last executing test programs: 29.608603057s ago: executing program 4 (id=729): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000200)='./file0\x00', 0x2a14000, &(0x7f0000000680)={[{@user_xattr}, {@nobarrier}, {@discard}, {@nodiscard}, {@nouid32}, {@i_version}, {}, {@min_batch_time={'min_batch_time', 0x3d, 0x8}}, {@max_batch_time={'max_batch_time', 0x3d, 0x6}}, {@noquota}, {@jqfmt_vfsv0}, {@discard}, {@block_validity}, {@user_xattr}, {@grpid}]}, 0x1, 0x54f, &(0x7f0000000b00)="$eJzs3d9rW1UcAPDvTdv91nUwhopIYQ9O5tK19ccEH+aj6HCg7zO0d2U0WUaTjrUO3B7ciy8yBBEH4ru++zj8B/wrBjoYMoo++BK56U2XrUmbZdnamc8HbnvOvTc995t7v6fn5iQkgKE1kf0oRLwcEd8kEQfbto1GvnFibb/V+1dnsyWJRuPTv5JI8nWt/ZP89/688lJE/PZVxPHCxnZryysLpXI5Xczrk/XKpcna8sqJC5XSfDqfXpyemTn19sz0e+++M7BY3zj7z/ef3P7w1NdHV7/75e6hm0mcjgP5tvY4nsC19spETOTPyVicfmTHqQE0tpMk230A9GUkz/OxyPqAgzGSZz3w//dlRDSAIZXIfxhSrXFA695+QPfBz417H6zdAG2Mf3TttZHY07w32reaPHRnlN3vjg+g/ayNX/+8dTNbYnCvQwBs6dr1iDg5Orqx/0vy/q9/J3vY59E29H/w7NzOxj9vdhr/FNbHP9Fh/LO/Q+72Y+v8L9wdQDNdZeO/9zuOf9cnrcZH8toLzTHfWHL+QjnN+rYXI+JYjO3O6pvN55xavdPotq19/JctWfutsWB+HHdHdz/8mLlSvfQkMbe7dz3ilY7j32T9/Ccdzn/2fJztsY0j6a3Xum3bOv6nq/FTxOsdz/+DGa1k8/nJyeb1MNm6Kjb6+8aR37u1v93xZ+d/3+bxjyft87W1x2/jxz3/pt229Xv970o+a5Z35euulOr1xamIXcnHG9dPP3hsq97aP4v/2NHN+79O1//eiPi8x/hvHP751f7jf7qy+Oce6/w/fuHOR1/80K393s7/W83SsXxNL/1frwf4JM8dAAAAAAAA7DSFiDgQSaG4Xi4UisW193ccjn2FcrVWP36+unRxLpqflR2PsUJrpvtg2/shpvL3w7bq04/UZyLiUER8O7K3WS/OVstz2x08AAAAAAAAAAAAAAAAAAAA7BD7u3z+P/PHyHYfHfDU+cpvGF5b5v8gvukJ2JH8/4fhJf9heMl/GF7yH4aX/IfhJf9heMl/GF7yHwAAAAAAAAAAAAAAAAAAAAAAAAAAAAbq7Jkz2dJYvX91NqvPXV5eWqhePjGX1haKlaXZ4mx18VJxvlqdL6fF2Wplq79XrlYvTU3H0pXJelqrT9aWV85VqksX6+cuVErz6bl07JlEBQAAAAAAAAAAAAAAAAAAAM+X2vLKQqlcThcVFPoqjO6Mw1AYcGG7eyYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeOC/AAAA///ktDiZ") r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mounts\x00') r1 = open(&(0x7f00000003c0)='./bus\x00', 0x14bb42, 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x89101a, 0x0) mount$bind(&(0x7f0000000040)='./file0/../file0\x00', &(0x7f0000000140)='./file0/../file0\x00', 0x0, 0x1217880, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) setxattr$security_capability(0x0, 0x0, &(0x7f0000000300)=@v2={0x2000000, [{0x6, 0x3}, {0xfffffff9, 0x439}]}, 0x14, 0x3) sendfile(r1, r0, 0x0, 0x80000000) 28.792710833s ago: executing program 4 (id=734): syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc000, &(0x7f00000006c0), 0x2, 0x246, &(0x7f0000000ac0)="$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") mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) r0 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x800c6613, &(0x7f0000000140)=@v1={0x0, @aes128, 0x0, @desc3}) chdir(&(0x7f0000000000)='./file0\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=@framed={{}, [@printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x400000}, {0x85, 0x0, 0x0, 0x71}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) unlink(&(0x7f0000000080)='./file0/file0\x00') symlink(&(0x7f0000000dc0)='./file0\x00', &(0x7f0000000cc0)='./file0\x00') 28.206337017s ago: executing program 4 (id=737): syz_mount_image$erofs(&(0x7f0000000000), &(0x7f0000000180)='./file0\x00', 0x0, &(0x7f00000001c0)=ANY=[@ANYRES32], 0x1, 0x17c, &(0x7f0000000240)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() prlimit64(0x0, 0x7, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0xfffd) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) mmap(&(0x7f00002d8000/0x1000)=nil, 0x1000, 0x2000004, 0x13, 0xffffffffffffffff, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='configfs\x00', 0x0, 0x0) getrlimit(0x4, 0x0) chdir(&(0x7f0000000140)='./file0\x00') r1 = gettid() rt_sigtimedwait(&(0x7f0000000080)={[0x3ff]}, &(0x7f00000000c0), 0x0, 0x8) tkill(r1, 0x7) r2 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r2, &(0x7f0000001fc0)=""/184, 0xb8) 18.770698008s ago: executing program 3 (id=758): bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair(0x1, 0x1, 0x0, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0x5, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r1}, &(0x7f0000000580)=0x2, &(0x7f00000005c0)=r0}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000002500)={{r1}, &(0x7f0000002480), &(0x7f00000024c0)=r0, 0x2}, 0x20) 18.560997187s ago: executing program 3 (id=759): eventfd2(0x7, 0x80001) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x35, &(0x7f0000000000)=0x8000, 0x4) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000140)=ANY=[], 0x8) socket$netlink(0x10, 0x3, 0x4) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x4400, 0x106) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r6 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r6, 0x4400ae8f, &(0x7f0000000180)) syz_usb_connect(0x0, 0x147, &(0x7f0000000000)=ANY=[@ANYBLOB="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"], 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) 16.405597556s ago: executing program 3 (id=763): sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) ptrace$setregset(0x4205, 0xffffffffffffffff, 0x4, &(0x7f0000000400)={&(0x7f0000000480)="53725ad700d75d7a25d29fc6bd923b1fd8ae073a7f33bb1fbb6f8f0385db2caa2c1129acb9f3dfb64339e156f0c2e09ee3ccf3b234349f8737169455894cd49d4501a914a81e517faef9647ba06e9cbe297de1064d0529553f016eb7d46fbdd0acb8f60e200c0157d3763c7506e8e01b390c3d26844f5df3c20ccaac262ba74a555140cc9596e6968a2c6a88c08537db5b05c26906d7a188ff6908350eb297c9c623585ca1761b836d3a06938332e7fd65053242eb05435b3857183caa693e9eefc2d71648ef2e57741398c496cd46749b2cae4b222f4406feb1313ef52262fb7e9e4d62ea80c34e0685bf657092e26906ef937f101b21", 0xf7}) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)={0x20, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0xc, 0x2, 0x0, 0x0, @str='nl80211\x00'}]}, 0x20}}, 0x0) recvmmsg(r2, &(0x7f0000000a40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) r3 = socket$inet6(0xa, 0x3, 0x2) getsockname(r3, &(0x7f0000000d00)=@xdp, &(0x7f0000000c80)=0x80) socket$netlink(0x10, 0x3, 0x0) connect$tipc(r3, &(0x7f0000000380)=@name={0x1e, 0x2, 0x2, {{}, 0x3}}, 0x10) ioctl$KVM_SET_IRQCHIP(r0, 0xc048aec8, &(0x7f0000000080)={0x0, 0x0, @pic={0x4, 0x81, 0x8, 0x3, 0x5, 0x7, 0x40, 0x0, 0x5, 0x49, 0x30, 0x7, 0x49, 0x9, 0x5, 0xf7}}) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[], 0x5c}}, 0x0) ftruncate(0xffffffffffffffff, 0x5) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000740)={{{@in=@dev}}, {{@in=@multicast1}, 0x0, @in6=@empty}}, &(0x7f0000000300)=0xe4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000000)=[@sack_perm, @window, @mss={0x2, 0x3}, @timestamp, @timestamp, @timestamp, @timestamp], 0x7) getsockopt$ARPT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x60, 0x0, &(0x7f0000000100)) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x10012, 0xffffffffffffffff, 0x0) 13.828052404s ago: executing program 3 (id=768): syz_mount_image$hfsplus(&(0x7f0000000600), &(0x7f00000004c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x800810, &(0x7f0000000640)=ANY=[], 0x1, 0x669, &(0x7f0000001000)="$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") r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x103ba52, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r3 = dup(r2) write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r3, &(0x7f0000000300)=ANY=[@ANYBLOB="b000000000000000"], 0xb0) getresuid(&(0x7f0000000440), &(0x7f0000000480), &(0x7f00000004c0)=0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r3, @ANYBLOB=',privport,access=', @ANYRESDEC=r4]) mount$bind(&(0x7f0000000300)='./file0\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x11080, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000005080)={0x2020}, 0x204d) 13.315188262s ago: executing program 3 (id=771): r0 = syz_open_dev$loop(&(0x7f0000000180), 0x80000, 0x2480) ioctl$LOOP_GET_STATUS64(r0, 0x4c05, &(0x7f0000000400)) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x10}}, 0x0) unshare(0x68040200) socket$inet6_udp(0xa, 0x2, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000200)=0x1) r3 = socket$rxrpc(0x21, 0x2, 0xa) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x41, &(0x7f0000000000)=0x1029, 0x4) fsopen(&(0x7f0000000180)='nilfs2\x00', 0x0) r4 = socket(0x200000100000011, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) bind$packet(r4, &(0x7f0000000040)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000100)=0x800b, 0x4) sendmsg$netlink(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000300)={0x30, 0x0, 0x0, 0x0, 0x0, "", [@generic="d96e6c8d5e85080045f00d80724e11d569116e3a1ce41e2a560254cc0043"]}, 0x30}, {&(0x7f0000001040)={0x10}, 0x10}], 0x2}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newlink={0x44, 0x10, 0x44b, 0x0, 0x0, {0x7a}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_ROUTER={0x5, 0x16, 0x3}, @IFLA_BR_AGEING_TIME={0x8}]}}}]}, 0x44}}, 0x0) 12.743380494s ago: executing program 3 (id=776): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000001600)={0x0, 0x0, 0x0}, 0x41) 6.691069833s ago: executing program 0 (id=792): syz_open_procfs(0x0, &(0x7f00000003c0)='net/ip6_mr_vif\x00') r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/fscaps', 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000008, 0x50, 0xffffffffffffffff, 0x5738d000) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r5 = open(&(0x7f0000000040)='./cgroup.cpu/cpuset.cpus\x00', 0x121342, 0x0) write$tcp_mem(r5, &(0x7f0000000240)={0x2, 0x2c, 0x0, 0x2c, 0x7, 0x2c}, 0x48) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r7 = socket$netlink(0x10, 0x3, 0x9) setsockopt$sock_attach_bpf(r7, 0x1, 0x32, &(0x7f00000017c0)=r6, 0x4) sendmsg$TIPC_NL_MON_PEER_GET(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)=ANY=[@ANYBLOB="1400"], 0x14}}, 0x0) pipe2$watch_queue(0x0, 0x80) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000340)={r5, 0x20, &(0x7f0000000180)={&(0x7f0000000580)=""/149, 0x95, 0x0, &(0x7f0000000640)=""/243, 0xf3}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x1, 0xe, &(0x7f0000002280)=ANY=[@ANYBLOB="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", @ANYBLOB="057842f71d803d937f7865db3de4c85a445a0523e1f4"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r5, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, r8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sched_getscheduler(0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000280)={0x3}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=ANY=[@ANYBLOB="3b0000001600010000000000000000000a000000", @ANYRES32=0x0, @ANYBLOB="14000600"/20], 0x2c}}, 0x0) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000300)='./file0\x00', 0x400003, &(0x7f0000000200)={[{@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x5}}, {@noblock_validity}, {@usrquota}, {@resgid}, {@nogrpid}, {@errors_remount}, {@noinit_itable}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x1}}, {@resuid, 0x32}]}, 0x1b, 0x4f0, &(0x7f0000000a40)="$eJzs3V1rW+cdAPD/ObaSOHFmh+0iCywLS4Ydtkh2vCRmF1k2xnYV2JZdL/Ns2RjLlrHkJDZhc9gHGIyxDQaDXvWm0A9QKPkIpRBo70tbWkqbtBe5aKOit7w4kq0Q2Qr27wfH53nOi///R0JHes55OCeAfetURJyOiEeVSuVsRAw1lqeN6Uq1slHf7sH929PVKYlK5drnSURSX1bdZPSp/3mkvksciog//DbiL8nzcUtr6wtThUJ+pVHPlReXc6W19XPzi1Nz+bn80sTE+MXJS5MXJse60s7BiLj864///Y/Xf3P57Z/e/OD6p6N/TRrLI560o9vqTc/UXoum/ohY2YlgPdDXaE+m14kAANCR5u/8H0XE2RiKvtqvOQAAAGAvqfxiML5OIioAAADAnpXWxsAmabYxDmAw0jSbrY/h/V4cTgvFUvkns8XVpZn6WNnhyKSz84X8WGOs8HBkkmp9vFZ+Uj+/qT4REcci4l9DA7V6drpYmOn1yQ8AAADYJ45s6v9/NVTv/wMAAAB7zHCvEwAAAAB2nP4/AAAA7H36/wAAALCn/e7q1epUaT7/eubG2upC8ca5mXxpIbu4Op2dLq4sZ+eKxbnaPfsWt/t/hWJx+WextHorV86XyrnS2vr1xeLqUvn6/DOPwAYAAAB20bEf3n0/iYiNnw/UpqoDvU4K2BX9L7LxRzuXB7D7+nqdANAzL/T9D+wpmV4nAPRcEhH/32J928E77+xMPgAAQPeNfL/19f9k23MDG+kupQjsEOf/YP9y/R/2L9f/Yf/KRF903pEf2NFcgN5Itln/8tf/K5UXSggAAOi6wdqUpNmI2nmAwUjTbDbiaO2xAJlkdr6QH4uI70TEe0OZg9X6eG3PZNs+AwAAAAAAAAAAAAAAAAAAAAAAAABQV6kkUQEAAAD2tIj0k6Tx/K+RoTODm88PHEgeDtXmEXHzf9f+c2uqXF4Zry7/4vHy8n8by8/34gwGAAAAsFmzn97sxwMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABANz24f3u6Oe1m3M9+GRHDreL3x6Ha/FBkIuLwl0n0P7VfEhF9XYi/cScifvWnFvGTalox3MiiVfyBbsU/3qr9W8dPI+JIF+LDfna3evy50urzl8ap2nzz5+/g4337uxC//fEvfXz862tz/DnaYYwT997MtY1/J+JEf+vjTzN+0ib+6Q7j//mP6+vt1lVeixhp+f2TPBMrV15czpXW1s/NL07N5efySxMT4xcnL01emBzLzc4X8o2/LWP88wdvPdqq/YfbxB/epv1nOmz/N/du3f9uvZhpFX/0dOv3/3ib+Gnju+/HjXJ1/UizvFEvP+3kG++e3Kr9M23av937P9ph+8/+/u8fdrgpALALSmvrC1OFQn5lXxde6tWo/izqbOO0EeZVaLJCfqX0t1cjjVey0PxMPOzJcQkAAOi+5/vAAAAAAAAAAAAAAAAAAAAAwG7rzj3DmvfE3vruek0b9dlz90IGAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOilbwMAAP//lRTPYg==") getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000003c0)={0x0, 0x0, 0x0}, &(0x7f0000000280)=0x7) fchown(r0, 0x0, r9) 6.653148636s ago: executing program 2 (id=793): sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x68) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r0, 0x0, 0x0, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000}, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x20001439) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNIMAP(r2, 0x4b67, &(0x7f0000000380)={0x0, 0x0}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r3, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x44005) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r4 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) r5 = open(&(0x7f0000000140)='./bus\x00', 0x80200, 0x0) write$binfmt_elf64(r4, 0x0, 0xfe3c) dup2(r5, r4) finit_module(r1, 0x0, 0x0) read(0xffffffffffffffff, 0x0, 0x0) 5.786875846s ago: executing program 2 (id=796): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f00000000c0)=0x7a, 0x4) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) socket$packet(0x11, 0x3, 0x300) sendmmsg$inet(r0, &(0x7f0000000cc0)=[{{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f00000011c0)="93bffce623851797a8dc79018d7716840ffc6941c667f6d345b18bc896d8f016f5f206bb2b0eb2fe32d2f0048678cd35ef833c35225ff95a94770a6845b091e69f243dea0d601c54e9c93ee3568b89a3427c84262ff67b679ccac305b5cea1dcd151d7bb5754603b6b0e362d8041bdc61529260e6c4046d55927c96dcce1609b9c4f8424b9da760270a470f95b99ebb6fc40b5d175e86ac0b7a9fd7f1748af98902340", 0xa3}, {&(0x7f0000000400)="029993440c7a0c95d3bb8cf353fd63c588ffa39f0ff0fced20927ea4b2a247d082247558bef6b2b2cd6a0dffece1b36526e9388c344fb7ac429e434ccb0330483c0604aaf296d8218e240055cb92f17b1b47fd7b1b178ca0d1c470154ed985a179", 0x61}, {&(0x7f0000000e00)="ec75d081fcb7e79634ec1a1abfdebb6a38b0c57cc77b83d2eea81aad8f73b36abc2019cb08fcaaec9647a07d0a0965f0f1e39afd84e7e2523aaded5e09aa1e36fcc90c269ad6d38d57619127cee4253655c33b71054226c3b00b9ee6ae29f0b07bc6fe7981126ca804c1f64e6c19ba36b2778c5f4a1c58625fe19516af43c9870c5b8191e23778abe7df2280d459b1651686a53ca52dce9570444c153f9c2903ae4c868074e89477bf6ed2ab648b0498ac8c0f90844ed9a26675199d5ff9b391c1dec077b509", 0xc6}, {&(0x7f0000000f00)="397d5f2edc82d0337ae5ab9ee47dc3e798cf69cfebf169e77257f308227094d569a4326954e50ea185bc6fff0507c5dfd26676de9ddac4fe6db927cd4d03965f42d9c7513eff1631", 0x48}], 0x4}}, {{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000740)="b1f56ee29c433328d3b2a83bd97e37007087acae7568edff43ed556d76770122635aea1dc487553859348d48e6fc49d81c71590cd542e796cc2669e2af442a03760c5cdfc691b3da35ad6a8d2ef9c2baa53a8dec36a2e434d46e643a1277b1dd932f3ef2", 0x64}, {&(0x7f0000000ac0)="5700003d654fdca8417119f092b799441d169633d1d1894111b5a3c8472f228813884f36d33c54425ae53fc22d34b7ce824d6f2d3a101bd856f854bcb974b8cbc66dbee64789ef8676cca8770a00a247a1f3b1c3b80ad9332363f1d9632484a13d1ecb2a77558f151e966afa38b461981eb61ee91eca10673c680c015a29cdc4e0db43efa6ea74a7a1dbe5d6e492307f80cb4c839ba4b736170e7c5cc006132e8cd18ebdb4889893c8a8290e2d9daac1f915f024811911b229cc0b0170fd3071a9f78487", 0xc4}], 0x2}}, {{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000300)="b5d3838236773268a73daecfa0fdc5beb5a7ac332a11523627b41db31da6be0055bf716aa2b23b97d43cc40c632f6b9850f364ba0831ed0d6f7157f204275aa850d992d81ba6ab984bd809254e847b644cf6459a8139c3ebba62168141343c853896523ffb04131b2786acc44a57f5b1bd33cdaef8dd3c0526b7454eefe5153c5778ce05c77e962fd6bf3a4b9eb05654e64f1867398e", 0x96}, {&(0x7f0000000000)="e47ecfc6ce6d4d9cc5a0fbf98f301803da3adfbec8a1d5324076b744b24bc7cf83120d4819726e827d90219c7100dc54801b32c3a9a69a238db1f4d16464062d870e812ee381b6b3c234824a4a4475f9ee81286836e549ff446b0004adc6b16981ea546cd24ff6d573", 0x69}, {&(0x7f0000000840)="fbdd17a812c727337dc6c74dcb077562b57a440dbf7711ba245a62b76d46b0f19e6ff608ef9e5fbb4a8cfb02e28403582ceb8031acc767f766772a93a2f00ddde52ce6f7a84db1c66feecdc4a028e7b9e5e27a0057957743cbf196c517bf3ad97859c31205e3a35f43", 0x69}], 0x3}}], 0x3, 0xc0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, 0x0, 0x0) sendto$inet(r0, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x20c8, 0x11, 0x0, 0x27) 5.194090181s ago: executing program 2 (id=798): socket$igmp(0x2, 0x3, 0x2) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000003c0)={'wlan1\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000480)={'wlan1\x00'}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000003700000008000300", @ANYBLOB="08002600901500000800570080"], 0x2c}}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="1fe8ffff0000000000003b00000008000300", @ANYRES32=r7, @ANYBLOB="21003300d0800000080211000000080211000001505050505050"], 0x40}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="010000000000000000000800000008000300", @ANYRES32=r1], 0x1c}, 0x1, 0x0, 0x0, 0x24000040}, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f00000015c0)={0x0, 0x0, &(0x7f0000001580)={&(0x7f0000000040)={0x44, 0x2, 0x6, 0x101, 0x0, 0x0, {0x0, 0x0, 0x50}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x5}]}, 0x44}}, 0x0) 4.739321953s ago: executing program 0 (id=799): socket$inet_sctp(0x2, 0x1, 0x84) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f0000019340), 0x0, 0x0) read$msr(r0, &(0x7f0000000300)=""/102400, 0x19000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/partitions\x00', 0x0, 0x0) r2 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000300)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) sendfile(r2, r1, 0x0, 0x23d) 4.435062681s ago: executing program 2 (id=800): socket$kcm(0x11, 0x200000000000002, 0x300) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x0, 0x5, &(0x7f0000000380)=ANY=[@ANYBLOB="18020000010000000000000000000000850000005300000085000000050000009500000000000000a94be0c51261be6a99fe3d0000a232d5e1f59f18f845f82e9a7bde9e8f4b9197701b547edf612a03f1737d95"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = socket$kcm(0x11, 0x200000000000002, 0x300) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000003840)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000380)="fbe6bd8dfcdda5a210b8cfefbd66f459c7261b927d25d3cf74d2f7c97735eba47f606a290d18492592230700000000000000081fdbd921ed4db0e67c9d5ab1452445a1e0da5ac68b13f4afe2712eeaad350d07", 0x53}], 0x1}, 0x0) close(r4) recvmsg$unix(r3, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r2, 0x107, 0x12, &(0x7f00000008c0)=r5, 0x4) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r7) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast}) write$cgroup_devices(r6, &(0x7f0000000140)=ANY=[@ANYBLOB="1e000300008c71ef28ff4b"], 0xffdd) 4.34149177s ago: executing program 1 (id=801): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000000)=@sack_info={0x0, 0x0, 0x6}, 0xc) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000900)=[@in={0x2, 0x4e23, @loopback}, @in6={0xa, 0x0, 0x0, @loopback}], 0x2c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000080)=0x800009, 0x4) sendto$inet6(r0, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)=ANY=[], 0x28}}, 0x0) writev(r0, &(0x7f0000000a40)=[{&(0x7f00000007c0)="9211", 0x2}], 0x1) 4.061042396s ago: executing program 1 (id=802): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="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"/2574], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r1 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r1, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) r2 = socket$kcm(0x29, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000002800)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000040)={r1, r3}) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000040)={r1, r0}) 3.758945384s ago: executing program 4 (id=738): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(0x0, r1) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CHANNEL(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)={0x24, r2, 0x3, 0x70bd29, 0x25dfdbfd, {}, [@NL802154_ATTR_CHANNEL={0x5, 0x8, 0x2}, @NL802154_ATTR_PAGE={0x5, 0x7, 0x3}]}, 0x24}}, 0x802) r3 = inotify_init1(0x0) fcntl$getownex(r3, 0x10, &(0x7f0000000380)={0x0, 0x0}) setpgid(0x0, r4) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f0000000180)={'wpan1\x00', 0x0}) r8 = getpid() sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x24, r6, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_PID={0x8, 0x1c, r8}]}, 0x24}}, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f00000001c0)) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r1, &(0x7f0000000380)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x14, r2, 0x20, 0x70bd2d, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x4800}, 0x4) r9 = socket(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r10 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r10) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r9, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r11, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002500)=@newtfilter={0x54, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r11, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x24, 0x2, [@TCA_BASIC_EMATCHES={0x20, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8}, @TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10}]}]}]}}]}, 0x54}}, 0x0) 3.732046746s ago: executing program 1 (id=803): eventfd2(0x7, 0x80001) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x35, &(0x7f0000000000)=0x8000, 0x4) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000140)=ANY=[], 0x8) socket$netlink(0x10, 0x3, 0x4) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x4400, 0x106) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r5, 0x4400ae8f, &(0x7f0000000180)) syz_usb_connect(0x0, 0x147, &(0x7f0000000000)=ANY=[@ANYBLOB="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"], 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) 1.85225966s ago: executing program 1 (id=804): sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x68) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r0, 0x0, 0x0, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000}, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x20001439) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNIMAP(r2, 0x4b67, &(0x7f0000000380)={0x0, 0x0}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x44005) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r4 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) r5 = open(&(0x7f0000000140)='./bus\x00', 0x80200, 0x0) write$binfmt_elf64(r4, 0x0, 0xfe3c) dup2(r5, r4) finit_module(r1, 0x0, 0x0) read(0xffffffffffffffff, 0x0, 0x0) 1.748328749s ago: executing program 0 (id=805): vmsplice(0xffffffffffffffff, &(0x7f0000000600)=[{&(0x7f00000003c0)="28cab883a139ae0a72251ea26af2729b8a870292a3b2bb5269f8282faee5cc44202c0c3dc7d9c1161b9a5b83c061c28eb7a787f8178097c509", 0x39}], 0x1, 0x8) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000007c0), 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000009c0)={'tunl0\x00'}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3, @void, @value}, 0x94) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="25003300d0000000080211000001080211000000505050505050"], 0x44}}, 0x0) 852.246142ms ago: executing program 0 (id=806): r0 = socket$pppoe(0x18, 0x1, 0x0) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x80}}, 0x0) connect$pppoe(r0, &(0x7f0000000400)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e) sendmmsg(r0, &(0x7f0000000080), 0x4000000000001f0, 0x0) 850.623212ms ago: executing program 2 (id=807): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x20, 0x1418, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}]}, 0x20}}, 0x0) 731.536123ms ago: executing program 4 (id=808): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11fe", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c00010062"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newtfilter={0x60, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x30, 0x2, [@TCA_BASIC_EMATCHES={0x2c, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xffff}}, @TCA_EMATCH_TREE_LIST={0x20, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1}, @TCF_EM_META={0xc, 0x2}]}]}]}}]}, 0x60}}, 0x0) 678.805088ms ago: executing program 1 (id=809): socket$igmp(0x2, 0x3, 0x2) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000003c0)={'wlan1\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000480)={'wlan1\x00'}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000003700000008000300", @ANYBLOB="08002600901500000800570080"], 0x2c}}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="1fe8ffff0000000000003b00000008000300", @ANYRES32=r7, @ANYBLOB="21003300d0800000080211000000080211000001505050505050"], 0x40}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="010000000000000000000800000008000300", @ANYRES32=r1], 0x1c}, 0x1, 0x0, 0x0, 0x24000040}, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f00000015c0)={0x0, 0x0, &(0x7f0000001580)={&(0x7f0000000040)={0x44, 0x2, 0x6, 0x101, 0x0, 0x0, {0x0, 0x0, 0x50}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x5}]}, 0x44}}, 0x0) 607.347334ms ago: executing program 0 (id=810): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000480)={'wlan1\x00', 0x0}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x2c, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x15e0}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x80}]}, 0x2c}}, 0x10000000) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x28, r1, 0x1, 0x0, 0x0, {{0x38}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0xfffffffffffffffe}]}, 0x28}}, 0x0) 607.003504ms ago: executing program 2 (id=811): socket$kcm(0x2, 0x200000000000001, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000000000000000000006c27cb57e462df6d22f69c80906c67f5a615fe6e773159b86b720a9846f3c72fe898dac9472"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0fffffdb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b704000008000000850000009500"/32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x4, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r2, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000000)={'veth0_vlan\x00', @remote}) r4 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000480)={'vxcan0\x00', 0x0}) epoll_create1(0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_usb_connect(0x0, 0x36, 0x0, 0x0) rt_sigprocmask(0x1, &(0x7f0000000340)={[0x8000]}, &(0x7f0000000380), 0x8) r6 = socket(0x1d, 0x2, 0x6) bind$can_j1939(r6, &(0x7f0000000080)={0x1d, r5, 0x3, {0x0, 0x0, 0x3}}, 0x18) syz_genetlink_get_family_id$mptcp(&(0x7f0000000240), r6) sendmsg$TIPC_NL_LINK_SET(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)=ANY=[@ANYRES16=0x0, @ANYBLOB="4ddad9361030d72fe3a312599103447f4cab105291b3ee253c2465494edf07a17530ccf44a6879f054c4e73eda6e7fc3993e34b94b188be50c26f49ac8523ceeef8e59ede20f8f1cdaecefef7cebf37fdbd3", @ANYRES32], 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x4008802) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000040)={'vxcan0\x00'}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000000)={'veth0_vlan\x00', @random="0106002010ff"}) 324.87252ms ago: executing program 0 (id=812): r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000280)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f0000000080)={0x1d, r1}, 0x10) sendmsg$can_bcm(r0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vxcan1\x00', 0x0}) sendmsg$can_bcm(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x1d, r2}, 0x10, &(0x7f0000000180)={&(0x7f0000000100)={0x5, 0x0, 0x0, {}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "b68c52d2be3c0d90"}}, 0x48}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) socket(0x1d, 0x2, 0x6) socket(0x1d, 0x2, 0x6) r4 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000f00)=@newtfilter={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x74, r5}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) 306.124582ms ago: executing program 4 (id=813): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/schedstat\x00', 0x0, 0x0) lseek(r0, 0xd759, 0x1) syz_read_part_table(0x5fd, &(0x7f0000000d00)="$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") socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) creat(&(0x7f0000000040)='./bus\x00', 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) open(&(0x7f00000005c0)='./bus\x00', 0x147842, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r1, 0x0, 0xfffffffffffffffd}, 0x18) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x2200c407, &(0x7f0000000440)={[{@dioread_lock}, {@debug}, {@abort}, {@init_itable_val={'init_itable', 0x3d, 0xebdc}}, {@auto_da_alloc}, {@grpjquota, 0x2e}, {@nouid32}, {@delalloc}, {@jqfmt_vfsv1}, {@acl}], [], 0x2c}, 0x84, 0x4da, &(0x7f0000000f40)="$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") syz_mount_image$vfat(&(0x7f00000001c0), &(0x7f0000000e80)='./file0\x00', 0x10082, &(0x7f0000000b00)=ANY=[@ANYBLOB="756e695f786c6174653d312c726f6469722c756e695f786c6174653d302c73686f72746e616d653d77696e6e742c757466383d302c73686f72746e616d653d6d697865642c726f6469722c696f636861727365743d63703433372c756e695f786c6174653d302c6572726f72733d72656d6f756e742d726f2c757466383d312c757466383d312c73686f72746e616d653d77696e39352c73686f77657865632c756e695f786c6174653d312c73686f72746e616d653d77696e39352c71756965742c004812981d", @ANYRES16=0x0, @ANYRESOCT], 0x2, 0x2ad, &(0x7f0000000280)="$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") bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000008c0)={0xffffffffffffffff, 0xe0, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000100)=[0x0, 0x0], &(0x7f0000000200), 0x0, 0x41, &(0x7f0000000240)=[{}, {}, {}, {}], 0x20, 0x0, 0x0, &(0x7f0000000740), 0x8, 0x49, 0x8, 0x0, 0x0}}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000080850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r3}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0}) r4 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000080), 0x8) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = openat$rtc(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(r6, 0x7005, 0x0) readv(r6, &(0x7f0000000000)=[{&(0x7f00000012c0)=""/191, 0x4}], 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000180)='rtc_irq_set_state\x00', r5}, 0x18) open(&(0x7f00000005c0)='./bus\x00', 0x147a42, 0x0) mount$9p_rdma(&(0x7f00000003c0), &(0x7f0000000400)='./bus\x00', 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="7472616e733d72646d612c706f72743d30783030309b71bfefd4e1adf81e30bb66df1e8a82af030079ac83d07f9a875c42035371e3e2226b0d504178bb62bc7632c4b64cd193189c06212b14f600"/91]) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000480)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x60, 0x60, 0x4, [@enum={0x5, 0x7, 0x0, 0x6, 0x4, [{0xa, 0x6}, {0xc, 0xb}, {0xa, 0x8}, {0x3, 0x4e}, {0x6, 0x1}, {0x4, 0x6}, {0x10000f, 0x9}]}, @var={0x9, 0x0, 0x0, 0xe, 0x1}, @fwd={0x7}]}, {0x0, [0x5f, 0x61]}}, 0x0, 0x7c, 0x0, 0x0, 0x7, 0x10000, @value=r4}, 0x28) r7 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000001c0)={'bridge0\x00'}) socket$nl_route(0x10, 0x3, 0x0) r8 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, 0x0) 0s ago: executing program 1 (id=814): syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f0000019340), 0x0, 0x0) read$msr(r0, &(0x7f0000000300)=""/102400, 0x19000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/partitions\x00', 0x0, 0x0) r2 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000300)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) sendfile(r2, r1, 0x0, 0x23d) kernel console output (not intermixed with test programs): T102] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 174.864174][ T102] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 174.874679][ T102] bridge0: port 2(bridge_slave_1) entered blocking state [ 174.881899][ T102] bridge0: port 2(bridge_slave_1) entered forwarding state [ 174.897618][ T102] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 174.910871][ T102] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 174.927809][ T5327] netlink: 'syz.1.379': attribute type 1 has an invalid length. [ 175.112419][ T102] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 175.125738][ T102] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 175.136692][ T102] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 175.151218][ T102] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 175.185570][ T102] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 175.196371][ T102] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 175.206505][ T102] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 175.216435][ T102] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 175.256384][ T102] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 175.412607][ T102] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 175.424558][ T5105] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 175.441536][ T3960] EXT4-fs (loop1): unmounting filesystem. [ 175.758518][ T5346] "syz.3.382" (5346) uses obsolete ecb(arc4) skcipher [ 177.635390][ T3929] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 177.642910][ T3929] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 177.691880][ T5105] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 177.883983][ T945] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 178.183974][ T945] usb 4-1: Using ep0 maxpacket: 16 [ 178.314028][ T945] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 178.330396][ T945] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 178.544073][ T945] usb 4-1: New USB device found, idVendor=1870, idProduct=0001, bcdDevice=94.47 [ 178.557783][ T945] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 178.565925][ T945] usb 4-1: Product: syz [ 178.570172][ T945] usb 4-1: Manufacturer: syz [ 178.575333][ T945] usb 4-1: SerialNumber: syz [ 178.583206][ T945] usb 4-1: config 0 descriptor?? [ 178.635981][ T945] usbtouchscreen: probe of 4-1:0.0 failed with error -8 [ 178.799936][ T3929] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 178.819365][ T3929] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 178.857397][ T5396] netlink: 4 bytes leftover after parsing attributes in process `syz.1.390'. [ 178.860055][ T3739] usb 4-1: USB disconnect, device number 7 [ 178.871014][ T3924] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 178.887376][ T3686] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 178.907608][ T3924] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 178.918673][ T5105] device veth0_vlan entered promiscuous mode [ 178.927329][ T3924] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 178.936297][ T3924] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 178.951483][ T5105] device veth1_vlan entered promiscuous mode [ 178.997521][ T3931] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 179.008892][ T3931] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 179.020927][ T3931] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 179.045466][ T3931] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 179.071960][ T5105] device veth0_macvtap entered promiscuous mode [ 179.099313][ T5105] device veth1_macvtap entered promiscuous mode [ 179.163662][ T5105] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 179.175746][ T5105] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 179.186293][ T5105] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 179.197722][ T5105] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 179.207979][ T5105] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 179.224209][ T5105] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 179.236193][ T5105] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 179.247059][ T5105] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 179.266197][ T5105] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 179.273350][ T5406] loop1: detected capacity change from 0 to 1024 [ 179.274357][ T3686] usb 3-1: config 0 has an invalid interface number: 185 but max is 0 [ 179.281809][ T3927] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 179.302918][ T3927] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 179.308420][ T3686] usb 3-1: config 0 has an invalid descriptor of length 88, skipping remainder of the config [ 179.312630][ T5406] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 179.340774][ T3686] usb 3-1: config 0 has no interface number 0 [ 179.345620][ T3927] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 179.355062][ T3686] usb 3-1: config 0 interface 185 has no altsetting 0 [ 179.367196][ T3927] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 179.373918][ T3686] usb 3-1: New USB device found, idVendor=12d1, idProduct=1c1f, bcdDevice=63.46 [ 179.386509][ T5105] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 179.398045][ T5105] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 179.408562][ T3686] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 179.417527][ T5105] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 179.418467][ T5406] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 179.437311][ T3686] usb 3-1: config 0 descriptor?? [ 179.444219][ T5105] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 179.460880][ T5105] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 179.551781][ T26] audit: type=1800 audit(1727833819.874:50): pid=5406 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.392" name="bus" dev="loop1" ino=18 res=0 errno=0 [ 179.577050][ T5105] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 179.584821][ T26] audit: type=1800 audit(1727833819.884:51): pid=5406 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.392" name="bus" dev="loop1" ino=18 res=0 errno=0 [ 179.608106][ T3686] rndis_wlan 3-1:0.185: skipping garbage [ 179.613894][ T3686] rndis_wlan 3-1:0.185: skipping garbage [ 179.623899][ T3686] usb 3-1: bad CDC descriptors [ 179.673922][ T5105] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 179.694244][ T3686] rndis_host 3-1:0.185: skipping garbage [ 179.720698][ T3686] rndis_host 3-1:0.185: skipping garbage [ 179.737433][ T5105] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 179.747866][ T3686] usb 3-1: bad CDC descriptors [ 179.754868][ T3686] option 3-1:0.185: GSM modem (1-port) converter detected [ 179.841050][ T5105] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 179.863182][ T5105] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 179.872258][ T5105] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 179.893652][ T5105] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 179.911288][ T5105] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 179.988815][ T5406] netlink: 'syz.1.392': attribute type 1 has an invalid length. [ 180.790949][ T3960] EXT4-fs (loop1): unmounting filesystem. [ 180.834127][ T3927] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 180.859115][ T3927] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 181.043116][ T3931] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 181.256437][ T3924] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 181.326484][ T3924] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 181.392300][ T3931] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 181.775708][ T3708] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 181.854213][ T3708] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 181.891753][ T22] usb 3-1: USB disconnect, device number 3 [ 181.899180][ T22] option 3-1:0.185: device disconnected [ 182.080561][ T5438] loop3: detected capacity change from 0 to 512 [ 182.112918][ T5438] EXT4-fs (loop3): can't mount with commit=511, fs mounted w/o journal [ 183.410447][ T5459] netlink: 4 bytes leftover after parsing attributes in process `syz.2.401'. [ 183.609944][ T5469] loop0: detected capacity change from 0 to 1024 [ 183.636142][ T5471] loop1: detected capacity change from 0 to 128 [ 183.690992][ T5471] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 183.759955][ T26] audit: type=1800 audit(1727833824.104:52): pid=5469 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.403" name="bus" dev="loop0" ino=0 res=0 errno=0 [ 183.785573][ T5471] ext4 filesystem being mounted at /69/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038 (0x7fffffff) [ 184.850841][ T3960] EXT4-fs (loop1): unmounting filesystem. [ 185.398068][ T7] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 185.786982][ T7] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 185.796231][ T7] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 185.824330][ T7] usb 5-1: config 0 descriptor?? [ 185.867943][ T7] cp210x 5-1:0.0: cp210x converter detected [ 186.112073][ T5499] loop4: detected capacity change from 0 to 2048 [ 186.150370][ T5499] UDF-fs: error (device loop4): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 186.191079][ T5499] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 187.204082][ T7] cp210x 5-1:0.0: failed to get vendor val 0x370b size 1: -71 [ 187.223543][ T7] cp210x 5-1:0.0: querying part number failed [ 187.297604][ T7] usb 5-1: cp210x converter now attached to ttyUSB0 [ 187.350185][ T7] usb 5-1: USB disconnect, device number 5 [ 187.398898][ T7] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 187.445003][ T7] cp210x 5-1:0.0: device disconnected [ 187.868219][ T5522] loop2: detected capacity change from 0 to 512 [ 187.927733][ T5522] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 187.955520][ T5522] ext4 filesystem being mounted at /18/file0 supports timestamps until 2038 (0x7fffffff) [ 188.149432][ T5522] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 188.185816][ T26] audit: type=1804 audit(1727833828.534:53): pid=5522 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.420" name="/newroot/18/file0/file1" dev="loop2" ino=15 res=1 errno=0 [ 188.222016][ T5522] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 10 with max blocks 23 with error 28 [ 188.238265][ T26] audit: type=1804 audit(1727833828.564:54): pid=5522 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.420" name="/newroot/18/file0/file1" dev="loop2" ino=15 res=1 errno=0 [ 188.256461][ T5522] EXT4-fs (loop2): This should not happen!! Data will be lost [ 188.256461][ T5522] [ 188.288789][ T5522] EXT4-fs (loop2): Total free blocks count 0 [ 188.317167][ T5522] EXT4-fs (loop2): Free/Dirty block details [ 188.331428][ T5522] EXT4-fs (loop2): free_blocks=65281 [ 188.344282][ T5522] EXT4-fs (loop2): dirty_blocks=33 [ 188.370981][ T5522] EXT4-fs (loop2): Block reservation details [ 188.394075][ T5522] EXT4-fs (loop2): i_reserved_data_blocks=33 [ 188.422913][ T5538] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 32 with error 28 [ 189.013633][ T5554] netlink: 'syz.0.428': attribute type 3 has an invalid length. [ 189.888867][ T5565] loop4: detected capacity change from 0 to 256 [ 190.666440][ T5591] netlink: 8 bytes leftover after parsing attributes in process `syz.1.437'. [ 190.943975][ T22] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 191.314150][ T22] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 191.447071][ T22] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 191.557073][ T5609] loop3: detected capacity change from 0 to 128 [ 195.738882][ T7] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 195.750221][ T1261] ieee802154 phy0 wpan0: encryption failed: -22 [ 195.803926][ T22] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 195.881525][ T5609] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 195.892421][ T22] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 195.906816][ T5609] ext4 filesystem being mounted at /44/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038 (0x7fffffff) [ 195.913209][ T22] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 196.017197][ T22] usb 5-1: config 0 descriptor?? [ 196.071672][ T22] usb 5-1: can't set config #0, error -71 [ 196.116956][ T22] usb 5-1: USB disconnect, device number 6 [ 197.233675][ T4489] EXT4-fs (loop3): unmounting filesystem. [ 197.239987][ T5627] loop4: detected capacity change from 0 to 2048 [ 197.282005][ T5630] loop2: detected capacity change from 0 to 1024 [ 197.306406][ T5627] loop4: p1 < > p4 [ 197.312278][ T5627] loop4: p4 size 8388608 extends beyond EOD, truncated [ 197.354117][ T5630] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 197.419968][ T26] audit: type=1326 audit(1727833837.764:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5626 comm="syz.4.448" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f777b77dff9 code=0x7ffc0000 [ 197.467108][ T5630] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 197.519909][ T26] audit: type=1326 audit(1727833837.794:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5626 comm="syz.4.448" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f777b77dff9 code=0x7ffc0000 [ 197.547511][ T3092] loop4: p1 < > p4 [ 197.573312][ T3092] loop4: p4 size 8388608 extends beyond EOD, truncated [ 197.632069][ T5630] netlink: 'syz.2.446': attribute type 1 has an invalid length. [ 197.665003][ T26] audit: type=1326 audit(1727833837.794:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5626 comm="syz.4.448" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f777b77dff9 code=0x7ffc0000 [ 197.799939][ T3631] udevd[3631]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 197.826214][ T3988] udevd[3988]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 197.834916][ T5641] netlink: 8 bytes leftover after parsing attributes in process `syz.2.446'. [ 197.888135][ T26] audit: type=1326 audit(1727833837.794:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5626 comm="syz.4.448" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f777b77dff9 code=0x7ffc0000 [ 197.964266][ T3631] udevd[3631]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 197.975435][ T26] audit: type=1326 audit(1727833837.794:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5626 comm="syz.4.448" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f777b77dff9 code=0x7ffc0000 [ 197.977272][ T3988] udevd[3988]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 198.064964][ T26] audit: type=1326 audit(1727833837.794:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5626 comm="syz.4.448" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f777b77dff9 code=0x7ffc0000 [ 198.157952][ T26] audit: type=1326 audit(1727833837.794:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5626 comm="syz.4.448" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f777b77dff9 code=0x7ffc0000 [ 198.319078][ T4924] EXT4-fs (loop2): unmounting filesystem. [ 198.374586][ T26] audit: type=1326 audit(1727833837.794:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5626 comm="syz.4.448" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f777b77dff9 code=0x7ffc0000 [ 198.419894][ T26] audit: type=1326 audit(1727833837.794:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5626 comm="syz.4.448" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f777b77dff9 code=0x7ffc0000 [ 198.481580][ T5647] loop0: detected capacity change from 0 to 2048 [ 198.512348][ T26] audit: type=1326 audit(1727833837.804:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5626 comm="syz.4.448" exe="/root/syz-executor" sig=0 arch=c000003e syscall=19 compat=0 ip=0x7f777b77dff9 code=0x7ffc0000 [ 198.571911][ T5647] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 198.793863][ T3737] usb 4-1: new full-speed USB device number 8 using dummy_hcd [ 199.128940][ T5654] mmap: syz.0.455 (5654) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 199.174307][ T3737] usb 4-1: config 0 has an invalid interface number: 39 but max is 0 [ 199.182469][ T3737] usb 4-1: config 0 has no interface number 0 [ 199.754510][ T3737] usb 4-1: New USB device found, idVendor=0499, idProduct=4d3f, bcdDevice=d2.2a [ 200.140116][ T3737] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 200.202380][ T3737] usb 4-1: Product: syz [ 200.230005][ T5660] netlink: 4 bytes leftover after parsing attributes in process `syz.2.456'. [ 200.244277][ T3737] usb 4-1: Manufacturer: syz [ 200.278529][ T3737] usb 4-1: SerialNumber: syz [ 200.282586][ T3737] usb 4-1: config 0 descriptor?? [ 200.292778][ T5660] netlink: 28 bytes leftover after parsing attributes in process `syz.2.456'. [ 201.501064][ T5674] loop2: detected capacity change from 0 to 2048 [ 201.574861][ T5674] loop2: p1 < > p4 [ 201.580357][ T5674] loop2: p4 size 8388608 extends beyond EOD, truncated [ 201.585822][ T3737] usb 4-1: USB disconnect, device number 8 [ 201.632917][ T3988] udevd[3988]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.39/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 201.785377][ T3092] loop2: p1 < > p4 [ 201.809372][ T3092] loop2: p4 size 8388608 extends beyond EOD, truncated [ 202.276064][ T3988] udevd[3988]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 202.297199][ T3631] udevd[3631]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 202.462568][ T3650] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 202.472677][ T3650] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 202.480780][ T3651] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 202.495033][ T3650] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 202.503212][ T3650] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 202.512120][ T3650] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 202.574925][ T5695] loop4: detected capacity change from 0 to 256 [ 202.605000][ T5695] exFAT-fs (loop4): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 202.669250][ T5695] exFAT-fs (loop4): invalid start cluster (65536) [ 202.773912][ T3737] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 203.144115][ T3737] usb 3-1: config 0 has an invalid interface number: 13 but max is 0 [ 203.152711][ T3737] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 203.219300][ T3737] usb 3-1: config 0 has no interface number 0 [ 203.229471][ T3737] usb 3-1: config 0 interface 13 altsetting 0 endpoint 0x8 has invalid maxpacket 512, setting to 64 [ 203.273940][ T3737] usb 3-1: config 0 interface 13 altsetting 0 endpoint 0xD has an invalid bInterval 0, changing to 7 [ 203.300422][ T3737] usb 3-1: config 0 interface 13 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 203.330917][ T3737] usb 3-1: config 0 interface 13 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 5 [ 203.459711][ T5711] autofs4:pid:5711:autofs_fill_super: called with bogus options [ 203.508034][ T5687] chnl_net:caif_netlink_parms(): no params data found [ 203.524079][ T3737] usb 3-1: New USB device found, idVendor=06cd, idProduct=011a, bcdDevice=51.76 [ 203.558354][ T3737] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 203.594067][ T3737] usb 3-1: Product: syz [ 203.598258][ T3737] usb 3-1: Manufacturer: syz [ 203.762082][ T3737] usb 3-1: SerialNumber: syz [ 203.794857][ T3737] usb 3-1: config 0 descriptor?? [ 204.594028][ T3650] Bluetooth: hci4: command tx timeout [ 204.681724][ T3737] keyspan 3-1:0.13: Keyspan - (without firmware) converter detected [ 204.795811][ T5728] loop0: detected capacity change from 0 to 2048 [ 204.892280][ T3737] usb 3-1: USB disconnect, device number 4 [ 204.899905][ T5728] loop0: p1 < > p4 [ 204.905973][ T3737] keyspan 3-1:0.13: device disconnected [ 204.945045][ T5728] loop0: p4 size 8388608 extends beyond EOD, truncated [ 205.127726][ T26] kauditd_printk_skb: 42 callbacks suppressed [ 205.127737][ T26] audit: type=1326 audit(1727833845.474:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5727 comm="syz.0.476" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0973f7dff9 code=0x7ffc0000 [ 205.198592][ T26] audit: type=1326 audit(1727833845.504:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5727 comm="syz.0.476" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0973f7dff9 code=0x7ffc0000 [ 205.231702][ T26] audit: type=1326 audit(1727833845.504:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5727 comm="syz.0.476" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0973f7dff9 code=0x7ffc0000 [ 205.275043][ T26] audit: type=1326 audit(1727833845.504:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5727 comm="syz.0.476" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0973f7dff9 code=0x7ffc0000 [ 205.275085][ T26] audit: type=1326 audit(1727833845.514:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5727 comm="syz.0.476" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0973f7dff9 code=0x7ffc0000 [ 205.275110][ T26] audit: type=1326 audit(1727833845.514:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5727 comm="syz.0.476" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f0973f7dff9 code=0x7ffc0000 [ 205.275134][ T26] audit: type=1326 audit(1727833845.514:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5727 comm="syz.0.476" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0973f7dff9 code=0x7ffc0000 [ 205.275176][ T26] audit: type=1326 audit(1727833845.514:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5727 comm="syz.0.476" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f0973f7dff9 code=0x7ffc0000 [ 205.275202][ T26] audit: type=1326 audit(1727833845.514:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5727 comm="syz.0.476" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0973f7dff9 code=0x7ffc0000 [ 205.275227][ T26] audit: type=1326 audit(1727833845.514:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5727 comm="syz.0.476" exe="/root/syz-executor" sig=0 arch=c000003e syscall=19 compat=0 ip=0x7f0973f7dff9 code=0x7ffc0000 [ 205.686730][ T5742] loop2: detected capacity change from 0 to 512 [ 205.789426][ T5687] bridge0: port 1(bridge_slave_0) entered blocking state [ 205.841035][ T5687] bridge0: port 1(bridge_slave_0) entered disabled state [ 205.900258][ T5742] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 205.909273][ T5687] device bridge_slave_0 entered promiscuous mode [ 205.934023][ T5742] ext4 filesystem being mounted at /30/file0 supports timestamps until 2038 (0x7fffffff) [ 205.984061][ T5687] bridge0: port 2(bridge_slave_1) entered blocking state [ 206.014134][ T5687] bridge0: port 2(bridge_slave_1) entered disabled state [ 206.061964][ T5687] device bridge_slave_1 entered promiscuous mode [ 206.084852][ T5750] xt_hashlimit: max too large, truncated to 1048576 [ 207.612124][ T3650] Bluetooth: hci4: command tx timeout [ 207.657033][ T4924] EXT4-fs (loop2): unmounting filesystem. [ 207.766213][ T5759] loop4: detected capacity change from 0 to 512 [ 207.785154][ T5687] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 207.864871][ T3988] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 207.884433][ T5687] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 208.103635][ T5765] autofs4:pid:5765:autofs_fill_super: called with bogus options [ 208.108388][ T5687] team0: Port device team_slave_0 added [ 208.158868][ T5687] team0: Port device team_slave_1 added [ 208.321498][ T5687] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 208.363939][ T5687] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 208.511975][ T5687] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 208.656078][ T5687] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 208.684724][ T5687] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 208.825490][ T5687] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 208.973989][ T5781] loop0: detected capacity change from 0 to 2048 [ 209.164887][ T5781] loop0: p1 < > p4 [ 209.170577][ T5781] loop0: p4 size 8388608 extends beyond EOD, truncated [ 209.207727][ T5687] device hsr_slave_0 entered promiscuous mode [ 209.284251][ T5687] device hsr_slave_1 entered promiscuous mode [ 209.328349][ T5687] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 209.349461][ T5687] Cannot create hsr debugfs directory [ 209.633923][ T3650] Bluetooth: hci4: command tx timeout [ 209.859862][ T5793] loop3: detected capacity change from 0 to 128 [ 209.868220][ T5793] EXT4-fs (loop3): Test dummy encryption mode enabled [ 209.927722][ T3988] udevd[3988]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 209.942002][ T5793] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 209.951016][ T5793] ext4 filesystem being mounted at /52/mnt supports timestamps until 2038 (0x7fffffff) [ 209.957125][ T3658] udevd[3658]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory [ 209.975159][ T5793] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 210.916271][ T5802] loop0: detected capacity change from 0 to 512 [ 210.965657][ T4489] EXT4-fs (loop3): unmounting filesystem. [ 211.067614][ T5802] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 211.099005][ T5802] ext4 filesystem being mounted at /117/file0 supports timestamps until 2038 (0x7fffffff) [ 211.428430][ T3708] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 211.690118][ T3708] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 211.713969][ T3650] Bluetooth: hci4: command tx timeout [ 212.131363][ T3639] EXT4-fs (loop0): unmounting filesystem. [ 212.232243][ T3708] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 212.399894][ T26] kauditd_printk_skb: 27 callbacks suppressed [ 212.399908][ T26] audit: type=1804 audit(1727833852.744:144): pid=5814 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.498" name="/newroot/119/bus/bus" dev="overlay" ino=669 res=1 errno=0 [ 212.449541][ T3708] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 212.710146][ T5819] loop2: detected capacity change from 0 to 512 [ 212.855161][ T5819] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 212.880263][ T5819] ext4 filesystem being mounted at /33/file0 supports timestamps until 2038 (0x7fffffff) [ 213.220583][ T4924] EXT4-fs (loop2): unmounting filesystem. [ 213.521117][ T5843] netlink: 8 bytes leftover after parsing attributes in process `syz.2.503'. [ 215.017735][ T5687] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 215.117625][ T5687] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 215.126205][ T26] audit: type=1804 audit(1727833855.474:145): pid=5864 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.510" name="/newroot/123/bus/bus" dev="overlay" ino=698 res=1 errno=0 [ 215.190648][ T5687] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 215.238261][ T5687] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 215.325805][ T5873] loop2: detected capacity change from 0 to 1024 [ 215.376375][ T5873] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 215.491878][ T5873] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 215.572859][ T26] audit: type=1800 audit(1727833855.914:146): pid=5873 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.511" name="bus" dev="loop2" ino=18 res=0 errno=0 [ 215.634268][ T5873] netlink: 'syz.2.511': attribute type 1 has an invalid length. [ 215.672955][ T26] audit: type=1800 audit(1727833855.914:147): pid=5873 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.511" name="bus" dev="loop2" ino=18 res=0 errno=0 [ 215.974819][ T3708] device hsr_slave_0 left promiscuous mode [ 216.000700][ T3708] device hsr_slave_1 left promiscuous mode [ 216.017183][ T3708] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 216.022233][ T4924] EXT4-fs (loop2): unmounting filesystem. [ 216.040099][ T3708] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 216.107530][ T3708] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 216.130102][ T3708] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 216.192376][ T3708] device bridge_slave_1 left promiscuous mode [ 216.211213][ T3708] bridge0: port 2(bridge_slave_1) entered disabled state [ 216.242117][ T3708] device bridge_slave_0 left promiscuous mode [ 216.258858][ T3708] bridge0: port 1(bridge_slave_0) entered disabled state [ 216.328920][ T3708] device veth1_macvtap left promiscuous mode [ 216.341025][ T3708] device veth0_macvtap left promiscuous mode [ 216.347371][ T3708] device veth1_vlan left promiscuous mode [ 216.354763][ T3708] device veth0_vlan left promiscuous mode [ 216.772862][ T3708] bond2 (unregistering): Released all slaves [ 216.791101][ T3708] bond1 (unregistering): Released all slaves [ 217.091623][ T26] audit: type=1804 audit(1727833857.434:148): pid=5913 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.521" name="/newroot/40/bus/bus" dev="overlay" ino=242 res=1 errno=0 [ 217.448586][ T3708] team0 (unregistering): Port device team_slave_1 removed [ 217.488086][ T3708] team0 (unregistering): Port device team_slave_0 removed [ 217.527060][ T3708] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 217.568095][ T3708] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 218.050859][ T3708] bond0 (unregistering): Released all slaves [ 218.885083][ T5897] device veth0_vlan left promiscuous mode [ 218.892222][ T5897] device veth0_vlan entered promiscuous mode [ 219.081348][ T5687] 8021q: adding VLAN 0 to HW filter on device bond0 [ 219.146263][ T3935] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 219.176586][ T3935] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 219.220306][ T5687] 8021q: adding VLAN 0 to HW filter on device team0 [ 219.324356][ T3935] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 219.343600][ T3935] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 219.364292][ T3935] bridge0: port 1(bridge_slave_0) entered blocking state [ 219.371412][ T3935] bridge0: port 1(bridge_slave_0) entered forwarding state [ 219.399863][ T3935] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 219.420528][ T3935] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 219.431159][ T5935] loop2: detected capacity change from 0 to 1024 [ 219.448572][ T5935] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 219.470275][ T3935] bridge0: port 2(bridge_slave_1) entered blocking state [ 219.477463][ T3935] bridge0: port 2(bridge_slave_1) entered forwarding state [ 219.489270][ T3935] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 219.492839][ T5935] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 219.505026][ T3935] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 219.547617][ T3931] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 219.569135][ T26] audit: type=1800 audit(1727833859.914:149): pid=5935 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.526" name="bus" dev="loop2" ino=18 res=0 errno=0 [ 219.591963][ T26] audit: type=1800 audit(1727833859.914:150): pid=5935 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.526" name="bus" dev="loop2" ino=18 res=0 errno=0 [ 219.611208][ T3927] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 219.639179][ T3927] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 219.660163][ T5935] netlink: 'syz.2.526': attribute type 1 has an invalid length. [ 219.734565][ T3927] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 219.746005][ T3927] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 219.763055][ T3927] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 219.772708][ T3927] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 219.782217][ T3927] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 219.942542][ T3924] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 220.276557][ T3924] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 220.546137][ T5687] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 220.805988][ T4924] EXT4-fs (loop2): unmounting filesystem. [ 221.297127][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 221.341834][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 221.398376][ T5687] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 221.513573][ T3927] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 221.530328][ T3927] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 221.749609][ T5687] device veth0_vlan entered promiscuous mode [ 221.763724][ T3931] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 221.780795][ T3931] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 221.818465][ T3931] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 221.841499][ T3931] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 221.882055][ T5687] device veth1_vlan entered promiscuous mode [ 222.012416][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 222.030908][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 222.055754][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 222.070649][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 222.083020][ T5687] device veth0_macvtap entered promiscuous mode [ 222.136669][ T5687] device veth1_macvtap entered promiscuous mode [ 222.219064][ T5687] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 222.235627][ T5687] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 222.246081][ T5687] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 222.256821][ T5687] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 222.260093][ T6000] loop2: detected capacity change from 0 to 1024 [ 222.267064][ T5687] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 222.294081][ T6000] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 222.320932][ T5687] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 222.331716][ T5687] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 222.342444][ T5687] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 222.360561][ T5687] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 222.369835][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 222.378506][ T6000] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 222.384321][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 222.395792][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 222.406833][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 222.431940][ T5687] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 222.443141][ T5687] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 222.453508][ T5687] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 222.464129][ T5687] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 222.474020][ T26] audit: type=1800 audit(1727833862.814:151): pid=6000 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.540" name="bus" dev="loop2" ino=18 res=0 errno=0 [ 222.507179][ T26] audit: type=1800 audit(1727833862.844:152): pid=6000 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.540" name="bus" dev="loop2" ino=18 res=0 errno=0 [ 222.510193][ T5687] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 222.543895][ T5687] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 222.558955][ T5687] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 222.628462][ T5687] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 222.658413][ T5687] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 222.699622][ T6000] netlink: 'syz.2.540': attribute type 1 has an invalid length. [ 222.748307][ T3708] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 222.769867][ T3708] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 222.786795][ T5687] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.809313][ T5687] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.852030][ T5687] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.863372][ T5687] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.961146][ T3708] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 222.978784][ T3708] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 222.981157][ T4924] EXT4-fs (loop2): unmounting filesystem. [ 223.028342][ T102] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 223.081098][ T3708] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 223.111297][ T3708] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 223.154246][ T3927] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 223.460294][ T6031] binder: 6026:6031 ioctl 4018620d 0 returned -22 [ 223.680576][ T6031] loop1: detected capacity change from 0 to 512 [ 223.763695][ T6031] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 223.878050][ T6031] EXT4-fs (loop1): orphan cleanup on readonly fs [ 223.931550][ T6031] Quota error (device loop1): v2_read_file_info: Free block number 1 out of range (1, 6). [ 224.009199][ T6031] EXT4-fs warning (device loop1): ext4_enable_quotas:7035: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 224.073079][ T6031] EXT4-fs (loop1): Cannot turn on quotas: error -117 [ 224.123671][ T6031] EXT4-fs (loop1): 1 truncate cleaned up [ 224.159240][ T6031] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 227.175962][ T5687] EXT4-fs (loop1): unmounting filesystem. [ 227.273646][ T6067] bridge0: port 1(bridge_slave_0) entered disabled state [ 227.307899][ T6069] loop2: detected capacity change from 0 to 2048 [ 227.437603][ T6069] loop2: p1 < > p4 [ 227.443623][ T6069] loop2: p4 size 8388608 extends beyond EOD, truncated [ 227.554336][ T6084] loop0: detected capacity change from 0 to 256 [ 227.569898][ T26] audit: type=1326 audit(1727833867.914:153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6068 comm="syz.2.556" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feeefd7dff9 code=0x7ffc0000 [ 227.613578][ T6084] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 227.652552][ T26] audit: type=1326 audit(1727833867.934:154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6068 comm="syz.2.556" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7feeefd7dff9 code=0x7ffc0000 [ 227.706359][ T6084] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 227.782762][ T26] audit: type=1326 audit(1727833867.934:155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6068 comm="syz.2.556" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feeefd7dff9 code=0x7ffc0000 [ 227.821580][ T26] audit: type=1326 audit(1727833867.934:156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6068 comm="syz.2.556" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7feeefd7dff9 code=0x7ffc0000 [ 227.903730][ T26] audit: type=1326 audit(1727833867.934:157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6068 comm="syz.2.556" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feeefd7dff9 code=0x7ffc0000 [ 227.956184][ T3631] udevd[3631]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 227.964768][ T3988] udevd[3988]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 228.008204][ T26] audit: type=1326 audit(1727833867.934:158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6068 comm="syz.2.556" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7feeefd7dff9 code=0x7ffc0000 [ 228.041004][ T26] audit: type=1326 audit(1727833867.934:159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6068 comm="syz.2.556" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feeefd7dff9 code=0x7ffc0000 [ 228.163016][ T26] audit: type=1326 audit(1727833867.944:160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6068 comm="syz.2.556" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7feeefd7dff9 code=0x7ffc0000 [ 228.259655][ T26] audit: type=1326 audit(1727833867.944:161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6068 comm="syz.2.556" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feeefd7dff9 code=0x7ffc0000 [ 228.353601][ T26] audit: type=1326 audit(1727833867.944:162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6068 comm="syz.2.556" exe="/root/syz-executor" sig=0 arch=c000003e syscall=19 compat=0 ip=0x7feeefd7dff9 code=0x7ffc0000 [ 228.366767][ T6100] netlink: 4 bytes leftover after parsing attributes in process `syz.2.563'. [ 230.359886][ T6120] binder: 6114:6120 ioctl 4018620d 0 returned -22 [ 230.524039][ T945] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 230.616711][ T6123] loop4: detected capacity change from 0 to 2048 [ 230.685774][ T6123] loop4: p1 < > p4 [ 230.695728][ T6123] loop4: p4 size 8388608 extends beyond EOD, truncated [ 230.783870][ T945] usb 4-1: Using ep0 maxpacket: 16 [ 230.914295][ T945] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 230.953828][ T945] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 231.021079][ T945] usb 4-1: New USB device found, idVendor=1b96, idProduct=0008, bcdDevice= 0.00 [ 231.082353][ T945] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 231.137003][ T945] usb 4-1: config 0 descriptor?? [ 231.667116][ T945] ntrig 0003:1B96:0008.0002: unbalanced collection at end of report description [ 231.709621][ T945] ntrig 0003:1B96:0008.0002: parse failed [ 231.749512][ T945] ntrig: probe of 0003:1B96:0008.0002 failed with error -22 [ 231.868600][ T945] usb 4-1: USB disconnect, device number 9 [ 232.265187][ T6154] netlink: 28 bytes leftover after parsing attributes in process `syz.2.579'. [ 232.274818][ T6154] netlink: 28 bytes leftover after parsing attributes in process `syz.2.579'. [ 234.158118][ T6174] netlink: 4 bytes leftover after parsing attributes in process `syz.4.585'. [ 234.202700][ T6174] netlink: 12 bytes leftover after parsing attributes in process `syz.4.585'. [ 234.456100][ T6178] loop0: detected capacity change from 0 to 2048 [ 234.535167][ T6178] loop0: p1 < > p4 [ 234.542169][ T6178] loop0: p4 size 8388608 extends beyond EOD, truncated [ 234.654922][ T26] kauditd_printk_skb: 27 callbacks suppressed [ 234.654937][ T26] audit: type=1804 audit(1727833875.004:190): pid=6186 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.588" name="/newroot/48/bus/bus" dev="overlay" ino=282 res=1 errno=0 [ 234.754339][ T26] audit: type=1326 audit(1727833875.054:191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6175 comm="syz.0.584" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0973f7dff9 code=0x7ffc0000 [ 234.848722][ T6182] device veth0_vlan left promiscuous mode [ 234.859727][ T26] audit: type=1326 audit(1727833875.054:192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6175 comm="syz.0.584" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0973f7dff9 code=0x7ffc0000 [ 234.860509][ T6182] device veth0_vlan entered promiscuous mode [ 234.920966][ T3927] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 234.937941][ T26] audit: type=1326 audit(1727833875.054:193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6175 comm="syz.0.584" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0973f7dff9 code=0x7ffc0000 [ 234.940779][ T3927] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 235.060761][ T26] audit: type=1326 audit(1727833875.054:194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6175 comm="syz.0.584" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0973f7dff9 code=0x7ffc0000 [ 235.090102][ T26] audit: type=1326 audit(1727833875.054:195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6175 comm="syz.0.584" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0973f7dff9 code=0x7ffc0000 [ 235.111179][ T3927] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 235.218957][ T6192] netlink: 28 bytes leftover after parsing attributes in process `syz.4.590'. [ 235.253973][ T6192] netlink: 28 bytes leftover after parsing attributes in process `syz.4.590'. [ 235.307109][ T26] audit: type=1326 audit(1727833875.054:196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6175 comm="syz.0.584" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f0973f7dff9 code=0x7ffc0000 [ 235.369136][ T26] audit: type=1326 audit(1727833875.054:197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6175 comm="syz.0.584" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0973f7dff9 code=0x7ffc0000 [ 235.451996][ T26] audit: type=1326 audit(1727833875.054:198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6175 comm="syz.0.584" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f0973f7dff9 code=0x7ffc0000 [ 235.499567][ T26] audit: type=1326 audit(1727833875.054:199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6175 comm="syz.0.584" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0973f7dff9 code=0x7ffc0000 [ 236.750056][ T6224] loop0: detected capacity change from 0 to 128 [ 236.830261][ T6224] EXT4-fs (loop0): Test dummy encryption mode enabled [ 236.908471][ T6224] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 236.942720][ T6224] ext4 filesystem being mounted at /142/mnt supports timestamps until 2038 (0x7fffffff) [ 238.650084][ T6224] sched: RT throttling activated [ 239.313117][ T3639] EXT4-fs (loop0): unmounting filesystem. [ 241.550368][ T6269] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 242.593876][ T3650] Bluetooth: hci2: command 0x0406 tx timeout [ 242.878286][ T6285] loop0: detected capacity change from 0 to 16 [ 242.885245][ T6285] erofs: Unknown parameter '' [ 244.037935][ T26] kauditd_printk_skb: 10 callbacks suppressed [ 244.037951][ T26] audit: type=1804 audit(1727833884.384:210): pid=6299 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.614" name="/newroot/146/bus/bus" dev="overlay" ino=837 res=1 errno=0 [ 244.944085][ T3737] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 245.314118][ T3737] usb 1-1: config 0 has an invalid interface number: 185 but max is 0 [ 245.330299][ T3737] usb 1-1: config 0 has an invalid descriptor of length 88, skipping remainder of the config [ 245.351450][ T3737] usb 1-1: config 0 has no interface number 0 [ 245.388429][ T3737] usb 1-1: config 0 interface 185 has no altsetting 0 [ 245.399340][ T3737] usb 1-1: New USB device found, idVendor=12d1, idProduct=1c1f, bcdDevice=63.46 [ 245.430322][ T3737] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 245.484706][ T3737] usb 1-1: config 0 descriptor?? [ 245.546607][ T3737] rndis_wlan 1-1:0.185: skipping garbage [ 245.552671][ T3737] rndis_wlan 1-1:0.185: skipping garbage [ 245.577833][ T3737] usb 1-1: bad CDC descriptors [ 245.606478][ T3737] rndis_host 1-1:0.185: skipping garbage [ 245.612400][ T3737] rndis_host 1-1:0.185: skipping garbage [ 245.671125][ T3737] usb 1-1: bad CDC descriptors [ 245.704908][ T3737] option 1-1:0.185: GSM modem (1-port) converter detected [ 245.797944][ T3737] usb 1-1: USB disconnect, device number 4 [ 245.846821][ T3737] option 1-1:0.185: device disconnected [ 248.145150][ T6343] autofs4:pid:6343:autofs_fill_super: called with bogus options [ 248.266464][ T26] audit: type=1804 audit(1727833888.614:211): pid=6343 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.627" name="/newroot/58/bus/bus" dev="overlay" ino=351 res=1 errno=0 [ 248.493300][ T6354] loop4: detected capacity change from 0 to 256 [ 248.592258][ T6354] FAT-fs (loop4): Directory bread(block 64) failed [ 248.633117][ T6354] FAT-fs (loop4): Directory bread(block 65) failed [ 248.646156][ T6354] FAT-fs (loop4): Directory bread(block 66) failed [ 248.652790][ T6354] FAT-fs (loop4): Directory bread(block 67) failed [ 248.673628][ T6354] FAT-fs (loop4): Directory bread(block 68) failed [ 248.683683][ T6354] FAT-fs (loop4): Directory bread(block 69) failed [ 248.698868][ T6354] FAT-fs (loop4): Directory bread(block 70) failed [ 248.763390][ T6354] FAT-fs (loop4): Directory bread(block 71) failed [ 248.792359][ T6354] FAT-fs (loop4): Directory bread(block 72) failed [ 248.809595][ T6354] FAT-fs (loop4): Directory bread(block 73) failed [ 248.852275][ T6358] loop3: detected capacity change from 0 to 1024 [ 248.879775][ T6358] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 248.943721][ T6358] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 249.141664][ T4489] EXT4-fs (loop3): unmounting filesystem. [ 249.183862][ T22] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 249.279753][ T6367] netlink: 12 bytes leftover after parsing attributes in process `syz.3.633'. [ 249.554191][ T22] usb 1-1: config 0 has an invalid interface number: 185 but max is 0 [ 249.562428][ T22] usb 1-1: config 0 has an invalid descriptor of length 88, skipping remainder of the config [ 249.618130][ T22] usb 1-1: config 0 has no interface number 0 [ 249.626202][ T22] usb 1-1: config 0 interface 185 has no altsetting 0 [ 249.633024][ T22] usb 1-1: New USB device found, idVendor=12d1, idProduct=1c1f, bcdDevice=63.46 [ 249.686304][ T6370] device veth0_vlan left promiscuous mode [ 249.695744][ T22] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 249.715350][ T6370] device veth0_vlan entered promiscuous mode [ 249.744737][ T22] usb 1-1: config 0 descriptor?? [ 249.791555][ T3927] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 249.810046][ T22] rndis_wlan 1-1:0.185: skipping garbage [ 249.820430][ T3927] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 249.827866][ T22] rndis_wlan 1-1:0.185: skipping garbage [ 249.839417][ T22] usb 1-1: bad CDC descriptors [ 249.845758][ T22] rndis_host 1-1:0.185: skipping garbage [ 249.852323][ T22] rndis_host 1-1:0.185: skipping garbage [ 249.858136][ T22] usb 1-1: bad CDC descriptors [ 249.864001][ T22] option 1-1:0.185: GSM modem (1-port) converter detected [ 249.886268][ T3927] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 249.988378][ T22] usb 1-1: USB disconnect, device number 5 [ 250.008835][ T22] option 1-1:0.185: device disconnected [ 250.331804][ T3654] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 250.340786][ T3654] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 250.349677][ T3654] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 250.359521][ T3654] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 250.370049][ T3654] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 250.377431][ T3654] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 250.522892][ T6387] autofs4:pid:6387:autofs_fill_super: called with bogus options [ 250.565568][ T26] audit: type=1804 audit(1727833890.914:212): pid=6387 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.640" name="/newroot/62/bus/bus" dev="overlay" ino=381 res=1 errno=0 [ 250.895481][ T6382] chnl_net:caif_netlink_parms(): no params data found [ 251.253814][ T6382] bridge0: port 1(bridge_slave_0) entered blocking state [ 251.267829][ T6382] bridge0: port 1(bridge_slave_0) entered disabled state [ 251.285706][ T6382] device bridge_slave_0 entered promiscuous mode [ 251.303858][ T6382] bridge0: port 2(bridge_slave_1) entered blocking state [ 251.320254][ T6382] bridge0: port 2(bridge_slave_1) entered disabled state [ 251.337243][ T6412] kvm: pic: non byte write [ 251.338033][ T6382] device bridge_slave_1 entered promiscuous mode [ 251.485256][ T6382] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 251.532534][ T6414] loop4: detected capacity change from 0 to 512 [ 251.546614][ T6382] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 251.697690][ T6382] team0: Port device team_slave_0 added [ 251.705709][ T6414] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a842c01c, mo2=0002] [ 251.723497][ T6414] System zones: 0-2, 18-18, 34-34 [ 251.732409][ T6382] team0: Port device team_slave_1 added [ 251.776728][ T6414] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.645: bg 0: block 248: padding at end of block bitmap is not set [ 251.804975][ T6414] Quota error (device loop4): write_blk: dquota write failed [ 251.813956][ T6414] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 251.849452][ T6414] EXT4-fs error (device loop4): ext4_acquire_dquot:6800: comm syz.4.645: Failed to acquire dquot type 1 [ 251.896306][ T6414] EXT4-fs (loop4): 1 truncate cleaned up [ 251.903700][ T6414] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 251.911143][ T6382] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 251.923218][ T6414] ext4 filesystem being mounted at /64/file0 supports timestamps until 2038 (0x7fffffff) [ 251.939996][ T6382] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 252.027423][ T6382] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 252.063185][ T6414] syz.4.645 (6414) used greatest stack depth: 18912 bytes left [ 252.070263][ T5105] EXT4-fs (loop4): unmounting filesystem. [ 252.084364][ T38] Quota error (device loop4): do_check_range: Getting block 0 out of range 1-5 [ 252.109039][ T38] EXT4-fs error (device loop4): ext4_release_dquot:6823: comm kworker/u4:2: Failed to release dquot type 1 [ 252.132984][ T6382] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 252.174094][ T6382] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 252.294603][ T6382] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 252.300615][ T6429] loop3: detected capacity change from 0 to 128 [ 252.387477][ T6429] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 252.414769][ T6429] ext4 filesystem being mounted at /81/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038 (0x7fffffff) [ 252.447408][ T3650] Bluetooth: hci3: command tx timeout [ 252.476508][ T3924] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 252.868054][ T3924] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 252.890291][ T6441] binder: 6435:6441 ioctl 4018620d 0 returned -22 [ 252.907945][ T6382] device hsr_slave_0 entered promiscuous mode [ 253.322045][ T6441] loop2: detected capacity change from 0 to 512 [ 253.351161][ T6441] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 253.411075][ T6382] device hsr_slave_1 entered promiscuous mode [ 253.447648][ T6382] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 253.479043][ T6382] Cannot create hsr debugfs directory [ 253.746807][ T4489] EXT4-fs (loop3): unmounting filesystem. [ 253.772623][ T6441] EXT4-fs (loop2): orphan cleanup on readonly fs [ 253.816896][ T3924] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 253.839894][ T6441] Quota error (device loop2): v2_read_file_info: Free block number 1 out of range (1, 6). [ 253.866750][ T6441] EXT4-fs warning (device loop2): ext4_enable_quotas:7035: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 253.883369][ T6441] EXT4-fs (loop2): Cannot turn on quotas: error -117 [ 253.899595][ T3739] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 253.902755][ T6441] EXT4-fs (loop2): 1 truncate cleaned up [ 253.930090][ T3924] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 253.964066][ T6441] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 254.303987][ T3739] usb 1-1: config 0 has an invalid interface number: 185 but max is 0 [ 254.322587][ T3739] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 254.375573][ T3739] usb 1-1: config 0 has no interface number 0 [ 254.406596][ T3739] usb 1-1: config 0 interface 185 has no altsetting 0 [ 254.441045][ T3739] usb 1-1: New USB device found, idVendor=12d1, idProduct=1c1f, bcdDevice=63.46 [ 254.485818][ T3739] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 254.514073][ T3650] Bluetooth: hci3: command tx timeout [ 254.555492][ T3739] usb 1-1: config 0 descriptor?? [ 254.691474][ T3739] rndis_wlan 1-1:0.185: skipping garbage [ 254.724521][ T3739] rndis_wlan 1-1:0.185: skipping garbage [ 254.743863][ T3739] usb 1-1: bad CDC descriptors [ 254.796464][ T3739] rndis_host 1-1:0.185: skipping garbage [ 254.820426][ T3739] rndis_host 1-1:0.185: skipping garbage [ 254.853813][ T3739] usb 1-1: bad CDC descriptors [ 254.881067][ T3739] option 1-1:0.185: GSM modem (1-port) converter detected [ 254.955111][ T3739] usb 1-1: USB disconnect, device number 6 [ 254.966464][ T3739] option 1-1:0.185: device disconnected [ 255.074846][ T4924] EXT4-fs (loop2): unmounting filesystem. [ 255.362328][ T6478] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 255.585284][ T6382] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 255.682959][ T6382] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 255.815335][ T6491] netlink: 4 bytes leftover after parsing attributes in process `syz.3.657'. [ 255.831727][ T6382] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 255.876866][ T6382] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 256.186517][ T6505] loop0: detected capacity change from 0 to 512 [ 256.270864][ T6505] EXT4-fs (loop0): 1 truncate cleaned up [ 256.334446][ T6505] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 256.506876][ T3924] device hsr_slave_0 left promiscuous mode [ 256.526238][ T3924] device hsr_slave_1 left promiscuous mode [ 256.555015][ T3924] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 256.575755][ T3924] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 256.593892][ T3650] Bluetooth: hci3: command tx timeout [ 256.607485][ T3924] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 256.636678][ T3639] EXT4-fs error (device loop0): ext4_readdir:260: inode #2: block 13: comm syz-executor: path /158/file2: bad entry in directory: rec_len is smaller than minimal - offset=76, inode=196608, rec_len=0, size=1024 fake=0 [ 256.637067][ T3924] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 256.668917][ T3924] device bridge_slave_1 left promiscuous mode [ 256.675783][ T3924] bridge0: port 2(bridge_slave_1) entered disabled state [ 256.702006][ T3924] device bridge_slave_0 left promiscuous mode [ 256.708742][ T3924] bridge0: port 1(bridge_slave_0) entered disabled state [ 256.717220][ T3639] EXT4-fs error (device loop0): ext4_lookup:1856: inode #11: comm syz-executor: iget: checksum invalid [ 256.740477][ T3639] EXT4-fs error (device loop0): ext4_lookup:1856: inode #11: comm syz-executor: iget: checksum invalid [ 256.790772][ T3924] device veth1_macvtap left promiscuous mode [ 256.814010][ T3924] device veth0_macvtap left promiscuous mode [ 256.833645][ T3924] device veth1_vlan left promiscuous mode [ 256.874578][ T3924] device veth0_vlan left promiscuous mode [ 258.041665][ T3924] team0 (unregistering): Port device team_slave_1 removed [ 258.099964][ T3924] team0 (unregistering): Port device team_slave_0 removed [ 258.171290][ T3924] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 258.249455][ T3924] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 258.673965][ T3650] Bluetooth: hci3: command tx timeout [ 258.811926][ T3924] bond0 (unregistering): Released all slaves [ 259.144192][ T6382] 8021q: adding VLAN 0 to HW filter on device bond0 [ 259.256521][ T3639] EXT4-fs (loop0): unmounting filesystem. [ 259.302770][ T3931] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 259.338050][ T3931] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 259.390445][ T6382] 8021q: adding VLAN 0 to HW filter on device team0 [ 259.560702][ T3935] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 259.572639][ T3935] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 259.589998][ T3935] bridge0: port 1(bridge_slave_0) entered blocking state [ 259.597432][ T3935] bridge0: port 1(bridge_slave_0) entered forwarding state [ 259.607194][ T3935] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 259.635282][ T3935] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 259.654219][ T3935] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 259.674163][ T3935] bridge0: port 2(bridge_slave_1) entered blocking state [ 259.681313][ T3935] bridge0: port 2(bridge_slave_1) entered forwarding state [ 259.734718][ T3931] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 259.748905][ T3931] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 259.776989][ T3931] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 259.796323][ T3931] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 259.837511][ T3931] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 259.892215][ T3931] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 259.910027][ T3931] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 259.995391][ T6541] netlink: 4 bytes leftover after parsing attributes in process `syz.3.670'. [ 260.020282][ T102] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 260.045066][ T102] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 260.073649][ T102] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 260.101160][ T102] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 260.569121][ T3654] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 260.579218][ T3654] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 260.587987][ T3651] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 260.598614][ T1261] ieee802154 phy0 wpan0: encryption failed: -22 [ 260.613267][ T3651] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 260.621393][ T3651] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 260.639142][ T3651] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 260.720751][ T3931] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 260.847978][ T3931] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 261.173060][ T3931] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 261.401861][ T3931] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 261.500586][ T3927] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 261.533212][ T3927] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 261.581756][ T6382] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 261.737908][ T102] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 261.761859][ T102] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 261.912731][ T3927] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 262.045722][ T3927] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 262.085802][ T3927] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 262.093631][ T3927] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 262.186265][ T6553] chnl_net:caif_netlink_parms(): no params data found [ 262.227651][ T6382] device veth0_vlan entered promiscuous mode [ 262.372217][ T6382] device veth1_vlan entered promiscuous mode [ 262.827619][ T3650] Bluetooth: hci1: command tx timeout [ 263.041080][ T3924] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 263.065507][ T3924] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 263.078280][ T6382] device veth0_macvtap entered promiscuous mode [ 263.279794][ T6382] device veth1_macvtap entered promiscuous mode [ 263.308634][ T3927] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 263.321197][ T3927] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 263.377906][ T6553] bridge0: port 1(bridge_slave_0) entered blocking state [ 263.388473][ T6553] bridge0: port 1(bridge_slave_0) entered disabled state [ 263.404708][ T6553] device bridge_slave_0 entered promiscuous mode [ 263.501902][ T6382] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 263.522990][ T6382] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 263.542942][ T6382] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 263.564617][ T6382] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 263.586519][ T6382] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 263.617705][ T6382] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 263.630758][ T6382] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 263.648773][ T6382] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 263.670104][ T6382] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 263.685820][ T6553] bridge0: port 2(bridge_slave_1) entered blocking state [ 263.702391][ T6553] bridge0: port 2(bridge_slave_1) entered disabled state [ 263.726509][ T6553] device bridge_slave_1 entered promiscuous mode [ 263.752564][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 263.768596][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 263.842418][ T6382] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 263.859577][ T6382] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 263.870714][ T6382] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 263.890389][ T6382] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 263.900766][ T6382] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 263.917509][ T6382] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 263.931931][ T6382] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 263.948790][ T6382] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 263.980672][ T6382] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 264.114495][ T6553] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 264.167908][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 264.206507][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 264.277134][ T6382] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 264.321758][ T6382] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 264.380790][ T6382] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 264.435260][ T6382] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 264.478343][ T6553] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 264.574596][ T6600] netlink: 4 bytes leftover after parsing attributes in process `syz.4.679'. [ 264.694823][ T6553] team0: Port device team_slave_0 added [ 264.810408][ T6553] team0: Port device team_slave_1 added [ 264.922179][ T3654] Bluetooth: hci1: command tx timeout [ 265.010938][ T6553] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 265.034849][ T6553] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 265.061552][ T3931] IPVS: stopping backup sync thread 3751 ... [ 265.062475][ T6553] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 265.255626][ T6553] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 265.267020][ T6553] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 265.299754][ T6553] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 265.443365][ T22] hid-generic 0000:FFFFFFFF:0008.0003: unknown main item tag 0x0 [ 265.459856][ T22] hid-generic 0000:FFFFFFFF:0008.0003: unknown main item tag 0x0 [ 265.469022][ T22] hid-generic 0000:FFFFFFFF:0008.0003: unknown main item tag 0x0 [ 265.494109][ T3924] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 265.506373][ T3924] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 265.517580][ T22] hid-generic 0000:FFFFFFFF:0008.0003: unknown main item tag 0x0 [ 265.543211][ T6553] device hsr_slave_0 entered promiscuous mode [ 265.545473][ T22] hid-generic 0000:FFFFFFFF:0008.0003: unknown main item tag 0x0 [ 265.560068][ T6553] device hsr_slave_1 entered promiscuous mode [ 265.580556][ T6553] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 265.582060][ T22] hid-generic 0000:FFFFFFFF:0008.0003: unknown main item tag 0x0 [ 265.590017][ T6553] Cannot create hsr debugfs directory [ 265.618502][ T22] hid-generic 0000:FFFFFFFF:0008.0003: unknown main item tag 0x0 [ 265.639204][ T22] hid-generic 0000:FFFFFFFF:0008.0003: unknown main item tag 0x0 [ 265.663942][ T22] hid-generic 0000:FFFFFFFF:0008.0003: unknown main item tag 0x0 [ 265.681952][ T22] hid-generic 0000:FFFFFFFF:0008.0003: unknown main item tag 0x0 [ 265.698254][ T22] hid-generic 0000:FFFFFFFF:0008.0003: unknown main item tag 0x0 [ 265.720364][ T22] hid-generic 0000:FFFFFFFF:0008.0003: unknown main item tag 0x0 [ 265.738651][ T22] hid-generic 0000:FFFFFFFF:0008.0003: unknown main item tag 0x0 [ 265.766139][ T22] hid-generic 0000:FFFFFFFF:0008.0003: unknown main item tag 0x0 [ 265.786026][ T22] hid-generic 0000:FFFFFFFF:0008.0003: unknown main item tag 0x0 [ 265.799523][ T22] hid-generic 0000:FFFFFFFF:0008.0003: unknown main item tag 0x0 [ 265.831531][ T22] hid-generic 0000:FFFFFFFF:0008.0003: unknown main item tag 0x0 [ 265.849671][ T22] hid-generic 0000:FFFFFFFF:0008.0003: unknown main item tag 0x0 [ 265.866951][ T22] hid-generic 0000:FFFFFFFF:0008.0003: unknown main item tag 0x0 [ 265.882425][ T22] hid-generic 0000:FFFFFFFF:0008.0003: unknown main item tag 0x0 [ 265.893967][ T22] hid-generic 0000:FFFFFFFF:0008.0003: unknown main item tag 0x0 [ 265.901835][ T22] hid-generic 0000:FFFFFFFF:0008.0003: unknown main item tag 0x0 [ 265.909740][ T22] hid-generic 0000:FFFFFFFF:0008.0003: unknown main item tag 0x0 [ 265.917925][ T22] hid-generic 0000:FFFFFFFF:0008.0003: unknown main item tag 0x0 [ 265.925963][ T22] hid-generic 0000:FFFFFFFF:0008.0003: unknown main item tag 0x0 [ 265.935767][ T22] hid-generic 0000:FFFFFFFF:0008.0003: unknown main item tag 0x0 [ 265.943586][ T22] hid-generic 0000:FFFFFFFF:0008.0003: unknown main item tag 0x0 [ 265.969651][ T3927] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 265.980808][ T22] hid-generic 0000:FFFFFFFF:0008.0003: hidraw0: HID v0.00 Device [] on [ 266.015586][ T3931] device hsr_slave_0 left promiscuous mode [ 266.030883][ T3931] device hsr_slave_1 left promiscuous mode [ 266.054023][ T3931] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 266.064274][ T3931] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 266.114316][ T3931] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 266.121773][ T3931] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 266.161884][ T3931] device bridge_slave_1 left promiscuous mode [ 266.181151][ T3931] bridge0: port 2(bridge_slave_1) entered disabled state [ 266.240441][ T3931] bridge0: port 1(bridge_slave_0) entered disabled state [ 266.301358][ T3931] device veth1_macvtap left promiscuous mode [ 266.317689][ T3931] device veth0_macvtap left promiscuous mode [ 266.376057][ T3931] device veth1_vlan left promiscuous mode [ 266.387985][ T3931] device veth0_vlan left promiscuous mode [ 266.998360][ T3654] Bluetooth: hci1: command tx timeout [ 267.719861][ T3931] team0 (unregistering): Port device team_slave_1 removed [ 267.781533][ T3931] team0 (unregistering): Port device team_slave_0 removed [ 267.821303][ T3931] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 267.875337][ T3931] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 268.369194][ T3931] bond0 (unregistering): Released all slaves [ 268.474255][ T6651] netlink: 4 bytes leftover after parsing attributes in process `syz.3.689'. [ 268.571893][ T3927] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 268.603097][ T3927] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 268.658074][ T3927] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 269.043009][ T22] hid-generic 0000:FFFFFFFF:0008.0004: unknown main item tag 0x0 [ 269.059381][ T22] hid-generic 0000:FFFFFFFF:0008.0004: unknown main item tag 0x0 [ 269.069371][ T22] hid-generic 0000:FFFFFFFF:0008.0004: unknown main item tag 0x0 [ 269.078965][ T3654] Bluetooth: hci1: command tx timeout [ 269.099491][ T22] hid-generic 0000:FFFFFFFF:0008.0004: unknown main item tag 0x0 [ 269.120771][ T22] hid-generic 0000:FFFFFFFF:0008.0004: unknown main item tag 0x0 [ 269.143149][ T22] hid-generic 0000:FFFFFFFF:0008.0004: unknown main item tag 0x0 [ 269.166316][ T22] hid-generic 0000:FFFFFFFF:0008.0004: unknown main item tag 0x0 [ 269.186920][ T22] hid-generic 0000:FFFFFFFF:0008.0004: unknown main item tag 0x0 [ 269.208770][ T22] hid-generic 0000:FFFFFFFF:0008.0004: unknown main item tag 0x0 [ 269.223121][ T22] hid-generic 0000:FFFFFFFF:0008.0004: unknown main item tag 0x0 [ 269.246878][ T22] hid-generic 0000:FFFFFFFF:0008.0004: unknown main item tag 0x0 [ 269.263619][ T22] hid-generic 0000:FFFFFFFF:0008.0004: unknown main item tag 0x0 [ 269.284805][ T22] hid-generic 0000:FFFFFFFF:0008.0004: unknown main item tag 0x0 [ 269.292851][ T22] hid-generic 0000:FFFFFFFF:0008.0004: unknown main item tag 0x0 [ 269.303562][ T22] hid-generic 0000:FFFFFFFF:0008.0004: unknown main item tag 0x0 [ 269.312756][ T22] hid-generic 0000:FFFFFFFF:0008.0004: unknown main item tag 0x0 [ 269.321049][ T22] hid-generic 0000:FFFFFFFF:0008.0004: unknown main item tag 0x0 [ 269.329387][ T22] hid-generic 0000:FFFFFFFF:0008.0004: unknown main item tag 0x0 [ 269.337669][ T22] hid-generic 0000:FFFFFFFF:0008.0004: unknown main item tag 0x0 [ 269.345918][ T22] hid-generic 0000:FFFFFFFF:0008.0004: unknown main item tag 0x0 [ 269.354625][ T22] hid-generic 0000:FFFFFFFF:0008.0004: unknown main item tag 0x0 [ 269.362657][ T22] hid-generic 0000:FFFFFFFF:0008.0004: unknown main item tag 0x0 [ 269.370995][ T22] hid-generic 0000:FFFFFFFF:0008.0004: unknown main item tag 0x0 [ 269.379255][ T22] hid-generic 0000:FFFFFFFF:0008.0004: unknown main item tag 0x0 [ 269.387443][ T22] hid-generic 0000:FFFFFFFF:0008.0004: unknown main item tag 0x0 [ 269.395648][ T22] hid-generic 0000:FFFFFFFF:0008.0004: unknown main item tag 0x0 [ 269.404490][ T22] hid-generic 0000:FFFFFFFF:0008.0004: unknown main item tag 0x0 [ 269.440531][ T22] hid-generic 0000:FFFFFFFF:0008.0004: hidraw0: HID v0.00 Device [] on [ 270.558899][ T6553] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 270.600232][ T6553] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 270.618839][ T6693] loop4: detected capacity change from 0 to 128 [ 270.659465][ T6553] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 270.764801][ T6693] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 270.788110][ T6553] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 271.053042][ T6700] loop3: detected capacity change from 0 to 512 [ 271.107312][ T6700] EXT4-fs (loop3): Test dummy encryption mode enabled [ 271.191958][ T6700] EXT4-fs error (device loop3): ext4_find_inline_data_nolock:164: inode #12: comm syz.3.700: inline data xattr refers to an external xattr inode [ 271.241506][ T6700] EXT4-fs error (device loop3): ext4_orphan_get:1401: comm syz.3.700: couldn't read orphan inode 12 (err -117) [ 271.261668][ T6700] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 271.290736][ T6553] 8021q: adding VLAN 0 to HW filter on device bond0 [ 271.301141][ T6708] netlink: 4 bytes leftover after parsing attributes in process `syz.4.702'. [ 271.377817][ T102] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 271.394207][ T102] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 271.530259][ T6553] 8021q: adding VLAN 0 to HW filter on device team0 [ 271.720072][ T6711] EXT4-fs error (device loop3): ext4_add_entry:2484: inode #2: comm syz.3.700: Directory hole found for htree leaf block 0 [ 271.747659][ T6712] EXT4-fs error (device loop3): ext4_add_entry:2484: inode #2: comm syz.3.700: Directory hole found for htree leaf block 0 [ 272.408605][ T102] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 272.427400][ T4489] EXT4-fs (loop3): unmounting filesystem. [ 272.455290][ T102] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 272.463583][ T102] bridge0: port 1(bridge_slave_0) entered blocking state [ 272.470704][ T102] bridge0: port 1(bridge_slave_0) entered forwarding state [ 272.535648][ T6717] loop1: detected capacity change from 0 to 16 [ 272.540781][ T102] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 272.555838][ T102] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 272.571069][ T102] bridge0: port 2(bridge_slave_1) entered blocking state [ 272.578305][ T102] bridge0: port 2(bridge_slave_1) entered forwarding state [ 272.601837][ T102] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 272.608888][ T6717] erofs: Unknown parameter 'ÿÿÿÿ' [ 272.622036][ T102] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 272.981748][ T3650] Bluetooth: hci5: command 0x0406 tx timeout [ 277.232558][ T6553] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 277.248349][ T6553] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 277.357970][ T102] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 277.367607][ T102] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 277.392430][ T102] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 277.421334][ T102] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 277.436912][ T102] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 277.459548][ T102] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 277.471398][ T102] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 277.512841][ T102] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 277.574655][ T102] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 277.607989][ T102] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 277.650827][ T102] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 277.666937][ T6728] loop4: detected capacity change from 0 to 128 [ 277.750929][ T6728] EXT4-fs (loop4): Test dummy encryption mode enabled [ 277.835942][ T6728] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 277.896811][ T6728] ext4 filesystem being mounted at /77/mnt supports timestamps until 2038 (0x7fffffff) [ 279.263234][ T5105] EXT4-fs (loop4): unmounting filesystem. [ 279.563658][ T3929] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 279.581718][ T3929] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 279.618165][ T6553] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 279.705429][ T102] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 279.732787][ T102] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 279.824857][ T3927] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 279.844351][ T3927] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 279.899650][ T3927] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 279.931479][ T3927] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 279.976852][ T6553] device veth0_vlan entered promiscuous mode [ 280.036142][ T6553] device veth1_vlan entered promiscuous mode [ 280.058981][ T6760] netlink: 4 bytes leftover after parsing attributes in process `syz.2.712'. [ 280.130382][ T3929] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 280.159398][ T3929] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 280.203654][ T3929] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 280.231042][ T3929] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 280.263402][ T6553] device veth0_macvtap entered promiscuous mode [ 280.299267][ T6553] device veth1_macvtap entered promiscuous mode [ 280.353538][ T6553] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 280.382098][ T6553] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 280.398654][ T6553] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 280.409821][ T6553] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 280.440284][ T6553] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 280.460770][ T6553] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 280.486154][ T6553] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 280.506078][ T6553] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 280.539514][ T6553] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 280.579545][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 280.620274][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 280.654520][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 280.683709][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 280.728554][ T6553] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 280.772184][ T6553] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 280.811296][ T6553] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 280.859372][ T6553] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 280.899751][ T6553] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 281.061502][ T6553] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 281.075987][ T6553] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 281.087846][ T6553] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 281.099607][ T6553] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 282.128732][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 282.154505][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 282.185090][ T6553] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 282.211393][ T6553] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 282.323796][ T6553] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 282.332558][ T6553] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 282.375768][ T6783] netlink: 112 bytes leftover after parsing attributes in process `syz.2.719'. [ 282.573510][ T102] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 282.604442][ T102] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 282.671619][ T3929] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 282.686726][ T6791] loop2: detected capacity change from 0 to 128 [ 282.702416][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 282.723682][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 282.737664][ T6791] EXT4-fs (loop2): Test dummy encryption mode enabled [ 282.762295][ T6793] loop1: detected capacity change from 0 to 1024 [ 282.825441][ T6791] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 282.845640][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 282.885387][ T6791] ext4 filesystem being mounted at /86/mnt supports timestamps until 2038 (0x7fffffff) [ 282.902059][ T6793] hfsplus: request for non-existent node 3 in B*Tree [ 282.909899][ T6793] hfsplus: request for non-existent node 3 in B*Tree [ 283.153990][ T3650] Bluetooth: hci0: command 0x0406 tx timeout [ 284.397905][ T4924] EXT4-fs (loop2): unmounting filesystem. [ 284.633879][ T945] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 284.893806][ T945] usb 4-1: Using ep0 maxpacket: 16 [ 285.014017][ T945] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 285.133330][ T945] usb 4-1: config 0 interface 0 has no altsetting 0 [ 285.380720][ T945] usb 4-1: New USB device found, idVendor=060b, idProduct=500a, bcdDevice= 0.00 [ 285.390764][ T945] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 286.106570][ T945] usb 4-1: config 0 descriptor?? [ 286.587252][ T6813] loop3: detected capacity change from 0 to 128 [ 286.628984][ T6813] EXT4-fs warning (device loop3): ext4_init_metadata_csum:4562: metadata_csum and uninit_bg are redundant flags; please run fsck. [ 286.709046][ T6813] EXT4-fs (loop3): Encoding requested by superblock is unknown [ 286.928309][ T945] hid (null): unknown global tag 0xd [ 286.963868][ T945] hid (null): unknown global tag 0x35 [ 286.979687][ T945] hid (null): unknown global tag 0xe [ 287.002348][ T945] hid (null): unknown global tag 0x92 [ 287.014004][ T945] hid (null): global environment stack underflow [ 287.047842][ T945] cougar 0003:060B:500A.0005: unexpected long global item [ 287.084323][ T945] cougar 0003:060B:500A.0005: parse failed [ 287.120861][ T945] cougar: probe of 0003:060B:500A.0005 failed with error -22 [ 287.175342][ T945] usb 4-1: USB disconnect, device number 10 [ 287.621514][ T6853] loop4: detected capacity change from 0 to 1024 [ 287.660474][ T6853] EXT4-fs: Ignoring removed i_version option [ 287.682816][ T6855] autofs4:pid:6855:autofs_fill_super: called with bogus options [ 287.738205][ T26] audit: type=1804 audit(1727833928.084:213): pid=6855 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.730" name="/newroot/3/bus/bus" dev="overlay" ino=43 res=1 errno=0 [ 287.792263][ T6853] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 288.539387][ T6876] loop1: detected capacity change from 0 to 128 [ 288.657867][ T5105] EXT4-fs (loop4): unmounting filesystem. [ 288.693540][ T6876] EXT4-fs (loop1): Test dummy encryption mode enabled [ 288.780438][ T6876] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 288.834367][ T6876] ext4 filesystem being mounted at /11/mnt supports timestamps until 2038 (0x7fffffff) [ 289.131013][ T102] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 290.314140][ T6382] EXT4-fs (loop1): unmounting filesystem. [ 290.409620][ T102] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 290.647619][ T102] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 290.813003][ T102] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 291.277596][ T6909] autofs4:pid:6909:autofs_fill_super: called with bogus options [ 291.445463][ T26] audit: type=1804 audit(1727833931.784:214): pid=6910 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.742" name="/newroot/107/bus/bus" dev="overlay" ino=599 res=1 errno=0 [ 291.688734][ T3654] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 291.699050][ T3654] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 291.708538][ T3654] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 291.717844][ T3654] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 291.744368][ T3654] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 291.751969][ T3654] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 292.463946][ T22] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 292.760266][ T6912] chnl_net:caif_netlink_parms(): no params data found [ 292.904824][ T22] usb 4-1: config 0 has an invalid interface number: 185 but max is 0 [ 292.982756][ T102] device hsr_slave_0 left promiscuous mode [ 292.986364][ T22] usb 4-1: config 0 has an invalid descriptor of length 88, skipping remainder of the config [ 293.000314][ T102] device hsr_slave_1 left promiscuous mode [ 293.169138][ T22] usb 4-1: config 0 has no interface number 0 [ 293.189907][ T22] usb 4-1: config 0 interface 185 has no altsetting 0 [ 293.210544][ T22] usb 4-1: New USB device found, idVendor=12d1, idProduct=1c1f, bcdDevice=63.46 [ 293.231297][ T22] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 293.277327][ T22] usb 4-1: config 0 descriptor?? [ 293.284655][ T102] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 293.292099][ T102] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 293.309618][ T102] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 293.322252][ T102] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 293.350252][ T102] device bridge_slave_1 left promiscuous mode [ 293.359122][ T22] rndis_wlan 4-1:0.185: skipping garbage [ 293.361727][ T102] bridge0: port 2(bridge_slave_1) entered disabled state [ 293.389129][ T22] rndis_wlan 4-1:0.185: skipping garbage [ 293.402965][ T22] usb 4-1: bad CDC descriptors [ 293.414545][ T22] rndis_host 4-1:0.185: skipping garbage [ 293.420312][ T22] rndis_host 4-1:0.185: skipping garbage [ 293.426367][ T22] usb 4-1: bad CDC descriptors [ 293.432807][ T22] option 4-1:0.185: GSM modem (1-port) converter detected [ 293.454683][ T6946] loop0: detected capacity change from 0 to 128 [ 293.484247][ T102] device bridge_slave_0 left promiscuous mode [ 293.490519][ T102] bridge0: port 1(bridge_slave_0) entered disabled state [ 293.532465][ T6946] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 293.539219][ T3737] usb 4-1: USB disconnect, device number 11 [ 293.548336][ T6946] ext4 filesystem being mounted at /6/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038 (0x7fffffff) [ 293.595404][ T3737] option 4-1:0.185: device disconnected [ 293.782623][ T102] device veth1_macvtap left promiscuous mode [ 293.793933][ T3650] Bluetooth: hci0: command tx timeout [ 293.814393][ T102] device veth0_macvtap left promiscuous mode [ 293.821537][ T102] device veth1_vlan left promiscuous mode [ 293.839875][ T102] device veth0_vlan left promiscuous mode [ 294.517934][ T6553] EXT4-fs (loop0): unmounting filesystem. [ 294.723410][ T6952] loop0: detected capacity change from 0 to 2048 [ 294.771421][ T6952] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 295.140613][ T6553] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters [ 295.252918][ T6553] EXT4-fs (loop0): unmounting filesystem. [ 295.742486][ T6965] autofs4:pid:6965:autofs_fill_super: called with bogus options [ 295.768706][ T6966] loop0: detected capacity change from 0 to 128 [ 295.780097][ T6966] EXT4-fs (loop0): Test dummy encryption mode enabled [ 295.809718][ T6966] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 295.844497][ T6966] ext4 filesystem being mounted at /9/mnt supports timestamps until 2038 (0x7fffffff) [ 295.852332][ T26] audit: type=1804 audit(1727833936.194:215): pid=6968 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.752" name="/newroot/14/bus/bus" dev="overlay" ino=100 res=1 errno=0 [ 295.873851][ T3650] Bluetooth: hci0: command tx timeout [ 296.035713][ T102] team0 (unregistering): Port device team_slave_1 removed [ 296.081049][ T102] team0 (unregistering): Port device team_slave_0 removed [ 296.738422][ T102] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 296.750603][ T6553] EXT4-fs (loop0): unmounting filesystem. [ 297.031073][ T102] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 297.955741][ T3650] Bluetooth: hci0: command tx timeout [ 298.475243][ T102] bond0 (unregistering): Released all slaves [ 298.719462][ T6912] bridge0: port 1(bridge_slave_0) entered blocking state [ 298.728303][ T6912] bridge0: port 1(bridge_slave_0) entered disabled state [ 298.747040][ T6912] device bridge_slave_0 entered promiscuous mode [ 298.804299][ T6912] bridge0: port 2(bridge_slave_1) entered blocking state [ 298.811281][ T3644] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 298.811432][ T6912] bridge0: port 2(bridge_slave_1) entered disabled state [ 298.837529][ T6912] device bridge_slave_1 entered promiscuous mode [ 298.938004][ T6912] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 298.984454][ T6912] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 299.101374][ T6912] team0: Port device team_slave_0 added [ 299.159564][ T6912] team0: Port device team_slave_1 added [ 299.194150][ T3644] usb 4-1: config 0 has an invalid interface number: 185 but max is 0 [ 299.214448][ T3644] usb 4-1: config 0 has an invalid descriptor of length 88, skipping remainder of the config [ 299.245044][ T3644] usb 4-1: config 0 has no interface number 0 [ 299.262893][ T3644] usb 4-1: config 0 interface 185 has no altsetting 0 [ 299.274398][ T3644] usb 4-1: New USB device found, idVendor=12d1, idProduct=1c1f, bcdDevice=63.46 [ 299.292271][ T3644] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 299.435928][ T3644] usb 4-1: config 0 descriptor?? [ 299.486669][ T3644] rndis_wlan 4-1:0.185: skipping garbage [ 299.492340][ T3644] rndis_wlan 4-1:0.185: skipping garbage [ 299.501401][ T6912] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 299.520826][ T3644] usb 4-1: bad CDC descriptors [ 299.562427][ T6912] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 299.620381][ T3644] rndis_host 4-1:0.185: skipping garbage [ 299.632701][ T3644] rndis_host 4-1:0.185: skipping garbage [ 299.642812][ T3644] usb 4-1: bad CDC descriptors [ 299.658884][ T3644] option 4-1:0.185: GSM modem (1-port) converter detected [ 299.666842][ T6912] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 299.712150][ T3644] usb 4-1: USB disconnect, device number 12 [ 299.736121][ T3644] option 4-1:0.185: device disconnected [ 299.789162][ T6912] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 299.823973][ T6912] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 299.880385][ T6912] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 300.033869][ T3650] Bluetooth: hci0: command tx timeout [ 300.068484][ T7008] loop0: detected capacity change from 0 to 2048 [ 300.090049][ T6912] device hsr_slave_0 entered promiscuous mode [ 300.104885][ T6912] device hsr_slave_1 entered promiscuous mode [ 300.117273][ T6912] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 300.125473][ T6912] Cannot create hsr debugfs directory [ 300.146525][ T7008] loop0: p1 < > p4 [ 300.158785][ T7008] loop0: p4 size 8388608 extends beyond EOD, truncated [ 300.377190][ T26] audit: type=1326 audit(1727833940.724:216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7007 comm="syz.0.761" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9c2b7dff9 code=0x7ffc0000 [ 300.483528][ T7017] loop2: detected capacity change from 0 to 128 [ 300.510900][ T26] audit: type=1326 audit(1727833940.724:217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7007 comm="syz.0.761" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb9c2b7dff9 code=0x7ffc0000 [ 300.549989][ T7017] EXT4-fs (loop2): Test dummy encryption mode enabled [ 300.634741][ T7017] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 300.664135][ T7017] ext4 filesystem being mounted at /92/mnt supports timestamps until 2038 (0x7fffffff) [ 300.682549][ T3988] udevd[3988]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 300.714536][ T26] audit: type=1326 audit(1727833940.724:218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7007 comm="syz.0.761" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9c2b7dff9 code=0x7ffc0000 [ 300.922621][ T26] audit: type=1326 audit(1727833940.724:219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7007 comm="syz.0.761" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb9c2b7dff9 code=0x7ffc0000 [ 301.512324][ T4924] EXT4-fs (loop2): unmounting filesystem. [ 301.529100][ T26] audit: type=1326 audit(1727833940.764:220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7007 comm="syz.0.761" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9c2b7dff9 code=0x7ffc0000 [ 301.555800][ T26] audit: type=1326 audit(1727833940.764:221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7007 comm="syz.0.761" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9c2b7dff9 code=0x7ffc0000 [ 301.583307][ T26] audit: type=1326 audit(1727833940.764:222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7007 comm="syz.0.761" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fb9c2b7dff9 code=0x7ffc0000 [ 301.643698][ T26] audit: type=1326 audit(1727833940.764:223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7007 comm="syz.0.761" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9c2b7dff9 code=0x7ffc0000 [ 301.672835][ T26] audit: type=1326 audit(1727833940.764:224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7007 comm="syz.0.761" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9c2b7dff9 code=0x7ffc0000 [ 301.703502][ T26] audit: type=1326 audit(1727833940.774:225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7007 comm="syz.0.761" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fb9c2b7dff9 code=0x7ffc0000 [ 301.815123][ T26] audit: type=1326 audit(1727833940.774:226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7007 comm="syz.0.761" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9c2b7dff9 code=0x7ffc0000 [ 301.871549][ T7030] device bridge0 entered promiscuous mode [ 301.923323][ T26] audit: type=1326 audit(1727833940.774:227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7007 comm="syz.0.761" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9c2b7dff9 code=0x7ffc0000 [ 302.058120][ T6912] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 302.066137][ T26] audit: type=1326 audit(1727833940.774:228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7007 comm="syz.0.761" exe="/root/syz-executor" sig=0 arch=c000003e syscall=19 compat=0 ip=0x7fb9c2b7dff9 code=0x7ffc0000 [ 302.131018][ T6912] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 302.287456][ T6912] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 302.318677][ T7032] netlink: 4 bytes leftover after parsing attributes in process `syz.0.775'. [ 302.339791][ T6912] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 303.150283][ T7032] netlink: 28 bytes leftover after parsing attributes in process `syz.0.775'. [ 303.347304][ T7041] loop3: detected capacity change from 0 to 1024 [ 303.462831][ T7044] autofs4:pid:7044:autofs_fill_super: called with bogus options [ 303.479152][ T6912] 8021q: adding VLAN 0 to HW filter on device bond0 [ 303.563207][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 303.585038][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 303.609956][ T6912] 8021q: adding VLAN 0 to HW filter on device team0 [ 303.637979][ T102] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 303.656749][ T102] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 303.693336][ T102] bridge0: port 1(bridge_slave_0) entered blocking state [ 303.700605][ T102] bridge0: port 1(bridge_slave_0) entered forwarding state [ 303.748961][ T102] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 303.773189][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 303.790518][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 303.826987][ T38] bridge0: port 2(bridge_slave_1) entered blocking state [ 303.834159][ T38] bridge0: port 2(bridge_slave_1) entered forwarding state [ 303.967898][ T7059] loop2: detected capacity change from 0 to 2048 [ 304.000712][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 304.040763][ T7059] loop2: p1 < > p4 [ 304.064976][ T7059] loop2: p4 size 8388608 extends beyond EOD, truncated [ 304.136002][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 304.209382][ T3092] loop2: p1 < > p4 [ 304.219058][ T3092] loop2: p4 size 8388608 extends beyond EOD, truncated [ 304.243015][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 304.273530][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 304.293940][ T3739] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 304.307960][ T3092] loop2: p1 < > p4 [ 304.320523][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 304.332298][ T3092] loop2: p4 size 8388608 extends beyond EOD, truncated [ 304.349537][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 304.379552][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 304.424523][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 304.457400][ T3988] udevd[3988]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 304.458688][ T3631] udevd[3631]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 304.511234][ T3631] udevd[3631]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 304.530762][ T3988] udevd[3988]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 304.564450][ T7067] device veth0_vlan left promiscuous mode [ 304.585261][ T7067] device veth0_vlan entered promiscuous mode [ 304.664259][ T3739] usb 2-1: config 0 has an invalid interface number: 185 but max is 0 [ 304.682777][ T3739] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 304.711817][ T3739] usb 2-1: config 0 has no interface number 0 [ 304.743232][ T3739] usb 2-1: config 0 interface 185 has no altsetting 0 [ 304.756264][ T3739] usb 2-1: New USB device found, idVendor=12d1, idProduct=1c1f, bcdDevice=63.46 [ 304.771440][ T3739] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 304.797123][ T3739] usb 2-1: config 0 descriptor?? [ 304.862738][ T3739] rndis_wlan 2-1:0.185: skipping garbage [ 304.872267][ T3739] rndis_wlan 2-1:0.185: skipping garbage [ 304.879752][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 304.889698][ T3739] usb 2-1: bad CDC descriptors [ 304.896660][ T3739] rndis_host 2-1:0.185: skipping garbage [ 304.902529][ T3739] rndis_host 2-1:0.185: skipping garbage [ 304.908809][ T3739] usb 2-1: bad CDC descriptors [ 304.915101][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 304.915491][ T3739] option 2-1:0.185: GSM modem (1-port) converter detected [ 304.923608][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 304.993304][ T6912] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 305.058178][ T3739] usb 2-1: USB disconnect, device number 4 [ 305.075530][ T3739] option 2-1:0.185: device disconnected [ 305.134912][ T3654] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 305.141776][ T11] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 305.144984][ T3654] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 305.162113][ T3654] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 305.193071][ T3654] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 305.206846][ T3654] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 305.217066][ T3654] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 305.261094][ T11] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 305.358731][ T11] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 305.451441][ T11] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 305.597231][ T6912] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 305.617617][ T3924] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 305.653970][ T3924] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 305.682303][ T7095] netlink: 4 bytes leftover after parsing attributes in process `syz.2.779'. [ 305.749434][ T7095] netlink: 28 bytes leftover after parsing attributes in process `syz.2.779'. [ 305.776385][ T7079] chnl_net:caif_netlink_parms(): no params data found [ 306.196864][ T7079] bridge0: port 1(bridge_slave_0) entered blocking state [ 306.222846][ T7079] bridge0: port 1(bridge_slave_0) entered disabled state [ 306.261744][ T7079] device bridge_slave_0 entered promiscuous mode [ 306.338057][ T7117] autofs4:pid:7117:autofs_fill_super: called with bogus options [ 306.349832][ T7079] bridge0: port 2(bridge_slave_1) entered blocking state [ 306.367424][ T7079] bridge0: port 2(bridge_slave_1) entered disabled state [ 306.381560][ T7079] device bridge_slave_1 entered promiscuous mode [ 306.434864][ T26] kauditd_printk_skb: 9 callbacks suppressed [ 306.434879][ T26] audit: type=1804 audit(1727833946.774:238): pid=7117 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.784" name="/newroot/101/bus/bus" dev="overlay" ino=577 res=1 errno=0 [ 306.535805][ T7079] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 306.646629][ T7079] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 306.835826][ T7079] team0: Port device team_slave_0 added [ 306.882065][ T3927] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 306.919902][ T3927] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 306.984692][ T7079] team0: Port device team_slave_1 added [ 307.147002][ T7079] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 307.176110][ T7079] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 307.234818][ T3654] Bluetooth: hci2: command tx timeout [ 307.307607][ T7137] loop0: detected capacity change from 0 to 2048 [ 307.354919][ T7079] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 307.419962][ T7137] loop0: p1 < > p4 [ 307.432424][ T7137] loop0: p4 size 8388608 extends beyond EOD, truncated [ 307.481510][ T7079] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 307.492607][ T7079] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 307.686981][ T7079] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 307.841562][ T3927] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 307.866083][ T3927] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 307.905682][ T6912] device veth0_vlan entered promiscuous mode [ 307.928952][ T3927] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 307.958772][ T3927] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 308.122913][ T6912] device veth1_vlan entered promiscuous mode [ 308.208301][ T7079] device hsr_slave_0 entered promiscuous mode [ 308.228922][ T7079] device hsr_slave_1 entered promiscuous mode [ 308.248953][ T7079] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 308.267029][ T7079] Cannot create hsr debugfs directory [ 308.347043][ T11] device hsr_slave_0 left promiscuous mode [ 308.354199][ T11] device hsr_slave_1 left promiscuous mode [ 308.370585][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 308.380170][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 308.410759][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 308.431073][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 308.527497][ T11] device bridge_slave_1 left promiscuous mode [ 308.534386][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 308.555766][ T11] device bridge_slave_0 left promiscuous mode [ 308.562010][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 308.677059][ T11] device veth1_macvtap left promiscuous mode [ 308.683868][ T11] device veth0_macvtap left promiscuous mode [ 308.692457][ T11] device veth1_vlan left promiscuous mode [ 308.698520][ T11] device veth0_vlan left promiscuous mode [ 309.043924][ T3737] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 309.322039][ T3654] Bluetooth: hci2: command tx timeout [ 309.514114][ T3737] usb 2-1: config 0 has an invalid interface number: 185 but max is 0 [ 309.531393][ T3737] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 309.547433][ T3737] usb 2-1: config 0 has no interface number 0 [ 309.568442][ T3737] usb 2-1: config 0 interface 185 has no altsetting 0 [ 309.575619][ T3737] usb 2-1: New USB device found, idVendor=12d1, idProduct=1c1f, bcdDevice=63.46 [ 309.591445][ T3737] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 309.622090][ T3737] usb 2-1: config 0 descriptor?? [ 309.693496][ T3737] rndis_wlan 2-1:0.185: skipping garbage [ 309.699297][ T3737] rndis_wlan 2-1:0.185: skipping garbage [ 309.711697][ T3737] usb 2-1: bad CDC descriptors [ 309.719336][ T3737] rndis_host 2-1:0.185: skipping garbage [ 309.731467][ T3737] rndis_host 2-1:0.185: skipping garbage [ 309.743061][ T3737] usb 2-1: bad CDC descriptors [ 309.750672][ T3737] option 2-1:0.185: GSM modem (1-port) converter detected [ 309.759962][ T11] team0 (unregistering): Port device team_slave_1 removed [ 309.817650][ T11] team0 (unregistering): Port device team_slave_0 removed [ 309.852314][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 309.901396][ T3739] usb 2-1: USB disconnect, device number 5 [ 309.914202][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 309.917868][ T3739] option 2-1:0.185: device disconnected [ 310.418427][ T7174] autofs4:pid:7174:autofs_fill_super: called with bogus options [ 310.431734][ T7175] binder: 7171:7175 ioctl 4018620d 0 returned -22 [ 310.455760][ T7175] loop0: detected capacity change from 0 to 512 [ 310.498047][ T26] audit: type=1804 audit(1727833950.844:239): pid=7176 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.793" name="/newroot/104/bus/bus" dev="overlay" ino=602 res=1 errno=0 [ 310.530887][ T7175] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 310.561051][ T7175] EXT4-fs (loop0): orphan cleanup on readonly fs [ 310.571487][ T7175] Quota error (device loop0): v2_read_file_info: Free block number 1 out of range (1, 6). [ 310.582242][ T7175] EXT4-fs warning (device loop0): ext4_enable_quotas:7035: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 310.634335][ T7175] EXT4-fs (loop0): Cannot turn on quotas: error -117 [ 310.660386][ T7175] EXT4-fs (loop0): 1 truncate cleaned up [ 310.691526][ T7175] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 310.721721][ T11] bond0 (unregistering): Released all slaves [ 310.817015][ T7181] loop1: detected capacity change from 0 to 2048 [ 310.868411][ T7181] loop1: p1 < > p4 [ 310.895045][ T7181] loop1: p4 size 8388608 extends beyond EOD, truncated [ 311.193847][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 311.223427][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 311.238036][ T6912] device veth0_macvtap entered promiscuous mode [ 311.287667][ T6912] device veth1_macvtap entered promiscuous mode [ 311.394962][ T3654] Bluetooth: hci2: command tx timeout [ 311.459825][ T6912] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 311.502322][ T6912] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 311.523516][ T6912] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 311.536578][ T6912] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 311.547419][ T6912] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 311.559123][ T6912] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 311.608247][ T6912] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 311.682738][ T3924] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 311.730012][ T3924] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 311.764331][ T3924] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 311.802403][ T3924] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 311.857264][ T7198] netlink: 16 bytes leftover after parsing attributes in process `syz.2.798'. [ 311.938731][ T6912] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 311.949384][ T6912] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 311.959352][ T6912] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 311.970302][ T6912] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 311.981098][ T6912] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 311.997536][ T6912] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 312.013902][ T6912] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 312.021918][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 312.036032][ T38] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 312.230420][ T6553] EXT4-fs (loop0): unmounting filesystem. [ 312.355541][ T6912] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 312.366070][ T6912] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 312.375805][ T6912] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 312.384858][ T6912] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 312.807503][ T3924] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 312.837587][ T3924] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 312.956895][ T7216] device syzkaller0 entered promiscuous mode [ 312.990766][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 313.042989][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 313.063542][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 313.089933][ T7079] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 313.133044][ T102] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 313.155417][ T7079] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 313.184930][ T7079] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 313.213205][ T7079] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 313.475572][ T3654] Bluetooth: hci2: command tx timeout [ 313.673822][ T3719] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 314.044504][ T3719] usb 2-1: config 0 has an invalid interface number: 185 but max is 0 [ 314.058768][ T3719] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 314.069223][ T3719] usb 2-1: config 0 has no interface number 0 [ 314.076664][ T3719] usb 2-1: config 0 interface 185 has no altsetting 0 [ 314.083681][ T3719] usb 2-1: New USB device found, idVendor=12d1, idProduct=1c1f, bcdDevice=63.46 [ 314.092868][ T3719] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 314.120251][ T3719] usb 2-1: config 0 descriptor?? [ 314.174136][ T3719] rndis_wlan 2-1:0.185: skipping garbage [ 314.179829][ T3719] rndis_wlan 2-1:0.185: skipping garbage [ 314.185702][ T3719] usb 2-1: bad CDC descriptors [ 314.210343][ T3719] rndis_host 2-1:0.185: skipping garbage [ 314.216643][ T3719] rndis_host 2-1:0.185: skipping garbage [ 314.222465][ T3719] usb 2-1: bad CDC descriptors [ 314.229766][ T3719] option 2-1:0.185: GSM modem (1-port) converter detected [ 314.382154][ T3719] usb 2-1: USB disconnect, device number 6 [ 314.404291][ T3719] option 2-1:0.185: device disconnected [ 315.196367][ T7247] autofs4:pid:7247:autofs_fill_super: called with bogus options [ 315.309270][ T26] audit: type=1804 audit(1727833955.654:240): pid=7250 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.804" name="/newroot/27/bus/bus" dev="overlay" ino=178 res=1 errno=0 [ 316.077346][ T7236] netlink: 4 bytes leftover after parsing attributes in process `syz.4.738'. [ 316.369635][ T7258] netlink: 4 bytes leftover after parsing attributes in process `syz.4.808'. [ 316.406215][ T7258] netlink: 28 bytes leftover after parsing attributes in process `syz.4.808'. [ 316.471308][ T7265] netlink: 16 bytes leftover after parsing attributes in process `syz.1.809'. [ 316.787340][ T7079] 8021q: adding VLAN 0 to HW filter on device bond0 [ 316.800554][ T7275] device veth0_vlan left promiscuous mode [ 316.808551][ T7282] loop4: detected capacity change from 0 to 2048 [ 316.810057][ T7275] device veth0_vlan entered promiscuous mode [ 316.827872][ T7281] netlink: 4 bytes leftover after parsing attributes in process `syz.0.812'. [ 316.852584][ T7282] loop4: p1 < > p4 [ 316.868472][ T7282] loop4: p4 size 8388608 extends beyond EOD, truncated [ 316.949598][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 316.970810][ T7280] ------------[ cut here ]------------ [ 316.974874][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 316.976832][ T7280] name '53309' [ 317.028298][ T7079] 8021q: adding VLAN 0 to HW filter on device team0 [ 317.037298][ T7280] WARNING: CPU: 1 PID: 7280 at fs/proc/generic.c:712 remove_proc_entry+0x2e1/0x5c0 [ 317.046985][ T7280] Modules linked in: [ 317.050933][ T7280] CPU: 1 PID: 7280 Comm: syz.0.812 Not tainted 6.1.112-syzkaller #0 [ 317.059024][ T7280] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 317.069165][ T7280] RIP: 0010:remove_proc_entry+0x2e1/0x5c0 [ 317.075000][ T7280] Code: f4 73 ff eb 05 e8 cf f4 73 ff 48 8b 5c 24 10 48 c7 c7 20 a8 47 8d e8 7e 5e 9a 08 48 c7 c7 60 f0 1b 8b 48 89 de e8 6f e7 3b ff <0f> 0b 48 8b 44 24 18 48 c7 44 24 40 0e 36 e0 45 49 c7 04 07 00 00 [ 317.094953][ T7280] RSP: 0018:ffffc90003ebfb80 EFLAGS: 00010246 [ 317.101065][ T7280] RAX: 656fd0af022a3100 RBX: ffff888078ed8558 RCX: ffff88801cf7bb80 [ 317.109123][ T7280] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 317.117163][ T7280] RBP: ffffc90003ebfc78 R08: ffffffff8152a48e R09: fffff520007d7f11 [ 317.125223][ T7280] R10: 0000000000000000 R11: dffffc0000000001 R12: ffff88807e041a00 [ 317.133409][ T7280] R13: 0000000000000005 R14: 0000000000000000 R15: dffffc0000000000 [ 317.141473][ T7280] FS: 000055557792a500(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 317.150480][ T7280] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 317.157151][ T7280] CR2: 00007f4bb8c16000 CR3: 0000000020fa5000 CR4: 00000000003506e0 [ 317.165236][ T7280] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 317.173259][ T7280] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 317.181315][ T7280] Call Trace: [ 317.184656][ T7280] [ 317.187619][ T7280] ? __warn+0x15a/0x520 [ 317.191826][ T7280] ? remove_proc_entry+0x2e1/0x5c0 [ 317.197049][ T7280] ? report_bug+0x2af/0x500 [ 317.201626][ T7280] ? remove_proc_entry+0x2e1/0x5c0 [ 317.206841][ T7280] ? handle_bug+0x3d/0x70 [ 317.211211][ T7280] ? exc_invalid_op+0x16/0x40 [ 317.215978][ T7280] ? asm_exc_invalid_op+0x16/0x20 [ 317.221078][ T7280] ? __warn_printk+0x28e/0x350 [ 317.225933][ T7280] ? remove_proc_entry+0x2e1/0x5c0 [ 317.231095][ T7280] ? __local_bh_enable_ip+0x164/0x1f0 [ 317.236566][ T7280] ? proc_set_user+0x90/0x90 [ 317.241222][ T7280] ? bcm_release+0x1e0/0x870 [ 317.245910][ T7280] ? _local_bh_enable+0xa0/0xa0 [ 317.250812][ T7280] ? do_raw_spin_unlock+0x137/0x8a0 [ 317.256120][ T7280] bcm_release+0x244/0x870 [ 317.260596][ T7280] sock_close+0xcd/0x230 [ 317.264927][ T7280] ? sock_mmap+0x90/0x90 [ 317.269313][ T7280] __fput+0x3f6/0x8d0 [ 317.273352][ T7280] task_work_run+0x246/0x300 [ 317.278059][ T7280] ? task_work_cancel+0x2e0/0x2e0 [ 317.279458][ T7079] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 317.283109][ T7280] ? exit_to_user_mode_loop+0x39/0x100 [ 317.283147][ T7280] exit_to_user_mode_loop+0xde/0x100 [ 317.304382][ T7280] exit_to_user_mode_prepare+0xb1/0x140 [ 317.310001][ T7280] syscall_exit_to_user_mode+0x60/0x270 [ 317.315659][ T7280] do_syscall_64+0x47/0xb0 [ 317.320125][ T7280] ? clear_bhb_loop+0x45/0xa0 [ 317.324924][ T7280] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 317.330859][ T7280] RIP: 0033:0x7fb9c2b7dff9 [ 317.335371][ T7280] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 317.355066][ T7280] RSP: 002b:00007ffc3d96fa78 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 317.363515][ T7280] RAX: 0000000000000000 RBX: 00007fb9c2d37a80 RCX: 00007fb9c2b7dff9 [ 317.366379][ T7079] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 317.371540][ T7280] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 317.389918][ T7280] RBP: 00007fb9c2d37a80 R08: 00007fb9c2d22000 R09: 00007ffc3d96fd6f [ 317.397983][ T7280] R10: 00000000003ffce0 R11: 0000000000000246 R12: 000000000004d862 [ 317.406019][ T7280] R13: 00007ffc3d96fb80 R14: 0000000000000032 R15: ffffffffffffffff [ 317.414174][ T7280] [ 317.417288][ T7280] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 317.424611][ T7280] CPU: 1 PID: 7280 Comm: syz.0.812 Not tainted 6.1.112-syzkaller #0 [ 317.432602][ T7280] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 317.442662][ T7280] Call Trace: [ 317.445957][ T7280] [ 317.448889][ T7280] dump_stack_lvl+0x1e3/0x2cb [ 317.453585][ T7280] ? nf_tcp_handle_invalid+0x642/0x642 [ 317.459153][ T7280] ? panic+0x764/0x764 [ 317.463229][ T7280] ? 0xffffffffa0000948 [ 317.467390][ T7280] ? vscnprintf+0x59/0x80 [ 317.471732][ T7280] panic+0x318/0x764 [ 317.475637][ T7280] ? __warn+0x169/0x520 [ 317.479801][ T7280] ? memcpy_page_flushcache+0xfc/0xfc [ 317.485199][ T7280] __warn+0x348/0x520 [ 317.489187][ T7280] ? remove_proc_entry+0x2e1/0x5c0 [ 317.494486][ T7280] report_bug+0x2af/0x500 [ 317.498829][ T7280] ? remove_proc_entry+0x2e1/0x5c0 [ 317.503956][ T7280] handle_bug+0x3d/0x70 [ 317.508146][ T7280] exc_invalid_op+0x16/0x40 [ 317.512653][ T7280] asm_exc_invalid_op+0x16/0x20 [ 317.517523][ T7280] RIP: 0010:remove_proc_entry+0x2e1/0x5c0 [ 317.523253][ T7280] Code: f4 73 ff eb 05 e8 cf f4 73 ff 48 8b 5c 24 10 48 c7 c7 20 a8 47 8d e8 7e 5e 9a 08 48 c7 c7 60 f0 1b 8b 48 89 de e8 6f e7 3b ff <0f> 0b 48 8b 44 24 18 48 c7 44 24 40 0e 36 e0 45 49 c7 04 07 00 00 [ 317.542860][ T7280] RSP: 0018:ffffc90003ebfb80 EFLAGS: 00010246 [ 317.549014][ T7280] RAX: 656fd0af022a3100 RBX: ffff888078ed8558 RCX: ffff88801cf7bb80 [ 317.556981][ T7280] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 317.564947][ T7280] RBP: ffffc90003ebfc78 R08: ffffffff8152a48e R09: fffff520007d7f11 [ 317.572919][ T7280] R10: 0000000000000000 R11: dffffc0000000001 R12: ffff88807e041a00 [ 317.580898][ T7280] R13: 0000000000000005 R14: 0000000000000000 R15: dffffc0000000000 [ 317.588884][ T7280] ? __warn_printk+0x28e/0x350 [ 317.593750][ T7280] ? __local_bh_enable_ip+0x164/0x1f0 [ 317.599146][ T7280] ? proc_set_user+0x90/0x90 [ 317.603747][ T7280] ? bcm_release+0x1e0/0x870 [ 317.608439][ T7280] ? _local_bh_enable+0xa0/0xa0 [ 317.613338][ T7280] ? do_raw_spin_unlock+0x137/0x8a0 [ 317.618633][ T7280] bcm_release+0x244/0x870 [ 317.623157][ T7280] sock_close+0xcd/0x230 [ 317.627393][ T7280] ? sock_mmap+0x90/0x90 [ 317.631635][ T7280] __fput+0x3f6/0x8d0 [ 317.635634][ T7280] task_work_run+0x246/0x300 [ 317.640234][ T7280] ? task_work_cancel+0x2e0/0x2e0 [ 317.645276][ T7280] ? exit_to_user_mode_loop+0x39/0x100 [ 317.650761][ T7280] exit_to_user_mode_loop+0xde/0x100 [ 317.656045][ T7280] exit_to_user_mode_prepare+0xb1/0x140 [ 317.661593][ T7280] syscall_exit_to_user_mode+0x60/0x270 [ 317.667177][ T7280] do_syscall_64+0x47/0xb0 [ 317.671593][ T7280] ? clear_bhb_loop+0x45/0xa0 [ 317.676399][ T7280] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 317.682298][ T7280] RIP: 0033:0x7fb9c2b7dff9 [ 317.686715][ T7280] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 317.706422][ T7280] RSP: 002b:00007ffc3d96fa78 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 317.714834][ T7280] RAX: 0000000000000000 RBX: 00007fb9c2d37a80 RCX: 00007fb9c2b7dff9 [ 317.722804][ T7280] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 317.730774][ T7280] RBP: 00007fb9c2d37a80 R08: 00007fb9c2d22000 R09: 00007ffc3d96fd6f [ 317.738747][ T7280] R10: 00000000003ffce0 R11: 0000000000000246 R12: 000000000004d862 [ 317.746728][ T7280] R13: 00007ffc3d96fb80 R14: 0000000000000032 R15: ffffffffffffffff [ 317.754724][ T7280] [ 317.758070][ T7280] Kernel Offset: disabled [ 317.762775][ T7280] Rebooting in 86400 seconds..