last executing test programs: 1m37.67979413s ago: executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r0}, 0x10) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000040)={0x53, 0x0, 0x6, 0x0, @buffer={0x2, 0x0, 0x0}, &(0x7f0000000380)="259374c96ee3", 0x0, 0x0, 0x0, 0x0, 0x0}) 1m37.152653699s ago: executing program 3: bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xfffffd73}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@cgroup=r0, r1, 0x2}, 0x10) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000280)={@cgroup, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 1m36.604273749s ago: executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec8500000050000000970000000f000000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0x6, 0x6, &(0x7f0000000000)=@framed={{}, [@generic={0x2e}, @generic={0x1e}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffb}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x9}, 0x90) 1m35.881315099s ago: executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xfff, 0x7}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000d0"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xfffffffffffffefb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='kfree_skb\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='kfree_skb\x00', r2}, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) close(r4) sendmsg$unix(r3, &(0x7f0000000800)={0x0, 0x0, 0x0}, 0x0) 1m34.83806217s ago: executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2, 0x4, 0x5}, 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000740)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000080)='mm_page_alloc\x00', r0}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) recvmsg$unix(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000140)=""/79, 0xce80}], 0x300}, 0x0) 1m33.965246666s ago: executing program 0: bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xfffffd73}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@cgroup=r0, r1, 0x2}, 0x10) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000280)={@cgroup, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 1m33.288352906s ago: executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={0x0, 0x20}}, 0x0) r3 = dup3(r1, r2, 0x0) getsockname$packet(r3, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f00000004c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000500)=ANY=[@ANYBLOB="480000001000010400"/20, @ANYRES32=r4, @ANYBLOB="00000000000000001c00128009000100626f6e64000000000c0002800500010005"], 0x48}}, 0x0) getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000240)=0x14) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000780)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b000100627269646765000004000280", @ANYRES32=r5], 0x3c}}, 0x0) 1m7.064270492s ago: executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec8500000050000000970000000f000000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0x6, 0x6, &(0x7f0000000000)=@framed={{}, [@generic={0x2e}, @generic={0x1e}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffb}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x9}, 0x90) 1m0.747049774s ago: executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={0x0, 0x20}}, 0x0) r3 = dup3(r1, r2, 0x0) getsockname$packet(r3, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f00000004c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000500)=ANY=[@ANYBLOB="480000001000010400"/20, @ANYRES32=r4, @ANYBLOB="00000000000000001c00128009000100626f6e64000000000c0002800500010005"], 0x48}}, 0x0) getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000240)=0x14) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000780)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b000100627269646765000004000280", @ANYRES32=r5], 0x3c}}, 0x0) 32.64098945s ago: executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec8500000050000000970000000f000000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0x6, 0x6, &(0x7f0000000000)=@framed={{}, [@generic={0x2e}, @generic={0x1e}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffb}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x9}, 0x90) 26.614213909s ago: executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={0x0, 0x20}}, 0x0) r3 = dup3(r1, r2, 0x0) getsockname$packet(r3, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f00000004c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000500)=ANY=[@ANYBLOB="480000001000010400"/20, @ANYRES32=r4, @ANYBLOB="00000000000000001c00128009000100626f6e64000000000c0002800500010005"], 0x48}}, 0x0) getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000240)=0x14) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000780)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b000100627269646765000004000280", @ANYRES32=r5], 0x3c}}, 0x0) 5.059854412s ago: executing program 4: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000002ac0)=@delchain={0xac, 0x65, 0x0, 0x0, 0x0, {}, [@TCA_CHAIN={0x8}, @TCA_RATE={0x6}, @TCA_CHAIN={0x8}, @filter_kind_options=@f_flower={{0xb}, {0x2c, 0x2, [@TCA_FLOWER_KEY_ARP_OP={0x5}, @TCA_FLOWER_KEY_ICMPV6_CODE={0x5}, @TCA_FLOWER_KEY_TCP_DST_MASK={0x6}, @TCA_FLOWER_KEY_UDP_SRC_MASK={0x6}, @TCA_FLOWER_KEY_ICMPV6_TYPE={0x5}]}}, @filter_kind_options=@f_route={{0xa}, {0x2c, 0x2, [@TCA_ROUTE4_FROM={0x8}, @TCA_ROUTE4_FROM={0x8}, @TCA_ROUTE4_IIF={0x8}, @TCA_ROUTE4_IIF={0x8}, @TCA_ROUTE4_CLASSID={0x8}]}}]}, 0xac}}, 0x0) sendto(0xffffffffffffffff, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x1b0}, {&(0x7f00000007c0)=""/154, 0x8}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 5.016967363s ago: executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000c80)='kmem_cache_free\x00', r0}, 0x10) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r1, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xadf29f33fb903ae1, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) recvmsg(r1, &(0x7f00000008c0)={0x0, 0x4, &(0x7f0000000840)=[{&(0x7f0000000040)=""/50, 0xfffffe72}, {&(0x7f0000000240)=""/52, 0x34}, {&(0x7f0000000780)=""/129, 0x80}, {&(0x7f0000000300)=""/68, 0x44}, {&(0x7f0000000380)=""/121, 0x79}, {&(0x7f0000000400)=""/183, 0xb7}], 0x6}, 0x40000110) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'wlan1\x00'}) sendmsg$NL80211_CMD_DEL_KEY(0xffffffffffffffff, 0x0, 0x0) sendmmsg$inet6(r1, &(0x7f00000008c0)=[{{&(0x7f0000000240)={0xa, 0x0, 0x401, @loopback, 0xfffe0000}, 0x1c, &(0x7f0000000740)=[{&(0x7f0000000280)}], 0x1, &(0x7f00000007c0)=[@rthdr_2292={{0x18, 0x29, 0x39, {0x33, 0x0, 0x1, 0x3f}}}, @pktinfo={{0x24, 0x29, 0x32, {@dev={0xfe, 0x80, '\x00', 0x1a}}}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x3}}], 0x58}}], 0x1, 0x48855) 4.526128233s ago: executing program 4: r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x0, 0x0, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000100), 0x75, 0x1a1281) socket$inet(0xa, 0x0, 0x84) ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f0000000280)) setsockopt$inet_sctp6_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, 0x0, 0x0) ioctl$USBDEVFS_FREE_STREAMS(r1, 0x802c550a, &(0x7f0000000000)=ANY=[@ANYBLOB="02002303100007006000000002000020d3"]) fallocate(0xffffffffffffffff, 0x0, 0x0, 0xceec) mq_timedreceive(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) lseek(0xffffffffffffffff, 0x0, 0x4) ioctl$USBDEVFS_SETCONFIGURATION(r1, 0xc0185500, 0x0) ioctl$USBDEVFS_RELEASEINTERFACE(r1, 0x5522, 0x0) connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0x0, @none, 0x4, 0x2}, 0xe) mount$cgroup2(0x0, 0x0, &(0x7f0000000640), 0x8400, &(0x7f0000000680)=ANY=[@ANYBLOB="6e7364656c65676174652c6d656d6f72795f6c6f63616c6598656e7473"]) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) 4.366741214s ago: executing program 1: preadv(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f00000000c0)=""/56, 0x38}], 0x1, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000280)={0x3, &(0x7f0000000240)=[{0x5, 0x33}, {0x7fff, 0x9, 0x80, 0x4}, {0x4, 0x2f, 0x3f, 0x2}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000340)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(0xffffffffffffffff, 0xc0182101, &(0x7f0000000180)={r0}) ftruncate(0xffffffffffffffff, 0xc17a) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000480)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000080)={r1, 0x3, 0xffffffffffffffff, 0x5}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0xc, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffffffffffff3a}, 0x5) r3 = openat$cgroup_ro(r2, &(0x7f0000000200)='blkio.bfq.dequeue\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f00000016c0), 0x3af4701e) r4 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$KDFONTOP_SET(r4, 0x4b72, &(0x7f0000000000)={0x0, 0x0, 0x8, 0x1e, 0x200, &(0x7f0000000880)="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"}) 3.936623542s ago: executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x3c}}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="200000001000250800170000000000000a000000", @ANYRES32=r7, @ANYBLOB="01"], 0x20}}, 0x0) 3.405714248s ago: executing program 2: bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000ac0)=ANY=[@ANYBLOB="b702000007000000bfa30000000000000703000000fefffe7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b7000000000000009500000000000000c9be17044171e1d3d7b1efd036d7af273bce36015779c4cef58fa35d17c668a4b63e069efb29797573b8538e31ec24925095a163b9d4e76be2661f2a395e41f7e31a8021e00b00104e0801d4de36e5fdc6c42a7b3ff13f2360a6e231fd223bc33091dd61258a1fda45991fbdce6793c8a4785ee8b60092659b941bbd694dff0f0000000000003a45404b04bf97c4fea679c032b363956cd8bac9626b5db1b07a0bd7cc85e961506a35a04617dc0200379e731d3a8d8feac94a4ee293001f6ce7d5b40bf2a7f9be8173a9639a79fae885d05afe042c0e7821d406c967379e7521292d24d6c8034f2fc7c855a8945e9bce678ee9a015abc9daac8876623db56346916674ceb55f60b493f2f4d736acb2f206fc538450a676d71c01175b8454eb92567e8f8a707b590d7219288e23ee0800000000000010a49fc8f4ff0300000000000000000000cb947d6017ad27714772ad790af252e648ef8c313c604324f5b306000000000000cf327a00000000000000080a70162bba30ad7804fa4140f1a754ffff000000ab744d306619dfb3a37d897662bee00189f43da46a908a235c84cbad335fd1d2f2ef93a6a70c8b8ece0e243eab05a34ab0a7e7e497065e5e282e284f8d5e8852a265d528075214af000000000070d42182d8f3a347d48289a8b29b911ac473c5fa02bb0e24e5b7b238e27263a23c0b865f75331d888c72df1da4b290582f00024227f03204add786a87b23ceb17c25810e769fe2d6a7bd8e504843b66b1a8c7b364bd2194ba9c8f60ac0c9b18d8c1b9e1a736825c91b4dff0000c1c5dcffa295c2930000000000235d84b0193a5ea7c77cdb7de9ce1a59ab4158097b4dd13ebfaf4425c6855530b56a3320d85c8fe85f667998b1a7e589f486c107761108e4e230419fd27b6ad9c10b25c6b6ed84badbb970dcf133279dd355e41de944564bdab99c5c712a9fbc8e9691c775bb94f746505e1e748cf1710d52468b4b1625ce21612ed5e807dfb5f19f3267e5366b2c0b2a0be49ae476263c9407ac6c596bf3cf66204984f5aebf93d1caa220ea6969cea852fe9a7d1eee13f1f48722a69ad9fb850bd093a302b9250245900ad5c8e5f20ddf77ee3d5a168964fad1aa7347d36c502d02b1d96d753ef6fc354fc126070060c65c147651fca62c0a06939f40c90ebc3042e753fe91b5770b24f25c558736dd7e1e9fb214cbb04c5c6ee4c970b320ba6fb6ef4615f4092de54c519f4622e1224153463ea80248a45a95a189958f586d606dcaa9aac656cf95a2d35225cfb0e6f47486d5cbb04a590116d4de92e203e107d68728a189b0d537d2442beab2f8ce7b2dd357200dcd139e47267012fc2a2b6bad79be429d1ddaccbe0139f16ca1b9bc1103000000ed1ece54cfdbe04670bee9b42fe3dc42033997e2e700b6edb2b49b5f2f6001ee0a9e5d1bee199ce9124a5cb479040000000000000049ead5b02d5ea1dcf6cdcf332fe94b3c1932d8d391754774a32c9b7e6ca4023bce2c7281d27a2cb62383ab3a3bb535650fbfb96c89936855eb7a485698f0d20c3eedd6123ef8f218d52ea2c346f80acb8b9a71856d2f2d1a7c6f45ee127b6a1d1ac1e243ed02e49e8aafe835919564af915965a050c37ceff855bd2dec3452c7c38f5dbf1ff1ff00020000000000006a1a029ea6540b40b2f797813af2c7d4ed235c2dc5f1dbbfcc52b2f55fd3f9f100c4891d0cb4c10ed01489bf235c45822594d7a6edc9d1270a7819fc0c597fdfb4d7842da1b411346297a40bbf221bbf63ad3822575dcc01a3c34b5aa4e3750400000000000000fc0fd9c746cf0ed4b0343d00a154e6a869346256ffbd666a34414ab0f40bec45b1c24f02ac9bc20e69201968537dd4dc61323c8b6d3643183631664eeca616696fb30fe89c8bdb15037c80"], &(0x7f0000000340)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0x2d1, 0xfffffffffffffd85, &(0x7f00000000c0)="b9ff03030018698cb89e40f086dd6000000e00002b00630677", 0x0, 0x100, 0x2000000, 0x0, 0x0, &(0x7f0000000440)}, 0x28) 3.106615789s ago: executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000003c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB="98030000", @ANYRES16=r1, @ANYRES32=r3, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c090000560333"], 0x398}}, 0x0) 3.08968811s ago: executing program 4: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d00000007"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r0}, 0x10) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000040)={0x53, 0x0, 0x6, 0x0, @buffer={0x2, 0x0, 0x0}, &(0x7f0000000380)="259374c96ee3", 0x0, 0x0, 0x0, 0x0, 0x0}) 2.991530913s ago: executing program 1: r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) fchdir(0xffffffffffffffff) poll(&(0x7f0000000080)=[{r0}], 0x1, 0x0) 2.561705145s ago: executing program 4: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000a0db000000000000000000850000000e000000d50000002a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={0x0, r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="240000001900010000000000000000001c140000fe00000100000000050012"], 0x24}}, 0x0) 2.525682184s ago: executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000011c0)={'vxcan0\x00', 0x0}) bind$can_j1939(r1, 0x0, 0x0) connect$can_j1939(r1, &(0x7f0000000080)={0x1d, r2, 0x0, {0x0, 0xff}}, 0x18) writev(r1, &(0x7f0000000240)=[{&(0x7f0000000000)='h', 0xfdef}], 0x1) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) setsockopt$SO_J1939_FILTER(r1, 0x6b, 0x1, &(0x7f00000000c0)=[{0x0, 0x0, {0x0, 0xff}}], 0x20) r3 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000240)={'vxcan0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@getchain={0x24, 0x11, 0x839, 0x0, 0x0, {0x0, 0x0, 0x0, r4}}, 0x24}}, 0x0) 2.139983258s ago: executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec8500000050000000970000000f000000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0x6, 0x6, &(0x7f0000000000)=@framed={{}, [@generic={0x2e}, @generic={0x1e}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffb}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x9}, 0x90) 1.951609675s ago: executing program 4: sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) openat$mice(0xffffffffffffff9c, 0x0, 0x0) r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'batadv_slave_0\x00', 0x0}) sendmsg$ETHTOOL_MSG_FEATURES_GET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)={0x28, r0, 0x78207b9cf137c31d, 0x0, 0x0, {0x4}, [@HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}]}]}, 0x28}}, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f0000000880)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @multicast2}}}, 0x80, &(0x7f0000000940)=[{&(0x7f0000000900)=""/53, 0x35}], 0x1, &(0x7f0000000a80)=""/164, 0xad}, 0x40000100) 1.508865729s ago: executing program 1: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000002ac0)=@delchain={0xac, 0x65, 0x0, 0x0, 0x0, {}, [@TCA_CHAIN={0x8}, @TCA_RATE={0x6}, @TCA_CHAIN={0x8}, @filter_kind_options=@f_flower={{0xb}, {0x2c, 0x2, [@TCA_FLOWER_KEY_ARP_OP={0x5}, @TCA_FLOWER_KEY_ICMPV6_CODE={0x5}, @TCA_FLOWER_KEY_TCP_DST_MASK={0x6}, @TCA_FLOWER_KEY_UDP_SRC_MASK={0x6}, @TCA_FLOWER_KEY_ICMPV6_TYPE={0x5}]}}, @filter_kind_options=@f_route={{0xa}, {0x2c, 0x2, [@TCA_ROUTE4_FROM={0x8}, @TCA_ROUTE4_FROM={0x8}, @TCA_ROUTE4_IIF={0x8}, @TCA_ROUTE4_IIF={0x8}, @TCA_ROUTE4_CLASSID={0x8}]}}]}, 0xac}}, 0x0) sendto(0xffffffffffffffff, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x1b0}, {&(0x7f00000007c0)=""/154, 0x8}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 1.090181883s ago: executing program 2: bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xfffffd73}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@cgroup=r0, r1, 0x2}, 0x10) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000280)={@cgroup=r2, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 1.040265061s ago: executing program 4: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x10, &(0x7f0000000740), 0xfe, 0x499, &(0x7f0000001780)="$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") mkdir(&(0x7f0000000000)='./control\x00', 0x0) r0 = open(&(0x7f0000022ff6)='./control\x00', 0x0, 0x0) getdents64(r0, 0x0, 0x0) lseek(r0, 0x8, 0x0) getdents64(r0, 0x0, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r2 = socket$inet6(0xa, 0x806, 0x0) bind$inet6(r2, &(0x7f0000000100)={0xa, 0x4e23}, 0x1c) listen(r2, 0x3) r3 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r3, &(0x7f0000772000)={0x2, 0x4e23}, 0x10) accept4(r2, 0x0, 0x0, 0x0) recvmmsg(r3, &(0x7f0000007940), 0x55, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) close_range(r1, 0xffffffffffffffff, 0x0) 870.83299ms ago: executing program 1: r0 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x30004081) recvmsg(r0, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000e00)=[{&(0x7f0000000a80)=""/20, 0x14}], 0x1}, 0x0) 369.874833ms ago: executing program 2: bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000ac0)=ANY=[@ANYBLOB="b702000007000000bfa30000000000000703000000fefffe7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b7000000000000009500000000000000c9be17044171e1d3d7b1efd036d7af273bce36015779c4cef58fa35d17c668a4b63e069efb29797573b8538e31ec24925095a163b9d4e76be2661f2a395e41f7e31a8021e00b00104e0801d4de36e5fdc6c42a7b3ff13f2360a6e231fd223bc33091dd61258a1fda45991fbdce6793c8a4785ee8b60092659b941bbd694dff0f0000000000003a45404b04bf97c4fea679c032b363956cd8bac9626b5db1b07a0bd7cc85e961506a35a04617dc0200379e731d3a8d8feac94a4ee293001f6ce7d5b40bf2a7f9be8173a9639a79fae885d05afe042c0e7821d406c967379e7521292d24d6c8034f2fc7c855a8945e9bce678ee9a015abc9daac8876623db56346916674ceb55f60b493f2f4d736acb2f206fc538450a676d71c01175b8454eb92567e8f8a707b590d7219288e23ee0800000000000010a49fc8f4ff0300000000000000000000cb947d6017ad27714772ad790af252e648ef8c313c604324f5b306000000000000cf327a00000000000000080a70162bba30ad7804fa4140f1a754ffff000000ab744d306619dfb3a37d897662bee00189f43da46a908a235c84cbad335fd1d2f2ef93a6a70c8b8ece0e243eab05a34ab0a7e7e497065e5e282e284f8d5e8852a265d528075214af000000000070d42182d8f3a347d48289a8b29b911ac473c5fa02bb0e24e5b7b238e27263a23c0b865f75331d888c72df1da4b290582f00024227f03204add786a87b23ceb17c25810e769fe2d6a7bd8e504843b66b1a8c7b364bd2194ba9c8f60ac0c9b18d8c1b9e1a736825c91b4dff0000c1c5dcffa295c2930000000000235d84b0193a5ea7c77cdb7de9ce1a59ab4158097b4dd13ebfaf4425c6855530b56a3320d85c8fe85f667998b1a7e589f486c107761108e4e230419fd27b6ad9c10b25c6b6ed84badbb970dcf133279dd355e41de944564bdab99c5c712a9fbc8e9691c775bb94f746505e1e748cf1710d52468b4b1625ce21612ed5e807dfb5f19f3267e5366b2c0b2a0be49ae476263c9407ac6c596bf3cf66204984f5aebf93d1caa220ea6969cea852fe9a7d1eee13f1f48722a69ad9fb850bd093a302b9250245900ad5c8e5f20ddf77ee3d5a168964fad1aa7347d36c502d02b1d96d753ef6fc354fc126070060c65c147651fca62c0a06939f40c90ebc3042e753fe91b5770b24f25c558736dd7e1e9fb214cbb04c5c6ee4c970b320ba6fb6ef4615f4092de54c519f4622e1224153463ea80248a45a95a189958f586d606dcaa9aac656cf95a2d35225cfb0e6f47486d5cbb04a590116d4de92e203e107d68728a189b0d537d2442beab2f8ce7b2dd357200dcd139e47267012fc2a2b6bad79be429d1ddaccbe0139f16ca1b9bc1103000000ed1ece54cfdbe04670bee9b42fe3dc42033997e2e700b6edb2b49b5f2f6001ee0a9e5d1bee199ce9124a5cb479040000000000000049ead5b02d5ea1dcf6cdcf332fe94b3c1932d8d391754774a32c9b7e6ca4023bce2c7281d27a2cb62383ab3a3bb535650fbfb96c89936855eb7a485698f0d20c3eedd6123ef8f218d52ea2c346f80acb8b9a71856d2f2d1a7c6f45ee127b6a1d1ac1e243ed02e49e8aafe835919564af915965a050c37ceff855bd2dec3452c7c38f5dbf1ff1ff00020000000000006a1a029ea6540b40b2f797813af2c7d4ed235c2dc5f1dbbfcc52b2f55fd3f9f100c4891d0cb4c10ed01489bf235c45822594d7a6edc9d1270a7819fc0c597fdfb4d7842da1b411346297a40bbf221bbf63ad3822575dcc01a3c34b5aa4e3750400000000000000fc0fd9c746cf0ed4b0343d00a154e6a869346256ffbd666a34414ab0f40bec45b1c24f02ac9bc20e69201968537dd4dc61323c8b6d3643183631664eeca616696fb30fe89c8bdb15037c80"], &(0x7f0000000340)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0x2d1, 0xfffffffffffffd85, &(0x7f00000000c0)="b9ff03030018698cb89e40f086dd6000000e00002b00630677", 0x0, 0x100, 0x2000000, 0x0, 0x0, &(0x7f0000000440)}, 0x28) 0s ago: executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, 0x0, 0xf3a, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000000040)=ANY=[@ANYBLOB="e00000027f0000010000000003"], 0x1c) r3 = syz_open_procfs(0x0, &(0x7f0000002180)='net/mcfilter\x00') preadv(r3, &(0x7f0000000740)=[{&(0x7f0000000300)=""/49, 0x31}], 0x1, 0xfffffffe, 0x0) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000980)="f3", 0x1}], 0x1) write$ppp(r2, &(0x7f0000000180)='l', 0x1) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x4e, &(0x7f0000000040), 0x4) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f0000000200)={@mcast1}, 0x14) socket(0xa, 0x3, 0x3a) write(r0, 0x0, 0x0) kernel console output (not intermixed with test programs): CP frequency < 30 seconds [ 254.997950][ T5494] syz-executor.2: attempt to access beyond end of device [ 254.997950][ T5494] loop2: rw=524288, sector=33554430, nr_sectors = 2 limit=2048 [ 255.499760][ T13] team0 (unregistering): Port device team_slave_1 removed [ 255.597508][ T13] team0 (unregistering): Port device team_slave_0 removed [ 256.018009][ T5505] loop4: detected capacity change from 0 to 1024 [ 256.841920][ T5072] Bluetooth: hci0: command tx timeout [ 256.851556][ T5505] EXT4-fs: Ignoring removed orlov option [ 256.873436][ T5512] loop3: detected capacity change from 0 to 512 [ 256.895126][ T5505] EXT4-fs (loop4): Test dummy encryption mode enabled [ 256.943418][ T5505] EXT4-fs (loop4): stripe (7) is not aligned with cluster size (16), stripe is disabled [ 257.004056][ T5512] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 257.071179][ T5496] chnl_net:caif_netlink_parms(): no params data found [ 257.088663][ T5505] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 257.426341][ T5075] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 257.878743][ T5505] fscrypt: AES-256-CBC-CTS using implementation "cts(cbc(ecb(aes-fixed-time)))" [ 257.994794][ T5528] loop2: detected capacity change from 0 to 2048 [ 258.208351][ T5528] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 258.335892][ T29] kauditd_printk_skb: 17 callbacks suppressed [ 258.335963][ T29] audit: type=1326 audit(1717653223.307:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5525 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7400579 code=0x7ffc0000 [ 258.401192][ T29] audit: type=1326 audit(1717653223.357:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5525 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7400579 code=0x7ffc0000 [ 258.424114][ T29] audit: type=1326 audit(1717653223.357:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5525 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7400579 code=0x7ffc0000 [ 258.451006][ T29] audit: type=1326 audit(1717653223.357:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5525 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7400579 code=0x7ffc0000 [ 258.474923][ T29] audit: type=1326 audit(1717653223.357:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5525 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=40000003 syscall=353 compat=1 ip=0xf7400579 code=0x7ffc0000 [ 258.497799][ T29] audit: type=1326 audit(1717653223.367:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5525 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7400579 code=0x7ffc0000 [ 258.520641][ T29] audit: type=1326 audit(1717653223.367:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5525 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7400579 code=0x7ffc0000 [ 258.547378][ T29] audit: type=1326 audit(1717653223.367:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5525 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7400579 code=0x7ffc0000 [ 258.571439][ T29] audit: type=1326 audit(1717653223.367:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5525 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7400579 code=0x7ffc0000 [ 258.594260][ T29] audit: type=1326 audit(1717653223.367:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5525 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7400579 code=0x7ffc0000 [ 258.800321][ T5496] bridge0: port 1(bridge_slave_0) entered blocking state [ 258.808078][ T5496] bridge0: port 1(bridge_slave_0) entered disabled state [ 258.815819][ T5496] bridge_slave_0: entered allmulticast mode [ 258.824895][ T5496] bridge_slave_0: entered promiscuous mode [ 258.923608][ T5072] Bluetooth: hci0: command tx timeout [ 258.932375][ T5496] bridge0: port 2(bridge_slave_1) entered blocking state [ 258.940177][ T5496] bridge0: port 2(bridge_slave_1) entered disabled state [ 258.947905][ T5496] bridge_slave_1: entered allmulticast mode [ 258.963850][ T5496] bridge_slave_1: entered promiscuous mode [ 259.108069][ T5496] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 259.167893][ T5541] Zero length message leads to an empty skb [ 259.193960][ T5496] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 259.378123][ T5074] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 259.498656][ T5496] team0: Port device team_slave_0 added [ 259.539579][ T5496] team0: Port device team_slave_1 added [ 259.608448][ T5547] loop3: detected capacity change from 0 to 256 [ 259.800306][ T5496] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 259.807483][ T5496] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 259.833796][ T5496] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 259.884920][ T5547] exFAT-fs (loop3): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 260.042391][ T5496] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 260.049549][ T5496] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 260.076438][ T5496] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 260.190391][ T5087] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 260.315493][ T5496] hsr_slave_0: entered promiscuous mode [ 260.327651][ T5496] hsr_slave_1: entered promiscuous mode [ 260.342378][ T5496] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 260.351910][ T5496] Cannot create hsr debugfs directory [ 260.519491][ T5552] loop0: detected capacity change from 0 to 2048 [ 260.627614][ T5552] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024) [ 260.745129][ T5554] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 260.757958][ T5552] syz-executor.0: attempt to access beyond end of device [ 260.757958][ T5552] loop0: rw=524288, sector=33554430, nr_sectors = 2 limit=2048 [ 261.014964][ T5072] Bluetooth: hci0: command tx timeout [ 261.507068][ T13] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 261.610777][ T13] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 261.767845][ T13] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 262.047634][ T13] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 262.110847][ T5496] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 262.140727][ T5496] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 262.192056][ T5496] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 262.274578][ T5496] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 262.454839][ T13] bridge_slave_1: left allmulticast mode [ 262.461686][ T13] bridge_slave_1: left promiscuous mode [ 262.468238][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 262.532823][ T13] bridge_slave_0: left allmulticast mode [ 262.543922][ T13] bridge_slave_0: left promiscuous mode [ 262.551554][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 263.121971][ T5072] Bluetooth: hci0: command tx timeout [ 263.276209][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 263.331577][ T13] bond_slave_0: left promiscuous mode [ 263.364882][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 263.392287][ T13] bond_slave_1: left promiscuous mode [ 263.426988][ T13] bond0 (unregistering): Released all slaves [ 264.100890][ T5582] loop2: detected capacity change from 0 to 256 [ 264.273675][ T5581] loop4: detected capacity change from 0 to 2048 [ 264.289573][ T5582] exFAT-fs (loop2): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 264.355058][ T5584] loop0: detected capacity change from 0 to 512 [ 264.415211][ T5584] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 264.467861][ T5080] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 264.477811][ T5080] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 264.498851][ T5080] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 264.510531][ T5581] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 264.545963][ T5080] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 264.583219][ T5080] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 264.597859][ T5080] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 264.657879][ T29] kauditd_printk_skb: 19 callbacks suppressed [ 264.657948][ T29] audit: type=1326 audit(1717653229.627:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5574 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7418579 code=0x7ffc0000 [ 264.692133][ T29] audit: type=1326 audit(1717653229.627:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5574 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7418579 code=0x7ffc0000 [ 264.727905][ T13] hsr_slave_0: left promiscuous mode [ 264.734375][ T5079] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 264.745075][ T13] hsr_slave_1: left promiscuous mode [ 264.756983][ T29] audit: type=1326 audit(1717653229.697:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5574 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7418579 code=0x7ffc0000 [ 264.781655][ T29] audit: type=1326 audit(1717653229.697:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5574 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7418579 code=0x7ffc0000 [ 264.808023][ T29] audit: type=1326 audit(1717653229.697:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5574 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=40000003 syscall=353 compat=1 ip=0xf7418579 code=0x7ffc0000 [ 264.832655][ T29] audit: type=1326 audit(1717653229.697:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5574 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7418579 code=0x7ffc0000 [ 264.855635][ T29] audit: type=1326 audit(1717653229.727:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5574 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7418579 code=0x7ffc0000 [ 264.878482][ T29] audit: type=1326 audit(1717653229.727:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5574 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7418579 code=0x7ffc0000 [ 264.903536][ T29] audit: type=1326 audit(1717653229.727:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5574 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=40000003 syscall=26 compat=1 ip=0xf7418579 code=0x7ffc0000 [ 264.927189][ T29] audit: type=1326 audit(1717653229.727:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5574 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7418579 code=0x7ffc0000 [ 264.959874][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 264.967744][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 264.979429][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 264.987550][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 265.025760][ T13] veth1_macvtap: left promiscuous mode [ 265.031670][ T13] veth0_macvtap: left promiscuous mode [ 265.037544][ T13] veth1_vlan: left promiscuous mode [ 265.043929][ T13] veth0_vlan: left promiscuous mode [ 265.673046][ T5074] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 265.820979][ T13] team0 (unregistering): Port device team_slave_1 removed [ 265.845545][ T13] team0 (unregistering): Port device team_slave_0 removed [ 266.515816][ T5496] 8021q: adding VLAN 0 to HW filter on device bond0 [ 266.681173][ T5080] Bluetooth: hci2: command tx timeout [ 266.804003][ T5496] 8021q: adding VLAN 0 to HW filter on device team0 [ 266.886346][ T10] bridge0: port 1(bridge_slave_0) entered blocking state [ 266.894146][ T10] bridge0: port 1(bridge_slave_0) entered forwarding state [ 266.948234][ T10] bridge0: port 2(bridge_slave_1) entered blocking state [ 266.956122][ T10] bridge0: port 2(bridge_slave_1) entered forwarding state [ 267.492482][ T5604] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 268.166375][ T5587] chnl_net:caif_netlink_parms(): no params data found [ 268.772475][ T5080] Bluetooth: hci2: command tx timeout [ 269.230477][ T5620] loop4: detected capacity change from 0 to 512 [ 269.559692][ T5496] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 269.606578][ T5620] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 269.883256][ T5587] bridge0: port 1(bridge_slave_0) entered blocking state [ 269.891186][ T5587] bridge0: port 1(bridge_slave_0) entered disabled state [ 269.898833][ T5587] bridge_slave_0: entered allmulticast mode [ 269.915234][ T5587] bridge_slave_0: entered promiscuous mode [ 269.974784][ T5074] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 270.038807][ T5587] bridge0: port 2(bridge_slave_1) entered blocking state [ 270.046674][ T5587] bridge0: port 2(bridge_slave_1) entered disabled state [ 270.054513][ T5587] bridge_slave_1: entered allmulticast mode [ 270.064200][ T5587] bridge_slave_1: entered promiscuous mode [ 270.153729][ T5496] veth0_vlan: entered promiscuous mode [ 270.309101][ T5072] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 270.328917][ T5072] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 270.340342][ T5072] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 270.384670][ T5587] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 270.408755][ T5630] loop0: detected capacity change from 0 to 2048 [ 270.444576][ T5587] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 270.466614][ T5072] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 270.478295][ T5072] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 270.487681][ T5072] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 270.622600][ T5630] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 270.701367][ T29] kauditd_printk_skb: 14 callbacks suppressed [ 270.701436][ T29] audit: type=1326 audit(1717653235.667:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5626 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7439579 code=0x7ffc0000 [ 270.732913][ T29] audit: type=1326 audit(1717653235.667:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5626 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7439579 code=0x7ffc0000 [ 270.782577][ T5496] veth1_vlan: entered promiscuous mode [ 270.820086][ T29] audit: type=1326 audit(1717653235.757:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5626 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7439579 code=0x7ffc0000 [ 270.845929][ T29] audit: type=1326 audit(1717653235.757:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5626 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7439579 code=0x7ffc0000 [ 270.869849][ T29] audit: type=1326 audit(1717653235.777:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5626 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=40000003 syscall=353 compat=1 ip=0xf7439579 code=0x7ffc0000 [ 270.872581][ T5072] Bluetooth: hci2: command tx timeout [ 270.893715][ T29] audit: type=1326 audit(1717653235.777:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5626 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7439579 code=0x7ffc0000 [ 270.922251][ T29] audit: type=1326 audit(1717653235.777:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5626 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7439579 code=0x7ffc0000 [ 270.927969][ T5587] team0: Port device team_slave_0 added [ 270.947161][ T29] audit: type=1326 audit(1717653235.787:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5626 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7439579 code=0x7ffc0000 [ 270.947392][ T29] audit: type=1326 audit(1717653235.787:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5626 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=40000003 syscall=26 compat=1 ip=0xf7439579 code=0x7ffc0000 [ 270.947616][ T29] audit: type=1326 audit(1717653235.787:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5626 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7439579 code=0x7ffc0000 [ 271.178579][ T5587] team0: Port device team_slave_1 added [ 271.381317][ T5587] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 271.388469][ T5587] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 271.414816][ T5587] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 271.451445][ T5587] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 271.458608][ T5587] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 271.485072][ T5587] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 271.725531][ T5587] hsr_slave_0: entered promiscuous mode [ 271.743028][ T5587] hsr_slave_1: entered promiscuous mode [ 271.760423][ T5587] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 271.768326][ T5587] Cannot create hsr debugfs directory [ 271.971542][ T13] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 272.177468][ T5079] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 272.177827][ T13] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 272.328428][ T5496] veth0_macvtap: entered promiscuous mode [ 272.375987][ T13] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 272.491599][ T13] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 272.527949][ T5496] veth1_macvtap: entered promiscuous mode [ 272.600496][ T5072] Bluetooth: hci4: command tx timeout [ 272.775223][ T5496] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 272.789366][ T5496] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 272.800739][ T5496] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 272.811469][ T5496] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 272.821687][ T5496] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 272.832386][ T5496] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 272.853271][ T5496] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 272.862761][ T13] bridge_slave_1: left allmulticast mode [ 272.868623][ T13] bridge_slave_1: left promiscuous mode [ 272.875269][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 272.897979][ T13] bridge_slave_0: left allmulticast mode [ 272.905923][ T13] bridge_slave_0: left promiscuous mode [ 272.912558][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 272.923919][ T5072] Bluetooth: hci2: command tx timeout [ 273.538558][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 273.583958][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 273.624375][ T13] bond0 (unregistering): Released all slaves [ 273.827996][ T5628] chnl_net:caif_netlink_parms(): no params data found [ 273.851834][ T5496] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 273.864054][ T5496] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 273.874447][ T5496] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 273.885223][ T5496] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 273.895350][ T5496] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 273.909346][ T5496] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 273.925111][ T5496] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 273.956492][ T5653] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 274.407857][ T5496] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 274.420321][ T5496] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 274.429362][ T5496] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 274.439485][ T5496] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 274.551563][ T13] hsr_slave_0: left promiscuous mode [ 274.570730][ T13] hsr_slave_1: left promiscuous mode [ 274.611176][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 274.618875][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 274.669248][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 274.677045][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 274.680173][ T5072] Bluetooth: hci4: command tx timeout [ 274.761599][ T13] veth1_macvtap: left promiscuous mode [ 274.767374][ T13] veth0_macvtap: left promiscuous mode [ 274.773563][ T13] veth1_vlan: left promiscuous mode [ 274.779142][ T13] veth0_vlan: left promiscuous mode [ 275.626846][ T13] team0 (unregistering): Port device team_slave_1 removed [ 275.664381][ T13] team0 (unregistering): Port device team_slave_0 removed [ 275.810978][ T5667] loop4: detected capacity change from 0 to 512 [ 275.891000][ T5667] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 276.185970][ T5670] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 276.272055][ T5074] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 276.310809][ T5672] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 276.321269][ T5672] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 276.760852][ T5072] Bluetooth: hci4: command tx timeout [ 276.845872][ T5587] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 276.973218][ T5587] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 277.068504][ T5587] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 277.213313][ T5587] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 277.351742][ T5628] bridge0: port 1(bridge_slave_0) entered blocking state [ 277.359462][ T5628] bridge0: port 1(bridge_slave_0) entered disabled state [ 277.370246][ T5628] bridge_slave_0: entered allmulticast mode [ 277.380068][ T5628] bridge_slave_0: entered promiscuous mode [ 277.424147][ T5628] bridge0: port 2(bridge_slave_1) entered blocking state [ 277.431937][ T5628] bridge0: port 2(bridge_slave_1) entered disabled state [ 277.439643][ T5628] bridge_slave_1: entered allmulticast mode [ 277.449263][ T5628] bridge_slave_1: entered promiscuous mode [ 277.612215][ T5687] loop0: detected capacity change from 0 to 2048 [ 277.765897][ T5628] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 277.842582][ T5687] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 277.882430][ T5628] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 277.970623][ T29] kauditd_printk_skb: 14 callbacks suppressed [ 277.970694][ T29] audit: type=1326 audit(1717653242.927:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5684 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7439579 code=0x7ffc0000 [ 278.000691][ T29] audit: type=1326 audit(1717653242.937:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5684 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7439579 code=0x7ffc0000 [ 278.138262][ T29] audit: type=1326 audit(1717653243.027:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5684 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7439579 code=0x7ffc0000 [ 278.162047][ T29] audit: type=1326 audit(1717653243.027:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5684 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7439579 code=0x7ffc0000 [ 278.185648][ T29] audit: type=1326 audit(1717653243.027:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5684 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7439579 code=0x7ffc0000 [ 278.209832][ T29] audit: type=1326 audit(1717653243.027:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5684 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7439579 code=0x7ffc0000 [ 278.233168][ T29] audit: type=1326 audit(1717653243.037:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5684 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7439579 code=0x7ffc0000 [ 278.243662][ T5628] team0: Port device team_slave_0 added [ 278.255970][ T29] audit: type=1326 audit(1717653243.087:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5684 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=40000003 syscall=26 compat=1 ip=0xf7439579 code=0x7ffc0000 [ 278.284467][ T29] audit: type=1326 audit(1717653243.087:117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5684 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7439579 code=0x7ffc0000 [ 278.308213][ T29] audit: type=1326 audit(1717653243.107:118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5684 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=40000003 syscall=356 compat=1 ip=0xf7439579 code=0x7ffc0000 [ 278.372247][ T5628] team0: Port device team_slave_1 added [ 278.743657][ T5628] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 278.750934][ T5628] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 278.779368][ T5628] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 278.840729][ T5072] Bluetooth: hci4: command tx timeout [ 278.934057][ T5628] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 278.941375][ T5628] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 278.968705][ T5628] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 279.038600][ T5587] 8021q: adding VLAN 0 to HW filter on device bond0 [ 279.183400][ T5587] 8021q: adding VLAN 0 to HW filter on device team0 [ 279.456342][ T779] bridge0: port 1(bridge_slave_0) entered blocking state [ 279.464122][ T779] bridge0: port 1(bridge_slave_0) entered forwarding state [ 279.505368][ T5628] hsr_slave_0: entered promiscuous mode [ 279.530779][ T5628] hsr_slave_1: entered promiscuous mode [ 279.594818][ T780] bridge0: port 2(bridge_slave_1) entered blocking state [ 279.602634][ T780] bridge0: port 2(bridge_slave_1) entered forwarding state [ 279.718583][ T5079] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 280.435909][ T5710] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 280.587083][ T1225] ieee802154 phy0 wpan0: encryption failed: -22 [ 280.594486][ T1225] ieee802154 phy1 wpan1: encryption failed: -22 [ 281.615325][ T5628] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 281.696151][ T5628] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 281.778341][ T5628] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 281.867161][ T5628] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 281.940278][ T5587] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 282.467452][ T5587] veth0_vlan: entered promiscuous mode [ 282.539816][ T5587] veth1_vlan: entered promiscuous mode [ 282.640598][ T5730] loop0: detected capacity change from 0 to 512 [ 282.798181][ T5730] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 282.804862][ T5733] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 282.969188][ T5587] veth0_macvtap: entered promiscuous mode [ 283.008256][ T5736] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 283.019138][ T5736] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 283.108869][ T5079] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 283.127247][ T5587] veth1_macvtap: entered promiscuous mode [ 283.260053][ T5127] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 283.268104][ T5127] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 283.383654][ T5587] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 283.394411][ T5587] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 283.406521][ T5587] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 283.417321][ T5587] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 283.431215][ T5587] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 283.442812][ T5587] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 283.458182][ T5587] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 283.516279][ T780] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 283.525051][ T780] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 283.606051][ T5587] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 283.617026][ T5587] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 283.633192][ T5587] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 283.644508][ T5587] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 283.654670][ T5587] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 283.665455][ T5587] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 283.680603][ T5587] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 283.709808][ T5628] 8021q: adding VLAN 0 to HW filter on device bond0 [ 283.767799][ T5587] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 283.776969][ T5587] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 283.786428][ T5587] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 283.795584][ T5587] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 283.969589][ T5628] 8021q: adding VLAN 0 to HW filter on device team0 [ 284.051733][ T5127] bridge0: port 1(bridge_slave_0) entered blocking state [ 284.059398][ T5127] bridge0: port 1(bridge_slave_0) entered forwarding state [ 284.175775][ T5127] bridge0: port 2(bridge_slave_1) entered blocking state [ 284.183522][ T5127] bridge0: port 2(bridge_slave_1) entered forwarding state [ 286.349763][ T5628] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 286.532476][ T5770] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 287.036893][ T5628] veth0_vlan: entered promiscuous mode [ 287.138015][ T5628] veth1_vlan: entered promiscuous mode [ 287.423605][ T5628] veth0_macvtap: entered promiscuous mode [ 287.472065][ T5628] veth1_macvtap: entered promiscuous mode [ 287.649562][ T5628] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 287.660405][ T5628] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 287.671522][ T5628] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 287.682247][ T5628] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 287.692326][ T5628] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 287.703051][ T5628] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 287.713139][ T5628] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 287.723840][ T5628] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 287.744576][ T5628] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 287.868054][ T5628] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 287.879870][ T5628] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 287.890120][ T5628] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 287.900828][ T5628] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 287.911011][ T5628] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 287.921728][ T5628] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 287.937099][ T5628] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 287.948674][ T5628] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 287.964007][ T5628] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 288.066867][ T5628] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 288.075989][ T5628] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 288.085114][ T5628] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 288.094280][ T5628] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 288.539250][ T5787] loop0: detected capacity change from 0 to 512 [ 288.555852][ T5778] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 288.658970][ T5787] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 289.005404][ T5079] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 289.487269][ T5798] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 289.661651][ T5802] loop1: detected capacity change from 0 to 1024 [ 289.702828][ T5804] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 289.712423][ T5804] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 289.844182][ T5802] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 290.172352][ T5496] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 290.818519][ T4026] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 290.826722][ T4026] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 291.157409][ T5830] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 291.164316][ T8] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 291.175325][ T8] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 292.317647][ T5842] loop3: detected capacity change from 0 to 2048 [ 292.399347][ T5842] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024) [ 292.453921][ T5846] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 292.465570][ T5842] syz-executor.3: attempt to access beyond end of device [ 292.465570][ T5842] loop3: rw=524288, sector=33554430, nr_sectors = 2 limit=2048 [ 292.548572][ T5850] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 293.095033][ T5856] loop1: detected capacity change from 0 to 512 [ 293.218268][ T5127] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 293.227326][ T5127] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 293.317165][ T5856] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 293.397258][ T5860] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 293.487880][ T5863] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 293.497795][ T5863] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 293.545622][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 293.554101][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 293.679465][ T5496] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 294.357743][ T5870] loop1: detected capacity change from 0 to 1024 [ 294.426831][ T5870] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 294.562736][ T5870] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 294.745284][ T5864] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 294.996861][ T5882] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 295.200436][ T5496] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 295.290552][ T5884] loop2: detected capacity change from 0 to 2048 [ 295.425819][ T5884] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 295.438891][ T5884] ext4 filesystem being mounted at /root/syzkaller-testdir1507897973/syzkaller.Wzss8N/2/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 295.672623][ T5884] fs-verity: sha512 using implementation "sha512-generic" [ 295.893658][ T5884] syz-executor.2 (5884) used greatest stack depth: 4896 bytes left [ 296.089339][ T5628] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 296.252584][ T5896] loop0: detected capacity change from 0 to 512 [ 296.484755][ T5896] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 296.791782][ T5901] loop3: detected capacity change from 0 to 2048 [ 296.796890][ T5079] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 296.817804][ T5901] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024) [ 296.834713][ T5904] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 296.884077][ T5904] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 296.885235][ T5906] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 296.893688][ T5904] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 296.914702][ T5901] syz-executor.3: attempt to access beyond end of device [ 296.914702][ T5901] loop3: rw=524288, sector=33554430, nr_sectors = 2 limit=2048 [ 297.650345][ T29] kauditd_printk_skb: 15 callbacks suppressed [ 297.650417][ T29] audit: type=1326 audit(1717653262.617:134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5914 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7494579 code=0x7ffc0000 [ 297.683471][ T29] audit: type=1326 audit(1717653262.627:135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5914 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7494579 code=0x7ffc0000 [ 298.145985][ T5921] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 298.459731][ T5925] loop1: detected capacity change from 0 to 2048 [ 298.598888][ T5916] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 298.675815][ T5925] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 298.695168][ T5925] ext4 filesystem being mounted at /root/syzkaller-testdir3167265818/syzkaller.DwiIpa/12/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 299.134791][ T5925] syz-executor.1 (5925) used greatest stack depth: 4752 bytes left [ 299.156886][ T5935] loop2: detected capacity change from 0 to 512 [ 299.184264][ T5935] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 299.314034][ T5628] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 299.422601][ T5496] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 299.938448][ T5944] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 299.975767][ T5944] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 299.985509][ T5944] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 300.258800][ T5948] loop4: detected capacity change from 0 to 2048 [ 300.328122][ T5948] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024) [ 300.397115][ T5953] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 300.412630][ T5948] syz-executor.4: attempt to access beyond end of device [ 300.412630][ T5948] loop4: rw=524288, sector=33554430, nr_sectors = 2 limit=2048 [ 300.684785][ T4026] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 300.812967][ T4026] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 300.861481][ T5960] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 301.007465][ T4026] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 301.187415][ T4026] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 301.491587][ T4026] bridge_slave_1: left allmulticast mode [ 301.497476][ T4026] bridge_slave_1: left promiscuous mode [ 301.504210][ T4026] bridge0: port 2(bridge_slave_1) entered disabled state [ 301.566871][ T4026] bridge_slave_0: left allmulticast mode [ 301.573563][ T4026] bridge_slave_0: left promiscuous mode [ 301.580318][ T4026] bridge0: port 1(bridge_slave_0) entered disabled state [ 301.627294][ T5966] loop4: detected capacity change from 0 to 512 [ 301.949404][ T5966] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 302.361857][ T4026] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 302.446182][ T4026] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 302.520946][ T5074] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 302.535443][ T4026] bond0 (unregistering): Released all slaves [ 302.846698][ T5973] loop2: detected capacity change from 0 to 2048 [ 303.014917][ T5973] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 303.028513][ T5973] ext4 filesystem being mounted at /root/syzkaller-testdir1507897973/syzkaller.Wzss8N/9/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 303.529486][ T4026] hsr_slave_0: left promiscuous mode [ 303.562534][ T5973] fs-verity (loop2, inode 13): Error -4 reading file data [ 303.570388][ T5973] fs-verity (loop2, inode 13): Error -4 building Merkle tree [ 303.595836][ T4026] hsr_slave_1: left promiscuous mode [ 303.682679][ T4026] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 303.690516][ T4026] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 303.723246][ T4026] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 303.731001][ T4026] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 303.790099][ T4026] veth1_macvtap: left promiscuous mode [ 303.795848][ T4026] veth0_macvtap: left promiscuous mode [ 303.801875][ T4026] veth1_vlan: left promiscuous mode [ 303.809447][ T4026] veth0_vlan: left promiscuous mode [ 304.017391][ T5080] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 304.026803][ T5080] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 304.036158][ T5080] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 304.049373][ T5080] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 304.063760][ T5080] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 304.073098][ T5080] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 304.188769][ T5628] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 304.925340][ T4026] team0 (unregistering): Port device team_slave_1 removed [ 305.000710][ T4026] team0 (unregistering): Port device team_slave_0 removed [ 305.520198][ T6001] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 306.209761][ T5080] Bluetooth: hci2: command tx timeout [ 306.549192][ T6019] loop1: detected capacity change from 0 to 512 [ 306.561022][ T5992] chnl_net:caif_netlink_parms(): no params data found [ 306.713830][ T6019] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 307.018664][ T5496] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 308.333877][ T5080] Bluetooth: hci2: command tx timeout [ 308.550394][ T5992] bridge0: port 1(bridge_slave_0) entered blocking state [ 308.558125][ T5992] bridge0: port 1(bridge_slave_0) entered disabled state [ 308.565993][ T5992] bridge_slave_0: entered allmulticast mode [ 308.575258][ T5992] bridge_slave_0: entered promiscuous mode [ 308.660680][ T5992] bridge0: port 2(bridge_slave_1) entered blocking state [ 308.668434][ T5992] bridge0: port 2(bridge_slave_1) entered disabled state [ 308.676379][ T5992] bridge_slave_1: entered allmulticast mode [ 308.685535][ T5992] bridge_slave_1: entered promiscuous mode [ 309.076156][ T5992] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 309.172108][ T5992] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 309.243245][ T5072] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 309.311350][ T5072] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 309.323873][ T5072] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 309.363404][ T5072] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 309.382364][ T5072] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 309.423312][ T5072] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 309.520810][ T5992] team0: Port device team_slave_0 added [ 309.573237][ T6041] loop2: detected capacity change from 0 to 2048 [ 309.636975][ T5992] team0: Port device team_slave_1 added [ 309.749473][ T6041] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 309.763923][ T6041] ext4 filesystem being mounted at /root/syzkaller-testdir1507897973/syzkaller.Wzss8N/11/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 309.925764][ T5992] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 309.933247][ T5992] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 309.961723][ T5992] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 310.090438][ T5992] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 310.097595][ T5992] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 310.124176][ T5992] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 310.364955][ T5080] Bluetooth: hci2: command tx timeout [ 310.424157][ T5992] hsr_slave_0: entered promiscuous mode [ 310.484100][ T5628] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 310.513579][ T5992] hsr_slave_1: entered promiscuous mode [ 310.539144][ T5992] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 310.547205][ T5992] Cannot create hsr debugfs directory [ 311.337310][ T4026] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 311.481754][ T5080] Bluetooth: hci3: command tx timeout [ 311.514793][ T4026] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 311.656076][ T6068] loop1: detected capacity change from 0 to 512 [ 311.732404][ T4026] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 311.829297][ T6068] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 311.956719][ T4026] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 312.030975][ T6035] chnl_net:caif_netlink_parms(): no params data found [ 312.050408][ T10] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 312.060560][ T5496] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 312.440865][ T5080] Bluetooth: hci2: command tx timeout [ 312.471592][ T10] usb 3-1: config 1 has an invalid interface number: 3 but max is 2 [ 312.480039][ T10] usb 3-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 312.489152][ T10] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 312.499627][ T10] usb 3-1: config 1 has no interface number 1 [ 312.506125][ T10] usb 3-1: too many endpoints for config 1 interface 3 altsetting 0: 187, using maximum allowed: 30 [ 312.519001][ T10] usb 3-1: config 1 interface 3 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 187 [ 312.534444][ T10] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 312.575103][ T4026] bridge_slave_1: left allmulticast mode [ 312.581835][ T4026] bridge_slave_1: left promiscuous mode [ 312.588399][ T4026] bridge0: port 2(bridge_slave_1) entered disabled state [ 312.618480][ T4026] bridge_slave_0: left allmulticast mode [ 312.624962][ T4026] bridge_slave_0: left promiscuous mode [ 312.632073][ T4026] bridge0: port 1(bridge_slave_0) entered disabled state [ 312.722297][ T10] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 312.732415][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 312.740950][ T10] usb 3-1: Product: syz [ 312.745330][ T10] usb 3-1: Manufacturer: syz [ 312.750275][ T10] usb 3-1: SerialNumber: syz [ 313.160727][ T10] usb 3-1: 2:1 : no or invalid class specific endpoint descriptor [ 313.168973][ T10] usb 3-1: 2:1: All rates were zero [ 313.205775][ T4026] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 313.251392][ T4026] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 313.276103][ T4026] bond0 (unregistering): Released all slaves [ 313.282184][ T10] hub 3-1:1.3: bad descriptor, ignoring hub [ 313.282295][ T10] hub 3-1:1.3: probe with driver hub failed with error -5 [ 313.320776][ T4026] bond1 (unregistering): Released all slaves [ 313.347600][ T4026] bond2 (unregistering): Released all slaves [ 313.362189][ T10] usb 3-1: USB disconnect, device number 2 [ 313.580944][ T5080] Bluetooth: hci3: command tx timeout [ 313.596471][ T5992] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 313.793615][ T5992] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 313.889879][ T5992] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 314.070740][ T5992] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 314.467438][ T6091] loop2: detected capacity change from 0 to 2048 [ 314.509672][ T4026] hsr_slave_0: left promiscuous mode [ 314.531295][ T4026] hsr_slave_1: left promiscuous mode [ 314.553500][ T6091] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 314.568161][ T6091] ext4 filesystem being mounted at /root/syzkaller-testdir1507897973/syzkaller.Wzss8N/14/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 314.593329][ T4026] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 314.601233][ T4026] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 314.628753][ T4026] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 314.636600][ T4026] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 314.718183][ T4026] veth1_macvtap: left promiscuous mode [ 314.724546][ T4026] veth0_macvtap: left promiscuous mode [ 314.730620][ T4026] veth1_vlan: left promiscuous mode [ 314.736178][ T4026] veth0_vlan: left promiscuous mode [ 315.267311][ T5628] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 315.640776][ T5080] Bluetooth: hci3: command tx timeout [ 315.804399][ T4026] team0 (unregistering): Port device team_slave_1 removed [ 315.934955][ T4026] team0 (unregistering): Port device team_slave_0 removed [ 316.557950][ T6035] bridge0: port 1(bridge_slave_0) entered blocking state [ 316.565803][ T6035] bridge0: port 1(bridge_slave_0) entered disabled state [ 316.573660][ T6035] bridge_slave_0: entered allmulticast mode [ 316.582780][ T6035] bridge_slave_0: entered promiscuous mode [ 316.682967][ T6035] bridge0: port 2(bridge_slave_1) entered blocking state [ 316.691355][ T6035] bridge0: port 2(bridge_slave_1) entered disabled state [ 316.699006][ T6035] bridge_slave_1: entered allmulticast mode [ 316.711123][ T6035] bridge_slave_1: entered promiscuous mode [ 316.975215][ T6035] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 316.977809][ T6107] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 317.077859][ T6035] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 317.438029][ T6035] team0: Port device team_slave_0 added [ 317.501865][ T6035] team0: Port device team_slave_1 added [ 317.721499][ T5080] Bluetooth: hci3: command tx timeout [ 317.955526][ T6035] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 317.966770][ T6035] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 317.994928][ T6035] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 318.021830][ T6115] loop2: detected capacity change from 0 to 512 [ 318.091415][ T6115] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 318.134911][ T6035] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 318.146554][ T6035] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 318.174209][ T6035] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 318.231122][ T5992] 8021q: adding VLAN 0 to HW filter on device bond0 [ 318.297701][ T5992] 8021q: adding VLAN 0 to HW filter on device team0 [ 318.352480][ T5128] bridge0: port 1(bridge_slave_0) entered blocking state [ 318.360295][ T5128] bridge0: port 1(bridge_slave_0) entered forwarding state [ 318.414365][ T5128] bridge0: port 2(bridge_slave_1) entered blocking state [ 318.422122][ T5128] bridge0: port 2(bridge_slave_1) entered forwarding state [ 318.605510][ T5127] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 318.683846][ T5628] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 318.763287][ T6035] hsr_slave_0: entered promiscuous mode [ 318.816498][ T6035] hsr_slave_1: entered promiscuous mode [ 318.837626][ T6035] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 318.845813][ T6035] Cannot create hsr debugfs directory [ 318.890471][ T5127] usb 5-1: Using ep0 maxpacket: 16 [ 319.026316][ T5127] usb 5-1: Duplicate descriptor for config 1 interface 0 altsetting 0, skipping [ 319.035732][ T5127] usb 5-1: too many endpoints for config 1 interface 1 altsetting 1: 111, using maximum allowed: 30 [ 319.046887][ T5127] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 319.058065][ T5127] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 319.071394][ T5127] usb 5-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 111 [ 319.085900][ T5127] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 319.098162][ T5127] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 319.332078][ T5127] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 319.341514][ T5127] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 319.349764][ T5127] usb 5-1: Product: syz [ 319.354289][ T5127] usb 5-1: Manufacturer: syz [ 319.359126][ T5127] usb 5-1: SerialNumber: syz [ 320.042401][ T5128] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 320.471033][ T5128] usb 3-1: config 1 has an invalid interface number: 3 but max is 2 [ 320.479311][ T5128] usb 3-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 320.488389][ T5128] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 320.502265][ T5128] usb 3-1: config 1 has no interface number 1 [ 320.508605][ T5128] usb 3-1: too many endpoints for config 1 interface 3 altsetting 0: 187, using maximum allowed: 30 [ 320.520837][ T5128] usb 3-1: config 1 interface 3 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 187 [ 320.534414][ T5128] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 320.583935][ T6035] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 320.669405][ T6035] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 320.752851][ T6035] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 320.760762][ T5128] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 320.770236][ T5128] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 320.778486][ T5128] usb 3-1: Product: syz [ 320.782992][ T5128] usb 3-1: Manufacturer: syz [ 320.787812][ T5128] usb 3-1: SerialNumber: syz [ 320.883400][ T6035] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 321.025319][ T5992] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 321.473484][ T5992] veth0_vlan: entered promiscuous mode [ 321.560257][ T5992] veth1_vlan: entered promiscuous mode [ 321.602883][ T5127] usb 5-1: USB disconnect, device number 6 [ 321.623955][ T5128] usb 3-1: 2:1 : no or invalid class specific endpoint descriptor [ 321.637811][ T5128] usb 3-1: 2:1: All rates were zero [ 321.747518][ T5128] hub 3-1:1.3: bad descriptor, ignoring hub [ 321.754956][ T5128] hub 3-1:1.3: probe with driver hub failed with error -5 [ 321.891222][ T5128] usb 3-1: USB disconnect, device number 3 [ 322.015015][ T5992] veth0_macvtap: entered promiscuous mode [ 322.087937][ T5992] veth1_macvtap: entered promiscuous mode [ 322.269342][ T6035] 8021q: adding VLAN 0 to HW filter on device bond0 [ 322.284857][ T5992] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 322.297792][ T5992] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 322.309214][ T5992] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 322.320684][ T5992] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 322.330864][ T5992] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 322.343697][ T5992] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 322.359147][ T5992] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 322.443558][ T5992] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 322.454363][ T5992] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 322.464481][ T5992] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 322.475238][ T5992] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 322.485466][ T5992] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 322.496277][ T5992] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 322.511540][ T5992] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 322.633853][ T6035] 8021q: adding VLAN 0 to HW filter on device team0 [ 322.708188][ T5127] bridge0: port 1(bridge_slave_0) entered blocking state [ 322.715973][ T5127] bridge0: port 1(bridge_slave_0) entered forwarding state [ 322.797029][ T5127] bridge0: port 2(bridge_slave_1) entered blocking state [ 322.804810][ T5127] bridge0: port 2(bridge_slave_1) entered forwarding state [ 322.817911][ T5992] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 322.827104][ T5992] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 322.836276][ T5992] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 322.846669][ T5992] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 323.629312][ T6147] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 324.432306][ T6157] loop4: detected capacity change from 0 to 512 [ 324.575193][ T6157] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 324.831698][ T5074] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 325.168300][ T6035] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 325.417096][ T6170] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.4'. [ 325.642957][ T6035] veth0_vlan: entered promiscuous mode [ 325.764817][ T6035] veth1_vlan: entered promiscuous mode [ 326.091127][ T6035] veth0_macvtap: entered promiscuous mode [ 326.164573][ T6035] veth1_macvtap: entered promiscuous mode [ 326.263004][ T8] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 326.314952][ T6035] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 326.327047][ T6035] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 326.342868][ T6035] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 326.354755][ T6035] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 326.364892][ T6035] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 326.375684][ T6035] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 326.385777][ T6035] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 326.396505][ T6035] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 326.412108][ T6035] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 326.555868][ T6035] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 326.567404][ T6035] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 326.577545][ T6035] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 326.588402][ T6035] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 326.598470][ T6035] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 326.611072][ T6035] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 326.621986][ T6035] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 326.632685][ T6035] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 326.652327][ T8] usb 5-1: config 1 has an invalid interface number: 3 but max is 2 [ 326.653259][ T6035] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 326.660617][ T8] usb 5-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 326.676875][ T8] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 326.687410][ T8] usb 5-1: config 1 has no interface number 1 [ 326.693912][ T8] usb 5-1: too many endpoints for config 1 interface 3 altsetting 0: 187, using maximum allowed: 30 [ 326.705104][ T8] usb 5-1: config 1 interface 3 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 187 [ 326.718576][ T8] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 326.896478][ T6035] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 326.906392][ T6035] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 326.915550][ T6035] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 326.928205][ T6035] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 326.969867][ T8] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 326.979446][ T8] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 326.987907][ T8] usb 5-1: Product: syz [ 326.992433][ T8] usb 5-1: Manufacturer: syz [ 326.997256][ T8] usb 5-1: SerialNumber: syz [ 327.404014][ T8] usb 5-1: 2:1 : no or invalid class specific endpoint descriptor [ 327.412410][ T8] usb 5-1: 2:1: All rates were zero [ 327.491813][ T8] hub 5-1:1.3: bad descriptor, ignoring hub [ 327.497967][ T8] hub 5-1:1.3: probe with driver hub failed with error -5 [ 327.601335][ T8] usb 5-1: USB disconnect, device number 7 [ 329.009818][ T34] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 329.019600][ T34] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 329.126429][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 329.135048][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 329.791379][ T13] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 329.976911][ T13] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 330.134297][ T13] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 330.336523][ T13] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 330.658076][ T13] bridge_slave_1: left allmulticast mode [ 330.664124][ T13] bridge_slave_1: left promiscuous mode [ 330.670830][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 330.725170][ T13] bridge_slave_0: left allmulticast mode [ 330.731566][ T13] bridge_slave_0: left promiscuous mode [ 330.743967][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 330.997663][ T6212] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 331.346583][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 331.411830][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 331.445759][ T13] bond0 (unregistering): Released all slaves [ 331.829306][ T6215] loop4: detected capacity change from 0 to 512 [ 331.922204][ T6215] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 332.192761][ T6221] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 332.465356][ T13] hsr_slave_0: left promiscuous mode [ 332.481372][ T5074] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 332.519870][ T13] hsr_slave_1: left promiscuous mode [ 332.544347][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 332.552444][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 332.570368][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 332.582684][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 332.622051][ T13] veth1_macvtap: left promiscuous mode [ 332.628078][ T13] veth0_macvtap: left promiscuous mode [ 332.634663][ T13] veth1_vlan: left promiscuous mode [ 332.640590][ T13] veth0_vlan: left promiscuous mode [ 333.440864][ T5084] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 333.499737][ T5084] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 333.529254][ T5084] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 333.575203][ T5084] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 333.587782][ T5084] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 333.597271][ T5084] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 333.733935][ T13] team0 (unregistering): Port device team_slave_1 removed [ 333.811520][ T5084] Bluetooth: hci1: command 0x0406 tx timeout [ 333.863544][ T13] team0 (unregistering): Port device team_slave_0 removed [ 334.472923][ T5134] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 334.871562][ T5134] usb 5-1: config 1 has an invalid interface number: 3 but max is 2 [ 334.879855][ T5134] usb 5-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 334.888932][ T5134] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 334.899408][ T5134] usb 5-1: config 1 has no interface number 1 [ 334.905860][ T5134] usb 5-1: too many endpoints for config 1 interface 3 altsetting 0: 187, using maximum allowed: 30 [ 334.917044][ T5134] usb 5-1: config 1 interface 3 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 187 [ 334.933815][ T5134] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 335.092881][ T6231] chnl_net:caif_netlink_parms(): no params data found [ 335.124193][ T779] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 335.132439][ T779] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 335.210676][ T5134] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 335.220133][ T5134] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 335.228376][ T5134] usb 5-1: Product: syz [ 335.233119][ T5134] usb 5-1: Manufacturer: syz [ 335.237933][ T5134] usb 5-1: SerialNumber: syz [ 335.303833][ T780] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 335.312057][ T780] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 335.653674][ T5080] Bluetooth: hci2: command tx timeout [ 335.781703][ T5134] usb 5-1: 2:1 : no or invalid class specific endpoint descriptor [ 335.790053][ T5134] usb 5-1: 2:1: All rates were zero [ 335.891495][ T5134] hub 5-1:1.3: bad descriptor, ignoring hub [ 335.897662][ T5134] hub 5-1:1.3: probe with driver hub failed with error -5 [ 336.032079][ T5134] usb 5-1: USB disconnect, device number 8 [ 336.143417][ T6253] warning: `syz-executor.2' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 336.391276][ T6259] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 336.962932][ T6231] bridge0: port 1(bridge_slave_0) entered blocking state [ 336.970855][ T6231] bridge0: port 1(bridge_slave_0) entered disabled state [ 336.978576][ T6231] bridge_slave_0: entered allmulticast mode [ 336.994328][ T6231] bridge_slave_0: entered promiscuous mode [ 337.016041][ T6261] loop4: detected capacity change from 0 to 512 [ 337.059833][ T6231] bridge0: port 2(bridge_slave_1) entered blocking state [ 337.067721][ T6231] bridge0: port 2(bridge_slave_1) entered disabled state [ 337.075784][ T6231] bridge_slave_1: entered allmulticast mode [ 337.092211][ T6231] bridge_slave_1: entered promiscuous mode [ 337.123172][ T6264] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 337.125489][ T6261] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 337.253827][ T6269] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 337.583522][ T6264] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 337.603091][ T6264] bond1: (slave batadv1): Enslaving as a backup interface with an up link [ 337.627410][ T6231] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 337.722695][ T5080] Bluetooth: hci2: command tx timeout [ 337.736120][ T5074] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 337.766412][ T6231] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 338.159217][ T6231] team0: Port device team_slave_0 added [ 338.263502][ T6231] team0: Port device team_slave_1 added [ 338.513794][ T6231] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 338.526228][ T6231] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 338.553862][ T6231] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 338.696189][ T6231] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 338.703521][ T6231] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 338.732935][ T6231] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 338.851620][ T5084] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 338.872122][ T5084] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 338.910881][ T5084] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 338.978725][ T5084] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 339.007310][ T5084] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 339.019554][ T5084] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 339.193916][ T6231] hsr_slave_0: entered promiscuous mode [ 339.280228][ T6231] hsr_slave_1: entered promiscuous mode [ 339.317367][ T6231] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 339.325381][ T6231] Cannot create hsr debugfs directory [ 339.660105][ C0] hrtimer: interrupt took 254189 ns [ 339.729344][ T13] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 339.801034][ T5084] Bluetooth: hci2: command tx timeout [ 339.824366][ T13] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 339.909204][ T13] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 340.143294][ T13] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 340.260734][ T0] NOHZ tick-stop error: local softirq work is pending, handler #242!!! [ 340.283111][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 340.467129][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 340.650913][ T13] bridge_slave_1: left allmulticast mode [ 340.656788][ T13] bridge_slave_1: left promiscuous mode [ 340.663491][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 340.684138][ T0] NOHZ tick-stop error: local softirq work is pending, handler #48!!! [ 340.716613][ T13] bridge_slave_0: left allmulticast mode [ 340.726048][ T13] bridge_slave_0: left promiscuous mode [ 340.733575][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 340.772902][ T0] NOHZ tick-stop error: local softirq work is pending, handler #2c2!!! [ 340.977365][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 340.978141][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 341.082021][ T5084] Bluetooth: hci3: command tx timeout [ 341.274037][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 341.290635][ T8] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 341.336972][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 341.381627][ T13] bond0 (unregistering): Released all slaves [ 341.831980][ T8] usb 5-1: config 1 has an invalid interface number: 3 but max is 2 [ 341.840412][ T8] usb 5-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 341.849594][ T8] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 341.860846][ T8] usb 5-1: config 1 has no interface number 1 [ 341.867248][ T8] usb 5-1: too many endpoints for config 1 interface 3 altsetting 0: 187, using maximum allowed: 30 [ 341.878719][ T8] usb 5-1: config 1 interface 3 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 187 [ 341.892748][ T8] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 341.906034][ T5084] Bluetooth: hci2: command tx timeout [ 341.998168][ T1225] ieee802154 phy0 wpan0: encryption failed: -22 [ 342.008779][ T1225] ieee802154 phy1 wpan1: encryption failed: -22 [ 342.152640][ T8] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 342.162283][ T8] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 342.170678][ T8] usb 5-1: Product: syz [ 342.175141][ T8] usb 5-1: Manufacturer: syz [ 342.180107][ T8] usb 5-1: SerialNumber: syz [ 342.317653][ T13] hsr_slave_0: left promiscuous mode [ 342.345232][ T13] hsr_slave_1: left promiscuous mode [ 342.379063][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 342.386912][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 342.427694][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 342.435447][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 342.486957][ T13] veth1_macvtap: left promiscuous mode [ 342.492739][ T13] veth0_macvtap: left promiscuous mode [ 342.498453][ T13] veth1_vlan: left promiscuous mode [ 342.503920][ T13] veth0_vlan: left promiscuous mode [ 342.841086][ T8] usb 5-1: 2:1 : no or invalid class specific endpoint descriptor [ 342.849147][ T8] usb 5-1: 2:1: All rates were zero [ 343.063790][ T8] hub 5-1:1.3: bad descriptor, ignoring hub [ 343.070097][ T8] hub 5-1:1.3: probe with driver hub failed with error -5 [ 343.161918][ T5084] Bluetooth: hci3: command tx timeout [ 343.183581][ T8] usb 5-1: USB disconnect, device number 9 [ 343.429802][ T13] team0 (unregistering): Port device team_slave_1 removed [ 343.537754][ T13] team0 (unregistering): Port device team_slave_0 removed [ 343.710474][ T6231] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 343.949551][ T6278] chnl_net:caif_netlink_parms(): no params data found [ 343.970711][ T6231] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 344.099715][ T6231] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 344.256524][ T6231] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 344.837516][ T6304] loop2: detected capacity change from 0 to 512 [ 345.036815][ T6304] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 345.240955][ T5084] Bluetooth: hci3: command tx timeout [ 345.489606][ T5628] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 345.576520][ T5080] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 345.596057][ T5080] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 345.628778][ T5080] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 345.648176][ T5080] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 345.662346][ T5080] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 345.672457][ T5080] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 345.758806][ T6278] bridge0: port 1(bridge_slave_0) entered blocking state [ 345.766424][ T6278] bridge0: port 1(bridge_slave_0) entered disabled state [ 345.773993][ T6278] bridge_slave_0: entered allmulticast mode [ 345.782076][ T6278] bridge_slave_0: entered promiscuous mode [ 345.975310][ T6278] bridge0: port 2(bridge_slave_1) entered blocking state [ 345.983442][ T6278] bridge0: port 2(bridge_slave_1) entered disabled state [ 345.991059][ T6278] bridge_slave_1: entered allmulticast mode [ 346.000940][ T6278] bridge_slave_1: entered promiscuous mode [ 346.323913][ T6311] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 346.508501][ T6312] 8021q: adding VLAN 0 to HW filter on device bond2 [ 346.557177][ T6278] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 346.625115][ T6231] 8021q: adding VLAN 0 to HW filter on device bond0 [ 346.649125][ T6278] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 346.946408][ T6231] 8021q: adding VLAN 0 to HW filter on device team0 [ 346.978634][ T6278] team0: Port device team_slave_0 added [ 347.166807][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 347.174586][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 347.322878][ T5080] Bluetooth: hci3: command tx timeout [ 347.387031][ T6278] team0: Port device team_slave_1 added [ 347.647159][ T6278] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 347.655068][ T6278] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 347.687482][ T6278] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 347.727309][ T6319] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 347.728031][ T5080] Bluetooth: hci5: command tx timeout [ 347.746260][ T5134] bridge0: port 2(bridge_slave_1) entered blocking state [ 347.754234][ T5134] bridge0: port 2(bridge_slave_1) entered forwarding state [ 347.924696][ T6278] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 347.932270][ T6278] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 347.962636][ T6278] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 348.415574][ T6278] hsr_slave_0: entered promiscuous mode [ 348.426548][ T6278] hsr_slave_1: entered promiscuous mode [ 348.436848][ T6278] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 348.447022][ T6278] Cannot create hsr debugfs directory [ 348.538653][ T6308] chnl_net:caif_netlink_parms(): no params data found [ 349.800763][ T5080] Bluetooth: hci5: command tx timeout [ 350.273992][ T6278] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 350.313775][ T13] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 350.333417][ T6278] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 350.361159][ T6231] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 350.388398][ T6308] bridge0: port 1(bridge_slave_0) entered blocking state [ 350.401851][ T6308] bridge0: port 1(bridge_slave_0) entered disabled state [ 350.409656][ T6308] bridge_slave_0: entered allmulticast mode [ 350.420520][ T6308] bridge_slave_0: entered promiscuous mode [ 350.459636][ T13] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 350.496674][ T6278] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 350.585683][ T13] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 350.612707][ T6308] bridge0: port 2(bridge_slave_1) entered blocking state [ 350.623903][ T6308] bridge0: port 2(bridge_slave_1) entered disabled state [ 350.632924][ T6308] bridge_slave_1: entered allmulticast mode [ 350.643369][ T6308] bridge_slave_1: entered promiscuous mode [ 350.677634][ T6278] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 350.754081][ T13] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 350.976734][ T6308] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 351.017404][ T6308] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 351.288660][ T13] bridge_slave_1: left allmulticast mode [ 351.294597][ T13] bridge_slave_1: left promiscuous mode [ 351.300870][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 351.331293][ T13] bridge_slave_0: left allmulticast mode [ 351.337066][ T13] bridge_slave_0: left promiscuous mode [ 351.343330][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 351.833002][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 351.882523][ T5080] Bluetooth: hci5: command tx timeout [ 351.894879][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 351.935558][ T13] bond0 (unregistering): Released all slaves [ 351.950945][ T13] bond1 (unregistering): Released all slaves [ 351.966798][ T13] bond2 (unregistering): Released all slaves [ 352.002683][ T6308] team0: Port device team_slave_0 added [ 352.092203][ T6231] veth0_vlan: entered promiscuous mode [ 352.266579][ T6308] team0: Port device team_slave_1 added [ 352.338678][ T6231] veth1_vlan: entered promiscuous mode [ 352.665884][ T6308] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 352.673126][ T6308] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 352.699549][ T6308] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 352.826270][ T6308] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 352.834317][ T6308] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 352.861725][ T6308] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 353.053908][ T13] hsr_slave_0: left promiscuous mode [ 353.084035][ T13] hsr_slave_1: left promiscuous mode [ 353.107222][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 353.115258][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 353.135993][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 353.143722][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 353.177184][ T13] veth1_macvtap: left promiscuous mode [ 353.183367][ T13] veth0_macvtap: left promiscuous mode [ 353.189255][ T13] veth1_vlan: left promiscuous mode [ 353.194957][ T13] veth0_vlan: left promiscuous mode [ 353.989145][ T5080] Bluetooth: hci5: command tx timeout [ 354.013964][ T13] team0 (unregistering): Port device team_slave_1 removed [ 354.073853][ T13] team0 (unregistering): Port device team_slave_0 removed [ 354.656065][ T6231] veth0_macvtap: entered promiscuous mode [ 354.721856][ T6308] hsr_slave_0: entered promiscuous mode [ 354.733352][ T6308] hsr_slave_1: entered promiscuous mode [ 354.765932][ T6344] loop2: detected capacity change from 0 to 2048 [ 354.772187][ T6308] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 354.781694][ T6308] Cannot create hsr debugfs directory [ 354.823593][ T6278] 8021q: adding VLAN 0 to HW filter on device bond0 [ 354.860579][ T6231] veth1_macvtap: entered promiscuous mode [ 354.876628][ T6344] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 355.213950][ T6278] 8021q: adding VLAN 0 to HW filter on device team0 [ 355.298699][ T779] bridge0: port 1(bridge_slave_0) entered blocking state [ 355.306446][ T779] bridge0: port 1(bridge_slave_0) entered forwarding state [ 355.330593][ T6231] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 355.341541][ T6231] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 355.351549][ T6231] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 355.362890][ T6231] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 355.375967][ T6231] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 355.544389][ T10] bridge0: port 2(bridge_slave_1) entered blocking state [ 355.552181][ T10] bridge0: port 2(bridge_slave_1) entered forwarding state [ 355.614867][ T6231] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 355.628985][ T6231] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 355.640083][ T6231] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 355.653041][ T6231] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 355.668184][ T6231] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 356.059317][ T6231] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 356.068453][ T6231] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 356.077758][ T6231] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 356.086828][ T6231] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 357.213628][ T6308] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 357.300534][ T6308] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 357.399021][ T6308] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 357.475187][ T6308] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 358.036346][ T6278] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 358.266621][ T5628] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 358.787231][ T6278] veth0_vlan: entered promiscuous mode [ 358.867572][ T6308] 8021q: adding VLAN 0 to HW filter on device bond0 [ 358.944921][ T6278] veth1_vlan: entered promiscuous mode [ 359.154440][ T6308] 8021q: adding VLAN 0 to HW filter on device team0 [ 359.233299][ T6361] loop2: detected capacity change from 0 to 512 [ 359.275905][ T780] bridge0: port 1(bridge_slave_0) entered blocking state [ 359.283772][ T780] bridge0: port 1(bridge_slave_0) entered forwarding state [ 359.401076][ T6278] veth0_macvtap: entered promiscuous mode [ 359.441755][ T780] bridge0: port 2(bridge_slave_1) entered blocking state [ 359.449202][ T780] bridge0: port 2(bridge_slave_1) entered forwarding state [ 359.465517][ T6361] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 359.522554][ T6278] veth1_macvtap: entered promiscuous mode [ 359.763194][ T6278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 359.773967][ T6278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 359.783984][ T6278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 359.794800][ T6278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 359.804830][ T6278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 359.815453][ T6278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 359.829735][ T6278] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 359.897091][ T6308] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 360.039253][ T6278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 360.040655][ T5628] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 360.050180][ T6278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 360.050253][ T6278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 360.050338][ T6278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 360.050410][ T6278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 360.050492][ T6278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 360.055238][ T6278] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 360.261195][ T6278] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 360.271125][ T6278] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 360.280595][ T6278] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 360.289687][ T6278] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 360.633677][ T6371] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 360.887492][ T6374] 8021q: adding VLAN 0 to HW filter on device bond3 [ 361.658900][ T6308] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 361.739061][ T6386] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 363.367249][ T2914] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 363.375501][ T2914] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 363.476134][ T5134] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 363.484660][ T5134] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 364.157158][ T2816] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 364.330799][ T2816] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 364.506322][ T2816] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 364.578493][ T6418] usb usb9: usbfs: interface 0 claimed by hub while 'syz-executor.2' sets config #0 [ 364.647887][ T6308] veth0_vlan: entered promiscuous mode [ 364.738289][ T2816] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 364.904989][ T6308] veth1_vlan: entered promiscuous mode [ 365.254693][ T6422] loop2: detected capacity change from 0 to 512 [ 365.272145][ T2816] bridge_slave_1: left allmulticast mode [ 365.278091][ T2816] bridge_slave_1: left promiscuous mode [ 365.285089][ T2816] bridge0: port 2(bridge_slave_1) entered disabled state [ 365.341917][ T2816] bridge_slave_0: left allmulticast mode [ 365.352464][ T2816] bridge_slave_0: left promiscuous mode [ 365.359050][ T2816] bridge0: port 1(bridge_slave_0) entered disabled state [ 365.414545][ T6422] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 366.153692][ T2816] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 366.221886][ T5628] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 366.247304][ T2816] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 366.303967][ T2816] bond0 (unregistering): Released all slaves [ 366.446809][ T6308] veth0_macvtap: entered promiscuous mode [ 366.544840][ T6308] veth1_macvtap: entered promiscuous mode [ 366.674314][ T5084] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 366.693664][ T5084] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 366.715319][ T5084] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 366.760985][ T5084] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 366.776662][ T6430] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 366.776901][ T5084] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 366.807570][ T5084] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 366.905448][ T6432] 8021q: adding VLAN 0 to HW filter on device bond4 [ 367.300535][ T2816] hsr_slave_0: left promiscuous mode [ 367.350656][ T2816] hsr_slave_1: left promiscuous mode [ 367.377552][ T2816] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 367.385664][ T2816] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 367.434100][ T2816] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 367.441925][ T2816] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 367.482488][ T2816] veth1_macvtap: left promiscuous mode [ 367.488223][ T2816] veth0_macvtap: left promiscuous mode [ 367.494966][ T2816] veth1_vlan: left promiscuous mode [ 367.501701][ T2816] veth0_vlan: left promiscuous mode [ 368.234835][ T2816] team0 (unregistering): Port device team_slave_1 removed [ 368.291027][ T2816] team0 (unregistering): Port device team_slave_0 removed [ 368.671047][ T6308] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 368.681979][ T6308] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 368.692185][ T6308] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 368.702940][ T6308] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 368.713082][ T6308] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 368.723829][ T6308] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 368.740654][ T6308] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 368.824200][ T6438] macsec0 speed is unknown, defaulting to 1000 [ 368.873977][ T6442] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 368.922103][ T5084] Bluetooth: hci1: command tx timeout [ 368.942210][ T6308] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 368.954476][ T6308] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 368.964767][ T6308] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 368.975508][ T6308] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 368.985614][ T6308] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 368.996330][ T6308] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 369.011269][ T6308] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 369.038310][ T6438] macsec0 speed is unknown, defaulting to 1000 [ 369.047428][ T6438] macsec0 speed is unknown, defaulting to 1000 [ 369.068235][ T6438] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 369.111320][ T6438] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 369.162305][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 369.170479][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 369.263344][ T6308] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 369.272889][ T6308] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 369.282150][ T6308] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 369.291312][ T6308] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 369.323048][ T6438] macsec0 speed is unknown, defaulting to 1000 [ 369.487720][ T6438] macsec0 speed is unknown, defaulting to 1000 [ 369.496780][ T6438] macsec0 speed is unknown, defaulting to 1000 [ 369.505735][ T6438] macsec0 speed is unknown, defaulting to 1000 [ 369.514635][ T6438] macsec0 speed is unknown, defaulting to 1000 [ 369.538615][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 369.548532][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 370.064280][ T6429] chnl_net:caif_netlink_parms(): no params data found [ 371.000335][ T5084] Bluetooth: hci1: command tx timeout [ 371.455485][ T6429] bridge0: port 1(bridge_slave_0) entered blocking state [ 371.464523][ T6429] bridge0: port 1(bridge_slave_0) entered disabled state [ 371.472355][ T6429] bridge_slave_0: entered allmulticast mode [ 371.481498][ T6429] bridge_slave_0: entered promiscuous mode [ 371.603841][ T6429] bridge0: port 2(bridge_slave_1) entered blocking state [ 371.611909][ T6429] bridge0: port 2(bridge_slave_1) entered disabled state [ 371.619675][ T6429] bridge_slave_1: entered allmulticast mode [ 371.628868][ T6429] bridge_slave_1: entered promiscuous mode [ 371.941771][ T6429] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 372.058919][ T6429] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 372.423697][ T6429] team0: Port device team_slave_0 added [ 372.489809][ T6429] team0: Port device team_slave_1 added [ 372.788593][ T6429] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 372.796760][ T6429] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 372.826505][ T6429] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 373.098939][ T5084] Bluetooth: hci1: command tx timeout [ 373.117715][ T6429] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 373.126574][ T6429] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 373.157093][ T6429] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 373.479196][ T6429] hsr_slave_0: entered promiscuous mode [ 373.547373][ T6429] hsr_slave_1: entered promiscuous mode [ 373.590581][ T6429] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 373.598333][ T6429] Cannot create hsr debugfs directory [ 373.849462][ T2816] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 374.013461][ T6484] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 374.132584][ T2816] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 374.238421][ T6488] 8021q: adding VLAN 0 to HW filter on device bond1 [ 374.291340][ T5080] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 374.303685][ T29] audit: type=1326 audit(1717653339.247:136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6489 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73d0579 code=0x7fc00000 [ 374.335427][ T5080] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 374.344261][ T29] audit: type=1326 audit(1717653339.307:137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6489 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf73d0579 code=0x7fc00000 [ 374.374143][ T5080] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 374.401182][ T2816] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 374.419656][ T5080] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 374.434846][ T5080] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 374.472955][ T5080] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 374.516819][ T2816] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 374.722783][ T6491] macsec0 speed is unknown, defaulting to 1000 [ 375.063975][ T6499] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 375.150331][ T29] audit: type=1326 audit(1717653339.977:138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6489 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73d0579 code=0x7fc00000 [ 375.173861][ T5080] Bluetooth: hci1: command tx timeout [ 375.201914][ T2816] bridge_slave_1: left allmulticast mode [ 375.207790][ T2816] bridge_slave_1: left promiscuous mode [ 375.214613][ T2816] bridge0: port 2(bridge_slave_1) entered disabled state [ 375.269419][ T2816] bridge_slave_0: left allmulticast mode [ 375.276266][ T2816] bridge_slave_0: left promiscuous mode [ 375.286364][ T2816] bridge0: port 1(bridge_slave_0) entered disabled state [ 375.846372][ T2816] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 375.918491][ T2816] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 375.990303][ T2816] bond0 (unregistering): Released all slaves [ 376.606381][ T5080] Bluetooth: hci2: command tx timeout [ 376.736409][ T2816] hsr_slave_0: left promiscuous mode [ 376.759630][ T2816] hsr_slave_1: left promiscuous mode [ 376.783485][ T2816] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 376.791500][ T2816] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 376.808469][ T2816] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 376.817427][ T2816] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 376.835034][ T2816] veth1_macvtap: left promiscuous mode [ 376.841043][ T2816] veth0_macvtap: left promiscuous mode [ 376.846926][ T2816] veth1_vlan: left promiscuous mode [ 376.852678][ T2816] veth0_vlan: left promiscuous mode [ 377.640521][ T29] audit: type=1326 audit(1717653342.587:139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6522 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7494579 code=0x7ffc0000 [ 377.664478][ T29] audit: type=1326 audit(1717653342.587:140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6522 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7494579 code=0x7ffc0000 [ 377.688557][ T29] audit: type=1326 audit(1717653342.607:141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6522 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=40000003 syscall=39 compat=1 ip=0xf7494579 code=0x7ffc0000 [ 377.692660][ T2816] team0 (unregistering): Port device team_slave_1 removed [ 377.711907][ T29] audit: type=1326 audit(1717653342.627:142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6522 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7494579 code=0x7ffc0000 [ 377.744313][ T29] audit: type=1326 audit(1717653342.627:143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6522 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7494579 code=0x7ffc0000 [ 377.768755][ T29] audit: type=1326 audit(1717653342.637:144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6522 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7494579 code=0x7ffc0000 [ 377.792413][ T29] audit: type=1326 audit(1717653342.637:145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6522 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=40000003 syscall=21 compat=1 ip=0xf7494579 code=0x7ffc0000 [ 377.859343][ T2816] team0 (unregistering): Port device team_slave_0 removed [ 378.061857][ T6525] capability: warning: `syz-executor.1' uses deprecated v2 capabilities in a way that may be insecure [ 378.238779][ T6491] chnl_net:caif_netlink_parms(): no params data found [ 378.421841][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 378.429798][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 378.637778][ T5084] Bluetooth: hci0: unexpected event for opcode 0x0803 [ 378.668709][ T6429] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 378.681113][ T5084] Bluetooth: hci2: command tx timeout [ 378.740115][ T6530] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 378.820119][ T4026] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 378.828163][ T4026] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 378.928903][ T6429] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 379.007775][ T6530] 8021q: adding VLAN 0 to HW filter on device bond5 [ 379.051650][ T6429] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 379.142272][ T6429] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 379.582417][ T6543] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 379.594782][ T6491] bridge0: port 1(bridge_slave_0) entered blocking state [ 379.602759][ T6491] bridge0: port 1(bridge_slave_0) entered disabled state [ 379.610686][ T6491] bridge_slave_0: entered allmulticast mode [ 379.619799][ T6491] bridge_slave_0: entered promiscuous mode [ 379.747317][ T6545] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 379.767697][ T6491] bridge0: port 2(bridge_slave_1) entered blocking state [ 379.778671][ T6491] bridge0: port 2(bridge_slave_1) entered disabled state [ 379.791687][ T6491] bridge_slave_1: entered allmulticast mode [ 379.800787][ T6491] bridge_slave_1: entered promiscuous mode [ 380.221598][ T6491] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 380.317637][ T6491] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 380.573399][ T6491] team0: Port device team_slave_0 added [ 380.615849][ T6491] team0: Port device team_slave_1 added [ 380.765779][ T5080] Bluetooth: hci2: command tx timeout [ 380.874936][ T6491] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 380.882285][ T6491] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 380.909567][ T6491] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 381.108384][ T6491] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 381.121139][ T6491] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 381.147455][ T6491] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 381.248639][ T6429] 8021q: adding VLAN 0 to HW filter on device bond0 [ 381.595295][ T6491] hsr_slave_0: entered promiscuous mode [ 381.643350][ T6491] hsr_slave_1: entered promiscuous mode [ 381.691200][ T6491] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 381.698968][ T6491] Cannot create hsr debugfs directory [ 381.726579][ T6429] 8021q: adding VLAN 0 to HW filter on device team0 [ 381.901638][ T5127] bridge0: port 1(bridge_slave_0) entered blocking state [ 381.909326][ T5127] bridge0: port 1(bridge_slave_0) entered forwarding state [ 382.054288][ T5127] bridge0: port 2(bridge_slave_1) entered blocking state [ 382.062021][ T5127] bridge0: port 2(bridge_slave_1) entered forwarding state [ 382.277971][ T6569] sch_tbf: burst 88 is lower than device ip6gretap0 mtu (1606) ! [ 382.624116][ T6572] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 382.680989][ T5080] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 382.689564][ T5080] Bluetooth: hci0: Injecting HCI hardware error event [ 382.697260][ T5080] Bluetooth: hci0: hardware error 0x00 [ 382.840722][ T5084] Bluetooth: hci2: command tx timeout [ 382.983816][ T6572] 8021q: adding VLAN 0 to HW filter on device bond2 [ 383.242883][ T6581] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 383.591933][ T6589] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 383.978665][ T6491] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 384.023697][ T29] kauditd_printk_skb: 1 callbacks suppressed [ 384.023776][ T29] audit: type=1326 audit(1717653348.907:147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6593 comm="syz-executor.4" exe="/root/syz-executor.4" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf742e579 code=0x0 [ 384.163157][ T6491] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 384.241600][ T6491] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 384.307904][ T6491] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 384.475983][ T6429] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 384.721906][ T6601] tipc: Started in network mode [ 384.726981][ T6601] tipc: Node identity f0, cluster identity 4711 [ 384.733673][ T6601] tipc: Node number set to 240 [ 384.770918][ T5080] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 385.123902][ T6429] veth0_vlan: entered promiscuous mode [ 385.259580][ T6429] veth1_vlan: entered promiscuous mode [ 385.361131][ T29] audit: type=1326 audit(1717653350.257:148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6604 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf742e579 code=0x7ffc0000 [ 385.384047][ T29] audit: type=1326 audit(1717653350.257:149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6604 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf742e579 code=0x7ffc0000 [ 385.407145][ T29] audit: type=1326 audit(1717653350.257:150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6604 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=40000003 syscall=315 compat=1 ip=0xf742e579 code=0x7ffc0000 [ 385.433106][ T29] audit: type=1326 audit(1717653350.257:151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6604 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf742e579 code=0x7ffc0000 [ 385.457004][ T29] audit: type=1326 audit(1717653350.257:152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6604 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf742e579 code=0x7ffc0000 [ 385.494174][ T6491] 8021q: adding VLAN 0 to HW filter on device bond0 [ 385.662301][ T6429] veth0_macvtap: entered promiscuous mode [ 385.764581][ T6491] 8021q: adding VLAN 0 to HW filter on device team0 [ 385.786380][ T6429] veth1_macvtap: entered promiscuous mode [ 385.844982][ T779] bridge0: port 1(bridge_slave_0) entered blocking state [ 385.852771][ T779] bridge0: port 1(bridge_slave_0) entered forwarding state [ 385.951233][ T779] bridge0: port 2(bridge_slave_1) entered blocking state [ 385.958931][ T779] bridge0: port 2(bridge_slave_1) entered forwarding state [ 386.043905][ T5080] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 386.053672][ T5080] Bluetooth: hci4: Injecting HCI hardware error event [ 386.058345][ T6429] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 386.062419][ T5080] Bluetooth: hci4: hardware error 0x00 [ 386.072434][ T6429] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 386.087349][ T6429] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 386.098143][ T6429] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 386.108852][ T6429] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 386.119699][ T6429] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 386.139688][ T6429] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 386.208935][ T6429] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 386.222230][ T6429] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 386.232424][ T6429] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 386.247349][ T6429] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 386.258641][ T6429] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 386.269391][ T6429] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 386.284696][ T6429] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 386.324896][ T6429] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 386.334091][ T6429] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 386.348547][ T6429] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 386.358817][ T6429] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 386.461748][ T6614] loop2: detected capacity change from 0 to 128 [ 386.739384][ T6617] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 386.946474][ T6620] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 387.705106][ T6631] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 388.298813][ T5080] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 388.345195][ T6491] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 388.732460][ T6491] veth0_vlan: entered promiscuous mode [ 388.845515][ T6491] veth1_vlan: entered promiscuous mode [ 389.238810][ T6491] veth0_macvtap: entered promiscuous mode [ 389.260795][ T6648] netlink: 'syz-executor.4': attribute type 4 has an invalid length. [ 389.301931][ T6491] veth1_macvtap: entered promiscuous mode [ 389.453258][ T6491] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 389.464902][ T6491] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 389.475072][ T6491] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 389.486868][ T6491] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 389.497079][ T6491] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 389.507825][ T6491] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 389.520184][ T6491] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 389.531636][ T6491] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 389.546837][ T6491] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 389.659654][ T6491] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 389.670694][ T6491] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 389.682430][ T6491] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 389.694597][ T6491] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 389.705436][ T6491] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 389.716154][ T6491] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 389.730565][ T6491] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 389.742410][ T6491] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 389.757827][ T6491] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 389.939439][ T6491] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 389.949506][ T6491] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 389.958917][ T6491] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 389.971010][ T6491] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 390.052608][ T6659] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 390.152655][ T6661] netlink: 900 bytes leftover after parsing attributes in process `syz-executor.1'. [ 390.857199][ T6675] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 392.643317][ T6704] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 393.088510][ T6710] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 393.471879][ T6710] 8021q: adding VLAN 0 to HW filter on device bond3 [ 393.691074][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 393.699136][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 393.922569][ T6719] netlink: 900 bytes leftover after parsing attributes in process `syz-executor.2'. [ 393.943111][ T2816] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 393.951687][ T2816] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 394.175168][ T29] audit: type=1326 audit(1717653359.087:153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6721 comm="syz-executor.1" exe="/root/syz-executor.1" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7494579 code=0x0 [ 394.659799][ T2816] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 394.757537][ T6734] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 394.856204][ T2816] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 394.951172][ T2816] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 395.125813][ T2816] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 395.521822][ T2816] bridge_slave_1: left allmulticast mode [ 395.527808][ T2816] bridge_slave_1: left promiscuous mode [ 395.534521][ T2816] bridge0: port 2(bridge_slave_1) entered disabled state [ 395.643589][ T2816] bridge_slave_0: left allmulticast mode [ 395.649481][ T2816] bridge_slave_0: left promiscuous mode [ 395.663678][ T2816] bridge0: port 1(bridge_slave_0) entered disabled state [ 396.321182][ T6747] loop4: detected capacity change from 0 to 512 [ 396.422238][ T2816] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 396.486787][ T6747] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2250: inode #15: comm syz-executor.4: corrupted in-inode xattr: invalid ea_ino [ 396.524758][ T2816] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 396.585565][ T6747] EXT4-fs error (device loop4): ext4_orphan_get:1399: comm syz-executor.4: couldn't read orphan inode 15 (err -117) [ 396.615436][ T2816] bond0 (unregistering): Released all slaves [ 396.640381][ T6747] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 396.733620][ T6747] EXT4-fs warning (device loop4): __ext4fs_dirhash:270: inode #18: comm syz-executor.4: Siphash requires key [ 396.745955][ T6747] ===================================================== [ 396.753213][ T6747] BUG: KMSAN: uninit-value in ext4_inlinedir_to_tree+0xde2/0x15a0 [ 396.761496][ T6747] ext4_inlinedir_to_tree+0xde2/0x15a0 [ 396.767153][ T6747] ext4_htree_fill_tree+0x1941/0x1cd0 [ 396.773068][ T6747] ext4_readdir+0x4bbf/0x5b00 [ 396.777919][ T6747] iterate_dir+0x688/0x870 [ 396.785748][ T6747] __se_sys_getdents64+0x169/0x530 [ 396.791967][ T6747] __ia32_sys_getdents64+0x93/0xe0 [ 396.797292][ T6747] ia32_sys_call+0xe3d/0x40a0 [ 396.803026][ T6747] __do_fast_syscall_32+0xb4/0x120 [ 396.808363][ T6747] do_fast_syscall_32+0x38/0x80 [ 396.813589][ T6747] do_SYSENTER_32+0x1f/0x30 [ 396.818282][ T6747] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 396.824988][ T6747] [ 396.827399][ T6747] Local variable hinfo created at: [ 396.832814][ T6747] ext4_htree_fill_tree+0x52/0x1cd0 [ 396.838202][ T6747] ext4_readdir+0x4bbf/0x5b00 [ 396.843218][ T6747] [ 396.845641][ T6747] CPU: 0 PID: 6747 Comm: syz-executor.4 Not tainted 6.9.0-syzkaller-02339-g101b7a97143a #0 [ 396.857387][ T6747] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024 [ 396.867851][ T6747] ===================================================== [ 396.875039][ T6747] Disabling lock debugging due to kernel taint [ 396.881466][ T6747] Kernel panic - not syncing: kmsan.panic set ... [ 396.887991][ T6747] CPU: 0 PID: 6747 Comm: syz-executor.4 Tainted: G B 6.9.0-syzkaller-02339-g101b7a97143a #0 [ 396.899625][ T6747] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024 [ 396.909817][ T6747] Call Trace: [ 396.913199][ T6747] [ 396.916227][ T6747] dump_stack_lvl+0x216/0x2d0 [ 396.921115][ T6747] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 396.927114][ T6747] dump_stack+0x1e/0x30 [ 396.931455][ T6747] panic+0x4e2/0xcd0 [ 396.935542][ T6747] ? kmsan_get_metadata+0xf1/0x1d0 [ 396.940845][ T6747] kmsan_report+0x2d5/0x2e0 [ 396.945531][ T6747] ? __msan_warning+0x95/0x120 [ 396.950447][ T6747] ? ext4_inlinedir_to_tree+0xde2/0x15a0 [ 396.956287][ T6747] ? ext4_htree_fill_tree+0x1941/0x1cd0 [ 396.962030][ T6747] ? ext4_readdir+0x4bbf/0x5b00 [ 396.967058][ T6747] ? iterate_dir+0x688/0x870 [ 396.971837][ T6747] ? __se_sys_getdents64+0x169/0x530 [ 396.977331][ T6747] ? __ia32_sys_getdents64+0x93/0xe0 [ 396.982827][ T6747] ? ia32_sys_call+0xe3d/0x40a0 [ 396.987891][ T6747] ? __do_fast_syscall_32+0xb4/0x120 [ 396.993402][ T6747] ? do_fast_syscall_32+0x38/0x80 [ 396.998629][ T6747] ? do_SYSENTER_32+0x1f/0x30 [ 397.003500][ T6747] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 397.010249][ T6747] ? _raw_spin_unlock_irqrestore+0x3f/0x60 [ 397.016248][ T6747] ? stack_depot_save_flags+0x66d/0x6e0 [ 397.021991][ T6747] ? kmsan_get_metadata+0x146/0x1d0 [ 397.027368][ T6747] ? kmsan_internal_set_shadow_origin+0x66/0xe0 [ 397.033836][ T6747] ? kmsan_get_metadata+0x146/0x1d0 [ 397.039219][ T6747] ? kmsan_get_metadata+0x146/0x1d0 [ 397.044601][ T6747] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 397.050598][ T6747] __msan_warning+0x95/0x120 [ 397.055347][ T6747] ext4_inlinedir_to_tree+0xde2/0x15a0 [ 397.061031][ T6747] ? kmsan_get_metadata+0x146/0x1d0 [ 397.066406][ T6747] ? kmsan_internal_set_shadow_origin+0x66/0xe0 [ 397.072875][ T6747] ? kmsan_get_metadata+0x146/0x1d0 [ 397.078244][ T6747] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 397.084282][ T6747] ext4_htree_fill_tree+0x1941/0x1cd0 [ 397.089852][ T6747] ? kmsan_get_metadata+0x146/0x1d0 [ 397.095226][ T6747] ? kmsan_get_metadata+0x146/0x1d0 [ 397.100607][ T6747] ? kmsan_get_metadata+0x146/0x1d0 [ 397.105982][ T6747] ? kmsan_get_metadata+0x146/0x1d0 [ 397.111368][ T6747] ? kmsan_internal_unpoison_memory+0x14/0x20 [ 397.117663][ T6747] ? kmsan_get_metadata+0x146/0x1d0 [ 397.123034][ T6747] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 397.129039][ T6747] ext4_readdir+0x4bbf/0x5b00 [ 397.133908][ T6747] ? aa_file_perm+0x3e4/0x17a0 [ 397.138858][ T6747] ? kmsan_get_metadata+0x146/0x1d0 [ 397.144240][ T6747] ? kmsan_get_metadata+0x146/0x1d0 [ 397.149618][ T6747] ? kmsan_get_metadata+0x146/0x1d0 [ 397.154983][ T6747] ? kmsan_get_metadata+0x146/0x1d0 [ 397.160363][ T6747] ? kmsan_internal_set_shadow_origin+0x66/0xe0 [ 397.166839][ T6747] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 397.172869][ T6747] ? __pfx_ext4_readdir+0x10/0x10 [ 397.178088][ T6747] iterate_dir+0x688/0x870 [ 397.182727][ T6747] __se_sys_getdents64+0x169/0x530 [ 397.188058][ T6747] ? __pfx_filldir64+0x10/0x10 [ 397.193037][ T6747] __ia32_sys_getdents64+0x93/0xe0 [ 397.198370][ T6747] ia32_sys_call+0xe3d/0x40a0 [ 397.203251][ T6747] __do_fast_syscall_32+0xb4/0x120 [ 397.208567][ T6747] ? switch_fpu_return+0x17/0x20 [ 397.213697][ T6747] do_fast_syscall_32+0x38/0x80 [ 397.218738][ T6747] do_SYSENTER_32+0x1f/0x30 [ 397.223423][ T6747] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 397.229969][ T6747] RIP: 0023:0xf742e579 [ 397.234153][ T6747] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 397.253948][ T6747] RSP: 002b:00000000f5eb75ac EFLAGS: 00000206 ORIG_RAX: 00000000000000dc [ 397.262537][ T6747] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000000000 [ 397.270638][ T6747] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 397.278730][ T6747] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 397.286820][ T6747] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 397.294917][ T6747] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 397.303042][ T6747] [ 397.306375][ T6747] Kernel Offset: disabled [ 397.310753][ T6747] Rebooting in 86400 seconds..