Warning: Permanently added '10.128.1.14' (ED25519) to the list of known hosts. 2024/04/13 19:05:40 fuzzer started 2024/04/13 19:05:41 dialing manager at 10.128.0.169:30012 [ 196.659340][ T5009] cgroup: Unknown subsys name 'net' [ 196.899085][ T5009] cgroup: Unknown subsys name 'rlimit' [ 229.715946][ T1221] ieee802154 phy0 wpan0: encryption failed: -22 [ 229.723015][ T1221] ieee802154 phy1 wpan1: encryption failed: -22 2024/04/13 19:06:38 code coverage: enabled 2024/04/13 19:06:38 comparison tracing: enabled 2024/04/13 19:06:38 extra coverage: enabled 2024/04/13 19:06:38 delay kcov mmap: enabled 2024/04/13 19:06:38 setuid sandbox: enabled 2024/04/13 19:06:38 namespace sandbox: enabled 2024/04/13 19:06:38 Android sandbox: /sys/fs/selinux/policy does not exist 2024/04/13 19:06:38 fault injection: enabled 2024/04/13 19:06:38 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2024/04/13 19:06:38 net packet injection: enabled 2024/04/13 19:06:38 net device setup: enabled 2024/04/13 19:06:38 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2024/04/13 19:06:38 devlink PCI setup: PCI device 0000:00:10.0 is not available 2024/04/13 19:06:38 NIC VF setup: PCI device 0000:00:11.0 is not available 2024/04/13 19:06:38 USB emulation: enabled 2024/04/13 19:06:38 hci packet injection: enabled 2024/04/13 19:06:38 wifi device emulation: enabled 2024/04/13 19:06:38 802.15.4 emulation: enabled 2024/04/13 19:06:38 swap file: enabled [ 252.974702][ T5009] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k 2024/04/13 19:06:39 starting 5 executor processes [ 255.398138][ T5028] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 255.408328][ T5028] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 255.431127][ T5028] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 255.445285][ T5028] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 255.459667][ T5028] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 255.478971][ T5031] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 255.527112][ T5031] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 255.559368][ T5031] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 255.570844][ T5031] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 255.597100][ T5031] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 255.613511][ T5031] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 255.637379][ T5031] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 255.656939][ T5031] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 255.688098][ T5036] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 255.718540][ T5036] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 255.747712][ T5036] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 255.760644][ T5036] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 255.783633][ T5036] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 256.047433][ T5031] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 256.056908][ T5031] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 256.090909][ T5028] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 256.100918][ T5028] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 256.128517][ T5028] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 256.153454][ T5028] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 256.163422][ T5028] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 256.174497][ T5028] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 256.210692][ T5028] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 256.259285][ T5028] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 256.295850][ T5028] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 256.315027][ T5028] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 256.960289][ T5027] chnl_net:caif_netlink_parms(): no params data found [ 257.542393][ T5028] Bluetooth: hci0: command tx timeout [ 257.696980][ T5028] Bluetooth: hci1: command tx timeout [ 257.754124][ T5035] chnl_net:caif_netlink_parms(): no params data found [ 258.032235][ T5028] Bluetooth: hci2: command tx timeout [ 258.077599][ T5041] chnl_net:caif_netlink_parms(): no params data found [ 258.168858][ T5030] chnl_net:caif_netlink_parms(): no params data found [ 258.257154][ T5028] Bluetooth: hci3: command tx timeout [ 258.439494][ T5028] Bluetooth: hci4: command tx timeout [ 258.460620][ T5027] bridge0: port 1(bridge_slave_0) entered blocking state [ 258.468709][ T5027] bridge0: port 1(bridge_slave_0) entered disabled state [ 258.476865][ T5027] bridge_slave_0: entered allmulticast mode [ 258.487166][ T5027] bridge_slave_0: entered promiscuous mode [ 258.511476][ T5027] bridge0: port 2(bridge_slave_1) entered blocking state [ 258.519692][ T5027] bridge0: port 2(bridge_slave_1) entered disabled state [ 258.527869][ T5027] bridge_slave_1: entered allmulticast mode [ 258.537776][ T5027] bridge_slave_1: entered promiscuous mode [ 258.700882][ T5027] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 258.776289][ T5027] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 258.976111][ T5040] chnl_net:caif_netlink_parms(): no params data found [ 259.006386][ T5027] team0: Port device team_slave_0 added [ 259.105958][ T5027] team0: Port device team_slave_1 added [ 259.114559][ T5035] bridge0: port 1(bridge_slave_0) entered blocking state [ 259.127017][ T5035] bridge0: port 1(bridge_slave_0) entered disabled state [ 259.136149][ T5035] bridge_slave_0: entered allmulticast mode [ 259.146007][ T5035] bridge_slave_0: entered promiscuous mode [ 259.302223][ T5035] bridge0: port 2(bridge_slave_1) entered blocking state [ 259.310332][ T5035] bridge0: port 2(bridge_slave_1) entered disabled state [ 259.319244][ T5035] bridge_slave_1: entered allmulticast mode [ 259.329200][ T5035] bridge_slave_1: entered promiscuous mode [ 259.418910][ T5027] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 259.426202][ T5027] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 259.454376][ T5027] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 259.617208][ T5028] Bluetooth: hci0: command tx timeout [ 259.761328][ T5027] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 259.769002][ T5027] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 259.796937][ T5027] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 259.811443][ T5028] Bluetooth: hci1: command tx timeout [ 259.856226][ T5035] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 259.961570][ T5035] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 260.016581][ T5041] bridge0: port 1(bridge_slave_0) entered blocking state [ 260.025387][ T5041] bridge0: port 1(bridge_slave_0) entered disabled state [ 260.033808][ T5041] bridge_slave_0: entered allmulticast mode [ 260.043640][ T5041] bridge_slave_0: entered promiscuous mode [ 260.058363][ T5030] bridge0: port 1(bridge_slave_0) entered blocking state [ 260.066244][ T5030] bridge0: port 1(bridge_slave_0) entered disabled state [ 260.074318][ T5030] bridge_slave_0: entered allmulticast mode [ 260.087583][ T5030] bridge_slave_0: entered promiscuous mode [ 260.103769][ T5028] Bluetooth: hci2: command tx timeout [ 260.145910][ T5041] bridge0: port 2(bridge_slave_1) entered blocking state [ 260.154774][ T5041] bridge0: port 2(bridge_slave_1) entered disabled state [ 260.163155][ T5041] bridge_slave_1: entered allmulticast mode [ 260.173432][ T5041] bridge_slave_1: entered promiscuous mode [ 260.229266][ T5030] bridge0: port 2(bridge_slave_1) entered blocking state [ 260.237550][ T5030] bridge0: port 2(bridge_slave_1) entered disabled state [ 260.245421][ T5030] bridge_slave_1: entered allmulticast mode [ 260.256228][ T5030] bridge_slave_1: entered promiscuous mode [ 260.337928][ T5028] Bluetooth: hci3: command tx timeout [ 260.347533][ T5035] team0: Port device team_slave_0 added [ 260.499746][ T5035] team0: Port device team_slave_1 added [ 260.499933][ T5028] Bluetooth: hci4: command tx timeout [ 260.532444][ T5027] hsr_slave_0: entered promiscuous mode [ 260.545463][ T5027] hsr_slave_1: entered promiscuous mode [ 260.566886][ T5041] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 260.631959][ T5030] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 260.670499][ T5030] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 260.760671][ T5041] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 260.874281][ T5035] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 260.881839][ T5035] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 260.908812][ T5035] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 261.077837][ T5035] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 261.085306][ T5035] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 261.113373][ T5035] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 261.191623][ T5030] team0: Port device team_slave_0 added [ 261.200895][ T5040] bridge0: port 1(bridge_slave_0) entered blocking state [ 261.209150][ T5040] bridge0: port 1(bridge_slave_0) entered disabled state [ 261.217275][ T5040] bridge_slave_0: entered allmulticast mode [ 261.227041][ T5040] bridge_slave_0: entered promiscuous mode [ 261.267584][ T5041] team0: Port device team_slave_0 added [ 261.354361][ T5030] team0: Port device team_slave_1 added [ 261.401771][ T5040] bridge0: port 2(bridge_slave_1) entered blocking state [ 261.410054][ T5040] bridge0: port 2(bridge_slave_1) entered disabled state [ 261.418423][ T5040] bridge_slave_1: entered allmulticast mode [ 261.428238][ T5040] bridge_slave_1: entered promiscuous mode [ 261.445689][ T5041] team0: Port device team_slave_1 added [ 261.555394][ T5035] hsr_slave_0: entered promiscuous mode [ 261.565957][ T5035] hsr_slave_1: entered promiscuous mode [ 261.575822][ T5035] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 261.583984][ T5035] Cannot create hsr debugfs directory [ 261.701212][ T5028] Bluetooth: hci0: command tx timeout [ 261.772203][ T5040] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 261.784256][ T5041] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 261.791947][ T5041] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 261.818885][ T5041] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 261.864720][ T5028] Bluetooth: hci1: command tx timeout [ 261.900299][ T5030] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 261.907680][ T5030] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 261.935381][ T5030] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 261.960558][ T5040] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 261.973421][ T5041] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 261.980879][ T5041] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 262.007292][ T5041] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 262.138777][ T5030] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 262.146040][ T5030] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 262.173447][ T5030] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 262.177100][ T5028] Bluetooth: hci2: command tx timeout [ 262.424193][ T5028] Bluetooth: hci3: command tx timeout [ 262.455768][ T5041] hsr_slave_0: entered promiscuous mode [ 262.471015][ T5041] hsr_slave_1: entered promiscuous mode [ 262.480800][ T5041] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 262.488898][ T5041] Cannot create hsr debugfs directory [ 262.506041][ T5040] team0: Port device team_slave_0 added [ 262.587261][ T5028] Bluetooth: hci4: command tx timeout [ 262.606151][ T5040] team0: Port device team_slave_1 added [ 262.781127][ T5030] hsr_slave_0: entered promiscuous mode [ 262.790864][ T5030] hsr_slave_1: entered promiscuous mode [ 262.802926][ T5030] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 262.812939][ T5030] Cannot create hsr debugfs directory [ 263.024310][ T5040] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 263.031739][ T5040] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 263.058339][ T5040] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 263.192658][ T5040] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 263.200141][ T5040] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 263.226904][ T5040] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 263.239940][ T5027] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 263.363497][ T5027] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 263.490148][ T5027] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 263.525350][ T5027] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 263.777140][ T5028] Bluetooth: hci0: command tx timeout [ 263.802829][ T5040] hsr_slave_0: entered promiscuous mode [ 263.813514][ T5040] hsr_slave_1: entered promiscuous mode [ 263.827460][ T5040] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 263.835474][ T5040] Cannot create hsr debugfs directory [ 263.942030][ T5028] Bluetooth: hci1: command tx timeout [ 264.153409][ T5035] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 264.193988][ T5035] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 264.238963][ T5035] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 264.261108][ T5028] Bluetooth: hci2: command tx timeout [ 264.391206][ T5035] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 264.498305][ T5028] Bluetooth: hci3: command tx timeout [ 264.612948][ T5041] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 264.657324][ T5028] Bluetooth: hci4: command tx timeout [ 264.681238][ T5041] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 264.709911][ T5041] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 264.820516][ T5041] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 265.119844][ T5030] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 265.236318][ T5030] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 265.269903][ T5030] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 265.301699][ T5030] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 265.495352][ T5040] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 265.589268][ T5040] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 265.671162][ T5040] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 265.705200][ T5040] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 266.124600][ T5027] 8021q: adding VLAN 0 to HW filter on device bond0 [ 266.362349][ T5027] 8021q: adding VLAN 0 to HW filter on device team0 [ 266.540733][ T5076] bridge0: port 1(bridge_slave_0) entered blocking state [ 266.548793][ T5076] bridge0: port 1(bridge_slave_0) entered forwarding state [ 266.704598][ T5035] 8021q: adding VLAN 0 to HW filter on device bond0 [ 266.736960][ T5030] 8021q: adding VLAN 0 to HW filter on device bond0 [ 266.767596][ T5082] bridge0: port 2(bridge_slave_1) entered blocking state [ 266.775461][ T5082] bridge0: port 2(bridge_slave_1) entered forwarding state [ 266.932833][ T5041] 8021q: adding VLAN 0 to HW filter on device bond0 [ 266.983073][ T5035] 8021q: adding VLAN 0 to HW filter on device team0 [ 267.052751][ T5083] bridge0: port 1(bridge_slave_0) entered blocking state [ 267.061384][ T5083] bridge0: port 1(bridge_slave_0) entered forwarding state [ 267.091014][ T5030] 8021q: adding VLAN 0 to HW filter on device team0 [ 267.185910][ T5083] bridge0: port 2(bridge_slave_1) entered blocking state [ 267.194059][ T5083] bridge0: port 2(bridge_slave_1) entered forwarding state [ 267.328708][ T5041] 8021q: adding VLAN 0 to HW filter on device team0 [ 267.364262][ T5083] bridge0: port 1(bridge_slave_0) entered blocking state [ 267.372240][ T5083] bridge0: port 1(bridge_slave_0) entered forwarding state [ 267.425715][ T5083] bridge0: port 2(bridge_slave_1) entered blocking state [ 267.434096][ T5083] bridge0: port 2(bridge_slave_1) entered forwarding state [ 267.565284][ T779] bridge0: port 1(bridge_slave_0) entered blocking state [ 267.573378][ T779] bridge0: port 1(bridge_slave_0) entered forwarding state [ 267.601277][ T779] bridge0: port 2(bridge_slave_1) entered blocking state [ 267.609331][ T779] bridge0: port 2(bridge_slave_1) entered forwarding state [ 267.717136][ T5040] 8021q: adding VLAN 0 to HW filter on device bond0 [ 268.199810][ T5040] 8021q: adding VLAN 0 to HW filter on device team0 [ 268.421623][ T4473] bridge0: port 1(bridge_slave_0) entered blocking state [ 268.429688][ T4473] bridge0: port 1(bridge_slave_0) entered forwarding state [ 268.616132][ T4473] bridge0: port 2(bridge_slave_1) entered blocking state [ 268.624397][ T4473] bridge0: port 2(bridge_slave_1) entered forwarding state [ 270.475937][ T5027] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 270.846575][ T5035] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 270.873805][ T5030] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 270.896114][ T5041] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 271.650066][ T5040] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 271.693095][ T5030] veth0_vlan: entered promiscuous mode [ 271.711437][ T5035] veth0_vlan: entered promiscuous mode [ 271.866573][ T5041] veth0_vlan: entered promiscuous mode [ 271.889773][ T5030] veth1_vlan: entered promiscuous mode [ 271.923211][ T5035] veth1_vlan: entered promiscuous mode [ 272.078359][ T5041] veth1_vlan: entered promiscuous mode [ 272.452397][ T5030] veth0_macvtap: entered promiscuous mode [ 272.484897][ T5040] veth0_vlan: entered promiscuous mode [ 272.500824][ T5035] veth0_macvtap: entered promiscuous mode [ 272.575515][ T5030] veth1_macvtap: entered promiscuous mode [ 272.621375][ T5035] veth1_macvtap: entered promiscuous mode [ 272.667294][ T5041] veth0_macvtap: entered promiscuous mode [ 272.703061][ T5041] veth1_macvtap: entered promiscuous mode [ 272.805225][ T5040] veth1_vlan: entered promiscuous mode [ 272.973520][ T5041] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 272.998693][ T5030] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 273.009623][ T5030] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 273.025867][ T5030] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 273.107632][ T5041] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 273.153033][ T5035] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 273.164957][ T5035] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 273.175232][ T5035] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 273.186086][ T5035] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 273.202493][ T5035] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 273.266576][ T5030] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 273.277965][ T5030] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 273.294507][ T5030] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 273.319966][ T5041] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 273.329377][ T5041] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 273.338867][ T5041] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 273.348240][ T5041] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 273.444939][ T5035] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 273.456308][ T5035] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 273.468204][ T5035] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 273.479143][ T5035] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 273.494990][ T5035] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 273.509692][ T5030] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 273.519143][ T5030] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 273.528458][ T5030] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 273.539363][ T5030] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 273.587520][ T5035] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 273.596795][ T5035] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 273.605896][ T5035] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 273.615343][ T5035] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 273.776502][ T5040] veth0_macvtap: entered promiscuous mode [ 273.882031][ T5040] veth1_macvtap: entered promiscuous mode [ 274.191199][ T5040] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 274.202806][ T5040] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 274.213178][ T5040] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 274.224344][ T5040] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 274.236305][ T5040] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 274.248328][ T5040] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 274.264662][ T5040] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 274.374012][ T5027] veth0_vlan: entered promiscuous mode [ 274.409590][ T5040] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 274.420641][ T5040] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 274.431055][ T5040] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 274.441978][ T5040] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 274.452263][ T5040] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 274.463200][ T5040] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 274.479680][ T5040] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 274.619616][ T5027] veth1_vlan: entered promiscuous mode [ 274.753650][ T5040] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 274.764907][ T5040] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 274.775069][ T5040] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 274.786081][ T5040] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 275.361258][ T5027] veth0_macvtap: entered promiscuous mode [ 275.437539][ T5027] veth1_macvtap: entered promiscuous mode [ 275.648768][ T5027] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 275.659896][ T5027] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 275.670233][ T5027] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 275.681119][ T5027] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 275.691328][ T5027] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 275.703924][ T5027] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 275.715423][ T5027] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 275.726391][ T5027] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 275.743074][ T5027] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 276.022166][ T5027] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 276.033246][ T5027] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 276.043607][ T5027] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 276.054449][ T5027] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 276.064736][ T5027] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 276.075562][ T5027] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 276.085916][ T5027] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 276.098591][ T5027] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 276.115252][ T5027] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 276.431049][ T5027] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 276.442317][ T5027] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 276.453867][ T5027] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 276.463211][ T5027] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 281.447373][ T24] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 281.455519][ T24] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 281.699494][ T33] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 281.708025][ T33] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 281.745508][ T10] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 281.754385][ T10] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 282.006392][ T778] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 282.015256][ T778] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 282.272003][ T10] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 282.283554][ T10] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 19:07:07 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.kill\x00', 0x26e1, 0x0) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) sendmsg$nl_xfrm(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[], 0x33fe0}}, 0x0) r1 = io_uring_setup(0x104c, &(0x7f0000000b80)) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) close(r0) close(r1) socket$packet(0x11, 0x2, 0x300) 19:07:07 executing program 0: syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x0, 0x0, 0x0, 0x80000008, 0x0) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff}, 0x0) r1 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000480)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) rt_sigreturn() r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000500)={0xa, 0x2, 0x0, @empty}, 0x1c) listen(r2, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r4, &(0x7f0000000140)={0x2, 0x2, @local}, 0x10) r5 = accept4$inet6(r2, 0x0, 0x0, 0x0) r6 = dup2(r5, r3) write$P9_RREADLINK(r6, &(0x7f00000000c0), 0xfffffebb) [ 282.603254][ T5082] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 282.611618][ T5082] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 19:07:08 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r0, &(0x7f0000000dc0)={0x0, 0x0, &(0x7f0000000d80)={&(0x7f0000000d40)={0x14}, 0x14}}, 0x0) 19:07:08 executing program 2: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$BTRFS_IOC_BALANCE_CTL(r0, 0x40049421, 0x0) [ 283.215629][ T5082] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 283.224791][ T5082] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 283.411942][ T10] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 283.420372][ T10] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 19:07:08 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "7e12ddc5a89047bf00"}) r1 = signalfd(0xffffffffffffffff, &(0x7f0000000040), 0x8) close(r1) r2 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000200)=0x2) read(r2, 0x0, 0x2006) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)=0x1b) timer_create(0x0, &(0x7f00000012c0)={0x0, 0x12}, &(0x7f0000000080)) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x77359400}, {0x0, 0x989680}}, 0x0) r3 = gettid() tkill(r3, 0x14) 19:07:09 executing program 3: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_TTY(r0, 0x0, 0x0) 19:07:09 executing program 2: r0 = socket(0x10, 0x2, 0x0) sendmsg$ETHTOOL_MSG_WOL_GET(r0, &(0x7f0000001800)={0x0, 0x0, &(0x7f00000017c0)={&(0x7f0000001840)=ANY=[], 0x18}}, 0x0) [ 284.163260][ T5223] serio: Serial port pts0 19:07:09 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) dup2(r0, r1) ioctl$KDSETLED(r1, 0x4b32, 0x0) 19:07:09 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.kill\x00', 0x26e1, 0x0) close(r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[], 0x33fe0}}, 0x0) sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) close(r1) [ 284.568133][ T1091] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 284.576293][ T1091] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 284.803835][ T10] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 284.812587][ T10] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 19:07:10 executing program 3: r0 = fsopen(&(0x7f0000000140)='rpc_pipefs\x00', 0x0) cachestat(r0, &(0x7f0000000300), &(0x7f0000000340), 0x0) 19:07:10 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.kill\x00', 0x26e1, 0x0) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000040)={0x0, 0xea60}, 0x10) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[], 0x33fe0}}, 0x0) sendmsg$TEAM_CMD_NOOP(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000011c0)={0x0}}, 0x0) 19:07:10 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7020000140c1100b7030000000000808500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x2d) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x0, 0x80000000000000, 0x0, 0x1, 0x0, &(0x7f0000000640)="b4"}) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 19:07:10 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='cpuacct.stat\x00', 0x26e1, 0x0) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[], 0x33fe0}}, 0x0) timer_create(0x0, &(0x7f0000000180)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) sendmsg$NL80211_CMD_FLUSH_PMKSA(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000200)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) timer_settime(r2, 0x0, &(0x7f0000000300)={{0x77359400}, {0x0, 0x3938700}}, 0x0) close(r1) socket$unix(0x1, 0x5, 0x0) 19:07:11 executing program 4: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000001200), 0x0, 0x0) close(r0) creat(&(0x7f0000002080)='./file0\x00', 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r0, 0x6612) [ 285.919780][ T5244] binder: 5242:5244 ioctl c0306201 0 returned -14 19:07:11 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='cpuacct.stat\x00', 0x26e1, 0x0) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[], 0x33fe0}}, 0x0) sendmsg$NL80211_CMD_GET_COALESCE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) 19:07:11 executing program 3: pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RSETATTR(r0, &(0x7f0000000000)={0x7}, 0x69ff9a93bfc25838) write$P9_RLERROR(r0, &(0x7f0000000140)={0xb, 0x7, 0x0, {0x2, ':^'}}, 0xb) close(r0) timer_create(0x0, &(0x7f0000000180)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000200)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) openat$vcsu(0xffffffffffffff9c, &(0x7f00000001c0), 0x602, 0x0) timer_settime(r1, 0x0, &(0x7f00000000c0)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0) 19:07:11 executing program 2: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read(r0, &(0x7f0000000300)=""/209, 0xd1) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x0, 0x0, 0x0, 0x80000008, 0x0) rt_sigreturn() ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x335}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.kill\x00', 0x26e1, 0x0) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) setsockopt$sock_timeval(r1, 0x1, 0x15, &(0x7f0000000040)={0x0, 0xea60}, 0x10) sendmsg$nl_xfrm(r1, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000080)=ANY=[], 0x33fe0}}, 0x0) sendmsg$TIPC_NL_NET_GET(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc02c5341, &(0x7f00000000c0)) 19:07:12 executing program 1: pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="140000006bffff"], 0x15) write$P9_RSTATu(r1, &(0x7f00000005c0)={0x1a8, 0x7d, 0x0, {{0x0, 0x12c, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x84, '\x00\x00.\xd7SK3\xa4\xae`a\xf9,\xcd\xbe-)\"\x8d\xfc\xe8\xb3\xb5\xc8\x1a\xca\x81!v\x92!\xf0\x91\x17a\x80\xa0\vN\xd5\xe8\xa8\x8a\x02\x82\xcfh\t\xc4\xa6X\xe5*\x1c\xe1v|\x9b\xee\x9c[B\x05\x00\x00\x00\x00\x00\x00\x00\x85X\xbe99\xc3\xa5\xd1\x1d\xb87\xc9\fw\x86S\x01\"\xaej\x16T\xea=`bk\'\xbf\xffB\xe9\xb2\xd3\xbe\xf9m\xfcP>\xa8<\xc4\x1c\x84\xe4\xde\x00'/132, 0x2, '&\\', 0x58, '\xf1\x96\xc94\xaf=v^\x98\xd7\x13\xdb-\xc4`\x9dV&\xbf\x12\x9e\xa0\x1e\x12\xfci{.#a\xea\xe7\xf7IP\xba\xc7\xa9\xd5\xa1\xee\xaf\x0e\xe4\"\xb8r*\xe1B\xcb\x7fj\xb9\xa0\xdc\x85\x93_\x8b\xc8\b\xef5LOi\xad\xac\x8d2H\x97\xe0\x88$\x98\x14\xe7\xc3\x1eE\x1bkm\x8f\xa8\xfd', 0x1b, 'Urans=fd\x05v\xb4t\xbf\b\xf9\x11\xe6\xd5\x10*\xfcn^\xaf\x9e\xd2\xbe'}, 0x67, 'trans=f\t\x00gJ\x8ek\xd4\x16\x15\x9f`\x19}h^\x1e\xfe\x90\xdc\xa0s\xcfGY\xfe.\xd7\x11^\fZ=\x1f\x82\xbcOP\x01\xae\xe8UX}\x1d\x83\x18\xe2\xea\x87\xb2h\xc9\xbf9c\x92\xacQ\x10\xbd[%\x16{l?Jpq\xe8:\x92\f\x01~\x8d\x8d\xb95Xn\xa6\xca\x95f0\t\xd3\x9a\x00P\xdf\xdbr\x81O', 0xffffffffffffffff}}, 0x1a8) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000040)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) rt_sigreturn() recvmmsg(r3, &(0x7f0000002680)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) write$P9_RLERROR(r1, 0x0, 0x1a) 19:07:12 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x2) r1 = dup(r0) write$P9_RGETATTR(r1, &(0x7f0000000240)={0xa0, 0x19, 0x0, {0x0, {}, 0x0, 0xee00}}, 0xa0) 19:07:12 executing program 4: r0 = socket(0x10, 0x2, 0x0) sendmsg$TIPC_CMD_GET_BEARER_NAMES(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c}, 0x1c}}, 0x0) 19:07:12 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_DEL(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) 19:07:13 executing program 2: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BTRFS_IOC_RM_DEV(r0, 0x5451, 0x0) [ 287.984425][ T5269] Zero length message leads to an empty skb 19:07:13 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f0000000080)) 19:07:13 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r0, &(0x7f00000099c0)={0x0, 0x0, &(0x7f0000009980)={&(0x7f00000097c0)={0x1c, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) 19:07:13 executing program 2: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="140000004bffff"], 0x15) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000440), 0x0, &(0x7f0000000480)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) rt_sigreturn() r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r3, 0x40045431, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, "7e12ddc5a89047bf00"}) r4 = signalfd(0xffffffffffffffff, &(0x7f0000000040), 0x8) close(r4) r5 = syz_open_pts(r3, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000200)=0x2) read$usbmon(r4, 0x0, 0x0) write$P9_RLERROR(r1, 0x0, 0x15) 19:07:13 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)={0x34, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_LINKINFO_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKINFO_TP_MDIX_CTRL={0x5}]}, 0x34}}, 0x0) 19:07:13 executing program 3: pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RVERSION(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="140000006bffff"], 0x15) write$P9_RSTATu(r1, &(0x7f0000000440)={0x1ea, 0x7d, 0x0, {{0x0, 0x191, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0xd, '/{\x11\xff4@4v\x17h&@&', 0x3, '?p\x00', 0x92, '\x13\x93\x19\x881\"7\xc3\xbb&\x9c\xf3\r\x19\xd3,\xfeG\x03b\xc3\xd7g\xb3\xbc\x96\x7f92\x14\x1c\x05\x13\x0ev\x1a\x18\x89\'\xfa\x8e \'\x8f\xbc\a=\xfayk\xdc7\x83w\x95\x95\x19\xe2\xea\x97\x8eb\x05\xb3\xc0\'\xef\x9e\tK\xfd\t\x92\xa6\x98\xfc\x9b\xe9\x8dn\xf8\x11q\xa5d\xd2_\x95\xa1\x95\x9b|ytd\xcb*\xaek\f}\xbd\xd1\xcbv^\xd6\x84\xc7\xf5\xfdO\xb8\x93\x90+\x04\xd8\x06l\x96\xcd\x86G\x91zC\x835X\x85\x994\x90\xbb\x85H\x8a!j8^\xdfz\x02\x00', 0xbc, '\x1f\x11\xf5>b)\xf0\xa3E\xf6~\tD\"\xdf\xf5g\xb9\xf5\x16\xcc[Q\xc8\xd0\x94E\xc9\x11U\x9dZfd\xedU\x94v\x8a!O\x01\x0e\xb2N\x1c{\xc5\xa7\x993m\x19/\xbdP\xefao\xe3\xfa3\xd1;~\x92\xad\xca\xb7\xe5\\\xb0kx\xa7\xdfV(4\xa0\xb8`\xcb\xc2d_;\xdc\xdd\xc5\xbf\xc5\xad\x1a\xd61\x99\x05\x84\xd9\xc4w\xfc\xaf\xf9\\\r\xcc6\\\xa8om\xbc\x00\x04\x00\x00\x00\x00\x00\x00\xa8M\xa2b\x1b/L\xd2\x88\x16\x00!\xf2Z\x8b e\xeeF\x95\x97\xb9YB\xb9\xdf\xc7\x96N\x19>\\-A\xcc\xb3\xbd\xa8z\xda\xad\xb5\xaa\xc0\x06\xceDl\x95}\xd9\x16$\xa8A\x14w\x01\xbc\xcb7\x10}>\xd7g'}, 0x44, 'rfdno\x9f\xe9\x05\xe8{K\x95T\x19n2k?\xbd;b\a\x9a\xdc?}\x88K\xb5\xa3?\xbe\xd6}\x01\x0e\'\xc8\xde\x9f{\xd0\xb2\x02\xd1\xe7\x1e\xaa>\x1b\xfa\xbd\aw\xda\xbc\x93\xc3\xb0\b\t\x00\x00\x00\x00\x00\x009'}}, 0x1ea) r2 = creat(&(0x7f0000000200)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000001600)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) write$P9_RLERROR(r1, 0x0, 0xd) 19:07:14 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000004c0)='freezer.state\x00', 0x26e1, 0x0) close(r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[], 0x33fe0}}, 0x0) r1 = io_uring_setup(0x104c, &(0x7f0000001440)) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) eventfd(0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r1) r2 = memfd_create(&(0x7f0000000140)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x05\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xac \xe8\xb6\xdf\x16J\xab\xecC\xe2{\xfd\x8a\xb4\x8e\x9c\xfb\xf6\xe9\xd8]B6)\x9f\x9cR\xae\x12G\xd8\xa4y\xef\x02?\xf2\xe7}\ra\x97F', 0x0) r3 = dup(r2) write$cgroup_pid(r3, &(0x7f0000000080), 0x39) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000004, 0x11, r2, 0x0) sendfile(r2, r3, &(0x7f0000000100), 0x6c03) 19:07:14 executing program 3: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) close(r0) syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x0) ioctl$SG_GET_RESERVED_SIZE(r0, 0x2272, &(0x7f0000000040)) 19:07:14 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000800)={0x14}, 0x14}}, 0x28000) 19:07:14 executing program 3: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) getsockname$unix(r0, 0x0, &(0x7f00000000c0)) 19:07:15 executing program 4: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000001300), 0x0, 0x0) r1 = dup(r0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, 0x0) 19:07:15 executing program 3: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) dup3(r1, r0, 0x0) sendmmsg$inet6(r0, 0x0, 0x0, 0x0) [ 291.154226][ T1221] ieee802154 phy0 wpan0: encryption failed: -22 [ 291.161210][ T1221] ieee802154 phy1 wpan1: encryption failed: -22 19:07:37 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCREVOKE(r0, 0x40044591, 0x0) r1 = dup(r0) ioctl$PIO_SCRNMAP(r1, 0x4b41, 0x0) 19:07:37 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0x0, 0x5, 0x2, 0x4}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001480)={&(0x7f0000000040)='ext4_da_release_space\x00'}, 0x10) write$cgroup_int(r0, &(0x7f0000000240), 0x12) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r2}, &(0x7f0000000040), &(0x7f0000000300)}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001480)={&(0x7f0000000040)='ext4_da_release_space\x00', r3}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='memory.events\x00', 0x7a05, 0x1700) 19:07:37 executing program 4: r0 = socket$unix(0x1, 0x5, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000140)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) write$binfmt_script(r1, &(0x7f0000000340), 0xffffff46) sendto(r1, &(0x7f0000000000)='y', 0x1, 0x0, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) close(r1) timer_create(0x0, &(0x7f00000002c0)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040)=0x0) timer_settime(r2, 0x0, &(0x7f00000001c0)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) dup(r0) 19:07:38 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.current\x00', 0x26e1, 0x0) close(r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_xfrm(r0, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[], 0x33fe0}}, 0x0) write$binfmt_elf64(r1, 0x0, 0xe0) close(r2) 19:07:38 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000000), 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r0, 0x0) mount$nfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) 19:07:38 executing program 3: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200010, &(0x7f0000000300)={[{@user_xattr}, {@nombcache}, {@dioread_lock}, {@norecovery}, {@barrier_val={'barrier', 0x3d, 0x4c}}, {@lazytime}, {@init_itable_val={'init_itable', 0x3d, 0x5}}, {@usrquota}, {@errors_continue}]}, 0xfe, 0x55d, &(0x7f0000000980)="$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") r0 = open(&(0x7f0000000000)='./bus\x00', 0x14d35e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r0, 0x0) fallocate(r0, 0x0, 0x0, 0x1000f4) r1 = eventfd2(0x1, 0x0) read$eventfd(r1, &(0x7f0000002100), 0xf) [ 313.851505][ T5312] loop3: detected capacity change from 0 to 1024 19:07:39 executing program 4: sysfs$1(0x1, &(0x7f0000000000)='{\x00') [ 314.002860][ T5312] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 314.107130][ T28] audit: type=1800 audit(1713035259.353:2): pid=5312 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="bus" dev="loop3" ino=18 res=0 errno=0 [ 314.138974][ T28] audit: type=1800 audit(1713035259.403:3): pid=5312 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="bus" dev="loop3" ino=18 res=0 errno=0 19:07:39 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) fchdir(r0) mount(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000140)='proc\x00', 0x0, 0x0) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(r1, &(0x7f0000000100)='fdinfo/4\x00') wait4(0x0, 0x0, 0x80000000, 0x0) 19:07:39 executing program 3: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x14}, 0x14}}, 0x0) [ 314.372479][ T5040] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. 19:07:40 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.kill\x00', 0x26e1, 0x0) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[], 0x33fe0}}, 0x0) r1 = io_uring_setup(0x104f, &(0x7f00000001c0)) sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000005580)={0x0, 0x0, &(0x7f0000005540)={0x0}}, 0x0) close(r0) close(r1) 19:07:40 executing program 4: mknod(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) syz_mount_image$udf(&(0x7f0000000100), &(0x7f0000000040)='./file0\x00', 0x14444, &(0x7f0000001080)=ANY=[@ANYBLOB="696f636861727365743d6b6f69382d72752c766f6c756d653d3030303030303030303030300000000063686f723d30303030303030303030303030303030303030342c6e6f6164696e6963622c6769643d69676e6f72652c7569643d6967ee6f7200006769643dc7865530221d5cf1ffa33f314577d414dd0f02989f344aa1daf1517b816480770a92f1eaeab3d78957fc83df545faf189820845d1a3ae48728ee6ed8684b4f3acff28b7d51848813c91e8e6278a3cfa72eec120ebbc7baaaf78c062300000000000000", @ANYRESDEC=0x0, @ANYBLOB="0000b06bb67ea4703a71b976a8e77eef6ddc24eb16223dea582cee4da7c8d64be67e2f0ad5ed09"], 0xfe, 0xc17, &(0x7f0000000280)="$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") 19:07:40 executing program 3: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) io_submit(0x0, 0x1, &(0x7f0000000180)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="8000000000010b04000000000000000002000000240001801400018008000100ac141440080002007f0020010c00028005000100000000001c002280080003400000000008000140000000000800024000000000240002801400018008000100ac9414bb08000200000000000c0002800500010000002000080007"], 0x80}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cpuacct.usage_all\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x158a91b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) sendmsg$NFT_MSG_GETRULE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)={0x20, 0x7, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_RULE_COMPAT={0x4}, @NFTA_RULE_CHAIN_ID={0x8}]}, 0x20}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe6, 0x0) [ 316.212470][ T5332] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.3'. [ 316.223728][ T5332] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.3'. [ 316.261191][ T4406] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 316.284954][ T4406] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 316.298424][ T4406] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 316.322387][ T5329] loop4: detected capacity change from 0 to 2048 [ 316.332099][ T4406] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 316.354103][ T4406] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 316.368216][ T4406] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 316.371860][ T5329] ======================================================= [ 316.371860][ T5329] WARNING: The mand mount option has been deprecated and [ 316.371860][ T5329] and is ignored by this kernel. Remove the mand [ 316.371860][ T5329] option from the mount to silence this warning. [ 316.371860][ T5329] ======================================================= [ 316.482387][ T5329] UDF-fs: error (device loop4): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 316.646264][ T5329] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) 19:07:42 executing program 3: syz_mount_image$exfat(&(0x7f0000000000), &(0x7f00000001c0)='./file0\x00', 0x1800000, &(0x7f0000000200)={[{@discard}, {@discard}, {@namecase}, {@iocharset={'iocharset', 0x3d, 'iso8859-9'}}, {@dmask={'dmask', 0x3d, 0x3e60ca1}}, {@errors_continue}, {@namecase}, {}, {@utf8}, {@fmask={'fmask', 0x3d, 0x22}}]}, 0x1, 0x150f, &(0x7f0000001980)="$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") pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='./file0\x00') 19:07:42 executing program 1: pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RVERSION(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="140000006bffff"], 0x15) write$P9_RSTATu(r1, &(0x7f00000004c0)={0x356, 0x7d, 0x0, {{0x0, 0x2c7, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x154, '\xae\xad\v\xae\x05\x00\x00\xe9\xcd\x9f\xdb\xfc\xe8}\xd3sB\xd2\a\xb9N\xdb\xb0\xe0\xf8-\x02\x01X!\x04\xe1[\xe5q8\xd8\xfa\x0f\xe2\x90#\xc2\xfe\xfb}\xf1\"E)\x1bb\xf0[\xd2;S*\xfc\xb1\xc9Q\f\xca\xd8\xda\x19\xf5\xcf\x13\x11\xd1\b\x90>\xa3\xf6\xb4\x1b\xaf\x9e\xdbM\x17@\x8e\xb9\xb2J\xec\xb1\x99\x95m\r\xe8\xb5\xf2{\'\x11+gUf\xce\xdf\xb7\x9c \x8f\xd3\xfe5\x19\xee\xc4|\b\x8b\x0e<\xae^>\x06\x9d.\xe0\x95)\x04\x8f\x85\'\x19m\xf66\xa6\bi\xff\xb5Yk\xec51f\xbe3\x86\xfem\x1d0aU=\x1eE\xe9w\x1f\xc8j<^\x94\x82\x01\x03\xa5\xbcp[\xaaBs\xe5\xfc9\xd8\xc6\xc3\x96mN\xf6\xd6\xf1\xd5\xb4\xe6K\xcc~4W\xf5J\xe8\xcf\xb7\xae\xe8\xee;/\xf6\x9f\xcb\x8ac#\xa2\xf7\xe6\x19\x10_\x81iP\x17W\xba\xe9\xd6\xf98p\xe0\x1a\x80-\xe3:\xe0$p\xb0\xf5\xaa\x98\xbf\x03\n\x1a\x82J\xf6Z\xa6\xc3\xc6\x144\f\xc2\xfdR\x87cp\xe0\x15\xfc-\xef\x82\xa0\xb7\x1d\td\x1d\xe9\x9c\xe1\xadU\x1c\xbc\xe1L\xee\x8b,\xfcm\x8c\x81\xa7\x17W\x04\xd2\x89W\'*\x10(\x1bS\x11\x80\x1e+Dw\xed\xe0\xd7a\x9dz(U3\x9b\xcf\xde\x03\xe6 b\xd8\xab-\xfc\x00\xff\x04b\xb8\xe3\xcd', 0xa4, '\x0f\xd3zG6\xcd\x1e\xe9\x8a\xdeT\xe7XB[}?8j\x02\x8a#d\x17\xc9(b\xbeYK\xc6\xfc\x01\x16\xf9`C\xa2\xa6\x8f\xde\x95\x19\xc8)aO]\xd1L\xc5\xf1\xa8\x19\xfaS`H\beS\x7f_*j\xb3\x04\x92\x8a\xb7\x05\xa0*\x7f=\xad\x00\x00\x00\x00\x00\x00\x00b\xbac\x86x}cV\x1eo\x8b\x89WnYj=\x1a\x84oA\x14\xaf\xd9#9W\xcc\x9as\x9fc\xc8\xd2=E\x86\x9e\xb2\xe475\xd7\x1b2\xaan|\xb4u\x80\x16S[SsH\x88\xb5wZ\x81\xf1\xe9ui\xfb\x90j\x91Z\xea\xb64\xd1\x9c\xd2\xb6N\x06\xef', 0x93, '\ap\xeb\x00\x00\x00\x00\x00\xee\xbe\xc7\xa1bMe\xcd[`:O\xe8\x1a\xa1\xd9\x19u\xff\x1c\x9c\x10\xd4\xcb]\x87\xbb\x88s\x81`\xe2\xcd8\xfd:O\xbe\xd7\xfc%\x9dV@\x95\xc7\x85u\xa6p\xa4\'F\xae/#i\xa6\x87\xb5\xf3J)\xcbQ\xb7\xf4\xbf\xef\x05H]M\x00\x00\x00\x80\x01\x00\x00\x00\x024E\xf4c\x15\xafw\xae\x11\x97GA\xea\x1b\x90\x11\xdc\xa2\x90\xb8pP\x0ft\xfd+\x89i*\x86$\xbfSh\xba;\xa2\xaf\x9c\'n\x9d\x80\xee\v\x98ex\xb3\xc3\x96\xd9\xb5\xdf\xecU7', 0x9, 'trans=fd\x05'}, 0x7a, '\xea\x17\xaag\xa0\xe9@\xbd\n\xfc\x01}\xff\x16H\x99;/vo\'\x86\v\xaf\x16\xdb\xba\xee$z\x85K\x17\f\xeb\x8a\b\xd2\xea\xa0\r\x00\x00\x00\x00\x00\x001\x05x\xf7\xea\xfbw\xcaw\aL\x88v\xcb}\xa0\x90\xe7f\x9c\t \"\t\xbeN\x94\x12\xe8\x9f\xfcb\xba&r\x12y=\x7f\x80D\xb3*Dbu\x9f&Z\xff\xf6\x02l\xa4\xb2K?\b\x1b\x91\xb4\x98\xf0\xc3\xb7\x8b\xb2\xd3\x0e\xe4\fv\xdaE\x95', 0x0, 0x0, 0xee01}}, 0x356) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000480)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) rt_sigreturn() r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='cpuacct.stat\x00', 0x26e1, 0x0) close(r3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)) sendmsg$nl_xfrm(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[], 0x33fe0}}, 0x0) sendmsg$NFT_MSG_GETOBJ_RESET(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) write$P9_RLERROR(r1, 0x0, 0x15) 19:07:42 executing program 4: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200010, &(0x7f0000000300)={[{@user_xattr}, {@nombcache}, {@dioread_lock}, {@norecovery}, {@barrier_val={'barrier', 0x3d, 0x4c}}, {@lazytime}, {@init_itable_val={'init_itable', 0x3d, 0x5}}, {@usrquota}, {@errors_continue}]}, 0xfe, 0x55d, &(0x7f0000000980)="$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") r0 = open(&(0x7f0000000000)='./bus\x00', 0x14d35e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r0, 0x0) fallocate(r0, 0x0, 0x0, 0x1000f4) r1 = eventfd2(0x1, 0x0) read$eventfd(r1, &(0x7f0000002100), 0xf) [ 317.530270][ T5342] loop3: detected capacity change from 0 to 256 [ 317.608706][ T5342] exfat: Deprecated parameter 'namecase' [ 317.616043][ T5342] exfat: Deprecated parameter 'namecase' [ 317.622899][ T5342] exfat: Deprecated parameter 'utf8' [ 317.763662][ T5341] loop4: detected capacity change from 0 to 1024 [ 317.797051][ T5342] exFAT-fs (loop3): failed to load upcase table (idx : 0x00011f41, chksum : 0x01284b2f, utbl_chksum : 0xe619d30d) 19:07:43 executing program 3: syz_mount_image$bfs(&(0x7f0000000240), &(0x7f0000000100)='./file0\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYRESDEC, @ANYRESDEC, @ANYRESOCT, @ANYRES16, @ANYRES16, @ANYBLOB="001000000000000000030300"], 0x4, 0xaf, &(0x7f0000000140)="$eJzs17FtwkAUBuA/VhQnjTNAimzgHTJKlDLpUiWiYCF6pmAEJAagoEM0RsbYckFFgSX0fdKd7te7J732rQ6Lt1RJ85qTZuT37//786e9lxk8hTtSJCmTPLeh6vL2o6s9nOvr3eyrP6PWx4lGBgAArlSkTvLSx3mRuu6em+HPe7sL7C80lzcZEQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGBSxwAAAP//AighRQ==") r0 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) ioctl$FIBMAP(r0, 0x1, &(0x7f0000000040)=0x2) [ 317.978259][ T5333] chnl_net:caif_netlink_parms(): no params data found [ 318.001060][ T5341] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 318.143303][ T28] audit: type=1800 audit(1713035263.373:4): pid=5341 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="loop4" ino=18 res=0 errno=0 [ 318.197387][ T28] audit: type=1800 audit(1713035263.443:5): pid=5341 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="loop4" ino=18 res=0 errno=0 [ 318.365409][ T5350] loop3: detected capacity change from 0 to 64 19:07:43 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="240000003a000b01"], 0x24}}, 0x0) 19:07:43 executing program 4: pipe2$9p(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) tee(r1, r0, 0x1, 0x0) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x8}, {0x0, 0x989680}}, 0x0) [ 318.497738][ T4406] Bluetooth: hci5: command tx timeout 19:07:43 executing program 3: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) io_submit(0x0, 0x1, &(0x7f0000000180)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="8000000000010b04000000000000000002000000240001801400018008000100ac141440080002007f0020010c00028005000100000000001c002280080003400000000008000140000000000800024000000000240002801400018008000100ac9414bb08000200000000000c0002800500010000002000080007"], 0x80}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cpuacct.usage_all\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x158a91b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) sendmsg$NFT_MSG_GETRULE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)={0x20, 0x7, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_RULE_COMPAT={0x4}, @NFTA_RULE_CHAIN_ID={0x8}]}, 0x20}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe6, 0x0) [ 318.652056][ T5027] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 319.815207][ T5357] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.3'. [ 319.826371][ T5357] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.3'. [ 319.886136][ T5333] bridge0: port 1(bridge_slave_0) entered blocking state [ 319.894817][ T5333] bridge0: port 1(bridge_slave_0) entered disabled state [ 319.904207][ T5333] bridge_slave_0: entered allmulticast mode [ 319.914403][ T5333] bridge_slave_0: entered promiscuous mode [ 320.382162][ T5333] bridge0: port 2(bridge_slave_1) entered blocking state [ 320.390217][ T5333] bridge0: port 2(bridge_slave_1) entered disabled state [ 320.398610][ T5333] bridge_slave_1: entered allmulticast mode [ 320.408807][ T5333] bridge_slave_1: entered promiscuous mode 19:07:45 executing program 3: r0 = semget$private(0x0, 0x5, 0x0) semtimedop(r0, &(0x7f0000000040)=[{0x0, 0xffff, 0x800}], 0x1, 0x0) [ 320.578042][ T4406] Bluetooth: hci5: command tx timeout [ 320.635348][ T5028] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 320.669817][ T5028] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 320.692650][ T5028] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 320.720650][ T5028] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 320.756236][ T5333] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 320.772723][ T5028] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 320.792496][ T5028] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 320.872020][ T5333] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 321.243284][ T5333] team0: Port device team_slave_0 added [ 321.285519][ T5333] team0: Port device team_slave_1 added 19:07:46 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001280)={0x15, 0x2, &(0x7f0000000100)=@raw=[@alu={0x7, 0x0, 0x8, 0x0, 0x0, 0x10}, @jmp={0x5, 0x0, 0x9}], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x28}, 0x90) [ 321.900625][ T5333] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 321.917572][ T5333] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 321.924855][ T4406] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 321.946771][ T5333] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 321.961191][ T4406] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 321.972294][ T4406] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 321.987521][ T4406] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 322.044821][ T5333] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 322.052375][ T5333] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 322.083419][ T5333] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 322.098736][ T4406] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 322.143737][ T4406] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 19:07:47 executing program 3: syz_open_dev$hiddev(0x0, 0x7fffffffffffffff, 0x480) syz_open_dev$evdev(&(0x7f0000000040), 0xffffffffffffffe0, 0x141040) [ 322.543989][ T5333] hsr_slave_0: entered promiscuous mode 19:07:47 executing program 4: syz_mount_image$exfat(&(0x7f0000000000), &(0x7f0000000040)='./file1\x00', 0xa10812, &(0x7f0000000380)={[{@discard}, {@utf8}, {@fmask={'fmask', 0x3d, 0xb7}}, {@namecase}, {@discard}, {@errors_continue}, {@umask={'umask', 0x3d, 0x10004}}, {@umask={'umask', 0x3d, 0x6ff}}, {@utf8}, {@iocharset={'iocharset', 0x3d, 'cp861'}}, {@iocharset={'iocharset', 0x3d, 'macturkish'}}, {@umask={'umask', 0x3d, 0xb2c}}, {@dmask={'dmask', 0x3d, 0x9}}, {@errors_continue}, {}], [{@euid_eq}, {@fscontext={'fscontext', 0x3d, 'user_u'}}, {@subj_type={'subj_type', 0x3d, 'iocharset'}}, {@dont_measure}, {@uid_gt}, {@rootcontext={'rootcontext', 0x3d, 'sysadm_u'}}, {@mask={'mask', 0x3d, 'MAY_APPEND'}}, {@permit_directio}, {@fowner_lt}]}, 0x21, 0x14fd, &(0x7f0000003f40)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000280)=""/239, 0xef) [ 322.626921][ T5333] hsr_slave_1: entered promiscuous mode [ 322.663084][ T5333] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 322.671987][ T5333] Cannot create hsr debugfs directory [ 322.688247][ T4406] Bluetooth: hci5: command tx timeout [ 322.909949][ T4406] Bluetooth: hci6: command tx timeout 19:07:48 executing program 3: getpid() lstat(0x0, 0x0) r0 = getgid() syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000540)='./file0\x00', 0x21000f, &(0x7f0000000240)=ANY=[@ANYRES16=r0, @ANYRES16], 0x1, 0x50b, &(0x7f0000004fc0)="$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") mount$cgroup2(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0) [ 323.253934][ T5374] loop4: detected capacity change from 0 to 256 [ 323.272865][ T5374] exfat: Deprecated parameter 'utf8' [ 323.279247][ T5374] exfat: Deprecated parameter 'namecase' [ 323.285717][ T5374] exfat: Deprecated parameter 'utf8' [ 323.423383][ T5377] loop3: detected capacity change from 0 to 512 [ 323.466144][ T5377] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 323.485782][ T5377] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 323.514082][ T5377] EXT4-fs (loop3): orphan cleanup on readonly fs [ 323.527140][ T5377] EXT4-fs error (device loop3): ext4_orphan_get:1420: comm syz-executor.3: bad orphan inode 15 [ 323.528022][ T5374] exFAT-fs (loop4): failed to load upcase table (idx : 0x00012153, chksum : 0xc3dffc2e, utbl_chksum : 0xe619d30d) [ 323.665543][ T5377] ext4_test_bit(bit=14, block=2) = 0 [ 323.671775][ T5377] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 323.828589][ T5377] EXT4-fs error (device loop3): ext4_map_blocks:580: inode #2: block 3: comm syz-executor.3: lblock 0 mapped to illegal pblock 3 (length 1) 19:07:49 executing program 4: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) io_submit(0x0, 0x1, &(0x7f0000000180)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="8000000000010b04000000000000000002000000240001801400018008000100ac141440080002007f0020010c00028005000100000000001c002280080003400000000008000140000000000800024000000000240002801400018008000100ac9414bb08000200000000000c0002800500010000002000080007"], 0x80}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cpuacct.usage_all\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x158a91b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) sendmsg$NFT_MSG_GETRULE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)={0x20, 0x7, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_RULE_COMPAT={0x4}, @NFTA_RULE_CHAIN_ID={0x8}]}, 0x20}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe6, 0x0) 19:07:49 executing program 3: r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) fsetxattr$trusted_overlay_upper(r0, &(0x7f0000001080), &(0x7f00000010c0)={0x0, 0xfb, 0x15, 0x0, 0x0, "39c002a710bdb4524d6428104624d654"}, 0x15, 0x1) [ 324.263403][ T4406] Bluetooth: hci7: command tx timeout [ 324.305836][ T5040] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 324.508932][ T5362] chnl_net:caif_netlink_parms(): no params data found [ 324.709446][ T5333] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 324.737301][ T4406] Bluetooth: hci5: command tx timeout [ 324.906022][ T5333] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 324.993183][ T4406] Bluetooth: hci6: command tx timeout [ 325.018035][ T5382] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.4'. [ 325.028974][ T5382] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.4'. 19:07:50 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='cpuacct.stat\x00', 0x26e1, 0x0) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[], 0x33fe0}}, 0x0) timer_create(0x0, &(0x7f0000000180)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) sendmsg$NL80211_CMD_RADAR_DETECT(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={0x0}}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000200)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000280)={0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8fc1, 0x6744]}) timer_settime(r1, 0x0, &(0x7f0000000300)={{0x77359400}, {0x0, 0x3938700}}, 0x0) socket$packet(0x11, 0x0, 0x300) [ 325.215212][ T5333] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 325.511331][ T5333] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 19:07:50 executing program 4: syz_mount_image$xfs(&(0x7f000000d4c0), &(0x7f0000000000)='./file0\x00', 0x4090, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x1, 0xd58d, &(0x7f0000027f80)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_serviced\x00', 0x275a, 0x0) ftruncate(r0, 0x10001) write$FUSE_NOTIFY_POLL(r0, &(0x7f00000000c0)={0x18}, 0x18) close(r0) [ 325.932213][ T5366] chnl_net:caif_netlink_parms(): no params data found [ 326.368019][ T4406] Bluetooth: hci7: command tx timeout 19:07:51 executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a500000023b6000095"], &(0x7f00000000c0)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r0}, 0x10) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x0) [ 326.740846][ T5333] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 326.963399][ T5333] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 327.008885][ T5362] bridge0: port 1(bridge_slave_0) entered blocking state [ 327.017083][ T5362] bridge0: port 1(bridge_slave_0) entered disabled state [ 327.038059][ T5362] bridge_slave_0: entered allmulticast mode [ 327.049219][ T5362] bridge_slave_0: entered promiscuous mode [ 327.085012][ T4406] Bluetooth: hci6: command tx timeout [ 327.108695][ T5333] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 327.192981][ T5362] bridge0: port 2(bridge_slave_1) entered blocking state [ 327.201168][ T5362] bridge0: port 2(bridge_slave_1) entered disabled state [ 327.209645][ T5362] bridge_slave_1: entered allmulticast mode [ 327.220083][ T5362] bridge_slave_1: entered promiscuous mode [ 327.279826][ T5333] netdevsim netdevsim0 netdevsim3: renamed from eth3 19:07:52 executing program 3: prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}) r0 = io_uring_setup(0x34d, &(0x7f0000000300)) r1 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0x1a, 0x20000007, r1) [ 327.559188][ T5362] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 327.693824][ T5362] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 328.372864][ T5362] team0: Port device team_slave_0 added [ 328.386321][ T5366] bridge0: port 1(bridge_slave_0) entered blocking state [ 328.394966][ T5366] bridge0: port 1(bridge_slave_0) entered disabled state [ 328.403304][ T5366] bridge_slave_0: entered allmulticast mode [ 328.413445][ T5366] bridge_slave_0: entered promiscuous mode [ 328.420186][ T4406] Bluetooth: hci7: command tx timeout 19:07:53 executing program 3: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000200)={0xc, 0x0, 0x0}) ioctl$IOMMU_VFIO_IOAS$SET(r0, 0x3b88, &(0x7f00000002c0)={0xc, r1}) ioctl$IOMMU_VFIO_IOMMU_MAP_DMA(r0, 0x3b71, &(0x7f0000000040)={0x20, 0x0, 0x0}) [ 328.455466][ T5362] team0: Port device team_slave_1 added [ 328.628876][ T5366] bridge0: port 2(bridge_slave_1) entered blocking state [ 328.639437][ T5366] bridge0: port 2(bridge_slave_1) entered disabled state [ 328.647724][ T5366] bridge_slave_1: entered allmulticast mode [ 328.658101][ T5366] bridge_slave_1: entered promiscuous mode [ 328.935669][ T5362] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 328.943420][ T5362] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 328.972691][ T5362] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 329.112974][ T5362] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 329.120464][ T5362] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 329.149845][ T5362] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active 19:07:54 executing program 3: r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='nr0\x00', 0x10) sendmsg$802154_raw(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)="d9", 0x1}}, 0x0) [ 329.184184][ T5366] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 329.198938][ T4406] Bluetooth: hci6: command tx timeout [ 329.271387][ T5366] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 329.515772][ T5407] ===================================================== [ 329.524920][ T5407] BUG: KMSAN: uninit-value in ax25cmp+0x3a5/0x470 [ 329.532390][ T5407] ax25cmp+0x3a5/0x470 [ 329.537989][ T5407] nr_dev_get+0x20e/0x450 [ 329.542638][ T5407] nr_route_frame+0x1a2/0xfe0 [ 329.548804][ T5407] nr_xmit+0x5a/0x1c0 [ 329.553111][ T5407] dev_hard_start_xmit+0x247/0xa20 [ 329.559263][ T5407] __dev_queue_xmit+0x348d/0x52c0 [ 329.566119][ T5407] raw_sendmsg+0x64e/0xc10 [ 329.571759][ T5407] ieee802154_sock_sendmsg+0x96/0xd0 [ 329.577807][ T5407] __sock_sendmsg+0x30f/0x380 [ 329.583478][ T5407] ____sys_sendmsg+0x877/0xb60 [ 329.589188][ T5407] ___sys_sendmsg+0x28d/0x3c0 [ 329.594211][ T5407] __x64_sys_sendmsg+0x307/0x4a0 [ 329.599875][ T5407] x64_sys_call+0xc4b/0x3b50 [ 329.605193][ T5407] do_syscall_64+0xcf/0x1e0 [ 329.610880][ T5407] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 329.617680][ T5407] [ 329.620324][ T5407] Uninit was created at: [ 329.624991][ T5407] kmem_cache_alloc_node+0x613/0xc50 [ 329.630749][ T5407] kmalloc_reserve+0x13d/0x4a0 [ 329.635965][ T5407] __alloc_skb+0x35b/0x7a0 [ 329.641375][ T5407] alloc_skb_with_frags+0xc8/0xbf0 [ 329.647118][ T5407] sock_alloc_send_pskb+0xa81/0xbf0 [ 329.652669][ T5407] raw_sendmsg+0x367/0xc10 [ 329.657771][ T5407] ieee802154_sock_sendmsg+0x96/0xd0 [ 329.664011][ T5407] __sock_sendmsg+0x30f/0x380 [ 329.669438][ T5407] ____sys_sendmsg+0x877/0xb60 [ 329.679971][ T5407] ___sys_sendmsg+0x28d/0x3c0 [ 329.685532][ T5407] __x64_sys_sendmsg+0x307/0x4a0 [ 329.691901][ T5407] x64_sys_call+0xc4b/0x3b50 [ 329.697278][ T5407] do_syscall_64+0xcf/0x1e0 [ 329.702233][ T5407] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 329.709580][ T5407] [ 329.712130][ T5407] CPU: 0 PID: 5407 Comm: syz-executor.3 Not tainted 6.9.0-rc3-syzkaller-00344-g8f2c057754b2 #0 [ 329.723230][ T5407] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/27/2024 [ 329.735130][ T5407] ===================================================== [ 329.743322][ T5407] Disabling lock debugging due to kernel taint [ 329.750143][ T5407] Kernel panic - not syncing: kmsan.panic set ... [ 329.757013][ T5407] CPU: 0 PID: 5407 Comm: syz-executor.3 Tainted: G B 6.9.0-rc3-syzkaller-00344-g8f2c057754b2 #0 [ 329.770204][ T5407] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/27/2024 [ 329.781085][ T5407] Call Trace: [ 329.784684][ T5407] [ 329.787871][ T5407] dump_stack_lvl+0x216/0x2d0 [ 329.793017][ T5407] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 329.799456][ T5407] dump_stack+0x1e/0x30 [ 329.803934][ T5407] panic+0x4e2/0xcd0 [ 329.808717][ T5407] ? kmsan_get_metadata+0xf1/0x1d0 [ 329.814415][ T5407] kmsan_report+0x2d5/0x2e0 [ 329.819416][ T5407] ? _raw_spin_unlock_irqrestore+0x3f/0x60 [ 329.826115][ T5407] ? stack_depot_save_flags+0x66d/0x6e0 [ 329.832510][ T5407] ? kmsan_get_metadata+0x146/0x1d0 [ 329.838044][ T5407] ? __msan_warning+0x95/0x120 [ 329.843132][ T5407] ? ax25cmp+0x3a5/0x470 [ 329.847725][ T5407] ? nr_dev_get+0x20e/0x450 [ 329.852569][ T5407] ? nr_route_frame+0x1a2/0xfe0 [ 329.857878][ T5407] ? nr_xmit+0x5a/0x1c0 [ 329.862258][ T5407] ? dev_hard_start_xmit+0x247/0xa20 [ 329.867993][ T5407] ? __dev_queue_xmit+0x348d/0x52c0 [ 329.873480][ T5407] ? raw_sendmsg+0x64e/0xc10 [ 329.878314][ T5407] ? ieee802154_sock_sendmsg+0x96/0xd0 [ 329.884035][ T5407] ? __sock_sendmsg+0x30f/0x380 [ 329.889116][ T5407] ? ____sys_sendmsg+0x877/0xb60 [ 329.894281][ T5407] ? ___sys_sendmsg+0x28d/0x3c0 [ 329.899361][ T5407] ? __x64_sys_sendmsg+0x307/0x4a0 [ 329.904716][ T5407] ? x64_sys_call+0xc4b/0x3b50 [ 329.909753][ T5407] ? do_syscall_64+0xcf/0x1e0 [ 329.914660][ T5407] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 329.921190][ T5407] ? __alloc_skb+0x35b/0x7a0 [ 329.926037][ T5407] ? alloc_skb_with_frags+0xc8/0xbf0 [ 329.931577][ T5407] ? sock_alloc_send_pskb+0xa81/0xbf0 [ 329.937163][ T5407] ? raw_sendmsg+0x367/0xc10 [ 329.942011][ T5407] ? ieee802154_sock_sendmsg+0x96/0xd0 [ 329.948037][ T5407] ? __sock_sendmsg+0x30f/0x380 [ 329.953171][ T5407] ? ____sys_sendmsg+0x877/0xb60 [ 329.958343][ T5407] ? ___sys_sendmsg+0x28d/0x3c0 [ 329.963435][ T5407] ? __x64_sys_sendmsg+0x307/0x4a0 [ 329.968784][ T5407] ? x64_sys_call+0xc4b/0x3b50 [ 329.973808][ T5407] ? do_syscall_64+0xcf/0x1e0 [ 329.978733][ T5407] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 329.985130][ T5407] ? kmem_cache_alloc_node+0x613/0xc50 [ 329.990880][ T5407] ? __alloc_skb+0x1e9/0x7a0 [ 329.995738][ T5407] ? alloc_skb_with_frags+0xc8/0xbf0 [ 330.001309][ T5407] ? kmsan_get_metadata+0x146/0x1d0 [ 330.006742][ T5407] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 330.012896][ T5407] ? kmsan_get_metadata+0x146/0x1d0 [ 330.018388][ T5407] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 330.024441][ T5407] ? should_fail_ex+0x4a/0x800 [ 330.029529][ T5407] ? kmsan_get_metadata+0x146/0x1d0 [ 330.034972][ T5407] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 330.041121][ T5407] __msan_warning+0x95/0x120 [ 330.046029][ T5407] ax25cmp+0x3a5/0x470 [ 330.050421][ T5407] nr_dev_get+0x20e/0x450 [ 330.055051][ T5407] nr_route_frame+0x1a2/0xfe0 [ 330.059986][ T5407] ? validate_xmit_xfrm+0x8b/0x1bb0 [ 330.065544][ T5407] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 330.071633][ T5407] ? kmsan_get_metadata+0x146/0x1d0 [ 330.077100][ T5407] nr_xmit+0x5a/0x1c0 [ 330.081360][ T5407] ? __pfx_nr_xmit+0x10/0x10 [ 330.086166][ T5407] dev_hard_start_xmit+0x247/0xa20 [ 330.091676][ T5407] __dev_queue_xmit+0x348d/0x52c0 [ 330.096999][ T5407] ? __dev_queue_xmit+0x352/0x52c0 [ 330.102395][ T5407] ? _copy_from_iter+0x974/0x24e0 [ 330.107805][ T5407] raw_sendmsg+0x64e/0xc10 [ 330.112539][ T5407] ? __pfx_raw_sendmsg+0x10/0x10 [ 330.117749][ T5407] ieee802154_sock_sendmsg+0x96/0xd0 [ 330.123295][ T5407] ? __pfx_ieee802154_sock_sendmsg+0x10/0x10 [ 330.129570][ T5407] ? __pfx_ieee802154_sock_sendmsg+0x10/0x10 [ 330.135840][ T5407] __sock_sendmsg+0x30f/0x380 [ 330.140750][ T5407] ____sys_sendmsg+0x877/0xb60 [ 330.145793][ T5407] ___sys_sendmsg+0x28d/0x3c0 [ 330.150702][ T5407] ? __rcu_read_unlock+0x7b/0xe0 [ 330.155966][ T5407] ? __fget_files+0x513/0x5e0 [ 330.160968][ T5407] ? kmsan_get_metadata+0x146/0x1d0 [ 330.166392][ T5407] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 330.172421][ T5407] __x64_sys_sendmsg+0x307/0x4a0 [ 330.177609][ T5407] x64_sys_call+0xc4b/0x3b50 [ 330.182468][ T5407] do_syscall_64+0xcf/0x1e0 [ 330.187225][ T5407] ? clear_bhb_loop+0x25/0x80 [ 330.192284][ T5407] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 330.198483][ T5407] RIP: 0033:0x7f38ce87de69 [ 330.203129][ T5407] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 330.223094][ T5407] RSP: 002b:00007f38cf5970c8 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 330.231756][ T5407] RAX: ffffffffffffffda RBX: 00007f38ce9abf80 RCX: 00007f38ce87de69 [ 330.239907][ T5407] RDX: 0000000000000000 RSI: 0000000020000200 RDI: 0000000000000004 [ 330.248324][ T5407] RBP: 00007f38ce8ca47a R08: 0000000000000000 R09: 0000000000000000 [ 330.256462][ T5407] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 330.264707][ T5407] R13: 000000000000000b R14: 00007f38ce9abf80 R15: 00007ffd089e9ca8 [ 330.273290][ T5407] [ 330.276806][ T5407] Kernel Offset: disabled [ 330.281236][ T5407] Rebooting in 86400 seconds..