last executing test programs: 10.163896753s ago: executing program 1: prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r0}, 0x10) syz_mount_image$ext4(&(0x7f00000013c0)='ext4\x00', &(0x7f0000000300)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x10, &(0x7f0000000680), 0xfe, 0x244, &(0x7f0000000400)="$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") creat(&(0x7f0000000e00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) symlink(&(0x7f0000000540)='./file0\x00', &(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000005c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) r1 = open(&(0x7f0000000080)='.\x00', 0x0, 0x0) getdents(r1, &(0x7f0000000280)=""/4096, 0x9005) 9.092213905s ago: executing program 0: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = dup2(0xffffffffffffffff, r0) sendmmsg$unix(r1, &(0x7f0000001340)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = getpid() waitid(0x0, r3, &(0x7f0000000340), 0x0, &(0x7f0000000440)) sched_setaffinity(r3, 0x8, &(0x7f0000000040)=0x8000010001) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r4, &(0x7f0000001880)=[{&(0x7f0000001a80)=""/102400, 0x19000}], 0x1, 0x0, 0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCGSID(r5, 0x5429, &(0x7f0000000080)=0x0) ptrace$setregs(0xd, r6, 0x200, &(0x7f0000000280)="fb67d1") r7 = syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00') getdents64(r7, &(0x7f0000002f40)=""/4098, 0x1002) getdents64(0xffffffffffffffff, 0x0, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000300)=0xe) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x90) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSMRU1(0xffffffffffffffff, 0x4020744f, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps_rollup\x00') preadv(r8, &(0x7f00000000c0)=[{&(0x7f0000000100)=""/162, 0xa2}], 0x1, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000700)={0x68, 0x0, 0x1, 0x101, 0x0, 0x0, {0xc}, [@CTA_TUPLE_REPLY={0x44, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_ID={0x8}, @CTA_STATUS_MASK={0x8, 0x1a, 0x1, 0x0, 0x9}]}, 0x68}}, 0x0) r9 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r9, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r9, 0x6, 0x13, &(0x7f0000000000), 0xfce3) setsockopt$inet_tcp_int(r9, 0x6, 0xd, 0x0, 0x0) 8.512410234s ago: executing program 1: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080), 0x80042, 0x0) write$binfmt_elf64(r0, &(0x7f0000000ec0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}], "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", ['\x00']}, 0xa26) 7.185440097s ago: executing program 1: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)={0x5c, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_SEC_KEY={0x40, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_BYTES={0x14, 0x4, "403a050c5bae9c544ef2b6d713459a7a"}, @NL802154_KEY_ATTR_ID={0x20, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x14, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}, @NL802154_DEV_ADDR_ATTR_MODE={0x8}]}]}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5}]}]}, 0x5c}}, 0x0) 7.130688191s ago: executing program 0: ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x0, 0x16, &(0x7f0000000780)=ANY=[@ANYBLOB="6115b400000000006113600000000000bfa00000000000001503000008004e002d3501000000000095004100000000006916000000000000bf67000000000000350605000fff07206706000005000000160302000ee60060bf"], 0x0}, 0x90) syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000340)={'wlan1\x00'}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f0000000100)=0x1, 0x47f) getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000000)={0x0, 0x7}, &(0x7f0000000040)=0x8) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) timer_create(0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x5) preadv(r2, &(0x7f00000007c0)=[{&(0x7f0000001a80)=""/102400, 0x19000}], 0x1, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="7e657720308199747f10030001000000000000"], 0x2a, 0xfffffffffffffffc) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) connect$inet6(r3, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) write$binfmt_script(r3, &(0x7f0000000340), 0x76e5467) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0x8001, 0xfffe}, 0x14) shutdown(r1, 0x2) 7.079706055s ago: executing program 4: syz_mount_image$fuse(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000040)=@filename='\x00', &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) mount$9p_unix(0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) pivot_root(0x0, &(0x7f0000000080)='./file0\x00') setuid(0xee00) r0 = memfd_create(&(0x7f00000002c0)='#\'%nod%v\x00\x7f\xe5\xd0ql\x86\xc9\xe6\x14\x93\xb0\x7f_,y<~\xab\x84\x00\x00\x00\x00\x00\x00\x14}\n\x81\xc7\x85|oC\xca\v\xe3\xba]fn\r\xdf!\x94\x0f\xaf\xb7\x93\xe8\xb6\xc3N\x16&\xab\xf9{\xaf;\xcf\x8c\xa8\xb9\x06\xaf\xd0\xfb:\x90LNF\x13\x9f\xc2\xb7/1\xb9V\xf0*\xcb\xdc\x05n<\xcfi\x02=1\xda\"\xb3\xfe\xf3\x97\xd9\xa5b\xd4\x00Q$\xb2v\\\xa9\xcf*tw\x8a\n_)\x89A\x8f`R\x12zM\a\xc43\xd0d\xee\x13Q', 0x0) write(r0, &(0x7f0000002000)='/', 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x11, r0, 0x0) faccessat2(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x2, 0x0) 6.931626236s ago: executing program 3: ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000340)={'wlan1\x00'}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000000100)=0x1, 0x47f) getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000000)={0x0, 0x7}, &(0x7f0000000040)=0x8) bind$inet(r2, &(0x7f00000002c0)={0x2, 0x4e21}, 0x10) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) timer_create(0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x5) preadv(r3, &(0x7f00000007c0)=[{&(0x7f0000001a80)=""/102400, 0x19000}], 0x1, 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) connect$inet6(r4, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) write$binfmt_script(r4, &(0x7f0000000340), 0x76e5467) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0x0, 0xfffe}, 0x14) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000440)={0x0, 0xfffffc89, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[], 0x398}, 0x1, 0x0, 0x0, 0x30000005}, 0x0) 6.800855263s ago: executing program 2: openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000bbdffc)) poll(0x0, 0x0, 0x100) connect$inet(0xffffffffffffffff, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) writev(0xffffffffffffffff, 0x0, 0x0) write$9p(0xffffffffffffffff, 0x0, 0x0) r0 = memfd_create(&(0x7f0000000480)='\xc0\x87:*\x18\xc1k\xa7\x87[\xa0o8\x04\x00\x00\x00\x00\x00\x00\x00\x7f\xfd6\x8d}\xd8\xf2G\xb8\xeae)\x90\x86\xe3\x96\b\xe0\xfa\xb1\xd8N\xb2W\xcb\x8d}3lm8\xa57\xc9\x00HOA\xc8\x80kR\xfc\xcb%u3\xec\xde%\x00\xb1\x9aF\xe2\xba[\xc7%\x88 \xeeQR\x9f\x81\x8b\xdc\xc7\xdc\xdem\xbe\x7f2\x11)W\x9c\x82\x91\x17\xd8\xda@4\x9f\xc5\xe3\x8d.\xd1=\xcf\xbf\x81\xb5\x8d%K\x1d\xe7_\xde\x87\xdd\xc1\xf0\x91\x1a!\x9c\xd3\v\xc9\x95d\xe3*\xa9\xfa\x99\x9d\xb8\x89>\xc9\xf2/\x13{\x1a\x7f\x00\x00\x00\x00+$\xedX\xb7KV\x90\xc3D\x82`\xea\x16\xc6\xcef\xab\x05\x19\x96\xb9_6*-\xf3\x8c\x9a\x15\x9c\xf5\xb4O\x17@d\x81+\xf6\xe6+\xed\r\xd2\xb3\xaa\x9b\x7fC\'\xa2\xf6\x12\xa1\x15Punfo\x7f\x92G\x0e.\xce\xd8h\xb9p2\xccC\xbaH\xc4\xdc\xe2\xa1%)\x85\xc7O]\'9\x92\xad\xfbJ\x02\x1d\x91-\xc99\t&\xbdq\x06`T\xc8\x92\xaf\xad#\xd8b\x90\xeb\x05\x9f\t5\x06\xdd\xaf\x84\xf4\"\x13\xcf\xe5\x93D\xad~F\xe5\x19\xaa\xaa\xb2\xb1\x03m\x82+\x06\x1bF^\xd3n\xc4F\xc1\xc08\x94\xe6\xe5\x1f\xa7\xf6\xcaA\x90T\x1b\xe6\xb9\xe7\xff\xc5H\x04\x8d\xca\xad\x17UlY\x9a}\r4\xac\x93\xac\v2\xc6\xf9\xbe\xfeI\x8b\xd4/`\xab\x1e\xcf\x7f\b\x94 2.{\xc1\xbe\x9bth~\xcb\xb9E\x10W\xed\xed51[\xc5\xeb\xb1ux\x94\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdem\xe3+q:3\xfa*\x98o\'f\xbcY\x8e?\xf9\x84y\x89Y\x1c]\xad$\x7fp\xf1\xa3\x99[\xff\x1f\x94\xc2\xdb\xbaG\xa6UD\x88Y6\x11Y\xd4\xd1\xde\x9a{]\xe2\x98W\xb9\x13\x17<\x8b!?\x8e\xbc\xae\xf9\xcc\b\x90n\x15\x7f\xd5WS\xfbN\xec)B\xe7R\xa5\xd7O\x83\x80}\xcc5\x99\xdb\xd6\xbd\x9c\x05l\xfc.\xf4\xbbeF\xa3\xea}\xf1\x86z\xca\xad\x82\xd9IRV5\xa77\'\x1a\x1c\x89\xef:\xee\x10\xb2\xd6\xc8\xf4\xb5\xdd\xd8c!@JRY\xa3|Pjk\xdc\xa5d\xc2\xecn\xc9X\xfc\xd4D\x13\"\xb2\x06\xbd&\xf86\xddXv\xc9\x1322L\xd6\x99\xf6\t\x9d\xbeZ\x02\xc0\xa41\xf9sNG\x02\x83\xe6Bl\xd2\x02\xfb[\x82\xc0I\xb7\xf6\xe5Z\xa1}\xee}\x8b\x89\x04\x8a\'\xc7J\xca\xdf:\x8ft\xe0\xf8\a', 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x11, r0, 0x0) fallocate(r0, 0x0, 0x0, 0x800000b) r1 = socket$inet6(0xa, 0x3, 0x6) ioctl$BTRFS_IOC_LOGICAL_INO(r1, 0x8912, &(0x7f0000000040)={0x3, 0x0, '\x00', 0x0, 0x0}) 6.308884838s ago: executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, &(0x7f0000000180)={0x0, 0x0, 0x0, 0xffffffffffffffff, 0x5}) 6.150018094s ago: executing program 1: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/wireless\x00') preadv(r0, &(0x7f0000000280)=[{&(0x7f0000000500)=""/204, 0xcc}], 0x1, 0x100000, 0x0) 5.80776515s ago: executing program 2: syz_emit_ethernet(0x46, &(0x7f0000000040)={@local, @random="b0c942034375", @void, {@ipv4={0x800, @tcp={{0x9, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@rr={0x7, 0x3, 0x62}, @lsrr={0x83, 0x7, 0x4e, [@loopback]}, @cipso={0x86, 0x6}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x0, 0xffff}}}}}}, 0x0) r0 = socket(0x0, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x0, 0x0, 0x800000}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="200000001a00010000000000000000000a000000000000000000001e80000000"], 0x20}}, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_GET_LAPIC(0xffffffffffffffff, 0x8400ae8e, &(0x7f00000000c0)={"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"}) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x60, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x0}, @IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}]}, 0x60}}, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$UI_SET_LEDBIT(r1, 0x40045569, 0x6) ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f0000000000)={{}, 'syz0\x00'}) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x11) ioctl$UI_DEV_CREATE(r1, 0x5501) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$RTC_UIE_ON(r2, 0x7003) pipe(&(0x7f0000000140)={0xffffffffffffffff}) poll(&(0x7f0000000100)=[{r3}], 0x1, 0x9a1) read$FUSE(r3, &(0x7f0000000700)={0x2020}, 0x2020) sendto$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r4, 0xffffffffffffffff, 0x0) r5 = socket(0x10, 0x3, 0x0) recvmmsg$unix(r5, &(0x7f0000005b80)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000008c0)=""/4118, 0x1016}, {&(0x7f0000005d80)=""/96, 0x60}], 0x2}}, {{0x0, 0x0, &(0x7f00000039c0)=[{&(0x7f0000005a40)=""/268, 0x10c}, {&(0x7f00000027c0)=""/4096, 0x1000}, {&(0x7f00000037c0)=""/220, 0xdc}], 0x3}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000002540)}}], 0x3, 0x0, 0x0) write(r5, &(0x7f0000000100)="1400000052004f7fb3e4bf80a000080000000000", 0x14) 4.719141288s ago: executing program 1: prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r0}, 0x10) syz_mount_image$ext4(&(0x7f00000013c0)='ext4\x00', &(0x7f0000000300)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x10, &(0x7f0000000680), 0xfe, 0x244, &(0x7f0000000400)="$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") creat(&(0x7f0000000e00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) symlink(&(0x7f0000000540)='./file0\x00', &(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000005c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) r1 = open(&(0x7f0000000080)='.\x00', 0x0, 0x0) getdents(r1, &(0x7f0000000280)=""/4096, 0x9005) 4.490785711s ago: executing program 4: r0 = socket$inet_icmp(0x2, 0x2, 0x1) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000038c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000003900)={'batadv_slave_1\x00', 0x0}) bind$packet(r0, &(0x7f0000003940)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @dev}, 0x14) 4.187630905s ago: executing program 3: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080), 0x80042, 0x0) write$binfmt_elf64(r0, &(0x7f0000000ec0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}], "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", ['\x00']}, 0xa26) 3.80076453s ago: executing program 2: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = dup2(0xffffffffffffffff, r0) sendmmsg$unix(r1, &(0x7f0000001340)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = getpid() waitid(0x0, r3, &(0x7f0000000340), 0x0, &(0x7f0000000440)) sched_setaffinity(r3, 0x8, &(0x7f0000000040)=0x8000010001) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r4, &(0x7f0000001880)=[{&(0x7f0000001a80)=""/102400, 0x19000}], 0x1, 0x0, 0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCGSID(r5, 0x5429, &(0x7f0000000080)=0x0) ptrace$setregs(0xd, r6, 0x200, &(0x7f0000000280)="fb67d1") r7 = syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00') getdents64(r7, &(0x7f0000002f40)=""/4098, 0x1002) getdents64(0xffffffffffffffff, 0x0, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000300)=0xe) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x90) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSMRU1(0xffffffffffffffff, 0x4020744f, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps_rollup\x00') preadv(r8, &(0x7f00000000c0)=[{&(0x7f0000000100)=""/162, 0xa2}], 0x1, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000700)={0x68, 0x0, 0x1, 0x101, 0x0, 0x0, {0xc}, [@CTA_TUPLE_REPLY={0x44, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_ID={0x8}, @CTA_STATUS_MASK={0x8, 0x1a, 0x1, 0x0, 0x9}]}, 0x68}}, 0x0) r9 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r9, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r9, 0x6, 0x13, &(0x7f0000000000), 0xfce3) setsockopt$inet_tcp_int(r9, 0x6, 0xd, 0x0, 0x0) 3.672067414s ago: executing program 3: openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='.\x00', 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x2, 0xc}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000007d00000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = inotify_init1(0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x103a42, 0x0) inotify_add_watch(r1, &(0x7f0000000140)='./file0\x00', 0x203) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{r2}, &(0x7f0000000000), &(0x7f0000000200)}, 0x20) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_GET(r5, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000001940)=ANY=[@ANYRES16=r6, @ANYBLOB="01dfffffff0000000000210000000c00018008000100", @ANYRES32=r4], 0x20}}, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000000)={0x0, 0x0}, 0x8) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000000c0)=r7, 0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000ac0)={r2}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x14, 0x26, &(0x7f0000000280)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000480), 0x10, r7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x1134ff6f}, 0x90) acct(&(0x7f00000001c0)='./file0\x00') acct(0x0) 3.666215805s ago: executing program 4: fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f0000000000)={0x0, 0x0, 0xfffffffffffffffd}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r0 = socket(0x18, 0x1, 0x0) setsockopt(r0, 0x1000000029, 0x2e, &(0x7f0000000000)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14) 3.551847935s ago: executing program 0: r0 = open(&(0x7f0000000040)='./file0\x00', 0x70e, 0x0) mmap(&(0x7f0000000000/0x13000)=nil, 0x13000, 0x3, 0x10, r0, 0x0) open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) madvise(&(0x7f0000003000/0x3000)=nil, 0x3000, 0x3) 3.155984867s ago: executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) r2 = socket(0x10, 0x80002, 0x0) r3 = creat(&(0x7f0000000080)='./file0\x00', 0x1de) write$binfmt_script(r3, &(0x7f00000019c0)={'#! ', './file0', [{0x20, '\x06^-'}]}, 0xf) syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000080)='./file0\x00', 0xa08886, &(0x7f0000000040)=ANY=[@ANYRES32=0x0], 0x9, 0x2a8, &(0x7f0000000500)="$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") bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) close(r3) socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r7, 0x8933, &(0x7f0000000240)={'wg0\x00'}) sendmsg$nl_route(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x44}}, 0x0) r8 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x18) ioctl$TIOCVHANGUP(r8, 0x5437, 0x0) 2.644505574s ago: executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, 0x0) sendmsg$NL802154_CMD_NEW_SEC_KEY(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)={0x5c, r2, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SEC_KEY={0x40, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_BYTES={0x14, 0x4, "403a050c5bae9c544ef2b6d713459a7a"}, @NL802154_KEY_ATTR_ID={0x20, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x14, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}, @NL802154_DEV_ADDR_ATTR_MODE={0x8}]}]}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5}]}]}, 0x5c}}, 0x0) 2.50097928s ago: executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001080)={0x6, 0x14, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000045000000180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff9, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 2.46887487s ago: executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/wireless\x00') preadv(r0, &(0x7f0000000280)=[{&(0x7f0000000500)=""/204, 0xcc}], 0x1, 0x100000, 0x0) 2.209147254s ago: executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, &(0x7f0000000180)={0x0, 0x0, 0x0, 0xffffffffffffffff, 0x5}) 1.614988222s ago: executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_GET_STATUS(r0, 0x4c03, &(0x7f0000001b00)) 1.512072774s ago: executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) recvfrom(r0, &(0x7f0000002280)=""/4119, 0x1017, 0x0, 0x0, 0x0) 1.119993237s ago: executing program 2: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080), 0x80042, 0x0) write$binfmt_elf64(r0, &(0x7f0000000ec0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}], "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", ['\x00']}, 0xa39) 856.717417ms ago: executing program 3: syz_mount_image$udf(&(0x7f00000000c0), &(0x7f0000000180)='./file0\x00', 0x4080, &(0x7f00000007c0)=ANY=[@ANYBLOB='lastblock=00000000000000000000,umask=00000000000000000000002,dmode=00000000000000000077777,novrs,shortad,shortad,undelete,iocharset=cp437,shortad,umask=00000000000000000000006,dmode=00000000000000000000002,nostrict,uid=', @ANYRESOCT=0x0, @ANYRESDEC], 0x2, 0xc36, &(0x7f0000002540)="$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") mkdir(&(0x7f0000000340)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) r1 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) renameat2(r0, &(0x7f0000000000)='./file0\x00', r1, &(0x7f00000004c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00', 0x0) rename(&(0x7f0000000200)='./file0\x00', &(0x7f0000000f00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 679.178056ms ago: executing program 4: socket(0x10, 0x803, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{}, &(0x7f0000000000), &(0x7f0000000080)}, 0x20) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000001c0)={0xffffffffffffffff, 0xe0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200), ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000c6, 0x8, 0x8, &(0x7f0000000280)}}, 0x10) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000a00)={0xffffffffffffffff}, 0x4) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0xffffffffffffffe9) bpf$PROG_LOAD(0x5, 0x0, 0x2a) bpf$MAP_CREATE(0x0, 0x0, 0xff34) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101101) ioctl$USBDEVFS_FREE_STREAMS(r0, 0x802c550a, &(0x7f0000000000)=ANY=[@ANYBLOB="02002303100007006000000002000020d3"]) ioctl$USBDEVFS_FREE_STREAMS(r0, 0x4008550d, 0x0) 276.612955ms ago: executing program 2: prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r0}, 0x10) syz_mount_image$ext4(&(0x7f00000013c0)='ext4\x00', &(0x7f0000000300)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x10, &(0x7f0000000680), 0xfe, 0x244, &(0x7f0000000400)="$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") creat(&(0x7f0000000e00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) symlink(&(0x7f0000000540)='./file0\x00', &(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000005c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) r1 = open(&(0x7f0000000080)='.\x00', 0x0, 0x0) getdents(r1, &(0x7f0000000280)=""/4096, 0x9005) 0s ago: executing program 0: r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x0, 0x0) mmap$usbmon(&(0x7f0000ff8000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) ioctl$MON_IOCT_RING_SIZE(r0, 0x9204, 0x47cdc) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000100)=0x3) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$PPPIOCATTACH(r2, 0x4004743d, &(0x7f0000000040)=0x3) r3 = epoll_create1(0x0) ppoll(&(0x7f0000000300)=[{r3, 0x4b9}], 0x1, 0x0, 0x0, 0x0) getresuid(0xfffffffffffffffe, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f00000000c0)) close(r1) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.81' (ED25519) to the list of known hosts. 2024/06/05 10:57:38 fuzzer started 2024/06/05 10:57:39 dialing manager at 10.128.0.169:30026 [ 187.046174][ T5049] cgroup: Unknown subsys name 'net' [ 187.313945][ T5049] cgroup: Unknown subsys name 'rlimit' [ 224.262513][ T1222] ieee802154 phy0 wpan0: encryption failed: -22 [ 224.269409][ T1222] ieee802154 phy1 wpan1: encryption failed: -22 2024/06/05 10:58:35 starting 5 executor processes [ 241.554734][ T5055] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 244.791991][ T5077] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 244.819267][ T5077] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 244.838981][ T5077] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 244.885007][ T51] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 244.906952][ T5081] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 244.918340][ T5081] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 244.927817][ T51] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 244.936684][ T5081] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 244.938262][ T51] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 244.971794][ T4434] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 244.997823][ T51] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 245.027760][ T51] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 245.047817][ T51] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 245.101609][ T51] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 245.123632][ T51] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 245.171272][ T51] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 245.186725][ T51] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 245.250185][ T5077] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 245.261494][ T5077] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 245.270820][ T5077] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 245.281533][ T5077] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 245.300625][ T5081] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 245.312627][ T5081] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 245.322383][ T5081] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 245.365825][ T4434] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 245.378670][ T4434] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 245.400124][ T4434] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 245.434912][ T4434] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 245.447298][ T5081] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 245.457402][ T5081] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 246.398835][ T5076] chnl_net:caif_netlink_parms(): no params data found [ 246.862274][ T5082] chnl_net:caif_netlink_parms(): no params data found [ 247.045289][ T5081] Bluetooth: hci0: command tx timeout [ 247.125638][ T5081] Bluetooth: hci1: command tx timeout [ 247.359477][ T5090] chnl_net:caif_netlink_parms(): no params data found [ 247.378625][ T5081] Bluetooth: hci3: command tx timeout [ 247.453703][ T5081] Bluetooth: hci2: command tx timeout [ 247.525343][ T5081] Bluetooth: hci4: command tx timeout [ 247.812427][ T5076] bridge0: port 1(bridge_slave_0) entered blocking state [ 247.820547][ T5076] bridge0: port 1(bridge_slave_0) entered disabled state [ 247.828786][ T5076] bridge_slave_0: entered allmulticast mode [ 247.838699][ T5076] bridge_slave_0: entered promiscuous mode [ 247.901909][ T5076] bridge0: port 2(bridge_slave_1) entered blocking state [ 247.913036][ T5076] bridge0: port 2(bridge_slave_1) entered disabled state [ 247.921147][ T5076] bridge_slave_1: entered allmulticast mode [ 247.930883][ T5076] bridge_slave_1: entered promiscuous mode [ 248.125825][ T5088] chnl_net:caif_netlink_parms(): no params data found [ 248.288583][ T5076] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 248.301473][ T5082] bridge0: port 1(bridge_slave_0) entered blocking state [ 248.309413][ T5082] bridge0: port 1(bridge_slave_0) entered disabled state [ 248.317422][ T5082] bridge_slave_0: entered allmulticast mode [ 248.326602][ T5082] bridge_slave_0: entered promiscuous mode [ 248.341031][ T5080] chnl_net:caif_netlink_parms(): no params data found [ 248.362255][ T5082] bridge0: port 2(bridge_slave_1) entered blocking state [ 248.370229][ T5082] bridge0: port 2(bridge_slave_1) entered disabled state [ 248.378310][ T5082] bridge_slave_1: entered allmulticast mode [ 248.388090][ T5082] bridge_slave_1: entered promiscuous mode [ 248.457718][ T5076] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 248.812351][ T5082] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 248.869002][ T5076] team0: Port device team_slave_0 added [ 248.877582][ T5090] bridge0: port 1(bridge_slave_0) entered blocking state [ 248.885496][ T5090] bridge0: port 1(bridge_slave_0) entered disabled state [ 248.893286][ T5090] bridge_slave_0: entered allmulticast mode [ 248.902715][ T5090] bridge_slave_0: entered promiscuous mode [ 248.934900][ T5082] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 248.961812][ T5090] bridge0: port 2(bridge_slave_1) entered blocking state [ 248.971980][ T5090] bridge0: port 2(bridge_slave_1) entered disabled state [ 248.979955][ T5090] bridge_slave_1: entered allmulticast mode [ 248.989733][ T5090] bridge_slave_1: entered promiscuous mode [ 249.128348][ T5081] Bluetooth: hci0: command tx timeout [ 249.161628][ T5076] team0: Port device team_slave_1 added [ 249.206611][ T5081] Bluetooth: hci1: command tx timeout [ 249.455543][ T5081] Bluetooth: hci3: command tx timeout [ 249.504622][ T5090] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 249.520718][ T5076] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 249.528154][ T5076] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 249.535474][ T5081] Bluetooth: hci2: command tx timeout [ 249.554410][ T5076] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 249.592527][ T5090] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 249.605977][ T5081] Bluetooth: hci4: command tx timeout [ 249.611667][ T5082] team0: Port device team_slave_0 added [ 249.704131][ T5076] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 249.711384][ T5076] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 249.737893][ T5076] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 249.778236][ T5082] team0: Port device team_slave_1 added [ 250.008860][ T5088] bridge0: port 1(bridge_slave_0) entered blocking state [ 250.019755][ T5088] bridge0: port 1(bridge_slave_0) entered disabled state [ 250.027833][ T5088] bridge_slave_0: entered allmulticast mode [ 250.037529][ T5088] bridge_slave_0: entered promiscuous mode [ 250.058368][ T5090] team0: Port device team_slave_0 added [ 250.112525][ T5080] bridge0: port 1(bridge_slave_0) entered blocking state [ 250.120799][ T5080] bridge0: port 1(bridge_slave_0) entered disabled state [ 250.129135][ T5080] bridge_slave_0: entered allmulticast mode [ 250.139097][ T5080] bridge_slave_0: entered promiscuous mode [ 250.152651][ T5082] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 250.160071][ T5082] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 250.187348][ T5082] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 250.201098][ T5088] bridge0: port 2(bridge_slave_1) entered blocking state [ 250.209204][ T5088] bridge0: port 2(bridge_slave_1) entered disabled state [ 250.217759][ T5088] bridge_slave_1: entered allmulticast mode [ 250.227438][ T5088] bridge_slave_1: entered promiscuous mode [ 250.246610][ T5090] team0: Port device team_slave_1 added [ 250.333800][ T5080] bridge0: port 2(bridge_slave_1) entered blocking state [ 250.341761][ T5080] bridge0: port 2(bridge_slave_1) entered disabled state [ 250.349862][ T5080] bridge_slave_1: entered allmulticast mode [ 250.359347][ T5080] bridge_slave_1: entered promiscuous mode [ 250.384747][ T5076] hsr_slave_0: entered promiscuous mode [ 250.398534][ T5076] hsr_slave_1: entered promiscuous mode [ 250.411734][ T5082] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 250.420528][ T5082] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 250.446879][ T5082] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 250.622388][ T5080] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 250.697986][ T5088] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 250.710161][ T5090] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 250.717782][ T5090] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 250.744201][ T5090] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 250.812451][ T5080] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 250.836196][ T5088] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 250.888598][ T5090] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 250.896042][ T5090] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 250.922452][ T5090] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 251.078553][ T5080] team0: Port device team_slave_0 added [ 251.207698][ T5081] Bluetooth: hci0: command tx timeout [ 251.215933][ T5088] team0: Port device team_slave_0 added [ 251.231810][ T5080] team0: Port device team_slave_1 added [ 251.248265][ T5088] team0: Port device team_slave_1 added [ 251.285417][ T5081] Bluetooth: hci1: command tx timeout [ 251.325242][ T5082] hsr_slave_0: entered promiscuous mode [ 251.336339][ T5082] hsr_slave_1: entered promiscuous mode [ 251.345878][ T5082] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 251.353628][ T5082] Cannot create hsr debugfs directory [ 251.526586][ T5081] Bluetooth: hci3: command tx timeout [ 251.590708][ T5090] hsr_slave_0: entered promiscuous mode [ 251.601888][ T5090] hsr_slave_1: entered promiscuous mode [ 251.605385][ T5081] Bluetooth: hci2: command tx timeout [ 251.614147][ T5090] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 251.623204][ T5090] Cannot create hsr debugfs directory [ 251.685486][ T5081] Bluetooth: hci4: command tx timeout [ 251.710362][ T5088] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 251.718142][ T5088] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 251.744541][ T5088] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 251.761568][ T5080] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 251.768986][ T5080] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 251.795456][ T5080] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 251.929924][ T5088] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 251.938339][ T5088] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 251.966057][ T5088] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 251.981915][ T5080] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 251.989299][ T5080] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 252.016785][ T5080] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 252.463725][ T5088] hsr_slave_0: entered promiscuous mode [ 252.475529][ T5088] hsr_slave_1: entered promiscuous mode [ 252.483966][ T5088] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 252.495016][ T5088] Cannot create hsr debugfs directory [ 252.691608][ T5080] hsr_slave_0: entered promiscuous mode [ 252.702895][ T5080] hsr_slave_1: entered promiscuous mode [ 252.712364][ T5080] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 252.720204][ T5080] Cannot create hsr debugfs directory [ 253.127973][ T5076] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 253.169795][ T5076] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 253.274931][ T5076] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 253.292752][ T5081] Bluetooth: hci0: command tx timeout [ 253.314923][ T5076] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 253.365547][ T5081] Bluetooth: hci1: command tx timeout [ 253.610001][ T5081] Bluetooth: hci3: command tx timeout [ 253.670400][ T5090] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 253.702799][ T5081] Bluetooth: hci2: command tx timeout [ 253.765619][ T5081] Bluetooth: hci4: command tx timeout [ 253.782868][ T5090] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 253.807303][ T5090] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 253.934100][ T5090] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 254.073391][ T5082] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 254.107421][ T5082] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 254.184630][ T5082] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 254.251887][ T5082] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 254.593013][ T5088] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 254.666885][ T5088] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 254.709693][ T5088] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 254.743656][ T5080] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 254.777236][ T5080] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 254.810918][ T5080] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 254.833831][ T5088] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 254.888526][ T5080] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 255.443846][ T5076] 8021q: adding VLAN 0 to HW filter on device bond0 [ 255.662136][ T5076] 8021q: adding VLAN 0 to HW filter on device team0 [ 255.811227][ T4683] bridge0: port 1(bridge_slave_0) entered blocking state [ 255.819117][ T4683] bridge0: port 1(bridge_slave_0) entered forwarding state [ 255.963797][ T4683] bridge0: port 2(bridge_slave_1) entered blocking state [ 255.971716][ T4683] bridge0: port 2(bridge_slave_1) entered forwarding state [ 256.040016][ T5082] 8021q: adding VLAN 0 to HW filter on device bond0 [ 256.187633][ T5090] 8021q: adding VLAN 0 to HW filter on device bond0 [ 256.390449][ T5082] 8021q: adding VLAN 0 to HW filter on device team0 [ 256.474161][ T25] bridge0: port 1(bridge_slave_0) entered blocking state [ 256.481838][ T25] bridge0: port 1(bridge_slave_0) entered forwarding state [ 256.550811][ T5088] 8021q: adding VLAN 0 to HW filter on device bond0 [ 256.600155][ T5090] 8021q: adding VLAN 0 to HW filter on device team0 [ 256.649861][ T790] bridge0: port 2(bridge_slave_1) entered blocking state [ 256.657792][ T790] bridge0: port 2(bridge_slave_1) entered forwarding state [ 256.794782][ T4683] bridge0: port 1(bridge_slave_0) entered blocking state [ 256.802728][ T4683] bridge0: port 1(bridge_slave_0) entered forwarding state [ 256.929669][ T5088] 8021q: adding VLAN 0 to HW filter on device team0 [ 257.027970][ T25] bridge0: port 2(bridge_slave_1) entered blocking state [ 257.035970][ T25] bridge0: port 2(bridge_slave_1) entered forwarding state [ 257.223256][ T5080] 8021q: adding VLAN 0 to HW filter on device bond0 [ 257.291809][ T25] bridge0: port 1(bridge_slave_0) entered blocking state [ 257.299752][ T25] bridge0: port 1(bridge_slave_0) entered forwarding state [ 257.348887][ T25] bridge0: port 2(bridge_slave_1) entered blocking state [ 257.356816][ T25] bridge0: port 2(bridge_slave_1) entered forwarding state [ 257.501624][ T5082] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 257.663455][ T5080] 8021q: adding VLAN 0 to HW filter on device team0 [ 258.218228][ T25] bridge0: port 1(bridge_slave_0) entered blocking state [ 258.226326][ T25] bridge0: port 1(bridge_slave_0) entered forwarding state [ 258.243537][ T25] bridge0: port 2(bridge_slave_1) entered blocking state [ 258.251602][ T25] bridge0: port 2(bridge_slave_1) entered forwarding state [ 259.368975][ T5076] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 260.069729][ T5082] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 260.175342][ T5088] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 260.213327][ T5090] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 260.828692][ T5088] veth0_vlan: entered promiscuous mode [ 260.919490][ T5082] veth0_vlan: entered promiscuous mode [ 261.030029][ T5080] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 261.041467][ T5088] veth1_vlan: entered promiscuous mode [ 261.083859][ T5090] veth0_vlan: entered promiscuous mode [ 261.118114][ T5082] veth1_vlan: entered promiscuous mode [ 261.287836][ T5090] veth1_vlan: entered promiscuous mode [ 261.538151][ T5088] veth0_macvtap: entered promiscuous mode [ 261.639495][ T5088] veth1_macvtap: entered promiscuous mode [ 261.708630][ T5082] veth0_macvtap: entered promiscuous mode [ 261.798665][ T5082] veth1_macvtap: entered promiscuous mode [ 261.998546][ T5080] veth0_vlan: entered promiscuous mode [ 262.060745][ T5088] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 262.106590][ T5090] veth0_macvtap: entered promiscuous mode [ 262.158119][ T5080] veth1_vlan: entered promiscuous mode [ 262.196962][ T5082] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 262.207820][ T5082] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 262.223639][ T5082] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 262.249236][ T5088] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 262.304046][ T5090] veth1_macvtap: entered promiscuous mode [ 262.363558][ T5088] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 262.374144][ T5088] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 262.383489][ T5088] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 262.392818][ T5088] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 262.480388][ T5082] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 262.492668][ T5082] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 262.508661][ T5082] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 262.644001][ T5082] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 262.656147][ T5082] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 262.665441][ T5082] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 262.674532][ T5082] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 262.712719][ T5090] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 262.725429][ T5090] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 262.735802][ T5090] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 262.747063][ T5090] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 262.763306][ T5090] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 262.934359][ T5080] veth0_macvtap: entered promiscuous mode [ 263.056748][ T5090] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 263.067719][ T5090] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 263.079216][ T5090] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 263.090037][ T5090] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 263.106075][ T5090] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 263.174717][ T5080] veth1_macvtap: entered promiscuous mode [ 263.291181][ T5076] veth0_vlan: entered promiscuous mode [ 263.347402][ T5090] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 263.358022][ T5090] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 263.370580][ T5090] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 263.383684][ T5090] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 263.515707][ T5080] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 263.530816][ T5080] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 263.542704][ T5080] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 263.553887][ T5080] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 263.564157][ T5080] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 263.574998][ T5080] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 263.591374][ T5080] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 263.622880][ T5076] veth1_vlan: entered promiscuous mode [ 263.828403][ T5080] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 263.841508][ T5080] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 263.853524][ T5080] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 263.865498][ T5080] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 263.875801][ T5080] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 263.886675][ T5080] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 263.902649][ T5080] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 264.211663][ T5080] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 264.223122][ T5080] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 264.233178][ T5080] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 264.242481][ T5080] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 264.301843][ T5076] veth0_macvtap: entered promiscuous mode [ 264.400011][ T5076] veth1_macvtap: entered promiscuous mode [ 264.661260][ T5076] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 264.672322][ T5076] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 264.682808][ T5076] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 264.693648][ T5076] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 264.703945][ T5076] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 264.714784][ T5076] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 264.728486][ T5076] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 264.743574][ T5076] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 264.760222][ T5076] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 264.999538][ T5076] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 265.011623][ T5076] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 265.023761][ T5076] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 265.035751][ T5076] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 265.047683][ T5076] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 265.059617][ T5076] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 265.071157][ T5076] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 265.081990][ T5076] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 265.098125][ T5076] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 265.321902][ T5076] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 265.331387][ T5076] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 265.340783][ T5076] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 265.351409][ T5076] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 270.018942][ T3232] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 270.027152][ T3232] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 270.312918][ T1080] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 270.321688][ T1080] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 270.347807][ T4618] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 270.356040][ T4618] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 270.602857][ T3232] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 270.611390][ T3232] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 271.139869][ T3914] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 271.151981][ T3914] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 271.509240][ T3500] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 271.517690][ T3500] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 271.866723][ T5255] Process accounting resumed [ 272.574687][ T73] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 272.589141][ T73] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 272.923748][ T73] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 272.934164][ T73] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 273.032052][ T5262] loop2: detected capacity change from 0 to 2048 [ 273.100510][ T5262] ======================================================= [ 273.100510][ T5262] WARNING: The mand mount option has been deprecated and [ 273.100510][ T5262] and is ignored by this kernel. Remove the mand [ 273.100510][ T5262] option from the mount to silence this warning. [ 273.100510][ T5262] ======================================================= [ 273.137721][ T5262] EXT4-fs: Ignoring removed nobh option [ 273.402464][ T5262] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 273.492766][ T782] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 273.502901][ T782] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 273.715677][ T4618] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 273.723825][ T4618] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 273.965845][ T5269] EXT4-fs error (device loop2): ext4_validate_block_bitmap:432: comm ext4lazyinit: bg 0: block 2: invalid block bitmap [ 274.048873][ T5090] EXT4-fs error (device loop2): ext4_read_inline_dir:1560: inode #12: block 5: comm syz-executor.2: path /root/syzkaller-testdir4283233506/syzkaller.7EcSIz/0/file1/file0/file0: bad entry in directory: directory entry overrun - offset=24, inode=13, rec_len=7952, size=80 fake=0 [ 274.133853][ T5090] EXT4-fs error (device loop2): ext4_read_inline_dir:1560: inode #12: block 5: comm syz-executor.2: path /root/syzkaller-testdir4283233506/syzkaller.7EcSIz/0/file1/file0/file0: bad entry in directory: directory entry overrun - offset=24, inode=13, rec_len=7952, size=80 fake=0 [ 274.417236][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 274.433936][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 274.563427][ T5274] loop1: detected capacity change from 0 to 256 [ 274.736771][ T5090] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 274.952161][ T80] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 275.255208][ T80] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 275.425941][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 275.487960][ T80] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 275.546261][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 275.702213][ T80] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 276.010918][ T5283] ptrace attach of "/root/syz-executor.1 exec"[5082] was attempted by "/root/syz-executor.1 exec"[5283] [ 276.293793][ T80] bridge_slave_1: left allmulticast mode [ 276.300082][ T80] bridge_slave_1: left promiscuous mode [ 276.307236][ T80] bridge0: port 2(bridge_slave_1) entered disabled state [ 276.404013][ T80] bridge_slave_0: left allmulticast mode [ 276.412608][ T80] bridge_slave_0: left promiscuous mode [ 276.420471][ T80] bridge0: port 1(bridge_slave_0) entered disabled state [ 277.662777][ T80] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 277.777016][ T5294] Process accounting resumed [ 277.778399][ T80] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 277.895741][ T80] bond0 (unregistering): Released all slaves [ 278.999396][ T29] audit: type=1326 audit(1717585152.459:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5301 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7451579 code=0x7ffc0000 [ 279.022858][ T29] audit: type=1326 audit(1717585152.469:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5301 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7451579 code=0x7ffc0000 [ 279.043317][ T5300] loop0: detected capacity change from 0 to 2048 [ 279.057521][ T29] audit: type=1326 audit(1717585152.479:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5301 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7451579 code=0x7ffc0000 [ 279.138554][ T5300] EXT4-fs: Ignoring removed nobh option [ 279.266044][ T29] audit: type=1326 audit(1717585152.659:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5301 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7451579 code=0x7ffc0000 [ 279.289155][ T29] audit: type=1326 audit(1717585152.709:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5301 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7451579 code=0x7ffc0000 [ 279.312240][ T29] audit: type=1326 audit(1717585152.729:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5301 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7451579 code=0x7ffc0000 [ 279.335516][ T29] audit: type=1326 audit(1717585152.729:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5301 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7451579 code=0x7ffc0000 [ 279.360149][ T29] audit: type=1326 audit(1717585152.729:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5301 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7451579 code=0x7ffc0000 [ 279.383765][ T29] audit: type=1326 audit(1717585152.779:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5301 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=40000003 syscall=172 compat=1 ip=0xf7451579 code=0x7ffc0000 [ 279.406981][ T29] audit: type=1326 audit(1717585152.779:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5301 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7451579 code=0x7ffc0000 [ 279.748203][ T5300] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 279.900934][ T80] hsr_slave_0: left promiscuous mode [ 279.972599][ T80] hsr_slave_1: left promiscuous mode [ 279.998405][ T80] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 280.007030][ T80] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 280.046535][ T51] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 280.067593][ T51] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 280.097816][ T51] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 280.130473][ T80] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 280.138568][ T80] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 280.161675][ T51] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 280.207620][ T51] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 280.219999][ T51] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 280.329774][ T5080] EXT4-fs error (device loop0): ext4_validate_block_bitmap:432: comm syz-executor.0: bg 0: block 2: invalid block bitmap [ 280.344455][ T5080] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6537: Corrupt filesystem [ 280.396030][ T80] veth1_macvtap: left promiscuous mode [ 280.401852][ T80] veth0_macvtap: left promiscuous mode [ 280.408041][ T80] veth1_vlan: left promiscuous mode [ 280.413668][ T80] veth0_vlan: left promiscuous mode [ 280.618816][ T5080] EXT4-fs error (device loop0): ext4_read_inline_dir:1560: inode #12: block 5: comm syz-executor.0: path /root/syzkaller-testdir930267638/syzkaller.QWvrAs/3/file1/file0/file0: bad entry in directory: directory entry overrun - offset=24, inode=13, rec_len=7952, size=80 fake=0 [ 280.746834][ T5080] EXT4-fs error (device loop0): ext4_read_inline_dir:1560: inode #12: block 5: comm syz-executor.0: path /root/syzkaller-testdir930267638/syzkaller.QWvrAs/3/file1/file0/file0: bad entry in directory: directory entry overrun - offset=24, inode=13, rec_len=7952, size=80 fake=0 [ 280.823250][ T5318] loop3: detected capacity change from 0 to 256 [ 281.045564][ T51] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 281.055893][ T51] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 281.075685][ T51] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 281.122385][ T51] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 281.197211][ T51] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 281.237984][ T51] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 281.942188][ T80] team0 (unregistering): Port device team_slave_1 removed [ 282.108241][ T80] team0 (unregistering): Port device team_slave_0 removed [ 282.342419][ T51] Bluetooth: hci0: command tx timeout [ 283.170848][ T5080] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 283.395557][ T51] Bluetooth: hci4: command tx timeout [ 284.426221][ T5081] Bluetooth: hci0: command tx timeout [ 284.750996][ T5311] chnl_net:caif_netlink_parms(): no params data found [ 285.044419][ T5319] chnl_net:caif_netlink_parms(): no params data found [ 285.446242][ T51] Bluetooth: hci4: command tx timeout [ 285.738053][ T1222] ieee802154 phy0 wpan0: encryption failed: -22 [ 285.744991][ T1222] ieee802154 phy1 wpan1: encryption failed: -22 [ 286.261630][ T29] audit: type=1326 audit(1717585159.629:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5356 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7499579 code=0x7ffc0000 [ 286.284779][ T29] audit: type=1326 audit(1717585159.629:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5356 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7499579 code=0x7ffc0000 [ 286.309564][ T29] audit: type=1326 audit(1717585159.659:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5356 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7499579 code=0x7ffc0000 [ 286.336301][ T29] audit: type=1326 audit(1717585159.729:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5356 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7499579 code=0x7ffc0000 [ 286.362221][ T29] audit: type=1326 audit(1717585159.729:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5356 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7499579 code=0x7ffc0000 [ 286.386334][ T29] audit: type=1326 audit(1717585159.799:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5356 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7499579 code=0x7ffc0000 [ 286.416125][ T29] audit: type=1326 audit(1717585159.799:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5356 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7499579 code=0x7ffc0000 [ 286.439054][ T29] audit: type=1326 audit(1717585159.819:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5356 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=40000003 syscall=172 compat=1 ip=0xf7499579 code=0x7ffc0000 [ 286.462043][ T29] audit: type=1326 audit(1717585159.819:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5356 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7499579 code=0x7ffc0000 [ 286.485198][ T29] audit: type=1326 audit(1717585159.839:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5356 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7499579 code=0x7ffc0000 [ 286.486244][ T51] Bluetooth: hci0: command tx timeout [ 286.773060][ T5361] loop3: detected capacity change from 0 to 2048 [ 286.852662][ T5361] EXT4-fs: Ignoring removed nobh option [ 287.250438][ T5361] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 287.555823][ T51] Bluetooth: hci4: command tx timeout [ 287.593131][ T5371] loop1: detected capacity change from 0 to 256 [ 287.801134][ T5311] bridge0: port 1(bridge_slave_0) entered blocking state [ 287.810012][ T5311] bridge0: port 1(bridge_slave_0) entered disabled state [ 287.818178][ T5311] bridge_slave_0: entered allmulticast mode [ 287.828072][ T5311] bridge_slave_0: entered promiscuous mode [ 287.857923][ T5319] bridge0: port 1(bridge_slave_0) entered blocking state [ 287.865948][ T5319] bridge0: port 1(bridge_slave_0) entered disabled state [ 287.873961][ T5319] bridge_slave_0: entered allmulticast mode [ 287.885302][ T5319] bridge_slave_0: entered promiscuous mode [ 287.941926][ T5088] EXT4-fs error (device loop3): ext4_validate_block_bitmap:432: comm syz-executor.3: bg 0: block 2: invalid block bitmap [ 288.019000][ T5319] bridge0: port 2(bridge_slave_1) entered blocking state [ 288.027258][ T5319] bridge0: port 2(bridge_slave_1) entered disabled state [ 288.027376][ T5088] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6537: Corrupt filesystem [ 288.035379][ T5319] bridge_slave_1: entered allmulticast mode [ 288.062057][ T5319] bridge_slave_1: entered promiscuous mode [ 288.095657][ T5311] bridge0: port 2(bridge_slave_1) entered blocking state [ 288.103508][ T5311] bridge0: port 2(bridge_slave_1) entered disabled state [ 288.111774][ T5311] bridge_slave_1: entered allmulticast mode [ 288.121658][ T5311] bridge_slave_1: entered promiscuous mode [ 288.124585][ T5088] EXT4-fs error (device loop3): ext4_read_inline_dir:1560: inode #12: block 5: comm syz-executor.3: path /root/syzkaller-testdir3249081266/syzkaller.zQLdIe/10/file1/file0/file0: bad entry in directory: directory entry overrun - offset=24, inode=13, rec_len=7952, size=80 fake=0 [ 288.287414][ T5088] EXT4-fs error (device loop3): ext4_read_inline_dir:1560: inode #12: block 5: comm syz-executor.3: path /root/syzkaller-testdir3249081266/syzkaller.zQLdIe/10/file1/file0/file0: bad entry in directory: directory entry overrun - offset=24, inode=13, rec_len=7952, size=80 fake=0 [ 288.429116][ T5081] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 288.443615][ T5081] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 288.466098][ T5081] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 288.497369][ T5081] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 288.511268][ T5081] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 288.525843][ T5081] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 288.565389][ T5081] Bluetooth: hci0: command tx timeout [ 288.883859][ T5319] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 289.158890][ T5311] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 289.194488][ T5319] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 289.280573][ T5088] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 289.365277][ T5311] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 289.554729][ T5319] team0: Port device team_slave_0 added [ 289.631329][ T5081] Bluetooth: hci4: command tx timeout [ 289.963432][ T5319] team0: Port device team_slave_1 added [ 290.004395][ T5311] team0: Port device team_slave_0 added [ 290.137994][ T5311] team0: Port device team_slave_1 added [ 290.207384][ T5319] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 290.214614][ T5319] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 290.241270][ T5319] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 290.440741][ T5319] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 290.448168][ T5319] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 290.476235][ T5319] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 290.589369][ T80] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 290.645351][ T5081] Bluetooth: hci1: command tx timeout [ 290.747378][ T5311] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 290.754584][ T5311] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 290.782619][ T5311] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 290.922841][ T80] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 291.074763][ T5311] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 291.082458][ T5311] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 291.109628][ T5311] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 291.226022][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 291.236191][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 291.337406][ T80] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 291.557511][ T5319] hsr_slave_0: entered promiscuous mode [ 291.631617][ T5319] hsr_slave_1: entered promiscuous mode [ 291.673074][ T5319] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 291.681218][ T5319] Cannot create hsr debugfs directory [ 291.734229][ T80] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 292.096767][ T5311] hsr_slave_0: entered promiscuous mode [ 292.110184][ T5311] hsr_slave_1: entered promiscuous mode [ 292.120958][ T5311] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 292.130646][ T5311] Cannot create hsr debugfs directory [ 292.766439][ T5081] Bluetooth: hci1: command tx timeout [ 293.512534][ T80] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 293.548060][ T5372] chnl_net:caif_netlink_parms(): no params data found [ 293.704152][ T80] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 293.962062][ T80] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 294.215979][ T51] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 294.259515][ T51] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 294.279328][ T51] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 294.347702][ T51] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 294.410090][ T80] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 294.456918][ T51] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 294.481999][ T51] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 294.815991][ T51] Bluetooth: hci1: command tx timeout [ 295.078770][ T5411] Process accounting resumed [ 295.407454][ T80] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 295.680664][ T80] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 295.851756][ T29] audit: type=1326 audit(1717585169.299:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5417 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7499579 code=0x7ffc0000 [ 295.875707][ T29] audit: type=1326 audit(1717585169.299:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5417 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7499579 code=0x7ffc0000 [ 295.899081][ T29] audit: type=1326 audit(1717585169.309:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5417 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7499579 code=0x7ffc0000 [ 295.922036][ T29] audit: type=1326 audit(1717585169.329:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5417 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7499579 code=0x7ffc0000 [ 295.953464][ T29] audit: type=1326 audit(1717585169.429:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5417 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7499579 code=0x7ffc0000 [ 295.980235][ T29] audit: type=1326 audit(1717585169.429:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5417 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7499579 code=0x7ffc0000 [ 296.003258][ T29] audit: type=1326 audit(1717585169.429:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5417 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7499579 code=0x7ffc0000 [ 296.068952][ T29] audit: type=1326 audit(1717585169.519:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5417 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=40000003 syscall=172 compat=1 ip=0xf7499579 code=0x7ffc0000 [ 296.092371][ T29] audit: type=1326 audit(1717585169.519:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5417 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7499579 code=0x7ffc0000 [ 296.116257][ T29] audit: type=1326 audit(1717585169.529:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5417 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7499579 code=0x7ffc0000 [ 296.221995][ T80] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 296.649433][ T51] Bluetooth: hci3: command tx timeout [ 296.652111][ T80] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 296.717016][ T5425] loop1: detected capacity change from 0 to 2048 [ 296.750153][ T5425] EXT4-fs: Ignoring removed nobh option [ 296.878861][ T5372] bridge0: port 1(bridge_slave_0) entered blocking state [ 296.889272][ T5372] bridge0: port 1(bridge_slave_0) entered disabled state [ 296.897491][ T5372] bridge_slave_0: entered allmulticast mode [ 296.906861][ T51] Bluetooth: hci1: command tx timeout [ 296.907434][ T5372] bridge_slave_0: entered promiscuous mode [ 296.971117][ T5372] bridge0: port 2(bridge_slave_1) entered blocking state [ 296.981066][ T5372] bridge0: port 2(bridge_slave_1) entered disabled state [ 296.981684][ T5425] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 296.989347][ T5372] bridge_slave_1: entered allmulticast mode [ 297.011650][ T5372] bridge_slave_1: entered promiscuous mode [ 297.509488][ T80] bridge_slave_1: left allmulticast mode [ 297.518204][ T80] bridge_slave_1: left promiscuous mode [ 297.527076][ T80] bridge0: port 2(bridge_slave_1) entered disabled state [ 297.577228][ T80] bridge_slave_0: left allmulticast mode [ 297.583180][ T80] bridge_slave_0: left promiscuous mode [ 297.591070][ T80] bridge0: port 1(bridge_slave_0) entered disabled state [ 297.638414][ T80] bridge_slave_1: left allmulticast mode [ 297.644396][ T80] bridge_slave_1: left promiscuous mode [ 297.654826][ T80] bridge0: port 2(bridge_slave_1) entered disabled state [ 297.686223][ T5082] EXT4-fs error (device loop1): ext4_validate_block_bitmap:432: comm syz-executor.1: bg 0: block 2: invalid block bitmap [ 297.713606][ T80] bridge_slave_0: left allmulticast mode [ 297.721656][ T80] bridge_slave_0: left promiscuous mode [ 297.731619][ T80] bridge0: port 1(bridge_slave_0) entered disabled state [ 297.732381][ T5082] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6537: Corrupt filesystem [ 297.792059][ T5082] EXT4-fs error (device loop1): ext4_read_inline_dir:1560: inode #12: block 5: comm syz-executor.1: path /root/syzkaller-testdir2400578044/syzkaller.BcJroQ/19/file1/file0/file0: bad entry in directory: directory entry overrun - offset=24, inode=13, rec_len=7952, size=80 fake=0 [ 297.802588][ T80] bridge_slave_1: left allmulticast mode [ 297.825387][ T80] bridge_slave_1: left promiscuous mode [ 297.830946][ T5082] EXT4-fs error (device loop1): ext4_read_inline_dir:1560: inode #12: block 5: comm syz-executor.1: path /root/syzkaller-testdir2400578044/syzkaller.BcJroQ/19/file1/file0/file0: bad entry in directory: directory entry overrun - offset=24, inode=13, rec_len=7952, size=80 fake=0 [ 297.861060][ T80] bridge0: port 2(bridge_slave_1) entered disabled state [ 297.917996][ T80] bridge_slave_0: left allmulticast mode [ 297.923936][ T80] bridge_slave_0: left promiscuous mode [ 297.930853][ T80] bridge0: port 1(bridge_slave_0) entered disabled state [ 298.725674][ T51] Bluetooth: hci3: command tx timeout [ 299.368025][ T80] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 299.385682][ T80] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 299.403193][ T80] bond0 (unregistering): Released all slaves [ 299.439820][ T80] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 299.458426][ T80] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 299.477081][ T80] bond0 (unregistering): Released all slaves [ 299.507617][ T80] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 299.532537][ T80] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 299.576235][ T80] bond0 (unregistering): Released all slaves [ 299.963530][ T5372] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 300.070996][ T5372] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 300.137857][ T5082] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 300.419796][ T5372] team0: Port device team_slave_0 added [ 300.443351][ T5404] chnl_net:caif_netlink_parms(): no params data found [ 300.472385][ T5372] team0: Port device team_slave_1 added [ 300.806154][ T51] Bluetooth: hci3: command tx timeout [ 300.917043][ T5372] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 300.924273][ T5372] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 300.952997][ T5372] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 301.154719][ T5372] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 301.162209][ T5372] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 301.190231][ T5372] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 301.667166][ T5319] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 301.989825][ T5372] hsr_slave_0: entered promiscuous mode [ 302.038794][ T5372] hsr_slave_1: entered promiscuous mode [ 302.065453][ T5372] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 302.074055][ T5372] Cannot create hsr debugfs directory [ 302.241908][ T5311] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 302.293410][ T5319] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 302.361932][ T5319] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 302.410134][ T5311] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 302.542529][ T5081] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 302.567666][ T5081] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 302.588892][ T5081] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 302.610668][ T5319] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 302.631453][ T5081] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 302.643689][ T5081] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 302.653578][ T5081] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 302.740272][ T80] hsr_slave_0: left promiscuous mode [ 302.767834][ T80] hsr_slave_1: left promiscuous mode [ 302.782533][ T80] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 302.794967][ T80] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 302.818505][ T80] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 302.826574][ T80] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 302.879239][ T80] hsr_slave_0: left promiscuous mode [ 302.890636][ T51] Bluetooth: hci3: command tx timeout [ 302.901161][ T80] hsr_slave_1: left promiscuous mode [ 302.912667][ T80] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 302.920830][ T80] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 302.934144][ T80] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 302.942190][ T80] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 302.972308][ T80] hsr_slave_0: left promiscuous mode [ 302.982344][ T80] hsr_slave_1: left promiscuous mode [ 302.994086][ T80] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 303.005680][ T80] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 303.018736][ T80] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 303.027145][ T80] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 303.058827][ T80] veth1_macvtap: left promiscuous mode [ 303.064533][ T80] veth0_macvtap: left promiscuous mode [ 303.070692][ T80] veth1_vlan: left promiscuous mode [ 303.076874][ T80] veth0_vlan: left promiscuous mode [ 303.084317][ T80] veth1_macvtap: left promiscuous mode [ 303.090296][ T80] veth0_macvtap: left promiscuous mode [ 303.098780][ T80] veth1_vlan: left promiscuous mode [ 303.104342][ T80] veth0_vlan: left promiscuous mode [ 303.113071][ T80] veth1_macvtap: left promiscuous mode [ 303.119045][ T80] veth0_macvtap: left promiscuous mode [ 303.124893][ T80] veth1_vlan: left promiscuous mode [ 303.130737][ T80] veth0_vlan: left promiscuous mode [ 304.487397][ T80] team0 (unregistering): Port device team_slave_1 removed [ 304.517141][ T80] team0 (unregistering): Port device team_slave_0 removed [ 304.725619][ T51] Bluetooth: hci2: command tx timeout [ 305.164648][ T80] team0 (unregistering): Port device team_slave_1 removed [ 305.202822][ T80] team0 (unregistering): Port device team_slave_0 removed [ 305.939272][ T80] team0 (unregistering): Port device team_slave_1 removed [ 305.990806][ T80] team0 (unregistering): Port device team_slave_0 removed [ 306.266459][ T5311] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 306.537256][ T5311] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 306.807395][ T51] Bluetooth: hci2: command tx timeout [ 306.978136][ T5404] bridge0: port 1(bridge_slave_0) entered blocking state [ 306.989429][ T5404] bridge0: port 1(bridge_slave_0) entered disabled state [ 306.998452][ T5404] bridge_slave_0: entered allmulticast mode [ 307.008041][ T5404] bridge_slave_0: entered promiscuous mode [ 307.027414][ T5404] bridge0: port 2(bridge_slave_1) entered blocking state [ 307.037634][ T5404] bridge0: port 2(bridge_slave_1) entered disabled state [ 307.045714][ T5404] bridge_slave_1: entered allmulticast mode [ 307.055266][ T5404] bridge_slave_1: entered promiscuous mode [ 307.379234][ T5404] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 307.514933][ T5404] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 307.807503][ T5404] team0: Port device team_slave_0 added [ 307.906376][ T5404] team0: Port device team_slave_1 added [ 308.158182][ T5404] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 308.166345][ T5404] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 308.192866][ T5404] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 308.228981][ T5404] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 308.237399][ T5404] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 308.264822][ T5404] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 308.727521][ T5372] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 308.770362][ T5372] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 308.832295][ T5404] hsr_slave_0: entered promiscuous mode [ 308.863764][ T5404] hsr_slave_1: entered promiscuous mode [ 308.885332][ T51] Bluetooth: hci2: command tx timeout [ 308.981275][ T5372] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 309.047803][ T5372] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 309.506422][ T5319] 8021q: adding VLAN 0 to HW filter on device bond0 [ 309.676973][ T5311] 8021q: adding VLAN 0 to HW filter on device bond0 [ 309.867324][ T5319] 8021q: adding VLAN 0 to HW filter on device team0 [ 309.980153][ T5439] chnl_net:caif_netlink_parms(): no params data found [ 310.192411][ T5311] 8021q: adding VLAN 0 to HW filter on device team0 [ 310.213082][ T4683] bridge0: port 1(bridge_slave_0) entered blocking state [ 310.221047][ T4683] bridge0: port 1(bridge_slave_0) entered forwarding state [ 310.437892][ T782] bridge0: port 1(bridge_slave_0) entered blocking state [ 310.445815][ T782] bridge0: port 1(bridge_slave_0) entered forwarding state [ 310.547465][ T782] bridge0: port 2(bridge_slave_1) entered blocking state [ 310.555459][ T782] bridge0: port 2(bridge_slave_1) entered forwarding state [ 310.572535][ T782] bridge0: port 2(bridge_slave_1) entered blocking state [ 310.580441][ T782] bridge0: port 2(bridge_slave_1) entered forwarding state [ 310.968401][ T51] Bluetooth: hci2: command tx timeout [ 311.892066][ T5404] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 312.003162][ T5372] 8021q: adding VLAN 0 to HW filter on device bond0 [ 312.013892][ T5404] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 312.149946][ T5404] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 312.457018][ T5404] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 312.555838][ T5439] bridge0: port 1(bridge_slave_0) entered blocking state [ 312.563777][ T5439] bridge0: port 1(bridge_slave_0) entered disabled state [ 312.572442][ T5439] bridge_slave_0: entered allmulticast mode [ 312.582173][ T5439] bridge_slave_0: entered promiscuous mode [ 312.678763][ T5372] 8021q: adding VLAN 0 to HW filter on device team0 [ 312.789345][ T5439] bridge0: port 2(bridge_slave_1) entered blocking state [ 312.797687][ T5439] bridge0: port 2(bridge_slave_1) entered disabled state [ 312.805844][ T5439] bridge_slave_1: entered allmulticast mode [ 312.815707][ T5439] bridge_slave_1: entered promiscuous mode [ 312.860327][ T25] bridge0: port 1(bridge_slave_0) entered blocking state [ 312.868252][ T25] bridge0: port 1(bridge_slave_0) entered forwarding state [ 312.885111][ T25] bridge0: port 2(bridge_slave_1) entered blocking state [ 312.892881][ T25] bridge0: port 2(bridge_slave_1) entered forwarding state [ 313.238535][ T80] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 313.424429][ T5439] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 313.578360][ T80] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 313.617927][ T5439] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 313.829268][ T80] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 313.990614][ T80] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 314.024687][ T5439] team0: Port device team_slave_0 added [ 314.087947][ T5439] team0: Port device team_slave_1 added [ 314.444451][ T5319] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 314.577013][ T5439] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 314.584256][ T5439] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 314.612119][ T5439] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 314.786054][ T80] bridge_slave_1: left allmulticast mode [ 314.793508][ T80] bridge_slave_1: left promiscuous mode [ 314.800754][ T80] bridge0: port 2(bridge_slave_1) entered disabled state [ 314.846012][ T80] bridge_slave_0: left allmulticast mode [ 314.851973][ T80] bridge_slave_0: left promiscuous mode [ 314.858915][ T80] bridge0: port 1(bridge_slave_0) entered disabled state [ 315.440048][ T80] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 315.497273][ T80] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 315.512444][ T80] bond0 (unregistering): Released all slaves [ 315.535292][ T5439] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 315.542600][ T5439] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 315.569514][ T5439] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 315.650236][ T5311] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 316.222721][ T5439] hsr_slave_0: entered promiscuous mode [ 316.267858][ T5439] hsr_slave_1: entered promiscuous mode [ 316.284375][ T5439] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 316.292913][ T5439] Cannot create hsr debugfs directory [ 316.743757][ T80] hsr_slave_0: left promiscuous mode [ 316.767592][ T80] hsr_slave_1: left promiscuous mode [ 316.791356][ T80] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 316.799780][ T80] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 316.817593][ T80] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 316.827662][ T80] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 316.844454][ T80] veth1_macvtap: left promiscuous mode [ 316.850732][ T80] veth0_macvtap: left promiscuous mode [ 316.857137][ T80] veth1_vlan: left promiscuous mode [ 316.862751][ T80] veth0_vlan: left promiscuous mode [ 317.492411][ T80] team0 (unregistering): Port device team_slave_1 removed [ 317.547440][ T80] team0 (unregistering): Port device team_slave_0 removed [ 318.194657][ T5404] 8021q: adding VLAN 0 to HW filter on device bond0 [ 318.393053][ T5319] veth0_vlan: entered promiscuous mode [ 318.475899][ T5372] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 318.638079][ T5404] 8021q: adding VLAN 0 to HW filter on device team0 [ 318.713110][ T5319] veth1_vlan: entered promiscuous mode [ 318.802399][ T5133] bridge0: port 1(bridge_slave_0) entered blocking state [ 318.810357][ T5133] bridge0: port 1(bridge_slave_0) entered forwarding state [ 319.066613][ T5133] bridge0: port 2(bridge_slave_1) entered blocking state [ 319.074393][ T5133] bridge0: port 2(bridge_slave_1) entered forwarding state [ 319.785613][ T5404] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 319.887560][ T5319] veth0_macvtap: entered promiscuous mode [ 319.913014][ T5372] veth0_vlan: entered promiscuous mode [ 320.085681][ T5319] veth1_macvtap: entered promiscuous mode [ 320.136093][ T5372] veth1_vlan: entered promiscuous mode [ 320.181740][ T5439] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 320.281897][ T5311] veth0_vlan: entered promiscuous mode [ 320.357094][ T5439] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 320.490551][ T5319] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 320.528391][ T5439] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 320.616932][ T5439] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 320.699955][ T5319] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 320.747459][ T5311] veth1_vlan: entered promiscuous mode [ 320.825503][ T5319] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 320.834633][ T5319] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 320.844221][ T5319] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 320.853597][ T5319] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 320.967739][ T5372] veth0_macvtap: entered promiscuous mode [ 321.141136][ T5372] veth1_macvtap: entered promiscuous mode [ 321.367789][ T5372] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 321.380360][ T5372] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 321.398410][ T5372] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 321.500396][ T5311] veth0_macvtap: entered promiscuous mode [ 321.633676][ T5311] veth1_macvtap: entered promiscuous mode [ 321.657955][ T5372] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 321.669117][ T5372] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 321.684859][ T5372] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 321.854996][ T5372] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 321.864182][ T5372] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 321.873550][ T5372] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 321.882896][ T5372] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 322.062829][ T5311] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 322.073781][ T5311] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 322.084088][ T5311] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 322.094936][ T5311] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 322.110983][ T5311] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 322.299628][ T5311] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 322.311116][ T5311] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 322.321584][ T5311] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 322.332417][ T5311] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 322.348450][ T5311] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 322.450151][ T5404] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 322.592238][ T5311] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 322.601497][ T5311] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 322.610835][ T5311] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 322.620086][ T5311] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 323.277569][ T5439] 8021q: adding VLAN 0 to HW filter on device bond0 [ 323.451932][ T5404] veth0_vlan: entered promiscuous mode [ 323.704884][ T5404] veth1_vlan: entered promiscuous mode [ 323.758596][ T5439] 8021q: adding VLAN 0 to HW filter on device team0 [ 323.943246][ T4683] bridge0: port 1(bridge_slave_0) entered blocking state [ 323.951173][ T4683] bridge0: port 1(bridge_slave_0) entered forwarding state [ 324.062011][ T4683] bridge0: port 2(bridge_slave_1) entered blocking state [ 324.069955][ T4683] bridge0: port 2(bridge_slave_1) entered forwarding state [ 324.490488][ T5404] veth0_macvtap: entered promiscuous mode [ 324.682861][ T5404] veth1_macvtap: entered promiscuous mode [ 325.043636][ T5404] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 325.056882][ T5404] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 325.067848][ T5404] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 325.078678][ T5404] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 325.089005][ T5404] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 325.099919][ T5404] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 325.115991][ T5404] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 325.345229][ T5404] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 325.356290][ T5404] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 325.369381][ T5404] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 325.380740][ T5404] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 325.391060][ T5404] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 325.403499][ T5404] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 325.422803][ T5404] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 325.610807][ T5404] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 325.622264][ T5404] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 325.633293][ T5404] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 325.644538][ T5404] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 327.290361][ T5439] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 328.146799][ T5439] veth0_vlan: entered promiscuous mode [ 328.408843][ T5439] veth1_vlan: entered promiscuous mode [ 328.871694][ T5439] veth0_macvtap: entered promiscuous mode [ 328.955412][ T5439] veth1_macvtap: entered promiscuous mode [ 329.220835][ T5439] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 329.233621][ T5439] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 329.244358][ T5439] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 329.255331][ T5439] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 329.265619][ T5439] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 329.276466][ T5439] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 329.292233][ T5439] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 329.304090][ T5439] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 329.320511][ T5439] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 329.487771][ T5439] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 329.498757][ T5439] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 329.509092][ T5439] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 329.519921][ T5439] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 329.530222][ T5439] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 329.541082][ T5439] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 329.551340][ T5439] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 329.562232][ T5439] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 329.578345][ T5439] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 329.901002][ T5439] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 329.911078][ T5439] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 329.920489][ T5439] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 329.929670][ T5439] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 331.375555][ T80] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 331.383695][ T80] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 331.708606][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 331.717004][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 331.913109][ T80] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 331.921479][ T80] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 332.317820][ T782] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 332.326274][ T782] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 333.015935][ T3500] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 333.024196][ T3500] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 333.370973][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 333.379420][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 334.342675][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 334.397676][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 334.747517][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 335.158202][ T3232] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 335.167984][ T3232] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 335.702292][ T5155] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 335.710904][ T5155] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 337.053684][ T5650] Process accounting resumed [ 337.290901][ T29] audit: type=1326 audit(1717585210.699:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5652 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7414579 code=0x7ffc0000 [ 337.316794][ T29] audit: type=1326 audit(1717585210.709:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5652 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7414579 code=0x7ffc0000 [ 337.340783][ T29] audit: type=1326 audit(1717585210.769:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5652 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7414579 code=0x7ffc0000 [ 337.363862][ T29] audit: type=1326 audit(1717585210.769:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5652 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7414579 code=0x7ffc0000 [ 337.386863][ T29] audit: type=1326 audit(1717585210.769:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5652 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7414579 code=0x7ffc0000 [ 337.555285][ T29] audit: type=1326 audit(1717585210.949:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5652 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=40000003 syscall=172 compat=1 ip=0xf7414579 code=0x7ffc0000 [ 337.582379][ T29] audit: type=1326 audit(1717585210.959:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5652 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7414579 code=0x7ffc0000 [ 337.724779][ T5659] loop2: detected capacity change from 0 to 2048 [ 337.779543][ T5659] EXT4-fs: Ignoring removed nobh option [ 337.797617][ T5663] loop3: detected capacity change from 0 to 256 [ 338.003501][ T5659] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 338.498594][ T5666] EXT4-fs error (device loop2): ext4_validate_block_bitmap:432: comm ext4lazyinit: bg 0: block 2: invalid block bitmap [ 338.708891][ T5319] EXT4-fs error (device loop2): ext4_read_inline_dir:1560: inode #12: block 5: comm syz-executor.2: path /root/syzkaller-testdir2821365336/syzkaller.ZVUPEr/3/file1/file0/file0: bad entry in directory: directory entry overrun - offset=24, inode=13, rec_len=7952, size=80 fake=0 [ 338.899687][ T5319] EXT4-fs error (device loop2): ext4_read_inline_dir:1560: inode #12: block 5: comm syz-executor.2: path /root/syzkaller-testdir2821365336/syzkaller.ZVUPEr/3/file1/file0/file0: bad entry in directory: directory entry overrun - offset=24, inode=13, rec_len=7952, size=80 fake=0 [ 339.523130][ T10] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 339.533292][ T10] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 339.704326][ T5319] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 339.863392][ T73] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 340.024382][ T782] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 340.033826][ T782] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 340.201707][ T73] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 340.378377][ T73] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 340.642367][ T73] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 341.517124][ T73] bridge_slave_1: left allmulticast mode [ 341.523084][ T73] bridge_slave_1: left promiscuous mode [ 341.530010][ T73] bridge0: port 2(bridge_slave_1) entered disabled state [ 341.626145][ T73] bridge_slave_0: left allmulticast mode [ 341.632102][ T73] bridge_slave_0: left promiscuous mode [ 341.639092][ T73] bridge0: port 1(bridge_slave_0) entered disabled state [ 342.303618][ T5708] Process accounting resumed [ 342.905524][ T73] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 343.076873][ T73] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 343.167972][ T73] bond0 (unregistering): Released all slaves [ 344.216226][ T5719] loop4: detected capacity change from 0 to 256 [ 344.223202][ T73] hsr_slave_0: left promiscuous mode [ 344.294591][ T73] hsr_slave_1: left promiscuous mode [ 344.347129][ T73] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 344.357084][ T73] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 344.402518][ T73] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 344.410663][ T73] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 344.470994][ T5718] loop1: detected capacity change from 0 to 1024 [ 344.499326][ T73] veth1_macvtap: left promiscuous mode [ 344.506055][ T73] veth0_macvtap: left promiscuous mode [ 344.512025][ T73] veth1_vlan: left promiscuous mode [ 344.517838][ T73] veth0_vlan: left promiscuous mode [ 344.622774][ T5718] EXT4-fs: Ignoring removed orlov option [ 344.629123][ T5718] EXT4-fs: Ignoring removed nomblk_io_submit option [ 345.240684][ T5718] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 346.251387][ T5439] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 346.254661][ T5081] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 346.294043][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 346.337655][ T5081] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 346.350329][ T5081] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 346.367972][ T73] team0 (unregistering): Port device team_slave_1 removed [ 346.399892][ T73] team0 (unregistering): Port device team_slave_0 removed [ 346.446444][ T5081] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 346.519178][ T5081] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 346.529005][ T5081] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 346.900369][ T5743] syz-executor.3[5743] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 346.905926][ T5743] syz-executor.3[5743] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 346.928227][ T5744] syz-executor.3[5744] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 346.978623][ T5744] syz-executor.3[5744] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 347.399470][ T1222] ieee802154 phy0 wpan0: encryption failed: -22 [ 347.418279][ T1222] ieee802154 phy1 wpan1: encryption failed: -22 [ 348.612603][ T5758] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 348.723641][ T5758] Process accounting resumed [ 348.806417][ T51] Bluetooth: hci4: command tx timeout [ 349.206089][ T5735] chnl_net:caif_netlink_parms(): no params data found [ 350.068451][ T5771] loop1: detected capacity change from 0 to 256 [ 350.856801][ T5135] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 350.888628][ T51] Bluetooth: hci4: command tx timeout [ 351.326974][ T5135] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 351.338689][ T5135] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 351.349231][ T5135] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 351.358748][ T5135] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 351.409198][ T5735] bridge0: port 1(bridge_slave_0) entered blocking state [ 351.417312][ T5735] bridge0: port 1(bridge_slave_0) entered disabled state [ 351.419510][ T5135] usb 5-1: config 0 descriptor?? [ 351.433559][ T5735] bridge_slave_0: entered allmulticast mode [ 351.443160][ T5735] bridge_slave_0: entered promiscuous mode [ 351.618855][ T5735] bridge0: port 2(bridge_slave_1) entered blocking state [ 351.627014][ T5735] bridge0: port 2(bridge_slave_1) entered disabled state [ 351.642491][ T5735] bridge_slave_1: entered allmulticast mode [ 351.652419][ T5735] bridge_slave_1: entered promiscuous mode [ 352.004302][ T5735] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 352.079133][ T5735] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 352.477410][ T5135] usb 5-1: string descriptor 0 read error: -71 [ 352.493543][ T5735] team0: Port device team_slave_0 added [ 352.556303][ T5135] uclogic 0003:256C:006D.0001: failed retrieving string descriptor #200: -71 [ 352.565955][ T5135] uclogic 0003:256C:006D.0001: failed retrieving pen parameters: -71 [ 352.574350][ T5135] uclogic 0003:256C:006D.0001: failed probing pen v2 parameters: -71 [ 352.584927][ T5135] uclogic 0003:256C:006D.0001: failed probing parameters: -71 [ 352.593323][ T5135] uclogic 0003:256C:006D.0001: probe with driver uclogic failed with error -71 [ 352.607378][ T5735] team0: Port device team_slave_1 added [ 352.800427][ T5135] usb 5-1: USB disconnect, device number 2 [ 352.970451][ T51] Bluetooth: hci4: command tx timeout [ 353.005200][ T5735] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 353.012408][ T5735] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 353.039728][ T5735] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 353.209289][ T5735] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 353.216970][ T5735] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 353.243302][ T5735] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 354.017820][ T5735] hsr_slave_0: entered promiscuous mode [ 354.101415][ T5735] hsr_slave_1: entered promiscuous mode [ 354.170369][ T5735] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 354.178421][ T5735] Cannot create hsr debugfs directory [ 354.676472][ T5803] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 354.775854][ T5803] Process accounting resumed [ 355.055464][ T51] Bluetooth: hci4: command tx timeout [ 355.246044][ T5810] loop3: detected capacity change from 0 to 256 [ 355.417502][ T5810] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 355.432602][ T5810] FAT-fs (loop3): Filesystem has been set read-only [ 355.440808][ T5810] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 355.461254][ T5810] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 355.561908][ T29] audit: type=1800 audit(1717585228.959:39): pid=5810 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor.3" name="file1" dev="loop3" ino=1048618 res=0 errno=0 [ 355.780155][ T5810] syz-executor.3 (5810) used greatest stack depth: 3992 bytes left [ 355.889873][ T5816] loop1: detected capacity change from 0 to 256 [ 356.843419][ T5735] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 356.980687][ T5735] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 357.050271][ T5735] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 357.068608][ T5829] syz-executor.1: attempt to access beyond end of device [ 357.068608][ T5829] loop3: rw=0, sector=0, nr_sectors = 1 limit=0 [ 357.082412][ T5829] FAT-fs (loop3): unable to read boot sector [ 357.197040][ T5735] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 359.232353][ T5735] 8021q: adding VLAN 0 to HW filter on device bond0 [ 359.543400][ T5735] 8021q: adding VLAN 0 to HW filter on device team0 [ 359.577997][ T5852] Process accounting resumed [ 359.697450][ T790] bridge0: port 1(bridge_slave_0) entered blocking state [ 359.705502][ T790] bridge0: port 1(bridge_slave_0) entered forwarding state [ 359.846470][ T790] bridge0: port 2(bridge_slave_1) entered blocking state [ 359.854313][ T790] bridge0: port 2(bridge_slave_1) entered forwarding state [ 360.373839][ T5735] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 363.117341][ T5735] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 364.118400][ T5735] veth0_vlan: entered promiscuous mode [ 364.146102][ T5892] Process accounting resumed [ 364.384668][ T5735] veth1_vlan: entered promiscuous mode [ 365.137989][ T5735] veth0_macvtap: entered promiscuous mode [ 365.310462][ T5735] veth1_macvtap: entered promiscuous mode [ 365.667809][ T5735] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 365.679070][ T5735] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 365.689330][ T5735] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 365.700703][ T5735] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 365.710951][ T5735] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 365.721769][ T5735] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 365.732219][ T5735] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 365.743061][ T5735] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 365.759518][ T5735] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 365.766336][ T790] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 365.892771][ T5735] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 365.906084][ T5735] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 365.916505][ T5735] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 365.930010][ T5735] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 365.940582][ T5735] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 365.951397][ T5735] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 365.961999][ T5735] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 365.978943][ T5735] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 365.996983][ T5735] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 366.116247][ T790] usb 2-1: Using ep0 maxpacket: 8 [ 366.293867][ T5735] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 366.297915][ T790] usb 2-1: config 0 has an invalid interface number: 80 but max is 0 [ 366.304092][ T5735] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 366.311301][ T790] usb 2-1: config 0 has no interface number 0 [ 366.320187][ T5735] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 366.320412][ T5735] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 366.328407][ T790] usb 2-1: config 0 interface 80 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 366.517049][ T790] usb 2-1: New USB device found, idVendor=07ab, idProduct=fc01, bcdDevice= f.07 [ 366.526867][ T790] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 366.535478][ T790] usb 2-1: Product: syz [ 366.539952][ T790] usb 2-1: Manufacturer: syz [ 366.544832][ T790] usb 2-1: SerialNumber: syz [ 366.612110][ T790] usb 2-1: config 0 descriptor?? [ 366.966742][ T790] ums-freecom 2-1:0.80: USB Mass Storage device detected [ 367.178670][ T790] usb 2-1: USB disconnect, device number 2 [ 370.256222][ T5955] Process accounting resumed [ 374.743826][ T6007] Process accounting resumed [ 375.265742][ T790] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 375.698786][ T790] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 375.711550][ T790] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 375.721938][ T790] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 375.731492][ T790] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 375.851173][ T790] usb 2-1: config 0 descriptor?? [ 376.300624][ T2994] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 376.313776][ T2994] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 376.681237][ T3232] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 376.689450][ T3232] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 376.815372][ T6027] loop4: detected capacity change from 0 to 256 [ 377.177350][ T790] uclogic 0003:256C:006D.0002: failed retrieving Huion firmware version: -71 [ 377.187013][ T790] uclogic 0003:256C:006D.0002: failed probing parameters: -71 [ 377.195943][ T790] uclogic 0003:256C:006D.0002: probe with driver uclogic failed with error -71 [ 377.346323][ T790] usb 2-1: USB disconnect, device number 3 [ 377.358907][ T6027] FAT-fs (loop4): Directory bread(block 64) failed [ 377.366759][ T6027] FAT-fs (loop4): Directory bread(block 65) failed [ 377.373821][ T6027] FAT-fs (loop4): Directory bread(block 66) failed [ 377.380921][ T6027] FAT-fs (loop4): Directory bread(block 67) failed [ 377.388092][ T6027] FAT-fs (loop4): Directory bread(block 68) failed [ 377.394936][ T6027] FAT-fs (loop4): Directory bread(block 69) failed [ 377.402286][ T6027] FAT-fs (loop4): Directory bread(block 70) failed [ 377.409307][ T6027] FAT-fs (loop4): Directory bread(block 71) failed [ 377.416463][ T6027] FAT-fs (loop4): Directory bread(block 72) failed [ 377.423277][ T6027] FAT-fs (loop4): Directory bread(block 73) failed [ 378.222862][ T6033] loop2: detected capacity change from 0 to 2048 [ 378.307858][ T6033] EXT4-fs: Ignoring removed nobh option [ 378.400700][ T6033] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 378.684875][ T5735] EXT4-fs error (device loop2): ext4_validate_block_bitmap:432: comm syz-executor.2: bg 0: block 2: invalid block bitmap [ 378.745191][ T5735] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6537: Corrupt filesystem [ 378.898444][ T5735] EXT4-fs error (device loop2): ext4_read_inline_dir:1560: inode #12: block 5: comm syz-executor.2: path /root/syzkaller-testdir3225361151/syzkaller.Kkuheb/0/file1/file0/file0: bad entry in directory: directory entry overrun - offset=24, inode=13, rec_len=7952, size=80 fake=0 [ 379.007185][ T5735] EXT4-fs error (device loop2): ext4_read_inline_dir:1560: inode #12: block 5: comm syz-executor.2: path /root/syzkaller-testdir3225361151/syzkaller.Kkuheb/0/file1/file0/file0: bad entry in directory: directory entry overrun - offset=24, inode=13, rec_len=7952, size=80 fake=0 [ 379.734303][ T5735] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 380.111236][ T3914] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 380.333441][ T3914] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 380.616324][ T3914] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 380.839835][ T3914] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 381.392148][ T3914] bridge_slave_1: left allmulticast mode [ 381.398297][ T3914] bridge_slave_1: left promiscuous mode [ 381.405188][ T3914] bridge0: port 2(bridge_slave_1) entered disabled state [ 381.474778][ T3914] bridge_slave_0: left allmulticast mode [ 381.481420][ T3914] bridge_slave_0: left promiscuous mode [ 381.488406][ T3914] bridge0: port 1(bridge_slave_0) entered disabled state [ 382.333650][ T3914] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 382.447667][ T3914] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 382.503756][ T3914] bond0 (unregistering): Released all slaves [ 384.303409][ T3914] hsr_slave_0: left promiscuous mode [ 384.383110][ T3914] hsr_slave_1: left promiscuous mode [ 384.449019][ T3914] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 384.457220][ T3914] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 384.535571][ T3914] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 384.543354][ T3914] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 384.624174][ T3914] veth1_macvtap: left promiscuous mode [ 384.630322][ T3914] veth0_macvtap: left promiscuous mode [ 384.636466][ T3914] veth1_vlan: left promiscuous mode [ 384.642092][ T3914] veth0_vlan: left promiscuous mode [ 385.490862][ T5081] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 385.500339][ T5081] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 385.559668][ T5081] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 385.589394][ T5081] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 385.625333][ T5081] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 385.641644][ T5081] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 386.288111][ T3914] team0 (unregistering): Port device team_slave_1 removed [ 386.453560][ T6093] Process accounting resumed [ 386.454755][ T3914] team0 (unregistering): Port device team_slave_0 removed [ 387.765537][ T51] Bluetooth: hci4: command tx timeout [ 387.965656][ T8] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 388.459258][ T8] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 388.470672][ T8] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 388.480952][ T8] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 388.490521][ T8] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 388.606884][ T8] usb 5-1: config 0 descriptor?? [ 389.266137][ T6088] chnl_net:caif_netlink_parms(): no params data found [ 389.849371][ T51] Bluetooth: hci4: command tx timeout [ 389.956090][ T8] input: HID 256c:006d Pen as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:256C:006D.0003/input/input5 [ 390.113522][ T8] input: HID 256c:006d Pad as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:256C:006D.0003/input/input6 [ 390.867528][ T8] input: HID 256c:006d Touch Strip as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:256C:006D.0003/input/input7 [ 390.971676][ T8] input: HID 256c:006d Dial as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:256C:006D.0003/input/input8 [ 391.327734][ T8] uclogic 0003:256C:006D.0003: input,hidraw0: USB HID v0.00 Keypad [HID 256c:006d] on usb-dummy_hcd.4-1/input0 [ 391.488158][ T8] usb 5-1: USB disconnect, device number 3 [ 391.965529][ T51] Bluetooth: hci4: command tx timeout [ 392.380393][ T6088] bridge0: port 1(bridge_slave_0) entered blocking state [ 392.392949][ T6138] loop4: detected capacity change from 0 to 256 [ 392.402402][ T6088] bridge0: port 1(bridge_slave_0) entered disabled state [ 392.410557][ T6088] bridge_slave_0: entered allmulticast mode [ 392.420151][ T6088] bridge_slave_0: entered promiscuous mode [ 392.671344][ T6088] bridge0: port 2(bridge_slave_1) entered blocking state [ 392.683347][ T6088] bridge0: port 2(bridge_slave_1) entered disabled state [ 392.699627][ T6088] bridge_slave_1: entered allmulticast mode [ 392.709456][ T6088] bridge_slave_1: entered promiscuous mode [ 392.870439][ T6138] FAT-fs (loop4): Directory bread(block 64) failed [ 392.877747][ T6138] FAT-fs (loop4): Directory bread(block 65) failed [ 392.884747][ T6138] FAT-fs (loop4): Directory bread(block 66) failed [ 392.891830][ T6138] FAT-fs (loop4): Directory bread(block 67) failed [ 392.902395][ T6138] FAT-fs (loop4): Directory bread(block 68) failed [ 392.910385][ T6138] FAT-fs (loop4): Directory bread(block 69) failed [ 392.917591][ T6138] FAT-fs (loop4): Directory bread(block 70) failed [ 392.924424][ T6138] FAT-fs (loop4): Directory bread(block 71) failed [ 392.931650][ T6138] FAT-fs (loop4): Directory bread(block 72) failed [ 392.938726][ T6138] FAT-fs (loop4): Directory bread(block 73) failed [ 393.319769][ T6088] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 393.459915][ T6088] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 393.467802][ T6141] Process accounting resumed [ 394.003030][ T6088] team0: Port device team_slave_0 added [ 394.046630][ T5081] Bluetooth: hci4: command tx timeout [ 394.198042][ T6088] team0: Port device team_slave_1 added [ 394.687269][ T6088] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 394.694495][ T6088] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 394.721082][ T6088] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 394.992281][ T6088] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 395.001120][ T6088] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 395.029394][ T6088] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 395.654138][ T6088] hsr_slave_0: entered promiscuous mode [ 395.738818][ T6088] hsr_slave_1: entered promiscuous mode [ 395.776959][ T6088] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 395.784806][ T6088] Cannot create hsr debugfs directory [ 396.592022][ T6163] loop3: detected capacity change from 0 to 256 [ 396.777994][ T6163] exfat: Deprecated parameter 'utf8' [ 396.783768][ T6163] exfat: Deprecated parameter 'utf8' [ 397.147187][ T6163] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xdc42f586, utbl_chksum : 0xe619d30d) [ 398.292719][ T6088] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 398.471764][ T6088] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 398.586077][ T6088] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 398.726248][ T6088] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 399.501537][ T6191] Process accounting resumed [ 400.624251][ T6088] 8021q: adding VLAN 0 to HW filter on device bond0 [ 401.007579][ T6088] 8021q: adding VLAN 0 to HW filter on device team0 [ 401.161838][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 401.169604][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 401.460567][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 401.468508][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 402.254252][ T6088] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 403.265881][ T8] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 403.757266][ T8] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 403.768997][ T8] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 403.889224][ T8] usb 4-1: config 0 descriptor?? [ 404.000130][ T8] cp210x 4-1:0.0: cp210x converter detected [ 404.466064][ T8] cp210x 4-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 404.660069][ T8] usb 4-1: cp210x converter now attached to ttyUSB0 [ 404.863204][ T8] usb 4-1: USB disconnect, device number 2 [ 404.953450][ T8] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 405.099809][ T8] cp210x 4-1:0.0: device disconnected [ 405.131511][ T6088] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 405.541265][ T51] Bluetooth: hci0: command 0x0406 tx timeout [ 405.956406][ T6244] Process accounting resumed [ 406.092684][ T6088] veth0_vlan: entered promiscuous mode [ 406.271287][ T6088] veth1_vlan: entered promiscuous mode [ 406.706404][ T6088] veth0_macvtap: entered promiscuous mode [ 406.758050][ T6088] veth1_macvtap: entered promiscuous mode [ 407.036951][ T6088] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 407.048889][ T6088] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 407.059156][ T6088] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 407.070064][ T6088] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 407.080329][ T6088] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 407.093083][ T6088] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 407.103604][ T6088] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 407.114563][ T6088] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 407.135571][ T6088] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 407.507952][ T6088] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 407.519164][ T6088] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 407.532015][ T6088] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 407.547101][ T6088] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 407.558514][ T6088] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 407.569418][ T6088] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 407.579711][ T6088] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 407.590626][ T6088] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 407.609898][ T6088] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 408.104506][ T6088] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 408.113826][ T6088] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 408.123348][ T6088] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 408.132561][ T6088] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 408.218979][ T6265] Bluetooth: MGMT ver 1.22 [ 408.591431][ T1222] ieee802154 phy0 wpan0: encryption failed: -22 [ 408.598843][ T1222] ieee802154 phy1 wpan1: encryption failed: -22 [ 409.915372][ T10] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 410.173557][ T6289] Process accounting resumed [ 410.327786][ T10] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 410.337882][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 410.439447][ T10] usb 5-1: config 0 descriptor?? [ 410.533279][ T10] cp210x 5-1:0.0: cp210x converter detected [ 410.982292][ T10] cp210x 5-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 411.108310][ T10] usb 5-1: cp210x converter now attached to ttyUSB0 [ 411.365713][ T10] usb 5-1: USB disconnect, device number 4 [ 411.460894][ T10] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 411.516073][ T6305] netlink: 'syz-executor.3': attribute type 29 has an invalid length. [ 411.525343][ T6305] netlink: 'syz-executor.3': attribute type 29 has an invalid length. [ 411.604611][ T10] cp210x 5-1:0.0: device disconnected [ 413.649792][ T6329] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 414.686555][ T6340] Process accounting resumed [ 414.990038][ T6347] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 415.796376][ T5081] Bluetooth: hci1: command 0x0406 tx timeout [ 415.935994][ T6347] can: request_module (can-proto-0) failed. [ 416.605432][ T10] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 416.926005][ T10] usb 4-1: Using ep0 maxpacket: 8 [ 417.069904][ T10] usb 4-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 417.079501][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 417.156493][ T10] usb 4-1: config 0 descriptor?? [ 417.663231][ T10] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 417.674536][ T10] asix 4-1:0.0 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffe0 [ 417.693499][ T10] asix 4-1:0.0: probe with driver asix failed with error -32 [ 417.726887][ T8] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 417.991550][ T8] usb 5-1: Using ep0 maxpacket: 32 [ 418.215139][ C0] hrtimer: interrupt took 263399 ns [ 418.278362][ T8] usb 5-1: New USB device found, idVendor=13d3, idProduct=3341, bcdDevice=f1.c5 [ 418.287994][ T8] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 418.301195][ T8] usb 5-1: Product: syz [ 418.307162][ T8] usb 5-1: Manufacturer: syz [ 418.311995][ T8] usb 5-1: SerialNumber: syz [ 418.412650][ T8] usb 5-1: config 0 descriptor?? [ 418.515276][ T8] r8712u: register rtl8712_netdev_ops to netdev_ops [ 418.522116][ T8] usb 5-1: r8712u: USB_SPEED_HIGH with 0 endpoints [ 418.879002][ T8] usb 5-1: r8712u: Boot from EFUSE: Autoload Failed [ 418.886265][ T8] usb 5-1: r8712u: MAC Address from efuse = 00:e0:4c:87:00:00 [ 418.894084][ T8] usb 5-1: r8712u: Loading firmware from "rtlwifi/rtl8712u.bin" [ 419.100829][ T8] usb 5-1: USB disconnect, device number 5 [ 419.130889][ T3914] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 419.139997][ T3914] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 419.555447][ T3500] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 419.563598][ T3500] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 420.168499][ T6403] Process accounting resumed [ 420.885575][ T5081] Bluetooth: hci3: command 0x0406 tx timeout [ 421.125732][ T6413] input: syz0 as /devices/virtual/input/input9 [ 421.338976][ T8] usb 4-1: USB disconnect, device number 3 [ 422.098133][ T8] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 422.397666][ T8] usb 4-1: Using ep0 maxpacket: 8 [ 422.515668][ T8] usb 4-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xED, skipping [ 422.527027][ T8] usb 4-1: New USB device found, idVendor=1b3d, idProduct=0146, bcdDevice= 1.b8 [ 422.536614][ T8] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 422.614095][ T8] usb 4-1: config 0 descriptor?? [ 422.721342][ T8] ftdi_sio 4-1:0.0: FTDI USB Serial Device converter detected [ 422.731808][ T8] usb 4-1: Detected SIO [ 422.781484][ T8] usb 4-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 422.956292][ T8] usb 4-1: USB disconnect, device number 4 [ 423.039556][ T8] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 423.052511][ T8] ftdi_sio 4-1:0.0: device disconnected [ 423.256007][ T5135] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 423.555521][ T5135] usb 5-1: Using ep0 maxpacket: 32 [ 423.691573][ T6437] trusted_key: encrypted_key: master key parameter '0t' is invalid [ 424.002209][ T5135] usb 5-1: New USB device found, idVendor=13d3, idProduct=3341, bcdDevice=f1.c5 [ 424.011953][ T5135] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 424.020448][ T5135] usb 5-1: Product: syz [ 424.024866][ T5135] usb 5-1: Manufacturer: syz [ 424.033190][ T5135] usb 5-1: SerialNumber: syz [ 424.110089][ T5135] usb 5-1: config 0 descriptor?? [ 424.243726][ T5135] r8712u: register rtl8712_netdev_ops to netdev_ops [ 424.252305][ T5135] usb 5-1: r8712u: USB_SPEED_HIGH with 0 endpoints [ 424.637071][ T5135] usb 5-1: r8712u: Boot from EFUSE: Autoload Failed [ 424.649766][ T5135] usb 5-1: r8712u: MAC Address from efuse = 00:e0:4c:87:00:00 [ 424.659731][ T5135] usb 5-1: r8712u: Loading firmware from "rtlwifi/rtl8712u.bin" [ 424.810936][ T6441] Process accounting resumed [ 424.901869][ T5135] usb 5-1: USB disconnect, device number 6 [ 426.005219][ T5081] Bluetooth: hci2: command 0x0406 tx timeout [ 426.289307][ T6460] input: syz0 as /devices/virtual/input/input10 [ 426.343770][ T6451] trusted_key: encrypted_key: insufficient parameters specified [ 426.780458][ C0] TCP: request_sock_TCP: Possible SYN flooding on port [::]:2. Sending cookies. [ 427.677187][ T6471] loop0: detected capacity change from 0 to 128 [ 427.789332][ T6471] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 427.842511][ T6471] ext4 filesystem being mounted at /root/syzkaller-testdir3923362390/syzkaller.cBJHMR/58/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 428.796655][ T5372] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 429.024786][ T6486] trusted_key: encrypted_key: master key parameter '0t' is invalid [ 429.842016][ T6489] Process accounting resumed [ 430.576271][ T782] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 430.875371][ T782] usb 5-1: Using ep0 maxpacket: 32 [ 431.203080][ T782] usb 5-1: New USB device found, idVendor=13d3, idProduct=3341, bcdDevice=f1.c5 [ 431.212730][ T782] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 431.221324][ T782] usb 5-1: Product: syz [ 431.225903][ T782] usb 5-1: Manufacturer: syz [ 431.230774][ T782] usb 5-1: SerialNumber: syz [ 431.287004][ T782] usb 5-1: config 0 descriptor?? [ 431.369786][ T782] r8712u: register rtl8712_netdev_ops to netdev_ops [ 431.377298][ T782] usb 5-1: r8712u: USB_SPEED_HIGH with 0 endpoints [ 431.612363][ T6506] input: syz0 as /devices/virtual/input/input11 [ 431.828684][ T782] usb 5-1: r8712u: Boot from EFUSE: Autoload Failed [ 431.836223][ T782] usb 5-1: r8712u: MAC Address from efuse = 00:e0:4c:87:00:00 [ 431.844006][ T782] usb 5-1: r8712u: Loading firmware from "rtlwifi/rtl8712u.bin" [ 432.011668][ T782] usb 5-1: USB disconnect, device number 7 [ 432.590380][ T6514] loop2: detected capacity change from 0 to 128 [ 432.814276][ T6514] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 432.898611][ T6514] ext4 filesystem being mounted at /root/syzkaller-testdir2945674360/syzkaller.D6pJVR/6/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 433.405888][ T6521] warning: `syz-executor.0' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 433.490387][ T6509] loop1: detected capacity change from 0 to 8192 [ 433.707882][ T6088] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 433.743620][ T6509] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 434.468379][ T6524] Process accounting resumed [ 435.351369][ T6530] trusted_key: encrypted_key: master key parameter '0t' is invalid [ 435.848180][ T6536] trusted_key: encrypted_key: insufficient parameters specified [ 437.944540][ T6555] loop1: detected capacity change from 0 to 128 [ 437.996269][ T6556] input: syz0 as /devices/virtual/input/input12 [ 438.135335][ T6555] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 438.236062][ T6555] ext4 filesystem being mounted at /root/syzkaller-testdir320060821/syzkaller.WpJ54r/58/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 438.290306][ T5155] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 438.575600][ T5155] usb 4-1: Using ep0 maxpacket: 32 [ 438.907295][ T5155] usb 4-1: New USB device found, idVendor=13d3, idProduct=3341, bcdDevice=f1.c5 [ 438.917042][ T5155] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 438.925557][ T5155] usb 4-1: Product: syz [ 438.930014][ T5155] usb 4-1: Manufacturer: syz [ 438.934886][ T5155] usb 4-1: SerialNumber: syz [ 439.028742][ T5155] usb 4-1: config 0 descriptor?? [ 439.077193][ T5439] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 439.138593][ T5155] r8712u: register rtl8712_netdev_ops to netdev_ops [ 439.145650][ T5155] usb 4-1: r8712u: USB_SPEED_HIGH with 0 endpoints [ 439.498078][ T5155] usb 4-1: r8712u: Boot from EFUSE: Autoload Failed [ 439.505413][ T5155] usb 4-1: r8712u: MAC Address from efuse = 00:e0:4c:87:00:00 [ 439.513079][ T5155] usb 4-1: r8712u: Loading firmware from "rtlwifi/rtl8712u.bin" [ 439.676856][ T5155] usb 4-1: USB disconnect, device number 5 [ 440.081001][ T6573] Process accounting resumed [ 441.267126][ T6587] trusted_key: encrypted_key: master key parameter '0t' is invalid [ 441.314903][ T6585] trusted_key: encrypted_key: insufficient parameters specified [ 442.761554][ T6600] input: syz0 as /devices/virtual/input/input13 [ 443.553893][ T6604] loop1: detected capacity change from 0 to 128 [ 443.734130][ T6604] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 443.828089][ T6604] ext4 filesystem being mounted at /root/syzkaller-testdir320060821/syzkaller.WpJ54r/62/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 444.468741][ T5439] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 444.544096][ T6613] Process accounting resumed [ 445.353523][ T6622] loop1: detected capacity change from 0 to 128 [ 447.263523][ T6642] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 447.410722][ T6641] loop3: detected capacity change from 0 to 2048 [ 447.568936][ T6641] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 447.738699][ T6641] ===================================================== [ 447.746171][ T6641] BUG: KMSAN: uninit-value in crc_itu_t+0x287/0x2e0 [ 447.753016][ T6641] crc_itu_t+0x287/0x2e0 [ 447.757805][ T6641] udf_update_tag+0x5c/0x2a0 [ 447.762649][ T6641] udf_rename+0x1202/0x16d0 [ 447.765170][ T6644] loop2: detected capacity change from 0 to 128 [ 447.767579][ T6641] vfs_rename+0x1d9a/0x2280 [ 447.778584][ T6641] do_renameat2+0x18cc/0x1d50 [ 447.788190][ T6641] __ia32_sys_renameat2+0x153/0x200 [ 447.794930][ T6641] ia32_sys_call+0x388d/0x40a0 [ 447.800178][ T6641] __do_fast_syscall_32+0xb4/0x120 [ 447.805702][ T6641] do_fast_syscall_32+0x38/0x80 [ 447.810821][ T6641] do_SYSENTER_32+0x1f/0x30 [ 447.816777][ T6641] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 447.823416][ T6641] [ 447.825968][ T6641] Local variable diriter created at: [ 447.831421][ T6641] udf_rename+0xbe/0x16d0 [ 447.836124][ T6641] vfs_rename+0x1d9a/0x2280 [ 447.840825][ T6641] [ 447.843291][ T6641] CPU: 1 PID: 6641 Comm: syz-executor.3 Not tainted 6.9.0-syzkaller-02339-g101b7a97143a #0 [ 447.856003][ T6641] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024 [ 447.867059][ T6641] ===================================================== [ 447.874156][ T6641] Disabling lock debugging due to kernel taint [ 447.880590][ T6641] Kernel panic - not syncing: kmsan.panic set ... [ 447.887164][ T6641] CPU: 1 PID: 6641 Comm: syz-executor.3 Tainted: G B 6.9.0-syzkaller-02339-g101b7a97143a #0 [ 447.898857][ T6641] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024 [ 447.909122][ T6641] Call Trace: [ 447.912545][ T6641] [ 447.915609][ T6641] dump_stack_lvl+0x216/0x2d0 [ 447.920544][ T6641] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 447.926605][ T6641] dump_stack+0x1e/0x30 [ 447.931019][ T6641] panic+0x4e2/0xcd0 [ 447.935181][ T6641] ? kmsan_get_metadata+0xf1/0x1d0 [ 447.940538][ T6641] kmsan_report+0x2d5/0x2e0 [ 447.945254][ T6641] ? kmsan_internal_poison_memory+0x49/0x90 [ 447.951395][ T6641] ? kmsan_slab_free+0xd6/0x140 [ 447.956426][ T6641] ? kfree+0x20f/0xa60 [ 447.960659][ T6641] ? udf_fiiter_release+0x115/0x160 [ 447.966064][ T6641] ? __msan_warning+0x95/0x120 [ 447.971008][ T6641] ? crc_itu_t+0x287/0x2e0 [ 447.975634][ T6641] ? udf_update_tag+0x5c/0x2a0 [ 447.980594][ T6641] ? udf_rename+0x1202/0x16d0 [ 447.985493][ T6641] ? vfs_rename+0x1d9a/0x2280 [ 447.990352][ T6641] ? do_renameat2+0x18cc/0x1d50 [ 447.995402][ T6641] ? __ia32_sys_renameat2+0x153/0x200 [ 448.000977][ T6641] ? ia32_sys_call+0x388d/0x40a0 [ 448.006164][ T6641] ? __do_fast_syscall_32+0xb4/0x120 [ 448.011767][ T6641] ? do_fast_syscall_32+0x38/0x80 [ 448.017020][ T6641] ? do_SYSENTER_32+0x1f/0x30 [ 448.022015][ T6641] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 448.028777][ T6641] ? current_time+0x44/0x550 [ 448.033564][ T6641] ? filter_irq_stacks+0x60/0x1a0 [ 448.038835][ T6641] ? kmsan_get_metadata+0x146/0x1d0 [ 448.044225][ T6641] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 448.050331][ T6641] ? kmsan_get_metadata+0x146/0x1d0 [ 448.055726][ T6641] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 448.061840][ T6641] ? kmsan_get_metadata+0x146/0x1d0 [ 448.067235][ T6641] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 448.073248][ T6641] __msan_warning+0x95/0x120 [ 448.078193][ T6641] crc_itu_t+0x287/0x2e0 [ 448.082658][ T6641] udf_update_tag+0x5c/0x2a0 [ 448.087461][ T6641] udf_rename+0x1202/0x16d0 [ 448.092220][ T6641] ? kmsan_internal_set_shadow_origin+0x66/0xe0 [ 448.098757][ T6641] ? kmsan_get_metadata+0x146/0x1d0 [ 448.104156][ T6641] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 448.110238][ T6641] ? __pfx_udf_rename+0x10/0x10 [ 448.115467][ T6641] vfs_rename+0x1d9a/0x2280 [ 448.120199][ T6641] do_renameat2+0x18cc/0x1d50 [ 448.125114][ T6641] __ia32_sys_renameat2+0x153/0x200 [ 448.130522][ T6641] ia32_sys_call+0x388d/0x40a0 [ 448.135528][ T6641] __do_fast_syscall_32+0xb4/0x120 [ 448.140879][ T6641] ? irqentry_exit+0x16/0x60 [ 448.145682][ T6641] do_fast_syscall_32+0x38/0x80 [ 448.150758][ T6641] do_SYSENTER_32+0x1f/0x30 [ 448.155570][ T6641] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 448.162159][ T6641] RIP: 0023:0xf7480579 [ 448.166372][ T6641] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 448.186181][ T6641] RSP: 002b:00000000f5f095ac EFLAGS: 00000206 ORIG_RAX: 0000000000000161 [ 448.194806][ T6641] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000020000000 [ 448.202950][ T6641] RDX: 0000000000000005 RSI: 00000000200004c0 RDI: 0000000000000000 [ 448.211084][ T6641] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 448.219208][ T6641] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 448.227414][ T6641] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 448.235554][ T6641] [ 448.238986][ T6641] Kernel Offset: disabled [ 448.243401][ T6641] Rebooting in 86400 seconds..