] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 81.268590][ T7438] x_tables: duplicate underflow at hook 3 [ 82.096991][ T7460] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.4'. [ 82.107075][ T7460] Zero length message leads to an empty skb [ 82.160121][ T7468] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 82.177579][ T7468] bond2: entered promiscuous mode [ 82.195579][ T7468] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 82.208606][ T7468] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 82.230504][ T7468] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 82.245369][ T7468] bond2: left promiscuous mode [ 82.251765][ T7468] 8021q: adding VLAN 0 to HW filter on device bond2 [ 82.416919][ T7483] x_tables: duplicate underflow at hook 3 [ 83.113991][ T7495] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 83.119869][ T7495] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 83.253434][ T7504] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 83.261901][ T7504] bond1: entered promiscuous mode [ 83.264862][ T7504] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 83.267225][ T7504] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 83.270170][ T7504] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 83.273755][ T7504] bond1: left promiscuous mode [ 83.275195][ T7504] 8021q: adding VLAN 0 to HW filter on device bond1 [ 83.297319][ T7507] loop3: detected capacity change from 0 to 164 [ 83.336683][ T7507] Unable to read rock-ridge attributes [ 83.352061][ T7507] Unable to read rock-ridge attributes [ 83.360628][ T7507] fuse: Bad value for 'fd' [ 83.367429][ T7507] 9pnet_fd: Insufficient options for proto=fd [ 84.389067][ T7544] loop0: detected capacity change from 0 to 164 [ 84.406047][ T7544] Unable to read rock-ridge attributes [ 84.413680][ T7544] Unable to read rock-ridge attributes [ 84.417882][ T7544] fuse: Bad value for 'fd' [ 84.423265][ T7544] 9pnet_fd: Insufficient options for proto=fd [ 84.458327][ T7552] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.4'. [ 84.614235][ T7567] wg2: entered promiscuous mode [ 84.615621][ T7567] wg2: entered allmulticast mode [ 84.677239][ C1] TCP: request_sock_TCP: Possible SYN flooding on port [::]:2. Sending cookies. [ 84.825827][ T7583] loop4: detected capacity change from 0 to 164 [ 84.836644][ T7583] Unable to read rock-ridge attributes [ 84.847297][ T7583] Unable to read rock-ridge attributes [ 84.869629][ T7583] 9pnet_fd: Insufficient options for proto=fd [ 85.555618][ T7611] loop4: detected capacity change from 0 to 32768 [ 85.577421][ T7611] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 85.596813][ T7613] bond1: entered promiscuous mode [ 85.641503][ T7611] XFS (loop4): Ending clean mount [ 85.649354][ T7613] bond1: left promiscuous mode [ 85.651512][ T7613] 8021q: adding VLAN 0 to HW filter on device bond1 [ 85.716195][ T2201] XFS (loop4): Metadata CRC error detected at xfs_rmapbt_read_verify+0x50/0xf0, xfs_rmapbt block 0x14 [ 85.728718][ T2201] XFS (loop4): Unmount and run xfs_repair [ 85.732201][ T2201] XFS (loop4): First 128 bytes of corrupted metadata buffer: [ 85.734463][ T2201] 00000000: 52 4d 42 33 00 00 00 0c ff ff ff ff ff ff ff ff RMB3............ [ 85.736857][ T2201] 00000010: 00 a7 50 00 00 00 00 14 00 00 00 01 00 00 00 80 ..P............. [ 85.739627][ T2201] 00000020: bf dc 47 fc 10 d8 4e ed a5 62 11 a8 31 b3 f7 91 ..G...N..b..1... [ 85.744620][ T2201] 00000030: 00 00 00 00 5b af 3b 1d 00 00 00 00 00 00 00 01 ....[.;......... [ 85.747065][ T2201] 00000040: ff ff ff ff ff ff ff fd 00 00 00 00 00 00 00 00 ................ [ 85.749504][ T2201] 00000050: 00 00 00 01 00 00 00 02 ff ff ff ff ff ff ff fb ................ [ 85.751991][ T2201] 00000060: 00 00 00 00 00 00 00 00 00 00 00 03 00 00 00 02 ................ [ 85.754382][ T2201] 00000070: ff ff ff ff ff ff ff fa 00 00 00 00 00 00 00 00 ................ [ 85.757046][ T7611] XFS (loop4): metadata I/O error in "xfs_btree_read_buf_block+0x274/0x434" at daddr 0x14 len 4 error 74 [ 85.781758][ T7611] XFS (loop4): Metadata I/O Error (0x1) detected at xfs_trans_read_buf_map+0x590/0xafc (fs/xfs/xfs_trans_buf.c:296). Shutting down filesystem. [ 85.785608][ T7611] XFS (loop4): Please unmount the filesystem and rectify the problem(s) [ 85.801307][ T6275] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 86.695436][ T7652] netlink: 'syz-executor.2': attribute type 12 has an invalid length. [ 87.004531][ T7662] loop1: detected capacity change from 0 to 512 [ 87.180956][ T7662] EXT4-fs (loop1): VFS: Found ext4 filesystem with unknown checksum algorithm. [ 87.314478][ T7656] wg2: left promiscuous mode [ 87.318154][ T7656] wg2: left allmulticast mode [ 87.637267][ T6991] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 87.694101][ T7656] wg2: entered promiscuous mode [ 87.695641][ T7656] wg2: entered allmulticast mode [ 87.714636][ T7666] wg2: entered promiscuous mode [ 87.716000][ T7666] wg2: entered allmulticast mode [ 87.823979][ T7677] netlink: 'syz-executor.3': attribute type 12 has an invalid length. [ 87.865117][ C1] TCP: request_sock_TCP: Possible SYN flooding on port [::ffff:127.0.0.1]:2. Sending cookies. [ 88.258692][ T7678] loop2: detected capacity change from 0 to 40427 [ 88.290590][ T7678] F2FS-fs (loop2): Found nat_bits in checkpoint [ 88.322584][ T7678] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 89.303507][ T7701] EXT4-fs warning (device nvme0n1p2): verify_group_input:137: Cannot add at group 1025 (only 8 groups) [ 89.402538][ T7711] __nla_validate_parse: 4 callbacks suppressed [ 89.402555][ T7711] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.0'. [ 89.588615][ T7721] netlink: 'syz-executor.4': attribute type 12 has an invalid length. [ 89.714976][ T7727] loop1: detected capacity change from 0 to 512 [ 89.966804][ T7727] EXT4-fs (loop1): VFS: Found ext4 filesystem with unknown checksum algorithm. [ 90.329291][ T6282] syz-executor.2: attempt to access beyond end of device [ 90.329291][ T6282] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 90.342252][ T6282] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 90.350114][ T7717] wg2: entered promiscuous mode [ 90.357045][ T6991] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 90.368376][ T7717] wg2: entered allmulticast mode [ 90.458720][ T7737] loop4: detected capacity change from 0 to 256 [ 90.462540][ T7737] exfat: Unknown parameter '01777777777777777777777gj>/m颾濋'Uw]N/﹫>踞%冢' [ 90.583068][ T7741] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.1'. [ 90.720330][ T7750] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 90.726612][ T7750] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 91.681251][ T7769] wg2: entered promiscuous mode [ 91.888857][ T7777] loop0: detected capacity change from 0 to 512 [ 92.822149][ T7779] loop3: detected capacity change from 0 to 1024 [ 92.849436][ T7769] wg2: entered allmulticast mode [ 92.870362][ T7777] EXT4-fs (loop0): VFS: Found ext4 filesystem with unknown checksum algorithm. [ 92.918005][ T7779] hfsplus: invalid extent btree flag [ 92.920026][ T7779] hfsplus: failed to load extents file [ 93.362751][ T7778] warning: `syz-executor.3' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 93.366188][ T7778] ================================================================== [ 93.368282][ T7778] BUG: KASAN: slab-out-of-bounds in cfg80211_wext_freq+0x170/0x1ac [ 93.370389][ T7778] Read of size 2 at addr ffff0000cd5cc540 by task syz-executor.3/7778 [ 93.372567][ T7778] [ 93.373174][ T7778] CPU: 1 PID: 7778 Comm: syz-executor.3 Tainted: G W 6.10.0-rc3-syzkaller-gac2193b4b460 #0 [ 93.376204][ T7778] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024 [ 93.378758][ T7778] Call trace: [ 93.379613][ T7778] dump_backtrace+0x1b8/0x1e4 [ 93.380813][ T7778] show_stack+0x2c/0x3c [ 93.382005][ T7778] dump_stack_lvl+0xe4/0x150 [ 93.383200][ T7778] print_report+0x198/0x538 [ 93.384356][ T7778] kasan_report+0xd8/0x138 [ 93.385534][ T7778] __asan_report_load2_noabort+0x20/0x2c [ 93.387106][ T7778] cfg80211_wext_freq+0x170/0x1ac [ 93.388475][ T7778] cfg80211_wext_siwscan+0x438/0xef0 [ 93.389880][ T7778] ioctl_standard_iw_point+0x7f0/0xdc4 [ 93.391375][ T7778] ioctl_standard_call+0xcc/0x264 [ 93.392683][ T7778] wext_ioctl_dispatch+0x1b4/0x534 [ 93.394081][ T7778] wext_handle_ioctl+0x1f8/0x3f4 [ 93.395401][ T7778] sock_ioctl+0x15c/0x838 [ 93.396567][ T7778] __arm64_sys_ioctl+0x14c/0x1c8 [ 93.397866][ T7778] invoke_syscall+0x98/0x2b8 [ 93.399079][ T7778] el0_svc_common+0x130/0x23c [ 93.400390][ T7778] do_el0_svc+0x48/0x58 [ 93.401519][ T7778] el0_svc+0x54/0x168 [ 93.402569][ T7778] el0t_64_sync_handler+0x84/0xfc [ 93.403907][ T7778] el0t_64_sync+0x190/0x194 [ 93.405142][ T7778] [ 93.405741][ T7778] Allocated by task 7778: [ 93.406817][ T7778] kasan_save_track+0x40/0x78 [ 93.408090][ T7778] kasan_save_alloc_info+0x40/0x50 [ 93.409462][ T7778] __kasan_kmalloc+0xac/0xc4 [ 93.410669][ T7778] __kmalloc_noprof+0x2a0/0x494 [ 93.411932][ T7778] ioctl_standard_iw_point+0x3b8/0xdc4 [ 93.413390][ T7778] ioctl_standard_call+0xcc/0x264 [ 93.414661][ T7778] wext_ioctl_dispatch+0x1b4/0x534 [ 93.416013][ T7778] wext_handle_ioctl+0x1f8/0x3f4 [ 93.417309][ T7778] sock_ioctl+0x15c/0x838 [ 93.418533][ T7778] __arm64_sys_ioctl+0x14c/0x1c8 [ 93.419822][ T7778] invoke_syscall+0x98/0x2b8 [ 93.420994][ T7778] el0_svc_common+0x130/0x23c [ 93.422298][ T7778] do_el0_svc+0x48/0x58 [ 93.423405][ T7778] el0_svc+0x54/0x168 [ 93.424429][ T7778] el0t_64_sync_handler+0x84/0xfc [ 93.425696][ T7778] el0t_64_sync+0x190/0x194 [ 93.426920][ T7778] [ 93.427534][ T7778] The buggy address belongs to the object at ffff0000cd5cc400 [ 93.427534][ T7778] which belongs to the cache kmalloc-512 of size 512 [ 93.431244][ T7778] The buggy address is located 4 bytes to the right of [ 93.431244][ T7778] allocated 316-byte region [ffff0000cd5cc400, ffff0000cd5cc53c) [ 93.434902][ T7778] [ 93.435511][ T7778] The buggy address belongs to the physical page: [ 93.437197][ T7778] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x10d5cc [ 93.439409][ T7778] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 1970/01/01 00:01:33 SYZFATAL: failed to recv *flatrpc.HostMessageRaw: EOF [ 93.441680][ T7778] ksm flags: 0x5ffc00000000040(head|node=0|zone=2|lastcpupid=0x7ff) [ 93.443802][ T7778] page_type: 0xffffefff(slab) [ 93.445063][ T7778] raw: 05ffc00000000040 ffff0000c0001c80 fffffdffc31f9400 dead000000000003 [ 93.447392][ T7778] raw: 0000000000000000 0000000080100010 00000001ffffefff 0000000000000000 [ 93.449722][ T7778] head: 05ffc00000000040 ffff0000c0001c80 fffffdffc31f9400 dead000000000003 [ 93.452039][ T7778] head: 0000000000000000 0000000080100010 00000001ffffefff 0000000000000000 [ 93.454390][ T7778] head: 05ffc00000000002 fffffdffc3357301 ffffffffffffffff 0000000000000000 [ 93.456698][ T7778] head: 0000000000000004 0000000000000000 00000000ffffffff 0000000000000000 [ 93.458930][ T7778] page dumped because: kasan: bad access detected [ 93.460650][ T7778] [ 93.461259][ T7778] Memory state around the buggy address: [ 93.462739][ T7778] ffff0000cd5cc400: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 93.464846][ T7778] ffff0000cd5cc480: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 93.467020][ T7778] >ffff0000cd5cc500: 00 00 00 00 00 00 00 04 fc fc fc fc fc fc fc fc [ 93.469107][ T7778] ^ [ 93.470762][ T7778] ffff0000cd5cc580: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 93.472843][ T7778] ffff0000cd5cc600: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 93.474905][ T7778] ================================================================== [ 93.477461][ T7778] Disabling lock debugging due to kernel taint [ 93.479071][ T7778] ------------[ cut here ]------------ [ 93.480459][ T7778] UBSAN: array-index-out-of-bounds in net/wireless/scan.c:3461:8 [ 93.482659][ T7778] index 33 is out of range for type 'struct iw_freq[32]' [ 93.484449][ T7778] CPU: 1 PID: 7778 Comm: syz-executor.3 Tainted: G B W 6.10.0-rc3-syzkaller-gac2193b4b460 #0 [ 93.487386][ T7778] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024 [ 93.490019][ T7778] Call trace: [ 93.490812][ T7778] dump_backtrace+0x1b8/0x1e4 [ 93.491994][ T7778] show_stack+0x2c/0x3c [ 93.493090][ T7778] dump_stack_lvl+0xe4/0x150 [ 93.494286][ T7778] dump_stack+0x1c/0x28 [ 93.495326][ T7778] __ubsan_handle_out_of_bounds+0xf8/0x148 [ 93.496898][ T7778] cfg80211_wext_siwscan+0x4a8/0xef0 [ 93.498288][ T7778] ioctl_standard_iw_point+0x7f0/0xdc4 [ 93.499713][ T7778] ioctl_standard_call+0xcc/0x264 [ 93.501088][ T7778] wext_ioctl_dispatch+0x1b4/0x534 [ 93.502412][ T7778] wext_handle_ioctl+0x1f8/0x3f4 [ 93.503727][ T7778] sock_ioctl+0x15c/0x838 [ 93.504903][ T7778] __arm64_sys_ioctl+0x14c/0x1c8 [ 93.506230][ T7778] invoke_syscall+0x98/0x2b8 [ 93.507464][ T7778] el0_svc_common+0x130/0x23c [ 93.508715][ T7778] do_el0_svc+0x48/0x58 [ 93.509778][ T7778] el0_svc+0x54/0x168 [ 93.510848][ T7778] el0t_64_sync_handler+0x84/0xfc [ 93.512105][ T7778] el0t_64_sync+0x190/0x194 [ 93.513412][ T7778] ---[ end trace ]---