last executing test programs: 7.09893412s ago: executing program 1 (id=3771): bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='sched_switch\x00', r0}, 0x10) r1 = io_uring_setup(0x1783, &(0x7f0000000640)={0x0, 0xfffffffe, 0x800, 0x400, 0x2b8}) r2 = socket$rds(0x15, 0x5, 0x0) bind$rds(r2, 0x0, 0x0) sendmsg$rds(r2, &(0x7f0000000080)={&(0x7f0000000180)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 6.119220562s ago: executing program 2 (id=3774): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000600)=ANY=[@ANYBLOB="12010000a3b370086d04ae08581101020301090212000d000000000904"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f00000045c0), 0x0, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x4000001, 0x13, r1, 0xc6f33000) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000580)={0x14, 0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f00000008c0)={0x44, &(0x7f0000000640)={0x0, 0x12, 0xec, "eff671f70bffa94e8dd19df2f0fe9e622c11fe228d61415f95654a5aa602a93e89596702c7a9dc61edf849267286bff8e327078ef9a82fd295b895d279aea376d102740d0a65a27a97ba9f0a8dcd4f5c8a4fc03d94a7e23f118878ef87588758fd67eae20f84720cfdb96e9c9afad3eced7ca9384a743f202b1d25109db506ae4f0a3bbe26a821dd8ff8f1e7659ffc29f645d39ec3503cd51c72297fb058ddff0115daffcc01609b7b8d95ac98047eb7a3c13290417c6b0107b03951c29e12c423e4b6b240804b7662ee3a347dd02e8a0e460976dc4192fd6db94befd8131e7bc1a8d7a555f7363c4b9d32bd"}, &(0x7f00000005c0)={0x0, 0xa, 0x1, 0x5}, &(0x7f0000000740)={0x0, 0x8, 0x1, 0x7}, &(0x7f0000000780)={0x20, 0x80, 0x1c, {0x7, 0xd3, 0x0, 0xfff, 0xae2, 0xe, 0x101, 0x6b, 0x1, 0x7, 0x3ce6, 0x5}}, &(0x7f00000007c0)={0x20, 0x85, 0x4, 0x2}, &(0x7f0000000800)={0x20, 0x83, 0x2}, &(0x7f0000000840)={0x20, 0x87, 0x2, 0x3}, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000040)={0x84, &(0x7f0000000140)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000940), 0x601100, 0x0) 6.098297702s ago: executing program 1 (id=3775): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) close(0xffffffffffffffff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x1e}, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x20}, {0x0, 0x4, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x4, 0x2}, {0x0, 0xfffffffffffffffc}, 0x0, 0x6e6bb9, 0x1}, {{@in=@broadcast, 0xfffffffc, 0x32}, 0x0, @in=@empty, 0x0, 0x0, 0x2, 0x7, 0x200}}, 0xe8) sendmmsg(r2, &(0x7f0000000480), 0x2e9, 0x0) 6.044765994s ago: executing program 3 (id=3776): syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_ext_features={{0x23, 0xd}, {0x3, 0xc8, 0xcc, 0xb1, "f259bff6b8ac7ef7"}}}, 0x10) openat$drirender128(0xffffffffffffff9c, 0x0, 0x4000, 0x0) 5.877645845s ago: executing program 3 (id=3777): accept4(0xffffffffffffffff, &(0x7f0000000080)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private1}}}, &(0x7f0000000100)=0x80, 0x800) socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fchmod(r1, 0x41) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) 4.889429038s ago: executing program 0 (id=3778): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x20) write(r0, &(0x7f0000000000)="0a000000010000", 0x7) 4.836834489s ago: executing program 4 (id=3779): r0 = creat(&(0x7f0000000200)='./file1\x00', 0x12e) close(r0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000002140)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7fff0200}]}) fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000001200), 0xa, 0x0) 4.648554331s ago: executing program 0 (id=3780): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_TRAP_SET(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)={0x58, 0x0, 0x1, 0x70bd25, 0x25dfdbff, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5}}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x20000000) 4.561011932s ago: executing program 4 (id=3781): syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) listxattr(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockopt$XDP_STATISTICS(0xffffffffffffffff, 0x11b, 0x7, &(0x7f00000000c0), 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB], 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r4, 0x0, 0x4f, 0x0, &(0x7f0000000240)="64f61ab8f00d0aea4da2c5ccb2dd61d25040e004c09b0d35b9d147046ac581c3c477ba570d5cde4b608ac1eba9971adb1fe46f0f6eeba4802e8fa07b67497516fadff5cd078cf7c6fa01dd0db61017", 0x0, 0x10000, 0x0, 0x0, 0x60, 0x0, &(0x7f0000000440)="67545986d3848eb9345a08fcb935fda3ee1ba2561b2b6155fa333012e2c9a437298bb9ec27a20e0d05a22c43edd94f71d081ebb225d42bda344c7c3d7ba534c9f8e1a80491578d18bfdee61789b96e824e990a086c010976e2eac2be4d495596", 0x4, 0x0, 0x8000}, 0x50) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB], 0xec}}, 0x0) 3.710433523s ago: executing program 3 (id=3782): bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000001800), &(0x7f0000000080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="00631dda01aef2456795dd9b26209f1c0f624854ea3dd5a00bd6df44035f5c3ae796fec6d633a0ffad0569794acfef7da01767fd4175f2cd82df769aa2ee7bfe3640554507d2e660c9f9e222a72e1e3e71145c480657d2864e5e276f028d64701ae31cde0ceaf408fdb05c0f4142da00e900000100000149e6d308cbe315789f4baffe39bbced9b1d421d2e290e9fc563b62225f002ee310e1fa7321000000000000d6231001a4b2d467825f3abb0c167e129cf1fa0e7854103f4bf2d3a0194983bc86cbd3d75ccef3c8ac4516dac102"], 0x4, 0x26d, &(0x7f00000005c0)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_user\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000280)={0x0, 0x0, 0x7fffffff, 0x400}) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) ioprio_set$uid(0x3, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5}, 0x0) r2 = syz_genetlink_get_family_id$fou(&(0x7f0000000300), r0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000480)={'ip6_vti0\x00', &(0x7f0000000400)={'ip6_vti0\x00', 0x0, 0x4, 0xec, 0x1, 0x90, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}, @loopback, 0x7800, 0x10, 0xfffffffa, 0x9}}) r4 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000008c0)={'tunl0\x00', 0x0}) sendto$packet(r4, &(0x7f00000000c0)='?', 0x1, 0x0, &(0x7f0000000540)={0x11, 0xb, r5, 0x1, 0xfd, 0x6, @multicast}, 0x14) sendmsg$FOU_CMD_DEL(r0, &(0x7f0000000840)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000580)={&(0x7f00000004c0)={0x8c, r2, 0x4, 0x70bd2d, 0x25dfdbfe, {}, [@FOU_ATTR_IFINDEX={0x8, 0xb, r3}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @loopback}, @FOU_ATTR_AF={0x5, 0x2, 0x2}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e23}, @FOU_ATTR_PEER_V4={0x8, 0x8, @dev={0xac, 0x14, 0x14, 0x23}}, @FOU_ATTR_PEER_V6={0x14, 0x9, @rand_addr=' \x01\x00'}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @empty}, @FOU_ATTR_IFINDEX={0x8, 0xb, r5}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @dev={0xfe, 0x80, '\x00', 0x2e}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x20000014}, 0x8000800) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000100)="88", 0xfdef}], 0x1) r6 = getpid() r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0) pwrite64(r7, &(0x7f0000000140)='2', 0xfdef, 0xfecc) r8 = syz_pidfd_open(r6, 0x0) setns(r8, 0x24020000) umount2(&(0x7f0000000040)='.\x00', 0x2) close_range(r1, 0xffffffffffffffff, 0x0) 3.639494413s ago: executing program 2 (id=3783): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x9007}, 0x4) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x9007}, 0x4) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003d000b08d25a80648c7494f90224fc60580002400c000400030082c137153e3719ac018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) ppoll(&(0x7f00000005c0)=[{r1, 0x2743}], 0x1, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) 3.564892465s ago: executing program 0 (id=3784): prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) getsockopt$inet_int(0xffffffffffffffff, 0x10d, 0x89, &(0x7f0000000000), &(0x7f0000000240)=0x4) 3.440127166s ago: executing program 0 (id=3785): bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='sched_switch\x00', r0}, 0x10) r1 = io_uring_setup(0x1783, &(0x7f0000000640)={0x0, 0xfffffffe, 0x800, 0x400, 0x2b8}) r2 = socket$rds(0x15, 0x5, 0x0) bind$rds(r2, 0x0, 0x0) sendmsg$rds(r2, &(0x7f0000000080)={&(0x7f0000000180)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 3.050611061s ago: executing program 2 (id=3786): r0 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$XDP_STATISTICS(r0, 0x11b, 0x7, &(0x7f00000000c0), &(0x7f0000000400)=0x24) 2.490746958s ago: executing program 4 (id=3787): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) socket(0x2, 0x80805, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x1f, &(0x7f0000000580)={0x0, @in6={{0xa, 0x4e21, 0x4, @empty, 0xc}}, 0x0, 0x8}, 0x90) 2.469559768s ago: executing program 1 (id=3788): bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x3, [@enum64={0x1, 0x0, 0x0, 0x13, 0x0, 0x1}]}, {0x0, [0x2e]}}, &(0x7f0000000500)=""/155, 0x27, 0x9b, 0x1, 0x0, 0x0, @void, @value}, 0x28) 2.237787531s ago: executing program 0 (id=3789): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'authenc(michael_mic-generic,pcbc(fcrypt-generic))\x00'}, 0x58) accept4(r0, &(0x7f0000000080)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private1}}}, &(0x7f0000000100)=0x80, 0x800) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(0x3) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fchmod(r3, 0x41) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r6, &(0x7f00000025c0)=[{{0x0, 0x0, &(0x7f0000000040)=[{0x0}], 0x1, 0x0, 0x0, 0x20000040}}], 0x1, 0x0) ioctl$sock_SIOCINQ(r5, 0x8905, 0x0) r7 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_STARTDAEMON(r7, 0x0, 0x1a, 0x0, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[], 0x80}}, 0x4814) r8 = socket$key(0xf, 0x3, 0x2) sendmmsg(r8, 0x0, 0x0, 0x0) syz_emit_ethernet(0x1b, &(0x7f0000000140)=ANY=[@ANYBLOB], 0x0) r9 = gettid() timer_create(0x0, 0x0, 0x0) syz_open_procfs$namespace(r9, &(0x7f0000000200)='ns/pid_for_children\x00') ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, 0x0) 2.237379411s ago: executing program 1 (id=3790): socket$inet6_sctp(0xa, 0x5, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x562}, 0x0) syz_80211_join_ibss(0x0, 0x0, 0x0, 0x0) sendmsg$SOCK_DIAG_BY_FAMILY(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'bond0\x00', 0x0}) setsockopt$packet_int(r3, 0x107, 0x14, &(0x7f0000000180)=0x2, 0x4) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4) sendto$packet(r3, &(0x7f00000000c0)="3f03fe7f0302140006001e0089e9aaa911d7c2290fc986dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c1511fdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0xc9, 0x0, r4, 0x1, 0x0, 0x6, @multicast}, 0x14) r5 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$SO_TIMESTAMPING(r5, 0x1, 0x41, 0x0, 0x0) 2.237043512s ago: executing program 2 (id=3791): r0 = creat(&(0x7f0000000200)='./file1\x00', 0x12e) close(r0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000002140)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7fff0200}]}) fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000001200), 0xa, 0x0) 2.210321902s ago: executing program 3 (id=3792): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89ff, 0x0) recvmsg$unix(0xffffffffffffffff, 0x0, 0x16101) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) r3 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) pread64(r3, &(0x7f0000000180)=""/79, 0xfffffe69, 0x1) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r1, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r2, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 879.285019ms ago: executing program 4 (id=3793): r0 = landlock_create_ruleset(&(0x7f0000000000)={0x803, 0x3, 0x2}, 0x18, 0x0) landlock_restrict_self(r0, 0x0) r1 = landlock_create_ruleset(&(0x7f0000000040)={0x2, 0x0, 0x2}, 0x18, 0x0) landlock_restrict_self(r1, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r2, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 718.268351ms ago: executing program 1 (id=3794): r0 = syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_TRAP_SET(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)={0x58, r0, 0x1, 0x70bd25, 0x25dfdbff, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5}}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x20000000) 701.009911ms ago: executing program 3 (id=3795): prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) getsockopt$inet_int(0xffffffffffffffff, 0x10d, 0x89, &(0x7f0000000000), &(0x7f0000000240)=0x4) 699.635451ms ago: executing program 2 (id=3796): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010100000000000000000a0000000900010073797a30000000004c000000030a010200000000000000000a0000000900010073797a30000000000900030073797a31000000000a000700726f755465000000140004800800014000000000080002"], 0x94}}, 0x20000004) 512.657163ms ago: executing program 4 (id=3797): setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000440)={'filter\x00', 0x7, 0x4, 0x3f0, 0x308, 0x0, 0x0, 0x308, 0x308, 0x308, 0x4, 0x0, {[{{@arp={@initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010101, 0x0, 0xffffff00, 0x3, 0x0, {@empty, {[0x0, 0xff, 0x0, 0x0, 0x0, 0xff]}}, {@mac=@multicast, {[0x0, 0x0, 0xff, 0x0, 0x0, 0xff]}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd, 'veth0_to_bridge\x00', 'macvtap0\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@random="1758a179fe8f", @local, @multicast1, 0x2, 0xffffffff}}}, {{@arp={@rand_addr=0x64010101, @rand_addr, 0x0, 0x0, 0xc, 0x3, {@empty, {[0xff, 0xff, 0x0, 0x0, 0xff]}}, {@empty, {[0x8a8cfb792f7af7f0]}}, 0x0, 0xfffc, 0x0, 0xa51, 0x0, 0x1000, 'team_slave_0\x00', 'veth0\x00', {0xff}}, 0xc0, 0xe8}, @unspec=@NFQUEUE0={0x28, 'NFQUEUE\x00', 0x0, {0x4}}}, {{@arp={@local, @remote, 0xffffffff, 0x0, 0x0, 0x9, {@mac}, {@mac=@random="7c3a86e2977f", {[0x0, 0x0, 0x0, 0xff]}}, 0x0, 0x0, 0xffff, 0x0, 0x0, 0xffff, 'veth0_to_bond\x00', 'geneve1\x00', {}, {0xff}}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@remote, @empty, @local, @empty, 0x4, 0xffffffff}}}], {{'\x00', 0xc0, 0xe8}, {0x28, '\x00', 0x0, 0xfffffffb}}}}, 0x440) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x42202) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0xfffffffe, 0x9, 0x1, 'queue1\x00'}) write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000180)={0x157, @tick=0xffff}) 353.189335ms ago: executing program 1 (id=3798): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, 0x0, 0x0) recvmmsg(r0, 0x0, 0x0, 0x40010003, 0x0) remap_file_pages(&(0x7f00006ca000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x10000) r1 = userfaultfd(0x80001) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000240)={{&(0x7f0000400000/0x1000)=nil, 0x20400000}, 0x1}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, 0x0, 0x0) sendmsg$NFT_BATCH(r2, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendmsg$NFT_BATCH(r2, 0x0, 0x2000094) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) 347.362316ms ago: executing program 3 (id=3799): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x18) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x3c1, 0x3, 0x2e8, 0x108, 0x18c, 0x203, 0x0, 0x19030000, 0x218, 0x2e0, 0x2e0, 0x218, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0xd0, 0x108, 0x0, {}, [@common=@unspec=@cpu={{0x28}, {0x7}}]}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x0, 0x0, 0x4}, {0xffffffffffffffff, 0x6, 0x2}, {0x2, 0x1}, 0x7fffffff, 0xeb}}}, {{@ipv6={@dev={0xfe, 0x80, '\x00', 0xe}, @remote, [0x0, 0xff000000, 0xffffffff, 0xff000000], [0x0, 0xff, 0xff000000], 'macvtap0\x00', 'ip6erspan0\x00', {0xff}, {}, 0x84, 0x7, 0x1, 0x30}, 0x0, 0xd0, 0x110, 0x0, {}, [@inet=@rpfilter={{0x28}, {0xd}}]}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00', 0x0, {[0x3, 0x5, 0x6, 0xaaf5, 0xe, 0x20000f, 0x2e47, 0x3]}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x348) 172.724247ms ago: executing program 4 (id=3800): bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='sched_switch\x00', r0}, 0x10) r1 = io_uring_setup(0x1783, &(0x7f0000000640)={0x0, 0xfffffffe, 0x800, 0x400, 0x2b8}) r2 = socket$rds(0x15, 0x5, 0x0) bind$rds(r2, &(0x7f0000000040)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x2b) sendmsg$rds(r2, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 172.488347ms ago: executing program 0 (id=3801): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0xfff) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000000}}, [@tmpl={0x44, 0x5, [{{@in=@local, 0x0, 0x3c}, 0x0, @in=@broadcast, 0x0, 0x0, 0x3}]}]}, 0xfc}}, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000240)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0x1, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x59}}}}}}}, 0x0) 0s ago: executing program 2 (id=3802): bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) kernel console output (not intermixed with test programs): 1020] Dead loop on virtual device ip6_vti0, fix it urgently! [ 440.805083][T11035] program syz.1.2620 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 440.821936][T11037] random: crng reseeded on system resumption [ 441.561534][T11068] program syz.2.2635 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 441.644696][T11070] netlink: 'syz.1.2636': attribute type 3 has an invalid length. [ 441.995909][T11079] Cannot find add_set index 0 as target [ 442.528821][T11097] program syz.3.2648 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 442.796106][T11103] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2652'. [ 443.286175][T11121] program syz.2.2661 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 443.634062][T11128] Cannot find add_set index 0 as target [ 443.748736][T11132] netlink: 4 bytes leftover after parsing attributes in process `gtp'. [ 443.980707][ T27] kauditd_printk_skb: 95 callbacks suppressed [ 443.980726][ T27] audit: type=1326 audit(1746886144.280:2567): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11136 comm="syz.2.2667" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77e438e969 code=0x7ffc0000 [ 444.072273][ T27] audit: type=1326 audit(1746886144.280:2568): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11136 comm="syz.2.2667" exe="/root/syz-executor" sig=0 arch=c000003e syscall=173 compat=0 ip=0x7f77e438e969 code=0x7ffc0000 [ 444.137960][ T27] audit: type=1326 audit(1746886144.280:2569): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11136 comm="syz.2.2667" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77e438e969 code=0x7ffc0000 [ 444.194151][ T27] audit: type=1326 audit(1746886144.280:2570): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11136 comm="syz.2.2667" exe="/root/syz-executor" sig=0 arch=c000003e syscall=213 compat=0 ip=0x7f77e438e969 code=0x7ffc0000 [ 444.247665][ T27] audit: type=1326 audit(1746886144.280:2571): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11136 comm="syz.2.2667" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77e438e969 code=0x7ffc0000 [ 444.276901][ T27] audit: type=1326 audit(1746886144.280:2572): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11136 comm="syz.2.2667" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f77e438e969 code=0x7ffc0000 [ 444.308168][ T27] audit: type=1326 audit(1746886144.280:2573): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11136 comm="syz.2.2667" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77e438e969 code=0x7ffc0000 [ 444.343651][ T27] audit: type=1326 audit(1746886144.280:2574): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11136 comm="syz.2.2667" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f77e438e969 code=0x7ffc0000 [ 444.368938][ T27] audit: type=1326 audit(1746886144.280:2575): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11136 comm="syz.2.2667" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77e438e969 code=0x7ffc0000 [ 444.391973][ T27] audit: type=1326 audit(1746886144.290:2576): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11136 comm="syz.2.2667" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f77e438e969 code=0x7ffc0000 [ 444.481182][T11148] loop4: detected capacity change from 0 to 128 [ 444.705955][T11132] infiniband syz!: set down [ 444.712443][T11132] team0 (unregistering): Port device team_slave_0 removed [ 444.744506][T11132] team0 (unregistering): Port device team_slave_1 removed [ 444.821334][T11140] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2667'. [ 444.835922][T11159] program syz.4.2674 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 445.008255][T11163] xt_hashlimit: max too large, truncated to 1048576 [ 445.027764][T11163] Cannot find set identified by id 0 to match [ 445.098900][T11169] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2678'. [ 445.189571][T11172] netlink: 'syz.4.2680': attribute type 10 has an invalid length. [ 445.265349][T11172] team0: Device hsr_slave_0 failed to register rx_handler [ 445.575565][T11184] netlink: 'syz.4.2687': attribute type 1 has an invalid length. [ 445.615180][T11184] device bond1 entered promiscuous mode [ 445.621162][T11184] 8021q: adding VLAN 0 to HW filter on device bond1 [ 445.634562][T11189] netlink: 3 bytes leftover after parsing attributes in process `syz.4.2687'. [ 445.652653][T11189] device batadv0 entered promiscuous mode [ 445.662310][T11189] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 445.671396][T11189] bond1: (slave batadv0): making interface the new active one [ 445.690354][T11189] bond1: (slave batadv0): Enslaving as an active interface with an up link [ 445.700559][T11190] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2686'. [ 445.744970][T11192] program syz.2.2688 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 445.751980][ T6857] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 445.874043][T11195] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2689'. [ 446.288077][T11213] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2697'. [ 446.461245][T11217] program syz.1.2699 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 447.905962][T11239] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2707'. [ 447.988294][T11242] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2709'. [ 448.242901][T11248] program syz.2.2712 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 448.609296][T11261] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2718'. [ 449.103030][T11278] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2726'. [ 449.443028][T11286] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2729'. [ 449.620612][T11295] syz.3.2733[11295] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 449.620720][T11295] syz.3.2733[11295] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 449.691849][T11300] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2735'. [ 451.342222][T11344] syz.2.2754[11344] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 451.342344][T11344] syz.2.2754[11344] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 452.239203][ T27] kauditd_printk_skb: 69 callbacks suppressed [ 452.239223][ T27] audit: type=1326 audit(1746886152.540:2646): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11348 comm="syz.1.2756" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff13978e969 code=0x7ffc0000 [ 452.402329][ T27] audit: type=1326 audit(1746886152.540:2647): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11348 comm="syz.1.2756" exe="/root/syz-executor" sig=0 arch=c000003e syscall=120 compat=0 ip=0x7ff13978e969 code=0x7ffc0000 [ 452.473385][ T27] audit: type=1326 audit(1746886152.540:2648): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11348 comm="syz.1.2756" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff13978e969 code=0x7ffc0000 [ 453.251305][T11377] 9pnet_fd: Insufficient options for proto=fd [ 453.263525][ T4340] usb 3-1: new full-speed USB device number 71 using dummy_hcd [ 454.245597][ T27] audit: type=1326 audit(1746886154.540:2649): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11374 comm="syz.3.2768" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ff68f78e969 code=0x0 [ 454.305552][ T4340] usb 3-1: config 1 interface 0 has no altsetting 0 [ 454.327661][ T4340] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 454.367946][ T4340] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 454.388309][ T4340] usb 3-1: Product: syz [ 454.392565][ T4340] usb 3-1: Manufacturer: syz [ 454.428505][ T4340] usb 3-1: SerialNumber: syz [ 455.569644][T11416] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2782'. [ 455.772171][T11422] loop4: detected capacity change from 0 to 512 [ 455.809095][T11422] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 455.912112][T11422] EXT4-fs (loop4): 1 truncate cleaned up [ 455.946907][T11422] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 456.087235][ T27] audit: type=1800 audit(1746886156.390:2650): pid=11430 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2785" name="file1" dev="loop4" ino=16 res=0 errno=0 [ 456.118172][T11422] EXT4-fs error (device loop4): mb_free_blocks:1815: group 0, inode 16: block 33:freeing already freed block (bit 32); block bitmap corrupt. [ 456.209755][T11422] EXT4-fs (loop4): Remounting filesystem read-only [ 456.263801][T11422] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #16: comm syz.4.2785: invalid indirect mapped block 3489660928 (level 0) [ 456.343362][T11422] EXT4-fs (loop4): Remounting filesystem read-only [ 456.350090][T11422] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #16: comm syz.4.2785: invalid indirect mapped block 6 (level 1) [ 456.422349][T11422] EXT4-fs (loop4): Remounting filesystem read-only [ 456.614603][ T4260] EXT4-fs (loop4): unmounting filesystem. [ 456.722630][ T4340] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 71 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8 [ 456.749481][ T4340] usb 3-1: USB disconnect, device number 71 [ 456.765775][ T4340] usblp0: removed [ 457.261398][T11463] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2800'. [ 457.610811][T11472] loop4: detected capacity change from 0 to 512 [ 457.772732][T11472] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 457.813227][T11472] ext4 filesystem being mounted at /579/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 457.834237][T11474] Cannot find add_set index 0 as target [ 458.002833][ T4260] EXT4-fs (loop4): unmounting filesystem. [ 458.417404][T11510] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2818'. [ 458.612038][T11515] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2821'. [ 458.837908][T11520] loop4: detected capacity change from 0 to 128 [ 459.457117][T11536] xt_CT: You must specify a L4 protocol and not use inversions on it [ 459.646570][T11545] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2832'. [ 459.691026][ T27] audit: type=1326 audit(1746886159.990:2651): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11541 comm="syz.4.2832" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c4b78e969 code=0x7ffc0000 [ 459.719211][T11549] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2833'. [ 459.753864][T11549] netem: change failed [ 459.761652][ T27] audit: type=1326 audit(1746886160.020:2652): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11541 comm="syz.4.2832" exe="/root/syz-executor" sig=0 arch=c000003e syscall=173 compat=0 ip=0x7f0c4b78e969 code=0x7ffc0000 [ 459.855328][ T27] audit: type=1326 audit(1746886160.020:2653): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11541 comm="syz.4.2832" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c4b78e969 code=0x7ffc0000 [ 459.934232][ T27] audit: type=1326 audit(1746886160.020:2654): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11541 comm="syz.4.2832" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0c4b78e969 code=0x7ffc0000 [ 459.998468][ T27] audit: type=1326 audit(1746886160.020:2655): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11541 comm="syz.4.2832" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c4b78e969 code=0x7ffc0000 [ 460.045150][T11552] tipc: Started in network mode [ 460.073901][T11552] tipc: Node identity 00000000000000700a, cluster identity 4711 [ 460.088607][ T27] audit: type=1326 audit(1746886160.020:2656): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11541 comm="syz.4.2832" exe="/root/syz-executor" sig=0 arch=c000003e syscall=213 compat=0 ip=0x7f0c4b78e969 code=0x7ffc0000 [ 460.147486][ T27] audit: type=1326 audit(1746886160.020:2657): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11541 comm="syz.4.2832" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c4b78e969 code=0x7ffc0000 [ 460.211416][ T27] audit: type=1326 audit(1746886160.020:2658): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11541 comm="syz.4.2832" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0c4b78e969 code=0x7ffc0000 [ 460.242488][ T27] audit: type=1326 audit(1746886160.020:2659): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11541 comm="syz.4.2832" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c4b78e969 code=0x7ffc0000 [ 460.274508][ T27] audit: type=1326 audit(1746886160.020:2660): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11541 comm="syz.4.2832" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0c4b78e969 code=0x7ffc0000 [ 460.593326][T11573] program syz.2.2845 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 460.852416][T11582] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2847'. [ 461.602490][T11597] Cannot find add_set index 0 as target [ 461.714150][T11599] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 461.720834][T11599] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 461.730340][T11599] vhci_hcd vhci_hcd.0: Device attached [ 461.742290][T11605] vhci_hcd: connection closed [ 461.745506][ T4320] vhci_hcd: stop threads [ 461.790800][ T4320] vhci_hcd: release socket [ 461.803674][ T4320] vhci_hcd: disconnect device [ 463.107147][T11656] netlink: 'syz.3.2877': attribute type 4 has an invalid length. [ 464.966654][ T27] kauditd_printk_skb: 57 callbacks suppressed [ 464.966670][ T27] audit: type=1326 audit(1746886165.270:2718): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11688 comm="syz.0.2892" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f8138e969 code=0x7ffc0000 [ 465.067523][ T27] audit: type=1326 audit(1746886165.310:2719): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11688 comm="syz.0.2892" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9f8138e969 code=0x7ffc0000 [ 465.131964][ T27] audit: type=1326 audit(1746886165.320:2720): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11688 comm="syz.0.2892" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f8138e969 code=0x7ffc0000 [ 465.202911][ T27] audit: type=1326 audit(1746886165.320:2721): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11688 comm="syz.0.2892" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9f8138e969 code=0x7ffc0000 [ 465.276333][ T27] audit: type=1326 audit(1746886165.320:2722): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11688 comm="syz.0.2892" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f8138e969 code=0x7ffc0000 [ 465.454832][ T27] audit: type=1326 audit(1746886165.320:2723): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11688 comm="syz.0.2892" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9f8138e969 code=0x7ffc0000 [ 465.699167][ T27] audit: type=1326 audit(1746886165.320:2724): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11688 comm="syz.0.2892" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f8138e969 code=0x7ffc0000 [ 466.167351][ T27] audit: type=1326 audit(1746886165.320:2725): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11688 comm="syz.0.2892" exe="/root/syz-executor" sig=0 arch=c000003e syscall=190 compat=0 ip=0x7f9f8138e969 code=0x7ffc0000 [ 466.289032][ T27] audit: type=1326 audit(1746886165.320:2726): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11688 comm="syz.0.2892" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f8138e969 code=0x7ffc0000 [ 466.329971][ T27] audit: type=1326 audit(1746886166.060:2727): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11701 comm="syz.0.2897" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f8138e969 code=0x7ffc0000 [ 467.231288][T11734] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 467.249514][T11734] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 467.570915][T11744] netlink: 'syz.2.2914': attribute type 7 has an invalid length. [ 467.611404][T11744] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2914'. [ 470.155138][ T4269] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 470.167780][ T4269] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 470.176911][ T4269] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 470.188500][ T4269] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 470.196596][ T4269] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 470.204633][ T4269] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 470.204764][T11785] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2930'. [ 471.210585][ T6851] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 472.313620][ T4257] Bluetooth: hci2: command 0x0409 tx timeout [ 472.401310][T11805] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2935'. [ 472.464425][ T6851] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 472.625654][ T6851] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 472.750418][ T6851] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 472.959427][T11782] chnl_net:caif_netlink_parms(): no params data found [ 473.580496][T11782] bridge0: port 1(bridge_slave_0) entered blocking state [ 473.735747][T11782] bridge0: port 1(bridge_slave_0) entered disabled state [ 473.929288][T11782] device bridge_slave_0 entered promiscuous mode [ 473.964147][ T6851] tipc: Disabling bearer [ 473.997078][T11782] bridge0: port 2(bridge_slave_1) entered blocking state [ 474.005766][ T6851] tipc: Left network mode [ 474.026018][T11782] bridge0: port 2(bridge_slave_1) entered disabled state [ 474.078377][T11782] device bridge_slave_1 entered promiscuous mode [ 474.138989][T11782] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 474.358446][T11782] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 474.393827][ T4259] Bluetooth: hci2: command 0x041b tx timeout [ 474.439117][T11844] xt_CT: You must specify a L4 protocol and not use inversions on it [ 474.519307][T11782] team0: Port device team_slave_0 added [ 474.552602][T11782] team0: Port device team_slave_1 added [ 474.810002][T11782] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 474.831511][T11782] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 474.862198][T11782] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 475.047478][T11782] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 475.071802][T11782] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 475.107720][T11782] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 475.897669][T11782] device hsr_slave_0 entered promiscuous mode [ 475.922944][T11782] device hsr_slave_1 entered promiscuous mode [ 475.949342][T11875] syz.3.2965[11875] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 475.949455][T11875] syz.3.2965[11875] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 476.349096][T11782] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 476.381206][T11782] Cannot create hsr debugfs directory [ 476.463798][ T4259] Bluetooth: hci2: command 0x040f tx timeout [ 476.697826][T11891] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2971'. [ 476.891922][T11899] rdma_rxe: rxe_register_device failed with error -23 [ 476.910558][T11899] rdma_rxe: failed to add team_slave_0 [ 478.511350][T11919] ip6t_rpfilter: unknown options [ 478.943767][ T4257] Bluetooth: hci2: command 0x0419 tx timeout [ 479.435078][ T6851] device hsr_slave_0 left promiscuous mode [ 479.442742][ T6851] device hsr_slave_1 left promiscuous mode [ 479.450048][ T6851] device bridge_slave_1 left promiscuous mode [ 479.459851][ T6851] bridge0: port 2(bridge_slave_1) entered disabled state [ 479.500814][ T6851] device bridge_slave_0 left promiscuous mode [ 479.519319][ T6851] bridge0: port 1(bridge_slave_0) entered disabled state [ 479.573520][ T27] kauditd_printk_skb: 7 callbacks suppressed [ 479.573539][ T27] audit: type=1326 audit(1746886179.860:2735): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11930 comm="syz.3.2986" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff68f78e969 code=0x7fc00000 [ 480.197328][ T27] audit: type=1326 audit(1746886180.500:2736): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11930 comm="syz.3.2986" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff68f78e969 code=0x7fc00000 [ 480.351927][ T27] audit: type=1326 audit(1746886180.620:2737): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11930 comm="syz.3.2986" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ff68f78e969 code=0x7fc00000 [ 480.460781][ T27] audit: type=1326 audit(1746886180.760:2738): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11946 comm="syz.0.2993" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f8138e969 code=0x7ffc0000 [ 480.525679][ T27] audit: type=1326 audit(1746886180.760:2739): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11946 comm="syz.0.2993" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f8138e969 code=0x7ffc0000 [ 480.554978][ T27] audit: type=1326 audit(1746886180.760:2740): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11946 comm="syz.0.2993" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f9f8138e969 code=0x7ffc0000 [ 480.577978][ T27] audit: type=1326 audit(1746886180.800:2741): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11946 comm="syz.0.2993" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f8138e969 code=0x7ffc0000 [ 480.605593][ T6851] bond1 (unregistering): (slave batadv0): Releasing active interface [ 480.670221][ T27] audit: type=1326 audit(1746886180.800:2742): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11948 comm="syz.3.2994" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff68f78e969 code=0x7ffc0000 [ 480.719786][ T27] audit: type=1326 audit(1746886180.800:2743): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11948 comm="syz.3.2994" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff68f78e969 code=0x7ffc0000 [ 480.814955][ T27] audit: type=1326 audit(1746886180.810:2744): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11946 comm="syz.0.2993" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f9f8138e969 code=0x7ffc0000 [ 481.209664][T11962] Cannot find add_set index 0 as target [ 482.050986][ T6851] bond1 (unregistering): Released all slaves [ 482.628310][ T6851] team0 (unregistering): Port device team_slave_1 removed [ 482.735550][ T6851] team0 (unregistering): Port device team_slave_0 removed [ 482.812390][ T6851] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 482.940188][ T6851] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 483.519644][T11987] Cannot find add_set index 0 as target [ 484.242310][ T6851] bond0 (unregistering): Released all slaves [ 484.432941][T11782] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 484.448553][T11782] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 484.489707][T11782] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 484.538535][T11782] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 484.861580][T11782] 8021q: adding VLAN 0 to HW filter on device bond0 [ 484.872682][ T27] kauditd_printk_skb: 34 callbacks suppressed [ 484.872699][ T27] audit: type=1326 audit(1746886185.170:2779): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11993 comm="syz.2.3013" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77e438e969 code=0x7ffc0000 [ 484.960879][T11997] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3014'. [ 484.972437][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 484.983785][ T27] audit: type=1326 audit(1746886185.210:2780): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11993 comm="syz.2.3013" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77e438e969 code=0x7ffc0000 [ 484.987320][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 485.057204][T11782] 8021q: adding VLAN 0 to HW filter on device team0 [ 485.063751][ T27] audit: type=1326 audit(1746886185.220:2781): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11993 comm="syz.2.3013" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f77e438e969 code=0x7ffc0000 [ 485.119234][T11995] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 485.135822][ T6862] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 485.149856][ T6862] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 485.176298][T11995] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 485.185911][ T27] audit: type=1326 audit(1746886185.220:2782): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11993 comm="syz.2.3013" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77e438e969 code=0x7ffc0000 [ 485.189892][ T6862] bridge0: port 1(bridge_slave_0) entered blocking state [ 485.215556][ T6862] bridge0: port 1(bridge_slave_0) entered forwarding state [ 485.234003][T12000] 9pnet_fd: Insufficient options for proto=fd [ 485.263519][ T27] audit: type=1326 audit(1746886185.220:2783): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11993 comm="syz.2.3013" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77e438e969 code=0x7ffc0000 [ 485.296392][ T6862] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 485.317885][ T6862] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 485.342764][ T6862] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 485.344127][ T27] audit: type=1326 audit(1746886185.220:2784): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11993 comm="syz.2.3013" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f77e438d41f code=0x7ffc0000 [ 485.390423][ T6862] bridge0: port 2(bridge_slave_1) entered blocking state [ 485.397643][ T6862] bridge0: port 2(bridge_slave_1) entered forwarding state [ 485.429191][ T6862] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 485.437623][ T27] audit: type=1326 audit(1746886185.220:2785): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11993 comm="syz.2.3013" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77e438e969 code=0x7ffc0000 [ 485.437669][ T27] audit: type=1326 audit(1746886185.220:2786): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11993 comm="syz.2.3013" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77e438e969 code=0x7ffc0000 [ 485.536564][ T6862] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 485.576833][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 485.609269][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 485.652328][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 485.660867][ T27] audit: type=1326 audit(1746886185.220:2787): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11993 comm="syz.2.3013" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f77e438e969 code=0x7ffc0000 [ 485.702558][ T27] audit: type=1326 audit(1746886185.220:2788): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11993 comm="syz.2.3013" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77e438e969 code=0x7ffc0000 [ 485.826810][ T6849] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 485.849104][ T6849] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 485.867294][ T6849] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 485.876780][ T6849] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 485.885770][ T6849] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 485.899887][ T6849] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 485.915883][T11782] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 486.069849][T12016] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3020'. [ 486.874485][T12023] syz.1.3023[12023] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 486.874619][T12023] syz.1.3023[12023] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 487.167763][T12035] : renamed from bond0 [ 487.205078][T12034] Cannot find add_set index 0 as target [ 487.539223][ T6849] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 487.554247][ T6849] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 487.580497][T11782] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 488.462201][ T6862] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 488.485214][ T6862] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 488.552020][ T6862] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 488.574678][ T6862] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 488.612553][T11782] device veth0_vlan entered promiscuous mode [ 488.620495][ T6862] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 488.649373][ T6862] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 488.675687][T11782] device veth1_vlan entered promiscuous mode [ 488.752989][ T6845] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 488.769583][ T6845] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 488.794458][ T6845] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 488.821961][ T6845] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 488.843779][T11782] device veth0_macvtap entered promiscuous mode [ 488.885191][T11782] device veth1_macvtap entered promiscuous mode [ 489.050359][T12076] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 489.170573][T11782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 489.207034][T11782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 489.261335][T11782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 489.301233][T11782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 489.334707][T11782] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 489.384497][ T6845] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 489.403463][ T6845] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 489.424773][ T6845] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 489.453795][ T6845] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 489.479887][T11782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 489.509559][T11782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 489.546792][T11782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 489.583029][T11782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 489.620732][T11782] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 489.649043][ T6845] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 489.672032][ T6845] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 489.685545][T11782] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 489.702370][T11782] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 489.712197][T11782] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 489.727191][T11782] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 489.836009][T12076] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 490.020515][T12076] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 490.066746][ T4320] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 490.099897][ T4320] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 490.161291][T12076] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 490.192493][ T6849] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 490.249557][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 490.273098][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 490.297754][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 490.397603][T12076] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 490.429742][T12076] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 490.451397][T12076] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 490.480100][T12076] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 491.191334][ T4259] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 491.204208][ T4259] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 491.213855][ T4259] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 491.246336][ T4259] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 491.260776][ T4259] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 491.272752][ T4259] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 491.399693][T12146] syz.1.3066[12146] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 491.399817][T12146] syz.1.3066[12146] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 491.416064][T12146] netlink: 'syz.1.3066': attribute type 21 has an invalid length. [ 491.471963][T12146] netlink: 'syz.1.3066': attribute type 20 has an invalid length. [ 491.497102][T12146] IPv6: NLM_F_CREATE should be specified when creating new route [ 491.884840][ T27] kauditd_printk_skb: 50 callbacks suppressed [ 491.884857][ T27] audit: type=1326 audit(1746886192.190:2839): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12161 comm="syz.4.3073" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49f3b8e969 code=0x7ffc0000 [ 491.959733][ T27] audit: type=1326 audit(1746886192.230:2840): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12161 comm="syz.4.3073" exe="/root/syz-executor" sig=0 arch=c000003e syscall=154 compat=0 ip=0x7f49f3b8e969 code=0x7ffc0000 [ 492.050041][ T27] audit: type=1326 audit(1746886192.230:2841): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12161 comm="syz.4.3073" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49f3b8e969 code=0x7ffc0000 [ 492.077820][T12138] chnl_net:caif_netlink_parms(): no params data found [ 492.192814][T12172] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3077'. [ 492.204002][T12172] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 492.211480][T12172] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 492.230345][T12172] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 492.257776][T12172] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 492.391244][T12138] bridge0: port 1(bridge_slave_0) entered blocking state [ 492.429986][T12138] bridge0: port 1(bridge_slave_0) entered disabled state [ 492.448154][T12138] device bridge_slave_0 entered promiscuous mode [ 492.457716][T12138] bridge0: port 2(bridge_slave_1) entered blocking state [ 492.498548][T12138] bridge0: port 2(bridge_slave_1) entered disabled state [ 492.519529][T12138] device bridge_slave_1 entered promiscuous mode [ 492.568727][T12186] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 492.651883][T12189] netlink: 'syz.2.3081': attribute type 10 has an invalid length. [ 492.666911][T12189] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3081'. [ 492.681114][T12189] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 492.711102][T12138] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 492.732774][T12186] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 492.756479][T12138] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 492.825693][T12186] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 492.867153][T12138] team0: Port device team_slave_0 added [ 492.888027][T12138] team0: Port device team_slave_1 added [ 492.903552][T12186] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 492.970768][T12138] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 492.983338][T12138] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 493.033325][T12138] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 493.054759][T12138] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 493.061746][T12138] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 493.093777][T12138] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 493.221963][T12186] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 493.272389][T12186] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 493.317731][T12138] device hsr_slave_0 entered promiscuous mode [ 493.343540][ T4259] Bluetooth: hci3: command 0x0409 tx timeout [ 493.352504][T12138] device hsr_slave_1 entered promiscuous mode [ 493.390623][T12138] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 493.397815][ T27] audit: type=1326 audit(1746886193.700:2842): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12204 comm="syz.4.3090" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49f3b8e969 code=0x7ffc0000 [ 493.421834][T12138] Cannot create hsr debugfs directory [ 493.425076][ T27] audit: type=1326 audit(1746886193.730:2843): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12204 comm="syz.4.3090" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49f3b8e969 code=0x7ffc0000 [ 493.455518][ T27] audit: type=1326 audit(1746886193.730:2844): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12204 comm="syz.4.3090" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f49f3b8e969 code=0x7ffc0000 [ 493.478942][ T27] audit: type=1326 audit(1746886193.730:2845): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12204 comm="syz.4.3090" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49f3b8e969 code=0x7ffc0000 [ 493.502906][ T27] audit: type=1326 audit(1746886193.730:2846): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12204 comm="syz.4.3090" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f49f3b8e969 code=0x7ffc0000 [ 493.505756][T12186] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 493.543401][ T27] audit: type=1326 audit(1746886193.730:2847): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12204 comm="syz.4.3090" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49f3b8e969 code=0x7ffc0000 [ 493.647898][ T27] audit: type=1326 audit(1746886193.730:2848): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12204 comm="syz.4.3090" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f49f3b8d2d0 code=0x7ffc0000 [ 493.681365][T12186] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 494.092366][ T6862] tipc: Left network mode [ 495.005446][T12138] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 495.021848][T12138] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 495.044770][T12138] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 495.230479][T12138] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 495.431413][ T4259] Bluetooth: hci3: command 0x041b tx timeout [ 495.701779][T12138] 8021q: adding VLAN 0 to HW filter on device bond0 [ 495.743831][ T6847] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 495.765810][ T6847] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 495.805660][T12138] 8021q: adding VLAN 0 to HW filter on device team0 [ 495.821591][ T6862] device hsr_slave_0 left promiscuous mode [ 495.830158][ T6862] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 495.842788][ T6862] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 495.861967][ T6862] device bridge_slave_1 left promiscuous mode [ 495.878599][ T6862] bridge0: port 2(bridge_slave_1) entered disabled state [ 495.900687][ T6862] device bridge_slave_0 left promiscuous mode [ 495.914210][ T6862] bridge0: port 1(bridge_slave_0) entered disabled state [ 497.503646][ T4259] Bluetooth: hci3: command 0x040f tx timeout [ 497.567961][ T6862] team0 (unregistering): Port device team_slave_1 removed [ 497.651744][ T6862] team0 (unregistering): Port device team_slave_0 removed [ 497.847203][ T6862] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 497.966589][ T6862] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 499.148196][ T6862] bond0 (unregistering): Released all slaves [ 499.269780][ T6847] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 499.314529][ T6847] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 499.348053][ T6847] bridge0: port 1(bridge_slave_0) entered blocking state [ 499.355251][ T6847] bridge0: port 1(bridge_slave_0) entered forwarding state [ 499.373982][ T6847] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 499.398523][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 499.433132][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 499.481416][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 499.488724][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 499.532094][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 499.552275][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 499.591231][ T4259] Bluetooth: hci3: command 0x0419 tx timeout [ 499.637956][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 499.641646][T12317] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3141'. [ 499.728287][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 499.754508][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 499.792827][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 499.812347][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 499.829884][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 499.853616][T12138] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 499.868319][T12138] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 499.884989][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 499.899906][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 500.000291][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 500.508892][T12138] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 500.517245][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 500.531292][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 500.562642][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 500.576876][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 500.617143][T12346] netlink: 100 bytes leftover after parsing attributes in process `syz.2.3152'. [ 500.636333][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 500.649990][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 500.659924][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 500.674655][T12327] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 500.677710][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 500.696158][T12327] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 500.706712][T12138] device veth0_vlan entered promiscuous mode [ 500.713662][T12327] Bluetooth: hci0: Suspend notifier action (1) failed: -4 [ 500.746445][T12138] device veth1_vlan entered promiscuous mode [ 500.753165][T12327] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 500.761711][T12327] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 500.783850][T12327] Bluetooth: hci1: Suspend notifier action (1) failed: -4 [ 500.807241][T12327] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 500.838879][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 500.854228][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 500.862384][T12327] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 500.882759][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 500.895100][T12327] Bluetooth: hci4: Suspend notifier action (1) failed: -4 [ 500.902448][T12327] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 500.918268][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 500.923439][T12327] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 500.958540][T12138] device veth0_macvtap entered promiscuous mode [ 500.966792][T12327] Bluetooth: hci2: Suspend notifier action (1) failed: -4 [ 500.988959][T12138] device veth1_macvtap entered promiscuous mode [ 501.005000][T12327] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 501.019712][T12358] netlink: 'syz.2.3158': attribute type 39 has an invalid length. [ 501.039228][T12327] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 501.046171][T12327] Bluetooth: hci3: Suspend notifier action (1) failed: -4 [ 501.134760][T12138] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 501.183681][T12138] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 501.202472][T12138] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 501.226693][T12138] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 501.252256][T12138] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 501.267597][T12138] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 501.278810][T12138] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 501.293430][T12138] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 501.306099][T12138] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 501.320189][T12138] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 501.334543][ T6847] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 501.347215][ T6847] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 501.356726][ T6847] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 501.370643][ T6847] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 501.381045][ T6847] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 501.398554][ T6847] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 501.411861][T12365] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3162'. [ 501.438594][T12370] netem: incorrect gi model size [ 501.449336][T12370] netem: change failed [ 501.463029][T12138] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 501.476426][T12138] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 501.485842][T12138] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 501.494801][T12138] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 501.659345][ T6862] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 501.682699][ T6862] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 501.716690][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 501.740020][ T6862] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 501.764544][ T6862] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 501.789553][ T6847] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 501.907908][ T1274] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.914510][ T4259] Bluetooth: hci0: command 0x0c1a tx timeout [ 502.214409][T12396] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3175'. [ 502.762210][ T4257] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 502.777652][ T4257] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 502.785020][ T4269] Bluetooth: hci1: command 0x0c1a tx timeout [ 502.804217][ T4257] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 502.822969][ T4257] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 502.834804][ T4257] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 502.842416][ T4257] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 502.863745][ T4259] Bluetooth: hci4: command 0x0c1a tx timeout [ 502.943573][ T4257] Bluetooth: hci2: command 0x0c1a tx timeout [ 502.970801][ T27] kauditd_printk_skb: 15 callbacks suppressed [ 502.970818][ T27] audit: type=1326 audit(1746886203.270:2864): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12414 comm="syz.0.3181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94c4d8e969 code=0x7ffc0000 [ 503.023683][ T4257] Bluetooth: hci3: command 0x0c1a tx timeout [ 503.115110][ T11] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 503.128767][ T27] audit: type=1326 audit(1746886203.310:2865): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12414 comm="syz.0.3181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94c4d8e969 code=0x7ffc0000 [ 503.223017][ T11] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 503.225182][ T27] audit: type=1326 audit(1746886203.310:2866): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12414 comm="syz.0.3181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=121 compat=0 ip=0x7f94c4d8e969 code=0x7ffc0000 [ 503.324057][ T27] audit: type=1326 audit(1746886203.310:2867): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12414 comm="syz.0.3181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94c4d8e969 code=0x7ffc0000 [ 503.351143][ T11] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 503.407821][ T27] audit: type=1326 audit(1746886203.310:2868): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12414 comm="syz.0.3181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94c4d8e969 code=0x7ffc0000 [ 503.450812][ T11] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 503.494469][T12428] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3187'. [ 503.745072][ T27] audit: type=1326 audit(1746886204.050:2869): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12436 comm="syz.0.3192" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94c4d8e969 code=0x7ffc0000 [ 503.806399][T12411] chnl_net:caif_netlink_parms(): no params data found [ 503.813693][ T27] audit: type=1326 audit(1746886204.070:2870): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12436 comm="syz.0.3192" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f94c4d8e969 code=0x7ffc0000 [ 503.893387][ T27] audit: type=1326 audit(1746886204.070:2871): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12436 comm="syz.0.3192" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94c4d8e969 code=0x7ffc0000 [ 503.994219][ T27] audit: type=1326 audit(1746886204.070:2872): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12436 comm="syz.0.3192" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94c4d8e969 code=0x7ffc0000 [ 504.025025][ T27] audit: type=1326 audit(1746886204.070:2873): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12436 comm="syz.0.3192" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f94c4d8e969 code=0x7ffc0000 [ 504.125443][T12411] bridge0: port 1(bridge_slave_0) entered blocking state [ 504.132621][T12411] bridge0: port 1(bridge_slave_0) entered disabled state [ 504.151949][T12411] device bridge_slave_0 entered promiscuous mode [ 504.327743][T12456] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3197'. [ 504.342958][T12456] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3197'. [ 504.433669][T12458] syz.3.3196[12458] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 504.434365][T12458] syz.3.3196[12458] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 504.466091][ T4313] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 504.873674][ T4259] Bluetooth: hci1: command 0x0406 tx timeout [ 504.881645][ T4257] Bluetooth: hci5: command 0x0409 tx timeout [ 504.943682][ T4269] Bluetooth: hci4: command 0x0406 tx timeout [ 504.963507][ T4313] usb 5-1: device descriptor read/64, error -71 [ 505.014032][T12411] bridge0: port 2(bridge_slave_1) entered blocking state [ 505.023698][T12411] bridge0: port 2(bridge_slave_1) entered disabled state [ 505.024656][ T4269] Bluetooth: hci2: command 0x0406 tx timeout [ 505.055862][T12411] device bridge_slave_1 entered promiscuous mode [ 505.148443][T12411] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 505.170733][T12411] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 505.202854][ T4269] Bluetooth: hci3: command 0x0406 tx timeout [ 505.253640][ T4313] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 505.259297][T12465] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3199'. [ 505.348717][T12411] team0: Port device team_slave_0 added [ 505.401159][T12411] team0: Port device team_slave_1 added [ 505.406983][ T4313] usb 5-1: device descriptor read/64, error -71 [ 505.407559][T12469] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3202'. [ 505.499525][T12473] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 505.534052][ T4313] usb usb5-port1: attempt power cycle [ 505.656982][T12473] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 505.728005][T12411] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 505.737528][T12411] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 505.765566][T12411] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 505.838315][T12411] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 505.845590][T12411] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 505.896184][T12411] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 505.959407][ T4313] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 505.999482][T12411] device hsr_slave_0 entered promiscuous mode [ 506.006897][ T4313] usb 5-1: device descriptor read/8, error -71 [ 506.014521][T12411] device hsr_slave_1 entered promiscuous mode [ 506.021629][T12411] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 506.030388][T12411] Cannot create hsr debugfs directory [ 506.283642][ T4313] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 506.324281][ T4313] usb 5-1: device descriptor read/8, error -71 [ 506.455091][ T4313] usb usb5-port1: unable to enumerate USB device [ 506.476509][T12491] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3212'. [ 506.693191][T12496] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 506.838125][T12498] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3216'. [ 506.943629][ T4269] Bluetooth: hci5: command 0x041b tx timeout [ 507.288571][T12511] infiniband srz1: RDMA CMA: cma_listen_on_dev, error -98 [ 507.325276][ T11] device hsr_slave_0 left promiscuous mode [ 507.349414][ T11] device hsr_slave_1 left promiscuous mode [ 507.363835][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 507.395630][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 507.417868][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 507.444063][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 507.523670][ T11] device veth1_vlan left promiscuous mode [ 507.530503][ T11] device veth0_vlan left promiscuous mode [ 507.887091][ T11] bond1 (unregistering): Released all slaves [ 507.949411][T12525] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3226'. [ 508.212676][T12531] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3228'. [ 508.851178][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 508.928416][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 509.010950][T12548] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3236'. [ 509.033902][ T4269] Bluetooth: hci5: command 0x040f tx timeout [ 509.129117][T12550] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3237'. [ 509.357225][T12554] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3239'. [ 509.568089][ T11] bond0 (unregistering): Released all slaves [ 509.659594][ T6855] smc: removing ib device syz! [ 510.034264][T12569] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3246'. [ 510.051960][T12411] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 510.104794][T12411] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 510.137129][T12411] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 510.188547][T12411] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 510.327817][T12576] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3249'. [ 510.516440][T12411] 8021q: adding VLAN 0 to HW filter on device bond0 [ 510.561771][ T6851] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 510.600217][ T6851] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 510.622159][T12411] 8021q: adding VLAN 0 to HW filter on device team0 [ 510.657492][ T6851] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 510.687153][ T6851] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 510.734065][ T6851] bridge0: port 1(bridge_slave_0) entered blocking state [ 510.741362][ T6851] bridge0: port 1(bridge_slave_0) entered forwarding state [ 510.784375][ T6851] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 510.822408][ T6862] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 510.848596][ T6862] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 510.877384][ T6862] bridge0: port 2(bridge_slave_1) entered blocking state [ 510.884610][ T6862] bridge0: port 2(bridge_slave_1) entered forwarding state [ 510.931716][ T6862] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 510.962531][ T6862] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 511.006300][ T6862] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 511.051221][ T6862] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 511.083633][T12597] loop4: detected capacity change from 0 to 512 [ 511.091624][ T6862] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 511.104162][ T4269] Bluetooth: hci5: command 0x0419 tx timeout [ 511.111831][T12597] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 511.158619][ T6862] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 511.217866][T12411] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 511.262724][T12411] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 511.276812][T12601] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3259'. [ 511.302201][ T6862] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 511.338817][T12597] EXT4-fs (loop4): 1 truncate cleaned up [ 511.356601][ T6862] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 511.374592][ T6862] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 511.383005][T12597] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 511.439297][ T6862] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 511.439528][T12605] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3260'. [ 511.474184][ T6862] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 511.493664][ T6862] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 511.565348][T11782] EXT4-fs (loop4): unmounting filesystem. [ 511.625713][T12609] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3261'. [ 511.855139][T12617] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3265'. [ 511.892102][T12616] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3264'. [ 511.921689][T12616] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3264'. [ 512.015178][T12625] Cannot find add_set index 0 as target [ 512.288543][T12617] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3265'. [ 512.371800][T12632] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3269'. [ 512.511076][ T6855] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 512.519715][ T6855] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 512.555009][T12411] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 512.632805][ T6855] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 512.655214][ T6855] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 512.697936][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 512.726700][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 512.758509][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 512.774797][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 512.789862][T12411] device veth0_vlan entered promiscuous mode [ 512.838554][T12411] device veth1_vlan entered promiscuous mode [ 512.864460][T12643] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3273'. [ 512.890772][ T6862] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 512.904709][ T6862] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 512.923070][ T6862] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 512.934753][ T6862] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 512.954543][T12411] device veth0_macvtap entered promiscuous mode [ 512.973955][T12411] device veth1_macvtap entered promiscuous mode [ 513.001722][T12411] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 513.020727][T12411] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 513.032031][T12411] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 513.047689][T12411] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 513.070337][T12411] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 513.082995][ T6862] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 513.119030][ T6862] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 513.139578][T12648] loop4: detected capacity change from 0 to 512 [ 513.142334][ T6862] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 513.180705][T12648] EXT4-fs (loop4): unable to read superblock [ 513.186427][ T6862] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 513.220120][T12411] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 513.232503][T12411] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 513.252118][T12411] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 513.276569][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 513.291044][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 513.312573][T12411] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 513.331329][T12411] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 513.341789][T12411] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 513.351420][T12411] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 513.536226][ T6849] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 513.546370][ T6849] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 513.580875][ T6855] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 513.623080][ T6855] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 513.653624][ T6855] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 513.670930][ T6862] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 513.895545][T12673] IPv6: Can't replace route, no match found [ 514.542570][ T46] nci: nci_rf_discover_ntf_packet: unsupported rf_tech_and_mode 0x35 [ 514.893866][ T4259] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 514.911005][ T4259] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 514.920279][ T4259] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 514.929187][ T4259] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 514.937768][ T4259] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 514.956666][ T4259] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 515.431826][T12709] Cannot find add_set index 0 as target [ 515.605499][T12713] hub 2-0:1.0: USB hub found [ 515.611379][T12713] hub 2-0:1.0: 1 port detected [ 515.687018][T12713] loop4: detected capacity change from 0 to 512 [ 516.336872][T12717] __nla_validate_parse: 4 callbacks suppressed [ 516.336894][T12717] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3300'. [ 517.023900][ T4259] Bluetooth: hci0: command 0x0409 tx timeout [ 517.184608][T12697] chnl_net:caif_netlink_parms(): no params data found [ 517.440621][ T6855] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 517.699381][T12735] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3307'. [ 517.747920][ T6855] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 517.832537][T12739] netlink: 9 bytes leftover after parsing attributes in process `syz.3.3309'. [ 517.872834][T12739] device gretap0 entered promiscuous mode [ 517.975626][T12742] netlink: 5 bytes leftover after parsing attributes in process `syz.3.3309'. [ 518.023887][T12742] 0ªX¹¦D: renamed from gretap0 [ 518.046987][T12742] device 30ªX¹¦D left promiscuous mode [ 518.068665][T12742] A link change request failed with some changes committed already. Interface 30ªX¹¦D may have been left with an inconsistent configuration, please check. [ 518.286799][ T6855] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 518.321225][T12697] bridge0: port 1(bridge_slave_0) entered blocking state [ 518.330406][T12697] bridge0: port 1(bridge_slave_0) entered disabled state [ 518.342379][T12697] device bridge_slave_0 entered promiscuous mode [ 518.387171][ T6855] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 518.421133][T12697] bridge0: port 2(bridge_slave_1) entered blocking state [ 518.432392][T12697] bridge0: port 2(bridge_slave_1) entered disabled state [ 518.452792][T12697] device bridge_slave_1 entered promiscuous mode [ 518.557659][T12697] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 518.607705][T12697] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 518.726367][T12697] team0: Port device team_slave_0 added [ 518.759488][T12697] team0: Port device team_slave_1 added [ 518.822826][T12697] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 518.843447][T12697] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 518.903748][T12697] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 519.021551][T12775] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3322'. [ 519.036670][T12697] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 519.046385][T12697] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 519.113699][ T4259] Bluetooth: hci0: command 0x041b tx timeout [ 519.128905][T12697] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 519.260108][T12697] device hsr_slave_0 entered promiscuous mode [ 519.277893][T12697] device hsr_slave_1 entered promiscuous mode [ 519.332950][T12777] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3324'. [ 519.999590][ T27] kauditd_printk_skb: 5 callbacks suppressed [ 519.999606][ T27] audit: type=1326 audit(1746886220.300:2879): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12790 comm="syz.1.3327" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f398358e969 code=0x7ffc0000 [ 520.091794][ T27] audit: type=1326 audit(1746886220.330:2880): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12790 comm="syz.1.3327" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f398358e969 code=0x7ffc0000 [ 520.127564][T12794] loop4: detected capacity change from 0 to 2048 [ 520.184267][ T27] audit: type=1326 audit(1746886220.330:2881): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12790 comm="syz.1.3327" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f398358e969 code=0x7ffc0000 [ 520.243129][ T27] audit: type=1326 audit(1746886220.330:2882): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12790 comm="syz.1.3327" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f398358e969 code=0x7ffc0000 [ 520.299891][ T27] audit: type=1326 audit(1746886220.330:2883): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12790 comm="syz.1.3327" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f398358e969 code=0x7ffc0000 [ 520.322673][T12794] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 520.495089][T11782] EXT4-fs (loop4): unmounting filesystem. [ 520.511239][ T27] audit: type=1326 audit(1746886220.330:2884): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12790 comm="syz.1.3327" exe="/root/syz-executor" sig=0 arch=c000003e syscall=275 compat=0 ip=0x7f398358e969 code=0x7ffc0000 [ 520.535030][ T27] audit: type=1326 audit(1746886220.330:2885): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12790 comm="syz.1.3327" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f398358e969 code=0x7ffc0000 [ 520.558419][ T27] audit: type=1326 audit(1746886220.330:2886): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12790 comm="syz.1.3327" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f398358e969 code=0x7ffc0000 [ 520.605281][ T27] audit: type=1326 audit(1746886220.330:2887): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12790 comm="syz.1.3327" exe="/root/syz-executor" sig=0 arch=c000003e syscall=94 compat=0 ip=0x7f398358e969 code=0x7ffc0000 [ 521.587793][ T4259] Bluetooth: hci0: command 0x040f tx timeout [ 521.646879][ T27] audit: type=1326 audit(1746886220.330:2888): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12790 comm="syz.1.3327" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f398358e969 code=0x7ffc0000 [ 522.933275][ T6855] device hsr_slave_0 left promiscuous mode [ 522.944128][ T6855] device hsr_slave_1 left promiscuous mode [ 522.953763][ T6855] batman_adv: batadv0: Removing interface: dummy0 [ 522.961149][ T6855] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 522.971145][ T6855] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 523.475206][ C1] vcan0: j1939_tp_rxtimer: 0xffff888056a09000: rx timeout, send abort [ 523.487232][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888056a09000: 0x2f000: (3) A timeout occurred and this is the connection abort to close the session. [ 523.674985][ T4259] Bluetooth: hci0: command 0x0419 tx timeout [ 523.989922][ T6855]  (unregistering): (slave bond_slave_1): Releasing backup interface [ 524.055258][ T6855]  (unregistering): (slave bond_slave_0): Releasing backup interface [ 524.179869][T12883] IPv4: Oversized IP packet from 127.202.26.0 [ 524.681838][ T6855]  (unregistering): Released all slaves [ 524.754456][T12864] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 524.764741][T12864] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 524.782171][T12864] Bluetooth: hci1: Suspend notifier action (1) failed: -4 [ 524.808901][T12864] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 524.823689][T12864] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 524.829927][T12864] Bluetooth: hci2: Suspend notifier action (1) failed: -4 [ 524.837685][T12864] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 524.844180][T12864] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 524.850258][T12864] Bluetooth: hci3: Suspend notifier action (1) failed: -4 [ 524.857651][T12864] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 524.859477][T12861] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 524.863817][T12864] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 524.863913][T12864] Bluetooth: hci5: Suspend notifier action (1) failed: -4 [ 524.890255][T12864] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 524.897517][T12864] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 524.904110][T12864] Bluetooth: hci0: Suspend notifier action (1) failed: -4 [ 524.928621][T12697] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 524.967016][T12697] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 524.995323][T12697] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 525.016335][T12697] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 525.115604][T12861] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 525.337628][T12861] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 525.529592][T12861] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 525.693727][T12697] 8021q: adding VLAN 0 to HW filter on device bond0 [ 525.741477][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 525.762210][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 525.970983][T12697] 8021q: adding VLAN 0 to HW filter on device team0 [ 526.042771][T12861] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 526.052643][ T6849] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 526.734347][ T6849] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 526.745253][ T6849] bridge0: port 1(bridge_slave_0) entered blocking state [ 526.752454][ T6849] bridge0: port 1(bridge_slave_0) entered forwarding state [ 526.765688][ T6849] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 526.778218][ T6849] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 526.793502][ T4259] Bluetooth: hci1: command 0x0c1a tx timeout [ 526.818854][ T6849] bridge0: port 2(bridge_slave_1) entered blocking state [ 526.826116][ T6849] bridge0: port 2(bridge_slave_1) entered forwarding state [ 526.852295][ T6849] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 526.873091][ T6849] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 526.886581][ T4259] Bluetooth: hci5: command 0x0c1a tx timeout [ 526.892866][ T4259] Bluetooth: hci3: command 0x0c1a tx timeout [ 526.903310][ T4269] Bluetooth: hci2: command 0x0c1a tx timeout [ 526.931282][ T6849] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 526.955987][ T4259] Bluetooth: hci0: command 0x0c1a tx timeout [ 526.963000][ T6849] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 526.980233][ T6849] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 527.006824][ T6849] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 527.044137][ T6849] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 527.053770][ T6849] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 527.088495][T12697] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 527.130481][T12697] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 527.165311][T12861] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 527.227796][T12861] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 527.297792][T12861] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 527.317552][ T6849] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 527.334440][ T6849] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 527.354466][ T6849] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 527.374363][ T6849] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 527.546079][T12942] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3383'. [ 527.579354][ T27] kauditd_printk_skb: 7 callbacks suppressed [ 527.579372][ T27] audit: type=1326 audit(1746886227.880:2896): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12935 comm="syz.3.3383" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff68f78e969 code=0x7ffc0000 [ 527.688655][ T27] audit: type=1326 audit(1746886227.880:2897): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12935 comm="syz.3.3383" exe="/root/syz-executor" sig=0 arch=c000003e syscall=173 compat=0 ip=0x7ff68f78e969 code=0x7ffc0000 [ 527.794436][ T27] audit: type=1326 audit(1746886227.880:2898): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12935 comm="syz.3.3383" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff68f78e969 code=0x7ffc0000 [ 527.878115][ T27] audit: type=1326 audit(1746886227.880:2899): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12935 comm="syz.3.3383" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff68f78e969 code=0x7ffc0000 [ 527.982376][ T27] audit: type=1326 audit(1746886227.880:2900): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12935 comm="syz.3.3383" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff68f78e969 code=0x7ffc0000 [ 528.052334][ T27] audit: type=1326 audit(1746886227.880:2901): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12935 comm="syz.3.3383" exe="/root/syz-executor" sig=0 arch=c000003e syscall=213 compat=0 ip=0x7ff68f78e969 code=0x7ffc0000 [ 528.157828][ T27] audit: type=1326 audit(1746886227.880:2902): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12935 comm="syz.3.3383" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff68f78e969 code=0x7ffc0000 [ 528.230255][ T27] audit: type=1326 audit(1746886227.880:2903): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12935 comm="syz.3.3383" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff68f78e969 code=0x7ffc0000 [ 528.278352][T12960] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 528.290029][ T27] audit: type=1326 audit(1746886227.880:2904): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12935 comm="syz.3.3383" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff68f78e969 code=0x7ffc0000 [ 528.326959][ T27] audit: type=1326 audit(1746886227.910:2905): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12935 comm="syz.3.3383" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff68f78e969 code=0x7ffc0000 [ 528.367563][ T4282] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 528.398502][ T4282] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 528.418279][T12697] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 528.492030][T12960] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 528.536513][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 528.549747][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 528.577805][T12973] netlink: 272 bytes leftover after parsing attributes in process `syz.3.3396'. [ 528.641014][T12960] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 528.688395][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 528.698909][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 528.710331][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 528.725322][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 528.746839][T12697] device veth0_vlan entered promiscuous mode [ 528.800350][T12960] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 528.828658][T12697] device veth1_vlan entered promiscuous mode [ 528.858277][ T4282] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 528.869408][ T4282] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 528.886012][ T4282] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 528.904335][ T4282] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 528.916327][T12697] device veth0_macvtap entered promiscuous mode [ 528.954049][ T4259] Bluetooth: hci3: command 0x0406 tx timeout [ 528.960144][ T4259] Bluetooth: hci2: command 0x0406 tx timeout [ 528.963600][ T4257] Bluetooth: hci5: command 0x0406 tx timeout [ 528.986580][T12697] device veth1_macvtap entered promiscuous mode [ 529.031664][ T4259] Bluetooth: hci0: command 0x0406 tx timeout [ 529.034666][T12697] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 529.052131][T12697] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 529.062319][T12697] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 529.086758][T12697] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 529.133496][T12697] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 529.144386][T12697] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 529.157578][T12697] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 529.169626][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 529.179556][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 529.187300][T12984] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3401'. [ 529.198791][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 529.209078][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 529.218630][T12986] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3402'. [ 529.306112][T12970] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 529.312108][T12970] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 529.318458][T12970] Bluetooth: hci1: Suspend notifier action (1) failed: -4 [ 529.326159][T12970] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 529.332149][T12970] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 529.338786][T12970] Bluetooth: hci2: Suspend notifier action (1) failed: -4 [ 529.364109][T12970] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 529.370126][T12970] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 529.395513][T12970] Bluetooth: hci3: Suspend notifier action (1) failed: -4 [ 529.403654][T12970] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 529.409856][T12970] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 529.416375][T12970] Bluetooth: hci5: Suspend notifier action (1) failed: -4 [ 529.424002][T12970] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 529.430183][T12970] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 529.436452][T12970] Bluetooth: hci0: Suspend notifier action (1) failed: -4 [ 529.530098][T12697] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 529.545961][T12697] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 529.566646][T12697] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 529.583523][T12697] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 529.597613][T12697] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 529.612767][T12697] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 529.621765][T12697] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 529.630548][T12697] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 529.654322][T12697] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 529.678526][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 529.691421][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 529.731995][T12960] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 529.764072][T12960] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 529.827544][T12960] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 529.880026][T12960] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 529.968354][T12997] tipc: Started in network mode [ 529.973470][T12997] tipc: Node identity ac14140f, cluster identity 4711 [ 529.980509][T12997] tipc: New replicast peer: 255.255.255.247 [ 529.999370][T12997] tipc: Enabled bearer , priority 10 [ 530.009554][ T4329] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 530.048366][ T4329] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 530.107259][ T6862] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 530.127768][ T6862] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 530.141914][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 530.179052][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 530.344311][T13011] tipc: Started in network mode [ 530.353722][T13011] tipc: Node identity ba4b4b9a2a22, cluster identity 4711 [ 530.365203][T13011] tipc: Enabled bearer , priority 0 [ 530.402797][T13015] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 530.445276][T13015] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 530.504293][T13015] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 530.537469][T13015] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 530.545078][ T4257] Bluetooth: hci1: command 0x0c1a tx timeout [ 530.574161][T13015] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 530.611211][T13015] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 530.655101][T13015] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 530.690458][T13018] tipc: Disabling bearer [ 531.113409][ T128] tipc: Node number set to 2886997007 [ 531.343886][ T4259] Bluetooth: hci2: command 0x0c1a tx timeout [ 531.423750][ T4259] Bluetooth: hci5: command 0x0c1a tx timeout [ 531.429885][ T4259] Bluetooth: hci3: command 0x0c1a tx timeout [ 531.503586][ T4257] Bluetooth: hci0: command 0x0c1a tx timeout [ 531.808287][T13053] loop4: detected capacity change from 0 to 256 [ 531.977032][ T4259] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 531.988557][ T4259] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 531.998349][ T4259] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 532.018747][ T4259] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 532.028492][ T4259] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 532.036379][ T4259] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 532.236868][ T4320] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 532.335662][ T4320] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 532.405195][ T4320] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 532.510072][ T4320] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 532.583332][ T4340] usb 3-1: new high-speed USB device number 72 using dummy_hcd [ 532.743349][ T4340] usb 3-1: device descriptor read/64, error -71 [ 532.930161][T13089] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 533.012147][T13090] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3443'. [ 533.022611][ T4340] usb 3-1: new high-speed USB device number 73 using dummy_hcd [ 533.046234][T13095] 9pnet_fd: Insufficient options for proto=fd [ 533.143000][T13057] chnl_net:caif_netlink_parms(): no params data found [ 533.197637][ T4340] usb 3-1: device descriptor read/64, error -71 [ 533.323642][ T4340] usb usb3-port1: attempt power cycle [ 533.352722][T13089] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 533.423951][ T4269] Bluetooth: hci2: command 0x0406 tx timeout [ 533.504064][ T4269] Bluetooth: hci5: command 0x0406 tx timeout [ 533.510159][ T4269] Bluetooth: hci3: command 0x0406 tx timeout [ 533.584626][ T4269] Bluetooth: hci0: command 0x0406 tx timeout [ 533.671919][T13089] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 533.763066][ T4340] usb 3-1: new high-speed USB device number 74 using dummy_hcd [ 533.785240][ T27] kauditd_printk_skb: 107 callbacks suppressed [ 533.785257][ T27] audit: type=1326 audit(1746886234.090:3013): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13107 comm="syz.1.3449" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f398358e969 code=0x7ffc0000 [ 533.821574][ T4340] usb 3-1: device descriptor read/8, error -71 [ 533.842234][ T27] audit: type=1326 audit(1746886234.130:3014): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13107 comm="syz.1.3449" exe="/root/syz-executor" sig=0 arch=c000003e syscall=260 compat=0 ip=0x7f398358e969 code=0x7ffc0000 [ 533.868873][ T27] audit: type=1326 audit(1746886234.130:3015): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13107 comm="syz.1.3449" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f398358e969 code=0x7ffc0000 [ 534.032311][T13089] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 534.084654][ T4269] Bluetooth: hci1: command 0x0409 tx timeout [ 534.093884][ T4340] usb 3-1: new high-speed USB device number 75 using dummy_hcd [ 534.147487][ T4340] usb 3-1: device descriptor read/8, error -71 [ 534.188728][T13057] bridge0: port 1(bridge_slave_0) entered blocking state [ 534.227093][T13057] bridge0: port 1(bridge_slave_0) entered disabled state [ 534.242851][T13057] device bridge_slave_0 entered promiscuous mode [ 534.283532][ T4340] usb usb3-port1: unable to enumerate USB device [ 534.291271][T13123] 9pnet_fd: Insufficient options for proto=fd [ 534.326756][T13089] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 534.336677][T13057] bridge0: port 2(bridge_slave_1) entered blocking state [ 534.344055][T13057] bridge0: port 2(bridge_slave_1) entered disabled state [ 534.352594][T13057] device bridge_slave_1 entered promiscuous mode [ 534.382101][T13089] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 534.435920][T13089] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 534.448083][T13125] netlink: 'syz.1.3454': attribute type 4 has an invalid length. [ 534.541748][T13057] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 534.568223][T13089] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 534.604312][T13057] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 534.700168][T13131] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3457'. [ 534.725787][T13131] device hsr_slave_0 left promiscuous mode [ 534.732821][T13131] device hsr_slave_1 left promiscuous mode [ 534.862379][T13057] team0: Port device team_slave_0 added [ 534.953032][T13057] team0: Port device team_slave_1 added [ 534.999545][T13057] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 535.013558][T13057] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 535.060924][T13057] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 535.157782][T13057] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 535.173429][T13057] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 535.262925][T13057] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 535.339762][ T27] audit: type=1326 audit(1746886235.640:3016): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13144 comm="syz.2.3464" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f654198e969 code=0x7ffc0000 [ 535.403341][ T27] audit: type=1326 audit(1746886235.640:3017): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13144 comm="syz.2.3464" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f654198e969 code=0x7ffc0000 [ 535.445810][T13147] 9pnet_fd: Insufficient options for proto=fd [ 535.468753][ T27] audit: type=1326 audit(1746886235.640:3018): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13144 comm="syz.2.3464" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f654198e969 code=0x7ffc0000 [ 535.563637][ T27] audit: type=1326 audit(1746886235.640:3019): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13144 comm="syz.2.3464" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f654198e969 code=0x7ffc0000 [ 535.601384][ T27] audit: type=1326 audit(1746886235.640:3020): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13144 comm="syz.2.3464" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f654198e969 code=0x7ffc0000 [ 535.614010][T13057] device hsr_slave_0 entered promiscuous mode [ 535.626175][ T27] audit: type=1326 audit(1746886235.640:3021): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13144 comm="syz.2.3464" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f654198e969 code=0x7ffc0000 [ 535.660031][T13057] device hsr_slave_1 entered promiscuous mode [ 535.668779][T13057] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 535.678040][T13057] Cannot create hsr debugfs directory [ 535.728567][ T27] audit: type=1326 audit(1746886235.640:3022): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13144 comm="syz.2.3464" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f654198e969 code=0x7ffc0000 [ 535.918336][ T4320] device hsr_slave_0 left promiscuous mode [ 535.933106][ T4320] device hsr_slave_1 left promiscuous mode [ 536.143652][ T4269] Bluetooth: hci1: command 0x041b tx timeout [ 536.469086][T13175] Cannot find add_set index 0 as target [ 538.091209][ T4320] team0 (unregistering): Port device team_slave_1 removed [ 538.172123][ T4320] team0 (unregistering): Port device team_slave_0 removed [ 538.243490][ T4269] Bluetooth: hci1: command 0x040f tx timeout [ 538.274767][ T4320] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 538.335335][T13189] 9pnet_fd: Insufficient options for proto=fd [ 538.372141][ T4320] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 538.756644][T13193] block device autoloading is deprecated and will be removed. [ 539.281807][ T4320] bond0 (unregistering): Released all slaves [ 539.706980][T13213] 9pnet_fd: Insufficient options for proto=fd [ 539.747939][T13210] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3488'. [ 540.259930][T13220] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 540.306316][ T4269] Bluetooth: hci1: command 0x0419 tx timeout [ 540.378098][T13220] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 540.430250][T13225] loop4: detected capacity change from 0 to 512 [ 540.479874][T13225] __quota_error: 6 callbacks suppressed [ 540.479894][T13225] Quota error (device loop4): v2_read_file_info: Free block number 1 out of range (1, 6). [ 540.511964][T13220] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 540.549271][T13225] EXT4-fs warning (device loop4): ext4_enable_quotas:7054: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 540.594097][T13225] EXT4-fs (loop4): mount failed [ 540.631278][T13230] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 540.676074][T13220] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 540.722769][T13057] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 540.754213][T13057] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 540.855853][T13230] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 540.876283][T13057] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 540.892799][T13238] 9pnet_fd: Insufficient options for proto=fd [ 540.895945][T13057] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 540.989775][T13230] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 541.061314][T13220] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 541.132190][T13230] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 541.163852][T13220] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 541.221563][T13220] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 541.314950][T13220] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 541.442803][T13230] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 541.494668][T13057] 8021q: adding VLAN 0 to HW filter on device bond0 [ 541.516633][T13230] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 541.538307][ T6862] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 541.565457][ T6862] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 541.582036][T13230] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 541.598939][T13057] 8021q: adding VLAN 0 to HW filter on device team0 [ 541.622931][T13230] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 541.646659][T13258] loop4: detected capacity change from 0 to 512 [ 541.658300][ T6862] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 541.691913][ T6862] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 541.709903][ T6862] bridge0: port 1(bridge_slave_0) entered blocking state [ 541.717103][ T6862] bridge0: port 1(bridge_slave_0) entered forwarding state [ 541.725931][ T6862] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 541.787307][T13258] EXT4-fs error (device loop4): ext4_do_update_inode:5253: inode #3: comm syz.4.3505: corrupted inode contents [ 541.810459][ T4282] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 541.842020][T13266] 9pnet_fd: Insufficient options for proto=fd [ 541.853621][ T4282] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 541.898576][T13258] EXT4-fs error (device loop4): ext4_dirty_inode:6118: inode #3: comm syz.4.3505: mark_inode_dirty error [ 541.903830][ T4282] bridge0: port 2(bridge_slave_1) entered blocking state [ 541.917014][ T4282] bridge0: port 2(bridge_slave_1) entered forwarding state [ 541.955542][T13258] EXT4-fs error (device loop4): ext4_do_update_inode:5253: inode #3: comm syz.4.3505: corrupted inode contents [ 541.974694][T13258] EXT4-fs error (device loop4): __ext4_ext_dirty:202: inode #3: comm syz.4.3505: mark_inode_dirty error [ 541.989849][ T4282] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 542.003971][T13258] Quota error (device loop4): write_blk: dquota write failed [ 542.022305][T13258] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 542.053546][T13258] EXT4-fs error (device loop4): ext4_acquire_dquot:6802: comm syz.4.3505: Failed to acquire dquot type 0 [ 542.065209][ T6855] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 542.092187][ T6855] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 542.112358][T13258] EXT4-fs (loop4): 1 orphan inode deleted [ 542.122796][ T6855] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 542.139859][ T4282] Quota error (device loop4): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 542.142136][T13258] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 542.170295][ T4282] EXT4-fs error (device loop4): ext4_release_dquot:6838: comm kworker/u4:5: Failed to release dquot type 1 [ 542.172006][T13258] ext4 filesystem being mounted at /111/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 542.184065][ T6855] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 542.213392][ T6855] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 542.230515][ T6855] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 542.240211][ T6855] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 542.249361][ T6855] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 542.429089][T13057] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 542.430085][T13057] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 542.436634][ T6862] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 544.408546][ T6862] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 544.744944][T11782] EXT4-fs (loop4): unmounting filesystem. [ 544.751515][ T27] audit: type=1326 audit(1746886245.050:3029): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13290 comm="syz.1.3518" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f398358e969 code=0x7ffc0000 [ 544.798877][T13291] Invalid ELF header magic: != ELF [ 544.816512][T13291] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3518'. [ 544.831926][ T27] audit: type=1326 audit(1746886245.080:3030): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13290 comm="syz.1.3518" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f398358e969 code=0x7ffc0000 [ 544.898429][ T27] audit: type=1326 audit(1746886245.080:3031): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13290 comm="syz.1.3518" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f398358e969 code=0x7ffc0000 [ 544.972973][T13297] 9pnet_fd: Insufficient options for proto=fd [ 544.993605][ T27] audit: type=1326 audit(1746886245.080:3032): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13290 comm="syz.1.3518" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f398358e969 code=0x7ffc0000 [ 545.103956][ T27] audit: type=1326 audit(1746886245.080:3033): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13290 comm="syz.1.3518" exe="/root/syz-executor" sig=0 arch=c000003e syscall=242 compat=0 ip=0x7f398358e969 code=0x7ffc0000 [ 545.163025][ T27] audit: type=1326 audit(1746886245.080:3034): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13290 comm="syz.1.3518" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f398358e969 code=0x7ffc0000 [ 545.165818][T13300] loop4: detected capacity change from 0 to 2048 [ 545.287096][T13300] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 545.377001][ T4282] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 545.383554][T11782] EXT4-fs (loop4): unmounting filesystem. [ 545.394649][ T4282] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 545.407136][T13057] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 545.491870][ T27] kauditd_printk_skb: 53 callbacks suppressed [ 545.491889][ T27] audit: type=1326 audit(1746886245.790:3088): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13312 comm="syz.1.3525" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f398358e969 code=0x7ffc0000 [ 545.522699][ T6862] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 545.548196][ T6862] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 545.572604][ T27] audit: type=1326 audit(1746886245.840:3089): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13312 comm="syz.1.3525" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f398358e969 code=0x7ffc0000 [ 545.629830][ T27] audit: type=1326 audit(1746886245.840:3090): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13312 comm="syz.1.3525" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f398358e969 code=0x7ffc0000 [ 545.630444][ T6853] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 545.702836][ T27] audit: type=1326 audit(1746886245.840:3091): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13312 comm="syz.1.3525" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f398358e969 code=0x7ffc0000 [ 545.763200][ T6853] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 545.829126][ T6853] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 545.839089][ T27] audit: type=1326 audit(1746886245.840:3092): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13312 comm="syz.1.3525" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f398358e969 code=0x7ffc0000 [ 545.904465][ T6853] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 546.245024][ T27] audit: type=1326 audit(1746886245.840:3093): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13312 comm="syz.1.3525" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f398358e969 code=0x7ffc0000 [ 546.628806][T13328] 9pnet_fd: Insufficient options for proto=fd [ 546.649059][ T27] audit: type=1326 audit(1746886245.850:3094): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13312 comm="syz.1.3525" exe="/root/syz-executor" sig=0 arch=c000003e syscall=70 compat=0 ip=0x7f398358e969 code=0x7ffc0000 [ 546.715427][ T27] audit: type=1326 audit(1746886245.850:3095): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13312 comm="syz.1.3525" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f398358e969 code=0x7ffc0000 [ 546.738868][ T27] audit: type=1326 audit(1746886245.850:3096): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13312 comm="syz.1.3525" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f398358e969 code=0x7ffc0000 [ 546.739053][T13057] device veth0_vlan entered promiscuous mode [ 546.830060][T13057] device veth1_vlan entered promiscuous mode [ 546.949136][ T6853] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 546.960232][ T6853] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 547.000299][T13057] device veth0_macvtap entered promiscuous mode [ 547.049229][T13057] device veth1_macvtap entered promiscuous mode [ 547.092779][T13057] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 547.110579][T13057] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 547.122893][T13057] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 547.139580][T13057] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 547.149924][T13057] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 547.166102][T13057] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 547.167886][T13334] loop4: detected capacity change from 0 to 8192 [ 547.178498][T13057] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 547.198625][T13057] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 547.211553][T13057] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 547.231667][ T6853] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 547.256207][ T6853] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 547.262165][T13334] loop4: p1 p3 p4 [ 547.268827][T13334] loop4: p1 size 8390912 extends beyond EOD, truncated [ 547.276719][ T6853] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 547.303583][T13334] loop4: p3 size 589824 extends beyond EOD, truncated [ 547.315186][T13057] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 547.353438][T13057] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 547.383956][T13057] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 547.412459][T13057] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 547.429788][T13057] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 547.440518][T13057] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 547.462601][T13057] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 547.486528][ T6845] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 547.509930][ T6845] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 547.544599][T13057] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 547.562174][T13057] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 547.590712][T13057] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 547.593441][T13352] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 547.606010][T13352] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 547.613881][T13057] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 547.625215][T13352] vhci_hcd vhci_hcd.0: Device attached [ 547.632524][T13357] vhci_hcd vhci_hcd.0: pdev(1) rhport(1) sockfd(6) [ 547.639090][T13357] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 547.653472][T13357] vhci_hcd vhci_hcd.0: Device attached [ 547.682175][T13352] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 547.769264][T13352] vhci_hcd vhci_hcd.0: pdev(1) rhport(3) sockfd(9) [ 547.775876][T13352] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 547.787397][T13357] vhci_hcd vhci_hcd.0: pdev(1) rhport(4) sockfd(12) [ 547.794065][T13357] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 547.830783][ T5343] vhci_hcd: vhci_device speed not set [ 547.846712][ T6853] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 547.862247][T13357] vhci_hcd vhci_hcd.0: Device attached [ 547.866746][T13352] vhci_hcd vhci_hcd.0: Device attached [ 547.877063][ T6853] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 547.913467][ T5343] usb 35-1: new full-speed USB device number 2 using vhci_hcd [ 547.932477][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 547.962387][T13375] vhci_hcd vhci_hcd.0: pdev(1) rhport(6) sockfd(11) [ 547.969077][T13375] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 547.991455][ T6849] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 547.994599][T13375] vhci_hcd vhci_hcd.0: Device attached [ 548.017070][ T6849] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 548.044197][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 548.059924][T13368] vhci_hcd vhci_hcd.0: pdev(1) rhport(5) sockfd(15) [ 548.066828][T13368] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 548.113706][T13368] vhci_hcd vhci_hcd.0: Device attached [ 548.141206][T13364] vhci_hcd: connection closed [ 548.143205][ T4320] vhci_hcd: stop threads [ 548.145820][T13376] vhci_hcd: connection closed [ 548.148498][ T4320] vhci_hcd: release socket [ 548.168880][T13362] vhci_hcd: connection closed [ 548.169159][T13359] vhci_hcd: connection closed [ 548.174239][T13353] vhci_hcd: connection reset by peer [ 548.182607][ T4320] vhci_hcd: disconnect device [ 548.200184][ T4320] vhci_hcd: stop threads [ 548.214765][ T4320] vhci_hcd: release socket [ 548.218576][T13371] vhci_hcd: connection closed [ 548.222499][ T4320] vhci_hcd: disconnect device [ 548.258817][ T4320] vhci_hcd: stop threads [ 548.263351][ T4320] vhci_hcd: release socket [ 548.274617][T13386] loop4: detected capacity change from 0 to 1024 [ 548.279478][ T4320] vhci_hcd: disconnect device [ 548.289474][T13386] EXT4-fs: Ignoring removed orlov option [ 548.289522][ T4320] vhci_hcd: stop threads [ 548.306031][T13386] EXT4-fs: Ignoring removed nomblk_io_submit option [ 548.313491][ T4320] vhci_hcd: release socket [ 548.320149][ T4320] vhci_hcd: disconnect device [ 548.332305][ T4320] vhci_hcd: stop threads [ 548.338467][ T4320] vhci_hcd: release socket [ 548.344005][ T4320] vhci_hcd: disconnect device [ 548.349095][ T4320] vhci_hcd: stop threads [ 548.354294][ T4320] vhci_hcd: release socket [ 548.359165][ T4320] vhci_hcd: disconnect device [ 548.371533][T13386] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 548.402201][T13393] loop3: detected capacity change from 0 to 512 [ 548.418365][T13393] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 548.520109][T13393] EXT4-fs (loop3): 1 truncate cleaned up [ 548.529692][T13393] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 548.619511][T13057] EXT4-fs (loop3): unmounting filesystem. [ 549.710903][T11782] EXT4-fs (loop4): unmounting filesystem. [ 549.722315][T13407] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 549.842295][T13407] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 549.933116][T13407] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 550.035922][T13407] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 550.092363][T13428] netlink: 14 bytes leftover after parsing attributes in process `syz.4.3565'. [ 550.401749][T13428] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 550.422437][T13428] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 550.442860][T13428] bond0 (unregistering): Released all slaves [ 550.459253][ T3584] bond0 speed is unknown, defaulting to 1000 [ 550.475759][T13432] netlink: 'syz.3.3566': attribute type 4 has an invalid length. [ 550.484622][T13432] netlink: 152 bytes leftover after parsing attributes in process `syz.3.3566'. [ 550.525349][T13432] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 550.640798][T13407] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 550.669858][T13407] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 550.697469][T13407] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 550.720622][T13407] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 550.925386][ T27] audit: type=1326 audit(1746886251.230:3097): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13440 comm="syz.4.3572" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49f3b8e969 code=0x7ffc0000 [ 550.985154][ T27] audit: type=1326 audit(1746886251.230:3098): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13440 comm="syz.4.3572" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49f3b8e969 code=0x7ffc0000 [ 551.012204][ T27] audit: type=1326 audit(1746886251.250:3099): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13440 comm="syz.4.3572" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f49f3b8e969 code=0x7ffc0000 [ 551.042400][ T27] audit: type=1326 audit(1746886251.250:3100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13440 comm="syz.4.3572" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49f3b8e969 code=0x7ffc0000 [ 551.083143][ T27] audit: type=1326 audit(1746886251.250:3101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13440 comm="syz.4.3572" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49f3b8e969 code=0x7ffc0000 [ 551.162207][ T27] audit: type=1326 audit(1746886251.260:3102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13440 comm="syz.4.3572" exe="/root/syz-executor" sig=0 arch=c000003e syscall=51 compat=0 ip=0x7f49f3b8e969 code=0x7ffc0000 [ 551.225924][ T27] audit: type=1326 audit(1746886251.260:3103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13440 comm="syz.4.3572" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49f3b8e969 code=0x7ffc0000 [ 551.280439][ T27] audit: type=1326 audit(1746886251.260:3104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13440 comm="syz.4.3572" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49f3b8e969 code=0x7ffc0000 [ 552.236453][T13456] netlink: 'syz.2.3578': attribute type 39 has an invalid length. [ 552.384475][T13462] 9pnet_fd: Insufficient options for proto=fd [ 552.591902][T13470] loop3: detected capacity change from 0 to 256 [ 552.888151][T13476] device veth0_vlan left promiscuous mode [ 552.901300][T13476] device veth0_vlan entered promiscuous mode [ 552.932384][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 552.952779][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 552.972951][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 553.035970][ T5343] vhci_hcd: vhci_device speed not set [ 553.893195][T13494] 9pnet_fd: Insufficient options for proto=fd [ 555.513099][T13533] 9pnet_fd: Insufficient options for proto=fd [ 556.898637][T13552] loop4: detected capacity change from 0 to 128 [ 558.315993][T13578] 9pnet_fd: Insufficient options for proto=fd [ 559.105540][T13581] loop3: detected capacity change from 0 to 8192 [ 560.316553][T13615] 9pnet_fd: Insufficient options for proto=fd [ 561.342150][T13628] loop3: detected capacity change from 0 to 1024 [ 561.402803][T13628] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 561.466489][T13628] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 561.503067][T13628] JBD2: no valid journal superblock found [ 561.536522][T13628] EXT4-fs (loop3): error loading journal [ 563.366018][ T1274] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.621519][ T27] audit: type=1326 audit(1746886263.920:3105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13668 comm="syz.4.3658" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49f3b8e969 code=0x7ffc0000 [ 563.713587][ T27] audit: type=1326 audit(1746886263.920:3106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13668 comm="syz.4.3658" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49f3b8e969 code=0x7ffc0000 [ 563.756835][ T27] audit: type=1326 audit(1746886263.950:3107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13668 comm="syz.4.3658" exe="/root/syz-executor" sig=0 arch=c000003e syscall=323 compat=0 ip=0x7f49f3b8e969 code=0x7ffc0000 [ 563.799953][ T27] audit: type=1326 audit(1746886263.950:3108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13668 comm="syz.4.3658" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49f3b8e969 code=0x7ffc0000 [ 563.858186][ T27] audit: type=1326 audit(1746886263.950:3109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13668 comm="syz.4.3658" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49f3b8e969 code=0x7ffc0000 [ 565.703933][T13704] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3669'. [ 567.111552][T13715] xt_CT: You must specify a L4 protocol and not use inversions on it [ 570.396774][T13760] 9pnet_fd: Insufficient options for proto=fd [ 571.768634][ T4269] Bluetooth: hci1: adv larger than maximum supported [ 571.815937][T13779] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3696'. [ 572.773462][ T26] usb 4-1: new high-speed USB device number 59 using dummy_hcd [ 573.010697][ T26] usb 4-1: config 0 interface 0 has no altsetting 0 [ 573.050858][ T26] usb 4-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=94.75 [ 573.433310][ T26] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 574.034209][ T26] usb 4-1: config 0 descriptor?? [ 574.278577][ T26] (null): keene_cmd_main failed (-71) [ 574.372803][ T26] video4linux radio48: keene_cmd_main failed (-71) [ 574.719391][ T26] radio-keene 4-1:0.0: V4L2 device registered as radio48 [ 574.733040][ T26] usb 4-1: USB disconnect, device number 59 [ 575.355840][T13813] Cannot find add_set index 0 as target [ 579.954912][T13867] loop3: detected capacity change from 0 to 2048 [ 580.044348][T13867] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 580.385576][T13878] Cannot find add_set index 0 as target [ 581.867408][T13057] EXT4-fs (loop3): unmounting filesystem. [ 583.011832][T13906] loop3: detected capacity change from 0 to 1024 [ 583.038547][T13906] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 583.085819][T13906] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 583.128858][T13906] JBD2: no valid journal superblock found [ 583.155331][T13906] EXT4-fs (loop3): error loading journal [ 584.011288][T13928] Cannot find add_set index 0 as target [ 586.896007][T13950] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3753'. [ 594.898360][T14026] netlink: 168864 bytes leftover after parsing attributes in process `syz.2.3783'. [ 594.909666][T14026] netlink: zone id is out of range [ 594.939808][T14026] netlink: del zone limit has 4 unknown bytes [ 595.961562][T14032] loop3: detected capacity change from 0 to 128 [ 596.143732][ T4269] Bluetooth: hci2: command 0x0406 tx timeout [ 598.630186][T14071] [ 598.632600][T14071] ====================================================== [ 598.639656][T14071] WARNING: possible circular locking dependency detected [ 598.646711][T14071] 6.1.138-syzkaller #0 Not tainted [ 598.651940][T14071] ------------------------------------------------------ [ 598.658983][T14071] syz.1.3798/14071 is trying to acquire lock: [ 598.665150][T14071] ffff888056f86de0 (&sb->s_type->i_mutex_key#12){+.+.}-{3:3}, at: process_measurement+0x33c/0x1a10 [ 598.675903][T14071] [ 598.675903][T14071] but task is already holding lock: [ 598.683278][T14071] ffff88807954e2d8 (&mm->mmap_lock){++++}-{3:3}, at: __se_sys_remap_file_pages+0x17d/0x770 [ 598.693346][T14071] [ 598.693346][T14071] which lock already depends on the new lock. [ 598.693346][T14071] [ 598.703851][T14071] [ 598.703851][T14071] the existing dependency chain (in reverse order) is: [ 598.712878][T14071] [ 598.712878][T14071] -> #1 (&mm->mmap_lock){++++}-{3:3}: [ 598.720488][T14071] down_read_killable+0x4c/0x340 [ 598.725994][T14071] mmap_read_lock_killable+0x1d/0x60 [ 598.731835][T14071] lock_mm_and_find_vma+0x2b1/0x2f0 [ 598.737599][T14071] do_user_addr_fault+0x2db/0xb10 [ 598.743261][T14071] exc_page_fault+0x60/0x100 [ 598.748492][T14071] asm_exc_page_fault+0x22/0x30 [ 598.753896][T14071] fault_in_readable+0x13e/0x1f0 [ 598.759386][T14071] fault_in_iov_iter_readable+0xbb/0x2e0 [ 598.765575][T14071] generic_perform_write+0x1d2/0x560 [ 598.771494][T14071] __generic_file_write_iter+0x172/0x430 [ 598.777689][T14071] generic_file_write_iter+0xab/0x2e0 [ 598.783614][T14071] vfs_write+0x44c/0x960 [ 598.788391][T14071] ksys_write+0x143/0x240 [ 598.793267][T14071] do_syscall_64+0x4c/0xa0 [ 598.798404][T14071] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 598.804852][T14071] [ 598.804852][T14071] -> #0 (&sb->s_type->i_mutex_key#12){+.+.}-{3:3}: [ 598.813946][T14071] __lock_acquire+0x2cf8/0x7c50 [ 598.819451][T14071] lock_acquire+0x1b4/0x490 [ 598.824781][T14071] down_write+0x36/0x60 [ 598.829492][T14071] process_measurement+0x33c/0x1a10 [ 598.835335][T14071] ima_file_mmap+0x104/0x150 [ 598.840469][T14071] __se_sys_remap_file_pages+0x53e/0x770 [ 598.846666][T14071] do_syscall_64+0x4c/0xa0 [ 598.851647][T14071] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 598.858114][T14071] [ 598.858114][T14071] other info that might help us debug this: [ 598.858114][T14071] [ 598.862947][T14075] Cannot find add_set index 0 as target [ 598.868346][T14071] Possible unsafe locking scenario: [ 598.868346][T14071] [ 598.868354][T14071] CPU0 CPU1 [ 598.868361][T14071] ---- ---- [ 598.868367][T14071] lock(&mm->mmap_lock); [ 598.868388][T14071] lock(&sb->s_type->i_mutex_key#12); [ 598.904562][T14071] lock(&mm->mmap_lock); [ 598.911417][T14071] lock(&sb->s_type->i_mutex_key#12); [ 598.916891][T14071] [ 598.916891][T14071] *** DEADLOCK *** [ 598.916891][T14071] [ 598.925116][T14071] 1 lock held by syz.1.3798/14071: [ 598.930228][T14071] #0: ffff88807954e2d8 (&mm->mmap_lock){++++}-{3:3}, at: __se_sys_remap_file_pages+0x17d/0x770 [ 598.940736][T14071] [ 598.940736][T14071] stack backtrace: [ 598.947160][T14071] CPU: 0 PID: 14071 Comm: syz.1.3798 Not tainted 6.1.138-syzkaller #0 [ 598.955499][T14071] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 598.965650][T14071] Call Trace: [ 598.968936][T14071] [ 598.971869][T14071] dump_stack_lvl+0x168/0x22e [ 598.976571][T14071] ? load_image+0x3b0/0x3b0 [ 598.981084][T14071] ? show_regs_print_info+0x12/0x12 [ 598.986304][T14071] ? print_circular_bug+0x12b/0x1a0 [ 598.991525][T14071] check_noncircular+0x274/0x310 [ 598.996565][T14071] ? add_chain_block+0x940/0x940 [ 599.001517][T14071] ? lockdep_lock+0xdc/0x1e0 [ 599.006126][T14071] ? _find_first_zero_bit+0xcf/0x100 [ 599.011415][T14071] __lock_acquire+0x2cf8/0x7c50 [ 599.016278][T14071] ? ima_match_policy+0x104/0x2100 [ 599.021399][T14071] ? verify_lock_unused+0x140/0x140 [ 599.026693][T14071] ? ima_match_policy+0x207a/0x2100 [ 599.031898][T14071] lock_acquire+0x1b4/0x490 [ 599.036410][T14071] ? process_measurement+0x33c/0x1a10 [ 599.041786][T14071] ? __might_sleep+0xd0/0xd0 [ 599.046388][T14071] ? read_lock_is_recursive+0x10/0x10 [ 599.051773][T14071] ? ima_get_action+0x71/0xa0 [ 599.056458][T14071] down_write+0x36/0x60 [ 599.060634][T14071] ? process_measurement+0x33c/0x1a10 [ 599.066034][T14071] process_measurement+0x33c/0x1a10 [ 599.071279][T14071] ? ima_file_mmap+0x150/0x150 [ 599.076071][T14071] ? aa_file_perm+0x117/0xec0 [ 599.080778][T14071] ? asm_sysvec_reschedule_ipi+0x16/0x20 [ 599.086420][T14071] ? lockdep_hardirqs_on+0x94/0x140 [ 599.091642][T14071] ? aa_get_current_label+0x110/0x1d0 [ 599.097027][T14071] ? apparmor_current_getsecid_subj+0xb1/0x110 [ 599.103189][T14071] ima_file_mmap+0x104/0x150 [ 599.107793][T14071] ? ima_file_free+0x3e0/0x3e0 [ 599.112558][T14071] ? common_file_perm+0x171/0x1c0 [ 599.117590][T14071] ? bpf_lsm_mmap_file+0x5/0x10 [ 599.122444][T14071] ? security_mmap_file+0x11b/0x180 [ 599.127678][T14071] __se_sys_remap_file_pages+0x53e/0x770 [ 599.133328][T14071] ? __se_sys_futex+0x14a/0x440 [ 599.138196][T14071] ? __x64_sys_remap_file_pages+0xc0/0xc0 [ 599.144130][T14071] ? lock_chain_count+0x20/0x20 [ 599.148994][T14071] ? lockdep_hardirqs_on+0x94/0x140 [ 599.154209][T14071] ? __x64_sys_remap_file_pages+0x1c/0xc0 [ 599.160036][T14071] do_syscall_64+0x4c/0xa0 [ 599.164463][T14071] ? clear_bhb_loop+0x45/0xa0 [ 599.169145][T14071] ? clear_bhb_loop+0x45/0xa0 [ 599.173824][T14071] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 599.179734][T14071] RIP: 0033:0x7f398358e969 [ 599.184168][T14071] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 599.203786][T14071] RSP: 002b:00007f3984454038 EFLAGS: 00000246 ORIG_RAX: 00000000000000d8 [ 599.212206][T14071] RAX: ffffffffffffffda RBX: 00007f39837b5fa0 RCX: 00007f398358e969 [ 599.220183][T14071] RDX: 0000000000000000 RSI: 0000000000004000 RDI: 00002000006ca000 [ 599.228424][T14071] RBP: 00007f3983610ab1 R08: 0000000000010000 R09: 0000000000000000 [ 599.236395][T14071] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 599.244382][T14071] R13: 0000000000000000 R14: 00007f39837b5fa0 R15: 00007fff4c60a258 [ 599.252387][T14071]