last executing test programs: 5m18.600160206s ago: executing program 1 (id=41): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) setreuid(0xffffffffffffffff, 0xee00) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, 0x0, 0x0, 0xcc800) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, 0x0, 0x0, 0x0, 0x0) getsockopt$IPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x43, 0x0, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000300)=@acquire={0x134, 0x17, 0x217, 0x70bd26, 0x25dfdbfc, {{@in=@private=0xa010101, 0x4d4, 0x6c}, @in=@private=0xa010102, {@in6=@private1={0xfc, 0x1, '\x00', 0x1}, @in=@multicast2, 0x4e24, 0x0, 0x4e20, 0x0, 0x8, 0x80, 0x180, 0xff}, {{@in6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x35}}, @in=@multicast2, 0x4e22, 0x1, 0x4e20, 0xff81, 0xa, 0xe0, 0xa0}, {0x6, 0xf43, 0x2937, 0xa, 0xe, 0x7, 0x9, 0x8}, {0x400, 0x3, 0x271, 0xe00000}, 0x5, 0x6e6bb5, 0x1, 0x1, 0x54d7b2dffdcdbd87, 0x1}, 0x401, 0xa6, 0x400, 0x70bd28}, [@mark={0xc, 0x15, {0x35075d, 0x8}}]}, 0x134}, 0x1, 0x0, 0x0, 0x4008016}, 0x20040080) 5m17.553681657s ago: executing program 1 (id=47): syz_mount_image$ocfs2(&(0x7f00000026c0), &(0x7f0000004780)='./file0\x00', 0x200000, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0xff, 0x4703, &(0x7f0000004800)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0xc4042, 0x1ff) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000540), 0x44800, 0x0) sendfile(r0, r1, 0x0, 0xfffe82) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x8000, 0xa0) ioctl$LOOP_SET_STATUS64(r2, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x8005, 0x0, 0x0, 0x12, 0xd, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x204]}) rmdir(&(0x7f0000000140)='./file0\x00') 5m14.658930149s ago: executing program 1 (id=64): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2b, 0x25dfdafd, {0x0, 0x0, 0x0, r6, {0xc, 0xc}, {0xfff2, 0xfff1}, {0x0, 0xc}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000801}, 0x24009000) 5m13.736382475s ago: executing program 1 (id=72): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000400)='./file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x18d883, 0x0) mount$bind(&(0x7f0000000180)='./file0/file0\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x2243005, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) open_tree(0xffffffffffffff9c, &(0x7f00000000c0)='\x00', 0x89901) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) 5m13.479276568s ago: executing program 1 (id=76): prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_procfs(0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r3, 0x18000000000002a0, 0x54, 0x0, &(0x7f0000000100)="b9ff03316844268cb89e14f065584c6ce6b18987f7c57ee0050081", 0x0, 0x1c1, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 5m12.957378833s ago: executing program 1 (id=77): r0 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r0, &(0x7f0000000040), 0x10) listen(r0, 0x0) r1 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r1, &(0x7f0000000080), 0x10) sendmmsg$inet6(r1, &(0x7f0000000580)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000280)='i', 0x1}], 0x1, &(0x7f00000005c0)=ANY=[], 0x200}}], 0x1, 0x4000006) shutdown(r1, 0x2) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x4, 0x0, 0x7fff0000}]}) r3 = openat$kvm(0xffffffffffffff9c, 0x0, 0x109101, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) 5m12.8173369s ago: executing program 32 (id=77): r0 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r0, &(0x7f0000000040), 0x10) listen(r0, 0x0) r1 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r1, &(0x7f0000000080), 0x10) sendmmsg$inet6(r1, &(0x7f0000000580)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000280)='i', 0x1}], 0x1, &(0x7f00000005c0)=ANY=[], 0x200}}], 0x1, 0x4000006) shutdown(r1, 0x2) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x4, 0x0, 0x7fff0000}]}) r3 = openat$kvm(0xffffffffffffff9c, 0x0, 0x109101, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) 4m40.145642227s ago: executing program 2 (id=231): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000400)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, 0x0, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, 0x0, 0x0) 4m36.927329445s ago: executing program 2 (id=240): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f00000000c0), 0x5, 0x557, &(0x7f0000000fc0)="$eJzs3c+LG1UcAPDvZHf7W9tCKSoiCz1Yqc12d/1RwUM9ihYLeq9hM13KJk3ZZEt3Ldge7MWLFEHEgnjXu8fiP+BfUdBCkbLowUtkspNt2k266TZttubzgSnvZSZ5852Z7+ubvFkSwMiazP4pRLwcEd8kEfsjIsnXjUe+cnJtu9V7V+ayJYlm89O/ktZ2Wb39We337c0rL0XEb19FHCtsbLe+vLJQqlTSxbw+1ahenKovrxw/Xy3Np/PphZlm8+TbszPvvfvOwGJ948w/339y68OTXx9Z/e6XOwdvJHEq9uXrOuN4Alc7K5MxmR+TiTj10IbTA2hsO0mGvQNsyVie5xOR9QH7YyzPeuD/78uIaAIjKpH/MKLa44D2vf2A7oOfG3c/WLsB2hj/+Np3I7GrdW+0ZzV54M4ou989MID2szZ+/fPmjWyJwX0PAbCpq9ci4sT4+Mb+L8n7v6070cc2D7eh/4Nn51Y2/nmz2/insD7+iS7jn71dcncrNs//wp0BNNNTNv57v+v4d33S6sBYXnuhNeabSM6dr6RZ3/ZiRByNiZ1Z/VHzOSdXbzd7resc/2VL1n57LJjvx53xnQ++p1xqlJ4k5k53r0W80nX8m6yf/6TL+c+Ox5k+2zic3nyt17rN43+6mj9FvN71/N+f0Uq6zk/Ozubzk1Ot62GqfVVs9Pf1w7/3an/Y8Wfnf8+j4z+QdM7X1h+/jR93/Zv2WvdA/NH/9b8j+axV3pG/drnUaCxOR+xIPt74+sz997br7e2z+I8eeXT/1+363x0Rn/cZ//VDP7/aV/xDOv/lxzr/j1+4/dEXP/Rqv7/+761W6Wj+Sj/9X787+CTHDgAAAAAAALabQkTsi6RQXC8XCsXi2vMdh2JPoVKrN46dqy1dKMe1fWvPPxTaM937O56HmM6fh23XZx6qz0bEwYj4dmx3q16cq1XKww4eAAAAAAAAAAAAAAAAAAAAtom9Pf7+P/PH2LD3Dnjq/OQ3jK5N838Qv/QEbEv+/4fRJf9hdMl/GF3yH0aX/IfRJf9hdMl/GF3yHwAAAAAAAAAAAAAAAAAAAAAAAAAAAAbqzOnT2dJcvXdlLquXLy0vLdQuHS+n9YVidWmuOFdbvFicr9XmK2lxrlbd7PMqtdrF6ZlYujzVSOuNqfryytlqbelC4+z5amk+PZtOPJOoAAAAAAAAAAAAAAAAAAAA4PlSX15ZKFUq6aKCwpYK49tjNxQGXBh2zwQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA9/0XAAD//zWdOco=") sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4c840) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) quotactl$Q_QUOTAON(0xffffffff80000201, &(0x7f0000000180)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='cgroup.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x8042, 0x60) setsockopt$inet_MCAST_MSFILTER(0xffffffffffffffff, 0x0, 0x30, &(0x7f00000003c0)={0xfffff676, {{0x2, 0x4e24, @broadcast}}, 0x1, 0x3, [{{0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x27}}}, {{0x2, 0x4e23, @broadcast}}, {{0x2, 0x4e22, @multicast1}}]}, 0x210) unlink(&(0x7f0000000280)='./file1\x00') pwrite64(r1, &(0x7f0000000800)="0ebc", 0x2, 0x8080c61) 4m35.969307322s ago: executing program 2 (id=246): socket$alg(0x26, 0x5, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x10000, 0x0) r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000300), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000640)=0x1800, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x14, 0x8, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0x3}}, 0x14}, 0x1, 0x0, 0x0, 0xc090}, 0x4000) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000008c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f00000003c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000000700000008000300", @ANYRES32=r3, @ANYBLOB="140004006e696376663000000000000000000000080005000a00"], 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x2400c890) 4m32.895510093s ago: executing program 2 (id=253): openat$vmci(0xffffffffffffff9c, 0x0, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r0, 0x0) setpgid(0x0, r0) mount$9p_fd(0x0, &(0x7f00000001c0)='./file1\x00', 0x0, 0x10000, 0x0) r1 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) ioctl$AUTOFS_IOC_READY(r1, 0x9360, 0x800000000000001) 4m32.689375613s ago: executing program 2 (id=255): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = signalfd(0xffffffffffffffff, &(0x7f00000002c0)={[0x6]}, 0x8) move_mount(r1, 0x0, r1, 0x0, 0x76) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) r2 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd25, 0x0, {0x60, 0x0, 0x0, r4, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xa}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x0, 0xfffd, 0x0, 0x9, 0x5}, {0x1a, 0x0, 0x0, 0x401, 0x8001, 0x401400}, 0xa5, 0x5, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40}, 0x44080) sendmsg$nl_route_sched(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000180)=@newqdisc={0x4c, 0x24, 0xd0f, 0x70bd2c, 0x25dfdbfb, {0x60, 0x0, 0x0, r4, {0x0, 0x7}, {0xffe0, 0xa}, {0x1, 0xe}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x1c, 0x2, [@TCA_CODEL_INTERVAL={0x8, 0x3, 0x7d}, @TCA_CODEL_TARGET={0x8, 0x1, 0x8}, @TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0x2}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x55}, 0xc810) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0) 4m32.177467088s ago: executing program 2 (id=263): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, 0x0, 0x280c0) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x4, &(0x7f0000000080)=[{&(0x7f0000000200)="2e0400001c008102e00f80ecdb4cb9f207c804a00d00000088081afb0a0002000a0ada1b40d80800c500c50083b8", 0xfec9}], 0x1, 0x0, 0x0, 0x5865}, 0x0) sendmsg$nl_generic(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x44048947}, 0x28000) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x746f2f51, &(0x7f0000000080)=[{&(0x7f0000000040)="3f0400001c00810ce00f80ecdb4cb9f207c804a01f000000400006fb0a0002000a0ada1b40d80300000000000000", 0xfec9}], 0x1, 0x0, 0x0, 0x5865}, 0x0) 4m32.040747635s ago: executing program 33 (id=263): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, 0x0, 0x280c0) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x4, &(0x7f0000000080)=[{&(0x7f0000000200)="2e0400001c008102e00f80ecdb4cb9f207c804a00d00000088081afb0a0002000a0ada1b40d80800c500c50083b8", 0xfec9}], 0x1, 0x0, 0x0, 0x5865}, 0x0) sendmsg$nl_generic(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x44048947}, 0x28000) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x746f2f51, &(0x7f0000000080)=[{&(0x7f0000000040)="3f0400001c00810ce00f80ecdb4cb9f207c804a01f000000400006fb0a0002000a0ada1b40d80300000000000000", 0xfec9}], 0x1, 0x0, 0x0, 0x5865}, 0x0) 2m7.72795794s ago: executing program 5 (id=897): dup2(0xffffffffffffffff, 0xffffffffffffffff) sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000003fc0), 0x0, 0x4000) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) bind$netlink(r1, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=@newlink={0x34, 0x10, 0x40d, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r2, 0x1, 0xc000}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bond={{0x9}, {0x4}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x404c084}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="540000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800e0001006970366772657461700000001800028014000700ff01000000000000000000000000000108000a00", @ANYRES32=r5], 0x54}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000007080)=@dellink={0x20, 0x11, 0x1, 0x70bd2c, 0x25dfdbfe, {0x0, 0x0, 0x0, r2, 0x24204}}, 0x20}}, 0x0) 2m4.259536941s ago: executing program 5 (id=910): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x8, 0xc}, 0x50) r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 2m4.183202754s ago: executing program 5 (id=912): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2a, 0xa9}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = add_key(&(0x7f00000013c0)='big_key\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000100)='[', 0xfe95, 0xffffffffffffffff) keyctl$revoke(0x3, r3) 2m2.991353713s ago: executing program 5 (id=913): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x1a00444, &(0x7f0000000080)={[{@grpquota}, {@noblock_validity}]}, 0x1, 0xbbb, &(0x7f0000001800)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='freezer.parent_freezing\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000002c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x3000046, &(0x7f00000000c0), 0x1, 0x55c, &(0x7f00000003c0)="$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") r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000100)='./bus\x00', 0x0, 0x63d014, 0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x185102, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2, 0x28011, r2, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000400)={0x2, 0x4e20, @remote}, 0x10) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r1, 0xc0185879, &(0x7f0000000080)={@desc={0x1, 0x0, @desc3}}) 2m0.643783518s ago: executing program 5 (id=922): r0 = socket(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000010c0)=ANY=[@ANYBLOB="200000001600010a00000000000000"], 0x20}, 0x1, 0x0, 0x0, 0x20040041}, 0x0) 1m54.468086002s ago: executing program 5 (id=946): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f00000000c0), 0x10) r3 = dup3(r2, r1, 0x0) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) r6 = socket$unix(0x1, 0x5, 0x0) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="0100000003ece1e40ad8871461ab0800", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r6, @ANYBLOB="3bf81bb9f9"], 0x20000600}}, 0x0) sendmsg$can_bcm(r3, &(0x7f0000000080)={&(0x7f00000001c0)={0x1d, r5, 0x3f420f00}, 0x10, &(0x7f0000000240)={&(0x7f0000000580)=ANY=[], 0x4640}, 0x2}, 0x2c004000) sendmsg$can_bcm(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x5, 0x823, 0x0, {0x0, 0xea60}, {0x0, 0x2710}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "ce7ffe681c735b5719cfc914234834162f4d55e5827a4fa9d907b30dee5f9af3dc029871384dcbed5f13a5464083101fd2055f2c4271f73e269eef4e7cc3151d"}}, 0x80}}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 1m54.081922651s ago: executing program 34 (id=946): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f00000000c0), 0x10) r3 = dup3(r2, r1, 0x0) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) r6 = socket$unix(0x1, 0x5, 0x0) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="0100000003ece1e40ad8871461ab0800", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r6, @ANYBLOB="3bf81bb9f9"], 0x20000600}}, 0x0) sendmsg$can_bcm(r3, &(0x7f0000000080)={&(0x7f00000001c0)={0x1d, r5, 0x3f420f00}, 0x10, &(0x7f0000000240)={&(0x7f0000000580)=ANY=[], 0x4640}, 0x2}, 0x2c004000) sendmsg$can_bcm(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x5, 0x823, 0x0, {0x0, 0xea60}, {0x0, 0x2710}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "ce7ffe681c735b5719cfc914234834162f4d55e5827a4fa9d907b30dee5f9af3dc029871384dcbed5f13a5464083101fd2055f2c4271f73e269eef4e7cc3151d"}}, 0x80}}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 22.275311765s ago: executing program 7 (id=1313): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) r2 = open(&(0x7f0000000040)='./bus\x00', 0x143142, 0x80) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x1c1840, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000e80)='./bus\x00', 0x1c1002, 0x0) write(r4, &(0x7f0000004200)='t', 0x1) sendfile(r4, r3, 0x0, 0x7fffffff) ftruncate(r2, 0x2007ffb) sendfile(r2, r2, 0x0, 0x1000000201005) 19.971813588s ago: executing program 7 (id=1311): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) close(0x3) shutdown(0xffffffffffffffff, 0x0) sendmsg$inet6(r1, &(0x7f0000000540)={&(0x7f0000000000)={0xa, 0x4e24, 0x7fff, @loopback, 0x6}, 0x1c, &(0x7f0000000440)=[{&(0x7f0000000040)}], 0x1}, 0x54) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=@base={0xb, 0x5, 0x400, 0x9, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r5, r3, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0x7e, &(0x7f0000000080)=ANY=[], 0x0) 17.88720503s ago: executing program 7 (id=1318): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00}, 0x94) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) fcntl$F_SET_FILE_RW_HINT(r1, 0x40e, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r2 = mq_open(&(0x7f0000000000)='!selinu\xff\x7f\x00\x00inux\x00T\x8b\xb5\xf3\xcb\xdd\xe3\xbf2\x86\x01\x84\xdd\x8a\x8f_l\xa1L\xb1\xef\xb2\xc9\xf7+C\xb2\x8e9\xb8\xec\x1a\xe5\xaeq\x8fZ\xff\xbcY+\xaf0<\xa3\xb8\"Zm\x1c\x18\x11\x93\xb5z \xc2\x8b\xa9\xc5\x9es\t\xfe\x002\xa0-\xaf\xcdP\x9f\xe5Iv\xce*\xa8\xa3\x14i\x05\x8f\x9b\x1eB\x9f\x9d#E\x19\xdc\xfe\xc7\xeb\xb5\xcd\xc8\xe2U\xce\x00\x00', 0x6e93ebbbcc0884f2, 0x2c, &(0x7f0000000300)={0x0, 0x1, 0x3}) mq_timedsend(r2, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r2, 0x0, 0x0, 0xa, 0x0) 16.752286896s ago: executing program 7 (id=1323): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x800000, &(0x7f0000000200)=ANY=[@ANYBLOB="616c6c6f775f7574696d653d30303030303030303030303030303136323134372c756e695f786c6174653d302c73686f72746e616d653d6d697865642c73686f72746e616d653d77696e6e742c696f636861727365743d6d61637475726b6973682c6e6f6e756d7461696c3d302c696f636861727365743d6b6f69382d72752c756e695f786c6174653d302c696f636861727365743d757466382c6572726f72733d636f6e74696e75652c73686f72746e616d653d6d697865642c73686f72746e616d653d77696e39352c7379735f696d6d757461626c652c757466383d302c0074c3fc52ac6365d676e1"], 0x1, 0x3b6, &(0x7f00000006c0)="$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") chdir(0x0) open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x8000, 0xa0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x8005, 0x0, 0x0, 0x12, 0xd, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x204]}) r1 = socket$inet6(0xa, 0x3, 0x6) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r1, 0x6612) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x80800, 0x0) mount$9p_fd(0x0, &(0x7f0000000200)='./file1\x00', 0x0, 0x10, &(0x7f00000004c0)=ANY=[]) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) 14.117317606s ago: executing program 7 (id=1331): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) getpid() syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$inet6(0xa, 0x80003, 0xff) socket$inet6(0xa, 0x3, 0xff) setsockopt$inet6_int(r2, 0x29, 0x16, &(0x7f0000fcb000), 0x4) close_range(r1, 0xffffffffffffffff, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00') 12.741242464s ago: executing program 7 (id=1341): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x19, 0x4, 0x4, 0x5}, 0x50) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xc8) chdir(&(0x7f0000000240)='./file0\x00') write$FUSE_INIT(0xffffffffffffffff, &(0x7f00000001c0)={0x50, 0x0, 0x0, {0x7, 0x2d, 0x7, 0x800, 0x1, 0x4a0, 0x2, 0x2, 0x0, 0x0, 0x100, 0x7}}, 0x50) open_tree(0xffffffffffffff9c, 0x0, 0x89901) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008900000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r3, r1}, 0x14) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r2}, &(0x7f0000000380), &(0x7f0000000580)=r3}, 0x20) syz_emit_ethernet(0x6e, &(0x7f00000007c0)={@local, @empty, @val={@val={0x88a8, 0x6, 0x1}, {0x8100, 0x5, 0x0, 0x2}}, {@mpls_mc={0x8848, {[], @ipv6=@icmpv6={0x7, 0x6, "b599fd", 0x30, 0x3a, 0x1, @private2={0xfc, 0x2, '\x00', 0x1}, @local, {[], @param_prob={0x4, 0x2, 0x0, 0x4200, {0x3, 0x6, "540df0", 0x9, 0x2, 0xff, @local, @loopback}}}}}}}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) 12.538244173s ago: executing program 35 (id=1341): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x19, 0x4, 0x4, 0x5}, 0x50) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xc8) chdir(&(0x7f0000000240)='./file0\x00') write$FUSE_INIT(0xffffffffffffffff, &(0x7f00000001c0)={0x50, 0x0, 0x0, {0x7, 0x2d, 0x7, 0x800, 0x1, 0x4a0, 0x2, 0x2, 0x0, 0x0, 0x100, 0x7}}, 0x50) open_tree(0xffffffffffffff9c, 0x0, 0x89901) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008900000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r3, r1}, 0x14) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r2}, &(0x7f0000000380), &(0x7f0000000580)=r3}, 0x20) syz_emit_ethernet(0x6e, &(0x7f00000007c0)={@local, @empty, @val={@val={0x88a8, 0x6, 0x1}, {0x8100, 0x5, 0x0, 0x2}}, {@mpls_mc={0x8848, {[], @ipv6=@icmpv6={0x7, 0x6, "b599fd", 0x30, 0x3a, 0x1, @private2={0xfc, 0x2, '\x00', 0x1}, @local, {[], @param_prob={0x4, 0x2, 0x0, 0x4200, {0x3, 0x6, "540df0", 0x9, 0x2, 0xff, @local, @loopback}}}}}}}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) 5.773160196s ago: executing program 0 (id=1372): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000000300)=""/102392, 0x18ff8) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000400)=ANY=[@ANYBLOB="1400000010000100f7000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc08000340000000144c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a3100000000200003801c0000800c00018006000100d10300000c000440000000000000000114000000110001"], 0xb8}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000018000000000000000000500000a480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c0001c006000100d903"], 0x70}, 0x1, 0x0, 0x0, 0x40008d0}, 0x40) sendmsg$NFT_BATCH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x0) 5.605287794s ago: executing program 4 (id=1373): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) io_uring_setup(0x39e1, &(0x7f0000000bc0)={0x0, 0x49fd, 0x12, 0x400, 0x320}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@struct={0x0, 0x1, 0x0, 0x4, 0x1, 0xffffffff, [{0x0, 0x2, 0x20000000}]}, @restrict={0x0, 0x0, 0x0, 0x6, 0x2}]}}, 0x0, 0x3e}, 0x20) 5.539603498s ago: executing program 0 (id=1375): pwrite64(0xffffffffffffffff, &(0x7f0000000000)="3703c70f70e244b7878fedf0c0c6c2ff2f524255d61dbfb2", 0x18, 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r2, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 5.347445087s ago: executing program 6 (id=1376): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) write$P9_RLERRORu(0xffffffffffffffff, 0x0, 0x10) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r3, 0xc004500a, &(0x7f00000000c0)=0x3) 4.540911037s ago: executing program 4 (id=1377): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x87}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000a, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x30, r4, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x214e}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg2\x00'}]}, 0x30}}, 0x800) 4.4812485s ago: executing program 3 (id=1378): r0 = gettid() timer_create(0x8, &(0x7f00000000c0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0xffff, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file2\x00', 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000003740)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000c00)="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", 0x719}], 0x1}}], 0x1, 0x0) syz_mount_image$fuse(&(0x7f0000000000), &(0x7f0000000280)='./file0\x00', 0x14a0, &(0x7f0000000180)=ANY=[], 0x1, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_percpu\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r1, 0xc0189436, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x5f, 0x3}) 4.4688324s ago: executing program 0 (id=1379): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x80000) r1 = mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x1000002, 0x4018831, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x80801) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000240)={{&(0x7f0000ffa000/0x3000)=nil, 0x3000}, 0x1}) syz_memcpy_off$KVM_EXIT_HYPERCALL(r1, 0x20, &(0x7f0000000000)="0900bf65653f47f4020000008bd458d1e7cbdaf300000f34e7e4165f081ae36850f6d15c3e681411f7a496c0da04003c242f5bedaf6bec340dee49474362b24cb800edc500", 0x0, 0x48) ioctl$UFFDIO_WAKE(r2, 0x8010aa02, &(0x7f0000000100)={&(0x7f0000ffb000/0x1000)=nil, 0x1000}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 4.403836784s ago: executing program 6 (id=1380): ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x0, 0x7ff, 0x0, 0x81, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x7, 0x0, 0x5, 0x0, 0x2, 0x3], 0x0, 0x200}) rseq(&(0x7f0000000040)={0x0, 0x0, 0x0, 0x5}, 0x20, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004004}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x100000000, 0x0, 0x7f, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x4, 0x0, 0x7, 0x0, 0x5, 0x0, 0x2, 0xffffffffffffffff], 0x0, 0x200}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x8000000000000001, 0x5, 0x6, 0x4002, 0x5, 0x37, 0xefffffffffffffff, 0x0, 0x0, 0x2000005, 0xfffffffface6e3cd, 0x40000000001c, 0x1, 0xffffffffffffffff, 0xfd]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 4.200548604s ago: executing program 3 (id=1381): syz_open_dev$sndpcmp(0x0, 0x1, 0x4c0100) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c0000005e00679a3601ffc4910710007e570966f4366ec9d4"], 0x1c}, 0x1, 0x0, 0x0, 0x4004}, 0x0) 3.337372856s ago: executing program 4 (id=1382): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) listen(0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp6\x00') r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x4) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, 0x0, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) r2 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, 0x0, 0x0) setregid(0xffffffffffffffff, 0x0) preadv(r0, 0x0, 0x0, 0x141, 0x0) 2.818076031s ago: executing program 3 (id=1383): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) setxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)=@known='trusted.overlay.impure\x00', 0x0, 0x0, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_GET_STATS_FD_cpu(0xffffffffffffffff, 0xaece) alarm(0x100000001) mkdir(0x0, 0x18b) chroot(&(0x7f0000000100)='./file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x2a05004, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84000, 0x0) syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000080)='./bus\x00', 0x4000000, &(0x7f0000000140)=ANY=[], 0x1, 0x54d, &(0x7f00000015c0)="$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") 2.813418922s ago: executing program 6 (id=1384): r0 = socket(0x2a, 0x2, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=@migrate={0x50, 0x21, 0x1, 0x0, 0x0, {{@in=@multicast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}}}, 0x50}}, 0x0) getsockname$packet(r0, &(0x7f0000000540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) r2 = socket(0x2a, 0x2, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newqdisc={0x44, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x3, 0x1}}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r1, {0x5}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_basic={{0xa}, {0x4}}]}, 0x34}}, 0x4000) r4 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=@newqdisc={0x24, 0x29, 0xa19702d202eff97b, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}, {0x0, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x400dc}, 0x4000080) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x6, 0x0, 0x0) 2.751183725s ago: executing program 4 (id=1385): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000080)=0xa0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000000)={@my=0x0}) ioctl$IOCTL_VMCI_DATAGRAM_SEND(r0, 0x7ab, &(0x7f0000000280)={&(0x7f0000000780)={{@my=0x0}, {@my=0x0, 0x800000}, 0x400, "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"}, 0x418}) syz_open_dev$dvb_frontend(&(0x7f0000000000), 0x0, 0x40002) r1 = syz_io_uring_setup(0x110, &(0x7f00000003c0)={0x0, 0xfad6, 0x800, 0x1, 0x3}, &(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x0) r4 = openat$urandom(0xffffffffffffff9c, 0x0, 0x2000, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$iso9660(&(0x7f0000000240), &(0x7f0000000300)='./file1\x00', 0x0, &(0x7f0000000000)=ANY=[], 0x5, 0x80a, &(0x7f0000000340)="$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") ioctl$RNDADDTOENTCNT(r4, 0x40045201, &(0x7f0000000100)=0x80400000) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x2045}}) io_uring_enter(r1, 0x133d, 0x0, 0x8, 0x0, 0x0) 2.620720782s ago: executing program 3 (id=1386): openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_io_uring_setup(0x40f, &(0x7f0000000000), &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_setup(0x2bac, &(0x7f0000000340), &(0x7f0000000100)=0x0, &(0x7f0000000000)) syz_io_uring_submit(r6, r5, &(0x7f0000000100)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x2a, 0x4007, @fd_index=0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0xfffe}}) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x40, &(0x7f0000000140)=0x80000004, 0x0, 0x4) io_uring_enter(r3, 0x1469, 0x0, 0x0, 0x0, 0x0) 2.183802093s ago: executing program 6 (id=1387): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000400)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_buf(r3, 0x6, 0x21, 0x0, 0x0) getsockopt$inet6_tcp_buf(r3, 0x6, 0x21, 0x0, &(0x7f0000000140)) 2.183046403s ago: executing program 4 (id=1396): openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x1) syz_usbip_server_init(0x1) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0xfe, 0x7fff0006}]}) r2 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000240), 0xa2003, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r2, 0xc0184800, &(0x7f0000000100)={0x20004, r1}) 2.110622206s ago: executing program 0 (id=1388): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) io_uring_setup(0x39e1, &(0x7f0000000bc0)={0x0, 0x49fd, 0x12, 0x400, 0x320}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@struct={0x0, 0x1, 0x0, 0x4, 0x1, 0xffffffff, [{0x0, 0x2, 0x20000000}]}, @restrict={0x0, 0x0, 0x0, 0x6, 0x2}]}}, 0x0, 0x3e}, 0x20) 1.329978225s ago: executing program 3 (id=1389): socket$nl_xfrm(0x10, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_udp_int(r3, 0x11, 0x1, &(0x7f00000001c0)=0x6, 0x4) sendmmsg$inet6(r3, &(0x7f0000000740)=[{{&(0x7f0000000100)={0x2, 0x4e21, 0x0, @empty}, 0x1c, 0x0}}], 0x300, 0x0) 1.084797437s ago: executing program 0 (id=1390): r0 = io_uring_setup(0x756b, &(0x7f0000000040)={0x0, 0xc8a1, 0x40, 0x8, 0xc1}) r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) fcntl$lock(r0, 0x26, &(0x7f0000000200)={0x0, 0x1, 0x1006, 0xffffffffffffffff, r1}) r2 = syz_io_uring_setup(0x749, &(0x7f0000000100)={0x0, 0xef9d, 0x0, 0x3, 0x5cc, 0x0, r0}, &(0x7f0000000300)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f0000000040)=[{&(0x7f00000003c0)=""/193, 0xc1}], 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_ACCEPT={0xd, 0xc, 0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x81800, 0x1}) r5 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)={0x18, 0x140f, 0x1, 0x70bd2a, 0x0, "", [@RDMA_NLDEV_ATTR_CHARDEV_TYPE={0x8, 0x45, 'mad\x00'}]}, 0x18}}, 0x0) io_uring_enter(r2, 0x749f, 0x4, 0x0, 0x0, 0xfffffffffffffef5) 1.073930287s ago: executing program 6 (id=1391): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x3, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_GET_IRQCHIP(r1, 0xc208ae62, &(0x7f0000000200)={0x0, 0x0, @ioapic}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100), r2) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/pm_test', 0x141a82, 0x0) sendfile(r4, r4, &(0x7f0000000000)=0x7, 0x4) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={0x3c, r3, 0x403, 0x70bd29, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x10000}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4024040}, 0x40894) r5 = socket(0x11, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r5, 0x8918, &(0x7f0000000480)={'veth1_macvtap\x00', {0x2, 0x0, @empty=0xcf050000}}) r6 = socket$netlink(0x10, 0x3, 0x400000000000004) writev(r6, &(0x7f0000000000)=[{&(0x7f0000000200)="480000001400190d7ebdeb75fd0d8c562c84d8c033ed7a80fae0090f000000000000a2bc5603ca00000f7f89000000200000004a2471083ec6811778581acb6c0101ff0000000309", 0x48}], 0x1) 206.73105ms ago: executing program 3 (id=1392): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000002440), 0x40, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$MRT_ADD_VIF(0xffffffffffffffff, 0x0, 0xca, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000300)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xd}, {0xffff, 0xffff}, {0x3}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x14, 0x2, [@TCA_FQ_CE_THRESHOLD={0x8, 0xc, 0x7}, @TCA_FQ_FLOW_MAX_RATE={0x8, 0x7, 0x7fffffff}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r6 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r6, &(0x7f0000002400), 0x0, 0x20004853, &(0x7f00000001c0)={0x11, 0x88a8, r3, 0x1, 0x3, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x26}}, 0x14) 156.867032ms ago: executing program 0 (id=1393): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket(0x2, 0x80805, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_MCAST_RATE(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)={0x24, r4, 0x1, 0x70bd2a, 0x65dfdbfb, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xa}]}, 0x24}, 0x1, 0x0, 0x0, 0x44001}, 0xc800) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={0x0}, 0x0) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, 0x0, &(0x7f00000000c0)) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, 0x0, &(0x7f0000000080)) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r2, 0x8982, &(0x7f00000001c0)={0x1, 'ipvlan1\x00', {}, 0x4}) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000040)=@sack_info={r6, 0x2, 0x10001}, 0xc) 62.766837ms ago: executing program 6 (id=1394): syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000700)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f00000012c0), 0xfe, 0x244, &(0x7f0000000400)="$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") openat(0xffffffffffffff9c, &(0x7f00000002c0)='.\x00', 0x0, 0x0) r0 = socket$inet(0x2, 0x3, 0x100) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000500)=0x8, 0x4) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @local}, 0x3c) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @broadcast}, 0x10) close(0x3) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000080)="13", 0x1}], 0x1}, 0x4051) sendmmsg$inet(r0, &(0x7f00000007c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x80) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="5c00000002060108000000000000000000000000050005000a000000050001000700000005000400000000000900020073797a310000000015000300686173683a69702c706f72742c6e6574000000000c00078008000640"], 0x5c}}, 0x20084884) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) 0s ago: executing program 4 (id=1395): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='.\x00', 0x0, 0x124) r1 = fanotify_init(0x4, 0x1000) fanotify_mark(r1, 0x141, 0x40001029, r0, 0x0) r2 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) mkdirat(r2, &(0x7f0000000340)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) r3 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000680)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, 0x10) r5 = fanotify_init(0xf00, 0x0) fanotify_mark(r5, 0x1, 0x5000003a, r4, 0x0) mkdirat(r3, &(0x7f0000000440)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00', 0x0) r6 = open(&(0x7f0000000200)='.\x00', 0x400, 0x0) renameat2(r6, &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00', r6, &(0x7f00000002c0)='./file0\x00', 0x2) kernel console output (not intermixed with test programs): 7][ T4370] binder: 4367:4370 ioctl c0306201 2000000003c0 returned -14 [ 61.989536][ T4174] udevd[4174]: setting owner of /dev/input/event4 to uid=0, gid=104 failed: No such file or directory [ 62.263702][ T4386] loop0: detected capacity change from 0 to 512 [ 62.303402][ T4386] ======================================================= [ 62.303402][ T4386] WARNING: The mand mount option has been deprecated and [ 62.303402][ T4386] and is ignored by this kernel. Remove the mand [ 62.303402][ T4386] option from the mount to silence this warning. [ 62.303402][ T4386] ======================================================= [ 62.429651][ T4386] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 62.748075][ T4339] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 63.845519][ T4405] loop1: detected capacity change from 0 to 32768 [ 64.046686][ T4405] (syz.1.47,4405,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 64.147408][ T4405] (syz.1.47,4405,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 64.243821][ T4405] JBD2: Ignoring recovery information on journal [ 64.585096][ T4425] tipc: Started in network mode [ 64.729627][ T4425] tipc: Node identity 46a9e5a80c95, cluster identity 4711 [ 64.943447][ T4425] tipc: Enabled bearer , priority 0 [ 65.262597][ T4405] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 65.283586][ T4421] device syzkaller0 entered promiscuous mode [ 65.371498][ T4420] tipc: Resetting bearer [ 65.484983][ T4420] tipc: Disabling bearer [ 65.514298][ T4427] netlink: 12 bytes leftover after parsing attributes in process `syz.0.56'. [ 65.553219][ T151] bond0: (slave bond_slave_0): interface is now down [ 65.576335][ T151] bond0: (slave bond_slave_1): interface is now down [ 65.593616][ T4434] bond0: ARP monitoring cannot be used with MII monitoring [ 65.603057][ T26] audit: type=1800 audit(1773749645.517:3): pid=4405 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.47" name="file1" dev="loop1" ino=16980 res=0 errno=0 [ 65.635976][ T4436] Zero length message leads to an empty skb [ 65.775969][ T4442] Illegal XDP return value 4294967274, expect packet loss! [ 65.787847][ T4437] loop_set_status: loop1 () has still dirty pages (nrpages=11) [ 66.009278][ T4450] process 'syz.3.60' launched '/dev/fd/4' with NULL argv: empty string added [ 66.243391][ T4457] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 66.244412][ T4405] syz.1.47 (4405) used greatest stack depth: 18008 bytes left [ 66.557396][ T4187] ocfs2: Unmounting device (7,1) on (node local) [ 66.692446][ T4472] netlink: 'syz.2.69': attribute type 10 has an invalid length. [ 66.803179][ T4335] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 66.859476][ T4472] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 67.071398][ T4335] usb 5-1: Using ep0 maxpacket: 32 [ 67.197427][ T4335] usb 5-1: config 0 has an invalid interface number: 196 but max is 0 [ 67.206059][ T4335] usb 5-1: config 0 has no interface number 0 [ 67.243347][ T4335] usb 5-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 67.296106][ T4335] usb 5-1: config 0 interface 196 has no altsetting 0 [ 67.507339][ T4335] usb 5-1: New USB device found, idVendor=05ac, idProduct=7700, bcdDevice=eb.3a [ 67.527127][ T4335] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 67.535152][ T4335] usb 5-1: Product: syz [ 67.577058][ T4335] usb 5-1: Manufacturer: syz [ 67.581705][ T4335] usb 5-1: SerialNumber: syz [ 67.622854][ T4335] usb 5-1: config 0 descriptor?? [ 67.678681][ T4465] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 67.757236][ T7] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 68.003596][ T4497] loop2: detected capacity change from 0 to 32768 [ 68.027454][ T7] usb 1-1: Using ep0 maxpacket: 16 [ 68.137625][ T4497] XFS (loop2): Mounting V5 Filesystem [ 68.252476][ T7] usb 1-1: unable to get BOS descriptor or descriptor too short [ 68.325546][ T4507] loop3: detected capacity change from 0 to 32768 [ 68.355575][ T4497] XFS (loop2): Ending clean mount [ 68.377471][ T7] usb 1-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 68.407301][ T7] usb 1-1: config 8 has 0 interfaces, different from the descriptor's value: 1 [ 68.429909][ T4507] gfs2: can't find protocol l [ 68.471912][ T4497] XFS (loop2): Quotacheck needed: Please wait. [ 68.581597][ T4497] XFS (loop2): Quotacheck: Done. [ 68.647348][ T7] usb 1-1: New USB device found, idVendor=0424, idProduct=c001, bcdDevice=e2.0c [ 68.656453][ T7] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 68.753541][ T7] usb 1-1: Product: syz [ 68.773162][ T7] usb 1-1: Manufacturer: syz [ 68.794364][ T7] usb 1-1: SerialNumber: syz [ 68.976425][ T310] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 69.014779][ T4518] chnl_net:caif_netlink_parms(): no params data found [ 69.210874][ T7] usb 1-1: USB disconnect, device number 2 [ 69.228374][ T4188] XFS (loop2): Unmounting Filesystem [ 69.729452][ T310] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.057621][ T4335] ipheth 5-1:0.196: ipheth_get_macaddr: usb_control_msg: -71 [ 70.066226][ T4335] ipheth: probe of 5-1:0.196 failed with error -71 [ 70.104331][ T310] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.253068][ T4335] usb 5-1: USB disconnect, device number 2 [ 70.321816][ T4518] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.340564][ T4226] Bluetooth: hci1: command 0x0409 tx timeout [ 70.352830][ T4518] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.675557][ T4518] device bridge_slave_0 entered promiscuous mode [ 71.128927][ T4540] netlink: 'syz.3.84': attribute type 4 has an invalid length. [ 71.241423][ T310] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.327330][ T4541] netlink: 'syz.3.84': attribute type 4 has an invalid length. [ 71.350083][ T4518] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.392938][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.399556][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.408749][ T4518] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.427132][ T4518] device bridge_slave_1 entered promiscuous mode [ 71.435757][ T4549] loop4: detected capacity change from 0 to 2048 [ 71.494843][ T4518] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.546066][ T4518] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.558754][ T4549] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 72.499070][ T23] Bluetooth: hci1: command 0x041b tx timeout [ 72.557271][ T4518] team0: Port device team_slave_0 added [ 72.565258][ T4518] team0: Port device team_slave_1 added [ 72.602013][ T4518] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.609804][ T4518] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.650077][ T4518] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 72.775933][ T4518] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.794050][ T4518] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.825173][ T4518] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 73.064801][ T4565] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 73.116333][ T4565] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 73.182140][ T4565] bond1: (slave batadv_slave_1): Enslaving as a backup interface with an up link [ 73.288780][ T4518] device hsr_slave_0 entered promiscuous mode [ 73.304542][ T4518] device hsr_slave_1 entered promiscuous mode [ 73.324711][ T4518] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 73.343561][ T4518] Cannot create hsr debugfs directory [ 74.609398][ T4335] Bluetooth: hci1: command 0x040f tx timeout [ 74.639221][ T4518] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 74.677248][ T4606] netlink: 24 bytes leftover after parsing attributes in process `syz.3.98'. [ 74.696455][ T4518] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 75.151208][ T4518] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 75.249325][ T4604] sch_fq: defrate 53322 ignored. [ 75.418220][ T4518] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 75.615601][ T4518] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.720639][ T4369] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 75.730138][ T4369] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 75.742989][ T4518] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.761646][ T4369] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 75.777347][ T4369] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 75.786028][ T4369] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.793147][ T4369] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.827442][ T4369] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 75.847013][ T23] usb 5-1: new low-speed USB device number 3 using dummy_hcd [ 75.849572][ T4369] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 75.905136][ T4369] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 75.927813][ T4369] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.934953][ T4369] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.943602][ T4369] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 75.968454][ T4369] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 76.077168][ T4369] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 76.091831][ T4369] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 76.102556][ T4369] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 76.111445][ T4369] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 76.120505][ T4369] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 76.129117][ T4369] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 76.138129][ T4369] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 76.159011][ T4369] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 76.173913][ T4369] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 76.190837][ T4518] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 76.217092][ T23] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 76.236388][ T23] usb 5-1: config 0 has no interface number 0 [ 76.243624][ T23] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 76.257414][ T23] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 76.301639][ T23] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 76.331112][ T23] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 76.362337][ T23] usb 5-1: config 0 descriptor?? [ 76.396773][ T4650] netlink: 24 bytes leftover after parsing attributes in process `syz.2.105'. [ 76.407308][ T4619] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 76.475768][ T23] iowarrior 5-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 76.511828][ T1108] cfg80211: failed to load regulatory.db [ 76.665911][ T4258] Bluetooth: hci1: command 0x0419 tx timeout [ 76.728663][ T4258] usb 5-1: USB disconnect, device number 3 [ 76.734649][ T310] device hsr_slave_0 left promiscuous mode [ 76.737090][ C1] iowarrior 5-1:0.1: iowarrior_callback - usb_submit_urb failed with result -19 [ 76.750554][ T310] device hsr_slave_1 left promiscuous mode [ 76.783775][ T310] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 76.801513][ T310] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 76.826191][ T310] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 76.885244][ T310] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 77.057698][ T310] device bridge_slave_1 left promiscuous mode [ 77.068896][ T310] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.147089][ T4674] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 77.872126][ T310] device bridge_slave_0 left promiscuous mode [ 77.897300][ T310] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.105627][ T310] device veth1_macvtap left promiscuous mode [ 78.116468][ T310] device veth0_macvtap left promiscuous mode [ 78.226171][ T310] device veth1_vlan left promiscuous mode [ 78.288216][ T310] device veth0_vlan left promiscuous mode [ 79.630636][ T310] team0 (unregistering): Port device team_slave_1 removed [ 79.666923][ T310] team0 (unregistering): Port device team_slave_0 removed [ 79.695769][ T310] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 79.737993][ T310] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 79.888135][ T310] team0 (unregistering): Port device bridge0 removed [ 79.933506][ T310] bond0 (unregistering): Released all slaves [ 80.008834][ T4660] netlink: 8 bytes leftover after parsing attributes in process `syz.2.107'. [ 80.035492][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 80.045670][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 80.148476][ T4690] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 80.165680][ T4690] device batadv_slave_0 entered promiscuous mode [ 80.210486][ T4700] mmap: syz.3.110 (4700) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. [ 80.269410][ T4518] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.128549][ T4698] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 81.137650][ T4698] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 81.553958][ T4728] device syzkaller0 entered promiscuous mode [ 81.593543][ T4730] A link change request failed with some changes committed already. Interface ipvlan0 may have been left with an inconsistent configuration, please check. [ 81.765281][ T1509] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 81.791024][ T1509] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 81.877772][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 81.902466][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 81.948932][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 82.003061][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 82.032386][ T4518] device veth0_vlan entered promiscuous mode [ 82.075082][ T4518] device veth1_vlan entered promiscuous mode [ 82.105962][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 82.221280][ T4369] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 82.248512][ T4369] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 82.300119][ T4518] device veth0_macvtap entered promiscuous mode [ 82.347853][ T4518] device veth1_macvtap entered promiscuous mode [ 82.404840][ T4518] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.416051][ T4758] APIC base relocation is unsupported by KVM [ 82.456008][ T4518] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.486598][ T4518] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.516790][ T4518] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.546734][ T4518] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.566726][ T4518] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.593597][ T4518] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.619490][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 82.638684][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 82.659578][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 82.705518][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 82.748358][ T4518] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.767354][ T4518] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.823723][ T4518] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.862122][ T4518] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.267561][ T4518] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.477864][ T4518] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.648899][ T4518] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.773185][ T4518] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.802397][ T4518] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.836284][ T4518] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.862427][ T4518] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.901882][ T4773] kvm: pic: non byte read [ 83.976147][ T4773] kvm: pic: non byte read [ 84.068883][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 84.175409][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 84.276752][ T4773] kvm: pic: non byte read [ 84.648699][ T4773] kvm: pic: non byte read [ 84.653230][ T4773] kvm: pic: non byte read [ 84.658221][ T4773] kvm: pic: non byte read [ 84.662682][ T4773] kvm: pic: non byte read [ 84.667387][ T4773] kvm: pic: non byte read [ 84.671876][ T4773] kvm: pic: non byte read [ 84.676345][ T4773] kvm: pic: non byte read [ 84.681794][ T4773] kvm: pic: level sensitive irq not supported [ 84.682921][ T4773] kvm: pic: single mode not supported [ 84.690068][ T4773] kvm: pic: single mode not supported [ 84.695594][ T4773] kvm: pic: level sensitive irq not supported [ 84.701940][ T4773] kvm: pic: single mode not supported [ 85.745477][ T4798] netlink: 24 bytes leftover after parsing attributes in process `syz.0.139'. [ 85.914550][ T4799] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 85.932579][ T4799] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 85.953452][ T4799] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 85.989059][ T4799] device bridge_slave_0 left promiscuous mode [ 86.011781][ T4799] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.086536][ T4799] device bridge_slave_1 left promiscuous mode [ 86.117945][ T4799] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.153428][ T4799] bond0: (slave bond_slave_0): Releasing backup interface [ 86.185413][ T4799] bond0: (slave bond_slave_1): Releasing backup interface [ 86.253392][ T4799] team0: Port device team_slave_0 removed [ 86.288605][ T4799] team0: Port device team_slave_1 removed [ 86.295211][ T4799] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 86.323234][ T4799] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 86.334746][ T4799] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 86.353571][ T4799] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 86.421337][ T4814] device syzkaller1 entered promiscuous mode [ 86.468474][ T1509] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.475696][ T4801] team0: Mode changed to "loadbalance" [ 86.496006][ T1509] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.537971][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 87.323749][ T4275] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.383401][ T4275] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.487626][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 87.596711][ T4847] netlink: 'syz.3.147': attribute type 21 has an invalid length. [ 87.630650][ T4847] netlink: 'syz.3.147': attribute type 6 has an invalid length. [ 87.819174][ T4847] netlink: 132 bytes leftover after parsing attributes in process `syz.3.147'. [ 88.697241][ T4866] input: syz1 as /devices/virtual/input/input6 [ 92.987902][ T4918] netlink: 52 bytes leftover after parsing attributes in process `syz.5.165'. [ 93.061551][ T4918] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.069752][ T4918] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.357514][ T4927] sock: sock_set_timeout: `syz.5.168' (pid 4927) tries to set negative timeout [ 93.896233][ T4949] overlayfs: failed to clone upperpath [ 94.228093][ T4966] loop2: detected capacity change from 0 to 512 [ 94.306321][ T4964] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 94.321080][ T4966] EXT4-fs (loop2): Ignoring removed nobh option [ 94.346128][ T4966] EXT4-fs (loop2): Ignoring removed nobh option [ 94.364437][ T4966] EXT4-fs (loop2): Ignoring removed orlov option [ 94.410072][ T26] audit: type=1326 audit(1773749674.328:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4970 comm="syz.0.180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f089fbd5799 code=0x7ffc0000 [ 94.521723][ T26] audit: type=1326 audit(1773749674.338:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4970 comm="syz.0.180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f089fbd5799 code=0x7ffc0000 [ 94.646485][ T26] audit: type=1326 audit(1773749674.338:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4970 comm="syz.0.180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f089fbd5799 code=0x7ffc0000 [ 94.771774][ T26] audit: type=1326 audit(1773749674.348:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4970 comm="syz.0.180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f089fbd5799 code=0x7ffc0000 [ 94.798077][ T26] audit: type=1326 audit(1773749674.348:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4970 comm="syz.0.180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f089fbd5799 code=0x7ffc0000 [ 94.832099][ T26] audit: type=1326 audit(1773749674.358:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4970 comm="syz.0.180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f089fbd5799 code=0x7ffc0000 [ 94.875994][ T21] usb 4-1: new full-speed USB device number 2 using dummy_hcd [ 94.892786][ T26] audit: type=1326 audit(1773749674.398:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4970 comm="syz.0.180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f089fbd5799 code=0x7ffc0000 [ 94.919661][ T26] audit: type=1326 audit(1773749674.398:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4970 comm="syz.0.180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f089fbd5799 code=0x7ffc0000 [ 94.982949][ T26] audit: type=1326 audit(1773749674.398:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4970 comm="syz.0.180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=129 compat=0 ip=0x7f089fbd5799 code=0x7ffc0000 [ 95.030763][ T26] audit: type=1326 audit(1773749674.398:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4970 comm="syz.0.180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f089fbd5799 code=0x7ffc0000 [ 95.386196][ T21] usb 4-1: unable to get BOS descriptor or descriptor too short [ 95.506033][ T21] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 95.514006][ T21] usb 4-1: can't read configurations, error -71 [ 95.514883][ T5014] loop5: detected capacity change from 0 to 4096 [ 95.649472][ T5014] ntfs3: loop5: Failed to load $LogFile. [ 95.745665][ T5029] netlink: 12 bytes leftover after parsing attributes in process `syz.4.193'. [ 96.182830][ T5049] loop3: detected capacity change from 0 to 512 [ 96.341807][ T5014] loop5: detected capacity change from 0 to 32768 [ 96.401284][ T5014] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop5 scanned by syz.5.190 (5014) [ 96.584156][ T5014] BTRFS info (device loop5): using sha256 (sha256-avx2) checksum algorithm [ 96.624973][ T5014] BTRFS info (device loop5): using free space tree [ 96.639976][ T5014] BTRFS info (device loop5): has skinny extents [ 96.884560][ T5095] netlink: 4 bytes leftover after parsing attributes in process `syz.2.210'. [ 96.935446][ T5014] BTRFS info (device loop5): enabling ssd optimizations [ 98.319014][ T5133] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 98.405042][ T5138] device syzkaller0 entered promiscuous mode [ 98.505263][ T5142] binder: 5141:5142 ioctl c0306201 2000000003c0 returned -14 [ 98.782684][ T5154] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 100.522500][ T5114] loop2: detected capacity change from 0 to 40427 [ 101.971644][ T5200] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 102.017711][ T5200] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 102.048411][ T5200] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 102.089544][ T5200] device bridge_slave_0 left promiscuous mode [ 102.325752][ T5215] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 103.355335][ C1] sched: RT throttling activated [ 103.694116][ T5200] bridge0: port 1(bridge_slave_0) entered disabled state [ 103.769453][ T5200] device bridge_slave_1 left promiscuous mode [ 103.799700][ T5200] bridge0: port 2(bridge_slave_1) entered disabled state [ 103.812087][ T5200] bond0: (slave bond_slave_0): Releasing backup interface [ 104.477627][ T5230] loop2: detected capacity change from 0 to 1024 [ 104.522163][ T5200] bond0: (slave bond_slave_1): Releasing backup interface [ 104.626881][ T5200] team0: Port device team_slave_0 removed [ 104.659359][ T5200] team0: Port device team_slave_1 removed [ 104.666937][ T5200] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 104.690315][ T5200] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 104.703919][ T5230] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 104.719899][ T5200] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 104.738521][ T5200] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 104.764290][ T5222] team0: Mode changed to "broadcast" [ 104.764478][ T5230] EXT4-fs warning (device loop2): ext4_read_block_bitmap_nowait:485: Cannot get buffer for block bitmap - block_group = 0, block_bitmap = 48142 [ 104.790792][ T5230] EXT4-fs warning (device loop2): ext4_read_block_bitmap_nowait:485: Cannot get buffer for block bitmap - block_group = 0, block_bitmap = 48142 [ 104.849250][ T5236] netlink: 8 bytes leftover after parsing attributes in process `syz.5.241'. [ 104.910072][ T5244] loop3: detected capacity change from 0 to 128 [ 107.270123][ T5280] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 107.976815][ T5284] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 108.016050][ T5284] device batadv_slave_0 entered promiscuous mode [ 109.527031][ T5339] chnl_net:caif_netlink_parms(): no params data found [ 109.723253][ T5339] bridge0: port 1(bridge_slave_0) entered blocking state [ 109.759345][ T5339] bridge0: port 1(bridge_slave_0) entered disabled state [ 109.800216][ T5339] device bridge_slave_0 entered promiscuous mode [ 109.845734][ T5339] bridge0: port 2(bridge_slave_1) entered blocking state [ 109.883787][ T5339] bridge0: port 2(bridge_slave_1) entered disabled state [ 109.906215][ T5339] device bridge_slave_1 entered promiscuous mode [ 110.030596][ T5339] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 110.093985][ T5339] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 110.181717][ T5339] team0: Port device team_slave_0 added [ 110.213487][ T5339] team0: Port device team_slave_1 added [ 110.294562][ T5339] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 110.315675][ T5339] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 110.395377][ T5339] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 110.453284][ T5339] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 110.473036][ T5385] netlink: 4 bytes leftover after parsing attributes in process `syz.4.270'. [ 110.481299][ T5339] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 110.596162][ T5339] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 110.893110][ T5392] device batadv_slave_0 entered promiscuous mode [ 111.267654][ T4229] Bluetooth: hci2: command 0x0409 tx timeout [ 111.734006][ T5339] device hsr_slave_0 entered promiscuous mode [ 111.785988][ T5339] device hsr_slave_1 entered promiscuous mode [ 111.795178][ T5339] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 111.802747][ T5339] Cannot create hsr debugfs directory [ 112.012934][ T5412] netlink: 12 bytes leftover after parsing attributes in process `syz.4.277'. [ 113.296296][ T4229] Bluetooth: hci2: command 0x041b tx timeout [ 113.333665][ T5339] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 113.358225][ T5339] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 113.392349][ T5339] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 113.412958][ T5339] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 114.520511][ T5339] 8021q: adding VLAN 0 to HW filter on device bond0 [ 114.616709][ T5339] 8021q: adding VLAN 0 to HW filter on device team0 [ 114.623658][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 114.633825][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 114.681023][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 114.715922][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 114.743163][ T4275] bridge0: port 1(bridge_slave_0) entered blocking state [ 114.750311][ T4275] bridge0: port 1(bridge_slave_0) entered forwarding state [ 114.805124][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 114.846205][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 114.865212][ T4275] bridge0: port 2(bridge_slave_1) entered blocking state [ 114.872271][ T4275] bridge0: port 2(bridge_slave_1) entered forwarding state [ 114.906707][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 114.926583][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 114.943755][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 114.964036][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 115.017458][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 115.061815][ T5339] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 115.103639][ T5339] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 115.247661][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 115.268198][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 116.134273][ T21] Bluetooth: hci2: command 0x040f tx timeout [ 116.205800][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 116.225199][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 116.236019][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 116.246243][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 116.275839][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 116.368384][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 116.739735][ T4369] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 116.759085][ T4369] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 116.779882][ T5339] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 117.234171][ T5501] netlink: 8 bytes leftover after parsing attributes in process `syz.0.295'. [ 117.253415][ T5501] netlink: 8 bytes leftover after parsing attributes in process `syz.0.295'. [ 117.269428][ T5501] bridge0: port 3(syz_tun) entered disabled state [ 117.276049][ T5501] bridge0: port 2(bridge_slave_1) entered disabled state [ 117.283239][ T5501] bridge0: port 1(bridge_slave_0) entered disabled state [ 117.330794][ T4369] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 117.349140][ T4369] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 117.628271][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 117.639005][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 117.648398][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 117.665931][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 118.974069][ T21] Bluetooth: hci2: command 0x0419 tx timeout [ 119.738073][ T5339] device veth0_vlan entered promiscuous mode [ 119.826167][ T5339] device veth1_vlan entered promiscuous mode [ 119.878185][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 119.911154][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 119.922567][ T5339] device veth0_macvtap entered promiscuous mode [ 119.933717][ T5339] device veth1_macvtap entered promiscuous mode [ 120.103611][ T5533] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 120.127882][ T5339] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 120.138496][ T5339] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 120.150260][ T5339] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 120.158715][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 120.165020][ T5533] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 120.179489][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 120.202161][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 120.216064][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 120.240170][ T5339] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 120.251365][ T5339] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 120.262572][ T5339] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 120.286095][ T5536] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 120.383111][ T5339] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 120.540527][ T5339] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 120.755830][ T5339] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.851524][ T5339] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.860872][ T5339] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.870150][ T5339] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.901734][ T4369] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 120.910644][ T4369] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 120.984573][ T5542] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 120.992245][ T5542] IPv6: NLM_F_CREATE should be set when creating new route [ 121.815596][ T5552] netlink: 16 bytes leftover after parsing attributes in process `syz.5.314'. [ 122.638601][ T5542] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.651181][ T5542] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.660409][ T5542] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.672996][ T5542] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.867303][ T4339] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 122.891404][ T26] kauditd_printk_skb: 18 callbacks suppressed [ 122.891417][ T26] audit: type=1326 audit(1773749702.780:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5574 comm="syz.0.319" exe="/root/syz-executor" sig=31 arch=c000003e syscall=39 compat=0 ip=0x7f089fbcf517 code=0x0 [ 122.903223][ T4339] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 126.193624][ T1509] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 126.231456][ T1509] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 126.281865][ T1509] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 126.458500][ T26] audit: type=1326 audit(1773749706.380:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5588 comm="syz.3.322" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe3f9e5e799 code=0x0 [ 126.495919][ T1509] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 126.562182][ T26] audit: type=1326 audit(1773749706.480:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5588 comm="syz.3.322" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe3f9e5e799 code=0x7ffc0000 [ 126.643793][ T26] audit: type=1326 audit(1773749706.510:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5588 comm="syz.3.322" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe3f9e5e799 code=0x7ffc0000 [ 126.679870][ T26] audit: type=1326 audit(1773749706.510:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5588 comm="syz.3.322" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe3f9e5e799 code=0x7ffc0000 [ 127.379520][ T26] audit: type=1326 audit(1773749706.510:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5588 comm="syz.3.322" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fe3f9e5e799 code=0x7ffc0000 [ 127.415062][ T26] audit: type=1326 audit(1773749706.510:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5588 comm="syz.3.322" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe3f9e5e799 code=0x7ffc0000 [ 127.453289][ T26] audit: type=1326 audit(1773749706.510:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5588 comm="syz.3.322" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe3f9e5e799 code=0x7ffc0000 [ 127.477266][ T5613] sctp: [Deprecated]: syz.0.327 (pid 5613) Use of struct sctp_assoc_value in delayed_ack socket option. [ 127.477266][ T5613] Use struct sctp_sack_info instead [ 127.621969][ T26] audit: type=1326 audit(1773749706.510:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5588 comm="syz.3.322" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe3f9e5e799 code=0x7ffc0000 [ 127.666087][ T26] audit: type=1326 audit(1773749706.510:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5588 comm="syz.3.322" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe3f9e5e799 code=0x7ffc0000 [ 128.711354][ T5627] overlayfs: failed to clone upperpath [ 128.780477][ T5631] uffd: Set unprivileged_userfaultfd sysctl knob to 1 if kernel faults must be handled without obtaining CAP_SYS_PTRACE capability [ 128.900293][ T5632] bond1: (slave ip6gretap1): no link monitoring support [ 128.942054][ T5632] bond1: (slave ip6gretap1): MII and ETHTOOL support not available for slave, and arp_interval/arp_ip_target module parameters not specified, thus bonding will not detect link failures! see bonding.txt for details [ 129.025446][ T5632] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link [ 129.093325][ T5121] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 130.009368][ T5655] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 130.019019][ T5656] tipc: Enabling of bearer rejected, failed to enable media [ 130.324141][ T5121] usb 6-1: config 0 has no interfaces? [ 130.991530][ T5665] sctp: [Deprecated]: syz.6.341 (pid 5665) Use of struct sctp_assoc_value in delayed_ack socket option. [ 130.991530][ T5665] Use struct sctp_sack_info instead [ 131.096186][ T5121] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 131.126819][ T5121] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 131.142484][ T5121] usb 6-1: Product: syz [ 131.147099][ T5121] usb 6-1: Manufacturer: syz [ 131.164261][ T5121] usb 6-1: config 0 descriptor?? [ 131.885576][ T5121] usb 6-1: USB disconnect, device number 2 [ 132.530591][ T5698] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 132.603066][ T5700] device syzkaller0 entered promiscuous mode [ 132.682533][ T5703] tipc: Started in network mode [ 132.691863][ T5703] tipc: Node identity 1e4d67ab4b1a, cluster identity 4711 [ 132.710089][ T5703] tipc: Enabled bearer , priority 0 [ 132.757310][ T5699] tipc: Resetting bearer [ 132.776037][ T5699] tipc: Disabling bearer [ 132.793904][ T7] usb 6-1: new full-speed USB device number 3 using dummy_hcd [ 132.918758][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.932232][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.559920][ T26] kauditd_printk_skb: 63 callbacks suppressed [ 133.559933][ T26] audit: type=1326 audit(1773749713.480:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5712 comm="syz.6.355" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8901a7a799 code=0x0 [ 135.824306][ T7] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 135.832913][ T7] usb 6-1: can't read configurations, error -71 [ 135.909446][ T5746] loop4: detected capacity change from 0 to 8 [ 135.978184][ T5748] device syzkaller0 entered promiscuous mode [ 135.993273][ T5748] tipc: Started in network mode [ 135.999032][ T5748] tipc: Node identity a6e480439e0a, cluster identity 4711 [ 136.006933][ T5748] tipc: Enabled bearer , priority 0 [ 136.025422][ T5747] tipc: Resetting bearer [ 136.083611][ T5747] tipc: Disabling bearer [ 136.136614][ T5752] netlink: 1319 bytes leftover after parsing attributes in process `syz.3.369'. [ 138.178742][ T5781] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 139.373512][ T7] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 139.773412][ T7] usb 7-1: Using ep0 maxpacket: 32 [ 140.733660][ T7] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 140.763648][ T7] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 140.780950][ T7] usb 7-1: New USB device found, idVendor=0458, idProduct=706e, bcdDevice=35.64 [ 140.790498][ T7] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 140.867616][ T7] usb 7-1: config 0 descriptor?? [ 141.902809][ T5117] usb 7-1: USB disconnect, device number 2 [ 142.439661][ T5856] netlink: 'syz.3.414': attribute type 1 has an invalid length. [ 143.470842][ T5855] loop4: detected capacity change from 0 to 256 [ 144.673669][ T5866] sctp: failed to load transform for md5: -2 [ 144.691277][ T5874] netlink: 104 bytes leftover after parsing attributes in process `syz.0.421'. [ 144.965255][ T5121] usb 5-1: new full-speed USB device number 4 using dummy_hcd [ 146.707833][ T4229] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 146.963494][ T4229] usb 6-1: Using ep0 maxpacket: 32 [ 147.113912][ T4229] usb 6-1: config 0 has no interfaces? [ 147.376662][ T5121] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 147.396334][ T5121] usb 5-1: config 0 has no interface number 0 [ 147.412642][ T5121] usb 5-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 147.439384][ T5121] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 147.471185][ T5121] usb 5-1: config 0 descriptor?? [ 147.483318][ T4229] usb 6-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 147.492416][ T4229] usb 6-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 147.523195][ T4229] usb 6-1: Product: syz [ 147.527394][ T4229] usb 6-1: Manufacturer: syz [ 147.531173][ T5121] usb 5-1: selecting invalid altsetting 1 [ 147.531990][ T4229] usb 6-1: SerialNumber: syz [ 147.545351][ T4229] usb 6-1: config 0 descriptor?? [ 147.570568][ T5121] dvb_ttusb_budget: ttusb_init_controller: error [ 147.583597][ T5121] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 147.711295][ T5121] DVB: Unable to find symbol cx22700_attach() [ 149.295572][ T7] usb 6-1: USB disconnect, device number 5 [ 149.325323][ T5121] DVB: Unable to find symbol tda10046_attach() [ 149.331611][ T5121] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 149.427102][ T5121] usb 5-1: USB disconnect, device number 4 [ 151.631600][ T5940] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.641299][ T5940] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.650598][ T5940] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.672910][ T5940] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.744301][ T5945] netlink: 20 bytes leftover after parsing attributes in process `syz.6.434'. [ 152.786770][ T5945] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 152.796340][ T5945] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 152.805398][ T5945] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 152.814571][ T5945] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 152.859783][ T5979] loop5: detected capacity change from 0 to 2048 [ 153.044530][ T5948] netlink: 4 bytes leftover after parsing attributes in process `syz.6.434'. [ 153.083091][ T5945] netlink: 4 bytes leftover after parsing attributes in process `syz.6.434'. [ 154.162306][ T5948] netlink: 4 bytes leftover after parsing attributes in process `syz.6.434'. [ 154.172557][ T5187] Alternate GPT is invalid, using primary GPT. [ 154.220942][ T5187] loop5: p2 p3 p7 [ 154.306770][ T5979] Alternate GPT is invalid, using primary GPT. [ 154.320384][ T5979] loop5: p2 p3 p7 [ 154.339554][ T5999] pit: kvm: requested 156723 ns i8254 timer period limited to 200000 ns [ 154.343659][ T6005] overlayfs: failed to clone upperpath [ 154.359748][ T5999] pit: kvm: requested 129066 ns i8254 timer period limited to 200000 ns [ 154.384187][ T5999] pit: kvm: requested 130742 ns i8254 timer period limited to 200000 ns [ 154.398883][ T5999] pit: kvm: requested 113981 ns i8254 timer period limited to 200000 ns [ 154.509410][ T4177] udevd[4177]: inotify_add_watch(7, /dev/loop5p7, 10) failed: No such file or directory [ 154.509535][ T4174] udevd[4174]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory [ 154.525604][ T5187] udevd[5187]: inotify_add_watch(7, /dev/loop5p2, 10) failed: No such file or directory [ 154.554357][ T6009] sch_tbf: burst 4398 is lower than device lo mtu (11337746) ! [ 154.624826][ T6010] netlink: 12 bytes leftover after parsing attributes in process `syz.3.456'. [ 154.654639][ T5187] udevd[5187]: inotify_add_watch(7, /dev/loop5p2, 10) failed: No such file or directory [ 154.654744][ T4174] udevd[4174]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory [ 154.684831][ T4177] udevd[4177]: inotify_add_watch(7, /dev/loop5p7, 10) failed: No such file or directory [ 154.725132][ T4174] udevd[4174]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory [ 154.742336][ T5187] udevd[5187]: inotify_add_watch(7, /dev/loop5p2, 10) failed: No such file or directory [ 154.757341][ T4177] udevd[4177]: inotify_add_watch(7, /dev/loop5p7, 10) failed: No such file or directory [ 154.805377][ T6015] loop5: detected capacity change from 0 to 128 [ 155.606673][ T6015] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256 [ 155.703732][ T6021] netlink: 'syz.0.460': attribute type 7 has an invalid length. [ 155.748042][ T6008] netlink: 52 bytes leftover after parsing attributes in process `syz.5.455'. [ 155.774442][ T6008] netlink: 8 bytes leftover after parsing attributes in process `syz.5.455'. [ 156.548711][ T4335] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 156.872582][ T4335] usb 5-1: Using ep0 maxpacket: 8 [ 156.929207][ T6062] netlink: 12 bytes leftover after parsing attributes in process `syz.5.470'. [ 157.012807][ T4335] usb 5-1: unable to get BOS descriptor or descriptor too short [ 157.082531][ T4335] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 157.082603][ T5116] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 157.090215][ T4335] usb 5-1: can't read configurations, error -71 [ 157.116582][ T6066] netlink: 'syz.5.472': attribute type 1 has an invalid length. [ 157.139327][ T6066] 8021q: adding VLAN 0 to HW filter on device bond1 [ 157.168950][ T6066] device veth3 entered promiscuous mode [ 157.191714][ T6066] bond1: (slave veth3): Enslaving as an active interface with a down link [ 157.229806][ T6068] bond1: (slave erspan0): making interface the new active one [ 157.241307][ T6068] device erspan0 entered promiscuous mode [ 157.247668][ T6068] bond1: (slave erspan0): Enslaving as an active interface with an up link [ 157.259495][ T4238] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 157.362579][ T5116] usb 7-1: Using ep0 maxpacket: 32 [ 157.522658][ T5116] usb 7-1: config 0 has an invalid interface number: 83 but max is 0 [ 157.530864][ T5116] usb 7-1: config 0 has no interface number 0 [ 157.545849][ T5116] usb 7-1: config 0 interface 83 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 157.758596][ T6079] fuse: Bad value for 'fd' [ 158.986933][ T5117] usb 6-1: new full-speed USB device number 6 using dummy_hcd [ 159.104490][ T6086] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 159.113125][ T5116] usb 7-1: New USB device found, idVendor=112a, idProduct=0001, bcdDevice=d8.11 [ 159.131356][ T5116] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 159.139792][ T5116] usb 7-1: Product: syz [ 159.151273][ T5116] usb 7-1: Manufacturer: syz [ 159.156543][ T5116] usb 7-1: SerialNumber: syz [ 159.186340][ T5116] usb 7-1: config 0 descriptor?? [ 159.244408][ T5116] redrat3 7-1:0.83: Couldn't find all endpoints [ 159.442509][ T5117] usb 6-1: unable to get BOS descriptor or descriptor too short [ 159.460900][ T6055] udc-core: couldn't find an available UDC or it's busy [ 159.476611][ T6055] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 159.505434][ T21] usb 7-1: USB disconnect, device number 3 [ 159.612658][ T5117] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 159.629799][ T5117] usb 6-1: can't read configurations, error -71 [ 162.274252][ T6116] netlink: 182 bytes leftover after parsing attributes in process `syz.0.488'. [ 163.719304][ T6126] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 163.827266][ T6133] netlink: 'syz.5.494': attribute type 4 has an invalid length. [ 166.168010][ T6179] netlink: 12 bytes leftover after parsing attributes in process `syz.3.510'. [ 166.207382][ T6179] netlink: 12 bytes leftover after parsing attributes in process `syz.3.510'. [ 166.209776][ T6141] loop5: detected capacity change from 0 to 40427 [ 166.390216][ T6141] F2FS-fs (loop5): build fault injection attr: rate: 690, type: 0x1ffff [ 166.420944][ T6141] F2FS-fs (loop5): inline encryption not supported [ 166.439695][ T6141] F2FS-fs (loop5): invalid crc value [ 166.459408][ T6141] F2FS-fs (loop5): Found nat_bits in checkpoint [ 167.463968][ T6199] syz.0.525 (6199): attempted to duplicate a private mapping with mremap. This is not supported. [ 167.575559][ T6141] F2FS-fs (loop5): Start checkpoint disabled! [ 167.657548][ T6141] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e6 [ 169.191513][ T6229] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 170.971570][ T6253] 8021q: adding VLAN 0 to HW filter on device bond2 [ 170.998865][ T6255] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 171.028250][ T6255] bond2: (slave macvlan2): making interface the new active one [ 171.038028][ T6255] bond2: (slave macvlan2): Enslaving as an active interface with an up link [ 171.047150][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bond2: link becomes ready [ 172.366299][ T6291] 8021q: adding VLAN 0 to HW filter on device bond2 [ 173.348462][ T6295] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.357686][ T6295] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.366654][ T6295] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.375558][ T6295] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.491869][ T6291] device bond_slave_0 entered promiscuous mode [ 173.498679][ T6291] device bond_slave_1 entered promiscuous mode [ 173.512615][ T6291] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 173.527144][ T6291] bond2: (slave macvlan2): making interface the new active one [ 173.538556][ T6291] bond2: (slave macvlan2): Enslaving as an active interface with an up link [ 173.550499][ T4238] IPv6: ADDRCONF(NETDEV_CHANGE): bond2: link becomes ready [ 173.569450][ T6304] netlink: 4 bytes leftover after parsing attributes in process `syz.6.553'. [ 173.684639][ T4272] device erspan0 left promiscuous mode [ 174.690089][ T6316] device bond_slave_0 left promiscuous mode [ 174.699100][ T6316] device bond_slave_1 left promiscuous mode [ 175.144856][ T6316] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 175.200783][ T6328] tipc: Failed to remove unknown binding: 66,0,0/0:450056468/450056470 [ 175.220091][ T6328] tipc: Failed to remove unknown binding: 66,0,0/0:450056468/450056469 [ 175.230090][ T6328] tipc: Failed to remove unknown binding: 66,0,0/0:450056468/450056470 [ 175.245981][ T6328] tipc: Failed to remove unknown binding: 66,0,0/0:450056468/450056469 [ 175.475778][ T6316] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.485759][ T6316] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.495226][ T6316] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.504165][ T6316] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.689244][ T6330] bond1: (slave ip6gretap1): Releasing backup interface [ 175.727426][ T6330] bond2: (slave macvlan2): Releasing backup interface [ 175.753285][ T6331] team0: Mode changed to "broadcast" [ 175.758881][ T6332] netlink: 4 bytes leftover after parsing attributes in process `syz.4.561'. [ 175.862175][ T5117] Bluetooth: hci3: command 0x0406 tx timeout [ 175.876256][ T5117] Bluetooth: hci0: command 0x0406 tx timeout [ 175.893389][ T5117] Bluetooth: hci4: command 0x0406 tx timeout [ 176.108952][ T6345] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 176.917897][ T6348] 8021q: adding VLAN 0 to HW filter on device bond1 [ 176.935723][ T6355] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 176.985266][ T6355] bond1: (slave macvlan2): making interface the new active one [ 176.999374][ T6355] bond1: (slave macvlan2): Enslaving as an active interface with an up link [ 177.040054][ T1509] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 177.151780][ T4225] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 177.491532][ T4225] usb 6-1: Using ep0 maxpacket: 32 [ 177.612162][ T4225] usb 6-1: config 0 has an invalid interface number: 184 but max is 0 [ 177.621008][ T4225] usb 6-1: config 0 has no interface number 0 [ 177.627963][ T4225] usb 6-1: config 0 interface 184 has no altsetting 0 [ 177.791845][ T4225] usb 6-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 177.804469][ T4225] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 177.821566][ T4225] usb 6-1: Product: syz [ 177.831009][ T4225] usb 6-1: Manufacturer: syz [ 177.841564][ T4225] usb 6-1: SerialNumber: syz [ 177.861058][ T4225] usb 6-1: config 0 descriptor?? [ 177.912590][ T4225] smsc75xx v1.0.0 [ 178.243576][ T6385] device syz_tun left promiscuous mode [ 178.250599][ T6385] bridge0: port 3(syz_tun) entered disabled state [ 178.273758][ T6385] device bridge_slave_0 left promiscuous mode [ 178.280014][ T6385] bridge0: port 1(bridge_slave_0) entered disabled state [ 178.293842][ T6385] device bridge_slave_1 left promiscuous mode [ 178.305306][ T6385] bridge0: port 2(bridge_slave_1) entered disabled state [ 178.323577][ T6385] bond0: (slave bond_slave_0): Releasing backup interface [ 178.338795][ T6385] bond0: (slave bond_slave_1): Releasing backup interface [ 178.405385][ T6391] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 178.572039][ T4225] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 178.654293][ T6385] team0: Port device team_slave_0 removed [ 178.663253][ T4225] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 178.843417][ T4225] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 178.860052][ T6385] team0: Port device team_slave_1 removed [ 178.949286][ T6385] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 178.979901][ T6385] bond1: (slave batadv_slave_1): Releasing backup interface [ 178.988906][ T4225] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -32 [ 179.000033][ T4225] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 179.010929][ T4225] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -32 [ 179.023410][ T4225] smsc75xx: probe of 6-1:0.184 failed with error -32 [ 179.091694][ T6388] team0: Mode changed to "broadcast" [ 179.100541][ T6389] netlink: 4 bytes leftover after parsing attributes in process `syz.0.580'. [ 179.123969][ T6395] overlayfs: failed to clone upperpath [ 179.181406][ T6392] netlink: 32 bytes leftover after parsing attributes in process `syz.3.582'. [ 179.195335][ T6393] netlink: 32 bytes leftover after parsing attributes in process `syz.3.582'. [ 180.085081][ T4229] usb 6-1: USB disconnect, device number 8 [ 182.801199][ T5117] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 183.110939][ T5117] usb 7-1: Using ep0 maxpacket: 32 [ 183.241569][ T5117] usb 7-1: config 0 has an invalid interface number: 184 but max is 0 [ 183.285851][ T5117] usb 7-1: config 0 has no interface number 0 [ 183.388162][ T5117] usb 7-1: config 0 interface 184 has no altsetting 0 [ 183.751293][ T5117] usb 7-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 183.814965][ T5117] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 183.904106][ T5117] usb 7-1: Product: syz [ 184.211460][ T5117] usb 7-1: Manufacturer: syz [ 184.234837][ T5117] usb 7-1: SerialNumber: syz [ 184.352831][ T5117] usb 7-1: config 0 descriptor?? [ 184.432253][ T5117] smsc75xx v1.0.0 [ 184.496882][ T6514] overlayfs: failed to clone upperpath [ 186.321218][ T5117] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -71 [ 186.332745][ T5117] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 186.391668][ T5117] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 186.417773][ T6540] pci 0000:00:05.0: vgaarb: changed VGA decodes: olddecodes=io+mem,decodes=none:owns=io+mem [ 186.446277][ T6544] loop6: detected capacity change from 0 to 8 [ 186.447066][ T5117] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 186.472144][ T5117] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 186.482953][ T5117] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 186.493432][ T5117] smsc75xx: probe of 7-1:0.184 failed with error -71 [ 186.520530][ T5117] usb 7-1: USB disconnect, device number 4 [ 186.549285][ T6544] SQUASHFS error: zlib decompression failed, data probably corrupt [ 186.556726][ T6549] netlink: 24 bytes leftover after parsing attributes in process `syz.4.622'. [ 186.564789][ T6544] SQUASHFS error: Failed to read block 0x9b: -5 [ 186.574698][ T6544] SQUASHFS error: Unable to read metadata cache entry [99] [ 186.582412][ T6544] SQUASHFS error: Unable to read inode 0x127 [ 186.809301][ T6563] netlink: 40 bytes leftover after parsing attributes in process `syz.4.625'. [ 186.827392][ T6563] (unnamed net_device) (uninitialized): peer notification delay (2365) is not a multiple of miimon (4), value rounded to 2364 ms [ 186.873177][ T6558] netlink: 40 bytes leftover after parsing attributes in process `syz.4.625'. [ 186.882915][ T6558] bond3: peer notification delay (2365) is not a multiple of miimon (4), value rounded to 2364 ms [ 192.343785][ T5121] Bluetooth: hci1: command 0x0406 tx timeout [ 192.354412][ T5116] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 192.760434][ T1509] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 192.890489][ T1509] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 193.012814][ T1509] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 193.090693][ T5116] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 193.102733][ T1509] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 193.114764][ T5116] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 193.390930][ T5116] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 193.400178][ T5116] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 193.465998][ T5116] usb 6-1: SerialNumber: syz [ 193.612833][ T1509] tipc: Left network mode [ 193.917158][ T5116] usb 6-1: 0:2 : does not exist [ 194.190488][ T5116] usb 6-1: USB disconnect, device number 9 [ 194.253055][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.259363][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.531337][ T5187] udevd[5187]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 194.701347][ T4190] Bluetooth: Wrong link type (-71) [ 194.753322][ T6709] netlink: 'syz.4.671': attribute type 16 has an invalid length. [ 194.765618][ T6709] netlink: 'syz.4.671': attribute type 17 has an invalid length. [ 194.788294][ T6709] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 194.805257][ T6709] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 194.819698][ T6709] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 194.827292][ T6709] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 194.835505][ T6709] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 195.357752][ T6709] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 195.626327][ T6709] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 195.663319][ T6709] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 195.695012][ T6709] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 195.703480][ T6709] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 195.714743][ T6709] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 195.744051][ T6709] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 195.753090][ T6709] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 195.782879][ T6709] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 195.834893][ T6709] IPv6: ADDRCONF(NETDEV_CHANGE): sit0: link becomes ready [ 195.869800][ T6709] IPv6: ADDRCONF(NETDEV_CHANGE): ip6tnl0: link becomes ready [ 195.883789][ T6709] IPv6: ADDRCONF(NETDEV_CHANGE): ip6gre0: link becomes ready [ 195.914955][ T6709] IPv6: ADDRCONF(NETDEV_CHANGE): syz_tun: link becomes ready [ 195.991769][ T6709] IPv6: ADDRCONF(NETDEV_CHANGE): ip6gretap0: link becomes ready [ 196.033997][ T6709] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 196.102057][ T6709] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 196.122152][ T6709] 8021q: adding VLAN 0 to HW filter on device bond0 [ 196.137533][ T6709] IPv6: ADDRCONF(NETDEV_CHANGE): dummy0: link becomes ready [ 196.155700][ T6709] IPv6: ADDRCONF(NETDEV_CHANGE): nlmon0: link becomes ready [ 196.198835][ T6709] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 196.446501][ T6753] 8021q: adding VLAN 0 to HW filter on device bond1 [ 196.528374][ T1509] bond0: (slave wlan1): Releasing backup interface [ 196.777261][ T6776] device syzkaller0 entered promiscuous mode [ 196.880306][ T1509] device hsr_slave_0 left promiscuous mode [ 196.895161][ T1509] device hsr_slave_1 left promiscuous mode [ 196.912130][ T1509] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 196.928759][ T1509] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 196.946489][ T1509] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 196.962031][ T1509] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 196.987771][ T1509] device bridge_slave_1 left promiscuous mode [ 197.009694][ T1509] bridge0: port 2(bridge_slave_1) entered disabled state [ 197.039289][ T1509] device bridge_slave_0 left promiscuous mode [ 197.054814][ T1509] bridge0: port 1(bridge_slave_0) entered disabled state [ 197.096666][ T1509] device veth1_macvtap left promiscuous mode [ 197.107882][ T1509] device veth0_macvtap left promiscuous mode [ 197.124483][ T1509] device veth1_vlan left promiscuous mode [ 197.158797][ T1509] device veth0_vlan left promiscuous mode [ 197.575385][ T6797] tipc: Failed to remove unknown binding: 66,0,0/0:1255607777/1255607779 [ 197.617929][ T6797] tipc: Failed to remove unknown binding: 66,0,0/0:1255607777/1255607778 [ 197.634290][ T1509] team0 (unregistering): Port device team_slave_1 removed [ 197.651599][ T6797] tipc: Failed to remove unknown binding: 66,0,0/0:1255607777/1255607779 [ 197.665618][ T1509] team0 (unregistering): Port device team_slave_0 removed [ 197.683416][ T6797] tipc: Failed to remove unknown binding: 66,0,0/0:1255607777/1255607778 [ 197.695643][ T1509] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 197.757278][ T26] audit: type=1326 audit(1773749777.674:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6801 comm="syz.3.695" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe3f9e5e799 code=0x0 [ 197.787863][ T1509] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 198.941773][ T6811] loop5: detected capacity change from 0 to 1024 [ 199.010783][ T6811] EXT4-fs (loop5): Ignoring removed orlov option [ 199.060469][ T6811] EXT4-fs (loop5): Ignoring removed bh option [ 199.159579][ T6811] EXT4-fs (loop5): mounted filesystem without journal. Opts: delalloc,data_err=abort,barrier=0x0000000000000002,dioread_lock,data_err=ignore,orlov,data_err=ignore,grpquota,abort,resgid=0x0000000000000000,bh,nouid32,,errors=continue. Quota mode: writeback. [ 199.214171][ T26] audit: type=1800 audit(1773749779.134:107): pid=6811 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.696" name="file1" dev="loop5" ino=15 res=0 errno=0 [ 199.268556][ T1509] bond0 (unregistering): Released all slaves [ 199.585569][ T6832] capability: warning: `syz.6.700' uses 32-bit capabilities (legacy support in use) [ 199.601121][ T6811] EXT4-fs error (device loop5): ext4_mb_mark_diskspace_used:3885: comm syz.5.696: Allocating blocks 497-513 which overlap fs metadata [ 199.661375][ T6811] EXT4-fs (loop5): pa ffff88802a491000: logic 256, phys. 385, len 8 [ 199.670177][ T6811] EXT4-fs error (device loop5): ext4_mb_release_inode_pa:4902: group 0, free 0, pa_free 1 [ 203.787708][ T6918] binder: 6917:6918 ioctl c0306201 200000000180 returned -14 [ 204.112021][ T6938] capability: warning: `syz.6.731' uses deprecated v2 capabilities in a way that may be insecure [ 204.872929][ T6947] loop5: detected capacity change from 0 to 256 [ 206.080247][ T6963] netlink: 'syz.0.737': attribute type 16 has an invalid length. [ 206.118616][ T6963] netlink: 'syz.0.737': attribute type 17 has an invalid length. [ 206.133647][ T6963] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 206.162365][ T6963] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 206.177203][ T6963] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 206.188368][ T6963] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 206.204108][ T6963] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 206.248621][ T6963] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 206.381891][ T6963] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 206.936315][ T6963] IPv6: ADDRCONF(NETDEV_CHANGE): sit0: link becomes ready [ 206.984646][ T6963] IPv6: ADDRCONF(NETDEV_CHANGE): ip6tnl0: link becomes ready [ 207.028018][ T6963] IPv6: ADDRCONF(NETDEV_CHANGE): ip6gre0: link becomes ready [ 207.042520][ T6963] IPv6: ADDRCONF(NETDEV_CHANGE): syz_tun: link becomes ready [ 207.052140][ T6963] IPv6: ADDRCONF(NETDEV_CHANGE): ip6gretap0: link becomes ready [ 207.070790][ T6963] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 207.085592][ T6963] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 207.095225][ T6963] 8021q: adding VLAN 0 to HW filter on device bond0 [ 207.104765][ T6963] IPv6: ADDRCONF(NETDEV_CHANGE): dummy0: link becomes ready [ 207.114662][ T6963] IPv6: ADDRCONF(NETDEV_CHANGE): nlmon0: link becomes ready [ 207.131159][ T6963] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 210.493598][ T7010] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 211.669357][ T26] audit: type=1804 audit(3921233439.590:108): pid=7024 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.5.754" name="/newroot/111/file0" dev="fuse" ino=1 res=1 errno=0 [ 211.772094][ T7031] device syzkaller0 entered promiscuous mode [ 211.859055][ T7039] device vlan2 entered promiscuous mode [ 211.932289][ T7039] device bond0 entered promiscuous mode [ 211.956146][ T7039] device bond_slave_0 entered promiscuous mode [ 211.980989][ T7039] device bond_slave_1 entered promiscuous mode [ 215.407415][ T7070] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 215.488847][ T7074] xt_policy: output policy not valid in PREROUTING and INPUT [ 215.941799][ T7070] device batadv_slave_0 entered promiscuous mode [ 220.322069][ T7121] bond0 speed is unknown, defaulting to 1000 [ 220.356640][ T7121] bond0 speed is unknown, defaulting to 1000 [ 220.388971][ T7126] netlink: 14 bytes leftover after parsing attributes in process `syz.5.777'. [ 220.417717][ T7126] bond2: (slave macvlan2): Releasing backup interface [ 220.432119][ T7121] infiniband syz1: Couldn't register device with driver model [ 220.527231][ T7121] siw: device registration error -19 [ 220.593055][ T7126] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 221.578431][ T7126] device bond_slave_0 left promiscuous mode [ 221.659616][ T7126] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 221.748848][ T7126] device bond_slave_1 left promiscuous mode [ 221.797110][ T7126] bond0 (unregistering): Released all slaves [ 221.878257][ T7134] loop5: detected capacity change from 0 to 8192 [ 222.154821][ T7150] netlink: 'syz.6.782': attribute type 1 has an invalid length. [ 222.202324][ T5187] loop5: AHDI p1 p4 [ 222.217152][ T5187] loop5: p4 size 16776960 extends beyond EOD, truncated [ 222.230321][ T7150] device bond2 entered promiscuous mode [ 222.246916][ T7150] 8021q: adding VLAN 0 to HW filter on device bond2 [ 222.264775][ T7134] loop5: AHDI p1 p4 [ 222.279735][ T7152] bond2: (slave veth3): making interface the new active one [ 222.287212][ T7152] device veth3 entered promiscuous mode [ 222.299014][ T7152] bond2: (slave veth3): Enslaving as an active interface with an up link [ 222.329138][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): bond2: link becomes ready [ 222.388204][ T7134] loop5: p4 size 16776960 extends beyond EOD, truncated [ 222.615330][ T7175] loop6: detected capacity change from 0 to 1024 [ 222.708375][ T7175] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 223.921135][ T7175] cgroup: fork rejected by pids controller in /syz6 [ 226.050749][ T4174] udevd[4174]: inotify_add_watch(7, /dev/loop5p4, 10) failed: No such file or directory [ 226.065251][ T5187] udevd[5187]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 227.903651][ T8166] loop5: detected capacity change from 0 to 2048 [ 227.973234][ T8171] netlink: 'syz.3.796': attribute type 27 has an invalid length. [ 227.984196][ T8170] device syzkaller0 entered promiscuous mode [ 228.000796][ T4174] udevd[4174]: inotify_add_watch(7, /dev/loop5p4, 10) failed: No such file or directory [ 228.012250][ T8166] EXT4-fs (loop5): mounted filesystem without journal. Opts: delalloc,noload,acl,mb_optimize_scan=0x0000000000000001,,errors=continue. Quota mode: none. [ 228.042473][ T5187] udevd[5187]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 229.182592][ T4338] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1161: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 229.359334][ T4338] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 229.767608][ T8194] netlink: 16 bytes leftover after parsing attributes in process `syz.6.804'. [ 230.273631][ T4338] EXT4-fs (loop5): This should not happen!! Data will be lost [ 230.273631][ T4338] [ 230.418283][ T4338] EXT4-fs (loop5): Total free blocks count 0 [ 230.424470][ T4338] EXT4-fs (loop5): Free/Dirty block details [ 230.442469][ T4338] EXT4-fs (loop5): free_blocks=2415919504 [ 231.193499][ T4338] EXT4-fs (loop5): dirty_blocks=7216 [ 231.265305][ T4338] EXT4-fs (loop5): Block reservation details [ 231.342889][ T4338] EXT4-fs (loop5): i_reserved_data_blocks=451 [ 232.168176][ T5117] Bluetooth: hci2: command 0x0406 tx timeout [ 232.204721][ T4338] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 2050 with max blocks 2048 with error 28 [ 232.252370][ T4338] EXT4-fs (loop5): This should not happen!! Data will be lost [ 232.252370][ T4338] [ 232.272259][ T8234] netlink: 'syz.3.811': attribute type 1 has an invalid length. [ 232.298841][ T8234] netlink: 146340 bytes leftover after parsing attributes in process `syz.3.811'. [ 237.398342][ T8322] loop6: detected capacity change from 0 to 4096 [ 238.055074][ T8336] bond1: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 238.091785][ T8334] fuse: Unknown parameter '4' [ 238.092492][ T8336] bond1 (unregistering): (slave ip6gretap1): Releasing backup interface [ 238.120845][ T8336] bond1 (unregistering): Released all slaves [ 238.142892][ T8334] sctp: [Deprecated]: syz.3.835 (pid 8334) Use of int in max_burst socket option deprecated. [ 238.142892][ T8334] Use struct sctp_assoc_value instead [ 240.534978][ T8398] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 240.542267][ T8398] IPv6: NLM_F_CREATE should be set when creating new route [ 241.655832][ T8398] bridge0: port 2(bridge_slave_1) entered disabled state [ 241.663578][ T8398] bridge0: port 1(bridge_slave_0) entered disabled state [ 241.958995][ T8398] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 242.246145][ T8398] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 242.256279][ T8398] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 242.265652][ T8398] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 242.276068][ T8398] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 242.367489][ T8398] netdevsim netdevsim6 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 242.376549][ T8398] netdevsim netdevsim6 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 242.385719][ T8398] netdevsim netdevsim6 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 242.394849][ T8398] netdevsim netdevsim6 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 242.578646][ T8411] netlink: 'syz.4.855': attribute type 10 has an invalid length. [ 243.089564][ T8433] sctp: [Deprecated]: syz.4.863 (pid 8433) Use of int in max_burst socket option. [ 243.089564][ T8433] Use struct sctp_assoc_value instead [ 247.599917][ T8481] xt_hashlimit: size too large, truncated to 1048576 [ 247.666076][ T8481] xt_hashlimit: invalid rate [ 251.028716][ T8523] netlink: 52 bytes leftover after parsing attributes in process `syz.5.883'. [ 251.040317][ T8523] device bridge_slave_1 left promiscuous mode [ 251.060840][ T8523] bridge0: port 2(bridge_slave_1) entered disabled state [ 251.196985][ T8523] device bridge_slave_0 left promiscuous mode [ 251.211759][ T8523] bridge0: port 1(bridge_slave_0) entered disabled state [ 252.816226][ T8565] TCP: TCP_TX_DELAY enabled [ 252.835310][ T8565] netlink: 8 bytes leftover after parsing attributes in process `syz.0.892'. [ 253.868273][ T8583] bond2: (slave ip6gretap1): making interface the new active one [ 253.876806][ T8583] bond2: (slave ip6gretap1): Enslaving as an active interface with an up link [ 253.957581][ T8587] bond2 (unregistering): (slave ip6gretap1): Releasing backup interface [ 253.977048][ T8587] bond2 (unregistering): Released all slaves [ 254.111282][ T8599] bond0 speed is unknown, defaulting to 1000 [ 254.127691][ T8599] bond0 speed is unknown, defaulting to 1000 [ 254.142389][ T8599] bond0 speed is unknown, defaulting to 1000 [ 254.165345][ T8599] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 254.198637][ T8603] netlink: 14 bytes leftover after parsing attributes in process `syz.6.902'. [ 254.334776][ T8603] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 254.361695][ T8599] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 255.228194][ T8603] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 255.253054][ T4335] infiniband syz1: ib_query_port failed (-19) [ 255.262797][ T8603] bond0 (unregistering): Released all slaves [ 255.354129][ T8599] siw: device registration error -19 [ 256.605887][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.612337][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.641180][ T8605] loop6: detected capacity change from 0 to 8192 [ 257.476028][ T5187] loop6: AHDI p1 p4 [ 257.728958][ T5187] loop6: p4 size 16776960 extends beyond EOD, truncated [ 257.791287][ T8605] loop6: AHDI p1 p4 [ 257.803648][ T8605] loop6: p4 size 16776960 extends beyond EOD, truncated [ 258.036555][ T8648] netlink: 28 bytes leftover after parsing attributes in process `syz.4.914'. [ 258.046559][ T8645] loop5: detected capacity change from 0 to 4096 [ 258.055106][ T8648] netlink: 'syz.4.914': attribute type 7 has an invalid length. [ 258.071474][ T8648] netlink: 4 bytes leftover after parsing attributes in process `syz.4.914'. [ 258.088448][ T8648] device ip6gretap0 entered promiscuous mode [ 258.107753][ T8648] device syz_tun entered promiscuous mode [ 258.123354][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr1: link becomes ready [ 258.397842][ T8645] EXT4-fs (loop5): mounted filesystem without journal. Opts: grpquota,noblock_validity,,errors=continue. Quota mode: writeback. [ 259.681297][ T8682] bond0: (slave ip6gretap1): Enslaving as an active interface with an up link [ 259.820268][ T8683] bond0 (unregistering): (slave ip6gretap1): Releasing backup interface [ 259.887607][ T8683] bond0 (unregistering): Released all slaves [ 260.075152][ T4518] EXT4-fs warning (device loop5): ext4_empty_dir:3139: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 260.324490][ T4518] EXT4-fs warning (device loop5): ext4_empty_dir:3139: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 260.717597][ T4518] EXT4-fs warning (device loop5): ext4_empty_dir:3139: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 261.092441][ T4518] EXT4-fs warning (device loop5): ext4_empty_dir:3139: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 261.180418][ T4518] EXT4-fs warning (device loop5): ext4_empty_dir:3139: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 261.291993][ T4518] EXT4-fs warning (device loop5): ext4_empty_dir:3139: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 261.626275][ T4174] udevd[4174]: inotify_add_watch(7, /dev/loop6p4, 10) failed: No such file or directory [ 261.747242][ T4518] EXT4-fs warning (device loop5): ext4_empty_dir:3139: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 261.904604][ T5187] udevd[5187]: inotify_add_watch(7, /dev/loop6p1, 10) failed: No such file or directory [ 261.926861][ T4518] EXT4-fs warning (device loop5): ext4_empty_dir:3139: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 261.940932][ T4518] EXT4-fs warning (device loop5): ext4_empty_dir:3139: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 261.963461][ T8705] loop6: detected capacity change from 0 to 512 [ 261.976162][ T4518] EXT4-fs warning (device loop5): ext4_empty_dir:3139: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 262.114274][ T8713] IPv6: Can't replace route, no match found [ 262.142216][ T8705] EXT4-fs (loop6): mounted filesystem without journal. Opts: grpquota,nogrpid,quota,,errors=continue. Quota mode: writeback. [ 262.193460][ T8705] ext4 filesystem being mounted at /94/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 262.224096][ T4174] udevd[4174]: inotify_add_watch(7, /dev/loop6p4, 10) failed: No such file or directory [ 262.274609][ T5187] udevd[5187]: inotify_add_watch(7, /dev/loop6p1, 10) failed: No such file or directory [ 262.563296][ T26] audit: type=1800 audit(3921233746.484:109): pid=8704 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.927" name="regulatory.db" dev="sda1" ino=448 res=0 errno=0 [ 262.602639][ T8704] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -4 [ 262.682514][ T8726] MPTCP: kernel_bind error, err=-99 [ 263.348023][ T8704] platform regulatory.0: Direct firmware load for regulatory.db failed with error -4 [ 263.409525][ T8704] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 263.735329][ T8742] overlayfs: failed to clone upperpath [ 263.925480][ T8746] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0040 with DS=0x7 [ 264.677542][ T8757] netlink: 'syz.6.938': attribute type 10 has an invalid length. [ 264.705387][ T8757] team0: Port device dummy0 added [ 264.717146][ T8757] netlink: 'syz.6.938': attribute type 10 has an invalid length. [ 264.726449][ T8757] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 266.428405][ T8757] team0: Failed to send options change via netlink (err -105) [ 266.544844][ T8757] team0: Port device dummy0 removed [ 266.872632][ T8787] netlink: 'syz.0.948': attribute type 1 has an invalid length. [ 267.014725][ T8787] 8021q: adding VLAN 0 to HW filter on device bond1 [ 268.538093][ T8808] netlink: 52 bytes leftover after parsing attributes in process `syz.4.952'. [ 269.677823][ T8855] netlink: 16 bytes leftover after parsing attributes in process `syz.3.961'. [ 270.059351][ T8817] chnl_net:caif_netlink_parms(): no params data found [ 271.221262][ T8817] bridge0: port 1(bridge_slave_0) entered blocking state [ 271.280031][ T8817] bridge0: port 1(bridge_slave_0) entered disabled state [ 271.288290][ T5116] Bluetooth: hci1: command 0x0409 tx timeout [ 271.361523][ T8817] device bridge_slave_0 entered promiscuous mode [ 271.455348][ T8817] bridge0: port 2(bridge_slave_1) entered blocking state [ 271.478047][ T8817] bridge0: port 2(bridge_slave_1) entered disabled state [ 271.518145][ T8817] device bridge_slave_1 entered promiscuous mode [ 271.940244][ T8817] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 272.232150][ T8817] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 272.504581][ T8892] loop6: detected capacity change from 0 to 512 [ 272.523787][ T8817] team0: Port device team_slave_0 added [ 272.970023][ T8892] FAT-fs (loop6): Unrecognized mount option "uid=+1" or missing value [ 273.051199][ T8817] team0: Port device team_slave_1 added [ 273.071302][ T8817] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 273.096432][ T8817] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 273.219094][ T8817] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 273.248622][ T8817] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 273.258147][ T8817] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 273.310079][ T8817] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 273.370380][ T4225] Bluetooth: hci1: command 0x041b tx timeout [ 273.437156][ T8921] overlayfs: failed to clone upperpath [ 273.449121][ T8817] device hsr_slave_0 entered promiscuous mode [ 273.483535][ T8817] device hsr_slave_1 entered promiscuous mode [ 273.492315][ T8817] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 273.514498][ T8817] Cannot create hsr debugfs directory [ 273.520253][ T5117] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 273.788333][ T5117] usb 7-1: Using ep0 maxpacket: 32 [ 274.588898][ T5117] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 274.652441][ T5117] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 274.789865][ T8817] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 274.800777][ T8817] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 274.812441][ T8817] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 274.823578][ T8817] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 275.458557][ T4335] Bluetooth: hci1: command 0x040f tx timeout [ 275.571777][ T5117] usb 7-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 275.668812][ T5117] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 275.676840][ T5117] usb 7-1: Product: syz [ 275.698064][ T5117] usb 7-1: Manufacturer: syz [ 275.702776][ T5117] usb 7-1: SerialNumber: syz [ 275.724846][ T5117] usb 7-1: config 0 descriptor?? [ 275.745230][ T8817] 8021q: adding VLAN 0 to HW filter on device bond0 [ 275.776496][ T6492] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 275.792547][ T6492] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 275.828786][ T8817] 8021q: adding VLAN 0 to HW filter on device team0 [ 275.881612][ T1509] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 275.898241][ T1509] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 275.906772][ T1509] bridge0: port 1(bridge_slave_0) entered blocking state [ 275.913902][ T1509] bridge0: port 1(bridge_slave_0) entered forwarding state [ 275.948338][ T1509] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 276.634557][ T1509] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 277.228245][ T1509] bridge0: port 2(bridge_slave_1) entered blocking state [ 277.235375][ T1509] bridge0: port 2(bridge_slave_1) entered forwarding state [ 277.253712][ T4229] usb 7-1: USB disconnect, device number 5 [ 277.325847][ T1509] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 277.345714][ T1509] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 277.347079][ T1509] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 277.348745][ T1509] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 277.349790][ T1509] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 277.355206][ T1509] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 277.359240][ T1509] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 277.359862][ T1509] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 277.360401][ T1509] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 277.368523][ T8817] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 277.369246][ T8817] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 277.372499][ T1509] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 277.373498][ T1509] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 277.374072][ T1509] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 277.447002][ T26] audit: type=1804 audit(3921233761.364:110): pid=8971 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.989" name="file0" dev="hugetlbfs" ino=44423 res=1 errno=0 [ 277.472579][ T26] audit: type=1804 audit(3921233761.394:111): pid=8971 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.989" name="file0" dev="hugetlbfs" ino=44423 res=1 errno=0 [ 277.482466][ T8968] loop6: detected capacity change from 0 to 1024 [ 277.515356][ T8968] EXT4-fs (loop6): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 277.515411][ T8968] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 277.534744][ T4229] Bluetooth: hci1: command 0x0419 tx timeout [ 277.538426][ T8968] EXT4-fs error (device loop6): ext4_get_journal_inode:5185: inode #5: comm syz.6.988: unexpected bad inode w/o EXT4_IGET_BAD [ 277.542844][ T8968] EXT4-fs (loop6): no journal found [ 277.542861][ T8968] EXT4-fs (loop6): can't get journal size [ 277.706286][ T8968] EXT4-fs (loop6): mounted filesystem without journal. Opts: noblock_validity,stripe=0x0000000000000002,norecovery,min_batch_time=0x000000000000071d,abort,,errors=continue. Quota mode: writeback. [ 278.481434][ T1509] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 278.481560][ T1509] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 278.498782][ T8817] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 278.837788][ T4238] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 278.838466][ T4238] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 278.882974][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 278.883664][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 278.885723][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 278.886277][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 278.893914][ T8817] device veth0_vlan entered promiscuous mode [ 278.905077][ T8817] device veth1_vlan entered promiscuous mode [ 278.956452][ T1509] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 278.957116][ T1509] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 278.957616][ T1509] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 278.959282][ T1509] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 278.976384][ T8817] device veth0_macvtap entered promiscuous mode [ 278.984555][ T8817] device veth1_macvtap entered promiscuous mode [ 279.055663][ T8817] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 279.056108][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 279.056779][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 279.880570][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 279.889979][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 279.995730][ T8817] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 280.230748][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 280.241078][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 280.253049][ T8817] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 280.361140][ T8817] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 280.502901][ T8817] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 280.654179][ T8817] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 280.850424][ T9019] netlink: 'syz.6.1001': attribute type 7 has an invalid length. [ 281.033193][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 281.048894][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 281.089018][ T4238] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 281.107140][ T1509] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 281.117219][ T4238] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 281.148815][ T1509] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 281.184612][ T9022] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1005'. [ 281.324451][ T9029] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1006'. [ 281.326217][ T9030] netlink: 40 bytes leftover after parsing attributes in process `syz.7.947'. [ 281.344611][ T9030] netlink: 40 bytes leftover after parsing attributes in process `syz.7.947'. [ 281.358364][ T9030] netlink: 40 bytes leftover after parsing attributes in process `syz.7.947'. [ 281.368935][ T9030] A link change request failed with some changes committed already. Interface ip6tnl0 may have been left with an inconsistent configuration, please check. [ 282.467358][ T9056] loop7: detected capacity change from 0 to 512 [ 282.753971][ T9056] EXT4-fs (loop7): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 283.552952][ T9056] EXT4-fs (loop7): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 283.655746][ T9056] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a84ee02c, mo2=0002] [ 283.686716][ T9056] System zones: 1-12 [ 283.696326][ T9071] loop6: detected capacity change from 0 to 2048 [ 283.717395][ T9056] EXT4-fs (loop7): orphan cleanup on readonly fs [ 283.779319][ T9056] EXT4-fs error (device loop7): ext4_free_branches:1030: inode #11: comm syz.7.1015: invalid indirect mapped block 2 (level 2) [ 284.799111][ T9056] EXT4-fs (loop7): Remounting filesystem read-only [ 284.871127][ T9087] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 284.891292][ T9056] EXT4-fs (loop7): 1 truncate cleaned up [ 284.950612][ T9056] EXT4-fs (loop7): mounted filesystem without journal. Opts: dioread_nolock,max_batch_time=0x0000000000000006,usrquota,errors=remount-ro,i_version. Quota mode: writeback. [ 286.434931][ T9115] loop7: detected capacity change from 0 to 512 [ 286.535200][ T9115] EXT4-fs (loop7): mounted filesystem without journal. Opts: grpquota,nogrpid,quota,,errors=continue. Quota mode: writeback. [ 286.585364][ T9115] ext4 filesystem being mounted at /4/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 286.713633][ T9115] syz.7.1034 (9115) used greatest stack depth: 17904 bytes left [ 286.907740][ T9135] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 286.920771][ T5117] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 286.989764][ T9135] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1040'. [ 287.050716][ T9145] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1041'. [ 287.897416][ T26] audit: type=1804 audit(3921233771.814:112): pid=9159 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.1045" name="bus" dev="ramfs" ino=45511 res=1 errno=0 [ 287.958743][ T5117] usb 7-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 287.988073][ T5117] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 288.007894][ T26] audit: type=1804 audit(3921233771.884:113): pid=9159 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.1045" name="bus" dev="ramfs" ino=45511 res=1 errno=0 [ 288.035861][ T5117] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 288.071753][ T5117] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 288.120669][ T5117] usb 7-1: config 0 descriptor?? [ 288.160380][ T5117] usbhid 7-1:0.0: couldn't find an input interrupt endpoint [ 289.473802][ T9190] device ipip0 entered promiscuous mode [ 290.823680][ T7] usb 7-1: USB disconnect, device number 6 [ 291.780831][ T9212] bond0 speed is unknown, defaulting to 1000 [ 291.787340][ T9212] bond0 speed is unknown, defaulting to 1000 [ 291.794930][ T9212] bond0 speed is unknown, defaulting to 1000 [ 291.814992][ T9212] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 291.831909][ T9213] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1059'. [ 295.225226][ T9213] bond1: (slave macvlan2): Releasing backup interface [ 295.264137][ T9227] loop7: detected capacity change from 0 to 128 [ 295.510094][ T9213] bond0 (unregistering): Released all slaves [ 295.517367][ T9227] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 295.545998][ T9227] ext4 filesystem being mounted at /8/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 295.549037][ T9212] bond0 speed is unknown, defaulting to 1000 [ 296.255100][ T9212] siw: device registration error -19 [ 297.282169][ T9227] fscrypt: Adiantum using implementation "adiantum(xchacha12-simd,aes-aesni,nhpoly1305-avx2)" [ 297.288933][ T9256] overlayfs: failed to clone upperpath [ 297.551695][ T9265] program syz.6.1073 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 298.308773][ T9270] program syz.6.1073 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 298.366462][ T9276] loop7: detected capacity change from 0 to 256 [ 298.416614][ T9279] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1078'. [ 298.439476][ T9276] exfat: Bad value for 'umask' [ 298.505359][ T9287] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1082'. [ 298.517645][ T9287] (unnamed net_device) (uninitialized): Invalid ad_actor_system MAC address. [ 298.527490][ T9287] (unnamed net_device) (uninitialized): option ad_actor_system: invalid value (68719607821) [ 298.709765][ T21] usb 7-1: new full-speed USB device number 7 using dummy_hcd [ 302.005597][ T21] usb 7-1: device descriptor read/all, error -71 [ 302.076177][ T9318] loop7: detected capacity change from 0 to 512 [ 304.647677][ T9337] overlayfs: failed to clone upperpath [ 304.654184][ T9318] EXT4-fs (loop7): mounted filesystem without journal. Opts: nombcache,max_dir_size_kb=0x0000000000000a30,journal_dev=0x00000000460b8000,,errors=continue. Quota mode: writeback. [ 304.694001][ T9318] ext4 filesystem being mounted at /10/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 306.358093][ T9353] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1097'. [ 306.966014][ T9357] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1101'. [ 307.048529][ T9357] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1101'. [ 307.174854][ T9357] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1101'. [ 307.197519][ T9357] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1101'. [ 307.462509][ T9368] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 307.719917][ T9368] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 307.898156][ T9368] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 307.907320][ T9368] device bridge_slave_0 left promiscuous mode [ 307.913753][ T9368] bridge0: port 1(bridge_slave_0) entered disabled state [ 307.986807][ T9368] device bridge_slave_1 left promiscuous mode [ 307.995924][ T9368] bridge0: port 2(bridge_slave_1) entered disabled state [ 308.040961][ T9368] bond0: (slave bond_slave_0): Releasing backup interface [ 308.242829][ T9368] bond0: (slave bond_slave_1): Releasing backup interface [ 309.209464][ T9368] team0: Port device team_slave_0 removed [ 309.444138][ T9368] team0: Port device team_slave_1 removed [ 309.452180][ T9368] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 309.460487][ T9368] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 309.480430][ T9368] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 309.488349][ T9368] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 309.659298][ T9387] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1109'. [ 309.718587][ T9387] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1109'. [ 310.640358][ T9409] device syzkaller0 entered promiscuous mode [ 311.251810][ T9420] loop6: detected capacity change from 0 to 256 [ 311.389220][ T9420] exfat: Bad value for 'umask' [ 311.419987][ T9423] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1119'. [ 313.536331][ T9430] loop6: detected capacity change from 0 to 1024 [ 313.537626][ T26] audit: type=1800 audit(3921233797.454:114): pid=9404 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1115" name="bus" dev="ramfs" ino=45744 res=0 errno=0 [ 313.568730][ T9430] EXT4-fs (loop6): Ignoring removed orlov option [ 313.755085][ T9438] netdevsim netdevsim7: loading /lib/firmware/. failed with error -22 [ 313.763605][ T9438] netdevsim netdevsim7: Direct firmware load for . failed with error -22 [ 313.772531][ T9438] netdevsim netdevsim7: Falling back to sysfs fallback for: . [ 314.449853][ T9430] EXT4-fs (loop6): mounted filesystem without journal. Opts: block_validity,bsddf,nombcache,inode_readahead_blks=0x0000000000000000,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,grpjquota=,,errors=continue. Quota mode: none. [ 317.004780][ T9490] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1139'. [ 317.084725][ T9490] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 317.093687][ T9490] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 317.102594][ T9490] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 317.111394][ T9490] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 317.132280][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.139534][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 318.060044][ T9512] dns_resolver: Unsupported server list version (6) [ 318.420905][ T9488] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1139'. [ 318.431692][ T9488] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1139'. [ 320.618792][ T4225] usb 7-1: new full-speed USB device number 9 using dummy_hcd [ 321.548548][ T4225] usb 7-1: unable to get BOS descriptor or descriptor too short [ 321.917185][ T9562] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1155'. [ 322.094761][ T9562] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 322.103618][ T9562] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 322.112501][ T9562] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 322.121258][ T9562] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 322.428402][ T4225] usb 7-1: unable to read config index 0 descriptor/start: -71 [ 322.436084][ T4225] usb 7-1: can't read configurations, error -71 [ 322.438336][ T9567] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1155'. [ 322.490669][ T9567] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1155'. [ 322.529012][ T9562] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1155'. [ 322.579130][ T9577] binder_alloc: 9576: pid 9576 spamming oneway? 2 buffers allocated for a total size of 5120 [ 322.615601][ T9577] binder_alloc: 9576: pid 9576 spamming oneway? 3 buffers allocated for a total size of 5128 [ 324.939554][ T9617] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1173'. [ 325.159697][ T9625] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1177'. [ 325.317989][ T9637] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1190'. [ 325.400591][ T9638] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1178'. [ 325.469274][ T9638] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 325.478420][ T9638] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 325.487149][ T9638] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 325.496001][ T9638] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 325.506900][ T9638] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1178'. [ 325.525592][ T9638] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1178'. [ 325.551908][ T9638] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1178'. [ 325.692595][ T9643] device bridge2 entered promiscuous mode [ 325.763647][ T9641] tap0: tun_chr_ioctl cmd 2148553947 [ 326.399508][ C1] dccp_invalid_packet: P.Data Offset(140) too large [ 326.406347][ C1] dccp_v4_rcv: dropped packet with invalid checksum [ 329.029602][ T9678] __nla_validate_parse: 1 callbacks suppressed [ 329.029695][ T9678] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1195'. [ 329.311964][ T9678] netdevsim netdevsim7 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 329.321290][ T9678] netdevsim netdevsim7 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 329.330438][ T9678] netdevsim netdevsim7 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 329.339243][ T9678] netdevsim netdevsim7 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 329.405810][ T9680] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1195'. [ 329.466969][ T9680] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1195'. [ 329.585069][ T9678] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1195'. [ 330.072364][ T9690] device bridge1 entered promiscuous mode [ 331.815358][ T9704] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1204'. [ 331.824984][ T9704] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1204'. [ 332.164463][ T9716] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1203'. [ 333.246697][ T9723] 9p filesystem being mounted at /141/file0 supports timestamps until 2106-02-07 (0xffffffff) [ 333.416789][ T9730] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1211'. [ 335.928720][ T9760] loop7: detected capacity change from 0 to 256 [ 337.512231][ T9760] FAT-fs (loop7): Directory bread(block 64) failed [ 337.550398][ T9760] FAT-fs (loop7): Directory bread(block 65) failed [ 337.557389][ T26] audit: type=1804 audit(3921233821.474:115): pid=9781 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.1225" name="bus" dev="ramfs" ino=46572 res=1 errno=0 [ 337.585436][ T9774] O§Xà€ [ 337.637155][ T9760] FAT-fs (loop7): Directory bread(block 66) failed [ 337.662893][ T26] audit: type=1804 audit(3921233821.514:116): pid=9781 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.1225" name="bus" dev="ramfs" ino=46572 res=1 errno=0 [ 337.676846][ T9760] FAT-fs (loop7): Directory bread(block 67) failed [ 337.721731][ T9760] FAT-fs (loop7): Directory bread(block 68) failed [ 337.729629][ T9760] FAT-fs (loop7): Directory bread(block 69) failed [ 337.736370][ T9760] FAT-fs (loop7): Directory bread(block 70) failed [ 337.743327][ T9760] FAT-fs (loop7): Directory bread(block 71) failed [ 337.750756][ T9760] FAT-fs (loop7): Directory bread(block 72) failed [ 337.757534][ T9760] FAT-fs (loop7): Directory bread(block 73) failed [ 337.774787][ T9760] vfat filesystem being mounted at /38/file1 supports timestamps until 2107-12-31 (0x10391447e) [ 339.114110][ T4229] Process accounting resumed [ 339.918218][ T5121] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 339.976133][ T9813] overlayfs: failed to clone upperpath [ 340.175365][ T9819] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1239'. [ 340.185358][ T9819] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1239'. [ 340.197858][ T9819] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1239'. [ 340.198257][ T5121] usb 7-1: Using ep0 maxpacket: 32 [ 340.364341][ T9819] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1239'. [ 340.509693][ T5121] usb 7-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 340.556534][ T5121] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 340.661220][ T5121] usb 7-1: Product: syz [ 340.713207][ T5121] usb 7-1: Manufacturer: syz [ 340.847968][ T5121] usb 7-1: SerialNumber: syz [ 340.863706][ T5121] usb 7-1: config 0 descriptor?? [ 340.950338][ T5121] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 342.864417][ T9858] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1251'. [ 342.889805][ T9858] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1251'. [ 342.903091][ T9858] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1251'. [ 342.918990][ T9858] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1251'. [ 343.563493][ T9863] device syzkaller0 entered promiscuous mode [ 344.028344][ T5121] gspca_ov534_9: reg_r err -71 [ 344.317861][ T9875] netlink: 798 bytes leftover after parsing attributes in process `syz.3.1257'. [ 347.208108][ T5121] gspca_ov534_9: Unknown sensor 0000 [ 347.208184][ T5121] ov534_9: probe of 7-1:0.0 failed with error -22 [ 347.710860][ T9900] netlink: 48 bytes leftover after parsing attributes in process `syz.6.1265'. [ 348.357567][ T5121] usb 7-1: USB disconnect, device number 11 [ 350.600679][ T9939] loop7: detected capacity change from 0 to 256 [ 350.724660][ T9939] vfat filesystem being mounted at /44/file0 supports timestamps until 2107-12-31 (0x10391447e) [ 351.246319][ T9906] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 351.255518][ T9906] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 351.264665][ T9906] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 351.273587][ T9906] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 351.300199][ T9929] device vlan2 entered promiscuous mode [ 351.305780][ T9929] device gretap0 entered promiscuous mode [ 351.417136][ T9945] device syzkaller0 entered promiscuous mode [ 352.903054][ T9958] 8021q: adding VLAN 0 to HW filter on device bond0 [ 353.402918][ T26] audit: type=1326 audit(3921233837.324:117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9969 comm="syz.7.1283" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f90b2946799 code=0x7ffc0000 [ 353.577304][ T26] audit: type=1326 audit(3921233837.354:118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9969 comm="syz.7.1283" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f90b2946799 code=0x7ffc0000 [ 353.610233][ T26] audit: type=1326 audit(3921233837.374:119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9969 comm="syz.7.1283" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f90b2946799 code=0x7ffc0000 [ 354.688332][ T26] audit: type=1326 audit(3921233837.374:120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9969 comm="syz.7.1283" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f90b2946799 code=0x7ffc0000 [ 354.711580][ T26] audit: type=1326 audit(3921233837.374:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9969 comm="syz.7.1283" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f90b2946799 code=0x7ffc0000 [ 355.556441][ T26] audit: type=1326 audit(3921233837.374:122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9969 comm="syz.7.1283" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f90b2946799 code=0x7ffc0000 [ 355.628431][ T26] audit: type=1326 audit(3921233837.384:123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9969 comm="syz.7.1283" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f90b2946799 code=0x7ffc0000 [ 356.200240][ T26] audit: type=1326 audit(3921233837.384:124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9969 comm="syz.7.1283" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f90b2946799 code=0x7ffc0000 [ 356.438623][ T26] audit: type=1326 audit(3921233837.384:125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9969 comm="syz.7.1283" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f90b2946799 code=0x7ffc0000 [ 356.497693][ T26] audit: type=1326 audit(3921233837.394:126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9969 comm="syz.7.1283" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f90b2946799 code=0x7ffc0000 [ 358.524251][T10031] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1301'. [ 358.673268][T10038] netlink: 'syz.3.1304': attribute type 1 has an invalid length. [ 358.936772][T10050] loop6: detected capacity change from 0 to 256 [ 360.257183][T10045] bond0: (slave veth5): Enslaving as an active interface with a down link [ 360.411665][T10050] vfat filesystem being mounted at /154/file0 supports timestamps until 2107-12-31 (0x10391447e) [ 360.596280][T10038] bond0: (slave dummy0): making interface the new active one [ 360.694185][T10038] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 360.724290][T10045] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1304'. [ 360.764520][T10045] bond0: (slave dummy0): Releasing active interface [ 364.835213][T10111] loop7: detected capacity change from 0 to 512 [ 365.210238][T10111] FAT-fs (loop7): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 365.243966][T10132] IPVS: ovf: FWM 3 0x00000003 - no destination available [ 365.332637][T10111] vfat filesystem being mounted at /51/file0 supports timestamps until 2107-12-31 (0x10391447e) [ 365.478092][T10111] loop7: detected capacity change from 512 to 0 [ 365.490614][ C1] blk_update_request: I/O error, dev loop7, sector 34 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 365.493714][ C0] blk_update_request: I/O error, dev loop7, sector 35 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 365.536269][ C1] blk_update_request: I/O error, dev loop7, sector 42 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 365.571607][ C1] blk_update_request: I/O error, dev loop7, sector 45 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 365.583018][ C1] blk_update_request: I/O error, dev loop7, sector 46 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 365.590983][ C0] blk_update_request: I/O error, dev loop7, sector 36 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 365.594372][ C1] blk_update_request: I/O error, dev loop7, sector 47 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 365.605648][ C0] blk_update_request: I/O error, dev loop7, sector 37 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 365.616882][ C1] blk_update_request: I/O error, dev loop7, sector 48 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 365.628163][ C0] blk_update_request: I/O error, dev loop7, sector 38 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 365.652112][T10134] FAT-fs (loop7): Directory bread(block 34) failed [ 365.681742][T10134] FAT-fs (loop7): Directory bread(block 35) failed [ 365.688670][T10134] FAT-fs (loop7): Directory bread(block 36) failed [ 365.695378][T10134] FAT-fs (loop7): Directory bread(block 37) failed [ 365.706134][T10134] FAT-fs (loop7): Directory bread(block 38) failed [ 365.723669][T10134] FAT-fs (loop7): Directory bread(block 39) failed [ 365.734183][T10134] FAT-fs (loop7): Directory bread(block 40) failed [ 365.745024][T10134] FAT-fs (loop7): Directory bread(block 41) failed [ 365.752074][T10134] FAT-fs (loop7): Directory bread(block 42) failed [ 365.763223][T10134] FAT-fs (loop7): Directory bread(block 43) failed [ 366.844358][ T8817] FAT-fs (loop7): unable to read boot sector to mark fs as dirty [ 368.104876][T10169] MPTCP: kernel_bind error, err=-98 [ 368.150101][ T4368] netdevsim netdevsim7 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 368.187982][ T4368] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 368.307413][ T4368] netdevsim netdevsim7 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 368.331214][ T4368] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 368.377383][ T26] kauditd_printk_skb: 62 callbacks suppressed [ 368.377396][ T26] audit: type=1804 audit(3921233852.294:189): pid=10173 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.6.1343" name="bus" dev="ramfs" ino=47026 res=1 errno=0 [ 368.477552][ T26] audit: type=1804 audit(3921233852.334:190): pid=10173 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.6.1343" name="bus" dev="ramfs" ino=47026 res=1 errno=0 [ 368.555484][ T4368] netdevsim netdevsim7 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 368.578348][ T4368] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 369.372961][ T4368] netdevsim netdevsim7 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 369.407973][ T4368] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 371.179914][T10214] IPVS: set_ctl: invalid protocol: 0 100.1.0.255:20000 [ 371.303867][T10182] chnl_net:caif_netlink_parms(): no params data found [ 371.609935][ T7] Bluetooth: hci1: command 0x0409 tx timeout [ 372.673387][T10182] bridge0: port 1(bridge_slave_0) entered blocking state [ 372.700675][T10182] bridge0: port 1(bridge_slave_0) entered disabled state [ 372.727563][T10182] device bridge_slave_0 entered promiscuous mode [ 372.774271][T10182] bridge0: port 2(bridge_slave_1) entered blocking state [ 372.784448][T10182] bridge0: port 2(bridge_slave_1) entered disabled state [ 372.793438][T10182] device bridge_slave_1 entered promiscuous mode [ 372.825583][T10182] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 372.857370][T10182] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 372.890657][T10182] team0: Port device team_slave_0 added [ 372.899464][T10182] team0: Port device team_slave_1 added [ 372.954640][T10182] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 372.962153][T10182] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 372.988936][T10182] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 373.002182][T10182] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 373.009675][T10182] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 373.042536][T10182] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 373.171673][T10182] device hsr_slave_0 entered promiscuous mode [ 373.189857][T10182] device hsr_slave_1 entered promiscuous mode [ 373.199920][T10182] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 373.248138][T10182] Cannot create hsr debugfs directory [ 373.345076][ T4368] device hsr_slave_0 left promiscuous mode [ 373.388172][ T4368] device hsr_slave_1 left promiscuous mode [ 373.443497][ T4368] device veth1_macvtap left promiscuous mode [ 373.472738][ T4368] device veth0_macvtap left promiscuous mode [ 373.504659][ T4368] device veth1_vlan left promiscuous mode [ 373.743943][ T7] Bluetooth: hci1: command 0x041b tx timeout [ 374.251250][ T4368] device veth0_vlan left promiscuous mode [ 374.876274][ T4368] bond0 (unregistering): Released all slaves [ 374.941517][T10258] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1358'. [ 374.960928][T10297] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1367'. [ 375.089564][T10311] overlayfs: failed to clone upperpath [ 375.112947][T10312] loop6: detected capacity change from 0 to 512 [ 375.209053][T10314] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1372'. [ 375.234750][T10312] FAT-fs (loop6): bogus number of FAT sectors [ 375.268559][T10312] FAT-fs (loop6): Can't find a valid FAT filesystem [ 375.367232][T10182] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 375.387023][T10182] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 375.541746][T10182] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 375.953696][ T7] Bluetooth: hci1: command 0x040f tx timeout [ 376.044596][T10182] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 376.452167][T10339] overlayfs: failed to clone upperpath [ 376.665376][T10182] 8021q: adding VLAN 0 to HW filter on device bond0 [ 377.886576][ T1509] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 377.920621][ T1509] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 378.002403][T10182] 8021q: adding VLAN 0 to HW filter on device team0 [ 378.079424][ T1509] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 378.094608][ T7] Bluetooth: hci1: command 0x0419 tx timeout [ 378.118751][ T1509] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 378.130492][T10363] overlayfs: failed to clone upperpath [ 378.168463][ T1509] bridge0: port 1(bridge_slave_0) entered blocking state [ 378.175600][ T1509] bridge0: port 1(bridge_slave_0) entered forwarding state [ 378.227828][ T1509] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 378.266808][ T4369] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 378.315443][ T4369] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 378.497363][ T4369] bridge0: port 2(bridge_slave_1) entered blocking state [ 378.504546][ T4369] bridge0: port 2(bridge_slave_1) entered forwarding state [ 378.570297][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.576798][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.711925][ T4369] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 378.791773][ T4369] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 378.817387][ T4369] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 378.849610][ T4369] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 378.879035][ T4369] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 379.537441][ T4369] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 379.575006][ T4369] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 379.826927][ T4369] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 379.836547][ T4369] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 379.859279][ T4369] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 379.880413][ T4369] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 380.807604][T10405] ------------[ cut here ]------------ [ 380.835613][T10405] wlan0: Failed check-sdata-in-driver check, flags: 0x4 [ 380.876627][T10405] WARNING: CPU: 0 PID: 10405 at net/mac80211/driver-ops.h:172 ieee80211_bss_info_change_notify+0x37b/0x550 [ 380.907367][T10415] loop6: detected capacity change from 0 to 128 [ 380.945190][T10405] Modules linked in: [ 380.984421][T10405] CPU: 0 PID: 10405 Comm: syz.0.1393 Not tainted syzkaller #0 [ 381.015669][T10415] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 381.035597][T10405] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 381.074403][T10415] ext4 filesystem being mounted at /175/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 381.078979][T10405] RIP: 0010:ieee80211_bss_info_change_notify+0x37b/0x550 [ 381.150747][T10405] Code: 39 7e f8 49 8b 84 24 00 06 00 00 49 81 c4 20 06 00 00 48 85 c0 4c 0f 45 e0 48 c7 c7 20 20 39 8b 4c 89 e6 89 ea e8 05 86 71 00 <0f> 0b e9 07 fd ff ff e8 a9 2d 39 f8 0f 0b e9 b1 fe ff ff e8 9d 2d [ 381.194981][T10405] RSP: 0018:ffffc9000324f3a0 EFLAGS: 00010246 [ 381.219249][T10405] RAX: 1b61530600061200 RBX: 0000000002000000 RCX: 0000000000080000 [ 381.233876][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 381.247509][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 381.248695][T10405] RDX: ffffc900061f1000 RSI: 00000000000063f7 RDI: 00000000000063f8 [ 381.290043][T10182] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 381.290405][T10405] RBP: 0000000000000004 R08: ffff8880b9033d7f R09: 1ffff110172067af [ 381.318406][T10405] R10: dffffc0000000000 R11: ffffed10172067b0 R12: ffff88806015c000 [ 381.337125][T10405] R13: ffff88806015d290 R14: ffff888077ed0e40 R15: ffff88806015e268 [ 381.359838][T10405] FS: 00007f089de2f6c0(0000) GS:ffff8880b9000000(0000) knlGS:0000000000000000 [ 381.380464][T10405] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 381.395611][T10405] CR2: 000055c3cf938950 CR3: 0000000071ecf000 CR4: 00000000003506f0 [ 381.416563][T10405] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 381.445211][T10405] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 381.469172][T10405] Call Trace: [ 381.475995][T10405] [ 381.481531][T10405] ieee80211_set_mcast_rate+0x3b/0x50 [ 381.491720][T10405] ? ieee80211_leave_ibss+0x20/0x20 [ 381.502795][T10405] nl80211_set_mcast_rate+0x346/0x530 [ 381.515189][T10405] ? nl80211_nan_change_config+0x6b0/0x6b0 [ 381.528784][T10405] genl_rcv_msg+0xcea/0xf90 [ 381.536338][T10405] ? genl_bind+0x380/0x380 [ 381.558027][T10405] ? __dev_queue_xmit+0x1cbf/0x2f80 [ 381.576375][T10405] ? verify_lock_unused+0x140/0x140 [ 381.595503][T10405] ? dev_queue_xmit+0x20/0x20 [ 381.631448][T10405] ? nl80211_nan_change_config+0x6b0/0x6b0 [ 381.672047][T10405] netlink_rcv_skb+0x1f5/0x440 [ 381.709386][T10405] ? genl_bind+0x380/0x380 [ 381.744292][T10405] ? netlink_ack+0xb50/0xb50 [ 381.763927][T10405] ? __lock_acquire+0x7d10/0x7d10 [ 381.808822][T10405] ? down_read+0x1aa/0x2e0 [ 381.819467][T10405] genl_rcv+0x24/0x40 [ 381.823574][T10405] netlink_unicast+0x774/0x920 [ 381.828839][T10405] netlink_sendmsg+0x8ba/0xbe0 [ 381.834840][T10405] ? netlink_getsockopt+0x570/0x570 [ 381.846957][T10405] ? aa_sock_msg_perm+0x94/0x150 [ 381.859896][T10405] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 381.873155][T10405] ? security_socket_sendmsg+0x7c/0xa0 [ 381.873524][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 381.913585][T10405] ? netlink_getsockopt+0x570/0x570 [ 381.917397][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 381.924756][T10405] ____sys_sendmsg+0x5b7/0x8f0 [ 381.933824][T10182] device veth0_vlan entered promiscuous mode [ 381.941478][T10405] ? __sys_sendmsg_sock+0x30/0x30 [ 381.953398][T10405] ? import_iovec+0x6f/0xa0 [ 381.961597][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 381.964777][T10405] ___sys_sendmsg+0x236/0x2e0 [ 381.979127][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 381.995995][T10405] ? __sys_sendmsg+0x2a0/0x2a0 [ 382.011392][T10182] device veth1_vlan entered promiscuous mode [ 382.013612][T10405] __se_sys_sendmsg+0x1af/0x290 [ 382.023237][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 382.041417][T10405] ? __x64_sys_sendmsg+0x80/0x80 [ 382.051423][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 382.057767][T10405] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 382.072081][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 382.082533][T10405] ? lockdep_hardirqs_on+0x94/0x140 [ 382.101225][T10405] do_syscall_64+0x4c/0xa0 [ 382.117138][T10405] ? clear_bhb_loop+0x30/0x80 [ 382.125090][ T4369] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 382.133377][T10405] ? clear_bhb_loop+0x30/0x80 [ 382.142975][ T4369] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 382.155477][T10405] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 382.156573][ T4369] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 382.184115][T10405] RIP: 0033:0x7f089fbd5799 [ 382.185560][T10182] device veth0_macvtap entered promiscuous mode [ 382.208550][T10182] device veth1_macvtap entered promiscuous mode [ 382.215348][T10405] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 382.227171][T10182] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 382.243331][T10405] RSP: 002b:00007f089de2f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 382.266307][T10405] RAX: ffffffffffffffda RBX: 00007f089fe4efa0 RCX: 00007f089fbd5799 [ 382.284497][ T4369] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 382.299748][ T4369] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 382.307622][T10405] RDX: 000000000000c800 RSI: 00002000000007c0 RDI: 0000000000000005 [ 382.323616][ T4369] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 382.335321][T10405] RBP: 00007f089fc6bc99 R08: 0000000000000000 R09: 0000000000000000 [ 382.350703][T10405] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 382.362569][ T4369] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 382.378915][T10405] R13: 00007f089fe4f038 R14: 00007f089fe4efa0 R15: 00007ffca44efbf8 [ 382.392367][T10182] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 382.411519][ T4369] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 382.424712][T10405] [ 382.431181][T10405] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 382.438477][T10405] CPU: 1 PID: 10405 Comm: syz.0.1393 Not tainted syzkaller #0 [ 382.445944][T10405] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 382.456005][T10405] Call Trace: [ 382.459291][T10405] [ 382.462236][T10405] dump_stack_lvl+0x188/0x250 [ 382.466926][T10405] ? show_regs_print_info+0x20/0x20 [ 382.472145][T10405] ? load_image+0x400/0x400 [ 382.476666][T10405] panic+0x2e5/0x810 [ 382.480572][T10405] ? bpf_jit_dump+0xd0/0xd0 [ 382.485098][T10405] ? ieee80211_bss_info_change_notify+0x37b/0x550 [ 382.491525][T10405] __warn+0x248/0x2b0 [ 382.495515][T10405] ? ieee80211_bss_info_change_notify+0x37b/0x550 [ 382.501954][T10405] report_bug+0x1b7/0x2e0 [ 382.506317][T10405] handle_bug+0x3a/0x70 [ 382.510486][T10405] exc_invalid_op+0x16/0x40 [ 382.514996][T10405] asm_exc_invalid_op+0x16/0x20 [ 382.519855][T10405] RIP: 0010:ieee80211_bss_info_change_notify+0x37b/0x550 [ 382.526892][T10405] Code: 39 7e f8 49 8b 84 24 00 06 00 00 49 81 c4 20 06 00 00 48 85 c0 4c 0f 45 e0 48 c7 c7 20 20 39 8b 4c 89 e6 89 ea e8 05 86 71 00 <0f> 0b e9 07 fd ff ff e8 a9 2d 39 f8 0f 0b e9 b1 fe ff ff e8 9d 2d [ 382.546504][T10405] RSP: 0018:ffffc9000324f3a0 EFLAGS: 00010246 [ 382.550673][ T4369] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 382.552581][T10405] RAX: 1b61530600061200 RBX: 0000000002000000 RCX: 0000000000080000 [ 382.568703][T10405] RDX: ffffc900061f1000 RSI: 00000000000063f7 RDI: 00000000000063f8 [ 382.576675][T10405] RBP: 0000000000000004 R08: ffff8880b9033d7f R09: 1ffff110172067af [ 382.584651][T10405] R10: dffffc0000000000 R11: ffffed10172067b0 R12: ffff88806015c000 [ 382.592718][T10405] R13: ffff88806015d290 R14: ffff888077ed0e40 R15: ffff88806015e268 [ 382.600722][T10405] ieee80211_set_mcast_rate+0x3b/0x50 [ 382.606104][T10405] ? ieee80211_leave_ibss+0x20/0x20 [ 382.611305][T10405] nl80211_set_mcast_rate+0x346/0x530 [ 382.616777][T10405] ? nl80211_nan_change_config+0x6b0/0x6b0 [ 382.622687][T10405] genl_rcv_msg+0xcea/0xf90 [ 382.627203][T10405] ? genl_bind+0x380/0x380 [ 382.631619][T10405] ? __dev_queue_xmit+0x1cbf/0x2f80 [ 382.636900][T10405] ? verify_lock_unused+0x140/0x140 [ 382.642113][T10405] ? dev_queue_xmit+0x20/0x20 [ 382.646814][T10405] ? nl80211_nan_change_config+0x6b0/0x6b0 [ 382.652615][T10405] netlink_rcv_skb+0x1f5/0x440 [ 382.657453][T10405] ? genl_bind+0x380/0x380 [ 382.661942][T10405] ? netlink_ack+0xb50/0xb50 [ 382.666525][T10405] ? __lock_acquire+0x7d10/0x7d10 [ 382.671543][T10405] ? down_read+0x1aa/0x2e0 [ 382.675950][T10405] genl_rcv+0x24/0x40 [ 382.679920][T10405] netlink_unicast+0x774/0x920 [ 382.684675][T10405] netlink_sendmsg+0x8ba/0xbe0 [ 382.689431][T10405] ? netlink_getsockopt+0x570/0x570 [ 382.694616][T10405] ? aa_sock_msg_perm+0x94/0x150 [ 382.699543][T10405] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 382.704813][T10405] ? security_socket_sendmsg+0x7c/0xa0 [ 382.710261][T10405] ? netlink_getsockopt+0x570/0x570 [ 382.715442][T10405] ____sys_sendmsg+0x5b7/0x8f0 [ 382.720200][T10405] ? __sys_sendmsg_sock+0x30/0x30 [ 382.725216][T10405] ? import_iovec+0x6f/0xa0 [ 382.729709][T10405] ___sys_sendmsg+0x236/0x2e0 [ 382.734415][T10405] ? __sys_sendmsg+0x2a0/0x2a0 [ 382.739193][T10405] __se_sys_sendmsg+0x1af/0x290 [ 382.744035][T10405] ? __x64_sys_sendmsg+0x80/0x80 [ 382.748989][T10405] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 382.754966][T10405] ? lockdep_hardirqs_on+0x94/0x140 [ 382.760161][T10405] do_syscall_64+0x4c/0xa0 [ 382.764568][T10405] ? clear_bhb_loop+0x30/0x80 [ 382.769228][T10405] ? clear_bhb_loop+0x30/0x80 [ 382.773888][T10405] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 382.779766][T10405] RIP: 0033:0x7f089fbd5799 [ 382.784168][T10405] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 382.803847][T10405] RSP: 002b:00007f089de2f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 382.812254][T10405] RAX: ffffffffffffffda RBX: 00007f089fe4efa0 RCX: 00007f089fbd5799 [ 382.820210][T10405] RDX: 000000000000c800 RSI: 00002000000007c0 RDI: 0000000000000005 [ 382.828166][T10405] RBP: 00007f089fc6bc99 R08: 0000000000000000 R09: 0000000000000000 [ 382.836120][T10405] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 382.844074][T10405] R13: 00007f089fe4f038 R14: 00007f089fe4efa0 R15: 00007ffca44efbf8 [ 382.852046][T10405] [ 382.855335][T10405] Kernel Offset: disabled [ 382.859991][T10405] Rebooting in 86400 seconds..