last executing test programs: 55.638539683s ago: executing program 1 (id=341): unshare(0x2c060000) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001c40)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000380)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) r4 = syz_io_uring_setup(0x10e, &(0x7f0000000140), &(0x7f0000000240)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f0000000340)=@IORING_OP_WRITE={0x17, 0xd, 0x2004, @fd=r4, 0x325d, 0x0, 0x0, 0x14, 0x1}) io_uring_enter(r4, 0x47f9, 0x0, 0x0, 0x0, 0x0) rt_sigsuspend(&(0x7f0000000040)={[0x20000001]}, 0x8) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r7 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) io_uring_setup(0x3e24, &(0x7f0000000080)={0x0, 0x6de, 0x1826, 0x0, 0x121}) write$P9_RSTATu(r7, &(0x7f0000000580)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0xee01], 0x20e) 54.532492984s ago: executing program 1 (id=343): syz_emit_vhci(&(0x7f0000000340)=ANY=[@ANYBLOB="02c82081007d00010004070400ffff000007ff0500ff7f08000a050200060005015a00cd0003000100010280000409010c08f30000049f6c040904030504000400ef02090001000000010000000800080001021b000610ff02a516ab8300000c0000002f01000006100001f8ff5b3c7e6700010000020000000c0805001000060003998385ed5a2b92de51ab32a88f68bbdff64ff3b3d4969d03344cd642be490f4016eadd65adce0851"], 0x86) 54.255886765s ago: executing program 1 (id=345): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x40000000000008b}, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) prlimit64(0x0, 0x1, &(0x7f0000000680)={0x7, 0x100000000}, &(0x7f00000006c0)) bind$inet6(0xffffffffffffffff, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f0000847fff)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x400000, @private0={0xfc, 0x0, '\x00', 0x1}}, 0x1c) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) socket(0x1f, 0x0, 0xd) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x0) socket$rds(0x15, 0x5, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r3 = accept(r0, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f0000000080)={0x0, 0xe, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[], 0xfffffdef}}, 0x0) recvfrom(r2, &(0x7f0000000180)=""/60, 0xfffffffffffffecb, 0x500, 0x0, 0x0) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000002400)=ANY=[@ANYBLOB="b8000000", @ANYRES16, @ANYBLOB="01000000000000000000010000006c0008806800005b9f000000010000001400040002000000e0000001000000000000000024000100975c9d81c983c8209ee781254b899f8ed925ae9f0923c23c62f53c57cdbf691c24000200eff93d58460ea431f2cbc763b0372ada500ed7445bf5afdd0619ce173f1db71724000300b08073e8d44e91e3da922c22438244bb885c69e269c8e9d835b114293a4ddc6e14000200776730"], 0xb8}}, 0x0) 53.184017294s ago: executing program 1 (id=352): socket(0x1e, 0x4, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={0x0}, 0x10) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) bind$vsock_stream(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet6(0xa, 0x806, 0x0) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e23}, 0x1c) listen(r1, 0x3) r2 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r2, &(0x7f0000772000)={0x2, 0x4e23}, 0x10) r3 = accept4(r1, 0x0, 0x0, 0x0) sendmmsg(r3, &(0x7f0000001500), 0x588, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 52.164836528s ago: executing program 1 (id=357): mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8003, &(0x7f0000000000)=0x9, 0x8, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x1, 0x8, 0x8}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000400000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000280)={{r0}, &(0x7f0000000080), &(0x7f00000006c0)='%-010d \x00'}, 0x20) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) 51.983988862s ago: executing program 1 (id=358): r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x882) write$evdev(r0, &(0x7f0000000000), 0x100000008) ioctl$EVIOCGLED(r0, 0x80404519, 0x0) 41.197749606s ago: executing program 0 (id=402): syz_emit_vhci(&(0x7f0000000340)=ANY=[@ANYBLOB="02c82081007d00010004070400"], 0x86) 41.197502056s ago: executing program 2 (id=403): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x40000000000008b}, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) prlimit64(0x0, 0x1, &(0x7f0000000680)={0x7, 0x100000000}, &(0x7f00000006c0)) sendto$inet6(0xffffffffffffffff, &(0x7f0000847fff)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x400000, @private0={0xfc, 0x0, '\x00', 0x1}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x85, &(0x7f0000000280)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}}, 0x90) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) socket(0x1f, 0x0, 0xd) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x0) socket$rds(0x15, 0x5, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r3 = accept(r0, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f0000000080)={0x0, 0xe, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[], 0xfffffdef}}, 0x0) recvfrom(r2, &(0x7f0000000180)=""/60, 0xfffffffffffffecb, 0x500, 0x0, 0x0) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000002400)=ANY=[@ANYBLOB="b8000000", @ANYRES16, @ANYBLOB="01000000000000000000010000006c0008806800005b9f000000010000001400040002000000e0000001000000000000000024000100975c9d81c983c8209ee781254b899f8ed925ae9f0923c23c62f53c57cdbf691c24000200eff93d58460ea431f2cbc763b0372ada500ed7445bf5afdd0619ce173f1db71724000300b08073e8d44e91e3da922c22438244bb885c69e269c8e9d835b114293a4ddc6e14000200776730"], 0xb8}}, 0x0) 41.099897803s ago: executing program 0 (id=404): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x1, 0x5, 0x7fe2, 0x1}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10) syz_emit_ethernet(0x3a, &(0x7f0000000400)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x6, 0x4, 0x0, 0x0, 0x2c, 0x2, 0x0, 0x0, 0x5, 0x0, @dev, @private=0xa010100, {[@ssrr={0x89, 0x3, 0xce}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x5}}}}}}, 0x0) 40.867986331s ago: executing program 0 (id=405): socket(0x1e, 0x4, 0x0) socket(0x1e, 0x4, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) bind$vsock_stream(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet6(0xa, 0x806, 0x0) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e23}, 0x1c) listen(r1, 0x3) r2 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r2, &(0x7f0000772000)={0x2, 0x4e23}, 0x10) r3 = accept4(r1, 0x0, 0x0, 0x0) sendmmsg(r3, &(0x7f0000001500), 0x588, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 40.754451349s ago: executing program 0 (id=406): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff"], 0x15) r2 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) pipe2$9p(0x0, 0x0) syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000740)={[{@nodiscard}, {}, {@acl}, {@alloc_mode_reuse}, {@fastboot}, {@disable_roll_forward}, {@background_gc_on}, {@nobarrier}, {@noflush_merge}, {@resuid}, {@fsync_mode_strict}, {@adaptive_mode}, {@jqfmt_vfsold}, {@noinline_dentry}]}, 0x1, 0x5505, &(0x7f0000002480)="$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") r3 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x8c}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) sendfile(r6, r3, 0x0, 0x7f1) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000640)=ANY=[@ANYBLOB='h'], 0x168) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000400), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) 39.824066167s ago: executing program 2 (id=409): r0 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) r3 = openat$cgroup_procs(r1, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) open_by_handle_at(r3, &(0x7f0000000100)=@ocfs2={0xc, 0xfe, {0x5}}, 0x260040) 38.584071188s ago: executing program 2 (id=413): syz_emit_vhci(&(0x7f0000000340)=ANY=[@ANYBLOB="02c82081007d00010004070400"], 0x86) 38.360018705s ago: executing program 2 (id=414): bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000000)={0xffffffffffffffff, 0xe0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0xc9d7, 0x9, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r0, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000740)={r0, &(0x7f0000000000), &(0x7f00000000c0)=""/109}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a40)={&(0x7f0000000980)='sys_enter\x00', r2}, 0x10) utimensat(0xffffffffffffff9c, 0x0, 0x0, 0x0) 38.110051213s ago: executing program 2 (id=416): syz_mount_image$vfat(&(0x7f0000000180), &(0x7f0000000040)='./file0\x00', 0x300001a, &(0x7f0000000b00)=ANY=[@ANYRES8=0x0, @ANYRES16], 0xd, 0x2a0, &(0x7f0000000840)="$eJzs3c9qM1UUAPAzSZpGXSSIG0VwQBeuyle3bhrlE8SulAjqQoNtQZJQaCFgBWNXfQKXvoeP4MaNbyC4Fdy1i8rIZGaahKZ/qDGF+vutDnPnnHsyt6SrnPnq9dFg7zCJ0/Pfo9VKorYTO3GRRCdqUfkhGgEAPB0XWRZ/ZQ/JbNRW3w0AsA7F///CY/cCAKzHJ599/lF3d/f5x2nailfbZ+NeEhGjs3GvWO8exDcxjP14Fu24jMiuFPEHH+4+j0aa68Rbo8m4l2eOvvy1rN/9M2Kavx3t6CzP304Lc/mTcW8jXow0ugcbVavteGV5/jtL8qPXjLffnOt/K9rx29dxGMPYizx3lv/9dpq+n/14/t0X+TZ5flKL3ub0vpmsvs5zAQAAAAAAAAAAAAAAAAAAAADgadtK06QY3zOd35NfKufv1C+n61tppbM4n6fIT6pCxXygLMoRPZMsfqrm6zxL0zQrb5zlN+K1hhcLAAAAAAAAAAAAAAAAAAAAQO7425NBfzjcP1pJUE0DqH7W/9A6O3NX3oiTQb9+c8HN++81P20g7/XWm6PRiBU9lruCF/J+Vl55c3a4n0YRVAez0r1efq8oejLop+VS9ZAH/eSuvVrVwf08v9SMf9tYNv2TuMwWz7R11epiVnNFT6P50tKlv7Msu1+dd/8ozqi8kkxHbNxv940yWPoB86B1/Sx+ubngjV8Z9ZV88QAAAAAAAAAAAAAAAAAAANfMfvS7ZPH01tTaf9YUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKzZ7P3/VdCKiMUr14JJmXzbPWXQjKPjR/6IAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/A/8EwAA//9s0FAH") bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) sendto$inet(0xffffffffffffffff, &(0x7f0000001600), 0x0, 0x0, &(0x7f0000000140)={0x2, 0x4e20, @rand_addr=0x64010102}, 0x10) truncate(&(0x7f0000000080)='./file1\x00', 0xc00) 37.831928214s ago: executing program 2 (id=418): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket$netlink(0x10, 0x3, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r2}, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) writev(r0, 0x0, 0x0) 37.078309899s ago: executing program 0 (id=419): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x40000000000008b}, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) prlimit64(0x0, 0x1, &(0x7f0000000680)={0x7, 0x100000000}, &(0x7f00000006c0)) sendto$inet6(0xffffffffffffffff, &(0x7f0000847fff)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x400000, @private0={0xfc, 0x0, '\x00', 0x1}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x85, &(0x7f0000000280)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}}, 0x90) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) socket(0x1f, 0x0, 0xd) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x0) socket$rds(0x15, 0x5, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r3 = accept(r0, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f0000000080)={0x0, 0xe, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[], 0xfffffdef}}, 0x0) recvfrom(r2, &(0x7f0000000180)=""/60, 0xfffffffffffffecb, 0x500, 0x0, 0x0) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000002400)=ANY=[@ANYBLOB="b8000000", @ANYRES16, @ANYBLOB="01000000000000000000010000006c0008806800005b9f000000010000001400040002000000e0000001000000000000000024000100975c9d81c983c8209ee781254b899f8ed925ae9f0923c23c62f53c57cdbf691c24000200eff93d58460ea431f2cbc763b0372ada500ed7445bf5afdd0619ce173f1db71724000300b08073e8d44e91e3da922c22438244bb885c69e269c8e9d835b114293a4ddc6e14000200776730"], 0xb8}}, 0x0) 35.910485225s ago: executing program 0 (id=420): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, 0x0, &(0x7f0000000200)) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000d40)=@newqdisc={0x1ac, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xd}, {0xffff, 0xffff}, {0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x4}}}, @TCA_STAB={0xa8, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0xd, 0xe5, 0x84, 0x21, 0x1, 0x1, 0x7, 0x6}}, {0x10, 0x2, [0x500, 0xb, 0xec, 0x7, 0x4, 0x2]}}, {{0x1c, 0x1, {0xc4, 0x9, 0x7fff, 0xf, 0x2, 0x7, 0x2b5, 0x1}}, {0x6, 0x2, [0x6]}}, {{0x1c, 0x1, {0xd8, 0x2, 0x0, 0x400, 0x0, 0xfffffffd, 0x9, 0x4}}, {0xc, 0x2, [0x5, 0x5, 0x5, 0x5]}}, {{0x1c, 0x1, {0x0, 0x40, 0x4, 0x10, 0x1, 0x9, 0x5a, 0x5}}, {0xe, 0x2, [0x3, 0xff3, 0xff, 0x364, 0x7]}}]}, @TCA_STAB={0x8c, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x7, 0x7, 0x0, 0x9b0a, 0x1, 0x6bec, 0x400, 0x5}}, {0xe, 0x2, [0xb, 0x9, 0x74a4, 0xfeff, 0x8]}}, {{0x1c, 0x1, {0xa, 0x40, 0x0, 0x4, 0x0, 0xfffffffe, 0x4, 0x4}}, {0xc, 0x2, [0x1000, 0x9, 0x4, 0x3]}}, {{0x1c, 0x1, {0x7, 0x2, 0xfff, 0x6, 0x2, 0xbefc, 0x0, 0x9}}, {0x16, 0x2, [0x2, 0x2, 0x6, 0xfff9, 0x101, 0x60, 0xe, 0xaa13, 0x3b1]}}]}]}, 0x1ac}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0xb, 0x0, 0x0, 0x0, {}, {}, {0xd, 0x1}}, [@filter_kind_options=@f_basic={{0xa}, {0xc, 0x2, [@TCA_BASIC_CLASSID={0x8, 0x1, {0x10, 0xfff2}}]}}]}, 0x3c}}, 0x0) 11.069599865s ago: executing program 3 (id=467): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff"], 0x15) r2 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) pipe2$9p(0x0, 0x0) syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000740)={[{@nodiscard}, {}, {@acl}, {@alloc_mode_reuse}, {@fastboot}, {@disable_roll_forward}, {@background_gc_on}, {@nobarrier}, {@noflush_merge}, {@resuid}, {@fsync_mode_strict}, {@adaptive_mode}, {@jqfmt_vfsold}, {@noinline_dentry}]}, 0x1, 0x5505, &(0x7f0000002480)="$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") r3 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) sendfile(r7, r3, 0x0, 0x7f1) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000640)=ANY=[@ANYBLOB='h'], 0x168) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000400), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) 10.923684465s ago: executing program 4 (id=468): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x9, 0x4, 0x1, 0x4}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x79, 0x10}, [@ldst={0x2, 0x0, 0x3}], {0x95, 0x0, 0x74}}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195}, 0x48) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000000)={0x0, 0x0, 0x357ba0081129ee2a}, 0xc) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000440)={&(0x7f0000000300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x7, [@const={0x3, 0x0, 0x0, 0xa, 0x5}]}, {0x0, [0x0, 0x5f, 0x61, 0x5f, 0x2e]}}, &(0x7f00000003c0)=""/67, 0x2b, 0x43}, 0x20) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) write$P9_RREAD(r4, &(0x7f0000000000)=ANY=[@ANYRESDEC=r3, @ANYRESDEC], 0x100b) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0xc, 0x11, &(0x7f00000001c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x93c}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@map_fd={0x18, 0xa, 0x1, 0x0, r1}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000140)='GPL\x00', 0xfffffffb, 0x3a, &(0x7f00000002c0)=""/58, 0x41000, 0x8, '\x00', 0x0, 0xf, r2, 0x8, &(0x7f0000000480)={0x3, 0x2}, 0x8, 0x10, &(0x7f00000004c0)={0x4, 0x4, 0x4, 0x7}, 0x10, 0x0, r4, 0x6, 0x0, &(0x7f0000000500)=[{0x2, 0x4, 0x10, 0x7}, {0x4, 0x2, 0x9, 0x2}, {0x4, 0x2, 0xa, 0xa}, {0x4, 0x2, 0x4, 0x7}, {0x5, 0x4, 0x0, 0x7}, {0x0, 0x5, 0x9, 0x2}], 0x10, 0x6}, 0x90) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZE(r5, 0x5609, &(0x7f0000000440)={0x4, 0x4, 0x3}) dup(r5) socket$netlink(0x10, 0x3, 0x8) socket$nl_netfilter(0x10, 0x3, 0xc) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0x8, 0xc}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r6], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$VT_SETMODE(0xffffffffffffffff, 0x5602, &(0x7f0000000340)={0x1, 0x2, 0x9, 0x9, 0x28d7}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0x1010e, &(0x7f0000000600)={[{@errors_remount}, {@data_journal}, {@data_err_ignore}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x20}}, {@resuid}, {@block_validity}]}, 0x1, 0x450, &(0x7f0000000bc0)="$eJzs28tvG8UfAPDvrpP219cvoZRHH0CgICIeSZMW6IELCCQOICFxKceQpFWp26AmSLSqICBUjqgSd8QRib+AE1wQcELiCndUqUK9UDgZrb1bP2rn6WQBfz7SJjM7Y898PTv27K4dwMAay/4kEXsj4peIGGlk2yuMNf7dunll9s+bV2aTqNXe+D2p1/vj5pXZomrxuD15ZjyNSD9O4nCXdhcvXT43U63OX8zzk0vn35lcvHT56bPnZ87Mn5m/MH3y5InjU889O/1MX+K8K+vrofcXjhx85c1rr82euvbWD18lRfwdcfTJ2EqFj9VqfW6uXPta0slQiR1hXSoRkQ3XcH3+j0QlmoM3Ei9/VGrngC1Vy/UoXq4B/2FJlN0DoBzFB312/lts27f6KN+NFxonQFnct/KtUTIUaV5nuOP8tp/GIuLU8l+fZ1useh3CiTUAsHnfZOufp7qt/9K4t6Xe//N7Q6P5vZT9EXF3RByIiHsi6nXvi4j719l+502SO9c/6fUNBbZG2frv+fzeVvv6r1j9xWglz+2rxz+cnD5bnT+WvybjMbwzy0+t0Ma3L/38aa+y1vVftmXtF2vBvB/Xh3a2P2ZuZmlmMzG3uvFhxKGhbvEnt1ebSUQcjIhDG2zj7BNfHulVtnr8K+jDcrj2RcTjjfFfjo74C8nK9ycn/xfV+WOTxVFxpx9/uvp6r/Y3FX8fZOO/u+vxfzv+0aT1fu3i+tu4+usnPc9pJjZ0/Dd37Mj/vzeztHRxKmJH8mqj0637p5uPLfJF/Sz+8aPd5//+aL4ShyMiO4gfiIgHI+KhfOwejohHIuLoCvF//+Kjb/cq+yeM/1zH+I+2V+kY/2ZiR3Tu6Z6onPvu6/ZnbCbX9v53op4az/es5f1vLf3a2NEMAAAA/z5pROyNJJ24nU7TiYnGd/gPxO60urC49OTphXcvzDV+IzAaw2lxpWuk5XroVH5aX+SnO/LH8+vGn1V21fMTswvVubKDhwG3p8f8z/xWKbt3wJbztTIYXOY/DC7zHwaX+Q+Dq8v831VGP4Dt1+3z/4MS+gFsv47577YfDBDn/zC4zH8YXK3zPymxH8C2WtwVq/9IXkLijkSkW91EcYxuQzjJFs+CvVvS53wKtxcly43d63nCWpeikt6QAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+uzvAAAA///dTt9J") ftruncate(0xffffffffffffffff, 0x2000009) 9.528443098s ago: executing program 4 (id=469): socket$alg(0x26, 0x5, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000440)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180), 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$OBJ_PIN_MAP(0x6, 0x0, 0x0) prlimit64(0x0, 0x7, &(0x7f0000000080), 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000300)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x8c80, &(0x7f0000000540)={[{@fmask={'fmask', 0x3d, 0x2}}, {@discard}, {@umask={'umask', 0x3d, 0x3}}, {@keep_last_dots}, {@allow_utime={'allow_utime', 0x3d, 0x801}}, {@dmask={'dmask', 0x3d, 0x8}}, {@errors_continue}, {}, {@iocharset={'iocharset', 0x3d, 'cp850'}}, {@discard}]}, 0x3, 0x1510, &(0x7f0000003640)="$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") syz_mount_image$exfat(0x0, &(0x7f0000000180)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x2004800, 0x0, 0x1, 0x0, &(0x7f0000000000)) io_setup(0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4400000010001fff00"/18, @ANYRES32=0x0, @ANYBLOB="00000000000000002400128009000100626f6e640000000014000280050001000400000008001900ffff8099774e089e0b5b8d24709c498bc9cc7f60fdc26a47fb20621c5f5d4452fdb6230eac3605e1fa4a7bf18ea04200155e27fe0b0000f3eb83bbb0116040b069cf846f66db7aac4b4a03a45e161c89c8ae475d1a110e84a0904eca0e9a2c90d8eebbff14cbbc381ba9565ba7caa9ad116680fc53d13213126d649fd82dca9e3406111c1fdaed8e038001"], 0x44}, 0x1, 0x0, 0x0, 0x800}, 0x0) syz_emit_vhci(&(0x7f0000000340)=ANY=[@ANYBLOB="043e1f0a00"], 0x22) 9.319850273s ago: executing program 4 (id=470): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000200)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000004300000008000300", @ANYRES32=r2, @ANYBLOB='\f\x00X'], 0x28}}, 0x0) 5.659160393s ago: executing program 3 (id=471): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xfff, 0x4}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1807000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf1a2ad3c249c95b7, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1, 0xffffffffffffffff}, &(0x7f0000000180), &(0x7f00000001c0)}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r3}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000027c0)=@base={0x4, 0x0, 0x0, 0x10005}, 0x48) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r6 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@file={0x0, './file0/file0\x00'}, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount$overlay(0x0, 0x0, &(0x7f0000000340), 0x0, 0x0) accept$inet(r0, &(0x7f0000000500)={0x2, 0x0, @loopback}, &(0x7f0000000580)=0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r9 = socket$igmp6(0xa, 0x3, 0x2) sendmmsg$inet6(r9, &(0x7f0000003080)=[{{&(0x7f0000000180)={0xa, 0x0, 0x3, @mcast1}, 0x1c, &(0x7f0000001b40)=[{&(0x7f00000007c0)='E', 0x1}, {0x0}, {&(0x7f0000000a40)}, {&(0x7f0000000440)}], 0x4}}, {{&(0x7f0000002e40)={0xa, 0x0, 0x6, @mcast2, 0x2}, 0x1c, &(0x7f0000002f40)=[{&(0x7f0000002e80)}], 0x1, &(0x7f0000000280)=ANY=[@ANYRES32, @ANYRESHEX=r5, @ANYRES8=r2, @ANYRES8=r2, @ANYRES64=r4, @ANYRES8, @ANYRES64], 0x18}}], 0x2, 0x0) capset(&(0x7f0000000980)={0x19980330, r6}, &(0x7f0000000ac0)={0x0, 0x1, 0xe48, 0x7f, 0x4, 0x7fffffff}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="700000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000480012800b000100697036746e6c0000380002800400130006001000000000000800080000000000050006008a0000000600100000000000060012004e240000050004000000000008000300"], 0x70}}, 0x0) 4.316072402s ago: executing program 4 (id=472): setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000140)=0x51c8, 0x4) 4.199810591s ago: executing program 4 (id=473): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.swap.events\x00', 0x275a, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x2a, &(0x7f0000000100)=r3, 0x4) socket$igmp(0x2, 0x3, 0x2) socket(0x840000000002, 0x3, 0xff) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='net/raw\x00') preadv(r4, &(0x7f0000000300)=[{&(0x7f00000000c0)=""/118, 0x76}], 0x1, 0xd, 0x0) sendmsg$unix(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000280)="826d87688c04", 0x6}, {&(0x7f0000001a40)="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", 0xebb}, {&(0x7f0000000540)="099671d5cc1c44b24be5f0b554a84dd159f092facfcc1608c07e12966411e047d04072012c5658fa9f4480017d75304087783474b6126de32ffac758370dcc11c31ca07a4c29d36195a28e6d81ba08", 0x4f}, {&(0x7f00000005c0)="4095deb184afc55827d7fe1aae962ef27077c745a280b73e46357c060b83e42c8bc589e0915bcf553be41a98413a1345e72406fb60e21ef6d4cb6029d5398fc4ec6a41ae78d9f3ef1db443bb0e644578b654a3df562e0b3c776a07dbcd21012b74fd298cc4cf25808997e41bf9f3c330d3cfa6122d332ad46f19b8d48d5440dce0dba13edd736379b65d74", 0x8b}], 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18}, 0x0) recvmsg(r1, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x2) sendmmsg$inet6(r0, &(0x7f0000007300)=[{{&(0x7f00000003c0)={0xa, 0x0, 0x100000, @mcast1}, 0x1c, &(0x7f0000000000)=[{&(0x7f0000000100)='|', 0x1}], 0x1}}], 0x1, 0x8085) readv(r0, &(0x7f00000000c0)=[{&(0x7f0000000140)=""/117, 0x75}], 0x1) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000200)={0x3, 0x0, &(0x7f0000000040)={&(0x7f0000000700)={0x2, 0x7, 0x0, 0x0, 0x2, 0x0, 0x70bd2a}, 0x10}, 0x1, 0x7}, 0x48904) syz_usb_connect(0x0, 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, &(0x7f0000000100)) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0) r6 = socket(0x10, 0x2, 0x0) socket$packet(0x11, 0x2, 0x300) capset(&(0x7f0000000100)={0x20080522}, &(0x7f0000000140)) r7 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)="39000000140081ae10003c000500018311001f9f660fcf066505acb612f691f3bd3508abca1be6eeb89c44ebb37358582bdbb7d553b4e92155", 0x39}], 0x1}, 0x0) recvmsg(r7, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffec1}, 0x12000) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) ioctl$FS_IOC_SETFSLABEL(r6, 0x41009432, &(0x7f0000000400)="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") getsockopt$bt_hci(0xffffffffffffffff, 0x84, 0x0, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x20000850) msgrcv(0x0, &(0x7f0000000a40), 0xde, 0x0, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a30000000003c000000090a010400000000000000000100000008000a40000000000900020073797a32000000a20900010073797a300000000008000540000000083c0000000e0a01020000000000000000010000000900020073797a32000000000900010073797a3000000000100003800c00008008000340000093"], 0xc0}}, 0x0) 1.630674509s ago: executing program 3 (id=474): unshare(0x2c060000) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001c40)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x90) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) r3 = syz_io_uring_setup(0x10e, &(0x7f0000000140), &(0x7f0000000240)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000340)=@IORING_OP_WRITE={0x17, 0xd, 0x2004, @fd=r3, 0x325d, 0x0, 0x0, 0x14, 0x1}) io_uring_enter(r3, 0x47f9, 0x0, 0x0, 0x0, 0x0) rt_sigsuspend(&(0x7f0000000040)={[0x20000001]}, 0x8) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r6 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) io_uring_setup(0x3e24, &(0x7f0000000080)={0x0, 0x6de, 0x1826, 0x0, 0x121}) write$P9_RSTATu(r6, &(0x7f0000000580)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0xee01], 0x20e) 570.725418ms ago: executing program 3 (id=475): r0 = socket(0xa, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xa) setresuid(0x0, r1, 0x0) request_key(&(0x7f00000003c0)='logon\x00', &(0x7f0000000400)={'syz', 0x3}, &(0x7f0000000440)='logon\x00', 0x0) 335.574835ms ago: executing program 4 (id=476): socket$inet6_sctp(0xa, 0x1, 0x84) r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x90) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='sched_process_wait\x00', r1}, 0x10) r3 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r2}, 0x8) close(r3) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r0, 0x8, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f00000000c0)='syzkaller\x00'}, 0x90) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000001c0)='sched_process_wait\x00', r4}, 0x10) r6 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r5}, 0x8) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000740)={r6, r4, 0x4, r4}, 0x10) 223.907653ms ago: executing program 3 (id=477): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x9, 0x4, 0x1, 0x4}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x79, 0x10}, [@ldst={0x2, 0x0, 0x3}], {0x95, 0x0, 0x74}}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195}, 0x48) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000000)={0x0, 0x0, 0x357ba0081129ee2a}, 0xc) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000440)={&(0x7f0000000300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x7, [@const={0x3, 0x0, 0x0, 0xa, 0x5}]}, {0x0, [0x0, 0x5f, 0x61, 0x5f, 0x2e]}}, &(0x7f00000003c0)=""/67, 0x2b, 0x43}, 0x20) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) write$P9_RREAD(r2, &(0x7f0000000000)=ANY=[@ANYRESDEC=r1, @ANYRESDEC], 0x100b) 0s ago: executing program 3 (id=478): r0 = socket$inet(0x2, 0x1, 0x0) r1 = dup(r0) connect$inet(r1, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xff}}, 0x10) shutdown(r0, 0x0) mlockall(0x1) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, &(0x7f0000000100)={0x0, 0xffffc5b3, 0x3, 0x9, 0x7}) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r0, 0x89f5, &(0x7f0000000000)={'sit0\x00', 0x0}) kernel console output (not intermixed with test programs): :aa:aa:aa:3e) already exists on: batadv_slave_0 [ 48.278743][ T4303] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.299407][ T4303] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 48.302363][ T4303] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.309348][ T4303] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 48.312075][ T4303] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.319474][ T4303] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 48.339754][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 48.342298][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 48.344716][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 48.347269][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 48.395996][ T425] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.398217][ T425] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.427786][ T4303] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 48.439051][ T4303] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.441705][ T4303] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 48.444331][ T4303] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.446927][ T4303] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 48.456119][ T4303] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.458750][ T4303] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 48.463124][ T4382] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 48.468519][ T4303] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.476886][ T4303] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 48.486797][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 48.490565][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 48.493391][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 48.509574][ T4382] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 48.527781][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.534693][ T4303] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.537057][ T4303] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.539581][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.555727][ T4382] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 48.557246][ T4303] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.563938][ T4303] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.586210][ T36] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 48.619921][ T4382] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 48.669256][ T4386] loop2: detected capacity change from 0 to 4096 [ 48.730684][ T4350] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.732843][ T4350] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.737385][ T36] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 48.760945][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.763326][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.766257][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 48.817666][ T4386] ntfs3: loop2: failed to convert "0080" to cp864 [ 48.839309][ T4301] Bluetooth: hci3: command tx timeout [ 48.849253][ T4307] Bluetooth: hci0: command tx timeout [ 48.850898][ T4307] Bluetooth: hci2: command tx timeout [ 48.852439][ T4307] Bluetooth: hci1: command tx timeout [ 48.910922][ T4394] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 48.919507][ T4301] Bluetooth: hci4: command tx timeout [ 48.930768][ T4394] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 50.132977][ T4407] loop4: detected capacity change from 0 to 2048 [ 50.710241][ T4410] loop1: detected capacity change from 0 to 256 [ 50.810750][ T4342] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 51.081821][ T4342] usb 1-1: Using ep0 maxpacket: 16 [ 51.314586][ T4307] Bluetooth: hci1: command tx timeout [ 51.316119][ T4307] Bluetooth: hci2: command tx timeout [ 51.317637][ T4307] Bluetooth: hci0: command tx timeout [ 51.319462][ T4307] Bluetooth: hci3: command tx timeout [ 51.321045][ T4307] Bluetooth: hci4: command tx timeout [ 51.343018][ T4410] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x1aabf3fb, utbl_chksum : 0xe619d30d) [ 51.429522][ T4342] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 51.438740][ T4342] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 51.444048][ T4342] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 51.446681][ T4342] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 51.468806][ T4342] usb 1-1: config 0 descriptor?? [ 51.640241][ T4421] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 51.739152][ T4421] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 52.214139][ T4342] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0 [ 52.246612][ T4342] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0 [ 52.358198][ T4342] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0 [ 52.638072][ T4342] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0 [ 52.642062][ T4342] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0 [ 52.644060][ T4342] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0 [ 52.681175][ T4342] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0 [ 52.689668][ T4342] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0 [ 52.691694][ T4342] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0 [ 52.693693][ T4342] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0 [ 52.696409][ T4342] HID 045e:07da: Invalid code 65791 type 1 [ 52.714740][ T4342] input: HID 045e:07da as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:045E:07DA.0001/input/input2 [ 52.723797][ T4342] microsoft 0003:045E:07DA.0001: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0 [ 52.732486][ T4431] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 52.789899][ T4431] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 52.798111][ T4435] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 52.840163][ T4435] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 52.878841][ T4439] netlink: 4 bytes leftover after parsing attributes in process `syz.3.21'. [ 52.883284][ T4439] netlink: 12 bytes leftover after parsing attributes in process `syz.3.21'. [ 52.966386][ T110] usb 1-1: USB disconnect, device number 2 [ 54.264842][ T4452] loop1: detected capacity change from 0 to 40427 [ 54.276668][ T4452] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 54.286280][ T4452] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 54.303955][ T4452] F2FS-fs (loop1): Found nat_bits in checkpoint [ 54.328474][ T4452] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 54.331077][ T4452] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 54.911332][ T4479] loop4: detected capacity change from 0 to 128 [ 55.118816][ C1] TCP: request_sock_TCP: Possible SYN flooding on port 2. Sending cookies. Check SNMP counters. [ 55.952113][ T4487] loop3: detected capacity change from 0 to 256 [ 55.973777][ T4487] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xcc9b7de9, utbl_chksum : 0xe619d30d) [ 56.073009][ T27] audit: type=1326 audit(56.020:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4488 comm="syz.0.36" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffa4145ee8 code=0x0 [ 56.100250][ T4490] Cannot find set identified by id 0 to match [ 56.102604][ T4490] netlink: 224 bytes leftover after parsing attributes in process `syz.2.35'. [ 56.149305][ T4390] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 56.420527][ T4487] fuse: Bad value for 'fd' [ 56.523870][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 57.489765][ T4517] capability: warning: `syz.3.41' uses 32-bit capabilities (legacy support in use) [ 58.198547][ T4507] loop0: detected capacity change from 0 to 40427 [ 58.222793][ T4507] F2FS-fs (loop0): invalid crc value [ 58.282892][ T4507] F2FS-fs (loop0): Found nat_bits in checkpoint [ 58.292352][ T4527] netlink: 4 bytes leftover after parsing attributes in process `syz.4.47'. [ 58.296227][ T4527] netlink: 12 bytes leftover after parsing attributes in process `syz.4.47'. [ 58.342971][ T4507] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 58.497123][ T4530] Cannot find set identified by id 0 to match [ 58.499542][ T4530] netlink: 224 bytes leftover after parsing attributes in process `syz.4.48'. [ 60.126975][ T27] audit: type=1326 audit(60.070:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4549 comm="syz.0.50" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffa4145ee8 code=0x0 [ 60.379919][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 61.509359][ T4565] Cannot find set identified by id 0 to match [ 61.511808][ T4565] netlink: 224 bytes leftover after parsing attributes in process `syz.4.59'. [ 61.641784][ T4574] netlink: 4 bytes leftover after parsing attributes in process `syz.2.61'. [ 61.645458][ T4574] netlink: 12 bytes leftover after parsing attributes in process `syz.2.61'. [ 62.063739][ T27] audit: type=1326 audit(62.010:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4584 comm="syz.0.68" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffa4145ee8 code=0x0 [ 62.146872][ T4587] loop2: detected capacity change from 0 to 4096 [ 62.233178][ T4567] loop3: detected capacity change from 0 to 40427 [ 62.357004][ T4567] F2FS-fs (loop3): invalid crc value [ 62.370672][ T4567] F2FS-fs (loop3): Found nat_bits in checkpoint [ 62.445581][ T4567] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 63.978412][ T4610] netlink: 4 bytes leftover after parsing attributes in process `syz.2.75'. [ 63.995654][ T4610] netlink: 12 bytes leftover after parsing attributes in process `syz.2.75'. [ 64.156180][ T4614] Cannot find set identified by id 0 to match [ 64.158395][ T4614] netlink: 224 bytes leftover after parsing attributes in process `syz.3.72'. [ 64.184664][ T4307] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 64.198304][ T4307] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 64.201426][ T4307] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 64.204086][ T4307] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 64.206526][ T4307] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 64.208710][ T4307] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 64.495276][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 64.509804][ T27] audit: type=1326 audit(64.460:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4628 comm="syz.3.81" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff8bb45ee8 code=0x0 [ 64.522054][ T2059] ieee802154 phy0 wpan0: encryption failed: -22 [ 64.523997][ T2059] ieee802154 phy1 wpan1: encryption failed: -22 [ 64.595577][ T4617] chnl_net:caif_netlink_parms(): no params data found [ 64.677829][ T4617] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.685989][ T4617] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.689979][ T4617] device bridge_slave_0 entered promiscuous mode [ 64.707446][ T4617] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.725341][ T4617] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.727965][ T4617] device bridge_slave_1 entered promiscuous mode [ 64.821507][ T4617] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 64.826217][ T4617] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 64.879696][ T4617] team0: Port device team_slave_0 added [ 64.892681][ T4617] team0: Port device team_slave_1 added [ 64.958433][ T4617] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 64.967049][ T4617] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 65.009875][ T4617] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 65.014953][ T4617] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 65.016951][ T4617] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 65.024271][ T4617] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 65.100777][ T4617] device hsr_slave_0 entered promiscuous mode [ 65.269479][ T4617] device hsr_slave_1 entered promiscuous mode [ 66.222351][ T4617] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 66.224532][ T4617] Cannot create hsr debugfs directory [ 66.279134][ T4301] Bluetooth: hci5: command tx timeout [ 66.392449][ T4632] loop2: detected capacity change from 0 to 40427 [ 66.401247][ T4653] Cannot find set identified by id 0 to match [ 66.403644][ T4653] netlink: 224 bytes leftover after parsing attributes in process `syz.0.87'. [ 66.456155][ T4632] F2FS-fs (loop2): invalid crc value [ 66.470302][ T4632] F2FS-fs (loop2): Found nat_bits in checkpoint [ 66.530617][ T4632] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 66.698267][ T4661] netlink: 4 bytes leftover after parsing attributes in process `syz.0.90'. [ 67.242092][ T4617] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.404547][ T4652] loop3: detected capacity change from 0 to 40427 [ 67.430542][ T4652] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 67.437095][ T4652] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 67.462051][ T4617] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.477513][ T4652] F2FS-fs (loop3): Found nat_bits in checkpoint [ 67.525026][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 67.612086][ T4652] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 67.614366][ T4652] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 67.935995][ T4617] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.003285][ T27] audit: type=1326 audit(67.950:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4685 comm="syz.4.95" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff84745ee8 code=0x0 [ 68.122681][ T4617] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.359140][ T4307] Bluetooth: hci5: command tx timeout [ 69.156427][ T4695] Cannot find set identified by id 0 to match [ 69.158850][ T4695] netlink: 224 bytes leftover after parsing attributes in process `syz.2.98'. [ 69.347724][ T4617] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 69.400973][ T4617] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 69.433433][ T4617] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 69.482733][ T4617] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 69.639985][ T14] cfg80211: failed to load regulatory.db [ 69.740026][ T4617] 8021q: adding VLAN 0 to HW filter on device bond0 [ 69.783119][ T4340] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 69.786831][ T4340] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 69.796871][ T4617] 8021q: adding VLAN 0 to HW filter on device team0 [ 69.808562][ T4340] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 69.811496][ T4340] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 69.816595][ T4340] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.818564][ T4340] bridge0: port 1(bridge_slave_0) entered forwarding state [ 69.861167][ T4711] netlink: 4 bytes leftover after parsing attributes in process `syz.0.105'. [ 69.864360][ T4340] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 69.867235][ T4340] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 69.878104][ T4340] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 69.900759][ T4340] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.902819][ T4340] bridge0: port 2(bridge_slave_1) entered forwarding state [ 69.909807][ T4340] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 69.924092][ T4340] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 70.181828][ T4706] loop4: detected capacity change from 0 to 40427 [ 70.205692][ T4706] F2FS-fs (loop4): invalid crc value [ 70.252256][ T4706] F2FS-fs (loop4): Found nat_bits in checkpoint [ 70.285874][ T4604] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 70.289884][ T4604] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 70.299471][ T4604] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 70.312319][ T4427] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 70.315282][ T4427] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 70.330571][ T4706] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 70.497506][ T4340] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 70.510545][ T4301] Bluetooth: hci5: command tx timeout [ 70.519971][ T4340] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 70.587033][ T4340] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 70.589863][ T4340] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 70.631540][ T4617] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 71.116895][ T4604] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 71.119288][ T4604] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 71.147341][ T4617] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 71.897156][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 72.230504][ T27] audit: type=1326 audit(72.180:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4732 comm="syz.0.109" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffa4145ee8 code=0x0 [ 72.258439][ T4604] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 72.261470][ T4604] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 72.344311][ T4427] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 72.344700][ T4738] Cannot find set identified by id 0 to match [ 72.353497][ T4427] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 72.363812][ T4617] device veth0_vlan entered promiscuous mode [ 72.399425][ T4738] netlink: 224 bytes leftover after parsing attributes in process `syz.4.110'. [ 72.404785][ T4427] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 72.407671][ T4427] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 72.419907][ T4617] device veth1_vlan entered promiscuous mode [ 72.477635][ T4427] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 72.482132][ T4427] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 72.484905][ T4427] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 72.494701][ T4427] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 72.519142][ T4307] Bluetooth: hci5: command tx timeout [ 72.541400][ T4617] device veth0_macvtap entered promiscuous mode [ 72.551603][ T4617] device veth1_macvtap entered promiscuous mode [ 72.595938][ T4617] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.611449][ T4617] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.622983][ T4617] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.635070][ T4617] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.645898][ T4617] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.659251][ T4617] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.673100][ T4617] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.684837][ T4617] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.696341][ T4617] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.709185][ T4617] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.725890][ T4617] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.742594][ T4427] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 72.745715][ T4427] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 72.748411][ T4427] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 72.761826][ T4427] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 72.775322][ T4617] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.778378][ T4617] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.788308][ T4617] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.801617][ T4617] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.813231][ T4617] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.826115][ T4617] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.838839][ T4617] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.859328][ T4617] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.870978][ T4617] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.882708][ T4617] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.920427][ T4617] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.938127][ T4518] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 72.941417][ T4518] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 72.945933][ T4617] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.948338][ T4617] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.987545][ T4617] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.001828][ T4617] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.171325][ T4427] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.173575][ T4427] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.177005][ T4427] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 73.279520][ T4411] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.281942][ T4411] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.322623][ T307] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 74.184301][ T4753] loop0: detected capacity change from 0 to 40427 [ 74.222535][ T4753] F2FS-fs (loop0): invalid crc value [ 74.242681][ T4753] F2FS-fs (loop0): Found nat_bits in checkpoint [ 74.310016][ T4753] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 74.894649][ T27] audit: type=1326 audit(74.840:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4770 comm="syz.4.123" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff84745ee8 code=0x0 [ 75.332425][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 75.617807][ T4784] netlink: 4 bytes leftover after parsing attributes in process `syz.1.126'. [ 75.996932][ T4791] loop4: detected capacity change from 0 to 4096 [ 76.534092][ T4797] Cannot find set identified by id 0 to match [ 76.539109][ T4797] netlink: 224 bytes leftover after parsing attributes in process `syz.4.131'. [ 76.791424][ T4793] loop0: detected capacity change from 0 to 40427 [ 76.811486][ T4793] F2FS-fs (loop0): invalid crc value [ 76.827053][ T4793] F2FS-fs (loop0): Found nat_bits in checkpoint [ 76.878845][ T4307] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 76.882561][ T4307] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 76.885007][ T4307] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 76.888015][ T4307] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 76.891085][ T4307] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 76.893288][ T4307] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 77.022079][ T4793] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 77.436857][ T4802] chnl_net:caif_netlink_parms(): no params data found [ 77.683617][ T4802] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.685705][ T4802] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.688376][ T4802] device bridge_slave_0 entered promiscuous mode [ 77.692657][ T4802] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.694615][ T4802] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.697176][ T4802] device bridge_slave_1 entered promiscuous mode [ 77.742116][ T4802] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.747342][ T4802] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.784584][ T27] audit: type=1326 audit(77.730:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4819 comm="syz.2.137" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff96d45ee8 code=0x0 [ 77.853537][ T4802] team0: Port device team_slave_0 added [ 77.856774][ T4802] team0: Port device team_slave_1 added [ 77.923295][ T4802] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 77.926448][ T4802] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.969392][ T4802] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.003475][ T4802] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.005674][ T4802] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.024651][ T4802] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.132417][ T4802] device hsr_slave_0 entered promiscuous mode [ 78.174531][ T4802] device hsr_slave_1 entered promiscuous mode [ 78.212486][ T4802] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 78.214687][ T4802] Cannot create hsr debugfs directory [ 78.563908][ T4802] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.919284][ T4301] Bluetooth: hci6: command tx timeout [ 78.958051][ T4802] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.088479][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 79.140930][ T4802] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.271183][ T4802] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.525978][ T4802] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 79.563810][ T4842] loop2: detected capacity change from 0 to 40427 [ 79.583186][ T4842] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 79.585352][ T4842] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 79.618336][ T4802] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 79.741423][ T4842] F2FS-fs (loop2): Found nat_bits in checkpoint [ 79.749268][ T4802] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 79.765959][ T4839] loop4: detected capacity change from 0 to 40427 [ 79.781956][ T4839] F2FS-fs (loop4): invalid crc value [ 79.788414][ T4842] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 79.791033][ T4842] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 79.804765][ T4839] F2FS-fs (loop4): Found nat_bits in checkpoint [ 79.841351][ T4802] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 79.856187][ T4839] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 80.019955][ T4861] netlink: 4 bytes leftover after parsing attributes in process `syz.4.148'. [ 80.205764][ T27] audit: type=1326 audit(80.150:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4863 comm="syz.1.149" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffa6f45ee8 code=0x0 [ 80.209153][ T4802] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.251732][ T425] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 80.254492][ T425] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 80.264471][ T4802] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.273567][ T4864] loop4: detected capacity change from 0 to 4096 [ 80.283237][ T425] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 80.285978][ T425] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 80.298612][ T425] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.300757][ T425] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.316955][ T425] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 80.338651][ T4518] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 80.351314][ T4518] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 80.370463][ T4518] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.372601][ T4518] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.382570][ T4538] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 80.396032][ T4538] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 80.417346][ T4538] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 80.434873][ T4538] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 80.447886][ T4538] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 80.460460][ T4538] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 80.473050][ T4538] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 80.484463][ T4538] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 80.497690][ T4538] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 80.525528][ T4802] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 80.537583][ T4802] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 80.556567][ T4538] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 80.559893][ T4538] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 80.976207][ T4879] Cannot find set identified by id 0 to match [ 80.990092][ T4879] netlink: 224 bytes leftover after parsing attributes in process `syz.0.153'. [ 80.999723][ T4309] Bluetooth: hci6: command tx timeout [ 81.038051][ T4518] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 81.061254][ T4518] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 81.071383][ T4802] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.153564][ T4538] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 81.156503][ T4538] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 81.196076][ T4538] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 81.201948][ T4538] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 81.206086][ T4538] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 81.209997][ T4538] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 81.216863][ T4802] device veth0_vlan entered promiscuous mode [ 81.237414][ T4802] device veth1_vlan entered promiscuous mode [ 81.248882][ T4881] TCP: request_sock_subflow_v6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 81.298588][ T4411] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 81.304856][ T4411] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 81.309216][ T4411] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 81.318121][ T4411] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 81.344663][ T4802] device veth0_macvtap entered promiscuous mode [ 81.348792][ T4802] device veth1_macvtap entered promiscuous mode [ 81.392355][ T4802] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.395188][ T4802] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.397867][ T4802] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.444823][ T4802] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.447562][ T4802] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.460179][ T4802] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.599116][ T4802] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.602682][ T4802] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.605388][ T4802] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.622684][ T4802] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.625497][ T4802] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.628356][ T4802] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.670456][ T4802] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 81.677985][ T4427] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 81.681181][ T4427] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 81.683809][ T4427] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 81.686593][ T4427] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 81.714663][ T4802] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.717591][ T4802] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.739281][ T4802] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.742333][ T4802] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.745024][ T4802] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.747821][ T4802] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.769026][ T4802] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.772011][ T4802] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.774603][ T4802] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.777381][ T4802] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.799789][ T4802] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.802670][ T4802] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.831059][ T4802] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 81.833271][ T4427] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 81.835989][ T4427] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 81.846397][ T4802] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.848894][ T4802] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.867862][ T4802] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.871261][ T4802] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.017587][ T4340] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.028951][ T4340] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.051546][ T4340] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 82.077219][ T4340] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.081335][ T4340] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.099685][ T4518] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 83.009544][ T4897] netlink: 4 bytes leftover after parsing attributes in process `syz.3.160'. [ 83.079635][ T4309] Bluetooth: hci6: command tx timeout [ 83.141713][ T4890] loop4: detected capacity change from 0 to 40427 [ 83.146212][ T4890] F2FS-fs (loop4): invalid crc value [ 83.150315][ T4890] F2FS-fs (loop4): Found nat_bits in checkpoint [ 83.164918][ T4890] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 83.266337][ T27] audit: type=1326 audit(83.210:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4904 comm="syz.3.163" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff91545ee8 code=0x0 [ 83.359444][ T4908] TCP: request_sock_subflow_v6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 84.668658][ T4932] netlink: 4 bytes leftover after parsing attributes in process `syz.4.175'. [ 84.753921][ T4937] Cannot find set identified by id 0 to match [ 84.767496][ T4937] netlink: 224 bytes leftover after parsing attributes in process `syz.1.173'. [ 84.802538][ T4938] TCP: request_sock_subflow_v6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 85.159238][ T4309] Bluetooth: hci6: command tx timeout [ 85.420182][ T4934] loop0: detected capacity change from 0 to 40427 [ 85.453930][ T4934] F2FS-fs (loop0): invalid crc value [ 85.456940][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 85.472260][ T4934] F2FS-fs (loop0): Found nat_bits in checkpoint [ 85.535086][ T4934] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 85.922734][ T27] audit: type=1326 audit(85.870:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4949 comm="syz.0.179" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffa4145ee8 code=0x0 [ 86.873811][ T4969] TCP: request_sock_subflow_v6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 87.005600][ T4973] netlink: 12 bytes leftover after parsing attributes in process `syz.4.188'. [ 87.746009][ T4977] loop4: detected capacity change from 0 to 40427 [ 87.781051][ T4977] F2FS-fs (loop4): invalid crc value [ 87.788004][ T4977] F2FS-fs (loop4): Found nat_bits in checkpoint [ 87.839101][ T4977] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 88.806770][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 89.073191][ T4309] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 89.076598][ T4309] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 89.079959][ T4309] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 89.082865][ T4309] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 89.085438][ T4309] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 89.087669][ T4309] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 89.261131][ T5000] chnl_net:caif_netlink_parms(): no params data found [ 89.404564][ T5007] TCP: request_sock_subflow_v6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 89.565533][ T5000] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.567432][ T5000] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.571048][ T5000] device bridge_slave_0 entered promiscuous mode [ 89.580662][ T5000] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.582749][ T5000] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.597002][ T5000] device bridge_slave_1 entered promiscuous mode [ 89.618819][ T5014] netlink: 12 bytes leftover after parsing attributes in process `syz.0.201'. [ 89.639928][ T5000] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.644309][ T5000] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.902525][ T5000] team0: Port device team_slave_0 added [ 89.917324][ T5000] team0: Port device team_slave_1 added [ 90.021665][ T5000] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.031266][ T5000] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.052331][ T5022] Cannot find set identified by id 0 to match [ 90.059650][ T5000] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.079576][ T5022] netlink: 224 bytes leftover after parsing attributes in process `syz.0.203'. [ 90.108122][ T5000] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.111941][ T5000] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.142021][ T5000] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.341381][ T5000] device hsr_slave_0 entered promiscuous mode [ 90.389678][ T5000] device hsr_slave_1 entered promiscuous mode [ 90.428937][ T5000] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 90.431137][ T5000] Cannot create hsr debugfs directory [ 91.053129][ T5000] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.159229][ T4309] Bluetooth: hci7: command tx timeout [ 91.362615][ T5000] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.522841][ T5000] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.687075][ T5031] loop4: detected capacity change from 0 to 40427 [ 91.700912][ T5000] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.729359][ T5031] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 91.731676][ T5031] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 91.784908][ T5031] F2FS-fs (loop4): Found nat_bits in checkpoint [ 91.855666][ T5031] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 91.857862][ T5031] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 92.026678][ T5048] TCP: request_sock_subflow_v6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 92.239266][ T5051] netlink: 12 bytes leftover after parsing attributes in process `syz.3.212'. [ 92.358274][ T5000] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 92.538310][ T5000] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 92.610907][ T5000] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 92.675916][ T5000] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 92.916652][ T5000] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.978886][ T5000] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.994557][ T4538] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 92.997190][ T4538] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 93.029799][ T4538] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 93.033794][ T4538] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 93.047604][ T4538] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.049715][ T4538] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.104446][ T5054] loop0: detected capacity change from 0 to 40427 [ 93.123534][ T4538] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 93.150826][ T4538] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 93.154896][ T4538] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 93.174866][ T5054] F2FS-fs (loop0): invalid crc value [ 93.176791][ T4538] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.178678][ T4538] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.192429][ T5054] F2FS-fs (loop0): Found nat_bits in checkpoint [ 93.209329][ T4538] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 93.213575][ T4538] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 93.231918][ T4538] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 93.245741][ T4538] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 93.249179][ T4309] Bluetooth: hci7: command tx timeout [ 93.252676][ T5054] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 93.265937][ T4538] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 93.276452][ T4538] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 93.286559][ T4538] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 93.302757][ T4538] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 93.312008][ T4538] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 93.321553][ T4538] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 93.331984][ T5000] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 93.343599][ T4538] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 93.697812][ T5000] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.712873][ T4340] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 93.716223][ T4340] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 93.804590][ T4411] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 93.807430][ T4411] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 93.862490][ T4411] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 93.875549][ T4411] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 93.927906][ T4411] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 93.932777][ T4411] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 93.940309][ T5000] device veth0_vlan entered promiscuous mode [ 93.973806][ T5000] device veth1_vlan entered promiscuous mode [ 93.999528][ T4538] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 94.002144][ T4538] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 94.042343][ T5000] device veth0_macvtap entered promiscuous mode [ 94.066951][ T425] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 94.070032][ T425] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 94.087518][ T5000] device veth1_macvtap entered promiscuous mode [ 94.101799][ T425] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 94.104917][ T425] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 94.117444][ T5000] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 94.129871][ T5000] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.141326][ T5000] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 94.156223][ T5000] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.162973][ T5000] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 94.171416][ T5000] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.180946][ T5000] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 94.189662][ T5000] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.212063][ T5000] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 94.226965][ T5000] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.238857][ T5000] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 94.252095][ T5000] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.268159][ T5000] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 94.285591][ T5000] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.300713][ T5000] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.329409][ T4340] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 94.332373][ T4340] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 94.335562][ T5000] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 94.338534][ T5000] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.349097][ T5000] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 94.368585][ T5000] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.371841][ T5000] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 94.385184][ T5000] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.387875][ T5000] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 94.409074][ T5000] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.411840][ T5000] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 94.414675][ T5000] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.446834][ T5000] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 94.459158][ T5000] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.462621][ T5000] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 94.465343][ T5000] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.484166][ T5000] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.512915][ T425] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 94.515732][ T425] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 94.554223][ T5000] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.556614][ T5000] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.558881][ T5000] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.565988][ T5000] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.780724][ T4447] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.782957][ T4447] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.786879][ T4340] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 94.879076][ T4340] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.881575][ T4340] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.885355][ T425] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 95.331218][ T4301] Bluetooth: hci7: command tx timeout [ 95.760256][ T5087] TCP: request_sock_subflow_v6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 96.286243][ T5101] Cannot find set identified by id 0 to match [ 96.319203][ T5101] netlink: 224 bytes leftover after parsing attributes in process `syz.0.222'. [ 97.409255][ T4301] Bluetooth: hci7: command tx timeout [ 98.638914][ T5130] TCP: request_sock_subflow_v6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 98.790357][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 101.418551][ T4301] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 101.422595][ T4301] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 101.426175][ T4301] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 101.482526][ T5162] Cannot find set identified by id 0 to match [ 101.484839][ T5162] netlink: 224 bytes leftover after parsing attributes in process `syz.2.245'. [ 101.494782][ T4301] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 101.498578][ T4301] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 101.501963][ T4301] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 102.141221][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 102.645575][ T27] audit: type=1326 audit(102.590:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5181 comm="syz.1.253" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffa6f45ee8 code=0x0 [ 102.666195][ T5160] chnl_net:caif_netlink_parms(): no params data found [ 103.022171][ T5160] bridge0: port 1(bridge_slave_0) entered blocking state [ 103.024138][ T5160] bridge0: port 1(bridge_slave_0) entered disabled state [ 103.027319][ T5160] device bridge_slave_0 entered promiscuous mode [ 103.040818][ T5160] bridge0: port 2(bridge_slave_1) entered blocking state [ 103.042890][ T5160] bridge0: port 2(bridge_slave_1) entered disabled state [ 103.045572][ T5160] device bridge_slave_1 entered promiscuous mode [ 103.206113][ T5160] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 103.240184][ T5160] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 103.403547][ T5160] team0: Port device team_slave_0 added [ 103.511579][ T5160] team0: Port device team_slave_1 added [ 103.589203][ T4301] Bluetooth: hci8: command tx timeout [ 103.628310][ T5160] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 103.638372][ T5160] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 103.669087][ T5160] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 103.673882][ T5160] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 103.675888][ T5160] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 103.689365][ T5160] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 104.451306][ T5160] device hsr_slave_0 entered promiscuous mode [ 104.579702][ T5160] device hsr_slave_1 entered promiscuous mode [ 104.650284][ T5160] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 104.653697][ T5160] Cannot create hsr debugfs directory [ 104.781192][ T5224] netlink: 4 bytes leftover after parsing attributes in process `syz.0.266'. [ 104.852568][ T5230] Cannot find set identified by id 0 to match [ 104.854945][ T5230] netlink: 224 bytes leftover after parsing attributes in process `syz.1.259'. [ 105.256097][ T27] audit: type=1326 audit(105.140:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5233 comm="syz.3.268" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff91545ee8 code=0x0 [ 105.649102][ T4309] Bluetooth: hci8: command tx timeout [ 105.862896][ T5160] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.932166][ T5160] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.951626][ T5236] loop0: detected capacity change from 0 to 40427 [ 106.962966][ T5236] F2FS-fs (loop0): invalid crc value [ 106.980124][ T5236] F2FS-fs (loop0): Found nat_bits in checkpoint [ 107.179598][ T5160] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.187349][ T5236] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 107.789646][ T5265] netlink: 4 bytes leftover after parsing attributes in process `syz.3.278'. [ 107.929128][ T4301] Bluetooth: hci8: command tx timeout [ 108.063839][ T5160] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.711479][ T5160] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 108.880829][ T5160] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 108.894648][ T27] audit: type=1326 audit(108.840:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5276 comm="syz.1.284" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffa6f45ee8 code=0x0 [ 109.880906][ T5160] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 110.010254][ T4301] Bluetooth: hci8: command tx timeout [ 110.228857][ T5160] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 110.245729][ T27] audit: type=1326 audit(110.190:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5291 comm="syz.2.288" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffa2945ee8 code=0x0 [ 110.405677][ T5302] Cannot find set identified by id 0 to match [ 110.407970][ T5302] netlink: 224 bytes leftover after parsing attributes in process `syz.3.280'. [ 111.761787][ T27] audit: type=1326 audit(111.710:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5308 comm="syz.1.294" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffa6f45ee8 code=0x0 [ 112.044745][ T5160] 8021q: adding VLAN 0 to HW filter on device bond0 [ 112.086547][ T5296] loop0: detected capacity change from 0 to 40427 [ 112.122171][ T5296] F2FS-fs (loop0): invalid crc value [ 112.138415][ T5296] F2FS-fs (loop0): Found nat_bits in checkpoint [ 112.239117][ T5296] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 112.334888][ T5160] 8021q: adding VLAN 0 to HW filter on device team0 [ 112.432695][ T5312] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 112.435512][ T5312] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 112.438196][ T5312] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 112.447333][ T5312] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 112.461435][ T5312] bridge0: port 1(bridge_slave_0) entered blocking state [ 112.463504][ T5312] bridge0: port 1(bridge_slave_0) entered forwarding state [ 112.789581][ T5312] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 112.812283][ T5312] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 112.981647][ T5312] bridge0: port 2(bridge_slave_1) entered blocking state [ 112.983715][ T5312] bridge0: port 2(bridge_slave_1) entered forwarding state [ 112.986127][ T5312] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 113.059811][ T5312] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 113.219674][ T5312] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 113.409109][ T27] audit: type=1326 audit(113.330:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5331 comm="syz.3.299" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff91545ee8 code=0x0 [ 113.771280][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 113.775844][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 113.805578][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 113.817048][ T5312] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 113.822421][ T5312] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 113.827749][ T5312] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 113.841900][ T5312] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 113.908507][ T5160] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 113.916082][ T5160] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 113.927376][ T5312] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 113.930461][ T5312] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 114.347381][ T5160] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 114.381270][ T4538] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 114.383709][ T4538] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 114.843958][ T5312] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 114.846932][ T5312] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 114.929167][ T5312] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 114.940036][ T5312] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 114.950604][ T5160] device veth0_vlan entered promiscuous mode [ 114.967496][ T5312] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 114.974184][ T5312] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 114.984453][ T5160] device veth1_vlan entered promiscuous mode [ 115.046341][ T5312] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 115.049814][ T5312] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 115.052467][ T5312] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 115.069841][ T5312] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 115.092608][ T5160] device veth0_macvtap entered promiscuous mode [ 115.101834][ T5160] device veth1_macvtap entered promiscuous mode [ 115.152607][ T5160] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 115.155568][ T5160] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 115.158163][ T5160] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 115.189002][ T5160] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 115.191798][ T5160] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 115.215070][ T5160] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 115.217954][ T5160] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 115.235428][ T5160] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 115.238196][ T5160] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 115.255727][ T5160] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 115.258491][ T5160] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 115.280477][ T5160] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 115.283288][ T5160] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 115.302323][ T5160] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 115.305035][ T5160] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 115.320012][ T5160] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 115.321265][ T5363] Cannot find set identified by id 0 to match [ 115.329803][ T5160] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 115.333935][ T5312] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 115.336639][ T5312] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 115.339868][ T5312] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 115.342699][ T5312] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 115.349497][ T5160] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 115.351490][ T5363] netlink: 224 bytes leftover after parsing attributes in process `syz.3.302'. [ 115.377563][ T5160] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 115.380834][ T5160] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 115.383781][ T5160] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 115.386454][ T5160] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 115.409283][ T5160] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 115.419250][ T5160] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 115.422085][ T5160] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 115.429863][ T5160] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 115.432611][ T5160] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 115.449169][ T5160] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 115.452047][ T5160] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 115.487229][ T5160] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 115.490600][ T5160] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 115.493262][ T5160] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 115.496020][ T5160] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 115.529746][ T5160] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 115.534551][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 115.537579][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 115.542808][ T5160] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.559034][ T5160] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.565661][ T5160] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.568009][ T5160] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.720401][ T5312] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 115.722753][ T5312] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 115.726961][ T4447] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 115.769780][ T5252] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 115.772072][ T5252] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 115.776313][ T4447] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 117.474858][ T27] audit: type=1326 audit(117.420:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5381 comm="syz.0.311" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffa4145ee8 code=0x0 [ 119.291298][ T5409] netlink: 4 bytes leftover after parsing attributes in process `syz.3.318'. [ 119.440025][ T5409] netlink: 12 bytes leftover after parsing attributes in process `syz.3.318'. [ 120.609868][ T5426] netlink: 116 bytes leftover after parsing attributes in process `syz.4.323'. [ 120.612400][ T5426] device bridge_slave_1 left promiscuous mode [ 120.615170][ T5426] bridge0: port 2(bridge_slave_1) entered disabled state [ 120.794890][ T27] audit: type=1326 audit(120.740:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5429 comm="syz.1.325" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffa6f45ee8 code=0x0 [ 120.828138][ T5426] device bridge_slave_0 left promiscuous mode [ 120.830289][ T5426] bridge0: port 1(bridge_slave_0) entered disabled state [ 122.511974][ T5444] loop0: detected capacity change from 0 to 40427 [ 122.546713][ T5444] F2FS-fs (loop0): invalid crc value [ 122.562347][ T5444] F2FS-fs (loop0): Found nat_bits in checkpoint [ 122.639991][ T5444] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 122.746267][ T5461] netlink: 4 bytes leftover after parsing attributes in process `syz.1.335'. [ 122.777186][ T5461] netlink: 12 bytes leftover after parsing attributes in process `syz.1.335'. [ 122.809811][ T5459] netlink: 224 bytes leftover after parsing attributes in process `syz.4.328'. [ 123.055811][ T5468] TCP: request_sock_subflow_v6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 124.431929][ T27] audit: type=1326 audit(124.380:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5479 comm="syz.2.340" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffa2945ee8 code=0x0 [ 125.962847][ T2059] ieee802154 phy0 wpan0: encryption failed: -22 [ 125.964642][ T2059] ieee802154 phy1 wpan1: encryption failed: -22 [ 125.989450][ T4309] Bluetooth: hci5: link tx timeout [ 125.991120][ T4309] Bluetooth: hci5: killing stalled connection 10:aa:aa:aa:aa:aa [ 125.993807][ T4309] Bluetooth: hci5: link tx timeout [ 125.995293][ T4309] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 126.148514][ T4471] F2FS-fs (loop1): f2fs_pin_file_control: Enable GC = ino a after 801 GC trials [ 126.214659][ T4471] syz.1.24: attempt to access beyond end of device [ 126.214659][ T4471] loop1: rw=524288, sector=86016, nr_sectors = 8 limit=40427 [ 126.291402][ T4471] syz.1.24: attempt to access beyond end of device [ 126.291402][ T4471] loop1: rw=524288, sector=86024, nr_sectors = 8 limit=40427 [ 126.297789][ T4471] syz.1.24: attempt to access beyond end of device [ 126.297789][ T4471] loop1: rw=524288, sector=86032, nr_sectors = 8 limit=40427 [ 126.328807][ T4471] syz.1.24: attempt to access beyond end of device [ 126.328807][ T4471] loop1: rw=524288, sector=86040, nr_sectors = 8 limit=40427 [ 126.358148][ T4471] syz.1.24: attempt to access beyond end of device [ 126.358148][ T4471] loop1: rw=524288, sector=86048, nr_sectors = 8 limit=40427 [ 126.372110][ T4471] syz.1.24: attempt to access beyond end of device [ 126.372110][ T4471] loop1: rw=524288, sector=86056, nr_sectors = 8 limit=40427 [ 126.375967][ T4471] syz.1.24: attempt to access beyond end of device [ 126.375967][ T4471] loop1: rw=524288, sector=86064, nr_sectors = 8 limit=40427 [ 126.407421][ T5501] netlink: 4 bytes leftover after parsing attributes in process `syz.2.347'. [ 126.409168][ T4471] syz.1.24: attempt to access beyond end of device [ 126.409168][ T4471] loop1: rw=524288, sector=86072, nr_sectors = 8 limit=40427 [ 126.438459][ T5501] netlink: 12 bytes leftover after parsing attributes in process `syz.2.347'. [ 126.440566][ T4471] syz.1.24: attempt to access beyond end of device [ 126.440566][ T4471] loop1: rw=524288, sector=86080, nr_sectors = 8 limit=40427 [ 126.456556][ T5505] TCP: request_sock_subflow_v6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 126.470965][ T5504] loop0: detected capacity change from 0 to 512 [ 126.474877][ T4471] syz.1.24: attempt to access beyond end of device [ 126.474877][ T4471] loop1: rw=524288, sector=86088, nr_sectors = 8 limit=40427 [ 126.486729][ T5504] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 126.488951][ T5504] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 126.526635][ T5504] EXT4-fs (loop0): orphan cleanup on readonly fs [ 126.535254][ T5504] Quota error (device loop0): v2_read_file_info: Free block number 1 out of range (1, 6). [ 126.558573][ T5504] EXT4-fs warning (device loop0): ext4_enable_quotas:7035: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 126.577107][ T5504] EXT4-fs (loop0): Cannot turn on quotas: error -117 [ 126.597706][ T5504] EXT4-fs (loop0): 1 truncate cleaned up [ 126.617959][ T5504] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 127.353815][ T4292] EXT4-fs (loop0): unmounting filesystem. [ 127.368927][ T27] audit: type=1326 audit(127.310:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5520 comm="syz.1.352" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffa6f45ee8 code=0x0 [ 128.039290][ T4301] Bluetooth: hci5: command 0x0406 tx timeout [ 128.090516][ T4307] Bluetooth: hci6: link tx timeout [ 128.092261][ T4307] Bluetooth: hci6: killing stalled connection 10:aa:aa:aa:aa:aa [ 128.095473][ T4307] Bluetooth: hci6: link tx timeout [ 128.097084][ T4307] Bluetooth: hci6: killing stalled connection 11:aa:aa:aa:aa:aa [ 128.674624][ T5543] netlink: 4 bytes leftover after parsing attributes in process `syz.0.360'. [ 128.721780][ T5543] netlink: 12 bytes leftover after parsing attributes in process `syz.0.360'. [ 129.152331][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 129.770750][ T5556] Cannot find set identified by id 0 to match [ 129.772962][ T5556] netlink: 224 bytes leftover after parsing attributes in process `syz.0.363'. [ 130.119304][ T4307] Bluetooth: hci6: command 0x0406 tx timeout [ 130.122185][ T4301] Bluetooth: hci5: command 0x0406 tx timeout [ 131.098986][ T27] audit: type=1326 audit(131.020:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5565 comm="syz.4.367" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffb3945ee8 code=0x0 [ 131.322113][ T4471] bio_check_eod: 22689 callbacks suppressed [ 131.322128][ T4471] syz.1.24: attempt to access beyond end of device [ 131.322128][ T4471] loop1: rw=0, sector=89408, nr_sectors = 8 limit=40427 [ 131.328925][ T4471] syz.1.24: attempt to access beyond end of device [ 131.328925][ T4471] loop1: rw=0, sector=89416, nr_sectors = 8 limit=40427 [ 131.466952][ T4471] syz.1.24: attempt to access beyond end of device [ 131.466952][ T4471] loop1: rw=0, sector=89424, nr_sectors = 8 limit=40427 [ 132.176637][ T4471] syz.1.24: attempt to access beyond end of device [ 132.176637][ T4471] loop1: rw=0, sector=89432, nr_sectors = 8 limit=40427 [ 132.199184][ T4309] Bluetooth: hci6: command 0x0406 tx timeout [ 132.200435][ T4471] syz.1.24: attempt to access beyond end of device [ 132.200435][ T4471] loop1: rw=0, sector=89440, nr_sectors = 8 limit=40427 [ 132.229239][ T4471] syz.1.24: attempt to access beyond end of device [ 132.229239][ T4471] loop1: rw=0, sector=89448, nr_sectors = 8 limit=40427 [ 132.233178][ T4471] syz.1.24: attempt to access beyond end of device [ 132.233178][ T4471] loop1: rw=0, sector=89456, nr_sectors = 8 limit=40427 [ 132.254593][ T4471] syz.1.24: attempt to access beyond end of device [ 132.254593][ T4471] loop1: rw=0, sector=89464, nr_sectors = 8 limit=40427 [ 132.258362][ T4471] syz.1.24: attempt to access beyond end of device [ 132.258362][ T4471] loop1: rw=0, sector=89472, nr_sectors = 8 limit=40427 [ 132.265006][ T4471] syz.1.24: attempt to access beyond end of device [ 132.265006][ T4471] loop1: rw=0, sector=89480, nr_sectors = 8 limit=40427 [ 132.870446][ T5583] netlink: 12 bytes leftover after parsing attributes in process `syz.4.371'. [ 133.962538][ T27] audit: type=1326 audit(133.910:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5601 comm="syz.4.380" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffb3945ee8 code=0x0 [ 135.168781][ T5610] netlink: 4 bytes leftover after parsing attributes in process `syz.2.381'. [ 135.202025][ T5613] netlink: 12 bytes leftover after parsing attributes in process `syz.4.382'. [ 135.265693][ T5610] netlink: 4 bytes leftover after parsing attributes in process `syz.2.381'. [ 135.862178][ T5623] Cannot find set identified by id 0 to match [ 135.871061][ T5623] netlink: 224 bytes leftover after parsing attributes in process `syz.2.385'. [ 136.361235][ T4471] bio_check_eod: 14918 callbacks suppressed [ 136.362139][ T4471] syz.1.24: attempt to access beyond end of device [ 136.362139][ T4471] loop1: rw=524288, sector=86072, nr_sectors = 8 limit=40427 [ 136.508366][ T4471] syz.1.24: attempt to access beyond end of device [ 136.508366][ T4471] loop1: rw=524288, sector=86080, nr_sectors = 8 limit=40427 [ 136.539231][ T4471] syz.1.24: attempt to access beyond end of device [ 136.539231][ T4471] loop1: rw=524288, sector=86088, nr_sectors = 8 limit=40427 [ 136.542887][ T4471] syz.1.24: attempt to access beyond end of device [ 136.542887][ T4471] loop1: rw=524288, sector=86096, nr_sectors = 8 limit=40427 [ 136.546744][ T4471] syz.1.24: attempt to access beyond end of device [ 136.546744][ T4471] loop1: rw=524288, sector=86104, nr_sectors = 8 limit=40427 [ 136.610694][ T4471] syz.1.24: attempt to access beyond end of device [ 136.610694][ T4471] loop1: rw=524288, sector=86112, nr_sectors = 8 limit=40427 [ 136.614615][ T4471] syz.1.24: attempt to access beyond end of device [ 136.614615][ T4471] loop1: rw=524288, sector=86120, nr_sectors = 8 limit=40427 [ 136.679560][ T4471] syz.1.24: attempt to access beyond end of device [ 136.679560][ T4471] loop1: rw=524288, sector=86128, nr_sectors = 8 limit=40427 [ 136.683542][ T4471] syz.1.24: attempt to access beyond end of device [ 136.683542][ T4471] loop1: rw=524288, sector=86136, nr_sectors = 8 limit=40427 [ 136.687316][ T4471] syz.1.24: attempt to access beyond end of device [ 136.687316][ T4471] loop1: rw=524288, sector=86144, nr_sectors = 8 limit=40427 [ 136.889756][ T4300] Bluetooth: hci7: link tx timeout [ 136.891485][ T4300] Bluetooth: hci7: killing stalled connection 11:aa:aa:aa:aa:aa [ 138.039319][ T5646] netlink: 12 bytes leftover after parsing attributes in process `syz.0.393'. [ 138.511095][ T5660] Cannot find set identified by id 0 to match [ 138.518728][ T5660] netlink: 224 bytes leftover after parsing attributes in process `syz.0.397'. [ 138.930504][ T4309] Bluetooth: hci7: command 0x0406 tx timeout [ 139.254083][ T4300] Bluetooth: hci0: link tx timeout [ 139.255679][ T4300] Bluetooth: hci0: killing stalled connection 10:aa:aa:aa:aa:aa [ 139.258221][ T4300] Bluetooth: hci0: link tx timeout [ 139.261263][ T4300] Bluetooth: hci0: killing stalled connection 11:aa:aa:aa:aa:aa [ 139.332638][ T4309] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 139.335803][ T4309] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 139.338261][ T4309] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 139.341823][ T4309] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 139.344183][ T4309] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3 [ 139.346376][ T4309] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 139.500649][ T5667] chnl_net:caif_netlink_parms(): no params data found [ 139.607613][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 140.295783][ T5681] loop0: detected capacity change from 0 to 40427 [ 140.359390][ T5681] F2FS-fs (loop0): invalid crc value [ 140.371277][ T5681] F2FS-fs (loop0): Found nat_bits in checkpoint [ 140.426910][ T5689] netlink: 4 bytes leftover after parsing attributes in process `syz.3.407'. [ 140.439245][ T5681] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 140.499289][ T5667] bridge0: port 1(bridge_slave_0) entered blocking state [ 140.501423][ T5667] bridge0: port 1(bridge_slave_0) entered disabled state [ 140.504141][ T5667] device bridge_slave_0 entered promiscuous mode [ 140.508514][ T5667] bridge0: port 2(bridge_slave_1) entered blocking state [ 140.544531][ T5667] bridge0: port 2(bridge_slave_1) entered disabled state [ 140.559272][ T5667] device bridge_slave_1 entered promiscuous mode [ 140.712719][ T5667] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 140.717335][ T5667] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 141.332707][ T4307] Bluetooth: hci0: command 0x0406 tx timeout [ 141.400150][ T4307] Bluetooth: hci9: command tx timeout [ 141.411956][ T4471] bio_check_eod: 11171 callbacks suppressed [ 141.412956][ T4471] syz.1.24: attempt to access beyond end of device [ 141.412956][ T4471] loop1: rw=524288, sector=88400, nr_sectors = 8 limit=40427 [ 141.659220][ T4471] syz.1.24: attempt to access beyond end of device [ 141.659220][ T4471] loop1: rw=524288, sector=88408, nr_sectors = 8 limit=40427 [ 141.663133][ T4471] syz.1.24: attempt to access beyond end of device [ 141.663133][ T4471] loop1: rw=524288, sector=88416, nr_sectors = 8 limit=40427 [ 141.729054][ T4471] syz.1.24: attempt to access beyond end of device [ 141.729054][ T4471] loop1: rw=524288, sector=88424, nr_sectors = 8 limit=40427 [ 141.782298][ T4471] syz.1.24: attempt to access beyond end of device [ 141.782298][ T4471] loop1: rw=524288, sector=88432, nr_sectors = 8 limit=40427 [ 141.786281][ T4471] syz.1.24: attempt to access beyond end of device [ 141.786281][ T4471] loop1: rw=524288, sector=88440, nr_sectors = 8 limit=40427 [ 141.832957][ T5667] team0: Port device team_slave_0 added [ 141.836266][ T5667] team0: Port device team_slave_1 added [ 141.839306][ T4471] syz.1.24: attempt to access beyond end of device [ 141.839306][ T4471] loop1: rw=524288, sector=88448, nr_sectors = 8 limit=40427 [ 141.843121][ T4471] syz.1.24: attempt to access beyond end of device [ 141.843121][ T4471] loop1: rw=524288, sector=88456, nr_sectors = 8 limit=40427 [ 141.846957][ T4471] syz.1.24: attempt to access beyond end of device [ 141.846957][ T4471] loop1: rw=524288, sector=88464, nr_sectors = 8 limit=40427 [ 141.879620][ T4307] Bluetooth: hci7: link tx timeout [ 141.881024][ T4307] Bluetooth: hci7: killing stalled connection 10:aa:aa:aa:aa:aa [ 141.883305][ T4307] Bluetooth: hci7: link tx timeout [ 141.884768][ T4307] Bluetooth: hci7: killing stalled connection 11:aa:aa:aa:aa:aa [ 141.898070][ T4471] syz.1.24: attempt to access beyond end of device [ 141.898070][ T4471] loop1: rw=524288, sector=88472, nr_sectors = 8 limit=40427 [ 141.930681][ T5667] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 141.932697][ T5667] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 141.949041][ T5667] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 141.960600][ T5667] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 141.962485][ T5667] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 141.980696][ T5667] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 142.145971][ T5706] Cannot find set identified by id 0 to match [ 142.148215][ T5706] netlink: 224 bytes leftover after parsing attributes in process `syz.3.411'. [ 142.201962][ T5667] device hsr_slave_0 entered promiscuous mode [ 142.279694][ T5667] device hsr_slave_1 entered promiscuous mode [ 142.449298][ T5667] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 142.452164][ T5667] Cannot create hsr debugfs directory [ 143.399173][ T4300] Bluetooth: hci0: command 0x0406 tx timeout [ 143.479063][ T4309] Bluetooth: hci9: command tx timeout [ 143.959080][ T4300] Bluetooth: hci7: command 0x0406 tx timeout [ 145.559076][ T4307] Bluetooth: hci9: command tx timeout [ 145.583043][ T4684] F2FS-fs (loop3): f2fs_pin_file_control: Enable GC = ino a after 801 GC trials [ 146.427465][ T4471] bio_check_eod: 22364 callbacks suppressed [ 146.427481][ T4471] syz.1.24: attempt to access beyond end of device [ 146.427481][ T4471] loop1: rw=524288, sector=87184, nr_sectors = 8 limit=40427 [ 146.451286][ T4684] syz.3.86: attempt to access beyond end of device [ 146.451286][ T4684] loop3: rw=0, sector=88024, nr_sectors = 8 limit=40427 [ 146.458437][ T4684] syz.3.86: attempt to access beyond end of device [ 146.458437][ T4684] loop3: rw=0, sector=88032, nr_sectors = 8 limit=40427 [ 146.465863][ T4684] syz.3.86: attempt to access beyond end of device [ 146.465863][ T4684] loop3: rw=0, sector=88040, nr_sectors = 8 limit=40427 [ 146.471057][ T4471] syz.1.24: attempt to access beyond end of device [ 146.471057][ T4471] loop1: rw=524288, sector=87192, nr_sectors = 8 limit=40427 [ 146.474978][ T4684] syz.3.86: attempt to access beyond end of device [ 146.474978][ T4684] loop3: rw=0, sector=88048, nr_sectors = 8 limit=40427 [ 146.484280][ T4471] syz.1.24: attempt to access beyond end of device [ 146.484280][ T4471] loop1: rw=524288, sector=87200, nr_sectors = 8 limit=40427 [ 146.488291][ T4684] syz.3.86: attempt to access beyond end of device [ 146.488291][ T4684] loop3: rw=0, sector=88056, nr_sectors = 8 limit=40427 [ 146.495708][ T4684] syz.3.86: attempt to access beyond end of device [ 146.495708][ T4684] loop3: rw=0, sector=88064, nr_sectors = 8 limit=40427 [ 146.502068][ T4471] syz.1.24: attempt to access beyond end of device [ 146.502068][ T4471] loop1: rw=524288, sector=87208, nr_sectors = 8 limit=40427 [ 146.892372][ T4307] Bluetooth: hci6: link tx timeout [ 146.893830][ T4307] Bluetooth: hci6: killing stalled connection 10:aa:aa:aa:aa:aa [ 146.895972][ T4307] Bluetooth: hci6: link tx timeout [ 146.897360][ T4307] Bluetooth: hci6: killing stalled connection 11:aa:aa:aa:aa:aa [ 147.135530][ T5748] overlayfs: failed to resolve './file0': -2 [ 147.639099][ T4307] Bluetooth: hci9: command tx timeout [ 148.877388][ T5762] Cannot find set identified by id 0 to match [ 148.879833][ T5762] netlink: 224 bytes leftover after parsing attributes in process `syz.4.430'. [ 150.326817][ T5771] xt_CT: You must specify a L4 protocol and not use inversions on it [ 150.344612][ T5771] netlink: 8 bytes leftover after parsing attributes in process `syz.4.432'. [ 150.559738][ T4300] Bluetooth: hci8: link tx timeout [ 150.561408][ T4300] Bluetooth: hci8: killing stalled connection 11:aa:aa:aa:aa:aa [ 151.468785][ T4684] bio_check_eod: 50870 callbacks suppressed [ 151.468800][ T4684] syz.3.86: attempt to access beyond end of device [ 151.468800][ T4684] loop3: rw=524288, sector=88768, nr_sectors = 8 limit=40427 [ 151.488763][ T4471] syz.1.24: attempt to access beyond end of device [ 151.488763][ T4471] loop1: rw=524288, sector=86016, nr_sectors = 8 limit=40427 [ 151.493373][ T4684] syz.3.86: attempt to access beyond end of device [ 151.493373][ T4684] loop3: rw=524288, sector=88776, nr_sectors = 8 limit=40427 [ 151.500611][ T4684] syz.3.86: attempt to access beyond end of device [ 151.500611][ T4684] loop3: rw=524288, sector=88784, nr_sectors = 8 limit=40427 [ 151.514817][ T4471] syz.1.24: attempt to access beyond end of device [ 151.514817][ T4471] loop1: rw=524288, sector=86024, nr_sectors = 8 limit=40427 [ 151.518621][ T4471] syz.1.24: attempt to access beyond end of device [ 151.518621][ T4471] loop1: rw=524288, sector=86032, nr_sectors = 8 limit=40427 [ 151.539139][ T4684] syz.3.86: attempt to access beyond end of device [ 151.539139][ T4684] loop3: rw=524288, sector=88792, nr_sectors = 8 limit=40427 [ 151.542910][ T4684] syz.3.86: attempt to access beyond end of device [ 151.542910][ T4684] loop3: rw=524288, sector=88800, nr_sectors = 8 limit=40427 [ 151.549509][ T4471] syz.1.24: attempt to access beyond end of device [ 151.549509][ T4471] loop1: rw=524288, sector=86040, nr_sectors = 8 limit=40427 [ 151.553171][ T4471] syz.1.24: attempt to access beyond end of device [ 151.553171][ T4471] loop1: rw=524288, sector=86048, nr_sectors = 8 limit=40427 [ 151.662653][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 152.249771][ T4857] F2FS-fs (loop2): f2fs_pin_file_control: Enable GC = ino a after 801 GC trials [ 152.599074][ T4300] Bluetooth: hci8: command 0x0406 tx timeout [ 152.953422][ T4307] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 152.956682][ T4307] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 152.959775][ T4307] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 152.962379][ T4307] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 152.965980][ T4307] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 152.968161][ T4307] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 153.886512][ T5803] netlink: 8 bytes leftover after parsing attributes in process `syz.3.442'. [ 153.894210][ T5803] netlink: 8 bytes leftover after parsing attributes in process `syz.3.442'. [ 154.806331][ T4307] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 154.819211][ T4307] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 154.822256][ T4307] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 154.824959][ T4307] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 154.827449][ T4307] Bluetooth: hci10: unexpected cc 0x0c25 length: 249 > 3 [ 154.830100][ T4307] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 155.009178][ T4307] Bluetooth: hci5: command tx timeout [ 156.469445][ T4471] bio_check_eod: 108596 callbacks suppressed [ 156.469459][ T4471] syz.1.24: attempt to access beyond end of device [ 156.469459][ T4471] loop1: rw=0, sector=86784, nr_sectors = 8 limit=40427 [ 156.476945][ T4471] syz.1.24: attempt to access beyond end of device [ 156.476945][ T4471] loop1: rw=0, sector=86792, nr_sectors = 8 limit=40427 [ 156.489128][ T4857] syz.2.143: attempt to access beyond end of device [ 156.489128][ T4857] loop2: rw=0, sector=87248, nr_sectors = 8 limit=40427 [ 156.492995][ T4857] syz.2.143: attempt to access beyond end of device [ 156.492995][ T4857] loop2: rw=0, sector=87256, nr_sectors = 8 limit=40427 [ 156.506449][ T4857] syz.2.143: attempt to access beyond end of device [ 156.506449][ T4857] loop2: rw=0, sector=87264, nr_sectors = 8 limit=40427 [ 156.511560][ T4471] syz.1.24: attempt to access beyond end of device [ 156.511560][ T4471] loop1: rw=0, sector=86800, nr_sectors = 8 limit=40427 [ 156.526981][ T4684] syz.3.86: attempt to access beyond end of device [ 156.526981][ T4684] loop3: rw=524288, sector=86520, nr_sectors = 8 limit=40427 [ 156.541903][ T4471] syz.1.24: attempt to access beyond end of device [ 156.541903][ T4471] loop1: rw=0, sector=86808, nr_sectors = 8 limit=40427 [ 156.555254][ T4684] syz.3.86: attempt to access beyond end of device [ 156.555254][ T4684] loop3: rw=524288, sector=86528, nr_sectors = 8 limit=40427 [ 156.563685][ T4471] syz.1.24: attempt to access beyond end of device [ 156.563685][ T4471] loop1: rw=0, sector=86816, nr_sectors = 8 limit=40427 [ 156.839142][ T4307] Bluetooth: hci10: command tx timeout [ 157.089526][ T4307] Bluetooth: hci5: command tx timeout [ 158.919055][ T4300] Bluetooth: hci10: command tx timeout [ 159.159124][ T4307] Bluetooth: hci5: command tx timeout [ 160.999103][ T4300] Bluetooth: hci10: command tx timeout [ 161.234261][ T5049] F2FS-fs (loop4): f2fs_pin_file_control: Enable GC = ino a after 801 GC trials [ 161.249127][ T4307] Bluetooth: hci5: command tx timeout [ 161.479105][ T4684] bio_check_eod: 152650 callbacks suppressed [ 161.479123][ T4684] syz.3.86: attempt to access beyond end of device [ 161.479123][ T4684] loop3: rw=0, sector=88536, nr_sectors = 8 limit=40427 [ 161.484478][ T4684] syz.3.86: attempt to access beyond end of device [ 161.484478][ T4684] loop3: rw=0, sector=88544, nr_sectors = 8 limit=40427 [ 161.488104][ T4684] syz.3.86: attempt to access beyond end of device [ 161.488104][ T4684] loop3: rw=0, sector=88552, nr_sectors = 8 limit=40427 [ 161.489111][ T4471] syz.1.24: attempt to access beyond end of device [ 161.489111][ T4471] loop1: rw=0, sector=88320, nr_sectors = 8 limit=40427 [ 161.494366][ T5049] syz.4.207: attempt to access beyond end of device [ 161.494366][ T5049] loop4: rw=524288, sector=89640, nr_sectors = 8 limit=40427 [ 161.495236][ T4471] syz.1.24: attempt to access beyond end of device [ 161.495236][ T4471] loop1: rw=0, sector=88328, nr_sectors = 8 limit=40427 [ 161.507198][ T4857] syz.2.143: attempt to access beyond end of device [ 161.507198][ T4857] loop2: rw=524288, sector=86976, nr_sectors = 8 limit=40427 [ 161.509041][ T5049] syz.4.207: attempt to access beyond end of device [ 161.509041][ T5049] loop4: rw=524288, sector=89648, nr_sectors = 8 limit=40427 [ 161.511027][ T4471] syz.1.24: attempt to access beyond end of device [ 161.511027][ T4471] loop1: rw=0, sector=88336, nr_sectors = 8 limit=40427 [ 161.514803][ T5049] syz.4.207: attempt to access beyond end of device [ 161.514803][ T5049] loop4: rw=524288, sector=89656, nr_sectors = 8 limit=40427 [ 163.079118][ T4300] Bluetooth: hci10: command tx timeout [ 163.282879][ T5667] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 163.329113][ T5733] netlink: 4 bytes leftover after parsing attributes in process `syz.0.420'. [ 163.743676][ T5667] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.383237][ T5667] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.160944][ T5667] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.811362][ T5809] chnl_net:caif_netlink_parms(): no params data found [ 165.822297][ T5796] chnl_net:caif_netlink_parms(): no params data found [ 166.446934][ T5667] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 166.491556][ T5809] bridge0: port 1(bridge_slave_0) entered blocking state [ 166.493098][ T4471] bio_check_eod: 188675 callbacks suppressed [ 166.493112][ T4471] syz.1.24: attempt to access beyond end of device [ 166.493112][ T4471] loop1: rw=524288, sector=86016, nr_sectors = 8 limit=40427 [ 166.493446][ T5809] bridge0: port 1(bridge_slave_0) entered disabled state [ 166.495078][ T4471] syz.1.24: attempt to access beyond end of device [ 166.495078][ T4471] loop1: rw=524288, sector=86024, nr_sectors = 8 limit=40427 [ 166.499223][ T4857] syz.2.143: attempt to access beyond end of device [ 166.499223][ T4857] loop2: rw=0, sector=87432, nr_sectors = 8 limit=40427 [ 166.502702][ T4684] syz.3.86: attempt to access beyond end of device [ 166.502702][ T4684] loop3: rw=524288, sector=89848, nr_sectors = 8 limit=40427 [ 166.509658][ T5809] device bridge_slave_0 entered promiscuous mode [ 166.512150][ T5049] syz.4.207: attempt to access beyond end of device [ 166.512150][ T5049] loop4: rw=524288, sector=87344, nr_sectors = 8 limit=40427 [ 166.515238][ T4857] syz.2.143: attempt to access beyond end of device [ 166.515238][ T4857] loop2: rw=0, sector=87440, nr_sectors = 8 limit=40427 [ 166.517239][ T5049] syz.4.207: attempt to access beyond end of device [ 166.517239][ T5049] loop4: rw=524288, sector=87352, nr_sectors = 8 limit=40427 [ 166.526789][ T4471] syz.1.24: attempt to access beyond end of device [ 166.526789][ T4471] loop1: rw=524288, sector=86032, nr_sectors = 8 limit=40427 [ 166.527722][ T4857] syz.2.143: attempt to access beyond end of device [ 166.527722][ T4857] loop2: rw=0, sector=87448, nr_sectors = 8 limit=40427 [ 166.531313][ T4471] syz.1.24: attempt to access beyond end of device [ 166.531313][ T4471] loop1: rw=524288, sector=86040, nr_sectors = 8 limit=40427 [ 166.594591][ T5796] bridge0: port 1(bridge_slave_0) entered blocking state [ 166.596669][ T5796] bridge0: port 1(bridge_slave_0) entered disabled state [ 166.599954][ T5796] device bridge_slave_0 entered promiscuous mode [ 166.614060][ T5667] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 166.670899][ T5667] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 166.752744][ T5809] bridge0: port 2(bridge_slave_1) entered blocking state [ 166.754791][ T5809] bridge0: port 2(bridge_slave_1) entered disabled state [ 166.760717][ T5809] device bridge_slave_1 entered promiscuous mode [ 166.773947][ T5796] bridge0: port 2(bridge_slave_1) entered blocking state [ 166.776067][ T5796] bridge0: port 2(bridge_slave_1) entered disabled state [ 166.778865][ T5796] device bridge_slave_1 entered promiscuous mode [ 166.970094][ T5667] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 167.171996][ T5809] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 167.176751][ T5809] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 167.211710][ T5796] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 167.291529][ T5796] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 167.341509][ T5809] team0: Port device team_slave_0 added [ 167.356210][ T5796] team0: Port device team_slave_0 added [ 167.811379][ T5809] team0: Port device team_slave_1 added [ 167.814325][ T5796] team0: Port device team_slave_1 added [ 167.950292][ T5667] 8021q: adding VLAN 0 to HW filter on device bond0 [ 167.969121][ T5796] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 167.971141][ T5796] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 167.978076][ T5796] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 167.996898][ T5667] 8021q: adding VLAN 0 to HW filter on device team0 [ 167.999594][ T5809] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 168.001471][ T5809] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 168.008326][ T5809] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 168.032829][ T5796] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 168.034836][ T5796] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 168.049061][ T5796] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 168.099686][ T5564] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 168.119601][ T5564] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 168.180986][ T27] audit: type=1326 audit(168.130:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5875 comm="syz.4.465" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb3945ee8 code=0x7ffc0000 [ 168.186736][ T27] audit: type=1326 audit(168.130:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5875 comm="syz.4.465" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=198 compat=0 ip=0xffffb3945ee8 code=0x7ffc0000 [ 168.219084][ T27] audit: type=1326 audit(168.130:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5875 comm="syz.4.465" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb3945ee8 code=0x7ffc0000 [ 168.225332][ T27] audit: type=1326 audit(168.130:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5875 comm="syz.4.465" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=200 compat=0 ip=0xffffb3945ee8 code=0x7ffc0000 [ 168.259035][ T27] audit: type=1326 audit(168.130:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5875 comm="syz.4.465" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb3945ee8 code=0x7ffc0000 [ 168.265000][ T27] audit: type=1326 audit(168.130:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5875 comm="syz.4.465" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb3945ee8 code=0x7ffc0000 [ 168.600498][ T5809] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 168.602689][ T5809] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 168.629093][ T5809] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 168.637747][ T5311] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 168.641866][ T5311] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 168.644445][ T5311] bridge0: port 1(bridge_slave_0) entered blocking state [ 168.646495][ T5311] bridge0: port 1(bridge_slave_0) entered forwarding state [ 168.648890][ T5311] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 168.679924][ T5311] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 168.682586][ T5311] bridge0: port 2(bridge_slave_1) entered blocking state [ 168.684545][ T5311] bridge0: port 2(bridge_slave_1) entered forwarding state [ 168.686956][ T5311] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 168.847100][ T4447] device hsr_slave_0 left promiscuous mode [ 168.949382][ T4447] device hsr_slave_1 left promiscuous mode [ 168.999202][ T47] Bluetooth: hci2: command 0x0406 tx timeout [ 169.001149][ T4301] Bluetooth: hci1: command 0x0406 tx timeout [ 169.001162][ T47] Bluetooth: hci3: command 0x0406 tx timeout [ 169.002817][ T4301] Bluetooth: hci4: command 0x0406 tx timeout [ 169.029222][ T4447] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 169.031268][ T4447] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 169.070458][ T4447] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 169.072688][ T4447] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 169.120881][ T4447] device bridge_slave_1 left promiscuous mode [ 169.122751][ T4447] bridge0: port 2(bridge_slave_1) entered disabled state [ 169.189736][ T4447] device bridge_slave_0 left promiscuous mode [ 169.191664][ T4447] bridge0: port 1(bridge_slave_0) entered disabled state [ 169.294665][ T27] audit: type=1326 audit(169.240:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5877 comm="syz.4.466" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb3945ee8 code=0x7ffc0000 [ 169.310557][ T27] audit: type=1326 audit(169.260:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5877 comm="syz.4.466" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb3945ee8 code=0x7ffc0000 [ 169.319661][ T27] audit: type=1326 audit(169.260:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5877 comm="syz.4.466" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=22 compat=0 ip=0xffffb3945ee8 code=0x7ffc0000 [ 169.325685][ T27] audit: type=1326 audit(169.260:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5877 comm="syz.4.466" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb3945ee8 code=0x7ffc0000 [ 169.599588][ T4447] device veth1_macvtap left promiscuous mode [ 169.601708][ T4447] device veth0_macvtap left promiscuous mode [ 169.603424][ T4447] device veth1_vlan left promiscuous mode [ 169.605167][ T4447] device veth0_vlan left promiscuous mode [ 171.499062][ T4857] bio_check_eod: 185478 callbacks suppressed [ 171.499080][ T4857] syz.2.143: attempt to access beyond end of device [ 171.499080][ T4857] loop2: rw=0, sector=88432, nr_sectors = 8 limit=40427 [ 171.501167][ T5049] syz.4.207: attempt to access beyond end of device [ 171.501167][ T5049] loop4: rw=524288, sector=88736, nr_sectors = 8 limit=40427 [ 171.504569][ T4857] syz.2.143: attempt to access beyond end of device [ 171.504569][ T4857] loop2: rw=0, sector=88440, nr_sectors = 8 limit=40427 [ 171.508249][ T4471] syz.1.24: attempt to access beyond end of device [ 171.508249][ T4471] loop1: rw=524288, sector=87936, nr_sectors = 8 limit=40427 [ 171.515881][ T5049] syz.4.207: attempt to access beyond end of device [ 171.515881][ T5049] loop4: rw=524288, sector=88744, nr_sectors = 8 limit=40427 [ 171.520337][ T4684] syz.3.86: attempt to access beyond end of device [ 171.520337][ T4684] loop3: rw=0, sector=89096, nr_sectors = 8 limit=40427 [ 171.524070][ T4684] syz.3.86: attempt to access beyond end of device [ 171.524070][ T4684] loop3: rw=0, sector=89104, nr_sectors = 8 limit=40427 [ 171.527887][ T4684] syz.3.86: attempt to access beyond end of device [ 171.527887][ T4684] loop3: rw=0, sector=89112, nr_sectors = 8 limit=40427 [ 171.529077][ T4857] syz.2.143: attempt to access beyond end of device [ 171.529077][ T4857] loop2: rw=0, sector=88448, nr_sectors = 8 limit=40427 [ 171.532653][ T5049] syz.4.207: attempt to access beyond end of device [ 171.532653][ T5049] loop4: rw=524288, sector=88752, nr_sectors = 8 limit=40427 [ 172.622960][ T4447] team0 (unregistering): Port device team_slave_1 removed [ 172.840170][ T4447] team0 (unregistering): Port device team_slave_0 removed [ 173.060795][ T4447] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 173.321473][ T4447] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 175.521183][ T4447] bond0 (unregistering): Released all slaves [ 175.850790][ T5311] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 175.853781][ T5311] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 175.857001][ T5311] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 175.862234][ T5311] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 175.889576][ T5311] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 175.892587][ T5311] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 175.895285][ T5311] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 175.919565][ T5311] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 175.922283][ T5311] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 175.924961][ T5311] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 175.991297][ T5796] device hsr_slave_0 entered promiscuous mode [ 176.029394][ T5796] device hsr_slave_1 entered promiscuous mode [ 176.099207][ T5796] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 176.101426][ T5796] Cannot create hsr debugfs directory [ 176.117924][ T5667] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 176.121832][ T5311] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 176.211110][ T5809] device hsr_slave_0 entered promiscuous mode [ 176.310893][ T5809] device hsr_slave_1 entered promiscuous mode [ 176.389188][ T5809] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 176.391325][ T5809] Cannot create hsr debugfs directory [ 176.509119][ T5049] bio_check_eod: 210391 callbacks suppressed [ 176.509135][ T5049] syz.4.207: attempt to access beyond end of device [ 176.509135][ T5049] loop4: rw=524288, sector=88736, nr_sectors = 8 limit=40427 [ 176.522824][ T5049] syz.4.207: attempt to access beyond end of device [ 176.522824][ T5049] loop4: rw=524288, sector=88744, nr_sectors = 8 limit=40427 [ 176.526991][ T4471] syz.1.24: attempt to access beyond end of device [ 176.526991][ T4471] loop1: rw=0, sector=87584, nr_sectors = 8 limit=40427 [ 176.531338][ T4684] syz.3.86: attempt to access beyond end of device [ 176.531338][ T4684] loop3: rw=0, sector=87040, nr_sectors = 8 limit=40427 [ 176.534945][ T4684] syz.3.86: attempt to access beyond end of device [ 176.534945][ T4684] loop3: rw=0, sector=87048, nr_sectors = 8 limit=40427 [ 176.538470][ T4684] syz.3.86: attempt to access beyond end of device [ 176.538470][ T4684] loop3: rw=0, sector=87056, nr_sectors = 8 limit=40427 [ 176.551680][ T4471] syz.1.24: attempt to access beyond end of device [ 176.551680][ T4471] loop1: rw=0, sector=87592, nr_sectors = 8 limit=40427 [ 176.553328][ T4857] syz.2.143: attempt to access beyond end of device [ 176.553328][ T4857] loop2: rw=524288, sector=86016, nr_sectors = 8 limit=40427 [ 176.555459][ T4471] syz.1.24: attempt to access beyond end of device [ 176.555459][ T4471] loop1: rw=0, sector=87600, nr_sectors = 8 limit=40427 [ 176.564219][ T5049] syz.4.207: attempt to access beyond end of device [ 176.564219][ T5049] loop4: rw=524288, sector=88752, nr_sectors = 8 limit=40427 [ 176.730246][ T5564] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 176.732542][ T5564] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 176.750214][ T5667] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 176.932603][ T5796] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 176.962498][ T4426] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 176.965447][ T4426] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 177.030507][ T5741] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 177.033346][ T5741] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 177.036149][ T5741] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 177.049515][ T5741] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 177.202822][ T5796] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 177.221096][ T5667] device veth0_vlan entered promiscuous mode [ 177.227729][ T5667] device veth1_vlan entered promiscuous mode [ 177.411737][ T5796] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 177.428374][ T5667] device veth0_macvtap entered promiscuous mode [ 177.449825][ T5310] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 177.452642][ T5310] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 177.455281][ T5310] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 177.470453][ T5310] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 177.478124][ T5667] device veth1_macvtap entered promiscuous mode [ 177.486552][ T5310] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 177.490144][ T5310] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 177.515652][ T5667] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 177.518659][ T5667] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 177.542417][ T5667] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 177.545345][ T5667] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 177.547942][ T5667] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 177.579084][ T5667] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 177.581773][ T5667] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 177.584661][ T5667] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 177.587362][ T5667] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 177.633693][ T5667] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 177.636535][ T5667] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 177.650251][ T5667] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 177.652824][ T5667] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 177.655532][ T5667] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 177.658100][ T5667] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 177.689393][ T5667] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 177.700828][ T5667] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 177.782084][ T5796] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 177.790904][ T5283] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 177.793968][ T5283] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 177.798129][ T5667] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 177.802266][ T5667] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 177.810672][ T5667] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 177.822974][ T5667] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 177.830497][ T5667] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 177.841330][ T5667] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 177.851950][ T5667] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 177.862642][ T5667] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 177.874263][ T5667] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 177.883877][ T5667] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 177.895750][ T5667] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 177.906450][ T5667] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 177.914129][ T5667] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 177.926448][ T5667] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 177.937001][ T5667] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 177.947876][ T5667] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 177.964347][ T5667] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 177.975665][ T5283] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 177.978480][ T5283] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 177.989457][ T5667] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 177.995234][ T5667] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.003345][ T5667] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.011533][ T5667] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 179.084577][ T4447] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 179.991813][ T4447] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 180.201765][ T4447] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 180.230045][ T5564] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 180.232425][ T5564] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 180.243709][ T5564] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 181.519042][ T5049] bio_check_eod: 144400 callbacks suppressed [ 181.519059][ T5049] syz.4.207: attempt to access beyond end of device [ 181.519059][ T5049] loop4: rw=524288, sector=89920, nr_sectors = 8 limit=40427 [ 181.519080][ T4471] syz.1.24: attempt to access beyond end of device [ 181.519080][ T4471] loop1: rw=0, sector=86848, nr_sectors = 8 limit=40427 [ 181.520825][ T5049] syz.4.207: attempt to access beyond end of device [ 181.520825][ T5049] loop4: rw=524288, sector=89928, nr_sectors = 8 limit=40427 [ 181.524514][ T4471] syz.1.24: attempt to access beyond end of device [ 181.524514][ T4471] loop1: rw=0, sector=86856, nr_sectors = 8 limit=40427 [ 181.527845][ T5049] syz.4.207: attempt to access beyond end of device [ 181.527845][ T5049] loop4: rw=524288, sector=89936, nr_sectors = 8 limit=40427 [ 181.532083][ T4857] syz.2.143: attempt to access beyond end of device [ 181.532083][ T4857] loop2: rw=0, sector=88328, nr_sectors = 8 limit=40427 [ 181.537556][ T4684] syz.3.86: attempt to access beyond end of device [ 181.537556][ T4684] loop3: rw=524288, sector=89824, nr_sectors = 8 limit=40427 [ 181.546948][ T4684] syz.3.86: attempt to access beyond end of device [ 181.546948][ T4684] loop3: rw=524288, sector=89832, nr_sectors = 8 limit=40427 [ 181.551036][ T4857] syz.2.143: attempt to access beyond end of device [ 181.551036][ T4857] loop2: rw=0, sector=88336, nr_sectors = 8 limit=40427 [ 181.554820][ T4857] syz.2.143: attempt to access beyond end of device [ 181.554820][ T4857] loop2: rw=0, sector=88344, nr_sectors = 8 limit=40427 [ 186.529138][ T4684] bio_check_eod: 221207 callbacks suppressed [ 186.529155][ T4684] syz.3.86: attempt to access beyond end of device [ 186.529155][ T4684] loop3: rw=524288, sector=88944, nr_sectors = 8 limit=40427 [ 186.529455][ T4471] syz.1.24: attempt to access beyond end of device [ 186.529455][ T4471] loop1: rw=524288, sector=86016, nr_sectors = 8 limit=40427 [ 186.530920][ T4684] syz.3.86: attempt to access beyond end of device [ 186.530920][ T4684] loop3: rw=524288, sector=88952, nr_sectors = 8 limit=40427 [ 186.534718][ T4471] syz.1.24: attempt to access beyond end of device [ 186.534718][ T4471] loop1: rw=524288, sector=86024, nr_sectors = 8 limit=40427 [ 186.538464][ T4684] syz.3.86: attempt to access beyond end of device [ 186.538464][ T4684] loop3: rw=524288, sector=88960, nr_sectors = 8 limit=40427 [ 186.549109][ T4857] syz.2.143: attempt to access beyond end of device [ 186.549109][ T4857] loop2: rw=524288, sector=89480, nr_sectors = 8 limit=40427 [ 186.553389][ T4857] syz.2.143: attempt to access beyond end of device [ 186.553389][ T4857] loop2: rw=524288, sector=89488, nr_sectors = 8 limit=40427 [ 186.557232][ T4857] syz.2.143: attempt to access beyond end of device [ 186.557232][ T4857] loop2: rw=524288, sector=89496, nr_sectors = 8 limit=40427 [ 186.559087][ T5049] syz.4.207: attempt to access beyond end of device [ 186.559087][ T5049] loop4: rw=524288, sector=86016, nr_sectors = 8 limit=40427 [ 186.569138][ T4471] syz.1.24: attempt to access beyond end of device [ 186.569138][ T4471] loop1: rw=524288, sector=86032, nr_sectors = 8 limit=40427 [ 187.404198][ T2059] ieee802154 phy0 wpan0: encryption failed: -22 [ 187.405960][ T2059] ieee802154 phy1 wpan1: encryption failed: -22 [ 191.072228][ T4301] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 191.075943][ T4301] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 191.078609][ T4301] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 191.082251][ T4301] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 191.085176][ T4301] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 191.087343][ T4301] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 191.160764][ T4301] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 191.164495][ T4301] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 191.167362][ T4307] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 191.170579][ T4301] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 191.172972][ T4301] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 191.174989][ T4301] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 191.539077][ T4684] bio_check_eod: 220739 callbacks suppressed [ 191.539095][ T4684] syz.3.86: attempt to access beyond end of device [ 191.539095][ T4684] loop3: rw=524288, sector=88488, nr_sectors = 8 limit=40427 [ 191.544570][ T4684] syz.3.86: attempt to access beyond end of device [ 191.544570][ T4684] loop3: rw=524288, sector=88496, nr_sectors = 8 limit=40427 [ 191.548412][ T4684] syz.3.86: attempt to access beyond end of device [ 191.548412][ T4684] loop3: rw=524288, sector=88504, nr_sectors = 8 limit=40427 [ 191.554390][ T4471] syz.1.24: attempt to access beyond end of device [ 191.554390][ T4471] loop1: rw=524288, sector=88008, nr_sectors = 8 limit=40427 [ 191.558278][ T4471] syz.1.24: attempt to access beyond end of device [ 191.558278][ T4471] loop1: rw=524288, sector=88016, nr_sectors = 8 limit=40427 [ 191.559109][ T5049] syz.4.207: attempt to access beyond end of device [ 191.559109][ T5049] loop4: rw=524288, sector=89616, nr_sectors = 8 limit=40427 [ 191.562858][ T4857] syz.2.143: attempt to access beyond end of device [ 191.562858][ T4857] loop2: rw=0, sector=88976, nr_sectors = 8 limit=40427 [ 191.565768][ T5049] syz.4.207: attempt to access beyond end of device [ 191.565768][ T5049] loop4: rw=524288, sector=89624, nr_sectors = 8 limit=40427 [ 191.569720][ T4471] syz.1.24: attempt to access beyond end of device [ 191.569720][ T4471] loop1: rw=524288, sector=88024, nr_sectors = 8 limit=40427 [ 191.569768][ T4471] syz.1.24: attempt to access beyond end of device [ 191.569768][ T4471] loop1: rw=524288, sector=88032, nr_sectors = 8 limit=40427 [ 193.169667][ T4301] Bluetooth: hci0: command tx timeout [ 193.239096][ T4301] Bluetooth: hci7: command tx timeout [ 195.239246][ T4301] Bluetooth: hci0: command tx timeout [ 195.319144][ T4295] Bluetooth: hci7: command tx timeout [ 196.549062][ T5049] bio_check_eod: 213947 callbacks suppressed [ 196.549078][ T5049] syz.4.207: attempt to access beyond end of device [ 196.549078][ T5049] loop4: rw=524288, sector=86120, nr_sectors = 8 limit=40427 [ 196.554686][ T5049] syz.4.207: attempt to access beyond end of device [ 196.554686][ T5049] loop4: rw=524288, sector=86128, nr_sectors = 8 limit=40427 [ 196.556817][ T4471] syz.1.24: attempt to access beyond end of device [ 196.556817][ T4471] loop1: rw=524288, sector=86016, nr_sectors = 8 limit=40427 [ 196.562939][ T4684] syz.3.86: attempt to access beyond end of device [ 196.562939][ T4684] loop3: rw=0, sector=86736, nr_sectors = 8 limit=40427 [ 196.565976][ T4857] syz.2.143: attempt to access beyond end of device [ 196.565976][ T4857] loop2: rw=524288, sector=87304, nr_sectors = 8 limit=40427 [ 196.566574][ T4684] syz.3.86: attempt to access beyond end of device [ 196.566574][ T4684] loop3: rw=0, sector=86744, nr_sectors = 8 limit=40427 [ 196.570352][ T4857] syz.2.143: attempt to access beyond end of device [ 196.570352][ T4857] loop2: rw=524288, sector=87312, nr_sectors = 8 limit=40427 [ 196.577679][ T4857] syz.2.143: attempt to access beyond end of device [ 196.577679][ T4857] loop2: rw=524288, sector=87320, nr_sectors = 8 limit=40427 [ 196.579120][ T4471] syz.1.24: attempt to access beyond end of device [ 196.579120][ T4471] loop1: rw=524288, sector=86024, nr_sectors = 8 limit=40427 [ 196.585619][ T4684] syz.3.86: attempt to access beyond end of device [ 196.585619][ T4684] loop3: rw=0, sector=86752, nr_sectors = 8 limit=40427 [ 197.319198][ T4301] Bluetooth: hci0: command tx timeout [ 197.399204][ T4295] Bluetooth: hci7: command tx timeout [ 199.399235][ T4301] Bluetooth: hci0: command tx timeout [ 199.489104][ T4295] Bluetooth: hci7: command tx timeout [ 200.053937][ T4295] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 200.057741][ T4295] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 200.060997][ T4295] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 200.063772][ T4295] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 200.066610][ T4295] Bluetooth: hci11: unexpected cc 0x0c25 length: 249 > 3 [ 200.068858][ T4295] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 201.559188][ T4471] bio_check_eod: 227849 callbacks suppressed [ 201.559205][ T4471] syz.1.24: attempt to access beyond end of device [ 201.559205][ T4471] loop1: rw=0, sector=88920, nr_sectors = 8 limit=40427 [ 201.564542][ T4471] syz.1.24: attempt to access beyond end of device [ 201.564542][ T4471] loop1: rw=0, sector=88928, nr_sectors = 8 limit=40427 [ 201.568121][ T4471] syz.1.24: attempt to access beyond end of device [ 201.568121][ T4471] loop1: rw=0, sector=88936, nr_sectors = 8 limit=40427 [ 201.569176][ T4684] syz.3.86: attempt to access beyond end of device [ 201.569176][ T4684] loop3: rw=524288, sector=88160, nr_sectors = 8 limit=40427 [ 201.576126][ T4684] syz.3.86: attempt to access beyond end of device [ 201.576126][ T4684] loop3: rw=524288, sector=88168, nr_sectors = 8 limit=40427 [ 201.581330][ T5049] syz.4.207: attempt to access beyond end of device [ 201.581330][ T5049] loop4: rw=0, sector=86456, nr_sectors = 8 limit=40427 [ 201.585103][ T5049] syz.4.207: attempt to access beyond end of device [ 201.585103][ T5049] loop4: rw=0, sector=86464, nr_sectors = 8 limit=40427 [ 201.588796][ T5049] syz.4.207: attempt to access beyond end of device [ 201.588796][ T5049] loop4: rw=0, sector=86472, nr_sectors = 8 limit=40427 [ 201.593427][ T4857] syz.2.143: attempt to access beyond end of device [ 201.593427][ T4857] loop2: rw=524288, sector=88560, nr_sectors = 8 limit=40427 [ 201.597206][ T4857] syz.2.143: attempt to access beyond end of device [ 201.597206][ T4857] loop2: rw=524288, sector=88568, nr_sectors = 8 limit=40427 [ 202.119215][ T4295] Bluetooth: hci11: command tx timeout [ 204.199239][ T4295] Bluetooth: hci11: command tx timeout [ 204.679608][ T28] INFO: task kworker/u4:2:36 blocked for more than 143 seconds. [ 204.681639][ T28] Not tainted 6.1.107-syzkaller #0 [ 204.683071][ T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 204.692684][ T28] task:kworker/u4:2 state:D stack:0 pid:36 ppid:2 flags:0x00000008 [ 204.695014][ T28] Workqueue: writeback wb_workfn (flush-7:1) [ 204.696487][ T28] Call trace: [ 204.697457][ T28] __switch_to+0x320/0x754 [ 204.698588][ T28] __schedule+0xef4/0x1d44 [ 204.729337][ T28] schedule+0xc4/0x170 [ 204.730503][ T28] rwsem_down_write_slowpath+0xc80/0x156c [ 204.732037][ T28] down_write+0x84/0x88 [ 204.733496][ T28] f2fs_balance_fs+0x40c/0x60c [ 204.734972][ T28] f2fs_write_inode+0x42c/0x4a0 [ 204.736242][ T28] __writeback_single_inode+0x614/0x1770 [ 204.737828][ T28] writeback_sb_inodes+0x978/0x1718 [ 204.769206][ T28] __writeback_inodes_wb+0x110/0x39c [ 204.777271][ T28] wb_writeback+0x428/0x1130 [ 204.778620][ T28] wb_workfn+0xc98/0x1034 [ 204.789130][ T28] process_one_work+0x7ac/0x1404 [ 204.790536][ T28] worker_thread+0x8e4/0xfec [ 204.791742][ T28] kthread+0x250/0x2d8 [ 204.792821][ T28] ret_from_fork+0x10/0x20 [ 204.794156][ T28] [ 204.794156][ T28] Showing all locks held in the system: [ 204.796400][ T28] 1 lock held by rcu_tasks_kthre/12: [ 204.797814][ T28] #0: ffff800015b950b0 (rcu_tasks.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x44/0xcf4 [ 204.839002][ T28] 1 lock held by rcu_tasks_trace/13: [ 204.840582][ T28] #0: ffff800015b958b0 (rcu_tasks_trace.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x44/0xcf4 [ 204.843683][ T28] 1 lock held by khungtaskd/28: [ 204.844985][ T28] #0: ffff800015b94ee0 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0xc/0x44 [ 204.847555][ T28] 4 locks held by kworker/u4:2/36: [ 204.879173][ T28] #0: ffff0000c2e55938 ((wq_completion)writeback){+.+.}-{0:0}, at: process_one_work+0x664/0x1404 [ 204.882234][ T28] #1: ffff80001d5f7c20 ((work_completion)(&(&wb->dwork)->work)){+.+.}-{0:0}, at: process_one_work+0x6a8/0x1404 [ 204.885552][ T28] #2: ffff0000decf20e0 (&type->s_umount_key#55){++++}-{3:3}, at: trylock_super+0x28/0xf8 [ 204.888234][ T28] #3: ffff0000d9731140 (&sbi->gc_lock){+.+.}-{3:3}, at: f2fs_balance_fs+0x40c/0x60c [ 204.929214][ T28] 4 locks held by kworker/u4:3/307: [ 204.930724][ T28] #0: ffff0000c2e55938 ((wq_completion)writeback){+.+.}-{0:0}, at: process_one_work+0x664/0x1404 [ 204.933536][ T28] #1: ffff8000216a7c20 ((work_completion)(&(&wb->dwork)->work)){+.+.}-{0:0}, at: process_one_work+0x6a8/0x1404 [ 204.936757][ T28] #2: ffff0000dbf900e0 (&type->s_umount_key#55){++++}-{3:3}, at: trylock_super+0x28/0xf8 [ 204.969141][ T28] #3: ffff0000ef391140 (&sbi->gc_lock){+.+.}-{3:3}, at: f2fs_balance_fs+0x40c/0x60c [ 204.971909][ T28] 3 locks held by kworker/0:3/3872: [ 204.973354][ T28] #0: ffff0000d5dcf138 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_one_work+0x664/0x1404 [ 204.976359][ T28] #1: ffff8000237d7c20 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_one_work+0x6a8/0x1404 [ 204.999029][ T28] #2: ffff800017fe1608 (rtnl_mutex){+.+.}-{3:3}, at: rtnl_lock+0x20/0x2c [ 205.001475][ T28] 2 locks held by getty/4051: [ 205.002703][ T28] #0: ffff0000d6527098 (&tty->ldisc_sem){++++}-{0:0}, at: ldsem_down_read+0x3c/0x4c [ 205.005282][ T28] #1: ffff80001efc02f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x414/0x1214 [ 205.008078][ T28] 3 locks held by kworker/1:10/4409: [ 205.039042][ T28] #0: ffff0000d5dcf138 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_one_work+0x664/0x1404 [ 205.042264][ T28] #1: ffff800021787c20 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_one_work+0x6a8/0x1404 [ 205.045580][ T28] #2: ffff800017fe1608 (rtnl_mutex){+.+.}-{3:3}, at: rtnl_lock+0x20/0x2c [ 205.047908][ T28] 4 locks held by kworker/u4:7/4411: [ 205.079178][ T28] #0: ffff0000c2e55938 ((wq_completion)writeback){+.+.}-{0:0}, at: process_one_work+0x664/0x1404 [ 205.082123][ T28] #1: ffff800021677c20 ((work_completion)(&(&wb->dwork)->work)){+.+.}-{0:0}, at: process_one_work+0x6a8/0x1404 [ 205.085358][ T28] #2: ffff0000dce680e0 (&type->s_umount_key#55){++++}-{3:3}, at: trylock_super+0x28/0xf8 [ 205.088027][ T28] #3: ffff0000dfb1d140 (&sbi->gc_lock){+.+.}-{3:3}, at: f2fs_balance_fs+0x40c/0x60c [ 205.109178][ T28] 3 locks held by kworker/u4:8/4426: [ 205.110681][ T28] #0: ffff0000c0029138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x664/0x1404 [ 205.113735][ T28] #1: ffff800021d77c20 ((linkwatch_work).work){+.+.}-{0:0}, at: process_one_work+0x6a8/0x1404 [ 205.116557][ T28] #2: ffff800017fe1608 (rtnl_mutex){+.+.}-{3:3}, at: rtnl_lock+0x20/0x2c [ 205.118808][ T28] 5 locks held by kworker/u4:11/4447: [ 205.149203][ T28] #0: ffff0000c0845138 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x664/0x1404 [ 205.151944][ T28] #1: ffff800021e37c20 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x6a8/0x1404 [ 205.154644][ T28] #2: ffff800017fd57d0 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0xf4/0x994 [ 205.189207][ T28] #3: ffff0000f07352f8 (&devlink->lock_key#3){+.+.}-{3:3}, at: devlink_pernet_pre_exit+0x130/0x2fc [ 205.192289][ T28] #4: ffff800017fe1608 (rtnl_mutex){+.+.}-{3:3}, at: rtnl_lock+0x20/0x2c [ 205.194697][ T28] 5 locks held by syz.1.24/4471: [ 205.196135][ T28] 4 locks held by kworker/u4:14/4604: [ 205.197640][ T28] #0: ffff0000c2e55938 ((wq_completion)writeback){+.+.}-{0:0}, at: process_one_work+0x664/0x1404 [ 205.239108][ T28] #1: ffff800021537c20 ((work_completion)(&(&wb->dwork)->work)){+.+.}-{0:0}, at: process_one_work+0x6a8/0x1404 [ 205.242388][ T28] #2: ffff0000dee560e0 (&type->s_umount_key#55){++++}-{3:3}, at: trylock_super+0x28/0xf8 [ 205.245173][ T28] #3: ffff0000d915d140 (&sbi->gc_lock){+.+.}-{3:3}, at: f2fs_balance_fs+0x40c/0x60c [ 205.247852][ T28] 5 locks held by syz.3.86/4684: [ 205.279034][ T28] 4 locks held by syz.2.143/4857: [ 205.280496][ T28] 6 locks held by syz.4.207/5049: [ 205.281733][ T28] 2 locks held by kworker/u4:22/5564: [ 205.283196][ T28] #0: ffff0000c0029138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x664/0x1404 [ 205.286055][ T28] #1: ffff800022757c20 ((work_completion)(&map->work)){+.+.}-{0:0}, at: process_one_work+0x6a8/0x1404 [ 205.319430][ T28] 2 locks held by syz-executor/5667: [ 205.320998][ T28] #0: ffff80001803c430 (cb_lock){++++}-{3:3}, at: genl_rcv+0x28/0x50 [ 205.323378][ T28] #1: ffff800017fe1608 (rtnl_mutex){+.+.}-{3:3}, at: rtnl_lock+0x20/0x2c [ 205.325760][ T28] 4 locks held by syz-executor/5796: [ 205.327174][ T28] 5 locks held by syz-executor/5809: [ 205.328634][ T28] #0: ffff0000d882c460 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x244/0x91c [ 205.362971][ T28] #1: ffff000102731488 (&of->mutex){+.+.}-{3:3}, at: kernfs_fop_write_iter+0x1c8/0x48c [ 205.365783][ T28] #2: ffff0000d004eda0 (kn->active#45){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x1e4/0x48c [ 205.368479][ T28] #3: ffff8000173a4268 (nsim_bus_dev_list_lock){+.+.}-{3:3}, at: del_device_store+0xec/0x39c [ 205.389125][ T28] #4: ffff0000f07340e8 (&dev->mutex){....}-{3:3}, at: device_release_driver_internal+0xbc/0x724 [ 205.392132][ T28] 2 locks held by syz.4.476/5979: [ 205.393460][ T28] #0: ffff800017fe1608 (rtnl_mutex){+.+.}-{3:3}, at: rtnl_lock+0x20/0x2c [ 205.395754][ T28] #1: ffff800017fe3a48 (bpf_dispatcher_xdp.mutex){+.+.}-{3:3}, at: bpf_dispatcher_change_prog+0xb0/0x910 [ 205.398808][ T28] 1 lock held by syz.3.478/5986: [ 205.429113][ T28] #0: ffff800017fe1608 (rtnl_mutex){+.+.}-{3:3}, at: rtnl_lock+0x20/0x2c [ 205.431739][ T28] 1 lock held by syz-executor/5990: [ 205.433165][ T28] #0: ffff800017fe1608 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e8/0xd94 [ 205.435775][ T28] 1 lock held by syz-executor/5993: [ 205.437199][ T28] #0: ffff800017fe1608 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e8/0xd94 [ 205.459008][ T28] 1 lock held by syz-executor/5999: [ 205.460518][ T28] #0: ffff800017fe1608 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e8/0xd94 [ 205.463233][ T28] 2 locks held by dhcpcd/6002: [ 205.469558][ T28] #0: ffff0000d2d06130 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x4c/0xb58 [ 205.472350][ T28] #1: ffff800015b9a4b8 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x3e0/0x77c [ 205.475328][ T28] 2 locks held by dhcpcd/6003: [ 205.476578][ T28] #0: ffff0000f65e0130 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x4c/0xb58 [ 205.509136][ T28] #1: ffff800015b9a4b8 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x30c/0x77c [ 205.512254][ T28] 1 lock held by dhcpcd/6004: [ 205.513569][ T28] #0: ffff0001067b0130 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x4c/0xb58 [ 205.516409][ T28] [ 205.517030][ T28] ============================================= [ 205.517030][ T28] [ 205.549117][ T28] Kernel panic - not syncing: hung_task: blocked tasks [ 205.551029][ T28] CPU: 0 PID: 28 Comm: khungtaskd Not tainted 6.1.107-syzkaller #0 [ 205.553224][ T28] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 205.555786][ T28] Call trace: [ 205.556641][ T28] dump_backtrace+0x1c8/0x1f4 [ 205.557887][ T28] show_stack+0x2c/0x3c [ 205.558971][ T28] dump_stack_lvl+0x108/0x170 [ 205.560260][ T28] dump_stack+0x1c/0x58 [ 205.561428][ T28] panic+0x300/0x804 [ 205.562606][ T28] hung_task_panic+0x0/0x2c [ 205.563862][ T28] kthread+0x250/0x2d8 [ 205.564989][ T28] ret_from_fork+0x10/0x20 [ 205.566149][ T28] SMP: stopping secondary CPUs [ 205.567464][ T28] Kernel Offset: disabled [ 205.568592][ T28] CPU features: 0x080000,02070084,26017203 [ 205.570166][ T28] Memory Limit: none [ 206.358105][ T28] Rebooting in 86400 seconds..