last executing test programs: 2m7.136451778s ago: executing program 2 (id=1246): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000200)={@val, @void, @eth={@multicast, @multicast, @val={@val={0x88a8, 0x5, 0x1, 0x4}, {0x8100, 0x6, 0x0, 0x6}}, {@ipv4={0x800, @generic={{0x5, 0x4, 0x1, 0x6, 0x1c, 0xe4, 0x0, 0x1, 0x11, 0x0, @dev={0xac, 0x14, 0x14, 0x29}, @rand_addr=0x64010100}, "7fe59ce22cbe5943"}}}}}, 0x36) 1m52.767171821s ago: executing program 2 (id=1246): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000200)={@val, @void, @eth={@multicast, @multicast, @val={@val={0x88a8, 0x5, 0x1, 0x4}, {0x8100, 0x6, 0x0, 0x6}}, {@ipv4={0x800, @generic={{0x5, 0x4, 0x1, 0x6, 0x1c, 0xe4, 0x0, 0x1, 0x11, 0x0, @dev={0xac, 0x14, 0x14, 0x29}, @rand_addr=0x64010100}, "7fe59ce22cbe5943"}}}}}, 0x36) 1m33.258014064s ago: executing program 2 (id=1246): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000200)={@val, @void, @eth={@multicast, @multicast, @val={@val={0x88a8, 0x5, 0x1, 0x4}, {0x8100, 0x6, 0x0, 0x6}}, {@ipv4={0x800, @generic={{0x5, 0x4, 0x1, 0x6, 0x1c, 0xe4, 0x0, 0x1, 0x11, 0x0, @dev={0xac, 0x14, 0x14, 0x29}, @rand_addr=0x64010100}, "7fe59ce22cbe5943"}}}}}, 0x36) 1m11.268348335s ago: executing program 2 (id=1246): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000200)={@val, @void, @eth={@multicast, @multicast, @val={@val={0x88a8, 0x5, 0x1, 0x4}, {0x8100, 0x6, 0x0, 0x6}}, {@ipv4={0x800, @generic={{0x5, 0x4, 0x1, 0x6, 0x1c, 0xe4, 0x0, 0x1, 0x11, 0x0, @dev={0xac, 0x14, 0x14, 0x29}, @rand_addr=0x64010100}, "7fe59ce22cbe5943"}}}}}, 0x36) 38.142456968s ago: executing program 2 (id=1246): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000200)={@val, @void, @eth={@multicast, @multicast, @val={@val={0x88a8, 0x5, 0x1, 0x4}, {0x8100, 0x6, 0x0, 0x6}}, {@ipv4={0x800, @generic={{0x5, 0x4, 0x1, 0x6, 0x1c, 0xe4, 0x0, 0x1, 0x11, 0x0, @dev={0xac, 0x14, 0x14, 0x29}, @rand_addr=0x64010100}, "7fe59ce22cbe5943"}}}}}, 0x36) 12.973342908s ago: executing program 0 (id=2369): r0 = syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301) r1 = socket$l2tp(0x2, 0x2, 0x73) r2 = memfd_create(&(0x7f00000000c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x0) write$binfmt_script(r2, &(0x7f00000001c0)={'#! ', './file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0'}, 0x1002) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) execveat(r2, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) sendmmsg(r1, &(0x7f000000dd80)=[{{&(0x7f00000000c0)=@in={0x2, 0x4e22, @remote}, 0x80, &(0x7f0000000400)=[{0x0}, {&(0x7f0000000200)="97ff", 0x2}], 0x2}}], 0x1, 0x0) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_SETCONFIGURATION(r0, 0x80045505, &(0x7f0000000000)=0x1) 11.835951066s ago: executing program 2 (id=1246): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000200)={@val, @void, @eth={@multicast, @multicast, @val={@val={0x88a8, 0x5, 0x1, 0x4}, {0x8100, 0x6, 0x0, 0x6}}, {@ipv4={0x800, @generic={{0x5, 0x4, 0x1, 0x6, 0x1c, 0xe4, 0x0, 0x1, 0x11, 0x0, @dev={0xac, 0x14, 0x14, 0x29}, @rand_addr=0x64010100}, "7fe59ce22cbe5943"}}}}}, 0x36) 9.694056189s ago: executing program 0 (id=2373): bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$exfat(&(0x7f0000000000), &(0x7f0000000140)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0xa1080a, &(0x7f0000000300)=ANY=[], 0x21, 0x150d, &(0x7f0000001f80)="$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") sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000340)={0x0}}, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000005c0)='smaps_rollup\x00') bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xe, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x28031, 0xffffffffffffffff, 0x8000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) timer_create(0x2, 0x0, 0x0) lseek(r0, 0x2000, 0x0) 8.055929605s ago: executing program 0 (id=2376): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000400)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r1) sendmsg$inet6(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000001240)=[{&(0x7f0000001040)="2b51123ece2a8e8160687fbc0ea3d876cdfd5775db9a2cac279428848e24a7af0a681c3ed2ba61f780857fab3849451fc181182786717d4b6a10e4ae3655feac8fe35522291da5d6c343093afbae1e65d291f8cc6ca693ec78", 0x59}, {&(0x7f0000001c80)="66e90db9f257b6591f479c81792c567230b4675774634bc8baf8c95ecaff2b6de65e084c134dfd0f34a8bb75a9d224debd5d3cdae35f5c24ec4d118429734b8da4929a6c01fa5ab9a7637d4eacc5d809bac093173a71344ddbab9aeb9b4794ad50693c313354006ebfa3ddd3325e807ed5f15e934e5428adcb7f3385818d30e7bd5d55e9454e66c3bf62d479c05553864aad0f2280389f469a8432808d8f5b3bee69e18ea62f25455931611250058640bf68e7fa791c53c78870dbb4300306de05433539f2abef84b389c4bbb4845d3ae6e85509f40d13814e0ad862abaefee22af4864015c88c53d2c631e0921f711f4ec47353cc2f56f93db43ef59fc905f56e643bc0c9109c2fa80ff07722c18f0e5a07a46280464e5a111082938c3f3f2b7c734ebb8c6166796e62583290b3fd4aa91f46d6f43c3232ad24f274ffe7b68cb85f0b3982f26243e72dc8d8f3ed4fbdb355b8b523347f3778263c066ade27f6ff421ce23987ef6c2c63c416c8302577cdb344f508b9a103f7f154dfb28634828eb58108d4cac0808d5a207b7d95e5e137026961f96aa6b7df3137d3e20a1b3c1703576da3d7dcd14f039dda0cde5a18b35e980cef531ec45fb024961e46a90d1a28aae9eb00a325a9b8434f3275a6a31e4bb8d13aedcb24d239123d240bc6d0c6a3ca62b474c5e7ff74061b0a097acdf88639db1df11b6bead01f993ea720f3b91f1e9ea4df6d2524cc369e5d1f85149947da08bd218678cad5bb180c4b461d3201b7afcb9c852015730803180bea7875c1920f3da488ecebebadc342756133a0a8cbd5b9495e5c4f53fab6b80921b23ad6c4deca7abeceea7a19416df1b2b5a6c10faa0cda8e9e7f14a8b633c05157ab669991458550a964f5c18f15f49d0bd5d6ff574306c8d5abb367fdb2d664f1dfcb8f646831eeacce9ede49eec9238a73d16e6a5b54244e1a5c80e499ba14d6fcaa1a91dfd825b87ceaee3922a08caa81ef8fcb60efc1dd673c8357f59fc47eff79bbf93d14ad6ea5dd3ec5dc635d64017435fe20a1b18b87a6b2d2927891107dd6c64a9a53ba606b32f494ab65456836da14df0a4336759c4be2709ec5e8df5ca01a97bbf7a7f596008167a164fd8a57cf81cdb4ada639018e91709c69862c06870aacbcde1ed42aeed5b3b216ee156cfb02a7d7c9f85bb31ccb3fe3b495aff814fb980410429c118d489a7fbdfe901675968eee67aa67dddaf13c02fc000cbc4b248ff15b34a0af01a734f573eccdcbf92225f2acffbe0cbc275242133f472b1bacf394763876fa9e2867e569631c50eb041157ca75d6da9676d2363d86d7df2c86929eda8b9c755763eac2c0b11318198c5419ce44511b4100b7694717595ec5e5988501f2b9cfbb1c36dd29225333808290c3fe943ac9c559bc5ac24494666ad52e68c65990bcbe7a94dcaeb4a814d5446a2177250a63090c0073057df8c7cfe6043329079626c0e101b747d20208068a05975e1d50aed94fb3dc48071cd510a0bbbb80d2787213cbb57b62394cd0d1eabe2182c51e48310ae0bd2ce4e79ba5d71f99f335e22cd2b50ae703a74ecf16b2a07771366768482ca6b904d298d8f17e54af74df743c99f3fd87491a330d74faef2c777b4a13b805c040dfeb618f5e0960ca7b99eaa9b9806ac8a446dfeff6f1653df2d288c9f455e070071b9ef315c9cf8c15995f50f3d8e4c4e8f32d99efd7936c2d790bb11d0d96aa14185c7ab2aad2d96977a846ddd015ab0752ed2f5d1d289f4ed79e6d37b9ce0d421b021fc2e5eac1b2ab63d9a70f48857e4cb865d4d430838d1474ed3ca3134ef184b1532e6723424730a1f452422ea1ffb0ffe8579b46f4f5076fd2aa18d7a17cc5d17bc400c71945ccc22eec9e2b1739ac08900a0ec15c6c0c591e25e65e2d0d73b723971b8512dbe231503cc5b54503951bc2b085e263d068d12e0f4354d0cfe304efe9ae6d971e67cc67e9afce0ab78f2a6759bf330156aee103cd098f670e7621bb1821b7ce4b4ba639e86bb7d72ef4575d9206e12ac3d74c0775f9631e5d533ff3eb8ff576808ee416118fd49e6f9732148aa3b836367d763a4230dae1c4f5b079bd7ec8eea1cd290c5951020a97e2e4569dd79d7fd92783656e301329ea4e7d09db51b19fd8c4d13c959e9e38705f6cee24d43cb5368885fa507a45860c562ce4eb67730b0e2a89cb512766d3ff059dcae08380f286984ce3f409ac76b9580ec4ceef2148e7aed62beee0f600c3cff852fe54c3c6ae7f958888a8f9ee5ccd137366397787b6fdc91899b9c30ce2b6878c67013dfc37e6463a5d3d38bbc3fb5ceba8b4b80b6a668e920f10fa9ba2d2eb0a79ef45ccb56f15a6b69d8c1612d4643a08147ab4d4ce21f5cf8385f2a05b46f2a5d6423a936a93d743c829e3bb1690fd34b19fd45fa5031fbd7fe167c6ac2256a68b0667ace7f72c42b749d970076f2492de532d16abb90f2d40b724fcf8022474adab3f69ece0e1121992e2f5f8724260fda21918c3d13de5d8f8b76fc93e74fa418ea372608dc691760ea5530e5381b8f360524e95d879d2353e2e793aef1bbb7ed3a1851adba6d8e8d27aec5c7f4f75b25ce9692fdf2ab30ab5b4c8a6886be2f78f6f1f851c0ee4bdee381bc6efbb37e815767112593d97d02e783a1433e74796bc049c2aea06bcac08b490930ab6f48b43852dd9da997d8cdf376bc3e4b386efa8ad12da3838aae6b27661744eaf0b41098b99779e0244e2b4c6c31b656f49c971e6c02ded46db2db09265577edd0e2ae91d1cc5bbd09df90e2c79d7d840821715703d30d312621150b04aca9b0c04132324ce794ee0dc10c200689b6ec9e3c6e0a9dbf7ae8618bca7c59a1eb31a462b7bf78a1025c94dc9f0c1d74d550448412765f064cb463749f7560aafbd2903f0b70f3256769f5566157e3d8622dd25702a97cfc5cf1ba9ad16032329b3ad9a846c746eae2734f8dbf2695dd0b31c2713313611ed944d5ac6339f0346af64bd93966734f1c2b2ac83f55f9887b4138f739e4cfef60da9b7dd563ace66f91e4ebba2cb2f25f53c2d228007b92e5eea39747dca1d79bccfa32a0298907988b2a3a738905ce9052719a0e776465ac74c04ce07b80a2f0026ab3ed01094d68ecba8c15027e4894686ff9e3a9349ede4e5df4c27200463ff180ed5b4d228d5c281f53b227fd6cbc2e3235dadf28336d515fc4ae0d894e41f047d6927d4d5cdd576dd5d7ab478fcec7e0a9eaf4720e11158f188650f611ee8689277adacd7674a8ab6e816870bf48488c618b0be022d0563b4095864f62a83b9579e408685adaab5bb799d404288d4fd5b61d113fb264e285b46c4d6604f8f394e8abde861cf13131ac92d4af9e32b7a26537ea36941baaaa64c3708c8c2b75428bb29496deb096c06f0c5ede2d76fdfdef60bd075be82b59d225c27e50accce24ff9d6c64397dd49c965ee6f9fca370da58decb3e19e56aa93217581579f7eae407d9023c3515fe351a4478cb646c97f7d9b60a25c7bed66165c6ed51cf8f02320752cb2753a3d87122d154fadefd7ca5ed0c1f950c8848709ee9355a0f046dcad5d30e67d1e6e05706d5795032e664e7322febef3a3c1f3f4f443ae26542c8abbb30149f9fbe2083dba682d41cee8561a1a32684afa8cda1cb5853b7df06e69916c9fb899e3a0977d72e26dd450a5fca199fa921f4768d7c9b237938f10fedba02276b32ae419453d73d4fe78519dd023f4c9535b7d35c55422e1eafc42962c31ea98853266abe9a5e5b695e3f620dbb3e3966cf90c82fdd318794b2b2f2188df5f92ff9296c1c3a0a96cad50c3fc5aa1668fa3d1755a4e8cecc70d48e4afe370ef7e111ee7da2fd3f9a4b49d82ba46eda66718af148a572d366436fd80d24744d1485711fe60d910331f512470bbc25b20f0cf9853ddc4deeedefceb7aea0a6a7869d991ebf2cf0a92e451f60371d0db14c19692e1deaaf5ebfe0a8505891a2b742c3c17d05e5e0907628c428eb4166e54e7a0284859e6daafbaae6d435fc5a1674ccfb46309d08c44b2f1e7ac2294346094c315fb4375457afc20bfc4a88c8f1ee7476f66a54ebf6509b75256f198b694a484d4307321cb9e69f6dcfeeac54afec23fc7f418a446bc93912334df07b74dcacb6588a1fc7f2c25293e2f8b9acfbc4be147a4684a87a71c91d86af4d795e09f4554751c762fee1f71a65468e5068ffcac9502b706d1519c65300097051b5b26122cc9824ef3447620e012c545f9723d45d945d4f9537c1491adeb7eb1a801d8943f3d4842fed2b16ffdf162fbcc21f7345765ada72abd5e6eb712889f98573c4b67e88685f070144be174a1b25e6b4894f7e2d5305f4d78a4415e84f6a58c2688a8053674aa67dc8f7542b1e49b8b075cea55cf6c03efff689e351daea67350ad9848fa13cf1faa53e22e78dff1755711d173f0b3e29d100f4f16031baf8ddddaeb316aaa32f313201b8ed1ad4bc7ee9e70c638a0dc23cbbbc5c54504df8d670d3a44de3559dbe8018181ae607446f664af16202f7f6199f979e42c2d34ca4e5b38b08c220ccf4aaba2c746950a1ca3ba296dba59fa04dc97c344348cd9cfd34829dad80b29c33c88b7d62cd8efb3e05878d8a33824a9ea6a2700fe79298fef26525c33a801ccc73fb0df744e114af17b2b0100f8ec6b800233fa4c04625bc5d8b9b1b42a93f1ba97535705f97f06784b3342185a8f9534b1ceabbb8f68b583f7a98249f276b37466251395c9d7fdd3387708de56b7b9b9010021150d158c5a9fb0b82a9e4ae2ecdae3784f8827004cf2898b17f4a6a3719057540f43e4b31bea03b02ef6afd0979504d8202e8fdbb9e5bb498f63b1a58f65becfa53002237806d6caad135096d228ff159af66c2c4d2b7044255a8a0ccddfbdb425e2d1190a0c5ff28b659a7b8249be1270bb4c2c01bdc1ddff3b9706769cf2a4600d39ae9177faac9f85e8540bb986be097f8b9c0fab4c427f1ec7bd646fcd86ddd416ba7f55e12ac5126449d32889a29bbe25657126dabaa6cb5f2e5e9faaa5b71a3ea08045e0377730d70bdd26669cdf52845ef85aeb70b8957c2056eaa7ea6c115495189514c5810baf05c614c483e1a501960b5d3d8e8b9d6e8b452251a3d54ddbb0821275cf4bcd296929b702632cd12f0cc0a2055e6f554b994193fd6c17d7df635bb4db00110874caff631509165dbf3d4803dcd8e07e442874d8e389ced5baa65451eaf1be39cb9e34f4a860a430cb1980525ca636b0f3400f606e0cc43169ccc9e5646a67f47a2460b00e26841758282aeb8050b66e02aa7ad16fc13e10392a06fcef2c88323eaa36822bd441abc5184d023e334d7ba9a41fc17edbb2e8fcf2a939f01a77c8eaafcef5e16be7522b1d1f2e6c014a34840e434d1ca5dfd07873b0a9d756dca38aa9da0156e14ab126d26ab9b3aa817135b393a07a9b29a91267a72225b38be258b8b90ec0c4b35bd534fd916db80db5b5897fed15c30d0b34e0cc5db971269d5a35bb05f1c5f1e688dd2bbd1386b83828a97b6db15e779f2ce4d58a53c978f3470630a4faf35586ee47ae9ef6f36aa0adb97cbe0ec0987f133324f19616cb5731b88ea9f", 0xf86}], 0x2}, 0x10) 7.908256607s ago: executing program 0 (id=2377): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16, @ANYBLOB="050000000000000000", @ANYRES32=r2, @ANYBLOB="080005000346cf"], 0x24}}, 0x0) bind$can_j1939(0xffffffffffffffff, &(0x7f0000000100)={0x1d, 0x0, 0x0, {0x0, 0x0, 0x4}, 0x1}, 0x18) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000100)=ANY=[@ANYRES8, @ANYRES32, @ANYBLOB="0000000000000000400012800c0001"], 0x68}}, 0x82) r3 = socket$igmp6(0xa, 0x3, 0x2) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r3, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00'}) write$tun(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="06000000bbbbbbbbbbbbaaaaaaaaaabb88f5"], 0xfdef) 6.821408914s ago: executing program 0 (id=2381): r0 = syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301) r1 = socket$l2tp(0x2, 0x2, 0x73) r2 = memfd_create(&(0x7f00000000c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x0) write$binfmt_script(r2, &(0x7f00000001c0)={'#! ', './file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0'}, 0x1002) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) execveat(r2, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) sendmmsg(r1, &(0x7f000000dd80)=[{{&(0x7f00000000c0)=@in={0x2, 0x4e22, @remote}, 0x80, &(0x7f0000000400)=[{0x0}, {&(0x7f0000000200)="97ff", 0x2}], 0x2}}], 0x1, 0x0) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_SETCONFIGURATION(r0, 0x80045505, &(0x7f0000000000)=0x1) 5.628708492s ago: executing program 0 (id=2385): bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$exfat(&(0x7f0000000000), &(0x7f0000000140)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0xa1080a, &(0x7f0000000300)=ANY=[], 0x21, 0x150d, &(0x7f0000001f80)="$eJzs3AvUTdX6MPDnmXMuXpJ2ksvLfOaz2OnFJElySZJLkiRHktwSkiRJksr9loQk5J7kHpJbSO73W+5JcqQ3SUJCkvkN5zinOud8X//z/5//MMb3Pr8x1tjz2Ws/c8+5nne8a821x97fdhxctX61SnWZGf5H8K8P3QAgBQD6AcA1ABABQKkcpXJc2p9FY7f/2ZuI/6wHp13pEYgrSeqfsUn9Mzapf8Ym9c/YpP4Zm9Q/Y5P6Z2xSfyEysm3T814rW8bd5P5/Ribn//+PpBcb8+WGYtd3+jdSpP4Zm9Q/Y5P6Z2xS/4wp0+VHqX/GJvXP2KT+GZvUX4iM7L9/7/jfzTUAcOXvd8v2++1K//0JIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhMgYzoVfGQD4W/tKj0sIIYQQQgghhBD/OSHzlR6BEEIIIYQQQggh/vchKNBgIIJMkBlSIAtkhasgG1wN2eEaSMC1kAOug5xwPeSC3JAH8kIq5IP8YIHAAUMMBaAgJOEGKAQ3QhoUhiJQFDwUg+JwE5SAm6Ek3AKl4FYoDbdBGSgL5aA83A4V4A6oCHdCJbgLKkMVqArV4G6oDvdADbgXasJ9UAvuh9rwANSBP0FdeBDqwUNQHx6GBvAINIRG0BiaQNP/Vv6L8BK8DF2gK3SD7tADekIv6A19oC/0g1egP6RcPjaDYDC8DkPgDRgKb8IwGA4j4C0YCaNgNIyBsTAOxsPbMAHegYnwLkyCyTAFpsI0mA4z4D2YCbNgNrwPc+ADmAvzYD4sgIXwISyCxbAEPoKl8DEsg+WwAlbCKlgNa2AtrIP1sAE2wibYDFtgK2yDT2A77ICdsAt2wx7YC5/CPvgM9sPncAC++Dfzz/5DficEBFSo0KDBTJgJUzAFs2JWzIbZMDtmxwQmMAfmwJyYE3NhrhvzYB5MxVTMj/mRkJCRsQAWwCQmsRAWwjRMwyJYBD16LI7FsQTejCWxJJbCUlgaS2MZLItlsTyWxwpYAStiRayElbAyVsaqWBXvxrvxHqyBNbAm1sRaWAtrY21Mz1cH62JdrIf1sD7WxwbYABtiQ2yMjbEpNsVm2AybY3NsiS2xFbbC1tga22AbbIttsR22w/bYHjtgB+yIHbETvoAv4Iv4Ir6ML2NXrKy6Yw/sgb2wF/bBvtgXX8H++Cq+iq/hQByEg/F1fB3fwKF4BofhcByBI7CCGoWjcQyyGofjcTxOwAk4ESfiJJyMk3EqTsPpOANn4EychbPwfZyDH+AHOA/n4QJciAtxES7GJbgEl+JZXIbLcQWuxFW4GlfhWlyHa3EDbsQNuBk341bcip/gJ7gDd+Au3IV70ADgp/gZfoYD8QAewIN4EA/hITyMhzEd0/EIHsGjeBSP4TE8jsfxBJ7EU3gST+NpPINn8Ryew/N4Hi/gc6lf19tTeP1AUJcYZVQmlUmlqBSVVWVV2VQ2lV1lVwmVUDlUDpVT5VS5VC6VR+VRqSpV5Vc/KVKkWMWqgCqgkiqpCqlCKk2lqSKqiPLKq+KquCqhSqiSqqQqpW5VpdVtqowqq1r48qq8qqBa+orqTlVJVVKVVRVVVVVT1VR1VV3VUDVUTVVT1VK1VG31gKqjumMffFBdqkx9NQgbqMHYUDVSjVUT9QY+qpqpodhctVAt1eNqOA7D1qqZb6OeUm3VaGynnlFj8FnVQY3Djup51Um9oDqrF9VLqrnvorqqSdhd9VBTsZfqrfqovmomVlGXKlZVvaYGqkFqsHpdLcA31FD1phqmhqsR6i01Uo1So9UYNVaNU+PV22qCekdNVO+qSWqymqKmqmlqupqh3lMz1Sw1W72v5qgP1Fw1T81XC9RC9aFapBarJeojtVR9rJap5WqFWqlWqdVqjVqr1qn1aoPaqDapzWqL2qq2qU/UdrVD7VS71G61R+1Vn6p96jO1X32uDqgv1EH1Z3VIfakOq69UuvpaHVHfqKPqW3VMfaeOq+/VCXVSnVI/qNPqR3VGnVXn1E/qvPpZXVC/qIsqKNColdba6Ehn0pl1is6is+qrdDZ9tc6ur9EJfa3Ooa/TOfX1OpfOrfPovDpV59P5tdWknWYd6wK6oE7qG3QhfaNO04V1EV1Ue11MF9c36RL6Zl1S36JL6Vt1aX2bLqPL6nK6vL5dV9B36Ir6Tl1J36Ur6yq6qq6m79bV9T26hr5X19T36Vr6fl1bP6Dr6D/puvpBXU8/pOvrh3UD/YhuqBvpxrqJbqof1c30Y7q5bqFb6sd1K/2Ebq2f1G30U7qtflq308/o9vpZ3UE/pzvq53Un/YLurH/RF3XQXXRX3U131z10T91L99Z9dF/dT7+i++tX9QD9mh6oB+nB+nU9RL+hh+o39TA9XI/Qb+mRepQercfosXqcHq/f1hP0O3qifldP0pP1FD1VT9PTdZ/LPc3+L+S/8y/yB2QGAL1Vb9Of6O16h96pd+ndeo/eq/fqfXqf3q/36wP6gD6oD+pD+pA+rA/rdJ2uj+gj+qg+qo/pY/q4Pq5P6JP6J/2DPq1/1Gf0WXX5xKYvXD4GYNAoo40xkclkMpsUk8VkNVeZbOZqk91cYxLmWpPDXGdymutNLpPb5DF5TarJZ/Iba8g4wyY2BUxBkzQ34OW+TRFT1HhTzBQ3N/07+aaQudGkmcK/y/+j8TU1TU0z08w0N81NS9PStDKtTGvT2rQxbUxb09a0M+1Me9PedDAdTEfT0XQynUxn09m8ZF4yXUwX0810Mz1MT9PL9DZ9TF/Tz7xi+pv+ZoAZYAaagWawGWyGmCFmqBlqhplhZoQZYUaakWa0GW3GmrFmvBlvJpgJZqKZaCaZSWaKmWKmmWlmhplhZpqZZraZbeaYOWaumWvmm/lmoVloFplFZolZYpaapWaZWW6Wm5VmpVltVpu1Zq1Zb9abjWaj2Ww2m2WZt5ltZrvZbnaanWa32W32mr1mn9ln9pv95oA5YA6ag+aQOWQOm8Mm3aSbI+aIOWqOmmPmmDlujpsT5oQ5ZU6Z0+a0OWPOmHPmnDlvzpsL5oK5aC5euuyLVKQiE5koU5QpSolSoqxR1ihblC3KHmWPElEiyhHliHJG10e5otxRnihvlBrli/JHNqLIRRzFUYGoYJSMbogKRTdGaVHhqEhUNPJRsah4dFNUIro5KhndEpWKbo1KR7dFZaKyUbmofHR7VCG6I6oY3RlViu6KKkdVoqpRtejuqHp0T1QjujeqGd0X1Yruj2pHD0R1oj9FdaMHo3rRQ1H96OGoQfRI1DBqFDWOmkRN/6P9h3Am92O+i+1qu9nutoftaXvZ3raP7Wv72Vdsf/uqHWBfswPtIDvYvm6H2DfsUPumHWaH2xH2LTvSjrKj7Rg71o6z4+3bdoJ9x06079pJdrKdYqfaaXa6nWHfszPtLDvbvm/n2A/sXDvPzrcL7EL7oV1kF9sl9iO71H5sl9nldoVdaVfZ1XaNXWvX2fV2g91oN9nNdovdarfZT+x2u8PutLvsbrvH7rWf2n32M7vffm4P2C/sQftne8h+aQ/br2y6/doesd/Yo/Zbe8x+Z4/b7+0Je9Kesj/Y0/ZHe8aetefsT/a8/dlesL/YizZcuri/dHonQ4YyUSZKoRTKSlkpG2Wj7JSdEpSgHJSDclJOykW5KA/loVRKpfyUny5hYipABShJSSpEhSiN0qgIFSFPnopTcSpBJagklaRSVIpKU2kqQ2WoHJWj2+l2uoPuoDvpTrqL7qIqVIWqUTWqTtWpBtWgmlSTalEtqk21qQ7VobpUl+pRPapP9akBNaCG1JAaU2NqSk2pGTWj5tScWlJLakWtqDW1pjbUhtpSW2pH7ag9tacO1IE6UkfqRJ2oM3Wml+gl6kJdqBt1ox7Ug3pRL+pDfagf9aP+1J8G0AAaSANpMA2mITSEhtJQGkbDaQS9RSNpFI2mMTSWxtF4Gk8TaAJNpIk0iSbRFJpC02gazaAZNJNm0myaTXNoDs2luTSf5tNCWkiLaBEtoSW0lJbSMlpGK2gFraJVtIbW0DpaRxtoA22iTbSFttA22kbbaTvtpJ20m3bTXtpL+2gf7af9dIAO0EE6SIfoEB2mw5RO6XSEjtBROkrH6Bgdp+N0gk7QKTpFp+k0naEzdI7O0Xn6mS7QL3SRAqW4LC6ru8plc1e77O4a949xHpfXpbp8Lr+zLpfL/buYnHNprrAr4oo674q54u4ml3ZpSfWbuIwr68q58u52V8Hd4Sr+U1zd3eNquHtdTXefq+bu/l1cy93varuHXR33iKvrGrl6romr7x52DdwjrqFr5Bq7Jq6Ve8K1dk+6Nu4p19Y9Hf1D7Ba5xW6dW+82uI1un/vMnXM/uaPuW3fe/ey6uK6un3vF9XevugHuNTfQDfqneIR7y410o9xoN8aNdeP+KZ7iprppbrqb4d5zM92sf4oXug/dHLfEzXXz3Hy34C/xpTEtcR+5pe5jt8wtdyvcSrfKrXZr3Nq/j3Wl2+y2uK1ur/vUbXc73E63y+12e/4SX5rHfve5O+C+cEfcN+6Q+9Iddsdcuvv6L/Gl+R1z37nj7nt3wp10p9wP7rT70Z1xZ/8y/0tz/8H94i664ICRFWs2HHEmzswpnIWz8lWcja/m7HwNJ/hazsHXcU6+nnNxbs7DeTmV83F+tkzsmDnmAlyQk3wDF+IbOY0LcxEuyp6LcXG+iUvwzVySb+FSfCuX5tu4DJflclyeb+cKfAdX5Du5Et/FlbkKV+VqfDdX53u4Bt/LNfk+rsX3c21+gOvwn7guP8j1+CGuzw9zA36EG3IjbsxNuCk/ys34MW7OLbglP86t+AluzU9yG36K2/LT3I6f4fb8LHfg57gjP8+d+AXuzC/yS/wyd+Gu3I27cw/uyb24N/fhvtyPX+H+/CoP4Nd4IA/iwfw6D+E3eCi/ycN4OI/gt3gkj+LRPIbH8jgez2/zBH6HJ/K7PIkn8xSeytN4Os/g93gmz+LZ/D7P4Q94Ls/j+byAF/KHvIgX8xL+iJfyx7yMl/MKXsmreDWv4bW8jtfzBt7Im3gzb+GtvI0/4e28g3fyLt7Ne3gvf8r7+DPez5/zAf6CD/Kf+RB/yYf5K07nr/kIf8NH+Vs+xt/xcf6eT/BJPsU/8Gn+kc/wWT7HP/F5/pkv8C98kQNDjLGKdWziKM4UZ45T4ixx1viqOFt8dZw9viZOxNfGOeLr4pzx9XGuOHecJ84bp8b54vyxjSl2McdxXCAuGCfjG+JC8Y1xWlw4LhIXjX1cLC4e3xSXiG+OS8a3xKXiW+PS8W1xmbhs/PB95ePb4wrxHXHF+M64UnxXXDmuEleNq8V3x9Xje+Ia8b1xzfi+uGR8f1w7fiCGy99XqRc/FNePH44bxI/EDeNGceO4Sdw0fjRuFj8WN49bxC3jx+NW8RNx6/jJuE38VNw2fvoP93eLu8c94p5xzziEe/X85ILkwuSHyUXJxcklyY+SS5MfJ5cllydXJFcmVyVXJ9ck1ybXJdcnNyQ3JjclNye3JLcmQ6iWGTx65bU3PvKZfGaf4rP4rP4qn81f7bP7a3zCX+tz+Ot8Tn+9z+Vz+zw+r0/1+Xx+bz1559nHvoAv6JP+Bl/I3+jTfGFfxBf13hfzxX0T39Q39c38Y765b+Fb+sf94/4J/4R/0j/pn/Jt/dO+nX/Gt/fP+g7+Of+cf9538i/4zv5F/5J/2XfxXX0338338D18L9/L9/F9fD/fz/f3/f0AP8AP9AP9YD/YD/FD/FA/1A/zw/wIP8KP9CP9aD/aj/Vj/Xg/3k/wE/xEP9FP8pP8FD/FT/PT/Aw/w8/0M/1sP9vPSZvj5/q5fr6f7xf6hX6RX+SX+CV+qV/ql/llfoVf4Vf5VX6NX+PX+XV+g9/gN/lNfovf4rf5bX673+53+p1+t9/t9/q9fp/f5/f7/f6AP+AP+oP+kD/kD/uvfLr/2h/x3/ij/lt/zH/nj/vv/Ql/0p/yP/jT/kd/xp/15/xP/rz/2V/wv/iLPvjxibcTExLvJCYm3k1MSkxOTElMTUxLTE/MSLyXmJmYlZideD8xJ/FBYm5iXmJ+YkFiYeLDxKLE4sSSxEeJpYmPE8sSyxMrEisTqxKrEyHk2x6HAqFgSIYbQqFwY0gLhUORUDT4UCwUDzeFEuHmUDLcEkqFW0PpcFsoE8qGcuGR0DA0Co1Dk9A0PBqahcdC89AitAyPh1bhidA6PBnahKdC2/B0aBeeCe3Ds6FDeC50DM+HTn9bcYWXQ5fQNXQL3UOP0DP0Cr1Dn9A39AuvhP7h1TAgvBYGhkFhcHg9DAlvhKHhzTAsDA8jwlthZBgVRocxYWwYF8aHt8OE8E6YGN4Nk8LkMCVMDdPC9DAjvBdmhllhdng/zAkfhLlhXpgfFoSF4cOwKCwOS8JHYWn4OCwLy8OKsDKsCqvDmrA2rAvrw4awMWwKm8OWsDVsC5+E7WFH2Bl2hd1hT9gbPg37wmdhf/g8HAhfhIPhz+FQ+DIcDl+F9PB1OBK+CUfDt+FY+C4cD9+HE+FkOBV+CKfDj+FMOBvOhZ/C+fBzuBB+CRflO2tCCCGEEP8lPf9gf/d/8ZwBgL99kNADAK7ekTf9t/s1AGzK9dd2b5XaKgEAT3Xt+ODftsqVu3Xrdvm1yzREBecBQOIf3uByvBxawhPQBlpAiX85vt7qhfP8B/0nbwXI+pucFPg1/nv/+K/n31s9+viIRaXjczn+H/3PA0gr+GtOFvg1Xg4tL80GWkDJ/0v/uZv9wfizfDkeoPlvcrLBr/Gvx6c4PAZPQ5vfvVIIIYQQQgghhPir3qpc+z9aP19an6cC/H2FnBkAUs1f23+0PhdCCCGEEEIIIcSV9+wLnZ98tE2bFu2lIQ1pSOPvjSv9n0kIIYQQQgjxn/brRf+vz2W5kgMSQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCEyoN/86FcWAPhf+TmxKz1HIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQ4kr7PwEAAP//lOcr+A==") sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000340)={0x0}}, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000005c0)='smaps_rollup\x00') bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xe, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x28031, 0xffffffffffffffff, 0x8000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) timer_create(0x2, 0x0, 0x0) lseek(r0, 0x2000, 0x0) 4.946923473s ago: executing program 3 (id=2387): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000400)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$sysctl(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000096c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001080)=@newtaction={0x7c, 0x30, 0x9, 0x0, 0x0, {}, [{0x68, 0x1, [@m_vlan={0x64, 0x1, 0x0, 0x0, {{0x9}, {0x38, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{}, 0x3}}, @TCA_VLAN_PUSH_VLAN_ID={0x6}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x5}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x8100}]}, {0xfffffffffffffeb7}, {0xc}, {0xc}}}]}]}, 0x7c}}, 0x0) 4.670854388s ago: executing program 1 (id=2388): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x32}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)=ANY=[@ANYBLOB="3800000010000507000000000004000000000000", @ANYRES32=r3, @ANYBLOB="0000000a010000001800120008000100736974000c0002000800030036"], 0x38}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000880)=ANY=[@ANYBLOB="50000000100039042cbd7000eaffffff000003e4", @ANYRES32=r4], 0x50}, 0x1, 0x0, 0x0, 0x8000}, 0x4008040) 3.760239912s ago: executing program 3 (id=2389): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16, @ANYBLOB="050000000000000000", @ANYRES32=r2, @ANYBLOB="080005000346cf"], 0x24}}, 0x0) bind$can_j1939(0xffffffffffffffff, &(0x7f0000000100)={0x1d, 0x0, 0x0, {0x0, 0x0, 0x4}, 0x1}, 0x18) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000100)=ANY=[@ANYRES8, @ANYRES32, @ANYBLOB="0000000000000000400012800c0001"], 0x68}}, 0x82) r3 = socket$igmp6(0xa, 0x3, 0x2) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r3, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00'}) write$tun(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="06000000bbbbbbbbbbbbaaaaaaaaaabb88f5"], 0xfdef) 3.691549763s ago: executing program 1 (id=2390): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r2, &(0x7f0000001980)={0x0, 0x0, &(0x7f0000001940)={0x0, 0x20}, 0x1, 0x0, 0x0, 0xc001}, 0x4000000) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000600)=ANY=[@ANYBLOB="5400000010001ffffcffffff000000000000", @ANYRES32=0x0, @ANYBLOB="00000000810404002c0012800b00010067726574617000001c00028006000e000300000006000f000700000008000700e000000208000a00", @ANYRES32=r3], 0x54}}, 0x0) 3.396360647s ago: executing program 1 (id=2391): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20, @local}, 0x10) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x14, 0x0, 0x701, 0x70bd2b, 0xa5dfdbff, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x2000c810}, 0x4000) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f00000039c0)=ANY=[@ANYBLOB="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"], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0xb7, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = socket$kcm(0x29, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000180)={r0, r1}) sendmsg$rds(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000002800)=[{&(0x7f0000002980)=""/4112, 0x1010}], 0x1}, 0x0) write(r2, 0x0, 0x0) recvmmsg(r2, &(0x7f00000006c0)=[{{0x0, 0xffffffffffffff0e, 0x0}, 0x45}], 0x52a, 0x40002000, 0x0) 3.046859822s ago: executing program 3 (id=2392): r0 = syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301) r1 = socket$l2tp(0x2, 0x2, 0x73) r2 = memfd_create(&(0x7f00000000c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x0) write$binfmt_script(r2, &(0x7f00000001c0)={'#! ', './file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0'}, 0x1002) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) execveat(r2, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) sendmmsg(r1, &(0x7f000000dd80)=[{{&(0x7f00000000c0)=@in={0x2, 0x4e22, @remote}, 0x80, &(0x7f0000000400)=[{0x0}, {&(0x7f0000000200)="97ff", 0x2}], 0x2}}], 0x1, 0x0) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_SETCONFIGURATION(r0, 0x80045505, &(0x7f0000000000)=0x1) 2.318086773s ago: executing program 1 (id=2393): r0 = syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301) r1 = socket$l2tp(0x2, 0x2, 0x73) r2 = memfd_create(&(0x7f00000000c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x0) write$binfmt_script(r2, &(0x7f00000001c0)={'#! ', './file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0'}, 0x1002) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) execveat(r2, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) sendmmsg(r1, &(0x7f000000dd80)=[{{&(0x7f00000000c0)=@in={0x2, 0x4e22, @remote}, 0x80, &(0x7f0000000400)=[{0x0}, {&(0x7f0000000200)="97ff", 0x2}], 0x2}}], 0x1, 0x0) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_SETCONFIGURATION(r0, 0x80045505, &(0x7f0000000000)=0x1) 1.984387019s ago: executing program 3 (id=2394): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_tcp_buf(r1, 0x6, 0x21, 0x0, &(0x7f0000000100)) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000e40), 0xffffffffffffffff) sendmsg$TIPC_NL_NET_GET(r2, &(0x7f00000060c0)={0x0, 0x0, &(0x7f0000006080)={&(0x7f0000000740)=ANY=[@ANYBLOB="0800013a3ba838171b9c2d28dc0f3735b7f37d9a455a23a3fd156709cb29cf9132068356b4e8eb1816eb910ba0b853c1c8387f97538c32fa9ec72cb255be52f306141203102873cccb5af981a9b4da40572b598df2503cecdf69170431e7802eecba73", @ANYRES16=r3, @ANYBLOB="f7ff2cbd7000fcdbdf250e000000"], 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x800) sendmsg$TIPC_NL_MEDIA_GET(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000440)={0x280, r3, 0x1, 0x70bd27, 0x25dfdbfd, {}, [@TIPC_NLA_LINK={0x14, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x4}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}]}]}, @TIPC_NLA_SOCK={0x70, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0xd987}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x2419}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xfffffff4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x4005}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x6}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}]}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x3ff}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x40}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1e}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8}]}, @TIPC_NLA_PUBL={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x1}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x4}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x6}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x6}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xffff}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xe5f}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x6}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x3c}]}, @TIPC_NLA_LINK={0x4c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4db}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_NET={0x20, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x1}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x80000001}]}, @TIPC_NLA_MEDIA={0xf8, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}]}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7fff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xdd}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x715}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x40}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xe}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x40}]}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5865781d}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3ff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x200}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1fd9e00}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xc6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffe}]}]}, @TIPC_NLA_NET={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x2}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x7}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xe5f38bc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x100}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x3}]}, @TIPC_NLA_NET={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x3ff}]}]}, 0x280}, 0x1, 0x0, 0x0, 0x4008004}, 0x40050) io_setup(0x8, &(0x7f00000002c0)) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0x8, 0x0, 0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x400, 0x0, 0x32}, 0x9c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x8a}, 0x9c) bind$inet6(r6, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r6, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, 0x0) sendmsg$NL80211_CMD_JOIN_IBSS(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x200000d0}, 0x0) shutdown(r6, 0x2) 699.443849ms ago: executing program 1 (id=2395): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000400)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r1) sendmsg$inet6(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000001240)=[{&(0x7f0000001c80)="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", 0xf87}], 0x1}, 0x10) 533.472901ms ago: executing program 3 (id=2396): syz_mount_image$erofs(&(0x7f0000000400), &(0x7f0000000140)='./file1\x00', 0x1000801, &(0x7f0000000840)=ANY=[], 0x2, 0x201, &(0x7f0000000d00)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_all\x00', 0x275a, 0x0) openat$cgroup_subtree(r0, 0x0, 0x2, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x400, 0x0) fadvise64(r1, 0xe0ffff, 0x4101, 0x3) 424.090093ms ago: executing program 1 (id=2397): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000180)={[{@errors_remount}, {@noacl}, {@mblk_io_submit}, {@minixdf}, {@nojournal_checksum}, {@usrjquota, 0x2e}], [], 0x2e}, 0x84, 0x450, &(0x7f0000000480)="$eJzs289vFFUcAPDvzLYgv2xF/MEPtYrGxh8tLagcvGg04WJiogc81lIIslBDayKESDUGj4a/QD2a+Bd40otRTxqvejcmxHARPZgxszsDS7tbd7tbtrCfTzLtezNv973vzLzdN/N2AhhYY/mfJGJ7RPwaESP17M0Fxur/rl29MPv31QuzSWTZG38mtXJ/Xb0wWxYtX7etyIynEenHSextUu/CufOnZqrVubNFfnLx9LuTC+fOP3vy9MyJuRNzZ6YPHz50cOqF56ef60mcO/K27vlgft/uI29dfm326OW3f/gqb+/2YntjHHWjXdc5FmM378sGT3T97hvLjoZ0MtTHhtCRSkTkh2u41v9HohI3Dt5IvPpRXxsHrKssy7LNK9ZWysRSBtzBkuh3C4D+KL/o8+vfcrmFw4++u/JS/QIoj/tasdS3DEValBledn3bS2MRcXTpn8/yJZrehwAA6K1v8vHPM83Gf2nc31Du7mJuaDQi7omInRFxb0Tsioj7ImplH4iIBzusf2xZfuX45+ctawqsTfn478Vibuvm8V85+ovRSpHbUYt/ODl+sjp3oNgn4zG8Oc9PrVLHt6/88mmrbY3jv3zJ6y/HgkU7/hhadoPu2MziTDcxN7ryYcSeoWbxJ9fnrvL/uyNizxreP99nJ5/6cl+r7f8f/yp6MM+UfRHxZP34L8Wy+EvJ6vOTk3dFde7AZHlWrPTjT5deb1V/V/H3QH78tzY9/6/HP5o0ztcudF7Hpd8+aXlNs9bzf1PyZi29qVj3/szi4tmpiE3J0sr10zdeW+bL8nn84/ub9/+dEf9+Xrxub0TkJ/FDEfFwRDxStP3RiHgsIvavEv/3Lz/+ztrjX195/Mc6Ov6dJyqnvvu6Vf3tHf9DtdR4saadz792G9jNvgMAAIDbRVr7DXySTlxPp+nERP03/Ltia1qdX1h8+vj8e2eO1X8rPxrDaXmna6ThfuhUcW+4zE8vyx+s3TfOsizbUstPzM5X12tOHWjPthb9P/d7pd+tA9ZdR/NorZ5oA25LnteEwaX/w+DS/2Fw6f8wuJr1/4sR1/rQFOAW8/0Pg0v/h8Gl/8Pg0v9hIHXzXP9qiZ1H1uud77REZWM0o+NEpBuiGWtLpBujGfXE5ohot/DFuFUN6/cnEwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQG/8FwAA//8Hl+jb") r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x482, 0x0) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000000)={0xfffffffc, 0xb, 0x0, 0xfffffffc, 0x7f, "db8f2d2b3b7596160c6981acf8805944823a7f"}) write$binfmt_aout(r0, &(0x7f00000003c0)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)={0x0, 0x40000000, 0x0, 0x0, 0x83, "00000000000000000000ffff00"}) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000080)={0x0, 0xfffffffd, 0x0, 0x6, 0x1, "e315bc1cc24ff7b7cdb242e1ff0aa6905446b3"}) r1 = syz_open_pts(r0, 0x0) r2 = dup3(r1, r0, 0x0) read$FUSE(r2, &(0x7f0000003f80)={0x2020}, 0x2020) read$usbmon(r2, &(0x7f0000000340)=""/126, 0x7e) 0s ago: executing program 3 (id=2398): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x32}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)=ANY=[@ANYBLOB="3800000010000507000000000004000000000000", @ANYRES32=r3, @ANYBLOB="0000000a010000001800120008000100736974000c0002000800030036"], 0x38}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000880)=ANY=[@ANYBLOB="50000000100039042cbd7000eaffffff000003e4", @ANYRES32=r4], 0x50}, 0x1, 0x0, 0x0, 0x8000}, 0x4008040) kernel console output (not intermixed with test programs): 1497] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 577.329843][T11497] veth0_vlan: entered promiscuous mode [ 577.360308][T11497] veth1_vlan: entered promiscuous mode [ 577.450569][T11497] veth0_macvtap: entered promiscuous mode [ 577.480837][T11497] veth1_macvtap: entered promiscuous mode [ 577.546242][T11497] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 577.605633][T11497] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 577.635559][T11497] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 577.667440][T11497] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 577.707347][T11497] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 577.737205][T11497] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 577.765728][T11497] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 577.835903][T11497] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 577.864586][T11497] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 577.877931][T11497] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 577.889906][T11497] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 577.902836][T11497] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 577.924711][T11497] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 577.939209][T11497] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 578.004809][T11497] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 578.023953][T11497] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 578.035746][T11720] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1746'. [ 578.047618][T11497] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 578.056405][T11497] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 578.274658][T11721] loop3: detected capacity change from 0 to 1024 [ 578.971105][ T6968] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 579.053367][ T6968] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 579.239604][ T7674] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 579.249132][ T7674] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 580.078839][T11761] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1757'. [ 580.091703][T11761] veth1_macvtap: left promiscuous mode [ 580.586979][T11773] loop3: detected capacity change from 0 to 1024 [ 581.329474][T11780] loop1: detected capacity change from 0 to 512 [ 581.342709][T11780] ext4: Unknown parameter 'smackfshat' [ 582.150754][T11787] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1764'. [ 582.624140][T11796] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1765'. [ 582.763647][ T59] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 582.914692][ T59] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 582.990819][ T59] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 583.073056][ T59] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 584.037465][ T5853] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 584.138277][T10827] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 584.151735][T10827] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 584.160818][T10827] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 584.175474][T10827] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 584.185190][T10827] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 584.194866][T10827] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 584.241526][ T5853] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 584.259184][ T5853] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 584.276564][ T5853] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 584.286479][ T5853] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 584.304327][ T5853] usb 4-1: SerialNumber: syz [ 584.524096][ T59] hsr_slave_0: left promiscuous mode [ 584.535467][ T5853] usb 4-1: 0:2 : does not exist [ 584.551485][ T5853] usb 4-1: unit 18 not found! [ 584.556554][ T59] hsr_slave_1: left promiscuous mode [ 584.570441][ T59] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 584.581650][ T59] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 584.593203][ T59] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 584.621750][ T59] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 584.642909][ T5853] usb 4-1: USB disconnect, device number 11 [ 584.715164][ T59] bridge_slave_1: left allmulticast mode [ 584.724053][ T59] bridge_slave_1: left promiscuous mode [ 584.746087][ T59] bridge0: port 2(bridge_slave_1) entered disabled state [ 584.877990][ T59] bridge_slave_0: left allmulticast mode [ 584.901516][ T5767] udevd[5767]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 584.917659][ T59] bridge_slave_0: left promiscuous mode [ 584.929894][ T59] bridge0: port 1(bridge_slave_0) entered disabled state [ 585.033088][ T59] veth1_macvtap: left promiscuous mode [ 585.042334][ T59] veth0_macvtap: left promiscuous mode [ 585.051012][ T59] veth1_vlan: left promiscuous mode [ 585.059271][ T59] veth0_vlan: left promiscuous mode [ 585.282677][T11836] loop0: detected capacity change from 0 to 1024 [ 585.423322][T11854] loop3: detected capacity change from 0 to 512 [ 585.454505][T11854] ext4: Unknown parameter 'smackfshat' [ 585.596835][ T7270] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 586.280737][T11504] Bluetooth: hci1: command tx timeout [ 586.961705][ T59] team0 (unregistering): Port device team_slave_1 removed [ 587.035978][ T59] team0 (unregistering): Port device team_slave_0 removed [ 587.095334][ T59] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 587.162589][ T59] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 587.841805][ T59] bond0 (unregistering): Released all slaves [ 587.985273][T11870] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1777'. [ 587.995923][T11844] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1772'. [ 588.033374][T11844] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1772'. [ 588.296301][T11833] chnl_net:caif_netlink_parms(): no params data found [ 588.332785][T11879] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1778'. [ 588.365154][T11504] Bluetooth: hci1: command tx timeout [ 589.605352][T11833] bridge0: port 1(bridge_slave_0) entered blocking state [ 589.638452][T11833] bridge0: port 1(bridge_slave_0) entered disabled state [ 589.645787][T11833] bridge_slave_0: entered allmulticast mode [ 589.674994][T11900] loop1: detected capacity change from 0 to 512 [ 589.688388][T11900] ext4: Unknown parameter 'smackfshat' [ 589.698912][T11833] bridge_slave_0: entered promiscuous mode [ 589.718196][T11833] bridge0: port 2(bridge_slave_1) entered blocking state [ 589.740047][T11833] bridge0: port 2(bridge_slave_1) entered disabled state [ 589.753609][T11833] bridge_slave_1: entered allmulticast mode [ 589.771878][T11833] bridge_slave_1: entered promiscuous mode [ 590.446009][T11504] Bluetooth: hci1: command tx timeout [ 590.620427][T11833] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 590.692380][T11833] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 590.850365][T11833] team0: Port device team_slave_0 added [ 590.909929][T11833] team0: Port device team_slave_1 added [ 591.011845][T11833] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 591.038120][T11833] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 591.115919][T11833] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 591.142458][T11925] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1788'. [ 591.215272][T11833] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 591.237318][T11833] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 591.300870][T11833] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 591.494049][T11942] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1791'. [ 591.518563][T11833] hsr_slave_0: entered promiscuous mode [ 591.552083][T11833] hsr_slave_1: entered promiscuous mode [ 591.949519][T11958] loop3: detected capacity change from 0 to 512 [ 591.965381][T11958] ext4: Unknown parameter 'smackfshat' [ 592.525524][T11504] Bluetooth: hci1: command tx timeout [ 593.345249][T11833] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 593.363237][T11833] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 593.375586][T11833] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 593.391379][T11833] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 593.715656][T11833] 8021q: adding VLAN 0 to HW filter on device bond0 [ 593.791237][T11833] 8021q: adding VLAN 0 to HW filter on device team0 [ 593.812749][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 593.820115][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 593.875796][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 593.883142][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 594.564712][T11833] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 594.720942][T11833] veth0_vlan: entered promiscuous mode [ 594.748865][T11833] veth1_vlan: entered promiscuous mode [ 594.827421][T11833] veth0_macvtap: entered promiscuous mode [ 594.847184][T11833] veth1_macvtap: entered promiscuous mode [ 594.888614][T11833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 594.910640][T11833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 594.921836][T11833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 594.934594][T11833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 594.963809][T11833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 594.976035][T11833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 594.990003][T11833] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 595.020793][T11833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 595.036856][T11833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 595.048733][T11833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 595.069544][T11833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 595.095299][T11833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 595.116676][T11833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 595.141848][T11833] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 595.179042][T11833] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 595.207168][T11833] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 595.250130][T11833] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 595.273441][T11833] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 595.406035][T12042] loop1: detected capacity change from 0 to 512 [ 595.477898][T12042] ext4: Unknown parameter 'smackfshat' [ 595.558776][T12045] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1808'. [ 595.571827][ T1144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 595.590407][ T1144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 595.724504][T12045] netlink: 'syz.3.1808': attribute type 5 has an invalid length. [ 595.753942][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 595.774633][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 598.119862][T12108] loop3: detected capacity change from 0 to 512 [ 598.128149][T12108] ext4: Unknown parameter 'smackfshat' [ 599.054086][T12120] loop1: detected capacity change from 0 to 512 [ 599.102795][ T6968] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 599.119620][T12120] EXT4-fs: Ignoring removed nobh option [ 599.191407][T12120] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 599.471112][T12120] EXT4-fs (loop1): failed to open journal device unknown-block(0,0) -6 [ 599.661202][ T6968] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 599.739214][ T6968] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 599.834770][ T6968] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 600.736340][T12163] bond0: entered allmulticast mode [ 601.210595][T10827] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 601.221160][T10827] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 601.232677][T10827] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 601.244791][T10827] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 601.254960][T10827] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 601.268807][T10827] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 601.318647][T12183] loop1: detected capacity change from 0 to 512 [ 601.326091][T12183] ext4: Unknown parameter 'smackfshat' [ 601.453530][ T7270] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 602.527885][ T6968] hsr_slave_0: left promiscuous mode [ 602.650840][ T6968] hsr_slave_1: left promiscuous mode [ 602.805722][ T6968] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 602.828966][ T6968] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 602.868353][ T6968] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 602.883465][ T6968] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 602.948421][ T6968] bridge_slave_1: left allmulticast mode [ 602.954200][ T6968] bridge_slave_1: left promiscuous mode [ 602.969863][ T6968] bridge0: port 2(bridge_slave_1) entered disabled state [ 602.986802][ T6968] bridge_slave_0: left allmulticast mode [ 602.993264][ T6968] bridge_slave_0: left promiscuous mode [ 603.004483][ T6968] bridge0: port 1(bridge_slave_0) entered disabled state [ 603.051808][ T6968] veth1_macvtap: left promiscuous mode [ 603.053163][T12206] loop1: detected capacity change from 0 to 32768 [ 603.059250][ T6968] veth0_macvtap: left promiscuous mode [ 603.114133][ T6968] veth1_vlan: left promiscuous mode [ 603.153295][ T6968] veth0_vlan: left promiscuous mode [ 603.166128][T12206] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 603.317667][T11504] Bluetooth: hci1: command tx timeout [ 603.365768][T12206] XFS (loop1): Ending clean mount [ 603.404448][T12206] XFS (loop1): Quotacheck needed: Please wait. [ 603.492943][T12206] XFS (loop1): Quotacheck: Done. [ 603.580472][ T5766] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 604.346287][T12225] loop1: detected capacity change from 0 to 32768 [ 604.470275][ T6968] team0 (unregistering): Port device team_slave_1 removed [ 604.607936][ T6968] team0 (unregistering): Port device team_slave_0 removed [ 604.848666][ T6968] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 605.698701][T11504] Bluetooth: hci1: command tx timeout [ 605.771162][ T6968] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 605.956774][T12236] loop1: detected capacity change from 0 to 512 [ 605.965583][T12236] ext4: Unknown parameter 'smackfshat' [ 607.210505][ T6968] bond0 (unregistering): Released all slaves [ 607.297044][T12233] netlink: 'syz.0.1849': attribute type 1 has an invalid length. [ 607.362833][T12233] 8021q: adding VLAN 0 to HW filter on device bond1 [ 607.674853][T12250] loop1: detected capacity change from 0 to 4096 [ 607.728595][T11504] Bluetooth: hci1: command tx timeout [ 607.788705][T12250] NILFS (loop1): invalid segment: Checksum error in segment payload [ 607.862633][T12250] NILFS (loop1): trying rollback from an earlier position [ 607.891215][T12178] chnl_net:caif_netlink_parms(): no params data found [ 608.051566][T12250] NILFS (loop1): recovery complete [ 608.085332][T12265] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 608.430941][T12178] bridge0: port 1(bridge_slave_0) entered blocking state [ 608.463356][T12178] bridge0: port 1(bridge_slave_0) entered disabled state [ 608.479140][T12178] bridge_slave_0: entered allmulticast mode [ 608.495335][T12178] bridge_slave_0: entered promiscuous mode [ 608.515749][T12178] bridge0: port 2(bridge_slave_1) entered blocking state [ 608.534381][T12178] bridge0: port 2(bridge_slave_1) entered disabled state [ 608.550181][T12178] bridge_slave_1: entered allmulticast mode [ 608.565957][T12178] bridge_slave_1: entered promiscuous mode [ 608.655203][T12178] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 608.690601][T12178] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 608.874897][T12178] team0: Port device team_slave_0 added [ 608.912213][T12178] team0: Port device team_slave_1 added [ 609.032223][T12178] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 609.040202][T12178] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 609.075824][T12178] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 609.094016][T12178] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 609.103408][T12178] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 609.130674][T12178] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 609.722994][T12178] hsr_slave_0: entered promiscuous mode [ 609.734678][T12178] hsr_slave_1: entered promiscuous mode [ 609.800258][T11504] Bluetooth: hci1: command tx timeout [ 610.248748][T12296] netlink: 'syz.3.1864': attribute type 1 has an invalid length. [ 610.374028][T12296] 8021q: adding VLAN 0 to HW filter on device bond4 [ 611.263419][T12332] loop0: detected capacity change from 0 to 512 [ 611.312852][T12332] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2244: inode #15: comm syz.0.1874: corrupted in-inode xattr: invalid ea_ino [ 611.331082][T12332] EXT4-fs error (device loop0): ext4_orphan_get:1404: comm syz.0.1874: couldn't read orphan inode 15 (err -117) [ 611.450990][T12332] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 611.470746][T12332] capability: warning: `syz.0.1874' uses 32-bit capabilities (legacy support in use) [ 611.550594][ T5773] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 611.737028][T12178] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 611.758352][T12178] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 611.815262][T12178] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 611.901764][T12178] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 612.253494][T12178] 8021q: adding VLAN 0 to HW filter on device bond0 [ 612.300664][T12178] 8021q: adding VLAN 0 to HW filter on device team0 [ 612.341413][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 612.348679][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 612.444038][ T6968] bridge0: port 2(bridge_slave_1) entered blocking state [ 612.451346][ T6968] bridge0: port 2(bridge_slave_1) entered forwarding state [ 613.070392][T12178] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 613.180178][T12178] veth0_vlan: entered promiscuous mode [ 613.213290][T12178] veth1_vlan: entered promiscuous mode [ 613.315913][T12178] veth0_macvtap: entered promiscuous mode [ 613.341460][T12178] veth1_macvtap: entered promiscuous mode [ 613.379435][T12178] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 613.395041][T12178] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 613.408882][T12178] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 613.425762][T12178] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 613.441275][T12178] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 613.457334][T12178] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 613.476605][T12178] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 613.507702][T12178] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 613.526102][T12178] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 613.538116][T12178] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 613.559508][T12178] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 613.583401][T12178] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 613.601365][T12178] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 613.638361][T12178] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 613.655121][T12178] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 613.675826][T12178] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 613.689756][T12178] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 613.726876][T12178] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 614.014000][ T6968] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 614.056164][ T6968] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 614.154757][ T1144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 614.172007][ T1144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 615.745508][T12438] loop1: detected capacity change from 0 to 8192 [ 615.965518][T12438] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 616.014474][T12438] REISERFS (device loop1): found reiserfs format "3.6" with non-standard journal [ 616.042676][T12438] REISERFS (device loop1): using ordered data mode [ 616.057269][T12438] reiserfs: using flush barriers [ 616.086090][T12438] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 616.160546][T12438] REISERFS (device loop1): checking transaction log (loop1) [ 616.395776][T12438] REISERFS (device loop1): Using tea hash to sort names [ 616.414638][T12438] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 616.723236][ T59] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 618.301376][ T59] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 618.443818][ T59] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 619.119322][ T59] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 619.307925][T10827] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 619.321548][T10827] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 619.331770][T10827] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 619.355813][T10827] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 619.373434][T10827] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 619.381144][T10827] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 619.570333][T12484] loop3: detected capacity change from 0 to 1024 [ 619.712342][T12484] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 619.802584][T12475] chnl_net:caif_netlink_parms(): no params data found [ 619.848826][T12484] overlay: ./file2 is not a directory [ 620.106100][ T5770] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 620.450709][T12475] bridge0: port 1(bridge_slave_0) entered blocking state [ 620.486069][T12475] bridge0: port 1(bridge_slave_0) entered disabled state [ 620.514203][T12475] bridge_slave_0: entered allmulticast mode [ 620.553841][T12475] bridge_slave_0: entered promiscuous mode [ 620.702390][T12475] bridge0: port 2(bridge_slave_1) entered blocking state [ 620.724059][T12475] bridge0: port 2(bridge_slave_1) entered disabled state [ 620.756425][T12475] bridge_slave_1: entered allmulticast mode [ 620.768523][T12475] bridge_slave_1: entered promiscuous mode [ 620.776078][T12509] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1915'. [ 620.795332][T12509] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1915'. [ 621.071873][T12475] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 621.199859][T12475] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 621.397872][T12475] team0: Port device team_slave_0 added [ 621.469388][T12475] team0: Port device team_slave_1 added [ 621.487304][T11504] Bluetooth: hci1: command tx timeout [ 621.755897][T12475] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 621.783314][T12475] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 621.853233][T12475] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 621.889259][T12475] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 621.911802][T12475] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 622.018174][T12475] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 623.014647][T12549] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1927'. [ 623.169057][T12549] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1927'. [ 623.203286][T12475] hsr_slave_0: entered promiscuous mode [ 623.213778][T12475] hsr_slave_1: entered promiscuous mode [ 623.224360][T12475] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 623.247970][T12475] Cannot create hsr debugfs directory [ 623.400860][ T59] hsr_slave_0: left promiscuous mode [ 623.413655][ T59] hsr_slave_1: left promiscuous mode [ 623.421739][ T59] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 623.434127][ T59] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 623.445450][ T59] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 623.460634][ T59] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 623.484733][ T59] bridge_slave_1: left allmulticast mode [ 623.494159][ T59] bridge_slave_1: left promiscuous mode [ 623.510406][ T59] bridge0: port 2(bridge_slave_1) entered disabled state [ 623.525750][ T59] bridge_slave_0: left allmulticast mode [ 623.534496][ T59] bridge_slave_0: left promiscuous mode [ 623.544851][ T59] bridge0: port 1(bridge_slave_0) entered disabled state [ 623.572851][T11504] Bluetooth: hci1: command tx timeout [ 623.613650][ T59] veth1_macvtap: left promiscuous mode [ 623.637333][ T59] veth0_macvtap: left promiscuous mode [ 623.643848][ T59] veth1_vlan: left promiscuous mode [ 623.651902][ T59] veth0_vlan: left promiscuous mode [ 623.915527][T12571] loop3: detected capacity change from 0 to 4096 [ 623.946865][T12571] NILFS (loop3): invalid segment: Checksum error in segment payload [ 623.968220][T12571] NILFS (loop3): trying rollback from an earlier position [ 623.990327][T12571] NILFS (loop3): recovery complete [ 624.030389][T12572] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 624.773015][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.780443][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.936850][ T59] team0 (unregistering): Port device team_slave_1 removed [ 625.052035][T12592] netlink: 'syz.1.1941': attribute type 11 has an invalid length. [ 625.061339][T12592] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1941'. [ 625.083139][ T59] team0 (unregistering): Port device team_slave_0 removed [ 625.146101][ T59] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 625.213714][ T59] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 625.639034][T11504] Bluetooth: hci1: command tx timeout [ 625.949255][ T59] bond0 (unregistering): Released all slaves [ 626.057683][T12590] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1940'. [ 626.506868][T12603] loop1: detected capacity change from 0 to 256 [ 626.677545][T12603] exFAT-fs (loop1): failed to load upcase table (idx : 0x00012153, chksum : 0x5270ca8d, utbl_chksum : 0xe619d30d) [ 627.776215][T11504] Bluetooth: hci1: command tx timeout [ 628.034546][ T788] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 628.427889][ T788] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 628.476260][ T788] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 628.536608][ T788] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 628.606701][ T788] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 628.648895][ T788] usb 4-1: SerialNumber: syz [ 628.904194][ T788] usb 4-1: 0:2 : does not exist [ 628.919835][ T788] usb 4-1: unit 5 not found! [ 628.965988][ T788] usb 4-1: USB disconnect, device number 12 [ 629.062644][ T5767] udevd[5767]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 629.216827][T12636] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1952'. [ 629.715783][T12475] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 629.774435][T12475] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 629.776969][T12652] loop1: detected capacity change from 0 to 256 [ 629.816091][T12652] exFAT-fs (loop1): failed to load upcase table (idx : 0x00012153, chksum : 0x5270ca8d, utbl_chksum : 0xe619d30d) [ 629.833600][T12475] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 629.871299][T12475] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 630.094582][T12655] loop3: detected capacity change from 0 to 4096 [ 630.870778][T12655] NILFS (loop3): invalid segment: Checksum error in segment payload [ 630.885418][T12475] 8021q: adding VLAN 0 to HW filter on device bond0 [ 631.077451][T12655] NILFS (loop3): trying rollback from an earlier position [ 631.129490][T12475] 8021q: adding VLAN 0 to HW filter on device team0 [ 631.145930][T12655] NILFS (loop3): recovery complete [ 631.240035][T12475] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 631.278190][T12671] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 631.324780][T12475] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 631.823062][ T34] bridge0: port 1(bridge_slave_0) entered blocking state [ 631.830452][ T34] bridge0: port 1(bridge_slave_0) entered forwarding state [ 632.149391][ T34] bridge0: port 2(bridge_slave_1) entered blocking state [ 632.156638][ T34] bridge0: port 2(bridge_slave_1) entered forwarding state [ 634.025596][T12475] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 634.233011][T12475] veth0_vlan: entered promiscuous mode [ 634.271196][T12475] veth1_vlan: entered promiscuous mode [ 634.368710][T12475] veth0_macvtap: entered promiscuous mode [ 634.428730][T12475] veth1_macvtap: entered promiscuous mode [ 634.484814][T12475] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 634.507170][T12475] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 634.543156][T12475] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 634.571210][T12475] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 634.584059][T12475] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 634.595312][T12475] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 634.612100][T12475] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 634.625345][T12475] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 634.644777][T12475] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 634.706463][T12475] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 634.731389][T12475] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 634.742935][T12475] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 634.798005][T12475] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 634.866030][T12475] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 637.063047][T12475] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 637.098382][T12475] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 637.117199][T12475] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 637.125992][T12475] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 637.418190][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 637.426191][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 637.498624][ T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 637.513936][T12720] loop1: detected capacity change from 0 to 1024 [ 637.533374][ T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 637.578259][T12720] EXT4-fs (loop1): Test dummy encryption mode enabled [ 637.585260][T12720] EXT4-fs (loop1): stripe (7) is not aligned with cluster size (16), stripe is disabled [ 637.647419][T12720] EXT4-fs (loop1): can't mount with data_err=abort, fs mounted w/o journal [ 643.555467][ T6968] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 643.990518][ T6968] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 644.165189][ T6968] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 644.349685][ T6968] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 644.513029][T11504] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 644.525864][T11504] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 644.547608][T11504] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 644.559551][T11504] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 644.567605][T11504] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 644.575169][T11504] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 645.146138][T12776] chnl_net:caif_netlink_parms(): no params data found [ 645.563328][T12808] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1986'. [ 645.680372][T10827] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 645.693928][T10827] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 645.703154][T10827] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 645.725040][T10827] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 645.733055][T10827] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 645.741573][T10827] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 645.819232][T12776] bridge0: port 1(bridge_slave_0) entered blocking state [ 645.826783][T12776] bridge0: port 1(bridge_slave_0) entered disabled state [ 645.836118][T12776] bridge_slave_0: entered allmulticast mode [ 645.845940][T12776] bridge_slave_0: entered promiscuous mode [ 645.896661][T12776] bridge0: port 2(bridge_slave_1) entered blocking state [ 645.905478][T12776] bridge0: port 2(bridge_slave_1) entered disabled state [ 645.935732][T12776] bridge_slave_1: entered allmulticast mode [ 645.960022][T12776] bridge_slave_1: entered promiscuous mode [ 646.301256][T12776] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 646.326977][T12776] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 646.769161][T10827] Bluetooth: hci1: command tx timeout [ 647.498431][T12776] team0: Port device team_slave_0 added [ 647.513640][T12776] team0: Port device team_slave_1 added [ 647.837306][T10827] Bluetooth: hci2: command tx timeout [ 647.922764][T12776] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 647.957619][T12776] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 648.266424][T12776] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 648.635822][T12776] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 648.657694][T12776] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 648.723515][T12776] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 648.795907][T12810] chnl_net:caif_netlink_parms(): no params data found [ 648.853838][T10827] Bluetooth: hci1: command tx timeout [ 648.857053][T12837] loop1: detected capacity change from 0 to 32768 [ 648.867018][T12837] XFS: noikeep mount option is deprecated. [ 648.887958][ T6968] hsr_slave_0: left promiscuous mode [ 648.895034][ T6968] hsr_slave_1: left promiscuous mode [ 648.902704][ T6968] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 648.911086][ T6968] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 648.919475][T12837] XFS (loop1): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 648.933249][ T6968] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 648.942083][ T6968] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 648.973617][ T6968] bridge_slave_1: left allmulticast mode [ 648.985382][T12837] XFS (loop1): Ending clean mount [ 648.995084][ T6968] bridge_slave_1: left promiscuous mode [ 649.002651][ T6968] bridge0: port 2(bridge_slave_1) entered disabled state [ 649.009803][T12837] XFS (loop1): Quotacheck needed: Please wait. [ 649.019899][ T6968] bridge_slave_0: left allmulticast mode [ 649.030842][ T6968] bridge_slave_0: left promiscuous mode [ 649.036960][ T6968] bridge0: port 1(bridge_slave_0) entered disabled state [ 649.081217][T12837] XFS (loop1): Quotacheck: Done. [ 649.112083][ T6968] veth1_macvtap: left promiscuous mode [ 649.123399][ T6968] veth0_macvtap: left promiscuous mode [ 649.129312][ T6968] veth1_vlan: left promiscuous mode [ 649.134734][ T6968] veth0_vlan: left promiscuous mode [ 649.211379][ T5766] XFS (loop1): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 649.880556][T10827] Bluetooth: hci2: command tx timeout [ 649.998244][ T6968] team0 (unregistering): Port device team_slave_1 removed [ 650.067385][ T6968] team0 (unregistering): Port device team_slave_0 removed [ 650.156704][ T6968] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 650.258652][ T6968] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 650.991500][T10827] Bluetooth: hci1: command tx timeout [ 651.852396][ T6968] bond0 (unregistering): Released all slaves [ 651.946635][T12870] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1997'. [ 651.957629][T10827] Bluetooth: hci2: command tx timeout [ 652.095881][T12776] hsr_slave_0: entered promiscuous mode [ 652.107609][T12776] hsr_slave_1: entered promiscuous mode [ 652.214611][T12810] bridge0: port 1(bridge_slave_0) entered blocking state [ 652.267552][T12810] bridge0: port 1(bridge_slave_0) entered disabled state [ 652.301874][T12810] bridge_slave_0: entered allmulticast mode [ 652.313209][T12810] bridge_slave_0: entered promiscuous mode [ 652.816947][T12810] bridge0: port 2(bridge_slave_1) entered blocking state [ 652.929333][T12810] bridge0: port 2(bridge_slave_1) entered disabled state [ 653.117234][T10827] Bluetooth: hci1: command tx timeout [ 653.137664][T12810] bridge_slave_1: entered allmulticast mode [ 653.176351][T12810] bridge_slave_1: entered promiscuous mode [ 654.047205][T10827] Bluetooth: hci2: command tx timeout [ 654.083111][T12810] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 654.153665][T12810] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 654.289805][T12810] team0: Port device team_slave_0 added [ 654.308110][T12810] team0: Port device team_slave_1 added [ 654.481180][T12810] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 654.501097][T12810] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 654.527131][ C0] vkms_vblank_simulate: vblank timer overrun [ 654.567317][T12810] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 654.596357][T12810] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 654.617144][T12810] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 654.643091][ C0] vkms_vblank_simulate: vblank timer overrun [ 654.667209][T12810] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 654.731749][T12899] loop1: detected capacity change from 0 to 32768 [ 654.753040][T12899] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 scanned by syz.1.2002 (12899) [ 654.800990][T12899] BTRFS info (device loop1): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 654.810887][T12776] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 654.813312][T12899] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 654.836352][T12899] BTRFS info (device loop1): setting nodatacow, compression disabled [ 654.848493][T12899] BTRFS info (device loop1): setting datacow [ 654.863674][T12899] BTRFS info (device loop1): doing ref verification [ 654.888448][T12899] BTRFS info (device loop1): force clearing of disk cache [ 654.903253][T12899] BTRFS info (device loop1): turning off barriers [ 654.911360][T12899] BTRFS info (device loop1): max_inline at 7 [ 654.924009][T12899] BTRFS info (device loop1): using free space tree [ 655.023521][T12776] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 655.116688][T12810] hsr_slave_0: entered promiscuous mode [ 655.135742][T12899] BTRFS info (device loop1): enabling ssd optimizations [ 655.143625][T12810] hsr_slave_1: entered promiscuous mode [ 655.159552][T12810] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 655.163203][T12899] BTRFS info (device loop1): rebuilding free space tree [ 655.167544][T12810] Cannot create hsr debugfs directory [ 655.310499][T12776] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 655.556033][T12776] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 655.854486][ T1144] tipc: Left network mode [ 655.894899][ T5766] BTRFS info (device loop1): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 656.422915][T12776] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 656.448609][T12776] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 656.585351][T12947] loop1: detected capacity change from 0 to 512 [ 656.603444][T12947] ext4: Unknown parameter 'smackfshat' [ 656.661483][T12776] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 657.238446][T12776] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 657.632211][T12961] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2007'. [ 657.651816][T12960] netlink: 'syz.1.2007': attribute type 1 has an invalid length. [ 657.688638][T12960] 8021q: adding VLAN 0 to HW filter on device bond2 [ 657.951548][T12776] 8021q: adding VLAN 0 to HW filter on device bond0 [ 658.142079][T12776] 8021q: adding VLAN 0 to HW filter on device team0 [ 658.218739][T12810] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 658.240647][T12810] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 658.269545][ T7520] bridge0: port 1(bridge_slave_0) entered blocking state [ 658.276827][ T7520] bridge0: port 1(bridge_slave_0) entered forwarding state [ 658.345918][T12810] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 658.366168][T12810] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 658.486992][ T7520] bridge0: port 2(bridge_slave_1) entered blocking state [ 658.494287][ T7520] bridge0: port 2(bridge_slave_1) entered forwarding state [ 658.592444][ T1144] hsr_slave_0: left promiscuous mode [ 658.601842][ T1144] hsr_slave_1: left promiscuous mode [ 658.614907][ T1144] batman_adv: batadv0: Interface deactivated: dummy0 [ 658.623856][ T1144] batman_adv: batadv0: Removing interface: dummy0 [ 658.637415][ T1144] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 658.645067][ T1144] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 658.660405][ T1144] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 658.672090][ T1144] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 658.683438][ T1144] bridge_slave_1: left allmulticast mode [ 658.691026][ T1144] bridge_slave_1: left promiscuous mode [ 658.696951][ T1144] bridge0: port 2(bridge_slave_1) entered disabled state [ 658.706828][ T1144] bridge_slave_0: left allmulticast mode [ 658.712904][ T1144] bridge_slave_0: left promiscuous mode [ 658.718848][ T1144] bridge0: port 1(bridge_slave_0) entered disabled state [ 658.752424][ T1144] veth0_macvtap: left promiscuous mode [ 658.758589][ T1144] veth1_vlan: left promiscuous mode [ 658.763940][ T1144] veth0_vlan: left promiscuous mode [ 659.111071][ T1144] bond4 (unregistering): Released all slaves [ 659.219299][T12994] loop1: detected capacity change from 0 to 256 [ 659.244000][T12994] exFAT-fs (loop1): failed to load upcase table (idx : 0x00012153, chksum : 0x5270ca8d, utbl_chksum : 0xe619d30d) [ 659.630268][ T1144] bond3 (unregistering): Released all slaves [ 659.833298][ T1144] bond0 (unregistering): Released all slaves [ 660.043850][ T1144] bond2 (unregistering): Released all slaves [ 660.312043][T12999] loop1: detected capacity change from 0 to 512 [ 660.320271][T12999] ext4: Unknown parameter 'smackfshat' [ 660.391700][ T1144] bond1 (unregistering): Released all slaves [ 660.398972][ T5767] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 661.739405][ T1144] team0 (unregistering): Port device team_slave_1 removed [ 661.805389][ T1144] team0 (unregistering): Port device team_slave_0 removed [ 661.870420][ T1144]  (unregistering): (slave bond_slave_1): Releasing backup interface [ 661.936658][ T1144]  (unregistering): (slave bond_slave_0): Releasing backup interface [ 662.665995][ T1144]  (unregistering): Released all slaves [ 662.794659][T12996] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2014'. [ 662.874315][T12996] bond3: entered allmulticast mode [ 662.880668][T13004] netlink: 'syz.1.2016': attribute type 1 has an invalid length. [ 662.900837][T13004] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 662.902179][T13005] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2016'. [ 663.092170][T12776] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 663.144709][T13013] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2017'. [ 663.212351][T12810] 8021q: adding VLAN 0 to HW filter on device bond0 [ 663.366195][T12810] 8021q: adding VLAN 0 to HW filter on device team0 [ 663.432567][ T6968] bridge0: port 1(bridge_slave_0) entered blocking state [ 663.439852][ T6968] bridge0: port 1(bridge_slave_0) entered forwarding state [ 663.456166][ T6968] bridge0: port 2(bridge_slave_1) entered blocking state [ 663.463456][ T6968] bridge0: port 2(bridge_slave_1) entered forwarding state [ 663.779152][T12776] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 663.910036][T12776] veth0_vlan: entered promiscuous mode [ 663.940228][T12776] veth1_vlan: entered promiscuous mode [ 663.996380][T12776] veth0_macvtap: entered promiscuous mode [ 664.009675][T12776] veth1_macvtap: entered promiscuous mode [ 664.070483][T12776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 664.097181][T12776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 664.117887][T12776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 664.140993][T12776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 664.158182][T12776] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 664.207291][T12776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 664.238564][T12776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 664.268571][T12776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 664.287307][T12776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 664.313104][T12776] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 664.362301][T12776] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 664.372249][T12776] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 664.381260][T12776] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 664.390340][T12776] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 664.419351][T12810] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 664.575251][T12810] veth0_vlan: entered promiscuous mode [ 664.597640][ T5834] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 664.613589][ T34] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 664.633323][T12810] veth1_vlan: entered promiscuous mode [ 664.643689][ T34] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 664.693629][ T34] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 664.703042][ T34] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 664.755751][T12810] veth0_macvtap: entered promiscuous mode [ 664.769155][ T5834] usb 2-1: device descriptor read/64, error -71 [ 664.780797][T12810] veth1_macvtap: entered promiscuous mode [ 664.851133][T12810] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 664.876765][T12810] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 664.897191][T12810] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 664.937173][T12810] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 664.967209][T12810] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 664.987448][T12810] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 665.029116][T12810] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 665.056806][T12810] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 665.073542][T12810] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 665.087845][ T5834] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 665.097732][T12810] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 665.109052][T12810] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 665.119564][T12810] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 665.133179][T12810] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 665.145513][T12810] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 665.220810][T12810] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 665.235902][T12810] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 665.246421][T12810] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 665.257324][ T5834] usb 2-1: device descriptor read/64, error -71 [ 665.264897][T12810] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 665.283307][T13067] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2025'. [ 665.311931][T13067] bond1: entered allmulticast mode [ 665.319181][T13065] netlink: 'syz.0.2024': attribute type 1 has an invalid length. [ 665.359952][T13065] 8021q: adding VLAN 0 to HW filter on device bond4 [ 665.379345][ T5834] usb usb2-port1: attempt power cycle [ 665.479484][T13065] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2024'. [ 665.523251][ T1144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 665.594680][ T1144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 665.821977][ T5834] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 665.895568][ T5834] usb 2-1: device descriptor read/8, error -71 [ 666.187609][ T5834] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 666.270530][ T5834] usb 2-1: device descriptor read/8, error -71 [ 666.425653][ T5834] usb usb2-port1: unable to enumerate USB device [ 666.634455][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 666.673450][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 666.735995][T13074] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2027'. [ 667.358518][T13095] netlink: 'syz.1.2035': attribute type 1 has an invalid length. [ 667.395574][T13095] 8021q: adding VLAN 0 to HW filter on device bond3 [ 667.413947][T13095] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2035'. [ 667.423343][T13095] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2035'. [ 668.476269][T13102] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2037'. [ 668.993700][ T1144] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 669.025540][T13121] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2044'. [ 669.039994][T13121] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2044'. [ 669.052676][T13120] netlink: 'syz.0.2044': attribute type 1 has an invalid length. [ 669.057265][ T5834] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 669.106172][T13120] 8021q: adding VLAN 0 to HW filter on device bond5 [ 669.142825][ T1144] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 669.219496][ T5834] usb 4-1: device descriptor read/64, error -71 [ 669.247714][ T1144] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 669.318999][ T1144] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 669.490664][ T5834] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 669.647229][ T5834] usb 4-1: device descriptor read/64, error -71 [ 669.771977][ T5834] usb usb4-port1: attempt power cycle [ 670.197840][ T5834] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 670.228681][ T5834] usb 4-1: device descriptor read/8, error -71 [ 670.375115][T13148] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2046'. [ 670.517816][ T5834] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 670.600619][ T5834] usb 4-1: device descriptor read/8, error -71 [ 670.788641][ T5834] usb usb4-port1: unable to enumerate USB device [ 671.585633][ T1144] hsr_slave_0: left promiscuous mode [ 671.612594][ T1144] hsr_slave_1: left promiscuous mode [ 671.641751][ T1144] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 671.656414][ T1144] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 671.677494][ T1144] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 671.692217][ T1144] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 671.710618][ T1144] bridge_slave_1: left allmulticast mode [ 671.716358][ T1144] bridge_slave_1: left promiscuous mode [ 671.716601][T11504] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 671.728233][ T1144] bridge0: port 2(bridge_slave_1) entered disabled state [ 671.735072][T11504] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 671.747963][T11504] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 671.753924][ T1144] bridge_slave_0: left allmulticast mode [ 671.756482][T11504] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 671.765511][ T1144] bridge_slave_0: left promiscuous mode [ 671.775277][T11504] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 671.783338][T11504] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 671.785508][ T1144] bridge0: port 1(bridge_slave_0) entered disabled state [ 671.881218][ T1144] veth1_macvtap: left promiscuous mode [ 671.891868][ T1144] veth0_macvtap: left promiscuous mode [ 671.898214][ T1144] veth1_vlan: left promiscuous mode [ 671.903823][ T1144] veth0_vlan: left promiscuous mode [ 672.820140][ T1144] team0 (unregistering): Port device team_slave_1 removed [ 672.891711][ T1144] team0 (unregistering): Port device team_slave_0 removed [ 672.953875][ T1144] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 673.026395][ T1144] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 673.755798][ T1144] bond0 (unregistering): Released all slaves [ 673.862514][T13169] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2050'. [ 673.875323][T13169] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 673.888127][T13175] netlink: 'syz.1.2053': attribute type 1 has an invalid length. [ 673.905619][T11504] Bluetooth: hci2: command tx timeout [ 673.915613][T13175] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 673.916906][T13176] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2053'. [ 673.934400][T13176] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2053'. [ 673.964981][T13182] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2055'. [ 674.084637][T13186] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2056'. [ 674.416306][ T788] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 674.622182][ T788] usb 2-1: device descriptor read/64, error -71 [ 675.011120][ T788] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 675.207296][ T788] usb 2-1: device descriptor read/64, error -71 [ 675.353079][T13164] chnl_net:caif_netlink_parms(): no params data found [ 675.357572][ T788] usb usb2-port1: attempt power cycle [ 675.509040][T13164] bridge0: port 1(bridge_slave_0) entered blocking state [ 675.516420][T13164] bridge0: port 1(bridge_slave_0) entered disabled state [ 675.528638][T13164] bridge_slave_0: entered allmulticast mode [ 675.536185][T13164] bridge_slave_0: entered promiscuous mode [ 675.548706][T13164] bridge0: port 2(bridge_slave_1) entered blocking state [ 675.556001][T13164] bridge0: port 2(bridge_slave_1) entered disabled state [ 675.563380][T13164] bridge_slave_1: entered allmulticast mode [ 675.578829][T13164] bridge_slave_1: entered promiscuous mode [ 675.656721][T13164] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 675.674283][T13164] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 675.738467][T13164] team0: Port device team_slave_0 added [ 675.754067][T13164] team0: Port device team_slave_1 added [ 675.778056][ T788] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 675.819029][ T788] usb 2-1: device descriptor read/8, error -71 [ 675.848026][T13164] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 675.855684][T13164] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 675.881854][T13164] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 675.896571][T13164] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 675.903881][T13164] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 675.930864][T13164] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 675.961753][T11504] Bluetooth: hci2: command tx timeout [ 676.013663][T13164] hsr_slave_0: entered promiscuous mode [ 676.022620][T13164] hsr_slave_1: entered promiscuous mode [ 676.030400][T13164] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 676.041289][T13164] Cannot create hsr debugfs directory [ 676.087224][ T788] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 676.118303][ T788] usb 2-1: device descriptor read/8, error -71 [ 676.247463][ T788] usb usb2-port1: unable to enumerate USB device [ 676.665371][T13235] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2064'. [ 677.025995][T13244] netlink: 'syz.3.2065': attribute type 1 has an invalid length. [ 677.042139][T13244] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2065'. [ 677.051402][T13244] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2065'. [ 677.152225][T13164] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 677.169088][T13164] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 677.192027][T13164] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 677.212587][T13164] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 677.309129][T13248] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2066'. [ 677.705911][T13164] 8021q: adding VLAN 0 to HW filter on device bond0 [ 678.038864][T11504] Bluetooth: hci2: command tx timeout [ 678.097295][T13164] 8021q: adding VLAN 0 to HW filter on device team0 [ 678.242017][ T1144] bridge0: port 1(bridge_slave_0) entered blocking state [ 678.249344][ T1144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 678.396199][ T1144] bridge0: port 2(bridge_slave_1) entered blocking state [ 678.403610][ T1144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 678.854021][T13282] netlink: 'syz.1.2074': attribute type 1 has an invalid length. [ 678.908983][T13282] 8021q: adding VLAN 0 to HW filter on device bond4 [ 678.994949][T13285] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2074'. [ 679.080493][T13285] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2074'. [ 679.225519][T13164] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 679.335813][T13164] veth0_vlan: entered promiscuous mode [ 679.384719][T13164] veth1_vlan: entered promiscuous mode [ 679.473770][T13164] veth0_macvtap: entered promiscuous mode [ 679.479836][ T5853] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 679.505084][T13299] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2077'. [ 679.521866][T13164] veth1_macvtap: entered promiscuous mode [ 679.588721][T13164] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 679.600488][T13164] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 679.627246][T13164] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 679.647427][T13164] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 679.671852][T13164] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 679.703751][ T5853] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 679.715824][T13164] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 679.726240][ T5853] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 679.739815][T13164] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 679.753220][ T5853] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 679.779051][ T5853] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 679.800323][T13164] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 679.810922][ T5853] usb 4-1: SerialNumber: syz [ 679.837179][T13164] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 679.868406][T13164] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 679.884138][T13164] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 679.897538][T13164] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 679.908729][T13164] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 679.924465][T13164] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 679.955062][T13164] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 679.980496][T13164] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 680.010405][T13164] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 680.141909][ T5853] usb 4-1: invalid UAC_HEADER (v1) [ 680.148728][T11504] Bluetooth: hci2: command tx timeout [ 680.169436][T13164] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 680.965721][ T5853] snd-usb-audio: probe of 4-1:1.0 failed with error -22 [ 680.977531][ T5853] usb 4-1: USB disconnect, device number 17 [ 681.098109][ T5767] udevd[5767]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 681.343345][ T6968] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 681.371875][ T6968] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 681.473685][ T1144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 681.497836][ T1144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 681.850293][T13330] netlink: 'syz.1.2084': attribute type 1 has an invalid length. [ 681.885605][T13330] 8021q: adding VLAN 0 to HW filter on device bond5 [ 681.905734][T13333] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2084'. [ 681.916616][T13333] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2084'. [ 682.209884][T13342] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2086'. [ 682.237740][T13342] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2086'. [ 682.667443][ T5852] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 682.883901][ T5852] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 683.051221][ T5852] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 683.193468][ T5852] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 683.313469][ T5852] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 683.371390][ T5852] usb 2-1: SerialNumber: syz [ 683.405148][ T6968] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 683.695504][ T5852] usb 2-1: invalid UAC_HEADER (v1) [ 683.742670][ T5852] snd-usb-audio: probe of 2-1:1.0 failed with error -22 [ 683.754586][ T5852] usb 2-1: USB disconnect, device number 21 [ 683.834890][ T5767] udevd[5767]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 684.020834][ T6968] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 684.138750][ T6968] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 684.241789][ T6968] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 685.566919][T13403] netlink: 'syz.1.2093': attribute type 1 has an invalid length. [ 685.691787][T13403] 8021q: adding VLAN 0 to HW filter on device bond6 [ 685.869580][T10827] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 685.885386][T10827] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 685.895956][T13409] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2093'. [ 685.905313][T10827] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 685.925330][T13414] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2090'. [ 685.947675][T10827] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 685.956744][T10827] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 685.967490][T10827] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 686.115711][ T6968] hsr_slave_0: left promiscuous mode [ 686.125330][ T6968] hsr_slave_1: left promiscuous mode [ 686.133766][ T6968] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 686.141437][ T6968] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 686.149928][ T6968] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 686.157758][ T6968] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 686.165671][ T6968] bridge_slave_1: left allmulticast mode [ 686.172298][ T6968] bridge_slave_1: left promiscuous mode [ 686.178349][ T6968] bridge0: port 2(bridge_slave_1) entered disabled state [ 686.190701][ T6968] bridge_slave_0: left allmulticast mode [ 686.196603][ T6968] bridge_slave_0: left promiscuous mode [ 686.203364][ T6968] bridge0: port 1(bridge_slave_0) entered disabled state [ 686.213802][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 686.222598][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.255476][ T6968] veth1_macvtap: left promiscuous mode [ 686.261402][ T6968] veth0_macvtap: left promiscuous mode [ 686.268925][ T6968] veth1_vlan: left promiscuous mode [ 686.274431][ T6968] veth0_vlan: left promiscuous mode [ 686.975873][T13429] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2098'. [ 687.130300][ T6968] team0 (unregistering): Port device team_slave_1 removed [ 687.196508][ T6968] team0 (unregistering): Port device team_slave_0 removed [ 687.263450][ T6968] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 687.326971][ T6968] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 688.041119][T11504] Bluetooth: hci2: command tx timeout [ 688.084920][ T6968] bond0 (unregistering): Released all slaves [ 688.185042][T13426] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2097'. [ 688.219638][T13427] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2097'. [ 688.672466][T13416] chnl_net:caif_netlink_parms(): no params data found [ 688.708118][ T5807] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 688.894772][T13416] bridge0: port 1(bridge_slave_0) entered blocking state [ 688.912741][T13416] bridge0: port 1(bridge_slave_0) entered disabled state [ 688.928921][ T5807] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 688.932066][T13416] bridge_slave_0: entered allmulticast mode [ 688.946976][T13416] bridge_slave_0: entered promiscuous mode [ 688.956177][ T5807] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 688.967680][ T5807] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 688.977932][ T5807] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 688.979161][T13416] bridge0: port 2(bridge_slave_1) entered blocking state [ 689.002152][ T5807] usb 4-1: SerialNumber: syz [ 689.004317][T13416] bridge0: port 2(bridge_slave_1) entered disabled state [ 689.016819][T13416] bridge_slave_1: entered allmulticast mode [ 689.036152][T13416] bridge_slave_1: entered promiscuous mode [ 689.122231][T13416] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 689.275962][ T5807] usb 4-1: invalid UAC_HEADER (v1) [ 689.301181][T13416] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 689.309988][ T5807] snd-usb-audio: probe of 4-1:1.0 failed with error -22 [ 689.321836][ T5807] usb 4-1: USB disconnect, device number 18 [ 689.364422][ T5767] udevd[5767]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 689.441402][T13416] team0: Port device team_slave_0 added [ 689.468176][T13416] team0: Port device team_slave_1 added [ 689.626100][T13416] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 689.633266][T13416] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 689.659706][T13416] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 689.693958][T13416] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 689.714698][T13416] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 689.752851][T13416] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 689.794512][T13464] netlink: 'syz.1.2104': attribute type 1 has an invalid length. [ 689.843281][T13464] 8021q: adding VLAN 0 to HW filter on device bond7 [ 689.876890][T13466] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2104'. [ 690.004858][T13416] hsr_slave_0: entered promiscuous mode [ 690.117572][T11504] Bluetooth: hci2: command tx timeout [ 690.258950][T13416] hsr_slave_1: entered promiscuous mode [ 692.365860][T13416] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 692.375722][T13416] Cannot create hsr debugfs directory [ 692.396383][T11504] Bluetooth: hci2: command tx timeout [ 692.722978][T13477] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2108'. [ 692.726562][T13480] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2109'. [ 692.771182][T13477] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2108'. [ 694.106314][T13501] netlink: 'syz.3.2115': attribute type 1 has an invalid length. [ 694.172042][T13501] 8021q: adding VLAN 0 to HW filter on device bond3 [ 694.190283][T13507] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2115'. [ 694.208490][T13510] tipc: Enabling of bearer rejected, failed to enable media [ 694.437518][T11504] Bluetooth: hci2: command tx timeout [ 694.462972][T13518] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2119'. [ 694.533222][T13416] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 694.545327][T13416] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 694.575590][T13522] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2120'. [ 694.605105][T13416] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 694.638140][T13416] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 695.061995][T13416] 8021q: adding VLAN 0 to HW filter on device bond0 [ 695.137019][T13416] 8021q: adding VLAN 0 to HW filter on device team0 [ 695.540194][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 695.547502][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 695.755181][ T1144] bridge0: port 2(bridge_slave_1) entered blocking state [ 695.762564][ T1144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 696.028331][T13552] netlink: 'syz.1.2127': attribute type 1 has an invalid length. [ 696.145385][T13552] 8021q: adding VLAN 0 to HW filter on device bond8 [ 696.187320][T13559] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2130'. [ 696.273749][T13560] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2127'. [ 696.436655][T13571] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2132'. [ 696.485934][T13416] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 696.586102][T13416] veth0_vlan: entered promiscuous mode [ 696.614874][T13416] veth1_vlan: entered promiscuous mode [ 696.736563][T13416] veth0_macvtap: entered promiscuous mode [ 696.791281][T13416] veth1_macvtap: entered promiscuous mode [ 696.849551][T13416] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 696.866214][T13416] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 696.895032][T13416] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 696.926739][T13416] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 696.977229][T13416] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 697.033288][T13416] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 697.091227][T13416] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 697.873533][T13594] tipc: Enabling of bearer rejected, failed to enable media [ 697.889544][T13416] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 697.948924][T13416] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 697.977183][T13416] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 698.007404][T13416] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 698.029802][T13602] loop1: detected capacity change from 0 to 256 [ 698.035181][T13416] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 698.055981][T13416] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 698.074223][T13416] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 698.091646][T13602] exFAT-fs (loop1): failed to load upcase table (idx : 0x00012153, chksum : 0x5270ca8d, utbl_chksum : 0xe619d30d) [ 698.126178][T13416] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 698.148699][T13416] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 698.222028][T13416] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 698.250581][T13416] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 698.294210][T13603] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2140'. [ 698.552538][ T3474] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 698.568692][ T3474] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 698.606014][T13611] netlink: 'syz.3.2142': attribute type 1 has an invalid length. [ 698.674116][T13611] 8021q: adding VLAN 0 to HW filter on device bond4 [ 698.706647][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 698.716163][T13615] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2142'. [ 698.732415][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 699.066400][T13626] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2144'. [ 700.116548][T13638] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2147'. [ 700.164709][T13638] netlink: 'syz.3.2147': attribute type 30 has an invalid length. [ 700.179674][T13638] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 700.188547][T13638] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 700.197434][T13638] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 700.206189][T13638] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 700.218386][T13638] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2147'. [ 700.228178][T13638] netlink: 'syz.3.2147': attribute type 30 has an invalid length. [ 700.376492][T13645] tipc: Enabling of bearer rejected, failed to enable media [ 700.550380][T13652] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2150'. [ 700.911174][T13663] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2155'. [ 702.126119][T13672] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2159'. [ 702.176501][T13675] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2160'. [ 702.302591][T13677] tipc: Started in network mode [ 702.309222][T13677] tipc: Node identity 668ae9d3f3aa, cluster identity 4711 [ 702.317385][T13677] tipc: Enabled bearer , priority 0 [ 702.342022][T13676] tipc: Disabling bearer [ 702.720579][ T12] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 702.786053][T13683] loop3: detected capacity change from 0 to 512 [ 702.801768][T13683] ext4: Unknown parameter 'smackfshat' [ 702.891492][ T12] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 702.988495][ T12] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 703.109691][ T12] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 704.240633][ T12] hsr_slave_0: left promiscuous mode [ 704.250904][ T12] hsr_slave_1: left promiscuous mode [ 704.262874][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 704.273984][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 704.290072][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 704.300118][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 704.310940][ T12] bridge_slave_1: left allmulticast mode [ 704.316669][ T12] bridge_slave_1: left promiscuous mode [ 704.325207][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 704.340493][ T12] bridge_slave_0: left allmulticast mode [ 704.346231][ T12] bridge_slave_0: left promiscuous mode [ 704.359006][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 704.402675][ T12] veth1_macvtap: left promiscuous mode [ 704.408593][ T12] veth0_macvtap: left promiscuous mode [ 704.414332][ T12] veth1_vlan: left promiscuous mode [ 704.421783][ T12] veth0_vlan: left promiscuous mode [ 704.573472][T13716] loop1: detected capacity change from 0 to 256 [ 704.632292][T13716] exFAT-fs (loop1): failed to load upcase table (idx : 0x00012153, chksum : 0x5270ca8d, utbl_chksum : 0xe619d30d) [ 704.741631][T13718] loop3: detected capacity change from 0 to 4096 [ 704.798918][T13718] NILFS (loop3): invalid segment: Checksum error in segment payload [ 704.834772][T13718] NILFS (loop3): trying rollback from an earlier position [ 704.923667][T13718] NILFS (loop3): recovery complete [ 704.970247][T13722] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 705.316242][T10827] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 705.331919][T10827] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 705.341807][T10827] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 705.351375][T10827] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 705.370737][T10827] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 705.495478][T10827] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 706.750862][ T12] team0 (unregistering): Port device team_slave_1 removed [ 706.815128][ T12] team0 (unregistering): Port device team_slave_0 removed [ 706.876755][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 706.942334][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 707.007766][ T9] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 707.190433][ T9] usb 4-1: config 1 has an invalid interface number: 5 but max is 2 [ 707.198768][ T9] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 707.208997][ T9] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 707.219052][ T9] usb 4-1: config 1 has no interface number 1 [ 707.225242][ T9] usb 4-1: config 1 interface 5 has no altsetting 0 [ 707.256381][ T9] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 707.265621][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 707.289045][ T9] usb 4-1: SerialNumber: syz [ 707.526911][ T9] usb 4-1: 0:2 : does not exist [ 707.567806][T11504] Bluetooth: hci2: command tx timeout [ 707.591119][ T9] usb 4-1: USB disconnect, device number 19 [ 707.852963][ T12] bond0 (unregistering): Released all slaves [ 707.971019][T13721] netlink: 'syz.0.2165': attribute type 1 has an invalid length. [ 708.054309][T13721] 8021q: adding VLAN 0 to HW filter on device bond6 [ 708.095073][T13738] tipc: Started in network mode [ 708.100130][T13738] tipc: Node identity 7e1597da9652, cluster identity 4711 [ 708.136437][T13738] tipc: Enabled bearer , priority 0 [ 708.168993][T13737] tipc: Disabling bearer [ 708.513916][T13757] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2175'. [ 708.608480][T13760] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2176'. [ 708.617961][T13760] netlink: 'syz.0.2176': attribute type 30 has an invalid length. [ 708.632073][T13760] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2176'. [ 708.708717][T13760] netlink: 'syz.0.2176': attribute type 30 has an invalid length. [ 708.742432][T13725] chnl_net:caif_netlink_parms(): no params data found [ 708.914369][T13771] loop1: detected capacity change from 0 to 256 [ 708.923687][T13725] bridge0: port 1(bridge_slave_0) entered blocking state [ 708.931303][T13725] bridge0: port 1(bridge_slave_0) entered disabled state [ 708.939257][T13725] bridge_slave_0: entered allmulticast mode [ 708.946798][T13725] bridge_slave_0: entered promiscuous mode [ 708.955988][T13725] bridge0: port 2(bridge_slave_1) entered blocking state [ 708.964869][T13725] bridge0: port 2(bridge_slave_1) entered disabled state [ 708.972703][T13725] bridge_slave_1: entered allmulticast mode [ 708.988682][T13725] bridge_slave_1: entered promiscuous mode [ 708.995770][T13771] exFAT-fs (loop1): failed to load upcase table (idx : 0x00012153, chksum : 0x5270ca8d, utbl_chksum : 0xe619d30d) [ 709.100984][T13725] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 709.160337][T13725] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 709.365580][T13725] team0: Port device team_slave_0 added [ 709.383071][T13725] team0: Port device team_slave_1 added [ 709.454970][T13725] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 709.477339][T13725] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 709.531099][T13725] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 709.553672][T13725] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 709.561202][T13725] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 709.590687][T13725] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 709.637705][T11504] Bluetooth: hci2: command tx timeout [ 709.670374][T13725] hsr_slave_0: entered promiscuous mode [ 709.681949][T13725] hsr_slave_1: entered promiscuous mode [ 709.689535][T13725] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 709.698598][T13725] Cannot create hsr debugfs directory [ 710.618036][T13794] netlink: 'syz.1.2181': attribute type 1 has an invalid length. [ 710.643622][T13794] 8021q: adding VLAN 0 to HW filter on device bond9 [ 710.789602][T13800] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2182'. [ 711.088060][T13805] tipc: Enabled bearer , priority 0 [ 711.140638][T13801] tipc: Disabling bearer [ 711.300322][T13812] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2186'. [ 711.492407][T13819] loop3: detected capacity change from 0 to 256 [ 711.535055][T13819] exFAT-fs (loop3): failed to load upcase table (idx : 0x00012153, chksum : 0x5270ca8d, utbl_chksum : 0xe619d30d) [ 711.802023][T11504] Bluetooth: hci2: command tx timeout [ 712.634735][T13725] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 712.674845][T13725] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 712.701215][T13829] netlink: 'syz.1.2191': attribute type 1 has an invalid length. [ 712.751824][T13829] 8021q: adding VLAN 0 to HW filter on device bond10 [ 712.774983][T13725] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 712.790244][T13725] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 712.911497][T13835] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2192'. [ 713.075916][T13725] 8021q: adding VLAN 0 to HW filter on device bond0 [ 713.173574][T13848] syzkaller0: entered promiscuous mode [ 713.181734][T13848] syzkaller0: entered allmulticast mode [ 713.922944][T11504] Bluetooth: hci2: command tx timeout [ 717.468921][T13868] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2197'. [ 717.506939][T13725] 8021q: adding VLAN 0 to HW filter on device team0 [ 717.550316][ T34] bridge0: port 1(bridge_slave_0) entered blocking state [ 717.557580][ T34] bridge0: port 1(bridge_slave_0) entered forwarding state [ 717.609843][ T34] bridge0: port 2(bridge_slave_1) entered blocking state [ 717.617163][ T34] bridge0: port 2(bridge_slave_1) entered forwarding state [ 718.529125][T13889] netlink: 'syz.1.2202': attribute type 1 has an invalid length. [ 718.670835][T13889] 8021q: adding VLAN 0 to HW filter on device bond11 [ 718.772829][T13893] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2202'. [ 719.077524][T13725] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 719.183102][T13725] veth0_vlan: entered promiscuous mode [ 719.210350][T13725] veth1_vlan: entered promiscuous mode [ 719.272429][T13725] veth0_macvtap: entered promiscuous mode [ 719.300319][T13725] veth1_macvtap: entered promiscuous mode [ 719.336306][T13725] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 719.352391][T13725] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 719.365494][T13725] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 719.384735][T13725] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 719.394988][T13725] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 719.430721][T13725] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 719.449850][T13725] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 719.486948][T13725] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 719.501987][T13725] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 719.513455][T13725] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 719.525409][T13725] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 719.542404][T13725] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 719.555864][T13725] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 719.578901][T13725] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 719.602269][T13725] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 719.624849][T13725] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 719.645774][T13725] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 719.667345][T13725] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 719.688534][T13918] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2208'. [ 719.867917][ T1144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 719.875883][ T1144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 720.009364][ T1144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 720.040462][ T1144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 720.078222][T13926] syzkaller0: entered promiscuous mode [ 720.085489][T13926] syzkaller0: entered allmulticast mode [ 721.473137][ T9] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 721.667455][ T9] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 721.678581][ T9] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 721.689767][ T9] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 721.699546][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 721.707861][ T9] usb 2-1: SerialNumber: syz [ 721.941369][ T9] usb 2-1: 0:2 : does not exist [ 721.946420][ T9] usb 2-1: unit 5 not found! [ 721.977607][ T9] usb 2-1: USB disconnect, device number 22 [ 722.026727][ T5767] udevd[5767]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 724.369499][T13946] netlink: 'syz.0.2213': attribute type 1 has an invalid length. [ 724.445462][T13946] 8021q: adding VLAN 0 to HW filter on device bond7 [ 724.449518][T13954] nftables ruleset with unbound chain [ 724.454719][T13947] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2213'. [ 724.848496][ T7674] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 724.881844][T13964] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2217'. [ 725.429128][ T7674] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 725.525210][ T7674] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 725.644309][ T7674] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 727.848043][T10827] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 727.859365][T10827] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 727.871204][T10827] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 727.880112][T10827] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 727.890949][T10827] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 727.907450][T10827] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 728.008784][T14020] syzkaller0: entered promiscuous mode [ 728.014400][T14020] syzkaller0: entered allmulticast mode [ 730.046890][T10827] Bluetooth: hci2: command tx timeout [ 731.454751][T14029] netlink: 'syz.1.2227': attribute type 1 has an invalid length. [ 731.463911][T14029] workqueue: Failed to create a rescuer kthread for wq "bond12": -EINTR [ 731.484344][T14033] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2227'. [ 731.568106][T14050] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2229'. [ 731.920654][ T7674] hsr_slave_0: left promiscuous mode [ 731.941354][ T7674] hsr_slave_1: left promiscuous mode [ 731.955248][ T7674] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 731.968228][ T7674] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 732.117451][T10827] Bluetooth: hci2: command tx timeout [ 732.164580][ T7674] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 732.259153][ T7674] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 732.423363][ T7674] bridge_slave_1: left allmulticast mode [ 732.571757][ T7674] bridge_slave_1: left promiscuous mode [ 732.591268][ T7674] bridge0: port 2(bridge_slave_1) entered disabled state [ 732.666704][ T7674] bridge_slave_0: left allmulticast mode [ 732.702962][ T7674] bridge_slave_0: left promiscuous mode [ 732.726306][ T7674] bridge0: port 1(bridge_slave_0) entered disabled state [ 732.875858][ T7674] veth1_macvtap: left promiscuous mode [ 732.889608][ T7674] veth0_macvtap: left promiscuous mode [ 732.900937][ T7674] veth1_vlan: left promiscuous mode [ 732.906544][ T7674] veth0_vlan: left promiscuous mode [ 734.197171][T10827] Bluetooth: hci2: command tx timeout [ 734.509148][ T7674] team0 (unregistering): Port device team_slave_1 removed [ 734.574997][ T7674] team0 (unregistering): Port device team_slave_0 removed [ 734.646463][ T7674] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 734.726448][ T7674] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 735.469179][ T7674] bond0 (unregistering): Released all slaves [ 735.591092][T14080] netlink: 'syz.3.2238': attribute type 1 has an invalid length. [ 735.600171][T14080] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 735.614859][T14088] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2240'. [ 736.277247][T10827] Bluetooth: hci2: command tx timeout [ 737.016334][T14017] chnl_net:caif_netlink_parms(): no params data found [ 737.266866][T14130] netlink: 'syz.1.2249': attribute type 1 has an invalid length. [ 737.388460][T14130] 8021q: adding VLAN 0 to HW filter on device bond12 [ 737.465095][T14017] bridge0: port 1(bridge_slave_0) entered blocking state [ 737.494540][T14017] bridge0: port 1(bridge_slave_0) entered disabled state [ 737.536737][T14017] bridge_slave_0: entered allmulticast mode [ 737.561825][T14017] bridge_slave_0: entered promiscuous mode [ 737.606321][T14143] loop1: detected capacity change from 0 to 4096 [ 737.636722][T14143] NILFS (loop1): invalid segment: Checksum error in segment payload [ 737.649997][T14138] syzkaller0: entered promiscuous mode [ 737.655695][T14138] syzkaller0: entered allmulticast mode [ 737.664801][T14143] NILFS (loop1): trying rollback from an earlier position [ 737.702123][T14017] bridge0: port 2(bridge_slave_1) entered blocking state [ 737.715158][T14143] NILFS (loop1): recovery complete [ 737.724968][T14145] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 737.737565][T14017] bridge0: port 2(bridge_slave_1) entered disabled state [ 737.745821][T14017] bridge_slave_1: entered allmulticast mode [ 737.756652][T14017] bridge_slave_1: entered promiscuous mode [ 741.719838][T14150] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2252'. [ 741.742419][T14017] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 741.770712][T14017] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 742.058924][T14170] netlink: 'syz.1.2259': attribute type 1 has an invalid length. [ 742.147165][T14170] 8021q: adding VLAN 0 to HW filter on device bond13 [ 742.168146][T14017] team0: Port device team_slave_0 added [ 742.178933][T14017] team0: Port device team_slave_1 added [ 742.806517][T14017] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 742.848039][T14017] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 742.949589][T14017] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 743.025402][T14017] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 743.047499][T14017] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 743.097879][T14017] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 743.292747][T14017] hsr_slave_0: entered promiscuous mode [ 743.318375][T14017] hsr_slave_1: entered promiscuous mode [ 743.326051][T14017] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 743.343541][T14017] Cannot create hsr debugfs directory [ 744.617787][T14209] syzkaller0: entered promiscuous mode [ 744.623406][T14209] syzkaller0: entered allmulticast mode [ 744.634388][T14216] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2267'. [ 747.644122][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.650859][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 748.106335][T14224] netlink: 'syz.3.2270': attribute type 1 has an invalid length. [ 748.116953][T14224] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 749.447291][T14257] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2279'. [ 749.782096][T14017] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 749.901929][T14271] netlink: 'syz.1.2284': attribute type 1 has an invalid length. [ 749.980986][T14271] 8021q: adding VLAN 0 to HW filter on device bond14 [ 749.990741][T14017] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 750.154359][T14017] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 750.177871][T14017] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 751.193341][T14017] 8021q: adding VLAN 0 to HW filter on device bond0 [ 751.296134][T14017] 8021q: adding VLAN 0 to HW filter on device team0 [ 751.364346][ T34] bridge0: port 1(bridge_slave_0) entered blocking state [ 751.371618][ T34] bridge0: port 1(bridge_slave_0) entered forwarding state [ 751.416142][ T34] bridge0: port 2(bridge_slave_1) entered blocking state [ 751.423444][ T34] bridge0: port 2(bridge_slave_1) entered forwarding state [ 751.512722][T14308] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2291'. [ 752.026699][T14017] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 752.054991][T14328] netlink: 'syz.1.2295': attribute type 1 has an invalid length. [ 752.129412][T14328] 8021q: adding VLAN 0 to HW filter on device bond15 [ 752.295166][T14017] veth0_vlan: entered promiscuous mode [ 752.324733][T14017] veth1_vlan: entered promiscuous mode [ 752.403696][T14017] veth0_macvtap: entered promiscuous mode [ 752.452144][T14017] veth1_macvtap: entered promiscuous mode [ 752.529137][T14017] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 752.543925][T14017] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 752.555135][T14017] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 752.580053][T14017] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 752.601619][T14017] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 752.761867][T14017] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 752.805418][T14017] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 753.643713][T14017] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 753.667647][T14017] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 753.685080][T14017] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 753.704792][T14017] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 753.716852][T14017] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 753.732603][T14017] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 753.745456][T14017] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 753.863167][T14362] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2301'. [ 753.880911][T14017] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 753.892501][T14017] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 753.902955][T14017] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 753.912381][T14017] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 754.233381][ T34] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 754.292439][ T34] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 754.991004][ T7673] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 755.037399][ T7673] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 755.269499][T14383] netlink: 'syz.1.2305': attribute type 1 has an invalid length. [ 755.380079][T14383] 8021q: adding VLAN 0 to HW filter on device bond16 [ 756.043313][T14385] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2305'. [ 757.895119][T14418] loop3: detected capacity change from 0 to 512 [ 757.902813][T14418] ext4: Unknown parameter 'smackfshat' [ 758.863142][ T1144] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 758.977670][ T1144] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 759.070550][ T1144] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 759.222433][ T1144] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 760.450055][ T1144] hsr_slave_0: left promiscuous mode [ 760.477330][ T1144] hsr_slave_1: left promiscuous mode [ 760.544581][ T1144] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 760.557147][ T1144] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 760.582244][ T1144] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 760.595763][ T1144] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 760.621934][ T1144] bridge_slave_1: left allmulticast mode [ 760.631621][ T1144] bridge_slave_1: left promiscuous mode [ 760.647307][ T1144] bridge0: port 2(bridge_slave_1) entered disabled state [ 760.676534][ T1144] bridge_slave_0: left allmulticast mode [ 760.682538][ T1144] bridge_slave_0: left promiscuous mode [ 760.702016][ T1144] bridge0: port 1(bridge_slave_0) entered disabled state [ 760.797610][ T1144] veth1_macvtap: left promiscuous mode [ 760.803290][ T1144] veth0_macvtap: left promiscuous mode [ 760.817660][ T1144] veth1_vlan: left promiscuous mode [ 760.823111][ T1144] veth0_vlan: left promiscuous mode [ 761.103847][T11504] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 761.120329][T11504] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 761.131152][T11504] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 761.140935][T11504] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 761.158841][T11504] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 761.170995][T11504] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 762.194467][ T1144] team0 (unregistering): Port device team_slave_1 removed [ 762.259807][ T1144] team0 (unregistering): Port device team_slave_0 removed [ 762.323614][ T1144] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 762.453070][ T1144] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 762.538872][T14502] loop1: detected capacity change from 0 to 4096 [ 762.579751][T14502] NILFS (loop1): invalid segment: Checksum error in segment payload [ 762.588049][T14502] NILFS (loop1): trying rollback from an earlier position [ 762.612671][T14502] NILFS (loop1): recovery complete [ 762.620830][T14503] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 763.240986][T10827] Bluetooth: hci2: command tx timeout [ 764.278522][ T1144] bond0 (unregistering): Released all slaves [ 764.386237][T14499] netlink: 'syz.0.2317': attribute type 1 has an invalid length. [ 764.394856][T14499] workqueue: Failed to create a rescuer kthread for wq "bond8": -EINTR [ 764.414595][T14500] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2317'. [ 765.317934][T10827] Bluetooth: hci2: command tx timeout [ 766.088226][T14542] loop3: detected capacity change from 0 to 256 [ 766.101764][T14481] chnl_net:caif_netlink_parms(): no params data found [ 766.114893][T14542] exFAT-fs (loop3): failed to load upcase table (idx : 0x00012153, chksum : 0x5270ca8d, utbl_chksum : 0xe619d30d) [ 766.426335][T14481] bridge0: port 1(bridge_slave_0) entered blocking state [ 766.434129][T14481] bridge0: port 1(bridge_slave_0) entered disabled state [ 766.451211][T14481] bridge_slave_0: entered allmulticast mode [ 766.469392][T14481] bridge_slave_0: entered promiscuous mode [ 766.684161][T14481] bridge0: port 2(bridge_slave_1) entered blocking state [ 766.719186][T14481] bridge0: port 2(bridge_slave_1) entered disabled state [ 766.726486][T14481] bridge_slave_1: entered allmulticast mode [ 766.737710][T14481] bridge_slave_1: entered promiscuous mode [ 767.428766][T10827] Bluetooth: hci2: command tx timeout [ 767.669264][T14481] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 767.700116][T14481] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 768.454880][T14481] team0: Port device team_slave_0 added [ 768.519253][T14481] team0: Port device team_slave_1 added [ 768.611953][T14481] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 768.630542][T14481] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 768.686627][T14481] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 768.715149][T14565] netlink: 'syz.1.2331': attribute type 1 has an invalid length. [ 768.808350][T14565] 8021q: adding VLAN 0 to HW filter on device bond17 [ 768.852457][T14566] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2331'. [ 768.901692][T14481] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 768.927178][T14481] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 768.986229][T14481] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 769.140371][T14481] hsr_slave_0: entered promiscuous mode [ 769.161569][T14481] hsr_slave_1: entered promiscuous mode [ 769.172874][T14481] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 769.182505][T14481] Cannot create hsr debugfs directory [ 769.544391][T11504] Bluetooth: hci2: command tx timeout [ 770.144426][T14590] netlink: 892 bytes leftover after parsing attributes in process `syz.3.2335'. [ 770.197402][T11504] Bluetooth: hci1: command 0x0406 tx timeout [ 771.559943][T14610] loop3: detected capacity change from 0 to 256 [ 771.671253][T14613] netlink: 'syz.1.2341': attribute type 1 has an invalid length. [ 771.683293][T14610] exFAT-fs (loop3): failed to load upcase table (idx : 0x00012153, chksum : 0x5270ca8d, utbl_chksum : 0xe619d30d) [ 771.742177][T14613] 8021q: adding VLAN 0 to HW filter on device bond18 [ 771.771923][T14614] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2341'. [ 774.019728][T14481] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 774.038460][T14481] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 774.053292][T14481] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 774.068093][T14481] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 774.977488][T14481] 8021q: adding VLAN 0 to HW filter on device bond0 [ 775.047774][T14481] 8021q: adding VLAN 0 to HW filter on device team0 [ 775.071592][ T7674] bridge0: port 1(bridge_slave_0) entered blocking state [ 775.078912][ T7674] bridge0: port 1(bridge_slave_0) entered forwarding state [ 775.249953][T14666] netlink: 'syz.3.2350': attribute type 1 has an invalid length. [ 775.346807][T14666] 8021q: adding VLAN 0 to HW filter on device bond5 [ 775.548837][T14669] netlink: 52 bytes leftover after parsing attributes in process `syz.3.2350'. [ 775.583777][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 775.591066][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 776.380217][T14481] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 776.414757][T14481] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 779.119118][T14481] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 779.220145][T14481] veth0_vlan: entered promiscuous mode [ 779.263699][T14481] veth1_vlan: entered promiscuous mode [ 779.316724][T14481] veth0_macvtap: entered promiscuous mode [ 779.328615][T14481] veth1_macvtap: entered promiscuous mode [ 779.358842][T14481] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 779.369683][T14481] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 779.387175][T14481] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 779.522881][T14481] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 779.543228][T14481] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 779.752327][T14481] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 779.932120][T14481] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 780.280393][T14481] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 780.291352][T14481] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 780.310302][T14481] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 780.357202][T14481] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 780.382594][T14481] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 780.396878][T14481] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 780.409071][T14481] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 780.416656][T14719] netlink: 'syz.3.2361': attribute type 1 has an invalid length. [ 780.480834][T14719] 8021q: adding VLAN 0 to HW filter on device bond6 [ 780.551203][T14723] netlink: 52 bytes leftover after parsing attributes in process `syz.3.2361'. [ 780.676897][T14481] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 780.719313][T14481] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 780.747225][T14481] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 780.776515][T14481] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 780.909518][T14736] loop3: detected capacity change from 0 to 256 [ 780.988465][T14736] exFAT-fs (loop3): failed to load upcase table (idx : 0x00012153, chksum : 0x5270ca8d, utbl_chksum : 0xe619d30d) [ 782.299202][ T7674] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 782.318492][ T7674] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 782.445271][ T7674] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 782.467481][ T7674] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 783.694075][T14775] netlink: 'syz.1.2370': attribute type 1 has an invalid length. [ 783.758092][T14775] 8021q: adding VLAN 0 to HW filter on device bond19 [ 783.776228][T14775] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2370'. [ 784.122777][ T7673] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 784.266490][ T7673] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 784.384538][ T7673] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 784.482733][ T7673] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 785.825699][ T7673] hsr_slave_0: left promiscuous mode [ 785.835722][ T7673] hsr_slave_1: left promiscuous mode [ 785.843524][ T7673] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 785.859871][ T7673] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 785.871196][ T7673] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 785.879057][ T7673] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 785.887335][ T7673] bridge_slave_1: left allmulticast mode [ 785.893057][ T7673] bridge_slave_1: left promiscuous mode [ 785.902006][ T7673] bridge0: port 2(bridge_slave_1) entered disabled state [ 785.912081][ T7673] bridge_slave_0: left allmulticast mode [ 785.918386][ T7673] bridge_slave_0: left promiscuous mode [ 785.924203][ T7673] bridge0: port 1(bridge_slave_0) entered disabled state [ 785.971951][ T7673] veth1_macvtap: left promiscuous mode [ 785.977699][ T7673] veth0_macvtap: left promiscuous mode [ 785.983351][ T7673] veth1_vlan: left promiscuous mode [ 785.988994][ T7673] veth0_vlan: left promiscuous mode [ 786.504055][T11504] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 786.573515][T11504] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 786.611249][T11504] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 786.625665][T11504] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 786.640605][T11504] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 786.656821][T11504] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 787.158248][ T7673] team0 (unregistering): Port device team_slave_1 removed [ 787.248612][ T7673] team0 (unregistering): Port device team_slave_0 removed [ 787.343860][ T7673] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 787.425283][ T7673] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 788.281417][ T7673] bond0 (unregistering): Released all slaves [ 788.384668][T14823] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2374'. [ 788.551385][T14842] netlink: 892 bytes leftover after parsing attributes in process `syz.1.2379'. [ 788.838119][T10827] Bluetooth: hci2: command tx timeout [ 788.933297][T14848] netlink: 'syz.1.2380': attribute type 1 has an invalid length. [ 788.986469][T14848] 8021q: adding VLAN 0 to HW filter on device bond20 [ 789.011054][T14852] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2380'. [ 789.615350][T14825] chnl_net:caif_netlink_parms(): no params data found [ 789.940545][T14825] bridge0: port 1(bridge_slave_0) entered blocking state [ 789.951967][T14825] bridge0: port 1(bridge_slave_0) entered disabled state [ 789.963274][T14825] bridge_slave_0: entered allmulticast mode [ 789.977220][T14825] bridge_slave_0: entered promiscuous mode [ 789.986763][T14825] bridge0: port 2(bridge_slave_1) entered blocking state [ 790.001424][T14825] bridge0: port 2(bridge_slave_1) entered disabled state [ 790.011667][T14825] bridge_slave_1: entered allmulticast mode [ 790.025350][T14825] bridge_slave_1: entered promiscuous mode [ 790.254783][T14825] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 790.269507][T14825] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 790.317935][T14825] team0: Port device team_slave_0 added [ 790.329274][T14825] team0: Port device team_slave_1 added [ 790.364712][T14825] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 790.372589][T14825] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 790.398965][T14825] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 790.412387][T14825] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 790.419520][T14825] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 790.445577][T14825] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 790.638082][T14825] hsr_slave_0: entered promiscuous mode [ 790.646080][T14825] hsr_slave_1: entered promiscuous mode [ 790.658029][T14825] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 790.665781][T14825] Cannot create hsr debugfs directory [ 790.924497][T10827] Bluetooth: hci2: command tx timeout [ 791.946429][T14904] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2387'. [ 791.955779][T14904] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2387'. [ 792.106849][T14905] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2388'. [ 792.290353][T14913] netlink: 'syz.1.2390': attribute type 1 has an invalid length. [ 792.351519][T14913] 8021q: adding VLAN 0 to HW filter on device bond21 [ 792.364587][T14914] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2390'. [ 792.914313][T14825] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 792.936802][T14825] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 792.954234][T14825] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 792.972131][T14825] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 792.997701][T10827] Bluetooth: hci2: command tx timeout [ 793.278686][T14825] 8021q: adding VLAN 0 to HW filter on device bond0 [ 793.370231][T14825] 8021q: adding VLAN 0 to HW filter on device team0 [ 793.437056][T10187] bridge0: port 1(bridge_slave_0) entered blocking state [ 793.444359][T10187] bridge0: port 1(bridge_slave_0) entered forwarding state [ 793.551795][T10187] bridge0: port 2(bridge_slave_1) entered blocking state [ 793.559098][T10187] bridge0: port 2(bridge_slave_1) entered forwarding state [ 795.163297][T10827] Bluetooth: hci2: command tx timeout [ 795.411361][T14959] loop3: detected capacity change from 0 to 16 [ 795.437972][T14959] erofs: (device loop3): mounted with root inode @ nid 36. [ 795.476269][T14959] syz.3.2396: attempt to access beyond end of device [ 795.476269][T14959] loop3: rw=0, sector=8, nr_sectors = 16 limit=16 [ 795.562334][T14962] syz.3.2396: attempt to access beyond end of device [ 795.562334][T14962] loop3: rw=524288, sector=16, nr_sectors = 16 limit=16 [ 795.583798][T14964] loop1: detected capacity change from 0 to 512 [ 795.608509][T14964] ext4: Unknown parameter 'noacl' [ 795.610890][T14825] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 795.669108][T14962] syz.3.2396: attempt to access beyond end of device [ 795.669108][T14962] loop3: rw=524288, sector=8, nr_sectors = 16 limit=16 [ 795.725704][T14168] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 795.844657][T14825] veth0_vlan: entered promiscuous mode [ 795.846527][T12776] BUG: Bad page state in process syz-executor pfn:7c7c3 [ 795.858426][T12776] page:ffffea0001f1f0c0 refcount:0 mapcount:0 mapping:ffff8880606e0270 index:0x2 pfn:0x7c7c3 [ 795.868771][T12776] aops:z_erofs_cache_aops ino:0 [ 795.873685][T12776] flags: 0xfff00000000001(locked|node=0|zone=1|lastcpupid=0x7ff) [ 795.881635][T12776] page_type: 0xffffffff() [ 795.886021][T12776] raw: 00fff00000000001 dead000000000100 dead000000000122 ffff8880606e0270 [ 795.886149][T14825] veth1_vlan: entered promiscuous mode [ 795.894736][T12776] raw: 0000000000000002 0000000000000000 00000000ffffffff 0000000000000000 [ 795.910033][T12776] page dumped because: PAGE_FLAGS_CHECK_AT_FREE flag(s) set [ 795.917483][T12776] page_owner tracks the page as allocated [ 795.923803][T12776] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x192840(GFP_NOWAIT|__GFP_IO|__GFP_NOWARN|__GFP_NORETRY|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 14959, tgid 14958 (syz.3.2396), ts 795476141398, free_ts 795462860478 [ 795.946193][T12776] post_alloc_hook+0x1cd/0x210 [ 795.951167][T12776] get_page_from_freelist+0x195c/0x19f0 [ 795.956786][T12776] __alloc_pages+0x1e3/0x460 [ 795.961593][T12776] z_erofs_do_read_page+0x20c0/0x3680 [ 795.967108][T12776] z_erofs_pcluster_readmore+0x2cf/0x450 [ 795.972847][T12776] z_erofs_read_folio+0x208/0x540 [ 795.978013][T12776] filemap_read_folio+0x167/0x760 [ 795.983098][T12776] do_read_cache_folio+0x470/0x7e0 [ 795.988322][T12776] erofs_bread+0x16f/0x630 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 795.992796][T12776] erofs_namei+0x28c/0xf00 [ 795.997370][T12776] erofs_lookup+0x135/0x310 [ 796.002770][T12776] path_openat+0x10b8/0x3190 [ 796.007614][T12776] do_filp_open+0x1c5/0x3d0 [ 796.012181][T12776] do_sys_openat2+0x12c/0x1c0 [ 796.016912][T12776] __x64_sys_openat+0x139/0x160 [ 796.021943][T12776] do_syscall_64+0x55/0xb0 [ 796.026418][T12776] page last free stack trace: [ 796.031320][T12776] free_unref_page_prepare+0x7ce/0x8e0 [ 796.036845][T12776] free_unref_page_list+0xbe/0x860 [ 796.042092][T12776] release_pages+0x1fa0/0x2220 [ 796.046927][T12776] tlb_flush_mmu+0x368/0x4f0 [ 796.051644][T12776] tlb_finish_mmu+0xc3/0x1d0 [ 796.056315][T12776] exit_mmap+0x3f0/0xb50 [ 796.060726][T12776] __mmput+0x118/0x3c0 [ 796.064849][T12776] exec_mmap+0x584/0x640 [ 796.069265][T12776] begin_new_exec+0xa2e/0x1eb0 [ 796.074111][T12776] load_elf_binary+0x9a0/0x2700 [ 796.079119][T12776] bprm_execve+0xaeb/0x16f0 [ 796.083693][T12776] do_execveat_common+0x51b/0x6c0 [ 796.088865][T12776] __x64_sys_execve+0x92/0xa0 [ 796.093607][T12776] do_syscall_64+0x55/0xb0 [ 796.098211][T12776] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 796.105069][T12776] Modules linked in: [ 796.109253][T12776] CPU: 1 PID: 12776 Comm: syz-executor Not tainted 6.6.94-syzkaller #0 [ 796.117543][T12776] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 796.127662][T12776] Call Trace: [ 796.130989][T12776] [ 796.133962][T12776] dump_stack_lvl+0x16c/0x230 [ 796.138716][T12776] ? show_regs_print_info+0x20/0x20 [ 796.143989][T12776] ? swiotlb_print_info+0x70/0x70 [ 796.149177][T12776] bad_page+0x14b/0x170 [ 796.153397][T12776] free_unref_page_prepare+0x887/0x8e0 [ 796.158950][T12776] free_unref_page+0x32/0x2e0 [ 796.163680][T12776] ? __folio_put+0xef/0x210 [ 796.168249][T12776] erofs_try_to_free_all_cached_pages+0x295/0x600 [ 796.174739][T12776] erofs_shrink_workstation+0x118/0x290 [ 796.180514][T12776] ? erofs_shrinker_unregister+0x170/0x170 [ 796.186397][T12776] ? io_schedule+0xd0/0xd0 [ 796.190879][T12776] ? kobject_put+0x43c/0x470 [ 796.195535][T12776] erofs_shrinker_unregister+0x5d/0x170 [ 796.201141][T12776] erofs_put_super+0x4e/0x150 [ 796.205870][T12776] ? erofs_free_inode+0xb0/0xb0 [ 796.210787][T12776] generic_shutdown_super+0x134/0x2b0 [ 796.216303][T12776] kill_block_super+0x44/0x90 [ 796.221037][T12776] erofs_kill_sb+0x4c/0x140 [ 796.225597][T12776] deactivate_locked_super+0x97/0x100 [ 796.231037][T12776] cleanup_mnt+0x429/0x4c0 [ 796.235526][T12776] task_work_run+0x1ce/0x250 [ 796.240183][T12776] ? task_work_cancel+0x240/0x240 [ 796.245281][T12776] ? exit_to_user_mode_loop+0x3b/0x110 [ 796.250814][T12776] exit_to_user_mode_loop+0xe6/0x110 [ 796.256154][T12776] exit_to_user_mode_prepare+0xb1/0x140 [ 796.261766][T12776] syscall_exit_to_user_mode+0x1a/0x50 [ 796.267281][T12776] do_syscall_64+0x61/0xb0 [ 796.271753][T12776] ? clear_bhb_loop+0x40/0x90 [ 796.276472][T12776] ? clear_bhb_loop+0x40/0x90 [ 796.281202][T12776] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 796.287148][T12776] RIP: 0033:0x7f26a598fc57 [ 796.291605][T12776] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 796.311267][T12776] RSP: 002b:00007ffc76bd3e28 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 796.319757][T12776] RAX: 0000000000000000 RBX: 00007f26a5a10925 RCX: 00007f26a598fc57 [ 796.327775][T12776] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffc76bd3ee0 [ 796.335826][T12776] RBP: 00007ffc76bd3ee0 R08: 0000000000000000 R09: 0000000000000000 [ 796.343853][T12776] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffc76bd4f70 [ 796.351863][T12776] R13: 00007f26a5a10925 R14: 00000000000c244f R15: 00007ffc76bd4fb0 [ 796.359882][T12776] [ 796.364595][T12776] Disabling lock debugging due to kernel taint