last executing test programs: 14.48886502s ago: executing program 1 (id=2959): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xc, &(0x7f0000000280)=0xf8, 0x4) 14.430650981s ago: executing program 1 (id=2960): r0 = socket$kcm(0xa, 0x922000000003, 0x11) recvmsg(r0, &(0x7f0000003480)={0x0, 0x0, 0x0}, 0x40000120) recvmsg$kcm(r0, &(0x7f0000000c40)={0x0, 0x0, 0x0}, 0x2) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd637f4b22667f2f00db5b686158bbcfe8875a65969ff57b00000000000000000000000000ac1414aa"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x5, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100008}, 0x94) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848430000", 0x17}], 0x1}, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', @random="0000230c1100"}) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce2200"], 0xcfa4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3000000, 0xff00}, 0x48) 14.159782938s ago: executing program 1 (id=2966): r0 = socket(0x400000000010, 0x3, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000027c0)=@newtfilter={0x8b0, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r2, {0x0, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0x87c, 0x2, [@TCA_MATCHALL_ACT={0x878, 0x2, [@m_police={0x874, 0x1, 0x0, 0x0, {{0xb}, {0x848, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x1ff, 0x3, 0x10000, 0x81, 0x7f, 0xfffffffb, 0x4, 0x2, 0xffffffc0, 0x5, 0x2234, 0x7f, 0x81b, 0x800, 0x8, 0x0, 0x3, 0x7ed53619, 0x1, 0x2, 0x9644, 0x4, 0x58b, 0x852, 0x3ff, 0x46, 0x2, 0x1, 0x0, 0x80000000, 0x10001, 0x790, 0x5, 0xab2, 0xfffffff9, 0x1a77, 0x9, 0x3, 0x400, 0x63c, 0x4, 0xffffffff, 0x1, 0x5, 0x1, 0x5b1f, 0x7b0, 0x7, 0x100, 0x6, 0xd, 0xff, 0x3, 0x10000, 0x6, 0x6b7, 0x1ff, 0x80, 0x4, 0x7, 0x3, 0xa14, 0x3, 0x2, 0x80000000, 0x81, 0x7, 0x8, 0x5, 0x10001, 0xf7, 0x3, 0xfffffff9, 0x9, 0x4, 0x8, 0xfff, 0x3, 0x1, 0x6, 0x7, 0x8, 0x100, 0xc0000000, 0x6, 0x6, 0x6, 0x8, 0x80000001, 0x8, 0x1d24, 0x2, 0x9, 0x0, 0x7f, 0x7, 0x863c, 0xff, 0x24, 0x5, 0x7, 0x6, 0x6, 0x8, 0x0, 0x7, 0x470, 0x7f, 0x6, 0x0, 0x1, 0x0, 0x4, 0x9, 0x61, 0x7, 0x6, 0x2, 0x2, 0x6, 0x10001, 0x8, 0x7, 0xf, 0xda56, 0x7ffffffe, 0x80, 0x2f0cb955, 0x7, 0xfed, 0xf, 0x6ae, 0x2, 0x1, 0x9, 0x8001, 0x0, 0xec000, 0x0, 0x1, 0x2, 0xfffffffb, 0x7, 0x8, 0x4, 0x1, 0xffffcf1b, 0x282, 0x5517bc7b, 0x3, 0x4, 0xb6b, 0x5, 0x0, 0xac, 0x9, 0x6, 0x10, 0x9, 0x8, 0x80000001, 0x0, 0x74, 0x6, 0x7fffffff, 0x0, 0xa, 0x6, 0xffffffff, 0x8, 0x2, 0x7, 0x7f, 0x5, 0x3, 0xa, 0x1, 0x200, 0x9, 0x300, 0x5, 0x3, 0x6, 0xffffffff, 0xffb, 0xff, 0x5, 0x8, 0x3, 0x2, 0x5, 0xfca, 0x399d, 0x6, 0x8ab2, 0x18000, 0x2, 0xfffffff9, 0x2, 0x2, 0x528c, 0x5, 0x200, 0xac, 0xf, 0xd05, 0x9a2ce73, 0x4, 0x6, 0xe074, 0x6b10, 0x5, 0x1, 0x6, 0xb, 0xa26, 0xaf6, 0x0, 0xec, 0x8, 0xde16, 0xc418, 0xffffffff, 0xffffffff, 0x9, 0x4, 0x1, 0x6, 0x354d, 0x5, 0x2, 0x1, 0x7, 0x1, 0x177, 0x7, 0x0, 0x80, 0x5, 0x8, 0xfffffffb, 0x9, 0xe7b, 0x0, 0x7, 0x42bf, 0x10000, 0x9, 0x9, 0x6, 0x8004b75, 0x80000001, 0x1000, 0x5915, 0x10001, 0x1]}], [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x1080, 0x4, 0x80000ec2, 0x6, 0x8, 0x400, 0x5, 0x1, 0x7, 0x470, 0x487, 0x100, 0xa99, 0xffffff01, 0x5, 0x37f, 0x8, 0x6, 0x3, 0x3, 0x800, 0xd2f5, 0x40, 0x4, 0x4, 0x5, 0x7, 0x12, 0x2, 0x8, 0x101, 0xffffffff, 0x2, 0x10000, 0xa6, 0x3, 0x10000, 0x5, 0x4, 0x0, 0x3, 0x0, 0xd, 0x6, 0x98, 0x8, 0x6, 0x9, 0x1000, 0xb3000, 0xf, 0x3, 0x9, 0xb4, 0x94d, 0x9, 0x8, 0x6, 0x140, 0xec0, 0xffff, 0x4, 0x2, 0x3ff, 0x3e, 0xb827, 0x0, 0x0, 0x365, 0x8, 0x8, 0xf, 0x1, 0xfffffffe, 0xfffffff6, 0x93, 0x7ff, 0x92, 0x0, 0x7, 0xfffffffc, 0x7ff, 0x9, 0x2, 0x0, 0x2, 0x8, 0x1, 0x3, 0x9, 0xc, 0x5, 0x3, 0x3, 0x400, 0x100000, 0x7f, 0x2, 0x8, 0x4, 0x7, 0x4, 0x7, 0xfffffffa, 0x101, 0xadd9, 0xe, 0x400, 0x7, 0x7fffffff, 0x2, 0x4, 0x0, 0x5, 0x4, 0x3, 0x8, 0x9, 0x6, 0x6, 0x2, 0xb, 0x3, 0x7f, 0xffff, 0x401, 0x1685, 0xa252, 0x2, 0x200, 0x3, 0x1, 0x400, 0xfffffffc, 0xfffffffc, 0x1000, 0x7ff, 0x1, 0x1f6, 0x751, 0x7, 0x40000000, 0x4, 0xffffdbb7, 0x50, 0xf, 0xf, 0xe, 0x3, 0x0, 0x81, 0xfff80000, 0x7a7, 0x1, 0x6, 0x3, 0x8, 0x4, 0x5, 0x2, 0x0, 0x4e8, 0x80, 0x4, 0x8, 0x5, 0x0, 0x5, 0x7fff, 0x7, 0x8, 0x6a4941c5, 0x2ea567b4, 0x8, 0x80000000, 0x9, 0x40, 0x2, 0xfff, 0x8, 0x3, 0x1, 0x1, 0x0, 0x0, 0xd3bed341, 0x691f, 0x0, 0x2, 0x9, 0x6, 0x0, 0x1ff, 0x3, 0x3, 0x6, 0x5fc8462f, 0x0, 0x7, 0xffff, 0xfffffffc, 0x5, 0x0, 0xb9a6, 0x522, 0x2, 0x2, 0x900, 0x8, 0xbb99, 0xb8000000, 0x8, 0xffffff01, 0xc0a1, 0x8, 0x8, 0xa, 0x59, 0x9, 0x2, 0x101, 0x5f502dc7, 0x7, 0x0, 0x4, 0x6, 0x80000001, 0x3, 0xffffff97, 0x2, 0xfff, 0x1, 0x40, 0x8, 0x3, 0x710, 0x8, 0x1, 0xfffff339, 0x3, 0x8001, 0x1, 0x8001, 0x9, 0x8, 0xfffffffa, 0x8, 0x9, 0x3, 0xe, 0x10000, 0x9, 0x9, 0x7, 0xfffffff8]}, @TCA_POLICE_TBF={0x3c, 0x1, {0xfffffe00, 0x6, 0x5, 0x1, 0xdbec, {0x8, 0x0, 0xb55, 0x5, 0x7, 0x5}, {0x6, 0x0, 0xd, 0x5, 0x1, 0x5d17}, 0x2, 0x0, 0x6}}]]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}]}]}}]}, 0x8b0}, 0x1, 0x0, 0x0, 0x10}, 0x0) 14.11212916s ago: executing program 1 (id=2968): r0 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x48240) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}) 14.051463491s ago: executing program 1 (id=2969): mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./proc/net/rpc/auth.unix.gid/channel\x00', 0x2, 0x0) write(r0, &(0x7f0000000500)=' 294967295 2000000000 0\n', 0x18) 14.028272282s ago: executing program 1 (id=2972): sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffc000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mmap$IORING_OFF_SQ_RING(0x0, 0xd00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) futex_waitv(&(0x7f00000004c0)=[{0x40000000, 0x0, 0x82}], 0x1, 0x0, 0x0, 0x0) 1.333447697s ago: executing program 2 (id=3053): socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x11, 0x3, 0x0, 0x0, 0x7, 0x0, 0x0, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), r0) sendmsg$MPTCP_PM_CMD_ANNOUNCE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x18, r1, 0x1, 0x70bd28, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_ADDR={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x24004800}, 0x4000000) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = socket(0x10, 0x80002, 0x0) r3 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=@RTM_NEWMDB={0x38, 0x54, 0x1, 0x70bd2a, 0xffffffff, {0x7, r4}, [@MDBA_SET_ENTRY={0x20, 0x1, {r6, 0x1, 0x0, 0x0, {@ip4=@multicast1, 0x86dd}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x884}, 0x4cd0) 1.244089319s ago: executing program 2 (id=3056): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) write(r0, &(0x7f0000000500)=' 294967295 2000000000 0\n', 0x18) 1.167419831s ago: executing program 0 (id=3058): socket$inet6_sctp(0xa, 0x5, 0x84) r0 = socket$inet6(0xa, 0x3, 0xff) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x800, 0x0, 0x1, 0x9}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000000)=0xffffffc3, 0x4) sendmmsg(r0, &(0x7f0000003b80)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @loopback, 0xc21}, 0x80, 0x0}, 0x5b4}], 0x1, 0x20000850) 1.167213841s ago: executing program 2 (id=3059): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newqdisc={0x24, 0x24, 0x400, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xfff3, 0x6}, {0x3}}}, 0x24}}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="5000000010000104000100"/20, @ANYBLOB="0000000008c403001c0012800b00010067726574617000000c0002800600020020"], 0x50}, 0x1, 0x0, 0x0, 0x484c}, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1.143149362s ago: executing program 0 (id=3061): setns(0xc9, 0x0) r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYBLOB="020a040007000000b6f1ffff0000854105"], 0x38}}, 0x0) sendmsg$RDMA_NLDEV_CMD_SET(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x18}}, 0x0) 1.099408473s ago: executing program 3 (id=3062): r0 = inotify_init1(0x0) inotify_add_watch(r0, &(0x7f0000000400)='.\x00', 0xa4000021) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='fdinfo/3\x00') read$FUSE(r1, &(0x7f0000000400)={0x2020}, 0x2020) 1.084992773s ago: executing program 0 (id=3063): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x10040) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) syz_emit_ethernet(0x36, &(0x7f00000002c0)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1b}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x3d, 0x28, 0x69, 0x0, 0x2, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xc2}}}}}}, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) 1.063155144s ago: executing program 3 (id=3064): socket$netlink(0x10, 0x3, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r0) sendmsg$IEEE802154_LLSEC_ADD_DEV(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="4d7e00000000000000002a00000008002f000000000005003600000000000c0005000000000200000000050037000000000008000200"], 0x50}, 0x4, 0x700000000000000, 0x0, 0x4}, 0x4040084) 1.013176845s ago: executing program 2 (id=3065): r0 = fsopen(&(0x7f0000000100)='nfs4\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000240)='minorversion\x00', 0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f00000002a0)='source\x00', &(0x7f00000002b0)='127.0.0.1:/\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) 993.159165ms ago: executing program 0 (id=3066): r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0xfffffffd, {0x0, 0x0, 0x0, r1, {0x0, 0xffffffffffffffff}, {0xffff, 0xffff}, {0xfff3, 0xa}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x20000000) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x48, 0x2c, 0xf3f, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0xb, 0x3}, {}, {0x7, 0x300}}, [@filter_kind_options=@f_flower={{0xb}, {0x18, 0x2, [@TCA_FLOWER_KEY_IPV6_DST={0x14, 0x10, @private0}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) 958.124946ms ago: executing program 3 (id=3067): socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x11, 0x3, 0x0, 0x0, 0x7, 0x0, 0x0, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), r0) sendmsg$MPTCP_PM_CMD_ANNOUNCE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x18, r1, 0x1, 0x70bd28, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_ADDR={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x24004800}, 0x4000000) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = socket(0x10, 0x80002, 0x0) r3 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=@RTM_NEWMDB={0x38, 0x54, 0x1, 0x70bd2a, 0xffffffff, {0x7, r4}, [@MDBA_SET_ENTRY={0x20, 0x1, {r6, 0x1, 0x0, 0x0, {@ip4=@multicast1, 0x86dd}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x884}, 0x4cd0) 955.243406ms ago: executing program 2 (id=3068): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x268002, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000000)) r2 = dup(r1) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000180)={0x0, r2}) 865.016458ms ago: executing program 0 (id=3070): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) write(r0, &(0x7f0000000500)=' 294967295 2000000000 0\n', 0x18) 846.182859ms ago: executing program 2 (id=3071): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() syz_emit_ethernet(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) recvmsg$can_j1939(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000340)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, 0x80, &(0x7f0000000800)=[{&(0x7f00000003c0)=""/251, 0xfb}, {&(0x7f00000005c0)=""/120, 0x78}], 0x2, &(0x7f0000000880)=""/123, 0x7b}, 0x20000) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone3(&(0x7f0000000740)={0x8180080, 0x0, 0x0, 0x0, {0x39}, 0x0, 0x0, 0x0, 0x0}, 0x58) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a40)={0x2, 0x2, &(0x7f0000000080)=@raw=[@call={0x85, 0x0, 0x0, 0xae}, @exit], &(0x7f0000000840)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2a}, 0x90) 833.950179ms ago: executing program 3 (id=3072): setns(0xc9, 0x0) r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYBLOB="020a040007000000b6f1ffff0000854105"], 0x38}}, 0x0) sendmsg$RDMA_NLDEV_CMD_SET(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[], 0x18}}, 0x0) 778.067031ms ago: executing program 0 (id=3073): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x4c02}) readv(r1, &(0x7f0000000080)=[{&(0x7f0000000280)=""/160, 0xa0}], 0x1) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', @link_local}) socket$inet6_tcp(0xa, 0x1, 0x0) 316.225192ms ago: executing program 3 (id=3074): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newqdisc={0x24, 0x24, 0x400, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xfff3, 0x6}, {0x3}}}, 0x24}}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="5000000010000104000100"/20, @ANYBLOB="0000000008c403001c0012800b00010067726574617000000c0002800600020020"], 0x50}, 0x1, 0x0, 0x0, 0x484c}, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 315.909412ms ago: executing program 4 (id=3075): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x10040) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) syz_emit_ethernet(0x36, &(0x7f00000002c0)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1b}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x3d, 0x28, 0x69, 0x0, 0x2, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xc2}}}}}}, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) 270.987683ms ago: executing program 4 (id=3076): socket$netlink(0x10, 0x3, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r0) sendmsg$IEEE802154_LLSEC_ADD_DEV(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="4d7e00000000000000002a00000008002f000000000005003600000000000c0005000000000200000000050037000000000008000200"], 0x50}, 0x4, 0x700000000000000, 0x0, 0x4}, 0x4040084) 216.140085ms ago: executing program 4 (id=3077): r0 = fsopen(&(0x7f0000000100)='nfs4\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000240)='minorversion\x00', &(0x7f0000000280)='1\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, 0x0, &(0x7f00000002b0)='127.0.0.1:/\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) 201.281465ms ago: executing program 3 (id=3078): r0 = semget$private(0x0, 0x4000000009, 0x668) semop(r0, 0x0, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x18, 0x0, 0x0) semop(r0, &(0x7f0000000200), 0x53) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) clock_adjtime(0x0, &(0x7f0000000340)={0x37db, 0x82000000002f4246, 0xfffffffffffffffc, 0x6, 0x8, 0x5, 0x80, 0x4, 0x4, 0x80000, 0x2, 0x1, 0x100, 0x0, 0x9, 0x2000000000000, 0x9, 0x5, 0x800000009, 0x4000000000200, 0x2, 0x2, 0x0, 0x10000000000f48, 0x8, 0x25}) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a3200000000140000001100"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4040000) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_MSG_GETSETELEM(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000002180)=ANY=[@ANYBLOB], 0x1fe0}, 0x1, 0x0, 0x0, 0x4044800}, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r4, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) write$binfmt_script(r4, &(0x7f0000000200), 0xfffffd9d) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) 139.624906ms ago: executing program 4 (id=3079): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file2\x00', 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000480), 0x0, &(0x7f0000000040)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) setxattr$security_evm(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000380), &(0x7f00000004c0)=@v2={0x5, 0x2, 0x11, 0x1, 0x8, "f4aaa01ed88ee27a"}, 0x11, 0x3) 51.388169ms ago: executing program 4 (id=3080): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="08000000040000000400000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x14, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000025000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000340)="a1", 0x2, 0x0, 0x1}, 0x50) 0s ago: executing program 4 (id=3081): openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) keyctl$KEYCTL_PKEY_ENCRYPT(0x19, 0x0, 0x0, 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) syz_usb_connect(0x3, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x300, 0x25, 0x1d, 0x4d, 0x8, 0x4e8, 0x6601, 0x310a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x8, 0x3, 0x0, 0x5, "", [{{0x9, 0x4, 0x0, 0xd, 0x0, 0x86, 0xb3, 0x4c, 0xf8}}]}}]}}, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0}) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000000000000000000000cf70f5f1bf1e4312b85337e339f73730d02bd30902aee137a6c643ced74e45eca5cc0b591c615712f57fcda82dd4dd85a9268ecbb79a1995a20fa0b9e79c2b17a1072b272ff71b66e2643e5c9623c3c290c4"], 0x48) syz_emit_ethernet(0x8e, &(0x7f00000003c0)=ANY=[@ANYBLOB="ffffffffffffffffffffffff86dd6012000800583a00fe8000000000000000000000000000bb08e30f8ec5bfdb6e5a528cff02000000000000000000000000000101009078000000006086938800002b0020010000000000000000000000000001fe8000000000000000000000000000aa000404020000000020010000000000000000000000000000ff010000000000000000000000000001"], 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$TIPC_IMPORTANCE(r2, 0x10f, 0x7f, &(0x7f00000000c0)=0x7, 0x4) socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x16, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000180000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000085000000a0000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000200)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r4, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b80a000500000000", &(0x7f0000000300)=""/8, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) socket$inet_udp(0x2, 0x2, 0x0) kernel console output (not intermixed with test programs): [ 71.762714][ T5929] netlink: 8 bytes leftover after parsing attributes in process `syz.4.451'. [ 71.771527][ T5931] device syzkaller0 entered promiscuous mode [ 71.805037][ T5937] fuse: Bad value for 'fd' [ 71.956150][ T4342] EXT4-fs (loop2): unmounting filesystem. [ 72.048815][ T5957] netlink: 'syz.0.456': attribute type 4 has an invalid length. [ 72.340520][ T5996] fuse: Bad value for 'fd' [ 72.380363][ T5971] loop2: detected capacity change from 0 to 40427 [ 72.389038][ T5971] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 72.391569][ T5971] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 72.397058][ T5971] F2FS-fs (loop2): invalid crc_offset: 33558524 [ 72.419697][ T5971] F2FS-fs (loop2): Found nat_bits in checkpoint [ 72.432028][ T5971] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 72.433453][ T5971] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 72.625635][ T6034] fuse: Unknown parameter '0xffffffffffffffff' [ 72.923663][ T6060] device syzkaller0 entered promiscuous mode [ 73.034611][ T6063] fuse: Unknown parameter '0xffffffffffffffff' [ 73.274324][ T6075] netlink: 'syz.0.496': attribute type 4 has an invalid length. [ 73.583346][ T6089] ipvlan0: Caught tx_queue_len zero misconfig [ 73.731732][ T6093] netlink: 16 bytes leftover after parsing attributes in process `syz.2.503'. [ 74.041685][ T6126] device syzkaller0 entered promiscuous mode [ 74.068725][ T6130] netlink: 16 bytes leftover after parsing attributes in process `syz.4.518'. [ 74.339126][ T6151] netlink: 'syz.1.527': attribute type 4 has an invalid length. [ 74.430267][ T6163] loop0: detected capacity change from 0 to 1764 [ 74.796836][ T4323] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 75.401249][ T6222] netlink: 'syz.0.559': attribute type 4 has an invalid length. [ 75.952012][ T6237] netlink: 'syz.3.567': attribute type 3 has an invalid length. [ 76.045694][ T6248] tipc: Started in network mode [ 76.046947][ T6248] tipc: Node identity f26ce388d9bc, cluster identity 4711 [ 76.048316][ T6248] tipc: Enabled bearer , priority 0 [ 76.059959][ T6248] device syzkaller0 entered promiscuous mode [ 76.061805][ T6248] tipc: Resetting bearer [ 76.065662][ T6246] tipc: Resetting bearer [ 87.191980][ T6246] tipc: Disabling bearer [ 87.218992][ T113] tipc: Node number set to 735110024 [ 87.275348][ T6275] x_tables: ip6_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING [ 87.360878][ T6287] netlink: 16 bytes leftover after parsing attributes in process `syz.3.585'. [ 87.442173][ T6291] device batadv0 entered promiscuous mode [ 87.446526][ T6289] netlink: 'syz.0.583': attribute type 4 has an invalid length. [ 88.637837][ T6350] tipc: Enabling of bearer rejected, failed to enable media [ 89.439501][ T6402] fuse: Bad value for 'fd' [ 89.526171][ T6405] netlink: 16 bytes leftover after parsing attributes in process `syz.1.622'. [ 89.605782][ T6416] netlink: 24 bytes leftover after parsing attributes in process `syz.4.625'. [ 89.683435][ T6426] fuse: Bad value for 'fd' [ 89.741420][ T6438] netlink: 16 bytes leftover after parsing attributes in process `syz.1.633'. [ 89.843049][ T6454] tipc: Enabling of bearer rejected, failed to enable media [ 90.182901][ T6499] tipc: Enabling of bearer rejected, failed to enable media [ 90.195711][ T6505] tipc: Enabling of bearer rejected, failed to enable media [ 90.265052][ T6522] bridge0: port 3(dummy0) entered blocking state [ 90.266396][ T6522] bridge0: port 3(dummy0) entered disabled state [ 90.271038][ T6522] device dummy0 entered promiscuous mode [ 90.272598][ T6522] bridge0: port 3(dummy0) entered blocking state [ 90.273971][ T6522] bridge0: port 3(dummy0) entered forwarding state [ 90.280364][ T6522] device dummy0 left promiscuous mode [ 90.282209][ T6522] bridge0: port 3(dummy0) entered disabled state [ 90.323282][ T6532] netlink: 'syz.4.658': attribute type 13 has an invalid length. [ 90.332356][ T6532] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 90.340512][ T6532] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 90.342444][ T6532] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 90.430845][ T6532] netlink: 12 bytes leftover after parsing attributes in process `syz.4.658'. [ 90.468149][ T6547] device syzkaller0 entered promiscuous mode [ 90.471882][ T6547] tipc: Enabled bearer , priority 0 [ 90.478309][ T6547] tipc: Resetting bearer [ 90.480551][ T6546] tipc: Resetting bearer [ 90.510708][ T6553] netlink: 16 bytes leftover after parsing attributes in process `syz.0.664'. [ 90.597311][ T6546] tipc: Disabling bearer [ 90.687509][ T6568] tipc: Enabling of bearer rejected, failed to enable media [ 91.076584][ T6585] netlink: 8 bytes leftover after parsing attributes in process `syz.1.675'. [ 91.149868][ T6595] netlink: 16 bytes leftover after parsing attributes in process `syz.2.677'. [ 91.244953][ T6608] xfrm0: Caught tx_queue_len zero misconfig [ 91.338561][ T6616] tipc: Enabling of bearer rejected, failed to enable media [ 91.624267][ T6658] ip_tables: iptables: counters copy to user failed while replacing table [ 91.731480][ T6672] loop0: detected capacity change from 0 to 4096 [ 91.745209][ T6670] device syzkaller0 entered promiscuous mode [ 91.747502][ T6672] EXT4-fs: inline encryption not supported [ 91.749494][ T6670] tipc: Enabled bearer , priority 0 [ 91.755058][ T6672] EXT4-fs: Ignoring removed oldalloc option [ 91.761098][ T6669] tipc: Resetting bearer [ 91.783539][ T6672] EXT4-fs (loop0): Test dummy encryption mode enabled [ 91.857330][ T6672] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=2802c0a9, mo2=0002] [ 92.089595][ T6672] System zones: 0-5 [ 92.097692][ T6672] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 92.098273][ T6669] tipc: Disabling bearer [ 92.114571][ T6672] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-ce" [ 92.168667][ T6688] device syzkaller0 entered promiscuous mode [ 92.172250][ T6688] 0: reclassify loop, rule prio 0, protocol 800 [ 92.411548][ T6702] netlink: 'syz.2.711': attribute type 13 has an invalid length. [ 92.421031][ T6702] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 92.424234][ T6702] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 92.427695][ T6702] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 92.462304][ T6702] netlink: 12 bytes leftover after parsing attributes in process `syz.2.711'. [ 92.622939][ T4335] EXT4-fs (loop0): unmounting filesystem. [ 92.659193][ T6720] device syzkaller0 entered promiscuous mode [ 92.666518][ T6720] tipc: Enabled bearer , priority 0 [ 92.692788][ T6719] tipc: Resetting bearer [ 92.767730][ T6719] tipc: Disabling bearer [ 92.827241][ T6731] Config c/1 of g1 needs at least one function. [ 92.828567][ T6731] udc dummy_udc.0: failed to start g1: -22 [ 92.829561][ T6731] configfs-gadget.g1: probe of gadget.0 failed with error -22 [ 92.831057][ T6731] UDC core: g1: couldn't find an available UDC or it's busy [ 93.534426][ T6750] netlink: 'syz.1.725': attribute type 13 has an invalid length. [ 93.543212][ T6750] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 93.545582][ T6750] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 93.550199][ T6750] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 93.629991][ T6757] netlink: 12 bytes leftover after parsing attributes in process `syz.1.725'. [ 95.044386][ T6779] tipc: Enabling of bearer rejected, failed to enable media [ 95.152806][ T6793] netlink: 'syz.3.739': attribute type 13 has an invalid length. [ 95.155538][ T6793] netlink: 'syz.3.739': attribute type 27 has an invalid length. [ 95.178923][ T6793] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 95.190767][ T6793] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 95.194067][ T6793] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 95.823165][ T6810] loop2: detected capacity change from 0 to 4096 [ 95.836443][ T6810] EXT4-fs: inline encryption not supported [ 95.842721][ T6810] EXT4-fs: Ignoring removed oldalloc option [ 95.853764][ T6810] EXT4-fs (loop2): Test dummy encryption mode enabled [ 95.894635][ T6810] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=2802c0a9, mo2=0002] [ 95.900443][ T6810] System zones: 0-5 [ 95.937111][ T6810] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 97.120676][ T6825] loop0: detected capacity change from 0 to 1764 [ 97.158690][ T4342] EXT4-fs (loop2): unmounting filesystem. [ 97.200621][ T6278] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 97.262972][ T6833] device syzkaller0 entered promiscuous mode [ 97.342855][ T6838] lo speed is unknown, defaulting to 1000 [ 97.344670][ T6838] lo speed is unknown, defaulting to 1000 [ 97.345925][ T6838] lo speed is unknown, defaulting to 1000 [ 97.400976][ T6850] device syzkaller0 entered promiscuous mode [ 97.447331][ T4376] lo speed is unknown, defaulting to 1000 [ 97.453646][ T6838] infiniband syz0: set down [ 97.454568][ T6838] infiniband syz0: added lo [ 97.474859][ T6838] RDS/IB: syz0: added [ 97.478101][ T6838] smc: adding ib device syz0 with port count 1 [ 97.480142][ T6838] smc: ib device syz0 port 1 has pnetid [ 97.600920][ T113] lo speed is unknown, defaulting to 1000 [ 97.602789][ T6861] netlink: 12 bytes leftover after parsing attributes in process `syz.3.757'. [ 98.728668][ T6838] lo speed is unknown, defaulting to 1000 [ 98.733437][ T6856] device syzkaller0 entered promiscuous mode [ 98.845729][ T6867] loop0: detected capacity change from 0 to 1764 [ 98.868310][ T6838] lo speed is unknown, defaulting to 1000 [ 98.886123][ T6838] lo speed is unknown, defaulting to 1000 [ 98.904392][ T6278] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 98.974502][ T6878] netlink: 8 bytes leftover after parsing attributes in process `syz.3.764'. [ 98.983686][ T6838] lo speed is unknown, defaulting to 1000 [ 99.024478][ T6880] lo speed is unknown, defaulting to 1000 [ 99.048003][ T6838] lo speed is unknown, defaulting to 1000 [ 99.080757][ T6838] lo speed is unknown, defaulting to 1000 [ 99.135067][ T6838] lo speed is unknown, defaulting to 1000 [ 99.142399][ T6889] netlink: 'syz.2.767': attribute type 2 has an invalid length. [ 99.345281][ T6903] loop2: detected capacity change from 0 to 4096 [ 99.356406][ T6903] EXT4-fs: inline encryption not supported [ 99.365957][ T6903] EXT4-fs: Ignoring removed oldalloc option [ 99.378113][ T6903] EXT4-fs (loop2): Test dummy encryption mode enabled [ 99.390578][ T6903] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=2802c0a9, mo2=0002] [ 99.392022][ T6903] System zones: 0-5 [ 99.397792][ T6903] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 99.654695][ T6922] netlink: 12 bytes leftover after parsing attributes in process `syz.0.776'. [ 100.010098][ T6949] lo speed is unknown, defaulting to 1000 [ 100.187437][ T6964] device syzkaller0 entered promiscuous mode [ 100.386141][ T6986] ipvlan0: Caught tx_queue_len zero misconfig [ 100.984782][ T7017] netlink: 12 bytes leftover after parsing attributes in process `syz.4.812'. [ 101.302811][ T7055] netlink: 12 bytes leftover after parsing attributes in process `syz.0.825'. [ 101.542715][ T7071] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 101.725236][ T7086] lo speed is unknown, defaulting to 1000 [ 101.851376][ T7095] netlink: 8 bytes leftover after parsing attributes in process `syz.4.839'. [ 101.858746][ T7095] netlink: 24 bytes leftover after parsing attributes in process `syz.4.839'. [ 101.971245][ T7097] device syzkaller0 entered promiscuous mode [ 102.340725][ T4342] EXT4-fs (loop2): unmounting filesystem. [ 102.589572][ T7128] netlink: 44 bytes leftover after parsing attributes in process `syz.2.848'. [ 112.812429][ T7142] lo speed is unknown, defaulting to 1000 [ 113.035999][ T7178] netlink: 44 bytes leftover after parsing attributes in process `syz.1.859'. [ 114.175638][ T7210] netlink: 4 bytes leftover after parsing attributes in process `syz.3.865'. [ 114.203906][ T7208] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 114.275138][ T7218] netlink: 16 bytes leftover after parsing attributes in process `syz.1.870'. [ 114.394545][ T7229] loop2: detected capacity change from 0 to 4096 [ 114.411335][ T7229] EXT4-fs: inline encryption not supported [ 114.412454][ T7229] EXT4-fs: Ignoring removed oldalloc option [ 114.419887][ T7229] EXT4-fs (loop2): Test dummy encryption mode enabled [ 114.433108][ T7229] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=2802c0a9, mo2=0002] [ 114.434614][ T7229] System zones: 0-5 [ 114.463120][ T7229] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 114.783021][ T7261] netlink: 16 bytes leftover after parsing attributes in process `syz.3.882'. [ 114.818215][ T7208] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 115.125819][ T7276] netlink: 20 bytes leftover after parsing attributes in process `syz.3.888'. [ 115.300852][ T7285] netlink: 28 bytes leftover after parsing attributes in process `syz.0.892'. [ 115.302566][ T7285] netlink: 'syz.0.892': attribute type 5 has an invalid length. [ 115.329311][ T7285] netlink: 28 bytes leftover after parsing attributes in process `syz.0.892'. [ 115.330927][ T7285] netlink: 'syz.0.892': attribute type 5 has an invalid length. [ 115.490509][ T7295] netlink: 16 bytes leftover after parsing attributes in process `syz.3.896'. [ 115.621081][ T4342] EXT4-fs (loop2): unmounting filesystem. [ 115.714796][ T7309] netlink: 20 bytes leftover after parsing attributes in process `syz.3.904'. [ 116.352871][ T7326] loop0: detected capacity change from 0 to 4096 [ 116.365312][ T7326] EXT4-fs: inline encryption not supported [ 116.371808][ T7326] EXT4-fs: Ignoring removed oldalloc option [ 116.375361][ T7326] EXT4-fs (loop0): Test dummy encryption mode enabled [ 116.386888][ T7326] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=2802c0a9, mo2=0002] [ 116.388632][ T7326] System zones: 0-5 [ 116.390568][ T7326] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 117.582133][ T7360] loop2: detected capacity change from 0 to 1764 [ 117.625977][ T4335] EXT4-fs (loop0): unmounting filesystem. [ 117.643434][ T7363] netlink: 20 bytes leftover after parsing attributes in process `syz.4.919'. [ 117.656867][ T7165] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 117.738596][ T7377] device syzkaller0 entered promiscuous mode [ 117.979402][ T7391] loop2: detected capacity change from 0 to 4096 [ 117.995451][ T7391] EXT4-fs: inline encryption not supported [ 118.015173][ T7391] EXT4-fs: Ignoring removed oldalloc option [ 118.030823][ T7391] EXT4-fs (loop2): Test dummy encryption mode enabled [ 118.038273][ T7402] __nla_validate_parse: 2 callbacks suppressed [ 118.038284][ T7402] netlink: 16 bytes leftover after parsing attributes in process `syz.1.935'. [ 118.097596][ T7391] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=2802c0a9, mo2=0002] [ 118.099100][ T7391] System zones: 0-5 [ 118.116140][ T7391] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 118.157395][ T7413] netlink: 8 bytes leftover after parsing attributes in process `syz.0.937'. [ 119.246559][ T4342] EXT4-fs (loop2): unmounting filesystem. [ 119.380578][ T7465] netlink: 8 bytes leftover after parsing attributes in process `syz.1.953'. [ 120.092609][ T7482] bridge0: port 3(dummy0) entered blocking state [ 120.093968][ T7482] bridge0: port 3(dummy0) entered disabled state [ 120.095597][ T7482] device dummy0 entered promiscuous mode [ 120.098141][ T7482] bridge0: port 3(dummy0) entered blocking state [ 120.099378][ T7482] bridge0: port 3(dummy0) entered forwarding state [ 120.225730][ T7493] netlink: 8 bytes leftover after parsing attributes in process `syz.4.965'. [ 121.161379][ T7523] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 121.333930][ T7533] netlink: 28 bytes leftover after parsing attributes in process `syz.1.982'. [ 121.340635][ T7533] netlink: 36 bytes leftover after parsing attributes in process `syz.1.982'. [ 121.373530][ T7533] netlink: 28 bytes leftover after parsing attributes in process `syz.1.982'. [ 121.382160][ T7533] netlink: 36 bytes leftover after parsing attributes in process `syz.1.982'. [ 121.705703][ T7572] netlink: 28 bytes leftover after parsing attributes in process `syz.4.998'. [ 121.709799][ T7572] netlink: 36 bytes leftover after parsing attributes in process `syz.4.998'. [ 122.670161][ T7608] netlink: 'syz.2.1005': attribute type 4 has an invalid length. [ 122.888125][ T7611] device syzkaller0 entered promiscuous mode [ 123.954091][ T7669] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 124.012077][ T7657] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 124.634927][ T7701] __nla_validate_parse: 2 callbacks suppressed [ 124.634938][ T7701] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1036'. [ 125.107516][ T3902] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 125.303517][ T3902] usb 1-1: not running at top speed; connect to a high speed hub [ 125.374651][ T7717] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1041'. [ 125.555914][ T3902] usb 1-1: New USB device found, idVendor=1235, idProduct=8210, bcdDevice= 0.40 [ 125.558002][ T3902] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 125.560066][ T3902] usb 1-1: Product: syz [ 125.560994][ T3902] usb 1-1: Manufacturer: syz [ 125.561866][ T3902] usb 1-1: SerialNumber: syz [ 125.709522][ T7739] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1049'. [ 126.311921][ T2065] ieee802154 phy0 wpan0: encryption failed: -22 [ 126.313432][ T2065] ieee802154 phy1 wpan1: encryption failed: -22 [ 126.542247][ T7777] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1066'. [ 126.840597][ T7794] netlink: 'syz.2.1070': attribute type 4 has an invalid length. [ 127.147886][ T3902] usb 1-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 127.150029][ T3902] usb 1-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 127.152005][ T3902] usb 1-1: Focusrite Scarlett Gen 3 Mixer Driver enabled (pid=0x8210); report any issues to g@b4.vu [ 127.154085][ T3902] usb 1-1: Error initialising Scarlett Gen 3 Mixer Driver: -22 [ 127.217488][ T3902] snd-usb-audio: probe of 1-1:1.0 failed with error -22 [ 127.234569][ T7802] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1076'. [ 127.240691][ T3902] usb 1-1: USB disconnect, device number 2 [ 127.546038][ T7165] udevd[7165]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 128.609644][ T7868] netlink: 'syz.2.1090': attribute type 4 has an invalid length. [ 129.917215][ T7902] netlink: 112 bytes leftover after parsing attributes in process `syz.3.1105'. [ 129.919711][ T7902] netlink: 112 bytes leftover after parsing attributes in process `syz.3.1105'. [ 130.478521][ T7908] netlink: 'syz.3.1107': attribute type 4 has an invalid length. [ 130.622112][ T7921] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1113'. [ 130.829655][ T7930] netlink: 112 bytes leftover after parsing attributes in process `syz.0.1117'. [ 130.832694][ T7930] netlink: 112 bytes leftover after parsing attributes in process `syz.0.1117'. [ 131.391610][ T7950] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 131.939987][ T7965] netlink: 'syz.1.1129': attribute type 4 has an invalid length. [ 132.194293][ T7983] device syzkaller0 entered promiscuous mode [ 132.444753][ T7999] netlink: 112 bytes leftover after parsing attributes in process `syz.4.1142'. [ 132.452246][ T7998] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 132.526895][ T7999] netlink: 112 bytes leftover after parsing attributes in process `syz.4.1142'. [ 132.608340][ T8012] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1148'. [ 132.700861][ T8020] device syzkaller0 entered promiscuous mode [ 132.764183][ T8024] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1161'. [ 132.766282][ T8024] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1161'. [ 132.773748][ T8024] device geneve2 entered promiscuous mode [ 132.929735][ T8044] capability: warning: `syz.0.1158' uses deprecated v2 capabilities in a way that may be insecure [ 133.889330][ T8114] loop0: detected capacity change from 0 to 512 [ 133.897409][ T8114] ======================================================= [ 133.897409][ T8114] WARNING: The mand mount option has been deprecated and [ 133.897409][ T8114] and is ignored by this kernel. Remove the mand [ 133.897409][ T8114] option from the mount to silence this warning. [ 133.897409][ T8114] ======================================================= [ 133.929490][ T8114] FAT-fs (loop0): Invalid FSINFO signature: 0x41613352, 0x61417272 (sector = 1) [ 133.994605][ T4914] FAT-fs (loop0): Invalid FSINFO signature: 0x41613352, 0x61417272 (sector = 1) [ 134.057987][ T8127] device syzkaller0 entered promiscuous mode [ 136.469185][ T8212] __nla_validate_parse: 4 callbacks suppressed [ 136.469197][ T8212] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1207'. [ 136.572098][ T8222] netlink: 288 bytes leftover after parsing attributes in process `syz.0.1211'. [ 136.673489][ T8229] device ip6gre1 entered promiscuous mode [ 136.726236][ T8229] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 138.389260][ T8264] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1221'. [ 138.537848][ T8278] netlink: 288 bytes leftover after parsing attributes in process `syz.3.1227'. [ 139.612746][ T8298] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1235'. [ 139.742104][ T8305] loop0: detected capacity change from 0 to 764 [ 139.777495][ T7165] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 140.365605][ T8328] netlink: 'syz.4.1246': attribute type 4 has an invalid length. [ 140.386087][ T8328] netlink: 'syz.4.1246': attribute type 2 has an invalid length. [ 140.392807][ T8328] netlink: 'syz.4.1246': attribute type 4 has an invalid length. [ 140.420847][ T8335] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1249'. [ 140.481135][ T8338] netlink: 288 bytes leftover after parsing attributes in process `syz.0.1250'. [ 140.519118][ T8341] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 141.847396][ T8365] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1262'. [ 141.871397][ T8367] device bridge_slave_1 left promiscuous mode [ 141.873596][ T8367] bridge0: port 2(bridge_slave_1) entered disabled state [ 141.918455][ T8367] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 141.922226][ T8369] netlink: 288 bytes leftover after parsing attributes in process `syz.0.1264'. [ 142.809957][ T8408] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1276'. [ 142.840784][ T8413] netlink: 288 bytes leftover after parsing attributes in process `syz.3.1278'. [ 142.932314][ T8423] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1285'. [ 143.524778][ T8446] netlink: 288 bytes leftover after parsing attributes in process `syz.3.1295'. [ 143.867931][ T8460] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 144.451094][ T8474] loop2: detected capacity change from 0 to 1764 [ 144.500307][ T7165] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 146.184959][ T8512] IPv6: sit1: Disabled Multicast RS [ 147.902007][ T8555] loop2: detected capacity change from 0 to 1764 [ 148.001561][ T8565] device syzkaller0 entered promiscuous mode [ 149.977659][ T8610] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1352'. [ 149.980016][ T8610] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1352'. [ 150.354626][ T8624] loop0: detected capacity change from 0 to 1764 [ 151.336192][ T8641] device syzkaller0 entered promiscuous mode [ 151.494730][ T8653] loop0: detected capacity change from 0 to 1764 [ 151.561250][ T7165] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 152.111682][ T8674] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1375'. [ 152.113896][ T8674] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1375'. [ 152.312212][ T8682] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 152.315472][ T8682] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 153.071992][ T8708] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1387'. [ 153.152917][ T8713] capability: warning: `syz.4.1389' uses 32-bit capabilities (legacy support in use) [ 153.513744][ T8725] bridge0: port 3(dummy0) entered disabled state [ 153.515028][ T8725] bridge0: port 2(bridge_slave_1) entered disabled state [ 153.516268][ T8725] bridge0: port 1(bridge_slave_0) entered disabled state [ 153.617268][ T4333] Bluetooth: hci0: command 0x0406 tx timeout [ 153.617415][ T4339] Bluetooth: hci1: command 0x0406 tx timeout [ 153.618655][ T4340] Bluetooth: hci2: command 0x0406 tx timeout [ 153.619842][ T4339] Bluetooth: hci3: command 0x0406 tx timeout [ 153.620894][ T4333] Bluetooth: hci4: command 0x0406 tx timeout [ 153.997749][ T8725] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 154.034836][ T8725] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 154.089568][ T8743] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1398'. [ 154.384442][ T8725] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 154.386372][ T8725] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 154.388415][ T8725] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 154.390131][ T8725] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 154.654561][ T8728] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1394'. [ 154.658268][ T8728] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 154.662076][ T8728] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 154.664986][ T8728] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 154.667010][ T8728] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 154.668727][ T8728] device geneve2 entered promiscuous mode [ 155.023678][ T8790] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1415'. [ 155.175291][ T8795] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 155.238432][ T8800] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1419'. [ 155.738406][ T8807] netlink: 'syz.1.1421': attribute type 4 has an invalid length. [ 156.044380][ T8818] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1427'. [ 156.303712][ T8829] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 156.306514][ T8829] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 156.498231][ T8832] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1432'. [ 156.506234][ T8833] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 157.888274][ T8873] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 158.232389][ T8878] netlink: 'syz.3.1451': attribute type 4 has an invalid length. [ 158.663329][ T8897] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1458'. [ 158.665209][ T8897] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1458'. [ 158.702557][ T8900] device syzkaller0 entered promiscuous mode [ 159.738373][ T8924] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 160.232969][ T8944] device syzkaller0 entered promiscuous mode [ 160.859522][ T8952] netlink: 'syz.4.1472': attribute type 4 has an invalid length. [ 161.106719][ C1] hrtimer: interrupt took 54726 ns [ 162.196465][ T8999] device syzkaller0 entered promiscuous mode [ 163.474301][ T9012] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1496'. [ 163.667753][ T27] audit: type=1326 audit(163.650:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9019 comm="syz.3.1500" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff7ff77fe8 code=0x7ffc0000 [ 163.673090][ T27] audit: type=1326 audit(163.640:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9019 comm="syz.3.1500" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff7ff77fe8 code=0x7ffc0000 [ 163.679524][ T27] audit: type=1326 audit(163.650:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9019 comm="syz.3.1500" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff7ff77fe8 code=0x7ffc0000 [ 163.690541][ T27] audit: type=1326 audit(163.650:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9019 comm="syz.3.1500" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff7ff77fe8 code=0x7ffc0000 [ 163.693973][ T9029] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1503'. [ 163.695345][ T27] audit: type=1326 audit(163.650:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9019 comm="syz.3.1500" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff7ff77fe8 code=0x7ffc0000 [ 163.709899][ T27] audit: type=1326 audit(163.660:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9019 comm="syz.3.1500" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=426 compat=0 ip=0xffff7ff77fe8 code=0x7ffc0000 [ 163.714514][ T27] audit: type=1326 audit(163.660:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9019 comm="syz.3.1500" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff7ff77fe8 code=0x7ffc0000 [ 163.720604][ T27] audit: type=1326 audit(163.660:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9019 comm="syz.3.1500" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff7ff77fe8 code=0x7ffc0000 [ 163.724866][ T27] audit: type=1326 audit(163.660:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9019 comm="syz.3.1500" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=436 compat=0 ip=0xffff7ff77fe8 code=0x7ffc0000 [ 163.738635][ T27] audit: type=1326 audit(163.720:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9019 comm="syz.3.1500" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=115 compat=0 ip=0xffff7ff5aeac code=0x7ffc0000 [ 164.125318][ T9049] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 164.128999][ T9049] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 165.279673][ T9071] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1514'. [ 165.388908][ T9078] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1515'. [ 165.894517][ T9092] netlink: 'syz.3.1520': attribute type 4 has an invalid length. [ 165.908947][ T9092] netlink: 'syz.3.1520': attribute type 4 has an invalid length. [ 167.176395][ T9143] loop2: detected capacity change from 0 to 1764 [ 167.360294][ T7165] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 167.872770][ T9167] device syzkaller0 entered promiscuous mode [ 167.956759][ T4381] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 168.138113][ T4381] usb 1-1: not running at top speed; connect to a high speed hub [ 168.142408][ T4381] usb 1-1: New USB device found, idVendor=1235, idProduct=8210, bcdDevice= 0.40 [ 168.144172][ T4381] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 168.145850][ T4381] usb 1-1: Product: syz [ 168.147387][ T4381] usb 1-1: Manufacturer: syz [ 168.148340][ T4381] usb 1-1: SerialNumber: syz [ 168.196182][ T3902] kernel write not supported for file /vcs (pid: 3902 comm: kworker/1:3) [ 168.626033][ T9218] device syzkaller0 entered promiscuous mode [ 170.223610][ T9324] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1586'. [ 170.456580][ T4381] usb 1-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 170.461691][ T4381] usb 1-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 170.466602][ T4381] usb 1-1: Focusrite Scarlett Gen 3 Mixer Driver enabled (pid=0x8210); report any issues to g@b4.vu [ 170.473201][ T4381] usb 1-1: Error initialising Scarlett Gen 3 Mixer Driver: -22 [ 170.501286][ T4381] snd-usb-audio: probe of 1-1:1.0 failed with error -22 [ 170.531954][ T4381] usb 1-1: USB disconnect, device number 3 [ 170.548145][ T7165] udevd[7165]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 170.866500][ T9369] device syzkaller0 entered promiscuous mode [ 170.871907][ T9371] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1599'. [ 171.496758][ T4376] usb 1-1: new full-speed USB device number 4 using dummy_hcd [ 171.679922][ T4376] usb 1-1: not running at top speed; connect to a high speed hub [ 171.799937][ T4376] usb 1-1: New USB device found, idVendor=1235, idProduct=8210, bcdDevice= 0.40 [ 171.801774][ T4376] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 171.803228][ T4376] usb 1-1: Product: syz [ 171.804045][ T4376] usb 1-1: Manufacturer: syz [ 171.804903][ T4376] usb 1-1: SerialNumber: syz [ 171.873965][ T9411] IPv6: sit1: Disabled Multicast RS [ 171.876399][ T9412] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1612'. [ 172.189032][ T9439] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1621'. [ 172.363052][ T9457] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1626'. [ 172.445978][ T9460] netlink: 'syz.3.1628': attribute type 4 has an invalid length. [ 173.426286][ T9518] netlink: 'syz.4.1641': attribute type 4 has an invalid length. [ 173.592249][ T9527] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1644'. [ 173.626589][ T9531] device syzkaller0 entered promiscuous mode [ 173.895433][ T4376] usb 1-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 173.897477][ T4376] usb 1-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 173.898952][ T4376] usb 1-1: Focusrite Scarlett Gen 3 Mixer Driver enabled (pid=0x8210); report any issues to g@b4.vu [ 173.901024][ T4376] usb 1-1: Error initialising Scarlett Gen 3 Mixer Driver: -22 [ 173.998801][ T9551] netlink: 'syz.0.1654': attribute type 4 has an invalid length. [ 174.028953][ T4376] snd-usb-audio: probe of 1-1:1.0 failed with error -22 [ 174.050462][ T4376] usb 1-1: USB disconnect, device number 4 [ 174.134922][ T9563] loop0: detected capacity change from 0 to 1764 [ 174.171289][ T7370] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 174.270585][ T7165] udevd[7165]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 174.309002][ T9582] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1663'. [ 174.588443][ T9606] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1668'. [ 174.591399][ T9606] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1668'. [ 174.932668][ T9613] netlink: 'syz.2.1667': attribute type 4 has an invalid length. [ 175.376136][ T9640] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1680'. [ 175.382278][ T9640] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1680'. [ 176.143932][ T9656] IPv6: sit1: Disabled Multicast RS [ 176.715534][ T9694] netlink: 'syz.1.1691': attribute type 4 has an invalid length. [ 177.455985][ T9699] sch_tbf: peakrate 11 is lower than or equals to rate 2048 ! [ 177.458089][ T9697] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1695'. [ 177.469925][ T9697] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1695'. [ 177.541952][ T9701] loop0: detected capacity change from 0 to 4096 [ 177.548178][ T9701] EXT4-fs: inline encryption not supported [ 177.549730][ T9701] EXT4-fs: Ignoring removed oldalloc option [ 177.552774][ T9701] EXT4-fs (loop0): Test dummy encryption mode enabled [ 177.555926][ T9701] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=2802c0a9, mo2=0002] [ 177.558868][ T9701] System zones: 0-5 [ 177.561461][ T9701] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 177.599754][ T9706] IPv6: sit1: Disabled Multicast RS [ 178.514537][ T9733] device syzkaller0 entered promiscuous mode [ 178.644661][ T4335] EXT4-fs (loop0): unmounting filesystem. [ 178.818869][ T9757] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1707'. [ 178.821643][ T9757] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1707'. [ 178.913359][ T9762] loop0: detected capacity change from 0 to 1764 [ 178.917757][ T9765] netlink: 'syz.1.1706': attribute type 4 has an invalid length. [ 178.996810][ T9566] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 180.987613][ T9843] rdma_rxe: rxe_register_device failed with error -23 [ 180.991421][ T9843] rdma_rxe: failed to add lo [ 180.994458][ T9834] loop2: detected capacity change from 0 to 1764 [ 181.155842][ T9853] smc: removing ib device syz0 [ 181.200359][ T9855] netlink: 'syz.2.1729': attribute type 4 has an invalid length. [ 183.172127][ T9912] netlink: 'syz.1.1740': attribute type 4 has an invalid length. [ 183.181240][ T9912] netlink: 'syz.1.1740': attribute type 4 has an invalid length. [ 183.402813][ T9920] netlink: 'syz.1.1742': attribute type 4 has an invalid length. [ 184.270026][ T9959] netlink: 'syz.2.1756': attribute type 4 has an invalid length. [ 185.218859][ T9988] IPVS: set_ctl: invalid protocol: 47 100.1.1.0:20003 [ 185.231438][ T9988] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 185.304026][ T9988] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 185.367585][ T9988] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 185.738497][T10013] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1772'. [ 186.404329][T10036] loop2: detected capacity change from 0 to 512 [ 186.413548][T10036] EXT4-fs: Ignoring removed nomblk_io_submit option [ 186.415376][T10036] EXT4-fs: Ignoring removed mblk_io_submit option [ 186.470614][T10036] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2 [ 186.472261][T10036] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -2 [ 186.478420][T10036] EXT4-fs (loop2): 1 truncate cleaned up [ 186.479909][T10036] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 186.875443][T10044] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1783'. [ 186.907796][ T4342] EXT4-fs (loop2): unmounting filesystem. [ 186.931227][T10046] device syzkaller0 entered promiscuous mode [ 187.033160][T10056] netlink: 'syz.2.1788': attribute type 4 has an invalid length. [ 187.035048][T10056] netlink: 'syz.2.1788': attribute type 2 has an invalid length. [ 187.037044][T10056] netlink: 'syz.2.1788': attribute type 4 has an invalid length. [ 187.293888][T10073] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1796'. [ 187.377478][ T2065] ieee802154 phy0 wpan0: encryption failed: -22 [ 187.378918][ T2065] ieee802154 phy1 wpan1: encryption failed: -22 [ 187.736571][T10084] netlink: 'syz.1.1800': attribute type 4 has an invalid length. [ 187.742104][T10084] netlink: 'syz.1.1800': attribute type 2 has an invalid length. [ 187.748198][T10084] netlink: 'syz.1.1800': attribute type 4 has an invalid length. [ 188.015723][T10103] device syzkaller0 entered promiscuous mode [ 188.649895][T10122] netlink: 'syz.1.1814': attribute type 4 has an invalid length. [ 188.651732][T10122] netlink: 'syz.1.1814': attribute type 2 has an invalid length. [ 188.655001][T10122] netlink: 'syz.1.1814': attribute type 4 has an invalid length. [ 188.718023][T10126] device syzkaller0 entered promiscuous mode [ 190.214626][T10169] netlink: 72 bytes leftover after parsing attributes in process `syz.3.1831'. [ 190.217080][T10169] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1831'. [ 190.640914][T10175] device syzkaller0 entered promiscuous mode [ 190.831560][T10180] device syzkaller0 entered promiscuous mode [ 191.622097][T10205] loop0: detected capacity change from 0 to 1764 [ 191.660172][ T9566] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 192.376530][T10241] loop0: detected capacity change from 0 to 1764 [ 192.411090][ T9566] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 192.979402][T10258] device syzkaller0 entered promiscuous mode [ 193.032118][T10264] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1865'. [ 193.040631][T10264] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1865'. [ 194.801435][T10309] device syzkaller0 entered promiscuous mode [ 195.042547][T10315] Illegal XDP return value 4294967294 on prog (id 105) dev syz_tun, expect packet loss! [ 195.681593][T10340] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1889'. [ 195.687988][T10340] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1889'. [ 197.200790][T10392] loop2: detected capacity change from 0 to 512 [ 197.205984][T10392] EXT4-fs: Ignoring removed nobh option [ 197.211244][T10392] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 197.213586][T10392] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 197.235116][T10392] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2802: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 197.238630][ T113] usb 1-1: new full-speed USB device number 5 using dummy_hcd [ 197.249113][T10392] EXT4-fs (loop2): 1 truncate cleaned up [ 197.252437][T10392] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 197.273538][ T4342] EXT4-fs (loop2): unmounting filesystem. [ 197.427616][ T113] usb 1-1: not running at top speed; connect to a high speed hub [ 197.431731][ T113] usb 1-1: New USB device found, idVendor=1235, idProduct=8210, bcdDevice= 0.40 [ 197.433391][ T113] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 197.434874][ T113] usb 1-1: Product: syz [ 197.435589][ T113] usb 1-1: Manufacturer: syz [ 197.436597][ T113] usb 1-1: SerialNumber: syz [ 197.620801][T10416] loop2: detected capacity change from 0 to 1764 [ 197.745028][ T9566] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 198.707013][T10482] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1936'. [ 198.711119][T10482] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1936'. [ 199.144737][T10509] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1945'. [ 199.341376][T10519] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1948'. [ 199.343898][T10519] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1948'. [ 199.397781][ T113] usb 1-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 199.401165][ T113] usb 1-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 199.403694][ T113] usb 1-1: Focusrite Scarlett Gen 3 Mixer Driver enabled (pid=0x8210); report any issues to g@b4.vu [ 199.406422][ T113] usb 1-1: Error initialising Scarlett Gen 3 Mixer Driver: -22 [ 199.440314][ T113] snd-usb-audio: probe of 1-1:1.0 failed with error -22 [ 199.450740][ T113] usb 1-1: USB disconnect, device number 5 [ 199.465017][T10524] device syzkaller0 entered promiscuous mode [ 199.469262][ T9566] udevd[9566]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 199.797887][T10545] device syzkaller0 entered promiscuous mode [ 199.904483][T10550] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1960'. [ 199.907220][T10550] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1960'. [ 200.019441][T10555] device syzkaller0 entered promiscuous mode [ 200.639079][T10579] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1972'. [ 200.641946][T10579] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1972'. [ 201.551927][T10609] loop0: detected capacity change from 0 to 128 [ 201.578839][ T27] kauditd_printk_skb: 5 callbacks suppressed [ 201.578849][ T27] audit: type=1326 audit(201.560:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10610 comm="syz.1.1984" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb9377fe8 code=0x7ffc0000 [ 201.584513][ T27] audit: type=1326 audit(201.560:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10610 comm="syz.1.1984" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=56 compat=0 ip=0xffffb935aeac code=0x7ffc0000 [ 201.595253][T10609] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 201.625978][ T27] audit: type=1326 audit(201.560:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10610 comm="syz.1.1984" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=56 compat=0 ip=0xffffb935aeac code=0x7ffc0000 [ 201.660499][ T27] audit: type=1326 audit(201.560:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10610 comm="syz.1.1984" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb9377fe8 code=0x7ffc0000 [ 201.690247][ T27] audit: type=1326 audit(201.560:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10610 comm="syz.1.1984" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb9377fe8 code=0x7ffc0000 [ 201.700446][ T4335] EXT4-fs (loop0): unmounting filesystem. [ 201.723243][T10615] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1985'. [ 201.726815][ T27] audit: type=1326 audit(201.560:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10610 comm="syz.1.1984" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=67 compat=0 ip=0xffffb9377fe8 code=0x7ffc0000 [ 201.755944][ T27] audit: type=1326 audit(201.560:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10610 comm="syz.1.1984" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb9377fe8 code=0x7ffc0000 [ 201.790937][ T27] audit: type=1326 audit(201.560:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10610 comm="syz.1.1984" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb9377fe8 code=0x7ffc0000 [ 201.810706][T10618] loop0: detected capacity change from 0 to 512 [ 201.832849][T10618] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a803c02c, mo2=0002] [ 201.835666][T10618] System zones: 1-12 [ 201.855936][T10618] EXT4-fs error (device loop0): ext4_xattr_inode_iget:406: comm syz.0.1986: error while reading EA inode 32 err=-116 [ 201.872087][T10618] EXT4-fs (loop0): Remounting filesystem read-only [ 201.888701][T10618] EXT4-fs error (device loop0): ext4_xattr_inode_iget:406: comm syz.0.1986: error while reading EA inode 32 err=-116 [ 201.905793][T10618] EXT4-fs (loop0): Remounting filesystem read-only [ 201.909760][T10618] EXT4-fs (loop0): 1 orphan inode deleted [ 201.913842][T10618] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 201.930519][T10618] EXT4-fs (loop0): shut down requested (0) [ 202.303333][ T4335] EXT4-fs (loop0): unmounting filesystem. [ 202.874551][T10662] 9pnet_fd: Insufficient options for proto=fd [ 203.290784][T10697] loop2: detected capacity change from 0 to 512 [ 203.292629][T10697] EXT4-fs: Ignoring removed orlov option [ 203.323591][T10697] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 203.359411][T10703] 9pnet_fd: Insufficient options for proto=fd [ 203.401240][T10706] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 203.488306][T10706] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 1325 with error 28 [ 203.492300][T10706] EXT4-fs (loop2): This should not happen!! Data will be lost [ 203.492300][T10706] [ 203.494139][T10706] EXT4-fs (loop2): Total free blocks count 0 [ 203.495102][T10706] EXT4-fs (loop2): Free/Dirty block details [ 203.496543][T10706] EXT4-fs (loop2): free_blocks=65280 [ 203.497817][T10706] EXT4-fs (loop2): dirty_blocks=1445 [ 203.498890][T10706] EXT4-fs (loop2): Block reservation details [ 203.499876][T10706] EXT4-fs (loop2): i_reserved_data_blocks=1445 [ 203.949456][T10697] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 1326 with max blocks 2048 with error 28 [ 203.956845][ T4376] usb 1-1: new full-speed USB device number 6 using dummy_hcd [ 204.138586][ T4376] usb 1-1: not running at top speed; connect to a high speed hub [ 204.167373][ T4376] usb 1-1: New USB device found, idVendor=1235, idProduct=8210, bcdDevice= 0.40 [ 204.169273][ T4376] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 204.170900][ T4376] usb 1-1: Product: syz [ 204.171725][ T4376] usb 1-1: Manufacturer: syz [ 204.172711][ T4376] usb 1-1: SerialNumber: syz [ 204.270619][T10729] device syzkaller0 entered promiscuous mode [ 204.299933][T10731] __nla_validate_parse: 5 callbacks suppressed [ 204.299943][T10731] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2022'. [ 204.460648][T10738] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2024'. [ 204.462969][T10738] bridge: RTM_NEWNEIGH with invalid ether address [ 204.663635][T10751] loop2: detected capacity change from 0 to 1764 [ 204.771425][ T7165] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 204.926980][T10756] netlink: 'syz.1.2030': attribute type 4 has an invalid length. [ 205.768166][T10794] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2044'. [ 206.433063][T10825] netlink: 'syz.4.2051': attribute type 4 has an invalid length. [ 206.754638][ T4376] usb 1-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 206.756565][ T4376] usb 1-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 206.758111][ T4376] usb 1-1: Focusrite Scarlett Gen 3 Mixer Driver enabled (pid=0x8210); report any issues to g@b4.vu [ 206.760213][ T4376] usb 1-1: Error initialising Scarlett Gen 3 Mixer Driver: -22 [ 206.772539][ T4376] snd-usb-audio: probe of 1-1:1.0 failed with error -22 [ 206.780326][ T4376] usb 1-1: USB disconnect, device number 6 [ 206.888124][T10828] loop0: detected capacity change from 0 to 1764 [ 206.938701][T10836] loop0: detected capacity change from 0 to 512 [ 206.941523][T10836] EXT4-fs: Ignoring removed orlov option [ 206.993110][T10836] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 207.127017][ T9566] udevd[9566]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 207.155862][T10848] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 207.163894][T10848] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 1733 with error 28 [ 207.166041][T10848] EXT4-fs (loop0): This should not happen!! Data will be lost [ 207.166041][T10848] [ 207.176636][T10848] EXT4-fs (loop0): Total free blocks count 0 [ 207.180250][T10848] EXT4-fs (loop0): Free/Dirty block details [ 207.181412][T10848] EXT4-fs (loop0): free_blocks=65280 [ 207.187486][T10848] EXT4-fs (loop0): dirty_blocks=1809 [ 207.188415][T10848] EXT4-fs (loop0): Block reservation details [ 207.189621][T10848] EXT4-fs (loop0): i_reserved_data_blocks=1809 [ 207.272820][T10864] lo speed is unknown, defaulting to 1000 [ 207.276082][T10864] lo speed is unknown, defaulting to 1000 [ 207.284145][T10864] lo speed is unknown, defaulting to 1000 [ 207.336369][T10864] infiniband syz1: set down [ 207.337494][ T113] lo speed is unknown, defaulting to 1000 [ 207.349445][T10864] infiniband syz1: added lo [ 207.364990][T10864] RDS/IB: syz1: added [ 207.365874][T10864] smc: adding ib device syz1 with port count 1 [ 207.367536][T10864] smc: ib device syz1 port 1 has pnetid [ 207.368890][ T113] lo speed is unknown, defaulting to 1000 [ 207.370334][T10864] lo speed is unknown, defaulting to 1000 [ 207.385742][T10873] infiniband syz1: set active [ 207.388557][ T8528] lo speed is unknown, defaulting to 1000 [ 207.389760][ T8528] lo speed is unknown, defaulting to 1000 [ 207.402375][T10864] lo speed is unknown, defaulting to 1000 [ 207.424869][T10864] lo speed is unknown, defaulting to 1000 [ 207.447950][T10864] lo speed is unknown, defaulting to 1000 [ 207.469604][T10864] lo speed is unknown, defaulting to 1000 [ 207.593090][T10836] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 1734 with max blocks 2048 with error 28 [ 208.062903][T10889] netlink: 'syz.3.2071': attribute type 4 has an invalid length. [ 208.426476][T10903] loop2: detected capacity change from 0 to 1764 [ 208.470025][ T9566] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 208.603598][T10922] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2082'. [ 208.606600][T10922] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2082'. [ 208.707627][T10930] rdma_rxe: rxe_register_device failed with error -23 [ 208.709608][T10930] rdma_rxe: failed to add lo [ 209.021883][T10954] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2094'. [ 209.024372][T10954] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2094'. [ 209.288758][T10969] netlink: 'syz.3.2096': attribute type 4 has an invalid length. [ 209.932835][T11007] rdma_rxe: rxe_register_device failed with error -23 [ 209.940863][T11007] rdma_rxe: failed to add lo [ 210.505111][T11035] netlink: 'syz.4.2122': attribute type 4 has an invalid length. [ 211.061528][T11062] loop0: detected capacity change from 0 to 1764 [ 211.088711][ T9566] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 211.265326][T11082] device syzkaller0 entered promiscuous mode [ 211.649699][T11099] netlink: 'syz.0.2145': attribute type 4 has an invalid length. [ 212.172719][T11131] netlink: 'syz.2.2157': attribute type 27 has an invalid length. [ 212.449393][T11131] bridge0: port 2(bridge_slave_1) entered disabled state [ 212.451847][T11131] bridge0: port 1(bridge_slave_0) entered disabled state [ 212.885424][T11131] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 212.905137][T11131] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 213.246641][T11131] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 213.248545][T11131] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 213.250242][T11131] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 213.252017][T11131] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 213.448666][T11172] loop0: detected capacity change from 0 to 1764 [ 213.758632][ T9566] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 213.836612][T11177] loop0: detected capacity change from 0 to 4096 [ 213.850738][T11177] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 213.926493][T11174] netlink: 'syz.3.2171': attribute type 4 has an invalid length. [ 213.960701][T11181] rdma_rxe: already configured on lo [ 213.976597][ T4335] EXT4-fs (loop0): unmounting filesystem. [ 213.986368][T11183] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2175'. [ 213.989706][T11183] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2175'. [ 213.993056][T11181] infiniband syz1: set down [ 214.013300][ T8528] lo speed is unknown, defaulting to 1000 [ 214.014483][ T8528] lo speed is unknown, defaulting to 1000 [ 214.117828][T11191] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2178'. [ 214.128998][T11191] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2178'. [ 214.219583][T11200] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2180'. [ 214.275971][T11203] device syzkaller0 entered promiscuous mode [ 214.337582][T11210] (unnamed net_device) (uninitialized): option lacp_rate: mode dependency failed, not supported in mode broadcast(3) [ 214.421679][T11214] loop0: detected capacity change from 0 to 4096 [ 214.428181][T11218] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2189'. [ 214.430132][T11218] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2189'. [ 214.444739][T11214] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 214.510104][ T4335] EXT4-fs (loop0): unmounting filesystem. [ 214.707312][T11239] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2197'. [ 214.735057][T11241] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2198'. [ 214.779111][T11246] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2201'. [ 215.296626][T11298] device syzkaller0 entered promiscuous mode [ 215.933357][T11327] rdma_rxe: rxe_register_device failed with error -23 [ 215.935237][T11327] rdma_rxe: failed to add lo [ 216.095113][T11335] loop2: detected capacity change from 0 to 1764 [ 216.150308][ T9566] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 216.205119][T11347] device syzkaller0 entered promiscuous mode [ 216.459955][T11374] rdma_rxe: already configured on lo [ 216.462387][T11372] device syzkaller0 entered promiscuous mode [ 216.644821][T11382] loop0: detected capacity change from 0 to 4096 [ 216.662667][T11382] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 216.730606][ T4335] EXT4-fs (loop0): unmounting filesystem. [ 217.395368][T11401] infiniband syz0: set down [ 217.402516][T11401] infiniband syz0: added batadv_slave_1 [ 217.420998][T11401] RDS/IB: syz0: added [ 217.421930][T11401] smc: adding ib device syz0 with port count 1 [ 217.424750][T11401] smc: ib device syz0 port 1 has pnetid [ 217.785569][T11434] netlink: 'syz.0.2262': attribute type 4 has an invalid length. [ 218.008296][T11431] loop2: detected capacity change from 0 to 1764 [ 218.027505][ T9566] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 218.462542][T11467] device syzkaller0 entered promiscuous mode [ 218.667974][T11489] bridge_slave_1: Caught tx_queue_len zero misconfig [ 218.852888][T11504] netlink: 'syz.0.2288': attribute type 4 has an invalid length. [ 219.216905][T11515] __nla_validate_parse: 10 callbacks suppressed [ 219.216918][T11515] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2294'. [ 219.240234][T11515] device bond1 entered promiscuous mode [ 219.241876][T11515] 8021q: adding VLAN 0 to HW filter on device bond1 [ 219.365458][T11529] device syzkaller0 entered promiscuous mode [ 219.774524][T11537] netlink: 'syz.0.2303': attribute type 27 has an invalid length. [ 219.785534][T11537] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 219.787987][T11537] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 219.793956][T11537] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 219.796023][T11537] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 219.857537][T11537] device geneve2 left promiscuous mode [ 220.018531][T11553] device syzkaller0 entered promiscuous mode [ 220.022876][T11549] netlink: 80 bytes leftover after parsing attributes in process `syz.2.2309'. [ 220.541119][T11561] netlink: 'syz.1.2313': attribute type 4 has an invalid length. [ 220.563195][T11567] device syzkaller0 entered promiscuous mode [ 220.709455][T11576] loop0: detected capacity change from 0 to 512 [ 220.795669][T11581] loop2: detected capacity change from 0 to 4096 [ 220.810960][T11581] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 220.895924][ T4342] EXT4-fs (loop2): unmounting filesystem. [ 221.119015][T11605] bridge_slave_1: Caught tx_queue_len zero misconfig [ 221.324717][T11614] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 221.337439][T11614] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 221.346487][T11614] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 221.354628][T11614] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 221.359043][T11614] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 221.366240][T11614] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 221.529739][T11621] loop2: detected capacity change from 0 to 4096 [ 221.554163][T11621] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 221.619719][ T4342] EXT4-fs (loop2): unmounting filesystem. [ 221.895051][T11639] netlink: 'syz.2.2338': attribute type 4 has an invalid length. [ 222.280938][T11647] loop0: detected capacity change from 0 to 1764 [ 222.313398][ T9566] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 222.482421][T11664] loop0: detected capacity change from 0 to 4096 [ 222.559324][T11664] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 222.579547][T11670] rdma_rxe: rxe_register_device failed with error -23 [ 222.581025][T11670] rdma_rxe: failed to add lo [ 222.631906][ T4335] EXT4-fs (loop0): unmounting filesystem. [ 222.661039][T11677] smc: removing ib device syz1 [ 222.677047][ T27] audit: type=1326 audit(222.660:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11671 comm="syz.4.2351" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff88777fe8 code=0x7ffc0000 [ 222.681782][ T27] audit: type=1326 audit(222.660:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11671 comm="syz.4.2351" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff88777fe8 code=0x7ffc0000 [ 222.693675][ T27] audit: type=1326 audit(222.660:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11671 comm="syz.4.2351" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff88777fe8 code=0x7ffc0000 [ 222.700603][ T27] audit: type=1326 audit(222.660:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11671 comm="syz.4.2351" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=426 compat=0 ip=0xffff88777fe8 code=0x7ffc0000 [ 222.725200][ T27] audit: type=1326 audit(222.660:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11671 comm="syz.4.2351" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff88777fe8 code=0x7ffc0000 [ 222.742401][ T27] audit: type=1326 audit(222.660:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11671 comm="syz.4.2351" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=436 compat=0 ip=0xffff88777fe8 code=0x7ffc0000 [ 222.748358][ T27] audit: type=1326 audit(222.660:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11671 comm="syz.4.2351" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff88777fe8 code=0x7ffc0000 [ 222.752959][ T27] audit: type=1326 audit(222.700:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11671 comm="syz.4.2351" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=115 compat=0 ip=0xffff8875aeac code=0x7ffc0000 [ 222.858784][ T27] audit: type=1326 audit(222.800:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11671 comm="syz.4.2351" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=115 compat=0 ip=0xffff8875aeac code=0x7ffc0000 [ 222.919920][ T27] audit: type=1326 audit(222.900:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11671 comm="syz.4.2351" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=115 compat=0 ip=0xffff8875aeac code=0x7ffc0000 [ 223.659932][T11730] loop2: detected capacity change from 0 to 256 [ 223.779276][T11739] netlink: 'syz.4.2372': attribute type 6 has an invalid length. [ 223.781112][T11739] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2372'. [ 223.784491][T11737] device syzkaller0 entered promiscuous mode [ 223.982115][T11759] rdma_rxe: rxe_register_device failed with error -23 [ 223.983783][T11759] rdma_rxe: failed to add lo [ 224.181674][T11771] loop0: detected capacity change from 0 to 1764 [ 224.218053][ T9566] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 224.424670][T11795] device syzkaller0 entered promiscuous mode [ 225.657456][T11847] device syzkaller0 entered promiscuous mode [ 237.404164][T11883] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2429'. [ 238.491481][T11951] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 238.499707][T11951] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 238.549985][T11951] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 238.616525][T11958] device syzkaller0 entered promiscuous mode [ 238.861697][ T4331] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 238.865845][ T4331] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 238.871542][ T4331] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 238.873512][ T4331] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 238.875144][ T4331] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 238.877148][ T4331] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 239.011054][T11962] chnl_net:caif_netlink_parms(): no params data found [ 239.035735][T11962] bridge0: port 1(bridge_slave_0) entered blocking state [ 239.037994][T11962] bridge0: port 1(bridge_slave_0) entered disabled state [ 239.040196][T11962] device bridge_slave_0 entered promiscuous mode [ 239.043151][T11962] bridge0: port 2(bridge_slave_1) entered blocking state [ 239.044688][T11962] bridge0: port 2(bridge_slave_1) entered disabled state [ 239.046664][T11962] device bridge_slave_1 entered promiscuous mode [ 239.178216][T11980] loop0: detected capacity change from 0 to 1764 [ 239.219025][T11962] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 239.227740][T11962] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 239.241238][T11923] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 239.537290][T11962] team0: Port device team_slave_0 added [ 239.543442][T11962] team0: Port device team_slave_1 added [ 239.571508][T11962] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 239.576853][T11962] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 239.606900][T11962] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 239.634855][T11962] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 239.636565][T11962] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 239.641481][T11962] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 240.206441][T11962] device hsr_slave_0 entered promiscuous mode [ 240.260417][T11962] device hsr_slave_1 entered promiscuous mode [ 240.277791][T11962] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 240.282605][T11962] Cannot create hsr debugfs directory [ 240.335204][T12006] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2471'. [ 240.564364][T12017] loop2: detected capacity change from 0 to 128 [ 240.647352][T12017] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 240.679046][ T4342] EXT4-fs (loop2): unmounting filesystem. [ 240.712043][T12030] loop2: detected capacity change from 0 to 1024 [ 240.731213][T11962] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 240.816026][T12030] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 240.863043][ T4342] EXT4-fs (loop2): unmounting filesystem. [ 240.988047][ T4331] Bluetooth: hci5: command 0x0409 tx timeout [ 241.148978][T11962] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 241.225818][T12050] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2489'. [ 241.232796][T11962] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 241.378744][T11962] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 241.520210][T12079] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2504'. [ 241.605090][T11962] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 241.642453][T11962] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 241.680448][T11962] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 241.709305][T11962] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 241.817364][T11962] 8021q: adding VLAN 0 to HW filter on device bond0 [ 241.828994][ T5040] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 241.830723][ T5040] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 241.842675][T11962] 8021q: adding VLAN 0 to HW filter on device team0 [ 241.858497][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 241.860616][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 241.862380][ T39] bridge0: port 1(bridge_slave_0) entered blocking state [ 241.863744][ T39] bridge0: port 1(bridge_slave_0) entered forwarding state [ 241.865400][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 241.870471][T12111] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2520'. [ 241.872848][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 241.874869][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 241.880611][ T39] bridge0: port 2(bridge_slave_1) entered blocking state [ 241.882039][ T39] bridge0: port 2(bridge_slave_1) entered forwarding state [ 241.883827][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 241.895911][T11962] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 241.902835][T11962] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 241.906258][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 241.908552][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 241.911740][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 241.913682][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 241.915705][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 241.920339][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 241.922233][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 241.924203][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 241.926134][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 241.945718][T12113] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 241.960710][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 241.962903][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 242.425057][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 242.426653][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 242.442750][T11962] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 242.491761][ T5118] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 242.493973][ T5118] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 242.512334][ T4531] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 242.514337][ T4531] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 242.516258][ T4531] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 242.519972][ T4531] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 242.526609][T11962] device veth0_vlan entered promiscuous mode [ 242.552010][T11962] device veth1_vlan entered promiscuous mode [ 242.573216][ T4797] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 242.575288][ T4797] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 242.578299][ T4797] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 242.583477][ T4797] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 242.614022][T11962] device veth0_macvtap entered promiscuous mode [ 242.620532][T11962] device veth1_macvtap entered promiscuous mode [ 242.701695][T11962] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 242.704138][T11962] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 242.736213][T11962] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 242.751232][T11962] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 242.753122][T11962] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 242.756241][T11962] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 242.768068][T11962] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 242.784005][T11962] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 242.785757][T11962] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 242.792261][T11962] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 242.794036][T11962] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 242.795924][T11962] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 242.802541][T11962] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 243.072835][ T4333] Bluetooth: hci5: command 0x041b tx timeout [ 243.085061][T11962] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 243.094119][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 243.096079][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 243.098746][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 243.101107][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 243.106191][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 243.129894][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 243.136148][T11962] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 243.138589][T11962] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 243.140293][T11962] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 243.141957][T11962] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 243.151178][T12153] Invalid option length (0) for dns_resolver key [ 243.281656][ T4797] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 243.283222][ T4797] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 243.284868][ T9587] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 243.315541][ T39] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 243.319485][ T39] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 243.322409][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 243.412092][T12174] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2546'. [ 245.137248][ T4333] Bluetooth: hci5: command 0x040f tx timeout [ 245.849535][T12317] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2612'. [ 246.206911][T12336] netlink: 'syz.2.2620': attribute type 1 has an invalid length. [ 246.220497][T12344] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2624'. [ 246.228696][T12336] 8021q: adding VLAN 0 to HW filter on device bond2 [ 246.253872][T12341] bond2: (slave gretap1): making interface the new active one [ 246.261015][T12341] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 246.301288][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bond2: link becomes ready [ 246.313460][T12336] bond2: (slave dummy0): Enslaving as an active interface with an up link [ 246.317763][T12336] netlink: 'syz.2.2620': attribute type 10 has an invalid length. [ 246.319311][T12336] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2620'. [ 246.321186][T12336] device dummy0 entered promiscuous mode [ 246.327226][T12336] bond2: (slave dummy0): Releasing active interface [ 246.823725][T12373] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2636'. [ 246.944850][T12385] lo: Caught tx_queue_len zero misconfig [ 247.112435][T12401] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2651'. [ 247.185042][T12407] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2654'. [ 247.188954][T12407] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2654'. [ 247.216922][ T4333] Bluetooth: hci5: command 0x0419 tx timeout [ 247.356014][T12422] loop2: detected capacity change from 0 to 8192 [ 247.520386][T12435] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2665'. [ 247.571114][T12439] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2668'. [ 247.997034][T12456] 9pnet_fd: Insufficient options for proto=fd [ 248.093127][T12466] loop2: detected capacity change from 0 to 128 [ 248.161292][T11986] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 248.296952][T12484] loop2: detected capacity change from 0 to 512 [ 248.299065][T12484] EXT4-fs: Invalid want_extra_isize 15856 [ 248.600557][T11986] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 248.634062][T12484] __nla_validate_parse: 4 callbacks suppressed [ 248.634073][T12484] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2688'. [ 248.683849][T12492] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2691'. [ 248.785904][T12500] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2695'. [ 248.791585][T12500] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2695'. [ 248.819423][ T2065] ieee802154 phy0 wpan0: encryption failed: -22 [ 248.823028][ T2065] ieee802154 phy1 wpan1: encryption failed: -22 [ 248.842064][T12504] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2698'. [ 248.845966][T12504] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2698'. [ 249.441671][T12523] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2704'. [ 249.490241][T12525] device bond_slave_0 entered promiscuous mode [ 249.491507][T12525] device bond_slave_1 entered promiscuous mode [ 249.493010][T12525] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 249.496655][T12525] bond2: (slave macvlan2): making interface the new active one [ 249.502362][T12525] bond2: (slave macvlan2): Enslaving as an active interface with an up link [ 249.530797][T12530] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2707'. [ 249.533581][T12530] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2707'. [ 249.642282][T12540] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2711'. [ 250.316803][ T7] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 250.688216][ T7] usb 1-1: device descriptor read/64, error -71 [ 251.086891][ T7] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 251.236805][ T7] usb 1-1: device descriptor read/64, error -71 [ 251.336008][T12580] autofs4:pid:12580:autofs_fill_super: called with bogus options [ 251.358619][ T7] usb usb1-port1: attempt power cycle [ 251.572498][T12586] loop3: detected capacity change from 0 to 256 [ 251.766875][ T7] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 251.800790][ T7] usb 1-1: device descriptor read/8, error -71 [ 252.246734][ T7] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 252.278031][ T7] usb 1-1: device descriptor read/8, error -71 [ 252.397931][ T7] usb usb1-port1: unable to enumerate USB device [ 252.685941][T12621] bond_slave_0: Caught tx_queue_len zero misconfig [ 253.912896][T12658] mmap: syz.1.2760 (12658) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 254.201842][T12665] __nla_validate_parse: 14 callbacks suppressed [ 254.201853][T12665] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2762'. [ 254.344355][T12675] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2769'. [ 254.359252][T12675] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2769'. [ 254.499001][T12686] netlink: 'syz.0.2774': attribute type 1 has an invalid length. [ 254.500718][T12686] netlink: 'syz.0.2774': attribute type 1 has an invalid length. [ 254.838395][ T27] kauditd_printk_skb: 3 callbacks suppressed [ 254.838403][ T27] audit: type=1326 audit(254.820:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12688 comm="syz.2.2773" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb8777fe8 code=0x7ffc0000 [ 254.861140][ T27] audit: type=1326 audit(254.820:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12688 comm="syz.2.2773" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb8777fe8 code=0x7ffc0000 [ 254.913900][ T27] audit: type=1326 audit(254.820:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12688 comm="syz.2.2773" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb8777fe8 code=0x7ffc0000 [ 254.933256][ T27] audit: type=1326 audit(254.820:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12688 comm="syz.2.2773" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=14 compat=0 ip=0xffffb8777fe8 code=0x7ffc0000 [ 254.952095][ T27] audit: type=1326 audit(254.820:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12688 comm="syz.2.2773" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb8777fe8 code=0x7ffc0000 [ 254.968004][T12699] loop2: detected capacity change from 0 to 128 [ 254.971930][ T27] audit: type=1326 audit(254.820:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12688 comm="syz.2.2773" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=436 compat=0 ip=0xffffb8777fe8 code=0x7ffc0000 [ 254.987405][ T27] audit: type=1326 audit(254.850:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12688 comm="syz.2.2773" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=94 compat=0 ip=0xffffb8777fe8 code=0x7ffc0000 [ 255.010498][T12699] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 255.014386][T12699] EXT4-fs warning (device loop2): ext4_group_extend:1870: can't shrink FS - resize aborted [ 255.088421][ T4342] EXT4-fs (loop2): unmounting filesystem. [ 255.131803][T12711] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2783'. [ 255.396449][T12725] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 255.399218][T12725] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 255.979713][T12739] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2794'. [ 256.861849][T12764] bridge_slave_1: Caught tx_queue_len zero misconfig [ 257.038767][T12769] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2806'. [ 257.828855][T12810] xt_bpf: check failed: parse error [ 257.981845][T12821] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2828'. [ 258.005984][ T4333] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 258.010235][ T4333] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 258.013945][ T4333] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 258.017116][ T4333] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 258.019213][ T4333] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 258.021043][ T4333] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 258.195972][T12840] loop3: detected capacity change from 0 to 1024 [ 258.204120][T12840] EXT4-fs: Ignoring removed bh option [ 258.272983][T12840] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 258.310569][T11962] EXT4-fs (loop3): unmounting filesystem. [ 258.358300][T12822] chnl_net:caif_netlink_parms(): no params data found [ 258.383600][T12822] bridge0: port 1(bridge_slave_0) entered blocking state [ 258.385080][T12822] bridge0: port 1(bridge_slave_0) entered disabled state [ 258.387841][T12822] device bridge_slave_0 entered promiscuous mode [ 258.390584][T12822] bridge0: port 2(bridge_slave_1) entered blocking state [ 258.392067][T12822] bridge0: port 2(bridge_slave_1) entered disabled state [ 258.393897][T12822] device bridge_slave_1 entered promiscuous mode [ 258.406535][T12822] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 258.412353][T12822] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 258.420577][T12822] team0: Port device team_slave_0 added [ 258.422962][T12822] team0: Port device team_slave_1 added [ 258.433925][T12822] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 258.435311][T12822] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 258.439883][T12822] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 258.442360][T12822] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 258.443583][T12822] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 258.451321][T12822] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 258.798066][T12822] device hsr_slave_0 entered promiscuous mode [ 258.837237][T12822] device hsr_slave_1 entered promiscuous mode [ 258.886977][T12822] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 258.888449][T12822] Cannot create hsr debugfs directory [ 258.940878][ T9587] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 259.049065][ T9587] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 259.137552][ T4333] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 259.140040][ T4333] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 259.143051][ T4333] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 259.148243][ T4333] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 259.150134][ T4333] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 259.152299][ T4333] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 259.167901][ T9587] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 259.261896][ T9587] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 259.318640][T12873] chnl_net:caif_netlink_parms(): no params data found [ 259.373111][T12873] bridge0: port 1(bridge_slave_0) entered blocking state [ 259.375700][T12873] bridge0: port 1(bridge_slave_0) entered disabled state [ 259.382475][T12873] device bridge_slave_0 entered promiscuous mode [ 259.420918][T12873] bridge0: port 2(bridge_slave_1) entered blocking state [ 259.422587][T12873] bridge0: port 2(bridge_slave_1) entered disabled state [ 259.424794][T12873] device bridge_slave_1 entered promiscuous mode [ 259.428083][T12891] device syzkaller0 entered promiscuous mode [ 259.519220][ T9587] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 259.800737][ T9587] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 259.804016][T12873] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 259.807194][T12873] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 259.816218][T12873] team0: Port device team_slave_0 added [ 259.847424][ T9587] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 259.854443][T12873] team0: Port device team_slave_1 added [ 259.883511][ T9587] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 259.900794][T12873] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 259.902130][T12873] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 259.906298][T12873] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 259.917420][T12873] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 259.918716][T12873] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 259.923200][T12873] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 259.978097][T12873] device hsr_slave_0 entered promiscuous mode [ 259.997039][T12873] device hsr_slave_1 entered promiscuous mode [ 260.037204][T12873] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 260.038573][T12873] Cannot create hsr debugfs directory [ 260.066460][T12822] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 260.096971][ T4331] Bluetooth: hci0: command 0x0409 tx timeout [ 260.373236][T12822] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 260.472782][T12822] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 260.636209][T12822] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 260.994532][T12873] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 261.092306][T12873] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 261.198936][T12873] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 261.210433][T12984] loop2: detected capacity change from 0 to 1024 [ 261.218780][ T4331] Bluetooth: hci3: command 0x0409 tx timeout [ 261.264308][T12984] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 261.281435][T12984] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 261.285594][T12984] EXT4-fs error (device loop2): ext4_get_journal_inode:5762: inode #5: comm syz.2.2872: unexpected bad inode w/o EXT4_IGET_BAD [ 261.294072][T12984] EXT4-fs (loop2): no journal found [ 261.302097][T12984] EXT4-fs (loop2): can't get journal size [ 261.309659][T12984] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 261.326389][ T4342] EXT4-fs (loop2): unmounting filesystem. [ 261.357999][T12873] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 261.479955][T13003] device dummy0 left promiscuous mode [ 261.484685][T13003] device bond1 left promiscuous mode [ 261.537189][T13015] sctp: [Deprecated]: syz.2.2876 (pid 13015) Use of struct sctp_assoc_value in delayed_ack socket option. [ 261.537189][T13015] Use struct sctp_sack_info instead [ 261.867181][T12873] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 261.968224][T12873] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 262.176758][ T4331] Bluetooth: hci0: command 0x041b tx timeout [ 262.293224][T12873] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 262.375211][T12873] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 262.440902][T12873] 8021q: adding VLAN 0 to HW filter on device bond0 [ 262.442521][T12822] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 262.483672][ T9587] device hsr_slave_0 left promiscuous mode [ 262.516990][ T9587] device hsr_slave_1 left promiscuous mode [ 262.617463][ T9587] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 262.619037][ T9587] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 262.624084][ T9587] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 262.625484][ T9587] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 262.628230][ T9587] device bridge_slave_1 left promiscuous mode [ 262.630520][ T9587] bridge0: port 2(bridge_slave_1) entered disabled state [ 262.689687][ T9587] device bridge_slave_0 left promiscuous mode [ 262.691579][ T9587] bridge0: port 1(bridge_slave_0) entered disabled state [ 262.742703][ T9587] device bond_slave_0 left promiscuous mode [ 262.744014][ T9587] device bond_slave_1 left promiscuous mode [ 262.817989][ T9587] device veth1_macvtap left promiscuous mode [ 262.819517][ T9587] device veth0_macvtap left promiscuous mode [ 262.820752][ T9587] device veth1_vlan left promiscuous mode [ 262.822044][ T9587] device veth0_vlan left promiscuous mode [ 262.947922][ T9587] bond2 (unregistering): (slave macvlan2): Releasing active interface [ 262.990621][ T9587] bond2 (unregistering): Released all slaves [ 262.995257][ T9587] bond1 (unregistering): Released all slaves [ 263.387660][ T4331] Bluetooth: hci3: command 0x041b tx timeout [ 263.576859][ T4377] usb 1-1: new full-speed USB device number 11 using dummy_hcd [ 263.777804][ T4377] usb 1-1: not running at top speed; connect to a high speed hub [ 263.781906][ T4377] usb 1-1: New USB device found, idVendor=1235, idProduct=8210, bcdDevice= 0.40 [ 263.783748][ T4377] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 263.785260][ T4377] usb 1-1: Product: syz [ 263.786112][ T4377] usb 1-1: Manufacturer: syz [ 263.787137][ T4377] usb 1-1: SerialNumber: syz [ 264.256759][ T4331] Bluetooth: hci0: command 0x040f tx timeout [ 265.419085][ T9587] team0 (unregistering): Port device team_slave_1 removed [ 265.461056][ T4331] Bluetooth: hci3: command 0x040f tx timeout [ 265.588852][ T9587] team0 (unregistering): Port device team_slave_0 removed [ 265.749191][ T9587] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 265.948784][ T9587] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 266.119444][ T4377] usb 1-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 266.120986][ T4377] usb 1-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 266.122519][ T4377] usb 1-1: Focusrite Scarlett Gen 3 Mixer Driver enabled (pid=0x8210); report any issues to g@b4.vu [ 266.124538][ T4377] usb 1-1: Error initialising Scarlett Gen 3 Mixer Driver: -22 [ 266.143034][ T4377] snd-usb-audio: probe of 1-1:1.0 failed with error -22 [ 266.154042][ T4377] usb 1-1: USB disconnect, device number 11 [ 266.197436][T13058] Bluetooth: MGMT ver 1.22 [ 266.206273][T13058] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2893'. [ 266.336769][ T4331] Bluetooth: hci0: command 0x0419 tx timeout [ 266.357493][T11986] udevd[11986]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 267.368605][ T9587] bond0 (unregistering): Released all slaves [ 267.536816][ T4331] Bluetooth: hci3: command 0x0419 tx timeout [ 267.650850][T12822] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 267.702032][T12873] 8021q: adding VLAN 0 to HW filter on device team0 [ 267.703634][ T4797] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 267.705212][ T4797] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 267.727618][ T4797] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 267.741520][ T4797] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 267.745518][ T4797] bridge0: port 1(bridge_slave_0) entered blocking state [ 267.747008][ T4797] bridge0: port 1(bridge_slave_0) entered forwarding state [ 267.767135][ T4797] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 267.773656][ T4797] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 267.776379][ T4797] bridge0: port 2(bridge_slave_1) entered blocking state [ 267.778381][ T4797] bridge0: port 2(bridge_slave_1) entered forwarding state [ 267.778957][ T4797] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 267.779553][ T4797] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 267.780072][ T4797] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 267.780533][ T4797] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 267.780962][ T4797] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 267.781427][ T4797] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 267.784279][T12822] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 267.817964][T12822] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 267.877110][ T4797] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 267.879266][ T4797] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 267.881050][ T4797] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 267.882879][ T4797] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 267.886228][T13085] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2903'. [ 267.907678][T12873] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 267.910243][T12873] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 267.912514][ T5040] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 267.914350][ T5040] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 267.969719][T12822] 8021q: adding VLAN 0 to HW filter on device bond0 [ 267.975180][ T4797] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 267.977165][ T4797] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 267.985111][T12822] 8021q: adding VLAN 0 to HW filter on device team0 [ 267.988811][ T5353] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 267.990665][ T5353] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 267.992117][ T5353] bridge0: port 1(bridge_slave_0) entered blocking state [ 267.993513][ T5353] bridge0: port 1(bridge_slave_0) entered forwarding state [ 268.010189][ T5353] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 268.023160][T13094] loop2: detected capacity change from 0 to 1024 [ 268.024144][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 268.026416][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 268.028613][T13094] EXT4-fs: Ignoring removed bh option [ 268.029452][ T39] bridge0: port 2(bridge_slave_1) entered blocking state [ 268.031013][ T39] bridge0: port 2(bridge_slave_1) entered forwarding state [ 268.045116][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 268.048529][T13094] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e80ce028, mo2=0000] [ 268.063904][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 268.065966][T13094] System zones: 0-1, 3-12 [ 268.075565][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 268.086349][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 268.106059][T12822] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 268.114860][T12822] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 268.119762][T13094] EXT4-fs error (device loop2): ext4_map_blocks:747: inode #3: block 1: comm syz.2.2906: lblock 1 mapped to illegal pblock 1 (length 1) [ 268.122680][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 268.124708][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 268.126514][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 268.134034][T13094] EXT4-fs (loop2): Remounting filesystem read-only [ 268.134914][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 268.135290][T13094] Quota error (device loop2): write_blk: dquota write failed [ 268.138741][T13094] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 268.140833][T13094] EXT4-fs error (device loop2): ext4_acquire_dquot:6841: comm syz.2.2906: Failed to acquire dquot type 0 [ 268.142112][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 268.144760][T13094] EXT4-fs (loop2): Remounting filesystem read-only [ 268.145397][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 268.147903][T13094] EXT4-fs error (device loop2): ext4_free_blocks:6220: comm syz.2.2906: Freeing blocks not in datazone - block = 0, count = 4096 [ 268.152273][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 268.154132][T13094] EXT4-fs (loop2): Remounting filesystem read-only [ 268.160277][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 268.163039][T13094] EXT4-fs error (device loop2): ext4_read_inode_bitmap:140: comm syz.2.2906: Invalid inode bitmap blk 0 in block_group 0 [ 268.171533][T13094] EXT4-fs (loop2): Remounting filesystem read-only [ 268.173105][T13094] EXT4-fs error (device loop2) in ext4_free_inode:362: Corrupt filesystem [ 268.175807][T13094] EXT4-fs (loop2): Remounting filesystem read-only [ 268.177212][T13094] EXT4-fs (loop2): 1 orphan inode deleted [ 268.178573][T13094] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 268.178838][ T5118] EXT4-fs error (device loop2): ext4_map_blocks:637: inode #3: block 1: comm kworker/u4:16: lblock 1 mapped to illegal pblock 1 (length 1) [ 268.193430][ T5118] EXT4-fs (loop2): Remounting filesystem read-only [ 268.199547][T12873] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 268.207681][ T5118] Quota error (device loop2): remove_tree: Can't read quota data block 1 [ 268.225455][ T5118] EXT4-fs error (device loop2): ext4_release_dquot:6877: comm kworker/u4:16: Failed to release dquot type 0 [ 268.232661][ T4531] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 268.233834][ T5118] EXT4-fs (loop2): Remounting filesystem read-only [ 268.234368][ T4531] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 268.236260][ T4342] EXT4-fs (loop2): unmounting filesystem. [ 268.239895][ T4531] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 268.247817][ T4531] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 268.251556][ T4797] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 268.258307][ T4797] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 268.263794][ T4797] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 268.269429][ T4797] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 268.276964][T12873] device veth0_vlan entered promiscuous mode [ 268.283305][T12873] device veth1_vlan entered promiscuous mode [ 268.295888][T12873] device veth0_macvtap entered promiscuous mode [ 268.306592][ T4531] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 268.309013][ T4531] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 268.310557][ T4531] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 268.312158][ T4531] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 268.313770][ T4531] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 268.321494][T12873] device veth1_macvtap entered promiscuous mode [ 268.332957][T12873] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 268.335164][T12873] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 268.337815][T12873] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 268.340338][T12873] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 268.346570][T12873] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 268.349684][T12873] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 268.353835][T12873] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 268.356365][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 268.358558][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 268.360170][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 268.363821][T12873] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 268.366093][T12873] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 268.369336][T12873] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 268.371369][T12873] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 268.373903][T12873] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 268.375925][T12873] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 268.380385][T12873] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 268.384018][T12873] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 268.385730][T12873] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 268.388874][T12873] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 268.390546][T12873] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 268.394375][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 268.396642][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 268.506375][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 268.511742][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 268.516374][T12822] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 268.527606][ T4531] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 268.529046][ T4531] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 268.533353][ T4531] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 268.547808][ T4797] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 268.549508][ T4797] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 268.551169][ T5118] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 268.625026][T13115] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2839'. [ 268.920936][T13135] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2919'. [ 269.211996][ T5351] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 269.213868][ T5351] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 269.220983][T13171] tap0: tun_chr_ioctl cmd 1074025677 [ 269.222112][T13171] tap0: linktype set to 1 [ 269.349941][ T4797] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 269.351770][ T4797] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 269.353735][ T4797] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 269.355264][ T4797] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 269.360632][T12822] device veth0_vlan entered promiscuous mode [ 269.364671][T12822] device veth1_vlan entered promiscuous mode [ 269.444357][T13191] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2941'. [ 269.447386][ T5351] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 269.449103][ T5351] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 269.450840][ T5351] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 269.452490][ T5351] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 269.454763][T13194] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2940'. [ 269.510342][T12822] device veth0_macvtap entered promiscuous mode [ 269.513005][T12822] device veth1_macvtap entered promiscuous mode [ 269.531492][T12822] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 269.533735][T12822] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 269.535475][T12822] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 269.555323][T12822] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 269.558659][T12822] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 269.560459][T12822] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 269.562371][T12822] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 269.564399][T12822] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 269.575615][T13206] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2948'. [ 269.588640][T12822] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 269.691493][ T5351] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 269.693672][ T5351] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 269.695402][ T5351] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 269.701003][ T5351] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 269.704677][T13206] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2948'. [ 269.716338][T12822] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 269.725139][T12822] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 269.727221][T12822] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 269.729057][T12822] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 269.730854][T12822] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 269.732651][T12822] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 269.734359][T12822] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 269.736051][T12822] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 269.754467][T12822] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 269.761580][T13214] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2948'. [ 269.781441][T13226] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2954'. [ 269.857448][ T5351] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 269.859380][ T5351] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 269.862488][T12822] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 269.863967][T12822] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 269.865422][T12822] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 269.871092][T12822] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 269.875020][T13201] device syzkaller0 entered promiscuous mode [ 270.343004][T13262] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 270.344847][T13262] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 270.475444][ T5351] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 270.481716][ T5351] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 270.542471][ T5040] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 270.543657][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 270.543879][ T5040] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 270.607340][ T5040] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 270.610292][T13271] device syzkaller0 entered promiscuous mode [ 271.235516][T13295] __nla_validate_parse: 7 callbacks suppressed [ 271.235543][T13295] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2978'. [ 271.609959][ T4331] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 271.612271][ T4331] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 271.614432][ T4331] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 271.618259][ T4331] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 271.620147][ T4331] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 271.621694][ T4331] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 272.012795][T13302] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2985'. [ 272.467970][T13315] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2989'. [ 272.520323][T13317] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2989'. [ 272.657137][ T14] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 272.792398][T13333] team0 (unregistering): Port device team_slave_0 removed [ 273.871021][ T14] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 273.905268][ T27] audit: type=1326 audit(273.770:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13328 comm="syz.4.2995" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff81377fe8 code=0x7ffc0000 [ 273.915074][ T4333] Bluetooth: hci5: command 0x0409 tx timeout [ 273.919017][ T5364] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 273.920847][ T4379] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 273.923589][ T14] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 273.944163][ T27] audit: type=1326 audit(273.770:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13328 comm="syz.4.2995" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff81377fe8 code=0x7ffc0000 [ 273.949913][T13333] team0 (unregistering): Port device team_slave_1 removed [ 273.955979][ T27] audit: type=1326 audit(273.840:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13328 comm="syz.4.2995" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=200 compat=0 ip=0xffff81377fe8 code=0x7ffc0000 [ 273.971945][ T27] audit: type=1326 audit(273.840:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13328 comm="syz.4.2995" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff81377fe8 code=0x7ffc0000 [ 273.976360][ T27] audit: type=1326 audit(273.840:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13328 comm="syz.4.2995" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff81377fe8 code=0x7ffc0000 [ 274.097051][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 274.300055][ T9587] device hsr_slave_0 left promiscuous mode [ 274.348228][ T9587] device hsr_slave_1 left promiscuous mode [ 274.418584][ T9587] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 274.419944][ T9587] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 274.425518][ T9587] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 274.427583][ T9587] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 274.429186][ T9587] device bridge_slave_1 left promiscuous mode [ 274.430320][ T9587] bridge0: port 2(bridge_slave_1) entered disabled state [ 274.507096][ T9587] device bridge_slave_0 left promiscuous mode [ 274.509089][ T9587] bridge0: port 1(bridge_slave_0) entered disabled state [ 274.707253][ T9587] device veth1_macvtap left promiscuous mode [ 274.708919][ T9587] device veth0_macvtap left promiscuous mode [ 274.710573][ T9587] device veth1_vlan left promiscuous mode [ 274.712144][ T9587] device veth0_vlan left promiscuous mode [ 274.988796][ T14] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 275.137088][ T4376] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 275.237297][T13377] binder: 13372:13377 unknown command 1074553619 [ 275.238732][T13377] binder: 13372:13377 ioctl c0306201 200001c0 returned -22 [ 275.243350][T13377] No such timeout policy "syz1" [ 275.936885][ T4331] Bluetooth: hci5: command 0x041b tx timeout [ 276.017112][ T14] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 277.056919][ T7] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 277.580268][ T9587] team0 (unregistering): Port device team_slave_1 removed [ 277.758365][ T9587] team0 (unregistering): Port device team_slave_0 removed [ 277.917186][ T9587] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 278.016763][ T4331] Bluetooth: hci5: command 0x040f tx timeout [ 278.096988][ T7] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 278.117159][ T9587] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 278.176836][ T4381] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 279.136892][ T14] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 279.538478][ T5118] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 279.541127][ T4376] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 279.545244][ T7] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 279.637861][ T9587] bond0 (unregistering): Released all slaves [ 280.098738][ T4333] Bluetooth: hci5: command 0x0419 tx timeout [ 280.200690][T13405] bridge0: port 3(macvlan2) entered blocking state [ 280.285728][T13405] bridge0: port 3(macvlan2) entered disabled state [ 280.990926][ T4377] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 280.994046][ T1969] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 280.996450][ T3902] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 280.998166][ T3902] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 281.007919][T13405] device macvlan2 entered promiscuous mode [ 281.011499][T13409] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3016'. [ 281.013193][T13409] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3016'. [ 281.014814][T13409] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3016'. [ 281.016351][T13409] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3016'. [ 281.018528][T13409] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3016'. [ 281.020153][T13409] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3016'. [ 281.021637][T13409] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3016'. [ 281.023191][T13409] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3016'. [ 281.024663][T13409] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3016'. [ 281.026190][T13409] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3016'. [ 281.054323][T13413] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 281.056007][T13413] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 281.092240][T13304] chnl_net:caif_netlink_parms(): no params data found [ 281.112669][T13304] bridge0: port 1(bridge_slave_0) entered blocking state [ 281.113887][T13304] bridge0: port 1(bridge_slave_0) entered disabled state [ 281.115486][T13304] device bridge_slave_0 entered promiscuous mode [ 281.122020][T13304] bridge0: port 2(bridge_slave_1) entered blocking state [ 281.124319][T13304] bridge0: port 2(bridge_slave_1) entered disabled state [ 281.135004][T13304] device bridge_slave_1 entered promiscuous mode [ 281.165461][T13304] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 281.168850][T13428] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 281.170712][T13428] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 281.185757][T13304] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 281.212451][T13304] team0: Port device team_slave_0 added [ 281.233639][T13304] team0: Port device team_slave_1 added [ 281.242146][T13304] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 281.246230][T13304] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 281.259415][T13304] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 281.262344][T13304] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 281.263576][T13304] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 281.278914][T13304] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 281.341634][T13304] device hsr_slave_0 entered promiscuous mode [ 281.381236][T13304] device hsr_slave_1 entered promiscuous mode [ 281.427078][T13304] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 281.428622][T13304] Cannot create hsr debugfs directory [ 281.435700][T13445] vlan0: Caught tx_queue_len zero misconfig [ 281.668921][T13304] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 281.818491][T13304] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 281.900432][T13304] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 281.997969][T13304] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 282.100335][T13479] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 282.102347][T13479] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 282.102664][T13474] can: request_module (can-proto-3) failed. [ 282.985002][T13304] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 283.112803][T13304] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 283.149209][T13304] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 283.250877][T13304] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 283.636940][T13304] 8021q: adding VLAN 0 to HW filter on device bond0 [ 283.653103][ T4797] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 283.654743][ T4797] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 283.664436][T13304] 8021q: adding VLAN 0 to HW filter on device team0 [ 284.097287][ T7] net_ratelimit: 5 callbacks suppressed [ 284.097298][ T7] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 284.137188][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 284.139184][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 284.140952][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 284.142291][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 284.144941][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 284.152129][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 284.156061][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 284.157424][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 284.293152][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 284.294939][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 284.298965][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 284.300978][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 284.310394][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 308.126671][ C0] watchdog: BUG: soft lockup - CPU#0 stuck for 22s! [kworker/u4:16:5118] [ 308.128270][ C0] Modules linked in: [ 308.128970][ C0] irq event stamp: 4227962 [ 308.129720][ C0] hardirqs last enabled at (4227961): [] exit_to_kernel_mode+0xcc/0xfc [ 308.131376][ C0] hardirqs last disabled at (4227962): [] el1_interrupt+0x24/0x54 [ 308.133033][ C0] softirqs last enabled at (4223174): [] handle_softirqs+0xb1c/0xc90 [ 308.134953][ C0] softirqs last disabled at (4223095): [] __do_softirq+0x14/0x20 [ 308.136682][ C0] CPU: 0 PID: 5118 Comm: kworker/u4:16 Not tainted syzkaller #0 [ 308.138036][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026 [ 308.139783][ C0] Workqueue: events_unbound toggle_allocation_gate [ 308.140926][ C0] pstate: 82400005 (Nzcv daif +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 308.142249][ C0] pc : smp_call_function_many_cond+0xeac/0x1404 [ 308.143306][ C0] lr : smp_call_function_many_cond+0xec4/0x1404 [ 308.144396][ C0] sp : ffff800021ba7880 [ 308.145203][ C0] x29: ffff800021ba78d0 x28: dfff800000000000 x27: 0000000000000000 [ 308.146694][ C0] x26: ffff80001537d000 x25: 0000000000000011 x24: ffff800015380f40 [ 308.148371][ C0] x23: ffff00019f3a83c0 x22: 1fffe00033e75078 x21: ffff00019f3cdc08 [ 308.149863][ C0] x20: 0000000000000001 x19: ffff80001557a720 x18: 1fffe00033e7277e [ 308.151546][ C0] x17: ffff80001537d000 x16: ffff800011b90540 x15: 0000000000000000 [ 308.153054][ C0] x14: 0000000000000001 x13: 1fffe00033e79b81 x12: 0000000000000000 [ 308.154430][ C0] x11: ff0080000840e784 x10: 0000000000000000 x9 : 0000000000000000 [ 308.155783][ C0] x8 : 0000000000000011 x7 : 0000000000000000 x6 : 0000000000000000 [ 308.157159][ C0] x5 : 0000000000000080 x4 : 0000000000000000 x3 : ffff80000840e778 [ 308.158542][ C0] x2 : 0000000000000000 x1 : 0000000000000004 x0 : 0000000000000001 [ 308.159989][ C0] Call trace: [ 308.160571][ C0] smp_call_function_many_cond+0xeac/0x1404 [ 308.161581][ C0] kick_all_cpus_sync+0x40/0xa0 [ 308.162440][ C0] arch_jump_label_transform_apply+0x14/0x20 [ 308.163504][ C0] __jump_label_update+0x314/0x33c [ 308.164413][ C0] jump_label_update+0x310/0x3c4 [ 308.165292][ C0] static_key_enable_cpuslocked+0x11c/0x220 [ 308.166376][ C0] static_key_enable+0x24/0x38 [ 308.167223][ C0] toggle_allocation_gate+0xc8/0x42c [ 308.168159][ C0] process_one_work+0x7e4/0x13bc [ 308.169025][ C0] worker_thread+0x8cc/0xfe8 [ 308.169806][ C0] kthread+0x254/0x2e0 [ 308.170505][ C0] ret_from_fork+0x10/0x20 [ 308.171284][ C0] Kernel panic - not syncing: softlockup: hung tasks [ 308.172514][ C0] CPU: 0 PID: 5118 Comm: kworker/u4:16 Tainted: G L syzkaller #0 [ 308.174214][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026 [ 308.176044][ C0] Workqueue: events_unbound toggle_allocation_gate [ 308.177152][ C0] Call trace: [ 308.177716][ C0] dump_backtrace+0x1c4/0x1f0 [ 308.178583][ C0] show_stack+0x2c/0x3c [ 308.179300][ C0] __dump_stack+0x30/0x40 [ 308.180071][ C0] dump_stack_lvl+0xf4/0x15c [ 308.180883][ C0] dump_stack+0x1c/0x5c [ 308.181630][ C0] panic+0x2f8/0x7ac [ 308.182281][ C0] softlockup_fn+0x0/0x120 [ 308.183056][ C0] __hrtimer_run_queues+0x414/0xc58 [ 308.183953][ C0] hrtimer_interrupt+0x294/0xb28 [ 308.184833][ C0] arch_timer_handler_virt+0x74/0x88 [ 308.185783][ C0] handle_percpu_devid_irq+0x17c/0x358 [ 308.186752][ C0] generic_handle_domain_irq+0xe4/0x154 [ 308.187643][ C0] gic_handle_irq+0x70/0x1d8 [ 308.188419][ C0] call_on_irq_stack+0x30/0x48 [ 308.189261][ C0] do_interrupt_handler+0xd4/0x138 [ 308.190118][ C0] el1_interrupt+0x34/0x54 [ 308.190878][ C0] el1h_64_irq_handler+0x18/0x24 [ 308.191726][ C0] el1h_64_irq+0x64/0x68 [ 308.192500][ C0] smp_call_function_many_cond+0xeac/0x1404 [ 308.193549][ C0] kick_all_cpus_sync+0x40/0xa0 [ 308.194426][ C0] arch_jump_label_transform_apply+0x14/0x20 [ 308.195505][ C0] __jump_label_update+0x314/0x33c [ 308.196421][ C0] jump_label_update+0x310/0x3c4 [ 308.197290][ C0] static_key_enable_cpuslocked+0x11c/0x220 [ 308.198315][ C0] static_key_enable+0x24/0x38 [ 308.199139][ C0] toggle_allocation_gate+0xc8/0x42c [ 308.200125][ C0] process_one_work+0x7e4/0x13bc [ 308.200957][ C0] worker_thread+0x8cc/0xfe8 [ 308.201805][ C0] kthread+0x254/0x2e0 [ 308.202496][ C0] ret_from_fork+0x10/0x20 [ 308.203307][ C0] SMP: stopping secondary CPUs [ 309.289615][ C0] SMP: failed to stop secondary CPUs 0-1 [ 309.290637][ C0] Kernel Offset: disabled [ 309.291408][ C0] CPU features: 0x0a0000,000f0097,a65bfea7 [ 309.292402][ C0] Memory Limit: none [ 309.298470][ C0] [ 309.298893][ C0] ================================ [ 309.299794][ C0] WARNING: inconsistent lock state [ 309.300666][ C0] syzkaller #0 Tainted: G L [ 309.301715][ C0] -------------------------------- [ 309.302636][ C0] inconsistent {HARDIRQ-ON-W} -> {IN-HARDIRQ-W} usage. [ 309.303877][ C0] kworker/u4:16/5118 [HC1[1]:SC0[0]:HE0:SE1] takes: [ 309.305084][ C0] ffff8000153c14b8 (efi_rt_lock){?...}-{2:2}, at: virt_efi_set_variable_nonblocking+0x74/0x16c [ 309.306904][ C0] {HARDIRQ-ON-W} state was registered at: [ 309.307872][ C0] lock_acquire+0x20c/0x638 [ 309.308658][ C0] _raw_spin_lock+0x54/0x6c [ 309.309427][ C0] efi_call_rts+0x3c8/0x9d8 [ 309.310254][ C0] process_one_work+0x7e4/0x13bc [ 309.311120][ C0] worker_thread+0x8cc/0xfe8 [ 309.311915][ C0] kthread+0x254/0x2e0 [ 309.312631][ C0] ret_from_fork+0x10/0x20 [ 309.313401][ C0] irq event stamp: 4227962 [ 309.314204][ C0] hardirqs last enabled at (4227961): [] exit_to_kernel_mode+0xcc/0xfc [ 309.315956][ C0] hardirqs last disabled at (4227962): [] el1_interrupt+0x24/0x54 [ 309.317617][ C0] softirqs last enabled at (4223174): [] handle_softirqs+0xb1c/0xc90 [ 309.319345][ C0] softirqs last disabled at (4223095): [] __do_softirq+0x14/0x20 [ 309.320906][ C0] [ 309.320906][ C0] other info that might help us debug this: [ 309.322227][ C0] Possible unsafe locking scenario: [ 309.322227][ C0] [ 309.323483][ C0] CPU0 [ 309.324013][ C0] ---- [ 309.324586][ C0] lock(efi_rt_lock); [ 309.325355][ C0] [ 309.325954][ C0] lock(efi_rt_lock); [ 309.326704][ C0] [ 309.326704][ C0] *** DEADLOCK *** [ 309.326704][ C0] [ 309.328058][ C0] 6 locks held by kworker/u4:16/5118: [ 309.328931][ C0] #0: ffff0000c0029138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x69c/0x13bc [ 309.330847][ C0] #1: ffff800021ba7c40 ((work_completion)(&(&kfence_timer)->work)){+.+.}-{0:0}, at: process_one_work+0x6e8/0x13bc [ 309.332934][ C0] #2: ffff8000153f7090 (cpu_hotplug_lock){++++}-{0:0}, at: static_key_enable+0x1c/0x38 [ 309.334636][ C0] #3: ffff8000155e4ac8 (jump_label_mutex){+.+.}-{3:3}, at: static_key_enable_cpuslocked+0xc4/0x220 [ 309.336586][ C0] #4: ffff800015557440 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x10/0x4c [ 309.338175][ C0] #5: ffff80001743eb88 (&psinfo->buf_lock){....}-{2:2}, at: pstore_dump+0x188/0x828 [ 309.339827][ C0] [ 309.339827][ C0] stack backtrace: [ 309.340855][ C0] CPU: 0 PID: 5118 Comm: kworker/u4:16 Tainted: G L syzkaller #0 [ 309.342402][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026 [ 309.344090][ C0] Workqueue: events_unbound toggle_allocation_gate [ 309.345256][ C0] Call trace: [ 309.345840][ C0] dump_backtrace+0x1c4/0x1f0 [ 309.346630][ C0] show_stack+0x2c/0x3c [ 309.347421][ C0] __dump_stack+0x30/0x40 [ 309.348213][ C0] dump_stack_lvl+0xf4/0x15c [ 309.349028][ C0] dump_stack+0x1c/0x5c [ 309.349815][ C0] print_usage_bug+0x4c0/0x6dc [ 309.350649][ C0] mark_lock_irq+0x858/0xab8 [ 309.351461][ C0] mark_lock+0x224/0x320 [ 309.352226][ C0] __lock_acquire+0xa60/0x6634 [ 309.353065][ C0] lock_acquire+0x20c/0x638 [ 309.353844][ C0] _raw_spin_lock+0x54/0x6c [ 309.354608][ C0] virt_efi_set_variable_nonblocking+0x74/0x16c [ 309.355676][ C0] efivar_set_variable_locked+0x1d0/0x204 [ 309.356656][ C0] efi_pstore_write+0x2a8/0x3b4 [ 309.357490][ C0] pstore_dump+0x5b8/0x828 [ 309.358217][ C0] kmsg_dump+0x174/0x264 [ 309.358913][ C0] panic+0x384/0x7ac [ 309.359558][ C0] softlockup_fn+0x0/0x120 [ 309.360300][ C0] __hrtimer_run_queues+0x414/0xc58 [ 309.361126][ C0] hrtimer_interrupt+0x294/0xb28 [ 309.361912][ C0] arch_timer_handler_virt+0x74/0x88 [ 309.362836][ C0] handle_percpu_devid_irq+0x17c/0x358 [ 309.363771][ C0] generic_handle_domain_irq+0xe4/0x154 [ 309.364656][ C0] gic_handle_irq+0x70/0x1d8 [ 309.365378][ C0] call_on_irq_stack+0x30/0x48 [ 309.366202][ C0] do_interrupt_handler+0xd4/0x138 [ 309.367118][ C0] el1_interrupt+0x34/0x54 [ 309.367854][ C0] el1h_64_irq_handler+0x18/0x24 [ 309.368712][ C0] el1h_64_irq+0x64/0x68 [ 309.369357][ C0] smp_call_function_many_cond+0xeac/0x1404 [ 309.370408][ C0] kick_all_cpus_sync+0x40/0xa0 [ 309.371278][ C0] arch_jump_label_transform_apply+0x14/0x20 [ 309.372276][ C0] __jump_label_update+0x314/0x33c [ 309.373155][ C0] jump_label_update+0x310/0x3c4 [ 309.374037][ C0] static_key_enable_cpuslocked+0x11c/0x220 [ 309.374987][ C0] static_key_enable+0x24/0x38 [ 309.375788][ C0] toggle_allocation_gate+0xc8/0x42c [ 309.376679][ C0] process_one_work+0x7e4/0x13bc [ 309.377533][ C0] worker_thread+0x8cc/0xfe8 [ 309.378280][ C0] kthread+0x254/0x2e0 [ 309.378938][ C0] ret_from_fork+0x10/0x20 [ 309.573285][ C0] Rebooting in 86400 seconds..