last executing test programs: 1m43.983562123s ago: executing program 1 (id=95): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r2, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) 1m43.868528535s ago: executing program 1 (id=96): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x1]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={0x28, 0x14, 0x1, 0x4, 0x0, {0xa}, [@typed={0x14, 0x1, 0x0, 0x0, @ipv6=@mcast1}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000804}, 0x8018) 1m43.72733787s ago: executing program 1 (id=100): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x0, 0x0) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12013f00000000407f04ffff00000000000109022d000100000000090400001503000000092140000001220f00090581", @ANYRES8], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, 0x0) syz_usb_control_io(r0, &(0x7f0000000b00)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="00000f00000009003d140f3c369197d09647190890"], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x0) ioctl$HIDIOCGUSAGE(r1, 0x501c4814, &(0x7f0000000000)={0x2, 0xffffffff, 0x0, 0x8, 0x0, 0xfffffffc}) 1m41.324000486s ago: executing program 1 (id=151): syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000280)='./file0\x00', 0x3800813, &(0x7f0000000080)=ANY=[@ANYBLOB='iocharset=cp1251,unhide,nojoliet,nojoliet,norock,overriderockperm,dmode=0x000000000000,nocompress,check=relaxed,norock,map=normal,check=relaxed,cruft,dmode=0x0\x0000000000000009,map=acorn,\x00'], 0x9, 0xa51, &(0x7f0000001240)="$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") inotify_init() mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x109041, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x81105a, 0x0) mount$bind(&(0x7f0000000880)='./file0/../file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x1adc11, 0x0) mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x1887008, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r0, &(0x7f0000006b40)={0x2020}, 0x206e) 1m40.963286143s ago: executing program 1 (id=160): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x1]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') pread64(r2, &(0x7f0000001240)=""/102400, 0x19000, 0x1000000000) 1m40.39950085s ago: executing program 1 (id=170): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$FS_IOC_GETFSLABEL(r2, 0x800452d3, 0x0) 1m40.252146245s ago: executing program 32 (id=170): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$FS_IOC_GETFSLABEL(r2, 0x800452d3, 0x0) 1m3.346116264s ago: executing program 2 (id=787): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x1]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000080)={0x40}, 0x10) 1m3.187821061s ago: executing program 2 (id=791): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) prlimit64(0x0, 0x2, &(0x7f0000000040)={0x0, 0xffffffffffffffff}, 0x0) brk(0x5d555cde6007) 1m3.08851112s ago: executing program 2 (id=794): mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) pivot_root(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='./file0\x00') 1m3.034259176s ago: executing program 2 (id=795): syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000000300)='./file2\x00', 0x80, &(0x7f00000010c0)=ANY=[@ANYBLOB="666c7573682c6e6f646f74732c646973636172642c646d61736b3d30303030303030303030303030303030303030303030322c646d61736b3d30303030303030303030303030303030303030303137372c646f74732c6e6f646f74732c71756965742c646f74732c0023c3cb4d2e3cbf18508098fe0de2af38db67d42d1bc4ab714d52f019082433fc9ca2d7174b2c4ece31c9f4c7a4d53914e100"/167], 0x1, 0x140, &(0x7f0000000000)="$eJzs27Fq21AUBuDj2m3ddvFcOgi6dDJtn6CluFAqaEnwkEwJOFnsYIgXJZMfJS8YCJ683ZAo2Imxhwy2IPq+RT/8CO4dpMMV6OjT2XAwnpyO/8+i3WhE60dkMW9EJ15FM0rTAABeknlKcZNSSm+n8e4qUkpVrwgA2DbzHwDqx/wHgPox/wGgfvYPDv/+zPPeXpa1I66nRb/ol9ey//0n733N7nWWd82Kot9c9N/KPnvav473D/33tf2b+PK57O+6X//ylf5DDLa/fQAAAKiFbraw9nzf7W7qy/To+8DK+b0VH1s72wYA8AyTi8vh8Wh0ci4IgrAIVb+ZgG1bPvRVrwQAAAAAAAAAAAAAANhkF78TVb1HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAWHUbAAD//0DvUik=") syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000000)='./file0\x00', 0x2000494, &(0x7f0000000440)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c00484516000000000037c015c57600912233eefc80e89be5a1ef2c27ebf5171169dcfa4805d89c7e1f70d73d649ba4afab8b2194a9e8b537ad2ed68f8319883b84237da3bf9213365872b3f3"], 0x1, 0x2b9, &(0x7f0000000fc0)="$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") mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x109041, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x81105a, 0x0) mount$bind(&(0x7f0000000880)='./file0/../file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x1adc11, 0x0) mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f0000000080)='./file0/file0/file0\x00', 0x0, 0x887008, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r0, &(0x7f0000006b40)={0x2020}, 0x2020) 1m2.819684318s ago: executing program 2 (id=798): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r2, 0x1, 0x2a, &(0x7f0000000000)=0x3, 0x4) 1m2.367597805s ago: executing program 2 (id=802): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='pids.events\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6f, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$inet6(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000100)={'ip6_vti0\x00', &(0x7f0000000200)={'syztnl2\x00', 0x0, 0x29, 0x2, 0x6, 0xfffffffe, 0x4, @private1, @private2, 0x1, 0x80, 0x2a, 0x4}}) 1m2.273291644s ago: executing program 33 (id=802): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='pids.events\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6f, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$inet6(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000100)={'ip6_vti0\x00', &(0x7f0000000200)={'syztnl2\x00', 0x0, 0x29, 0x2, 0x6, 0xfffffffe, 0x4, @private1, @private2, 0x1, 0x80, 0x2a, 0x4}}) 59.563854942s ago: executing program 5 (id=840): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x1]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) rename(0x0, &(0x7f00000001c0)='./file0\x00') 59.430936165s ago: executing program 5 (id=841): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) clock_nanosleep(0x8, 0x0, &(0x7f0000000000)={0x77359400}, 0xfffffffffffffffe) 58.497319971s ago: executing program 5 (id=850): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x1]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) mount$binderfs(0x0, &(0x7f0000000080)='./binderfs\x00', 0x0, 0x2010860, &(0x7f0000000200)=ANY=[@ANYBLOB='context=s']) 58.351176346s ago: executing program 5 (id=853): syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000000300)='./file2\x00', 0x80, &(0x7f00000010c0)=ANY=[@ANYBLOB="666c7573682c6e6f646f74732c646973636172642c646d61736b3d30303030303030303030303030303030303030303030322c646d61736b3d30303030303030303030303030303030303030303137372c646f74732c6e6f646f74732c71756965742c646f74732c0023c3cb4d2e3cbf18508098fe0de2af38db67d42d1bc4ab714d52f019082433fc9ca2d7174b2c4ece31c9f4c7a4d53914e100"/167], 0x1, 0x140, &(0x7f0000000000)="$eJzs27Fq21AUBuDj2m3ddvFcOgi6dDJtn6CluFAqaEnwkEwJOFnsYIgXJZMfJS8YCJ683ZAo2Imxhwy2IPq+RT/8CO4dpMMV6OjT2XAwnpyO/8+i3WhE60dkMW9EJ15FM0rTAABeknlKcZNSSm+n8e4qUkpVrwgA2DbzHwDqx/wHgPox/wGgfvYPDv/+zPPeXpa1I66nRb/ol9ey//0n733N7nWWd82Kot9c9N/KPnvav473D/33tf2b+PK57O+6X//ylf5DDLa/fQAAAKiFbraw9nzf7W7qy/To+8DK+b0VH1s72wYA8AyTi8vh8Wh0ci4IgrAIVb+ZgG1bPvRVrwQAAAAAAAAAAAAAANhkF78TVb1HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAWHUbAAD//0DvUik=") syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000000)='./file0\x00', 0x2000494, &(0x7f0000000440)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c00484516000000000037c015c57600912233eefc80e89be5a1ef2c27ebf5171169dcfa4805d89c7e1f70d73d649ba4afab8b2194a9e8b537ad2ed68f8319883b84237da3bf9213365872b3f3"], 0x1, 0x2b9, &(0x7f0000000fc0)="$eJzs3E1rE3sUx/HTpm3SlDa5cLlwL1w96EY3QxtfgAZpQQwotSnqQpjaiYaMSZkJlYjYbMStr6O4dCeoL8BuxI17d0UQ3HQhjjiTaZM2rWmap7bfD5T5Z87/x5ymD5wEJpu3Xz4q5FwjZ5ZlOKYyLFKVLZHk71XNUO047K/HpF5VLk58//z/rTt3r6czmdl51bn0wqWUqk6dffv46atz78sTi6+n3kRlI3lv81vqy8Y/G/9u/lx4mHdHxdViqaymLpVKZXPJtnQ57xYM1Zu2ZbqW5ouu5TTUc3ZpZaWiZnF5Mr7iWK6rZrGiBaui5ZKWnYqaD8x8UQ3D0Mm4nG4jLezJrs/Pm+l9y16kox2h68abnXScdLV5Mbveg54AAMCAOXj+D2b9/ef/zGJwbGv+1/x+87/Ikef/D2O9fy6Pg2rDoz/M/6FE07OxjjWFrnKctBmv/f02Yv4HAAAAAAAAAAAAAAAAAAAAAOA42PK8hOd5ifAYfkVrN3iEj/vdJ7qjzZ//5T61iw6ru3EvJmK/WM2uZoNjUE/nJC+2WDItCfnh/z7UBOu5a5nZafUl5Z29VsuvrWYjEg3zoWSYH/JvQwvyZ/6aCfLamB+VeP31U5KQv5tfP9U0PyYXztflDUnIx/tSEluW/Wvv5J/NqF69kdmVH/f3AQAAAABwEhi6bc/rd7/ub4jJ3nqQP8T7A7teX4/If618RCUAAAAAADgyt/KkYNq25bSxiIrIEeIndRGRgWhj1+KKiAxAG71axEQkOKPtxL9ux1tKeS3sGRGRvj8th1j0+z8TAAAAgE7bGfoPEfr0vIsdAQAAAAAAAAAAAAAAAAAAAAAAAAAAAABw+rT6eWDh/j2lsHBAvO5ykZ5/gwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMAA+RUAAP//ovscvw==") mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x109041, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x81105a, 0x0) mount$bind(&(0x7f0000000880)='./file0/../file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x1adc11, 0x0) mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f0000000080)='./file0/file0/file0\x00', 0x0, 0x887008, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r0, &(0x7f0000006b40)={0x2020}, 0x2020) 58.097547972s ago: executing program 5 (id=857): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) setresgid(0xffffffffffffffff, 0xee01, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) syz_open_procfs(0x0, &(0x7f0000000080)='net/protocols\x00') 56.535681831s ago: executing program 5 (id=869): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x1]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r0, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_RECV_OWN_MSGS(r2, 0x65, 0x4, 0x0, &(0x7f0000000240)) 56.322759413s ago: executing program 34 (id=869): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x1]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r0, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_RECV_OWN_MSGS(r2, 0x65, 0x4, 0x0, &(0x7f0000000240)) 3.356419036s ago: executing program 4 (id=1838): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x1]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) timerfd_settime(0xffffffffffffffff, 0x3, &(0x7f0000007000)={{}, {0x0, 0x989680}}, 0x0) 3.22232769s ago: executing program 4 (id=1840): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) syz_mount_image$btrfs(&(0x7f00000055c0), &(0x7f0000000180)='./bus\x00', 0x0, &(0x7f0000000440), 0x1, 0x559d, &(0x7f0000005680)="$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") openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x105042, 0x189) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0xc4042, 0x1ff) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000140), 0x2000, 0x0) sendfile(r0, r1, 0x0, 0x20fffe82) 2.305111304s ago: executing program 4 (id=1848): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, 0x4, 0x1, 0x5, 0x0, 0x0, {0x1, 0x0, 0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x20040061}, 0x10) 1.720304083s ago: executing program 4 (id=1852): syz_mount_image$ext4(&(0x7f0000000380)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000600)={[{@jqfmt_vfsold}, {@nobarrier}, {@nobarrier}, {@noblock_validity}, {@data_err_ignore}, {@acl}, {@abort}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@nobh}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x10000}}, {@mblk_io_submit}, {@dioread_nolock}]}, 0x1, 0x56c, &(0x7f0000000700)="$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") r0 = creat(&(0x7f0000000040)='./bus\x00', 0x3bd) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000180)='./bus\x00', 0x0, 0x63d014, 0x0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x185102, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2, 0x28011, r1, 0x0) r2 = socket(0xa, 0x1, 0x0) setsockopt$inet6_group_source_req(r2, 0x29, 0x2e, 0x0, 0x0) setsockopt$inet6_MCAST_MSFILTER(r2, 0x29, 0x30, &(0x7f0000000780)={0x3, {{0xa, 0x4e23, 0x9, @mcast1, 0x8}}}, 0x90) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0xc0185879, &(0x7f0000000080)={@desc={0x1, 0x0, @desc3}}) 1.010366746s ago: executing program 4 (id=1864): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="240000001900010000000000fbdbdf250a01"], 0x24}, 0x1, 0x0, 0x0, 0x5}, 0x0) 929.488354ms ago: executing program 0 (id=1866): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000040)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r2, &(0x7f0000000b40)=[{{&(0x7f00000001c0)={0xa, 0x4e24, 0x7, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x7}, 0x1, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000290000000400000011000000000000001400000000000000290000000b0000003a50c8d48671514888b078e52a4b430000000600000000"], 0x30}}], 0x1, 0x40000) 924.032505ms ago: executing program 6 (id=1867): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x1]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000880)={0x2, 0x3, 0x0, 0x3, 0xb, 0x0, 0xeff, 0x0, [@sadb_key={0x1, 0x9}, @sadb_address={0x3, 0x6, 0x0, 0x20, 0x0, @in={0x2, 0x0, @private}}, @sadb_sa={0x2, 0x1, 0x4d3, 0x0, 0x0, 0x5, 0x2, 0xe0000000}, @sadb_address={0x3, 0x5, 0x3c, 0x0, 0x0, @in={0x2, 0x0, @dev}}]}, 0x58}, 0x1, 0x7}, 0x0) 859.975311ms ago: executing program 7 (id=1868): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.sectors\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32=r0, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) keyctl$read(0xb, r2, 0x0, 0x0) 848.470033ms ago: executing program 3 (id=1869): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x4]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c0000002400b74c26bd7000fcdbdf2506000000060004"], 0x1c}, 0x1, 0x0, 0x0, 0x8805}, 0x0) 831.215375ms ago: executing program 0 (id=1870): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000b80)=@newsa={0x138, 0x10, 0x1, 0x0, 0x0, {{@in=@broadcast, @in6=@mcast2, 0x0, 0x0, 0x0, 0x20, 0x0, 0x20, 0x0, 0x84}, {@in6=@ipv4={'\x00', '\xff\xff', @remote}, 0x4d5, 0x6c}, @in6=@dev={0xfe, 0x80, '\x00', 0x1f}, {}, {0x8000, 0x0, 0x0, 0xfffff7fffffffffe}, {}, 0x70bd2b, 0x2, 0x2, 0x0, 0x0, 0x22}, [@algo_comp={0x48, 0x3, {{'lzs\x00'}}}]}, 0x138}}, 0x0) 806.673427ms ago: executing program 6 (id=1871): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x1]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) capset(&(0x7f0000000080)={0x20071026}, 0x0) 724.919575ms ago: executing program 6 (id=1872): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000200040010000800014004000000", 0x58}], 0x1) 717.237956ms ago: executing program 3 (id=1873): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x1]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8=0x0, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x88fd537e5c114b6e, 0x11, 0xffffffffffffffff, 0x0) rmdir(&(0x7f0000000240)='./cgroup/../file0\x00') 676.16482ms ago: executing program 7 (id=1874): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000000240)={'ip6_vti0\x00', 0x0}) 644.569634ms ago: executing program 0 (id=1875): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x1]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r2 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmmsg(r2, &(0x7f0000003800)=[{{0x0, 0x0, &(0x7f00000001c0)=[{0x0}, {&(0x7f0000000040)='9', 0x1}], 0x2}}], 0x1, 0x8000000) 626.852246ms ago: executing program 3 (id=1876): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x1]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c00038008000140000000000800024000000000180003801400010076657468305f746f5f687372000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c0003801400010076657468305f746f5f68737200000000140001"], 0xfc}}, 0x0) 622.845716ms ago: executing program 6 (id=1877): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) poll(&(0x7f0000000040)=[{0xffffffffffffffff, 0x80cd}], 0x1, 0x7) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000040)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x12, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x8b2612f049316d70, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 573.525101ms ago: executing program 7 (id=1878): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8=0x0, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = add_key$keyring(&(0x7f0000000200), &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r2, &(0x7f0000000240)='asymmetric\x00', &(0x7f00000001c0)=@keyring) 568.137501ms ago: executing program 0 (id=1879): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r2, 0x1, 0x34, &(0x7f0000f59ffc)=0x4, 0x4) 504.676358ms ago: executing program 3 (id=1880): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_int(r2, 0x0, 0x33, 0x0, 0x0) 470.802941ms ago: executing program 6 (id=1881): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket(0x10, 0x3, 0x0) sendto$inet6(r2, &(0x7f0000000340)="9000000018001f2fb9409b52ffff65580200be04020c060560020b0243000f00ffffff9e00c8388827a685a168d0bf47d32345653602648dcaaf6c26c291214549935ade4a460c20b6ec0cff3959547f500f58ba86c902000f1d012e02000280160012000a000000000000000000000000080000000eceb6b362bb944cf2e70100aba4183b003e5fa424ac4d31c4f7a1", 0x90, 0x0, 0x0, 0x0) 443.329094ms ago: executing program 0 (id=1882): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r2, 0x0, 0x25, 0x0, 0x0) 438.977115ms ago: executing program 7 (id=1883): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$igmp6(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC(r2, 0x29, 0x23, &(0x7f0000000000)={{0xa, 0x4e24, 0x101, @mcast2, 0x2a3c}, {0xa, 0xfffd, 0xfffffffd, @remote, 0x8000024}, 0xffffffffffffffff, {[0x1, 0x0, 0xfffffffe, 0x10083, 0x0, 0x2, 0x1]}}, 0x5c) 306.680158ms ago: executing program 7 (id=1884): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x1]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000080)={@remote, 0x800, 0x0, 0x2, 0xb, 0x6109, 0xc2}, 0x20) 286.17968ms ago: executing program 0 (id=1885): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x1]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r2, &(0x7f0000006b80)=[{{&(0x7f0000000340)={0xa, 0x4e24, 0xfff, @remote}, 0x1c, 0x0, 0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="e8020000000000002900000004"], 0x2e8}}], 0x1, 0x0) 264.017402ms ago: executing program 3 (id=1886): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x1]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.events\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) syz_extract_tcp_res$synack(0x0, 0x1, 0x0) 237.043555ms ago: executing program 6 (id=1887): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x84000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f00000004c0)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8=0x0, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$inet6(0xa, 0x2, 0x0) getsockopt$inet6_mreq(r2, 0x29, 0x13, 0x0, &(0x7f0000000280)) 184.39444ms ago: executing program 4 (id=1888): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000340)={0x1d, r2, 0x0, {0x1, 0xf0, 0x4}, 0xfe}, 0x18) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmsg$inet(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000540)="81b641f1f3843704b6", 0x9}], 0x1}, 0x4048081) setsockopt$SO_J1939_FILTER(r1, 0x6b, 0x1, &(0x7f0000000180), 0x0) bind$can_j1939(r1, &(0x7f0000000580)={0x1d, r2, 0x3, {0x0, 0x1, 0x2}, 0xfd}, 0x18) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newtfilter={0x24, 0x11, 0x1, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0x74, r2, {0xc, 0x10}, {0xfff1, 0x9}, {0x2, 0xfff3}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4044840}, 0x20000050) 183.695811ms ago: executing program 7 (id=1889): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_DATA_DIR(r2, 0x0, 0x1, 0x0, 0x0) 138.190165ms ago: executing program 3 (id=1890): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = epoll_create1(0x0) ppoll(&(0x7f0000000080)=[{r2, 0x88}], 0x1, &(0x7f00000000c0)={0x0, 0x989680}, 0x0, 0x0) 0s ago: executing program 35 (id=1888): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000340)={0x1d, r2, 0x0, {0x1, 0xf0, 0x4}, 0xfe}, 0x18) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmsg$inet(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000540)="81b641f1f3843704b6", 0x9}], 0x1}, 0x4048081) setsockopt$SO_J1939_FILTER(r1, 0x6b, 0x1, &(0x7f0000000180), 0x0) bind$can_j1939(r1, &(0x7f0000000580)={0x1d, r2, 0x3, {0x0, 0x1, 0x2}, 0xfd}, 0x18) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newtfilter={0x24, 0x11, 0x1, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0x74, r2, {0xc, 0x10}, {0xfff1, 0x9}, {0x2, 0xfff3}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4044840}, 0x20000050) kernel console output (not intermixed with test programs): T1473] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 55.639344][ T1473] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 55.655957][ T1473] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 55.671407][ T1473] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 55.686787][ T1473] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 55.696325][ T1473] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 55.716841][ T4182] device veth1_vlan entered promiscuous mode [ 55.736491][ T1473] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 55.744922][ T1473] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 55.758219][ T1473] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 55.766658][ T1473] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 55.775455][ T1473] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 55.783563][ T1473] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 55.790219][ T4258] Bluetooth: hci3: command 0x041b tx timeout [ 55.792444][ T1473] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 55.796736][ T4258] Bluetooth: hci1: command 0x041b tx timeout [ 55.805278][ T1473] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 55.816334][ T4258] Bluetooth: hci4: command 0x041b tx timeout [ 55.821746][ T1473] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 55.825197][ T4258] Bluetooth: hci2: command 0x041b tx timeout [ 55.833641][ T1473] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 55.848172][ T4183] 8021q: adding VLAN 0 to HW filter on device team0 [ 55.860065][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 55.860227][ T4236] Bluetooth: hci0: command 0x041b tx timeout [ 55.868643][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 55.895460][ T4189] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 55.917639][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 55.926166][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 55.935756][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 55.959730][ T4181] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 55.974972][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 55.983526][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 55.992522][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 56.000407][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 56.008114][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 56.017006][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 56.025635][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.032742][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.041205][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 56.049708][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 56.059168][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.066268][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.074599][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 56.090667][ T1473] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 56.109941][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 56.118411][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 56.128980][ T4191] device veth0_vlan entered promiscuous mode [ 56.143424][ T4182] device veth0_macvtap entered promiscuous mode [ 56.158997][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 56.168531][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 56.177196][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 56.186479][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 56.195285][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 56.205289][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 56.214010][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 56.231835][ T4182] device veth1_macvtap entered promiscuous mode [ 56.248985][ T4191] device veth1_vlan entered promiscuous mode [ 56.277309][ T4189] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 56.287900][ T1473] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 56.296391][ T1473] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 56.305555][ T1473] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 56.314667][ T1473] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 56.323058][ T1473] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 56.331678][ T1473] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 56.342115][ T1473] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 56.350578][ T1473] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 56.358054][ T1473] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 56.368678][ T4183] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 56.388336][ T4182] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 56.399692][ T4181] device veth0_vlan entered promiscuous mode [ 56.409155][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 56.419947][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 56.428472][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 56.437256][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 56.445632][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 56.454113][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 56.475395][ T4181] device veth1_vlan entered promiscuous mode [ 56.491219][ T4182] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 56.521886][ T4268] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 56.535892][ T4268] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 56.545838][ T4268] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 56.558095][ T4268] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 56.568688][ T4268] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 56.578253][ T4268] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 56.592708][ T4268] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 56.601684][ T4268] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 56.617131][ T4268] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 56.626919][ T4268] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 56.639378][ T4182] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.648621][ T4182] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.657613][ T4182] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.667083][ T4182] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.688197][ T4181] device veth0_macvtap entered promiscuous mode [ 56.696535][ T4191] device veth0_macvtap entered promiscuous mode [ 56.712540][ T4189] device veth0_vlan entered promiscuous mode [ 56.719505][ T4191] device veth1_macvtap entered promiscuous mode [ 56.741114][ T4181] device veth1_macvtap entered promiscuous mode [ 56.750760][ T4268] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 56.764283][ T4268] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 56.774367][ T4268] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 56.784027][ T4268] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 56.792401][ T4268] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 56.800555][ T4268] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 56.808803][ T4268] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 56.817988][ T4268] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 56.834145][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 56.845021][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.856251][ T4191] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 56.866392][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 56.877069][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.887977][ T4191] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 56.902635][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 56.911746][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 56.923144][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 56.931772][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 56.947331][ T4181] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 56.957984][ T4181] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.968142][ T4181] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 56.978836][ T4181] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.991012][ T4181] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 56.998945][ T4189] device veth1_vlan entered promiscuous mode [ 57.008194][ T4191] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.017047][ T4191] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.026054][ T4191] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.034971][ T4191] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.054531][ T1473] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 57.064831][ T1473] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 57.075186][ T1473] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 57.086518][ T4181] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.097853][ T4181] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.108465][ T4181] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.119141][ T4181] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.130770][ T4181] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 57.164894][ T1473] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 57.173022][ T1473] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 57.183469][ T1473] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 57.192900][ T1473] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 57.200671][ T1473] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 57.211462][ T4181] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.221990][ T4181] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.230934][ T4181] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.239611][ T4181] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.291622][ T4183] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 57.324793][ T4189] device veth0_macvtap entered promiscuous mode [ 57.342251][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.352057][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.355289][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 57.368183][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 57.377195][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 57.385293][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 57.432373][ T4189] device veth1_macvtap entered promiscuous mode [ 57.445425][ T4268] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 57.455181][ T4268] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 57.464768][ T4268] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 57.500196][ T1473] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.506351][ T4183] device veth0_vlan entered promiscuous mode [ 57.508157][ T1473] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.518483][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.534795][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.545194][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.555881][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.566028][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.576645][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.588417][ T4189] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 57.606080][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.616587][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.627056][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.637742][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.647819][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.658512][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.670500][ T4189] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 57.677898][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 57.687151][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 57.695845][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 57.704763][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 57.713738][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 57.722502][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 57.731608][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 57.740725][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 57.748839][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 57.762072][ T1473] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.763031][ T4183] device veth1_vlan entered promiscuous mode [ 57.780171][ T4189] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.788864][ T4189] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.798760][ T1473] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.803437][ T4189] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.815373][ T4189] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.838166][ T1473] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 57.847808][ T1473] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 57.860461][ T4228] Bluetooth: hci2: command 0x040f tx timeout [ 57.866772][ T4228] Bluetooth: hci4: command 0x040f tx timeout [ 57.873813][ T4228] Bluetooth: hci1: command 0x040f tx timeout [ 57.880140][ T4228] Bluetooth: hci3: command 0x040f tx timeout [ 57.902195][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.913214][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.936194][ T1473] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 57.944351][ T4236] Bluetooth: hci0: command 0x040f tx timeout [ 57.952049][ T1473] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 57.994414][ T1473] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 57.995175][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.009456][ T1473] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 58.028567][ T4183] device veth0_macvtap entered promiscuous mode [ 58.045212][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.065138][ T4268] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 58.081497][ T4268] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 58.102932][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.104323][ T4183] device veth1_macvtap entered promiscuous mode [ 58.123458][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.163501][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 58.177874][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 58.201758][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.209718][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.239134][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 58.273815][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.323859][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.343452][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.367641][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.378024][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.388769][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.398661][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.425562][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.461386][ T4183] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 58.489931][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 58.492758][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.498576][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 58.506855][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.524980][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 58.549320][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.600260][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.630628][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.659960][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.719810][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.757411][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.781295][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.835379][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.879975][ T4183] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 58.904019][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 58.950798][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 58.968445][ T4183] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.997979][ T4183] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.012780][ T4183] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.041885][ T4183] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.249673][ T4268] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.286428][ T4268] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.319230][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.334870][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.339353][ T4268] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 59.381571][ T4268] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 59.471950][ T4358] syz.1.30 uses obsolete (PF_INET,SOCK_PACKET) [ 59.941029][ T4228] Bluetooth: hci3: command 0x0419 tx timeout [ 59.954167][ T4228] Bluetooth: hci1: command 0x0419 tx timeout [ 59.960988][ T26] audit: type=1326 audit(1763145723.657:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4386 comm="syz.2.44" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f34456fa6c9 code=0x0 [ 60.002827][ T4228] Bluetooth: hci4: command 0x0419 tx timeout [ 60.022807][ T4228] Bluetooth: hci2: command 0x0419 tx timeout [ 60.043399][ T4229] Bluetooth: hci0: command 0x0419 tx timeout [ 60.491061][ T4420] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 60.784746][ T4437] netlink: 'syz.1.65': attribute type 6 has an invalid length. [ 60.851417][ T4429] tmpfs: Bad value for 'mpol' [ 61.953018][ T4497] overlayfs: missing 'lowerdir' [ 61.953776][ T4499] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 62.009188][ T4460] loop0: detected capacity change from 0 to 32768 [ 62.046280][ T4502] netlink: 16 bytes leftover after parsing attributes in process `syz.1.96'. [ 62.121806][ T4460] ======================================================= [ 62.121806][ T4460] WARNING: The mand mount option has been deprecated and [ 62.121806][ T4460] and is ignored by this kernel. Remove the mand [ 62.121806][ T4460] option from the mount to silence this warning. [ 62.121806][ T4460] ======================================================= [ 62.156695][ C1] vkms_vblank_simulate: vblank timer overrun [ 62.351074][ T4460] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 62.463698][ T4460] OCFS2: ERROR (device loop0): int ocfs2_validate_dx_root(struct super_block *, struct buffer_head *): Dir Index Root # 28549323745621536 has bad signature  [ 62.489913][ T4229] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 62.509102][ T4460] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 62.539954][ T4460] OCFS2: File system is now read-only. [ 62.542557][ T4521] netlink: 8 bytes leftover after parsing attributes in process `syz.2.104'. [ 62.545525][ T4460] (syz.0.76,4460,1):ocfs2_find_entry_dx:1029 ERROR: status = -30 [ 62.580210][ T4521] netlink: 12 bytes leftover after parsing attributes in process `syz.2.104'. [ 62.589380][ T4521] netlink: 16 bytes leftover after parsing attributes in process `syz.2.104'. [ 62.623998][ T4460] OCFS2: ERROR (device loop0): int ocfs2_validate_dx_root(struct super_block *, struct buffer_head *): Dir Index Root # 28549323745621536 has bad signature  [ 62.640965][ T4521] netlink: 16 bytes leftover after parsing attributes in process `syz.2.104'. [ 62.690383][ T4460] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 62.700439][ T4460] (syz.0.76,4460,0):ocfs2_find_entry_dx:1029 ERROR: status = -30 [ 62.708187][ T4460] (syz.0.76,4460,0):ocfs2_mknod:502 ERROR: status = -30 [ 62.715296][ T4460] (syz.0.76,4460,0):ocfs2_create:676 ERROR: status = -30 [ 62.850176][ T4229] usb 2-1: config index 0 descriptor too short (expected 45, got 36) [ 62.858647][ T4229] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 62.887969][ T4181] ocfs2: Unmounting device (7,0) on (node local) [ 62.919563][ T4229] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 62.939968][ T4229] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 62.996784][ T4229] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 63.026366][ T4229] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 63.069928][ T4229] usb 2-1: config 0 descriptor?? [ 63.146171][ T4544] device sit0 entered promiscuous mode [ 63.206677][ T4544] netlink: 'syz.4.117': attribute type 1 has an invalid length. [ 63.236325][ T4544] netlink: 1 bytes leftover after parsing attributes in process `syz.4.117'. [ 63.271568][ T4548] netlink: 'syz.2.119': attribute type 12 has an invalid length. [ 63.553897][ T4229] plantronics 0003:047F:FFFF.0001: unknown main item tag 0xd [ 63.585422][ T4229] plantronics 0003:047F:FFFF.0001: No inputs registered, leaving [ 63.660873][ T4229] plantronics 0003:047F:FFFF.0001: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 63.979866][ T4228] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 64.018860][ T1344] usb 2-1: USB disconnect, device number 2 [ 64.192647][ T4597] capability: warning: `syz.4.142' uses deprecated v2 capabilities in a way that may be insecure [ 64.340031][ T4228] usb 4-1: config 220 has an invalid interface number: 76 but max is 2 [ 64.348335][ T4228] usb 4-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 64.401484][ T4228] usb 4-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 64.422202][ T4228] usb 4-1: config 220 has no interface number 2 [ 64.428504][ T4228] usb 4-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 64.481957][ T4228] usb 4-1: config 220 interface 0 has no altsetting 0 [ 64.488799][ T4228] usb 4-1: config 220 interface 76 has no altsetting 0 [ 64.523024][ T4228] usb 4-1: config 220 interface 1 has no altsetting 0 [ 64.643505][ T4613] loop1: detected capacity change from 0 to 1764 [ 64.700300][ T4228] usb 4-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 64.725461][ T4228] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 64.774247][ T4228] usb 4-1: Product: syz [ 64.778444][ T4228] usb 4-1: Manufacturer: syz [ 64.811821][ T4228] usb 4-1: SerialNumber: syz [ 65.176755][ T4642] netlink: 12 bytes leftover after parsing attributes in process `syz.4.166'. [ 65.186836][ T4228] usb 4-1: Found UVC 7.01 device syz (8086:0b07) [ 65.206158][ T4228] usb 4-1: No valid video chain found. [ 65.234326][ T4228] usb 4-1: selecting invalid altsetting 0 [ 65.340910][ T4228] usb 4-1: selecting invalid altsetting 0 [ 65.346670][ T4228] usbtest: probe of 4-1:220.1 failed with error -22 [ 65.365126][ T4228] usb 4-1: USB disconnect, device number 2 [ 65.458973][ T9] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.633200][ T9] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.789523][ T9] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.911161][ T9] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 66.742622][ T4691] netlink: 51 bytes leftover after parsing attributes in process `syz.3.188'. [ 66.777947][ T4675] chnl_net:caif_netlink_parms(): no params data found [ 67.167788][ T4735] loop3: detected capacity change from 0 to 2048 [ 67.207136][ T4675] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.241805][ T4675] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.276060][ T4675] device bridge_slave_0 entered promiscuous mode [ 67.318108][ T4675] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.391996][ T4675] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.402288][ T4735] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 67.413999][ T4675] device bridge_slave_1 entered promiscuous mode [ 67.597158][ T4675] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 67.675339][ T4675] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 67.685662][ T4735] EXT4-fs error (device loop3): ext4_xattr_set_entry:1625: inode #2: comm syz.3.200: corrupted xattr entries [ 67.793401][ T4675] team0: Port device team_slave_0 added [ 67.829267][ T4675] team0: Port device team_slave_1 added [ 67.957712][ T4675] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 68.000332][ T4675] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.099861][ T1344] Bluetooth: hci2: command 0x0409 tx timeout [ 68.129582][ T4675] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 68.285233][ T4789] netlink: 7 bytes leftover after parsing attributes in process `syz.4.219'. [ 68.304349][ T4675] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 68.313155][ T4675] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.387844][ T4675] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 68.560138][ T4675] device hsr_slave_0 entered promiscuous mode [ 68.568569][ T4675] device hsr_slave_1 entered promiscuous mode [ 68.575803][ T4675] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 68.587280][ T4675] Cannot create hsr debugfs directory [ 68.655055][ T9] device hsr_slave_0 left promiscuous mode [ 68.688358][ T9] device hsr_slave_1 left promiscuous mode [ 68.698701][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 68.714623][ T9] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 68.733767][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 68.775877][ T9] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 68.800696][ T9] device bridge_slave_1 left promiscuous mode [ 68.809111][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.832014][ T9] device bridge_slave_0 left promiscuous mode [ 68.838621][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.911190][ T9] device veth1_macvtap left promiscuous mode [ 68.917686][ T9] device veth0_macvtap left promiscuous mode [ 68.924290][ T9] device veth1_vlan left promiscuous mode [ 68.931464][ T9] device veth0_vlan left promiscuous mode [ 69.392487][ T9] team0 (unregistering): Port device team_slave_1 removed [ 69.407238][ T9] team0 (unregistering): Port device team_slave_0 removed [ 69.421951][ T9] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 69.435569][ T9] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 69.497571][ T9] bond0 (unregistering): Released all slaves [ 70.167383][ T4675] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 70.190411][ T4258] Bluetooth: hci2: command 0x041b tx timeout [ 70.246489][ T4675] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 70.340999][ T4675] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 70.435424][ T4675] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 70.758466][ T4874] loop3: detected capacity change from 0 to 131072 [ 70.807784][ T4675] 8021q: adding VLAN 0 to HW filter on device bond0 [ 70.864207][ T4874] F2FS-fs (loop3): invalid crc value [ 70.887411][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 70.911019][ T4874] F2FS-fs (loop3): Found nat_bits in checkpoint [ 70.951553][ T4874] F2FS-fs (loop3): Cannot turn on quotas: -2 on 2 [ 70.963399][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 70.976506][ T4874] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4 [ 70.987840][ T4675] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.082210][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 71.122723][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 71.162803][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.169917][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.170395][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.190032][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.246325][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 71.304457][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 71.354901][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 71.406130][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.413253][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.460433][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 71.499165][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 71.561018][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 71.598965][ T4917] netlink: 'syz.2.253': attribute type 25 has an invalid length. [ 71.614825][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 71.700478][ T4675] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 71.742359][ T4675] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 71.803071][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 71.820936][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 71.870757][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 71.920688][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 71.939677][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 71.974023][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 72.007206][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 72.074147][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 72.112228][ T4926] netlink: 8 bytes leftover after parsing attributes in process `syz.2.257'. [ 72.293582][ T1107] Bluetooth: hci2: command 0x040f tx timeout [ 72.481285][ T4950] binder: 4949:4950 ioctl c0306201 0 returned -14 [ 72.581217][ T4700] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 72.588694][ T4700] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 72.687307][ T4675] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.722415][ T4964] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 72.883308][ T4969] tc_dump_action: action bad kind [ 73.318275][ T4992] loop4: detected capacity change from 0 to 2048 [ 73.388369][ T1473] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 73.440667][ T1473] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 73.492984][ T4992] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 73.516281][ T4996] tipc: Started in network mode [ 73.524412][ T4996] tipc: Node identity ac14140f, cluster identity 4711 [ 73.578820][ T4996] tipc: New replicast peer: 255.255.255.255 [ 73.611903][ T26] audit: type=1800 audit(1763145737.307:3): pid=4992 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.278" name="bus" dev="loop4" ino=18 res=0 errno=0 [ 73.635408][ T4996] tipc: Enabled bearer , priority 10 [ 73.657638][ T26] audit: type=1326 audit(1763145737.347:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4988 comm="syz.4.278" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd44276e6c9 code=0x7ffc0000 [ 73.692834][ T5006] netlink: 72 bytes leftover after parsing attributes in process `syz.3.281'. [ 73.764700][ T1473] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 73.769858][ T26] audit: type=1326 audit(1763145737.347:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4988 comm="syz.4.278" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd44276e6c9 code=0x7ffc0000 [ 73.831560][ T1473] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 73.862595][ T4675] device veth0_vlan entered promiscuous mode [ 73.873711][ T1473] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 73.899083][ T26] audit: type=1326 audit(1763145737.347:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4988 comm="syz.4.278" exe="/root/syz-executor" sig=0 arch=c000003e syscall=328 compat=0 ip=0x7fd44276e6c9 code=0x7ffc0000 [ 73.932105][ T1473] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 73.967054][ T4675] device veth1_vlan entered promiscuous mode [ 74.055325][ T26] audit: type=1326 audit(1763145737.397:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4988 comm="syz.4.278" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd44276e6c9 code=0x7ffc0000 [ 74.107450][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 74.111319][ T5024] netlink: 68 bytes leftover after parsing attributes in process `syz.3.289'. [ 74.131702][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 74.181124][ T26] audit: type=1326 audit(1763145737.397:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4988 comm="syz.4.278" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd44276e6c9 code=0x7ffc0000 [ 74.209356][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 74.266385][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 74.331094][ T5033] netlink: 224 bytes leftover after parsing attributes in process `syz.3.293'. [ 74.342874][ T4675] device veth0_macvtap entered promiscuous mode [ 74.368513][ T1107] Bluetooth: hci2: command 0x0419 tx timeout [ 74.378513][ T4675] device veth1_macvtap entered promiscuous mode [ 74.427880][ T4910] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 74.449187][ T4910] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 74.514324][ T4675] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.569935][ T4675] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.611324][ T4243] tipc: Node number set to 2886997007 [ 74.622519][ T4675] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.673624][ T4675] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.704168][ T4675] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.731016][ T4675] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.775060][ T4675] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.813374][ T4675] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.843543][ T4675] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.890857][ T4675] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.938150][ T4675] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.978868][ T4675] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.027546][ T4675] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.054664][ T4675] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.079840][ T4675] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.114630][ T4675] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.146999][ T4675] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.158778][ T4675] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.175129][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 75.208780][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 75.228193][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 75.248398][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 75.282000][ T5093] mip6: mip6_destopt_init_state: state's mode is not 2: 1 [ 75.293552][ T5089] netlink: 12 bytes leftover after parsing attributes in process `syz.2.305'. [ 75.323502][ T4675] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.342294][ T4675] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.384396][ T4675] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.396813][ T4675] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.457071][ T4236] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 75.537381][ T5099] loop0: detected capacity change from 0 to 1024 [ 75.560891][ T4236] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz1] on syz0 [ 75.629350][ T4268] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.667055][ T4268] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.723307][ T1494] hfsplus: b-tree write err: -5, ino 4 [ 75.729529][ T4910] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.737129][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 75.777183][ T4910] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.828364][ T4910] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 76.046763][ T5118] fido_id[5118]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 76.178922][ T5135] loop4: detected capacity change from 0 to 64 [ 76.261911][ T21] cfg80211: failed to load regulatory.db [ 76.588090][ T5161] binder: 5159:5161 ioctl c018620c 0 returned -14 [ 77.219931][ T5207] netlink: 3 bytes leftover after parsing attributes in process `syz.3.352'. [ 77.304786][ T5211] netlink: 12 bytes leftover after parsing attributes in process `syz.2.354'. [ 77.396485][ T5218] netlink: 24 bytes leftover after parsing attributes in process `syz.4.355'. [ 77.529971][ T5225] netlink: 12 bytes leftover after parsing attributes in process `syz.0.358'. [ 77.713056][ T5242] netlink: 12 bytes leftover after parsing attributes in process `syz.4.366'. [ 77.749183][ T5242] netlink: 40 bytes leftover after parsing attributes in process `syz.4.366'. [ 78.029983][ T1107] usb 6-1: new full-speed USB device number 2 using dummy_hcd [ 78.471833][ T1107] usb 6-1: config 0 has an invalid interface number: 231 but max is 0 [ 78.486980][ T1107] usb 6-1: config 0 has no interface number 0 [ 78.524082][ T1107] usb 6-1: config 0 interface 231 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 78.740514][ T1107] usb 6-1: New USB device found, idVendor=067b, idProduct=27a1, bcdDevice=b0.9b [ 78.757678][ T1107] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 78.789348][ T1107] usb 6-1: Product: syz [ 78.803760][ T1107] usb 6-1: Manufacturer: syz [ 78.831184][ T1107] usb 6-1: SerialNumber: syz [ 78.856795][ T1107] usb 6-1: config 0 descriptor?? [ 78.892650][ T5246] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 78.935558][ T1107] plusb 6-1:0.231 usb0: register 'plusb' at usb-dummy_hcd.5-1, Prolific PL-2301/PL-2302/PL-25A1/PL-27A1, 4a:cb:38:24:7b:d7 [ 79.006112][ T5316] kvm: emulating exchange as write [ 79.251278][ T5331] smc: net device ip6tnl0 applied user defined pnetid SYZ1 [ 79.386232][ T4244] usb 6-1: USB disconnect, device number 2 [ 79.406770][ T4244] plusb 6-1:0.231 usb0: unregister 'plusb' usb-dummy_hcd.5-1, Prolific PL-2301/PL-2302/PL-25A1/PL-27A1 [ 79.481821][ T21] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 79.517207][ T5348] cgroup: No subsys list or none specified [ 79.719899][ T21] usb 5-1: Using ep0 maxpacket: 32 [ 79.840426][ T21] usb 5-1: config 0 has no interfaces? [ 80.000111][ T21] usb 5-1: New USB device found, idVendor=0424, idProduct=74e2, bcdDevice=69.ee [ 80.024990][ T21] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 80.052313][ T21] usb 5-1: Product: syz [ 80.065636][ T21] usb 5-1: Manufacturer: syz [ 80.081802][ T21] usb 5-1: SerialNumber: syz [ 80.103631][ T21] usb 5-1: config 0 descriptor?? [ 80.388367][ T4295] usb 5-1: USB disconnect, device number 2 [ 80.430893][ T5408] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 80.540060][ T5413] netlink: 'syz.0.426': attribute type 4 has an invalid length. [ 80.689894][ T5423] __nla_validate_parse: 3 callbacks suppressed [ 80.689913][ T5423] netlink: 12 bytes leftover after parsing attributes in process `syz.0.431'. [ 81.193270][ T5462] netlink: 'syz.3.446': attribute type 12 has an invalid length. [ 81.425341][ T5475] loop3: detected capacity change from 0 to 128 [ 81.599774][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #202!!! [ 81.610576][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #302!!! [ 81.632233][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!! [ 82.425611][ T5506] netlink: 80 bytes leftover after parsing attributes in process `syz.5.465'. [ 82.656303][ T5519] loop5: detected capacity change from 0 to 4096 [ 82.841357][ T5528] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 82.979926][ T1107] Bluetooth: hci2: command 0x0405 tx timeout [ 83.330377][ T5547] tipc: Started in network mode [ 83.335274][ T5547] tipc: Node identity ca04f9bba58f, cluster identity 4711 [ 83.381051][ T5547] tipc: Enabled bearer , priority 0 [ 83.416252][ T5552] syzkaller0: MTU too low for tipc bearer [ 83.441935][ T5552] tipc: Disabling bearer [ 83.782551][ T5525] loop2: detected capacity change from 0 to 32768 [ 84.583959][ T5613] netlink: 12 bytes leftover after parsing attributes in process `syz.3.508'. [ 85.554033][ T5667] program syz.0.529 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 85.760426][ T5678] netlink: 164 bytes leftover after parsing attributes in process `syz.3.534'. [ 85.952544][ T5688] syz.5.538 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 86.249946][ T21] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 86.622962][ T21] usb 1-1: too many endpoints for config 1 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 86.656518][ T21] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 86.698134][ T21] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 1024, setting to 64 [ 86.739844][ T21] usb 1-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 255 [ 86.860972][ T21] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 86.888817][ T21] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 86.917538][ T21] usb 1-1: SerialNumber: syz [ 86.960647][ T5693] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 86.981607][ T21] cdc_acm 1-1:1.0: Control and data interfaces are not separated! [ 87.203103][ T21] cdc_acm 1-1:1.0: ttyACM0: USB ACM device [ 87.233048][ T21] usb 1-1: USB disconnect, device number 2 [ 87.817563][ T5730] netlink: 16 bytes leftover after parsing attributes in process `syz.3.552'. [ 87.984073][ T5734] netlink: 'syz.5.554': attribute type 12 has an invalid length. [ 88.100581][ T1107] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 88.240004][ T4244] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 88.255133][ T5740] IPv6: NLM_F_CREATE should be specified when creating new route [ 88.389997][ T1107] usb 1-1: Using ep0 maxpacket: 8 [ 88.519961][ T4244] usb 4-1: Using ep0 maxpacket: 8 [ 88.534563][ T5748] netlink: 12 bytes leftover after parsing attributes in process `syz.5.559'. [ 88.660153][ T4244] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 88.675979][ T4244] usb 4-1: config 179 has no interface number 0 [ 88.700156][ T1107] usb 1-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 88.717199][ T4244] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 88.748721][ T1107] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 88.798445][ T1107] usb 1-1: Product: syz [ 88.813870][ T4244] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 88.837328][ T1107] usb 1-1: Manufacturer: syz [ 88.849789][ T1107] usb 1-1: SerialNumber: syz [ 88.869404][ T1107] usb 1-1: config 0 descriptor?? [ 88.877903][ T4244] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 88.908951][ T4244] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 88.929395][ T4244] usb 4-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 88.962530][ T1107] gspca_main: se401-2.14.0 probing 047d:5003 [ 88.994885][ T4244] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 89.023084][ T4244] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 89.070941][ T5733] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 89.101583][ T4244] xpad: probe of 4-1:179.65 failed with error -5 [ 89.316072][ T4244] usb 4-1: USB disconnect, device number 3 [ 89.955337][ T26] audit: type=1326 audit(1763145753.647:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5791 comm="syz.3.568" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f05997d66c9 code=0x0 [ 90.035200][ T1107] gspca_se401: read req failed req 0x06 error -19 [ 90.078267][ T1107] usb 1-1: USB disconnect, device number 3 [ 90.418703][ T5816] netlink: 4 bytes leftover after parsing attributes in process `syz.0.576'. [ 90.546801][ T5822] netlink: 44 bytes leftover after parsing attributes in process `syz.4.577'. [ 90.562599][ T5822] netlink: 51 bytes leftover after parsing attributes in process `syz.4.577'. [ 90.602273][ T5822] netlink: 'syz.4.577': attribute type 4 has an invalid length. [ 91.213698][ T5850] loop5: detected capacity change from 0 to 2048 [ 91.453618][ T5864] loop3: detected capacity change from 0 to 16 [ 91.471693][ T5850] EXT4-fs (loop5): mounted filesystem without journal. Opts: init_itable,acl,mb_optimize_scan=0x0000000000000001,,errors=continue. Quota mode: none. [ 91.670305][ T5864] erofs: (device loop3): mounted with root inode @ nid 36. [ 91.679484][ T5850] EXT4-fs error (device loop5): ext4_xattr_ibody_get:603: inode #15: comm syz.5.587: corrupted in-inode xattr [ 91.723140][ T5850] EXT4-fs error (device loop5): get_max_inline_xattr_value_size:68: inode #15: comm syz.5.587: corrupt xattr in inline inode [ 91.792658][ T5864] attempt to access beyond end of device [ 91.792658][ T5864] loop3: rw=0, want=24, limit=16 [ 91.805095][ T5850] EXT4-fs error (device loop5): ext4_xattr_ibody_find:2229: inode #15: comm syz.5.587: corrupted in-inode xattr [ 91.902169][ T5850] attempt to access beyond end of device [ 91.902169][ T5850] loop5: rw=2049, want=7212754384, limit=2048 [ 92.019898][ T5850] EXT4-fs warning (device loop5): ext4_end_bio:348: I/O error 10 writing to inode 15 starting block 1803188595) [ 92.076594][ T5850] Buffer I/O error on device loop5, logical block 1803188595 [ 92.132685][ T5850] attempt to access beyond end of device [ 92.132685][ T5850] loop5: rw=2049, want=6806417800, limit=2048 [ 92.200784][ T5850] EXT4-fs warning (device loop5): ext4_end_bio:348: I/O error 10 writing to inode 15 starting block 1701604449) [ 92.272275][ T5850] Buffer I/O error on device loop5, logical block 1701604449 [ 92.443463][ T4675] EXT4-fs (loop5): Inode 15 (ffff888060d08000): i_reserved_data_blocks (1) not cleared! [ 92.622833][ T5897] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 92.730059][ T5897] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 92.738575][ T5902] bridge0: port 3(bond0) entered blocking state [ 92.791012][ T5902] bridge0: port 3(bond0) entered disabled state [ 92.841729][ T5902] device bond0 entered promiscuous mode [ 92.865875][ T5902] device bond_slave_0 entered promiscuous mode [ 92.935251][ T5902] device bond_slave_1 entered promiscuous mode [ 92.976407][ T5902] bridge0: port 3(bond0) entered blocking state [ 92.983318][ T5902] bridge0: port 3(bond0) entered forwarding state [ 94.508319][ T5977] VFS: Lookup of 'file0' in fuse fuse would have caused loop [ 94.650904][ T5985] overlayfs: missing 'lowerdir' [ 94.998908][ T6009] bridge_slave_0: default FDB implementation only supports local addresses [ 95.076393][ T6009] netlink: 8 bytes leftover after parsing attributes in process `syz.3.637'. [ 95.218947][ T6009] bridge_slave_0: default FDB implementation only supports local addresses [ 95.259593][ T6022] Zero length message leads to an empty skb [ 95.913302][ T6058] netlink: 20 bytes leftover after parsing attributes in process `syz.4.654'. [ 96.320045][ T6086] loop2: detected capacity change from 0 to 128 [ 96.509126][ T4183] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 96.537149][ T4183] FAT-fs (loop2): Filesystem has been set read-only [ 96.770891][ T6107] cgroup: Need name or subsystem set [ 97.150438][ T6127] netlink: 12 bytes leftover after parsing attributes in process `syz.0.682'. [ 97.818533][ T6163] loop0: detected capacity change from 0 to 1024 [ 97.880052][ T4243] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 97.925874][ T6167] loop2: detected capacity change from 0 to 2048 [ 97.932489][ T6163] EXT4-fs error (device loop0): ext4_fill_super:4841: comm syz.0.700: inode #2: comm syz.0.700: iget: illegal inode # [ 97.993589][ T4173] loop2: p1 < > p3 [ 98.002449][ T4173] loop2: p3 size 134217728 extends beyond EOD, truncated [ 98.014314][ T6163] EXT4-fs (loop0): get root inode failed [ 98.046023][ T6167] loop2: p1 < > p3 [ 98.080840][ T6163] EXT4-fs (loop0): mount failed [ 98.130525][ T6167] loop2: p3 size 134217728 extends beyond EOD, truncated [ 98.170915][ T4243] usb 5-1: Using ep0 maxpacket: 32 [ 98.224275][ T3560] loop2: p1 < > p3 [ 98.238420][ T3560] loop2: p3 size 134217728 extends beyond EOD, truncated [ 98.316459][ T4243] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 98.337553][ T4243] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 98.366656][ T4243] usb 5-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 98.398614][ T4243] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 98.406498][ T4173] udevd[4173]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 98.409111][ T4201] udevd[4201]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 98.430541][ T6175] loop2: detected capacity change from 0 to 4096 [ 98.459295][ T4243] usb 5-1: config 0 descriptor?? [ 98.476040][ T6175] ntfs3: loop2: Different NTFS' sector size (1024) and media sector size (512) [ 98.716312][ T4173] udevd[4173]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 98.717999][ T4201] udevd[4201]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 98.844075][ T6193] [U] ÿ [ 98.865829][ T4173] udevd[4173]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 98.867699][ T4201] udevd[4201]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 98.942609][ T4243] ft260 0003:0403:6030.0003: unknown main item tag 0x7 [ 98.970947][ T4243] ft260 0003:0403:6030.0003: hidraw0: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.4-1/input0 [ 99.154949][ T4243] ft260 0003:0403:6030.0003: chip code: 6424 8183 [ 99.580065][ T4243] ft260 0003:0403:6030.0003: failed to retrieve status: -32 [ 99.882687][ T6152] i2c i2c-1: adapter quirk: 1st comb msg must be write (addr 0x0002, size 0, read) [ 99.937186][ T6237] binder: 6235:6237 ioctl 40046210 0 returned -14 [ 99.948824][ T4243] usb 5-1: USB disconnect, device number 3 [ 100.306274][ T6256] netlink: 104 bytes leftover after parsing attributes in process `syz.3.743'. [ 100.597721][ T26] audit: type=1326 audit(1763145764.287:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6270 comm="syz.0.749" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b41d1e6c9 code=0x7ffc0000 [ 100.667491][ T26] audit: type=1326 audit(1763145764.327:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6270 comm="syz.0.749" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b41d1e6c9 code=0x7ffc0000 [ 100.719440][ T6276] loop3: detected capacity change from 0 to 1024 [ 100.728193][ T26] audit: type=1326 audit(1763145764.327:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6270 comm="syz.0.749" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b41d1e6c9 code=0x7ffc0000 [ 100.855053][ T26] audit: type=1326 audit(1763145764.327:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6270 comm="syz.0.749" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7f5b41d1e6c9 code=0x7ffc0000 [ 100.910158][ T6276] hfsplus: keylen 65060 too large [ 100.915468][ T6276] hfsplus: xattr searching failed [ 100.954826][ T26] audit: type=1326 audit(1763145764.327:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6270 comm="syz.0.749" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b41d1e6c9 code=0x7ffc0000 [ 100.988744][ T26] audit: type=1326 audit(1763145764.327:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6270 comm="syz.0.749" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b41d1e6c9 code=0x7ffc0000 [ 101.098154][ T26] audit: type=1326 audit(1763145764.327:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6270 comm="syz.0.749" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b41d1e6c9 code=0x7ffc0000 [ 101.165090][ T26] audit: type=1326 audit(1763145764.327:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6270 comm="syz.0.749" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f5b41d1e6c9 code=0x7ffc0000 [ 101.216687][ T26] audit: type=1326 audit(1763145764.327:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6270 comm="syz.0.749" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f5b41d1e6c9 code=0x7ffc0000 [ 101.451505][ T1107] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 101.476946][ T6311] netlink: 'syz.0.768': attribute type 1 has an invalid length. [ 101.500713][ T6312] binder: 6309:6312 ioctl c0306201 0 returned -14 [ 101.507357][ T6311] netlink: 9 bytes leftover after parsing attributes in process `syz.0.768'. [ 101.740165][ T1107] usb 5-1: Using ep0 maxpacket: 16 [ 101.823842][ T6330] netlink: 4 bytes leftover after parsing attributes in process `syz.3.777'. [ 101.843623][ T6329] 9pnet: p9_client_clunk (6329): Trying to clunk with invalid fid [ 101.861281][ T6329] CPU: 1 PID: 6329 Comm: syz.5.778 Not tainted syzkaller #0 [ 101.868587][ T6329] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 101.878663][ T6329] Call Trace: [ 101.881944][ T6329] [ 101.884873][ T6329] dump_stack_lvl+0x168/0x230 [ 101.889561][ T6329] ? show_regs_print_info+0x20/0x20 [ 101.894767][ T6329] ? load_image+0x3b0/0x3b0 [ 101.899279][ T6329] ? v9fs_fid_find+0x2d1/0x320 [ 101.904053][ T6329] p9_client_clunk+0x2b3/0x380 [ 101.908832][ T6329] v9fs_statfs+0x192/0x350 [ 101.913272][ T6329] ? v9fs_drop_inode+0x130/0x130 [ 101.915114][ T1107] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 101.918222][ T6329] ? ovl_mount_dir+0x1f6/0x2b0 [ 101.933818][ T6329] ? kfree+0xef/0x2a0 [ 101.937811][ T6329] vfs_statfs+0x13d/0x2c0 [ 101.939511][ T1107] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 101.942150][ T6329] ovl_get_upper+0x181/0x580 [ 101.942177][ T6329] ? ovl_fill_super+0x2ae0/0x2ae0 [ 101.942217][ T6329] ovl_fill_super+0x170b/0x2ae0 [ 101.969366][ T6329] ? ovl_mount+0x30/0x30 [ 101.973616][ T6329] ? preempt_count_add+0x8d/0x190 [ 101.975309][ T1107] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 101.978649][ T6329] ? sget+0x427/0x440 [ 101.991606][ T6329] ? free_anon_bdev+0x20/0x20 [ 101.996289][ T6329] ? ovl_mount+0x30/0x30 [ 102.000533][ T6329] mount_nodev+0x52/0xe0 [ 102.004786][ T6329] legacy_get_tree+0xe6/0x180 [ 102.008560][ T1107] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 102.009459][ T6329] ? virtio_fs_zero_page_range+0x120/0x120 [ 102.009487][ T6329] vfs_get_tree+0x88/0x270 [ 102.022440][ T4243] usb 1-1: new full-speed USB device number 4 using dummy_hcd [ 102.023224][ T6329] do_new_mount+0x24a/0xa40 [ 102.039776][ T6329] __se_sys_mount+0x2d6/0x3c0 [ 102.044481][ T6329] ? __x64_sys_mount+0xc0/0xc0 [ 102.049252][ T6329] ? lockdep_hardirqs_on+0x94/0x140 [ 102.054452][ T6329] ? __x64_sys_mount+0x1c/0xc0 [ 102.059223][ T6329] do_syscall_64+0x4c/0xa0 [ 102.063642][ T6329] ? clear_bhb_loop+0x30/0x80 [ 102.068320][ T6329] ? clear_bhb_loop+0x30/0x80 [ 102.070657][ T1107] usb 5-1: config 0 descriptor?? [ 102.072999][ T6329] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 102.083802][ T6329] RIP: 0033:0x7f1abfe0e6c9 [ 102.088221][ T6329] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 102.107826][ T6329] RSP: 002b:00007f1abe075038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 102.116249][ T6329] RAX: ffffffffffffffda RBX: 00007f1ac0064fa0 RCX: 00007f1abfe0e6c9 [ 102.124223][ T6329] RDX: 0000200000000440 RSI: 0000200000000100 RDI: 0000000000000000 [ 102.132203][ T6329] RBP: 00007f1abfe90f91 R08: 0000200000000200 R09: 0000000000000000 [ 102.140181][ T6329] R10: 0000000000000008 R11: 0000000000000246 R12: 0000000000000000 [ 102.148154][ T6329] R13: 00007f1ac0065038 R14: 00007f1ac0064fa0 R15: 00007fffb4bdfa48 [ 102.156143][ T6329] [ 102.201573][ T6332] capability: warning: `syz.2.780' uses 32-bit capabilities (legacy support in use) [ 102.223955][ T6329] overlayfs: statfs failed on './file0' [ 102.460129][ T4243] usb 1-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 102.482037][ T4243] usb 1-1: config 0 interface 0 altsetting 4 has 2 endpoint descriptors, different from the interface descriptor's value: 7 [ 102.536142][ T4243] usb 1-1: config 0 interface 0 has no altsetting 0 [ 102.547998][ T4243] usb 1-1: New USB device found, idVendor=047f, idProduct=c055, bcdDevice= 0.00 [ 102.561929][ T4243] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 102.583058][ T4243] usb 1-1: config 0 descriptor?? [ 102.594352][ T1107] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0 [ 102.602837][ T6322] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 102.619198][ T1107] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0 [ 102.637795][ T6354] netlink: 12 bytes leftover after parsing attributes in process `syz.5.790'. [ 102.661448][ T1107] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0 [ 102.679710][ T1107] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0 [ 102.698583][ T1107] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0 [ 102.719914][ T1107] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0 [ 102.745265][ T1107] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0 [ 102.764382][ T1107] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0 [ 102.779827][ T1107] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0 [ 102.794839][ T1107] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0 [ 102.830075][ T1107] HID 045e:07da: Invalid code 65791 type 1 [ 102.836314][ T6322] udc-core: couldn't find an available UDC or it's busy [ 102.850158][ T6322] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 102.864879][ T6366] loop2: detected capacity change from 0 to 128 [ 102.876084][ T1107] input: HID 045e:07da as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:045E:07DA.0004/input/input9 [ 102.924907][ T1107] microsoft 0003:045E:07DA.0004: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.4-1/input0 [ 102.980016][ T4243] usbhid 1-1:0.0: can't add hid device: -71 [ 102.986008][ T4243] usbhid: probe of 1-1:0.0 failed with error -71 [ 103.013888][ T4243] usb 1-1: USB disconnect, device number 4 [ 103.387526][ T21] usb 5-1: USB disconnect, device number 4 [ 103.431625][ T5483] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.535364][ T5483] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.559971][ T4243] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 103.627008][ T5483] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.729569][ T5483] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.839943][ T4243] usb 1-1: Using ep0 maxpacket: 32 [ 103.977776][ T6389] netlink: 128 bytes leftover after parsing attributes in process `syz.3.807'. [ 104.000319][ T4243] usb 1-1: config 0 interface 0 altsetting 4 endpoint 0x2 has an invalid bInterval 129, changing to 11 [ 104.009285][ T6389] netlink: 20 bytes leftover after parsing attributes in process `syz.3.807'. [ 104.033451][ T4243] usb 1-1: config 0 interface 0 altsetting 4 has 2 endpoint descriptors, different from the interface descriptor's value: 7 [ 104.039967][ T6389] netlink: 20 bytes leftover after parsing attributes in process `syz.3.807'. [ 104.092075][ T4243] usb 1-1: config 0 interface 0 has no altsetting 0 [ 104.111630][ T6384] chnl_net:caif_netlink_parms(): no params data found [ 104.114950][ T4243] usb 1-1: New USB device found, idVendor=047f, idProduct=c055, bcdDevice= 0.00 [ 104.177441][ T4243] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 104.224583][ T4243] usb 1-1: config 0 descriptor?? [ 104.302142][ T4243] hub 1-1:0.0: bad descriptor, ignoring hub [ 104.308078][ T4243] hub: probe of 1-1:0.0 failed with error -5 [ 104.587035][ T6384] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.604846][ T6384] bridge0: port 1(bridge_slave_0) entered disabled state [ 104.632397][ T6384] device bridge_slave_0 entered promiscuous mode [ 104.701266][ T6384] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.708378][ T6384] bridge0: port 2(bridge_slave_1) entered disabled state [ 104.722420][ T4243] plantronics 0003:047F:C055.0005: No inputs registered, leaving [ 104.755041][ T6384] device bridge_slave_1 entered promiscuous mode [ 104.755059][ T4243] plantronics 0003:047F:C055.0005: hiddev0,hidraw0: USB HID v0.00 Device [HID 047f:c055] on usb-dummy_hcd.0-1/input0 [ 104.944700][ T6384] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 105.016962][ T6384] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 105.209051][ T6384] team0: Port device team_slave_0 added [ 105.251729][ T6384] team0: Port device team_slave_1 added [ 105.458039][ T6384] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 105.467548][ T6384] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 105.579911][ T6384] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 105.624766][ T6384] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 105.653059][ T6384] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 105.777603][ T6384] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 105.860013][ T7] Bluetooth: hci1: command 0x0409 tx timeout [ 105.878800][ T6486] overlayfs: missing 'lowerdir' [ 105.926094][ T6384] device hsr_slave_0 entered promiscuous mode [ 105.943363][ T6384] device hsr_slave_1 entered promiscuous mode [ 105.983824][ T6384] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 106.007427][ T6384] Cannot create hsr debugfs directory [ 106.254566][ T5483] device hsr_slave_0 left promiscuous mode [ 106.264912][ T5483] device hsr_slave_1 left promiscuous mode [ 106.281379][ T5483] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 106.297972][ T5483] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 106.314504][ T5483] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 106.333699][ T5483] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 106.356782][ T5483] device bridge_slave_1 left promiscuous mode [ 106.372060][ T5483] bridge0: port 2(bridge_slave_1) entered disabled state [ 106.390899][ T5483] device bridge_slave_0 left promiscuous mode [ 106.397138][ T5483] bridge0: port 1(bridge_slave_0) entered disabled state [ 106.465760][ T5483] device veth1_macvtap left promiscuous mode [ 106.483159][ T5483] device veth0_macvtap left promiscuous mode [ 106.519009][ T5483] device veth1_vlan left promiscuous mode [ 106.535576][ T5483] device veth0_vlan left promiscuous mode [ 106.861012][ T5483] team0 (unregistering): Port device team_slave_1 removed [ 106.875295][ T5483] team0 (unregistering): Port device team_slave_0 removed [ 106.887680][ T5483] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 106.902275][ T5483] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 106.964342][ T5483] bond0 (unregistering): Released all slaves [ 107.257860][ T6384] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 107.291611][ T6384] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 107.312566][ T6384] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 107.391711][ T6384] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 107.461801][ T6536] binder: Unknown parameter 'context' [ 107.503086][ T6548] loop5: detected capacity change from 0 to 128 [ 107.797795][ T6384] 8021q: adding VLAN 0 to HW filter on device bond0 [ 107.933915][ T6563] process 'syz.3.855' launched './file0' with NULL argv: empty string added [ 107.942913][ T21] Bluetooth: hci1: command 0x041b tx timeout [ 107.962400][ T6384] 8021q: adding VLAN 0 to HW filter on device team0 [ 107.969255][ T4700] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 108.000214][ T4700] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 108.027007][ T4700] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 108.073677][ T4700] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 108.090215][ T4700] bridge0: port 1(bridge_slave_0) entered blocking state [ 108.097322][ T4700] bridge0: port 1(bridge_slave_0) entered forwarding state [ 108.150505][ T4700] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 108.180783][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 108.189430][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 108.241513][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 108.248602][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 108.297468][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 108.321244][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 108.371292][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 108.426565][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 108.447752][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 108.468760][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 108.522247][ T6561] loop4: detected capacity change from 0 to 32768 [ 108.523931][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 108.566568][ T6384] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 108.689896][ T6384] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 108.736681][ T1494] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 108.750549][ T1494] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 108.775476][ T1494] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 108.804460][ T1494] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 108.836343][ T1494] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 108.997503][ T6561] ialloc: diAlloc returned -5! [ 109.056728][ T6561] ERROR: (device loop4): diAllocAG: ipimap->i_size is wrong [ 109.056728][ T6561] [ 109.119900][ T6561] ERROR: (device loop4): remounting filesystem as read-only [ 109.150438][ T6561] ialloc: diAlloc returned -5! [ 109.246537][ T4700] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 109.280053][ T4700] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 109.300584][ T6384] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 109.470695][ T4243] usb 1-1: USB disconnect, device number 5 [ 109.725351][ T6618] netlink: 84 bytes leftover after parsing attributes in process `syz.4.868'. [ 109.842675][ T6624] netlink: 8 bytes leftover after parsing attributes in process `syz.0.875'. [ 109.903082][ T6627] loop4: detected capacity change from 0 to 128 [ 109.936032][ T6624] IPv6: ADDRCONF(NETDEV_CHANGE): gre1: link becomes ready [ 109.971128][ T6627] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 110.019987][ T21] Bluetooth: hci1: command 0x040f tx timeout [ 110.090170][ T6627] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 110.194389][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 110.214452][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 110.292474][ T1494] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 110.303831][ T26] audit: type=1800 audit(1763145773.997:19): pid=6627 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.877" name="file1" dev="loop4" ino=94 res=0 errno=0 [ 110.333766][ T1494] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 110.349412][ T1494] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 110.358151][ T1494] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 110.394651][ T6384] device veth0_vlan entered promiscuous mode [ 110.448776][ T6646] UDF-fs: error (device loop4): udf_bitmap_new_block: bitmap for partition 0 corrupted (block 264 marked as free, partition length is 40) [ 110.449053][ T6384] device veth1_vlan entered promiscuous mode [ 110.544777][ T6646] UDF-fs: error (device loop4): udf_bitmap_new_block: bitmap for partition 0 corrupted (block 264 marked as free, partition length is 40) [ 110.583614][ T4268] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 110.613811][ T6651] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 110.640528][ T4268] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 110.743002][ T6384] device veth0_macvtap entered promiscuous mode [ 110.753295][ T6384] device veth1_macvtap entered promiscuous mode [ 110.864313][ T6384] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 110.899819][ T6384] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 110.943565][ T6660] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2142054965 (4284109930 ns) > initial count (2850433972 ns). Using initial count to start timer. [ 110.953111][ T6384] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 111.003114][ T6384] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 111.034236][ T6384] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 111.106782][ T6384] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 111.158814][ T6384] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 111.184660][ T6384] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 111.225629][ T6384] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 111.264864][ T6629] chnl_net:caif_netlink_parms(): no params data found [ 111.291224][ T1494] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 111.313984][ T1494] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 111.362717][ T1494] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 111.407452][ T1494] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 111.452633][ T6384] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 111.485609][ T6687] netlink: 44 bytes leftover after parsing attributes in process `syz.3.893'. [ 111.489888][ T6384] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 111.528417][ T6384] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 111.559855][ T6384] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 111.569682][ T6384] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 111.601511][ T6384] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 111.626845][ T6384] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 111.641880][ T6384] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 111.653488][ T6384] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 111.755779][ T1473] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 111.767820][ T1473] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 111.785414][ T6384] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.800305][ T6384] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.809427][ T6384] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.819841][ T6384] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.027092][ T4228] Bluetooth: hci2: command 0x0409 tx timeout [ 112.111817][ T4258] Bluetooth: hci1: command 0x0419 tx timeout [ 112.114460][ T6629] bridge0: port 1(bridge_slave_0) entered blocking state [ 112.186134][ T6629] bridge0: port 1(bridge_slave_0) entered disabled state [ 112.211803][ T6629] device bridge_slave_0 entered promiscuous mode [ 112.232367][ T6629] bridge0: port 2(bridge_slave_1) entered blocking state [ 112.239423][ T6629] bridge0: port 2(bridge_slave_1) entered disabled state [ 112.281025][ T6629] device bridge_slave_1 entered promiscuous mode [ 112.372241][ T6629] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 112.429977][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 112.455207][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 112.486651][ T6629] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 112.522137][ T6737] binder: 6733:6737 ioctl c0306201 200000000100 returned -14 [ 112.606595][ T1494] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 112.675632][ T6629] team0: Port device team_slave_0 added [ 112.694632][ T1494] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 112.718612][ T6629] team0: Port device team_slave_1 added [ 112.726485][ T1494] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 112.766893][ T5483] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.798252][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 112.861734][ T5483] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.923829][ T6629] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 112.940062][ T6629] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 113.035532][ T6629] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 113.065561][ T6629] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 113.079779][ T6629] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 113.214668][ T6629] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 113.337452][ T5483] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.557981][ T5483] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.601618][ T6766] input: syz1 as /devices/virtual/input/input13 [ 113.623705][ T6629] device hsr_slave_0 entered promiscuous mode [ 113.657452][ T6629] device hsr_slave_1 entered promiscuous mode [ 113.746571][ T6629] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 113.761726][ T6629] Cannot create hsr debugfs directory [ 113.783375][ T6795] netlink: 12 bytes leftover after parsing attributes in process `syz.6.932'. [ 114.100395][ T21] Bluetooth: hci2: command 0x041b tx timeout [ 114.256726][ T5483] tipc: Left network mode [ 114.467195][ T6629] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 114.526308][ T6629] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 114.548038][ T6629] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 114.623405][ T6629] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 115.021721][ T6629] 8021q: adding VLAN 0 to HW filter on device bond0 [ 115.084834][ T6629] 8021q: adding VLAN 0 to HW filter on device team0 [ 115.128974][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 115.159300][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 115.213698][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 115.232871][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 115.263069][ T6854] loop6: detected capacity change from 0 to 4096 [ 115.301498][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 115.308573][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 115.451259][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 115.480312][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 115.495082][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 115.525420][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 115.532525][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 115.598678][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 115.646651][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 115.741221][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 115.787578][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 115.824960][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 115.837663][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 115.877639][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 115.906754][ T6384] ntfs3: loop6: ntfs_evict_inode r=5 failed, -22. [ 115.925425][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 115.945936][ T6384] ntfs3: loop6: Mark volume as dirty due to NTFS errors [ 115.977310][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 116.013839][ T6629] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 116.100941][ T6629] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 116.178852][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 116.222899][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 116.259157][ T4236] Bluetooth: hci2: command 0x040f tx timeout [ 116.454613][ T5483] device hsr_slave_0 left promiscuous mode [ 116.485127][ T5483] device hsr_slave_1 left promiscuous mode [ 116.547132][ T5483] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 116.558249][ T5483] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 116.606100][ T5483] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 116.631533][ T5483] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 116.657589][ T5483] device bridge_slave_1 left promiscuous mode [ 116.668311][ T5483] bridge0: port 2(bridge_slave_1) entered disabled state [ 116.707029][ T5483] device bridge_slave_0 left promiscuous mode [ 116.740153][ T5483] bridge0: port 1(bridge_slave_0) entered disabled state [ 116.789462][ T5483] device veth1_macvtap left promiscuous mode [ 116.796521][ T5483] device veth0_macvtap left promiscuous mode [ 116.833293][ T5483] device veth1_vlan left promiscuous mode [ 116.839223][ T5483] device veth0_vlan left promiscuous mode [ 117.439529][ T5483] team0 (unregistering): Port device team_slave_1 removed [ 117.457502][ T5483] team0 (unregistering): Port device team_slave_0 removed [ 117.471553][ T5483] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 117.486018][ T5483] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 117.541571][ T5483] bond0 (unregistering): Released all slaves [ 117.586389][ T6905] netlink: 4 bytes leftover after parsing attributes in process `syz.4.969'. [ 117.819065][ T1494] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 117.834652][ T1494] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 117.871512][ T6629] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 118.278721][ T6990] loop0: detected capacity change from 0 to 512 [ 118.340239][ T1344] Bluetooth: hci2: command 0x0419 tx timeout [ 118.441238][ T6990] EXT4-fs (loop0): Ignoring removed nomblk_io_submit option [ 118.448651][ T6990] EXT4-fs (loop0): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 118.547728][ T6990] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 118.609613][ T6990] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=842c01c, mo2=0002] [ 118.646129][ T6990] EXT4-fs (loop0): couldn't mount RDWR because of unsupported optional features (80) [ 118.681047][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 118.722931][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 118.729841][ T6990] EXT4-fs (loop0): Skipping orphan cleanup due to unknown ROCOMPAT features [ 118.764856][ T6990] EXT4-fs (loop0): mounted filesystem without journal. Opts: dioread_nolock,noinit_itable,nomblk_io_submit,noblock_validity,data_err=abort,data_err=ignore,jqfmt=vfsv0,barrier=0x000000000000d95a,debug,,errors=continue. Quota mode: none. [ 118.818280][ T7013] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1010'. [ 118.860615][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 118.878863][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 118.921786][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 118.947499][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 118.991208][ T6629] device veth0_vlan entered promiscuous mode [ 119.050176][ T6990] EXT4-fs warning (device loop0): dx_probe:893: inode #2: comm syz.0.1003: dx entry: limit 65535 != root limit 120 [ 119.052898][ T6629] device veth1_vlan entered promiscuous mode [ 119.121638][ T6990] EXT4-fs warning (device loop0): dx_probe:966: inode #2: comm syz.0.1003: Corrupt directory, running e2fsck is recommended [ 119.204171][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 119.225035][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 119.269128][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 119.284582][ T6990] EXT4-fs warning (device loop0): dx_probe:893: inode #2: comm syz.0.1003: dx entry: limit 65535 != root limit 119 [ 119.331491][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 119.340604][ T4201] udevd[4201]: incorrect jbd checksum on /dev/loop0 [ 119.360603][ T6990] EXT4-fs warning (device loop0): dx_probe:966: inode #2: comm syz.0.1003: Corrupt directory, running e2fsck is recommended [ 119.387144][ T6629] device veth0_macvtap entered promiscuous mode [ 119.433898][ T6629] device veth1_macvtap entered promiscuous mode [ 119.476957][ T4201] udevd[4201]: incorrect jbd checksum on /dev/loop0 [ 119.513299][ T6629] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 119.578901][ T6629] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 119.611073][ T6629] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 119.669800][ T6629] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 119.679630][ T6629] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 119.751865][ T6629] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 119.786811][ T6629] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 119.807521][ T6629] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 119.833426][ T6629] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 119.860692][ T1494] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 119.869627][ T1494] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 119.917279][ T1494] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 119.981065][ T1494] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 120.106933][ T6629] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 120.155985][ T6629] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 120.465087][ T6629] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 120.607129][ T6629] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 120.644085][ T6629] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 120.669213][ T6629] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 120.689017][ T6629] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 120.718698][ T6629] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 120.786368][ T6629] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 120.816091][ T4268] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 120.847582][ T4268] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 120.874930][ T6629] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.886407][ T6629] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.907824][ T6629] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.943628][ T6629] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.100984][ T7086] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1032'. [ 121.366415][ T7074] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 121.417615][ T7074] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 121.458761][ T7073] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 121.460132][ T7074] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 121.495214][ T7073] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 121.560704][ T7074] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 121.741151][ T7119] netlink: 4096 bytes leftover after parsing attributes in process `syz.6.1042'. [ 121.944055][ T7135] netlink: 'syz.4.1046': attribute type 4 has an invalid length. [ 122.009348][ T7135] netlink: 17 bytes leftover after parsing attributes in process `syz.4.1046'. [ 122.198933][ T7149] binder: 7147:7149 unknown command 0 [ 122.226082][ T7149] binder: 7147:7149 ioctl c0306201 200000000300 returned -22 [ 122.546917][ T7167] binder: 7164:7167 ioctl c00c6211 0 returned -22 [ 123.266579][ T7216] 8021q: adding VLAN 0 to HW filter on device bond0 [ 123.295718][ T7216] bond0: (slave rose0): Enslaving as an active interface with an up link [ 123.336531][ T7074] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 123.369804][ T7223] netlink: 140 bytes leftover after parsing attributes in process `syz.4.1080'. [ 124.057376][ T7266] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1098'. [ 124.079021][ T7270] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1099'. [ 124.414186][ T7299] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1109'. [ 125.166085][ T7335] IPv6: ADDRCONF(NETDEV_CHANGE): bpq0: link becomes ready [ 125.346672][ T7289] loop3: detected capacity change from 0 to 32768 [ 125.591709][ T7289] XFS (loop3): Mounting V5 Filesystem [ 125.592184][ T7364] sp0: Synchronizing with TNC [ 125.661313][ T7370] netlink: 260 bytes leftover after parsing attributes in process `syz.4.1132'. [ 125.773313][ T7289] XFS (loop3): Ending clean mount [ 125.983111][ T4189] XFS (loop3): Unmounting Filesystem [ 126.869377][ T7383] loop0: detected capacity change from 0 to 32768 [ 127.048436][ T7383] XFS (loop0): Mounting V5 Filesystem [ 127.084808][ T26] audit: type=1800 audit(1763145790.777:20): pid=7401 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.1142" name="bus" dev="fuse" ino=5 res=0 errno=0 [ 127.363664][ T7383] XFS (loop0): Ending clean mount [ 127.527749][ T7431] loop3: detected capacity change from 0 to 8192 [ 127.613163][ T4173] loop3: p1 p2 p4 < > [ 127.617365][ T4173] loop3: partition table partially beyond EOD, truncated [ 127.634914][ T7458] netlink: 1040 bytes leftover after parsing attributes in process `syz.4.1156'. [ 127.651495][ T4173] loop3: p1 start 16777216 is beyond EOD, truncated [ 127.667726][ T4173] loop3: p2 size 515840 extends beyond EOD, truncated [ 127.695012][ T4173] loop3: p4 start 16777216 is beyond EOD, truncated [ 127.712939][ T7431] loop3: p1 p2 p4 < > [ 127.717099][ T7431] loop3: partition table partially beyond EOD, truncated [ 127.740332][ T7431] loop3: p1 start 16777216 is beyond EOD, truncated [ 127.746983][ T7383] XFS (loop0): Metadata CRC error detected at xfs_rmapbt_read_verify+0x3a/0xd0, xfs_rmapbt block 0x14 [ 127.759584][ T7431] loop3: p2 size 515840 extends beyond EOD, truncated [ 127.772758][ T7431] loop3: p4 start 16777216 is beyond EOD, truncated [ 127.817979][ T7383] XFS (loop0): Unmount and run xfs_repair [ 127.832251][ T7383] XFS (loop0): First 128 bytes of corrupted metadata buffer: [ 127.855585][ T7383] 00000000: 52 4d 42 33 00 00 00 0c ff ff ff ff ff ff ff ff RMB3............ [ 127.873285][ T7466] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1158'. [ 127.890022][ T7383] 00000010: 00 00 00 00 00 00 00 14 00 00 00 01 00 00 00 80 ................ [ 127.929622][ T7383] 00000020: bf dc 47 fc 10 d8 4e ed a5 62 11 a8 31 b3 f7 91 ..G...N..b..1... [ 127.952869][ T7383] 00000030: 00 00 00 00 5b af 3b 1d 00 00 00 00 00 00 00 01 ....[.;......... [ 127.970136][ T6370] usb 7-1: new low-speed USB device number 2 using dummy_hcd [ 127.972212][ T7383] 00000040: ff ff ff ff ff ff ff fd 00 00 00 00 00 00 00 00 ................ [ 128.031846][ T7383] 00000050: 00 00 00 01 00 00 00 02 ff ff ff ff ff ff ff fb ................ [ 128.082246][ T7383] 00000060: 00 00 00 00 00 00 00 00 00 00 00 03 00 00 00 02 ................ [ 128.112606][ T7383] 00000070: ff ff ff ff ff ff ff fa 00 00 00 00 00 00 00 00 ................ [ 128.132615][ T4201] udevd[4201]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 128.143334][ T7383] XFS (loop0): metadata I/O error in "xfs_btree_read_buf_block+0x1d3/0x2c0" at daddr 0x14 len 4 error 74 [ 128.199307][ T4201] udevd[4201]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 128.230478][ T7383] XFS (loop0): Corruption of in-memory data (0x8) detected at xfs_defer_finish_noroll+0x1556/0x1b60 (fs/xfs/libxfs/xfs_defer.c:504). Shutting down filesystem. [ 128.248980][ T7484] device syzkaller1 entered promiscuous mode [ 128.277686][ T7383] XFS (loop0): Please unmount the filesystem and rectify the problem(s) [ 128.410065][ T6370] usb 7-1: config 179 has an invalid interface number: 65 but max is 0 [ 128.418338][ T6370] usb 7-1: config 179 has no interface number 0 [ 128.440296][ T6370] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 10 [ 128.442894][ T4181] XFS (loop0): Unmounting Filesystem [ 128.460293][ T6370] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 128.465560][ T7496] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1168'. [ 128.496224][ T6370] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 128.529976][ T6370] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 58368, setting to 8 [ 128.547861][ T6370] usb 7-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 128.567649][ T6370] usb 7-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 128.606671][ T6370] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 128.662161][ T7461] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 128.688201][ T6370] xpad 7-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 128.730979][ T6370] xpad: probe of 7-1:179.65 failed with error -5 [ 128.959530][ T6370] usb 7-1: USB disconnect, device number 2 [ 129.807269][ T7584] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 130.093657][ T7563] input: syz1 as /devices/virtual/input/input14 [ 130.744665][ T7631] loop0: detected capacity change from 0 to 1024 [ 130.893730][ T7631] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 130.922518][ T7631] ext4 filesystem being mounted at /227/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 131.204891][ T7650] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 131.239430][ T7650] overlayfs: missing 'lowerdir' [ 131.311401][ T7637] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 393: padding at end of block bitmap is not set [ 131.484028][ T7666] netlink: 240 bytes leftover after parsing attributes in process `syz.0.1228'. [ 131.851460][ T7675] loop7: detected capacity change from 0 to 32768 [ 132.670719][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.677009][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.479759][ C1] sched: RT throttling activated [ 133.511885][ T7693] netlink: 'syz.3.1238': attribute type 4 has an invalid length. [ 133.598773][ T7693] netlink: 17 bytes leftover after parsing attributes in process `syz.3.1238'. [ 134.104974][ T7683] loop0: detected capacity change from 0 to 32768 [ 134.291939][ T26] audit: type=1800 audit(1763145797.987:21): pid=7683 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1236" name="file1" dev="loop0" ino=14 res=0 errno=0 [ 134.530606][ T7739] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1254'. [ 136.098399][ T7794] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 136.116705][ T7794] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 136.672660][ T7844] x_tables: duplicate underflow at hook 1 [ 136.789902][ T7855] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1298'. [ 136.972565][ T7861] tc_dump_action: action bad kind [ 137.029256][ T7869] binder: 7866:7869 ioctl c00c620f 0 returned -14 [ 137.179242][ T7881] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1305'. [ 137.211372][ T7881] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1305'. [ 137.229948][ T7881] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1305'. [ 137.275189][ T7881] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1305'. [ 137.412808][ T7890] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1308'. [ 138.089960][ T6370] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 138.265584][ T26] audit: type=1326 audit(1763145801.957:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7894 comm="syz.4.1309" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd44276e6c9 code=0x0 [ 138.374140][ T6370] usb 7-1: Using ep0 maxpacket: 32 [ 138.486214][ T7956] loop7: detected capacity change from 0 to 2048 [ 138.493334][ T6370] usb 7-1: config index 0 descriptor too short (expected 29220, got 36) [ 138.519981][ T6370] usb 7-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 138.549849][ T6370] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 138.576081][ T6370] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 138.596429][ T6370] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 138.616423][ T6370] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 138.625605][ T7956] UDF-fs: warning (device loop7): udf_load_vrs: No anchor found [ 138.638878][ T6370] usb 7-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 138.657518][ T7956] UDF-fs: Scanning with blocksize 512 failed [ 138.676663][ T6370] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 138.698473][ T7956] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 138.710455][ T6370] usb 7-1: config 0 descriptor?? [ 139.150571][ T7975] loop4: detected capacity change from 0 to 32768 [ 140.805748][ T6370] usblp 7-1:0.0: usblp0: USB Bidirectional printer dev 3 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 140.818994][ T6370] usb 7-1: USB disconnect, device number 3 [ 141.684616][ T6370] usblp0: removed [ 142.342405][ T8038] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1359'. [ 142.486983][ T8049] MTD: Couldn't look up '/dev/sg0': -15 [ 142.519912][ T8049] /dev/sg0: Can't open blockdev [ 143.096200][ T8080] device sit0 entered promiscuous mode [ 143.161156][ T8080] netlink: 'syz.0.1375': attribute type 1 has an invalid length. [ 143.194117][ T8080] netlink: 1 bytes leftover after parsing attributes in process `syz.0.1375'. [ 143.275288][ T8082] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 143.380900][ T8082] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 143.629445][ T8104] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1384'. [ 143.805089][ T8110] netlink: 'syz.7.1387': attribute type 32 has an invalid length. [ 144.259926][ T8134] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1398'. [ 144.270083][ T4236] usb 8-1: new full-speed USB device number 2 using dummy_hcd [ 144.484396][ T8143] loop0: detected capacity change from 0 to 2048 [ 144.553046][ T8143] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024) [ 144.578988][ T8143] NILFS (loop0): mounting unchecked fs [ 144.618295][ T4201] udevd[4201]: incorrect nilfs2 checksum on /dev/loop0 [ 144.633189][ T4236] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 144.671135][ T8143] NILFS (loop0): recovery complete [ 144.682634][ T4236] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 144.711420][ T8154] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 144.752767][ T4236] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 144.973187][ T4236] usb 8-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 145.001927][ T4236] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 145.033023][ T4236] usb 8-1: Product: syz [ 145.042691][ T4236] usb 8-1: Manufacturer: syz [ 145.059954][ T4236] usb 8-1: SerialNumber: syz [ 145.080699][ T4236] usb 8-1: config 0 descriptor?? [ 145.708129][ T4258] usb 8-1: USB disconnect, device number 2 [ 145.779974][ T6370] usb 7-1: new low-speed USB device number 4 using dummy_hcd [ 145.858329][ T13] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 145.888512][ T13] hid-generic 0000:0000:0000.0006: hidraw0: HID v0.00 Device [syz1] on syz0 [ 145.902286][ T8215] loop4: detected capacity change from 0 to 2048 [ 145.955731][ T8215] EXT4-fs (loop4): quotafile must be on filesystem root [ 145.968348][ T8226] udevd[8226]: failed to execute '/lib/udev/fido_id' 'fido_id': No such file or directory [ 146.270014][ T6370] usb 7-1: unable to get BOS descriptor or descriptor too short [ 146.380025][ T6370] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 146.428496][ T6370] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x1 is Bulk; changing to Interrupt [ 146.471364][ T6370] usb 7-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 146.678439][ T8245] 9pnet: Insufficient options for proto=fd [ 146.884984][ T6370] usb 7-1: string descriptor 0 read error: -22 [ 146.901315][ T6370] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 146.935312][ T6370] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 146.986400][ T8192] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 147.069353][ T8272] bridge0: port 3(ip6gretap0) entered blocking state [ 147.095605][ T8272] bridge0: port 3(ip6gretap0) entered disabled state [ 147.110901][ T8272] device ip6gretap0 entered promiscuous mode [ 147.117331][ T8272] bridge0: port 3(ip6gretap0) entered blocking state [ 147.124138][ T8272] bridge0: port 3(ip6gretap0) entered forwarding state [ 147.148611][ T8279] netlink: 37 bytes leftover after parsing attributes in process `syz.3.1448'. [ 147.301021][ T4258] usb 7-1: USB disconnect, device number 4 [ 147.373965][ T8296] loop3: detected capacity change from 0 to 1024 [ 147.541392][ T8296] hfsplus: request for non-existent node 33554434 in B*Tree [ 147.562089][ T8296] hfsplus: request for non-existent node 33554434 in B*Tree [ 148.398201][ T8372] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1488'. [ 148.446005][ T8367] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1486'. [ 149.567453][ T26] audit: type=1326 audit(1763145813.257:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8464 comm="syz.4.1526" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd44276e6c9 code=0x0 [ 149.919611][ T8426] loop7: detected capacity change from 0 to 32768 [ 150.005264][ T8495] netlink: 'syz.3.1539': attribute type 2 has an invalid length. [ 150.344837][ T6370] Bluetooth: hci2: command 0x0405 tx timeout [ 150.377697][ T8514] netlink: 240 bytes leftover after parsing attributes in process `syz.4.1547'. [ 150.727226][ T8544] netlink: 2040 bytes leftover after parsing attributes in process `syz.0.1557'. [ 150.746776][ T8544] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1557'. [ 150.932236][ T8557] tc_dump_action: action bad kind [ 150.999162][ T8558] tipc: Failed to remove unknown binding: 66,1,1/0:124792889/124792891 [ 151.068112][ T8558] tipc: Failed to remove unknown binding: 66,1,1/0:124792889/124792891 [ 151.623894][ T8606] netlink: 964 bytes leftover after parsing attributes in process `syz.6.1588'. [ 151.639475][ T8607] 9pnet_virtio: no channels available for device ./file0 [ 151.680451][ T8609] loop3: detected capacity change from 0 to 2048 [ 151.769679][ T8609] UDF-fs: error (device loop3): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 151.809249][ T8609] UDF-fs: error (device loop3): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 151.837775][ T8609] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found [ 151.868417][ T8609] UDF-fs: Scanning with blocksize 512 failed [ 151.897217][ T8609] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 152.018828][ T8634] netlink: 2048 bytes leftover after parsing attributes in process `syz.4.1599'. [ 152.039009][ T8634] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1599'. [ 152.277015][ T8649] netlink: 5 bytes leftover after parsing attributes in process `syz.6.1607'. [ 152.308692][ T8649] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 152.644685][ T8669] netlink: 36 bytes leftover after parsing attributes in process `syz.6.1616'. [ 152.895987][ T8646] loop7: detected capacity change from 0 to 32768 [ 153.057741][ T8646] XFS (loop7): Mounting V5 Filesystem [ 153.221291][ T8646] XFS (loop7): Ending clean mount [ 153.255649][ T8646] XFS (loop7): Quotacheck needed: Please wait. [ 153.338070][ T8712] netlink: 'syz.4.1632': attribute type 4 has an invalid length. [ 153.414146][ T8646] XFS (loop7): Quotacheck: Done. [ 153.634796][ T8718] loop6: detected capacity change from 0 to 2048 [ 153.690992][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #10!!! [ 153.699928][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #112!!! [ 153.708911][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #112!!! [ 153.717899][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #112!!! [ 153.726894][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #112!!! [ 153.735892][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #112!!! [ 153.744899][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #112!!! [ 153.755269][ T8718] NILFS (loop6): broken superblock, retrying with spare superblock (blocksize = 1024) [ 153.765012][ T8718] NILFS (loop6): mounting unchecked fs [ 153.825483][ T8718] NILFS (loop6): recovery complete [ 153.860024][ T8720] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 154.727545][ T6629] XFS (loop7): Unmounting Filesystem [ 154.737590][ T8746] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1646'. [ 154.754577][ T8746] IPv6: ADDRCONF(NETDEV_CHANGE): gre1: link becomes ready [ 155.297852][ T8776] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1661'. [ 155.322833][ T8779] binder: 8778:8779 ioctl c0306201 200000000280 returned -14 [ 155.798883][ T8810] netlink: 'syz.4.1675': attribute type 4 has an invalid length. [ 155.842455][ T8810] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 155.969593][ T8819] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1679'. [ 156.071506][ T8825] uffd: Set unprivileged_userfaultfd sysctl knob to 1 if kernel faults must be handled without obtaining CAP_SYS_PTRACE capability [ 156.104865][ T8787] loop3: detected capacity change from 0 to 32768 [ 156.145066][ T8827] loop7: detected capacity change from 0 to 1764 [ 156.227769][ T8827] ISOFS: unable to read i-node block [ 156.243410][ T8827] isofs_fill_super: get root inode failed [ 156.629625][ T8827] loop7: detected capacity change from 0 to 32768 [ 156.650358][ T8845] netlink: 120 bytes leftover after parsing attributes in process `syz.4.1694'. [ 156.661396][ T8845] netlink: 96 bytes leftover after parsing attributes in process `syz.4.1694'. [ 156.683191][ T8827] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop7 scanned by syz.7.1683 (8827) [ 156.693855][ T8849] loop6: detected capacity change from 0 to 64 [ 156.719970][ T8827] BTRFS info (device loop7): using crc32c (crc32c-intel) checksum algorithm [ 156.729389][ T8827] BTRFS info (device loop7): turning on flush-on-commit [ 156.736660][ T8827] BTRFS info (device loop7): use zlib compression, level 3 [ 156.744217][ T8827] BTRFS info (device loop7): disabling free space tree [ 156.751137][ T8827] BTRFS info (device loop7): enabling disk space caching [ 156.758171][ T8827] BTRFS info (device loop7): setting nodatasum [ 156.764445][ T8827] BTRFS info (device loop7): turning off barriers [ 156.771598][ T8827] BTRFS info (device loop7): enabling ssd optimizations [ 156.778550][ T8827] BTRFS info (device loop7): force clearing of disk cache [ 156.785783][ T8827] BTRFS info (device loop7): disk space caching is enabled [ 156.793092][ T8827] BTRFS info (device loop7): has skinny extents [ 156.839349][ T8853] udevd[8853]: failed to execute '/usr/bin/udevadm' '/usr/bin/udevadm trigger -s block -p ID_BTRFS_READY=0': No such file or directory [ 157.129203][ T8882] udevd[8882]: failed to execute '/usr/bin/udevadm' '/usr/bin/udevadm trigger -s block -p ID_BTRFS_READY=0': No such file or directory [ 157.145071][ T8827] BTRFS info (device loop7): clearing free space tree [ 157.153025][ T8827] BTRFS info (device loop7): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 157.163152][ T8827] BTRFS info (device loop7): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 157.206669][ T8888] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1703'. [ 157.332933][ T8893] loop6: detected capacity change from 0 to 1024 [ 157.361506][ T8888] team0 (unregistering): Port device team_slave_0 removed [ 157.385295][ T8896] udevd[8896]: failed to execute '/usr/bin/udevadm' '/usr/bin/udevadm trigger -s block -p ID_BTRFS_READY=0': No such file or directory [ 157.393633][ T8888] team0 (unregistering): Port device team_slave_1 removed [ 157.462510][ T8893] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 157.699379][ T8911] netlink: 'syz.3.1714': attribute type 1 has an invalid length. [ 157.721705][ T8911] 8021q: adding VLAN 0 to HW filter on device bond1 [ 157.757714][ T8911] bond1: (slave veth0_to_hsr): making interface the new active one [ 157.768384][ T8911] bond1: (slave veth0_to_hsr): Enslaving as an active interface with an up link [ 157.782783][ T7073] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 157.807864][ T8911] device bond1 entered promiscuous mode [ 157.822693][ T8911] device veth0_to_hsr entered promiscuous mode [ 157.845429][ T8910] device bond1 left promiscuous mode [ 157.865558][ T8910] device veth0_to_hsr left promiscuous mode [ 157.952501][ T8914] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 158.482542][ T8959] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1729'. [ 159.380004][ T8928] usb 4-1: new full-speed USB device number 4 using dummy_hcd [ 159.447665][ T9029] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1761'. [ 159.760370][ T9050] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1771'. [ 159.810156][ T8928] usb 4-1: unable to get BOS descriptor or descriptor too short [ 159.870116][ T8928] usb 4-1: not running at top speed; connect to a high speed hub [ 159.948038][ T9035] loop7: detected capacity change from 0 to 32768 [ 159.980036][ T9035] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop7 scanned by syz.7.1764 (9035) [ 160.070188][ T9035] BTRFS info (device loop7): using sha256 (sha256-avx2) checksum algorithm [ 160.078868][ T9035] BTRFS info (device loop7): enabling auto defrag [ 160.113804][ T9035] BTRFS info (device loop7): disabling auto defrag [ 160.132469][ T9069] udevd[9069]: failed to execute '/usr/bin/udevadm' '/usr/bin/udevadm trigger -s block -p ID_BTRFS_READY=0': No such file or directory [ 160.163425][ T8928] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 160.178089][ T9035] BTRFS info (device loop7): max_inline at 0 [ 160.187089][ T8928] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 160.200890][ T9035] BTRFS info (device loop7): enabling ssd optimizations [ 160.208303][ T9035] BTRFS info (device loop7): setting incompat feature flag for COMPRESS_LZO (0x8) [ 160.229823][ T8928] usb 4-1: Product: syz [ 160.234003][ T8928] usb 4-1: Manufacturer: syz [ 160.250813][ T8928] usb 4-1: SerialNumber: syz [ 160.307663][ T9035] BTRFS info (device loop7): use lzo compression, level 0 [ 160.343949][ T9035] BTRFS info (device loop7): using free space tree [ 160.356849][ T9035] BTRFS info (device loop7): has skinny extents [ 160.412810][ T9089] udevd[9089]: failed to execute '/usr/bin/udevadm' '/usr/bin/udevadm trigger -s block -p ID_BTRFS_READY=0': No such file or directory [ 160.584566][ T9035] loop7: detected capacity change from 32768 to 0 [ 160.631243][ T8928] cdc_ncm 4-1:1.0: bind() failure [ 160.660447][ T9119] binder: 9118:9119 ioctl c018620c 200000000000 returned -1 [ 160.689013][ T8719] loop: Write error at byte offset 9223372036860035071, length 4096. [ 160.712612][ T8928] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 160.724994][ T9123] netlink: 140 bytes leftover after parsing attributes in process `syz.6.1797'. [ 160.728767][ C0] blk_update_request: I/O error, dev loop7, sector 10272 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 0 [ 160.746020][ C0] BTRFS error (device loop7): bdev /dev/loop7 errs: wr 1, rd 0, flush 0, corrupt 0, gen 0 [ 160.756373][ T8719] loop: Write error at byte offset 9223372036860047359, length 4096. [ 160.786725][ T8928] cdc_ncm 4-1:1.1: bind() failure [ 160.814693][ C0] blk_update_request: I/O error, dev loop7, sector 10296 op 0x1:(WRITE) flags 0x0 phys_seg 1 prio class 0 [ 160.826095][ C0] BTRFS error (device loop7): bdev /dev/loop7 errs: wr 2, rd 0, flush 0, corrupt 0, gen 0 [ 160.867928][ T8928] usb 4-1: USB disconnect, device number 4 [ 160.966331][ T8719] loop: Write error at byte offset 9223372036860022783, length 4096. [ 160.974666][ C0] blk_update_request: I/O error, dev loop7, sector 10248 op 0x1:(WRITE) flags 0x1800 phys_seg 1 prio class 0 [ 160.986294][ C0] BTRFS error (device loop7): bdev /dev/loop7 errs: wr 3, rd 0, flush 0, corrupt 0, gen 0 [ 161.005965][ T6629] BTRFS: error (device loop7) in __btrfs_run_delayed_items:1089: errno=-5 IO failure [ 161.018167][ T6629] BTRFS info (device loop7): forced readonly [ 161.024710][ T6629] BTRFS warning (device loop7): Skipping commit of aborted transaction. [ 161.040125][ T6629] BTRFS: error (device loop7) in cleanup_transaction:2020: errno=-5 IO failure [ 161.237674][ T9150] netlink: 680 bytes leftover after parsing attributes in process `syz.0.1809'. [ 161.434272][ T9159] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1812'. [ 161.599122][ T9170] netlink: 64 bytes leftover after parsing attributes in process `syz.6.1817'. [ 161.780005][ T9180] dccp_close: ABORT with 113 bytes unread [ 161.969397][ T9178] loop3: detected capacity change from 0 to 8192 [ 162.068230][ T9178] REISERFS (device loop3): found reiserfs format "3.6" with non-standard journal [ 162.096972][ T9178] REISERFS (device loop3): using ordered data mode [ 162.103665][ T9178] reiserfs: using flush barriers [ 162.123347][ T9178] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 162.143598][ T9178] REISERFS (device loop3): checking transaction log (loop3) [ 162.346096][ T9178] REISERFS (device loop3): Using tea hash to sort names [ 162.383352][ T9178] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 162.733462][ T9222] loop4: detected capacity change from 0 to 32768 [ 162.775427][ T9224] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 162.835401][ T9204] loop6: detected capacity change from 0 to 32768 [ 162.864227][ T9222] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop4 scanned by syz.4.1840 (9222) [ 162.901678][ T9222] BTRFS info (device loop4): using blake2b (blake2b-256-generic) checksum algorithm [ 162.911380][ T9222] BTRFS info (device loop4): using free space tree [ 162.917863][ T9222] BTRFS info (device loop4): has skinny extents [ 162.946903][ T9204] XFS (loop6): Mounting V5 Filesystem [ 163.067878][ T9222] BTRFS info (device loop4): enabling ssd optimizations [ 163.132674][ T26] audit: type=1800 audit(1763145826.825:24): pid=9222 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1840" name="file1" dev="loop4" ino=260 res=0 errno=0 [ 163.190979][ T9204] XFS (loop6): Ending clean mount [ 163.273888][ T9204] XFS (loop6): Quotacheck needed: Please wait. [ 163.280894][ T26] audit: type=1800 audit(1763145826.885:25): pid=9222 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1840" name="file1" dev="loop4" ino=260 res=0 errno=0 [ 163.339306][ T9260] udevd[9260]: failed to execute '/usr/bin/udevadm' '/usr/bin/udevadm trigger -s block -p ID_BTRFS_READY=0': No such file or directory [ 163.426229][ T9204] XFS (loop6): Quotacheck: Done. [ 163.707887][ T6384] XFS (loop6): Unmounting Filesystem [ 163.717763][ T9266] udevd[9266]: failed to execute '/usr/bin/udevadm' '/usr/bin/udevadm trigger -s block -p ID_BTRFS_READY=0': No such file or directory [ 163.773227][ T9267] tipc: Started in network mode [ 163.794888][ T9267] tipc: Node identity ea4ab87fc506, cluster identity 4711 [ 163.818367][ T9267] tipc: Enabled bearer , priority 0 [ 163.887615][ T9271] device syzkaller0 entered promiscuous mode [ 164.102212][ T9264] tipc: Resetting bearer [ 164.179402][ T9276] loop4: detected capacity change from 0 to 1024 [ 164.249451][ T9264] tipc: Disabling bearer [ 164.337999][ T9276] EXT4-fs (loop4): Ignoring removed nobh option [ 164.372660][ T9276] EXT4-fs (loop4): Ignoring removed mblk_io_submit option [ 164.406783][ T9276] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 164.495761][ T9276] EXT4-fs (loop4): mounted filesystem without journal. Opts: jqfmt=vfsold,nobarrier,nobarrier,noblock_validity,data_err=ignore,acl,abort,mb_optimize_scan=0x0000000000000001,nobh,auto_da_alloc=0x0000000000010000,mblk_io_submit,dioread_nolock,,errors=continue. Quota mode: none. [ 164.779441][ T9299] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 164.824932][ T4191] EXT4-fs error (device loop4): __ext4_get_inode_loc:4327: comm syz-executor: Invalid inode table block 0 in block_group 0 [ 164.849195][ T4191] EXT4-fs error (device loop4): __ext4_get_inode_loc:4327: comm syz-executor: Invalid inode table block 0 in block_group 0 [ 164.866644][ T9299] overlayfs: missing 'lowerdir' [ 165.351258][ T4191] EXT4-fs error (device loop4): __ext4_get_inode_loc:4327: comm syz-executor: Invalid inode table block 0 in block_group 0 [ 165.405477][ T7747] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.416108][ T4191] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5850: Corrupt filesystem [ 165.442061][ T4191] EXT4-fs error (device loop4): ext4_dirty_inode:6054: inode #2: comm syz-executor: mark_inode_dirty error [ 165.455808][ T9341] netlink: 'syz.6.1881': attribute type 15 has an invalid length. [ 165.457008][ T154] EXT4-fs error (device loop4): __ext4_get_inode_loc:4327: comm kworker/u4:2: Invalid inode table block 0 in block_group 0 [ 165.470964][ T9341] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1881'. [ 165.575591][ T7747] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 SYZFAIL: posix_spawnp failed (errno 2: No such file or directory) [ 165.792615][ T7747] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.864158][ T7747] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 167.088700][ T7747] device hsr_slave_0 left promiscuous mode [ 167.095274][ T7747] device hsr_slave_1 left promiscuous mode [ 167.102007][ T7747] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 167.109695][ T7747] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 167.117415][ T7747] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 167.124849][ T7747] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 167.132769][ T7747] device bridge_slave_1 left promiscuous mode [ 167.138935][ T7747] bridge0: port 2(bridge_slave_1) entered disabled state [ 167.148426][ T7747] device bridge_slave_0 left promiscuous mode [ 167.154785][ T7747] bridge0: port 1(bridge_slave_0) entered disabled state [ 167.165239][ T7747] device veth1_macvtap left promiscuous mode [ 167.171322][ T7747] device veth0_macvtap left promiscuous mode [ 167.177353][ T7747] device veth1_vlan left promiscuous mode [ 167.183512][ T7747] device veth0_vlan left promiscuous mode [ 167.339500][ T7747] team0 (unregistering): Port device team_slave_1 removed [ 167.354929][ T7747] team0 (unregistering): Port device team_slave_0 removed [ 167.366104][ T7747] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 167.379055][ T7747] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 167.438036][ T7747] bond0 (unregistering): Released all slaves [ 168.435243][ T7747] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 168.485787][ T7747] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 168.528953][ T7747] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 168.576539][ T7747] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 168.661454][ T7747] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 168.722521][ T7747] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 168.770592][ T7747] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 168.824836][ T7747] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 168.947170][ T7747] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 168.987051][ T7747] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.042224][ T7747] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.088229][ T7747] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.190447][ T7747] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.244925][ T7747] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.316328][ T7747] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.352538][ T7747] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.589981][ T7747] tipc: Disabling bearer [ 169.595876][ T7747] tipc: Left network mode [ 169.649477][ T7747] tipc: Left network mode [ 169.819585][ T7747] bridge0: port 3(ip6gretap0) entered disabled state [ 169.844965][ T7747] device ip6gretap0 left promiscuous mode [ 169.851517][ T7747] bridge0: port 3(ip6gretap0) entered disabled state [ 169.919677][ T7747] smc: removing net device ip6tnl0 with user defined pnetid SYZ1 [ 170.924957][ T7747] device hsr_slave_0 left promiscuous mode [ 170.932412][ T7747] device hsr_slave_1 left promiscuous mode [ 170.939453][ T7747] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 170.947268][ T7747] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 170.955404][ T7747] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 170.967627][ T7747] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 170.975711][ T7747] device bridge_slave_1 left promiscuous mode [ 170.982473][ T7747] bridge0: port 2(bridge_slave_1) entered disabled state [ 170.990804][ T7747] device bridge_slave_0 left promiscuous mode [ 170.996954][ T7747] bridge0: port 1(bridge_slave_0) entered disabled state [ 171.014515][ T7747] device hsr_slave_0 left promiscuous mode [ 171.022642][ T7747] device hsr_slave_1 left promiscuous mode [ 171.028947][ T7747] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 171.036465][ T7747] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 171.044811][ T7747] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 171.054907][ T7747] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 171.063055][ T7747] device bridge_slave_1 left promiscuous mode [ 171.069247][ T7747] bridge0: port 2(bridge_slave_1) entered disabled state [ 171.077792][ T7747] device bridge_slave_0 left promiscuous mode [ 171.086045][ T7747] bridge0: port 1(bridge_slave_0) entered disabled state [ 171.097044][ T7747] device hsr_slave_0 left promiscuous mode [ 171.105043][ T7747] device hsr_slave_1 left promiscuous mode [ 171.112819][ T7747] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 171.120304][ T7747] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 171.127869][ T7747] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 171.135390][ T7747] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 171.143706][ T7747] device bridge_slave_1 left promiscuous mode [ 171.150907][ T7747] bridge0: port 2(bridge_slave_1) entered disabled state [ 171.159200][ T7747] device bridge_slave_0 left promiscuous mode [ 171.165679][ T7747] bridge0: port 1(bridge_slave_0) entered disabled state [ 171.178274][ T7747] device hsr_slave_0 left promiscuous mode [ 171.185242][ T7747] device hsr_slave_1 left promiscuous mode [ 171.194880][ T7747] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 171.202412][ T7747] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 171.210596][ T7747] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 171.218019][ T7747] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 171.229085][ T7747] device bond0 left promiscuous mode [ 171.237923][ T7747] device bond_slave_0 left promiscuous mode [ 171.244218][ T7747] device bond_slave_1 left promiscuous mode [ 171.250639][ T7747] bridge0: port 3(bond0) entered disabled state [ 171.257817][ T7747] device bridge_slave_1 left promiscuous mode [ 171.264387][ T7747] bridge0: port 2(bridge_slave_1) entered disabled state [ 171.276152][ T7747] device bridge_slave_0 left promiscuous mode [ 171.282779][ T7747] bridge0: port 1(bridge_slave_0) entered disabled state [ 171.299078][ T7747] device veth1_macvtap left promiscuous mode [ 171.305290][ T7747] device veth0_macvtap left promiscuous mode [ 171.311427][ T7747] device veth1_vlan left promiscuous mode [ 171.317222][ T7747] device veth0_vlan left promiscuous mode [ 171.326650][ T7747] device veth1_macvtap left promiscuous mode [ 171.332824][ T7747] device veth0_macvtap left promiscuous mode [ 171.338903][ T7747] device veth1_vlan left promiscuous mode [ 171.345556][ T7747] device veth0_vlan left promiscuous mode [ 171.354738][ T7747] device veth1_macvtap left promiscuous mode [ 171.360850][ T7747] device veth0_macvtap left promiscuous mode [ 171.366867][ T7747] device veth1_vlan left promiscuous mode [ 171.372964][ T7747] device veth0_vlan left promiscuous mode [ 171.380778][ T7747] device veth1_macvtap left promiscuous mode [ 171.386799][ T7747] device veth0_macvtap left promiscuous mode [ 171.393845][ T7747] device veth1_vlan left promiscuous mode [ 171.399777][ T7747] device veth0_vlan left promiscuous mode [ 171.809381][ T7747] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 171.827030][ T7747] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 171.874412][ T7747] bond0 (unregistering): Released all slaves [ 172.009475][ T7747] team0 (unregistering): Port device team_slave_1 removed [ 172.024925][ T7747] team0 (unregistering): Port device team_slave_0 removed [ 172.035592][ T7747] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 172.050945][ T7747] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 172.109834][ T7747] bond0 (unregistering): Released all slaves [ 172.216596][ T7747] team0 (unregistering): Port device team_slave_1 removed [ 172.232587][ T7747] team0 (unregistering): Port device team_slave_0 removed [ 172.245387][ T7747] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 172.259211][ T7747] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 172.313554][ T7747] bond0 (unregistering): Released all slaves [ 172.375375][ T7747] bond1 (unregistering): (slave veth0_to_hsr): Releasing active interface [ 172.384499][ T7747] bond1 (unregistering): Released all slaves [ 172.453578][ T7747] team0 (unregistering): Port device team_slave_1 removed [ 172.466510][ T7747] team0 (unregistering): Port device team_slave_0 removed [ 172.478086][ T7747] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 172.491812][ T7747] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 172.548637][ T7747] bond0 (unregistering): Released all slaves