last executing test programs: 9.948214231s ago: executing program 3: syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xfa, 0xcf, 0x1, 0x40, 0x56e, 0x4010, 0x201c, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x91, 0x55, 0xe7}}]}}]}}, 0x0) 9.915892616s ago: executing program 1: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000080)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r0, &(0x7f00000077c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, r1, {0x7, 0x1f}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000090c400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000542d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ea8286a2fba523440000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000633956a1000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d6ab715107fa1820000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f6ffffffffffffff0000000000000e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f4000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000286071480000000000b13bc1e6d970884f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffffffffffff00", 0x2000, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800700, &(0x7f0000000040)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x5}}, {@journal_dev={'journal_dev', 0x3d, 0x8000}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@minixdf}, {@resgid}, {@grpquota}, {@usrjquota}]}, 0x3, 0x44a, &(0x7f0000000400)="$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") ioctl$TUNSETOFFLOAD(r2, 0x40086607, 0xf65e477cde8f6969) 7.206713032s ago: executing program 4: syz_mount_image$hfs(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', 0x4810, &(0x7f00000004c0)=ANY=[], 0x3, 0x2c4, &(0x7f00000007c0)="$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") r0 = open(&(0x7f00000004c0)='./bus\x00', 0x143042, 0x0) ftruncate(r0, 0x2008002) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x103042, 0x0) pwritev2(r1, &(0x7f0000000040)=[{&(0x7f00000001c0)="1d", 0x1}], 0x1, 0x9fe, 0x0, 0x0) 6.204824906s ago: executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c00000013000100"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000008002e000000000008001c"], 0x3c}}, 0x0) 6.146697245s ago: executing program 1: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b700000000000000950019c825730000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000005c0)={0xffffffffffffffff}) sendmsg$tipc(r4, &(0x7f0000000b80)={&(0x7f0000000600)=@nameseq={0x1e, 0x1, 0x3, {0x1, 0x2, 0x2}}, 0xa, &(0x7f0000000a40)=[{&(0x7f0000000bc0)="dbe89f4dc6638fc0366a1f399a6d9539722597f2930e78d0ff41f3bf30414dbd72a7ef88748d0bcde82d11574c68b7b90d9a96db7466e1943afff17c08236040fee81f04729cfd7c62ef9f5fe345857283e7682cc0b5b3d821a337db3117", 0x5e}, {&(0x7f00000006c0)="d4f6a791b052fea7aaaf3ddfb3412b4802fe216c3c42824373829d531e3c24fc2f301e6036f9364259facc68563f2a6d63da7f3f05b28fa36883c78b87112af80bf4fe44a02e6acf676a94eda2fe085b99fb7dc0d51d4a1fad12ecf02a5660f746ac8fa3ea0cf584ab0633aa2b58f316c5bd3cf66eec26afeb5bf6c59bfc75a697dda6ca85a77749a9248a32c47b4fca98f0efdad46e4cde816d8a447775890d863b3d76670e15f33911acbfc96498", 0xaf}, {&(0x7f0000000780)="5f1dbd9e3c86bf2ccb353c338e94df9d2a4691d92bb38b12c9879ae71b15f0ed8af0e021055e755fb83adcee8f3a76078b6a384924b443b1fcf1f3ecfbebcd607e8194c5507ff14af876624570f9b5f951dbd120779a14b201fc7931270681b9b1e290a0583a2db1bb6ce0a8ca07a0c48aa7a8cd83fb6490635878b8ff9159f030296d96c50d4e1fbdad1ba59034252a054a22254f12eafc029c1740df9ee765bd88a430c80d81d798cb75d92fb8729bbd01bec8668d84ae51a57ef1d400305f32715f531f43e28144df817d3952d1e960f74a495c438d018e0a77704405985c96636b5397", 0xe5}, {&(0x7f0000000880)="a70ba3e408318b9a01964f8180b0aa1ad86d082dd9841694da3833bfb48d188de9415cf0a8ecfd0da8e0d29a67fef173024bc32b7bd9632b3fd69162cf", 0x3d}, {&(0x7f00000008c0)="93d954490045d0375a8290c62a4e16bccf1b246b56708d920d17f04089d5900158286452c7e48b1a27e11054fbbb9e2ae4650b9b6aeaffb89690a78d5f53a21fb98dd4e3424936a3cff50a2e3eed5e88864b84fd39249ab6659e7b39f0883c0783ece09887b9b9b7e7b15d63cd27eaf9b4acae0303338e28779c52eabafdfa47f34ac62e1aa690efb3958ff66edaa2d772bcbfb74c0ca02131b79407", 0x9c}, {&(0x7f0000000980)="21026fe2a2ed03314ebf696b959678", 0xf}], 0x6, &(0x7f0000000ac0)="1fabea9c2d512866aadaedc5c6558c151ba26950fa96a13791d623ffbdbc2b4a09ac3fa22c085ad6b399a02dc2960b03c468242030a637c545284460944c38159a4f076da9390416ccf84a5259e8389e4739d113b609f6c47e09ac790bebcf5755a3139836c0112ef1dca5abbba1004691ae79dcabca0874260533c3e63cc0228cfccddac9eb38e47f4cdabbe86a6020999a309733baee1f387e", 0x9a, 0x4}, 0x4040006) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='sys_enter\x00', r3}, 0x10) timer_gettime(0x0, 0x0) syz_usb_connect$hid(0xf63067478e218e8, 0x36, &(0x7f00000000c0)=ANY=[], 0x0) close_range(r1, 0xffffffffffffffff, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) mremap(&(0x7f00007ff000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f0000580000/0x4000)=nil) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) remap_file_pages(&(0x7f0000583000/0x1000)=nil, 0x1000, 0x2000008, 0x7fff, 0x4000) 1.594419804s ago: executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000003800)=@newtaction={0x64, 0x30, 0x1, 0x0, 0x0, {}, [{0x50, 0x1, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0x0, 0x0, 0x20000000}, 0x4}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0) 1.593320714s ago: executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x8c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x51, 0xe, {{{}, {}, @device_a, @device_b}, 0x0, @default, 0x0, @void, @void, @void, @val={0x4, 0x6}, @void, @void, @val={0x25, 0x3}, @void, @void, @val={0x2d, 0x1a}, @void, @void, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @beacon=[@NL80211_ATTR_BEACON_TAIL={0x4}]]}, 0x8c}}, 0x0) 1.592695745s ago: executing program 4: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000020850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r2 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0x4008af12, &(0x7f0000000080)={0x1, 0x7b}) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000240)=r2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={0x78, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @private}, {0x8, 0x2, @multicast2}}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_DST={0x14, 0xd, 0x0, 0x1, [@CTA_NAT_V4_MINIP={0x8, 0x1, @empty}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @remote}]}]}, 0x78}}, 0x0) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000040)={0x1, r2}) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f00000001c0)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000280)=""/74}) ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f0000000480)={0x1, r2}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0x63, &(0x7f0000000600)=""/99}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000000)=0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_read_part_table(0x5c3, &(0x7f00000005c0)="$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") 1.592410434s ago: executing program 0: r0 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_DAEMON(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x44, r0, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_DAEMON={0x30, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'vcan0\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x5}, @IPVS_DAEMON_ATTR_STATE={0x8}]}]}, 0x44}}, 0x0) 1.591898655s ago: executing program 1: bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x1e, 0x0, 0x4, 0xff}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b7040000000000008500000057"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='spmi_cmd\x00', r1}, 0xfffffffffffffea8) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x89f1, &(0x7f0000000900)={'ip6gre0\x00', @random="0600002000"}) 1.591523284s ago: executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r1, &(0x7f0000000200), 0xf000) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) timer_create(0xf, &(0x7f0000000080)={0x0, 0x0, 0x0, @thr={0x0, 0x0}}, 0x0) 1.591291305s ago: executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'macvlan1\x00', 0x0}) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0xf2e, 0x4) sendto$packet(r0, &(0x7f00000000c0)="3f0402e9b0e812002c001e0089e9aaa911d7c2290f0086dd1327c9167c64064a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c1511fdc9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0x11, 0x0, r1, 0x4, 0x0, 0x6, @multicast}, 0x14) 1.587088016s ago: executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) connect$inet(r1, &(0x7f0000000040)={0x2, 0x0, @dev}, 0x10) write$ppp(r1, &(0x7f0000000180)="7397", 0x2) 1.585796196s ago: executing program 2: syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000000)='./file0\x00', 0x2014000, &(0x7f00000005c0)={[{}, {@rodir}, {@fat=@usefree}, {@fat=@check_strict}, {@fat=@codepage={'codepage', 0x3d, '936'}}, {@uni_xlate}, {@iocharset={'iocharset', 0x3d, 'cp860'}}, {@numtail}, {@numtail}, {@shortname_mixed}, {@fat=@allow_utime={'allow_utime', 0x3d, 0x3}}, {@shortname_win95}, {@rodir}]}, 0x26, 0x336, &(0x7f00000001c0)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) 1.570110968s ago: executing program 0: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, 0x0, 0x0) connect$can_bcm(0xffffffffffffffff, &(0x7f0000000000), 0x10) socket(0x21, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0xa) dup(r5) open(&(0x7f0000000140)='./file1\x00', 0x10f0c2, 0x0) ftruncate(r4, 0x6) r6 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r6, 0x40345410, &(0x7f0000000080)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r6, 0x40505412, &(0x7f0000000140)={0x4, 0xaf, 0x80}) 1.569954818s ago: executing program 3: fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0xfffffffeffffffff}) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000003000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x5, 0x97, &(0x7f00000001c0)=""/151}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x63, 0x0, &(0x7f00000000c0)='\x00', 0x0, 0x2}, 0x48) 1.569591078s ago: executing program 4: syz_mount_image$btrfs(&(0x7f00000055c0), &(0x7f0000005600)='./bus\x00', 0x40, &(0x7f0000000080)={[{@noacl}, {@skip_balance}, {@nossd_spread}, {@notreelog}, {@discard}, {@enospc_debug}, {@barrier}, {@clear_cache}, {@ssd_spread}, {@datasum}]}, 0x1, 0x55a8, &(0x7f0000005680)="$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") r0 = open(&(0x7f0000000180)='./bus\x00', 0x14d27e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r0, 0x0) fallocate(r0, 0x0, 0x0, 0x7fff) r1 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) pwritev2(r1, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0xfffffdef}], 0x1, 0x0, 0x0, 0x0) syz_mount_image$exfat(&(0x7f0000001500), &(0x7f0000001540)='./file0\x00', 0x20010080, &(0x7f0000000080)=ANY=[@ANYRESOCT=0x0, @ANYRES64, @ANYRES32, @ANYRESHEX=0x0, @ANYRESDEC, @ANYRESDEC, @ANYRES64, @ANYRESHEX, @ANYRES64], 0x1, 0x150b, &(0x7f0000002a80)="$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") openat$vicodec0(0xffffffffffffff9c, &(0x7f0000005fc0), 0x2, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0xc020660b, &(0x7f0000000280)={0x0, 0xffffffff000, 0x0, 0x0, 0x2}) 1.464316214s ago: executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) syz_usb_connect$printer(0x5, 0x2d, &(0x7f0000000040)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x40, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x9, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0xf8, 0x1, 0x7, 0x1, 0x1, 0x81, "", {{{0x9, 0x5, 0x1, 0x2, 0x7ff, 0x40, 0x2, 0x2}}}}}]}}]}}, &(0x7f0000000640)={0xa, &(0x7f0000000340)={0xa, 0x6, 0x0, 0x0, 0x0, 0x5, 0x0, 0x6}, 0x4c, &(0x7f0000000380)={0x5, 0xf, 0x4c, 0x4, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x1e, 0x6, 0x1, 0x7f}, @generic={0x27, 0x10, 0xa, "04af9b29f8b18d22d5282b832d7ca43fdc7f193310f89cf146b5598e480a71bc1ac05c9b"}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x7, 0x20, 0x1}, @ssp_cap={0xc, 0x10, 0xa, 0x0, 0x0, 0x0, 0x1e00f}]}, 0x5, [{0x0, 0x0}, {0x1a, &(0x7f0000000500)=@string={0x1a, 0x3, "695412221b06c82902e95badba114d0cfdeb16c2e3e50ef9"}}, {0x4, &(0x7f0000000580)=@string={0x4, 0x3, "cfc9"}}, {0x4, &(0x7f00000005c0)=@lang_id={0x4, 0x3, 0x20}}, {0x26, 0x0}]}) 1.463909345s ago: executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x5, [@func_proto={0x2, 0x0, 0x0, 0x8, 0x2}]}, {0x0, [0x0, 0x61, 0x1e]}}, 0x0, 0x29, 0xfffffffffffffe2a}, 0x20) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340), 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0xd, &(0x7f00000002c0)=@framed={{0x18, 0x2, 0x0, 0x0, 0x1}, [@call={0x85, 0x0, 0x0, 0x87}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}}]}, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x0, 0xe, 0x0, &(0x7f0000000000)="e06921e8682d85ff9782762f86dd", 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x18, 0x0, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 1.463363035s ago: executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000240)='/sys/block/loop0', 0x202, 0x3e) socket$inet_udp(0x2, 0x2, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @empty}, 0x10) write$P9_RXATTRWALK(r4, &(0x7f0000000300)={0xf}, 0xf) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x2008000, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000900)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@index_on}]}) 1.338832714s ago: executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xb, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x69, 0x11, 0xa0}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6}, 0x70) 1.127218916s ago: executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x3, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000611051000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x90) 424.573834ms ago: executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000009c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900030073797a32000000000900010073797a3000000000c4000000000a01010000000000000000030000020c000440000000000000000208000240000000000900010073797a3100000000080002400000000186000600839053ab194d71ddd63e521254f377a351b80a542e5eaedbd3ccf7b4628b2307e0add98f9013c0a06825f6aaa1d228ecce3cedea046d3a013cde1801f6f875a13eeaa7076498ff8df0ed26369a2d8c0429fb24ebc31577ce04749b85a7fd9eeb31506ad722e2c5f911403344aa051c2a7bf46425ac81ad4977ad062100a6c8d2ed150000fc000000020a0b01000000000000000000000000e700060097d6f9a4c47adb840b2a787842179898d409d206f914fe05946e6897b428ed9bd8660c758dae76305a892fd1f85838df01ae51e6f8847fcf01d0ea017c851b700de14b91f71081393bda49b8721947bb25fa7ec7d10d120f7c575f8ec5484b07993f5ce9e2baa5e04b58c8c22097e7e5276d2c66ad09877fc3e140094a8f04f554c69dedb98ec05bf1ce8e7ec20cf5143d9ea8c2439cc12b776613fcdfed670e6cfc58963f5749ba754c47babed74ed3bc1a734afd5037d88a2dceaf6710ce05c083cf06704409edde26d8038446dbdc8203e2e5612051510c9a54c265265541e9a97b0014000000110001"], 0x234}}, 0x0) 344.180947ms ago: executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r0, 0x10e, 0xc, &(0x7f0000000040)=0x8, 0x4) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x1c, 0x52, 0x1, 0x0, 0x0, {0x2, 0x3}, [@typed={0x8, 0x1, 0x0, 0x0, @u32=0xfffffffe}]}, 0x1c}}, 0x0) 333.000518ms ago: executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000108500000075000000a50000002300000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r0}, 0x10) r1 = getpid() r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=@framed, &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe3c}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00', r2}, 0x10) process_vm_readv(r1, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) munlock(&(0x7f0000bac000/0x4000)=nil, 0x4000) 321.49378ms ago: executing program 1: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000020850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r2 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0x4008af12, &(0x7f0000000080)={0x1, 0x7b}) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000240)=r2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={0x78, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @private}, {0x8, 0x2, @multicast2}}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_DST={0x14, 0xd, 0x0, 0x1, [@CTA_NAT_V4_MINIP={0x8, 0x1, @empty}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @remote}]}]}, 0x78}}, 0x0) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000040)={0x1, r2}) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f00000001c0)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000280)=""/74}) ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f0000000480)={0x1, r2}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0x63, &(0x7f0000000600)=""/99}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000000)=0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_read_part_table(0x5c3, &(0x7f00000005c0)="$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") 175.873412ms ago: executing program 0: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x10012, r0, 0x0) r1 = socket$inet(0x2, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000740)='syz_tun\x00', 0x10) 118.570941ms ago: executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f00000000c0)=0x5, 0x20) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000000)=0x5, 0x4) bind$inet6(r1, &(0x7f0000000080)={0xa, 0xce22, 0x0, @ipv4}, 0x1c) bind$inet6(r0, &(0x7f0000000080)={0xa, 0xce22, 0x0, @empty}, 0x1c) listen(r0, 0x0) shutdown(r0, 0x0) 10.956418ms ago: executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='io.stat\x00', 0x275a, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r0, 0x4004662b, &(0x7f0000000200)=0x1) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_tracing={0x1a, 0x5, &(0x7f00000004c0)=ANY=[@ANYBLOB="9500000000000000185a000009000000000000000000000018140000", @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00'], &(0x7f0000000500)='syzkaller\x00', 0x100, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, 0x17, 0xffffffffffffffff, 0x8, &(0x7f00000005c0)={0x5, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000840)=[0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0xffffffffffffffff], 0x0, 0x10, 0x8}, 0x90) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="0000000075b12000000005"], 0x1c}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl(r1, 0x0, &(0x7f0000000040)) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000040)={'syztnl1\x00', &(0x7f0000000240)={'syztnl0\x00', 0x0, 0x2f, 0x0, 0x8e, 0x6, 0x41, @private1, @mcast1, 0x0, 0x81, 0x5, 0xfffffffe}}) openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) getpid() syz_mount_image$exfat(&(0x7f0000000040), &(0x7f0000000180)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0xa1000a, &(0x7f00000003c0)=ANY=[], 0x21, 0x1507, &(0x7f0000001b00)="$eJzs3Au4TtX2MPAx5pyLTdKb5D7HHIs3bUyXJLkkySVJkiNJbgkhSZKQ3G9JSELuSe4huYXkfr/lniRJkiQkJJnf45zO1zmn8//39f/3fZ7vv8fvedbzzvGud8w15h5773ettZ93f9NhSOW6VSrUZmb4b8G/PXQHgBQA6A8A1wFABAAlspTIcmV/Bo3d/3sHEX+uh6Zf7QrE1ST9T9uk/2mb9D9tk/6nbdL/tE36n7ZJ/9M26b8Qadn2GTmvly3tbnL/Py2T9///QY4WHvvFxsI3dvwDKdL/tE36n7ZJ/9M26X/aJv1P26T/aZv0P22T/guRlv3X7x3L3w7+J2xX+/tPCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIUTacCH8ygDA38dXuy4hhBBCCCGEEEL8eUL6q12BEEIIIYQQQggh/u9DUKDBQATpID2kQAbICNdAJrgWMsN1kIDrIQvcAFnhRsgG2SEH5IRckBvygAUCBwwx5IV8kISbID/cDKlQAApCIfBQGIpAUSgGt0BxuBVKwG1QEm6HUlAaykBZuAPKwZ1QHu6CCnA3VIRKUBmqwD1QFe6FanAfVIf7oQY8ADXhQagFf4Ha8BDUgYehLjwC9eBRqA8NoCE0gsb/pfwXoAu8CF2hG3SHHtATekFv6AN9oR/0h5dgALwMA+EVGASDYQi8CkPhNRgGr8NwGAEj4Q0YBaNhDIyFcTAeJsCbMBHegknwNkyGKTAVpsF0mAEz4R2YBbNhDrwLc+E9mAfzYQEshEXwPiyGJbAUPoBl8CEshxWwElbBalgDa2EdrIcNsBE2wWbYAlthG2yHj2AH7IRdsBv2wF7YBx/DfvgEDsCncBA++4P55/8lvyMCAipUaNBgOkyHKZiCGTEjZsJMmBkzYwITmAWzYFbMitkwG+bAHJgLc2EezIOEhIyMeTEvJjGJ+TE/pmIqFsSC6NFjESyCxfAWLI7FsQSWwJJYEkthaSyNZbEslsNyWB7LYwWsgBWxIlbGyngP3oP3YjWshtWxOtbAGlgTa2ItrIW1sTbWwTpYF+tiPayH9bE+NsSG2BgbYxNsgk2xKTbH5tgCW2ArbIWtsTW2wTbYFttiO2yH7bE9dsAO2BE7YSd8AV/AF/FF7IYVVQ/siT2xN/bGvtgP++FLOABfxpfxFRyEg3EIvoqv4ms4DM/hcByBI3EkllOjcQyORVbjcQJOwIk4ESfhJJyMU3AKTsPpOANn4kychbNxNr6Lc/E9fA/n43xciItwES7GJbgUl+IyPI/LcQWuxFW4GtfgalyH63EdbsRNuBG34BbchtvwI/wId+JO3I27cS8aAPwYP8FPcBAexIN4CA/hYTyMR/AIHsWjeAyP4XE8jifwBJ7Ek3gKT+MZPI1n8Syew/N4AS/gRbyIl/C5XF/V2VtgwyBQVxhlVDqVTqWoFJVRZVSZVCaVWWVWCZVQWVQWlVVlVdlUNpVD5VC5VC6VR+VRpEixilVelVclVVLlV/lVqkpVBVVB5ZVXRVQRVUwVU8VVcVVC3aZKqttVKVVaNfNlVVlVTjX35dVdqoKqoCqqSqqyqqKqqKqqqqqmqqnqqrqqoWqomupBVUv1wL74kLrSmbpqMNZTQ7C+aqAaqkbqNXxMNVHDsKlqppqrJ9QIHI6tVBPfWj2l2qgx2FY9o8bis6q9Go8d1POqo+qkOqsXVBfV1HdV3dRk7KF6qmnYW/VRfVU/NQsrqSsdq6xeUYPUYDVEvaoW4mtqmHpdDVcj1Ej1hhqlRqsxaqwap8arCepNNVG9pSapt9VkNUVNVdPUdDVDzVTvqFlqtpqj3lVz1XtqnpqvFqiFapF6Xy1WS9RS9YFapj5Uy9UKtVKtUqvVGrVWrVPr1Qa1UW1Sm9UWtVVtU9vVR2qH2ql2qd1qj9qr9qmP1X71iTqgPlUH1WfqkPpcHVZfqCPqS3VUfaWOqa/VcfWNOqG+VSfVd+qUOq3OqO/VWfWDOqfOqwvqR3VR/aQuqZ/VZRUUaNRKa210pNPp9DpFZ9AZ9TU6k75WZ9bX6YS+XmfRN+is+kadTWfXOXROnUvn1nm01aSdZh3rvDqfTuqbdH59s07VBXRBXUh7XVgX0UV1MX2LLq5v1SX0bbqkvl2X0qV1GV1W36HL6Tt1eX2XrqDv1hV1JV1ZV9H36Kr6Xl1N36er6/t1Df2Arqkf1LX0X3Rt/ZCuox/WdfUjup5+VNfXDXRD3Ug31o/pJvpx3VQ30831E7qFbqlb6Sd1a/2UbqOf1m31M7qdfla318/pDvp53VF30p31z/qyDrqr7qa76x66p+6le+s+uq/up/vrl/QA/bIeqF/Rg/RgPUS/qofq1/Qw/boerkfokfoNPUqP1mP0WD1Oj9cT9Jt6on5LT9Jv68l6ip6qp+npeobu+8tMc/4P8t/6N/kD/3r0bXq7/kjv0Dv1Lr1b79F79T69T+/X+/UBfUAf1Af1IX1IH9aH9RF9RB/VR/UxfUwf18f1CX1Cn9Qn9Sl9Wv+ov9dn9Q/6nD6vz+sf9UV9UV/65WsABo0y2hgTmXQmvUkxGUxGc43JZK41mc11JmGuN1nMDSarudFkM9lNDpPT5DK5TR5jDRln2MQmr8lnkuYm/OWEwhQ0hYw3hU0RU/SP5Jv85maTagr8U/7v1dfYNDZNTBPT1DQ1zU1z08K0MK1MK9PatDZtTBvT1rQ17Uw70960Nx1MB9PRdDSdTWfTxXQxXU1X0910Nz1NL9Pb9DF9TT/T37xkBpgBZqAZaAaZQWaIGWKGmqFmmBlmhpvhZqQZaUaZUWaMGWPGmXFmgplgJpqJZpKZZCabyWaqmWqmm+lmpplpZplZZo6ZY+aauWaemWcWmAVmkVlkFpvFZqlZapaZZWa5WWFWmFVmlVlj1ph1Zp3ZYDaYTWaT2WK2mOVmu9ludpgdZpfZZfaYPWaf2Wf2m/3mgDlgDpqD5pA5ZA6bw+aIOWKOmqPmmDlmjpvj5oQ5YU6ak+aUOWXOmDPmrDlrzplz5oK5YC6ai+aSuWQum8tXTvsiFanIRCZKF6WLUqKUKGOUMcoUZYoyR5mjRJSIskRZoqzRjVG2KHuUI8oZ5YpyR3kiG1HkIo7iKG+UL0pGN0X5o5uj1KhAVDAqFPmocFQkKhoVi26Jike3RiWi26KS0e1Rqah0VCYqG90RlYvujMpHd0UVorujilGlqHJUJbonqhrdG1WL7ouqR/dHNaIHoprRg1Gt6C9R7eihqE70cFQ3eiSqFz0a1Y8aRA2jRlHjP3X+EM5lf9x3td1sd9vD9rS9bG/bx/a1/Wx/+5IdYF+2A+0rdpAdbIfYV+1Q+5odZl+3w+0IO9K+YUfZ0XaMHWvH2fF2gn3TTrRv2Un2bTvZTrFT7TQ73c6wM+07dpadbefYd+1c+56dZ+fbBXahXWTft4vtErvUfmCX2Q/tcrvCrrSr7Gq7xq616+x6u8FutJvsZrvFbrXb7Hb7kd1hd9pddrfdY/faffZju99+Yg/YT+1B+5k9ZD+3h+0X9oj90h61X9lj9mt73H5jT9hv7Un7nT1lT9sz9nt71v5gz9nz9oL90V60P9lL9md72YYrJ/dX3t7JkKF0lI5SKIUyUkbKRJkoM2WmBCUoC2WhrJSVslE2ykE5KBflojyUh65gYspLeSlJScpP+SmVUqkgFSRPnopQESpGxag4FacSVIJKUkkqRaWoDJWhO+gOupPupLvoLrqb7qZKVImqUBWqSlWpGlWj6lSdalANqkk1qRbVotpUm+pQHapLdake1aP6VJ8aUkNqTI2pCTWhptSUmlNzakEtqBW1otbUmtpQG2pLbakdtaP21J46UAfqSB2pM3WmLtSFulJX6k7dqSf1pN7Um/pSX+pP/WkADaCBNJAG0SAaQkNoKA2lYTSMhtMIGklv0CgaTWNoLI2j8TSBJtBEmkiTaBJNpsk0labSdJpOM2kmzaJZNIfm0FyaS/NoHi2gBbSIFtFiWkxLaSkto2W0nJbTSlpJq2k1raW1tJ7W00baSJtpM22lrbSdttMO2kG7aBftoT20j/bRftpPB+gAHaSDdIgOBQSgI3SEjtJROkbH6DgdpxN0gk7SSTpFp+gMnaGzdJbO0Tm6QBfoIv1El+hnukyBUlwGl9Fd4zK5a11md5371ziHy+lyudwuj7Mum8v+TzE551JdAVfw75eYrqhLTbnyWMh5V9gVcUVdKVfalXFl3R2unLvTlf9NXNXd66q5+1x1d7+r4u75p7iGe8DVdI+4Wu5RV9s1cHVcI1fXPeLquUddfdfANXSNXAvX0rVyT7rW7inXxj39m3ixW+LWuw1uo9vk9rtP3AX3ozvuvnEX3U+uq+vm+ruX3AD3shvoXnGD3ODfxCPdG26UG+3GuLFunBv/m3iqm+amuxlupnvHzXKzfxMvcu+7uW6pm+fmuwVu4V/jKzUtdR+4Ze5Dt9ytcCvdKrfarXFr3br/Xesqt8VtddvcPvex2+F2ul1ut9vj9v41vrKOA+5Td9B95o65r91h94U74k64o+6rv8ZX1nfCfetOuu/cKXfanXHfu7PuB3fOnb+y/nBl7d+7n91lFxwwsmLNhiNOx+k5hTNwRr6GM/G1nJmv4wRfz1n4Bs7KN3I2zs45OCfn4tychy0TO2aOOS/n4yTfxPn5Zk7lAlyQC7HnwlyEi3IxvoWL861cgm/jknw7l+LSXIbL8h1cju/k8nwXV+C7uSJX4spche/hqnwvV+P7uDrfzzX4Aa7JD3It/gvX5oe4Dj/MdfkRrsePcn1uwA25ETfmx7gJP85NuRk35ye4BbfkVvwkt+anuA0/zW35GW7Hz3J7fo478PPckTtxZ36Bu/CL3JW7cXfuwT25F/fmPtyX+3F/fokH8Ms8kF/hQTyYh/CrPJRf42H8Og/nETyS3+BRPJrH8Fgex+N5Ar/JE/ktnsRv82SewlN5Gk/nGTyT3+FZPJvn8Ls8l9/jeTyfF/BCXsTv82Jewkv5A17GH/JyXsEreRWv5jW8ltfxet7AG3kTb+YtvJW38Xb+iHfwTt7Fu3kP7+V9/DHv5wy//MB9xof4cz7MX/AR/pKP8ld8jL/m4/wNn+Bv+SR/x6f4NJ/h7/ks/8Dn+Dxf4B/5Iv/El/hnvsyBIcZYxTo2cRSni9PHKXGGOGN8TZwpvjbOHF8XJ+Lr4yzxDXHW+MY4W5w9zhHnjHPFueM8sY0pdjHHcZw3zhcn45vi/PHNcWpcIC4YF4p9XDguEheNi8W3xMXjW+MS8W1xyfj2uFRcOn7k/rLxHXG5+M64fHxXXCG+O64YV4orx1Xie+Kq8b1xtfi+uHp8f1w8fiCuGT8Ywy+fV6kTPxzXjR+J68WPxvXjBnHDuFHcOH4sbhI/HjeNm8XN4yfiFnHLuFX8ZNw6fipuEz/9u/u7xz3innGvuFccwn16QXJhclHy/eTi5JLk0uQHyWXJD5PLkyuSK5OrkquTa5Jrk+uS65MbkhuTm5Kbk1uSW5PbkiFUSQ8evfLaGx/5dD69T/EZfEZ/jc/kr/WZ/XU+4a/3WfwNPqu/0Wfz2X0On9Pn8rl9Hm89eefZxz6vz+eT/iaf39/sU30BX9AX8t4X9kV8I9/YN/ZN/OO+qW/mm/sn/BO+pW/pn/RP+qd8G/+0b+uf8e38s769f84/55/3HX0n39m/4Lv4F31X38139919T9/T9/a9fV/f1/f3/f0AP8AP9AP9ID/ID/FD/FA/1A/zw/xwP9yP9CP9KD/Kj/Fj/Dg/zk/wE/xEP9FP8pN8BABT/VQ/3U/3M/1MP8vP8nP8HD83da6f5+f5BX6BX+QX+cV+sV/ql/plfplf7pf7lX6lX+1X+7V+rV/v1/uNfqPf7Df7rX6r3+63+x1+h9/ld/k9fo/f5/f5/X6/P+AP+IP+oD/kD/nD/rA/4r/0R/1X/pj/2h/33/gT/lt/0n/nT/nT/oz/3p/1P/hz/ry/4H/0F/1P/pL/2V/2wU9IvJmYmHgrMSnxdmJyYkpiamJaYnpiRmJm4p3ErMTsxJzEu4m5ifcS8xLzEwsSCxOLEu8nFieWJJYmPkgsS3yYWJ5YkViZWJVYnVhjIOTeEYe8IV9IhptC/nBzSA0FQsFQKPhQOBQJRUOxcEsoHm4NJcJtoWS4PZQKpUOZ8GioHxqEhqFRaBweC03C46FpaBaahydCi9AytApPhtbhqdAmPB3ahmdCu/BsaB+eCx3C86Fj6BQ6hxdCl/Bi6Bq6he6hR+gZeoXeoU/oG/qF/uGlMCC8HAaGV8KgMDgMCa+GoeG1MCy8HoaHEWFkeCOMCqPDmDA2jAvjw4TwZpgY3gqTwtthcpgSpoZpYXqYEWaGd8KsMDvMCe+GueG9MC/MDwvCwrAovB8WhyVhafggLAsfhuVhRVgZVoXVYU1YG9aF9WFD2Bg2hc1hS9gatoXt4aOwI+wMu8LusCfsDfvCx2F/+CQcCJ+Gg+GzcCh8Hg6HL8KR8GU4Gr4Kx8LX4Xj4JpwI34aT4btwKpwOZ8L34Wz4IZwL58OF8GO4GH4Kl8LP4fIf/MxapT/zFroQQgghxP9Hev3O/h7/5jkDAOqX8U8hhGt35jz6j/s1AGzO9rdxH5WrRQIAnurW4aG/bxUrdu/e/ZfXLtcQ5ZsPAIl/OcAv8QpoDi2hNTSDYv+2vj6q00X+nfmTtwFk/IecFPg1/nX+z/+D+R97YuTikvGFLP/J/PMBUvP9mnPlKvzv8QpofmU10AyK/wfzZ2/yO/Vn+GICQNN/yMkEAE0z/Gv9ReBxeBpa/9MrhRBCCCGEEEKIv+mjyrT7vevnK9fnucyvOenh1/j3rs+FEEIIIYQQQghx9T3bqfOTj7Vu3aydDGQggzQ2aPmfvOZq/2YSQgghhBBC/Nl+Pen/9bkMV7MgIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBAiDfp/8Z/GrvYahRBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCiKvtfwUAAP//D5g3fQ==") openat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@bloom_filter={0x1e, 0x0, 0x0, 0x20cf99, 0x2600}, 0x48) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) readv(r3, &(0x7f0000001340)=[{&(0x7f0000001280)=""/151, 0x97}], 0x1) ioctl$TCSETS(r3, 0x40045431, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, "000080f100df000000a7d9de16c708db7200"}) r4 = syz_open_pts(r3, 0x42) r5 = dup3(r4, r3, 0x0) ioctl$TCSETS2(r5, 0x402c542b, &(0x7f0000000000)={0x0, 0xfffffffb, 0x0, 0x0, 0x0, "491f30abf22ccdee51880b515bcfeba44e75f1"}) 0s ago: executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_MCAST_RATE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x24, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xa}]}, 0x24}}, 0x0) kernel console output (not intermixed with test programs): lized): option downdelay: invalid value (18446744071562067968) [ 288.202240][ T7979] (unnamed net_device) (uninitialized): option downdelay: allowed values 0 - 2147483647 [ 288.356498][ T7874] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 288.370776][ T3617] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 288.537273][ T7874] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 288.613247][ T3580] Bluetooth: hci4: command tx timeout [ 288.818773][ T7874] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 288.950752][ T3617] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 289.049116][ T3617] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 289.148725][ T3617] usb 4-1: New USB device found, idVendor=1d34, idProduct=000a, bcdDevice= 0.00 [ 289.236766][ T3617] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 289.383415][ T3617] usb 4-1: config 0 descriptor?? [ 289.650723][ T7874] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 289.760079][ T3581] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 289.770707][ T3581] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 289.780300][ T3581] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 289.797393][ T3581] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 289.818179][ T3581] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 289.831378][ T3581] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 290.041216][ T3617] hid-led 0003:1D34:000A.0007: unknown main item tag 0x0 [ 290.137110][ T7874] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 290.171936][ T7874] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 290.242066][ T3617] hid-led: probe of 0003:1D34:000A.0007 failed with error -71 [ 290.269161][ T3617] usb 4-1: USB disconnect, device number 5 [ 290.306611][ T7874] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 290.345463][ T7998] chnl_net:caif_netlink_parms(): no params data found [ 290.374386][ T7874] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 290.607748][ T7998] bridge0: port 1(bridge_slave_0) entered blocking state [ 290.640564][ T7998] bridge0: port 1(bridge_slave_0) entered disabled state [ 290.668244][ T7998] device bridge_slave_0 entered promiscuous mode [ 290.683435][ T7998] bridge0: port 2(bridge_slave_1) entered blocking state [ 290.691861][ T7998] bridge0: port 2(bridge_slave_1) entered disabled state [ 290.700546][ T7998] device bridge_slave_1 entered promiscuous mode [ 290.735925][ T7998] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 290.762970][ T7998] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 290.939834][ T7998] team0: Port device team_slave_0 added [ 290.982013][ T7998] team0: Port device team_slave_1 added [ 291.019325][ T7874] 8021q: adding VLAN 0 to HW filter on device bond0 [ 291.069922][ T7888] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 291.114012][ T7888] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 291.149452][ T7998] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 291.159976][ T7998] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 291.250358][ T7998] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 291.273478][ T7998] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 291.290323][ T7998] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 291.350309][ T7998] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 291.375279][ T27] kauditd_printk_skb: 62 callbacks suppressed [ 291.375618][ T27] audit: type=1326 audit(1718135926.162:526): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8015 comm="syz-executor.3" exe="/root/syz-executor.3" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2ebc47cea9 code=0x0 [ 291.419215][ T7874] 8021q: adding VLAN 0 to HW filter on device team0 [ 291.431894][ T7888] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 291.453587][ T7888] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 291.473653][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 291.493079][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 291.581198][ T7874] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 291.610219][ T7874] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 291.713358][ T3617] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 291.730917][ T3617] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 291.739594][ T3617] bridge0: port 1(bridge_slave_0) entered blocking state [ 291.746847][ T3617] bridge0: port 1(bridge_slave_0) entered forwarding state [ 291.881656][ T8021] hub 9-0:1.0: USB hub found [ 291.887250][ T8021] hub 9-0:1.0: 8 ports detected [ 291.895983][ T3580] Bluetooth: hci0: command tx timeout [ 291.990617][ T3617] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 292.539853][ T3617] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 292.548576][ T3617] bridge0: port 2(bridge_slave_1) entered blocking state [ 292.555764][ T3617] bridge0: port 2(bridge_slave_1) entered forwarding state [ 292.570504][ T3617] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 292.579420][ T3617] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 292.590042][ T3617] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 292.606630][ T3617] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 292.615487][ T3617] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 292.630808][ T3617] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 292.640031][ T3617] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 292.651204][ T3617] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 292.666720][ T8026] loop3: detected capacity change from 0 to 2048 [ 292.674296][ T3617] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 292.690869][ T3617] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 292.714050][ T8026] EXT4-fs: Ignoring removed oldalloc option [ 292.752297][ T7998] device hsr_slave_0 entered promiscuous mode [ 292.764919][ T7998] device hsr_slave_1 entered promiscuous mode [ 292.795163][ T7998] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 292.796086][ T8026] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 292.812425][ T7998] Cannot create hsr debugfs directory [ 292.826633][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 292.835384][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 292.853364][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 292.910949][ T27] audit: type=1326 audit(1718135927.702:527): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8031 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feef8e7cea9 code=0x7ffc0000 [ 292.919146][ T8026] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz-executor.3: bg 0: block 96: padding at end of block bitmap is not set [ 292.939959][ T27] audit: type=1326 audit(1718135927.702:528): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8031 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feef8e7cea9 code=0x7ffc0000 [ 292.988385][ T27] audit: type=1326 audit(1718135927.762:529): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8031 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7feef8e7cea9 code=0x7ffc0000 [ 293.031136][ T8026] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 65537 with max blocks 33 with error 117 [ 293.053246][ T27] audit: type=1326 audit(1718135927.812:530): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8031 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feef8e7cea9 code=0x7ffc0000 [ 293.090715][ T8026] EXT4-fs (loop3): This should not happen!! Data will be lost [ 293.090715][ T8026] [ 293.103246][ T27] audit: type=1326 audit(1718135927.812:531): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8031 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feef8e7cea9 code=0x7ffc0000 [ 293.136814][ T27] audit: type=1326 audit(1718135927.812:532): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8031 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7feef8e7cea9 code=0x7ffc0000 [ 293.185509][ T3617] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 293.206538][ T3617] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 293.227160][ T27] audit: type=1326 audit(1718135927.812:533): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8031 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feef8e7cea9 code=0x7ffc0000 [ 293.302138][ T7874] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 293.327551][ T7888] 8021q: adding VLAN 0 to HW filter on device bond0 [ 293.335716][ T27] audit: type=1326 audit(1718135927.812:534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8031 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7feef8e7a627 code=0x7ffc0000 [ 293.335897][ T5517] EXT4-fs (loop3): unmounting filesystem. [ 293.393704][ T27] audit: type=1326 audit(1718135927.812:535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8031 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7feef8e402e9 code=0x7ffc0000 [ 293.435819][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 293.456952][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 293.516282][ T7874] device veth0_vlan entered promiscuous mode [ 293.561136][ T4404] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 293.569192][ T4404] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 293.599630][ T4404] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 293.621159][ T4404] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 293.664959][ T7888] 8021q: adding VLAN 0 to HW filter on device team0 [ 293.761988][ T46] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 293.796467][ T4404] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 293.827143][ T4404] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 293.858531][ T7874] device veth1_vlan entered promiscuous mode [ 293.897446][ T46] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 293.969020][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 293.980897][ T3580] Bluetooth: hci0: command tx timeout [ 293.982520][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 294.026354][ T4271] bridge0: port 1(bridge_slave_0) entered blocking state [ 294.033552][ T4271] bridge0: port 1(bridge_slave_0) entered forwarding state [ 294.084593][ T46] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 294.150846][ T3617] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 294.167267][ T3617] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 294.205897][ T3617] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 294.223125][ T8040] loop3: detected capacity change from 0 to 32768 [ 294.231015][ T3617] bridge0: port 2(bridge_slave_1) entered blocking state [ 294.238115][ T3617] bridge0: port 2(bridge_slave_1) entered forwarding state [ 294.289451][ T46] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 294.326766][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 294.372135][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 294.400751][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 294.421797][ T7874] device veth0_macvtap entered promiscuous mode [ 294.450665][ T4395] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 294.458995][ T4395] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 294.521302][ T4395] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 294.532643][ T4395] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 294.550806][ T8047] IPv4: Oversized IP packet from 172.20.20.24 [ 294.560822][ C0] IPv4: Oversized IP packet from 172.20.20.24 [ 294.567380][ C0] IPv4: Oversized IP packet from 172.20.20.24 [ 294.587419][ T4395] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 294.601245][ T4395] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 294.623955][ T7874] device veth1_macvtap entered promiscuous mode [ 294.652855][ T4402] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 294.662141][ T4402] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 294.723707][ T3563] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 294.743986][ T3563] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 294.752922][ T3563] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 294.771277][ T3563] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 294.784184][ T7888] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 294.804685][ T7874] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 294.824207][ T7874] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 294.839514][ T7874] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 294.860508][ T7874] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 294.877767][ T7874] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 294.888639][ T7874] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 294.911474][ T7874] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 294.932360][ T7874] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 294.951408][ T7874] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 294.969932][ T7874] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 294.988743][ T7874] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 294.998818][ T7874] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 295.012271][ T7874] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 295.024124][ T7874] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 295.041414][ T7874] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 295.050564][ T7874] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 295.059436][ T7874] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 295.077963][ T7874] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 295.176693][ T3563] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 295.470332][ T3563] usb 4-1: Using ep0 maxpacket: 32 [ 295.591149][ T3563] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 295.860311][ T3563] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 295.889989][ T3563] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 295.912023][ T3563] usb 4-1: config 0 descriptor?? [ 295.951427][ T3563] hub 4-1:0.0: USB hub found [ 296.186185][ T3580] Bluetooth: hci0: command tx timeout [ 296.218800][ T3576] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 296.228693][ T3576] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 296.238811][ T3576] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 296.247917][ T3576] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 296.250722][ T3563] hub 4-1:0.0: config failed, can't read hub descriptor (err -22) [ 296.421400][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 296.428955][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 296.452616][ T7888] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 296.501818][ T4044] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 296.531316][ T4044] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 296.544110][ T3563] hid-generic 0003:046D:C314.0008: item fetching failed at offset 0/1 [ 296.553723][ T3563] hid-generic: probe of 0003:046D:C314.0008 failed with error -22 [ 296.625770][ T4267] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 296.669402][ T4044] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 296.679456][ T3620] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 296.697052][ T3620] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 296.708503][ T4044] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 296.728640][ T3620] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 296.856685][ T4267] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 296.877341][ T4267] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 296.897212][ T4267] usb 4-1: USB disconnect, device number 6 [ 296.920878][ T7888] device veth0_vlan entered promiscuous mode [ 296.965733][ T4267] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 296.981137][ T4267] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 297.004325][ T7888] device veth1_vlan entered promiscuous mode [ 297.133799][ T8070] cgroup: Bad value for 'name' [ 297.197128][ T4404] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 297.215351][ T8071] loop1: detected capacity change from 0 to 512 [ 297.255395][ T4404] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 297.325272][ T4404] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 297.359066][ T8071] EXT4-fs (loop1): orphan cleanup on readonly fs [ 297.400773][ T8071] EXT4-fs (loop1): 1 orphan inode deleted [ 297.502513][ T4404] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 297.987702][ T8071] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 298.014050][ T27] kauditd_printk_skb: 57 callbacks suppressed [ 298.014066][ T27] audit: type=1326 audit(1718135932.802:593): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8073 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ebc47cea9 code=0x7ffc0000 [ 298.053194][ T27] audit: type=1326 audit(1718135932.842:594): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8073 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ebc47cea9 code=0x7ffc0000 [ 298.084739][ T27] audit: type=1326 audit(1718135932.842:595): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8073 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2ebc47cea9 code=0x7ffc0000 [ 298.130054][ T7888] device veth0_macvtap entered promiscuous mode [ 298.157166][ T27] audit: type=1326 audit(1718135932.842:596): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8073 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ebc47cea9 code=0x7ffc0000 [ 298.180470][ T27] audit: type=1326 audit(1718135932.842:597): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8073 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2ebc47cea9 code=0x7ffc0000 [ 298.212367][ T27] audit: type=1326 audit(1718135932.912:598): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8073 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ebc47cea9 code=0x7ffc0000 [ 298.300383][ T3580] Bluetooth: hci0: command tx timeout [ 298.304001][ T7874] EXT4-fs (loop1): unmounting filesystem. [ 298.324312][ T27] audit: type=1326 audit(1718135932.972:599): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8073 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f2ebc47a627 code=0x7ffc0000 [ 298.354489][ T7888] device veth1_macvtap entered promiscuous mode [ 298.375438][ T27] audit: type=1326 audit(1718135932.972:600): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8073 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f2ebc4402e9 code=0x7ffc0000 [ 298.456914][ T27] audit: type=1326 audit(1718135932.972:601): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8073 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f2ebc47a627 code=0x7ffc0000 [ 298.497718][ T7888] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 298.516432][ T27] audit: type=1326 audit(1718135932.972:602): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8073 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f2ebc4402e9 code=0x7ffc0000 [ 298.518645][ T7888] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 298.601066][ T7888] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 298.612415][ T7888] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 298.622597][ T7888] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 298.633468][ T7888] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 298.643485][ T7888] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 298.678467][ T7888] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 298.695339][ T7888] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 298.707258][ T4402] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 298.717032][ T4402] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 298.752427][ T7998] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 298.781009][ T7998] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 298.807679][ T7998] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 298.826432][ T7888] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 298.866613][ T7888] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 298.876550][ T8086] loop3: detected capacity change from 0 to 512 [ 298.877673][ T8086] EXT4-fs: Ignoring removed nomblk_io_submit option [ 298.892390][ T7888] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 298.911626][ T7888] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 298.928958][ T8086] EXT4-fs: Mount option(s) incompatible with ext2 [ 298.932057][ T8088] IPv4: Oversized IP packet from 172.20.20.24 [ 298.942330][ C0] IPv4: Oversized IP packet from 172.20.20.24 [ 298.948671][ C0] IPv4: Oversized IP packet from 172.20.20.24 [ 298.968894][ T7888] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 298.979482][ T7888] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 298.989384][ T7888] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 298.999993][ T7888] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 299.022548][ T7888] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 299.038268][ T7888] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 299.061127][ T7888] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 299.080222][ T7888] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 299.107823][ T7888] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 299.181903][ T7998] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 299.204714][ T4395] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 299.227465][ T4395] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 299.512560][ T3675] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 299.548198][ T3675] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 299.565195][ T46] device hsr_slave_0 left promiscuous mode [ 299.589005][ T46] device hsr_slave_1 left promiscuous mode [ 299.623439][ T46] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 299.649849][ T46] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 299.675331][ T46] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 299.687638][ T46] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 299.733815][ T46] device bridge_slave_1 left promiscuous mode [ 299.752600][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 299.764937][ T46] device bridge_slave_0 left promiscuous mode [ 299.772663][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 299.799738][ T46] device veth1_macvtap left promiscuous mode [ 299.808386][ T46] device veth0_macvtap left promiscuous mode [ 299.820093][ T46] device veth1_vlan left promiscuous mode [ 299.829590][ T46] device veth0_vlan left promiscuous mode [ 300.459754][ T46] team0 (unregistering): Port device team_slave_1 removed [ 300.499288][ T46] team0 (unregistering): Port device team_slave_0 removed [ 300.517612][ T46] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 300.544244][ T46] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 300.670889][ T8106] loop1: detected capacity change from 0 to 32768 [ 300.679216][ T8106] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz-executor.1 (8106) [ 300.702002][ T46] bond0 (unregistering): Released all slaves [ 300.728124][ T8106] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 300.738956][ T8106] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 300.747853][ T8106] BTRFS info (device loop1): using free space tree [ 300.774705][ T3576] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 300.814519][ T4580] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 300.825893][ T4580] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 300.892139][ T7998] 8021q: adding VLAN 0 to HW filter on device bond0 [ 300.916340][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 300.989646][ T8106] BTRFS info (device loop1): enabling ssd optimizations [ 301.018991][ T6063] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 301.028079][ T6063] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 301.040495][ T7998] 8021q: adding VLAN 0 to HW filter on device team0 [ 301.057814][ T6063] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 301.067708][ T6063] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 301.082410][ T6063] bridge0: port 1(bridge_slave_0) entered blocking state [ 301.089613][ T6063] bridge0: port 1(bridge_slave_0) entered forwarding state [ 301.113160][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 301.121593][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 301.130632][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 301.139412][ T4274] bridge0: port 2(bridge_slave_1) entered blocking state [ 301.146688][ T4274] bridge0: port 2(bridge_slave_1) entered forwarding state [ 301.155305][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 301.200614][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 301.210659][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 301.221386][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 301.260609][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 301.268947][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 301.279777][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 301.299968][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 301.309436][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 301.320423][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 301.329088][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 301.377285][ T8122] loop3: detected capacity change from 0 to 40427 [ 301.380783][ T7998] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 301.418968][ T8122] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 301.425960][ T8148] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 301.435054][ T8122] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 301.517900][ T8122] F2FS-fs (loop3): Found nat_bits in checkpoint [ 301.637033][ T8156] loop0: detected capacity change from 0 to 256 [ 301.676557][ T8122] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 301.690503][ T8122] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 301.702889][ T8156] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 301.716388][ T7874] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 301.951168][ T8164] IPv4: Oversized IP packet from 172.20.20.24 [ 301.957791][ C1] IPv4: Oversized IP packet from 172.20.20.24 [ 301.964162][ C1] IPv4: Oversized IP packet from 172.20.20.24 [ 302.182085][ T8167] syz-executor.3: attempt to access beyond end of device [ 302.182085][ T8167] loop3: rw=2049, sector=77824, nr_sectors = 520 limit=40427 [ 302.330542][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 302.360773][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 302.373412][ T7998] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 302.421817][ T8179] IPVS: sync thread started: state = MASTER, mcast_ifn = vlan0, syncid = 3584, id = 0 [ 302.727902][ T8187] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 303.423627][ T27] kauditd_printk_skb: 150 callbacks suppressed [ 303.423640][ T27] audit: type=1804 audit(1718135938.212:753): pid=8200 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir3246861737/syzkaller.4JCpuL/421/cgroup.controllers" dev="sda1" ino=1949 res=1 errno=0 [ 303.721022][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 303.742136][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 303.826819][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 303.828707][ T8207] loop0: detected capacity change from 0 to 256 [ 303.841339][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 303.863201][ T3581] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 303.874346][ T3581] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 303.884026][ T3581] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 303.892267][ T3581] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 303.901475][ T3581] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 303.910600][ T3581] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 303.919953][ T7998] device veth0_vlan entered promiscuous mode [ 303.928621][ T3563] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 303.937974][ T3563] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 303.959133][ T7998] device veth1_vlan entered promiscuous mode [ 304.106595][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 304.121523][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 304.129871][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 304.148339][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 304.161417][ T7998] device veth0_macvtap entered promiscuous mode [ 304.209889][ T7998] device veth1_macvtap entered promiscuous mode [ 304.257991][ T27] audit: type=1804 audit(1718135939.042:754): pid=8213 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir3246861737/syzkaller.4JCpuL/424/bus" dev="sda1" ino=1955 res=1 errno=0 [ 304.306881][ T7998] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 304.327945][ T7998] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 304.347152][ T7998] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 304.351934][ T27] audit: type=1804 audit(1718135939.082:755): pid=8213 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir3246861737/syzkaller.4JCpuL/424/bus" dev="sda1" ino=1955 res=1 errno=0 [ 304.357813][ T7998] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 304.422633][ T7998] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 304.450371][ T7998] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 304.480241][ T7998] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 304.500268][ T7998] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 304.522614][ T7998] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 304.533203][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 304.551038][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 304.561688][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 304.580711][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 304.614481][ T7998] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 304.629004][ T8219] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 304.636374][ T7998] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 304.657271][ T7998] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 304.677992][ T7998] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 304.698750][ T7998] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 304.732105][ T7998] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 304.770999][ T7998] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 304.796525][ T7998] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 304.826825][ T7998] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 304.846865][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 304.862649][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 304.895755][ T7998] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 304.914876][ T7998] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 304.917598][ T8224] loop0: detected capacity change from 0 to 2048 [ 304.931619][ T7998] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 304.950328][ T7998] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 304.992251][ T8224] UDF-fs: error (device loop0): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 305.027195][ T8228] loop3: detected capacity change from 0 to 512 [ 305.056309][ T8224] UDF-fs: error (device loop0): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 305.110785][ T8224] UDF-fs: warning (device loop0): udf_load_vrs: No anchor found [ 305.113296][ T8228] loop3: detected capacity change from 0 to 512 [ 305.118483][ T8224] UDF-fs: Scanning with blocksize 512 failed [ 305.178129][ T8224] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 305.205066][ T8208] chnl_net:caif_netlink_parms(): no params data found [ 305.212401][ T8228] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 305.217929][ T27] audit: type=1800 audit(1718135940.002:756): pid=8224 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="loop0" ino=851 res=0 errno=0 [ 305.249497][ T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 305.281830][ T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 305.292615][ T8228] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 305.376225][ T8228] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c128, mo2=0002] [ 305.388300][ T8228] System zones: 1-12 [ 305.410035][ T8169] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 305.484261][ T8228] EXT4-fs (loop3): 1 orphan inode deleted [ 305.490052][ T8228] EXT4-fs (loop3): 1 truncate cleaned up [ 305.522861][ T8208] bridge0: port 1(bridge_slave_0) entered blocking state [ 305.524396][ T62] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 305.540323][ T8208] bridge0: port 1(bridge_slave_0) entered disabled state [ 305.551384][ T8208] device bridge_slave_0 entered promiscuous mode [ 305.566623][ T8208] bridge0: port 2(bridge_slave_1) entered blocking state [ 305.574356][ T62] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 305.580296][ T8228] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 305.590378][ T8208] bridge0: port 2(bridge_slave_1) entered disabled state [ 305.603457][ T8208] device bridge_slave_1 entered promiscuous mode [ 305.656851][ T8228] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 305.676394][ T8169] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 305.691617][ T8247] netlink: 'syz-executor.0': attribute type 4 has an invalid length. [ 305.697548][ T8228] EXT4-fs (loop3): Remounting filesystem read-only [ 305.750293][ T8249] netlink: 'syz-executor.0': attribute type 4 has an invalid length. [ 305.799679][ T8208] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 305.895786][ T46] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 305.913779][ T5517] EXT4-fs error (device loop3): __ext4_iget:5044: inode #11: block 524051: comm syz-executor.3: invalid block [ 305.944386][ T8208] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 305.964376][ T5517] EXT4-fs error (device loop3): __ext4_iget:5044: inode #11: block 524051: comm syz-executor.3: invalid block [ 305.980427][ T3581] Bluetooth: hci3: command tx timeout [ 307.358209][ T8267] loop4: detected capacity change from 0 to 256 [ 307.857829][ T8267] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 308.091714][ T3581] Bluetooth: hci3: command tx timeout [ 308.303500][ T8208] team0: Port device team_slave_0 added [ 308.314930][ T5517] EXT4-fs (loop3): unmounting filesystem. [ 308.362189][ T46] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 308.455107][ T8208] team0: Port device team_slave_1 added [ 308.517900][ T8276] loop4: detected capacity change from 0 to 64 [ 308.522823][ T46] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 308.656271][ T46] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 308.706979][ T8208] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 308.724041][ T8208] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 308.809219][ T8208] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 308.844744][ T8208] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 308.864619][ T8208] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 308.915256][ T8208] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 309.055566][ T8208] device hsr_slave_0 entered promiscuous mode [ 309.067797][ T8208] device hsr_slave_1 entered promiscuous mode [ 309.077052][ T27] audit: type=1800 audit(1718135943.862:757): pid=8291 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=1939 res=0 errno=0 [ 309.118456][ T8208] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 309.129822][ T8208] Cannot create hsr debugfs directory [ 309.333286][ T3581] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 309.374141][ T3581] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 309.384208][ T3581] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 309.393532][ T3581] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 309.403977][ T3581] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 309.798264][ T3581] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 310.203305][ T8307] IPVS: Error connecting to the multicast addr [ 310.271862][ T3581] Bluetooth: hci3: command tx timeout [ 311.471912][ T8321] loop0: detected capacity change from 0 to 2048 [ 311.501004][ T8321] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024) [ 311.528337][ T8299] chnl_net:caif_netlink_parms(): no params data found [ 311.550861][ T8326] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 311.766466][ T8340] loop0: detected capacity change from 0 to 256 [ 311.793504][ T8299] bridge0: port 1(bridge_slave_0) entered blocking state [ 311.828776][ T8299] bridge0: port 1(bridge_slave_0) entered disabled state [ 311.845151][ T8299] device bridge_slave_0 entered promiscuous mode [ 311.852315][ T27] audit: type=1800 audit(1718135946.632:758): pid=8338 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=1955 res=0 errno=0 [ 311.871982][ T8299] bridge0: port 2(bridge_slave_1) entered blocking state [ 311.927871][ T8299] bridge0: port 2(bridge_slave_1) entered disabled state [ 311.956057][ T8299] device bridge_slave_1 entered promiscuous mode [ 312.007132][ T8346] syz-executor.2 sent an empty control message without MSG_MORE. [ 312.084497][ T8299] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 312.130502][ T3581] Bluetooth: hci1: command tx timeout [ 312.157301][ T8299] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 312.278476][ T8208] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 312.306750][ T3581] Bluetooth: hci3: command tx timeout [ 312.402287][ T8299] team0: Port device team_slave_0 added [ 312.633760][ T8299] team0: Port device team_slave_1 added [ 313.277451][ T8208] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 313.301538][ T8364] loop4: detected capacity change from 0 to 2048 [ 313.319691][ T8364] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024) [ 313.353034][ T8363] A link change request failed with some changes committed already. Interface veth0_to_bond may have been left with an inconsistent configuration, please check. [ 313.370295][ T8299] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 313.375740][ T8365] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 313.388058][ T8299] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 313.447361][ T8299] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 313.463175][ T8299] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 313.490844][ T8299] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 313.535831][ T8299] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 313.547871][ T8208] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 313.601820][ T46] device hsr_slave_0 left promiscuous mode [ 313.610580][ T46] device hsr_slave_1 left promiscuous mode [ 313.617359][ T46] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 313.626024][ T46] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 313.635676][ T46] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 313.643487][ T46] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 313.653219][ T46] device bridge_slave_1 left promiscuous mode [ 313.659509][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 313.671932][ T46] device bridge_slave_0 left promiscuous mode [ 313.678223][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 313.708741][ T46] device veth1_macvtap left promiscuous mode [ 313.725671][ T46] device veth0_macvtap left promiscuous mode [ 313.739125][ T46] device veth1_vlan left promiscuous mode [ 313.754645][ T46] device veth0_vlan left promiscuous mode [ 314.157321][ T3580] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 314.169215][ T3580] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 314.186238][ T3580] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 314.195577][ T3580] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 314.205327][ T3580] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 314.213553][ T3580] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 314.220363][ T3571] Bluetooth: hci1: command tx timeout [ 314.259981][ T46] team0 (unregistering): Port device team_slave_1 removed [ 314.275281][ T46] team0 (unregistering): Port device team_slave_0 removed [ 314.292594][ T46] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 314.317295][ T46] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 314.398790][ T46] bond0 (unregistering): Released all slaves [ 314.472911][ T8208] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 314.599266][ T8389] loop4: detected capacity change from 0 to 8 [ 314.606714][ T27] audit: type=1804 audit(1718135949.392:759): pid=8387 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir3246861737/syzkaller.4JCpuL/447/bus" dev="sda1" ino=1948 res=1 errno=0 [ 314.672792][ T8389] SQUASHFS error: Failed to read block 0x63a: -5 [ 314.694971][ T8299] device hsr_slave_0 entered promiscuous mode [ 314.714117][ T8389] SQUASHFS error: Unable to read metadata cache entry [638] [ 314.723230][ T8299] device hsr_slave_1 entered promiscuous mode [ 314.739649][ T8389] SQUASHFS error: Unable to read directory block [26067d:0] [ 314.775809][ T27] audit: type=1326 audit(1718135949.562:760): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8390 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7feef8e7cea9 code=0x0 [ 314.858796][ T8393] loop4: detected capacity change from 0 to 512 [ 314.919910][ T8393] EXT4-fs error (device loop4): ext4_orphan_get:1422: comm syz-executor.4: bad orphan inode 15 [ 314.935440][ T8393] ext4_test_bit(bit=14, block=18) = 1 [ 314.947386][ T8393] is_bad_inode(inode)=0 [ 314.955777][ T8393] NEXT_ORPHAN(inode)=1023 [ 314.965694][ T8393] max_ino=32 [ 314.968950][ T8393] i_nlink=0 [ 314.983122][ T8393] EXT4-fs error (device loop4): ext4_xattr_delete_inode:2926: inode #15: comm syz-executor.4: corrupted xattr block 19 [ 315.018077][ T8393] EXT4-fs warning (device loop4): ext4_evict_inode:299: xattr delete (err -117) [ 315.027991][ T8393] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 315.037279][ T8393] ext4 filesystem being mounted at /root/syzkaller-testdir2860457471/syzkaller.87LEAv/17/bus supports timestamps until 2038 (0x7fffffff) [ 315.074581][ T8393] EXT4-fs warning (device loop4): ext4_empty_dir:3101: inode #12: comm syz-executor.4: directory missing '.' [ 315.109676][ T8208] 8021q: adding VLAN 0 to HW filter on device bond0 [ 315.152668][ T7998] EXT4-fs (loop4): unmounting filesystem. [ 315.312202][ T8299] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 315.353012][ T6063] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 315.379209][ T6063] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 315.401377][ T8208] 8021q: adding VLAN 0 to HW filter on device team0 [ 315.425127][ T8384] chnl_net:caif_netlink_parms(): no params data found [ 315.461667][ T4267] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 315.477187][ T4267] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 315.530873][ T4267] bridge0: port 1(bridge_slave_0) entered blocking state [ 315.538160][ T4267] bridge0: port 1(bridge_slave_0) entered forwarding state [ 316.330336][ T3581] Bluetooth: hci4: command tx timeout [ 316.337105][ T3581] Bluetooth: hci1: command tx timeout [ 316.542734][ T8299] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 316.576304][ T3563] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 316.585405][ T3563] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 316.601956][ T3563] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 316.621071][ T3563] bridge0: port 2(bridge_slave_1) entered blocking state [ 316.628274][ T3563] bridge0: port 2(bridge_slave_1) entered forwarding state [ 316.643009][ T3563] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 316.653124][ T3563] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 316.662292][ T3563] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 316.683032][ T3563] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 316.732412][ T8407] A link change request failed with some changes committed already. Interface veth0_to_bond may have been left with an inconsistent configuration, please check. [ 316.790709][ T8299] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 316.816021][ T4267] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 316.824714][ T4267] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 316.835615][ T4267] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 316.844913][ T4267] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 316.853933][ T4267] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 316.907095][ T4267] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 316.908586][ T8410] loop4: detected capacity change from 0 to 2048 [ 316.919528][ T4267] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 316.944193][ T8208] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 316.984329][ T8410] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=13815, location=13815 [ 317.000659][ T8299] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 317.091713][ T1255] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.098205][ T1255] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.232958][ T8384] bridge0: port 1(bridge_slave_0) entered blocking state [ 317.248168][ T8384] bridge0: port 1(bridge_slave_0) entered disabled state [ 317.281748][ T8384] device bridge_slave_0 entered promiscuous mode [ 317.303043][ T8384] bridge0: port 2(bridge_slave_1) entered blocking state [ 317.321375][ T8384] bridge0: port 2(bridge_slave_1) entered disabled state [ 317.350504][ T8384] device bridge_slave_1 entered promiscuous mode [ 317.466925][ T8384] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 317.551678][ T8384] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 317.592918][ T8208] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 317.604007][ T6063] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 317.621429][ T6063] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 317.821976][ T8384] team0: Port device team_slave_0 added [ 317.888719][ T8384] team0: Port device team_slave_1 added [ 317.930595][ T6063] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 317.954811][ T6063] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 318.037527][ T8299] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 318.114400][ T8299] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 318.153130][ T8299] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 318.166576][ T8384] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 318.184609][ T8384] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 318.243658][ T8384] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 318.267430][ T8299] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 318.278133][ T8437] loop4: detected capacity change from 0 to 2048 [ 318.303151][ T8437] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 318.305062][ T8384] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 318.322761][ T8384] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 318.353411][ T8384] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 318.370656][ T3581] Bluetooth: hci1: command tx timeout [ 318.376159][ T3581] Bluetooth: hci4: command tx timeout [ 318.384885][ T8208] device veth0_vlan entered promiscuous mode [ 318.410885][ T6063] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 318.432180][ T6063] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 318.541122][ T8384] device hsr_slave_0 entered promiscuous mode [ 318.551483][ T8384] device hsr_slave_1 entered promiscuous mode [ 318.563278][ T8384] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 318.579345][ T8384] Cannot create hsr debugfs directory [ 318.586708][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 318.604418][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 318.638019][ T8208] device veth1_vlan entered promiscuous mode [ 318.680082][ T3563] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 318.724979][ T8445] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 318.794089][ T8208] device veth0_macvtap entered promiscuous mode [ 318.808307][ T3563] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 318.820854][ T3563] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 318.845555][ T8208] device veth1_macvtap entered promiscuous mode [ 318.865704][ T3563] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 318.875038][ T3563] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 318.917592][ T8208] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 318.934517][ T8208] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 318.958303][ T8208] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 318.977929][ T8208] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 318.993224][ T8208] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 319.009995][ T8208] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 319.033225][ T8208] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 319.056826][ T8208] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 319.079854][ T8208] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 319.086575][ T7998] UDF-fs: error (device loop4): udf_read_inode: (ino 1317) failed !bh [ 319.114926][ T7998] UDF-fs: error (device loop4): udf_read_inode: (ino 1317) failed !bh [ 319.123877][ T8299] 8021q: adding VLAN 0 to HW filter on device bond0 [ 319.133483][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 319.150046][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 319.161689][ T8208] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 319.178113][ T8208] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 319.188427][ T8208] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 319.199733][ T8208] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 319.209816][ T8208] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 319.224776][ T8208] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 319.235695][ T8208] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 319.246411][ T8208] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 319.259582][ T8208] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 319.325764][ T4394] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 319.341184][ T4394] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 319.403009][ T8208] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 319.424665][ T8208] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 319.435549][ T8208] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 319.444423][ T8208] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 319.480033][ T8299] 8021q: adding VLAN 0 to HW filter on device team0 [ 319.502591][ T3563] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 319.521292][ T3563] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 319.617022][ T46] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 319.674946][ T6063] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 319.691605][ T6063] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 319.720699][ T6063] bridge0: port 1(bridge_slave_0) entered blocking state [ 319.727861][ T6063] bridge0: port 1(bridge_slave_0) entered forwarding state [ 319.760883][ T6063] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 319.769758][ T6063] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 319.790841][ T6063] bridge0: port 2(bridge_slave_1) entered blocking state [ 319.797991][ T6063] bridge0: port 2(bridge_slave_1) entered forwarding state [ 319.888162][ T46] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 319.941037][ T33] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 319.949855][ T33] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 319.961803][ T6063] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 319.969973][ T6063] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 319.999171][ T6063] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 320.031500][ T6063] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 320.039677][ T6063] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 320.079143][ T6063] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 320.111288][ T46] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 320.198012][ T3675] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 320.221445][ T3675] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 320.264267][ T8299] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 320.306316][ T8299] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 320.362813][ T6063] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 320.372657][ T6063] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 320.382382][ T6063] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 320.391410][ T6063] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 320.399588][ T6063] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 320.408564][ T3571] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 320.408577][ T6063] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 320.425478][ T6063] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 320.434598][ T3580] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 320.452106][ T3580] Bluetooth: hci4: command tx timeout [ 320.463751][ T3580] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 320.477476][ T3580] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 320.828260][ T3580] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 320.839348][ T3580] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 321.151826][ T6063] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 321.191637][ T6063] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 321.327713][ T46] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 321.508634][ T8468] loop1: detected capacity change from 0 to 1024 [ 321.508730][ T6063] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 321.525842][ T6063] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 321.534145][ T8468] hfsplus: bad catalog entry type [ 321.565135][ T4044] hfsplus: b-tree write err: -5, ino 4 [ 321.566105][ T8299] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 321.640808][ T4394] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 321.663925][ T4394] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 321.813739][ T8299] device veth0_vlan entered promiscuous mode [ 321.830383][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 321.839664][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 321.848475][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 321.857080][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 321.889230][ T8299] device veth1_vlan entered promiscuous mode [ 321.962669][ T8454] chnl_net:caif_netlink_parms(): no params data found [ 321.991214][ T4394] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 322.005723][ T4394] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 322.014264][ T4394] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 322.023477][ T4394] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 322.048044][ T8299] device veth0_macvtap entered promiscuous mode [ 322.054736][ T26] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 322.105289][ T8299] device veth1_macvtap entered promiscuous mode [ 322.133312][ T8454] bridge0: port 1(bridge_slave_0) entered blocking state [ 322.161579][ T8454] bridge0: port 1(bridge_slave_0) entered disabled state [ 322.170070][ T8454] device bridge_slave_0 entered promiscuous mode [ 322.195586][ T8454] bridge0: port 2(bridge_slave_1) entered blocking state [ 322.203656][ T8454] bridge0: port 2(bridge_slave_1) entered disabled state [ 322.217406][ T8454] device bridge_slave_1 entered promiscuous mode [ 322.228055][ T8299] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 322.239927][ T8299] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 322.250057][ T8299] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 322.260884][ T8299] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 322.271465][ T8299] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 322.282024][ T8299] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 322.301655][ T8299] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 322.316266][ T8299] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 322.326614][ T8299] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 322.337727][ T8299] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 322.340255][ T26] usb 2-1: Using ep0 maxpacket: 32 [ 322.350083][ T8299] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 322.360910][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 322.369455][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 322.378487][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 322.387735][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 322.435918][ T8299] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 322.446874][ T8299] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 322.457929][ T8299] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 322.468450][ T8299] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 322.478318][ T8299] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 322.488923][ T8299] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 322.498891][ T8299] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 322.510452][ T8299] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 322.510702][ T26] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 322.520370][ T8299] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 322.520393][ T8299] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 322.522316][ T8299] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 322.541215][ T26] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 322.542799][ T3580] Bluetooth: hci4: command tx timeout [ 322.563022][ T26] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 322.608534][ T3617] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 322.609235][ T26] usb 2-1: config 0 descriptor?? [ 322.619324][ T3617] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 322.648635][ T8299] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 322.658850][ T8299] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 322.667810][ T8299] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 322.677470][ T26] hub 2-1:0.0: USB hub found [ 322.682334][ T8299] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 322.727592][ T8454] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 322.774022][ T8454] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 322.804524][ T46] IPVS: stopping master sync thread 8179 ... [ 322.930759][ T3580] Bluetooth: hci0: command tx timeout [ 322.943224][ T8384] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 322.965412][ T8384] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 322.988918][ T8384] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 323.001413][ T26] hub 2-1:0.0: config failed, can't read hub descriptor (err -22) [ 323.026807][ T8454] team0: Port device team_slave_0 added [ 323.056276][ T8384] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 323.093742][ T8454] team0: Port device team_slave_1 added [ 323.165690][ T3675] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 323.183702][ T3675] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 323.226646][ T46] device hsr_slave_0 left promiscuous mode [ 323.240069][ T46] device hsr_slave_1 left promiscuous mode [ 323.261199][ T46] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 323.268691][ T46] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 323.288490][ T46] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 323.306243][ T26] hid-generic 0003:046D:C314.0009: item fetching failed at offset 0/1 [ 323.306687][ T46] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 323.329593][ T8496] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 323.343063][ T26] hid-generic: probe of 0003:046D:C314.0009 failed with error -22 [ 323.349269][ T46] device bridge_slave_1 left promiscuous mode [ 323.367591][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 323.379764][ T46] device bridge_slave_0 left promiscuous mode [ 323.396593][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 323.409528][ T46] device veth1_macvtap left promiscuous mode [ 323.416214][ T46] device veth0_macvtap left promiscuous mode [ 323.424552][ T46] device veth1_vlan left promiscuous mode [ 323.430949][ T46] device veth0_vlan left promiscuous mode [ 323.633908][ T4394] usb 2-1: USB disconnect, device number 8 [ 323.666703][ T46] team0 (unregistering): Port device team_slave_1 removed [ 323.687896][ T46] team0 (unregistering): Port device team_slave_0 removed [ 323.701642][ T46] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 323.716141][ T46] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 323.798554][ T46] bond0 (unregistering): Released all slaves [ 323.878492][ T8454] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 323.885708][ T8454] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 323.912722][ T8454] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 323.939512][ T3563] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 323.958785][ T8454] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 323.977085][ T8454] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 324.024177][ T8454] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 324.081742][ T4096] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 324.113476][ T4096] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 324.159404][ T8454] device hsr_slave_0 entered promiscuous mode [ 324.181733][ T8454] device hsr_slave_1 entered promiscuous mode [ 324.195799][ T8454] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 324.209147][ T8454] Cannot create hsr debugfs directory [ 324.211570][ T8503] loop1: detected capacity change from 0 to 2048 [ 324.224618][ T3563] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 324.291445][ T8503] Alternate GPT is invalid, using primary GPT. [ 324.297749][ T8503] loop1: p1 p2 p3 [ 324.363287][ T8384] 8021q: adding VLAN 0 to HW filter on device bond0 [ 324.436422][ T3563] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 324.445861][ T3563] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 324.529230][ T8384] 8021q: adding VLAN 0 to HW filter on device team0 [ 324.539943][ T8512] loop3: detected capacity change from 0 to 2048 [ 324.555432][ T8512] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=13815, location=13815 [ 324.566355][ T8508] loop1: detected capacity change from 0 to 128 [ 324.606524][ T3563] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 324.625862][ T3563] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 324.658184][ T3563] bridge0: port 1(bridge_slave_0) entered blocking state [ 324.665433][ T3563] bridge0: port 1(bridge_slave_0) entered forwarding state [ 324.705744][ T3563] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 324.735929][ T3563] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 324.756765][ T3563] bridge0: port 2(bridge_slave_1) entered blocking state [ 324.764046][ T3563] bridge0: port 2(bridge_slave_1) entered forwarding state [ 324.808482][ T3563] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 324.827251][ T3563] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 324.848600][ T3563] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 324.948216][ T8454] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 325.006225][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 325.015322][ T3580] Bluetooth: hci0: command tx timeout [ 325.027495][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 325.039325][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 325.040669][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 325.041563][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 325.042249][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 325.047937][ T8384] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 325.048780][ T8384] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 325.055612][ T6063] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 325.119321][ T6063] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 325.128171][ T6063] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 325.149367][ T8454] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 325.379393][ T8524] loop3: detected capacity change from 0 to 1024 [ 325.437157][ T8454] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 326.189815][ T4580] hfsplus: b-tree write err: -5, ino 4 [ 326.244125][ T8454] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 326.386666][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 326.398120][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 326.424776][ T8384] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 326.489276][ T8537] loop1: detected capacity change from 0 to 1024 [ 326.492668][ T4403] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 326.528851][ T4403] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 326.604518][ T4394] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 326.630503][ T3576] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 326.640848][ T4394] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 326.652102][ T8384] device veth0_vlan entered promiscuous mode [ 326.686769][ T8384] device veth1_vlan entered promiscuous mode [ 326.702432][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 326.712288][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 326.720665][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 326.749496][ T8454] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 326.783907][ T8454] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 326.811418][ T8384] device veth0_macvtap entered promiscuous mode [ 326.820148][ T8542] loop1: detected capacity change from 0 to 2048 [ 326.820891][ T4403] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 326.828663][ T8542] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=13815, location=13815 [ 326.836565][ T4403] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 326.863790][ T4403] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 326.880461][ T8454] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 326.910868][ T8384] device veth1_macvtap entered promiscuous mode [ 326.921014][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 326.929864][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 326.937675][ T3576] usb 4-1: Using ep0 maxpacket: 32 [ 326.944012][ T8454] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 327.008035][ T8384] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 327.050143][ T8384] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 327.060125][ T8384] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 327.070885][ T3576] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 327.090748][ T3580] Bluetooth: hci0: command tx timeout [ 327.100302][ T8384] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 327.112969][ T3576] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 327.120265][ T8384] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 327.165761][ T8384] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 327.182042][ T8384] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 327.199745][ T8384] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 327.212585][ T8384] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 327.233760][ T8384] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 327.253680][ T8384] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 327.282760][ T3576] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 327.292498][ T8169] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 327.312796][ T8169] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 327.322273][ T3576] usb 4-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 327.337219][ T3576] usb 4-1: Product: syz [ 327.359070][ T3576] usb 4-1: Manufacturer: syz [ 327.401425][ T3576] hub 4-1:4.0: USB hub found [ 327.567164][ T8558] loop1: detected capacity change from 0 to 128 [ 327.568265][ T8384] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 327.584784][ T8558] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 327.597319][ T8558] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 327.610273][ T8384] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 328.091980][ T8384] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 328.328922][ T8558] "syz-executor.1" (8558) uses obsolete ecb(arc4) skcipher [ 328.340896][ T8384] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 328.378669][ T8384] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 328.411538][ T8384] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 328.464104][ T8384] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 328.525997][ T8384] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 328.560379][ T3576] hub 4-1:4.0: config failed, hub has too many ports! (err -19) [ 328.561168][ T8384] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 328.601613][ T8384] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 328.631782][ T8384] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 328.642643][ T8169] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 328.652393][ T8169] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 328.677525][ T8384] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 328.720573][ T8384] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 328.729693][ T8384] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 328.780251][ T8384] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 328.886091][ T6063] usb 4-1: USB disconnect, device number 7 [ 329.088848][ T8454] 8021q: adding VLAN 0 to HW filter on device bond0 [ 329.115832][ T4096] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 329.134463][ T4096] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 329.167174][ T6063] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 329.175302][ T3580] Bluetooth: hci0: command tx timeout [ 329.184107][ T6063] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 329.223742][ T8454] 8021q: adding VLAN 0 to HW filter on device team0 [ 329.238024][ T4267] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 329.252413][ T4096] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 329.274142][ T4096] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 329.292172][ T6063] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 329.305661][ T6063] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 329.324788][ T6063] bridge0: port 1(bridge_slave_0) entered blocking state [ 329.332006][ T6063] bridge0: port 1(bridge_slave_0) entered forwarding state [ 329.401175][ T4267] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 329.412366][ T4267] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 329.429855][ T4267] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 329.450886][ T4267] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 329.464148][ T4267] bridge0: port 2(bridge_slave_1) entered blocking state [ 329.471395][ T4267] bridge0: port 2(bridge_slave_1) entered forwarding state [ 329.490414][ T4267] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 329.542164][ T4267] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 329.573858][ T4267] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 329.605620][ T8574] loop3: detected capacity change from 0 to 2048 [ 329.611488][ T4267] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 329.632024][ T8574] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=13815, location=13815 [ 329.643530][ T8576] loop0: detected capacity change from 0 to 64 [ 329.656921][ T4267] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 329.697516][ T4267] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 329.716687][ T6063] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 329.731249][ T8169] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 329.739792][ T8169] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 329.788443][ T8454] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 329.828305][ T8454] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 329.845592][ T4403] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 329.861070][ T4403] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 330.345420][ T3563] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 330.355619][ T3563] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 330.394453][ T8454] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 331.647857][ T8609] loop3: detected capacity change from 0 to 64 [ 331.908886][ T8617] binder: transaction release 11 bad object at offset 16, size 72 [ 332.039701][ T8623] loop1: detected capacity change from 0 to 256 [ 332.163857][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 332.193549][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 332.274814][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 332.285269][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 332.331372][ T8454] device veth0_vlan entered promiscuous mode [ 332.348584][ T4403] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 332.368123][ T4403] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 332.385245][ T8454] device veth1_vlan entered promiscuous mode [ 332.435372][ T8595] loop0: detected capacity change from 0 to 40427 [ 332.454082][ T4403] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 332.471076][ T4403] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 332.481285][ T8595] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 332.489079][ T8595] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 332.508283][ T4403] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 332.518180][ T8595] F2FS-fs (loop0): invalid crc value [ 332.536014][ T4403] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 332.572678][ T8454] device veth0_macvtap entered promiscuous mode [ 332.614460][ T8454] device veth1_macvtap entered promiscuous mode [ 332.644011][ T8595] F2FS-fs (loop0): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 39874397669) [ 332.731338][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 332.750054][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 332.841871][ T46] device hsr_slave_0 left promiscuous mode [ 332.867677][ T46] device hsr_slave_1 left promiscuous mode [ 332.896592][ T46] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 332.927790][ T46] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 332.936171][ T8595] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 332.943728][ T8595] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 332.962996][ T8595] syz-executor.0: attempt to access beyond end of device [ 332.962996][ T8595] loop0: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 332.997189][ T46] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 333.023055][ T46] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 333.062678][ T46] device bridge_slave_1 left promiscuous mode [ 333.068967][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 333.129032][ T46] device bridge_slave_0 left promiscuous mode [ 333.147258][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 333.218390][ T46] device veth1_macvtap left promiscuous mode [ 333.238968][ T8628] loop3: detected capacity change from 0 to 32768 [ 333.240795][ T46] device veth0_macvtap left promiscuous mode [ 333.266433][ T46] device veth1_vlan left promiscuous mode [ 333.272645][ T46] device veth0_vlan left promiscuous mode [ 333.526022][ T8628] XFS (loop3): Mounting V5 Filesystem [ 333.690395][ T8653] input: syz1 as /devices/virtual/input/input8 [ 334.464998][ T8628] XFS (loop3): Ending clean mount [ 334.654809][ T8299] XFS (loop3): Unmounting Filesystem [ 334.747816][ T46] team0 (unregistering): Port device team_slave_1 removed [ 334.799221][ T46] team0 (unregistering): Port device team_slave_0 removed [ 334.833169][ T46] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 334.880523][ T46] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 335.009928][ T8668] xt_CT: No such helper "snmp_trap" [ 335.134181][ T46] bond0 (unregistering): Released all slaves [ 335.142288][ T8671] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. [ 335.254281][ T8454] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 335.282129][ T8454] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 335.308494][ T8454] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 335.322713][ T8454] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 335.332848][ T8454] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 335.355383][ T8454] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 335.379729][ T8454] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 335.406318][ T8454] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 335.417079][ T8454] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 335.429015][ T8454] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 335.458188][ T8454] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 335.480738][ T8679] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 335.511445][ T4271] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 335.526810][ T8679] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 335.538160][ T8679] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 335.551706][ T8679] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 335.568658][ T8169] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 335.609796][ T8169] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 335.654081][ T8454] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 335.685320][ T8454] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 335.728268][ T8454] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 335.750250][ T4271] usb 1-1: Using ep0 maxpacket: 32 [ 335.777206][ T8454] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 335.809507][ T8454] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 335.851963][ T8454] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 335.871952][ T8454] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 335.889710][ T4271] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 335.901911][ T8454] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 335.917481][ T4271] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 335.941419][ T8454] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 335.967082][ T8454] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 336.019970][ T8454] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 336.044955][ T8454] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 336.063809][ T8454] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 336.078074][ T27] audit: type=1800 audit(1718135970.862:761): pid=8692 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="file1" dev="sda1" ino=1957 res=0 errno=0 [ 336.101496][ T4271] usb 1-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 336.120254][ T8454] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 336.130936][ T4271] usb 1-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 336.139314][ T4271] usb 1-1: Product: syz [ 336.150476][ T8454] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 336.167050][ T27] audit: type=1804 audit(1718135970.862:762): pid=8692 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir3246861737/syzkaller.4JCpuL/496/file1" dev="sda1" ino=1957 res=1 errno=0 [ 336.169683][ T4271] usb 1-1: Manufacturer: syz [ 336.192326][ C1] vkms_vblank_simulate: vblank timer overrun [ 336.201948][ T8697] overlayfs: failed to create directory ./file0/work (errno: 126); mounting read-only [ 336.217073][ T4267] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 336.245793][ T8697] loop1: detected capacity change from 0 to 512 [ 336.251745][ T4267] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 336.271763][ T4271] hub 1-1:4.0: USB hub found [ 336.369332][ T8701] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. [ 336.439290][ T8698] xt_CT: No such helper "snmp_trap" [ 336.461654][ T3675] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 336.480119][ T3675] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 336.498665][ T4394] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 336.580631][ T4271] hub 1-1:4.0: config failed, hub has too many ports! (err -19) [ 336.597991][ T3999] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 336.636395][ T3999] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 336.666440][ T4394] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 336.797199][ T8714] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 336.823975][ T8717] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. [ 336.960464][ T4271] usb 1-1: USB disconnect, device number 8 [ 337.398859][ T8731] xt_CT: No such helper "snmp_trap" [ 338.407296][ T8750] xt_nfacct: accounting object `syz1' does not exists [ 338.432188][ T8750] xt_TCPMSS: Only works on TCP SYN packets [ 338.866616][ T8770] input: syz1 as /devices/virtual/input/input10 [ 338.986454][ T8769] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 339.752219][ T8781] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 339.854751][ T8779] loop0: detected capacity change from 0 to 2048 [ 339.912507][ T8779] Alternate GPT is invalid, using primary GPT. [ 339.919251][ T8779] loop0: p1 p2 p3 [ 340.128117][ T8795] loop0: detected capacity change from 0 to 128 [ 340.141786][ T8800] xt_nfacct: accounting object `syz1' does not exists [ 340.181636][ T8800] xt_TCPMSS: Only works on TCP SYN packets [ 340.420666][ T8808] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 340.796895][ T8812] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 341.233385][ T8823] loop3: detected capacity change from 0 to 128 [ 341.263652][ T8802] loop4: detected capacity change from 0 to 32768 [ 341.388294][ T8830] netlink: 'syz-executor.1': attribute type 3 has an invalid length. [ 341.413669][ T8802] XFS (loop4): Mounting V5 Filesystem [ 341.589959][ T8802] XFS (loop4): Ending clean mount [ 341.595669][ T8815] loop0: detected capacity change from 0 to 32768 [ 341.785655][ T8454] XFS (loop4): Unmounting Filesystem [ 342.000381][ T8847] loop3: detected capacity change from 0 to 4096 [ 342.009345][ T8847] ntfs3: loop3: Different NTFS' sector size (4096) and media sector size (512) [ 342.175690][ T8847] ntfs3: loop3: ino=1b, "file0" attr_set_size [ 342.232950][ T8847] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 342.350426][ T4274] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 342.541329][ T8864] loop0: detected capacity change from 0 to 2048 [ 342.562660][ T8864] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 342.602751][ T4274] usb 2-1: Using ep0 maxpacket: 32 [ 342.720731][ T4274] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 342.740488][ T4274] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 342.774915][ T8169] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 342.880695][ T4274] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 342.908339][ T4274] usb 2-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 342.927404][ T4274] usb 2-1: Product: syz [ 342.940350][ T4274] usb 2-1: Manufacturer: syz [ 342.981385][ T4274] hub 2-1:4.0: USB hub found [ 342.989972][ T8881] loop0: detected capacity change from 0 to 512 [ 343.005340][ T8881] EXT4-fs: Mount option(s) incompatible with ext3 [ 343.050431][ T8169] usb 4-1: Using ep0 maxpacket: 32 [ 343.200699][ T8169] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 343.222985][ T8169] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 343.246698][ T8169] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 343.266231][ T8169] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 343.280426][ T4274] hub 2-1:4.0: config failed, hub has too many ports! (err -19) [ 343.290004][ T8169] usb 4-1: config 0 descriptor?? [ 343.337351][ T8875] loop4: detected capacity change from 0 to 32768 [ 343.491403][ T8169] hub 4-1:0.0: USB hub found [ 343.515375][ T8875] XFS (loop4): Mounting V5 Filesystem [ 343.850748][ T8169] hub 4-1:0.0: 1 port detected [ 344.156742][ T8875] XFS (loop4): Ending clean mount [ 344.315132][ T4274] usb 2-1: USB disconnect, device number 9 [ 344.341006][ T8454] XFS (loop4): Unmounting Filesystem [ 344.578311][ T8926] loop1: detected capacity change from 0 to 128 [ 344.580432][ T8928] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 345.010336][ T3581] Bluetooth: hci4: command tx timeout [ 345.092377][ T4403] hub 4-1:0.0: activate --> -90 [ 345.463344][ T3576] usb 4-1: USB disconnect, device number 8 [ 346.175391][ T8959] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 346.606420][ T8973] input: syz1 as /devices/virtual/input/input11 [ 346.636530][ T8969] device bond_slave_0 entered promiscuous mode [ 346.642905][ T8969] device bond_slave_1 entered promiscuous mode [ 346.722911][ T8972] loop1: detected capacity change from 0 to 512 [ 346.848669][ T8972] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 347.295249][ T8972] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 347.311513][ T8972] ext4 filesystem being mounted at /root/syzkaller-testdir2655104074/syzkaller.EZKQOB/58/file0 supports timestamps until 2038 (0x7fffffff) [ 347.419817][ T8969] device bond_slave_0 left promiscuous mode [ 347.425904][ T8969] device bond_slave_1 left promiscuous mode [ 347.431872][ T4274] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 347.590537][ T8984] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters [ 347.734489][ T8996] overlayfs: failed to resolve './file1': -2 [ 347.812187][ T4274] usb 4-1: config 1 has an invalid descriptor of length 99, skipping remainder of the config [ 347.853100][ T4274] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 347.908490][ T9001] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 348.811487][ T8208] EXT4-fs (loop1): unmounting filesystem. [ 348.851550][ T4274] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 348.860922][ T4274] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 348.868967][ T4274] usb 4-1: SerialNumber: syz [ 348.926340][ T9007] loop0: detected capacity change from 0 to 512 [ 349.004175][ T9007] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 349.017682][ T9007] ext4 filesystem being mounted at /root/syzkaller-testdir1905438465/syzkaller.mjfi3L/29/file0 supports timestamps until 2038 (0x7fffffff) [ 349.073539][ T8384] EXT4-fs (loop0): unmounting filesystem. [ 349.166502][ T4274] usb 4-1: 0:2 : does not exist [ 349.471808][ T9025] input: syz1 as /devices/virtual/input/input12 [ 350.271672][ T4274] usb 4-1: USB disconnect, device number 9 [ 350.328943][ T9028] loop0: detected capacity change from 0 to 164 [ 350.352912][ T9028] rock: corrupted directory entry. extent=28, offset=0, size=16777216 [ 350.468557][ T9028] rock: corrupted directory entry. extent=28, offset=0, size=16777216 [ 350.508827][ T27] audit: type=1800 audit(1718135985.292:763): pid=9040 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=1970 res=0 errno=0 [ 350.542818][ T9028] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 350.606989][ T9044] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 351.479220][ T9069] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 351.757650][ T9081] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 351.820420][ T9081] device bond1 entered promiscuous mode [ 351.858976][ T9084] bond0: (slave bond_slave_0): Releasing backup interface [ 351.928579][ T9084] bond1: (slave bond_slave_0): making interface the new active one [ 351.997285][ T9084] device bond_slave_0 entered promiscuous mode [ 352.025843][ T9084] bond1: (slave bond_slave_0): Enslaving as an active interface with an up link [ 352.277229][ T9098] bridge0: port 2(bridge_slave_1) entered disabled state [ 352.284850][ T9098] bridge0: port 1(bridge_slave_0) entered disabled state [ 352.341962][ T9098] device bridge_slave_1 left promiscuous mode [ 352.372532][ T9098] bridge0: port 2(bridge_slave_1) entered disabled state [ 352.395188][ T9101] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 352.463926][ T9098] device bridge_slave_0 left promiscuous mode [ 352.506914][ T9098] bridge0: port 1(bridge_slave_0) entered disabled state [ 352.532631][ T9105] loop1: detected capacity change from 0 to 256 [ 352.554815][ T9073] loop3: detected capacity change from 0 to 40427 [ 352.571555][ T9073] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 352.579543][ T9073] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 352.598482][ T9073] F2FS-fs (loop3): invalid crc value [ 352.609408][ T9073] F2FS-fs (loop3): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 39874397669) [ 352.718737][ T9073] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 352.734362][ T9073] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 352.863308][ T9073] syz-executor.3: attempt to access beyond end of device [ 352.863308][ T9073] loop3: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 354.234197][ T9128] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 354.364642][ T9128] bond0: (slave bond_slave_0): Releasing backup interface [ 354.636439][ T9143] bridge0: port 2(bridge_slave_1) entered disabled state [ 354.644009][ T9143] bridge0: port 1(bridge_slave_0) entered disabled state [ 354.710702][ T9148] device bridge_slave_1 left promiscuous mode [ 354.727338][ T9148] bridge0: port 2(bridge_slave_1) entered disabled state [ 354.778259][ T9143] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 354.788138][ T4403] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 354.814240][ T9148] device bridge_slave_0 left promiscuous mode [ 354.824165][ T9148] bridge0: port 1(bridge_slave_0) entered disabled state [ 354.871881][ T8169] libceph: connect (1)[c::]:6789 error -101 [ 354.882053][ T8169] libceph: mon0 (1)[c::]:6789 connect error [ 354.898319][ T9155] netlink: 'syz-executor.1': attribute type 8 has an invalid length. [ 354.919387][ T9158] loop4: detected capacity change from 0 to 256 [ 355.107872][ T9168] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 355.150568][ T4394] libceph: connect (1)[c::]:6789 error -101 [ 355.156623][ T4394] libceph: mon0 (1)[c::]:6789 connect error [ 355.176244][ T9168] device bond2 entered promiscuous mode [ 355.211124][ T9174] bond0: (slave bond_slave_0): Releasing backup interface [ 355.238105][ T4403] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 355.248588][ T4403] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 355.302458][ T4403] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0 [ 355.312356][ T4403] usb 4-1: New USB device found, idVendor=05da, idProduct=80ac, bcdDevice=31.b5 [ 355.324502][ T4403] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 355.369576][ T9174] bond2: (slave bond_slave_0): Enslaving as an active interface with a down link [ 355.929219][ T9154] ceph: No mds server is up or the cluster is laggy [ 356.195428][ T4403] usb 4-1: config 0 descriptor?? [ 356.225103][ T8169] libceph: connect (1)[c::]:6789 error -101 [ 356.225223][ T8169] libceph: mon0 (1)[c::]:6789 connect error [ 356.241567][ T4403] microtek usb (rev 0.4.3): can only deal with bulk endpoints; endpoint 5 is not bulk. [ 356.241586][ T4403] microtek usb (rev 0.4.3): can only deal with bulk endpoints; endpoint 9 is not bulk. [ 356.241598][ T4403] microtek usb (rev 0.4.3): can only deal with bulk endpoints; endpoint 6 is not bulk. [ 356.241609][ T4403] microtek usb (rev 0.4.3): couldn't find two input bulk endpoints. Bailing out. [ 356.368675][ T9189] loop1: detected capacity change from 0 to 164 [ 356.405651][ T9189] rock: corrupted directory entry. extent=28, offset=0, size=16777216 [ 356.462911][ T3618] usb 4-1: USB disconnect, device number 10 [ 356.472352][ T9189] rock: corrupted directory entry. extent=28, offset=0, size=16777216 [ 356.498837][ T9189] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 356.670512][ T9198] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 356.813993][ T9206] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 356.846867][ T9206] device bond1 entered promiscuous mode [ 356.873902][ T9206] bond1: (slave bond_slave_0): making interface the new active one [ 356.889690][ T9206] device bond_slave_0 entered promiscuous mode [ 356.922575][ T9206] bond1: (slave bond_slave_0): Enslaving as an active interface with an up link [ 357.977647][ T3618] libceph: connect (1)[c::]:6789 error -101 [ 357.985235][ T3618] libceph: mon0 (1)[c::]:6789 connect error [ 358.034678][ T9226] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 358.260667][ T4274] libceph: connect (1)[c::]:6789 error -101 [ 358.266846][ T4274] libceph: mon0 (1)[c::]:6789 connect error [ 358.460280][ T3618] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 358.508294][ T27] audit: type=1326 audit(1718135993.292:764): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9214 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4e287cea9 code=0x7fc00000 [ 358.553627][ T27] audit: type=1326 audit(1718135993.292:765): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9214 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fd4e287cea9 code=0x7fc00000 [ 358.710589][ T27] audit: type=1326 audit(1718135993.292:766): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9214 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4e287cea9 code=0x7fc00000 [ 358.750089][ T9218] ceph: No mds server is up or the cluster is laggy [ 358.771310][ T27] audit: type=1326 audit(1718135993.292:767): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9214 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4e287cea9 code=0x7fc00000 [ 358.780960][ T3563] libceph: connect (1)[c::]:6789 error -101 [ 358.802361][ T27] audit: type=1326 audit(1718135993.292:768): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9214 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4e287cea9 code=0x7fc00000 [ 358.815360][ T3563] libceph: mon0 (1)[c::]:6789 connect error [ 358.833945][ T27] audit: type=1326 audit(1718135993.292:769): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9214 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4e287cea9 code=0x7fc00000 [ 358.841468][ T3618] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 358.997153][ T9243] loop0: detected capacity change from 0 to 1024 [ 359.095981][ T27] audit: type=1326 audit(1718135993.292:770): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9214 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4e287cea9 code=0x7fc00000 [ 359.343159][ T27] audit: type=1326 audit(1718135993.292:771): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9214 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4e287cea9 code=0x7fc00000 [ 359.410389][ T8169] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 359.534718][ T27] audit: type=1326 audit(1718135993.292:772): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9214 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4e287cea9 code=0x7fc00000 [ 359.579075][ T3618] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 359.588982][ T3618] usb 2-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 359.598106][ T3618] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 359.607854][ T3618] usb 2-1: config 0 descriptor?? [ 359.652994][ T27] audit: type=1326 audit(1718135993.292:773): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9214 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4e287cea9 code=0x7fc00000 [ 359.789407][ T9253] netlink: 'syz-executor.4': attribute type 8 has an invalid length. [ 359.818062][ T9243] EXT4-fs: Ignoring removed orlov option [ 359.827330][ T9243] EXT4-fs (loop0): Test dummy encryption mode enabled [ 359.834894][ T8169] usb 4-1: config 1 has an invalid descriptor of length 99, skipping remainder of the config [ 359.846271][ T9257] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 359.872084][ T9243] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 359.897829][ T9240] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 359.914989][ T8169] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 360.030446][ T8169] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 360.092096][ T3618] cm6533_jd 0003:0D8C:0022.000A: unknown main item tag 0x0 [ 360.107300][ T3618] cm6533_jd 0003:0D8C:0022.000A: unknown main item tag 0x0 [ 360.128411][ T8169] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 360.137116][ T8169] usb 4-1: SerialNumber: syz [ 360.154420][ T3618] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0D8C:0022.000A/input/input13 [ 360.199369][ T3618] cm6533_jd 0003:0D8C:0022.000A: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.1-1/input0 [ 360.220527][ T8384] EXT4-fs (loop0): unmounting filesystem. [ 360.296279][ T3618] usb 2-1: USB disconnect, device number 10 [ 360.412482][ T8169] usb 4-1: 0:2 : does not exist [ 360.607313][ T9274] loop0: detected capacity change from 0 to 32768 [ 360.648424][ T9279] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 360.668143][ T9274] XFS (loop0): Mounting V5 Filesystem [ 360.673035][ T9279] device bond3 entered promiscuous mode [ 360.688695][ T9279] bond2: (slave bond_slave_0): Releasing active interface [ 360.731370][ T9279] bond3: (slave bond_slave_0): Enslaving as an active interface with a down link [ 360.766430][ T9274] XFS (loop0): Ending clean mount [ 360.781947][ T9274] XFS (loop0): Quotacheck needed: Please wait. [ 360.864290][ T8169] usb 4-1: USB disconnect, device number 11 [ 360.873350][ T9274] XFS (loop0): Quotacheck: Done. [ 361.000927][ T9295] overlayfs: missing 'lowerdir' [ 361.184629][ T8384] XFS (loop0): Unmounting Filesystem [ 361.502406][ T9301] loop1: detected capacity change from 0 to 1024 [ 361.514104][ T9301] EXT4-fs: Ignoring removed orlov option [ 361.573515][ T9301] EXT4-fs (loop1): Test dummy encryption mode enabled [ 361.706403][ T9301] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 362.274376][ T8208] EXT4-fs (loop1): unmounting filesystem. [ 362.408853][ T9312] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 362.545053][ T9312] device bond2 entered promiscuous mode [ 362.992420][ T9293] overlayfs: failed to resolve './file0': -2 [ 363.183120][ T8169] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 363.558631][ T9353] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 363.569649][ T8169] usb 5-1: config 1 has an invalid descriptor of length 99, skipping remainder of the config [ 363.590509][ T8169] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 363.634982][ T9356] sch_tbf: burst 88 is lower than device veth3 mtu (1514) ! [ 363.683797][ T8169] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 363.694811][ T9318] loop3: detected capacity change from 0 to 40427 [ 363.715286][ T8169] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 363.730304][ T8169] usb 5-1: SerialNumber: syz [ 363.747027][ T9318] F2FS-fs (loop3): Found nat_bits in checkpoint [ 363.872638][ T9318] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 364.013435][ T8169] usb 5-1: 0:2 : does not exist [ 364.287048][ T9377] loop0: detected capacity change from 0 to 1024 [ 364.378290][ T46] hfsplus: b-tree write err: -5, ino 4 [ 364.458720][ T4403] usb 5-1: USB disconnect, device number 7 [ 364.736467][ T9373] loop3: detected capacity change from 0 to 32768 [ 364.815759][ T9373] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz-executor.3 (9373) [ 364.878130][ T9373] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 365.249472][ T9373] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 365.661769][ T9373] BTRFS info (device loop3): using free space tree [ 365.675099][ T9391] loop0: detected capacity change from 0 to 512 [ 365.705226][ T9376] loop1: detected capacity change from 0 to 32768 [ 365.755412][ T9391] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 365.775651][ T9391] ext4 filesystem being mounted at /root/syzkaller-testdir1905438465/syzkaller.mjfi3L/67/file0 supports timestamps until 2038 (0x7fffffff) [ 365.810002][ T9376] XFS (loop1): Mounting V5 Filesystem [ 365.816600][ T9391] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 365.819997][ T9373] BTRFS info (device loop3): enabling ssd optimizations [ 365.969623][ T9376] XFS (loop1): Ending clean mount [ 366.030484][ T3618] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 366.174200][ T9391] sch_tbf: burst 88 is lower than device veth3 mtu (1514) ! [ 366.451085][ T3618] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 366.523041][ T3618] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 366.736645][ T3618] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0 [ 366.747639][ T3618] usb 5-1: New USB device found, idVendor=05da, idProduct=80ac, bcdDevice=31.b5 [ 366.757647][ T3618] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 366.769250][ T3618] usb 5-1: config 0 descriptor?? [ 366.811431][ T3618] microtek usb (rev 0.4.3): can only deal with bulk endpoints; endpoint 5 is not bulk. [ 366.827040][ T27] kauditd_printk_skb: 58 callbacks suppressed [ 366.827060][ T27] audit: type=1804 audit(1718136001.612:832): pid=9431 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir2655104074/syzkaller.EZKQOB/95/file0/bus" dev="loop1" ino=4425 res=1 errno=0 [ 366.831839][ T3618] microtek usb (rev 0.4.3): can only deal with bulk endpoints; endpoint 9 is not bulk. [ 366.910486][ T3618] microtek usb (rev 0.4.3): can only deal with bulk endpoints; endpoint 6 is not bulk. [ 366.930772][ T3618] microtek usb (rev 0.4.3): couldn't find two input bulk endpoints. Bailing out. [ 366.970747][ T8208] XFS (loop1): Unmounting Filesystem [ 367.072832][ T4274] usb 5-1: USB disconnect, device number 8 [ 367.144936][ T8299] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 368.360927][ T9451] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 368.419609][ T9454] sch_tbf: burst 88 is lower than device veth5 mtu (1514) ! [ 368.660721][ T3619] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 370.022563][ T9483] loop1: detected capacity change from 0 to 1024 [ 370.052398][ T3619] usb 5-1: config 1 has an invalid descriptor of length 99, skipping remainder of the config [ 370.062912][ T3619] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 370.094324][ T9487] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 370.170555][ T3619] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 370.459356][ T3619] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 370.477284][ T9487] sch_tbf: burst 88 is lower than device veth5 mtu (1514) ! [ 370.598791][ T3619] usb 5-1: SerialNumber: syz [ 370.878640][ T9] hfsplus: b-tree write err: -5, ino 4 [ 370.988347][ T9494] overlayfs: missing 'lowerdir' [ 371.024135][ T9496] fuse: Bad value for 'fd' [ 371.158754][ T3619] usb 5-1: 0:2 : does not exist [ 371.379189][ T9515] loop3: detected capacity change from 0 to 1024 [ 372.190348][ T4274] usb 5-1: USB disconnect, device number 9 [ 373.022212][ T46] hfsplus: b-tree write err: -5, ino 4 [ 373.060916][ T9529] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 373.148888][ T9534] sch_tbf: burst 88 is lower than device veth7 mtu (1514) ! [ 373.360008][ T9540] loop3: detected capacity change from 0 to 512 [ 373.485599][ T9540] EXT4-fs error (device loop3): ext4_xattr_inode_iget:404: comm syz-executor.3: inode #1: comm syz-executor.3: iget: illegal inode # [ 373.605912][ T9540] EXT4-fs error (device loop3): ext4_xattr_inode_iget:409: comm syz-executor.3: error while reading EA inode 1 err=-117 [ 373.650681][ T9540] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2810: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 373.673491][ T9540] EXT4-fs error (device loop3): ext4_xattr_inode_iget:404: comm syz-executor.3: inode #1: comm syz-executor.3: iget: illegal inode # [ 373.693976][ T9540] EXT4-fs error (device loop3): ext4_xattr_inode_iget:409: comm syz-executor.3: error while reading EA inode 1 err=-117 [ 376.132918][ T9540] EXT4-fs (loop3): 1 orphan inode deleted [ 376.156782][ T9540] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 376.247689][ T9572] loop1: detected capacity change from 0 to 2048 [ 376.339832][ T8299] EXT4-fs (loop3): unmounting filesystem. [ 376.349838][ T9572] Alternate GPT is invalid, using primary GPT. [ 376.361325][ T9572] loop1: p1 p2 p3 [ 376.480536][ T4394] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 379.122192][ T27] audit: type=1326 audit(1718136011.682:833): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9587 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7feef8e7cea9 code=0x0 [ 379.145996][ T1255] ieee802154 phy0 wpan0: encryption failed: -22 [ 379.152375][ T1255] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.265850][ T9603] device veth0_vlan left promiscuous mode [ 379.271839][ T9603] device veth0_vlan entered promiscuous mode [ 379.347913][ T9607] loop1: detected capacity change from 0 to 512 [ 379.483178][ T4394] usb 5-1: device not accepting address 10, error -71 [ 379.530470][ T8169] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 379.544604][ T9622] loop4: detected capacity change from 0 to 64 [ 379.564726][ T9607] EXT4-fs error (device loop1): ext4_xattr_inode_iget:404: comm syz-executor.1: inode #1: comm syz-executor.1: iget: illegal inode # [ 379.588961][ T9607] EXT4-fs error (device loop1): ext4_xattr_inode_iget:409: comm syz-executor.1: error while reading EA inode 1 err=-117 [ 379.603103][ T9607] EXT4-fs error (device loop1): ext4_xattr_inode_iget:404: comm syz-executor.1: inode #1: comm syz-executor.1: iget: illegal inode # [ 379.622214][ T9607] EXT4-fs error (device loop1): ext4_xattr_inode_iget:409: comm syz-executor.1: error while reading EA inode 1 err=-117 [ 379.977954][ T9607] EXT4-fs (loop1): 1 orphan inode deleted [ 380.052442][ T9607] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 380.461784][ T8454] hfs: node 4:3 still has 1 user(s)! [ 380.493251][ T8208] EXT4-fs (loop1): unmounting filesystem. [ 380.516948][ T9634] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 380.610513][ T8169] usb 4-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 380.629807][ T8169] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 380.633733][ T9641] netlink: 'syz-executor.0': attribute type 4 has an invalid length. [ 380.680707][ T9641] netlink: 'syz-executor.0': attribute type 4 has an invalid length. [ 380.831610][ T8169] usb 4-1: config 0 descriptor?? [ 380.990597][ T27] audit: type=1326 audit(1718136015.742:834): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9635 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7feef8e7cea9 code=0x0 [ 381.201808][ T8169] pegasus: probe of 4-1:0.0 failed with error -71 [ 381.326129][ T8169] usb 4-1: USB disconnect, device number 12 [ 381.719364][ T9654] loop4: detected capacity change from 0 to 2048 [ 381.799573][ T9654] Alternate GPT is invalid, using primary GPT. [ 381.810481][ T9654] loop4: p1 p2 p3 [ 385.458451][ T27] audit: type=1800 audit(1718136020.242:835): pid=9672 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="file1" dev="sda1" ino=1964 res=0 errno=0 [ 386.449846][ T9677] loop4: detected capacity change from 0 to 32768 [ 386.458979][ T9677] BTRFS: device fsid d552757d-9c39-40e3-95f0-16d819589928 devid 1 transid 8 /dev/loop4 scanned by syz-executor.4 (9677) [ 386.476743][ T9677] BTRFS info (device loop4): first mount of filesystem d552757d-9c39-40e3-95f0-16d819589928 [ 386.494433][ T9677] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 386.515448][ T9677] BTRFS info (device loop4): disabling tree log [ 386.537199][ T9677] BTRFS info (device loop4): turning on sync discard [ 386.544121][ T9677] BTRFS info (device loop4): force clearing of disk cache [ 386.563694][ T9677] BTRFS info (device loop4): enabling ssd optimizations [ 386.578158][ T9677] BTRFS info (device loop4): using spread ssd allocation scheme [ 386.587065][ T9677] BTRFS info (device loop4): using free space tree [ 386.692503][ T9713] ------------[ cut here ]------------ [ 386.698634][ T9713] wlan1: Failed check-sdata-in-driver check, flags: 0x0 [ 386.722780][ T9713] WARNING: CPU: 0 PID: 9713 at net/mac80211/main.c:287 ieee80211_link_info_change_notify+0x1b2/0x220 [ 386.734009][ T9713] Modules linked in: 2024/06/11 20:00:21 SYZFATAL: failed to recv *flatrpc.HostMessageRaw: EOF [ 386.737945][ T9713] CPU: 0 PID: 9713 Comm: syz-executor.2 Not tainted 6.1.92-syzkaller #0 [ 386.741203][ T9700] loop1: detected capacity change from 0 to 2048 [ 386.746551][ T9713] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024 [ 386.763089][ T9713] RIP: 0010:ieee80211_link_info_change_notify+0x1b2/0x220 [ 386.770426][ T9713] Code: d4 2f e0 f7 49 8b 86 20 09 00 00 49 81 c6 40 09 00 00 48 85 c0 4c 0f 45 f0 48 c7 c7 c0 9e fc 8b 4c 89 f6 89 ea e8 2e af 50 f7 <0f> 0b e9 3a ff ff ff 89 e9 80 e1 07 80 c1 03 38 c1 0f 8c c9 fe ff [ 386.790124][ T9713] RSP: 0018:ffffc900034d73c8 EFLAGS: 00010246 [ 386.796304][ T9713] RAX: b2874f5d84549700 RBX: 0000000002000000 RCX: 0000000000040000 [ 386.804466][ T9713] RDX: ffffc9000a53b000 RSI: 0000000000005469 RDI: 000000000000546a [ 386.813151][ T9713] RBP: 0000000000000000 R08: ffffffff81528ede R09: fffff5200069add9 [ 386.821408][ T9713] R10: 0000000000000000 R11: dffffc0000000001 R12: ffff888076a38e80 [ 386.829381][ T9713] R13: dffffc0000000000 R14: ffff888056a90000 R15: ffff888056a92260 [ 386.837381][ T9713] FS: 00007feef79f66c0(0000) GS:ffff8880b9800000(0000) knlGS:0000000000000000 [ 386.846336][ T9713] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 386.852949][ T9713] CR2: 0000001b32a26000 CR3: 000000005a688000 CR4: 00000000003506f0 [ 386.860950][ T9713] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 386.868920][ T9713] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 386.876913][ T9713] Call Trace: [ 386.880228][ T9713] [ 386.883163][ T9713] ? __warn+0x15a/0x520 [ 386.887424][ T9713] ? ieee80211_link_info_change_notify+0x1b2/0x220 [ 386.893971][ T9713] ? report_bug+0x2af/0x500 [ 386.898466][ T9713] ? ieee80211_link_info_change_notify+0x1b2/0x220 [ 386.905000][ T9713] ? handle_bug+0x3d/0x70 [ 386.909335][ T9713] ? exc_invalid_op+0x16/0x40 [ 386.914041][ T9713] ? asm_exc_invalid_op+0x16/0x20 [ 386.919082][ T9713] ? __warn_printk+0x28e/0x350 [ 386.923962][ T9713] ? ieee80211_link_info_change_notify+0x1b2/0x220 [ 386.930489][ T9713] ? ieee80211_link_info_change_notify+0x1b2/0x220 [ 386.936991][ T9713] ieee80211_set_mcast_rate+0x42/0x50 [ 386.942396][ T9713] ? ieee80211_leave_ibss+0x20/0x20 [ 386.947599][ T9713] nl80211_set_mcast_rate+0xaf0/0xec0 [ 386.953003][ T9713] ? nl80211_nan_change_config+0x7e0/0x7e0 [ 386.958822][ T9713] genl_rcv_msg+0xc1a/0xf70 [ 386.963362][ T9713] ? genl_bind+0x400/0x400 [ 386.967789][ T9713] ? read_lock_is_recursive+0x10/0x10 [ 386.973257][ T9713] ? nl80211_nan_change_config+0x7e0/0x7e0 [ 386.979083][ T9713] netlink_rcv_skb+0x1cd/0x410 [ 386.983875][ T9713] ? genl_bind+0x400/0x400 [ 386.988291][ T9713] ? netlink_ack+0x1290/0x1290 [ 386.993097][ T9713] genl_rcv+0x24/0x40 [ 386.997099][ T9713] netlink_unicast+0x7d8/0x970 [ 387.001895][ T9713] ? netlink_detachskb+0x90/0x90 [ 387.006837][ T9713] ? __virt_addr_valid+0x44a/0x520 [ 387.012033][ T9713] ? __phys_addr_symbol+0x2b/0x70 [ 387.017060][ T9713] ? __check_object_size+0x4dd/0xa30 [ 387.022420][ T9713] ? bpf_lsm_netlink_send+0x5/0x10 [ 387.027573][ T9713] netlink_sendmsg+0xa26/0xd60 [ 387.032366][ T9713] ? netlink_getsockopt+0x580/0x580 [ 387.037587][ T9713] ? aa_sock_msg_perm+0x91/0x150 [ 387.042600][ T9713] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 387.047886][ T9713] ? security_socket_sendmsg+0x7d/0xa0 [ 387.053412][ T9713] ? netlink_getsockopt+0x580/0x580 [ 387.058611][ T9713] ____sys_sendmsg+0x5a5/0x8f0 [ 387.063435][ T9713] ? __sys_sendmsg_sock+0x30/0x30 [ 387.068469][ T9713] __sys_sendmsg+0x2a9/0x390 [ 387.073078][ T9713] ? ____sys_sendmsg+0x8f0/0x8f0 [ 387.078046][ T9713] ? rcu_is_watching+0x11/0xb0 [ 387.082890][ T9713] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 387.088910][ T9713] ? syscall_enter_from_user_mode+0x2e/0x230 [ 387.094919][ T9713] ? lockdep_hardirqs_on+0x94/0x130 [ 387.100163][ T9713] ? syscall_enter_from_user_mode+0x2e/0x230 [ 387.106161][ T9713] do_syscall_64+0x3b/0xb0 [ 387.110618][ T9713] ? clear_bhb_loop+0x45/0xa0 [ 387.115301][ T9713] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 387.121220][ T9713] RIP: 0033:0x7feef8e7cea9 [ 387.125642][ T9713] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 387.145360][ T9713] RSP: 002b:00007feef79f60c8 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 387.153797][ T9713] RAX: ffffffffffffffda RBX: 00007feef8fb3f80 RCX: 00007feef8e7cea9 [ 387.161790][ T9713] RDX: 0000000000000000 RSI: 0000000020000340 RDI: 0000000000000003 [ 387.169846][ T9713] RBP: 00007feef8eebff4 R08: 0000000000000000 R09: 0000000000000000 [ 387.177834][ T9713] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 387.185850][ T9713] R13: 000000000000000b R14: 00007feef8fb3f80 R15: 00007ffed4203ba8 [ 387.193857][ T9713] [ 387.196893][ T9713] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 387.204175][ T9713] CPU: 0 PID: 9713 Comm: syz-executor.2 Not tainted 6.1.92-syzkaller #0 [ 387.212499][ T9713] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024 [ 387.222573][ T9713] Call Trace: [ 387.225843][ T9713] [ 387.228789][ T9713] dump_stack_lvl+0x1e3/0x2cb [ 387.233479][ T9713] ? nf_tcp_handle_invalid+0x642/0x642 [ 387.238955][ T9713] ? panic+0x764/0x764 [ 387.243023][ T9713] ? 0xffffffffa00007cc [ 387.247168][ T9713] ? vscnprintf+0x59/0x80 [ 387.251505][ T9713] panic+0x318/0x764 [ 387.255395][ T9713] ? __warn+0x169/0x520 [ 387.259548][ T9713] ? memcpy_page_flushcache+0xfc/0xfc [ 387.264927][ T9713] __warn+0x348/0x520 [ 387.268904][ T9713] ? ieee80211_link_info_change_notify+0x1b2/0x220 [ 387.275404][ T9713] report_bug+0x2af/0x500 [ 387.279726][ T9713] ? ieee80211_link_info_change_notify+0x1b2/0x220 [ 387.286226][ T9713] handle_bug+0x3d/0x70 [ 387.290379][ T9713] exc_invalid_op+0x16/0x40 [ 387.294901][ T9713] asm_exc_invalid_op+0x16/0x20 [ 387.299756][ T9713] RIP: 0010:ieee80211_link_info_change_notify+0x1b2/0x220 [ 387.306864][ T9713] Code: d4 2f e0 f7 49 8b 86 20 09 00 00 49 81 c6 40 09 00 00 48 85 c0 4c 0f 45 f0 48 c7 c7 c0 9e fc 8b 4c 89 f6 89 ea e8 2e af 50 f7 <0f> 0b e9 3a ff ff ff 89 e9 80 e1 07 80 c1 03 38 c1 0f 8c c9 fe ff [ 387.326465][ T9713] RSP: 0018:ffffc900034d73c8 EFLAGS: 00010246 [ 387.332523][ T9713] RAX: b2874f5d84549700 RBX: 0000000002000000 RCX: 0000000000040000 [ 387.340508][ T9713] RDX: ffffc9000a53b000 RSI: 0000000000005469 RDI: 000000000000546a [ 387.348470][ T9713] RBP: 0000000000000000 R08: ffffffff81528ede R09: fffff5200069add9 [ 387.356434][ T9713] R10: 0000000000000000 R11: dffffc0000000001 R12: ffff888076a38e80 [ 387.364422][ T9713] R13: dffffc0000000000 R14: ffff888056a90000 R15: ffff888056a92260 [ 387.372394][ T9713] ? __warn_printk+0x28e/0x350 [ 387.377161][ T9713] ? ieee80211_link_info_change_notify+0x1b2/0x220 [ 387.383662][ T9713] ieee80211_set_mcast_rate+0x42/0x50 [ 387.389037][ T9713] ? ieee80211_leave_ibss+0x20/0x20 [ 387.394254][ T9713] nl80211_set_mcast_rate+0xaf0/0xec0 [ 387.399698][ T9713] ? nl80211_nan_change_config+0x7e0/0x7e0 [ 387.405552][ T9713] genl_rcv_msg+0xc1a/0xf70 [ 387.410063][ T9713] ? genl_bind+0x400/0x400 [ 387.414508][ T9713] ? read_lock_is_recursive+0x10/0x10 [ 387.419929][ T9713] ? nl80211_nan_change_config+0x7e0/0x7e0 [ 387.425760][ T9713] netlink_rcv_skb+0x1cd/0x410 [ 387.430529][ T9713] ? genl_bind+0x400/0x400 [ 387.434978][ T9713] ? netlink_ack+0x1290/0x1290 [ 387.439754][ T9713] genl_rcv+0x24/0x40 [ 387.443732][ T9713] netlink_unicast+0x7d8/0x970 [ 387.448502][ T9713] ? netlink_detachskb+0x90/0x90 [ 387.453438][ T9713] ? __virt_addr_valid+0x44a/0x520 [ 387.458547][ T9713] ? __phys_addr_symbol+0x2b/0x70 [ 387.463594][ T9713] ? __check_object_size+0x4dd/0xa30 [ 387.468887][ T9713] ? bpf_lsm_netlink_send+0x5/0x10 [ 387.474022][ T9713] netlink_sendmsg+0xa26/0xd60 [ 387.478787][ T9713] ? netlink_getsockopt+0x580/0x580 [ 387.483981][ T9713] ? aa_sock_msg_perm+0x91/0x150 [ 387.488916][ T9713] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 387.494200][ T9713] ? security_socket_sendmsg+0x7d/0xa0 [ 387.499652][ T9713] ? netlink_getsockopt+0x580/0x580 [ 387.504846][ T9713] ____sys_sendmsg+0x5a5/0x8f0 [ 387.509632][ T9713] ? __sys_sendmsg_sock+0x30/0x30 [ 387.514666][ T9713] __sys_sendmsg+0x2a9/0x390 [ 387.519287][ T9713] ? ____sys_sendmsg+0x8f0/0x8f0 [ 387.524364][ T9713] ? rcu_is_watching+0x11/0xb0 [ 387.529153][ T9713] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 387.535176][ T9713] ? syscall_enter_from_user_mode+0x2e/0x230 [ 387.541160][ T9713] ? lockdep_hardirqs_on+0x94/0x130 [ 387.546379][ T9713] ? syscall_enter_from_user_mode+0x2e/0x230 [ 387.552360][ T9713] do_syscall_64+0x3b/0xb0 [ 387.556779][ T9713] ? clear_bhb_loop+0x45/0xa0 [ 387.561458][ T9713] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 387.567370][ T9713] RIP: 0033:0x7feef8e7cea9 [ 387.571808][ T9713] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 387.591449][ T9713] RSP: 002b:00007feef79f60c8 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 387.599869][ T9713] RAX: ffffffffffffffda RBX: 00007feef8fb3f80 RCX: 00007feef8e7cea9 [ 387.607838][ T9713] RDX: 0000000000000000 RSI: 0000000020000340 RDI: 0000000000000003 [ 387.615809][ T9713] RBP: 00007feef8eebff4 R08: 0000000000000000 R09: 0000000000000000 [ 387.623775][ T9713] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 387.631750][ T9713] R13: 000000000000000b R14: 00007feef8fb3f80 R15: 00007ffed4203ba8 [ 387.639744][ T9713] [ 387.643092][ T9713] Kernel Offset: disabled [ 387.647526][ T9713] Rebooting in 86400 seconds..